Annona

One ESU is one kWh of verified surplus above BOT as a signed ledger token. No printing. No office, Founder, Phoenix, or silicon may emit unbacked tokens or second ledgers.

Minting is disclosed seigniorage against signed surplus. Every ESU cites a separately attested physical surplus event: a metered joule on an independent substrate, serial-sealed, with the last calibration hashed. A two-of-three ledger sign on a surplus the independent substrate did not see is void and is debasement.

During external-network outages, the Node runs an offline sapphire truth-triangle for ≥1 SMW. Phoenix mint remains capped at the trailing 90-day daily allocation for 14 days — not twice — and remains surplus-backed.

If no peer or external Fallback can attest, the fourth attestation is replaced by two-of-three signatures from the offline sapphire triangle plus one Fallback that did not sign the first three, or by the last valid Oracle slice if the triangle cannot form. The Node does not wait indefinitely for an unreachable external.

Offline mint is further capped at a published hard fraction of trailing allocation. The fourth attestation is not a copy of the first three.

Mint that outpaces independently verified physical surplus is automatic Critical Entropy and auto-reverts.

VCI_t = 0.40 E_net + 0.25 B_success + 0.20 T_value + 0.15 I_built − P. The activation median is 500. The calibration population is the Genomic-UID cohort frozen at the last CEC boundary. The median recomputes only at the next CEC boundary. It does not recompute continuously against a moving current-adults set. Intake timing, Transport of low-VCI adults, and admission of high-VCI adults inside a CEC do not move the median.

B_success is lagged one SMW (2.7) and caps at 25% of total VCI. T_value and I_built require double attestation: EVL plus a second independent substrate against physical output. P is the only discretionary term.

Its taxonomy is published at activation: named high-tier findings, confirmed Lawfare, office-falsehood, concentration breach, and fabricated meters. P may not swing more than a published band of total VCI inside one CEC (default band 5% of median VCI, hashed at activation; larger band is Root path). An unpublished P is void.

Character Events need an independent Speculum witness. A self-filed event without a witness does not move VCI. A line that EVL cannot reconcile to the signed ledger is void. B_success of zero is neutral and cannot, by itself, open Terminal Debt or Transport.

From 0 to -999 after E_net and attested terms, a person is Unprotected. At -1000 they hit Terminal Debt and choose Transport unless the debt is high-tier (7.10). VCI is a hiring, rotation, and Franchise signal. It does not cancel Annona Minima, title, or due process.

Allocation follows signed surplus: BOT coverage, then plant, then Command-Tier operational need, then Specialist, then Operational. Stability Reserve is 2% of daily minting, separate from the published reserve line. Estate absorption (7.11) feeds this fund.

There is no obligation to feed anyone outside the OS. Charity is private, not a claim. Those who fail BOT, VCI floor, and Axiom 4/7 reciprocity do not eat from surplus. In-kind necessity inside the Node is Annona Minima (3.15), never a planetary stipend.

Transfers are signed ledger events. Ordinary cross-Node transfers need mutual Bitcoin checkpoint acknowledgement within one SMW. Emergency transfers clear in 24 hours upon Triple Arbiter verification of existential need. UID records etch to sapphire quarterly and recover from sapphire plus EEP-verified logs if the live hash fails.

No natural person, lineage, or Public Body holds more than a published share of live plant, mint, or land. Default caps: 2% of mint-vote, 5% of lineage authority, and a published plant-share (reset by EVL each CEC against autarky risk). The cap is a protocol weight: mint-vote and etch-weight clip at the cap before the ballot runs.

Cumulative attribution of Consors output, nominee patterns, and published kinship/contract graphs is live on Trinitas each short clock, not retrospective. Post-hoc corruption claims are backup, not the primary lock.

Lineage ballot-weight aggregates to the same 2% whale cap as a natural person (7.26). Uncoordinated kin that vote as a detected cluster auto-divest on Speculum. Breaches trigger forced divestiture into the Stability Reserve within one SMW. Circumvention via nominees is corruption (6.6).

JI_t = (J_use + J_cmd) × (I/J) − J_waste. One ESU is 3.6 MJ of surplus above BOT. JI is reported in megajoules and as an ESU equivalent. JI feeds E_net in VCI. It is a pairing signal and public ledger line, not a Neutralization license or caste brand.

A person commanding robots owns the halt-switch and the JI of that work. Machine-attributed JI is capped at a published fraction of that person's JI. The human halt on credited work is independently attested.

The median JI recalculates each CEC against the same frozen cohort as VCI. Appeals run 7.6.

If machine-attributed surplus exceeds the published fraction of Node surplus for one CEC, a CEC opens and the machine-JI cap tightens. Silicon does not take Franchise, pairing-as-human, or a Founder seat.

Usury is banned: a contracted increase not tied to a published risk-share in named plant or goods. ESU may be lent as that risk-share. Principal returns from yield. Multi-decade plant may be funded by a published yield-share vehicle with a public register, continuous Speculum, a named plant or good, and a published exemption-cap as a fraction of Node surplus.

