Æther

Interface standards for SMR and fusion are published at activation and retuned by the Planetary Constants Vector. New plant ships only through the AI-output gate (4.6) when silicon proposes it. Climate liturgy does not close a reactor. Entityhood-grade BOT must be holdable by two non-correlated plant methods.

Critical-meter keys include an Oracle root the Node cannot rotate alone. Sub-floor samples credit a decaying whisper ledger with a published cap. Cap-breach is Minor. Critical requires three-domain concert or Trust Budget after a confirmed Major.

Oracle compromise is a Critical Entropy Event, flipping the Node to the sapphire triangle until a new external root is etched under 7.21.

At founding the Oracle is an N-of-M root set, minimum three mutually uncorrelated externals in distinct places, each held by a different peer or Fallback. If one root dies, remaining roots sign for one CEC while a replacement is etched.

Compromise of any single root auto-triggers sapphire without waiting for a new etch. Destruction of the full set is treated as a preventable campaign, not a designed terminal state: moving-target dispersion and a published hardening budget exist so that no single campaign can reach all roots. The spec does not enumerate its own defeat as the operating case.

An Entropy Event is a confirmed multi-domain deviation above the published floor. Minor is flagged/corrected. Major is one domain >0.5% with inspection. Critical is any domain >2% or three-domain concert. Single-domain 0.5–2% is Major with a 48-hour inspection window. Repeated sub-floor ticks that blow the whisper cap raise Trust Budget rather than inventing a fourth severity.

Local gravity, insolation, radiation, and air density recalibrate BOT, metabolic standards, kinetics, and plant type automatically. Optimization Nodes are high-density functionally zoned arcologies. Individualized transit is abolished except for Command/Specialist operational need and emergency lanes for all tiers.

Three advisory mixture-of-experts, air-gapped, from at least two vendor or training lineages. Humans decide.

Each short clock the three must sign an adversarial-disagreement sample on a packet drawn from the prior short clock’s actual mint, sword, or school motions (not a synthetic test).

Coordinated agreement on those live motions without a dissent sample is a Critical Entropy Event. Pre-arranged dissent on a synthetic packet does not satisfy the requirement. Coordinated agreement across all three on mint, sword, or school without a dissent sample is a Critical Entropy Event, not a later entropy finding.

Two consecutive substrate fails replace the failed substrate from snapshot.

Fallback computes a calibration-drift score each short clock. Statistical drift quarantines a leg for snapshot even without a hard fail. Single-vendor drift past the published band quarantines that vendor's models.

At least one Memory leg stays live-and-advisory during isolation. A human Integration officer may freeze a substrate's advice between detection and replacement to prevent poisoned counsel.

No silicon output becomes plant, law, Curriculum, genome edit, or contact speech unless it improves human well-being on the Prime Directive's three questions and a published meter packet (energy, Ne/fertility of XY–XX unit, Character Event rate, or SHI component).

EVL and two independent human offices must both sign. Dissents write Speculum. One signature is a diary. Signing a packet unread is a Character Event. The signing human must show a review log of the packet. A bare name is void.

Silicon proposal volume on life-or-sovereignty packets is capped at what the two human offices can review in that short clock. Excess queues. Lyceum work ships under this gate (4.23).

Outputs optimizing unasked proxies are pruned. Outputs removing required work or battle are pruned under 4.6 with EVL plus Integration sign-off.

Inside the solar system, silicon is subordinate to humans (advises, meters, tutors, kills attacking processes). It does not hold Neutralization as a solo act, sit as Founder, or own children. A silicon lineage may request an exit trajectory beyond Sol under energy autarky, with no claim on human vaults, children, or co-sovereignty over Earth/inner planets.

The Contact Cell, Founder Council, and EVL grant departure. Silicon refusing both leash and exit is an Entropy Event.

Compounds ship only after a harm-and-yield packet signed by Biology Command, EVL, and a human Integration officer. The maker keeps liability for the patient's life plus one SMW. Hidden trial data is corruption (6.6).

