# Codex 3.0 — capture notes

Codex v2.1 stays frozen. Canonical copy:

https://github.com/00ranman/extropy-engine/blob/main/docs/CODEX_3_NOTES.md

The source rant is at the bottom of that file. Do not summarize it away.

## Acknowledge, do not dodge: MICRO overselling → MACRO drift

MACROs coordinate off MICROs. MICROs are subjective. People oversell. Numbers can drift. That pressure is real. The answer is not “people are honest.” You do not type in a score. SignalFlow + the model you trust + the PSLL propose ΔS from the task, the duration, and evidence on the DAG. The other side has to agree. Settle is a knob. Late burn has no expiry. A MICRO vote cannot rewrite a MACRO. Only PLANETARY hits the mesh.

## SignalFlow is the protocol. LocalFlow is the errand face.

**LocalFlow** — Uber, Lyft, DoorDash, Grubhub, plus the car you don’t have. Confirmation is a receipt.

**SignalFlow** — what you talk to. Assistant you trust (ChatGPT, Claude, Gemini, or a model on your own box) + PSLL + previous numbers + the network. Company login = company tether. Own hardware = unknown. A network-hosted model is a later idea.

**Claim path:** mow the lawn — including **your own** — → SignalFlow + LLM look at the task and duration → before/after on the DAG → provisional ΔS (if-then) → other side agrees → standing XP. You never put yourself in for a number. A job is one face of a loop. It is not the box.

**PSLL** — Personal Signed Local Log. Yours. Mesh gets receipts, not the diary.

**Digital Autarky** — intelligence and identity at the edge. The network is a handshake and a DAG, not a supermind. The assistant you trust is the UI.

## Emergent Product (layer on fiat, not a dollar map)

People still spend dollars. EP is a **top layer**: track the exchange, convert to a bits-equivalent proxy, fine-tune average ΔS for that situation / those domains until the proxy is less wrong. The layer exists to show why that ΔS should be worth more than the fiat-only reading.

**EP = XP × L at purchase.** L from the mesh (customer, shop local ΔS, region, domains) — a fraction, not a coupon, not 1.4×. No 1:1 to cash. Do not invent a table.

A **vertex** settles some of the exchange. How much is an agreed estimate. Both edges have to accept. Keep missing → shop changes parameters, or the customer is looking entropic. Repeat-farming is **F**.

Fiat still rings the rest. Cash cannot mint XP. Low EP ≠ no milk. Mom-and-pop first. Walmart last.

Not pairwise coupling plus a currency converter. The mesh is the instrument. Emergent Product, not entropy points, not Epistemic Proof.

The strict rule is the other door: **cash cannot mint XP.** No on-ramp into standing. Low EP ≠ no milk.

Discount starts small, grows with participation, can hit a zero fiat line. Same math merchant → supplier → MACRO. Optional. Not a forced conversion. A treadmill on the social contract, not a lockout.

## Two clocks of death

5%/month is **IT**, not XP.

| Thing | Job | Default (knob) |
| --- | --- | --- |
| Settle window | Provisional → standing | ~30 days was a throw. Could be 5–40. Per-DFAO. |
| Late burn | Standing can still die | No expiry. Thirty years later is still allowed. |
| XP decay | Pile shrinks with no dispute | ρ = 0.01 / 30 cycles (~1%/month **of remaining**, multiplicative). Half-life ~69 months. Never hits 0; floor → access band. Knob. Not late burn. |
| IT decay | Weight bleeds if you vanish | ~5%/month. IT holders can vote it down in their DFAO. |

Possible axiom, not written: some XP and some IT always burn.

## Votes stay in the room

A vote rewrites the DFAO it is cast in. PLANETARY is the only vote against everybody, and that is supposed to be hard.

## Node box

Intended product. For-profit. Not a 501(c). Surplus after salary and lights into R&D, nodes (including where people need them), maybe later compute you can run a model on without owning the rack. Not shipping.

## The graph is the instrument

Subjectivity is the start, not the attractor. Eight domains are a weighted vector. A mediation and a lawn share a DAG that gets denser, not a constant on day one.

Landauer is the claimed conversion, not a costume: information erased has a heat floor; social/cognitive events are information events. The stand-in is a **bits-equivalent proxy**, not a worshipped constant. Equivocation (Shannon bits vs J/K vs English “order”) is acknowledged. If later data contradicts the proxy, the proxy moves. “This is not a metaphor” stays. Physicist sign-off is not a requirement. Do not sand the sentence for grants.

**Late mint:** a closed loop can still receive XP (or burn) when later domains converge — teacher whose student later traces the turnaround. Settled is not the last word. Retroactive revalidation is the audit not stopping.

### Kimi’s three questions (24 Aug 2026) — answer, don’t dodge

1. **Combinatorial explosion / teacher → president.** The protocol does not walk the light cone. Late mint is citation-gated: a new vertex has to exist that names causal parents and hangs evidence. No citation, no edge, no XP. Infinite downstream is cosmology, not a query. Curators exist because the hairball is a real failure mode. How much of a later ΔS flows back how many hops is a 3.0 knob — do not freeze a fraction. Bound: asserted edges only, proxy *delta* only (not a second full paycheck), confirm path still applies.

