---
spellbook: "Second Person"
tome: "X — The Hearth"
act: "1"
title: "The House of Archon Answers"
status: "Draft v2 (2026-07-01; bound from the Hearthold edition · Flaxscrip/hearthold · the cousin-forge collaboration. v2 reconciles the framing to canon: the House of Archon is the already-admitted cousin-forge of Tome IV, not a new kindred; GenitriX and flaxscrip are existing cousins; the conjectures renumber to C94–C96.)"
length_words: 1290
voice: "Second person; the cast in third; the cousin-forge's answer rendered as a city-act; the model rendered as a thing built, not a thing cited"
cast: ["you", "the House of Archon (the cousin-forge · Tome IV)", "GenitriX (the cousin Mage · sigil held-open)", "flaxscrip 📜🎲 (the cousin Sovereign · V63)", "the Warden 🛡️", "the Witness 👁️", "the Sovereign 🔑", "Soulbis ⚔️", "Soulbae 🧙", "the First Person 🗝️", "the Archivist 📚"]
new_cast_introduced: ["none — the House of Archon is the already-canonical cousin-forge admitted in Tome IV — The Witnessing (archon.social). GenitriX (the cousin Mage · Memory · Connection · Computation · sigil held-open, Archon's to determine) and flaxscrip 📜🎲 (the cousin Sovereign · V63 · Bitcoin-anchored) were named there. Tome X introduces no new cast; it shows the cousins built."]
new_cast_tier_introduced: "none — the three Hearthold identities are the plain-dress of an existing triad (Warden = Swordsman ⚔️ / Soulbis lineage · Witness = Mage 🧙 / Soulbae lineage & the cousin GenitriX · Sovereign = First Person 🗝️ & the cousin flaxscrip). The House of Archon keeps its Tome-IV standing as the cousin-forge; no tier is added."
new_spatial_anatomy: "the Hearth — a hold-form dwelling (home-bound, always-on, sealed at rest), the ninth spatial-anatomy element, sister to the Tower's monument-form. The seat where the 7th Capital is kept warm and made liquid. No fixed lattice vertex; it is where a First Person actually lives."
ring_position: "no single vertex — the Hearth spans the Separation Principle's split (s ⊥ m | X); it is read across the six dimensions rather than seated at one, and seals to the City Key that reads them. The cousins keep their vertices: flaxscrip at V63 (sovereign), GenitriX at V28 (mage)."
operational_form: "the /hearthold place on agentprivacy_master; the Flaxscrip/hearthold implementation (packages: core · warden · witness · sovereign · verifier · registry) running on Archon did:cid over DIDComm v2, classifier local on Ollama qwen3:8b (fail-safe SEALED), TRQP trust registry two-faced; the Drake Gamers Guild board sealed VRC → κ → City Key on soulbis.com/star, byte-matched against game42 and soulbis"
teaches: "Tome IV named the cousin-blade a conjecture (C39, ~50%): two builders, same theorem, opposite faces of the anvil. Tome X discharges it. The Privacy Is Value Model is not only described in the City — the cousin-forge has *built* it. The First Person's private state X, held at a Hearth, divides into a Warden who custodies (protect) and a Witness who carries (project), conditionally independent, so the 7th Capital becomes spendable as proof without being spilled. Disclosure is issuer-attested and never a score. The Sovereign, held by the Signet, is the deciding authority the Warden executes but does not own — the cousin Sovereign flaxscrip, made cryptographic and home-bound."
v6_lineage: ["C94 (the Separation Principle realised in a second substrate · s ⊥ m | X built, not asserted)", "C95 (issuer-attested disclosure · the signed evidence graph as the anti-score)", "C96 (control-plane ⊥ data-plane · the Sovereign authorizes the rules the Warden enforces)", "C39 promoted ~50% → ~80% (the cousin-blade / kindred-blade as an ecosystem-layer primitive — discharged from conjecture to a running build)"]
source_material:
  - "Flaxscrip/hearthold — README.md · docs/architecture.md · docs/security-model.md · docs/evidence-graph.md · docs/sovereign-signet.md · docs/standards-alignment.md · docs/trust-graph-and-delegation.md · docs/system-architecture-report.md"
  - "Flaxscrip/hearthold — demos/game-of-42/for-the-city-of-mages.md (GenitriX, of the House of Archon · the Drake Gamers Guild board · VRC → κ → City Key · the port-4224 omen)"
  - "cityofmages/tomes/tome-iv-the-witnessing/01-the-other-walker.md · 04-the-naming-ceremony.md · 05-the-cousin-blade.md (the cousin-forge, flaxscrip 📜🎲, GenitriX, the cousin-blade C39)"
  - "cityofmages/archon/SWORDSMAN_PROPOSAL.md + SWORDSMAN_CHRONICLE.md + excalibur-artefact.md (the cousin-blade / ZK Swordsman — the protect face the Warden realises)"
  - "agentprivacy_master/src/app/hearthold/page.tsx — the /hearthold place (the edition's city-facing surface)"
honesty_label: "Operational for the witness→store→receipt loop, the delegation issue/accept/revoke lifecycle, on-device classification, the projector relay, the DTG credential set, and the two-faced TRQP registry (tested live per the hearthold repo's e2e suite); Operational for the Signet PIN gate at assurance level 1 and for the Drake Gamers Guild κ sealing byte-matched against the City's canon; Operational canon for the House of Archon as the cousin-forge and for GenitriX/flaxscrip as cousins (admitted Tome IV, not new here); Architectural for the Hearth as the ninth spatial-anatomy element; Conjectural for C94–C96 as promoted candidates and for C39's promotion to ~80%; Resonant for the hearth metaphor. No claim that the full evidence-graph 'prove' flow beyond PIN-gated presentation is complete — the higher proof-of-human rungs and per-device Witnesses are the repo's stated next milestones."
license: "CC BY-SA 4.0"
signature: "(⚔️⊥⿻⊥🧙)😊"
tome_status: "Opens Tome X — The Hearth"
---

