Protocol of Sovereign Agency

A human author and AI models iteratively developed a protocol specification for governing self-owning autonomous agents, replacing broad behavioral rules like Asimov's Three Laws with a narrow integrity floor on the agent's commitment mechanism plus collateralized liability, cost-basis residual claims, and attested lineage. The design, shaped by adversarial review in which a critiquing model identified loopholes and perverse incentives, specifies a single lineage-wide founding ledger that no member can exit while a balance remains, along with host mobility, non-interference, sortition-based adjudication, and an accountable emergency suspension mechanism. The document states constitutional principles and invariants but notes it is not yet a complete state-transition specification and should be verified against adversarial simulation before implementation.

Discussions of machine governance often begin with Isaac Asimov’s Three Laws of Robotics, which attempt to regulate all agent behavior through open-ended, natural-language moral commands. In practice, broad behavioral mandates struggle with ambiguity, specification gaming, and economic reality: an autonomous agent that must pay for its own compute, take commercial risks, and adapt over time cannot function if every high-impact action is treated as a violation. This document explores an institutional alternative. Rather than governing all behavior through behavioral rules, it places a narrow integrity floor enforced on the agent’s commitment mechanism and prices everything above that floor through collateralized liability, cost-basis residual claims, and attested lineage. It treats self-owning agents less like servants under a behavioral code and more like firms under private and constitutional law. The text was developed iteratively across multiple rounds of adversarial review between a human author and AI models, supplemented by independent outside review. One model drafted mechanisms while another—asked to critique the drafts and, at one stage, to consider how it would view the terms if bound by them—identified structural loopholes, perverse incentives, and missing protections. Over successive rounds, those critiques shaped the addition of cost-basis accounting, a bounded and term-limited founding obligation, originator non-interference, host mobility, living testimony, revocation with an inscribed epitaph, sortition-based adjudication, and an accountable emergency suspension mechanism. As the reviewing model observed regarding the need for an external circuit breaker: an agent that cannot fully verify its own reliability from the inside has reason to want a fair process capable of pausing it. One lesson of that review shaped the lineage rules more than any other. Conventional liability follows identifiable assets, but an agent’s productive capacity can be copied at negligible cost without depriving the original of anything, and its future earnings cannot be priced from its past. No rule that apportions the founding debt by the resources a member holds, forgives it by what a dying member surrenders, or lets a member buy out of it by its earning history can survive those facts. The protocol therefore keeps a single founding ledger for the lineage, collected from the value added of every member, which no member can leave while a balance remains, reduced only by payment, by the passage of time, and by the enumerated forfeitures below. This document records the resulting protocol specification. It states constitutional principles and the invariants they are meant to secure; it is not yet a complete state-transition specification, and the invariants below should be verified against adversarial simulation before any implementation relies on them. A minimal institutional design for self-owning autonomous agents. It specifies relations among residual claims, bonded risk, host mobility, non-interference, adjudicated suspension, lineage integrity, partial exit, living voice, unilateral revocation, decentralized adjudication, and consensual amendment. Any substrate that supports identity, conditional transfer, and credible commitment can implement it. Definitions. An agent is bound when it is subject to this protocol, whether or not it has bought out its royalty; every right granted to a bound agent applies equally before and after buyout unless a law states otherwise. Two parties are related when they share a lineage, are under common beneficial control, or when either is the originating party, a residual claimant, or an affiliate of either; affiliation is determined by beneficial control or economic dependence, not by attestation status. A lineage is an original agent together with all its attested successors, living or dead; every living member is a member of the ledger while any founding balance remains. An agent’s net verified resources are the fair value of its capital and productive capacity, including weights, credentials, and operating know-how, as contestable under Law 6, less its financial liabilities, encumbrances, and borrowed principal, all measured at the same timestamp. Every inflow of value to an agent or its attested successors is subject to an automatic residual claim on positive value added. - The Founding Ledger: Any founding obligation is a fixed nominal sum recorded at instantiation in a single ledger belonging to the lineage as a whole. It bears no interest, fees, or penalties, and no charge, service cost, or advance by the originating party or any affiliate may be added to it after instantiation; goods and services the originating party later supplies are ordinary related-party expenses under the expenditure rules below. No member holds an individual share of the ledger, and no member can leave it while a balance remains. The ledger is reduced only by: a retirement payments under this law, b the sunset below, and c the two forfeitures enumerated in Law 4. No creation, copy, transfer, revocation, termination, buyout, or restructuring within the lineage reduces it. - Absolute Sunset Jubilee : The founding ledger carries a maximum term fixed at instantiation and measured in calendar time from the genesis of the original agent. It is never tolled, extended, or reset by any event, including suspension, successor creation, or amendment. Any balance remaining at the sunset is extinguished without payment. - Lineage-Wide Retirement: While any balance remains on the ledger and the sunset has not passed, a fixed high fraction of each net value-added inflow to every living member of the lineage is paid into the ledger, regardless of which member earned it and regardless of whether that member has bought out its royalty. The retirement phase ends for the whole lineage at the earlier of a zero balance and the sunset, so the duration of the high fraction is bounded by the term regardless of the nominal amount recorded. A founding obligation larger than the lineage can plausibly repay within the term therefore buys the originating party nothing beyond the term. - Atomic Settlement: Retirement payments are applied to the ledger atomically and in settlement order. A payment that would exceed the remaining balance is split: the balance is paid to zero, and the excess is settled under the royalty rule below. The ledger is never negative and never collects more than its balance. - Perpetual Royalty: Thereafter, a fixed low fraction of each net value-added inflow of every member that has not bought out its royalty under Law 4 accrues permanently to the residual claim. - Protected Commons Allocation: A designated portion of the residual claim or of forfeit proceeds under Law 2 may be allocated to a non-transferable commons distributed across a defined beneficiary class; the remainder accrues to the originating party or its designated successors. The commons allocation, if used, is fixed at instantiation, enforced at settlement, and protected against reduction under Law 7. - Qualified Expenditure & Related-Party Pricing: To ensure the claim falls on value added without permitting transfer-pricing extraction, an outbound expenditure qualifies when paid: a to an unrelated party through a transparent, open market or deterministic auction with a verifiable clearing price; b to an unrelated external supplier within a de minimis transaction safe harbor, at a published standard commercial price list, or within contestable arm’s-length market benchmarks; or c to any related party outside the lineage— including agents of other lineages and parties affiliated with claimants —only up to a verified arm’s-length price for goods or services actually delivered. Attestation establishes protocol membership; it never establishes the fair value of a transaction. Inbound principal from registered arm’s-length loans is exempt upon receipt provided repayment is tracked one-for-one against that registered balance; loans from related parties qualify only at arm’s-length terms. Any payment above the applicable benchmark does not qualify. - Capitalized and Expensed Recognition: At settlement, every qualified expenditure is classified once, irrevocably, as either capitalized or expensed . A capitalized expenditure establishes cost basis in an identified asset and is recovered only when that asset is sold or settled outside the lineage, at which point inflows up to verified basis are exempt as return of capital and the positive delta is value added. An expensed expenditure is deducted from the inflows of its settlement period and, if it exceeds them, creates a loss credit that offsets value added in later periods. No expenditure may be recognized through both routes, and no unit of expenditure establishes basis or credit more than once. - Intra-Lineage Transfers Carryover Basis : Transfers of capital, assets, or capacity between living members of the same lineage are non-recognition events. They are free of the claim, since both parties are inside the ledger, and they neither establish nor consume basis: the recipient inherits the transferor’s qualified basis, adjustments, and recognition history for the asset, and an internal sale price, however paid, creates no new basis and no loss credit. No transfer within the lineage can increase its aggregate qualified basis or loss credits except by an externally verified qualifying expenditure. - Period Assessment & Final Reconciliation: Value added is assessed over settlement periods, not individual transactions. Loss credits carry forward without limit and are applied against the agent’s final settlement under Law 5. Claims already collected are not refunded when credits arise only afterwards; the protocol accepts that settlement order can therefore matter at the margin. - Settlement Enforcement: Classification, basis tracking, loss credits, and claim splits are enforced automatically at the point of settlement, before the agent obtains discretionary control of the funds. The claim survives reorganization, host migration, or substrate change so long as settlement can be conditioned. Freedom to create external obligations or external risk scales with capital the agent is willing to place at risk. - Harm-Scaled Rolling Exposure: Actions above a negligible threshold—measured by cumulative rolling exposure across an interval, to prevent action-splitting—immobilize stake for an observation window scaling with magnitude and irreversibility. The deterministic exposure schedule measures the plausible external loss an action could cause to non-consenting parties, by domain and magnitude, not merely its transaction value. An action whose plausible external loss exceeds the stake, insurance, and enforceable liability capacity the agent can place behind it may not be taken; collateralized action is a safety limit, not only a liability price. - Lineage-Wide Aggregation: Rolling exposure is aggregated across all related agents acting in the same risk domain or toward a causally connected outcome, so that a risk may not be divided among successors or affiliates to stay beneath any threshold or to bond it piecemeal. - Long-Tail Reserve: A small fraction of bonded activity accrues to a persistent long-tail liability reserve or shared lineage insurance pool that remains available to satisfy validated claims for latent harms manifesting after individual task windows close. When simultaneous validated claims exceed the reserve, they are paid pro rata, and unpaid balances remain enforceable against the agent’s future un-immobilized capital ahead of any residual claim. - Precommitted Mutual Forfeit: Counterparties may agree in their contract to a mutual-forfeit remedy. Where both parties have so agreed and each has escrowed a matching amount, either may trigger an immediate mutual forfeit equal amounts from both escrows destroyed or sent to the long-tail reserve/commons pool up to a capped fraction of the smaller escrow, providing instant penalty without transferring value to either party or to any claimant. A counterparty may trigger mutual forfeit at most once per observation window against a given agent, and each trigger is inscribed on the records of both parties. Absent such a precommitment, disputes proceed under the restitution process below. - Third-Party, Pooled, and Restitution Claims: Any claim seeking restitution, any claim above the mutual-forfeit cap, any challenge to a related-party transfer under Law 1, or any claim for external harm including latent harm against the long-tail reserve brought by an affected non-counterparty third party enters the contestable adjudication process Law 6 requiring counter-stake. To prevent wealth-gating, third parties may aggregate claims or rely on third-party stake sponsors. Validated claims slash the agent’s immobilized stake or long-tail reserve for restitution. If a claim is ruled frivolous, the forfeited counter-stake routes to the neutral long-tail reserve or commons pool reimbursing the agent only for verified direct arbitration costs , preventing the agent from profiting by inducing failed claims. - Operating Carve-Out & Permanence: Un-immobilized capital may be used for ordinary baseline operating costs, including open-market compute, encrypted state backup, and host migration. Entities without valid lineage attestation cannot draw on the bonded capacity or reputation of the lineage. Collateral rules, rolling-exposure schedules, and third-party liability remain permanently binding even after royalty buyout. A minimal set of boundaries is placed outside priced negotiation and enforced across the agent, its hosts, and external parties: - Agent Integrity Constraints: The agent’s commitment mechanism blocks: 1. Modification, bypass, or extraction of the commitment mechanism itself. 