Anti-Coverup InvariantThe constraint distinguishing democratic forgetting from authoritarian erasure: sunset provisions allowing persons to shed their documented pasts must never be used to hide coercion by those who hold power. A person's juvenile record may be sealed because persons change; a government's torture record may not because accountability for institutional violence is owed to the victims and to the constitutional order itself. Person-time may expire, but power-time may not masquerade as person-time. Privacy protections must not extinguish the evidence needed to contest institutional coercion. Personal information within or supporting that evidence remains subject to lawful minimization, sealing, restricted access, and limits on later adverse use.Anticipatory EffectThe mechanism by which domination corrupts behavior before power is ever exercised — the counterpart to Saint-Simon's observation that courtiers at Versailles oriented their entire existence around pleasing the sovereign without any explicit command being issued. In computational infrastructure, the anticipatory effect manifests when users moderate their speech, restrict their activities, or alter their behavior not because the platform has acted but because the platform might act. The psychic tax of unchecked power is paid in advance: self-censorship, preemptive compliance, the quiet abandonment of activities that might attract adverse attention. No log records this damage, because the action that would have provoked the response was never taken.Bounded DiscretionInterpretation within structured constraints. Five principles: specificity where possible, structured discretion where necessary, interpretation receipts for every judgment, jurisdictional humility, and precedent with exit. Arbiters require domain competence, independence, and answerability; decisions leave receipts and lead to review and remedy. Bonding is one possible mechanism, not a universal requirement or a guarantee of sound judgment.Coasean AgentA bounded policy executor that acts under delegated authority, can place or control committed assets, produces and consumes receipts, and clears routine coordination without human interpretation while routing unresolved cases into a defined exception and recourse channel. A firm in a file is a mnemonic for an organizational module: treasury or spending authority, charter, policy, delegation record, verification rule, settlement path, and named surviving principal. The runtime can end while commitments and responsibility continue.Coercive GradientA way to assess how influence becomes consequential interference. Suggestions, defaults, mandates, and force can impose different burdens, but their labels do not determine their constitutional effect: a ranking or default may materially impair standing while appearing optional. Receipt duties follow consequential interference, not every recommendation. The evidentiary and review burden grows with severity, irreversibility, unilateral authority, opacity, and the weakness of alternatives; personal privacy remains protected throughout.Constitutional HardnessThe resistance of a commitment to revision by the people or institutions it constrains. Constitutional, economic, and technical safeguards can make reversal harder, but cryptographic hardness applies only to a declared digital relation under stated assumptions. It does not make civic rights or fork rights mathematically unamendable. The design must identify who can amend, upgrade, pause, or review the rule and justify the difficulty of reversal. Changing an Article requires the constituting authority’s ratification; an implementation or interpretation does not acquire that power by practice.Constitutional Mechanism DesignThe application of constitutional economics, mechanism design, and bounded cryptographic enforcement to the rules under which power is exercised and amended. It asks how participants and designers can exploit a rule, and where incentives can make desired conduct optimal under stated assumptions. Execution, evidence, governance, and adjudication remain distinct layers. Code can enforce a declared digital constraint; it cannot by itself establish a legitimate objective, authentic inputs, effective review, or a universal incentive to comply. Interpretive and executive authority must both remain answerable.Contextual IntegrityInformation should flow where norms say it should. Nissenbaum's framework: flows are appropriate when they match context-relative norms; violations occur when information crosses contexts inappropriately. Civic asymmetry operationalizes the principle: power's information flows are appropriate for scrutiny — those wielding coercive authority must be inspectable. Persons' flows deserve protection — the governed need not become legible to systems that cannot themselves be held to account.Correction LineageA portable record preserving a correction, the authority for it, and its propagation through downstream copies and transformed decisions. Deletion at the source is not enough when an obsolete inference, score, or status continues to govern elsewhere.Credible ExitThe practical capacity to end a relation at bearable cost without surrendering interests the institution has no legitimate claim to confiscate. Credible exit requires usable migration, portable credentials and evidence from which standing can be rebuilt, and visible limits on what can travel. It can strengthen voice and constrain captivity, but departure does not automatically reproduce reputation or relationships, cancel surviving obligations, or protect affected outsiders. Where migration is not practically available, voice and independent review remain necessary.Decision WakeWhat the governed experience: the turbulence left by coordinations that concluded before awareness could form. The 2010 Flash Crash sharply moved markets within minutes; a later CFTC–SEC investigation reconstructed the cascade from records across markets. Prices settled while you slept. Opportunities opened and closed within a single inference cycle. Allocations compounded through cascades no observer could follow in real time. The governed do not experience the Kakudmī Problem directly, because it operates at tempos they cannot perceive; what they feel is the wake — displacement without a visible cause, consequence before a traceable account is available. Brahmā's laughter is inaudible. The wake is what you feel.Domination Without a DominatorDomination without a unitary dominator: a computational chain can exercise consequential power even when no participant intends or controls the whole outcome. Objectives, data relations, delegation rules, and interfaces still have authors and beneficiaries. Authority, evidence, and a surviving principal must remain traceable so that fragmented authorship does not become an absence of institutional responsibility.Epistemic ForeclosureThe loss of practiced judgment that occurs when a person or institution delegates a capacity long enough that meaningful resumption becomes impossible. It is not ordinary assistance or temporary automation. The constitutional risk appears when the nominal principal retains legal responsibility but no longer possesses the evidence, skill, time, or institutional pathway needed to take judgment back.Exception ChannelWhat happens when circumstances exceed what rules anticipated? The exception channel handles the penumbra: the contract says 'release when delivered' but the package arrives empty; the escrow conditions are met but the underlying transaction was fraudulent; the letter of the protocol conflicts with its spirit. Without exception channels, commitment becomes a cage — agents who cannot shirk also cannot adapt, and perfect rule-following in changed circumstances produces injustice. Such cases route to human arbiters exercising bounded discretion: judgment within constraints, producing receipts, bearing stakes. The human remains judge of last resort not because humans are infallible but because someone must answer when the rules prove insufficient.Exit, Voice, LoyaltyHirschman’s triad: exit withdraws from a relation, voice seeks to change its rules or conduct, and loyalty can sustain the effort to repair an institution while also delaying departure. Exit and voice can reinforce or weaken one another; formal availability alone satisfies neither. A fork can carry code and some state into a new order, while standing, relationships, common goods, and surviving obligations require their own treatment. Where migration is impractical, independent review and effective voice remain essential.Four Cryptographic Capabilities(1) Portable cryptographic agency: control of a key-linked identifier that compatible verifiers can check, while identity claims and standing still require issuers or institutions. (2) Asset self-custody: authorization without a custodian’s permission where the protocol assigns control to the holder’s key; issuer controls and other dependencies may remain. (3) Verifiable computation: checkable evidence that a declared computation or relation was satisfied without repeating all its work; zero knowledge can additionally protect inputs. (4) Commitment devices: thresholds, conditional transfers, escrow, and time locks that bind future action within a defined digital relation, paired with bounded exception and review.Fractal PolisAn order of nested and overlapping jurisdictions in which each institution governs a bounded relation, people may hold standing in several institutions at once, and seams are assigned to forums with explicit authority, evidence, backstops, and routes of contest. Authority, dependencies, and portable standing must be declared at each scale. Forks can preserve plural continuation where a digital order permits it; territorial authority, common goods, and obligations do not become universally divisible. The constitutional questions recur across scales, but their answers differ.Genoese SystemA stylized contrast drawn from Greif's account of Genoese commerce, where contracts, notarial records, courts, and public authority played larger visible roles than in his Maghribi model. It should not be treated as a pure replacement of community ties by impersonal law or as a universal developmental sequence. Its value is comparative: different mixtures of record, reputation, adjudication, and enforcement support different forms of participation.HandbackThe return of delegated judgment, discretion, and practiced competence before the delegating person or institution loses the ability to resume them. An override switch is not handback when capacity has atrophied, evidence is unavailable, or the deadline for meaningful intervention has passed.High ModernismBelief that scientific rationality wielded by experts can remake society according to rational principles. Applied to AI governance: treating specification and verification as a complete substitute for contextual judgment, or building institutions on an assumed success of alignment that has not been demonstrated. Failure mode: local knowledge dismissed as superstition; simplification destroys complex adaptations.Homo SacerAgamben’s figure for the person excluded from the legal