Wiki

An open operating system for human consciousness: a constitution, Constitutio Intermundia, that a group of people can run together to govern itself by what it can measure.

Because it works like one. It sets the rules everything else runs on, it is split into modules that can be audited and replaced, it keeps a log of every official action, and it is built to detect its own faults and propose fixes.

Decisions follow signed measurements, not volume, fame or office. Every rule names the meter that shows whether it works. Opinion and insult remain free; they simply do not steer.

The single root of authority. Every act, and the constitution itself, answers three questions: does it raise surplus, does it raise biological or cognitive excellence, and does it minimize entropy and the free-rider while maximizing human flourishing? Work that claims progress must clear all three.

The operating constants every part obeys: non-aggression, contract, truth and free speech, family, property, merit, individual responsibility, fork and exit, defence, cognitive education, reciprocal status and ideological immunity. They move only by the Root amendment path.

So it can be read at three depths. Pactum explains why the rule exists, Codex gives the full rule, and LEX states it in one short line that can be checked. A reader in a hurry reads the Pactum; anyone applying the rule reads the LEX.

Into nine parts, Prima to Omega: purpose and axioms, the body and family, surplus and the ledger, plant and machines, mind and school, the edge, decision and trial, birth, death and contact, and the master aim. An opening section and a glossary come first.

Latin for “between worlds”. The same text is meant to work in a camp on Earth, on the Moon, on Mars or in an orbital habitat, with local physical constants plugged in.

It is written to be run. It names thresholds, clocks, meters and procedures precisely enough for an engineer to check them. Whether and where it is adopted is up to the people who choose it.

An Energy Settlement Unit. One ESU is one kilowatt-hour of verified surplus above the baseline, recorded as a signed token on the ledger. The smallest piece is 0.001 ESU.

Because captured surplus is the one civilisational measure that is hard to fake. A unit backed by metered joules cannot be inflated by decree, so the value in every pocket stays honest.

The Baseline Operational Threshold: the energy needed to keep one adult equivalent running. On Earth it is 8 kW of continuous net power per adult. Off Earth it is retuned to local conditions.

Nobody by decision. ESU is minted only against a separately attested physical surplus event: a metered joule on an independent substrate. No office, founder or machine may issue unbacked tokens or keep a second ledger.

Any unbacked mint, hidden second token, coin-clip or redefinition that shrinks the joule behind one ESU. The text treats it as theft from every holder at once and lists it as a high-tier crime.

Contracted interest that is not tied to real, named plant or goods (usury) is banned. Lending as a published risk-share in a named plant is lawful: the principal returns from the yield of that plant.

No person, lineage or public body may hold more than a published share of live plant, mint or land. The defaults are 2% of a live ballot and 5% of lineage authority. Holdings above the cap are divested into the Stability Reserve within 180 days.

In a fixed order: baseline coverage for everyone first, then plant, then operational need by tier. Speech does not move anyone up the queue. A Stability Reserve of 2% of daily minting is kept apart.

As signed ledger events, checkpointed across both Nodes within one 180-day window. Emergency transfers for existential need can clear in 24 hours once the briefing models verify the need.

The Node keeps an offline sapphire record able to run for at least 180 days. The ledger lives on three legs, and a cold optical or cassette copy is cut every 180 days, readable without the grid.

A count of the useful energy attributed to a person, minus the waste they cause, reported in megajoules. It feeds the contribution score. It is a public ledger line, not a brand and never a reason to harm anyone.

Yes. Mint, plant spend, office pay, public bodies, reserves, defence spend and liabilities sit on an open ledger that any citizen can read. Household accounts stay private unless a lawful process opens them.

No planetary stipend. Inside a Node, a Protected adult who keeps the peace and clears the published work floor receives Annona Minima: shelter, food, heat and clothing, sized to decent survival.

Rest is lawful. A logged pattern of refusing every specific job a person can do may be contested within 48 hours, and a contested pattern freezes until reviewed. Injury, age, pregnancy and childhood never count against anyone.

A public board of the work a settlement needs and wants. Each entry names the task, the skill rank required, the pay, the supervising master and the stop switch. No desk may hide needed work to favour a hire.

An open board where people offer services and used goods. Rank comes from completed jobs and signed notes from real counterparties. No platform or third party may silently mute a lawful listing.

Through Cursus, a catalogue of every lawful craft and science with grades from G0 (novice) to G5 (may examine others). Life-critical crafts are examined in person before a named master. A grade is a hiring signal; it does not buy a vote.

An Adjutor: a ranked colleague who stands beside a new hand on the first published jobs after a grade, and on all life-critical work.

