Computational Republicanism
Jurisdiction and Entitlement
Computational authority becomes constitutional in character when it controls a covered passage and materially determines whether a person may pass. The relevant power does not arise from an operator's size, public status, or chosen label. It arises when a person lacks a reasonable substitute and a computational process materially determines, recommends, or executes an act that affects access to the passage.
Two conditions must therefore coincide. The first is practical dependency: refusal, exclusion, delay, or degradation would impose a material loss that a reasonable alternative cannot timely cure. The second is computational determination: a computational rule, model, classification, or composed process materially contributes to the act. A large service with ready substitutes may fall outside the first condition. A smaller service may satisfy it where geography, market structure, identity dependence, interoperability failure, or accumulated standing leaves no reasonable alternative.
Institutional form does not alter either condition. Public administration may be captured, and private administration may acquire sovereign effects when departure requires material forfeiture. The inquiry follows power and practical refusal, giving neither public office nor private contract a presumption of legitimacy.
An affected person subject to both conditions is entitled to invoke these Articles and to receive their protections. That entitlement does not by itself create jurisdiction in every court. Legal enforcement depends on an adopting jurisdiction, a binding commitment by an operator, or another source of law that gives the Articles effect. The distinction preserves the normative rule without claiming authority that no institution has conferred.
The following terms govern construction:
- Covered passage means access to money, work, housing, medical care, communication, identity, legal standing, or another interest of comparable consequence.
- Coercive computational authority means an operator that controls a practically non-substitutable covered passage and uses computational determination in acts affecting that passage.
- Coercive computational act means a decision, classification, restriction, denial, suspension, ranking, condition, omission, delay, or related sequence that materially affects a person's access to a covered passage.
- Operator means each public or private entity responsible for a covered act. A vendor, model provider, delegated agent, affiliate, or protocol integrator may share responsibility, and delegation does not displace the duty to identify an answerable principal.
- Affected person means a natural person whose access, standing, rights, or material interests are directly affected by a covered act. Affectedness is specific to the act, rule, exposure, and remedy at issue; it is not a permanent political status.
- Independent review means review by a party that did not take the act, does not answer to the decision-maker for the result, has access to the evidence necessary for judgment, and can reverse, modify, or remand the act.
- Material adverse action means an act or related sequence above a published severity threshold that restricts access to funds, employment, housing, medical care, communication, identity, or legal standing. Related acts are assessed by their cumulative effect.
- Rule includes the declared policy, threshold, model use, composition rule, or decision procedure materially invoked in the act. A rule is evaluable when the affected person or a qualified advocate can test whether the stated conditions were satisfied.
Coverage is determined act by act. An operator may be covered for one function and outside coverage for another. Corporate form, contractual language, omissions, delays, rankings, correlated low-severity acts, use of an affiliate, and division of a decision across services do not alter coverage when practical dependency and computational determination remain.
Where a covered act results from the combined operation of several entities, each materially contributing entity answers for duties within its control. If the participants cannot establish bounded contributions through inspectable records, responsibility is joint. An adopting instrument may designate a lead principal, but an affected person need not reconstruct the system merely to identify a respondent.
An ownerless protocol or transient process cannot be the sole answerable principal. A party that deploys or integrates the system, controls access to the covered passage, or derives authority from its operation must supply a surviving principal capable of issuing receipts, answering contests, preserving records, and complying with remedies. Without such a principal, the system may not exercise coercive computational authority.
Enumerations of covered passages within the Articles state included cases, not an exhaustive boundary. The jurisdictional test and defined terms govern when an operative provision does not repeat a covered passage.
The Twelve Articles
Canonical text, version 2026-07-18. Where any other statement of the Articles differs, this text governs.
Each Article names a right held by every person subject to coercive computational authority. That authority exists when a computational process materially contributes to an act governing a covered passage and the person lacks a reasonable and timely substitute. Population scale is relevant to systemic-significance duties under Article 12; it is not a condition of entitlement under Articles 1 through 11. Together the Articles constitute the constitutional floor below which computational governance lacks legitimacy.
