Part 2 of 2. Over-mint auto-reverts, there are no second ledgers, and an offline sapphire truth-triangle keeps the energy standard honest for at least 180 days.
In Sapiens OS, one ESU is one kilowatt-hour of verified surplus above the Baseline Operational Threshold, BOT: seen by a sealed meter and an independent substrate, then signed in the open. No printing. Part 1, "One unit, one metered kilowatt-hour", followed that unit from plant to ledger.
This second part asks what keeps the unit honest after it is born. Every rule quoted is LOCKED in constitution v1.12.2.
the guarantees
Rules about money are easy to write and hard to keep. The guarantees of III.1 Energy-Standard and Meters are written so that breaking them undoes itself.
No printing. A unit appears only when an attested surplus appears. Without the joule, there is nothing to sign.
No second ledgers. There is one ledger. A parallel book or shadow token is prohibited for every actor, and III.8 Debasement names it theft of every holder.
The joule does not shrink. III.8 also closes the quieter door. Its LEX 2AN: "The joule behind one ESU does not shrink by decree."
Critical Entropy and auto-revert. The last sentence of the CODEX, the room's operative text, turns policy into mechanism: "Mint that outpaces independently verified physical surplus is automatic Critical Entropy and auto-reverts." LEX 5AN adds: "The ledger does not wait for a throat." No speech or petition is needed first.
signals \ III.1 energy standard \ LEX 5AN
the ledger guard
mint ≤ verified surplus?every issuance
“The ledger does not wait for a throat.”
In the Glossary, an Entropy Event "halts mint, locks the point" and opens EEP, the protocol by which meters become a legal outcome after a provisional window. A drift noticed late and argued about for years becomes a check that runs on every issuance.
III.8 sums up the spirit: "ESU is a signed joule. It is not a leash."
resilience: the offline truth-triangle
A standard built on witnesses raises a fair question: what happens when the witnesses cannot be reached? Networks fail, from storms, faults or plain distance.
The triangle. "During external-network outages, the Node runs an offline sapphire truth-triangle for ≥1 SMW." Sapphire is the analog medium on which the constitution etches its records. One SMW is 180 days, so half a year of isolation does not stop the ledger (LEX 2AN).
The fourth attestation. When no peer or external Fallback can attest, it is replaced by "two-of-three signatures from the offline sapphire triangle plus one Fallback that did not sign the first three", or by the last valid Oracle slice. And: "The fourth attestation is not a copy of the first three."
signals \ III.1 energy standard \ offline
the offline truth-triangle
Tight caps. Resilience is not an excuse to print. The Phoenix cold-boot mint stays capped "at the trailing 90-day daily allocation for 14 days", not twice, and "remains surplus-backed". Offline mint is "further capped at a published hard fraction of trailing allocation".
The Node "does not wait indefinitely for an unreachable external." It keeps working, carefully, inside limits published before any crisis.
what it changes
For ordinary life, a unit that cannot be quietly multiplied is a unit that can be saved. Savings stop being a bet on the restraint of others. Prices still move, but the measuring stick stays still.
For settlements, prosperity is tied to something every engineer understands. Build plant, maintain it, run it well, and surplus grows. III.3 Direct Allocation sets the order: "BOT coverage outranks every other claim on surplus."
signals \ III.1 energy standard \ two anchors
two ways to anchor a unit
- supply expanded by decision
- costs spread thinly, later, across every holder
- certificates and estimates no instrument confirmed
- a unit appears only with a metered joule
- one signed ledger, no second ledgers
- over-mint auto-reverts, without a vote
$ echo "the joule behind one ESU" → does not shrink by decree
For long-term planning, the question "how much power do we really have?" becomes the same number that governs the economy. The Complexity Elasticity Cycle, 270 days, opens when maintenance exceeds 70% of surplus or meters diverge. A settlement learns early, in numbers, when it grows faster than its foundations.
Across worlds, a kilowatt-hour is a kilowatt-hour on Earth, Mars or in orbit. Each Node keeps its own measured floor, and transfers between them are signed ledger events (III.4).
honest questions
Is energy the right anchor for everything? Not all value is energy. A song or a careful diagnosis is worth more than its joules. The standard anchors the measuring stick, not the worth of everything it measures.
What about a bad year? When real surplus falls, fewer new units appear, rather than more units each worth less.
Can meters be trusted? Only as far as their seals, calibrations and witnesses allow. It is not a claim that meters are perfect; it is a commitment to check them in public.
Who sets the published numbers? Several caps are "published" values. Elsewhere the constitution requires such bands to be hashed to sapphire, and treats an unsigned band as void. These details are where careful contributors are most needed.
closing
There is something quietly beautiful about a currency that starts at a meter. It asks a settlement to tell the truth about itself: here is what we produced, here is what we needed, here is what was left.
And it removes from every office the oldest temptation of power: making more of the thing everyone else must earn.
The energy standard will not make a settlement wise. It does something more modest and more durable. It keeps the measuring stick straight, so that effort and care can be seen for what they are.
One unit, one metered kilowatt-hour.