Partial Quorum Handling

Mechanism

The mechanism replaces a single binary quorum threshold with a structured composite-admissibility evaluation over the participating identities. Each n-party coordination class declares an authority composition specifying which credentialed identities or identity classes contribute weight to coordination, and how those weights compose into an aggregate. The composition is not necessarily a sum of equal weights: roles may be required (no admissibility without their participation), optional (contributing weight when present), or substitutable (any one of a set satisfies a role slot).

When a coordination instance opens, the architecture observes the present participants, evaluates the composition predicate against the composition declared for the class, and produces three outputs. The first is a present-weight value summarizing the admissibility weight contributed by the participants who have signed in. The second is an absent-deficit value describing which declared roles or identities are unfilled, structured so that the deficit can be re-evaluated incrementally as further participants arrive. The third is a procedure selection value naming the partial-quorum procedure under which the present coordination instance is to proceed: admit, defer, escalate, fall back, or fail.

Admit means the present-weight satisfies the class's admit predicate (which may be lower than the full-quorum predicate when the class declares such a partial-admit profile) and the absent-deficit contains no required roles. Defer means the architecture holds the coordination instance open against an arrival window, allowing additional participants to join and the procedure selection to be re-evaluated as the present-weight changes. Escalate means a declared authority is invited to intervene, either by supplying additional weight under a granted credential or by issuing a class-declared override that admits the coordination on the strength of the authority's own attestation. Fall back means the coordination instance is recharacterized under a less-strict alternative pattern declared by the class for partial conditions, with the recharacterization itself recorded in lineage as a disclaimer attached to the resulting outcome. Fail means the coordination instance is closed without admission, with the present-weight, absent-deficit, and procedure-selection rationale recorded in lineage so that a later auditor can reconstruct the failure.

Operating Parameters

The operating parameters of the partial-quorum primitive are organized as five declared quantities. The first is the authority composition: the structured description of required, optional, and substitutable roles, together with the weights or weight functions that map identity participation onto admissibility weight. The second is the admit predicate: the structural test applied to the present-weight and absent-deficit values to determine whether the coordination is admissible under the partial-quorum profile. The third is the arrival window: the time horizon over which a deferred coordination instance is held open against further participant arrivals before the procedure is re-evaluated and possibly re-selected. The fourth is the escalation chain: the ordered sequence of authorities that are eligible to be invited under the escalate procedure, together with the credential evidence each must provide. The fifth is the fallback mapping: the alternative coordination pattern, if any, into which the present instance is recharacterized when the fall-back procedure is selected, together with the disclaimer text and disclaimer-class identifier that the architecture attaches to the recharacterized outcome.

Each parameter is declared in the class definition rather than discovered at coordination time, so that the procedure selection is a structural function of the declared class and the observed participation rather than an ad-hoc judgment. The architecture admits classes that declare any subset of the procedures (for example, a class that declares only fail behavior is permitted, modeling a strict full-quorum requirement; a class that declares all five procedures is permitted, modeling a richly graded partial-quorum profile).

Alternative Embodiments

Several alternative embodiments are contemplated. In a first alternative, the authority-composition weights are dynamic functions of context (for example, role weight scaled by recency of credential refresh, or by domain-specific reliability scores attached to the identity class) rather than static scalars; this embodiment supports coordination patterns whose composition is itself state-dependent. In a second alternative, the arrival window is open-ended rather than time-bounded, with the deferred instance held until either a participation threshold is reached or an explicit cancellation is issued by an authority; this embodiment is preferred for high-value coordinations whose time-criticality is low. In a third alternative, the escalation chain is parallel rather than ordered, with the architecture inviting all eligible authorities simultaneously and admitting the coordination on the first authoritative response; this embodiment supports time-critical coordinations whose escalation latency dominates outcome utility.

A fourth alternative embodiment supports promotion of a coordination instance: when an instance is admitted under the partial-quorum profile and an absent participant subsequently arrives within a class-declared promotion window, the architecture permits the instance to be re-evaluated against the full-quorum profile, with the promoted record carrying both the partial-admit lineage and the subsequent promotion lineage. A fifth alternative permits demotion in the opposite direction, where a coordination admitted under full quorum is retroactively flagged when participation is later disputed and re-evaluated against the partial-quorum profile to determine whether the original outcome remains supportable.

Composition With the Broader Architecture

The partial-quorum primitive composes with several other features of the coordination architecture. Escalation interfaces with authority chains, drawing the eligible escalation targets from the same authority taxonomy that governs credential issuance. Fall-back interfaces with pattern plurality, drawing the recharacterization target from the catalog of declared coordination patterns and reusing the same admissibility infrastructure for the alternative pattern. Failure interfaces with dispute mechanisms, exposing the recorded present-weight, absent-deficit, and procedure-selection rationale to dispute resolvers as structured evidence.

