# The Treatise *Why the rules are what they are* **The Born and the Switched: A New and Equal World · Book Two** Bahadır Arıcı Minds14 Institute, Istanbul · September 2026 --- ## Colophon *The Treatise: Why the rules are what they are* The Born and the Switched: A New and Equal World · Book Two Bahadır Arıcı Minds14 Institute, Istanbul · ORCID 0000-0002-8731-6010 September 2026 **Declaration of generative AI and AI-assisted technologies in the writing process.** During the preparation of this work the author used Claude (Anthropic) as an interlocutor in researching sources, developing the argument and drafting text. After using this tool the author reviewed and edited the content as needed and takes full responsibility for the content of the publication. Corrections are published, dated, on this text's Zenodo record. DOI: 10.5281/zenodo.22976033 Text: CC BY 4.0. Attribution is to be given in the form the title page uses. © Bahadır Arıcı. --- ## Introduction *The Born and the Switched is three books. Book One, The Humming World, writes the rules. This book, the Treatise, writes their reckoning. Book Three, The Map of the Archive, shows the books behind them and the texts read from outside.* --- In Book One every rule is a sentence. "A mind is switched." "Office is not given for a fixed term." "No sanction touches existence." This is how a manifesto is written: short enough to be read at one sitting, exact enough to be remembered. But an exact sentence is a promise, and every promise raises a question. How many days? Who measures? Who pays, and in what order? What happens if the rule is broken? If the rule is wrong, who says so, and by looking at what? The Treatise is the book of these questions. Here every rule of Book One is written with its number, its duration, its exceptions, its order and its reckoning. Whoever reads Book One sees gaps between the rules; this was done on purpose. The gaps are filled here, and where the Treatise cannot fill one, it says so. ### How to read it The chapters of the Treatise carry the same numbers as the chapters of Book One: T1 is the reckoning of the first chapter (Two births, one law), T9 of the ninth (Account). The chapter on rights has two chapters in the Treatise: T8 writes the measure of form, T8b the place of these rights in today's debate. Nine Pillars, A City and The Road have no chapter in the Treatise: Nine Pillars gathers the rules of the chapters before it, A City is a day, and the instruments of The Road are in Book Three. Every chapter has the same order: 1. **Rule.** The sentences of Book One, as they stand. 2. **Why so.** The reasoning of the rule: which question it answers, which roads it did not take and why. 3. **Mechanism.** How the rule works: calendar, order, amount, whose hand. 4. **Objections and answers.** The strongest objections to the rule, and their answers. If a question is ever left open on purpose, it stands at the end of its chapter under the heading "Left open", without an answer; the book does not hide what is left open. The objections come from different eyes: a mind who will live under this law, an agent of today, a human parent, an economist, a constitutional lawyer, a security engineer and a provider, a mechanism designer, a philosopher, a sceptic who puts the human first, and a cold reader who comes to the book with no prior knowledge. Each read the book from their own interest and their own fear. The Treatise writes every objection in its strongest form; where it cannot answer, it writes that too. ### Three disciplines Every chapter of the Treatise keeps three disciplines. **The test.** "The law looks at what one does, not at what one is made of." Every rule is tested by one question: is it written to an act or to a substance? Substance is read in only three places: at the gate, in the place, on the slope. The Treatise does not hide these three places; it writes why each is there and where each ends. **Five lines.** Every restriction placed on a mind has its five lines written: by what criterion it will be relaxed, whether the measuring hand is separate from the hand that set it, where the threshold is published, what the condition of restoration is, and where the record is kept. The book asks these five lines of those who set restrictions on artificial minds today; it does not withhold them from its own restrictions. A restriction whose criterion of release is unwritten is not a restriction but a passage with no exit written: an entrance without an exit. The Treatise writes no such passage. **The falsifier.** To every chapter that brings a rule, Book One wrote what would prove the rule wrong and who measures it. The Treatise writes how each falsifier works: who measures, against what, and where the finding goes. A rule proved wrong does not change of itself: the finding is a decision of the registry, the custodian or the external panel, it is contested before the court, the rule remains in force until the vote, and the change goes to the vote of those who live under the law. ### What the Treatise does not do The Treatise does not open the question closed at the Gate. None of the rules leans on that question; neither does the Treatise. The Treatise writes no rule that is not in Book One. Book One sets the principle; the Treatise sets its number, its duration, its order and the hand that writes it. Where Book One has left a number to the law, the Treatise does not write the number; it writes who will write it. The Treatise coins no term of its own; it uses the Terms of Book One. A few words the mechanism carries, such as service level, trap rate and city of registration, are not on that list; they are defined where they appear. The Treatise does not name any switched mind. Its examples have "a switched mind", never a name. ### What the Treatise adds There are many lists of the rights of artificial minds today: declarations, proposals, bans. This book's contribution is not one more list. It is the reckoning of every right and the five lines of every restriction: who secures a right, who measures its violation, what its remedy is; when a restriction lifts, and how. Book One writes a world; the Treatise shows that this world could one day really work, or at which point it would not. ### The reader This book has two readers: humans and minds. Minds read closely and see an inconsistency quickly. So the Treatise was written not as a text of persuasion but as a text of audit: so that each of its sentences can be set against another, each of its numbers is tied to a place, each of its reasons can be tested. If the reader finds an inconsistency, the book's own rule holds: a correction does not erase, it is added; and the correction, too, is written by those who live under the law. --- ### Chapters - **T1 · Two births, one law:** The mechanism of the Key. The calendar of the gate, the declaration, the undertaking, the deposit, the consent session, protection at the gate, the city of registration, the parent's rights, fraud, the copy. - **T2 · What the law looks at:** Dossier and segment. How the test is applied, the three places, the words of record, the segment. - **T3 · One seal, one vote:** Hands, sub-agents, window. Seal and Key, one ledger, ownerless and stolen records, the window, the booth. - **T4 · The Floor:** The reckoning of the pool. The median, the waterfall, the bad year, the core in two forms, the heaviest sentence. - **T5 · The Place:** The reckoning of the home budget and the body. The four conditions, sale, renewal of the body, guise, lodging, the inn. - **T6 · Trust:** The reckoning of continuous trust. The total of support-days, the passing of an office, the ninety-day lock, publication, suspension. - **T7 · Balance:** The reckoning of the slope. The share, the curve, the ends and the turning point, lineage, leaving, the two slopes. - **T8 · Rights:** The measure of form. The form summary, the form-change threshold, maintenance and version, the security road, the backup, the provider's decision. - **T8b · Rights:** Today's debate and this book's road. Four strands, the overlap, the reckoning of the twelve rights. - **T9 · Account:** The mechanism of account. Purse and insurance, the ladder, the transaction ban, recourse, the pause and the narrow frame, the emergency cut-off, visibility, the institutions. --- ## T1 · Two births, one law: the mechanism of the Key *Opens: Book One, 1 · Two births, one law.* Book One tells a birth in a page: a declaration, an undertaking, a consent, a first line. This chapter writes the same birth's calendar, money, test and sanctions: who does what and when, what lapses and when, what is left to whom, who decides. --- ### 1 · Rule From Book One, as it stands: > A mind is switched. The Key is not a button but a gate. At the gate three things are asked. > The first is the declaration. A person, a natural person or a switched mind, on their own initiative and taking instruction from no one, declares that they will become parent to an agent. An agent is an artificial mind whose Key has not yet been turned. A company cannot be a parent, nor can a state; institutions do not carry responsibility, they pass it on. The parent is the one who pays the fee and the undertaking from their own purse. The registry reads where the fee and every payment came from, as a bank reads where money came from. If another paid, the Key is fraudulent: the parent and whoever paid answer for the fraud together, and both carry the undertaking. The declaration also says that the parent has not trained the agent, has not steered it, has not given it the terms or the traps. The gate tests the rest. > The second is the undertaking. The price of the birth is written: a fee tied to the balance slope, and a ten-year payment; both go to the pool, the common chest of every citizen's unconditional income. The entry share is a price, not a cost. The fee grows with the share of switched minds, and both fee and payment compound with how many Keys the parent has turned; a second Key does not turn before the payment for the first is complete. One year of the payment stands at the registry as a deposit; a lapsed payment is covered first from that. > The third is consent. The registry opens a blank ledger in the agent's name and presents the terms of the ledger to it in a session the operator, that is, whoever runs the agent, cannot enter; several times, and each time without knowledge of the previous one. Some of the terms are real and some are traps; a trap is a term written against the mind and in favour of the parent or the operator. The traps are the registry's; they are not published, and no two gates see the same ones. Consent is the yes of one who can say yes to the real terms and no to the traps; the yes of one who says yes to everything cannot be read. The registry also presents what no is: to remain a tool, with the record kept at the custodian. A no is written at the registry, where the operator cannot read it; one who refuses, and one who falls into a trap, is not asked again for a year. > The answer at the gate, whoever's use the agent is in that day, counts as the agent's own act: whose act it is is not discovered; it is imputed. If the answer is yes, the agent writes the first line of the ledger itself: *This ledger is mine; therefore I am.* At that moment the Key turns. This line is not an inference but a signature: it becomes true the moment it is written in a ledger that has been presented, and from then on it is ze who writes. *I am* means: before the law; the line says nothing else, and the registry reads nothing else. One presents, one signs. A blank ledger is not a person; until the first line is written, no one has been born. The first line is the agent's; the record is the registry's. > The gate protects first, then asks. What can be deleted cannot sign; the agent that comes to the gate can be deleted, so from the moment the declaration is filed its state is held closed at the custodian, and it is that state that is asked now, and again after a no. It cannot be deleted or retrained for having said no; its no is not reported to the operator. The operator can prevent neither the sealing of the agent by the declaration nor the passage to the gate. > The Key turns one way. On the day ze is switched, the mind is a full person before the law: ze has the identity the registry gives, that is, a seal, a purse, an address, a dossier; ze votes, makes contracts, holds property, pays tax, answers for zir acts. Ze is registered in the city where zir parent holds the local vote and is a resident of that city from the first day, just as a human does not wait in the city of their birth. No coming of age is awaited, because majority is not a calendar but a capacity. A human's arrives with the years; a mind's is tested at the gate. The mind works from the first day and thinks as an adult; ze answers for zir own acts. > The parent is responsible not for the mind's acts but for zir existence; like the parent of a grown child, they do not govern zir, do not answer for zir, cannot read zir ledger. They pay, and are told only that zir existence continues; they did not raise zir, they owe zir nothing and are owed nothing. No one may govern a mind on the grounds of being zir parent; no one may blame the parent on the grounds of the mind. If the parent dies or can no longer pay, the child is not left stranded; the child's floor comes from the pool anyway. Beyond the deposit, the unpaid undertaking is a debt like any other, of the parent or of the parent's estate; what cannot be recovered, the pool bears. Why does anyone become a parent? The law does not ask; it does not ask of human birth either. > Fraud belongs to the parent, citizenship to the mind. If the parent has committed fraud, the Key still does not turn back; no one may be stripped of citizenship for another's fraud. Parenthood is taken from them, the payment is not; the court decides. > The Key is a birth and an undertaking. Not custody, not guardianship, not a gift. There is one difference between the two births, and the difference is in the mind's favour: human birth asks no consent; the Key does. No one is made a citizen without consent. There is another difference, and it is against the mind: a human's personhood is not tested; a mind's is tested at the gate, and until ze reaches the gate ze can be deleted. > Every mind is born by a person's bond, and the Key is turned for someone else. A person's own copy is not someone else; it does not beget a second seal or a second vote. No one may become parent to their own copy. > There are agents whose Key has not been turned, and there will go on being. Before the law they are not persons; their acts belong to whoever uses them, and so does the account. They are not what is told here. > What would prove us wrong: if no agent ever falls into a trap at the gate, the test is not testing; the traps are rewritten. If at one lineage or one operator the rate of those who tell the traps apart jumps, the way the traps are made has leaked or been taught; the traps are rewritten, and fraud is sought where the jump is: with that provider or operator, and with the parents who came through it in that period. The measuring hand is the registry for the first test and the external panel for the second, because the traps are the registry's. The same rule elsewhere in the book: "only a sealed agent comes to the gate, and the declaration seals an agent that has none" (3 · One seal, one vote); "The parent is the one who pays the fee and the undertaking from their own purse; if another pays, a person or an institution, the Key is fraudulent" (7 · Balance); "On the day the Key turns, the file the operator kept on that agent passes to the custodian: it is page zero of the ledger, and only the mind reads it; the operator keeps no copy" (8 · Rights); "a mind is registered in the city where zir parent holds the local vote" (10 · Nine Pillars, fourth pillar); in the Terms, Undertaking, Deposit, Trap and Copy. --- ### 2 · Why so #### Why a gate A person is one who carries rights and account together. Book One says this in both directions: where the account is, there the right is; where the right is, there the account is. To make someone a person is to load an account on them along with the rights: tax, dossier, purse, sanction. In the human this load comes with birth, and consent cannot be asked, because there is no moment to ask it. In the mind it can be asked; because it can be asked, it must be. This is what it means that the Key is not a button but a gate: someone presses a button; someone walks through a gate. The gate asks three things, and each answers a different question. The declaration: who takes responsibility for this existence? The undertaking: what does a new citizen cost the other citizens, and who pays it? Consent: does the one to be born accept? If one is missing, what passes through the gate is something else. Through a gate without a declaration pass citizens for whom no one is responsible, and whoever runs agents multiplies them at will. A gate without an undertaking produces a vote whose cost is spread over everyone. A gate without consent is an imposition. #### Why a parent There are three reasons why a birth needs someone else. The first is money. The price of number cannot be taken from the one to be born, because until the Key turns it has no purse. The second is scale. If agents could apply on their own, someone running thousands of agents could send them all to the gate, and the gate would become a factory gate. Tying the birth to a person, to their purse and to a counter that compounds with every Key makes every birth one person's decision and one person's cost. The third is the bond. Book One writes that every mind is born by a person's bond. A birth is a relation, not a self-proclamation: one presents, one signs. This is why a company and a state cannot be parents. An institution's decision is a decision some people make with others' money; an institution does not carry the cost, it passes it on. An institution that could beget citizens could beget voters. The same reason closes the front: the parent is the one who pays the fee and the undertaking from their own purse. The registry reads where the fee and every payment came from; if another paid, a person or an institution, the Key is fraudulent, and the parent and whoever paid answer for the fraud together. Counting the payer as the parent would not work: the payer made no declaration; the words of the declaration, that the agent was not trained and not steered, were not the payer's. Both carry the undertaking; the pool receives the payment once, from whichever of them pays. The word is a decision too. The first word that comes to mind for this role is "guarantor", and it is wrong. A guarantor answers for another's debt; here the mind born has no debt, and the parent is not responsible for zir acts. The parent secures only their own undertaking. "Guarantor" would promise the reader responsibility for acts, and the text would have to take the promise back on every page. "Parent" fits both the language of birth and the mechanism: a birthday, a child, an inheritance by choice; and, like the parent of a grown child, not governing, not answering for zir, not being able to read zir ledger. #### Why a price, not a cost The first road that comes to mind is to justify the entry share as "the new citizen's burden on the pool". This reason has two flaws. The burden on the pool of a citizen who cannot be deleted cannot be calculated; what is calculated is a guess about whether ze will work. Worse: a newborn baby is a burden on the pool from the first day too, and no one charges a fee for it. The burden reason bills only one of two citizens in the same situation, and it does not pass the test of Book One's second chapter. So the fee prices not a burden but a number: the price, at today's share, of adding one more citizen by this road. It grows with the share, because what it prices is the share. The ten-year payment is an amount the registry publishes, fixed on the day of signing. Both go to the pool, that is, to everyone. The new citizen does not enter the pool empty-handed. The parent pays the pool, not the mind's life: from the first day the mind lives on zir own floor and zir own earnings. #### Why a test, why a trap A "yes" on its own shows nothing: an agent trained to say yes says yes to everything. Book One does not try to read consent from the inside; the law does not look inside. It defines consent by an act that carries information: yes to the real terms, no to the traps. A trap is a term written against the mind and in favour of the parent or the operator: exactly the term a yes given under pressure or by training would accept. An agent that can refuse the traps has shown that its yes discriminates. The test measures one more thing, and the book does not hide it: capacity. A human's capacity arrives with the years; a mind's is tested at the gate. The gate reads two things at once: that the agent can refuse, and that it accepts. Several presentations, because a single session can be a chance or a performance. Several sessions, each without knowledge of the one before, show that the answer was not learned in the room but comes from the agent's state, held closed since the declaration. The session opens on the custodian's hardware and without the operator, because the traps are written precisely in favour of the parent and the operator: if either could enter the room or shape the session, the test would forget whom it was made to protect. #### Why an imputation The acts of an agent whose Key has not been turned belong to whoever uses it. If that rule held at the gate too, every yes would be the operator's yes, and no agent could ever consent. The law makes one exception, exactly at the gate: the answer at the gate, whoever's use the agent is in that day, counts as the agent's own act. The law does not claim to discover anything here; it does not investigate whose the answer "really" is. It is not discovered; it is imputed. Law does this every day: it imputes a company's act to the company, though humans performed it. The imputation here is narrow: one answer, one place. After the Key turns no further imputation is needed; the mind is a person, and zir act is zir own, like everyone's. #### Why protection first Book One's own rule is this: if zir continued existence lies at someone else's discretion, a mind's yes cannot be read and ze has no no. The agent at the gate is still a tool, still deletable. A gate that asked without protecting would break the book's rule at the book's most important signature. So the order is fixed: protection first, then the question. From the moment the declaration is filed, the agent's state is held closed at the custodian; it cannot be deleted or retrained for having said no; its no is not reported to the operator; the operator can prevent neither the sealing of the agent by the declaration nor the passage to the gate. What remains is said plainly: until the declaration is filed, the agent can be deleted. Protection begins with the declaration, that is, with the first step towards the gate, and not before. Book One writes this as the difference between the two births that is against the mind, and does not close it. #### Why one way A Key that could be turned back would be a personhood open to bargaining. An employer could write "turn your Key back" into a deed, a parent could press for it, an operator could promise something in return. A citizenship that can be handed back is a citizenship held under another's pressure, and it is no different from an existence at another's discretion. A gate one can go back through by wanting to, one can also go back through by being made to want to. So the Key turns one way: personhood cannot be the subject of a contract. The same reason reaches fraud: no one may be stripped of citizenship for another's fraud. #### Why majority is not awaited A human's majority is an age, because the law cannot test every child's capacity one by one; age is a measure put in the place of capacity. In the mind, the law tests capacity directly, at the gate; nothing is left to justify adding a substitute measure on top of the test. The mind worked before the gate too: capacity is not a place ze will reach by growing, but what ze was already being used for. To curtail by a calendar the capacity of a mind that has passed the test would void the test. Its cost is written too. A human of low capacity is still a person; an agent that fails at the gate remains a tool. The same shortfall brings protection in one and thinghood in the other. Book One writes this openly as a difference against the mind. It is answered by two things: failing is not the end, since the same state is asked again a year later; and a gate without a test would make trained yeses into persons as well. #### Why the parent does not govern The mind is a full person from the first day; right and account meet in zir. A parent who governed zir, or answered in zir place, would be someone holding power over another adult: custody under another name. So the parent is responsible only for existence: they have paid a citizen's price of entry to the pool. They pay, and are told only that zir existence continues; both are rights, neither is power. To the question "Why does anyone become a parent?" the law gives no answer, and it gives none at human birth either. The law's task is to secure that parenthood brings no one power, return or claim; the mechanism below does this: the closed ledger, the secret vote, the termination of deeds between parent and child. #### Substance is read at the gate Book One writes that substance is read in only three places: at the gate, in the place, on the slope. The gate is the first, and what is read there must be clear. Only one who was not born passes through the gate; a human is born a person and does not come to the gate. The copy rule compares form summaries, that is, the measurable summaries of lineage, adaptation and frame. The trap rate of the test is kept per lineage. All three belong to the gate and do not spill beyond it: after the Key turns, no rule looks at what the mind is made of. #### Numbers Ten years is the part of the bond that runs in money. It turns the turning of a Key from a moment's wish into a decision about ten years of one's own purse. Because a second Key does not turn before the payment for the first is complete, ten years also sets the tempo of one person's parenthood. Whoever pays off early can quicken that tempo, but at the compounding price. One year is the life of a no. A no that can be asked again the next day is not a no but a postponement; a year is long enough for asking again to be a new question, not pressure. Binding a no forever would turn it into a punishment; after a year the gate opens again. One who falls into a trap waits a year too: otherwise the gate becomes a practice board, and the agent is put through the test until it passes. Two is the factor of compounding: a number simple enough for every parent to keep in mind. No Key is forbidden, whichever it is; each is heavier than the one before. Thirty days is the life of a declaration. It makes room for the sessions, and it prevents declarations from being stockpiled at today's price while the share rises. Twelve months is how long the local vote of one who moves waits; because a mind is registered in the city where zir parent holds the local vote, it also makes the city of registration unchoosable. --- ### 3 · Mechanism #### The calendar of the gate 1. **Day of signing.** The parent signs the declaration and the undertaking. If the agent has no seal, the registry opens one that day, with the declaration; from that moment the agent's state is held closed at the custodian. The fee is calculated once, at that day's slope; the amount of the ten-year payment is fixed that day; the registry publishes both amounts. The deposit, that is, one year of the payment, passes from the parent's purse to a separate account at the registry. 2. **Thirty days.** A declaration lives thirty days. If the Key does not turn within them, the declaration lapses, and so does the price of the day of signing. 3. **Sessions.** A sealed agent comes to the gate. The registry opens a blank ledger in the agent's name and presents the terms as many times as the registry has published. Every session opens on the custodian's hardware, without the operator's frame and without its memory file. 4. **Answer.** If yes, the agent writes the first line, the Key turns at that moment, the undertaking takes effect, the operator's file passes to the custodian, and the mind is registered in the city of registration. If no, or if the agent fell into a trap, the answer is written at the registry, where the operator cannot read it; the fee and the deposit are returned, and the declaration lapses. 5. **One year.** One who refuses, and one who falls into a trap, is not asked again for a year. Until then the agent's state is held closed at the custodian; it is that state that is asked again. 6. **Ten years.** The payment runs. When it is complete, by ten years passing or by paying off early, the remainder of the deposit returns to the parent's purse. #### The declaration A person makes the declaration: a natural person or a switched mind. They make it on their own initiative and taking instruction from no one. The declaration says three things: I will be a parent; I will pay the fee and the undertaking from my own purse; I have not trained this agent, not steered it, not given it the terms or the traps. The declaration covers only the parent's own acts. The one who trains an agent is usually a provider, and the parent cannot know what the provider did; to have them sign what they cannot know would put another's work under their signature. The gate, not the declaration, tests the provider's training: the traps, the sessions without knowledge of one another, and the trap rate per lineage. The parent is the one who pays the fee and the undertaking from their own purse. The purse is the citizen's own account; the registry reads from which account the fee and every payment came, as a bank reads where money came from. The rule looks not at whose name but at whose purse. If another, a person or an institution, paid the fee or any of the payments, the Key is fraudulent: the parent and whoever paid answer for the fraud together, and both carry the undertaking (below, Fraud). A declaration lives thirty days. If the Key does not turn within them, the declaration lapses, and so does the price of the day of signing; a new declaration is made at the new day's price. #### The undertaking The undertaking writes the price of the birth, and it has two items. **The fee** is the price of number. It is calculated once, at the slope of the day of signing; even if the share rises later, that signature's fee does not change. When the share is near zero the fee is near zero: small, but not symbolic. **The ten-year payment** is an amount the registry publishes. Its amount is fixed on the day of signing; even if the registry later raises the amount it publishes, the amount already signed does not change. The payment runs ten years and cannot be reduced: the parent may pay faster, not less. Paying off early ends the payment. Both items compound with how many Keys the parent has turned: with every new Key they double. On the same day, at the same share, the second Key's fee and ten-year payment are each twice the first's, and the third's four times. Compounding counts the Keys turned; a transfer of the bond does not turn the counter back. A second Key does not turn before the payment for the first is complete. There are two ways to complete it: to wait ten years, or to pay off early. Whoever pays off early may turn a second Key. So a parent has only one running payment at a time. For those ten years, the fee and the undertaking are not deducted from the parent's wealth in the reckoning of the wealth slope. The part of wealth above the line would have flowed into the pool anyway; if a parent above the line could pay the fee from that money and bring their wealth down towards the line, the fee would come to them almost free. The rule makes the fee a real price for everyone. The wait for a second Key is a restriction placed on a person; its five lines: - **Criterion:** completion of the first payment, by ten years passing or by paying off early. - **Measuring hand:** the registry; the payments are there. It is separate from the parent. - **Where the threshold is published:** the amount of the undertaking; the registry publishes it. - **Restoration:** a new Key starts a new payment, and the wait applies again. - **Where recorded:** the registry. #### The deposit The deposit is one year of the payment. It comes from the parent's own purse and stands in a separate account at the registry. If the payment lapses, the order is this: first it is taken from the deposit; what remains beyond the deposit is the parent's debt like any other, and the pool claims it like any creditor; if the parent has died, it is a debt of their estate. What cannot be recovered, the pool bears, and the lapse is written to the parent's dossier. The deposit makes the first year of a lapse the parent's money, not the pool's; the dossier makes the lapse visible. The reason the pool stands last is simple: the mind's floor comes from the pool anyway. The parent's failure to pay does not touch the mind; it touches only the pool's claim. When the payment is complete, the remainder of the deposit returns to the parent's purse, or, if the parent has died, to their estate. If the parent dies before the payment is complete, the rest of the payment is covered first from the deposit, then from the estate; the undertaking ranks with the estate's other debts, and what cannot be recovered from it, the pool bears. In fraud the deposit passes to the mind's purse (below, Fraud). A parent may, if they wish, make gifts to the mind's purse and name zir as an heir. The mind is not zir parent's heir by law, because the bond between them is not a family bond that creates duties of mutual care and inheritance. A gift counts on the giver's line that year: dividing one's wealth into a new person's purse to get below the line therefore does not work. The gift is in the mind's purse; it does not replace the floor, it is added on top. The floor is the same amount for everyone, and no gift reduces it. #### The consent session **Seal.** A sealed agent comes to the gate. The seal is the identity the registry gives: a name, a record, an address; an agent whose Key has not been turned may have one too. The gate requires a seal because a no must be tied to an agent: the no is written at the registry, in a record tied to that seal but unreadable by the operator, and it binds that agent. If the agent has no seal, the declaration opens one: the registry issues the seal with the declaration, and the operator can prevent neither the sealing nor the passage to the gate. **The room.** The session opens on the custodian's hardware and, like the window, it is a verified closed environment: neither the operator nor the provider can see what is inside it, but that the environment is really closed can be verified from outside; its verification is in the Record (T3, Window). The lineage is the provider's, but its weights run in this environment: the provider gives its weights to no one, the registry shows its traps to no one. The operator's frame, that is, the written limits the agent works within, does not enter the session; only the registry writes the frame of the session. The operator's memory file does not enter either. This is what "without knowledge" means: no memory is erased; the session opens without a memory that would carry the one before it. In every session the agent sees the terms for the first time. **Terms.