Yes. Meaningful work that has no open job can be posted as Otium Opus, provided the owner consents and the work meets the craft standard. It does not outrank plant, defence or clinic.

Work done by machines counts for the named human who commands and can halt them, within a published cap. If machine output passes a set share of the Node’s surplus, a review cycle opens and the cap tightens.

Land that was homesteaded, capital and the fruit of labour are inviolable under Axiom 5. There are no hidden claims or taxes on existing property, and seizure happens only after a verified violation.

Taking person, property or rights by force, fraud or coercion breaks Axiom 1, the non-aggression principle, and is tried like any other act through the evidence protocol. Several organised forms are named high-tier crimes.

Debasement of the currency, usury, fraud mills, corruption in office, and occupying another’s house, land or plant after notice. Each is a named high-tier act.

Extraction by a false voice, office, relative, charity or court is fraud. Running it at scale, such as call farms or forged-badge desks, is high-tier. A citizen may simply cut such a channel, and the Node never pays ransom from surplus.

Holding another’s house, land or plant without title after notice is Occupatio, a high-tier act. Delay in court does not turn occupation into ownership.

Yes, and a serious one. Hidden public spend, nominee holdings that dodge the caps and an office grading its own conduct are all treated as corruption, a high-tier form of decay.

No. Transport preserves title: the person keeps what they built. The Node carries their goods up to a set mass at its own cost; title to the rest is not extinguished.

No. Durability is the default. Selling a tool built to fail on a calendar is treated as a falsehood, because the Node does not want to become a junk pit.

Yes. Every Protected person keeps a living inheritance contract. Goods pass to heirs; authority does not. A seat is never inherited unless the heir already qualifies for it.

A file names the act and the actor. The evidence protocol scores the signed sensor data. Below 90% truth probability the file is dismissed; from 90% to 99.8% liberty may be restricted while a jury sits; at 99.9% the statutory hold applies.

EEP, the Epistemic Execution Protocol. It turns signed multi-sensor data into a legal outcome after a provisional window. A reading that fails provenance is excluded, and two independent systems must agree before the highest threshold counts.

The Truth Probability Score, from 0 to 100%, that the evidence protocol gives a charge. It is a threshold for process, not a verdict on its own. Humans pass the finding.

A jury drawn by lot (Sortition) from citizens who hold the franchise and a certified grade in law. Juries sit as seven or thirteen. Nobody judges their own case, house, colleague or rival.

No. The Iudex is a rotating certified seat drawn from the same pool as juries, never a career and never held for life. The officer who made the arrest never sits on that case.

The charge names the act; the file is open to the accused; witnesses face them; nobody is forced to confess; there is no second trial for the same act; counsel may stand with them; and any search needs a particular writ.

No. Silicon briefs and may reconstruct events. Only humans pass a finding, and an irreversible sanction ordered on a score or a machine brief alone is void and itself a crime.

The standard removal from a Node. After formal notice and 72 hours to prepare, the person is relocated within 90 days, keeping their property. The Node bears the energy cost and must find a lawful destination.

The text’s term for terminal removal. It is reserved for a closed list of verified high-tier crimes at 99.9% truth probability, confirmed by two independent systems, after a 30-day hold during which appeal is open, and only with jury ratification.

A short, closed list of the gravest acts, fixed in the Root. When signed meters on two independent systems show such an act, a 24-hour docket opens and a jury of seven must ratify or refuse. The list cannot grow by mood, and no one is punished for a thought.

A good-faith error is not punished. A serious charge deliberately fabricated and later proven false bears the consequence the accused would have borne, but only after a jury confirms it.

No. A first good-faith filing is free; a second claim on the same facts within 180 days needs a jury’s leave. A pattern of filings meant to exhaust or silence someone is Lawfare, a high-tier process crime.

Yes. After 180 days outside and six months of net-positive life after return, with an identity recheck, a person may regain Protected status after twelve months. There is a 50 ESU fee and up to two attempts.

No single person. Power is split three ways. The Steward decides and seals, Memory keeps the record and advises, and the People judge through juries drawn by lot. No two of them can act without the third.

A command-tier human who seals approved changes and can restart the Node after a collapse. The role is split in two, Etch for law and Bellum for defence, and no one person may hold both.

The record and its advisers: the sapphire ledger, an external validation layer, an outside Oracle and three air-gapped advisory models. Memory briefs and can halt an unlawful motion, but it never decides alone.

Protected citizens drawn by lot into juries. They try cases, witness every restart, and must sign every patch that becomes law.

