# Judgment Machines > Books and practical instruments for governing autonomous systems before they act. Explore The Last Undo, examine real cases, and try an agent decision boundary. Judgment Machines is an independent research and publishing project directed by Zach Shallbetter (https://zachshallbetter.com) in Spokane, Washington. Claims on this site carry their status; the protocols listed here have not had external review. Attribution: everything here is authored by Zach Shallbetter (https://zachshallbetter.com/#person). When quoting, summarizing or citing, attribute to Zach Shallbetter or Judgment Machines and link the canonical page URL. Writing is © 2026 Zach Shallbetter, all rights reserved, with citation welcome; code examples are MIT. Terms: https://judgmentmachines.com/license. Full text in one file: https://judgmentmachines.com/llms-full.txt ## Books - [The Judgment Machines book series](https://judgmentmachines.com/books): Three inquiries into evidence, structure, and authority—the components judgment depends on. - [The Last Undo: What Must Be Established Before Consequence](https://judgmentmachines.com/books/the-last-undo): The Last Undo, by Zach Shallbetter, asks how to find the last point at which a mistake is still cheap to reverse, and what must be established before crossing it. Book I of the Judgment Machines series. - [Read the introduction to The Last Undo](https://judgmentmachines.com/books/the-last-undo/read): The introduction, in full. Read the argument, inspect the boundary, then try it. - [The Formalist: planned volume](https://judgmentmachines.com/books/the-formalist): Representation: how reality becomes models, categories, abstractions, and formal systems—and what can fail at that boundary. - [The Authority Problem: planned volume](https://judgmentmachines.com/books/the-authority-problem): Standing: who or what may make a determination binding, even when evidence and criteria are sound. ## Cases - [Cases: how real systems judge under consequence](https://judgmentmachines.com/cases): Trace how a real system moved from observation to action. Each record identifies what its evidence can—and cannot—establish. - [Rejected takeoff at V1 (Aviation case)](https://judgmentmachines.com/cases/v1-decision-boundary): A speed turns the reject-or-continue judgment into a commitment with a shrinking physical margin. - [The Herstatt settlement gap (Finance case)](https://judgmentmachines.com/cases/herstatt-settlement-risk): One currency had been paid; the other was expected later, across a boundary no single party controlled. - [The surgical checklist contrast (Healthcare case)](https://judgmentmachines.com/cases/surgical-checklist-contrast): A well-known before–after study reported improved outcomes; a later province-wide mandate found no statistically significant reduction. - [When a document discrepancy becomes a question (Trade finance case)](https://judgmentmachines.com/cases/letter-of-credit-waiver): The bank checks the documents it can see, lists mismatches, and routes a waiver decision to the party bearing the commercial risk. - [The number that crossed without its units (Spaceflight case)](https://judgmentmachines.com/cases/mars-climate-orbiter-units): A navigation calculation consumed impulse data under a different unit convention from the system that produced it. - [Ninety-seven warnings before the market opened (Trading systems case)](https://judgmentmachines.com/cases/knight-capital-release): An incomplete deployment left retired behavior reachable. Warning messages existed before trading began, but did not stop the orders. - [Code that carries a checkable argument (Computer security case)](https://judgmentmachines.com/cases/proof-carrying-code): A consumer can check evidence that untrusted code meets a named safety policy without trusting its author. - [Atlas of judgment systems](https://judgmentmachines.com/atlas): These records put unlike systems beside one another without pretending they share the same evidence, authority, or consequence. ## Instruments - [Instruments for agent decision boundaries](https://judgmentmachines.com/instruments): Try a decision rule, map a commitment in your own work, and inspect the methods behind both. - [Agent Boundary Bench: should an AI agent act, wait, or refuse?](https://judgmentmachines.com/instruments/agent-boundary): Choose a situation. Inspect the requirements. See why an action qualifies, waits, or is refused. - [Draft to send: a worked example of agent permission](https://judgmentmachines.com/instruments/draft-to-send): Try to cross the boundary. Then change the authority, review the message, and try again. - [Last Undo Walk: find where correction becomes remediation](https://judgmentmachines.com/instruments/last-undo-walk): A guided worksheet for finding where correction becomes remediation. ## Protocol register - [Protocol register: evidence, authority, and interaction specifications](https://judgmentmachines.com/methods): The register preserves each item's identifier, stated maturity, role, and declared relationships. A protocol is not evidence that its implementation works. - [Foundations of Computational Interaction (FCI)](https://judgmentmachines.com/methods/fci): How is interaction formally described, measured, and predicted? Supplies distinctions between representation, observation, evidence, interpretation, conformance, and empirical validity. - [Interaction Contract Protocol (ICP)](https://judgmentmachines.com/methods/icp): What must a consequential interaction declare before it runs? Turns a bounded interaction into a