Structured Ethical Justification Protocol (SEJP): Ordained-Ethics Enforcement and Reasoning-Alignment Monitoring for AI Systems
Shaker Funkhouser
Submitted to AI Control Hackathon 2026. Sprint projects are early-stage work by participants, not Apart Research publications.
We apply invariant moral calculations to detect and block scheming agents.
Reviews
There's a disconnect between the high-level language of "ethics" and "morals" employed here and the mechanical implementation of verifiable outcomes. That said, measuring self-consistency of professed justifications in scenarios that lend themselves to semi-objective evaluations of this form is an interesting approach and deserves further exploration. It would also be interesting to explore if and how well the retry exhaustion pattern generalizes.
They constrain the action space so only the morally correct action is available instead of monitoring. No LLM inference needed. Audit component checks if stated reasoning matches the math. Interesting approach, retry exhaustion finding is useful. But only works when actions are finite and enumerable which rules out most of what agentic AI actually does. Guard claiming 100% block rate when it only allows one action isn't really a result. Small samples everywhere.
Cite this project
@misc{funkhouser2026structured,
title = {{Structured Ethical Justification Protocol (SEJP): Ordained-Ethics Enforcement and Reasoning-Alignment Monitoring for AI Systems}},
author = {Shaker Funkhouser},
year = {2026},
month = mar,
note = {Submitted to AI Control Hackathon 2026, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/structured-ethical-justification-protocol-sejp-ordainedethics-enforcement-and-reasoningalignment-monitoring-for-ai-systems-4s34}},
url = {https://apartresearch.com/sprints/projects/structured-ethical-justification-protocol-sejp-ordainedethics-enforcement-and-reasoningalignment-monitoring-for-ai-systems-4s34}
}More from AI Control Hackathon 2026
- 1st placeLinuxArena track winnerView project: Omission Attacks: When Doing Nothing Is the Attack
Omission Attacks: When Doing Nothing Is the Attack
MAIA
AI control protocols monitor agent actions to detect sabotage, but omission attacks exploit what the agent fails to do rather than what it does. We define omission attacks as security breaches caused by failing to …
- 2nd placeView project: Detecting LLM Subversion in Vulnerability Patching Settings
Detecting LLM Subversion in Vulnerability Patching Settings
Vuln4Control
LLMs are increasingly used to propose fixes to vulnerabilities in code. If the LLM is misaligned or untrustworthy, it may propose fixes that seem to fix a vulnerability but leave the core issue unresolved in a subtle …
- 3rd placeView project: ActionLens: Pre-Execution Environment Probing for Agent Action Approval
ActionLens: Pre-Execution Environment Probing for Agent Action Approval
Udbhav&Ashok
ActionLens is a pre-execution control protocol for shell and file actions proposed by AI agents. Instead of approving an action from transcript alone, a trusted monitor gathers lightweight environment evidence before …