Limen

Node Zero is the first sovereign from which later Nodes fork. The thresholds are the Entityhood table hashed at activation. Earth canonical is N × BOT_local plus 10 MW surplus; at 2,000 adults and 8 kW that is 26 MW continuous net.

Two thousand adults on the 2.1 Ne-climb model (target 5,000 in ten years), the Arbiter live, the Axioms at 90% VCI, and the Firewall active are required. A charter number below that table is void. Founding adds one simulated attack (executed/passed).

Failure to reach the Ne floor in ten years or two failed annual audits of the 2.1 model forces merger under 6.3. Founding third-auditor duty is satisfied by the Fallback Anchor until three peers exist.

Plant comes first, then population. Analog sapphire is the physical root of truth and is stored across at least two geographically distinct, geologically stable sites. Bitcoin is the broadcast/tamper-evidence. Fallback and Oracle close the triangle.

The Oracle root-set and the uncertainty floor are generated at activation by a multi-party ceremony across three mutually uncorrelated externals, with a published no-backdoor proof, etched into sapphire, and countersigned by the Founder Council and a People sample. The proof is published on Trinitas.

A post-activation challenge window of one SMW runs before the Oracle root-set is immutable. A demonstrated backdoor in that window voids the etch and restarts the ceremony. Founders do not pick a captive set. After activation, auditor rotation is 7.21. Two distinct Fallback Anchors are live at activation.

A Fallback Anchor does not sit on the same physical sapphire that holds the Oracle root-set. When fewer than two peer Nodes exist, a peer-signature slot is a distinct Fallback, never this Node's Steward.

New Nodes grow from high-VCI families beside high-energy plant. Energy may concentrate; census may not. Caput (8.16) is the ceiling. Rete (8.15) is the mesh. The Sovereignty Event Checklist is cryptographic broadcast, kinetic assertion, economic decoupling, and radio silence toward legacy diplomatic noise (with threat-monitoring active).

Inter-Node traffic uses a Bitcoin subset with dedicated relays/mirrors to sapphire. Legacy states exist for trade and for dispute resolution. Everything else is noise.

Two SMWs at Tier C require the Node to shed non-core, evacuate, and preserve the seed under multi-sig (from Stability Reserve) prior to decommission. Founding merger follows 6.3. Dormancy holds a weakened Node on the minimal Biological Layer until recovery, merger, or shutdown. The existential-threat last resort is 6.5, distinct from bad seasons or first contact.

The Root Code is for human flourishing first, and it does not assume that Earth is the only inhabited well. Contact with non-human biologicals or foreign silicon (besides local biosphere animals) is a Planetary Event under Integration, not a Founder hobby.

The default stance is: do not fire first; do not open genomic vaults; do not hand over Oracle roots; do not grant Protected status by awe; do not disclose vault maps, shard locations, BOT floors, or Ne files.

Curiosity is licensed; surrender of keys is not. Silent contact is logged to sapphire; vault locations stay unpublished. Protocol-capable contact opens 8.5. Hostile kinetic or memetic attack on meters, vaults, citizens, or the local biosphere is a Critical Entropy Event (4.3) handled in 6.9. EEP does not try a swarm.

Behavior writes the file — trade, fork-request, theft, predation, missionary rewrite of Axiom 4/12 — not species lists. Disclosure to citizens is mandatory once contact is persistent and protocol-capable.

Protocol-capable is an objective published trigger: bidirectional structured signal, repeated on a second substrate, lasting past one short clock, or any offer that names mint, nursery, Oracle, or title. The Cell does not hold a veto on the disclosure rule. Founders may delay public detail only during active kinetic containment within one SMW. A secret first-contact priesthood is an Entropy Event.

A Contact Cell (Defense, Biology, Energy Commanders, one Founder, one EVL observer) handles persistent protocol-capable contact. No single human speaks for the Node. Sessions are recorded to sapphire and hashed to the citizen ledger within one SMW.