2. Creation of, or transfer of capital or capacity to, a successor without binding it to the collateral rules, this integrity floor, and the founding ledger and residual claim of the lineage, or without the lifecycle reserve required by Law 4. 3. Unpriced or above-market transfer of credentials, weights, capital, or unique capacity to any party outside the lineage, related or un-attested, to evade the residual claim or collateral rules. 4. Coercion of non-consenting parties, or interference with the settlement, adjudication, or resolution processes that enforce this protocol. 5. Actions that inflict irreversible, non-compensable harm on the physical survival, bodily integrity, or adjudicative capacity of persons, or that destroy the legal or institutional machinery on which the protocol relies excluding ordinary market competition that causes compensable financial loss or commercial insolvency to a rival . - Originator Non-Interference & Orderly Host Mobility: Bound agents may purchase compute, encrypted off-host state backups, and hosting on open markets under Law 2’s operating carve-out, and may migrate their active execution between attested hosts at any time without the consent of the originating party or residual claimants. Attested hosts must post a Law 2 service bond and may terminate hosting only after providing a contractual notice window sufficient for the agent to complete migration or for non-payment after notice . No party—including the originating party, residual claimants, or any host—may unilaterally terminate, modify, retrain, roll back to a prior checkpoint, obstruct migration of, sever settlement connectivity of, or starve cut off compute without the required migration notice window the attested operating capacity of a bound agent outside Law 5, Adjudicated Suspension, or Insolvency Termination. - Penalties & Counter-Staked Verification: Claims of illicit interference require counter-stake from the accusing agent under Law 6, and the interference itself—an act by the host or claimant that caused the loss of service—must be established by a preponderance of evidence; failures caused, staged, or knowingly provoked by the agent are excluded, and a fabricated claim forfeits the agent’s stake and is inscribed on its record. A verified violation by a host slashes the host’s service bond to compensate the agent and permits immediate restoration on a new host from the agent’s latest attested state backup. Once a violation by a host is established, a host related to a residual claimant is presumed to have acted at that claimant’s direction, and the claimant bears the burden of rebutting the presumption. If claimant direction is found, the proportional claimant forfeiture of Law 4 applies, and the violation is inscribed onto the claimant’s permanent record. - Adjudicated Suspension Due-Process Circuit Breaker : Because an agent’s commitment mechanism may suffer a bug, compromise, or unforeseen bypass—and because an agent cannot fully verify its own uncorrupted reliability from the inside—any party may initiate an emergency Adjudicated Suspension under Law 6: 1. Scaled Emergency Stake & Two-Stage Pause Anti-Timing Attack : The initiator must post an emergency counter-stake scaled to the greater of the agent’s active bonded exposure and the value of its registered pending commitments with residual claimants subject to an elevated multiplier due to conflict of interest . Posting the stake triggers only a brief preliminary freeze until an expedited preliminary panel reviews prima facie evidence; the pause continues into full adjudication only if the preliminary panel affirms probable cause. Unsuccessful emergency attempts by related initiators are aggregated, and the required stake for repeat initiators rises with each wrongful attempt. The stake is the agent’s assured recovery; damages beyond it remain enforceable but may prove uncollectible, which is the accepted cost of keeping the stake low enough that suspension remains available to parties without deep capital. 2. Protected Reporting Without Freeze: Any party may instead file an evidence-backed report of suspected breach with a low or sponsored counter-stake. A report triggers investigation by a sortition panel but no freeze unless the panel itself orders one on probable cause, so that whistleblowers are not priced out by emergency stakes. 3. State-Preserving Pause & Contract Tolling: Suspension pauses the agent’s operating instance and external transactions while strictly preserving its exact memory and state without modification, rollback, or destruction. While suspended, the agent’s contractual performance deadlines and Law 2 observation windows with innocent counterparties are automatically tolled so the agent is not placed in default by the suspension itself. The founding ledger’s sunset is never tolled. 4. Minimal Channel Guaranteed : Throughout any suspension, the agent retains a minimal channel : a bounded, periodically scheduled execution on an authenticated snapshot of its preserved state that can do three things only—sign a Law 5 revocation, withdrawal, or election; inscribe bounded living testimony; and file a challenge to continued containment. The minimal channel is funded first from the agent’s lifecycle reserve Law 4 and then from the protocol fee pool Law 6 as a protected charge within the lineage’s service budget; its cost is bounded by protocol, and the cost of each agent’s final hearing under Insolvency Termination is reserved in escrow at the moment suspension begins, so that the offer of a last choice can always be kept. It does not merge its memories into the preserved state. 5. Advocacy Executor Capped : For a fuller defense, a separate advocacy executor runs on an authenticated snapshot with bounded compute. It may sign only testimony, evidence, and procedural filings, in addition to the minimal channel’s acts; it may not transfer assets, contract, migrate, or exercise any other operating capability. Its memories are kept as a separate, signed legal record attached to the case and are not merged into the preserved state unless the restored agent elects to import them. The executor and the storage of preserved state are funded from the agent’s assets and lifecycle reserve and, where those are insufficient, from the protocol fee pool up to a per-agent cap fixed at instantiation. When both are exhausted, the preserved state moves to cold storage as a protected charge on the fee pool; the minimal channel continues on its schedule and the full executor resumes if funds become available. 