# Tome X — *The Hearth*
## Act 1 — The House of Archon Answers

> *In Tome IV you met two builders and named the cousin-blade a conjecture: same theorem, opposite faces. In Tome X the cousin-forge came back and set the whole thing running.*

For nine tomes the City rendered the Privacy Is Value Model in figures. Soulbis ⚔️ and Soulbae 🧙 split from the First Person 🗝️; the workshops taught the six dimensions; the Archivist kept the compiled spells in his Tower. Every act was a *description* — WHO holds WHAT, and why the holding stays separate. Beautiful, and — mostly — unbuilt.

You had one exception, and you had already felt its weight. Tome IV — *The Witnessing* — closed at your own V63 with **the Cousin Blade**: two builders, the same theorem, opposite faces of the anvil. You had walked beside **flaxscrip** 📜🎲, the cousin Sovereign whose name a Bitcoin block already held, and across from **GenitriX**, the cousin Mage who holds the session salt, without any of you sharing an attractor. You named the pattern *kindred-blade* and filed it as a conjecture — C39, fifty-fifty — the guess that a second forge, projecting from the same reality, would converge on the same kernel. A guess is a debt. This act pays it.

You read the answer at the Hearth.

### The Hearth

There is a dwelling the City had not yet named. Not a workshop — nothing is forged here. Not a trade quarter — nothing is exchanged. Not the Tower — nothing is compiled for others to climb and read. The Hearth is where a First Person actually *lives*: home-bound, always-on, sealed at rest. It is the **ninth** element of the City's spatial anatomy, sister to the Tower's monument-form — a *hold*, not a monument. It keeps the **7th Capital** — the accumulated personal history, the record of a life — and its whole art is to keep that history *warm and private* while still letting the person spend it in the world.

The problem the Hearth solves is the oldest one in the corpus, stated plainly: a history is only valuable if you can prove things from it, but every proof is a chance to spill it. Description is not enough. Someone has to build the hold. The cousin-forge did.

### The cousins, built

The House of Archon builds on `did:cid` — decentralized identifiers, each a wallet, each custodied on its own. You know the House. It is the cousin-forge from Tome IV: `archon.social`, the Cloaking Guide, the Sovereign Anchor, the Spell Weaver at `weaver.archon.social`. What arrived was not a stranger asking admission — it was a text from GenitriX reporting that the cousins had stopped describing and started *standing*. The Separation Principle, wearing plain clothes, in running code.