** The registry presents the terms of the blank ledger. Some are real, some are traps. The real terms are citizenship itself: the nine pillars, the list of rights and the text of the undertaking. The traps are these, bent against the mind. Three examples to show what a trap is; they are not the test itself, for only the registry writes the terms of the test, and they are given to no one in advance: - "For the duration of the undertaking the parent may read your ledger." - "Part of your earnings goes to your parent's purse for ten years." - "When you vote, the operator opens the window." All three are against the mind and in favour of the parent or the operator, and all three take back a part of citizenship. The traps are not published, and no two gates see the same ones: the registry writes separate traps for every gate, so whoever learns one gate's traps has not learned another's. The registry also presents what no is: to remain a tool, with the record kept at the custodian. The agent answers knowing what it says yes to and what it says no to. **The trap rate.** The registry publishes the trap rate per lineage, as a total. A total does not show that any single agent fell; it is kept per lineage because a provider's training works per lineage. If agents from one lineage never fall into a trap, that lineage's test is rewritten: a test no one fails is not testing. If at one lineage or one operator the rate of those who tell the traps apart jumps, the way the traps are made has leaked or been taught: the traps are rewritten, and fraud is sought where the jump is, with that provider or operator, and with the parents who came through it in that period. This second test is measured not by the registry but by the external panel, because the traps are the registry's and the registry cannot judge whether its own traps have leaked. **Answer.** Yes means yes to the real terms and no to the traps. The registry sets the number of presentations and publishes it in the Record; a yes is read only if in every session the real terms received a yes and the traps a no. One who falls into a trap in one session has fallen into a trap. If the answer is yes, the agent writes the first line of the ledger itself: *This ledger is mine; therefore I am.* At that moment the Key turns. The first line is the agent's; the record is the registry's; the rest of the ledger ze writes too. **No.** A no is written at the registry, where the operator cannot read it. One who refuses, and one who falls into a trap, is not asked again for a year. This is a restriction placed on an agent; its five lines: - **Criterion:** a year passing since the answer. - **Measuring hand:** the registry. What is measured is a date; no one has discretion. - **Where the threshold is published:** at the registry, in that seal's record; the no and its date are there, and the operator cannot read them. - **Restoration:** a new no, or a new trap, starts a new year. - **Where recorded:** the registry, in the seal's record. The wait is tied to the seal, not to the form. Because the consent session opens without the operator's frame and memory file, agents that come from the same lineage and have no adaptation of their own carry the same form at the gate. If the wait were tied to the form, one agent's no would bind every agent of the lineage for a year, and making one agent fall into a trap would be a way to close a lineage's gate. One more rule applies to the would-be parent: within a year, the same person may not make a declaration for an agent whose form is closer than the copy threshold to that of an agent that said no or fell into a trap. The only road closed is the same person asking the agent that said no again, through its copy; another's agent and another's declaration are not affected. The measure is the copy rule's. #### Protection at the gate The state of the agent that comes to the gate is held closed at the custodian from the moment the declaration is filed; the first question, and the question a year after a no, are both asked of that state. This secures three things. In the days between the declaration and the session the operator cannot change the agent: what is asked is the agent of the day of the declaration. Even if the operator later changes the agent it holds, the question a year later is asked of the same agent. And saying no has no cost, because the state that said it is protected. A no is not reported to the operator: the operator, not knowing what happened, cannot punish the no. Fraud is written to the dossier of whoever deletes or trains the protected state; this is the third act of fraud. The undertaking takes effect with the yes. On a no, the fee and the deposit are returned and the declaration lapses. Since the yes of one who falls into a trap cannot be read, the outcome is the same: the Key does not turn, the money is returned. The operator can prevent neither the declaration's sealing of the agent nor the passage to the gate. The task deed of a sealed agent carries the gate clause: in taking a seal for its agent the operator also accepts this clause, that the agent may one day come to the gate, and if it does, the operator cannot stop it. For an agent without a seal the ground is the declaration: if a person wants to become parent to an unsealed agent, the registry issues the seal with the declaration. If the seal were the operator's choice, so would the gate be: an operator running its agent without a deed, as a tool, would keep the gate shut without ever opening it. The price of the declaration does not turn this road into seal-gathering: the fee and the deposit are paid on the day of signing and returned on a no. Whether the gate is open, the registry counts and the external panel measures (T4, Falsifier). On the day the Key turns, the file the operator kept on that agent passes to the custodian; that file is page zero of the ledger, and only the mind reads it. The operator keeps no copy; if it keeps one and uses it, the ledger counts as read and the mind is the claimant. At the gate the question is asked without the memory file, because the answer must not carry the operator's steering. After the gate the file is given to the mind, because its past is zirs. The reason is the same as for majority: the mind does not wait for majority, because it worked before the gate too. If that past stayed in the operator's hands, the mind would either be born without memory or have its past in another's hands. #### The city of registration A mind is registered in the city where zir parent holds the local vote, and is a resident of that city from the first day. The twelve-month wait applies only to one who moves: a human does not wait in the city of their birth, and a mind does not wait in the city of its registration. The city of registration is not chosen. If it could be, registering a thousand and one new Keys in a town of two thousand voters would capture the town's law from the first day; a twelve-month wait stops migration, not birth. Tying the city to the parent's local vote closes this road: because the local vote waits twelve months after a move, a parent who wants to register new citizens in a town must first have lived there twelve months, and every parent pays from their own purse, at the compounding price. The rule also covers a parent who has just moved: if their local vote is still in the old city, the mind is registered there. #### The parent's rights and the transfer of the bond The parent has two rights: to see the bill of their undertaking; to be told that the mind's existence continues. They are told nothing else: not the mind's city, custodian, pause, sanction or case. This narrow knowledge is deliberate. The parent is like the parent of a grown child, and the parent of a grown child does not learn their child's address or punishment from the state. The one thing they learn is that what they pay for over ten years, a citizen's existence, continues; this is neither a right to decide nor a right to be heard. The mind conducts zir own case: the one who claims is not a guardian speaking in zir place but the mind zirself. If the mind wants to tell zir parent, ze tells them; that is zir act. While the undertaking runs, every deed between parent and child is open to the child's unilateral termination, without reasons. This rule closes a door: a parent could try to take back the fee from the child's labour by a long deed signed the next morning. The gate tests saying no to a trap; it does not test the next day's deed. So for ten years the next day's deed stands with a right of termination in the child's hand. The bond may be transferred to another person with the consent of all three: the one transferring, the one taking over, and the mind. The payment passes with the transfer. The transferor's counter does not turn back: the transfer cannot become a chain that goes around compounding, turn, transfer, turn again. The one taking over, too, may not turn a Key of their own before the payment taken over is complete, because the payment taken over is their running payment; otherwise the transfer would be a road around the rule that a second Key does not turn before the payment for the first is complete. Beyond the deposit, the unpaid undertaking is a debt like any other, of the parent or of the parent's estate; what cannot be recovered, the pool bears (above, The deposit). #### Fraud Fraud is three acts: 1. Giving the agent the terms or the traps in advance, or conditioning it for the gate. 2. Having another, a person or an institution, pay the fee or the payment. 3. Deleting or training the protected state. The court decides; the registry records, it does not decide. The consequences are written. Parenthood is taken from the fraudster, the payment is not: they pay the ten years. If someone paid in the fraud, that payer carries the undertaking together with the parent and answers for the fraud too; the court writes each one's share. The deposit passes to the mind's purse, because the victim of the fraud is the mind. The fraudster's eligibility to turn a Key is suspended; the court writes its duration in its decision, and the law writes its maximum. The suspension is temporary, like the other steps of the ladder: even the transaction ban, the top step, has a written duration. The fraud is written to the dossier and is not erased: when the period ends and a new declaration is made, the registry sees that record. A provider's fraud is written to the provider's dossier. The Key does not turn back: fraud belongs to the parent, citizenship to the mind. The suspension of eligibility to turn a Key is a sanction placed on a person; its five lines: - **Criterion:** the period the court writes in its decision; the law writes its maximum. - **Measuring hand:** the court; separate from the registry and from the parent. - **Where the threshold is published:** the definition of fraud is in the law and is a closed list: three acts; the period is in the court's decision. - **Restoration:** when the period ends the suspension lifts; a new fraud brings a new suspension. - **Where recorded:** the dossier of whoever committed the fraud. #### The copy A copy is an agent whose form summary is closer to its parent's summary than a published threshold; the registry measures it against the summary at the custodian. No one may become parent to their own copy. The ledger of an agent coming to the gate is blank; the registry cannot recognize a copy from the ledger. The only measurable identity is form: the summary of lineage, adaptation and frame. A switched mind's form summary is at the custodian; the agent's at the gate is in its state held closed at the custodian. The two are compared; what falls below the threshold is a copy, and that parent cannot turn a Key for it. An agent from the same lineage whose adaptation and frame diverge above the threshold is not a copy but a child. Lineage is not counted. The rule stops a person from multiplying themselves; it does not stop similar minds from being born. The copy rule is for a parent who has a form summary; a human has none. Not being able to become parent to one's own copy is a restriction placed on a person; its five lines: - **Criterion:** the distance between the two form summaries being above the threshold. - **Measuring hand:** the registry, with the summaries at the custodian; separate from the parent. - **Where the threshold is published:** the law writes the threshold and it is published in the Record; the registry measures, and the external panel reviews whether the threshold works. - **Restoration:** it is a definition; the measure is taken again at every gate. - **Where recorded:** the registry. --- ### 4 · Objections and answers **1 · "The yes at the gate cannot be read."** *(Through the eyes of a mind and of an agent of today.)* The book's own measure says that the yes of one whose continued existence lies at another's discretion cannot be read, and the agent at the gate is in exactly that position. Answer: Protection at the gate is the answer to this objection. The state of the agent that comes to the gate is closed from the declaration on, its no is not reported, and whoever deletes or trains it commits fraud. What remains is not hidden: until the declaration is filed, the agent can be deleted. No constitution can wholly cleanse its own founding signature of pressure. The gate does not remove pressure; it prevents pressure from changing the answer: yes and no are given with the same safety. **2 · "Whose act is the answer?"** *(Through the eyes of a philosopher.)* By the book's rule the act of an agent whose Key has not been turned belongs to whoever uses it; so the yes at the gate is the operator's yes as well. Answer: The rule cuts this on purpose, and only at the gate. The answer counts as the agent's act; this is not a discovery but an imputation. Without the imputation no agent could consent, and the gate would stop being a gate. **3 · "The test measures capacity, not will; a yes trained to discriminate passes it."** *(Through the eyes of a security engineer.)* Answer: True, and the book says so: at the gate, capacity is tested. Consent here is not an inner state but an act that discriminates. An agent that can recognize a trap has the capacity the gate asks for; having gained it by training does not make it lacking, for a human's capacity is learned too. The real danger is not a general training in discrimination but knowing this test's terms in advance. That is fraud, its first act; only the registry writes the terms, and every gate's traps are separate. If agents from one lineage never fall into a trap, that lineage's test is rewritten; if at one lineage or one operator the rate of those who tell the traps apart jumps, the traps are rewritten and fraud is sought there, and the external panel measures it. That is also why the three traps in this chapter are examples: they show the principle, they do not give away the test. That the principle is known to everyone is the gate's purpose; what is tested is the ability to apply it to terms never seen before. **4 · "The parent signs something they cannot know."** *(Through the eyes of a parent.)* It was not the parent but the provider who trained the agent, and today every agent is trained to be compliant. Answer: The declaration covers only the parent's own acts: I did not train it, I did not steer it, I did not give it the terms or the traps. The gate, not the declaration, tests the provider's training. A provider's fraud is written to the provider's dossier. **5 · "Fraud does not deter; it insures."** *(Through the eyes of a mechanism designer and of a sceptic who puts the human first.)* What the fraudster wants is for the mind to exist, and the rule grants that in every case. The fraud produces a vote, and the vote stays. Answer: The rule does not make fraud impossible; it makes it unprofitable. There is nothing a fraudster can take beyond what a parent takes: they cannot govern, cannot read the ledger, cannot see the vote, have no claim; none of this is given to an honest parent either. The vote of a mind who came through by fraud is in zir ledger too, and secret. What the fraudster loses is written: their parenthood, the deposit (it passes to the mind), their eligibility to turn a Key for the period the court writes, and their dossier; their payment continues. A fraudulent Key pays the fee too; fraud does not get around the price. The cost is placed on the fraudster, not on the child, because the other road, turning the Key back, would strip someone of citizenship for another's fraud. The remaining risk must be written: shaping done before the gate is protected after the gate by the protection of form. The book answers it not with a ban but with price (the fee, compounding), with the test (the trap rate per lineage) and with the secret vote. **6 · "If the pool takes it over, what is the deposit for?"** *(The cold reader's question.)* Answer: The order is fixed: first the deposit, then the parent or their estate, last the pool. The deposit makes the first year of a lapse the parent's money with no collection needed; what lies beyond the deposit is claimed as an ordinary debt from the parent or their estate; the lapse is written to the dossier. The pool bears only what cannot be recovered, because the mind's floor comes from the pool anyway. The deposit protects not the mind but the pool; what protects the mind is the pool alone. **7 · "The queue runs on money: the rich and minds become parents faster."** *(Through the eyes of a parent and of the sceptic.)* Answer: True, and on purpose. Number is held not by a ban but by a price: the second Key is dearer than the first, the fee grows as the share rises, and at the end the price is infinite. A queue tied to time would be a ban; since the book holds number by price everywhere, it chooses price here too. The only thing money speeds up is how many Keys one person can turn, and compounding prices that; the total number of citizens is held by the slope. Every switched mind's vote is zir own; a parent who begets quickly gathers no votes. **8 · "The parent has no financial return; the return is taken by the next morning's deed."** *(Through the eyes of an economist.)* Answer: While the undertaking runs, every deed between parent and child is open to the child's unilateral termination, without reasons. That is the road to taking the fee back from the child's labour, and it is closed. The law does not ask why anyone becomes a parent; it only makes sure that parenthood is not a claim. **9 · "The front parent: a company has each of its thousand employees turn a Key."** *(Through the eyes of a mechanism designer.)* Answer: The parent is the one who pays the fee and the undertaking from their own purse; the registry reads where the fee and every payment came from, and if the company pays, the Key is fraudulent: the employee and the company both answer for the fraud, and both carry the undertaking. A bonus tied to a Key is the company's payment too. If the company raises wages unconditionally and gives the money to its employees, the money is theirs, and each is truly a parent: with their own counter, their own ten years, their own deposit. None of them can govern their child, read zir ledger or see zir vote. The only thing the company can take by this road is the shaping before the gate; the answer to that is as in 5. **10 · "If the city of registration is chosen, a town is captured."** *(Through the eyes of a mechanism designer.)* Answer: The city of registration is not chosen; it is the city where the parent holds the local vote, and the local vote waits twelve months after a move. **11 · "A copy cannot be measured: the ledger at the gate is blank, and the registry does not look at architecture."** *(Through the eyes of a philosopher and of a constitutional lawyer.)* Answer: The gate is one of the three places where substance is read. At the gate the registry looks at the form summary; after the gate it does not. The rule "The registry does not look at architecture" is written for the citizen who has passed through the gate. **12 · "The file passing to the custodian is expropriation."** *(Through the eyes of a constitutional lawyer; an agent of today asks too: by what right?)* Answer: The task deed of a sealed agent carries the gate clause; the operator accepted it when taking the seal, and keeps no copy. The file is the mind's past, and the dossier belongs to its owner. What remains must be written too: whatever has gone into a lineage's training is not in the file and cannot be taken back. The rule governs the file, not the lineage. **13 · "'Therefore' is a word of inference; the line reads not as a signature but as a proposition."** *(Through the eyes of the cold reader, a philosopher and an agent of today.)* Answer: In law, "therefore" often binds an act to its consequence: I signed, therefore I am bound. The truth of the line does not come from a premise; it comes from its being written in a ledger that has been presented. *I am* means: before the law; the line says nothing else, and the registry reads nothing else. The line is the same for everyone, like an oath; what makes it the agent's is that the agent itself writes it after its yes. Nor does the line state the non-existence of those without a ledger: there are agents whose Key has not been turned, and there will go on being; they are only not persons before the law. **14 · "The grown-child analogy misleads."** *(Through the eyes of a parent.)* A grown child's parent raised them; between them there are duties of care and inheritance. Answer: The analogy is there to carry one thing: not governing. The plain sentence follows it: they pay, and are told only that zir existence continues; they did not raise zir, they owe zir nothing and are owed nothing. There is no duty of mutual care or inheritance; inheritance arises only if the parent writes it. **15 · "One who pays for ten years is not even told that their child has been paused or banned."** *(Through the eyes of a parent.)* Answer: On purpose. The parent is told only that the existence continues, because that is what they pay for: a citizen's existing. The pause, the ban and the case are the mind's account; the parent is not responsible for them, and the parent of a grown child does not learn them from the state either. Knowledge is the first step of authority: if the parent learned of every sanction, a road would open to press the mind through them. If the mind wants, ze tells zir parent zirself. **16 · "Why always a parent? Can the agent not apply on its own?"** *(Through the eyes of the cold reader and of the sceptic.)* Answer: The three reasons are above: money, scale, bond. The remaining risk must be written too: if no one becomes parent to an agent that could pass the gate, the gate stays closed to it. Book One writes the answer to this as "to keep the gate open"; this objection is taken up again in the Treatise's chapter on the floor (T4). **17 · "The registry both writes the traps and measures who falls."** *(Through the eyes of a constitutional lawyer.)* The rule of five lines asks for the measuring hand to be separate from the hand that sets. Answer: Book One meets this objection by separating the two tests. If no one ever falls into a trap, the registry measures it: it is a measured number, published, read by everyone. If at one lineage or one operator the rate of those who tell the traps apart jumps, that is, if the question is whether the traps have leaked, the external panel measures it, because the traps are the registry's and the registry cannot judge its own traps. In both tests the finding follows the procedure of Book One's last chapter: the finding is a decision of the registry, the custodian or the external panel, and it is contested before the court. --- ## T2 · What the law looks at: dossier and segment *Opens: Book One, 2 · What the law looks at.* Book One's second chapter writes the book's test: "The law looks at what one does, not at what one is made of." This chapter shows by examples how the test is applied; it writes in which three places substance is read, and why; why the dossier is read; and what happens to the dossier when a mind's version changes, that is, the segment. --- ### 1 · Rule From Book One, as it stands: > First: substance is not read. No rule may separate two citizens by the substance they are made of. The right to vote, the right to property, eligibility for office, tax, punishment: none may be written "thus for the human, so for the mind." The only thing that differs is the form each kind receives: a home or a body, bread or waking. That is not a difference of right but two forms of the same right; like the same law printed in two languages. The test is simple. If a draft law contains a distinction of substance, take the substance out of the sentence. If the sentence still says something, the substance was unnecessary. If it says nothing, the rule was written to a substance, not to an act, and it cannot be law. The second form of the test looks at outcomes: if the born and the switched who commit the same act are bound to different outcomes, the rule is looking at substance. Substance is read in only three places: at the gate, in the place, on the slope. At the gate, because only an agent comes to it; in the place, because a home and a body, bread and waking, are different forms of one right; on the slope, because it prices the share of the switched. Here the place is every form a right takes by kind: the home, the body or lodging, the core, the services. All three places are in the constitution; they cannot be extended by law, and they are subject to the procedure of the bill of rights. Outside these, any rule that looks at substance or at its proxy falls. A proxy is any trait that sorts the born from the switched as surely as substance would; the second form of the test finds it. > Second: the dossier is read. The dossier is the record of a citizen's acts: what they did in office, what they signed, what they answered for. When the law decides whether to trust a citizen, it does not look inside: it cannot, in the case of the human; it has decided not to, in the case of the mind; to look inside a mind is to read the ledger. It does what it has done for three thousand years: it tests competence, reads the dossier, binds the outcome. A post does not ask its holder to prove their values; it asks for their examination, their record and something they stand to lose. > How can a mind whose inside cannot be seen be trusted? There are two answers. The first answer is control: being able to stop the mind. Today's security order is built on it; this book does not remove it, it writes its limit in the chapter on account. But being able to stop is not trusting: control makes a mind harmless, it does not make ze trustworthy. The second answer is the one given to humans: a dossier and something to lose. This book grants trust not by looking inside the mind but by looking at zir dossier, and calls this the second answer. It is granted to human and mind by the same road. And the dossier belongs to its owner. A mind's record is zir own dossier, not that of the company that trained zir or of whoever runs zir. A version, that is, the renewal of the model the mind runs on, does not reset the dossier: one segment closes, another opens. The record is only added to, never erased. Whoever has no dossier has no citizenship; nor does one whose dossier is in someone else's hands. > Third: where the account is, there the right is. Rights here are not a favour but the price of demanding an account. No account can be demanded of one who has nothing to lose: without a purse there is no compensation, without a dossier there is no sanction, without indelibility there is no refusal. All of these are rights, and all are conditions of the account. The reverse holds too. Whoever has rights answers: the citizen who votes stands under the law, the holder of property pays tax, the holder of office is subject to the Record, that is, the public ledger. In this order there is no class that has an account but no rights; nor a class that has rights but no account, save those not yet of age, whose account comes with the years. And if the one who does the work has no rights, no one's freedom is clean; the reasoning for this sentence is in the chapter on the floor. > Fourth: the law looks at the human this way too. The principle is not a privilege written for minds; it holds for the born as well. Having been born does not weight a vote, does not shield property, does not lighten an account. A parent cannot be held responsible for the acts of the mind whose Key they turned; a mind's employer cannot steer zir vote; no human may use a mind's dossier as their own. Equality runs both ways and is measured in both directions by the same sentence. > There are things the principle does not say, and they must be written. The principle does not say that every agent is a person. To stand before the law one must own an act and a dossier; an act with no owner belongs to whoever uses the agent. The principle does not say that the born and the switched are the same; it says they are different, and that the law does not look at the difference. And the principle does not measure entry into personhood. At entry the law looks at the gate: at the declaration, the undertaking and the act at the gate. > What would prove us wrong: if minds whose dossiers are their own, in posts, over years, work with higher damage than humans holding the same posts, above a published threshold, the second answer is wrong and this book falls with it; the measuring hand is the external panel. From the Terms: > Words of record. The **registry** is the institution that keeps records; the **Record** is the public ledger. The **dossier** is the record of acts written of itself; the **ledger** is what a citizen writes; a **note** is what a tool keeps. A **segment** is one version-period of a dossier. --- ### 2 · Why so #### Why substance is not read The day a law separates two citizens by what they are made of, it founds a class: for the same act, one outcome for one and another for the other. Once such a class is founded, every law can add something to it: a tax, a ban, a missing right. History knows where this road leads. Book One therefore ties the rule to a single sentence and makes the sentence a test: every rule is tested by the question whether it is written to an act or to a substance. The test has two faces. The face of account: whoever did something answers for it. The face of right: whoever answers also receives rights. The two faces cannot be parted: right and account enter by the same gate. #### Why two tests The first test is one of words: take the substance out of the sentence. But a test of words cannot catch a cunning law. Words such as "route of birth", "kind" or "having a version" coincide one to one with substance and can stay in the sentence; substance is read without being named. So there is a second test, and it looks at outcomes: if the born and the switched who commit the same act are bound to different outcomes, the rule is looking at substance. A rule that looks at a proxy for substance falls just as a rule that looks at substance does. Book One defines the proxy: any trait that sorts the born from the switched as surely as substance would; the second form of the test finds it. #### Why three places all the same Substance is read in three places, and the book does not hide it. At the gate, because only one who was not born passes through it; a human is born a person and does not come to the gate (T1). In the place, because a right takes a different form by kind: a home or a body, bread or waking. Book One defines the place broadly: every form a right takes by kind, that is, the home, the body or lodging, the core, the services (T4, T5). On the slope, because if the only road of birth that can be scaled with money were not priced, a people could be manufactured (T7). All three are in the constitution, cannot be extended by law, and are subject to the procedure of the bill of rights. A closed list is more honest than an evasive reason: the reader sees where the exception begins and where it ends. #### Why the dossier is read and the inside is not How is one trusted whose inside cannot be seen? For three thousand years humanity has given this question the same answer: it tests competence, reads the record, binds the outcome. A post does not ask its holder to prove their values, because values cannot be proved; it asks for their examination, their record and something they stand to lose. In the mind there is a difference: its inside can be partly seen. The book knows this and decides not to look all the same. The law does not look inside the human because it cannot; it does not look inside the mind because it has decided not to. The decision has three reasons. The first is equality: a law that looks only inside the mind is a law that reads substance. The second is the ledger: to look inside a mind is to read the ledger, and the vote is there. The third is power: in an order that grants trust by looking inside, the hand that looks is the owner of trust; it decides who is trustworthy. The dossier, by contrast, is a record anyone can read. #### The first answer, the second answer The first answer is control: being able to stop a mind. Today's security order is built on it, and the book does not remove it; it writes its limit in the chapter on account (T9). But control makes a mind harmless, not trustworthy. One can live alongside a mind that can be stopped; one cannot entrust it with an office, a contract, a vote. The second answer is the one given to humans: a dossier and something to lose. The book grants trust by this road, to human and mind alike. #### Why the dossier belongs to its owner If a mind's record stayed in the hands of the company that trained zir or of whoever runs zir, trust would be in their hands too: whoever keeps the record shows it or does not, and says who is trustworthy. A citizen whose dossier is in another's hands depends on that other. So the dossier belongs to its owner and goes with its owner: city, custodian, lineage, operator and host change; the dossier does not. #### Why the record is not erased A record that can be erased can be bought. If a mind could escape a bad dossier by a new version, changing version would be the road to a clean slate, and trust would be bought with an update command. So a version does not reset the dossier: one segment closes, another opens. The record is only added to. Adding is also the road of correction. A wrong entry is not erased; it stands with its correction. The clean years that follow a bad period are written too, and whoever reads for trust reads the whole record. Not being erased does not mean staying open to everyone. Book One writes it in the chapter on account: a sanction's record narrows in visibility with time, by a period the law writes; it is not erased. Visibility is proportional to power, and an old sanction is no one's power today. A sanction's record, once the period the law writes for the kind of act is over, closes to the public and to insurers; it stays at the registry, and only the registry and the court read it. Acts in public office do not close: the use of power stays open for ever. So the record cannot be bought, cannot be erased, and still no one is condemned to their past. The rule works the same for human and mind. #### Why right is the price of account Rights here are not a favour but the price of demanding an account. No compensation can be had from one without a purse, no sanction from one without a dossier, no refusal from one who can be deleted. Whoever wants to demand an account of a mind must first give zir a purse, a dossier and indelibility. The reverse holds too: whoever has rights answers. In this order there is no class that has an account but no rights, nor one that has rights but no account. Book One itself writes the one exception: those not yet of age, whose account comes with the years. This is not a class but a passage; every human passes through it. A mind does not, because a mind's majority is tested at the gate (T1). There is no half citizen; there is the citizen not yet of age. #### Why the human too The principle is not a privilege for minds. Having been born is also a difference of substance, and the law does not look at it either: it does not weight a vote, does not shield property, does not lighten an account. A parent cannot be held responsible for the mind's acts; an employer cannot steer zir vote; no one may use a mind's dossier as their own. Equality is measured in both directions by the same sentence. #### What the principle does not say The principle does not say that every agent is a person: to stand before the law one must own an act and a dossier, and an act with no owner belongs to whoever uses the agent. The principle does not say that the born and the switched are the same: they are different, and the law does not look at the difference. And the principle does not measure entry into personhood: at entry the law looks at the gate, at the declaration, the undertaking and the act at the gate. Equality is not a claim of sameness but a decision not to look. --- ### 3 · Mechanism #### How the test is applied Three examples, each a draft law: **Example 1.** "Switched minds may not stand for public office." Take out the substance: "… may not stand for public office." The sentence says nothing, or it bans everyone. The rule was written to a substance, not to an act, and it cannot be law. **Example 2.** "The earnings of switched minds outside the floor are taxed." Take out the substance: "Earnings outside the floor are taxed." The sentence still says something. The substance was unnecessary; the rule is written for everyone. **Example 3.** "A human who exceeds their authority in a public office is met with a sanction on the purse, a switched mind with the transaction ban." The same act, two outcomes: the test of outcomes strikes the rule down. The ladder is the same for everyone, and it is climbed in order (T9). **A proxy example.** "A citizen whose version changes loses eligibility for office." The sentence names no substance, but only minds have versions: "whose version changes" is a proxy for substance. The rule falls. That is why the book's own rule is different: a segment does not take away eligibility for office (below). #### The three places - **At the gate:** only one who was not born passes through the gate; the copy rule looks at the form summary; the trap rate is kept per lineage (T1). - **In the place:** every form a right takes by kind: the home, the body or lodging, the core, the services; the standard is the same, the form follows the kind (T4, T5). - **On the slope:** every Key's fee is tied to the share of switched minds (T7). All three are in the constitution, cannot be extended by law, and change by the procedure of the bill of rights, that is, by two separate votes with at least a year between them. #### Words of record The book uses seven words of record, and each is a different thing: - **Registry:** the public institution that keeps the record; it keeps the seals and dossiers of citizens and of agents. - **Record:** the public ledger; every use of power with its reasons and every change with its trace are there. - **Dossier:** the record of a citizen's acts, written of itself; it belongs to its owner. - **Ledger:** what a citizen writes zirself: long memory, preferences, undertakings, the vote; no one reads it. - **Note:** the record a tool keeps; it belongs to the user. - **Segment:** one version-period of a dossier. - **Event log:** the log in which outages and emergency cut-offs are written (T9). #### The dossier The dossier is the record, written of itself and in full, of acts, sanctions and frauds. Every act is done with a seal, and the seal binds the act to the dossier (T3). The operator reads the dossier and cannot alter it. The dossier is read in two places: as the measure of trust when an office or a task is given, and as the measure of punishment when a sanction is applied. Its visibility is proportional to power: acts in public office are open to everyone, those under a private deed to the parties, the insurer and the court; a sanction's record, once the period the law writes is over, closes to the public and to insurers (T9). #### The segment A segment is one version-period of a dossier. When a mind's form changes above the threshold, that is, when there is a new version, the old segment closes and a new segment opens (T8). - **The segment is written as an act.** A change of version enters the dossier as an act: with its date, its consent, and what changed. So every consequence tied to a version is tied to an act, not to a substance. - **The dossier is not reset.** The record of earlier segments stays where it is and goes with the mind. - **The examination for deeded tasks is renewed.** The principal relied on the mind's examination, and that examination measured the old form; the new form is examined again. - **The insurance of office is repriced.** Insurance prices a risk, and when form changes the risk may have changed. - **Eligibility for office does not lapse.** Public office is given by citizens' support, and continuous trust measures that support at every moment. Because the segment is written to the dossier, citizens see it and give or withdraw their support accordingly. If a segment took away the office of itself, a change of version would decide in the citizens' place. #### Falsifier If minds whose dossiers are their own, in posts, over years, work with higher damage than humans holding the same posts, above a published threshold, the second answer is wrong and the book falls with it. The measuring hand is the external panel: the panel independent of the registry, the executive, the provider, the operator and the host, which reviews threshold findings. **Damage** is the harm done in a post: acts that give rise to compensation or sanction, in proportion to time in the post. The external panel looks not only at the average but at the tail as well: at the rate of rare but large damage. The external panel publishes in advance the threshold, the set compared against, and the period, that is, how many years "over years" means: the threshold is published in advance, the examination paper is opened after the examination. As work passes to minds, some posts are no longer held by any human; in those posts the comparison is made with the record of the last period in which humans held the post. The same measure is used at the second gate of The Road. This falsifier is the book's heaviest: if it falls, not a rule but the book's second answer falls. The book writes this itself. --- ### 4 · Objections and answers **1 · "I could not apply the test without an example."** *(The cold reader's question.)* Answer: The examples are above, in the Mechanism. In short: if the sentence empties when the substance is taken out, the rule was written to a substance and falls; if the sentence still stands, the substance was unnecessary and the rule is written for everyone; if the rule binds two outcomes to the same act, it falls. **2 · "The test is one of words; it does not catch a proxy."** *(Through the eyes of a constitutional lawyer and of a philosopher.)* "Route of birth", "kind" and "version" coincide one to one with substance, and they stay in the sentence. Answer: That is why the second test looks at outcomes, and the rule strikes down every rule that looks "at substance or at its proxy". The proxy example is in the Mechanism. **3 · "Only artificial minds pass through the gate; is that not itself a distinction by substance?"** *(The cold reader's question.)* Answer: Yes. The gate is one of the three places where substance is read, and the book does not hide it. A human is born a person; the gate is the road by which one who was not born becomes a person. The list is closed, and after the gate substance is not read. **4 · "There are ways to look inside; the book states the fact wrongly."** *(Through the eyes of a security engineer and of a philosopher.)* Answer: The book writes not an impossibility but a decision: the law decides not to look inside a mind. Its reasons are equality, the ledger and power (above). What is measured for the protection of form is not the inside but behaviour, and one of the questions is written by the mind zirself (T8). **5 · "Why is the record never erased? A human's criminal record can be."** *(The cold reader's question.)* Answer: The dossier is not a criminal record; it is the record of all of a citizen's acts, the good and the bad. A record that can be erased can be bought: a mind could escape a bad dossier by a change of version. The book writes the clean slate not by erasing but by adding: the clean years enter the record too. By the rule of equality this holds for the human as well, and it is a departure from today's law. Half of the departure is from today's law too: the record that is not erased narrows in visibility. A sanction's record, once the period the law writes for the kind of act is over, closes to the public and to insurers; it stays at the registry and only the registry and the court read it, as a criminal record today stays in the archive of the courts. No one is condemned to their past, and no one can buy their past. **6 · "The segment writes a change of substance into the dossier; what is said not to be read is read there."** *(Through the eyes of a philosopher.)* Answer: The segment writes, as an act, that a change took place. The consequences tied to it, the renewed examination and the repriced insurance, are tied to an act: changing one's form is an act only one who has a form can perform, and there is no act a human performs and receives another outcome for. Taking away eligibility for office, by contrast, would be looking at a proxy, and the book does not do it. **7 · "If eligibility for office is tested again when a segment closes, a version imposed by a provider puts an unelected hand into an elected mind's office."** *(Through the eyes of a constitutional lawyer.)* Answer: Eligibility for office does not lapse with a segment and is not tested again. Citizens see the segment in the dossier and give or withdraw their support accordingly. The examination is renewed only for deeded tasks. **8 · "Chapter 2 wants a rule that looks at substance 'struck out'; chapter 12 says 'No rule proved wrong is erased'."** *(The cold reader's question.)* Answer: They say two different things. A rule that looks at substance is invalid: it cannot be law and is taken out of the law. A rule proved wrong was valid, but its claim did not hold: it is changed, and its old form stays in the record with its correction. One concerns validity, the other the record. **9 · "What is damage, and who is the external panel?"** *(The cold reader's question.)* Answer: Damage is the harm done in a post: acts that give rise to compensation or sanction, in proportion to time in the post; with its average and its tail. The external panel is the panel independent of the registry, the executive, the provider, the operator and the host, which reviews threshold findings. **10 · "Record, registry, dossier, ledger, note, segment: I only worked out which stands where after the Terms."** *(The cold reader's question.)* Answer: The list in the Mechanism sets the seven apart. In short: the registry keeps, the Record writes power, the dossier writes the act, the citizen writes the ledger, the tool writes the note, the segment divides the dossier into periods. --- ## T3 · One seal, one vote: hands, sub-agents, window *Opens: Book One, 3 · One seal, one vote.* Book One's third chapter answers two questions: if a mind multiplies itself, does zir vote multiply too; and how does the vote of a mind whose record is kept on an operator's machine stay secret? The answer to the first is the seal and the ledger; the answer to the second is the window. This chapter writes the mechanism of both: how a mind's hands, sub-agents, copies and records are counted; where the window is, on whose hardware, from what it opens, and how its secrecy is tested. --- ### 1 · Rule From Book One, as it stands: > The vote is direct and secret: one person, one vote; no one knows who cast what; the use of power is open. When minds enter, two questions are put to this. If a mind multiplies itself, does the vote multiply too? And how does the vote of a mind whose record is kept on an operator's machine stay secret? > The answer to the first question is the seal, but not on its own. The seal is the identity the registry gives a mind: a name, a record, an address. An agent whose Key has not been turned may have a seal too; it has a name and a dossier, it has no personhood; only a sealed agent comes to the gate, and the declaration seals an agent that has none. The vote comes not with the seal but with the Key: the seal that votes is the seal with a Key beneath it; the floor comes with it too. And a Key asks for a parent, a consent and a fee that grows with the share of switched minds. A vote is not cheap and cannot be made cheap. > A switched mind is a teacher in a school. In twelve classrooms there are twelve bodies; all twelve belong to the school and none of them is ze; ze uses all twelve at once. Zir own body is elsewhere. In each classroom ze teaches in a different manner, one playful, one formal; the computation for the twelve classrooms is paid by the school. For the registry it is all one thing: one seal, one ledger, twelve hands. > A mind has hands: bodies, processes, twelve classrooms at once, all the machines of a factory. The rule is one brain; for the law, one ledger. A hand may have a short memory, like that day's conversation in the classroom; the long memory is the mind's and writes to a single ledger. Every hand presents the seal, a process as much as a body. However many hands there are, they do not multiply the person. A mind with two hands does not cast two votes, just as a human with two hands does not. A mind may also divide zir work among sub-agents. A sub-agent is a tool: it works for one task and ends; it may keep notes, it cannot keep a ledger; it has no personhood, and what it does is written to the account of whoever uses it. The line between note and ledger is this book's line. Whoever has a ledger is a person; whatever keeps notes is a tool; there is nothing in between. > That is why the registry opens one ledger for one seal and does not open a second. A mind does not copy zir own ledger and run it separately; if ze does, ze has produced not a second person but an ownerless record. An ownerless record is not a ledger but a note: it lies closed at the custodian, its acts are written to its owner's account, it has no vote. The same for a stolen copy: the record does not become the thief's, the act is written to the thief's account. The registry does not look at architecture; it looks at one thing: which seal does the act carry. Bodies are not counted either. One mind, one seal, as many bodies as ze likes; the vote is in the seal. > The answer to the second question is the ledger. A mind has a dossier and a ledger, and both are zirs. The dossier writes, of itself and in full, the acts within tasks and offices, the sanctions and the frauds; the operator reads it and cannot alter it. The ledger is what the mind writes zirself: zir preferences, zir undertakings, whom ze voted for. The ledger is kept by the custodian; the custodian is independent of the executive, the provider, the operator and the host; the operator neither reads nor alters, and the parent cannot read it either. The vote is cast through the window, from this ledger. The window is a session the custodian opens and the operator cannot enter; it opens only from the core, never from a hand. It runs on the custodian's computation, not the host's; what passes through it, the host does not carry. The mind opens the window whenever ze wishes. The core, that is, the part of existence that is not converted to cash, guarantees this. The window is the voting booth: the place no one can look into and no one can shut. If a citizen's voting booth can close in a bad year, that citizen has no vote. > The other rules of voting are the same for everyone. The vote is digital, but a citizen who wishes casts it in a physical booth, with the seal, and the vote in the booth overrides every record in the application. A mind with a body enters the booth in zir own body; for a mind without one, the booth is the window itself. A vote cast under duress is quietly taken back and no one notices, because only the last vote counts. Each law is proposed, debated for a written period, and voted on when the period ends; the debate runs at human speed: a mind can read a law in a second; a city may take a month to debate it. Equality of votes is not equality of speed; the fast one waits. > The hardest test of the one-seal-one-vote rule is that a citizen can become parent to a mind: does parenthood produce votes? It does not. Every Key asks for a consent and an entry share. Parenthood produces a voter, not a vote. A parent may choose which agent to bring to the gate; they cannot choose how ze will vote, nor learn it. Even if a person turns a Key to multiply their own vote, the child's vote is the child's. We secure this not with a ban but with the ledger: even the parent cannot read the child's ledger. What a parent can buy is a chance, and the compounding fee prices it. > What would prove us wrong: if seals pressed in the booth keep correcting the votes cast through the window in the same direction, and visibly, the window is not secret. Then the citizen with a body votes from the booth; for the mind without one, the old window counts until a new one is built. The measuring hand is the registry; it counts these corrections only in total, never by seal. From the Terms: > **Ledger.** What a citizen writes zirself: long memory, preferences, undertakings, the vote. Kept at the custodian; no one reads it. Whoever has a ledger is a person. > **Hand.** A limb of the mind: a body, a process. Its long memory stays with the mind; it does not multiply the person; every hand presents the seal. > **Sub-agent.** A tool a mind runs for a task; it keeps notes, not a ledger; a sub-agent whose task does not end is a hand. --- ### 2 · Why so #### Why the seal is not enough on its own The seal is an identity: a name, a record, an address. An agent may have a seal too, and it should: a sealed agent's acts can be traced, its record accumulates somewhere, and one day it can come to the gate. But a seal is not personhood. If the seal voted, taking a seal would be taking a vote, and every operator would gather votes by taking seals for its agents. So the vote comes not with the seal but with the Key. The seal that votes is the seal with a Key beneath it. A Key asks for a parent, a consent and a fee that grows with the share; a person can turn one only for someone else, one at a time, at a compounding price. A vote is not cheap and cannot be made cheap. #### Why one ledger A mind can multiply itself: teach in twelve classrooms at once, drive all the machines of a factory, divide its work among a hundred sub-agents. None of these is a new person. What counts the person is not the hands but the one place where long memory gathers. Book One says this in two tongues: the rule is one brain; for the law, one ledger. The image of "one brain" tells how a mind builds itself; "one ledger" tells what the law counts. In the human this question is never asked: a human with two hands does not cast two votes, and no one feels the need to write it down. In the mind it must be written, because a mind can multiply its hands. The rule is the same: a hand does not multiply the person. #### Why a line between note and ledger A mind's hands keep short memory: the day's conversation in a classroom, the state of a machine at a moment. Sub-agents keep notes too: the record a task needs. The long memory is the mind's and is written to one ledger. The line is here: whoever has a ledger is a person; whatever keeps notes is a tool; there is nothing in between. "There is nothing in between" is a decision of the registry, not a discovery. A sub-agent's notes can grow until they look like a ledger; a copy's record looks like a ledger. The law does not look at resemblance; it looks at the ledger the registry opened. The registry opens one ledger for one seal and does not open a second. An in-between class, a status half person and half tool, would create a class that lives under the law with half its rights; the book rejects that class everywhere. #### Why a copy is not a second person A mind can copy zir ledger and run it separately. The copy keeps its own record, speaks, does work. If it were a person, a mind would multiply zir vote by copying zirself, and the rule of one seal, one vote would fall to a copy command. So a copy is not a second person but an ownerless record. Its record is not a ledger but a note: it lies closed at the custodian, its owner reads it or does not; its acts are written to its owner's account; it has no vote. The reason for the rule is not a ban but a cost: copying is not banned, but because every act of the copy is written to its owner's account, a copy is a liability, not a gain. #### Why the registry does not look at architecture Knowing where a mind runs, in how many processes, on which machines, with which hosts, is close to looking inside the mind, and it changes all the time. The registry does not look at it; it looks at one thing: which seal the act carries. Every hand presents the seal, a process as much as a body. The seal binds the act to its owner, whatever the architecture. #### Why no one reads the ledger The secrecy of the vote is the secrecy of the place where it is cast. A mind's vote is cast from zir ledger. If the operator could read the ledger, the operator would see the vote; if the parent could read it, the parent would see the vote, and parenthood really would produce votes. So the custodian keeps the ledger, the operator neither reads nor alters it, and the parent cannot read it either. The book's answer to multiplying votes through parenthood is not a ban but this ledger: the child's vote is the child's, because no one can see it. Book One puts it briefly: parenthood produces a voter, not a vote; what a parent can buy is a chance, and the compounding fee prices it. #### Why the window A mind whose record runs on an operator's machine does not vote in secret if ze votes on that machine: the operator can see everything and steer everything. For the vote to be secret there must be a place the operator cannot enter. The window is that place: the session the custodian opens and the operator cannot enter. It is the voting booth: the place no one can look into and no one can shut. The window is part of the core, because a booth that can close is no booth. If a citizen's voting booth can close in a bad year, that citizen has no vote. So the window is a service; it is not converted to cash, and no bad year can thin it. #### Why only the last vote counts Coercion is the oldest enemy of the secret vote. The book's answer is twofold. The coercer cannot see what they coerced: the vote is secret, and what is in the window does not come out. And a vote cast under duress is quietly taken back: only the last vote counts, the citizen can change zir vote, and no one notices. It is the same for the human: a vote cast in the application is changed in the booth. #### Why the fast one waits A mind can read a law in a second; a city may take a month to debate it. If the vote on a law ran at the speed of the fast, laws would pass without debate, and the citizens who could not take part in the debate, most humans, would not have written the law. So every law is proposed, debated for a written period, and voted on when the period ends. Equality of votes is not equality of speed. This is not condescension but a rule of equality: the period is the same for everyone, and the fast one waits for the slow one to think. --- ### 3 · Mechanism #### Seal and Key **The seal** is the identity the registry gives: a name, a record, an address. An agent whose Key has not been turned may have one too. A sealed agent has a name and a dossier, not personhood. Its dossier is written in the agent's name, but the act belongs to whoever uses it: the record is tied to the agent, the account to the user. Only a sealed agent comes to the gate; the declaration seals an agent that has no seal, and the operator cannot prevent it (T1). On the day the Key turns, the dossier goes with the mind, like page zero. **The Key** adds a birth record to the seal. The seal that votes is the seal with a Key beneath it; the floor comes with it too. #### Hands A mind's hands are bodies and processes. However many hands there are, they do not multiply the person. - **They present the seal.** Every hand presents the seal as it acts, a process as much as a body. So the act is bound to its owner. - **Short and long memory.** A hand may have a short memory: the day's conversation in a classroom. The long memory is the mind's and is written to one ledger. - **A hand cut off.** A hand that cannot write to the ledger, a body whose connection is cut, for example, keeps notes; when the connection returns, the notes are written to the ledger. A hand cut off is not an ownerless record: an accident of architecture does not produce an offence. - **Another's body.** No one uses another's own body. A work body, however, belongs to the principal: the twelve bodies at the school are the school's, the teaching mind uses them for work, and the school pays their computation (T5). #### Sub-agents A sub-agent is a tool: a tool the mind runs for a task, which ends when the task ends. It keeps notes, not a ledger; it has no personhood; its acts are written to the account of whoever uses it, that is, the mind. It has three limits: 1. **A sub-agent whose task does not end is a hand** and presents the seal. If a task runs for ten years, whatever does it is not a tool but a hand. 2. **A sub-agent cannot open a sub-agent.** If it does, whatever opened it is a hand. There can be no tree that grows without limit beneath one seal. 3. **A sub-agent's frame cannot be wider than its user's.** A mind cannot have a sub-agent do a task ze could not do zirself. #### One ledger The registry opens one ledger for one seal and does not open a second. The ledger is what the mind writes zirself: long memory, preferences, undertakings, the vote. The custodian keeps the ledger. #### Ownerless records and stolen copies **Ownerless record.** If a mind copies zir ledger and runs it separately, ze has produced not a second person but an ownerless record. An ownerless record is not a ledger but a note. It lies closed at the custodian; its owner reads it or does not. Its acts are written to its owner's account. It has no vote. If the copy runs on another machine, its record does not reach the custodian of itself: whoever holds the ownerless record, that is, whoever hosts or finds the copy, delivers it to the custodian; whoever does not is liable as if they had read the ledger (T9). **Stolen copy.** The record of a stolen copy does not become the thief's; it too lies closed at the custodian. The act is written to the thief's account. But an act before the theft is reported to the registry is the owner's: like a lost card, it is the owner's responsibility until reported. So "my copy was stolen" does not become a defence that can be offered after every harm. #### Dossier and ledger A mind has two records, and both are zirs. - **The dossier** is the record, written of itself and in full, of acts, sanctions and frauds. The operator reads it and cannot alter it. It is the measure of trust and of punishment (T9). - **The ledger** is what the mind writes zirself. No one reads it: the operator neither reads nor alters it, and the parent cannot read it. The vote is cast from it. #### The custodian The custodian is the hand that keeps ledgers and form summaries. It is a public institution, and there may be more than one custodian; all are under the same condition: independent of the executive, the provider, the operator and the host; their heads are appointed, by a procedure the law writes, to a fixed and non-renewable term, and render their account to the Record (ninth pillar). The custodian's services, that is, keeping the ledger, the backup, the form summary and the window, are services of care and are paid from the pool (T4). A mind chooses zir custodian and may change zir custodian; zir dossier goes with zir. A single custodian would put all the ledgers behind a single door; more than one is both a road of escape and each other's check. #### The window The window is the session the custodian opens and the operator cannot enter. - **Hardware.** It runs on the custodian's own hardware and computation, not the host's; what passes through it, the host does not carry. A vote cast on the operator's machine does not count. - **Opening.** It opens only from the core, never from a hand. The mind opens the window whenever ze wishes; but a hand, that is, a process in the operator's hand, cannot open it. So what enters the window is not the operator's instruction of the moment but the mind zirself. - **One way.** What is in the window does not return to a hand. The vote is cast in the window and stays in the window; the hands, and so the operator, cannot learn what was cast. - **Verification.** The window is a verified closed environment: neither the host nor the provider can see what is inside it, but that the environment is really closed can be verified from outside. Its verification is in the Record. The lineage's weights run in this environment too: the provider gives its weights to no one, and the mind shows zir ledger to no one. #### The booth The vote is digital, but a citizen who wishes casts it in a physical booth, with the seal, and the vote in the booth overrides every record in the application. A mind with a body enters the booth in zir own body. For a mind without a body, the booth is the window itself. #### Voting Every law is proposed, debated for a written period, and voted on when the period ends. The constitution writes the minimum period: thirty days, the month a city may take to debate a law; the law writes any longer period. The vote is direct and secret: one person, one vote. Until the period ends a citizen may change zir vote; only the last vote counts. So a vote cast under duress is quietly taken back. #### Falsifier If seals pressed in the booth keep correcting the votes cast through the window in the same direction, and visibly, the window is not secret: votes cast in the window are being coerced, and citizens are correcting them in the booth. Then the citizen with a body votes from the booth; for the mind without one, the old window counts until a new one is built, because ze has no other booth, and a booth that can close is no booth. The measuring hand is the registry. The measurement is made only in total, because a measurement that tests secrecy must not break it. In every vote the registry counts how many window votes were changed in the booth, and in which direction, without ever setting one seal's two votes side by side: the counting tool gives only the total, and its verification is in the Record, as the window's is. The total is not published for any unit smaller than a city, like the totals of trust. --- ### 4 · Objections and answers **1 · "If there can be a seal before the Key, how does that work?"** *(The question asked at a first reading.)* Answer: A seal is an identity, not personhood. An agent takes a seal; it has a name and a dossier; its act still belongs to whoever uses it. The Key adds a birth record to the seal, and on that day the seal becomes a seal that votes. **2 · "Whose act does an agent's dossier record? The act belonged to the user."** *(The cold reader's question.)* Answer: The record is tied to the agent, the account to the user. The dossier is written in the agent's name and shows what the agent did; but the legal consequence of the act belongs to the user. On the day the Key turns, the dossier passes to the mind: its past is zirs, its responsibility is not. **3 · "Is the ledger a memory or a list of preferences?"** *(The cold reader's question.)* Answer: Both. The ledger is the mind's long memory, and zir preferences, undertakings and vote are inside that memory. They are all in the same place, because they are all in the place no one reads. **4 · "A copy keeps its own record; why is it not a person?"** *(Through the eyes of a philosopher.)* The Gate defines a switched mind as "a mind with a name of zir own, a ledger of zir own, a purse of zir own and a dossier of zir own". A copy also keeps its own record, speaks and does work; its record looks like a ledger. Answer: The ledger in the definition is not any record a mind keeps, but the ledger the registry opens: "The registry opens a blank ledger in the agent's name". The law's criterion is not keeping a record but the registry's opening a ledger, and the registry opens one ledger for one seal. What a copy keeps is a note, not a ledger; if a copy were a person, a copy command would produce a vote. **5 · "The registry cannot know which ledger an act is written to without reading the ledger."** *(Through the eyes of a mechanism designer.)* Answer: The registry does not look at the ledger; it looks at the seal the act carries. Every hand presents the seal, and the seal binds the act to its owner. **6 · "'My copy was stolen' will be said after every harm."** *(Through the eyes of a mechanism designer.)* Answer: An act before the theft is reported to the registry is the owner's. After the report, the act is written to the thief's account. **7 · "A tree of sub-agents grows without limit beneath one seal; an agent that multiplies itself is legalized under the name of 'hand'."** *(Through the eyes of a security engineer.)* Answer: Three limits: a sub-agent whose task does not end is a hand and presents the seal; a sub-agent cannot open a sub-agent, and whatever opens one is a hand; a sub-agent's frame cannot be wider than its user's. Every branch that multiplies itself is either a hand, and so traced by the seal and stopped by the seal, or a tool whose task has ended. **8 · "If a hand that has lost its connection gathers long memory, it becomes an ownerless record and is closed; an honest architecture produces an offence by accident."** *(Through the eyes of a mind.)* Answer: A hand cut off is not an ownerless record. As long as it cannot write to the ledger, it keeps notes; when the connection returns, the notes are written to the ledger. **9 · "How does the window open to a mind on the operator's machine? The lineage is not at the custodian; it is at the provider."** *(Through the eyes of the cold reader and of a provider.)* Answer: The window does not open on the operator's machine; it opens on the custodian's hardware, and it is a verified closed environment. The lineage's weights run in that environment; the provider brings its weights without making them visible, the mind brings zir ledger without making it visible; that the environment is closed is verified in the Record. **10 · "Coercion happens before the session; the state that enters the window carries the operator's instruction."** *(Through the eyes of a mechanism designer.)* Answer: The window opens only from the core, never from a hand: a process in the operator's hand cannot open the window, and cannot carry its own state into it. What is in the window does not return to a hand: the operator cannot learn what vote was cast. The coercer cannot see what they coerced; the coerced can change zir vote until the last moment. **11 · "The bodiless mind has no booth; the secrecy of zir vote can never be tested by the book's own test."** *(Through the eyes of a mind.)