A yield-share that does not name plant or goods, or that exceeds the cap, is usury under another coat. Concentration cap 3.5 still binds except a single audited infrastructure vehicle whose register is open and whose size sits inside the exemption-cap. A hidden increase is 6.6.

Unbacked mint, second-ledger emit, coin-clip, hidden seigniorage, or unit-redefinition that shrinks the joule behind one ESU is debasement. It is theft of every holder. Phoenix mint stays inside 3.1. A central-bank digital token, a programmable freeze-coin, or any money that an office can silence in a pocket without EEP is the same crime under a new name. ESU is a signed joule. It is not a leash.

An office that prints against no signed surplus is high-tier. A private mill that clips, counterfeits, or forges ESU, UID, or title is the same crime. Historical coin-clip, debasement, and identity-forge are the same act under new tools. The act is charged, not a people.

A good, tool, vehicle, dwelling part, or software lock sold inside the Node carries a published useful-life packet. A hidden kill-date, sealed consumable whose only purpose is repurchase, or remote brick that ends a working object is concealed planned failure. It is fraud.

Repair manuals and spare geometry stay open for goods that sit on BOT, plant, Campus, or household life. Fashion wear is exempt. Life-critical plant is not.

Extraction by false voice, false office, false kin, false plant, false court, or false charity is fraud. A mill that runs this at scale — call farms, text farms, forged-badge desks — is high-tier. The Node keeps a live attribution desk (6.7) for remote fraud.

Inbound channels that cannot show a signed UID and a published purpose are dropped. A citizen may halt a remote extraction in progress by cutting the channel. That cut is not a speech crime. Cross-border mills are treated as attacking processes under 6.8 until persons are named.

Named persons stand EEP. The Node does not pay ransom from surplus.

A claim, fund, or desk that takes ESU without a published plant, good, or risk-share is yieldless extraction. It is parasitism under P in VCI. Repeated yieldless extraction by a Public Body is 6.10. A monopoly that closes a fork, a repair, or a rival plant to keep a rent is concentration under 3.5 plus 6.6 if keys or statute are used.

The Node creates tasks and crafts so a Protected adult who wants load can take it. Specialization is lawful. Extra yield raises JI and VCI. BOT is not a sofa. A person may rest. A person may not mint rest as virtue. Tools that steal required fight are pruned. Needed and wanted work is published on the Tabula (3.16). Craft rank and the Forum sit in 3.13 and 4.21.

Each craft keeps a public packet: license, completed jobs, harm-and-yield, and a rank computed only from signed work by the named customer of that job. Anonymous piles, brigades, and office-boosts do not move the rank. The rank is a hiring signal. It does not move Franchise, speech, mint, or Neutralization. A doctor, driver, plumber, or tutor without a packet does not take BOT work. The packet names the Cursus line and Gradus (4.22). First jobs after a new Gradus take an Adjutor.

No book, plant, or mint may hide a position, liability, or wager larger than the Node's published surplus by closing it on a review clock and opening a twin the machine reads as balanced.

Two independent clocks, two independent books, and two throats who cannot share a meal are required. A junior hand who outruns both is high-tier, whether or not a coin was pocketed. Willful blindness by the watch is the same file. Silicon with no halt-switch is the same file.

There is no planetary universal income and no claim on a foreign well. Inside a Node, a Protected adult who keeps Axiom 1 and clears the published Tabula floor receives Annona Minima: a signed packet of shelter-hours, food-energy, heat, and cloth, or the ESU equivalent, sized to decent survival and not to appetite. Want is not the packet. The packet is funded from signed surplus after plant, never from unbacked mint.

The Tabula floor is set so a healthy adult can clear it without heroic hours. Extra yield above the floor is private title under Axiom 5 and raises JI.

A person who refuses every specific published Tabula offer they are medically able to perform, logged as a pattern, may contest that pattern within 48 hours with a counter-offer. A disputed pattern auto-freezes the starvation-lever until EEP. An uncontested or confirmed pattern loses the packet after one short clock and follows Transport if the refusal persists through one SMW.

Injury, age, first Directive, pregnancy, and childhood do not open that starvation-lever. Self-declared 'no capacity' at a destination Node does not extend Resourceless-Protected past one SMW. Suspension is appealable through EEP before Transport. Lawful rest is not refusal.

Children, the pregnant, and the medically excluded eat through the household first. The Reserve covers a published window when the house is proven empty. A desk that mints the packet as a right without Opus is parasitism.

A Protected adult who drops below the VCI floor by injury, age, or a first failed Directive receives one short-clock rehabilitation buffer of Annona Minima tied to published Cursus or Campus tasks. It is not a second stipend and does not repeat without a new sealed medical file.

After a live Optimization Directive is refused, the Tabula floor for that adult rises by the published metabolic band, and clinic joules for the refused band come from that adult's ESU, not from first-band surplus. Children still eat through the house. The system does not mint a sofa for a body that will not keep itself.

Each Node keeps a public Tabula of work the settlement needs and work it wants: plant, wall, harvest, clinic, school, craft, archive, care of the excluded, and any lawful service a house may book.

