Part 1 of 2. In Sapiens OS money is measured, not printed: one ESU is one kilowatt-hour of verified surplus above the baseline, signed on one ledger.
Somewhere a turbine turns, a panel warms in the morning light, a reactor holds its quiet temperature. A sealed meter counts the joules that leave the plant.
In most of the world that number ends its life in an engineering report. In Sapiens OS it begins a second life: it becomes money.
This is the idea at the centre of Annona, the third department of the constitution. Its first room, III.1 Energy-Standard and Meters, says it in one sentence: one ESU, the Energy Settlement Unit, is one kilowatt-hour of verified surplus above the Baseline Operational Threshold, held as a signed ledger token. No printing.
This is the first of two parts, a slow walk through that sentence. Every rule quoted is LOCKED in constitution v1.12.2.
the problem of unanchored value
A unit of account is a promise about the future. Accept one for an hour of work, and you trust it will still buy something next season and in ten years.
For most of history that promise was tied to something scarce, a weight of metal or a measure of grain. Modern units are more abstract. Their supply can be expanded by decision, faster than anything real stands behind it.
The cost does not arrive as a bill. It arrives later, spread thinly across everyone who holds the unit. Energy has a similar weakness: much of what is said about it rests on certificates and estimates that no instrument has confirmed.
None of this needs a villain. It is structural: a unit that can be issued without a physical event behind it will, sooner or later, be issued that way. The constitution's answer is not a better custodian. It is a unit that cannot exist without the event.
what the energy standard is
The room's purpose, its PACTUM, calls this "the only honest currency". Its operative text, the CODEX, fixes four things.
The unit. One ESU equals one kWh of verified surplus: 3.6 MJ above the floor, in the terms of the Joule Index room, III.6. The smallest piece is 0.001 ESU, a single watt-hour.
The floor. Surplus counts only above the Baseline Operational Threshold, BOT. On Earth that is 8 kW continuous net per adult equivalent: the steady power a life in the settlement needs before anything is called extra.
The form. An ESU "exists only as a signed ledger token" (LEX 1AN). Not a paper note, not a private balance, not an entry an official can type.
The prohibition. "No office, Founder, Phoenix, or silicon may emit unbacked tokens or second ledgers." Administration, founders, the emergency cold-boot path and machines are all excluded alike.
signals \ III.1 energy standard \ the floor
only the surplus becomes currency
= 3.6 MJ above BOT, a signed ledger token
2,000 × 8 kW = 16 MW floor + 10 MW surplus = 26 MW
The floor is measured where people actually live. The Glossary retunes BOT for other worlds by local gravity, atmosphere and radiation, and IV.4 Planetary Operations recalibrates it automatically. The kilowatt-hour stays the same everywhere.
The Entityhood room makes the scale concrete. A settlement becomes a sovereign Node only when its plant covers N × BOT plus 10 MW of surplus. On Earth, at 2,000 adults, that is 26 MW continuous net: 16 MW of floor and 10 MW of surplus.
A community does not get a currency by declaring one. It earns the right to mint by first keeping its people powered.
how a unit is born
Every ESU, the CODEX says, cites "a separately attested physical surplus event: a metered joule on an independent substrate, serial-sealed, with the last calibration hashed." Each phrase does work.
signals \ III.1 energy standard \ minting
how one unit is born
-
01plantenergy leaves the plant
-
02sealed meterserial-sealed, calibration hashed
-
03independent substratea second system sees the same event
-
04above BOTonly the surplus counts
-
05signed token1 ESU = 1 kWh, signed in the open
It starts at a sealed meter. Energy flows out through a serial-sealed meter, so tampering shows. Its last calibration is recorded as a hash, so anyone can check which calibration the reading relied on.
It is seen twice. The reading must also be registered on an independent substrate, a second system that witnessed the same event. A ledger that signs a surplus "the independent substrate did not see" is void, and the CODEX names it debasement, even if two of three signers agreed.
It must clear the floor. Only the part above BOT counts. Energy that keeps people at the baseline is never turned into tokens; it has already been spent on the life it sustains.
It is signed in the open. Minting is "disclosed seigniorage against signed surplus": the gain of issuing a unit is recorded publicly, never hidden. Axiom 5 repeats this among the twelve constants of the constitution.
Other rooms reinforce the chain. VII.8 Epistemic Execution excludes any reading that fails its seal, serial or calibration check, and writes the failure to Speculum, the live public log. Its principle is one line: "Sensors and signed meters outrank fame, office, and stage."
IV.2 Grid and Sensors adds that critical-meter keys include an Oracle root "the Node cannot rotate alone", held at founding by at least three uncorrelated externals in distinct places. No local authority can quietly replace the keys that make a reading count.
next: keeping the unit honest
A unit born this way is honest at the moment of its birth. The harder question is whether it stays honest: under pressure, in a bad year, when the network goes dark.
Part 2 takes that up: the guarantees that make over-minting undo itself, the offline truth-triangle that keeps the ledger working through half a year of isolation, and what a measured unit changes for ordinary life, for settlements and across worlds.
One unit, one metered kilowatt-hour.