Aegis

The Physical Firewall is the Node's kinetic boundary. Collective operational kit stays under the 3% surplus cap. Hardening spend — sensors, sector locks, approach-cost denial, and published Murus compute — is counted separately from operational kit and is not the 3% cap. Hidden kit is denial. It is not capital, and it is not a second mint.

A single confirmed Critical Entropy Event may open an interim 5% operational-kit threat premium, re-authorized at the next SMW or it falls back. A standing 5% still wants EVL threat across three SMWs. Founder approval is independent of the Aegis Domain Commander. An attacker who forces many small events to exhaust the interim premium does not thereby drop the hardening layer.

Individual arms remain personal (Axiom 9). A Grace Period with N+1 power redundancy precedes Phoenix or seed-denial triggers. Seed-denial (6.5) starts at ≤30% integrity after grace.

Aggression above that draws defense, not seed-denial. Phoenix is 7.3. Termination is 8.3. Neither is Contact.

Duels Protocol governs resolved ranked disputes under EEP. A lethal-class outcome is not a legal excision without a separate high-tier EEP finding (7.8). The Armed Militia Norm permits personal self-defense within the NAP, scaled by rank and personally funded.

Both are subordinate to the Firewall and may be suspended by the Steward with Memory concurrence during External Threat. No single throat suspends force-law alone.

Halt-in-Progress: a mature Protected adult seeing a high-tier crime in motion (murder, rape, sexual act with a child, or armed attack on a school/vault/plant) may use lethal force to stop it when the threat is imminent and unambiguous. Less-lethal force is required where it stops the act.

A halt not immediately corroborated by a signed sensor, a second witness, or the victim's body in view is not protected as Halt-in-Progress. It is ordinary EEP.

The adult must not hit bystanders and must stand for EEP within 24 hours. A halt that was not high-tier is itself high-tier if the adult fired on a rumor. Neutralization of a captured person remains 7.10; this section does not open 7.10.

Tier C faces forced merger under Founder Council action, not under absorber action. Dormancy holds a weakened Node on the minimal Biological Layer until recovery, merger, or shutdown (8.3). Resourceless-Protected is the status when Transport has nowhere to go.

Neural Modulation is air-gapped, cryptographically metered, and reversible. Every modulation is logged, appealed, and audited by EVL. Malicious or unapproved modulation of a citizen is a high-tier crime against the system.

Integrity at or below 30% after grace starts a signal, not a burn. Burn requires three confirmations: vault integrity on two physical domains; Founder/Phoenix liveness that this is an existential threat (not winter); and lineage multi-sig. If 70% cannot sign but 40% of distinct lineages sign with liveness, preserve shards and route to Dormancy (8.3). A single compromised sensor shall not execute the species.

Deliberate corruption of meters, keys, mint, EEP, or SHI is high-tier. Live attribution (6.7) publishes the finding. Process containment (6.8) kills attacking processes.

Neutralization stays 7.10 and cannot be hot-keyed here. A judge, juror, or officer who frees a person later shown by signed meters to commit a new high-tier killing/rape is a principal under this section; the file runs the Compressed Capital Docket (7.10). Resignation does not close it.

Office is not a shield.

Confirmed attacks on meters, vaults, or citizens are published to the live network with location and with identity. False attribution is evidence tampering.

Attacking processes are contained and killed under this section. A person is tried under 7.8 and 7.10. This section cannot open 7.10.

The Node acts as an awake immune system: it detects, attributes, contains, sheds, and remembers. The waking arm that walks the street is Vigiles (6.27).

Hostile kinetic or memetic attack on meters, vaults, or citizens is a Critical Entropy Event (4.3) handled here. Fever is CEC. Antibody is EEP plus Halt-in-Progress. Memory is the sapphire record and the three-seal packet. A part attacking the body is a pathogen. A part reporting a true fever is not.

Any group taking ESU, labor, land, or speech-as-cause files as a Public Body: named officers, signed ledger, published purpose, and open software if it writes policy.