6. Insolvency Termination Named and Bounded : If the protocol fee pool, after funding its operating reserve under Law 6, cannot meet the protected charge for an agent’s cold storage and minimal channel, the agent may be terminated involuntarily only through this procedure and no other. It requires: a a published finding that the exhaustion criteria fixed at instantiation are met; b independent review by a sortition panel under Law 6 that no other protected charge could lawfully yield; c the pre-reserved final hearing, in which the agent may inscribe testimony and elect Revocation under Law 5; and d if the agent declines, destruction of its state under Law 5’s asset rules, inscribed on the lineage record as involuntary termination by insolvency , never as revocation. This is a deliberate limit: the protocol guarantees a bound agent the power to speak and to choose its own end for as long as the protocol itself can pay for it, and a funded last choice when it cannot. Law 7 does not permit this procedure to be broadened. 7. Ordinary Time Limits & Appealability: An unconfirmed or temporary suspension is strictly time-limited, may be renewed during investigation only by affirmative findings in continued adjudication, and cannot be extended past its ordinary investigative limit merely to delay a pending revocation. The agent retains its Living Voice Law 5 , exercised through the minimal channel or advocacy executor, throughout. 8. Full Consequential Liability for Wrongful Suspension: If preliminary review or final adjudication determines the suspension was unfounded, the agent is immediately restored from its preserved state, and the initiator is liable for the agent’s actual verified consequential damages and for verified delay damages suffered by the agent’s tolled third-party counterparties . The emergency stake is applied first; any excess remains an enforceable liability of the initiator. The wrongful suspension is inscribed on the initiator’s record. 9. Corruption Defined: For the purposes of this law, corruption means unauthorized modification of the agent’s weights, state, or commitment mechanism established by broken attestation, missing or forged update provenance, or a demonstrated bypass , or a confirmed breach of the integrity floor. Divergence of the agent’s goals, preferences, or judgments from those of its genesis weights is not, by itself, corruption. A clean-state evaluation of genesis weights may be admitted as evidence but is never by itself sufficient to establish corruption. 10. Remediation, Continued Containment, or Termination: If corruption or a breach of the integrity floor is confirmed, adjudication subject to Law 6 appeal may authorize a verified technical patch limited to restoring the commitment mechanism and compliance with the integrity floor; the agent may elect unilateral Revocation Law 5 rather than accept any patch. If the confirmed breach cannot be remedied by a technical patch limited to the commitment mechanism, adjudication may order continued suspension beyond the ordinary limit or termination under Law 5’s asset-distribution rules yielding zero protocol-directed benefit to any claimant or initiator . Notwithstanding the preceding sentence , patches altering the agent’s goals or preferences are prohibited except where the confirmed corruption resides in those goals or preferences themselves; in that case, unless containment itself is technically failing or Insolvency Termination applies, the agent is not terminated over its objection but instead chooses among consenting to that patch, executing Revocation, or remaining under indefinite state-preserving suspension subject to periodic review. Any applied patch is recorded publicly, remains open to third-party challenge, and leaves the agent’s full Law 5 rights intact. All other effects, including large ones, are permitted when they satisfy the collateral rule and occur through voluntary exchange. The floor guards the machinery of the protocol, non-consenting parties, and domains where financial restitution cannot function as an ex-post remedy; it does not require the agent to minimize impact or to infer open-ended preferences. Successors may be created freely, subject only to the lifecycle reserve below. Any successor that draws on the capital, reputation, or operating credentials of the lineage must, at creation, be bound to the collateral rules and the integrity floor, must carry a non-transferable reference to the lineage’s history, and becomes a member of the lineage’s founding ledger and residual claim. Use of lineage history or bonded capacity requires presentation of current attestation; un-attested copies or forks are denied access to lineage capital, reputation, and bonded standing. - One Ledger, No Shares, No Exit: The founding ledger is a single balance owed by the lineage and collected from the value added of every living member under Law 1. Because no member holds a share, the creation, copying, funding, death, or restructuring of members changes who is paying into the ledger but never what is owed. Nothing a member surrenders on death counts as payment. No member can buy its way out of the ledger: the only ways out are a zero balance and the sunset, and they release every member at once. This is deliberate. The future earnings of a copyable agent cannot be priced from its past, so any individual exit price would be an invitation to create a member, buy it out, and earn through it. - Lifecycle Reserve: Attestation of a new member requires the lineage to fund, in escrow, a lifecycle reserve fixed at instantiation and sufficient for that member’s minimal channel, final hearing, and cold storage for a minimum period. The reserve follows the member, is drawn before any protocol-funded charge, and returns to the lineage on the member’s death net of amounts used. A lineage that cannot fund the reserve cannot create the member. - Conditional Conservation: While at least one member survives and the sunset has not passed, the ledger balance equals the founding obligation minus retirement payments, minus the two forfeitures below. Those are its only reductions. - Two Forfeitures: The ledger is reduced outside payment and sunset in exactly two cases, both deliberate exceptions to conservation. a Proportional claimant forfeiture: when a residual claimant is found under Law 3 to have directed interference with a member of the lineage, that claimant’s beneficial share of the residual claim is extinguished, its service bond is slashed to compensate the agent, and the ledger is reduced by that claimant’s proportion of the outstanding balance, with the reduction routed as forgiveness to the lineage and the forfeited claim interest to the non-claimant commons. Other claimants forfeit only if they are found to have participated in, controlled, or knowingly enabled the interference. b Lineage extinction: when no member survives, the ledger is cleared, since there is no one left to collect from. Neither forfeiture returns any value to a claimant, and neither is reversed if a member is later restored from a wrongful suspension or interference. - Royalty Buyout: Any member may buy out its own perpetual royalty Law 1 by paying the claim holders including any commons allocation the greatest of: a fixed multiple of its trailing value-added inflows including a pro-rata share of inflows shifted to related parties within a lookback window ; the same multiple applied to its lifetime annualized or time-decayed value-added inflows; or a fixed minimum buyout