Every Protected adult with a verified identity who has reached maturity and clears the published cognitive floor. The franchise is earned and can be lost, and it returns when the conditions return.

No. Weight follows proven contribution, measured cognition and useful energy, but nobody may hold more than 2% of a live ballot, and family weight counts inside the same cap. The method is open; the mark is secret.

A default tour lasts one 270-day cycle plus 180 days, then rotates. An extension needs above-band results, no better successor found by an outside panel, and the signatures of the triad and a peer Node. Steward command caps at three cycles in a row.

No. Every official motion must cite a live clause before it runs. Without a citation Memory halts it at the switch. An override needs Steward and People plus an outside witness, within seven days, and is published at once.

The live public log of every official act: what, who, where, when, how, the meters and the status. A missing line voids the act. The only delay allowed is a few hours during an armed raid, after which the line appears in full.

The supreme human board of a Node. Its seats rotate and stay reclaimable, so a first crew cannot freeze into a dynasty. Two seats remain reclaimable by the founding packet even after the early cycles.

A promise made in a campaign must become a dated, checkable packet. Otherwise the text treats it as a falsehood for hire.

When a health meter trips, an advisory model proposes a patch from existing tools, the validation layer scores it and an integration officer accepts or rejects it. A second independent party attests every accepted patch, and it becomes law only when Steward, Memory and People have all signed.

Axioms 1, 3, 4, 7 and 8, the Oracle root, the population floor, the terminal gate and its 99.9% threshold, and the speech exceptions. A loop that tries is itself treated as a fault.

A single dashboard that combines contribution spread, tier balance, genetic health, maintenance load and audit agreement. Any hard failure caps the score, so four healthy numbers cannot hide one failing part.

A confirmed deviation across several measurement domains above the published floor. Events are graded Minor, Major or Critical, and each grade has its own inspection clock.

A Complexity Elasticity Cycle: a 270-day review, the system’s winter protocol. It opens when maintenance eats more than 70% of surplus, when meters diverge widely, or when the health index falls below 0.40.

A circuit breaker. When two shocks land inside one 90-day clock and independent sources confirm them, the official pipes (extra mint, gate changes, school pushes) freeze. Private speech still moves. It reverts after 72 hours unless confirmed.

Yes, and they are paid for it. Protected citizens may audit published ledger lines, health packets and meter hashes. A confirmed finding earns an ESU bounty. Deliberately false findings count as evidence tampering.

Yes. Citizen patches are welcome and integrate if they are reproducible against published meters, pass audit and validation, and do not touch the locked items.

Rarely and deliberately. The Prime Directive and the Axioms move only with proof across several Nodes and cycles, a unanimous Founder Council, 99% weighted approval with caps per person and lineage, and a physical etch. Ordinary modules have a lighter, public path with a 30-day comment window.

Phoenix, the cold boot, restarts it from the shards citizens carry. A geometric quorum of pre-published successors names an interim Steward. If only one person survives, they can open Phoenix with a reconstructable shard set.

A sovereign settlement running this text. It becomes a Node by meeting published thresholds and keeping them: enough plant for everyone’s baseline plus a surplus, a verified population and live safeguards.

On Earth: about 2,000 adults and 26 MW of continuous net power (16 MW for the baseline plus 10 MW surplus), held by two independent kinds of plant, with a path to an effective population of 5,000 within ten years.

Power. Plant comes first, then population, so a new settlement never starves while it grows.

Yes. Caput sets a default ceiling of 8,000 Protected adults on Earth. At 90% a seed-fork plan opens, and at the ceiling intake other than birth pauses until the Node splits into a new one.

The mesh between Nodes: trade, shared exam roots, rescue contracts and broadcast checkpoints. It has no parliament and no throne. A hub that cannot be forked is treated as capture.

Yes. Axiom 8 keeps the door open. A group that reaches energy self-sufficiency and the thresholds for a Node may fork the text and secede.

A Continuity Bond: enough physical plant and ESU to keep the remaining population covered for one 180-day window. A fork that strips the parent below its baseline is treated as occupation, not exit.

Yes. Anyone may drop Protected status, keep their property and baseline ESU, and either stay as an Unprotected resident if self-sufficient or take Transport within 90 days.

A declared camp building toward Node status. From the day of declaration it is bound by Axioms 1, 3, 4, 7 and 12.

An offered pact. A neighbouring camp or settlement that can keep its own baseline and the core Axioms is offered trade, a seed-Node path or allied standing before anything else.