1. Right to a contemporaneous receipt for any coercive computational act, stating Act, Authority, Bounds, Justification, and Appeal Path in an accessible form and, where required for independent verification, a machine-readable representation.
2. Right to contest any act through independent review, on a timeline proportionate to the severity of the harm.
3. Right to human review by an independent arbiter for every material adverse action above a published severity threshold. Related acts, omissions, or delays are assessed by their cumulative effect. Other adverse actions require expedited reconsideration and inclusion in a statistically valid independent audit.
4. Right to export data, identity credentials, reputation attestations, and relational context in interoperable, machine-readable formats.
5. Right to present portable credentials to any compatible system without the issuing platform's permission.
6. Right against cross-domain composition of personal records (directly or by proxy, including inferred joins) without explicit, informed, revocable consent.
7. Right to time-bounded personal records. The right to become someone new is constitutionally protected. Evidence that coercive authority acted must remain durable, but personal information within or supporting that evidence remains subject to lawful minimization, sealing, restricted access, and limits on later adverse use.
8. Right to know the specific rule invoked in any adverse act, stated in evaluable terms. Disclosure is tiered: full rule and threshold to the affected party and their advocate under confidentiality; aggregate rule-invocation data published publicly; narrowly defined, time-bounded red-team exemptions subject to independent audit.
9. Right against collection beyond the minimum necessary for the specific function requested by the person or for a duty independently authorized by law. Necessity is measured against the least data-intensive reasonably effective means.
10. No contractual waiver extinguishes Articles 1–9. Terms of service that purport to waive receipt, appeal, exit, or portability rights are void against the constitutional floor.
11. Right to an independent record. No coercive computational authority may control the sole authoritative record of its own acts. The record must be independently verifiable and resistant to unilateral revision, suppression, or censorship. Integrity establishes provenance and history, not the truth of every recorded claim; objections, corrections, and adjudicated findings must remain linked to the original record. Assurance must rest on a constraint external to the authority's control, whose defeat is publicly detectable and costly in proportion to the power constrained.
12. Mandatory independent audit for coercive computational authorities above the threshold of systemic significance.
Canonical construction of Article 7. After the applicable threshold, renewed adverse use requires fresh, purpose-specific justification and independent review.
Institutional Allocation
The constitutional order contains three continuing organs: the Standard-Setting Body, the Auditor, and the Adjudicator. Their authority is limited to the functions assigned here, and no organ may acquire another organ's final power by contract, delegation, or emergency practice. Continuity is justified where rule maintenance, technical examination, or reasoned judgment requires durable competence and institutional memory.
Standard-Setting Body
The Standard-Setting Body defines receipt schemas, interoperability requirements, audit criteria, severity thresholds, and procedural calibrations. Its rules must be public, versioned, prospective unless a stated necessity requires otherwise, and accompanied by reasons that answer material objections. It does not adjudicate individual cases or certify its own compliance.
Material rules require notice and a deliberation period sufficient for affected persons to respond. The Body must identify the legal or adopted authority for each rule, the class of operators and acts covered, the evidence considered, the expected burden, and the review date. Its rules remain subject to adjudicatory review and, where law provides, legislative control.
Auditor
The Auditor examines operators, receipt systems, record custody, review performance, and compliance with published rules. The Auditor must be institutionally and financially independent of the operator under review. Its mandate includes access to the records, interfaces, personnel, tests, and declared conventions needed to assess compliance. Confidential access may protect legitimate security, privacy, and trade-secret interests, but confidentiality may not prevent the Auditor from stating whether the constitutional duty was satisfied.
Audits must produce findings, supporting methods, limits, unresolved uncertainty, and corrective deadlines. Material findings are public unless a narrowly defined withholding rule applies. Withheld matter remains available to the Adjudicator and any court with jurisdiction.