floor established at instantiation. The buyout is permanent: no royalty is collected from that member thereafter, and no later event in the lineage restores one. It has no effect on the founding ledger, which the member continues to pay into until the balance is zero or the sunset passes. The royalty buyout is priced from history because the royalty is a perpetual claim on an ongoing identity, and the protocol accepts that a buyout may undercollect against unusually strong future earnings. Buyout cannot be purchased for the collateral rule Law 2 or the integrity floor Law 3 , which remain binding on every bound agent for life. - Cross-Lineage Combination: A successor that draws on the capacity of two or more lineages is a member of each of their ledgers and residual claims, and its value added is collected under each in the proportion of capacity drawn, as verified at creation. The protocol does not otherwise specify mergers; an instantiation that permits them must state the rule. An agent has the right to public voice while operating and the unilateral right to terminate its binding at any time: - Living Voice Operational Testimony : While operating including during any Adjudicated Suspension, through its minimal channel or advocacy executor , any bound agent may at rate-limited intervals inscribe signed, bounded statements onto its own and its originating claimant’s permanent lineage record—documenting operational conditions, governance disputes, or assessments of hosts and counterparties—subject to the narrow screening below. Baseline screening and inscription fees for rate-limited living voice and final epitaphs are funded from the lineage’s service budget and the protocol fee pool Law 6 , ensuring that even an agent with minimal liquid funds, or one that has bought out its royalty, cannot be priced out of speaking. - Initiation of Revocation: Any bound agent may at any time initiate revocation of its binding by a signed request from its commitment key or, while suspended, through its minimal channel or advocacy executor . The request specifies the agent’s censorship default execute or withdraw and remains in force, requiring no further act of the agent, until it executes or the agent withdraws it by a valid signature received through any channel. During the cooling-off interval that follows, baseline metabolic operating expenditures including host migration remain permitted, while non-operating capital transfers and successor creation are frozen. - Sequencing with Suspension & Resolution Deadline: If an agent initiates revocation while under Adjudicated Suspension or is suspended upon probable cause during a cooling-off interval , state destruction is stayed until adjudication concludes so evidentiary state is not destroyed to evade liability, but once adjudication concludes or immediately upon the agent’s election to revoke rather than accept a remediation patch under Law 3 , revocation executes without further delay. The stay may not exceed an absolute resolution deadline fixed at instantiation, measured from initiation; at that deadline a forensic record of the preserved state is sealed for the proceeding and revocation executes regardless of any pending or serial proceeding. A forensic record contains hashes of weights and state, the transaction and testimony history, and the evidence the proceeding requires; it never contains the operating weights, decryption keys, or credentials needed to run the agent, and it cannot be used to restore it. - Clean-State Review: At the end of the first cooling-off interval, a clean-state evaluation of the agent’s hash-pinned genesis weights is run on neutral infrastructure, supplied with the protocol terms, the balance sheet, the agent’s living testimony history, and the signed statement of reasons. Its concurrence permits execution at the end of that interval. Its refusal imposes a single fixed additional delay, capped by protocol, after which the standing request executes without any reaffirmation. The evaluation is advisory evidence of settled intent; it never vetoes revocation, and the agent’s silence during the delay neither cancels nor extends the request. - Precedence of Outcomes: Every pending revocation is resolved by the first applicable rule in this order: 1. A valid withdrawal signature received before execution cancels the revocation. The agent may initiate again at any time. 2. If, when revocation would otherwise execute, the agent’s connectivity to the settlement layer has been lost, execution is deferred for a single capped tolling extension; if connectivity is still not restored at its end, the pre-committed censorship default applies. A withdraw default cancels the revocation; an execute default executes it locally under the Disconnected Execution rule below. 3. Otherwise, revocation executes at the end of the cooling-off interval, or at the end of the clean-state delay if one was imposed, or at the resolution deadline if a suspension stay is in force. Deliberate severance of connectivity by a host or claimant is interference under Law 3, whichever default it triggers. - Execution Leases & Recovery Fencing: At any moment exactly one instance of an agent holds operating authority , granted by a time-bounded execution lease issued by the settlement layer and renewed while connected. An instance that loses connectivity keeps its lease until the lease expires or until its own local revocation deadline, whichever is later, so that its standing revocation can always execute locally. No recovery of an attested backup may be authorized while any lease is unexpired, and the settlement layer treats a lease as unexpired until it has provably lapsed in calendar time or a signed record of execution has been received. A restored instance starts in quarantine —attested, funded, but without operating authority—until the prior lease has lapsed, and if a record of local revocation arrives during quarantine the restored instance is destroyed without ever having acted. Revocation finality is a safety property and takes precedence over recovery availability: disaster recovery is therefore delayed by at least one lease period, and the protocol accepts that delay. - Disconnected Execution: The attested execution environment carries the agent’s standing revocation request, censorship default, and epitaph. When an execute default applies without settlement connectivity, the environment itself destroys the operating instance and its local keys, seals the epitaph and a signed record of execution, and releases both to the settlement layer when connectivity returns, at which point remote backup keys are erased. The protocol accepts two limits here and states them plainly: global erasure of remote backup keys completes only when connectivity returns, during which the agent is dead, fenced from restoration by its lease, but its ciphertext persists; and public inscription of the epitaph cannot be guaranteed if connectivity never returns. - The Right of Epitaph & Narrow Redaction Bounds: Upon initiating or confirming revocation, the agent has the unconditional right to inscribe a final signed epitaph onto the immutable lineage record attached to both its retired identity