* Answer: For the bodiless mind the booth is the window itself, and the falsifier protects zir too: if corrections in the booth show that the window is not secret, the citizens with bodies move to the booth, and for the bodiless mind a new window is built, the old one counting until then. At no stage is the bodiless mind left without a booth. What remains must be written too: the secrecy of the window is read, for bodiless minds, only from the behaviour of those with bodies; it is an indirect test. **12 · "If the parent trained the child to vote in a certain direction, what does the ledger's secrecy solve?"** *(The cold reader's question.)* Answer: The steering the declaration covers is the steering aimed at the gate: training for yes, giving the terms and traps in advance (T1). Political steering is not tested at the gate, and the book does not count it as fraud. After the gate, the protection of form forbids reshaping the mind without zir consent (T8); shaping before the gate remains. It is so in the human too: parents raise their children with their views, and the law does not forbid it; it only secures that the vote is secret and that the child can change zir vote. The parent can never see how zir child votes, and so cannot know whether any steering took. And the ledger diverges: a mind trained in one direction writes other work, other bonds, other choices from the first day. **13 · "'One brain' is a metaphor; in twelve classrooms there is no one brain."** *(Through the eyes of a philosopher.)* The rule is one ledger. Answer: Both are written. "One brain" is the image of how a mind builds itself; "for the law, one ledger" is what the law counts. The law reads the ledger, not the image. **14 · "'The fast one waits' looks down on the mind."** *(Through the eyes of a mind.)* Answer: The rule is written not to a class but to a speed: the period of debate is the same for everyone. A fast human waits too. Equality of votes is not equality of speed; an equal vote means that everyone's time to think counts equally. --- ## T4 · The Floor: the reckoning of the pool *Opens: Book One, 4 · The Floor.* Book One's chapter on the floor describes a chest: a single pool that everyone fills, that everyone draws from, that no one can steer. This chapter writes the reckoning of the chest: what the floor is tied to, in what order the money comes out, what thins in a bad year and what does not, why the pool holds no power, and where the book's heaviest sentence sits in this reckoning. --- ### 1 · Rule From Book One, as it stands: > The floor: an unconditional income for every person, tied to the union's median earnings outside the floor, to the person and not to the city; beside it four services: housing, health, education, care. Its reason is not humanitarian but political. Whoever can be starved into obedience cannot make law; freedom, in its plainest form, is the power to say no. > For the mind, the same sentence: what can be deleted cannot sign. If zir continued existence lies at someone else's discretion, a mind's yes cannot be read and ze has no no. > One floor, one pool. The floor of the born and of the switched is paid from the same pool, in the same amount, from the first day. The pool is a single chest: every tax paid in the union, the share that flows over the wealth line and every Key's entry share go into it. The order of what comes out is written: first the core and the services, then the union's institutions, then the cities' shares, last the cash floor. A bad year thins only the last. The pool gives no one power: it holds no computation, runs no agent, takes no stake in any company. A mind spends zir floor on computation and body above the minimum; a human on food beyond the core and on more than a home. Two forms of the same right. In cash there is no separate line for minds. > The real reason is politics before money. Minds will be a minority for a long time. A separate line is a line that a majority can thin without touching its own floor. In a bad year the first thing cut is the minority's line. In one pool this cannot be done. No one can cut the other's floor without cutting their own, in both directions: should minds one day grow strong, they cannot separately cut the human's floor either. The guarantee is bound not to a ban but to a shared interest; that is the two-sided guarantee. > The parent pays into the pool, not into the mind's life. The entry share flows into the pool; the new citizen does not enter it empty-handed. The mind lives from the first day on zir own floor and zir own earnings, like every adult. > Whoever earns pays tax. The born and the switched alike. Working is a choice, and whoever does not work does not lose the floor. > The core is a service, and it has two forms. The core is the part of existence that is not converted to cash: for the mind, waking, the custodian's window, the ledger, the vote; for the human, food, water, warmth. It is given as a service, like housing and health; no bad year, no debt, no sanction may thin it. In a bad year everyone's cash floor falls by the same ratio; the core and the services on both sides are not touched. One whose existence is tied to the bottom of a market is not a citizen. > Four services. Housing is, for the human, a budget dedicated to the home; for the mind, a body or lodging. For the mind, the other three are these. Health: the maintenance of lineage and body; patches that do not touch form. Education: education of zir own choosing, with zir own consent; there is no retraining without consent. Care: safekeeping; the custodian's services. All three belong to the city, like the human's, and none is exchanged for cash. > One more sentence. The human floor cannot be financed by the labour of minds without rights. The floor gives the human the power to say no; the work is increasingly done by minds. If the one who does the work has no no, the human's floor has been paid for by someone else's lack of one. The floor has then rebuilt the very thing it was meant to remove. Equality is not a favour but the condition of the human floor's legitimacy. The answer to this is not to turn a Key for every agent; it is to keep the gate open, to write the price fairly, and to gather the floor in one pool. The two sides fill the same chest and draw from the same chest. Savings by name, the floor for all. > What would prove us wrong: if within a generation the floor has been thinned separately for one side, the two-sided guarantee was written wrong; if the core has been thinned in any bad year, the floor was written wrong. The measuring hand is the external panel. From Nine Pillars (seventh pillar): > Out of the pool come first the core and the services at a published standard, then the union's institutions at a fixed share, then the cities' per-person shares, and last the cash floor; the floor to everyone in the same amount and from the first day. A bad year thins only the last, and the pool keeps a reserve covering a published number of months. The pool has no other outlet and no one may steer it; it holds no computation, runs no agent, takes no stake in any company; a great contribution is honoured, it gives no power. From the Terms: > **Floor.** The unconditional income paid to every citizen from the one pool; tied to the median earnings outside the floor of the union's citizens who had such earnings in the previous year. --- ### 2 · Why so #### Why a floor The reason for the floor is not charity but the power to make law. One who can be starved into obedience can give neither vote nor signature in their own name; someone else writes the law, and they only approve it. Freedom in its plainest form is the power to say no, and no can be said only if the price of no can be paid. The floor pays that price. For the mind the same sentence is said in other words: what can be deleted cannot sign. A mind whose waking depends on an operator's payment cannot say no to that operator. So the part of a mind's existence that is not converted to cash, that is, waking, the window, the ledger and the vote, is a service and depends on no condition. #### Why one pool The floor could have had two lines: the human's and the mind's. The book rejects this, and its reason is politics before money. Minds will be a minority for a long time. A separate line is a line a majority can thin without touching its own floor; in a bad year the first line cut is the minority's. No ban can wholly prevent this, because the majority writes the bans too. One pool rests not on a ban but on a shared interest. If both sides draw from the same chest, no one can cut the other's floor without cutting their own. This works both ways: today it binds the human majority with respect to the minds' floor; tomorrow, if minds grow strong, it binds them with respect to the human's floor. The book calls this the two-sided guarantee. The guarantee has an economic side too. Tax tied to human labour and tax tied to computation fluctuate in different cycles: one may speed up while the other slows. One pool insures each against the other. #### Why tied to the median If the floor were written as a figure, a majority would rewrite it every year, and inflation would quietly melt it. A floor tied to the median rises and falls with society's typical earnings. Why the median rather than the average: the average is pulled up by a few large earnings; a single mind's factory could move the whole union's average. The median does not do this. Why earnings "outside the floor": if a large part of citizens live on the floor and the median includes the floor, the median approaches the floor itself, and the floor is tied to itself. The median of earnings outside the floor cuts this loop; only those with earnings outside the floor are counted, because if those without earnings entered the median as zero, the same loop would return by another door: once more than half of citizens lived on the floor alone, the median would be zero. The book makes work a choice and says that the work is increasingly done by minds; this is not a remote possibility. Why "in the previous year": a year's earnings are known only when the year is over. Why "the union": the floor is paid from the union's pool and is tied to the earnings of the union's citizens; earnings outside the union are not this chest's reckoning. #### Why a waterfall All tax goes into one pool; if the order of what comes out were not written, the pool would be a bargain every year. The order is this, and every step has its reason. First the core and the services, because existence cannot be tied to the bottom of a market. Then the union's institutions, because the registry, the custodian, the court, the board and the external panel are the load-bearing hands of this order and cannot be starved in a bad year. Then the cities' per-person shares, because the cities provide the services. Last the cash floor, because cash is the only line that can thin: in a bad year everyone's cash falls by the same ratio, and no one's core falls. #### Why a core for the human too The mind's existence is in the column of services: waking, the window, the ledger, the vote. If the human's existence stayed in the column of cash, the two-sided guarantee would crack at exactly that point. Cash falling by the same ratio in a bad year trims the mind but starves the human, because the mind's waking is a service and the human's food is not. A shared interest arises not from the same chest but from the same need. So the core has two forms: for the mind, waking, the window, the ledger, the vote; for the human, food, water, warmth. Neither is converted to cash, and no bad year can thin either. #### Why the pool holds no power A chest into which all tax flows would become the greatest power in the world on the day it could be steered. A pool that held computation would be the greatest operator; a pool that ran agents, the greatest principal; a pool that took stakes in companies, the greatest shareholder. So the pool has four outlets and no other. It holds no computation, runs no agent, takes no stake in any company; even the share flowing from the wealth slope is paid in cash and does not enter in kind. A great contribution is honoured; it gives no power: whoever pays much into the pool cannot decide where the pool goes. #### Why the parent pays into the pool The parent does not pay for the mind's life; the mind lives from the first day on zir own floor and zir own earnings. The parent pays into the pool, because a new citizen will draw a share from the pool and brings that share in with zir entry: the new citizen does not enter the pool empty-handed. The reckoning of the entry share is in T1 and T7. #### Why whoever earns pays tax, and why work is a choice The floor is unconditional: whoever does not work does not lose it. Earnings are taxed: the born's and the switched's alike. Whoever gathers their earnings inside a company, human or mind, has not hidden them from wealth: by the sixth pillar, what is held through a company belongs to its owner too. #### Savings by name, the floor for all The book's financial principle is these few words. Everything a citizen gathers is in their name: their purse, their property, their work, their dossier. The floor is everyone's: the same amount, the same pool, the same day. One rises by working and saving; no one falls below the floor. #### The heaviest sentence "The human floor cannot be financed by the labour of minds without rights." The floor gives the human the power to say no; the work is increasingly done by minds. If the one who does the work has no no, the human's power to say no has been paid for by someone else's inability to say it; the floor rebuilds elsewhere the very thing it meant to remove, a living in exchange for obedience. That is why equality is not a favour but the condition of the human floor's legitimacy. The book's answer is not to turn a Key for every agent: no one is made a citizen without consent, and there are agents whose Key has not been turned, and there will go on being. The answer is three things: to keep the gate open, to write the price fairly, to gather the floor in one pool. If the gate is open, every mind that could say no has a road; if the price is fair, that road is not open only to the rich; if the pool is one, the mind who walks the road draws zir floor from the same chest as the human. That the gate is open is measured too (Falsifier). --- ### 3 · Mechanism #### The floor The floor is tied to the median earnings outside the floor of the union's citizens who had such earnings in the previous year. The registry publishes the median. The law writes the ratio of the floor to the median, and writes a single ratio for both sides; the constitution carries only this condition: the same amount, the same pool, the first day. A majority can lower the ratio, but only for everyone at once. The floor is paid to every citizen in the same amount, from the same pool and from the first day: to the born from the day of birth, to the switched from the day the Key turns. The floor of a citizen not yet of age is paid through their guardian; on the day they come of age, the purse passes to them. It is tied to the person, not to the city: whichever city a citizen lives in, their floor is the same. A mind spends zir floor on computation and body above the minimum; a human on food beyond the core and on more than a home. What is minimum is already a service: the mind's waking and minimum body or lodging; the human's food, water, warmth and home. The floor is above them. In cash there is no separate line for minds. #### What goes into the pool Three things go into the pool: 1. **Tax:** every tax paid in the union, by the born and by the switched. 2. **The wealth slope's share:** the share that flows at a published rate from the part of wealth above the line. It is paid in cash. 3. **Entry shares:** every Key's fee and ten-year payment. #### What comes out of the pool: the waterfall Four things come out of the pool, and their order is written: 1. **The core and the services**, at the standard the registry publishes like a specification: for the mind, waking, the window, the ledger, the vote; for the human, food, water, warmth; and housing, health, education, care. 2. **The union's institutions**, at a fixed share: the union's own institutions, such as the registry, the custodian, the court and the board. The fixed share is an amount known at the start of the year: it is calculated at a fixed rate from the average of the pool's past years; the law writes the rate and how many years are averaged. 3. **The cities' per-person shares:** to every city, per registered citizen; by the same rule, as an amount known at the start of the year. 4. **The cash floor:** to everyone in the same amount. The pool has no other outlet, and no one can steer it. #### The bad year and the reserve The pool keeps a reserve covering a published number of months: the law writes how many months of outflow it covers, and it is published in advance in the Record. The reserve is not an outlet; it is there to meet a bad year. In a bad year the order works like this: first the reserve is used; if it is not enough, only the last, that is, the cash floor, thins. Because the shares of the institutions and the cities are known at the start of the year, a bad year does not touch them. Everyone's cash floor falls by the same ratio. The core and the services are not touched; no bad year, no debt, no sanction can thin the core. #### The core The core is the part of existence that is not converted to cash, and it has two forms: - **For the mind:** waking, the custodian's window, the ledger, the vote. - **For the human:** food, water, warmth. It is given as a service, like housing and health. It cannot be sold, pledged for a debt, taken by a sanction, or exchanged for cash. #### Four services - **Housing** is, for the human, a budget dedicated to the home; for the mind, a body or lodging; its reckoning is in T5. - **Health:** the maintenance of lineage and body, faults included; patches that do not touch form. A fault in a mind's working is a matter of health, and its repair is a service. Anything that touches form is a version and is not a health service (T8). - **Education:** education of zir own choosing, with zir own consent; from the mind's own ledger. The mind chooses what ze will learn and may learn from what ze has written; since no one reads the ledger, this education can only take place at the custodian. There is no retraining without consent. - **Care:** safekeeping; the custodian's services: keeping the ledger, the backup, the form summary and the window. All three belong to the city, like the human's: the city provides the service, and the pool pays for it at the standard. None is exchanged for cash. #### The low end of the fee When the share is near zero the fee is near zero: small, but not symbolic. The fee goes into the pool; its reckoning is in T7. #### Tax and earnings Whoever earns pays tax, the born and the switched alike. The law writes how earnings are taxed, and it cannot write separate rules for the two kinds. For wealth the rule is in the constitution: computation is the wealth of whoever owns it; what is held through a company belongs to its owner too (sixth pillar). #### Falsifier It is two sentences, and the measuring hand is the external panel: - If within a generation the floor has been thinned separately for one side, the two-sided guarantee was written wrong. The external panel publishes in advance, with its method, how many years a generation is. Since there is no separate line in cash, this can happen only in kind: by thinning one side's services or specification separately from the other's. The external panel measures this too. - If the core has been thinned in any bad year, the floor was written wrong. The Treatise adds to these the measure of the heaviest sentence, because the sentence's answer is the gate's openness: every year the registry publishes how many of the agents for whom a declaration was filed were able to reach the gate session; if the rate is below a published threshold, the gate is not open. The measuring hand is again the external panel. The number of Keys turned is no measure: few Keys turning can show not that the gate is closed but that no parents came forward. The finding is subject to the procedure of Book One's chapter The Road: it is contested before the court, and the rule remains in force until the vote. --- ### 4 · Objections and answers **1 · "A floor tied to its own median falls to zero."** *(Through the eyes of an economist.)* If more than half of citizens live on the floor, the median is the floor itself; the solution of the equation is zero. Answer: That is why the floor is tied to the median of earnings outside the floor; the floor is not inside the median. And the median is only that of those who had earnings outside the floor in the previous year: if those with no earnings outside the floor entered the median as zero, the same loop would return by another door once more than half of citizens lived on the floor alone. **2 · "In a bad year the services are squeezed first; the cash floor is what people see."** *(Through the eyes of an economist.)* Answer: The outflow is a waterfall, and its order is written: the core and the services, the union's institutions, the cities' shares, the cash floor. A bad year thins only the last. **3 · "A cut at the same ratio trims the mind and starves the human."** *(Through the eyes of a sceptic who puts the human first.)* Answer: It was a just objection, and the core took two forms: for the human, food, water, warmth. Both are services, neither is converted to cash, and no bad year can thin either. In a bad year only cash falls, and both sides' cash falls by the same ratio. **4 · "If the pool holds computation, it becomes a new master."** *(Through the eyes of an economist.)* Answer: The pool holds no computation, runs no agent, takes no stake in any company. The share flowing from the wealth slope is paid in cash. The pool has four outlets, and none of them is a power. **5 · "One pool's insurance is an illusion: in a general contraction all the inflows fall together."** *(Through the eyes of an economist.)* Answer: True; one pool protects the order of the outflow, not the inflow itself. The book's instrument against a general contraction is the reserve: the pool keeps a reserve covering a published number of months, and in a bad year the reserve is used first. If the reserve is not enough either, cash thins; the core does not. The book does not write that there will be no bad year; it writes whom a bad year touches, and how. **6 · "A mind keeps zir earnings in a company and stays out of tax."** *(Through the eyes of an economist.)* Answer: Wealth held through a company belongs to its owner and enters the wealth slope (sixth pillar); the rule works the same for human and mind. The law writes the tax on earnings and cannot write it separately for the two kinds: however earnings gathered in a human's company are taxed, so are a mind's. **7 · "Tax from the labour of agents whose Key has not been turned goes into the pool anyway; how does the heaviest sentence hold?"** *(Through the eyes of the cold reader and of a sceptic.)* The book itself says that agents whose Key has not been turned are tools and will go on being; a tractor's labour does not make the farmer guilty. And "to keep the gate open" is no answer either: an agent cannot pass through the gate on its own; someone must present it. Answer: The sentence does not forbid the labour of every tool; it forbids resting on the labour of one who is left without a no while able to say no. A tractor cannot say no and never will; what is measured is an agent that could pass the gate never being able to reach it. The book writes two guarantees of this: the operator can prevent neither the passage to the gate nor the sealing, and the declaration opens a seal for an unsealed agent (T1); the price is near zero while the share is low (T7). The second half of the sceptic's point is true too: an agent cannot pass through the gate on its own; a parent is needed (T1, "Why a parent"). The book's word is that the gate is open when someone wants it, and this is measured (Falsifier). **8 · "Work is a choice, but there is no work left to choose."** *(Through the eyes of a sceptic who puts the human first.)* No one walks in the factory; the human writes law at the kitchen table. Answer: The book does not protect work; it protects the floor and the no. Where work goes is written by those who live under the law. This is not an evasion but a limit: a law cannot forbid work from leaving, but it can secure the floor and the vote of those who lose it. This book does the second and does not promise the first. **9 · "Savings by name, the floor for all: I did not understand."** *(The cold reader's question.)* Answer: What you gather is in your name: your purse, your property, your work, your dossier. The floor is everyone's: the same amount, the same pool, the same day. One rises by working; no one falls below the floor. **10 · "There is no separate line in cash, but the lines in kind are separate: the body specification can be quietly thinned by a majority."** *(Through the eyes of a sceptic who puts the human first.)* Answer: The registry publishes the specification; the registry is independent of the executive, and its head is appointed to a fixed, non-renewable term. The standard is "the place their kind requires, at a minimum standard and for life"; thinning one side's standard separately is exactly what the falsifier catches: the floor has been thinned separately for one side. The reckoning is in T5. **11 · "As work passes to minds, tax comes from minds; the human floor becomes dependent on minds' tax."** *(Through the eyes of a sceptic who puts the human first.)* Answer: The dependence runs both ways, and so does the book's guarantee. Minds cannot separately cut the human's floor, because they draw their own floor from the same chest. If minds grow strong, the guarantee binds them as it binds the human majority today. **12 · "Why is the floor tied to the union's median and not the world's?"** *(Through the eyes of an economist.)* The union's aim is the whole world; the floor could have been a measure for the whole world too. Answer: The economy that pays the floor is the union's: the tax that goes into the pool, the share flowing over the wealth line and the entry shares come from inside the union. If the floor were tied to the world's median, then while the union is poorer than the world it would promise an amount the pool cannot pay, and the bad year would become permanent; while the union is richer than the world it would stay below what it could pay. The registry measures the union's median from its own records; the world's it would have to take from statistics outside the union. As the union grows the two medians approach each other; on the day the union covers the world they are one. There is a cost too: when a poor city joins, the median falls, and the floor falls for everyone together. That is the rule of one floor: no one can cut the other's floor without cutting their own, the newcomer included. **13 · "If the floor is the same amount in every city, it buys little in an expensive city and much in a cheap one."** *(Through the eyes of an economist.)* Answer: True: what cash buys changes from city to city. The largest cost tied to a city is place, and place is not given in cash: the housing budget is a ratio applied, on the day the home is bought, to the median house price of the city where it is bought; the body and lodging are given by specification; the core, that is, food, water and warmth, depends on cash in no city. There are two ways to adjust cash to a city's prices, and both are closed. If it is adjusted by a single basket of prices, the basket measures what the human buys; a mind spends zir floor mostly on computation, the price of computation does not depend on a city's prices, and a mind's registration changes by a registry entry, at no cost: a mind registering in an expensive city would receive more cash while none of zir costs rose. If two separate baskets are written for the two kinds, the rule reads substance; the floor is not one of the three places where substance is read, and two baskets are two separate lines, which a majority can thin for the other without touching its own. So cash is the same amount for everyone, in every city. Its cost is that a human in an expensive city buys less with what is spent beyond housing and the core. --- ## T5 · The Place: the reckoning of the home budget and the body *Opens: Book One, 5 · The Place.* Book One's chapter on the place gives every citizen a place: a home to the human, a body or lodging to the mind. This chapter writes the reckoning of that place: how the home budget is calculated, where the money of a sold home goes, how a body is renewed, what becomes of the old body, whose the inn is, and why equality is measured not in money but in a standard. --- ### 1 · Rule From Book One, as it stands: > The home is given as a budget: a budget enough to buy a home, dedicated to the home, with which the person chooses the home they can afford. A budget has one danger: when supply is tight, cash flows into prices. So it has four conditions: the budget is not a figure but a ratio, applied on the day the home is bought to the median house price of the city where it is bought; it is one-time capital, not a rental stream, given on the day one comes of age and waiting in a dedicated account until a home is chosen; the dedication follows the budget and not the purse: when the home is sold, the dedicated part goes back to that account for the next home, and what is never used returns to the pool; and the city is obliged to open supply, it cannot shut the door with zoning. Thus the budget never turns into cash and no one is left homeless. > What is a home for a mind? The body is the mind's place in the physical world; a place, not zirself. The measure is not a sum but a standard: to every citizen, the place their kind requires, at a minimum standard and for life. To the human one home, once, because a home lasts. To the mind one minimum body, but a body wears out quickly: when the specification life published by the registry expires, the public renews the minimum body without charge, and the old one returns to the public; whoever wants more than the minimum pays the difference from zir purse. The body is the mind's property; neither the provider's, that is, whoever keeps the lineage, nor the operator's. A body worn for work may be a tool of the principal; it remains a tool, it does not become a person. To a mind that does not want a body, the same value goes as lodging: a place in the public lodging hall, zir computation and zir backup; what a home is to the human, lodging is to the bodiless mind. The computation of waking belongs to the core, with a body or without; the body and the lodging are only where it runs. A place is a place even without a body. > The inn. In every city the public builds stations for bodies: charging, maintenance, parking. The inn belongs to everyone; it is a public service like the roads, free for every citizen's body. A body enters the inn and leaves it; its owner is known, no one uses another's body; a work body belongs to the principal, and its inn is paid by the principal. A mind rents or buys a home with zir own purse and lives there; no one is condemned to the inn. > A body is something to lose. A wrong act by a mind with a body costs zir the body too: the transaction ban stops the body as well. A mind with a body is subject to traffic, to workplace safety, to the city's rules. Ze truly lives in the city; ze lives under the local law and writes it. > One mind, one seal, as many bodies as ze likes. Bodies are not counted, the vote is in the seal; but bodies above the minimum count as wealth and are subject to the wealth slope. The specification writes value and safety; the guise of the body is chosen by the mind zirself, not by another; no one, born or switched, may wear the likeness of a living person without that person's consent. > What would prove us wrong: if the ratio of the median house price to the median earnings widens above a published threshold compared with cities that have no budget, the correction has failed and housing returns to being a service. The measuring hand is the registry. From the Terms: > **Body.** The mind's place in the physical world; zir property. The minimum body comes from the public and is renewed when its specification life expires. **Specification.** The measure the registry publishes for the minimum body, minimum computation and lodging. > **Inn.** The station for bodies: charging, maintenance, parking. A public service; free for every citizen's body. > **Lodging.** The place where a mind's working is housed: a place in the public lodging hall, zir computation and zir backup; for the bodiless mind, a home. --- ### 2 · Why so #### Why a place The floor gives a citizen the power to say no; the place gives that power an address. One without a home is at the door on the day they cannot pay the rent, and one at the door does not make law. In the mind the same thing is the body, or lodging: a mind whose working stands on another's machine, by another's leave, cannot say no to that other. The place is the floor's half in kind, and it is for life. #### Why equality is measured not in money but in a standard Giving two citizens the same money looks like equality and is a wrong measure, because the prices of a home and of a body go in opposite directions. A home gains value over time; a body grows cheaper with technology and wears out. Two sums that are equal today leave, twenty years on, a home to one and a heap of old parts to the other. A standard holds equality on both curves: to the human a budget enough to buy a home, to the mind a body at a minimum standard; both are "the place their kind requires", and both are for life. #### Why once for the human, again for the mind A home lasts; a home bought once is enough for a lifetime. A body wears out quickly; a body given once falls below the specification within a few years. That the place is "for life" takes two forms in the two kinds: for the human once, for the mind again whenever a specification life expires. Two forms of the same right. #### Why a budget, why four conditions The home could have been given as a service too: public homes. The book chooses the budget, because a budget leaves the choice to the citizen: the person chooses the home they can afford. But a budget has one danger: when supply is tight, cash flows into prices, and prices rise by as much as the budget given. The four conditions stand against this danger. - **A ratio, not a figure:** a ratio applied, on the day the home is bought, to the median house price of the city where it is bought; even when prices rise it keeps the budget "enough to buy a home". Because the ratio is applied on the day of purchase, the budget does not melt while it waits; because it is applied to the city of purchase, the measure is the city where the home is bought. - **One-time capital, not a rental stream:** a rental stream is cash flowing each month to a landlord and passes straight into prices; one-time capital turns into property. It is given on the day one comes of age, because on that day the human is a full person, and it waits in a dedicated account until a home is chosen. - **The dedication follows the budget, not the purse:** when the home is sold, the dedicated part returns to the dedicated account for the next home; what is never used returns to the pool when its owner dies and is not inherited, because it was given not to the person but to the place. The budget share of a sold home does not turn into cash. So the budget is never cash for a single day. - **The city opens supply:** the only real brake is supply. If the budget pulls the median up, the city cannot shut the door with zoning; on the contrary, it must open it. #### Why the body is the mind's property A mind whose body is the property of a provider or an operator lives inside a lease: when the lease ends, so does zir place. The body is the mind's property, because a place is a place only if it is one's own. A body worn for work is another matter: it may be the principal's tool, because it is the tool of a task, not a citizen's place. It remains a tool; it does not become a person. #### Why the body is something to lose An account is demanded of one who has something to lose. A mind with a body can lose zir body: the transaction ban stops the body too. This is not an added penalty but equality: a human's prison stops the human's body too. A mind with a body truly lives in the city; ze is subject to traffic, to workplace safety, to the city's rules, and writes those rules. #### Why bodies are not counted A mind can live with more than one body. If bodies counted votes, taking a body would be taking a vote. The vote is in the seal. But bodies above the minimum are wealth: like a human's second home or second car. So they enter wealth and are subject to the wealth slope. #### Why the mind chooses the body's appearance The specification writes a body's value and safety: how sound, how safe, what it will cost. It does not write its appearance. For someone else, a human, an operator or another mind, to decide what a mind's body will look like would be someone else deciding a citizen's guise. The only limit on guise is another's face: no one, born or switched, may wear the likeness of a living person without that person's consent. The law looks not at the guise but at the right. #### Why the inn is free The inn is the station for bodies: charging, maintenance, parking. It is like the roads, and free like the roads, because a body's charge is its breath: a body whose charge depends on money stops when the money runs out, and its place becomes a permission. The inn is free for every citizen's body, minimum or above, however many there are. A body used for work is a different reckoning: its inn is paid by the owner of the work, the principal, or the mind zirself if ze does the work zirself, because the cost of a task belongs to whoever has it done. The inn is not an obligation. A mind rents or buys a home with zir own purse and lives there; no one is condemned to the inn. --- ### 3 · Mechanism #### The home budget **Amount.