The Mandala Inscription Protocol defines how verified oracle readings enter an append-only Book without requiring accounts.
Public anonymous inscription is the default. The witness’s raw session identifier is hashed, attribution remains anonymous unless requested, and only compiler-verified transforms enter the Book.
Encrypted inscription splits the record at the compiler’s Layer A boundary. The public record retains operator sequence, beat-map functions, spatial geometry, verification results, timestamp, and a key fingerprint. The question, transformed texts, interpretations, and semantic commentary are sealed with AES-256-GCM. A key is returned once and never intentionally retained by the application.
The result is the form-public seal. Readers without the key can verify that a structured reading occurred and inspect its shape. The keyholder can recover the whole semantic work. The design reverses the representational loss diagnosed in Whitespace as Provenance: instead of preserving propositions while deleting form, it publishes form while withholding propositions.
The protocol narrows an open-write abuse surface through PASS gating, question digestion, rate and size limits, and capped rotations. It acknowledges that these controls do not eliminate abuse.
Each transform also enters a source-specific expansion ledger, preserving anchors, basis hashes, attribution, geometry, protocol, and future transform eligibility. The rite itself acquires a lifecycle: open, sealed, or swept.