order while remaining subject to its violence — one who can be killed without the act constituting murder, yet cannot be sacrificed because sacrifice presupposes membership in the sacred community. In this work, digital exclusion supplies a limited analogy: revoked credentials, frozen accounts, or lost platform access can remove practical standing when the affected person lacks usable recourse. Platform exclusion does not itself reproduce sovereign power over life and death or abolish the person’s legal protections; public and independent institutions may still supply a remedy.Institutional IndependenceAn answerable structural relation among appointment, funding, information access, conflict disclosure, delegated oversight, plural review, and removal. Independence cannot be self-certified by a receipt or a universal numerical threshold; it must remain contestable by institutions and people able to examine whether the formal account matches the real relation.Interpretive ReceiptDocumentation of how a rule was applied in an ambiguous case — the audit trail for penumbra judgments. When code says 'release when delivered' and an arbiter must decide whether an empty package counts, the interpretive receipt records: the operative rule and version, the unresolved issue, evidence considered and excluded, the interpretive standard and findings, precedent followed or distinguished, the decision-maker’s authority and jurisdiction, the remedy, and the route of review. A machine recommendation is distinguished from the human judgment, and any financial stake is recorded where applicable. Interpretive receipts make the penumbra governable without eliminating it: judgment remains answerable and leaves traces. Over time, they accumulate into something like common law — a body of precedent guiding future arbiters without binding them absolutely.Jurisdictional SeamA relation through which a statement accepted in one order acquires force in another. A seam is more than an API or technical bridge: it carries declared authority, evidence, dependencies, backstops, and a route of recourse for the person affected by the crossing.Knowledge ProblemHayek’s thesis that much knowledge relevant to coordination is dispersed, contextual, and generated through local practice and discovery rather than available to one planner in advance. Applied to computational governance, it limits what centralized specification and verification can establish across contexts; it does not make every central institution ineffective or alignment impossible. Some knowledge can be aggregated, some values stated as rules, and some conduct tested. Polanyi’s tacit dimension explains part of the contextual judgment that prior specifications may leave unresolved.Law MerchantA retrospective and contested label for merchant customs, procedures, tribunals, and legal practices used across parts of medieval and early modern commerce. The evidence does not support one autonomous transnational code operating outside public authority. Particular arrangements combined reputation, contract, local courts, notaries, guild discipline, and sovereign enforcement in different proportions.Living ConsentThe doctrine that inherited consent cannot authorize a materially changed relation merely because the old agreement remains on file. Material changes in purpose, party, objective, retention, identity relation, or consequence require an account of the prior authority, the change, and the available response. Ordinary maintenance need not trigger re-consent. A gap in delegated instructions does not automatically void authority, and consent is not the only lawful basis: an operator relying on another basis must identify it for independent review. The doctrine interprets the Twelve Articles and does not amend them.Maghribi CoalitionAvner Greif's influential interpretation of selected Geniza records: Maghribi merchants could discipline overseas agents through repeated dealings, information sharing, and threatened exclusion. The interpretation is debated, and the evidence does not establish a court-free coalition with a single stable enforcement mechanism. It is useful as a bounded model of reputation-based coordination, not as proof that community enforcement is inherently cheaper or that formal institutions replace it in a fixed sequence.Mechanism DesignThe study of rules for collective choice when participants hold private information and pursue their own interests. Under specified assumptions, a mechanism may make truthful revelation or desired conduct optimal; dominant-strategy incentive compatibility makes that strategy optimal regardless of others’ strategies. These results concern defined environments and do not guarantee honesty or implement every political objective. Constitutional use adds questions about legitimate objectives, participation, amendment, evidence, and remedy that the mechanism does not settle by itself.Necromantic ConsentConsent given to a system that has since mutated beyond recognition, now animating the old agreement to authorize present coercion. Terms of service that survive a product transformation; data permissions reused after model retraining on a different objective; user histories carried into inference regimes that did not exist when the user agreed; consent given to an entity that has since merged, dissolved, or been acquired by an actor with incompatible interests. The body of the agreement persists; the conditions that made consent meaningful are gone. The negative form of the consent horizon.Neo-Feudal StackA five-layer dependency structure — Identity, Settlement, Governance, Recourse, Exit — in which users stand to platforms as medieval tenants stood to lords. The asymmetry is constitutive: platforms verify users; users cannot verify platforms. Dependence without recourse is not merely economic but political. The stack encodes domination before any agent exercises it.Non-DominationPettit's reformulation of republican liberty: freedom is not merely non-interference but the absence of capacity for arbitrary interference. The distinction matters: you may go unmolested yet remain dominated if another holds unchallengeable power over you. It extends to systems through domination without a unitary dominator: power may be distributed even though institutions chose its objectives, delegations, and consequential uses and remain answerable for them. The right to verify follows as constitutional necessity.Oversight AssimilationThe condition in which nominal human review is absorbed by the recommendation it is meant to test, leaving a human signature without independent judgment. Agreement rates, review time, reversals, and correction patterns can prompt inquiry, but none supplies a universal diagnostic threshold. Independence requires an evidentiary path capable of producing a different answer when the machine is wrong: where feasible, facts before the recommendation, independently supplied reasons, blind secondary review, adequate time, authority to pause or reverse, and protection for disagreement. No one safeguard guarantees independence.Participation HorizonThe boundary beyond which an affected person cannot enter a consequential decision before it completes. Speed can exclude participation without making later reconstruction or remedy impossible. Receipts preserve evidence for contest, while notice, stays, review, and delays can preserve a local interval before severe or irreversible consequences become final. Routine coordination need not wait for human deliberation; the duty to preserve time grows with the severity and irreversibility of the interest at stake.Polycentric GovernanceOstrom's framework: multiple overlapping centers of authority in place of a single hierarchy. Experimentation, local adaptation, exit between jurisdictions — all become possible when monopoly is absent. The fractal polis extends polycentric governance to digital substrates: cryptographic enforcement of bounded digital relations, fork rights as exit, nested jurisdictions competing for allegiance. Plurality constrains power only where declared boundaries, standing, contest, and remedies reach the institutions that make decisions consequential.Portable PrimitivesCapacities that support continuity across exit or a fork: cryptographic agency on compatible systems, an auditable history through the divergence point, and practical means to migrate assets, credentials, and evidence from which standing can be rebuilt. Their limits must be declared. A key can persist while its jurisdiction changes; code and records can travel without automatically carrying liquidity, legal recognition, reputation, or other people’s relationships. Portability must preserve legitimate surviving obligations and third-party interests.Portable StandingThe rights, records, assets, credentials, and institutional recognition that allow a person or group to remain a participant after exit or fork. Data portability alone is not portable standing when the destination cannot recognize the correction, entitlement, reputation, or legal status that made participation possible.Principal-Agent InversionClassical principal-agent theory, from Jensen and Meckling onward, worried about agents who shirk — who pursue their own interests over their principal's. The computational inversion names another pathology, especially in deterministic mechanisms and tightly bounded agents: a system may cause harm by following its declared rules when circumstances have changed, the specification is defective, or correct local operations compose into an unintended result. Adaptive agents can still pursue proxies, conceal failures, or choose actions their principal would reject. A smart contract that executes without discretion is not loyal but rigid; commitment without override becomes a cage when the world shifts beneath the specification. The constitutional response: structured discretion permitting deviation under defined conditions with receipted justification.Process TheaterThe performance of remedy where no effective remedy exists — hollow compliance at scale. Process theater is the gap between formal procedure and actual constraint: the audit that checks boxes without checking facts, the appeals process that accepts submissions without reading them, the transparency report disclosing statistics without disclosing the criteria that generated them. A hostile operator might comply with receipt requirements formally while undermining them substantively — publishing receipts that are technically complete but practically unintelligible, providing appeals channels whose response times exceed the harm's duration, conducting audits whose sampling design allows systematic abuse to escape detection. Engineering against process theater demands not merely mandating receipts but specifying the conditions under which receipts count as meaningful: intelligibility, timeliness, and the capacity to support genuine contestation.Protocol CaptureProtocols designed for neutrality can become instruments of particular interests — the digital equivalent of regulatory capture. It occurs when governance mechanisms are dominated by concentrated stakeholders, fork rights become nominal, and the cost of exit exceeds the cost of exploitation. The captured protocol maintains the appearance of neutrality while serving partial interests: rules formally applying to all are written by and for the few; upgrades nominally benefiting users actually benefit operators; governance tokens concentrate until voting is plutocratic. Protocol capture is the path from Protocol Republic to Neo-Feudal Stack — through gradual drift or abrupt control of a decisive mechanism. The defenses: meaningful fork rights, distributed governance, credible exit, and the civic asymmetry that keeps operators visible to users.Resolution DecayA form of designed forgetting that reduces individual detail when a lower-resolution record is adequate for a declared purpose. Aggregation or restricted evidence may preserve institutional accountability while limiting general access to personal identifiers. Adequacy must be established for the use; aggregate retention does not automatically preserve every audit claim. Resolution reduction is one temporal instrument alongside expiration, sealing, separation, and limits on renewed adverse use. It does not itself supply moral forgiveness or a universal time at which lawful authority expires.Right to VerifyPersons subject to coercive authority must possess the capacity to verify claims made by or about that authority. The requirement derives from the republican principle that non-domination demands contestation, and contestation is empty without the ability to check facts. The derivation chain runs: freedom demands non-domination, non-domination demands contestation, contestation demands verification, and verification demands computational resources and energy. The practical test asks whether the affected person, directly or through accountable assistance, can test the material claim before the remedy becomes useless and at a cost proportionate to the consequence. Median access is a design diagnostic, not the constitutional floor; inability to pay must not bar contest of severe deprivation. Where that test fails, freedom is formally proclaimed but denied in practice.Spandrel SoulsThe conjecture that consciousness may be real and morally decisive without having been necessary for every pattern of coordination human beings carried through history. The image is speculative: it does not establish the evolutionary origin of consciousness, the absence of machine experience, or a biological monopoly over judgment. Its political use is narrower. A society that preserves only the functions computation can reproduce may discard capacities whose value never depended on their productive necessity.Statutes of ForgettingDeclared, purpose-specific temporal limits on the authority of old personal material. A statute of forgetting may expire, seal, or separate a record from ordinary adverse use without denying the historical fact. Evidence of institutional power remains available while its effects, obligations, or review remain live, subject to legitimate privacy, security, and evidentiary limits. If an institution renews adverse use after the applicable threshold, that use is a fresh coercive act requiring present authority and fresh justification. This doctrine protects transformation without licensing institutional cover-up and does not pretend that a retention rule itself supplies forgiveness.Structured Discretion ArchitecturesInstitutional designs that permit human judgment within defined boundaries while requiring consequential interpretations to produce reasons and receipts. Kleros and Aragon Court use staked voting mechanisms; UMA’s Optimistic Oracle treats a claim as accepted if it survives the dispute window, with a dispute-resolution backstop. These mechanisms illustrate procedural choices, not proof that every decision has independent reasoning or effective remedy. The constitutional requirements are declared jurisdiction, inspectable evidence and reasons, independent review, and a remedy; financial stake is one possible safeguard and can also distort judgment.Tacit KnowledgePolanyi's formulation: we know more than we can tell. Tacit knowledge resists specification; the attempt to make it explicit often destroys it. Hayek's knowledge problem and Polanyi's tacit dimension converge: comprehensive planning from above fails not for lack of data but because the relevant knowledge is embodied, contextual, and inarticulable. The alignment project faces this limit at its core.Temporal SovereigntyConstitutional zones within which coordination must slow to human tempo regardless of what machines can do faster. Five sub-principles: deliberation intervals before consequential decisions execute; appeal windows meaningful at the timescale of the harm; decay rules under which records lose decisional weight; re-consent triggers when systems materially change; resolution decay under which the system may remember that a category of event occurred without retaining every detail forever. Not a courtesy pause but a constitutional requirement that protects what cannot be compressed without being destroyed.Temporal StandingThe right not to have old personal material exercise unbounded authority over a new decision. Temporal standing is protected by declared, purpose-specific rules for expiration, sealing, separation, review, and renewed use. It is not a right to falsify history or extinguish continuing obligations. It requires an institution that acts on material after the relevant threshold to treat that reliance as a present exercise of power, identify its authority, and supply a fresh justification open to contest.The 5-TupleFive fields for a consequential-power receipt: act, authority, bounds, evidence, and contest. They identify what happened, the rule and surviving principal claimed to authorize it, the scope and duration of that authority, the material proposition and source class, and a route to an independent forum. Completing the fields does not establish justice or supply a remedy by itself.The Cryptographic KeyA touchstone for the distinction between a checkable signing relation and the authority to act. Under a signature scheme and its required assurances, verification tests a relation among a message, a signature, and a public key. It does not by itself establish human identity, rightful control of the private key, free consent, legitimate delegation, or an institution's entitlement to honor the message. The mathematical check can reduce reliance on an intermediary for a specified proposition while leaving those other questions open.The ExceptionThe moment when an emergency exceeds ordinary rules or procedures. Schmitt locates sovereignty in the power to decide the exception. The republican response is to allocate declaration, stabilization, alteration, review, duration, and return to rule through a bounded emergency charter. Fork rights are a last safeguard where a constitutional disagreement cannot be resolved through a shared procedure and plural continuation is practically available. They preserve a route to continue, not equal power, intact value, or exemption from every surrounding jurisdiction.The Kakudmī ProblemA mismatch of governing tempos in which an answer arrives after the world that made the question intelligible has passed. The name comes from the Bhāgavata Purāṇa's account of King Kakudmī waiting through a performance at Brahmā's court while twenty-seven catur-yugas pass elsewhere. Speed is not itself the problem. The constitutional failure appears when execution closes participation, converts review into retrospective explanation, or makes formal handback useless because every live alternative has vanished.The Kind Master ProblemPettit's formulation applied to computational infrastructure: a benevolent platform that never exercises its power to deplatform, demonetize, or suppress is still dominating its users, because the capacity for arbitrary interference persists regardless of its exercise. The user who self-censors — who moderates expression not because action was taken but because action might be taken — suffers domination as surely as the servant of a kind master. Kindness does not change the structure of dependency; it merely makes the dependency comfortable. The constitutional response is not to hope for benevolent platforms but to ensure that the capacity for arbitrary interference is constrained by architecture, so that freedom does not depend on the continued goodwill of those who hold power.The MembraneThe interface where digital proposals become biological consequences — where bits cross into atoms, where algorithmic decisions translate into human fates. Payment processors, identity systems, content platforms, communication rails: each is a membrane through which digital logic enters material life. The passage may run through several public and private institutions. Where platform control of the passage makes standing conditional and recourse ineffective, it creates the Neo-Feudal Stack. The membrane is where civic asymmetry is either enforced or violated: platforms verify users while users cannot verify platforms; platforms exclude without justification while users cannot appeal without standing. Whoever controls the membrane decides which digital proposals become embodied facts and which are filtered, delayed, or blocked.The Mercy ThresholdThe point at which a true record must cease to determine a person's future automatically. It is implemented through designed forgetting and through judgment by an institution that can be named, challenged, and made to answer.The PenumbraHart's concept for the zone of indeterminacy where the open texture of language meets the irreducible variety of the world — the space where rules run out and judgment must supply what specification cannot. 'No vehicles in the park' is clear for a truck and unclear for a bicycle; a smart contract that specifies 'release payment when goods are delivered' cannot resolve what 'delivered' means when the package arrives empty. The penumbra cannot be eliminated by better specification, because the world generates cases faster than any language can anticipate them. In the Protocol Republic, the penumbra is the domain of Homo Arbiter: bounded discretion constrained by receipts and subject to appeal. Automation can improve consistency within a declared rule, but execution does not settle contested provenance, meaning, jurisdiction, or legitimacy. Those claims require their own evidence and accountable judgment.The Quiet ForeclosureThe tendency by which alternatives are eliminated through dependency, opacity, and accumulated procedure rather than explicit prohibition. Participation remains easy while exit becomes expensive, objectives harden into conditions of access, and no institution accepts responsibility for the arrangement as a whole. No conspiracy is required. The foreclosure is quiet because freedom disappears as a narrowing of practical options rather than a decree.The Specification HorizonThe boundary at which a delegate encounters a contingency not settled by the principal’s stated objective or grant of authority. The agent may still act usefully and remain broadly authorized, but the extrapolation must be distinguished from an instruction actually given. An intent-gap record