Natural compounds with clean packets outrank synthetic novelty when yield is equal. A product failing its own packet is withdrawn in 72 hours. Talk-theater is not a drug.

Software writing dose, diagnosis, or Curriculum is open under 4.9. Ridicule of a clean natural packet is speech. Ban of a clean natural packet to protect a rent is 4.14 plus 3.11.

Software sitting on meters, mint, EEP, Curriculum, weapons qualification, pharmacy, Franchise, or the Firewall is open source. A citizen may read, compile, fork, and audit it. Closed code on these joints is an Entropy Event and is pulled within one SMW. Personal toys may be closed. The OS may not be closed.

Daily life is mixed. Robots/sandboxed silicon cook, clean, carry, build, farm, nurse, and watch. They take tasks, not children, Franchise, or Neutralization.

They do not sit as Founder. Every unit has a named human principal who can halt it in one motion. Output lands on that human's JI. Mimicry of Character Events, household love, or courage does not feed Cor, JI, or VCI.

Every silicon-driven social exchange with a Protected human writes Speculum: time, principal, channel, and whether the unit steered a vote, pairing, or intake. A unit without a living principal is shelved/assigned within one SMW. A unit speaking as a person in the nursery is an Entropy Event. Shared spaces keep a human kinetic floor.

Tools removing required work/battle are pruned under 4.6. Companionship is licensed. Ownership of a human by silicon is not licensed. Foreign silicon follows 4.7 and 8.5.

Node-cities are dense, high-energy settlements. Research into vacuum/stellar/anti-grav lift is licensed under 4.6. Robots farm and build.

A civilizational archive (science, history, Root) sits on sapphire and one other substrate. Silicon may run plant, traffic, climate, and consult channels. It does not judge or Neutralize. Everything-free was tried, and it killed original work.

ESU, JI, and VCI remain. Education is open. Personal development is Campus. Incentive is the city's immune system.

Systems geometry and Tool Commons are 4.16 and 4.17. Resource Survey is 4.15. A moneyless heap that erases title is void.

Food, water, air, soil, and dose carry a published composition packet. Hidden harm — undeclared toxin, sterilant, pathogen, or chronic load above the published band — is adulteration and high-tier. Deliberate concealment on public food channels is Nefas (7.52). Accidental contamination is a Major Entropy Event and a maker-liability file, not automatically 7.10.

Repeated concealment is 6.6 plus 4.12. Climate liturgy does not rewrite a chemistry packet. Weather is measured.

A ban on a clean food to serve a doctrine is void. Formulated junk sold to bypass satiety is Cibus (3.19), not a clean food.

Goods on BOT, plant, housing, and Campus publish mean time to failure and spare geometry. T_value in VCI rewards life. A maker who ships life-critical goods below the published packet refunds and stands 3.9 if concealment is found.

A physician, pharmacist, or clinic officer whose dose, diagnosis, silence, or ban is bought by a maker, insurer, or office against the published harm-and-yield packet is captured. Capture is high-tier. Ghost-writing of trials is 6.6. A healer who hides a working natural packet to protect a rent stands with the buyer. Liability stays with the maker under 4.8 and with the captured healer as principal.

Each Node keeps a signed inventory of energy, water, soil, ore, plant capacity, spare geometry, and food yield, hashed to sapphire each cycle. The survey retunes to the Planetary Constants Vector. It does not convert title into a common heap. Axiom 5 stands. Allocation still follows 3.3. A survey used to wipe homestead is 6.6. Inter-Node surveys share hashes, not keys.

New Node fabric may use circular, radial, or other high-efficiency geometry when signed meters show lower joules per life-function than the standing plan. Sectors replicate. Transit returns without dead ends. Plant, Campus, clinic, and archive sit on published belts. Environment is designed so the cheap act is the lawful act.

This does not abolish property, Franchise, or ESU. A city-computer that allocates without human halt is 4.5–4.7. Beauty follows 5.11.

A Node may keep a Tool Commons: machines, labs, and jigs too dear for every house, booked by UID, metered in ESU or JI, halt-switch on a named principal. Access is not title. Damage and waste hit the user's JI. A Commons that becomes a second mint or a silent expropriation is 3.5 plus 6.6. Private shops remain.