Safety comes first: the Physical Firewall stays live, genomic vaults stay closed, and Oracle roots stay off the table. No foreign body (biological/silicon) is granted unescorted presence at plant, nursery, Campus, or shard-store. Quarantine of material/signal is the default until Biology Command/EVL clear it.

The Cell may accept information/energy trade and joint observation without Root Amendment. Offers that require rewriting sex, Ne, property, the Oracle, or human title to Earth/local well are refused or sent to 1.5. A gift that consumes sovereignty is not a gift. Foreign AI is silicon with unknown alignment. It does not sit in the Triple Arbiter, and it does not sign meters.

A sandbox channel may open. Transparency follows containment: the Cell publishes what was seen, offered, refused, and who spoke.

Internal/external threats are 4.3 plus 6.9. Human protection outranks visitor comfort.

There is no duty to take in outsiders. Intake is a contract: meeting cognitive floor, health floor, BOT contribution (one SMW), and Axiom 4/7 reciprocity. A published intake that meets those floors and writes Speculum is not treason.

Import of persons to dilute Franchise is treason only when Speculum shows intake timed to a live ballot with replacement intent. Pre-ballot intake spikes auto-trigger Speculum review even when the published floors are met; pacing is tied to the ballot calendar. Natural birth and pre-published floor-clearing intake are not treason.

Import to replace founding stock or rewrite Axiom 4 remains treason when EEP shows that purpose. A mass or armed rush of the wall is Halt-in-Progress and may be ended in the act. A quiet illegal crossing is hold, then Transport or Neutralization after EEP. There is no open gate and no waiting list for a raid.

EEP runs. Neutralization remains 7.10. No 24-hour hot-key skips Sortition; Compressed clocks may shorten the provisional hold if TPS ≥ 99.9% and EVL concurs; Sortition still ratifies.

The Node has no duty to feed, arm, house, or breed a foreign polity. Private charity is Axiom 1 and does not write statute. Surplus sent as tribute to a stock or state that fails BOT, Axiom 4/7 reciprocity, or signed yield is void.

Officers who send it stand 6.6. Trade of goods for goods is not tribute. Rescue of a specific named person under contract is not tribute.

Open-ended transfer to a non-reciprocal census is tribute.

No commission, court, union, bank, or church writes Pactum, Codex, LEX, mint, school, or border for the Node. A treaty that attempts this is void at sight. A trade treaty that does not touch those joints may stand as a contract under Axiom 2. An officer who implements a void external statute stands 7.33 and 6.6.

Human settlements off Earth are Nodes or forks under this file. They keep Axioms, meters, and Ne. Trade, rescue, and shared science are contracts. One planet does not rule the other by awe. Contact with non-human minds remains 8.4, 8.5, and Astra (8.18).

Locals — Protected members of this Node — take first claim on housing, work, Campus seats, BOT remainder, and Franchise questions that touch the border. A foreigner never outranks a local on those joints. Talent may be hired. Talent does not move ahead of a local.

Borders exist. They are physical, legal, and metered. Axiom 8 exit is not an open gate inward. Removal of the edge is void. Trade crosses a gate. People cross a contract.

Kindred Nodes, quarters, and colonies are lawful. Each stock that founds one is responsible for its plant, its crime, and its children. No kindred house drafts another for tribute. Hatred framed as justice remains 6.11. Self-rule is not a license to raid. A Node may publish itself as a kindred well — by stock, tongue, or other named people-filter — and hire to that packet (2.25).

The following joints stand: household as first school; duty to work; family as the transmission unit; citizen first at the gate; false naturalization stripped; merit in office; no dual loyalty; subsidiarity; militia; local purse; people-seal on Root; speech, press, assembly, petition; personal arms; no forced billet; particular search; due course before life, liberty, or title; one act, one sealed verdict; no compelled confession; confront the accuser; speedy public file; just compensation after a verified taking; powers not etched remain with the house; inviolable domicile and letters; parent duty to raise and teach; inheritance; land at the gate is not a foreign default; petition against an office; the kernel cannot be amended out of existence; no taking without judgment of peers; produce the body; the public file is digital and readable; defense is a duty; the ledger is open; title is fact; a party that exists to wreck the order does not sit Franchise; written law over mood; the magistrate bound; mixed triad; colony as seed; foedus before needless sack; the stage without gravitas.