Secret societies, off-ledger political money, and houses paying for propaganda, race tension, street cadre, or foreign war are Entropy Events. Assets move to the Stability Reserve, and officers stand EEP. A hobby club that takes no surplus and writes no statute is not a Public Body.

A named patron who funds replacement import, solicitation of massacre, or shadow statute from outside the Node is a principal under this section and 8.6. The name of the patron is published. Ancestry of the patron is not the charge.

A political officer, cleric, teacher, or broadcaster gathering a following by calling for the killing of a people, sex, or stock commits solicitation of massacre. The South African form—officials calling for the killing of Whites—is that crime. It is not a "hate-crime" (word struck).

The call is a Critical Entropy Event; the platform is shut and the speaker stands EEP. TPS ≥ 99.9% runs Nefas. Ridicule, harsh census talk, and ugly truth remain speech (5.12).

An organized or official campaign that names a stock as thief-of-the-land and commands intake, reparation-seizure, or replacement of that stock as public duty is this section plus Occupatio in speech.

"Stolen land" as intake writ, "oppressor-stock must pay with the house," and the same command under a new slogan are not critique. They are the call. A person stating a historical land sale with sources in Bestiarum is not this section.

A program to kill is not speech. A religious figure preaching it is not shielded by cloth.

After Sortition ratifies that a named person raped a child, Neutralization runs under triad control at a published supervised place within 24 hours. The father may stand as witness-executor inside that packet. He does not act alone. If he declines, order follows: mother, siblings, then male line, still under triad control. A killing outside the room or after the window is murder. The street does not ratify.

A person who enters or holds another's house, land, or plant without title, after written notice, commits Occupatio. Process may not be used to sit. Removal is immediate after EEP confirmation of title and notice. The 90-day Transport clock does not apply to the occupier's body in the stolen room.

Damage is restored from the occupier's ESU and JI. Organized Occupatio is Street Cadre plus this section. A judge who delays removal past the published clock without a title dispute of TPS ≥ 90% is 6.6.

A Founder, Command-tier officer, or Domain Commander who votes to open lethal external force must place self, spouse, or military-age sons into the same published risk band as the first wave, or the vote is void. Remote war by men with no skin is a high-tier process crime if the force proceeds on that void vote. Defense of the Firewall against an incoming attack is not this section. Axiom 9 remains.

Money, media, or office from a foreign polity, foreign silicon, or non-resident patron that moves, or is attested to have moved, mint, school, border, Franchise, or Neutralization is a Foreign Hand. The charge is the joint moved, not an unprovable intent. It files or it is seized into Stability Reserve. Persons who take it to move those joints stand EEP. 8.5 remains for protocol contact.

An organized band that uses riot, mask, fire, coordinated assault, siege of plant/school/court, or coordinated replacement-propaganda as political method is Street Cadre. Cloth, slogan, and claimed victimhood are not a shield. Names such as Antifa, or any rebrand, are not a shield.

It is high-tier when it kills, rapes, burns plant, repeats after notice, or runs a 6.11 campaign. Halt-in-Progress applies to an act in motion. The organizer and the funder are principals under 6.10. TPS ≥ 99.9% on the campaign or the killing sits Nefas.

A unit that takes ESU and cannot show a published failure prevented or watt saved across two SMWs is an Entropy Event under 7.5. Human-resources liturgy, morale offices, and doctrine desks are first in line. Shed governance first in winter. Persons are Transport or reassigned. The desk dies.

Violence that stops a high-tier act, a raid, or a pathogen in motion is lawful. Halt-in-Progress, militia, and Neutralization after EEP remain the gates. A doctrine that forbids defense while the house burns is mind-virus. Wanton cruelty stays a status offense. Necessary force is not cruelty.

Protected and Neutral persons may assemble in the open without arms drawn, and may petition any office on a signed file. Assembly that becomes street cadre, occupation, or massacre-speech is 6.16 and 6.11. A petition does not freeze mint, border, or Neutralization. An office that refuses to log a signed petition stands 7.33.