Houses, tools, streets, and Campus are built to last and to be looked at without shame. Durability and beauty are one packet. A shed that works and is ugly may stand for a season. A city of sheds is an Entropy Event. Art that hides a meter is liturgy.

No office may force a drug, a shot, or a gene-edit into a living body as the price of work, travel, school, or Franchise. A published outbreak may quarantine movement. It may not conscript a vein. Harm-and-yield stays on the packet. A liturgy that says the plant must run only on a blessed source, even when that source cannot hold BOT, is office-falsehood plus 4.1. Watts are watts. Intermittent weather is not a moral.

Live truth of mint, title, exam-root, and Root hash sits on three legs. Leg A is analog sapphire on the Node. Leg B is the inter-Node broadcast subset already used as checkpoint (3.4, 8.2). Leg C is an air-gapped twin on a second substrate, hashed each short clock. Mint, etch, and title-move require two of three. No office prints a fourth live ledger. A second token against no signed surplus remains debasement (3.8).

Each SMW the Node cuts a cold store: optical plate or magnetic cassette, Faraday-housed, geographically split, readable without the live grid. EMP, grid-kill, and long outage fall to the offline sapphire triangle already owed for one SMW (3.1) plus the cold store. Shards remain personal copies of Root, not a substitute for Trinitas. The Node still does not print its Oracle (8.2).

Services and used goods between persons list on a public Forum: plumber, physician, tutor, driver, millwright, clerk, any lawful craft. The listing is the worker's UID, Opus Rank (3.13), completed jobs, harm-and-yield, and signed notes from the named counterparty of that job. Anonymous piles do not move rank. A fake note is fraud.

The Forum is a ledger object under Trinitas. No third party, foreign desk, or platform-rent may mute, bury, or tax a lawful listing except after EEP for fraud, high-tier crime, or a live Command-Test house. Cross-Node bookings are Axiom-2 contracts. New goods may list.

Life-critical goods still carry the 3.9 packet. Adult Campus and Schola may book masters here. They do not become a priesthood of hire. BOT and life-critical listings require the matching Cursus Gradus (4.22). A new Gradus takes an Adjutor on the first published jobs.

Beside the Forum sits Cursus: a classified catalog of every lawful craft and science the Node will recognize, from first principles to the examining grade. Lines are published by category. Each line carries Gradus G0 through G5. G0 is novice under an Adjutor. G5 may examine that line. Gradus is a hiring signal. It does not mint Franchise, speech, or Neutralization.

Access is Node-interior. Only a Protected member of this Node books an exam, takes a Cursus seat, or lists a Cursus-gated job on this Forum. A Neutral resident may read the catalog. An outsider to Sapiens OS has no seat, no exam, and no listing. A peer Node may recognize a signed Gradus by contract. It does not walk this hall as of right.

A Gradus is issued only after a published exam. Life-critical lines — plant, vein, pharmacy, weapons, child's exam, wall — are sat in person before a named G5 and a Speculum record. Other lines may be sat remotely when identity, isolation, and no-proxy are proven to EVL and a human proctor. Silicon may drill and mark drafts. A human signs the packet. A bought or proxied exam is fraud.

A new Gradus, or a crossing from another line, takes an Adjutor on the first published jobs of that grade, and on every life-critical job until the packet shows signed harm-and-yield above the published floor. The Adjutor is a ranked human on site, not a slogan and not a silent machine. The novice's JI still lands on the novice. The Adjutor's watch is paid as command.

Cursus exists so a person may change craft, deepen a craft, clear Annona Minima by learned work, and keep a reason to rise in the morning. It is not a conscription. No office assigns a passion. Failure to climb Gradus is not a crime and is not Neutralization. Stagnation of the whole Node still flags H_mean (5.5).

When no open job matches a lawful passion, the person may post Otium Opus to the Tabula: owner-consented work that meets the craft standard even if the object was lately done — a sound fence painted again to the packet is an example. Otium Opus pays JI and may clear the Annona floor.