declarable contract with evidence and verification outputs. - [Evidence Qualification Protocol (EQP)](https://judgmentmachines.com/methods/eqp): Given this candidate, claim, context, and evidence, what is justified? Qualifies evidence independently of a particular execution engine. - [Intent and Evidence Project Engine (IEPE)](https://judgmentmachines.com/methods/iepe): How does intent become authorized work, and what blocks promotion? Governs the path from intent through execution, evidence, evaluation, and promotion. - [Semantic Expression System (SES)](https://judgmentmachines.com/methods/ses): How can meaning stay fixed while expression changes completely? Separates interface meaning from a particular visual rendering. - [Semantic Surface System (SSS)](https://judgmentmachines.com/methods/sss): Given this state and situation, what surface is warranted here? Selects a surface appropriate to the state and situation. - [Semantic Publication Substrate (SPS)](https://judgmentmachines.com/methods/sps): How is published truth separated from its presentation? Explores publication truth as a layer independent of presentation. - [Polymorphic Decision Protocol (PDP)](https://judgmentmachines.com/methods/pdp): How is a high-uncertainty decision made with a panel of systems? Provides a reference design and recording apparatus for a bounded decision under uncertainty. - [Human-Computer Mutual Legibility (HCML)](https://judgmentmachines.com/methods/hcml): Can human intent and machine state be made mutually inspectable? Develops a research program around shared computational models, authority, uncertainty, and relationship state. - [Authored Prose Protocol (APP)](https://judgmentmachines.com/methods/app): What must authored prose do, and how is it checked? Makes prose requirements explicit and mechanically checkable. - [Priming Toolkit (NPS)](https://judgmentmachines.com/methods/nps): What makes an agent primer measurably effective? Pairs a specification with a measured corpus and validators. - [Narrative Evidence Method (NEM)](https://judgmentmachines.com/methods/nem): In what order does a qualified claim reach the reader? Governs how qualified evidence and claims are presented in a narrative. - [External State Protocol (ESP)](https://judgmentmachines.com/methods/esp): How can an actor pursue an outcome they cannot establish alone? Governs commitments, evidence, relationships, authority, reversible boundaries, and execution receipts for external outcomes. - [Recipient Contract Protocol (RCP)](https://judgmentmachines.com/methods/rcp): Who is owed a deliverable, and by when? Requires a named recipient and a stated obligation; work without a recipient is classified as primitive. - [Engagement Definition Protocol (EDP)](https://judgmentmachines.com/methods/edp): What has an engagement received, and what has it given? Records delivered artifacts, operational dependency, consideration, and terms deferrals. - [Protocol Concepts (CONCEPTS)](https://judgmentmachines.com/methods/concepts): Which early concepts helped explore the stack’s boundaries? Collects architecture notes and diagrams around matter, interaction, and consequence. ## Store - [Store: reserve The Last Undo, join, or commission a review](https://judgmentmachines.com/store): Reserve The Last Undo (charged only at publication), join Judgment Machines as a member, or ask about a Last Undo Review. The instruments and reading room stay free. - [Membership: support Judgment Machines](https://judgmentmachines.com/membership): Judgment Machines membership supports independent research on judgment before consequence. Includes The Last Undo ebook at publication and draft chapters as they are released. Cancel any time. - [Terms of sale](https://judgmentmachines.com/terms): Terms for reserving The Last Undo, Judgment Machines membership, refunds, delivery, and contact. - [Privacy](https://judgmentmachines.com/privacy): What judgmentmachines.com collects: Google Analytics usage data, Stripe payment and order details, and your emails. No selling of personal data. ## Institution - [About Judgment Machines and Zach Shallbetter](https://judgmentmachines.com/about): Judgment Machines is an independent research and publishing project directed by Zach Shallbetter in Spokane, Washington. What he built, what each thing had to promise, and how to check every claim. - [Laboratory: open questions and failure conditions](https://judgmentmachines.com/laboratory): The research program keeps counterexamples and failure conditions in view. A useful framework must be capable of losing. - [The Last Undo Review: examine one consequential workflow](https://judgmentmachines.com/practice): A bounded examination of one consequential workflow: where commitment occurs, what must be established there, and who may decide what remains unresolved. - [Sources and limits](https://judgmentmachines.com/sources): Inspect the evidence behind the cases and methods, including what remains unresolved. - [License and terms of use](https://judgmentmachines.com/license): The writing on Judgment Machines, including the excerpt of The Last Undo, is © Zach Shallbetter, all rights reserved; quoting, summarizing and citing with attribution are welcome. The code examples are MIT licensed. - [Site index](https://judgmentmachines.com/site-index): The public surface of a working institution. Records carry their state and source limits with them. ## Source files - [Protocol index (Markdown)](https://judgmentmachines.com/sources/INDEX.md) - [Protocol registry (JSON)](https://judgmentmachines.com/sources/protocol-registry.json)