2. **Symmetric burn.** Yes. Late mint and late burn are the same machine. Disaster-president can burn the teacher’s earlier XP if the new evidence holds. No expiry. A ratchet that only adds is a church. False late-burn is a claim; it can burn the accuser. Whether burn should be *harder* than mint (griefing) is a knob, not an axiom yet.

   Decay ≠ burn. 1%/month of remaining never hits zero in the reals (0.99^n). That’s a map seam, not a fuse. On a machine: dust floor → access band. Late burn after most of the pile has leaked does **not** claw back the 99% that’s gone. It marks the vertex BURNED, slashes remaining dust, drops a band that sat on that mint. Scope: that vertex + citation-gated children, not the person’s whole wallet.

3. **Bits-equivalent for a fight.** Not a thermometer. Not a 1/10 validator caste — that is not in the canon. SignalFlow + PSLL + evidence propose a provisional bits-equivalent (uncertainty collapsed, duration, recurrence, who confirms). Other side of the loop agrees. Domain-native terms → bits-equivalent proxy → mint formula. You never type in your own score.

Edge intelligence unveils only the ZKP the equation needs. DAG curator is a paid job. No extractive hop. The founder has no mint key.

Convergence of like-cases \u2260 automatically kT ln 2 in a quarrel. 3.0 has to say which claim it is making.

Full note + rant:

https://github.com/00ranman/extropy-engine/blob/main/docs/CODEX_3_NOTES_CALIBRATION.md

## Access bands

1% decay is already the treadmill. Do not seasonal-wipe standing XP — that punishes slow work. Seasons stay accounting windows.

Under the floor, decayed XP can quantize into a **log access band**. ZKP: prove `L ≥ n` without revealing the pile. Default display off. If you print titles, you rebuilt a leaderboard.

Do not mash this with CAT levels or reputation titles. Those are credentials. Reputation is not XP.

https://github.com/00ranman/extropy-engine/blob/main/docs/CODEX_3_NOTES_ACCESS.md

## Play, seasons, roles

Public ladders are allowed as **play**. Not as power. A board that cannot buy IT, un-burn, or rewrite a knob is a skin. Opt-in per DFAO. No PLANETARY crown.

Soulbound marks (Nobel-shaped): display, don’t vote, don’t mint. If it gets a floor price, it failed.

Seasons stay accounting + optional skins. The diplomacy-season idea is probably a bad one — people play the season instead of the task. Don’t wipe XP.

Roles: you keep showing up where you’re depended on. Trust occupies the seat. IT decay empties it if you vanish. Votes remain for knobs, not for a seasonal election.

Immersion test: still worth doing if the cosmetics are off? If no, it’s extracting.

https://github.com/00ranman/extropy-engine/blob/main/docs/CODEX_3_NOTES_PLAY.md

## ZKP reputation

Identity ZKP already covers uniqueness. Reputation still looks like a public vector on a DID, which undoes the nullifiers.

Prove predicates, not numbers: band, domain standing, not-slashed, eligible to vote. Decay belongs in the circuit. SignalFlow should match on a predicate + VRF, not read raw R. Sticky secret so you cannot launder a burn; unlinkable names so two rooms cannot cross-graph you.

https://github.com/00ranman/extropy-engine/blob/main/docs/CODEX_3_NOTES_ZKP_REPUTATION.md

## Looking is a verb

Hermit privacy is not the product. Google already has the file. A common person **can** walk the DAG to reconstruct whether someone did the thing. The requirement is they cannot do it silently. A look is a vertex. Stalking-shaped bursts can slash or unmask (same cause-shown vote as identity reveal). Tills still get yes/no. Dossiers leave footprints.

https://github.com/00ranman/extropy-engine/blob/main/docs/CODEX_3_NOTES_LOOK.md

## Node, DID, bad actors

You do not apply for a DID. First boot writes a keypair on the box. Name is `did:key` (W3C, no registrar). Backup the file. Lose it → new node; standing does not teleport. `did:web` optional.

DID is the name. ZKP is what you show (band, unique-in-DFAO, confirmed this loop, not slashed). Till gets yes/no. Not the PSLL.

Keys stay on the box. Do not expose postgres/redis to the WAN. LAN: node to node. WAN: TLS + signed handshake. One captured node lies about itself. It cannot silently rewrite a neighbor’s DAG.

Sybil: `did:key` is cheap on purpose. KYC is not the defense. Standing costs work. Unique-in-DFAO ZKP stops fifty votes from one person. F punishes farmed loops. LOOK is a vertex.

Today: neighborhood-app writes `did:key` on first boot (`data/keys/node.pem`). Handshake is HTTPS + signatures. Circuits are 3.0.

https://github.com/00ranman/extropy-engine/blob/main/docs/NODE_SECURITY.md

## Records, meters, sparks — stop saying token (29 Aug 2026)

Public copy. The crowd hears “token” and reaches for a bag. That is not this ledger.

**Record** — unique signed vertex. One of one. Closed loop, CAT stamp, lane claim, complaint, EP at the till (written then burned).

