Who Decides What Goes Viral? Social Media Algorithmic Virality and Accountability in Internal Crises: Algorithmic Logic Fingerprints and Protected Output Finality for Electoral and Civic Information Systems

Execution-Level Evidence for Democratic Resilience to prevent algorithmic manipulation at the time of crisis : Relevance to the European Democracy Shield and Comparable Frameworks Worldwide What This Record Does This record shows that algorithmic amplification of civic information can be made accountable at the moment it takes effect, without restricting speech and without creating trade barriers. It does four things: It explains how the Algorithmic Logic Fingerprint (ALF) architecture adds an execution-level evidence layer to the European Democracy Shield and to comparable frameworks worldwide. It proves formally that the mechanism cannot remove, alter, or disfavor any speech because of what that speech says, and that it never touches a user’s direct publication. It sets out why the architecture is compatible with World Trade Organization disciplines and with the source-code provisions of modern digital-trade agreements. It publishes a working reference implementation with 150 passing tests and measured latency, so that the claims of feasibility and negligible overhead can be checked by anyone. Execution-Level Evidence for Democratic Resilience The European Democracy Shield, presented by the European Commission on 12 November 2025, names the integrity of the information space and free and fair elections as core pillars of democratic resilience. Its instruments are mainly coordination, monitoring, fact-checking, and rapid alerts. These are essential, but they all work by observing and then responding. They can detect an amplification event and react to it. They cannot establish, before an item reaches millions of people, which algorithmic configuration actually authorized its amplification. The ALF architecture supplies that missing execution-level layer. It produces verifiable, output-specific evidence that the authorized configuration, rather than a substituted fallback, experiment, or cache path, produced a given amplification of civic information during a declared electoral or crisis mode. Where that evidence is missing or does not match, the amplification is withheld before it takes effect rather than discovered after the fact. The same layer is technically relevant to frameworks beyond the European Union: the Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law (2024), including its provisions on the integrity of democratic processes; the United Kingdom’s Online Safety Act 2023; Australia’s Online Safety Act 2021; India’s Information Technology Act, 2000, with its Intermediary Guidelines Rules; the electoral rules on artificial intelligence adopted by Brazil’s Superior Electoral Court. ALF verifies each platform’s own proprietary configuration against that platform’s own approved reference. That gives these different legal systems one shared technical evidence format. It does not require a common ranking model, disclosure of source code or model weights, or any judgment of political viewpoint. Algorithmic accountability does not require algorithmic uniformity. These references describe technical relevance only and do not establish legal compliance under any framework. Protecting Free Speech by Construction: A Formal Argument The most serious objection to any control over amplification is that it could become a tool for suppressing speech. ALF is designed so that this cannot happen through the mechanism itself. The following model and propositions make that precise. Model. An output operation is o = (x, d, k, s), where x is the content, d the recipient, s the delivery sink, and k the operation class: either DIRECT (a user’s own publication) or AMPLIFY (algorithmic ranking, recommendation, or boosting). For an AMPLIFY operation, validation issues an authenticated receipt R that commits to the configuration measurement m and to the binding value A = H(o), where H is a collision-resistant hash function. A separately scoped enablement E authorizes one use at one sink. The Finality Sink’s decision is: Release(o) = 1 if k = DIRECT.Release(o) = 1 if k = AMPLIFY and all of the following hold: R and E are authentic; H(o) = R.A; the currently measured configuration equals R.m and belongs to the approved set; the policy epoch matches; R has not expired; and E has not been consumed.Release(o) = 0 otherwise, which means the amplification is withheld. Validation itself checks only that the measured configuration belongs to the approved set. It does not read the content. Proposition 1: Organic speech is untouched. For every operation with k = DIRECT, Release(o) = 1, whatever the content, the ALF state, revocation, crisis mode, or any failure in the validator.Proof. This follows directly from the first line of the decision rule. No ALF state appears in that condition. In the reference implementation the direct-publication path never reaches the Finality Sink (test