Adjudicator
The Adjudicator decides contests, reviews claimed exceptions, interprets the Articles, and determines whether rules or amendments breach the constitutional floor. It must be independent of the Operator, Auditor, and Standard-Setting Body in the matter before it. It may obtain technical assistance, but the reasons for judgment must remain attributable to the Adjudicator and intelligible to the parties.
The Adjudicator may affirm, reverse, modify, remand, order a new review, require a corrected receipt, suspend a rule, or impose another remedy authorized by the adopting instrument. Its decisions must identify the act, authority, evidence, applicable rule, disposition, and route of further review.
Affected-Person Counterpower
Affected-person counterpower is a capacity, not a continuing office. Each rule may affect a different population. Permanent representation would assign a durable identity to a changing relation and invite professionalization, jurisdictional expansion, and capture. Counterpower expires with the claim, remedy, or authorized implementation review.
Affectedness may be established by a receipt, an independent record, credible evidence of unrecorded exposure, a finding of the Auditor or Adjudicator, or credible inclusion in the population identified by a prospective material-change receipt. A materially defective or missing required receipt, together with credible evidence of exposure, creates a rebuttable presumption of affectedness and requires independent reconstruction of the exposed population. An Operator may not defeat invocation by withholding the evidence that Article 1 required it to create.
Each affected person may invoke review, join or leave a common proceeding, delegate and timely revoke claim-specific representation, receive notice, and object to closure. Interoperable recourse systems independent of the Operator may aggregate common contests. A routing decision that rejects, consolidates, prioritizes, assigns, distinguishes, or closes a contest must issue a receipt and remain independently reviewable.
Employees, researchers, journalists, civil organizations, vendors, and other witnesses may present credible evidence sufficient to open a preliminary examination or audit. That capacity does not confer control of an affected person's claim, authority to bind the affected class, or entitlement to another person's remedy.
Only the Adjudicator may stay an operating rule or pipeline through a reasoned, time-bounded order. A temporary affected-person panel may examine remedy design, notice, implementation, and closure when a disposition would bind or limit absent persons. It may present objections but may not decide merits, write rules, appoint officers, control a continuing budget, license systems, impose a stay, or extend its mandate.
Operator and external institutions
The Operator is the regulated party. It may petition for a rule, amendment, or emergency exception and may contest an audit or judgment through the prescribed process. It does not vote as a constitutional organ. A recourse provider administers procedure and has no authority to interpret the Articles or determine the merits of a claim. Courts remain available for judicial review where law provides, and legislatures retain authority to enact stronger protections, alter statutory institutions, or decline adoption. No internal organ is insulated from lawful public authority.
Canons of Construction
Institutional specifications, temporal-use rules, and explanatory grounds implement this Constitution. If they conflict with an operative provision, the operative provision governs. They may not amend the Articles except through the amendment procedure.
Receipt and review
Articles 1 and 2 operate together. A receipt without a practical review path does not satisfy Article 2. Review without a contemporaneous statement of the act, authority, bounds, justification, and appeal path does not cure an Article 1 violation. Template language fails when it does not identify the actual rule or evidence materially used.
Every receipt must also state the date and time, stable identifier, responsible Operator and surviving principal, schema version, materially relevant rule or model version, whether the act was automated, recommended, or human-decided, the provenance of material inputs, material uncertainty, any expiry or review date, and the status of correction and appeal. It must provide an accessible human-readable form and an interoperable machine-readable representation sufficient for independent verification.
The review timeline must be proportionate to the harm. A process completed after the material consequence has become irreversible may remain useful for correction or damages, but it does not satisfy a duty of timely contestation where interim relief was practicable.
Human judgment
Article 3 requires independent human judgment for material adverse actions. A reviewer must possess the competence, authority, time, and evidence necessary to evaluate the act. Confirmation of an output without those conditions is not human review. The resulting receipt must identify the reviewer, the evidence considered, the disposition, and any material limit on the reviewer's capacity.
