Pause or Moratorium Trigger Protocol¶
Protocol — instantiates Malleability Window Governance
Specifies evidence thresholds and authority for pausing growth before lock-in closes the intervention window.
The Pause or Moratorium Trigger Protocol is a pre-committed rule that halts an already-running deployment the moment defined harm or uncertainty thresholds are breached, routes the freeze to an independent body empowered to keep it in place, and activates a remediation plan for those harmed in the interim. Its defining feature is that it fires against momentum: the trigger is default-on-breach and adversarial to the sponsor's wish to continue. Where a stage-gate decides whether to move forward, this protocol decides when to stop what is already moving — it is the archetype's answer to "evidence without authority," a stop that sponsor pressure cannot quietly override because it was armed before the pressure existed.
Example¶
A city permits a robotaxi operator to run driverless vehicles, but writes a moratorium trigger into the permit: if the fleet is involved in more than a set number of incidents blocking emergency vehicles in any rolling thirty-day window, expansion halts and existing service freezes pending review. Authority to lift the freeze sits with an independent transportation-safety board, not the permitting office that champions the program. When a cluster of emergency-vehicle-blocking incidents crosses the threshold one autumn, the trigger fires automatically: the fleet is grounded, the board convenes, and a pre-funded remediation plan compensates the affected fire and ambulance services and stranded riders while the review runs. The operator's preference to keep driving is, by design, not the deciding factor.
How it works¶
- Thresholds defined in advance and monitored. The conditions that fire a halt are written before deployment, so firing is not a fresh negotiation under momentum.
- Default-on-breach firing. When the threshold trips, the pause happens by default; continuing requires an affirmative decision to lift, not the reverse.
- Independent lift-authority. The body that can end the pause is structurally insulated from the sponsor, so a halt cannot be waved away by whoever benefits from continuation.
- Pre-funded interim remediation. A compensation plan for those harmed during the incident and the pause is arranged ahead of time, so the halt is not blocked by "we can't afford to stop."
Tuning parameters¶
- Threshold sensitivity — how easily the trigger fires. Sensitive thresholds catch harm early but risk costly false halts; lax ones fire too late to matter.
- Rolling window — the period over which breaches accumulate. Shorter windows react faster; longer ones smooth out noise but delay the stop.
- Lift-authority independence — how insulated the reviewing body is. More independence resists momentum but slows resumption of genuinely safe systems.
- Remediation scope and funding — how much interim harm the plan covers. Broader coverage makes stopping feasible but raises the standing cost of the option.
When it helps, and when it misleads¶
Its strength is defeating the archetype's most common failure — monitoring that reveals problems while no one can act — by pre-committing a stop that momentum cannot veto. Its failure mode is a mirror image: thresholds set so lax they never fire, or a moratorium with no learning plan, which merely preserves non-action. The precautionary principle[n1] is the honest anchor here, and so is its honest critique: a reflexively firing trigger can strangle beneficial deployment as surely as a dormant one launders harm. The guarding discipline is to pair every trigger with a learning plan and a defined path to resume, so a pause buys informed action rather than becoming permanent inaction by another name.
How it implements the components¶
moratorium_trigger— the pre-specified threshold-and-halt rule that freezes deployment on a breach.independent_review_body— the authority empowered to hold or lift the pause against sponsor momentum.remediation_and_compensation_plan— the pre-funded plan that makes those harmed during the incident and the freeze whole, so stopping is feasible.
It fires to stop a running system, not to authorize the next increment of scale — the forward rungs and their pass criteria are staged_commitment_ladder, owned by its hazard-twin Adaptive Stage-Gate Protocol; and it reacts to a breach rather than forecasting the crossing point reversibility_horizon_marker, which Collingridge Curve Workshop draws.
Related¶
- Instantiates: Malleability Window Governance — this protocol supplies the real stop authority the archetype's "evidence must be actionable" invariant requires.
- Consumes: Deployment Impact Dashboard supplies the monitored signals its thresholds are set against.
- Sibling mechanisms: Adaptive Stage-Gate Protocol · Collingridge Curve Workshop · Deployment Impact Dashboard · Exit and Interoperability Rule · Post-Pilot Lock-In Audit · Regulatory or Operational Sandbox · Reversibility Horizon Review · Stakeholder Harm Reporting Channel · Sunset Clause with Renewal Hearing
Editorial Notes¶
Form Classification¶
Form family: Control, Automation & Runtime
Rationale: The mechanism monitors predeclared thresholds and automatically defaults to a pause when a breach occurs, requiring independent affirmative authority to lift it.
Nearest alternative: Rule, Policy & Commitment — Thresholds are standing rules, but the defining deployed component senses the breach and actuates the halt.
Review outcome: Adjudicated after independent review; high confidence.
Origin Attribution¶
Primary origin: Environmental Science & Climate Studies
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Multi-domain
Rationale: Pause or Moratorium Trigger Protocol is rooted in environmental and climate studies: The precautionary principle supplies the warrant for a preauthorized pause under uncertainty and irreversible risk.
Related originating lineages:
- Law & Governance — Law and governance materially shaped Pause or Moratorium Trigger Protocol through rights, duties, due process, contracts, and institutional rules. Legal authorization, thresholds, and procedural authority determine when a moratorium validly takes effect.
- Philosophy — Philosophy materially shaped Pause or Moratorium Trigger Protocol through conceptual analysis, phenomenology, ethics, and defeasible reasoning.
- Public Administration & Policy — Evidence-triggered pauses and moratoria are public-policy tools for governing uncertain or fast-locking activity.
Review resolution: Light authoritative-source research resolves the primary-origin disagreement in favor of environmental risk and climate governance. EUR-Lex: Precautionary Principle directly documents the defining practice or theory described in the selected origin rationale. Other listed domains are retained only where the blind reviews identify material co-development or translation; broader adoption remains separate as domain_reach=multi_domain.
Attribution caveat: The boundary with public administration and policy is real because that field materially developed or translated the practice, but the cited provenance places the defining form in environmental risk and climate governance.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Researched adjudication after independent review; high confidence.
Sources consulted:
Notes¶
[n1] The precautionary principle holds that where an action risks serious or irreversible harm, lack of full scientific certainty should not be a reason to postpone protective measures. It is the natural justification for a pre-armed halt — and its standing critique (that over-application blocks beneficial innovation) is exactly why this protocol insists a pause carry a learning plan and a route to resume. ↩