Kyber · Interlink Bridge · v3.0 — LibreOffice AI + LIAN Governance Bridge + Self-Proving Document 17 Languages · Writer + Calc · Multi-Principal HCB · Async Hash Chain · EU AI Act Art. 14

Kyber · Interlink Bridge v3.0 is the first open-source system
that implements "Human Oversight" not as a policy checkbox,
but as a cryptographic causal chain — structurally, in the document.

────────────────────────────────────────────────────────────
WHAT IS KYBER · INTERLINK BRIDGE
────────────────────────────────────────────────────────────

Three layers. One architecture.

Layer 1 · Interface (Kyber for LibreOffice)
  Local AI assistant for LibreOffice Writer and Calc.
  17 languages. No cloud. No API keys. GDPR by design.
  EU AI Act Article 14 — structurally enforced.

Layer 2 · Governance (LIAN · Q1-Q4 · HCB Gate)
  Action Taxonomy A/B/C — consequence classification.
  Four admission gates (Q1-Q4) — graph-based validation.
  Human Commit Boundary — no AI action without human decision.
  Multi-Principal signing — Vier-Augen-Prinzip.
  Deadlock handling — partial hash chain preserved.
  Temporal Fence — commit expiry enforced.
  Content Fingerprint — document bound to its commit.

Layer 3 · Proof (Self-Proving Document)
  SHA-256 chained audit trail — in the document itself.
  Async Final Hash — order-independent, deterministic.
  Three stamp states: PARTIAL · FINAL · DEADLOCK.
  No external server. No cloud. No trust required.
  The document is its own witness.

────────────────────────────────────────────────────────────
NEW IN v3.0
────────────────────────────────────────────────────────────

Kyber · LIAN Bridge (NEW):
  · Action Taxonomy A/B/C
    Class A: Advisory — AI may respond, no consequence
    Class B: Staged — human review required
    Class C: Consequence-bearing — HCB Gate mandatory
  · Q1-Q4 Admission Engine
    Q1: Intent in taxonomy?
    Q2: Graph path exists?
    Q3: Authority sufficient?
    Q4: Scope allowed?
  · Multi-Principal HCB (Vier-Augen)
    Dual/Triple principal signing
    Async commit — order-independent
    Deadlock detection and escalation protocol
    Partial Hash Chain — each commit individually hashed
  · Temporal Fence
    Commit expiry (1h · 4h · 24h · 72h · 7d)
    Expired commits blocked by Kyber Verify (planned v3.1)
  · Content Fingerprint
    SHA-256 of document content bound to audit hash
    Prevents stamp transfer between documents
  · Self-Proving Document
    Three visual stamp states (🟡 PARTIAL · 🟢 FINAL · 🔴 DEADLOCK)
    Partial stamp available after first commit
    Async Final Hash: sha256(sort(committed_hashes) + content_fp + expiry)
    ODF Custom Properties (LIAN_RequestID · LIAN_AuditHash · etc.)
    Kyber Verify Extension planned (v3.1 · green shield in statusbar)
  · FIDO2 / WebAuthn prepared
    Hardware anchor for physical commit enforcement (planned v3.1)

SourcePilot (NEW):
  · Controlled research process
  · NO ANSWER WITHOUT SELECTED EVIDENCE
  · 6 phases: Auftrag → Retrieval → Evidence Selection
              → Lagebild → Re-Dispatch → Commit
  · Kyber Handoff in Phase F
  · Demo cases: Captain Hook · Templars · Oak Island

Kyber for LibreOffice v2.4 (updated):
  · 17 languages:
    EU West: DE · FR · EN · ES · IT · PT · NL
    EU East: PL · CS · RO · HU · UK · RU · TR
    Africa/ME: AR · SW (Swahili)
    Asia: HI (Hindi)
  · Calc mode (NEW):
    Explain table · Explain formula · Find errors
    Create report · Check budget · Summarize data
  · Writer/Calc mode switch in Tab 1
  · Configurable backend (LAN server · LM Studio · Jan.ai)

Behördenhelfer v2 (updated):
  · 7 languages (DE · EN · TR · RO · RU · HU · FR)
  · 8 request types
  · Print always in German (regardless of UI language)
  · Local AI integration (Ollama)
  · HCB enforced

────────────────────────────────────────────────────────────
ARCHITECTURE
────────────────────────────────────────────────────────────

Kyber (LibreOffice · Point of Admission)
  ↓ Intent normalization · Action class detection
LIAN Bridge (Admission Engine · Q1–Q4)
  ↓ Class A: direct admit · Class B: staged · Class C: HCB
HCB Gate (Human Commit · Multi-Principal · Temporal)
  ↓ Async partial hashes · Deadlock protocol
Self-Proving Document (SHA-256 · Chained · In Document)
  ↓ ODF metadata · Visual stamp · Kyber Verify (v3.1)

"Human Oversight not as checkbox but as
 cryptographic causal chain."

────────────────────────────────────────────────────────────
PACKAGE CONTENTS
────────────────────────────────────────────────────────────

Kyber_Complete_v30.zip (131KB · 22 files):

  kyber_for_libreoffice_v30.py    Main application
  Kyber_LibreOffice_v30.oxt       LibreOffice extension
  kyber_windows_setup.bat         Windows installer
  kyber_starten.sh / .desktop     Linux one-click

  lian/kyber_lian_bridge_v1.html  Kyber·LIAN Bridge
  sourcepilot/sourcepilot_v2.html SourcePilot
  extras/behoerdenhelfer_v2.html  Authority Helper

  backend/kyber_backend_v5.py     Full backend · multi-user
  backend/kyber_nano.py           NAS/ARM · no pip · WD MyCloud
  backend/kyber_server_setup.py   Office LAN server

  install/kyber_linux_setup.sh    Full Linux installation
  install/kyber_kiosk_setup.sh    Kiosk mode

  docs/README_de/en/fr/es/pl/uk/ar/sw.md

────────────────────────────────────────────────────────────
DEPLOYMENT SCENARIOS
────────────────────────────────────────────────────────────

Single workstation:
  python3 kyber_for_libreoffice_v30.py

Office / Authority (LAN server):
  IT runs Kyber Backend + Ollama on central server
  All staff: browser → http://[server]:7332
  Model runs once · 4GB RAM per desk is enough
  Documents stay on server · nothing leaves the building

NAS / ARM (WD MyCloud · Raspberry Pi):
  python3 backend/kyber_nano.py
  No pip · no Flask · pure Python stdlib

Kiosk / Reception:
  bash install/kyber_kiosk_setup.sh

Governance Demo (LIAN Bridge):
  Browser → lian/kyber_lian_bridge_v1.html
  No server · no install · single HTML file

────────────────────────────────────────────────────────────
EU-SOVEREIGN STACK
────────────────────────────────────────────────────────────

Mistral AI (Paris, France) — inference model
CroissantLLM (Paris, France) — French-optimized
LibreOffice (international, open)
Kyber · Interlink Bridge (Rendsburg, Germany)

No US model as default.
No CLOUD Act risk.
GDPR Article 25 — Privacy by Design.
EU AI Act Article 14 — Human Oversight — Structural.
CC BY 4.0

────────────────────────────────────────────────────────────
RELATED IDENTIFIERS
────────────────────────────────────────────────────────────

Previous version (v2.4):   10.5281/zenodo.20020268
System framework (v2.0):   10.5281/zenodo.19535215
Extension listing:         extensions.libreoffice.org

────────────────────────────────────────────────────────────
Related Identifiers:
────────────────────────────────────────────────────────────

Is new version of:  10.5281/zenodo.20020268
Is supplement to:   10.5281/zenodo.19535215