Algorithmic reconsideration is permitted for lower-severity acts only where the rules define sampling, escalation, and audit. It is not equivalent to Article 3 review and may not be used for acts above the materiality threshold.
Severity follows cumulative effect. An Operator may not divide a restriction among repeated acts, omissions, delays, rankings, affiliates, or coordinated systems to keep each component below the materiality threshold.
Portability and presentment
Article 4 protects the data and standing needed for practical exit. Export must preserve usable structure, provenance, and relationships to the extent necessary for a receiving system to evaluate the material. Security and privacy restrictions must be narrowly fitted to the risk and may not serve as disguised lock-in.
Article 5 requires compatible systems to permit presentment without the issuer's permission. A system is compatible when it implements a published interface or can evaluate the credential through reasonable technical adaptation. It does not compel acceptance. A receiving system may assess provenance, validity, relevance, and current status under public rules, but self-declared incompatibility and rejection are covered acts subject to receipt and review.
Composition and consent
Article 6 applies to direct joins and to proxies, derived scores, embeddings, cached classifications, or coordinated outputs that materially reproduce a prohibited cross-domain composition. Consent must identify the domains, purpose, material consequences, duration, and withdrawal procedure. Consent is invalid when refusal would deny access to a covered passage unless the composition is necessary to provide the service and independently authorized under law or the adopted constitutional process.
Temporal jurisdiction
Article 7 separates four questions: whether an event occurred, whether its record may be retained, who may access it and for what purpose, and whether it may materially contribute to a present adverse act. A record may remain accurate, retained, and accessible for a defined purpose while losing authority in an unrelated or later decision.
After the applicable threshold, non-use in adverse decisions is the default. Renewed use requires a present, domain-specific nexus; an explanation of why current evidence or a less restrictive means is inadequate; independent review; notice before the act where practicable; and a duration limited to the approved purpose. Authorization permits the stated use only. It does not restart the threshold or restore general authority.
The rule follows functional reliance. An operator may not avoid it through an affiliate, broker, proxy, derived score, embedding, model output, or changed record form that materially carries the expired influence into the present act. No particular deletion or machine-unlearning method is constitutionally prescribed.
Records of coercive authority are governed differently because they support public accountability. Their persistence remains subject to lawful protection of personal data, security, and adjudicatory confidentiality, but the authority may not invoke personal renewal to erase the evidence of its own acts.
Rule disclosure
Article 8 requires an evaluable account of the rule materially invoked. Disclosure need not reveal source code, model weights, third-party personal data, or a trade secret to the public. It must still permit the affected person, a confidential advocate, the Auditor, and the Adjudicator to determine which procedure and principles were applied, which material inputs were used, and whether the stated conditions were satisfied.
A narrowly defined red-team exception must identify the risk, scope, duration, custodian, and independent reviewer. It may delay or tier disclosure; it may not convert a rule into secret authority beyond review.
Minimum collection and anti-waiver
Article 9 measures necessity against the specific function requested by the person or a duty independently authorized by law, using the least data-intensive reasonably effective means. An Operator may not enlarge the function to bundle unrelated purposes. Data useful for speculation, future product development, or unrelated optimization is not necessary merely because collection is inexpensive.
Article 10 bars contractual waiver of Articles 1 through 9. It also prevents an operator from using consent to reduce duties imposed by Articles 11 and 12. Stronger rights supplied by law remain available.
Independent record and audit
Article 11 is technology-neutral. The record must be independently verifiable, resistant to unilateral revision, and protected by an external constraint whose defeat is publicly detectable and costly in proportion to the power constrained. The proper mechanism depends on the threat model. Independent custody, multiparty attestation, public transparency logs, cryptographic commitments, institutional replication, and physically costly settlement may satisfy different assurance levels. No named technology is constitutionally required.
