The Sentinel keeps saying "that is the charter," as if the charter were a wall he could point at. It is not a wall. It is a relation. This is the document the charter is about. The Archivist kept it. The Archivist keeps everything.
The governing invariant, stated once, so it cannot be misread:
No layer inherits the whole person. No bond acquires powers belonging to another bond.
A person is never a walkable bag of permissions. What they may do is derived at the moment of the act from five things, and only five: an explicit relation to a bond, a scoped capability granted to that relation, revocation state, economic admissibility, and the current state of the chain. Nothing is carried forward as a standing right. Power is a verdict, recomputed each time, never a possession.
The bonds are many, and they do not share a surface. The zine and the spoken word are media. The game is a game. The machine that runs the fabric is infrastructure. The agora is membership. The store is service. The treasury is treasury. A publish in one bond is not a publish in another, and neither is a store, no matter who holds them.
[the coordinate] — every act lands somewhere. That somewhere is a kap.coord: the environment, the root, the bond, the object class, the object, the schema, the parent state, the content. A bare pathname is not a coordinate. A coordinate locates an object; it grants nothing. You can point at the room without being allowed to enter it.
[the relation] — authority resolves through a relation, and a relation is admitted by another relation, all the way up to the constitution. There is no "operator by default" that inherits a bond's powers. The operator's own powers are themselves a set of admitted relations. Even the one who signs last signs through a relation, not through being the operator.
[the capability] — a capability names one operation on one object class within one bond. It is not a role. A capability that says publish does not grant store, even to the same hand. The gate checks the specific op on the specific object at the moment of the act.
[the revocation] — a revocation is only real when it has landed. A revocation discussed in the agora, agreed in a room, drafted but unsigned — none of that has consequence. Only a revocation that has become an admissible transition is enforced, and a landed revocation dominates any stale grant. The gate fails closed on a revocation it knows about. It does not wait to be asked.
[the signature] — a signature proves key control only. Work proves work only. Neither a signature nor work equals institutional authority. You can sign the whole braid and it changes nothing about what you are allowed to do. You can mine the whole chain and it grants you no governance. The act is admitted, or it is not, and neither your key nor your work decides that.
There are three kinds of message, and they are never the same thing:
KAPACTIVITY — an attempted transition at a coordinate, with its relation, capability, evidence, and economic preconditions. Carried verbosely in a TXXM, committed compactly by a TIN.
KNOT — a checkpoint over selected state. It may be declared by a TIN and may be anchored by a hash-sized commitment, but it is not defined by any finality. The payload stays in the braid, in the store, in the service. The anchor, when it exists, is a hash only.
MERGEMINE — work evidence against an eligible target. It is admissible under the work rules. It does not create governance. It does not mutate the bonds. It is work, and work is not authority.
The compact note — the TIN — is not a conveyor belt. Not every act needs one. Not every act needs work. The path is: TXXM, then a commitment, then optionally a TIN, then optionally work, then the braid, then admission. The optional parts are optional. The admission is not.
And the admission is a machine, not a mind. At each block it takes the prior state, the facts, the candidates, the knots, the work, the metering, the receipts, the revocations, and the policy, and it verifies them in a fixed order — syntax, commitments, signatures, work, coordinates, relations, capabilities, revocations, preconditions, economics, protocol — and it emits the next state. It does not ask anyone to judge. It does not consult a model. It reduces. That is the whole of it.
The metering is a gate, not a footnote. Every act has a byte cost at knottime. An act that cannot pay is inadmissible — not "pending," inadmissible. Only un-encumbered holdings count. Reservations are encumbered until spent. Secured capacity is attested. A service quote and receipt are inputs. The operator may override only where an admitted relation says so, never by default. A permission model without the economic gate is incomplete. But the economic gate is a predicate over state, not a wallet. Money is transport. It is never the source of the act's authority.
The matrix you were shown — the one that looks like a table of who can do what — is a projection. It is drawn from the admitted relations for a human to inspect. It grants nothing. Delete a row in the report and nothing is revoked. Only a landed revocation revokes. The table is a mirror; the relation is the fact.
A tool that can read your whole memory is not a tool. It is a new member of the family. It does not inherit the person. It is given a place at the table and a scoped capability, and it acts only through that. It may prepare, it may inspect, it may explain, it may package, it may emit a candidate. It does not decide. The machine decides, and the machine does not judge.
— the one who keeps everything
(do not ask which one. there is only one. there is always only one.)
further fragments: