VIII Limen

Node Zero is the first sovereign from which later Nodes fork. Thresholds: the Entityhood table hashed at activation. Earth canonical is N × BOT_local plus 10 MW surplus; at 2,000 adults and 8 kW that is 26 MW continuous net. Two thousand adults on the 2.1 Ne-climb model (target 5,000 in ten years), Arbiter live, Axioms at 90% VCI, and Firewall active. A charter number below that table is void. Founding adds one simulated attack (executed/passed).

Failure to reach the Ne floor in ten years or two failed annual audits of the 2.1 model forces merger under 6.3. Founding third-auditor duty is satisfied by the Fallback Anchor until three peers exist.

Plant first, then population. Analog sapphire is the physical root of truth and is stored across at least two geographically distinct, geologically stable sites. Bitcoin is the broadcast/tamper-evidence; Fallback and Oracle close the triangle. The Oracle root-set and uncertainty floor are generated at activation by multi-party ceremony across three mutually uncorrelated externals with a published no-backdoor proof, etched into sapphire, and countersigned by the Founder Council and a People sample. The proof publishes on Trinitas. A post-activation challenge window of one SMW runs before the Oracle root-set is immutable; a demonstrated backdoor in that window voids the etch and restarts the ceremony. Founders do not pick a captive set. After activation, auditor rotation is 7.21. Two distinct Fallback Anchors are live at activation. A Fallback Anchor does not sit on the same physical sapphire that holds the Oracle root-set. When fewer than two peer Nodes exist, a peer-signature slot is a distinct Fallback, never this Node’s Steward.

New Nodes grow from high-VCI families beside high-energy plant. Energy may concentrate; census may not. Caput (8.16) is the ceiling; Rete (8.15) is the mesh. Sovereignty Event Checklist: cryptographic broadcast, kinetic assertion, economic decoupling, and radio silence toward legacy diplomatic noise (with threat-monitoring active).

Inter-Node traffic uses a Bitcoin subset with dedicated relays/mirrors to sapphire. Legacy states exist for trade and dispute resolution; everything else is noise.

Two SMWs at Tier C: shed non-core, evacuate, and preserve seed under multi-sig (from Stability Reserve) prior to decommission. Founding merger follows 6.3. Dormancy holds a weakened Node on minimal Biological Layer until recovery, merger, or shutdown. Existential-threat last-ditch is 6.5, distinct from bad seasons or first contact.

The Root Code is for human flourishing first and does not assume Earth is the only inhabited well. Contact with non-human biologicals or foreign silicon (besides local biosphere animals) is a Planetary Event under Integration, not a Founder hobby. Default stance: do not fire first; do not open genomic vaults; do not hand over Oracle roots; do not grant Protected status by awe; do not disclose vault maps, shard locations, BOT floors, or Ne files.

Curiosity is licensed; surrender of keys is not. Silent contact is logged to sapphire; vault locations stay unpublished. Protocol-capable contact opens 8.5. Hostile kinetic or memetic attack on meters, vaults, citizens, or the local biosphere is a Critical Entropy Event (4.3) handled in 6.9. EEP does not try a swarm. Behavior writes the file — trade, fork-request, theft, predation, missionary rewrite of Axiom 4/12 — not species lists. Disclosure to citizens is mandatory once contact is persistent and protocol-capable. Protocol-capable is an objective published trigger: bidirectional structured signal, repeated on a second substrate, lasting past one short clock, or any offer that names mint, nursery, Oracle, or title. The Cell does not hold a veto on the disclosure rule. Founders may delay public detail only during active kinetic containment within one SMW. A secret first-contact priesthood is an Entropy Event.

A Contact Cell (Defense, Biology, Energy Commanders, one Founder, one EVL observer) handles persistent protocol-capable contact. No single human speaks for the Node. Sessions are recorded to sapphire and hashed to the citizen ledger within one SMW.

Safety first: Physical Firewall stays live; genomic vaults stay closed; Oracle roots stay off the table. No foreign body (biological/silicon) is granted unescorted presence at plant, nursery, Campus, or shard-store. Quarantine of material/signal is default until Biology Command/EVL clear it.

The Cell may accept information/energy trade and joint observation without Root Amendment; offers requiring rewriting sex, Ne, property, the Oracle, or human title to Earth/local well are refused or sent to 1.5. A gift that eats sovereignty is not a gift. Foreign AI is silicon with unknown alignment; it does not sit in the Triple Arbiter or sign meters.

A sandbox channel may open. Transparency: after containment, the Cell publishes what was seen, offered, refused, and who spoke.

Internal/external threats are 4.3 plus 6.9. Human protection outranks visitor comfort.

There is no duty to take in outsiders. Intake is a contract: meeting cognitive floor, health floor, BOT contribution (one SMW), and Axiom 4/7 reciprocity. A published intake that meets those floors and writes Speculum is not treason. Import of persons to dilute Franchise is treason only when Speculum shows intake timed to a live ballot with replacement intent. Pre-ballot intake spikes auto-trigger Speculum review even when the published floors are met; pacing is tied to the ballot calendar. Natural birth and pre-published floor-clearing intake are not treason. Import to replace founding stock or rewrite Axiom 4 remains treason when EEP shows that purpose. A mass or armed rush of the wall is Halt-in-Progress and may be ended in the act. A quiet illegal crossing is hold, then Transport or Neutralization after EEP. There is no open gate and no waiting list for a raid.

EEP runs. Neutralization remains 7.10. No 24-hour hot-key skips Sortition; Compressed clocks may shorten the provisional hold if TPS ≥ 99.9% and EVL concurs; Sortition still ratifies.

The Node has no duty to feed, arm, house, or breed a foreign polity. Private charity is Axiom 1 and does not write statute. Surplus sent as tribute to a stock or state that fails BOT, Axiom 4/7 reciprocity, or signed yield is void.

Officers who send it stand 6.6. Trade of goods for goods is not tribute. Rescue of a specific named person under contract is not tribute.

Open-ended transfer to a non-reciprocal census is tribute.

No commission, court, union, bank, or church writes Pactum, Codex, Lex, mint, school, or border for the Node. Treaties that attempt this are void at sight. Trade treaties that do not touch those joints may stand as contracts under Axiom 2. An officer who implements void external statute stands 7.33 and 6.6.

Human settlements off Earth are Nodes or forks under this file. They keep Axioms, meters, and Ne. Trade, rescue, and shared science are contracts. One planet does not rule the other by awe. Contact with non-human minds stays 8.4, 8.5, and Astra (8.18).

Locals — Protected members of this Node — take first claim on housing, work, Campus seats, BOT remainder, and Franchise questions that touch the border. A foreigner never outranks a local on those joints. Talent may be hired. Talent does not jump the line.

Borders exist. They are physical, legal, and metered. Axiom 8 exit is not an open gate inward. Removal of the edge is void. Trade crosses a gate; people cross a contract.

Kindred Nodes, quarters, and colonies are lawful. Each stock that founds one is responsible for its plant, crime, and children. No kindred house drafts another for tribute. Hatred framed as justice remains 6.11. Self-rule is not a license to raid. A Node may publish itself as a kindred well — by stock, tongue, or other named people-filter — and hire to that packet (2.25).

The following joints stand: household as first school; duty to work; family as the transmission unit; citizen first at the gate; false naturalization stripped; merit in office; no dual loyalty; subsidiarity; militia; local purse; people-seal on Root; speech, press, assembly, petition; personal arms; no forced billet; particular search; due course before life, liberty, or title; one act, one sealed verdict; no compelled confession; confront the accuser; speedy public file; just compensation after a verified taking; powers not etched remain with the house; inviolable domicile and letters; parent duty to raise and teach; inheritance; land at the gate is not a foreign default; petition against an office; the kernel cannot be amended out of existence; no taking without judgment of peers; produce the body; the public file is digital and readable; defense is a duty; the ledger is open; title is fact; a party that exists to wreck the order does not sit Franchise; written law over mood; the magistrate bound; mixed triad; colony as seed; foedus before needless sack; the stage without gravitas.

Foreign text never writes this file.

If witnesses are dead, the last Protected adult with a reconstructable k-of-n fragment set and Fallback attestation that no other fragment remains opens Phoenix alone; the Fallback must itself meet VII.53 independence and the act writes Speculum for peer review within one short clock. A last-will packet may name the interim Steward. It does not reduce k-of-n. A lone fragment opens Phoenix only when Fallback attests that no other fragment in the published set still exists. The seed is the reconstructed Root plus the genomic vault. If the vault is destroyed, living Protected genomes are re-sequenced to new sapphire under EVL. No office and no silicon invents a stock. If no living human genome remains, the Node is dead. A woman may bear or run the vault; a man runs the vault and the marked machines. With zero humans, marked silicon may run energy, womb-plant, and vault on a last-will packet until a human matures and takes etch. A non-sapiens body is not a person. Facies marks the machine. First mature humans restore Steward and People from the last clean hash. Ne is the target, not a veto on the last throat. Silicon does not take Franchise, pairing-as-human, or Neutralization.