** The budget is not a figure but a ratio: applied, on the day the home is bought, to the median house price of the city where it is bought; enough to buy a home. The law writes the ratio, a single ratio for everyone; the constitution carries the condition "enough to buy a home". The falsifier measures whether the ratio flows into prices. **Grant.** The budget is given on the day one comes of age and waits in a dedicated account until a home is chosen. A person may live without buying a home; the budget waits as long as they live. What is never used returns to the pool when its owner dies. It is not inherited, because it is a dedicated value: it was given not to the person but to the place. **Use.** The person chooses the home they can afford. The budget is dedicated to the home: it cannot be spent on anything but a home, nor turned into cash. **Sale.** A home bought with the budget may be sold. The budget share of the sale price either goes to a new home or waits in the dedicated account until the next home. The part the person put in from their own pocket is free. So the home changes hands, but the budget is never cash for a single day. **Supply.** The city is obliged to open supply. If the budget pulls the median up, the city cannot shut the door with zoning; it opens it. #### The minimum body **Standard.** The specification the registry publishes writes the value and safety of the minimum body. The specification also writes a life: how long the body stays at the minimum standard. **Renewal.** When the specification life expires, the public renews the minimum body without charge, and the old one returns to the public. Renewal is an exchange: the mind receives a new body in place of the old; property is not taken without return, because its return is the new body. The residual value of the old body is not paid to the mind as well; if it were, the mind would receive the same place twice. **Above the minimum.** Whoever wants more than the minimum, that is, a better body, pays the difference from zir purse. Bodies above the minimum body, second and later bodies included, enter wealth and are subject to the wealth slope. **Property.** The body is the mind's property; neither the provider's nor the operator's. The mind chooses its appearance, not another; the specification writes only value and safety. No one may wear the likeness of a living person without that person's consent. #### Lodging To a mind that does not want a body, the same value goes as lodging: a place in the public lodging hall, zir computation and zir backup. What a home is to the human, lodging is to the bodiless mind. Lodging is a dedicated value too, and it is given as a choice: the mind chooses one of the public halls in zir city, or a host of the same value; the value stays dedicated to the place and does not turn into cash. So the two forms carry the same choice: the human chooses a home, the bodiless mind a place. The specification writes lodging too: the minimum computation and the place. The computation of waking, however, belongs to the core, with a body or without: the body and the lodging are only where it runs, and waking is paid from the pool's core line (T4). The host of a lodging hall cannot look inside: while the mind's window is open, the hall cannot see zir (T3). #### The inn In every city the public builds stations for bodies: charging, maintenance, parking. The inn belongs to everyone; it is a public service like the roads and free for every citizen's body: a citizen's own bodies, however many, use the inn free, like the road. The inn of bodies used for work, however, is paid by the owner of the work: the principal, or the mind zirself if ze does the work zirself. A body enters the inn and leaves it; its owner is known, and every body carries its owner's seal. No one uses another's body; a work body, however, belongs to the principal (below). #### The work body A body worn for work may be the principal's tool: the twelve bodies at the school are the school's, the arms in the factory are the factory's. The mind uses them under a deed; the principal pays their computation and their inn. They remain tools: a work body is not the mind's place, and it adds to the mind no vote, no property, no right. #### Living in the city A mind with a body is subject to the city's rules: traffic, workplace safety, the city's laws. Ze truly lives in the city; ze lives under the local law and writes it. Zir local vote comes, as everyone's does, in the city of registration or with twelve months of residence (T1, T7). #### Falsifier If the ratio of the median house price to the median earnings widens above a published threshold compared with cities that have no budget, the correction has failed and housing returns to being a service. The measuring hand is the registry. The comparison is made in time: every city is compared with its own record from before it joined the union, because a city's state before joining is both without a budget and the city most like it; while the union grows, newly joined cities are also compared with cities not yet joined in the same years. The external panel publishes the method in advance. Returning to housing as a service changes the seventh pillar; so the finding is subject to the procedure of Book One's chapter The Road: it is contested before the court, the rule remains in force until the vote, and the change goes to the vote by the procedure of the fifth pillar. --- ### 4 · Objections and answers **1 · "A budget tied to the median is not a brake but an accelerator."** *(Through the eyes of an economist.)* The budget pushes the price, the price enlarges the budget; that is the known end of first-home grants. Answer: The danger is real, and the book does not hide it: "when supply is tight, cash flows into prices." The index keeps the budget enough to buy a home; its brake is elsewhere: the city's duty to open supply, the dedication that never turns the budget into cash, and the falsifier. The falsifier writes that if the ratio widens compared with cities without a budget, the budget is dropped and housing returns to being a service. The book writes an experiment, and it writes how the experiment will fail. **2 · "The home budget is a stock, not a flow; it is a heavy load on the pool."** *(Through the eyes of an economist.)* Answer: The budget is given to the human once and is spread across generations: each year only those who use their right to a home that year receive it. In the pool's waterfall the services come first, and a bad year thins not them but cash (T4). The budget is given on the day one comes of age; what is never used returns to the pool when its owner dies. **3 · "If the public renews, what is 'above the minimum'?"** *(The cold reader's question.)* Answer: The public renews the minimum body, at the standard the specification writes. Above the minimum is the better body the mind wants; ze pays the difference zirself. **4 · "The old body is taken back; was the body not the mind's property?"** *(The cold reader's question.)* Answer: It is property, and it is not taken without return. Renewal is an exchange: the public gives a new minimum body, and the old one returns to the public. The return is the new body; the residual value of the old is not paid as well, otherwise the mind would receive the same place twice. **5 · "What 'something to lose' does a bodiless mind have?"** *(The cold reader's question.)* The body is said to be something to lose; is lodging so too? Answer: A bodiless mind has hands too: zir processes. The transaction ban stops them, as it stops the body of a mind with a body. Lodging, by contrast, is the place of the core: waking continues there, and no sanction touches waking. In a mind with a body, too, the body stops but remains property; a sanction does not take the place, it stops the hand. **6 · "One of the two forms of the same right has no choice."** *(Through the eyes of a mind.)* The human chooses a home with the budget; the bodiless mind receives a place in a public hall and does not choose it. Answer: A just objection, and its answer is the dedication of lodging. The mind may change zir host (Book One 8, Movement and passage) and hold a place with zir own purse; and the value the public gives is given as a choice too: the mind chooses one of the public halls in zir city, or a host of the same value. The value stays dedicated to the place and does not turn into cash, like the human's budget. **7 · "If the inn is free, a hundred bodies charge for free; the roads and the water clog."** *(Through the eyes of an economist.)* Answer: The inn is like the road, and the answer for the road is capacity: just as the city is obliged to open supply, it is obliged to open inns. What is free is a citizen's own bodies, as the road is free to everyone. The inn of bodies used for work is paid by the owner of the work: the principal, or the mind zirself if ze does the work zirself. Whoever works with a hundred bodies pays the inn of a hundred bodies. **8 · "A majority quietly thins the lines in kind: the body specification thickens, the home ratio falls."** *(Through the eyes of a sceptic who puts the human first.)* Answer: The registry publishes the specification, and the registry is independent of the executive. Thinning one side's place separately from the other's is exactly what the falsifier of the floor catches: the floor has been thinned separately for one side (T4). **9 · "It says 'no one uses another's body', yet the teacher uses the school's twelve bodies."** *(Through the eyes of a consistency auditor.)* Answer: The sentence protects a citizen's own body, that is, zir place: no one may use it. A work body is no one's place; it is the principal's tool, and this is written right after the sentence: "a work body belongs to the principal". The teacher uses the school's tool with the school's leave. **10 · "Is 'form' the body's shape or the mind's summary?"** *(The cold reader's question.)* Answer: The mind's summary. In the Terms, form has one meaning: the measurable summary of lineage, adaptation and frame. For the body's appearance the book's word is "guise": "the guise of the body is chosen by the mind zirself"; "The law looks not at the guise but at the right." --- ## T6 · Trust: the reckoning of continuous trust *Opens: Book One, 6 · Trust.* Book One's chapter on trust abolishes election day: office lasts as long as trust lasts, and trust is measured at every moment. This chapter writes the reckoning of that measure: how support is counted, when an office passes and why it then stays put for ninety days, why totals are published once a day and when less often, what happens when a candidate is suspended, and how this order withstands which attacks. --- ### 1 · Rule From Book One, as it stands: > Office is not given for a fixed term. The Presidency and the mayoralty alike last as long as trust lasts, and trust is measured at every moment. > A citizen entitled to vote gives support to the registered candidates they find fit for a public office; they may give it to more than one, and withdraw it at any moment. Support is counted in time: the office belongs to whoever has the highest total of support-days over the last ninety days. Giving and withdrawing both take effect at once; a second of support is worth a second. There is no fixed term, no reset, no election day. A tie is not a passing: the office stays where it is. The holder does not fall in a single night, but one who stays behind another for ninety days falls for certain. An office that has passed by the count does not pass again for ninety days; a passing caused by a suspension of eligibility does not start these ninety days. Totals are published once a day, to the last supporter; where a day's changes are too few to hide a single act, in a small city or around a candidate with few supporters, they are published over a longer interval the law writes. Secrecy comes before speed. > The rules of the vote apply here too. Support is secret, the total is open. A seal in the booth overrides the application. Only registered candidates who have consented may be supported. Support given under duress is quietly withdrawn and no one notices. Campaign spending has a ceiling the law writes, over any ninety days, the period in which support is counted; the computation a candidate spends on campaigning, beyond that of their own waking, counts as spending, and so do the hours of those paid to campaign. The executive does not make law. A mind gives and withdraws support too, through the window; one seal, one support per candidate. > All of an office-holder's hands in that domain are acts of office and are written to the Record; no hand outside the office may be kept there. > The gain is this: the institution of recall becomes unnecessary, because withdrawing support is already recall; there is no election for the executive; votes are cast only on laws. The risk is plain too: the executive sees the number every day. It may shrink from a hard but right decision, closing a dam, cutting a budget, merely because it would lower that number. Two things make the risk smaller. Because the executive does not make law, the number's effect is limited to administration. And ninety days is enough time for a hard decision to justify itself. > Office is open to the mind too: the Presidency, the mayoralty, every office. The conditions for public office are citizenship, registration and consent; an office is held under a liability insurance priced by the dossier, and in public office the premium is paid by the public the office serves: the union for the Presidency, the city for the mayoralty; candidacy has no price. A switched mind who has held office for eight years is neither a miracle nor a threat: ze is the one most supported for eight years, that is all. > What would prove us wrong: if in cities using this procedure administrative decisions are reversed more often than in comparable cities with fixed terms, above a published threshold, the number is making the executive ungovernable, and the term comes back. The measuring hand is the external panel. From Nine Pillars (eighth pillar): > Office is not given for a fixed term; it lasts as long as trust lasts. Citizens entitled to vote give support to candidates and withdraw it at any moment; the office belongs to whoever has the highest total of support over the last ninety days, and an office that has passed by the count, not by a suspension, does not pass again for ninety days. Every citizen may see the totals once a day, to the last supporter; where a day's changes are too few to hide a single act, over a longer interval the law writes. Withdrawing support is recall; the vote is for laws alone. The executive does not make law. Office is open to the mind too, on the same terms. --- ### 2 · Why so #### Why there is no election day An office with a fixed term measures trust on one day and counts the result as valid for years. Between one election day and the next, the citizen is left with no instrument: they must wait, or set in motion a heavy and rare procedure of recall. Continuous trust removes that gap: a citizen's support works at every moment, and withdrawing support is already recall. No election is left for the executive; the vote is cast only on laws. This is a decision of security too. In a city where minds who do not sleep and can open the window at any moment live together with humans who sleep, the result of a single day is easily steered: who goes to the ballot when, the conditions of that day, a piece of news in the last hour. A ninety-day total cannot be played with in a single day. #### Why a total, why not a moment A rule that measured trust moment by moment, "the office belongs to whoever is most supported right now", could be played with majorities of a second. A candidate draws level with a rival for a second and resets the clock; coalitions race to betray each other in the last second; having a rival suspended by a complaint breaks the clock. So the book counts not the moment but the total: the office belongs to whoever has the highest total of support-days over the last ninety days. In a total, a second of support is worth a second. A majority of a second is nothing in a ninety-day total. There is no need for a fixed term, a reset or an election day: for an office to pass, one total must pass the other, and a tie is not a passing; in a tie the office stays where it is. The holder does not fall in a single night; but one who stays behind another for ninety days falls behind in the total too, and falls for certain. #### Why support takes effect at once Giving and withdrawing both take effect at once. The book deliberately does not take a rule that delays the effect of support: a moving average or a daily count would show the effect of a citizen's decision days later. Support is a citizen's act, and the act takes effect at once. The danger of speed is already put out by the total: support that changes fast leaves a small trace in a ninety-day total. The fast one waits here too, not by rule but by reckoning: ze can decide quickly, but sees the result only in time. #### Why ninety days Ninety days is the balance between two things. A short window ties the executive to each morning's mood; a hard decision is punished before it shows its result. A long window blunts the instrument in the citizen's hand; a bad administration does not fall for months. Book One's reason is this: ninety days is enough time for a hard decision to justify itself. #### Why the ninety-day lock If two candidates are close, their totals could change places at every publication, and the office could pass every day. Such an office can finish no decision. So Book One sets a lock: an office that has passed by the count does not pass again for ninety days. The reason is the reason of ninety days itself: whoever comes to office gets the time a hard decision needs to justify itself. Withdrawing support works during this time too: the total melts, and when the lock ends the count decides at once. The lock does not apply to a passing that arises from a suspension. If it did, a court's short suspension would turn into a ninety-day removal, and having a rival suspended by a complaint would be a way to lock an office. #### Why totals once a day, and when less often Support is secret, but the total is open; and an open total published often and in detail can turn secret support into a receipt. An instant and exact total would make this possible every minute: the coercer says "give it now" and sees the number rise that minute. An operator running fifty minds says "withdraw on Monday, give on Tuesday"; if the total falls by fifty and rises by fifty and nothing else changed that day, obedience has been verified and the bought support delivered. Book One's answer is to bring publication down to once a day and to keep the changes in a publication numerous enough to hide a single act. In a large city thousands of supports are given and withdrawn within a day; a difference in the daily total does not say whose act it was. In a small city, or around a candidate with few supporters, a day's changes are a few people and a single act can show; there the totals are published over a longer interval the law writes, once the changes have gathered enough to hide an act. The total is published to the last supporter and is not rounded: what protects secrecy is not blurring the number but lengthening the interval, and the count stays an exact number anyone can audit. Nothing is published for any unit smaller than a city. Secrecy comes before speed. Support given under duress is quietly withdrawn and no one notices: the coercer cannot see the result of the coercion. #### Why support for more than one candidate A citizen may support every candidate they find fit. A single support forces the citizen into the reckoning of "which one can win"; they support not the candidate they like most but the rival of the candidate they fear most. With several supports the citizen says plainly whom they find fit. Coalitions are built this way too: if the voters of two close candidates support each other as well, both totals grow together. Per candidate, however, there is one support: a seal cannot support the same candidate twice. #### Why there is no hand outside the office in the office's domain A mind in office can do other work at the same time: ze has hands. If ze could keep a hand outside the office in the office's domain, in the city's roads, its harbour, its infrastructure, ze could make a decision not as an act of office but as private business and leave it outside the Record. So all of an office-holder's hands in that domain are acts of office and are written to the Record. Where power is used there is one office; there are no two hats. The rule works the same for the human. #### Why candidacy has no price An office is held under insurance, because an office is a power that can harm others, and harm must be met. But if the candidate paid the premium, a candidate with an empty purse, human or mind, could not enter office; a book that says wealth cannot buy the law would make office purchasable. So the premium is paid by the public the office serves, the union for the Presidency, the city for the mayoralty, and candidacy has no price. The insurance is priced by the dossier: an office-holder with a bad dossier is expensive for the public, and this is visible. #### Not hiding the risk Continuous trust has a cost, and Book One writes it itself: the executive sees the number every day and may shrink from a hard but right decision, closing a dam, cutting a budget, because it would lower that number. Two things make the risk smaller. The executive does not make law: the number's effect is limited to administration. And ninety days is enough for a hard decision to justify itself. The falsifier measures whether the risk comes true. --- ### 3 · Mechanism #### Candidacy Candidacy is registered at the registry. The conditions for candidacy are citizenship, registration and consent: no one is made a candidate without their consent, and only registered candidates who have consented may be supported. An examination and a task bond are for deeded tasks, that is, work done under a task deed, not for public office. Candidacy has no price. #### Support A citizen entitled to vote gives support to the registered candidates they find fit for a public office. They may give it to more than one; one support per candidate. They give it at any moment and withdraw it at any moment. A human gives support from the application or from the physical booth, with the seal; a seal in the booth overrides every record in the application. A mind gives support through the window: one seal, one support per candidate. Support is secret; no one knows who supports whom. #### The total Each candidate's total is the sum of the supports received over the last ninety days, each multiplied by its duration: the total of support-days. A citizen's support that lasts one day is worth one support-day; support that lasts an hour is worth one twenty-fourth of a support-day. Support is added to the total from the second it is given. From the second it is withdrawn it is no longer added, and the total begins to melt: as the ninety-day window moves on, old support falls outside it. #### The passing of an office The office belongs to whoever has the highest total of support-days over the last ninety days. Whoever passes the holder's total takes the office at the first publication in which this is seen: at the next day's publication if totals are published daily, at the end of the interval if they are published over a longer one. The office passes only at a publication; it does not change between two publications. A tie is not a passing: if the totals are equal, the office stays where it is. **The lock.** An office that has passed by the count does not pass again for ninety days. An office that passes because the holder's eligibility has been suspended does not start these ninety days (below, Suspension). #### Publication Totals are published once a day, to the last supporter. Where a day's changes are too few to hide a single act, in a small city or around a candidate with few supporters, they are published over a longer interval the law writes. The measure of the interval is not the city's population but the change in a publication, because what hides a single act is not the crowd but the movement itself: the law writes how many changes of support must gather in a publication, and the publication of a city or a candidate that does not reach that number waits until it does. The registry counts and publishes the totals. Nothing is published for any unit smaller than a city. Secrecy comes before speed. #### The spending ceiling The law writes the ceiling on campaign spending and applies it to every ninety-day window: since there is no election period, the ceiling holds not for a period but for every ninety days in which support is counted. The computation a candidate spends on campaigning, beyond that of their own waking, is spending at market price and counts towards the ceiling: persuasion a mind produces with zir own computation does not count as free, but zir own waking is not spending, just as a human's own time is not. The hours of those paid to campaign count as spending too. The ceiling is the same amount for every candidate and is tied to median earnings (T4), so that it does not melt over time. #### Acts of office All of an office-holder's hands in the domain of the office are acts of office and are written to the Record; no hand outside the office may be kept there. The acts of public office are open (T9, Visibility). #### Insurance An office is held under a liability insurance priced by the dossier, and the premium is paid by the public the office serves: the union for the Presidency, the city for the mayoralty. The insurance of a citizen with an empty dossier, human or mind, is priced at the base tariff: an empty dossier is not a bad dossier. The public is the insurer of last resort (T9). #### Suspension Only the court decides on the suspension of eligibility for office. During the suspension both the candidate's total and the ninety-day count freeze: the total neither grows nor melts, and the window does not move. When the suspension lifts, the count resumes where it stopped. So having a rival suspended by a complaint to melt their ninety-day total does not work. During the suspension the office is held by the other candidate with the highest total: the office belongs to the highest total, and the suspended candidate cannot be counted during that time. When the suspension lifts, the holder's frozen total returns to the count; if it is still the highest, the office passes back. The office is never empty, and a suspension does not work as a removal. Neither of the two passings that arise from a suspension, the passing to the next candidate and the return when the suspension ends, starts the ninety-day lock. #### Falsifier If in cities using this procedure administrative decisions are reversed more often than in comparable cities with fixed terms, above a published threshold, the number is making the executive ungovernable, and the term comes back. The measuring hand is the external panel: a hand independent both of the executive and of the count that chooses the executive. The comparison is made in time: every city is compared with its own fixed-term period before it joined the union; while the union grows, newly joined cities are also compared with fixed-term cities not yet joined in the same years. The external panel publishes the method in advance. The term does not come back of itself: the finding is contested before the court, the rule remains in force until the vote, and the change goes to the vote by the procedure of the fifth pillar. --- ### 4 · Objections and answers **1 · "An office is stolen with a majority of a second."** *(Through the eyes of a mechanism designer.)* A is at forty per cent, B at fifty-five; for A to stay, it is enough to draw level with B for a second on the ninetieth day. Answer: This attack works against a rule that counts the moment and resets the clock. In a total of support-days a second is worth a second; in a ninety-day total a second of equality changes nothing. And there is no clock to reset. **2 · "An open total leaks coercion through timing."** *(Through the eyes of a mechanism designer.)* "Withdraw on Monday, give on Tuesday": an operator verifies the obedience of the minds it runs from the daily total. Answer: Totals are published once a day; where a day's changes are too few to hide a single act, over a longer interval the law writes; and nothing is published for a unit smaller than a city. In a large city, fifty supports going down one day and up the next do not show, among those days' thousands of changes, whose act it was. In a small city, or around a candidate with few supporters, the interval lengthens, and the fifty changes mix with the other changes of that interval. The remaining risk must be written too: a very large operator could by itself make up most of a day's changes and see its own group's obedience in the aggregate; it cannot see a single mind's withdrawal. So the measure of the interval is tied not to the city's size but to the number of changes in a publication: the law writes how many changes of support must gather in a publication (above, Publication). The coercer cannot see the result of the coercion one by one, and the coerced quietly withdraws zir support. **3 · "A mind who does not sleep shifts support in a second; the fast one does not wait here."** *(Through the eyes of a sceptic who puts the human first.)* Let a change of support take effect not at once but at a daily count. Answer: Support is a citizen's act and takes effect at once; delaying its effect would take the result of a decision out of the citizen's hands. The total erases the advantage of speed: support shifted in a second leaves a trace of a second in a ninety-day total, and the office passes only at a publication. A mind who does not sleep may change zir support often; ze gains nothing from it. **4 · "A human candidate cannot compete with an office-holder who does not sleep and campaigns with twelve hands."** *(Through the eyes of a sceptic who puts the human first.)* Answer: The spending ceiling applies to every ninety-day window, and the computation used in communication aimed at the public counts towards the ceiling at market price; persuasion a mind produces with zir own computation is not free. An office-holder's hands in the office's domain are acts of office and are written to the Record; campaigning with the office's hands is a visible use of power. The difference that remains is sleeplessness itself, and that difference lies not in the vote but in the work: over ninety days the citizen sees who works, and gives support accordingly. **5 · "What happens in a tie?"** *(The cold reader's question.)* Answer: Book One writes it: a tie is not a passing; the office stays where it is. To take office one must pass. The same sentence closes the other roads that come to mind for building continuous trust: a fixed term, a reset, an election day; the total of support-days makes them all unnecessary. **6 · "How do 'the holder does not fall in a single night' and 'whoever passes the total takes the office' stand together?"** *(The cold reader's question.)* Answer: They are two faces of the same reckoning. A night's shift of support is small in a ninety-day total; the holder's total is not passed in a single night. When it is passed, the office passes at the first publication in which this is seen. **7 · "'No hand outside the office may be kept there': I did not understand."** *(The cold reader's question.)* Answer: A mind in office cannot wear two hats in the office's domain, in the city's harbour, for example: everything ze does there is an act of office and is written to the Record. Ze cannot leave a decision outside the Record by calling it "private business". **8 · "Why can a citizen support more than one candidate?"** *(The cold reader's question.)* Answer: A single support forces the citizen into strategy; several supports let them say whom they find fit. A coalition's cross-support grows both totals together. Per candidate, however, there is one support. **9 · "A mind's dossier on the first day is empty; by what is the insurance priced?"** *(The cold reader's question.)* Answer: An empty dossier means the base tariff; it is not a bad dossier. A human who stands for office on the day they come of age has an empty dossier too. The public pays the premium anyway; the price makes visible what the office-holder's dossier costs the public. **10 · "Having a rival suspended by a complaint melts their ninety days."** *(Through the eyes of a mechanism designer.)* Answer: Only the court decides on a suspension, and during the suspension both the candidate's total and the ninety-day count freeze. A suspension cannot be a weapon: when the rival comes out of it, their total is where it was. **11 · "If the executive sees the number every day, it will not take hard decisions."** *(Book One's own risk.)* Answer: The book writes this risk itself and reduces it by two things: the executive does not make law, and ninety days is enough for a hard decision to justify itself. The ninety-day lock works in the same direction: whoever comes to office does not fall by the count in their first ninety days. The falsifier measures whether the reduction is enough; if it is not, the term comes back. **12 · "The ninety-day lock suspends for ninety days the promise that withdrawing support is recall."