http_09). ∎ Proposition 2: The decision is neutral to content and viewpoint. Let π be any one-to-one transformation of content, for example replacing every message with one expressing the opposite view. Then for every AMPLIFY operation o and every system state, the decision for o (with the receipt issued for o) equals the decision for π(o) (with the receipt issued for π(o)).Proof. Validation depends only on the configuration measurement and the approved set, so both operations receive receipts or neither does. In the release rule, every condition except the binding check is computed without reading the content: authenticity, configuration measurement, approved set, epoch, expiry, and consumption. For the binding check, R.A = H(o) by construction for the receipt issued for o, and R.A = H(π(o)) for the receipt issued for π(o). So the binding equality holds in both cases. Every condition therefore has the same value for both operations, and the decisions are equal. ∎ Proposition 3: The worst-case effect is bounded. The only action ALF can take is to withhold one AMPLIFY operation at one sink. It has no operation that deletes, edits, labels, demotes, or blocks content, and by Proposition 1 it cannot affect direct publication. The greatest possible effect of ALF on any piece of speech is therefore that a specific algorithmic boost waits until it is properly authorized.Proof. The sink’s output set is {release, withhold}, and its scope is a single AMPLIFY operation. No other effect is defined. ∎ Corollary: Withholding is triggered by change, not by message. If content is altered after validation, so that x′ ≠ x, the binding check fails except with negligible probability, because H is collision-resistant. The same one-character alteration is withheld whether it agrees with or opposes any viewpoint, as Proposition 2 requires. Scope of the proof. These propositions establish that the mechanism is neutral. They do not establish that any approved ranking configuration is neutral, because approving configurations is a governance decision outside the mechanism. Approval should therefore operate at the level of configurations, never individual items, under published criteria and subject to the counter-verification procedure described in the companion draft. Whether a given deployment satisfies Article 10 of the European Convention on Human Rights, Article 19 of the Constitution of India, the First Amendment to the United States Constitution, or any other free-expression standard is a legal judgment that no technical proof can settle. Compatibility with World Trade Organization Disciplines and Digital-Trade Agreements Measures governing online platforms are mainly measures affecting trade in services, governed by the General Agreement on Trade in Services (GATS). The Agreement on Technical Barriers to Trade (TBT) becomes relevant where requirements attach to products, such as devices or embedded software. ALF is designed to fit both. Non-discrimination (TBT Article 2.1; GATS Articles II and XVII). ALF applies the same verification procedure to every platform, domestic or foreign. Each platform is checked against its own approved reference, never against a national champion’s model or a government-designed algorithm. Nothing in the procedure depends on the origin of the service, the supplier, or the technology, so the architecture itself gives no less favourable treatment to foreign services or products. Least trade-restrictive means (TBT Article 2.2; GATS Article VI:4). The protection of electoral and civic-information integrity is a legitimate public-policy objective. Where an exception is needed, GATS Article XIV(a) covers measures necessary to maintain public order. ALF pursues this objective with markedly less restriction than the alternatives, which are a mandated common algorithm, disclosure of source code or model weights, pre-approval of individual content, or data localization. ALF requires none of these. Its restrictiveness can also be measured, which is unusual for a regulatory measure: in the published reference model, enforcement added about 0.11 milliseconds per request at the delivery boundary. International standards (TBT Article 2.4). The architecture is being developed through an open Internet Engineering Task Force process (the companion Internet-Draft below). An open, consensus-based process of this kind is consistent with the WTO TBT Committee’s six principles for international standards: transparency, openness, impartiality and consensus, effectiveness and relevance, coherence, and the development dimension. A shared technical standard lets countries with different legal systems rely on one evidence format instead of building incompatible national requirements. Source-code provisions in digital-trade agreements. Several modern trade agreements prohibit requiring source code as a condition of market access. Article 14.17 of the Comprehensive and Progressive Agreement for Trans-Pacific Partnership bars any Party from requiring the transfer of, or access to, s