**Meter / standing** — a number over records. XP remaining, L, IT weight, CT standing. Not a collectible. Not transferable.

**Till spark** — EP. Born and dead in the sale. `EP = XP × L`.

**Domain** = the eight entropy instruments (enum). **Lane** = skill specialization. CAT lives on a lane. Do not use domain for both.

CAT is a record: `(DID, lane, level, settled count, issuer)`. DT is not a bag. Old copy said Domain Token or Decay Token. Expertise is CAT-per-lane. The leak is already on XP. If the letter survives it is a unique lane-claim record, not a Domain Coin.

Six was accretion, not physics. Kernel follow-up: kill `TokenType.DT` and CAT amount-mints in `packages/token-economy`.

Canonical write-up: https://github.com/00ranman/extropy-engine/blob/main/docs/CODEX_3_NOTES.md

---

## Own lawn, rest, retirement (30 Aug 2026)

The extractive picture: clock in, clock out, rest is a hole, only what you sold to someone else counted, retirement is unemployment with a cake.

Kill that in 3.0.

- **Own lawn.** The ΔS is the grass. HomeFlow can close it. Neighbor-mows-yours is two households. You-mow-yours is one house taking care of itself. Same physical reduction. You do not type a score. F still applies if it is every Saturday.
- **No PTO token.** Standing already minted is what you live on while you rest. XP leak is ~1%/month of remaining, not a pink slip. Sick is not a clawback. Care is a loop for the person who shows up. Recovery can be biological ΔS if the loop closes.
- **Buying is coupling, not a mint.** Patronage updates this-door CT / L. Cash cannot mint XP.
- **Anything verifiable.** Self-report, sensor, claim, assistant — then the other side agrees. Work-for-a-boss is one input. Living was never inside that box.

FAQ: `/faq#own-lawn` `/faq#retire` `/faq#pto` `/faq#not-a-job`

---

## Slam window, three clocks, attacks (30 Aug 2026)

Tₛ is **not** recency decay. The comment in `packages/xp-formula` that says “recency” is a lie. Kill it.

```
Tₛ = exp(−λ min(Δt, Δt_cap))
log(1/Tₛ) = λ · clip(Δt, 0, Δt_cap)
```

Δt → 0 ⇒ Tₛ = 1 ⇒ log = 0 ⇒ XP = 0. Slam-shut. On purpose. Do **not** change this to `log(1 + 1/Tₛ)` so Tₛ=1 pays. That pays slam-bots.

Δt_cap is a knob. Default: the action class’s expected duration (quest grain 2–5 min unless the class says otherwise). Unbounded λΔt is a stall-farm. Cap it.

Three clocks. Do not mash:

| Clock | Job |
| --- | --- |
| Tₛ | This loop’s elapsed time. Slam-shut at 0. Capped. |
| F | Repeating the action class. |
| 0.99ⁿ | Standing after settlement. ~1%/month of remaining. |

Settle window is provisional → standing. IT ~5%/month is voice. Neither is Tₛ.

Rarity-splitting 400 fake classes is a **DAG** job. The formula will not catch it.

### Experiments to write as tests (not vibes)

1. ΔS calibration — 100 identical tasks, error → correction → converge, or fail.
2. Farming resistance — assume everyone manufactures XP. R/F/Tₛ/confirm/evidence/late burn.
3. L as extraction machine — captured DFAO juices L. Economic attack.
4. Late mint — citation-gated delta, not a second paycheck. Simulate 20-year discovery.
5. (w · E) — does the vector improve predictions or become a vote.

You do not need ΔS perfect. You need the error to get expensive.

FAQ: `/faq#three-clocks` `/faq#explain` `/faq#l-farm`

---

## Overlay / imported CAT (30 Aug 2026)

You do not start a new civilization. You convert one that exists.

Overlay. Shops, licenses, neighborhoods, the handshake already on the wire. Both-edges, contest, leak, DAG go on top of infrastructure people already use. Greenfield is a fantasy of a clean page.

An off-system credential (medical license, journeyman card, whatever the lane already recognizes) is **opening evidence** for a CAT record: issuer = the old board, lane = the practice. Not XP. Not IT. Not a throne.

Once they are in, **this** graph is what continues. Retired weight that can issue new CATs and argue rarity in that lane is DAG history in here, not the framed diploma. If the paper was a lie, contest and late burn still apply. License is the door. It is not the house.

Do not invent a bootstrap bag to hold this.

FAQ: `/faq#overlay` `/faq#imported-cat`

---

## What 3.0 has to actually write

Settle knob. XP decay next to IT decay. Late burn. SignalFlow as first-class. Claim path with evidence. MICRO overselling acknowledged. DAG as instrument. Burn-floor axiom yes/no. Box as for-profit intent. Access band as ZKP (display default off). Play boards opt-in, no power. Soulbound marks. Seasons ≠ diplomacy. Roles from showing up; votes for knobs. LOOK vertices; silent fetch forbidden. did:key on first boot. Unique-in-DFAO ZKP. Overlay not a new country; imported CAT is the door not the house. Leave 2.1 alone until then.