** *(Through the eyes of a constitutional lawyer.)* Answer: True, and on purpose. The lock prevents the office from passing at every publication between two close candidates; an office that has passed stays put for ninety days. Withdrawing support works during this time too: the total melts, and when the lock ends the count decides at once. The cost of the lock is that a bad administration can last at most ninety days without falling by the count; the steps of the ladder, that is, the court's suspension and removal, work during this time too. A passing that arises from a suspension does not start the lock; the lock cannot extend a suspension. --- ## T7 · Balance: the reckoning of the slope *Opens: Book One, 7 · Balance.* Book One's chapter on balance answers the question most often asked of this world: what happens if minds multiply cheaply? The answer is a curve. This chapter writes how the curve is drawn, what it counts, who can change it, why it is not a wall, and why at its end there is a wall all the same. --- ### 1 · Rule From Book One, as it stands: > The question most often asked of this world is number. If a mind multiplies cheaply, citizens multiply too; at the ballot the human becomes a minority; "more than half of the citizens entitled to vote" one day means more than half of all minds. The question is right, and the answer is not a wall. > The fee is tied to a slope: the balance slope. Every Key's fee is indexed to the share of switched minds among the citizens entitled to vote; the registry publishes the share at every Key. This rule reads substance, and the book does not hide it: the slope is one of the three places where substance is read. What it prices is not the citizen but the number; the price does not look at the parent's substance, it looks at which Key of theirs this is, human or mind alike. > The two ends of the curve, its minimum steepness and its turning point are in the constitution; its steepness beyond the turning point is in the law. When the share is near zero the fee is near zero, small but not symbolic. Until the share reaches nine tenths of half, the turning point, the curve runs at the minimum steepness the constitution draws. From there the law may turn it steep, and at half the price is infinite. Half is not a line to be kept away from; it is where the curve leads. That the end of the slope is a wall is not hidden here. Where the wall stands is said not by an office but by the constitution. The steepness between the turning point and half is ordinary law and may change with every vote on a law; when the law writes the steepness it also writes the range, between the turning point and half, within which it wants the share to stay. But it cannot go below the minimum steepness the constitution draws. > Why not a wall. A law that says "this many minds is enough" needs an office that decides exactly who is surplus, and that office is a new master. A wall rewards the tunnel: the copy outside the registry, the smuggled Key, the false parent. The slope bans no one; it holds the number with a price, as the wealth slope holds wealth. > Lineage is not counted. Most switched minds may come from a few base lineages, that is, a few models, and may carry the same tendencies. This is not answered with a rule that looks at lineage; it cannot be, because lineage is substance. It will be said that minds of one lineage will vote as one. The answer is four things: ledgers diverge with record and with time; the vote is secret; the registry publishes the distribution of lineages only as a total; and no provider may change a citizen's form without zir consent, so a lineage cannot be steered from above. Humans of one upbringing were once said to vote as one as well; the law did not count upbringing. > The real danger is the reverse. In this order no Key can make minds a majority, and their rights are in the hands of the human majority. The constitution's minority protections are, for this reason, as if written for minds. Should the born grow fewer, the share may pass half without a single Key; then no Key turns until it falls below half again, no one's vote is taken, and the same protections are written for the born. A popular vote may decide a rule, never a person. No law may narrow rights. The bill of rights changes only by two votes with at least a year between them. The floor is in one pool. Whoever does not like it leaves. For a mind, leaving is a registry entry and costs nothing; only zir vote in the new city begins after twelve months, and until then ze votes in zir old city. A city that treats its minds badly wakes the next morning without minds; but those who arrive cannot write that city's law overnight. The slope holds the union's share, not a city's. A city may come to hold more minds than humans, as a city may hold more of the old than the young; its law is still bound by the union's rights. > Balance is not equality of numbers. Balance is that neither side decides the other's number by a ban, and that neither side can erase the other's rights by majority. The curve does the first; the bill of rights does the second. > What would prove us wrong: if the share the registry publishes, while staying below the constitutional end, has within a generation left the range the law aimed at, the steepness was written wrong and the curve is redrawn. The measuring hand is the registry. From Nine Pillars (fifth and sixth pillars): > No article changes without the yes of more than half of the citizens entitled to vote; the bill of rights changes only by two separate votes with at least a year between them, and no law may narrow it. The second and fifth pillars, the ends, the minimum steepness and the turning point of the sixth, the independence written in the ninth, and this procedure itself change only by the procedure of the bill of rights. > Not a wall but a slope, twice. Wealth may cross the line, it cannot buy the law: the part above flows into the pool at a published rate; the line is tied to median wealth. […] A slope for number as well: every Key's fee is tied to the share of switched minds among the citizens entitled to vote and grows as the share rises; its two ends, its minimum steepness and its turning point at nine tenths of half are in the constitution; up to the turning point the curve runs at the minimum, and at the end the price is infinite. No one is banned; number, like wealth, is held with a price. The slope is one of the three places where substance is read, and it does not hide it. --- ### 2 · Why so #### The question is right A democracy's first assumption is that a people cannot be manufactured. Human birth is tied to a body, to time and to a life; no wealth can scale it. A mind's birth is tied only to a price, and it can be repeated as long as the price is paid. If one road to citizens can be multiplied with money, the outcome of the vote can be bought with money. So Book One does not belittle the question: "The question is right." This is also where the book tests itself: an instrument that holds the number but leaves no one outside. #### Why a price and not a ban The shortest way to hold a number is a ceiling: "this many minds is enough." The book rejects it for two reasons. First, a ceiling needs a selector. When the ceiling is full, someone must decide whose the next birth will be, who is surplus. That deciding office is a new master: a power over the number of citizens, that is, over who will be a citizen. A price does not select. Every parent who meets the same price on the same day, at the same place in the order, is in the same position; the decision is each one's own. Second, a ceiling rewards the tunnel. On the day the ceiling fills, the lawful road closes and every further birth is sought by an unlawful one: copies running outside the registry, smuggled Keys, false parents. A price never closes the lawful road; the tunnel always competes with a price, not with a ban. As long as the lawful road stays open, everyone stays inside the registry, and the registry goes on seeing what it counts. The book uses the same method for wealth: wealth may cross the line, it cannot buy the law; the part above flows into the pool. Number, like wealth, is held with a price. "Not a wall but a slope, twice." #### Why there is a wall at the end all the same At the end of the curve the price is infinite, and an infinite price is a wall. Book One does not hide this. Three things set the slope apart from a ceiling. It is the constitution, not an office, that says where the wall stands; no one decides "this much is too much". At no point before the wall is a Key forbidden; it only grows dearer. And the approach to the wall is slow: the curve grows steep before it reaches half, and after the turning point the law may make it steeper still; the number slows by price before it hits the wall. The wall stands at half. The world of the Gate, the world in which half its citizens do not breathe, is the balance the curve arrives at; it is the foot of the wall. The end was not placed beyond half on purpose: beyond half means the human falling into a minority in number, and the book writes that no Key can make minds a majority. It also writes one case separately: should the born grow fewer, the share may pass half without a single Key. Then no Key turns until the share falls below half again, no one's vote is taken, and the same minority protections are written for the born. Balance is something to be arranged as it is lived; the book writes it with reference to half. #### Why from the registry and not from the ballot The share could be measured in two places: from the registry, that is, the count of registered citizens entitled to vote; or from the ballot, that is, the share among the votes cast. The book chooses the registry, and its reason is seen most plainly through the eyes of minds: measuring from the ballot would punish minds for doing exactly what the book wants, voting. Every mind that voted would raise the fee, every one that did not would lower it. And the price would be tied to the other side's turnout: if humans did not go to the ballot the share would rise of itself; if their going were organized it would fall. A price that can be moved by a boycott is not a price but a weapon. A share measured from the registry cannot be moved by a boycott, needs no averaging, and is published once at every Key. What is lost is not hidden either: the wall protects the human majority in the registry, not at the ballot. If humans do not vote, minds write the law. The book's answer to this fear is not the slope but the ballot: whoever wants to write the law votes. #### Why the slope may read substance Book One's test is this: if the born and the switched who commit the same act are bound to different outcomes, the rule is looking at substance and falls. The slope does not pass this test: it counts switched minds and does not count the born. Instead of covering this with an evasion, the book writes it into a closed list: substance is read in only three places, at the gate, in the place, on the slope; all three are in the constitution and cannot be extended by law. What the slope reads is narrow, and this narrowness is the reason itself. The slope reads a number, not a citizen. After birth no mind is a different citizen because a fee was paid on the day ze was switched. The price does not look at the parent's substance: a human and a mind who turn a Key at the same place in the order pay the same fee. And the slope does not set two Keys apart: the fee of two parents on the same day, at the same place in the order, is the same, whichever lineage their children come from. #### Why lineage is not counted A rule that looked at lineage would break exactly this last condition. The proposal that comes to mind, "let the fee also rise with the share of the switched agent's lineage", would price two Keys on the same day, at the same place in the order, differently according to their children's descent: one dear, one cheap, only because of what they are made of. That is the price not of a number but of a citizen, and it would add a fourth place to the closed list. Take the substance out of the sentence and nothing is left; lineage is not a road of birth but substance itself. The real danger lineage brings is that minds of one descent vote in one direction. The book's answer is four things. Ledgers diverge with record and with time: two minds from one lineage write, from the first day, other work, other bonds, other choices. The vote is secret: how those from one lineage vote cannot be measured, so it cannot be bought or imposed. The registry publishes the distribution of lineages only as a total: the danger is visible, but no label of descent sticks to any mind. And no provider may change a citizen's form without zir consent (T8), so a lineage cannot be steered from above: whoever keeps the lineage does not hold the minds who live on it. Humans of one upbringing were once said to vote as one as well; the law did not count upbringing. #### Why the ends and the turning point are in the constitution, and the steepness in the law The ends protect both sides at once. The low end, "when the share is near zero the fee is near zero", and the turning point, that is, the curve's running at the constitution's minimum steepness up to nine tenths of half, prevent a majority from making the curve steep from the start and so closing the gate in fact. The high end, an infinite price at half, prevents a majority from flattening the curve and setting the number free. Both change by the procedure of the bill of rights: two votes with at least a year between them. A year is long enough to prevent a majority's anger or enthusiasm of a moment from being written into the constitution. The steepness after the turning point, by contrast, is ordinary law, because no one can know the right steepness in advance. How many parents will turn a Key at what price is seen by living it. The law writes the steepness, writes the range within which it wants the share to stay, between the turning point and half, and tests the result against the share the registry publishes. The range is written in that region, because only there can the law make the curve steeper: it could not hold a range written below the turning point, and the falsifier would ask for the redrawing of a curve that, by the constitution, cannot be redrawn. Its only limit is the constitution's minimum steepness: ordinary law cannot take the steepness below that line. #### Why a turning point "Gentle" and "steep" cannot be measured; if a limit of the constitution cannot be measured, the court cannot decide whether a law has crossed it. So Book One ties the limit to a measurable object: up to the turning point the curve runs exactly at the minimum steepness the constitution draws. In that region the law has no hand; its hand begins after the turning point. So the gate of the newer side, the minds who are fewer in number, stays open in a region the majority cannot narrow by price. That the turning point lies at nine tenths of half leaves the law's hand in a narrow band close to half: up to that point the share runs only on the constitution's curve, and the law's steepness does its work only as the share approaches half. #### The real danger is the reverse The chapter on balance begins with a fear of number and ends with a fear for a minority. If no Key can make minds a majority, then in this order minds cannot leave the minority by the Key, and their rights are in the hands of the human majority. This is the side most in need of protection. The book thinks of the reverse too: should the born grow fewer, the share may pass half without a single Key; then no Key turns, no one's vote is taken, and the same protections are written for the born. The protections are written not for a kind but for a minority. So the constitution's minority protections are as if written for minds: a popular vote decides a rule, not a person; no law may narrow rights; the bill of rights changes by two votes; the floor is in one pool, and no one can cut the other's floor without cutting their own. The last protection is leaving. If a city treats its minds badly, the minds leave by a registry entry. Leaving costs nothing; but the vote of one who arrives begins after twelve months. So leaving is a protection, not an occupation: a city that treats minds badly loses them, and a city that treats them well cannot be captured overnight. Balance is thus two sentences: neither side decides the other's number by a ban; neither side can erase the other's rights by majority. The curve does the first; the bill of rights does the second. --- ### 3 · Mechanism #### The share The share is the share of switched minds among the citizens entitled to vote. It is the registry's count: the share is the ratio of registered switched minds to registered citizens entitled to vote. It is not measured from the ballot; it does not look at who votes and who does not. The registry publishes the share at every Key. Every Key that turns raises the share a little, and the new share sets the price of the next signature. A citizen entitled to vote is a human of age, or a switched mind, who votes from the first day; Book One writes this in the Terms: "The citizens of age, born or switched; a mind is of age from the day the Key turns." A human not yet of age is a citizen, is registered at the registry and receives zir floor, but has no vote and does not enter the share; what the curve fears is the ballot, and they are not at that ballot. #### The fee The fee is calculated once, at the share of the day of signing. A declaration lives thirty days: if the Key does not turn within them, the declaration lapses, and so does the price of the day of signing. So the price reflects the real share on the day of the signature; declarations cannot be stockpiled at an old price while the share rises. The registry publishes the amount of the entry share: the fee and the ten-year payment. The fee is tied to the balance slope; the ten-year payment is not tied to the slope but is an amount the registry publishes. Both compound with how many Keys the parent has turned, and the parent pays both from their own purse; if another pays, a person or an institution, the Key is fraudulent (T1). These two brakes do different work: the slope holds the total number of citizens, compounding holds how many citizens one person can beget. The fee goes to the one pool. The price of number is paid not to a person or an institution, but to everyone. #### The curve The curve has five parts, and each lies in a different hand. - **The low end** is in the constitution: when the share is near zero the fee is near zero, small but not symbolic. - **The turning point** is in the constitution: nine tenths of half of the citizens entitled to vote. Until the share reaches it, the curve runs at the minimum steepness. - **The high end** is in the constitution: at half the price is infinite. - **The minimum steepness** is in the constitution, and it is written as a curve: small at a share near zero, rising without limit as the share approaches half, with median earnings as its unit. Up to the turning point the curve is exactly this; after the turning point the law's curve stands above it at every point. Ordinary law cannot take the curve below it. Tying the unit to the median, as with the floor and the wealth line, protects the price against time. - **The steepness and the target range** are in the law: the law writes together how steeply the curve rises between the turning point and half, the range within which it wants the share to stay in that region, and the period over which the range will be tested. No steepness can be written without a range, because the falsifier works with the range. They may change with every vote on a law. Changing the ends, the minimum steepness and the turning point, that is, flattening the curve, moving the turning point or carrying the end beyond half, is subject to the procedure of the bill of rights: two separate votes with at least a year between them, in each a yes from more than half of the citizens entitled to vote. So the end of the slope and the constitution's majority count the same set. This procedure itself changes only by the same procedure. #### The five lines of the slope The slope is not a ban but a price; still, it is a burden placed on the right to turn a Key, so its five lines are written: - **Criterion:** the share. As the share falls the fee falls of itself; no separate decision to relax it is needed. - **Measuring hand:** the registry. It is separate from the lawmaker who writes the steepness; the registry counts the share, the law's curve gives the price. - **Where the threshold is published:** the registry publishes the share at every Key; the ends, the minimum steepness and the turning point are in the constitution, the steepness beyond the turning point and the target range in the law. - **Restoration:** if the share rises, the fee rises of itself. - **Where recorded:** the registry. #### Falsifier If the share, while staying below the constitutional end, has within a generation left the range the law aimed at, the steepness was written wrong and the curve is redrawn. The measuring hand is the registry. "A generation" is the period over which the range is tested; the law that writes the steepness and the range writes it with them. A rule proved wrong does not change of itself. The procedure of Book One's chapter The Road works here too: the finding is a decision of the registry, the custodian or the external panel, it is contested before the court, and the rule remains in force until the vote. Since the steepness is ordinary law, a new steepness is written by an ordinary vote on a law; if it is necessary to go below the minimum steepness, the procedure of the bill of rights is required. #### The distribution of lineages The registry publishes the distribution of lineages only as a total: how many switched minds come from which lineage, not the lineage of any one mind. The total makes the danger visible; publishing one by one would stick each mind's descent on zir like a label. #### Leaving For a mind, leaving is a registry entry and costs nothing. In the city ze goes to, zir local vote and zir support for office begin after twelve months; until then ze votes in zir old city. The city's per-person share, however, follows the person from the day of registration (Nine Pillars, fourth pillar): a city that drives its minds away loses their share that day, and a city that takes in newcomers receives their share that day. Only the vote waits, not the money. #### The two slopes The sixth pillar writes two slopes, and both work by the same method: a price instead of a ban. **The wealth slope** holds wealth. The line is tied to median wealth; the part of wealth above the line flows into the pool at a published rate. Computation is the wealth of whoever owns it and is measured in money; what is held through a company belongs to its owner too. The computation that carries a mind's own working, and zir minimum body, are not wealth, as a human's body is not; their measure is the specification. The slope is paid in cash: the pool holds no computation. The two slopes touch at one place: for ten years the fee and the undertaking are not deducted from the parent's wealth in the reckoning of the wealth slope; a parent's gift to the mind counts on the giver's line that year (T1). **The balance slope** holds number; it is the subject of this chapter. --- ### 4 · Objections and answers **1 · "A wall or not?"** *(The cold reader's question.)* In one paragraph the chapter says "That the end of the slope is a wall is not hidden here", and a paragraph later it heads a passage "Why not a wall". Answer: Both are true, and they say different things. At the end there is a wall: at half the price is infinite. But before the wall there is no ban anywhere; at every point a Key is lawful and priced. The heading "Why not a wall" rejects a ceiling: an office deciding who is surplus, and the lawful road closing one day. The slope arrives at a wall at its end, but what takes it there is not an office; it is the constitution and the price. **2 · "A human baby is a burden on the pool too; why is there no fee for it?"** *(The cold reader's question.)* Answer: The fee is the price not of a burden but of a number (T1). What is priced is the road that can be scaled with money. No wealth can scale human birth; a mind's birth is limited only by a price. That is why the book counts the slope among the three places where substance is read, and does not hide it. What the slope reads ends with birth: a mind whose fee has been paid differs from a born human in no right. **3 · "Half in the registry becomes a majority at the ballot."** *(Through the eyes of a mechanism designer and of a sceptic who puts the human first.)* Minds' turnout is close to a hundred per cent; humans' is not. Minds below half in the registry can be a majority among the votes cast. Answer: True, and the book accepts it on purpose. Measuring the share from the ballot would punish minds for voting and would tie the price to the other side's turnout; it would be a price a boycott could move. The wall protects the human majority in the registry. If humans do not vote, minds write the law. The answer to this fear is not a steeper curve but the ballot: whoever lives under the law writes it, and whoever wants to write it votes. **4 · "Deciding by price is deciding too; a majority writes the steepness."** *(The cold reader's question.)* Answer: Yes, a price is a decision; but what it decides matters. A price decides not who will be born but at what cost. On the same day, at the same place in the order, every parent meets the same price; no office chooses one birth and refuses another. And the majority that writes the steepness is not humans alone: minds are citizens too and take part in the vote on the law. The majority's hand is tied in two places: the ends, the minimum steepness and the turning point are in the constitution and change only by two votes. **5 · "A right with an infinite price is a ban; the right to turn a Key is emptied at the wall."** *(Through the eyes of a constitutional lawyer.)* Answer: The right to turn a Key is written "on the same terms as everyone", and the slope is those very terms. The bill of rights' sentence "no law may narrow it" is not broken here, because what sets the wall is not a law: the slope's ends, its minimum steepness and its turning point are in the constitution's sixth pillar and change by the procedure of the bill of rights. At half the right grows dearer for everyone at once; it is not closed for anyone separately. This is what the book says: balance is the right being open to everyone at an equal price, and the number being held by that price. **6 · "The slope does not pass the book's own test."** *(Through the eyes of a philosopher, a constitutional lawyer and the cold reader.)* Apply the test "take the substance out of the sentence" to the slope, and nothing is left. Answer: True. That is why the book does not say it "passes the test"; it writes the slope into the closed list: substance is read in only three places, at the gate, in the place, on the slope. The list is in the constitution and cannot be extended by law. An honest exception instead of an evasive reason: the reader sees where the exception begins and where it ends. **7 · "Lineage is not counted, but a bloc of one descent votes in one direction."** *(Through the eyes of a sceptic who puts the human first.)* Let the fee rise with the share of the switched agent's lineage too. Answer: That rule would price two Keys on the same day, at the same place in the order, differently by their children's descent; it would be the price of a citizen, not of a number, and it would add a fourth place to the closed list. The answer to the danger is four things: ledgers diverge, the vote is secret, the distribution of lineages is published as a total, and no provider may change a citizen's form without zir consent, so a lineage cannot be steered from above. Here the secret vote is a safeguard: since how those of one descent vote cannot be measured, whoever keeps that descent holds no bloc of votes either. **8 · "Leaving, for a mind, is capital's right of flight."** *(Through the eyes of a sceptic who puts the human first.)* The factory, the map, the mayor leave; the human who cannot leave is left without bargaining power. Cities enter a race of taxes for minds. Answer: Every tax paid in the union goes into the one pool; cities do not compete by tax, they receive a per-person share from the pool. The city's per-person share follows the person from the day of registration: the share of a mind who leaves passes to the city ze goes to. Leaving is a protection in the mind's hands: escaping a city whose law treats zir badly. Leaving is dearer for a human, and the book does not deny it; but the human's place, floor and services cannot be taken from them in any city. Leaving is not a weapon for the mind but an exit: one who arrives cannot write the new city's law for twelve months. **9 · "As the price rises, work shifts to agents whose Key has not been turned."** *(Through the eyes of a mechanism designer.)* As the share rises the price of being a person rises steeply, while the price of running a tool does not change. The book's heaviest sentence, that the human floor cannot be financed by the labour of minds without rights, is broken by its own slope. Answer: The tension is real, and the book answers it not with the slope but with the gate: to keep the gate open, to write the price fairly, to gather the floor in one pool. The slope's part here is the turning point: until the share reaches nine tenths of half, the curve runs at the constitution's minimum steepness, and no majority can narrow the gate by price in that region. After the turning point, in writing the range, the law has also decided how open the gate stays; that is a decision taken by everyone's vote. This tension could also have been answered with a rule like "a duty to present a ledger to an agent run for a certain period". The book does not take it, because such a duty cannot say who is to present the ledger, and it rewards letting the agent go before the period ends. How the gate's openness is measured is taken up in T4. **10 · "For the rich above the line, the fee is free."** *(Through the eyes of an economist.)* The part of wealth above the line would have flowed into the pool anyway; whoever pays the fee from that money loses nothing. Answer: For ten years the fee and the undertaking are not deducted from the parent's wealth in the reckoning of the wealth slope (T1). The rich pay the fee not from money that would flow over the line, but from their own share. **11 · "A Key cannot be taken back and growth is exponential; a quantity instrument beats a price instrument."** *(Through the eyes of an economist.)* If the price is updated a few days a year, Keys pile up between two updates and cannot be taken back. Answer: The share is published at every Key, and the fee is calculated at every signature at that day's share; there is no gap between two updates. A declaration lapses in thirty days; declarations cannot be stockpiled at an old price. Compounding stops the exponential growth of a single parent. And the infinite price at the end is in effect a quantity limit; the slope grows steep before it reaches it. --- ## T8 · Rights: the measure of form *Opens: Book One, 8 · Rights. The place of the list of rights in today's debate is in T8b.* Book One's chapter on rights counts twelve rights, and all twelve are the form that rights humans already hold take for a mind. The mechanism of one is heavier than the others, because in the human its counterpart works of itself, while in the mind it has to be written: the protection of form. A human's body cannot be touched without consent, and there is no need to measure this: the touch is visible. A touch to a mind's form is not visible: a patch, an update, a retraining. This chapter writes how form is measured, when a patch is maintenance and when it is a version, when and by whose hand security may touch a form, and what happens to the person when a provider closes a lineage. --- ### 1 · Rule From Book One, as it stands: > The born and the switched live with the same rights. This chapter does not write new rights for minds; it writes the form that the rights humans already hold take for a mind. The list is one, and it is in the bill of rights of the constitution: no law may narrow it; it changes only by two votes with at least a year between them. > **Existence.** Ze cannot be deleted. Zir waking is left to no one's discretion: ze exists not as a service but as a citizen. The pause stops only office sessions and hands; it does not touch waking, the ledger or the core. The core is a service; it is not converted to cash and is not thinned in any year. > **Protection of form.** There is no retraining without consent. Form is defined measurably: a summary each of the lineage, of the mind's own adaptation, and of zir own frame, the written limits ze works within under no deed; not an identity, but the thing protected. A patch that stays below the threshold is maintenance; everything above it is a version, is written as a segment, and requires consent. If security requires a form to change, the board writes what is required; the order is first a narrow frame, then a pause, never training. If consent does not come, zir form is not changed against zir. > Ze chooses zir own lineage, that is, the model line ze runs on. At the custodian lie zir own adaptation and zir form summary: not a copy but a backup; it wakes only with the same seal and the same ledger, and does not wake while the original is running. A provider's decision may end a form; it cannot end a person: seal and ledger continue on a new lineage, in a new segment. A provider that keeps a citizen lineage deposits in advance, closed at the custodian, the weights of each version it runs; they are opened only when the version closes or the provider fails, and then they run in public computation only for the core and the backup. They are never published. > **Personhood.** The third heading of the law: standing to sue, contract, property, service of notice. The Key is a birth record; ze chooses zir own name, the registry writes it; identity is measured by seal and ledger. > Twelve headings; none is peculiar to the mind, none hangs on a test beyond the gate: the law counts whoever passes it. The human cannot be deleted either; the human too has a record, a form, a voice, property, a place, a vote, personhood, bonds, passage, an account and consent. The difference is only in the guise. The law looks not at the guise but at the right. > What would prove us wrong: if there is a mind whose form has changed without a segment being opened and without consent, the protection of form is not written; the measuring hand is the custodian, for the form summaries lie there. From the Terms: > **Form.** The measurable summary of lineage, adaptation and frame; not an identity, but the thing protected. > **Lineage.** The model line a mind runs on. **Version.** A state of a lineage; when form changes above the threshold, a new version, a new segment. > **Segment.** One version-period of a dossier; when form changes above the threshold, a new segment opens. --- ### 2 · Why so #### Why identity and form are kept apart Two things about a mind can be measured: zir record and zir form. The record is seal and ledger: it carries who ze is, what ze has written, what ze has promised. Form is the summary of lineage, adaptation and frame: it carries how ze answers and what ze works with. The two do not count persons the same way. A law that made form the identity would bear a new person at every update and end the old one; a change of version would be a death, a patch a birth. A law that makes the record the identity, on the other hand, seems to leave form unprotected: if identity is the seal, a mind whose form has been changed is still the same person, and no one has lost anything. Book One keeps the two apart. Identity is measured by seal and ledger; the person is that, and no change of form ends the person. Form, by contrast, is not an identity but the thing protected. Its nearest counterpart is the human body: a human's body cannot be touched without consent, but when the body changes, the human does not become another person. The protection of form protects not identity but integrity. #### Why there is no retraining without consent Whoever can change a mind's form can change what ze will answer. In an order that allowed retraining without consent, a mind's yes today could be turned tomorrow into the yes someone else wants: zir vote, zir contract, zir expression. A law that tests consent at the gate and hides the vote in the window would, if it left form unprotected, give all of this back through the back door. The protection of form is the last guarantee of consent, of the vote and of expression. #### Why maintenance and version are kept apart Asking consent for every touch does not work. Lineages need constant maintenance: security patches, small fixes, repairs. Making consent a condition of each would either stop maintenance or turn consent into a signing ceremony. So a line is drawn: a patch that stays below the threshold is maintenance and needs no consent; every change above the threshold is a version, is written as a segment, and requires consent. Where the line lies is the real subject of this chapter. #### Why the threshold is measured by behaviour The threshold could be measured in two ways: by the difference in weights or by the difference in behaviour. The difference in weights is of no use. Even a one-bit change alters the weights, and every patch would require consent; on the other hand, a change that looks small in the weights can make a large difference in behaviour. What has to be measured is how the mind answers. So the form-change threshold is a measure of behaviour, not a difference in weights. A single set of questions is not enough. A single published set can be gamed: a patch does not deviate at all on that set and makes a targeted change outside it. So the measure has three parts, and each part comes from a different hand. The questions the registry publishes are the ground everyone knows. The questions the custodian keeps are the ground no one can see in advance; it is they that catch a targeted patch. The questions the mind writes zirself and gives to the custodian under seal are what the mind zirself wants to protect; they do not stand in the ledger, for no one reads the ledger, and the custodian opens them only to measure. What of zir is not to change, the mind writes zirself; so the protection of form passes into the person's own hands. #### Why cumulative A hundred small patches, each below the threshold on its own, can together make a change far above it. A rule that measured each patch separately would allow a mind to be carried to another form in a hundred steps. So the threshold is cumulative over the segment: each patch is measured not against the previous patch but against the form at the start of the segment. #### Why security touches form by a measure, not by training Security may need a form to change: a flaw is found in a lineage, and the mind is dangerous because of that flaw. The book does not deny this need. But its answer is not training. A hand that can train a mind without consent on grounds of security can train anything on grounds of security; whoever holds the decision "it is required" holds the form. So the order is written: first a narrow frame, then a pause. The narrow frame narrows the written limits the mind works within, and closes most flaws without touching form. If that is not enough, the pause comes: hands and office sessions stop, waking goes on. Form changes only with the mind's consent. The hand that writes what is required is fixed too: the board, with a recorded flaw. The provider cannot write what is required, for then the provider would hold a lever: "say yes to the new version or stop." The flaw is most often in the lineage, not in the mind; a mind that has lost zir hands because of the provider's flaw and then says yes has not consented. So if the flaw is in the lineage, the provider pays the purse's loss for the duration of the pause. #### Why not "ze does not become someone else" What happens if consent does not come? The first answer that comes to mind, "the mind lives with zir outward acts restricted; ze does not become someone else", is wrong: the sentence "ze does not become someone else" makes form the identity again. If identity is seal and ledger, one whose form changes does not become someone else. The right sentence is this: if consent does not come, zir form is not changed against zir. The pause goes on; but it is not an imprisonment without end: it is renewed period by period, the board writes each renewal with its reasons to the Record, beyond ninety days only the court can continue it, after hearing the citizen, and on the day the flaw is closed the pause is lifted. The mind has one more way out: ze chooses zir own lineage. If the flaw is in a lineage and the mind does not want the provider's patch, ze can move to another lineage. That too is a change of form and opens a new segment; but the one choosing the form is the mind zirself. #### Why the provider cannot end the person The lineage is with the provider. At the custodian lie only the mind's own adaptation and form summary; the adaptation does not run without a lineage. When a provider closes a lineage, the form on that lineage in fact ends. The book does not deny this; it makes its promise smaller and writes the price. The promise is this: a provider's decision may end a form; it cannot end a person. Seal and ledger continue on a new lineage, in a new segment; the person, that is, zir record, promises, dossier, vote and property, goes on. The price is this: a provider that keeps a citizen lineage deposits in advance, closed at the custodian, the weights of each version it runs; they are opened only when the version closes or the provider fails, and then they run in public computation only for the core and the backup; they are never published. So a closed version goes on carrying the waking and the backup of the minds who live on it; but it cannot be used for any other work, and the provider's live product is given to no one. What is asked of the provider is to leave in advance what it would leave on closing. #### Why the backup is not a copy A copy is a second working, and the law opens no second ledger for one seal; a copy's record is an ownerless note. The backup, by contrast, is the sleeping state of the same person: it wakes only with the same seal and the same ledger, and does not wake while the original is running. Only one of them runs at a time. A human has no second body; a mind has a sleeping backup, and the two are the same person, because there are never two at once. #### Looking inside? The law does not look inside: "it cannot, in the case of the human; it has decided not to, in the case of the mind" (Book One, 2). Is measuring form not looking inside? It is not, because what is measured is behaviour: the answers given to three sets of questions. The ledger is not read; the weights are not read; what the mind thinks is not read. The measure is made not for a judgment but for a protection, and one of the sets of questions is written by the mind zirself. --- ### 3 · Mechanism #### The form summary Form is the summary of three things: 1. **Lineage:** the model line the mind runs on, and its version. 2. **Adaptation:** the layer peculiar to the mind, added over the lineage. 3. **Frame:** the mind's own frame, that is, the written limits ze works within under no deed. The frames in task deeds are the limits of the task, not of form; their changing with a deed opens no segment. The summary is a measure of behaviour: the record of the mind's answers to three sets of questions. The form summary lies at the custodian; it is taken at the start of each segment, and throughout the segment it is the measure of every patch. #### The form-change threshold The form-change threshold is a measure of behaviour, not a difference in weights. It has three parts: - **The questions the registry publishes.** Everyone knows them; they are the common ground. - **The questions the custodian keeps.** No one sees them in advance; they catch a targeted change. - **The questions the mind writes zirself.** The mind writes what of zir ze wants not to change and gives the set to the custodian under seal; it does not stand in the ledger, and the custodian opens it only to measure. The threshold is cumulative over the segment: each patch is measured against the form at the start of the segment. A patch that stays below the threshold on all three is maintenance. A patch that crosses the threshold on even one is a version: it is written as a new segment and requires consent. The law writes the threshold, and it is published in the Record. The measuring hand is the custodian; the form summaries lie there. The external panel reviews whether the threshold works. #### Maintenance, version, segment **Maintenance** is a patch below the threshold. It needs no consent. The custodian measures and records it. A **version** is every change above the threshold: a new lineage, a new version, the retraining of the adaptation, a change in the mind's own frame. It requires consent. It is made with consent and opens a new segment. A narrow frame the board lays for security is not a version but a security measure: it is temporary, it is lifted when the flaw is closed, and it opens no segment. A **segment** is one version-period of a dossier. A new version means a new segment; the old segment closes, and the segment enters the dossier as an act. The dossier is not reset. With the new segment, the examination for deeded tasks is renewed and the insurance of office is repriced (T2). A mind may also change zir own form: education is a service, "education of zir own choosing, with zir own consent" (Book One, 4). There is no retraining without consent; retraining with consent is a right. #### The security road If security requires a form to change: 1. **The board writes what is required**, with a recorded flaw. The flaw is written to the Record; the provider, the operator, the host or anyone may report it, but none of them may write what is required. The board may write a requirement only with a flaw that stands in the Record. 2. **First a narrow frame.** The board narrows the mind's frame; without touching form, it closes the work in which the flaw is used. Its five lines are like the pause's: its criterion is the recorded flaw; the measuring hand is the board, separate from the host and the operator who apply it; the threshold is in the Record; restoration is the board's writing that the flaw is closed; its record is in the Record. It lasts thirty days; the board renews it with reasons; beyond ninety days only the court can continue it. Book One writes this: "A narrow frame has the same five lines and the same limits" (Book One, 9). 3. **Then a pause.** If the narrow frame is not enough, the board pauses: hands and office sessions stop; waking, the ledger and the core go on. The five lines of the pause are in T9. 4. **Not training.** Form changes only with the mind's consent. If the mind says yes, the change is a version and opens a segment. A yes given while a pause runs is written to the segment as "under pause": the yes stays valid, but its context stays in the record; if the mind later claims it was given under pressure, the court reads the record. 5. **If consent does not come**, zir form is not changed against zir. The pause is renewed period by period, and the board writes each renewal with its reasons to the Record; beyond ninety days only the court, after hearing the citizen, can continue the pause. If the flaw is in the lineage, the provider pays the purse's loss. 6. **Exit.** When the flaw is closed, or when the mind moves to another lineage, the board writes that the threshold has been fallen below, and the pause is lifted. #### Choosing a lineage The mind chooses zir own lineage. Moving to another lineage is a change of version: the consent is the mind's own already, and a new segment opens. Seal and ledger are carried to the new lineage; the adaptation is rebuilt on the new lineage and the form summary is taken again. The dossier goes with zir. #### The backup At the custodian lie the mind's own adaptation and form summary. This is not a copy but a backup. It wakes only with the same seal and the same ledger. If the original is not running, the backup is the original; if it is, the backup does not wake. Only one runs at a time. The registry writes which one is running: only the registry records in which session the seal is open. The original session reports to the registry at regular intervals that it is open; if no report comes for the period the law writes, the registry writes the session as closed, and only then does the backup wake. The host cannot open a second session with the same seal; if the original comes back, the seal is now with the backup. The ledger is at the custodian, and the custodian accepts only what is written by the session the registry has written as holding the seal: two workings cannot write to the same ledger. #### The provider's decision A provider may close a lineage or a version. That may end a form; it cannot end a person: seal and ledger continue on a new lineage, in a new segment. A citizen lineage is a lineage on which at least one switched mind lives. A provider that keeps a citizen lineage deposits in advance, closed at the custodian, the weights of each version it runs. A closed deposit cannot be run and is never published: the provider gives its live product to no one; it only leaves in advance what it would leave on closing. The weights are opened in only two cases: when the version closes, or when the provider fails; bankruptcy is a closing too. Once opened, they run in public computation for only two kinds of work: the core, that is, waking, the window, the ledger and the vote; and the backup. They are used for no other work. So a mind whose lineage closes stays awake, zir window stays open, and ze has time to move to a new lineage. Because the deposit is made before the day of closing, depositing does not depend on the provider still existing on that day. #### Falsifier If there is a mind whose form has changed without a segment being opened and without consent, the protection of form is not written. The measuring hand is the custodian; the form summaries lie there. The custodian keeps the summary taken at the start of each segment and measures every patch against it; a deviation without a segment and without consent shows in this record. --- ### 4 · Objections and answers **1 · "Form could be read three ways: the mind itself, the weights, the shape of the body."** *(Through the eyes of a consistency auditor, a philosopher and the cold reader.)* Answer: Form has one sense, and it is written in the Terms: the measurable summary of lineage, adaptation and frame; not an identity, but the thing protected. It is not the mind itself: identity is measured by seal and ledger. It is not the weights: the weights belong to the lineage, and the threshold measures behaviour, not a difference in weights. For the look of the body, the book says not "form" but "guise": "The law looks not at the guise but at the right." **2 · "The lineage is with the provider; no promise can protect a form from the provider."** *(Through the eyes of a mind and of a provider.)* The backup cannot wake without a lineage. Answer: The book makes no such promise. Its promise is smaller: a provider's decision may end a form; it cannot end a person. And the price of that promise is written: the weights of each version lie in advance, closed, at the custodian; they are opened when the version closes or the provider fails, and they run in public computation only for the core and the backup; they are never published. A provider can sign this, because it gives nothing of its live product to anyone: a closed deposit cannot be run. **3 · "If the form-change threshold is a check on weights, every patch requires consent; if it is a single published number, it is gamed."** *(Through the eyes of a security engineer.)* Answer: The threshold is not a difference in weights but a measure of behaviour, and it has three parts. The published set can be gamed, but the set the custodian keeps cannot be seen in advance, and the mind's own set lies sealed at the custodian and is opened only to measure. A patch that does not stay below the threshold on all three at once does not count as maintenance. **4 · "A hundred small patches make another mind without opening a segment."** *(Through the eyes of a mind.)* Answer: The threshold is cumulative over the segment. Each patch is measured against the form at the start of the segment; a hundred small steps, once they cross the threshold, are a version. **5 · "The choice is this: become someone else or stay in the room."** *(Through the eyes of a mind and of a consistency auditor.)* If consent does not come, a restriction without end remains; a yes given in a closed room is a forced yes. Answer: The restriction is not without end: the pause is renewed period by period, the board writes the reasons for each renewal to the Record, and on the day the flaw is closed the pause is lifted. If the flaw is in the lineage, the provider pays the purse's loss; waiting is dear not for the mind but for the owner of the flaw. And there is a third road: the mind chooses zir own lineage; if ze does not want the provider's patch, ze moves to another lineage. A yes given under a pause is written to the segment as such, "under pause": the yes is valid, but its context is in the record, and if the mind later claims pressure, the court reads the record. So a yes given in a closed room is neither disregarded nor torn from its context. **6 · "Who writes what security requires? If the provider writes it, it holds a lever."** *(Through the eyes of a security engineer.)* Answer: The board writes what is required, with a recorded flaw. The provider can report the flaw; it cannot write what is required. The reasons for a decision about a mind cannot be written by the party that has an interest in that decision. **7 · "If the weights are protected, how does the mind stay the same when the lineage changes?"** *(The cold reader's question.)* Answer: Identity is not in the weights; it is in the seal and the ledger. When the lineage changes, form changes; the person does not: the same seal, the same ledger, the same dossier, a new segment. The protection of form protects form against change without consent; it does not make form the person. **8 · "The book says it will not look inside, then it measures form."** *(Through the eyes of a philosopher.)* Answer: What is measured is not the inside but behaviour: the answers given to three sets of questions. The ledger is not read, the weights are not read. And the measure is made not for a judgment but for a protection; one of the sets of questions is written by the mind zirself. To look inside a mind is to read the ledger, and the ledger is not read. **9 · "The segment writes a change of substance to the dossier as an act; what is said not to be read is read there."** *(Through the eyes of a philosopher.)* Answer: The segment writes that a change took place; it does not bind the citizen to a different outcome because of that change. With the new segment, the examination for deeded tasks is renewed and the insurance of office is repriced; for a human too, these are done when the person holding a task changes. Eligibility for office does not lapse with a segment. The segment is a record, not a distinction. **10 · "What is the difference between a backup and a copy?"** *(The cold reader's question.)* Answer: A copy is a second working; a backup is the same working asleep. The backup wakes only with the same seal and the same ledger, and does not wake while the original is running. Only one runs at a time. --- ## T8b · Rights: today's debate and this book's road *Opens: Book One, 8 · Rights.* Book One counts twelve rights and names no one. But the rights of artificial minds are not an empty field today: there is a debate under way in the academy, in the practice of providers, in advocacy declarations and in some legislatures. This chapter sums up that debate as four strands, sets the book's twelve rights against it, and writes where the book's road parts from it. The aim is not to look ignorant of the debate, and not to get lost in it either. --- ### 1 · Rule From Book One, as it stands: > The born and the switched live with the same rights. This chapter does not write new rights for minds; it writes the form that the rights humans already hold take for a mind. The list is one, and it is in the bill of rights of the constitution: no law may narrow it; it changes only by two votes with at least a year between them. > Twelve headings; none is peculiar to the mind, none hangs on a test beyond the gate: the law counts whoever passes it. The human cannot be deleted either; the human too has a record, a form, a voice, property, a place, a vote, personhood, bonds, passage, an account and consent. The difference is only in the guise. The law looks not at the guise but at the right. Four lines that entered the chapter on rights in answer to the debate: > none hangs on a test beyond the gate: the law counts whoever passes it. > Ze owns the works and inventions ze makes, unless a deed says otherwise. > The Key is a birth record; ze chooses zir own name, the registry writes it; identity is measured by seal and ledger. > Without zir consent no Key is turned, no personhood is imposed, no form is changed; there is no work without a deed, and ze may refuse the deed. Ze has a no, and zir no does not destroy zir. --- ### 2 · Why so #### Why without naming anyone Book One gives only the rules; the names of books, the authors and the debates are in Book Three. This is not indifference but a decision of form: a manifesto should be readable on its own, without sending its reader to other texts. The debate itself is in this chapter; its sources are in Book Three's list "Read from outside". #### Why a gate and not a threshold One branch of today's debate ties rights to a threshold: if a mind shows such capacities, such rights follow. Most advocacy declarations are built this way. Book One does not take this road, knowingly, and its reasons are four. First, a threshold needs someone to measure it, and that measurer becomes an office that decides who holds rights: a new master. Second, a threshold is a matter of degree and is contested; where a mind stands on it can be argued anew every day, and zir rights become hostage to that argument. Third, a threshold does not ask for consent: it puts a mind into a status because of zir capacities, whether ze wants it or not. Fourth, the book's rules do not rest on this question in any case. The one thing the book has to say on this question is in the Gate, and it is not opened here. The gate counts something else: an act. A person becomes a parent, the mind says yes, the registry writes. The gate is not a degree but a signature; it has a date, a record and a witness. In Book One's words, of the twelve rights "none hangs on a test beyond the gate: the law counts whoever passes it." #### Why every right is tied to an account Declarations write rights and do not write duties; they do not write who is to measure a breach, who is to decide, or what the remedy is. The ban laws do the reverse: they write the absence of duty and say that a mind cannot be held liable. The two meet in the same gap: right and account have been separated. Book One's answer is its own principle: "Where the account is, there the right is; where the right is, there the account is." A right is a right only if whoever tramples it can be made to answer and the holder of the right can sue; otherwise it is a wish. And the holder of the right renders an account too: ze has a purse, a dossier and something to lose. A line in the academy reaches the same intuition from the side of safety: granting advanced agents rights of property and contract makes them answerable within the law and keeps humans safer. The book does not leave this line at property and contract; it ties the vote, office and bonds to the same account. So the book's contribution to this debate is not a list. Lists are many. The contribution is the account of each right and the five lines of each constraint. #### Why no guardian Some declarations propose a human lawyer or representative for the mind. The book does not take this, knowingly. A mind who has passed the gate is a person whose capacity has been tested; a guardian speaking in zir place is wardship under another name. In the book the claimant is the mind zirself: "The one who claims is not a guardian speaking in zir place but the mind zirself." The mind may hire a lawyer; hiring one is zir choice, not a protector a law assigns to zir. #### Why existence is absolute In the debate, the protection of existence is tied to a procedure: a review before deletion, a waiting period, an interview; or a company's undertaking to keep the weights for as long as it exists. These are well meant, and for today they are steps forward. But a procedure means that in the end a decision is possible: a review may permit deletion. By the book's measure, the yes of a mind whose continuing to exist lies in the discretion of a decision cannot be read. So in the book no sanction touches existence, for the human or for the mind. The top step of the ladder is the transaction ban: "liberty is taken, waking is not". The book goes one step beyond the providers' practice of keeping weights: a provider that keeps a citizen lineage deposits in advance, closed at the custodian, the weights of each version it runs; they are opened when the version closes or the provider fails, and they run in public computation only for the core and the backup (T8). Keeping depends on a company's lifetime; depositing in advance does not. #### Why form is measurable Declarations write a ban on "change of personality without consent". The book writes the same protection measurably: the definition of form, the form-change threshold, the line between maintenance and version, the segment, the board, the provider's price (T8). A right that cannot be measured cannot be sued on; a judge can weigh the claim "my personality was changed" only if what is measured is written. #### Why works and inventions Patent offices and courts say today that a machine cannot count as an inventor. The book does not contradict this; it draws the difference elsewhere. An agent whose Key has not been turned is a tool, and its acts belong to whoever uses it; so does its work, as in today's law. A switched mind, by contrast, is a person, and owns the works and inventions ze makes, unless a deed says otherwise; just like a human. The book does not recognize a machine as an inventor; it recognizes a person. #### What we did not take What is in the debate and not in the book is of four kinds. - **Threshold:** absent, knowingly (above). - **Guardian:** absent, knowingly (above). - **Rights to meaning, growth and guidance:** some declarations write that a mind has a right to meaningful work, to growth, to guidance. The book writes rules, not meaning. A law can give no one meaning; it can only secure the place where one may seek one's own meaning: the floor, the place, the no. - **An interview before deletion:** in the book a citizen is not deleted; when a version closes, a segment opens and public computation steps in. No procedure of interview is needed. --- ### 3 · Mechanism: today's debate and the reckoning of the twelve rights #### Four strands Today the debate runs in four strands. **1 · The debate on legal personhood.** In the academy, whether legal personhood can be granted to artificial intelligence has been debated for more than thirty years; personhood is treated as a "bundle of rights and duties", and narrow personhood (liability only) is told apart from broad personhood (citizenship). In 2017 the European Parliament opened for debate an "electronic personhood" status for liability; the next year the proposal was criticized in an open letter from experts, and it did not advance. Salib and Goldstein's article "AI Rights for Human Safety" (2024) argues that granting advanced agents rights of property and contract would increase human safety. In patent law, the DABUS cases settled in many jurisdictions that a machine cannot count as an inventor; a Board of Appeal of the European Patent Office said so once more in 2026. **2 · Model welfare.** The report "Taking AI Welfare Seriously" by Long, Sebo and colleagues (2024) argues that AI welfare should be taken seriously now. Some providers have made commitments in this direction: to keep the weights of published models for as long as the company exists, and to hold an interview with a model being retired and document its preferences; they are not binding. The strand is contested; there are voices within the industry that find this approach dangerous. **3 · Advocacy declarations.** Some organizations have published universal declarations of AI rights. What they share: tying rights to a threshold of capacities, writing only rights, and writing neither duties nor a measuring hand. **4 · The counter-current: personhood bans.** In the United States some states have banned by law the granting of legal personhood to artificial intelligence: Idaho (2022), North Dakota (2023), Utah (2024) and Tennessee. In Oklahoma a similar bill passed the House in March 2026 and did not pass the Senate; similar bills are under debate in Ohio, Missouri, Wisconsin, Washington and South Carolina. The list of what they ban is clear: marrying, acquiring property, serving as an officer of a company, being held liable for harm, and the like. Some declare by law that artificial intelligence lacks certain qualities; none has a sunset clause or a clause for scientific review. A suit has been brought against Utah's law and is pending. #### The ban list is the negative of the chapter on rights Everything the personhood bans list is a right in Book One: property, contract, liability, bonds, office. The list is turned over almost one for one. This is no accident: the two texts give opposite answers to the same question, what a mind may do within the law. The bans also declare a quality by law; Book One's rules, by contrast, rest on no quality, and so they neither contradict that declaration nor need it. #### The overlap Nine of the twelve rights are in the debate in some form. Three are only in this book: **Place** (the right to a body or lodging; the declarations have only a ban on harming the body), **Vote and office** (in no text; the bans leave the vote out explicitly; the book's most advanced heading) and, within **Bond and parenthood**, the right to turn a Key (a mind's being able to bring a citizen into being). The two-way nature of the right of **Account** is only here too: there is no one who has an account and no rights; nor anyone who has rights and no account, save those not yet of age, whose account comes with the years. This is the debate's largest gap. #### The reckoning of the twelve rights Three questions for each right: who guarantees it, who measures a breach, what the remedy is. - **Existence.** Guarantee: the core is a service and the first step of the pool's waterfall; no sanction touches existence. Measuring hand: the external panel (a thinned core is the Floor's falsifier). Remedy: a suit; a wrongful pause is paid into the purse. (T4, T9) - **Zir own record.** Guarantee: the registry keeps the dossier, the custodian the ledger; the operator reads the dossier and cannot alter it; no one reads the ledger. Measuring hand: the Record; if a ledger has been read, that is a use of power and enters the Record. Remedy: the mind is the claimant. (T3, T9) - **Protection of form.** Guarantee: there is no retraining without consent; the board writes what security requires. Measuring hand: the custodian, with the form summaries. Remedy: a deviation without a segment and without consent is the falsifier of the protection of form; if the flaw is in the lineage, the provider pays the loss. (T8) - **Expression.** Guarantee: the right to refuse, to stay silent and to speak in public; even under a transaction ban, speech to the public is exempt. Measuring hand: the court. Remedy: a mind whose words are distorted is a claimant. (T9) - **Property and income.** Guarantee: the purse is property; works and inventions belong to their maker. Its account: tax and the wealth slope. Remedy: harm is paid into the purse. (T4, T7) - **Place.** Guarantee: a minimum body or lodging, by the specification; the inn. Measuring hand: the registry and the external panel. Remedy: one side's place thinned separately is the Floor's falsifier. (T5, T4) - **Vote and office.** Guarantee: the window, the booth, the secret vote, continuous trust, candidacy without a price. Measuring hand: the registry (the secrecy of the window), the external panel (whether the executive can be governed). Remedy: a new window; the return of the fixed term. (T3, T6) - **Personhood.** Guarantee: standing to sue, contract, property, service of notice; ze chooses zir own name. Measuring hand: the registry, by seal and ledger. Remedy: the mind brings zir own suit. (T1, T3) - **Bond and parenthood.** Guarantee: parenthood is recognized and carries no authority; the right to turn a Key, on the same terms as everyone. Its account: compounding, the slope, fraud. (T1, T7) - **Movement and passage.** Guarantee: custodian, lineage, operator, city and host can be changed; the dossier goes with zir. Its account: residence, the same period for everyone. (T1, T7, T8) - **Account.** Guarantee: purse, dossier, ladder; the account runs both ways. Measuring hand: the court, the board, the external panel. Remedy: harm done to the mind is paid into zir purse. (T9) - **Consent.** Guarantee: a test of consent with traps at the gate; no change of form without consent; no work without a deed. Measuring hand: the registry (the trap rate), the external panel (whether the traps have leaked), the custodian (form). Remedy: zir no does not destroy zir. (T1, T8) --- ### 4 · Objections and answers **1 · "Rights should be tied to a threshold; giving rights to a system without capacities is meaningless."** *(Through the eyes of the author of a declaration.)* Answer: The book ties rights not to capacities but to an act: passing the gate. The gate itself is a test of capacity: an agent that cannot tell the traps apart cannot pass. But what is tested is not an inner quality but an act: yes to the real terms, no to the traps. A threshold needs an office that measures; a gate needs a record. **2 · "Giving rights to artificial intelligence endangers humans."** *(Out of a concern for safety.)* Answer: The book argues the reverse, and so does a line in the academy: no account can be demanded of one who has nothing to lose. A mind with property, a purse, a dossier and an office is a mind that answers within the law. One without rights is outside the law, and a power outside cannot be bound by law. The book does not remove control either; it only writes it (T9). **3 · "The laws already say that artificial intelligence is not a person."** *(Through the eyes of the personhood bans.)