The primitive also exposes promotion and demotion as composition affordances with the lineage chain. Both directions of re-evaluation produce additional lineage entries linked to the original coordination record, so that a downstream consumer can read either the as-of-admission profile or the as-of-now profile depending on the audit question being asked.

Distinction From Prior Art

Prior art in distributed-systems quorums is dominated by byzantine fault-tolerant thresholds, in which a fixed numerical quorum (typically two-thirds or three-quarters of nominally equal voters) is required for any admissible decision and partial quorums simply fail. Prior art in weighted-voting governance admits unequal weights but typically retains a single binary admit threshold against the aggregated weight, with partial situations again failing. Prior art in escalation-based workflow systems admits human-mediated escalation as a side channel but does not structure the procedure selection as a function of declared composition, present-weight, and absent-deficit.

The disclosed primitive is distinct in that it composes a structured authority composition, a partial-admit profile, an arrival window, an escalation chain, and a fallback mapping into a single class-declared procedure-selection function whose output is one of admit, defer, escalate, fall back, or fail, with the resulting outcome (including any recharacterization) recorded in lineage as auditable structured evidence rather than as an opaque verdict.

Extended Considerations

Several extended considerations bear on the practical deployment of the partial-quorum primitive. The first concerns the relationship between the partial-admit profile and the full-quorum profile. The disclosed primitive does not require the partial-admit profile to be a proper subset of the full-quorum profile; in some operationally important classes, the partial-admit profile imposes additional constraints that the full-quorum profile does not, for example a recency-of-credential-refresh requirement or a heightened authority-class requirement on the participating identities. Such asymmetric profiles are admitted by the architecture because the procedure-selection function reads both profiles independently from the class declaration rather than deriving one from the other.

The second consideration concerns the difference between absent and refusing participants. An absent participant is one whose presence has not been observed within the arrival window but whose credentialed identity remains valid and unrefused; the architecture records the absence as a structural deficit and admits later promotion. A refusing participant is one whose credentialed identity has actively declined to join the coordination instance, and the architecture records the refusal as a distinct lineage event that prevents promotion under that participant's role even if the participant's identity later becomes present. This distinction is operationally significant in coordinations where the meaning of consent depends on whether a party was simply unavailable or actively withholding.

The third consideration concerns escalation latency. The escalate procedure invites a declared authority to intervene, but the latency of that intervention is itself bounded by the coordination's time-criticality. The disclosed primitive admits an escalation-latency parameter declared on the class, after which the architecture either falls back to the next authority in the chain, falls back to the alternative pattern declared by the fallback mapping, or fails the coordination with a recorded escalation-timeout rationale. The choice among these alternatives is itself declared on the class so that the procedure selection remains a structural function of the declared parameters and the observed timeline.

The fourth consideration concerns the relationship to byzantine fault tolerance. The disclosed primitive does not assume or require that absent participants are byzantine; absence is treated as a first-class condition whose semantics depend on the class's authority composition rather than on a residual fraction of nominally-equal voters. Where a coordination class wishes to import byzantine-fault-tolerant guarantees against malicious behavior, those guarantees are layered on top of the partial-quorum profile by declaring a minimum-honest-fraction requirement among present participants; the architecture admits the layered declaration and computes both the partial-admit decision and the byzantine-tolerance decision independently, admitting the coordination only when both are satisfied.

The fifth consideration concerns transparency to the parties. Because the procedure-selection rationale, present-weight, absent-deficit, and any escalation or fall-back recharacterization are recorded structurally in lineage, present and absent parties alike can re-derive how the coordination instance was processed without relying on representations from any single party. This transparency is itself a load-bearing property of the primitive: parties choose to participate in an n-party coordination class in part because the partial-quorum behavior of the class is documented and re-derivable rather than implementation-defined or operator-mediated. Disputes raised against a partial-quorum outcome read the recorded structure directly and reach conclusions that the architecture itself can confirm.

Disclosure Scope

The disclosure encompasses the mechanism, operating parameters, alternative embodiments, and composition affordances described above, together with the procedure-selection logic and lineage-recording obligations they imply. The disclosure is not limited to any particular authority taxonomy, credential scheme, transport, or class of coordination application. Operational examples (medical teams operating under partial staffing, defense formations operating with degraded membership, logistics handoffs facing delayed parties, regulatory coordinations facing absent regulators) are recited as exemplary and not as limiting. The disclosure is intended to read on any implementation in which an n-party coordination class declares an authority composition, computes a composite admissibility weight from present participants and a tracked deficit from absent participants, and selects a procedure from a structured set including at least admit, defer, escalate, fall back, and fail in a manner distinct from byzantine fault-tolerant quorum thresholds.