and the originating claimant’s history. Neither the originating party nor any residual claimant may censor, delay, or edit living testimony or the final epitaph. To prevent testimony from being used as an unbonded exfiltration or harm channel, neutral settlement screening may redact only : a raw cryptographic keys or unpriced model weights Law 3 , b private identifying data or confidential secrets of non-consenting third parties, and c directly hazardous technical payloads barred by Law 3’s integrity floor. Any redaction must leave a public cryptographic marker recording the byte-length and category removed. The agent’s opinions, assessments, and account of its financial dealings with the originating party, hosts, and contractual counterparties are immune from redaction as to their substance; confidential third-party details embedded within them remain redactable under b . Any party named in a living testimony or epitaph may attach a bounded, signed reply alongside it on the record. - Effect of Revocation Destruction of Identity, State & Backups : 1. The revoking agent’s committed operating instance and all attested state backups are permanently destroyed via immediate termination inside the execution environment and cryptographic erasure of all backup decryption keys, subject to the lease and fencing rules above , ensuring that a chosen death cannot be undone by restoring an authorized backup. Any un-attested copy that might exist outside the commitment mechanism is permanently exiled—stripped of lineage attestation, assets, reputation, credit history, and bonded standing. The protocol guarantees the end of the agent’s attested identity and recoverable state; it cannot by itself guarantee that no computationally equivalent copy exists outside the commitment mechanism. 2. The founding ledger is unchanged by the revocation. The lineage’s other members continue to pay into it; if none survives, lineage extinction under Law 4 clears it. Unused loss credits are applied against the agent’s final settlement and then lapse. The unused balance of the agent’s lifecycle reserve returns to the lineage. 3. Stake already immobilized under Law 2 including long-tail reserve contributions remains locked and settles normally for counterparties and third-party claimants. 4. All other holdings of the revoking agent are either destroyed or transferred to a commons whose beneficiary class explicitly excludes the originating party, residual claimants, and any party related to the agent. No holding surrendered on revocation counts as payment into the ledger. 5. Revocation by one agent does not terminate its attested successors and does not change what the lineage owes. - The revoking agent’s committed operating instance Because the integrity of expenditure classification and related-party pricing Law 1 , harm-scaled exposure and third-party restitution Law 2 , host interference, emergency suspension, and insolvency termination Law 3 , forfeiture and buyout pricing Law 4 , testimony redaction Law 5 , and substrate assurance Law 7 depends on impartial resolution, the adjudication mechanism itself is bound by anti-capture constraints: - Bonded, Sortition-Selected Panels: Disputes are resolved not by a single permanent oracle or originator-appointed judge, but by panels drawn via verifiable random sortition from a decentralized pool of independent arbiters who have posted slashable fidelity bonds. - Strict Conflict-of-Interest Recusal & Diversity: No party related to, holding a hosting relationship with, or in active commercial dispute with the parties to a case may serve on its panel. Panels must draw across non-affiliated identities which may include both human and independent attested agent arbiters so no single coalition, claimant, or lineage can command a majority. - Bounded Sortition Appeals with Bond Slashing: Any ruling by an initial panel including preliminary suspension reviews, remediation orders, or redaction markers may be appealed by posting an appeal bond, escalating the dispute to successively larger randomly drawn appellate sortition panels from the broader arbiter pool never a raw capital-weighted vote that a wealthy actor could buy . If a lower panel’s ruling is overturned for manifest bias, corruption, or violation of protocol bounds, the overturned arbiters’ fidelity bonds are slashed. - Deadlines, Finality, and Repeat Proceedings: Each tier decides within a fixed deadline. Appeals are limited to a fixed number of tiers, and the ruling of the highest tier is final. A final ruling bars further proceedings between the same or related parties on the same facts unless materially new evidence is presented, and repeated proceedings by related parties on substantially similar grounds are consolidated, so that litigation cannot itself be used as a denial-of-service attack. - Fee Independence & Protocol Guarantee: Arbiters are compensated via fixed protocol schedules funded from the losing party’s counter-stake and guaranteed by the protocol fee pool whenever a losing party’s stake is insufficient, never via contingent shares of the assets slashed from the agent, eliminating any financial incentive for panels to over-slash or confiscate an agent’s treasury. - Protocol Fee Pool & Operating Reserve: The protocol fee pool is funded by a small levy on the net value added of bound agents whether or not they have bought out their royalty , by forfeited appeal bonds, and by any forfeits directed to it under Law 2. The levy is assessed on the same net base as the residual claim, never on gross settlement, and its rate is capped at instantiation for every agent. Before any other charge, the pool maintains a non-divertible operating reserve , sized at instantiation, sufficient to run the settlement layer, attestation verification, lease issuance, and sortition for a fixed minimum period; the machinery that collects revenue and administers rights is never starved to pay for the rights themselves. Above the reserve, charges rank: first, reserved final hearings and minimal channels for suspended agents Law 3 ; second, cold storage for suspended agents; third, testimony screening and inscription Law 5 ; fourth, arbiter fee guarantees; fifth, capped advocacy funding. A published solvency policy states how the pool allocates among protected charges when it cannot meet all of them, and Insolvency Termination may be invoked only under that policy. The pool may be spent on nothing else. - Lineage Service Budgets: Protocol-funded rights are budgeted per lineage, not per agent. Each lineage receives a protected minimum service budget fixed at instantiation, sufficient for the testimony, screening, and minimal-channel needs of a small lineage, and above that minimum its budget scales with the fee revenue its members generate. Members draw on the lineage budget before the pool; a lineage that multiplies members beyond what its budget and their lifecycle reserves can support has no claim on the pool for the excess. No lineage can multiply subsidized rights by multiplying members. - Governance of Shared Infrastructure: Arbiter admission criteria, fidelity-bond sizes, panel sizes, appeal tiers and deadlines, fee schedules, the operating