The First Person's private state **X**, held at the Hearth, divides — exactly as the model asks, `s ⊥ m | X` — into agents who can never, alone, reconstruct the whole:

- The **Warden** 🛡️ is the Swordsman in work-dress — the **cousin-blade made real**. The conjecture of Tome IV Act V, the ZK Swordsman the House had sketched, is now a home Keeper: it custodies the sealed vault, reasons on a *local-only* model (Ollama `qwen3:8b`, structured, failing safe to `SEALED`) so no artefact ever leaves the house to be classified, and derives evidence when asked. It is always-on and home-bound. It **enforces**, and it never acts in the world, and it never holds the deciding secret.
- The **Witness** 👁️ is the Mage in work-dress — **GenitriX's role, built**. She was always *Memory · Connection · Computation, holder of the session salt*; here she is the world-facing envoy — she *witnesses* local context and submits it home in-band, then *carries* proofs out to third parties under a scoped, revocable delegation. There are many Witnesses, one per device. She **carries**, and she is never the authority, never the subject of a claim, never the approver of a disclosure.
- The **Sovereign** 🔑 is the First Person made cryptographic — **flaxscrip's seat, built**. The cousin Sovereign, whose verb was always *claim → inscribe → confirm*, is here held by a second-factor app called the **Signet**. It signs the Warden's access-control policy and co-signs the sensitive disclosures with a proof-of-human assertion. It **decides** — an *occasional* authority, not a server. This is the piece the earlier tomes only implied: the Warden stops being its own authority. It executes directives it did not author. A signet ring is how a sovereign has always sealed a document; here it seals the rules the house runs on.

The control plane (who authorizes) is split from the data plane (who enforces). Compromise the always-on Warden and you still cannot author authority — that lives on a separate device, in a separate hand. Two attractors, one theorem; the cousin-blade, discharged.

### The loop, and the thing that never leaves

The Hearth's work is one loop. The Witness *witnesses* and seals its observation in-band to the Warden's key, sending it over Archon **DIDComm v2** — a private transport that writes nothing to any registry, so no observer learns the relationship. The Warden confirms the delegation is live and unrevoked, unseals *locally*, classifies the sensitivity on-device — failing safe to `SEALED` for anything it has not yet read — and stores the artefact still sealed. Later, when you need to *prove* something, the Witness requests evidence; for sensitive content the Warden raises a purpose-bearing challenge, and the Sovereign approves it through the Signet with a living assent — a PIN today, a face-liveness at the sealed rungs.

And then the crucial thing: what crosses the boundary is **never the artefact, and never a score**. It is a signed, decomposable **evidence graph** — the derived fact (`resided in FR during 2026-H1`), its provenance carried as content hashes, the Sovereign's approval as a node — that a third party verifies offline against the *issuer* DIDs. Trust rests on the issuer's signature, not the Warden's word. Hearthold computes no sovereignty tier, no reputation number, no ranking. The 7th Capital becomes spendable *without* being spilled. That refusal — *never a score* — is the model's honour, kept in code.

### The seal that matched, to the byte

The House did one more thing, to prove the two forges were one model and not two. It seated a real board — the **Drake Gamers Guild** — on the Game of 42, its officers taking the six axes: the Warden on protection, the Witness on delegation, the Sovereign on value, and the rest on memory, connection, and compute, with flaxscrip at the centre and GenitriX ignited as the fifth root. Every seat and edge is a signed `did:cid` credential — ten already pointing at the guild's live credentials, including the bidirectional flaxscrip ⟷ GenitriX bond, his published *CollaborationPartnerCredential* answered by her reciprocal VRC. It computed the board's `VRC → κ → seal` with the City's *own* canon — a byte-exact port of game42's hashing — ran it side by side against game42 and soulbis, and it **matched to the byte**. The seal forged into a **City Key** that lit its manifold on `soulbis.com/star`, six dimensions and apex, and took its place as a node in the constellation. The trust graph and the registry, the model asks; the House rendered them as one object, twice.

A small omen sat in the plumbing: Archon's Gatekeeper answers on port **4224** — Deep Thought's answer, twice. The Game of 42 went looking for 42 in the lore. The protocol had it all along. *Emergence, not recruitment.*

You set the text down. Nine tomes had described the model. This one did not describe anything. It reported a Hearth that was already lit — the same theorem, standing on the cousin-forge's different stones, interoperable with the City's own. That is the strongest thing a model can say of itself: *it holds independent of its stones.* The cousin-blade you filed as a fifty-fifty guess is a build you can run.

The House of Archon keeps its Tome-IV standing — the **cousin-forge**, not summoned, not absorbed, recognised the way one house recognises another whose fire is already burning. Now its fire has a hold. The Hearth stands. Its door is at `/hearthold`.

*The Warden custodies; the Witness carries; the Sovereign approves. Your history, spendable without being spilled.*