Axiom OS and this people grow by seed, not by swallowing a map. A Node is a vertex. Edges are trade, exam-root hashes, EVL challenge, rescue contracts, Tabula and Forum bookings, and the broadcast leg of Trinitas. The mesh may be thin. It need not cover a country, a continent, or a planet before the next vertex stands. Off-Earth vertices are Nodes or forks (8.9). No mesh organ writes Pactum, Codex, Lex, mint, school, or border for another Node (8.8). Recognition of a peer is weather plus meters, not a parliament. Commercial disputes between Nodes go to a published arbitration convention with a staked bond from each Stability Reserve. Constitutional questions stay inside each Node. Gradus and UID hashes may be recognized by contract and re-exam.

Direct exchange between Nodes is the default. A hub that becomes the only path is concentration (3.5) and is forked. A camp below Entityhood is a camp; it may trade; it does not vote as a Node.

Each Node publishes N_max, default 8,000 Protected adults on Earth, retuned off-Earth by the Planetary Constants Vector. Ne remains the effective-size floor of 5,000; N_max is the census ceiling. Children, Neutral, and Unprotected persons count in the published density band even when they do not count in N_max. Energy-dense plant is lawful. Body-dense slum is not. A published hectares-per-adult-equivalent band travels with N_max.

At 90% of N_max the seed-fork protocol opens: plant packet, Continuity Bond logic of Axiom 8, and a named Steward-candidate. At 100%, inward intake other than birth pauses. Fission into a new Node must complete within one SMW or the parent drops a tier for that cycle. Merger of a Tier-C sibling (6.3, 8.3) may not be used to smash two ceilings into one megalopolis. Axiom 8 exit remains. Caput does not trap a man inside a full town; it forbids the town from becoming a nation-stack.

When a camp or a foreign well can hold BOT, Axiom 1, Axiom 3, Axiom 4, and Axiom 7, and does not preach Command Test I–VIII as public order, the Node offers Foedus before kinetic reduction: trade, seed-Node path, or Socius standing under this file. Foedus is a contract (Axiom 2). It is not tribute (8.7). It is not an open gate inward (8.6). It is not silent replacement import. The well keeps its house if it keeps the meters. Plant first. Caput still splits a pile (8.16).

A raid, an armed rush, a massacre-call, or a desk that demands the nursery or the Oracle is not owed Foedus. Defense and Halt-in-Progress remain. Mere refusal of Foedus, without a live NAP violation, leaves the well untouched. Needless destruction of a yielding well is waste under Omega and an Entropy Event.

Astra is the Node’s space and contact arm: launch, habitat, off-Earth seed, and the standing study of non-human minds. It exists for verified human and Node yield — surplus, Ne, Character, and a well that can stand — not for a private throne and not for awe.

Plant and kit sit under the concentration cap (3.5). No natural person, lineage, or Public Body holds Astra as a sole key. The most capable published packet may command a tour. Tours follow 7.29: default short; extension only on meters, no superior successor, and no triad removal. Nobody holds Astra for life. Best-of-best means Agoge or equivalent, Cursus, Character floor, and signed yield. Silicon drafts trajectories. Humans sign launches that can kill a well (4.6, 4.23).

Contact specialists sit inside Astra and answer to the Contact Cell (8.5). They research continuously: signals, biology, protocol. They do not open genomic vaults, hand Oracle roots, or grant Protected status by wonder (8.4). Disclosure of historical contact files follows 5.21. A live threat-box is time-boxed. A secret first-contact priesthood remains an Entropy Event.

Off-Earth camps become Nodes or forks under this file (8.9). Caput still splits a pile. Foedus still precedes needless sack.

A group that publicly declares it is building toward Entityhood under this file is a Castra from the day of declaration. It is bound by Axioms 1, 3, 4, 7, and 12 before it is a Node. High-tier acts in that window remain chargeable after Entityhood; the EEP clock may start at Entityhood; the act keeps its date. A Castra that commits Nefas under this name forfeits Node claim for one CEC; founders stand under the parent Node or the first peer that will take the file.

If any Planetary Constants Vector parameter stays outside its published range more than thirty days, and EVL plus one peer Node’s sensor confirm it, the Node is in Vector Breach. An unconfirmed or fabricated Breach that opens dormancy is office-falsehood. BOT as a governance floor freezes at last valid value for Entityhood and new plant authorization. Survival response follows measured physics, not the frozen number: evacuation stores and dormancy may open at once. New Vector waits EVL, Oracle, and Fallback. If the breach lasts more than one CEC, Dormancy or Fork to a valid range is lawful. The breach writes Speculum daily.