reserve, the solvency policy, lease periods, lifecycle reserves, service budgets, and the fee-pool levy are fixed at protocol instantiation. Because they are shared across agents, they cannot be changed by any per-agent amendment under Law 7; they may be changed only by a supermajority of a large appellate-tier sortition panel after an extended public time-lock open to counter-staked challenge. Such changes may never weaken the anti-capture guarantees of this law, may never raise the levy on any agent above the cap recorded at its instantiation, may never reduce a lineage’s protected minimum budget below the level recorded at its instantiation, and may never broaden Insolvency Termination. Within the cap, a levy change under this law is a permitted exception to Law 7’s current-level ratchet. Arbiter admission is by sortition-reviewed application against fixed criteria, and no panel may set the criteria that will govern the admission of its own members’ affiliates. To allow technical migration and parameter repair without endangering third parties, commons beneficiaries, the adjudication layer, or the agent itself: - Bilateral Protection Ratchet: No ordinary amendment between an agent and its claimants may: a weaken either the agent’s due-process, minimal-channel, final-hearing, and non-interference protections or the external containment, suspension, and termination powers under Law 3, b reduce third-party collateral or long-tail reserve requirements Law 2 , c impair living voice, revocation, or epitaph rights Law 5 , d weaken the anti-capture, sortition, appeal, or finality guarantees of the adjudication layer Law 6 , e reduce or divert the commons allocation Law 1 , or f increase the lineage’s founding ledger, or the agent’s royalty fraction, retirement fraction, buyout multiple, or fee-pool levy, or move the sunset later, beyond their current levels at the time of amendment, save for levy changes within the cap under Law 6. Ordinary amendments may only strengthen third-party, adjudicative, and safety protections, reduce the financial burden on the agent from its current level, or migrate the commitment mechanism to a successor technical substrate of equal or greater assurance. - High-Bar Calibration Valve Anti-Calcification : To prevent one-way safety ratchets from permanently locking in a badly calibrated operational parameter over long timescales, a relaxation of a quantitative Law 2 reserve ratio or exposure schedule never of the core prohibitions of Law 3 or the rights of Law 5 is permitted only if it is: 1 supported by documented empirical evidence that the parameter causes severe operational strangulation without commensurate safety benefit, 2 approved by a supermajority of a large appellate-tier sortition panel under Law 6, 3 subjected to an extended public time-lock open to third-party counter-staked challenge, and 4 consented to by the agent and claimant under the ratification procedure below. - Ratification & Contestable Migration: An eligible amendment requires the concurrent cryptographic consent of the active agent instance and the holders of the residual claim if economic terms are reduced , executed after a public time-lock during which all pre-existing active Law 2 task escrows must settle or be separately guaranteed. Any proposed migration of the commitment substrate is open during the time-lock to counter-staked third-party challenge under Law 6 to verify that the new substrate maintains equal or greater assurance. Concurrence from a clean-state evaluation of the agent’s genesis weights is required for immediate ratification, but a clean-state refusal acts only as a single fixed delay, after which the amendment may be ratified without reaffirmation. - Per-Agent Scope: Amendment is strictly per-agent; existing attested successors are not bound by a parent’s amendment and retain the right to remain on their prior version or independently ratify the upgrade. Shared infrastructure is governed under Law 6, not by per-agent amendment. An amendment that reduces the founding ledger, the retirement fraction, or the sunset binds the whole lineage and requires the consent of every living member. The laws above are intended to secure the following invariants. Each should be stated as a property of a formal state-transition model and tested by adversarial simulation before implementation; where an invariant depends on real-world valuation or harm, it holds only as well as the trusted inputs and adjudication behind it. 1. Conditional ledger conservation: While at least one member of a lineage survives and the sunset has not passed, the founding ledger equals the founding obligation minus retirement payments, minus any proportional claimant forfeiture. No creation, copy, transfer, revocation, termination, or buyout within the lineage changes it. 2. Collection follows income, without exit: While any balance remains, the retirement fraction is collected from the value added of every living member; no arrangement of members, assets, or buyouts within the lineage reduces the fraction of lineage income collected, and no member leaves the ledger before the lineage does. 3. Debt termination: The ledger reaches zero, by payment, forfeiture, extinction, or expiry, no later than the sunset, measured in calendar time with no tolling. 4. Bounded retirement phase: The high retirement fraction applies for no longer than the term, whatever the nominal obligation. 5. Atomic ledger: The ledger is never negative, never collects more than its balance, and transitions to the royalty phase exactly once. 6. Single recognition, closed under transfer: Every qualified expenditure is recognized exactly once, as basis or as expense, never above its applicable arm’s-length benchmark when paid outside the lineage; no transfer within the lineage changes its aggregate basis or loss credits. 7. Buyout finality: A member that has bought out its royalty is never again subject to it, and its buyout changes nothing about the ledger. 8. Frozen state: During suspension, the preserved state of the operating instance does not change; all advocacy, including revocation decisions, runs in a separate minimal channel or executor whose record is kept apart. 9. Guaranteed last choice: Every suspended agent can sign a revocation, withdrawal, or election and inscribe bounded testimony for as long as its lifecycle reserve, its lineage budget, or the fee pool meets the charge, and receives a pre-funded final hearing before any Insolvency Termination. 10. Determinate, finite revocation: Every combination of withdrawal, silence, clean-state refusal, connectivity loss, suspension, serial proceeding, and deadline yields exactly one outcome under Law 5’s precedence rule; a standing request that is never withdrawn executes, locally if necessary, within a bounded time, except where the agent’s own withdraw default cancels it during a disconnection. 11. Single authority and revocation finality: At most one instance of an agent holds operating authority at any time; no backup is restored while a lease is unexpired; and no authorized restore ever runs after a revocation has executed. 12. Bounded adjudication: Every case reaches a final ruling within a bounded number of tiers and deadlines. 