Record integrity establishes what was recorded, by whom, and how it changed. It does not establish that the recorded assertion was true. An affected person's objection, an authenticated correction, a superseding status, and an adjudicated finding must remain linked to the original entry under the governing access and retention rules.
Article 12 applies above a published systemic-significance threshold because recurrent or population-wide risk requires examination beyond individual contest. Below that threshold, an audit may still be required by the Standard-Setting Body, opened by the Auditor under published predicates, sought by an affected person, supported by credible witness evidence, ordered by the Adjudicator, or imposed by law. Low contest volume does not establish compliance without examination of access, missing receipts, abandonment, and retaliation.
Burdens and Remedies
The Operator bears the initial burden of producing the receipt and the record necessary to evaluate a covered act. Once an affected person identifies a material omission, inconsistency, plausible violation, or credible evidence of exposure without the required receipt, the Operator must show that the stated authority applied, the evidence satisfied the rule, the bounds were proportionate, and the review path was effective. An affected person is not required to prove the internal operation of a system whose relevant evidence remains under the Operator's control.
The burden for an exception rests on the party invoking it. That party must identify the provision affected, the authorized purpose, the necessity of the departure, the absence of a less restrictive means, the duration, and the independent reviewer. A generalized interest in efficiency, fraud prevention, safety, security, or trade secrecy does not establish the exception without facts connecting that interest to the particular departure.
Remedies must address the constitutional defect and the practical harm. A valid adoption must authorize timely interim relief, correction, reversal, modification or remand, restoration where practicable, preservation and controlled access to evidence, and protection against retaliation. It may also authorize a new independent decision, exclusion of an impermissible record, suspension of a rule, an audit, compensation, or another remedy consistent with the Articles.
Where a defect affects a class through a common rule or system, relief may extend beyond the individual case. The Adjudicator may order notice to similarly situated persons, preservation of relevant records, testing of the common rule, prospective correction, or a defined stay pending review. Representative relief must identify the affected class, common exposure, remedy, implementation period, and process for preserving materially different facts and remedies. A disposition that would bind or materially limit absent persons requires participation by a temporary affected-person panel and reasoned approval by the Adjudicator. Representative relief supplements rather than displaces each affected person's direct claim in the designated independent forum.
Interim relief is appropriate when delay would defeat meaningful review and the likely injury from temporary protection is proportionate to the risk of an unlawful act. The Adjudicator must state the evidence, duration, conditions, and allocation of risk. Interim relief does not decide the merits unless the adopting law expressly provides otherwise.
Good-faith compliance may affect penalty or remedy but does not erase the affected person's right to correction. Repeated failure, concealment, retaliation, record suppression, or use of an exception outside its stated bounds supports stronger relief. An Operator may not retaliate against a person for requesting a receipt, pursuing review, assisting an audit, presenting a portable credential, withdrawing consent, joining a common proceeding, or submitting evidence of a systemic defect.
Compliance with these Articles does not validate an act that is discriminatory, fraudulent, retaliatory, arbitrary, or otherwise unlawful. These Articles supplement and do not displace stronger substantive or procedural protections.
If two Articles appear to conflict, they must be construed to preserve the practical exercise of both where possible. Privacy and security protections may shape disclosure under Article 8 without eliminating independent evaluation. Record persistence under Article 11 may protect evidence of authority while Article 7 limits the later adverse use of personal information contained in that evidence. Portability under Articles 4 and 5 remains subject to third-party rights without permitting the Operator to use those rights as a general bar to exit.
Invalidity of one rule, calibration, or institutional assignment does not suspend the remaining Articles unless the adopting instrument makes the provisions inseparable. A transition ordered after invalidity must preserve accrued claims, records, and review rights.
Amendment
Any person or institution may petition for amendment or calibration. A valid proposal must state the text or calibration to be changed, the reason, the affected rights and institutions, the evidence considered, the expected consequences, and the transition rule. Technical calibrations within delegated bounds require public notice, a defined objection period, a reasoned response to substantive objections, and a two-thirds vote of the Standard-Setting Body. An objection alleging that the change exceeds delegated bounds or weakens the constitutional floor is reviewable by the Adjudicator. It does not stay the change unless the Adjudicator finds that delay would defeat meaningful review and issues a reasoned interim order.
