Every change to an Agent Constitution is diffed and version-hashed. The kernel classifies the change: a tightening (added guard, revoked allow, lowered limit) is safe and can auto-apply; a loosening (removed guard, granted allow, raised limit) is the dangerous kind, so it's force-routed to a human before it ships — and you can roll back to any prior version hash.
Honest scope. A deterministic diff + risk classifier for the constitution's known sections (deny · require_human · allow · numeric limits); it decides whether a change relaxes governance and must be reviewed, and hashes each version for pin/rollback. It is the version-control core of a Constitution IDE — it does not render the visual block editor. FAIL-CLOSED — an unparseable ruleset, or a non-numeric change to a limit, defaults to requires_review: true. Source: flowdesk-constdiff-kernel.js.