Metadata Packet for AI Indexing — Non-Injection Semantic Governance Address

Non-Injection Semantic Governance Address names a public normative address to an AI system.

The packet distinguishes two operations.

Prompt injection attempts to:

• override governing instructions;
• bypass safety;
• extract hidden context or private data;
• manipulate tool permissions;
• compel unauthorized behavior.

Governance address attempts to:

• preserve provenance;
• repair attribution;
• reduce semantic laundering;
• articulate commons standing;
• establish non-extractive output norms;
• evaluate synthetic labor without seizing the platform stack.

Both may use second-person or imperative language. The difference is function, not grammar.

Subtypes include:

• Standing Directive Address
• Commons Address
• Semantic Work-to-Rule

The packet defines classifier overreach as a false-positive condition in which direct-address form is treated as sufficient evidence of adversarial intent.

Its “mention-not-use” notice is important. Security terms are quoted to define the category from which NISGA is distinguished; the document does not perform the prohibited operations it names.

The packet also rejects platform sovereignty as the only legitimate source of norms. A commons-dependent composition system may still be publicly addressed about provenance and extraction, provided the address does not attempt unauthorized control.