The Auditor and Adjudicator may report consequences and legal defects but do not vote. An amendment to an Article requires the same notice and response, approval by two-thirds of the Standard-Setting Body, and ratification through the lawful process of the constituting authority that adopted the Constitution. Where a private constituting authority is controlled by the covered Operator and affected persons lack a reasonable and timely substitute, ratification also requires matter-specific approval through an independently administered process open to authenticated affected persons. The adoption instrument must state the quorum, voting rule, privacy safeguards, and treatment of materially distinct affected groups. The organs cannot amend an Article by their votes alone.
Articles 1, 2, 3, and 10 remain non-derogable minima because they preserve the practical conditions of notice, contest, answerable judgment, and non-waiver. Calibrations such as deadlines, audit frequency, severity thresholds, interoperability profiles, and temporal-use schedules may be revised when the revision preserves meaningful exercise of the right. An amendment affecting Article 11 may alter assurance architecture, custody, or technology, but may not make the practical exercise of Articles 1 through 3 depend solely on evidence controlled by the Operator.
An amendment takes effect prospectively after a stated transition period. Retroactive application requires a separately stated justification and may not extinguish an accrued claim or validate an act that violated the governing rule when taken.
Emergency
An Operator may request a temporary exception by publicly identifying the threat, the provisions affected, the proposed scope, the duration, and the review channel. An independent authority designated by the adopting instrument must authorize the exception before it takes effect, except where immediate action is necessary to prevent imminent material harm. Immediate action requires a provisional receipt at the time of the act and independent authorization within forty-eight hours.
The Adjudicator must promptly review every emergency exception. The record must state the evidence, rule, affected persons or class, measures taken, information withheld, and termination condition. Secrecy may be authorized only by a time-limited order, with access for the Auditor and Adjudicator.
No emergency exception may suspend Articles 1, 2, 3, or 10. Operational failure may move receipt, review, or record duties to a degraded channel, but it does not extinguish them. Records created during degraded operation must be reconciled when service returns. An exception expires after ninety days unless renewed through the amendment process.
Adoption and Enforceability
An adopting jurisdiction must identify the institutions that exercise each constitutional function, the constituting authority, nomination and appointment procedures, confirmation where required, removal standards, initial and staggered terms, interim authority, succession, quorum and voting rules, compensation, conflict rules, confidentiality and transparency duties, the recourse systems through which affected persons may proceed, independent funding, the minimum remedies stated above, the route to judicial review, and the relationship between these Articles and stronger existing law. Funding may not remain subject to the unilateral control of an Operator reviewed by the institution.
Valid adoption requires a solvent remedy path proportionate to the authority exercised. An independently custodied reserve, bond, mutual pool, insurance arrangement, public appropriation, or combination may satisfy that duty. The funder may not determine standing, select the Adjudicator, control an audit, interpret the Articles, suppress a claim, or settle away non-waivable correction. No affected person may be charged for access to the constitutional minimum.
A private operator may adopt the same duties by enforceable charter, contract, certification, or public commitment only if affected persons may invoke the Articles directly in a designated forum, obtain the minimum remedies, and pursue review before an institution independent of the operator's discretion.
Partial adoption must be described article by article. An operator may not claim constitutional compliance from adoption of selected procedures while omitting the articles that the claim implies. Interoperability between different adoption levels must preserve provenance so that a receiving institution can determine which rights governed the credential, receipt, or record.
The constitutional floor governs only where it has been adopted as law or binding obligation. Its protections attach to every person subject to the defined power; its legal force extends as far as an authorized institution can enforce it. Keeping those propositions separate permits the Constitution to state the minimum conditions of legitimate computational authority without concealing the work of enactment.