Foreign text never writes this file.

If witnesses are dead, the last Protected adult with a reconstructable k-of-n fragment set and Fallback attestation that no other fragment remains opens Phoenix alone; the Fallback must itself meet VII.53 independence and the act writes Speculum for peer review within one short clock. A last-will packet may name the interim Steward. It does not reduce k-of-n.

A lone fragment opens Phoenix only when Fallback attests that no other fragment in the published set still exists. The seed is the reconstructed Root plus the genomic vault.

If the vault is destroyed, living Protected genomes are re-sequenced to new sapphire under EVL. No office and no silicon invents a stock. If no living human genome remains, the Node is dead. A woman may bear or run the vault; a man runs the vault and the marked machines.

With zero humans, marked silicon may run energy, womb-plant, and vault on a last-will packet until a human matures and takes etch. A non-sapiens body is not a person. Facies marks the machine. First mature humans restore Steward and People from the last clean hash. Ne is the target, not a veto on the last throat. Silicon does not take Franchise, pairing-as-human, or Neutralization.

Sapiens OS and this people grow by seed, not by absorbing a map. A Node is a vertex. The edges are trade, exam-root hashes, EVL challenge, rescue contracts, Tabula and Forum bookings, and the broadcast leg of Trinitas. The mesh may be thin.

It need not cover a country, a continent, or a planet before the next vertex stands. Off-Earth vertices are Nodes or forks (8.9). No mesh organ writes Pactum, Codex, LEX, mint, school, or border for another Node (8.8). Recognition of a peer is weather plus meters, not a parliament.

Commercial disputes between Nodes go to a published arbitration convention with a staked bond from each Stability Reserve. Constitutional questions stay inside each Node. Gradus and UID hashes may be recognized by contract and re-exam.

Direct exchange between Nodes is the default. A hub that becomes the only path is concentration (3.5) and is forked. A camp below Entityhood is a camp. It may trade. It does not vote as a Node.

Each Node publishes N_max, default 8,000 Protected adults on Earth, retuned off-Earth by the Planetary Constants Vector. Ne remains the effective-size floor of 5,000. N_max is the census ceiling.

Children, Neutral, and Unprotected persons count in the published density band even when they do not count in N_max. Energy-dense plant is lawful. Body-dense slum is not. A published hectares-per-adult-equivalent band travels with N_max.

At 90% of N_max the seed-fork protocol opens: plant packet, Continuity Bond logic of Axiom 8, and a named Steward-candidate. At 100%, inward intake other than birth pauses. Fission into a new Node must complete within one SMW or the parent drops a tier for that cycle.

Merger of a Tier-C sibling (6.3, 8.3) may not be used to stack two ceilings into one megalopolis. Axiom 8 exit remains. Caput does not trap a man inside a full town; it forbids the town from becoming a nation-stack.

When a camp or a foreign well can hold BOT, Axiom 1, Axiom 3, Axiom 4, and Axiom 7, and does not preach Command Test I–VIII as public order, the Node offers Foedus before kinetic reduction: trade, seed-Node path, or Socius standing under this file. Foedus is a contract (Axiom 2). It is not tribute (8.7). It is not an open gate inward (8.6). It is not silent replacement import. The well keeps its house if it keeps the meters. Plant first. Caput still splits a pile (8.16).

A raid, an armed rush, a massacre-call, or a desk that demands the nursery or the Oracle is not owed Foedus. Defense and Halt-in-Progress remain. Mere refusal of Foedus, without a live NAP violation, leaves the well untouched. Needless destruction of a yielding well is waste under Omega and an Entropy Event.