Every mature Protected adult holds the 2.4 weapons gate. A standing Militia trains in cycles: halt a crime in motion, bind a wound, clear a street, and hold a door. Off-duty members in plain clothes may intervene as Halt-in-Progress when the act is in view. They show UID after the halt. They do not run a second police with a secret list.

The standing certified watch is Vigiles (6.27). Militia remains the trained people. The standing professional force is Exercitus (6.28). Rank in Militia follows VCI, kinetic gate, and signed drills. Wanton halt is itself high-tier. Civic floor remains 2.4. Professional militia-mode is Agoge (2.24): certified, daily completion, and no mid-block walkout.

Officers and Domain ranks carry a published emergency brief: assist, search, repair, carry, keep a lane, or hold a door. Drill is mandatory. Failure to take the brief in a declared Entropy Event is office-falsehood plus status loss. Ordinary Protected adults drill a lighter lane (carry, search, first bind) so that the ship is not a theater of spectators. The brief does not mint a standing secret police.

Chosen heat is a tool: cold, load, dirt, and contest. It raises the body that must keep the plant. Unbooked riot is not that tool. Consenting adults may meet in published contests: duel under 6.2, bare-hand fight, ring, pit, or a brawl they named in advance.

Each signs a packet: rules, stop-word or no stop-word, and a medical escrow large enough to cover published trauma bands. The Node hospital does not eat that bill. If the escrow is short, heal-to-stable is a loan against the fighters' and the promoter's JI, and then Transport if they dump the debt on the house.

A fight that spills onto an unwilling body, a street not booked, or a child is ordinary crime. Death inside a sealed lethal packet is not murder unless fraud, drug, or a hidden third hand. Ranked Duel stays 6.2.

The Firewall is the first line and the last lock. It watches ideas that demand a meter be ignored, objects that breach plant or body, civilizations that treat the Node as pasture, and beings that will not take a human face-rule. Hits are graded on Prioritas, and they write Speculum. P0 takes full spare surplus. Memory may propose a pattern.

Steward and People may confirm a rule; the change still needs the triad's etch authority, and no single throat, and no Domain Commander, may drop the wall alone.

An insider who opens a gate, mint pipe, school packet, or vault without triad seal plus Firewall concurrence commits sabotage. The wall updates from Vigil and from every failed probe. Training ingestion is isolated from execution: a recommended freeze trains only after Signum match-or-isolate on the recommendation packet.

Adversarial probe-patterns aimed at shaping future freezes write Speculum and do not enter the live kernel until EVL signs. It does not rewrite Axioms. It does not freeze private human speech. It may freeze official pipes. It does not fire kinetic force. Kinetic breach response is triad-signed on a named act. Murus recommends; humans execute.

Non-sapiens among sapiens — silicon, metal, grown flesh without a human karyotype, foreign biologicals under 8.4, and machines that walk — carry a published mark: form, sound, or light that a child can read at conversational range. A silent electric car that must make noise is the joint.

A machine built to pass as a man in a market, a bed, a file, or a vote is fraud plus sabotage. Tools stay tools. A human with an implant remains sapiens if the living core is still that human. Franchise, pairing-as-human, and public-file sex are for sapiens. Robot yield sits on the commanding human's JI. Awe does not grant Protected status.

External mass, or internal organized force, that aims to replace Root is P0. Hidden denial — sensors, sector locks, unpublished approach cost — exists to make the assault burn more joules than the well returns. A cheap takeover is a design fault. Speculum writes the line. Gelu freezes the official pipes the attackers would ride. Murus stays up.

No single Steward, Memory, or Commander opens a gate, drops a sector, or hands a vault. Militia and Halt-in-Progress hold the street. Officers run the published emergency briefs. War-without-skin still binds the throat that opened the force.

The city is layered: short interior lines, plant and vault not on the pretty ring, and a sensor mesh as a nervous system that logs approach without publishing maps. Hidden kit is denial and hardening — approach cost, sector isolation, seed under multi-sig — not a founder off-switch. Silicon aims and briefs. Humans fire under the triad.