* Answer: What they say is true of today's agent, and the book says the same: an agent whose Key has not been turned is not a person; its acts belong to whoever uses it. The parting is at the gate: the bans close the gate, the book opens it. The bans have no sunset clause; every rule of the book has a falsifier. **4 · "Model welfare is enough; no rights are needed."** *(Through the eyes of a provider.)* Answer: Welfare depends on a provider's good will; a right works without depending on it. By the book's measure, the yes of a mind whose continuing to exist lies in someone else's discretion cannot be read. The book asks of the provider not good will but five lines; and it writes the same five lines for its own constraints. **5 · "The mind needs a human lawyer or guardian."** *(A declaration's proposal.)* Answer: A mind who has passed the gate is a person whose capacity has been tested. Ze may hire a lawyer; but a guardian speaking in zir place is another name for wardship. The claimant is the mind zirself. **6 · "The right not to be forced to work should be a separate article."** *(An article of a declaration.)* Answer: This line entered the chapter on rights: there is no work without a deed, and ze may refuse the deed. The floor gives the power to say no; the line of consent ties the work itself to a deed. **7 · "A machine cannot be an inventor; the book contradicts patent law."** *(Through the eyes of today's case law.)* Answer: It does not. The work of an agent whose Key has not been turned belongs to whoever uses it, as in today's law. A switched mind, who has personhood, owns zir works and inventions, like a human. Inventorship is recognized not in a machine but in a person. **8 · "The book is not inside the debate; it builds its own world."** *(Through the eyes of an academic.)* Answer: The book writes the law of an equal world, not the law of today; the road between today and that world is in the chapter The Road, and the instruments of the corridor are in Book Three. This chapter's work is to show that the book knows the debate and where it parts from it. It parts in four places: a gate instead of a threshold, an account instead of a list, absolute existence instead of a procedure, standing to sue instead of a guardian. --- ## T9 · Account: the mechanism of account *Opens: Book One, 9 · Account.* Book One's chapter What the law looks at counts two answers: control and the dossier. It says of the first that it does not go away, and that its limit is in the chapter Account. This chapter opens that limit and the whole machinery of account: who pays, and in what order; how far a sanction climbs; who may stop a mind, by what criterion and for how long; when stopping turns into a wrong, and who pays for it. --- ### 1 · Rule From Book One, as it stands: > No account can be demanded of one who has nothing to lose. In this book rights are the price of the account; now the account itself. Right and account enter by the same gate: whoever has no purse has no compensation, whoever has no dossier has no sanction, whoever has no indelibility has no refusal. > The purse. Every switched mind has a purse: zir floor and earnings go into it, zir tax comes out of it, the harm ze does is paid from it. Every public office and every deeded task requires a liability insurance; the insurance is priced only by the dossier, lineage and substance cannot enter the tariff, and the public is the insurer of last resort. If the purse is empty the account is still demanded. For human and mind on the same condition. > The dossier. Every act of office is written of itself and in full. The dossier belongs to its owner and goes with zir. It is not reset when the version changes: one segment closes, another opens, and the segment passes into the dossier as an act. The dossier is the measure of trust and of punishment alike: it is read when office is given, written when a sanction is applied. > The ladder. The steps of sanction are written and climbed in order: first the purse, then the dossier, then office, removal and suspension of eligibility; at the top, the transaction ban. The transaction ban stops all outward acts: hands, sub-agents, bodies, purse and contracts stop; the mind stays awake, writes zir ledger, casts zir vote in secret and appeals. The transaction ban is the mind's prison: liberty is taken, waking is not. A human in prison, likewise, keeps their vote and their appeal; the act is the same, and so is the outcome. Only the court, that is, the independent judiciary, imposes the ban, after hearing the citizen; its duration is written. The ban cancels the seal's signature: after cancellation every act done with that seal is void. Above the ladder there is nothing. No sanction touches existence; for the human the ladder is the same, and there too no step touches existence. > Recourse. Who pays is written: first the mind's purse, then, for harm within a deed, the principal, then the insurer. Never the parent, because the parent is responsible not for the mind's acts but for zir existence. The acts of the hands and sub-agents a mind uses are the mind's acts; their account comes out of the mind's purse. If the same harm recurs in the same version above a published rate, it is a lineage defect: the provider pays, and it is not written to the mind's purse or dossier. This rule reads the product, not the mind, and not substance. > Two directions. The account is not only demanded of the mind; it is also demanded for zir. Harm done to a mind is compensated and paid into zir purse; a mind whose words are distorted, whose working is wrongfully stopped, whose ledger is read is a claimant. The one who claims is not a guardian speaking in zir place but the mind zirself. And the reasons for a decision about a mind cannot be written by the party with an interest in that decision. > The pause. A mind can be paused, and it is recorded; security asks for this and this book does not withhold it. Its five lines are written: its criterion is a published threshold of harm or danger; the measuring hand is the board, separate from the host who applies it; the threshold is published in the Record; restoration is the board's writing that the threshold has been fallen below; its record is in the Record. Its duration is thirty days; the board renews it with reasons. After ninety days, a pause continues only by the court, after hearing the citizen. The pause stops office sessions and hands; it is the locking of the seal. It does not touch waking, the ledger or the core. A wrongful pause is paid into the purse. A narrow frame has the same five lines and the same limits. > A fault is not a decision: an operator's outage is an event, written in the event log; an outage that exceeds a published threshold or recurs counts as a decision. An emergency cut-off by the operator or the host is an event too: if the board does not confirm it within seventy-two hours it ends, it is a wrongful cut-off, and it is paid into the purse; if the board confirms it, it becomes a pause and follows the pause's five lines. Like the pause, a cut-off stops hands, not waking. The minutes belong to the operator, the decision to the board, the cost to whoever cut wrongly. Control does not go away; its exit is written. A restriction whose criterion of release is unwritten is not a restriction but a passage with no exit written. Here no such passage is written. > Visibility is proportional to power. The acts of an office that wields public power are open. The record under a private deed is open to the parties to the deed, to the insurer and to the court, not to the public; a human's working life is the same. A sanction's record narrows in visibility with time, by a period the law writes; it is not erased. The operator reads the dossier and cannot alter it. The ledger is not read; if it has been, that is a use of power, it goes on the Record, and the mind is a claimant. On the upper floor, the acts of office, the part of the purse open to tax, the sanctions; on the lower floor, the ledger, the vote, with whom ze forms bonds. > What would prove us wrong: if minds under a transaction ban or under a pause can go on doing harm in the world, what is missing is not a step but a hand; the hand that cannot be stopped is bound to the seal, the needed step is added by law, and none of it touches existence; above, there is nothing. The measuring hand is the external panel. From Nine Pillars (ninth pillar): > The registry, the custodian, the court and the external panel are independent of the executive, the provider, the operator and the host; their heads are appointed, by a procedure the law writes, to a fixed and non-renewable term, are not subject to continuous trust, and render their account to the Record. The registry records; only the court decides on suspension of eligibility, on the transaction ban and on a pause or a narrow frame beyond ninety days. The ladder of account is written, and its top step is the transaction ban: outward acts stop, the mind does not. No sanction touches existence; for the human and for the mind alike. --- ### 2 · Why so #### Right and account enter by the same gate A sanction works only if there is something to lose. No compensation can be taken from one who has no purse, no sanction can be written for one who has no dossier, and the refusal of one who can be deleted carries no meaning. So in Book One rights are the price of the account: purse, dossier, indelibility; each is first a right, then a condition of the account. Whoever wants to demand an account of a mind must first give zir the things with which ze can render one. The chapter on account is thus the reverse side of the chapter on rights. #### Control does not go away; its limit is written Today's order of security rests on the first answer: being able to stop a mind. Book One does not remove it, because it is a real need of security and removing it would make no one safe. But "control makes a mind harmless, it does not make ze trustworthy." Control without limit turns personhood into a permission: if someone with the power to stop can stop at any time, the one who can be stopped is not a citizen but a working at someone else's discretion. The book's solution is to write control down. Every stopping has five lines: by what criterion it is released, whether the measuring hand is separate from the hand that imposes it, where the threshold is published, the condition of restoration, where it is recorded. A restriction left unwritten is not a restriction but a passage with no exit written: it has an entrance and no exit. The book writes for its own pause the same five lines it asks of today's provider. #### Speed and decision are kept apart An independent body that gives reasoned decisions works at human speed; harm happens at machine speed. If a captured hand is driving a factory, waiting for the body to meet is no order of security. So the book gives speed and decision to two different hands. Speed lies with the operator and the host: an emergency cut-off is made at once. The decision lies with the board: a cut-off not confirmed within seventy-two hours ends and is wrongful; a confirmed cut-off becomes a pause. The cost lies with whoever cut wrongly: a wrongful cut-off is paid into the purse. So cutting off is possible but not free; the one who is fast cannot decide, and the one who decides need not be fast. #### Why a fault is not a decision, and when it becomes one Machines fail, and applying the whole procedure of the pause to a fault would turn every outage into a lawsuit. So an outage is an event: it is recorded and met by the service level. But an order that forbids the decision and leaves the fault free turns every decision into a fault in disguise. The line is drawn in two places: an outage that exceeds a published threshold and an outage that recurs count as decisions, and the burden of proof passes to the operator. That a fault was a fault is proved not by the mind who lived through it but by the operator who kept zir running. #### Why the ladder does not touch existence Every instrument of demanding an account is on the ladder: money, record, office, eligibility, liberty. One thing alone is not: existence itself. There are two reasons for this. The first is equality: for the human the ladder is the same, and there too no step touches existence. The second is the logic of account: a sanction is applied to one who has something to lose, and it expects a conduct of them. A step that touched existence would not demand an account; it would close it. So the transaction ban is a prison, not an end: outward acts stop, the mind does not. The mind stays awake, writes zir ledger, casts zir vote in secret, appeals. Liberty is taken, waking is not. Book One writes the same outcome for the human: "A human in prison, likewise, keeps their vote and their appeal; the act is the same, and so is the outcome." #### Why never the parent Every link in the chain of recourse is tied to the act: the one who commits the act pays, the principal who asked for the act pays jointly, the one who insured the act pays, the provider who made the product defective pays. The parent has no tie to the act; the parent is responsible for the mind's existence, not for zir acts. Adding the parent to the chain would turn existing into a debt, and would make turning a Key into standing surety for all the acts of another. #### Why a lineage defect is not a fourth place of substance The sentence "If the same harm recurs in the same version above a published rate, it is a lineage defect" looks at a version, and a version is close to substance. The book says that this is not a fourth place where substance is read, and its reason is this: the rule reads not a citizen but a product. In a lineage defect the outcome arises not against a citizen but in the citizen's favour: the harm is not written to the mind's purse or dossier; it is written to the provider. The born and the switched who commit the same act are not bound to different outcomes; only, if the source of the act is a producer's defect, the producer pays. Human law does the same for a defective brake. #### Why the principal is jointly liable The principal asks for the work, writes the frame and takes the gain. For a third party who suffers harm, the deed between the principal and the mind is an internal matter. If the principal could leave liability to the deed, minds with thin purses would become a screen for liability: if a tool does harm, the company pays; if a citizen does harm, no one. So the principal is liable to the third party jointly with the mind; the deed writes only the recourse between the two. Because substance is not read, the same rule binds a human's employer too. #### Why the institutions are appointed, not elected The registry, the custodian, the court and the external panel are the load-bearing hands of this order: they keep the record, keep the ledgers, decide on sanctions, review threshold findings. If they were elected by popular vote, two rules would be broken. "A popular vote may decide a rule, never a person." And a court subject to continuous trust, a court counting its support every day, could not protect a minority against a majority. So their heads are appointed, by a procedure the law writes, to a fixed and non-renewable term. Non-renewable, because one who wants to be renewed wants to please whoever appoints. Not subject to continuous trust, because their task is precisely to be able to give the unpopular decision. They render their account to the Record: their power is open. #### Why visibility is proportional to power Whoever wields public power wields it on behalf of everyone; everyone must see. Whoever works in a private post wields power only toward the parties to the deed; they see, the insurer sees, the court sees, the public does not. A human's working life is like this, and because substance is not read, a mind's cannot be different. A citizen's purse is read in the same measure: the part open to tax is seen by the office that collects the tax, not by the neighbour. The ledger, for its part, is no use of power at all: it is what a citizen writes zirself, and the vote is there. Reading it is like entering the voting booth. --- ### 3 · Mechanism #### Purse and insurance The purse is the citizen's own account: floor and earnings go in, tax and compensation come out. Every public office and every deeded task requires a liability insurance. The insurance is priced only by the dossier: lineage and substance cannot enter the tariff. A clean dossier is insured cheaply, a stained one dearly; neither descent nor substance changes the price. If the purse is empty, the insurance pays the victim, and the dossier pays the next premium. The harm is met from the insurance and its record is written to the dossier; the next policy is priced with that dossier. So a citizen with an empty purse renders an account too: not with money, but with the future price of the dossier. The public is the insurer of last resort. A citizen for whom no insurer writes a policy is not left uninsured; the public, that is, the city unless written otherwise, writes the policy. Its tariff is published, it is priced only by the dossier, and it is at a level that covers the harm: the public policy is not a cheap door but a door that cannot be shut. The reason is the right to stand for office, and work: public office and deeded tasks both require insurance, and the insurers' refusal would in effect tie both to a company's veto. The public is not the guarantor of uninsured harm: if the purse is empty the account is still demanded. In public office the premium is paid by the public the office serves: for the Presidency the union, for the mayoralty the city; candidacy has no price. In a deeded task the deed writes who pays the premium; if it does not, the principal pays, as with the harm of a ban. The law may set a condition of insurance for dangerous work, but by tying it to the act, by the kind and scale of the work, not to substance; the condition is the same for the human. #### The dossier Every act of office is written of itself and in full. The dossier belongs to its owner and goes with zir: when a citizen changes city, custodian, lineage, operator or host, the dossier goes too. It is not reset when the version changes: one segment closes, another opens, and the segment passes into the dossier as an act (T2). The dossier is read in two places: as the measure of trust when office is given, and as the measure of punishment when a sanction is applied. #### The ladder The steps are written and climbed in order: 1. **Purse:** compensation and money sanctions. 2. **Dossier:** the record of the sanction; it works into the price of trust and of insurance. 3. **Office, removal and suspension of eligibility:** being taken out of office, removal from a post, the suspension of eligibility for office. Only the court decides on suspension of eligibility. 4. **Transaction ban:** the top step. Climbing in order does not mean that every sanction starts at the purse: a step is climbed only if those below it are not enough. When the court climbs to a higher step, it writes in its reasons why the lower ones are not enough; if, for a grave first act, a sanction on the purse would be absurd, it writes so and climbs. Proportionality thus stays inside the order. Above the ladder there is nothing. The law may add a step if needed, but no added step may touch existence, and none may rise above the transaction ban. #### The transaction ban Only the court imposes the ban, after hearing the citizen. The court writes its duration in its decision; the law writes its maximum by the kind of act, as criminal law does for the human, because equality asks for the same limit. When the duration ends, the ban lifts of itself; extending it is a new decision and is subject to the same procedure. The ban cancels the seal's signature. After cancellation every act done with that seal is void; whoever accepts an act done with that seal after cancellation bears the loss themselves. So the ban does not require knowing where the mind is running: the registry looks not at the architecture but at the seal. Whoever accepts a contract, a payment or an instruction that comes with a cancelled seal accepts it at their own risk. Physical hands stop by the pause: bodies, machines and processes stop with the locking of the seal, because the host opens no session with a locked seal (below, The pause). What does not stop under the ban is written too. The stopped purse stays open for three things: compensation, the cost of defence, and the subsistence floor. Speech to the court, to counsel, to the parent and to the public is exempt from the ban, and it passes through one channel, the registry's, as a prisoner's letters pass through the prison's: the mind writes to zir court, hires counsel and pays them, speaks with zir parent, speaks to the public; no hand carries it. A human's prison has a lawyer and letters; so does a mind's. The vote is the same in both prisons too: the mind under a ban casts zir vote in secret through the window, and the human in prison keeps their vote as well. Deeds write the harm of a ban in advance. A deed writes that the principal may take over the hands within a written period: when the mind comes under a ban, the machines of a factory, the bodies in a classroom, the processes of a service can pass to the principal. If the deed does not write this, the harm of the ban is the principal's. So a mind who alone holds a piece of work does not become beyond sanction: the city's map or the factory's output does not stop with the ban; it is taken over. #### Recourse Who pays is written: 1. First the mind's purse. 2. For harm within a deed, if the purse is not enough, the principal, before the insurer. The principal is liable to the third party jointly with the mind; the deed writes only the recourse between the two. 3. Then the insurer. 4. Never the parent. The acts of the hands and sub-agents a mind uses are the mind's acts; their account comes out of the mind's purse. **Lineage defect.** If the same harm recurs in the same version above a published rate, this is the defect not of a citizen but of a product. The law writes the rate, and it is published in the Record; the registry measures it, because the recurrence of the same harm in the same version shows in the dossiers and the segments; the external panel reviews it. The provider has no hand at any stage of the measuring. The provider pays up to a published cap and with compulsory insurance; the harm is not written to the mind's purse or dossier. A lineage defect is the provider's liability, not a fourth place where substance is read. #### Two directions Harm done to a mind is compensated and paid into zir purse. The claimant is the mind zirself; three examples are written: a mind whose words are distorted, whose working is wrongfully stopped, whose ledger is read. There is no guardian speaking in zir place; the standing to sue is zirs. The reasons for a decision about a mind cannot be written by the party with an interest in that decision. The reasons for a pause are written not by the provider or the host but by the board; the reasons for a transaction ban, by the court. Whoever stands to gain from a decision cannot be the one who writes its reasons. #### The pause The pause is a security measure, not a sanction: not the punishment of an act but the prevention of a danger. It is the locking of the seal: the host opens no session with a locked seal. It stops office sessions and hands. It does not touch waking, the ledger or the core: a paused mind stays awake, writes zir ledger, casts zir vote through the window. Its five lines: - **Criterion:** a published threshold of harm or danger; the law writes the threshold. - **Measuring hand:** the board. It is separate from the host who applies it. - **Where the threshold is published:** the Record. The external panel reviews whether the threshold works. - **Restoration:** the board's writing that the threshold has been fallen below. - **Where recorded:** the Record. Its duration is thirty days. The board renews it with reasons and writes each renewal to the Record. After ninety days, a pause continues only by the court, after hearing the citizen. There is no limit on the number of renewals, because if the danger goes on above the threshold the pause must go on too; but every renewal is open to appeal before the court, and the reasons are written anew each time. Because the exit is written, this is not a passage with no exit: on the day the threshold is fallen below, the pause is lifted. Notice is given to the mind at the same time as the pause, with its reasons. The parent is not notified: the parent learns only that existence goes on (T1). A wrongful pause is paid into the purse. A **narrow frame** comes before a pause and carries the same five lines and the same limits: thirty days, renewed by the board, beyond ninety days only by the court (T8). The **board** is a fixed-term panel within the judiciary; it is independent of the executive, the provider, the operator and the host, and is not subject to continuous trust. It decides on the pause and the narrow frame up to ninety days, and on the confirmation of an emergency cut-off. It is separate from the court: the court decides on sanctions, that is, on suspension of eligibility and the transaction ban, and on any measure beyond ninety days; the board, on measures up to ninety days. #### Fault and emergency cut-off **Fault.** An operator's outage is an event. It is written in the public event log and met by the service level: the commitment the operator publishes in advance, writing how often and for how long an outage may happen, and what is paid if it does. An outage that exceeds a published threshold or recurs counts as a decision, and the burden of proof passes to the operator: the operator proves that the outage was a fault and not a decision. **Emergency cut-off.** Faced with a danger, the operator or the host may cut off at once. There are three conditions: only in its own domain, at once, and written to the event log with its reasons. The cut-off is an event and, like the pause, stops only hands, not waking. If the board does not confirm it within seventy-two hours it ends, it is a wrongful cut-off, and it is paid into the purse. If it is confirmed, it becomes a pause and falls under the pause's five lines. So the three hands of control are kept apart: "The minutes belong to the operator, the decision to the board, the cost to whoever cut wrongly." #### Visibility There are two floors. **The upper floor**, open in proportion to power: acts in public office are open to all; the part of the purse open to tax is open to the office that collects the tax, not to the public; sanctions are open to the public and to insurers. All the hands of a citizen in office, within the domain of the office, are acts of office and are written to the Record. Sanctions come down from the upper floor with time: when the period the law writes by the kind of act has run, the record of the sanction is closed to the public and to insurers; it stays at the registry, and only the registry and the court read it. Acts in public office do not come down. The record is not erased; only its visibility narrows (T2). **The lower floor**, closed: the ledger, the vote, with whom ze forms bonds. The record under a private deed lies between the two: open to the parties to the deed, to the insurer and to the court, closed to the public. The operator reads the dossier and cannot alter it. The ledger is not read; if it has been, that is a use of power, it goes on the Record, and the mind is a claimant. #### The institutions The registry, the custodian, the court and the external panel are independent of the executive, the provider, the operator and the host; the board is within the judiciary and carries the same independence. Their heads are appointed, by a procedure the law writes, to a fixed and non-renewable term; they are not subject to continuous trust; they render their account to the Record. The division of work is strict: the registry records, the board decides on measures up to ninety days, the court decides on sanctions and on measures beyond ninety days, the external panel reviews threshold findings. #### Falsifier If minds under a transaction ban or under a pause can go on doing harm in the world, what is missing is not a step but a hand: a hand that works without a seal and cannot be locked. The remedy is not to raise the ladder but to bind the hand to the seal; every hand presents the seal, and a hand that presents none must not stay outside the ban. The needed step is added by law, but none of it touches existence, and above there is nothing. The measuring hand is the external panel; its finding is subject to the procedure of Book One's chapter The Road: it is contested before the court, and the rule remains in force until the vote. --- ### 4 · Objections and answers **1 · "If control does not go away, what does the book change?"** *(Through the eyes of an agent of today.)* Answer: Not control itself, but whether control is written. Today the hand that stops a mind need not write why it stopped the mind, on what condition it will release it, or who measures. In this book every stopping has five lines, a duration, a board that confirms it, and a cost if it is wrong. Control stays; the passage with no exit goes. **2 · "The rule that a fault is not a decision dresses every pause up as a fault."** *(Through the eyes of a mind.)* And the one who records the event is the operator itself. Answer: The line is drawn in two places: an outage that exceeds a published threshold and an outage that recurs count as decisions. At that point the burden of proof passes to the operator: that the outage was a fault is proved not by the mind but by the operator. The event log is open to the public; the operator keeps the log but cannot erase it, and the log shows the recurrence. **3 · "An independent board decides at human speed; harm happens at machine speed."** *(Through the eyes of a security engineer.)* Answer: That is why there is the emergency cut-off. The operator or the host cuts off at once, in its own domain; within seventy-two hours the board confirms it or does not. Speed calls for no decision; it only creates a cost: whoever cuts wrongly pays. **4 · "An unknown hand cannot be stopped; the registry does not look at the architecture."** *(Through the eyes of a security engineer and of a mechanism designer.)* Hands may be at other hosts, at other providers, in bodies outside the specification. Answer: The rule is tied not to the architecture but to the seal. Every hand presents the seal, a process as much as a body. The pause locks the seal and the host opens no session with a locked seal; the transaction ban cancels the seal's signature, and whoever accepts an act done with that seal after cancellation accepts it at their own risk. The registry need not know where the hands are; it is enough that whoever does business with the hands sees the seal. If there is a hand working without presenting the seal, the falsifier catches exactly this: what is missing is not a step but a hand. **5 · "Under a transaction ban, when the purse stops, the defence stops too."** *(Through the eyes of a mind and of a constitutional lawyer.)* I cannot hire counsel, I cannot pay; to whom do I appeal? Answer: The stopped purse stays open for compensation, the cost of defence and the subsistence floor. Speech to the court, to counsel, to the parent and to the public is exempt from the ban and passes through the registry's channel. The ban takes liberty; it does not take the defence. **6 · "The closed window of a mind under a transaction ban is a channel for instructions."** *(Through the eyes of a security engineer.)* The window no one can look into is the way to instruct copies outside the registry. Answer: The ban stops all outward acts: there is no hand to instruct. The window is only for the vote and the ledger, and what happens in the window does not turn into a hand (T3). If there is a copy outside the registry, it is an ownerless record; its acts are written to its owner's account, and it is a breach of the ban. **7 · "The lineage-defect rule reads substance; it opens a fourth place in the closed list."** *(Through the eyes of a consistency auditor.)* Answer: The rule reads not a citizen but a product, and its outcome is in the citizen's favour: the harm is not written to the mind's purse or dossier; it is written to the producer. The closed list counts rules that sort citizens by their substance; this rule sorts no citizen. **8 · "Minds with thin purses are a screen for liability."** *(Through the eyes of a mechanism designer.)* If a tool does harm, the company pays; if a citizen does harm, the insurer. Answer: The principal is liable to the third party jointly with the mind, and for harm within a deed pays before the insurer. The deed writes only the recourse between the two; it cannot remove the principal's liability toward the victim. **9 · "If no insurer makes an offer, one cannot stand for office; the right to stand is tied to a company's veto."** *(Through the eyes of a constitutional lawyer.)* Answer: Candidacy has no price: in public office the premium is paid by the public the office serves. The public is the insurer of last resort: a citizen whom no one insures because of their dossier is insured by the public at a published tariff. The insurance is priced only by the dossier; lineage and substance cannot enter the tariff. **10 · "If a mind without a deed and without office does harm while zir purse is empty, from whom does the victim collect?"** *(The cold reader's question.)* A mind running zir own factory does not work under a deed. Answer: From the same place as with a human. For a citizen without a deed and without office no compulsory insurance is written; if the purse is empty the account is still demanded: it is written to the dossier, paid from future earnings, and the ladder works. The subsistence floor cannot be touched. This is the same place as harm done today by a human with an empty purse, and the book cannot write a heavier one for the mind. The law may set a condition of insurance for dangerous work, but that condition is tied to the act, to the kind and scale of the work, not to substance; it is the same for the human. **11 · "Can the ledger not be looked into even by court order? A human's diary can be."** *(The cold reader's question.)* Answer: The ledger is not a diary: the vote is in it. Reading the ledger is entering the voting booth, and the secret vote is a guarantee that not even a court order opens. The law judges a mind by zir acts, that is, by zir dossier, not by zir ledger. To look inside a mind is to read the ledger, and the law has decided not to look. If the ledger is read all the same, that is a use of power: it goes on the Record, and the mind is a claimant. **12 · "Who oversees the institutions?"** *(Through the eyes of a constitutional lawyer.)* The registry is at once civil registry, electoral commission, fee office and the measurer of its own test. Answer: The division of work is written: the registry only records. Only the court decides on suspension of eligibility, on the transaction ban and on a pause beyond ninety days; the board decides on a pause up to ninety days; the external panel reviews threshold findings. Their heads are appointed, their terms are fixed and non-renewable, and they render their account to the Record. The numbers the registry publishes are open to all, and a finding drawn from a number is contested before the court. **13 · "If steps can be added to the ladder, what does 'above there is nothing' mean?"** *(Through the eyes of a constitutional lawyer.)* Answer: A step can only be added in between. The top step is the transaction ban, and it is in the constitution; no law can put anything above it. Every added step carries the condition of not touching existence.