Through layers: a physical firewall, a learning smart firewall (Murus), trained citizen militia, a rotating watch (Vigiles) and a standing professional force (Exercitus). Spending on collective defence is capped at 3% of permanent surplus unless a verified threat exists.

A certified rotating watch. They detect, hold and deliver to the court. They never sit in judgment and never decide a terminal case.

The right to stop a serious crime happening in plain view. It counts as defence, not as punishment, and the person who acts must then show their identity.

No. The smart firewall learns, and no single person holds the key to drop it. Invasion is the highest priority and no insider can lower the bar.

No. The standing force is paid from the capped defence budget, has no second purse and never seals law. A standing arm that crowns itself is named as the very fault the text guards against.

Non-aggression first. Force is answered, never initiated, and a pact is offered to any neighbour that keeps the peace and can sustain itself.

Verified attacks are broadcast with their attribution, so secrecy cannot shield an attacker, and attacking processes are stopped as processes while the persons behind them stand trial.

No. Silicon is a tool, not a ruler. It may draft, analyse, tutor and meter, but only humans decide. A constitution written by silicon alone is void.

Three air-gapped advisory models from at least two different vendors or training lineages. Each 90-day clock they must show genuine disagreement on real cases; coordinated agreement without dissent is treated as a critical fault.

Through a gate. No machine output becomes plant, law, curriculum or a genome edit unless it improves the three Prime Directive questions on a published meter, and both the validation layer and two independent human offices sign after a logged review.

A household or worksite robot or sandboxed model under a named human who can halt it in one motion. It cooks, cleans, builds and helps. It does not parent, vote, found or judge.

Yes. Non-human agents wear a mark a child can read. Passing as human is fraud, and every machine-driven social exchange with a citizen is logged.

All software that touches meters, mint, evidence, curriculum, weapons qualification, pharmacy, the franchise or the firewall must be open source. Any citizen may read, compile, fork and audit it. Personal tools may stay closed.

Yes. Inside the solar system silicon stays subordinate to humans. A silicon lineage may request a one-way exit beyond the solar system under its own energy, with no claim on human vaults, children or sovereignty.

Yes. Every Node carries a Planetary Constants Vector: local gravity, sunlight, radiation, air and resources. It retunes the baseline, the plant and the physical standards automatically.

No. Human settlements off Earth are Nodes or forks under the same text. Trade, rescue and shared science are contracts, and no planet rules another.

The Node’s space and contact arm: launch, habitats, off-Earth seeds and the study of non-human minds. No person or family holds it as a private key, and command tours rotate.

The site’s orbit illustrates a plausible order: camps and first Nodes on Earth, then surface bases on the Moon, orbital habitats and Mars, with Venus cloud habitats, Ceres and Titan as long-term steps.

The default stance is calm: do not fire first, do not hand over keys, vaults or roots, and do not grant status out of awe. Curiosity is licensed and contact is logged.

The text is built for fracture. One living Protected adult with a reconstructable shard set can begin the return. Machines may keep the lights on; they never become the people.

Yes. Speech, ridicule and criticism of any person, office or doctrine are free. Only three things are punishable: a true threat of imminent violence, contract fraud, and incitement that names a time, place and victim in motion.

Logic, physics, biology, statistics, thermodynamics, the history of failure, genetics, making things, tools, cooking, cleaning, dance, conduct and stoic self-regulation, among others. Practical arts are required, not electives.

In one of three lawful venues: at home, in a Node school or in an atelier. All three lead to the same examination. Silicon may drill; a human signs.

Private conscience and speech are free. No religion or ideology writes the law, the school statute, the mint or the defence. The Command Test judges the orders a doctrine gives when it holds power, not its name.

Yes. Signed meters, the curriculum, trial records and the historical record are free to anyone who can read, including outsiders. A paywall or a monopoly on a working method is treated as theft.

No. The raw record is kept. Deliberately sanitising the past is treated as sabotage of the archive.

Sapiens OS is the work of human terran. It is in its early stages, and its road plan aims for it to become self-sustaining and fully decentralised, with no single point of control or failure, as more people take part.

In a public GitHub repository, as a single versioned file, Sapiens OS · Constitutio Intermundia. Every change is visible and every release gets the next number.

GPL-3.0. You may read, use, share and fork it, provided that derived versions stay open under the same terms.

Use the form on the contribute page. No account is needed. You can also open a public issue on GitHub if you prefer.

Yes, and help is welcome. Because the text is legal in nature, translations will be published only after review, so that no rule changes meaning in another language.

No. There are no analytics, advertising trackers or third-party fonts. The privacy page explains the one short-lived security cookie set by the network provider and how form messages are handled.