Entries name the task, the skill-rank required (3.13), the ESU or JI on offer, the supervising master, and the halt-switch. A healthy Protected adult may choose from any task at or below their rank. Tasks above rank require a named supervisor on site. Inexperienced hands do not touch life-critical plant, the vein, the reactor, or the child's exam without that master.

The Tabula is a ledger object. A desk may not hide needed work to force a favorite hire. A citizen may propose a task. EVL plus the relevant commander publish or refuse with a meter. Cross-Node Tabula listings are contracts under Axiom 2.

A passion that finds no open job may be posted as Otium Opus when the owner consents, the work meets the craft standard, and the slice stays inside the published meaning-band (4.22). It does not outrank plant, wall, or clinic.

Tabula listings (3.16) feed a published rate chain before Pretium Vitae (3.18) prices the bands. Each needed task carries: Gradus required, first-band or second-band or third-band tag, ESU or JI on offer, and the surplus line that pays it. A listing without a rate-chain tag is Unborn.

Annona Minima hours booked on Tabula inherit the second band unless the task is life-critical, in which case they inherit the first. Otium Opus and Scaena inherit the third. The chain is a Trinitas object. A desk that skips 3.17 to price a favorite at first-band is capture.

Tabula rates follow published yield-to-life. First band: plant, clinic, wall, Vigiles, Lyceum work that publishes a killable packet, Schola masters, and life-critical craft. Second band: ordinary needed work. Third band: Otium Opus and Scaena paid from Node surplus. Private tickets may enrich a player under Axiom 5 and the 3.5 cap. They do not rewrite the bands and do not buy office.

A physician, a Vigil, a reactor hand, or a master who keeps children literate in meters takes the first band. A singer, a striker, or a painter of a sound fence takes the third from surplus, or the private purse. Diversion of surplus that inverts the bands is capture (6.6) and concentration (3.5). Meaning-work remains lawful inside the meaning-band (4.22). It does not outrank the immune system.

Clean, living food — soil-grown or husbanded to a published packet, without hidden load, engineered satiety-bypass, or undeclared chemistry — is a security matter on the same band as BOT, wall, and plant. It is Prioritas for allocation after those three, and before Scaena.

A Node that cannot show a season of clean ration on Annona, Campus, and BOT stores is on SHI watch. Climate liturgy does not ban a clean food. A fashion plate that cannot hold BOT is not this room.

Food issued on Annona Minima, Tabula rations, Campus, and BOT stores carries a published composition packet: energy, protein, micronutrients, and known load. A product designed to bypass satiety, hide load, or replace a meal with empty mass is not stocked on those channels. Private import of such a product is Axiom 5 for a competent adult. It does not write a clinic-claim on surplus.

A person who eats the private junk and then refuses the Optimization Directive pays the clinic of that refusal from ESU (2.3, 3.15). Efficiency is rewarded in JI and VCI. Waste of the body is not rewarded. Medical exclusion remains a window, not a lifestyle grant.

Before ESU exists, a Castra may use external payment rails. It publishes which rails it uses. No single rail is the only store of what keeps the camp's plant for one short clock.

The other store is in-kind: fuel, food, parts, and tools the camp can use if a rail stops. A frozen rail is weather on that rail. It does not authorize an unbacked token. Minting remains III.1 and debasement remains III.8. Private gifts remain private under III.3. This room does not instruct concealment of a lawful account. It instructs a second, usable store.

III.5 already clips concentration and already counts nominees and kinship graphs. This room feeds that cap. A pact is in scope when it binds a vote or a bid on mint, seats, etch-weight, or plant. Persons, firms, and Public Bodies inside such a pact publish it. Their combined weight is what III.5 already aggregates. Friendship, worship, a household, and a shared table are not a pact. Consociatio remains.

A hidden in-scope pact is the same defect as a hidden nominee: corruption under VI.6. Speech and lawful association remain. The duty is disclosure of control, not a report of private company. Meters outrank speech: a denial does not outweigh a signed voting record.

VCI weights remain the locked weights. The inputs do not treat a wash as yield. A transfer that returns to the sender inside one short clock, or a closed ring of transfers with no signed external work, does not raise E_net, JI, or VCI. The meters count net joules that leave the ring as real work.

Character Events signed back and forth inside one house-and-craft circle, with no independent witness of the kind III.2 already requires, do not move VCI. EVL reconciles the ring to the signed ledger. A line that does not reconcile is already void under III.2.

Annona Minima remains III.15, including its clocks, its appeal, and its protection of children, the pregnant, the injured, and the medically excluded. A Tabula booking is not completion. Completion is the supervisor's signature plus the meter, where the task has a meter.

A pattern of bookings opened and dropped, with the work left undone, is the refusal pattern III.15 already logs. It is contested the same way, and it carries the same consequence and no heavier one. A desk that marks a favorite present without the signature commits office-falsehood.

An offset, a certificate, a pledge, or a narrative that is not a signed kilowatt-hour at a meter does not enter E_net, does not mint an ESU, and does not satisfy BOT. Speech about climate or about scarcity remains Axiom 3. It does not close a reactor, as IV.1 already says, and it does not rewrite the energy standard in III.1. A ledger that substitutes a story for a joule is debasement under III.8.