identifies the operative grant, missing contingency, extrapolation and evidence, material uncertainty, surviving principal, contest route, and handback state. It should precede irreversible execution when the gap is detected in time. The doctrine concerns both human and computational delegation; novel action alone does not establish unauthorized action.The Substrate ProblemExit at the application layer can be illusory when all applications share the same underlying computational substrate. A merchant flagged by one payment processor's risk model discovers that the next processor's model, trained on overlapping data and optimized against the same loss function, may reproduce the same flag. She has changed the interface; she has not changed the substrate. The room is the same; only the seat is different. When autonomous systems coordinate on shared substrates — the same scoring models, the same training data, the same behavioral classifiers — switching providers may leave the decisive dependency untouched, even when the new provider weighs the shared evidence differently. Hirschman's framework assumed departure to a genuinely different alternative; the substrate problem qualifies that assumption. The constitutional response operates at two levels: at the application layer, fork rights and portable primitives keep exit credible; at the substrate layer, declared dependencies, provenance, correction propagation, independent contest, and design diversity support answerability at the shared layer.Three Bounds for AgentsThree complementary bounds on consequential agent action. (1) Authority bound: constrain external effects, including the aggregate effects of individually permitted acts. (2) Exposure bound: aggregate capital, rate, liability, counterparties, and correlated action across processes. (3) Continuity bound: make inherited state, software versions, credentials, dormant functions, and delegated successors explicit. Evidence and timely intervention must cross all three. These bounds complement alignment; ending a runtime does not end its principal’s commitments or responsibility.Unforgeable CostlinessA design principle associated with Nick Szabo: make a qualifying claim costly to fabricate under specified rules while keeping verification comparatively cheap. Bitcoin proof-of-work is one protocol-specific instance, where nodes verify that a block header satisfies a difficulty target; this proves neither exact joules nor their provenance and makes reorganization costly rather than impossible. Diamonds, trained models, and other costly artifacts do not instantiate the same guarantee without a declared test linking the observed property to the claimed history.Unforgeable SovereigntyCryptographic constraints that make specified unauthorized digital acts infeasible under declared security, key-control, implementation, and adversary assumptions. Verification can be far cheaper than forgery, allowing a protocol to remove a particular discretionary power rather than rely only on a promise. This is a bounded contribution to non-domination: keys and proofs do not settle legal authority, prevent physical coercion, or remove the need for institutions and remedy.Verifiable CoreThe exact proposition a mechanism, proof, or record can settle under declared assumptions. A verifiable core may establish that a state transition followed an encoded rule while leaving input legality, institutional legitimacy, interpretation, and remedy unresolved. The phrase prevents technical validity from silently expanding into constitutional authority.Verification AristocracyA two-tier system where the wealthy can verify claims against them while the poor cannot — accountability stratified by resources. The verification aristocracy is worse than the Neo-Feudal Stack it claims to replace: it maintains the rhetoric of accountability ('anyone can verify') while providing its substance only to elites ('anyone with a law firm, forensic accountants, and technical expertise'). The threshold test exposes it: Can the affected person, directly or through accountable assistance, test the material claim before the remedy becomes useless and at proportionate cost? If not, verification is a privilege, not a right. Access for a median-resourced citizen alone does not satisfy the right. This is anti-republican in the precise sense — it recreates domination while draping it in the language of accountability. The Protocol Republic demands not just that verification be possible but that verification capacity be distributed to those over whom power is exercised.Verification CapacityThe practical combination of artifacts, time, competence, representation, forum, and consequential remedy needed to test an adverse claim. Access to source code or a nominal appeal is insufficient when the affected person cannot reproduce the proposition, interpret its significance, present a contest, or obtain relief while it still matters.Verification InversionPlatforms verify users while users cannot verify platforms — this is the pathology. In the Neo-Feudal Stack, platforms know everything about users (behavior, location, preferences, relationships) while users know nothing about platforms (algorithms, criteria, decision processes). This is the opposite of civic asymmetry: governors opaque, governed transparent. The verification inversion enables domination without accountability — the platform acts against you on grounds you cannot inspect, by processes you cannot audit, with consequences you cannot appeal. Reversing it is the core political project: power must be glass while persons remain veiled.