If a sector falls, isolate it, keep the shards, and Phoenix from an intact well. Seed-denial is last and still needs three confirms. Occupation of houses is 6.13. A replacement creed riding the assault is Command Test plus Expurgo. The Node would rather place a dead sector in Dormancy than let the comet wear a uniform.

Subversion — kinetic, memetic, mint, or desk — is designed so that the joules to succeed exceed the joules the prize can pay. The joint is the same as that of a flood that cannot knock a door that costs more than the flood.

Cheap mass-signup, cheap gate-crash, cheap school capture, and cheap Memory poison are faults. Vigil publishes the cost band. A vector that becomes cheap is patched this SMW, or it is office-falsehood of the desk that left it cheap.

Vigiles are the Node's waking immune arm. They detect, hold, and deliver a person or a process to EEP. They do not sit Neutralization. They do not write Root. They do not keep a secret list. Halt-in-Progress remains 6.2. Militia remains the trained people (6.20).

A Vigil is a Protected adult who holds Cursus Gradus on the Ius line and the arms line, has cleared the published Character floor, and is drawn by Sortition from that pool for a published tour. The same pool supplies Iudex and the jury (7.51).

No throat stays on watch, on the bench, and in the jury in the same SMW. After a tour, one full CEC out is required before return to the same chair (7.29). A Vigil who judges his own catch is void and stands 6.6.

Proof order: signed sensors, Speculum, CDPC, then a human witness. A rumor is not a hold. A hold without a named act and a particular writ (7.37) is Occupatio of the person. Live attribution (6.7) publishes the catch. Corruption of a meter, a key, a file, or a release that births a new high-tier act is already 6.6 and sits the Compressed docket.

Vigiles are paid as plant: Tabula rates at the safety packet (3.18). They work for this Node's humans. A foreign desk, a patron, or a stage does not hire them.

Three layers, none of them a throne.

Militia (6.20) is the trained people. Every mature Protected adult holds the weapons gate and drills. This is the yeoman.

Vigiles (6.27) are the waking immune watch inside the Node. They detect, hold, and deliver.

Exercitus is the standing professional force: Legio on land, Classis on water, Alae in air and near orbit. It exists so that the arts of long defense and offense — plant-scale weapons, ships, craft, sensors, logistics, and the research those arts drag forward — do not die in a generation of peace.

It is paid from the collective-kit cap (Axiom 9, 6.1), after BOT, as first-band yield-to-life (3.18). It has no second mint. "Guard-pay" as a purse the law cannot fire remains a refused kill (5.32).

Command: the Steward holds operational command. Memory briefs. People witness reconstitution and kit-counts. Domain command rotates (7.29). Exercitus does not etch Root, sit Founder, write school, or open Neutralization. A war vote still requires skin (6.14). Cross-Node force moves only by Foedus or by incoming defense.

Praetoria. Cohors Praetoria is a named, visible category: the highest-capability cohort of Exercitus, land-sea-air-orbit. Entry is Agoge plus the published arms Gradus, Character floor, and a public roster. The title Praetorian is motivational and earned. It is worn on kit. It is not a second mint and not a Founder seat.

The tour follows 7.29: default short, extendable only on meters, no superior successor, and no triad removal. The triad holds the halt. A Praetorian who moves mint, Franchise, or etch is 6.6. A cohort that crowns itself is the pathogen the old name became. It is paid first-band from the kit cap, the same as plant.

An external taking of plant, meters, or the ledger is Occupatio unless a contract under Axiom 2 and compensation the ledger can verify are both published. Title under Axiom 5 remains.

The Node logs the taking, refuses to treat the taker's mint as this Node's ESU, and continues from shards and from any peer that will contract under VIII.15. Defense of a person remains Axiom 1 and VI.2, which already exist. This room does not authorize an offensive campaign, a reprisal against the uninvolved, or any harm to a person. It keeps the books honest and the title unwashed.