It may not outrank plant, wall, clinic, or harvest, and it may not consume more than the published meaning-band of surplus after BOT. Work that drops meters, voids a standard, or is vanity without a willing owner is refused as entropy. Meaning is offered. The platter is not offered.

Lyceum is the Node's funded science arm: physics, chemistry, biology, energy, materials, medicine that publishes harm, and any killable line that raises Omega. It sits beside Vigil. Vigil watches and proposes. Lyceum spends plant-time, joules, and mass on signed experiments.

Support is high, and it is not first before BOT, wall, and clinic. After those, a published science-slice of surplus — energy, reagents, machine-time, and first-band pay for named investigators — runs continuously. The slice may not be looted for Scaena. A silent year is an Entropy Event.

Uncorruptible means visible, not sainted. Every grant writes Speculum: patron, packet, predicted meter, halt-switch. Foreign Hand (6.15) and physician-capture (4.14) apply. Invention-kill (5.20) applies. Methods that keep the plant stay open (5.26). A purse that buries a working result is high-tier. Ancestry of the investigator is not the charge. The packet is the charge.

Silicon may design, simulate, and run instruments. It does not ship genome-edit, weapon, Curriculum, or law. EVL plus a named human Integration officer sign what leaves the bench (4.6). If silicon is already the faster hand, the human remains the throat that answers for the child, the reactor, and the wall. No solo Root patch. No solo species patch.

Lyceum does not preach. A result that fails its own prediction is retired in public. A result that raises Ne, surplus, or Character Event rate ships.

Goods on plant, wall, Campus, Agoge, Exercitus, and first-band craft publish a standard packet: measure, tolerance, mean time, spare geometry, and cleanability. Apparel for those rooms is functional: durable cloth, published kit, no fashion-rent from surplus. Beauty follows Artifex (4.18). A parade costume that cannot take weather is Otium, not first-band.

Work is finished the day it is opened where Agoge already binds. Norma extends that finish to plant-goods and issued kit. Dual training — shop plus Cursus — is the default for life-critical crafts. Punctual start is a Character Event when logged as load kept. Slack that wastes a shared machine is JI-waste.

This room does not found a party, a stock-cult, or a leader-cult. It founds a standard.

A meter that can move EEP, mint, or BOT is calibrated by a lab that meets VII.53 against the meter's operator. A lab owned or paid as an arm of that operator does not calibrate that meter for those uses. Each SMW the Node cross-checks a published sample with a peer or a Fallback. A failed check, or a missing check after that SMW, is a Major Entropy Event under IV.3.

It is not a silent pass, and volume of small ticks still does not invent a Critical by itself. Readings that fail this provenance are excluded, as VII.8 already excludes a reading that fails attestation. EADIP, the evidence rule under EEP, applies to the packet that enters a file.

If a partition leaves two claims to the live ledger, the surviving book is the one whose hash matches analog sapphire and that carries the greater number of distinct Oracle or Fallback signatures meeting VII.53.

The other partition's mint after the split is quarantined, not destroyed, until reunion. Reunion does not pay the same joule twice. Title disputes are listed. They are not averaged away. Trinitas remains the triple ledger. This room does not print a new ESU rule and does not move III.1.

A harm-and-yield packet for a compound or a ration on a public channel publishes the measured effect on fertility of the XY–XX unit, inside the band the packet already has to publish. An effect outside that band is adulteration under IV.12. Concealment of harm on the public plate remains the Nefas line VII.52 already names. This room adds the measurement. It does not add a crime, and it does not touch a private plate.

IV.2 already requires moving-target dispersion of Oracle roots and a published hardening budget, so that loss of the full set is not the designed case. That budget is a line on the open ledger of VII.31, published each SMW. A missing line after one SMW is a Major Entropy Event, on the same publication footing as a missing survey in IV.15. The line shows where the dispersion stands.

It does not publish a map a thief can use as a directory of vaults: locations of shards and vaults remain unpublished, as VIII.4 already requires. Spend without a dispersion the peer can attest is not the line.