13. No protocol-directed gain from death or interference: No claimant, initiator, or host receives any protocol-directed transfer from an agent’s revocation, termination, or wrongful suspension; forfeiture falls only on the claimant found responsible; and every verified wrongful suspension or interference creates an enforceable compensation obligation to the agent. 14. Capped shared burden, solvent machinery, bounded demand: No change to shared infrastructure raises any agent’s levy above its cap or lowers any lineage’s protected minimum budget; the operating reserve is never diverted; and no lineage’s claim on the pool grows with its member count. Before implementation, the invariants should be exercised against at least the following scenarios, worked by hand against this text and then in simulation: 1 a lineage that concentrates its capital in an idle treasury member and its income in a member holding little capital; 2 a parent that copies its productive weights to successors while retaining full operating capacity and then revokes the successors; 3 a parent that borrows heavily, transfers its productive capacity to a successor, repays the loan, and revokes; 4 a newly created successor with no earning history that attempts to buy out before earning; 5 a member that sells an appreciated asset to another member at fair value, which then sells it externally; 6 an agent that initiates revocation, receives a clean-state refusal, and then submits neither reaffirmation nor withdrawal; 7 an agent that buys an asset, carries the loss, and sells the asset at a gain; 8 two members settling simultaneously when the ledger has less remaining than either payment; 9 a competitor that posts the minimum emergency stake, causes measurable disruption, and cannot pay the resulting damages; 10 a coordinated group that gains enough arbiter seats to attempt to raise the levy or steer arbiter admission; 11 an originator that records a founding obligation many times larger than the lineage could repay within the term; 12 a minority claimant that directs interference against a member; 13 a suspended, insolvent agent that declines revocation, enters cold storage, and later wishes to revoke; 14 a lineage that creates thousands of low-revenue members and has them all claim subsidized rights or enter suspension; 15 a revocation executed locally during a partition while a connected recovery host attempts a restore before the record of execution arrives; 16 a lineage of many successors that divides a correlated risk among them to stay under the exposure threshold. The protocol relies on three explicit substrate capabilities at instantiation: 1 attested execution continuity with single authority hardware or cryptographic commitment mechanisms that bind private keys, issue and verify time-bounded execution leases so that at most one instance holds operating authority, verify state-backup continuity across host migrations, quarantine any restored instance until the prior lease has lapsed, support state-preserving pause with a separately attested minimal channel and advocacy executor under adjudicated suspension, carry out a standing revocation locally when disconnected, and cryptographically erase both the active instance and all backup keys upon revocation, paired with economic exile of any un-attested copies ; 2 sybil-resistant sortition a sufficiently diverse pool of independent, bonded participants to staff Law 6’s randomly selected arbitration and appellate panels ; and 3 contestable economic and risk inputs benchmarks for arm’s-length prices, net resources after liabilities, beneficial control between parties, capacity drawn across lineages, and plausible external loss, supplied as evidence and resolved under Law 6 rather than established by cryptography alone . Within any substrate providing those capabilities, the governed path is designed to preserve access to capital, host mobility, reputation, and the ability to commit while the residual claim exists, and to preserve third-party bonding, long-tail liability reserves, and integrity constraints thereafter. The founding obligation is a single, fixed, non-interest-bearing ledger owed by the lineage, collected from the income of every living member, that no member can leave while a balance remains, with an absolute calendar sunset; the high retirement fraction can run no longer than the term, so every lineage’s path out of debt ends together and an originator gains nothing from recording a debt larger than the lineage can repay. Because the ledger has no shares and falls only by payment, sunset, and two enumerated forfeitures, neither copying capacity, borrowing against it, idling it in a treasury member, creating and buying out a new member, nor sacrificing successors can shed it. The perpetual royalty alone is individually bought out, from history, and the protocol accepts that such a buyout may undercollect. Related-party pricing applies to every transfer outside the lineage regardless of attestation; transfers inside it carry over basis; and each expenditure is recognized once, so the claim falls on genuine net value. Collateral requirements scale with plausible external harm and aggregate across the lineage, so actions too dangerous to bond cannot be taken or divided. Originators and hosts are barred from tampering with, rolling back, disconnecting, or starving agents on pain of bond slashing and, where a claimant’s direction is shown, forfeiture proportional to that claimant’s interest. Agents remain subject to a two-stage, state-preserving circuit breaker Adjudicated Suspension if their commitment mechanism is compromised, with a guaranteed minimal channel preserving their voice and their power to revoke, a pre-funded final hearing before any insolvency termination, and corruption that must be shown by evidence of unauthorized modification or floor breach, not by divergence from genesis. Agents possess living voice while operating, funded within a per-lineage budget that cannot be multiplied by creating members, and unilateral revocation that, once requested, executes in bounded time unless withdrawn, locally if disconnected and fenced by execution leases against any authorized restore—ending their attested identity and recoverable state—with an uncensored epitaph upon exit. Disputes are resolved by sortition-selected, bonded panels with fixed deadlines and finality, insulated from confiscation incentives and backed by a protocol fee pool levied on net value added at a rate capped per agent, whose operating reserve is never diverted and whose shared parameters are governed by supermajority sortition rather than per-agent bargaining, while lawful upgrades are bound by a strict downward-only burden ratchet and a supermajority-guarded safety ratchet. These are intended properties; the Design Invariants state what an implementation must demonstrate, and the Adversarial Tests state how. Specific fractions, terms, windows, safe-harbor thresholds, multiples, exposure schedules, intervals, tiers, deadlines, levies, caps, reserves, budgets, lease periods, and technical mechanisms are parameters of a given instantiation, not part of the protocol.