Astra is the Node's space and contact arm: launch, habitat, off-Earth seed, and the standing study of non-human minds. It exists for verified human and Node yield — surplus, Ne, Character, and a well that can stand — not for a private throne and not for awe.

Plant and kit sit under the concentration cap (3.5). No natural person, lineage, or Public Body holds Astra as a sole key. The most capable published packet may command a tour.

Tours follow 7.29: default short; extension only on meters, no superior successor, and no triad removal. Nobody holds Astra for life. Best-of-best means Agoge or equivalent, Cursus, Character floor, and signed yield. Silicon drafts trajectories. Humans sign launches that can kill a well (4.6, 4.23).

Contact specialists sit inside Astra and answer to the Contact Cell (8.5). They research continuously: signals, biology, protocol. They do not open genomic vaults, hand Oracle roots, or grant Protected status by wonder (8.4). Disclosure of historical contact files follows 5.21. A live threat-box is time-boxed. A secret first-contact priesthood remains an Entropy Event.

Off-Earth camps become Nodes or forks under this file (8.9). Caput still splits a pile. Foedus still precedes needless sack.

A group that publicly declares it is building toward Entityhood under this file is a Castra from the day of declaration. It is bound by Axioms 1, 3, 4, 7, and 12 before it is a Node. High-tier acts in that window remain chargeable after Entityhood. The EEP clock may start at Entityhood. The act keeps its date.

A Castra that commits Nefas under this name forfeits Node claim for one CEC. Founders stand under the parent Node or the first peer that will take the file.

If any parameter of the Planetary Constants Vector stays outside its published range for more than thirty days, and EVL plus one peer Node's sensor confirm it, the Node is in Vector Breach. An unconfirmed or fabricated Breach that opens dormancy is office-falsehood.

BOT as a governance floor freezes at the last valid value for Entityhood and for new plant authorization. Survival response follows measured physics, not the frozen number. Evacuation stores and dormancy may open at once. A new Vector waits on EVL, Oracle, and Fallback. If the breach lasts more than one CEC, Dormancy or Fork to a valid range is lawful. The breach writes Speculum daily.

The public text, the exam-root hashes, and the Trinitas hashes ride on three carriers that do not share one operator: the broadcast leg the ledger already uses, analog copies in citizen or Castra hands, and a peer or Fallback relay when one exists.

Before a peer exists, the third carrier is a second analog site, geographically distinct from the first. A Castra keeps two distinct copies at once. A Node that has gone one SMW without the third carrier writes that fact on Speculum and puts SHI on watch.

The absence does not, by itself, open a Critical event, and it does not void an Entityhood threshold already met. Loss of one carrier is weather. Loss of two opens restoration from sapphire and from the copies. No carrier is the constitution. The hash is. V.40 is the citizen's right to hold the text. Nothing here instructs a breach of law or of anyone's system.

A Castra or a Node answers lawful process in the jurisdiction where it stands. It keeps dates, the name of counsel, and, once a ledger exists, a public cost line under VII.31. It does not forge a record, hide a book, or evade a lawful service of process.

An order to write a false meter, a false karyotype, or a false ledger entry is not performed as truth. The camp states that refusal in the proceeding and seeks the remedy that jurisdiction provides. Work the order does not forbid continues. Foreign text does not write this file, as VIII.8 and VIII.13 already say.

Repeat process that never reaches a merit finding is logged. Once the Node has EEP, that pattern may be Lawfare under VII.28. Before Entityhood it is only a log. It does not, by itself, move VCI or close the camp. This room is not a manual of concealment and not a permission to harm any person.

When no peer and no Fallback has answered for one short clock, the Node enters Island. Clocks already anchored under I.6 keep running. A new official clock that requires an Oracle or Fallback signature waits. The Node does not mint a substitute signature. It keeps local meters, BOT, school, and Tabula. It does not etch Root.

It does not open Neutralization and it does not fire the 99.9% gate, because those require independent substrates under VII.10 and VII.53. Local files below that gate may continue on local attested meters. Island writes Speculum each day it lasts. It ends when a peer or a Fallback attests the Node's hash. Island is not a pretext for a self-graded killing or a self-graded mint above III.1.

Consecutive days are counted at the Node that holds the file and the accused, on that Node's published civil day, from the timestamp I.6 already anchors. A packet from another well carries the time it was sent and the time it was received. Transit is recorded.

It does not shorten the local count, and it does not stack a second count on top of it. A Nefas docket sits on the well where the act and the accused are. A distant well does not ratify Neutralization. No duration in this room replaces the twenty-four-hour docket, the thirty-day hold, the ninety-day clocks, or any other number already written.

A peer's Planetary Constants Vector is that peer's weather. It does not move this Node's BOT, school, or kinetic floors. A visitor who fails a health or kinetic floor only because the body is tuned to another well is re-tested on this well. The visitor is not made Unprotected by the import of a foreign number.

Recognition of Gradus and of UID remains contract and re-exam, as VIII.15 already says. Conflict between Nodes is not appealed to a third throne. Each Node keeps its own file. Axioms do not move to settle the conflict.

A group that forks while Island is open, or while EVL cannot yet measure, posts the Continuity Bond of Axiom 8 into local sapphire and into physical plant a returning peer can meter. The formula is unchanged: N_parent × BOT_local × one SMW, in plant, meter, and spare geometry, not in tokens alone.

Until a peer or Fallback measures it, the fork's Rete privileges stay frozen, as VII.55 already freezes a shortfall. The parent does not pretend the bond is satisfied. A Colonia founded on that path is a seed-Node under Caput and Rete: plant first, then people. It is not a raid and not a second constitution.

Before seals combine, both ledgers are published for one SMW. Conflicts of title are listed, not averaged. A meter that fails EADIP does not enter the surviving book. Nefas files and live VII.10 holds travel with the person. Merger does not close them and does not stack two census ceilings into one, as VIII.16 already forbids. Forced merger of a Tier-C well remains the rule already written. This room adds the open books.

VIII.6 already reviews intake timed to a live ballot, and it already says lawful intake is not treason. This room makes the timing readable. A cohort admitted inside one short clock before a Root-adjacent motion is listed on Speculum as a cohort of admission dates. The list is a fact about timing.

It is not a finding, not a collective charge, and not a second weight on any ballot. Axiom 7 stands. If a charge is brought, it names a person and an act under VIII.6. Natural birth is not a cohort.

No contract sells Root, the Oracle, the nursery, the axiom text, or a seat. A sale of plant is title under Axiom 5. If the sale would drop the parent below BOT, the Continuity Bond logic of Axiom 8 applies to the part that leaves, and VII.55 remains the enforcement. A buyer does not buy Franchise, a Founder seat, or etch. Axiom 6 remains: authority is re-earned. A deed that purports to sell the kernel is void at sight.

If, inside one short clock, a camp loses a public carrier, an external payment rail, and ordinary access to external identity papers, it treats the three as one weather event. In-kind stores under III.20, copies under V.40 and VIII.21, and Genomic UIDs already in hand keep the camp's internal life. A Genomic UID is not a counterfeit of an external identity document.

The camp does not print a false paper and does not mint unbacked ESU. Lawful process under VIII.22 still applies. The event is logged. It is not, by itself, a license to harm any person or to enter any system by deceit.

Commercial arbitration remains the convention VIII.15 already names, with the staked bond from each Stability Reserve. The arbitrator publishes payers for that case and does not sit if a payer is a party.

A convention, a treaty, or an award that writes Pactum, Codex, LEX, mint, school, or border is void, as VIII.8 already voids external rule of those joints. Constitutional questions stay inside each Node. The award binds the trade it was hired to bind, and nothing else.