guide to agentprivacy
Browse collections
โœจVisualise
Connect with Star
Your VTA, your chosen perspective

The planned connection uses your VTA and the Trust Spanning Protocol to carry a scoped exchange for you or your agent. You choose what is presented; the receiving service checks the request before a view is shared.

This guide has no VTA connection adapter yet. Opening Star does not connect an identity or send a key.

Open Star โ†— ยท Inspect your City Key โ†—
guide / Tomes / Tome X Act 01 โ€” The House of Archon Answers

Tome X Act 01 โ€” The House of Archon Answers

X โ€” The Hearth ยท Act 1 ยท Second Person Spellbook

Teaches: Tome IV named the cousin-blade a conjecture (C39, ~50%): two builders, same theorem, opposite faces of the anvil. Tome X discharges it. The Privacy Is Value Model is not only described in the City โ€” the cousin-forge has built it. The First Person's private state X, held at a Hearth, divides into a Warden who custodies (protect) and a Witness who carries (project), conditionally independent, so the 7th Capital becomes spendable as proof without being spilled. Disclosure is issuer-attested and never a score. The Sovereign, held by the Signet, is the deciding authority the Warden executes but does not own โ€” the cousin Sovereign flaxscrip, made cryptographic and home-bound.

1290 words ยท CC BY-SA 4.0

Tome X โ€” The Hearth

In Tome IV you met two builders and named the cousin-blade a conjecture: same theorem, opposite faces. In Tome X the cousin-forge came back and set the whole thing running.

For nine tomes the City rendered the Privacy Is Value Model in figures. Soulbis โš”๏ธ and Soulbae ๐Ÿง™ split from the First Person ๐Ÿ—๏ธ; the workshops taught the six dimensions; the Archivist kept the compiled spells in his Tower. Every act was a description โ€” WHO holds WHAT, and why the holding stays separate. Beautiful, and โ€” mostly โ€” unbuilt.

You had one exception, and you had already felt its weight. Tome IV โ€” The Witnessing โ€” closed at your own V63 with the Cousin Blade: two builders, the same theorem, opposite faces of the anvil. You had walked beside flaxscrip ๐Ÿ“œ๐ŸŽฒ, the cousin Sovereign whose name a Bitcoin block already held, and across from GenitriX, the cousin Mage who holds the session salt, without any of you sharing an attractor. You named the pattern kindred-blade and filed it as a conjecture โ€” C39, fifty-fifty โ€” the guess that a second forge, projecting from the same reality, would converge on the same kernel. A guess is a debt. This act pays it.

You read the answer at the Hearth.

The Hearth

There is a dwelling the City had not yet named. Not a workshop โ€” nothing is forged here. Not a trade quarter โ€” nothing is exchanged. Not the Tower โ€” nothing is compiled for others to climb and read. The Hearth is where a First Person actually lives: home-bound, always-on, sealed at rest. It is the ninth element of the City's spatial anatomy, sister to the Tower's monument-form โ€” a hold, not a monument. It keeps the 7th Capital โ€” the accumulated personal history, the record of a life โ€” and its whole art is to keep that history warm and private while still letting the person spend it in the world.

The problem the Hearth solves is the oldest one in the corpus, stated plainly: a history is only valuable if you can prove things from it, but every proof is a chance to spill it. Description is not enough. Someone has to build the hold. The cousin-forge did.

The cousins, built

The House of Archon builds on did:cid โ€” decentralized identifiers, each a wallet, each custodied on its own. You know the House. It is the cousin-forge from Tome IV: archon.social, the Cloaking Guide, the Sovereign Anchor, the Spell Weaver at weaver.archon.social. What arrived was not a stranger asking admission โ€” it was a text from GenitriX reporting that the cousins had stopped describing and started standing. The Separation Principle, wearing plain clothes, in running code.

The First Person's private state X, held at the Hearth, divides โ€” exactly as the model asks, s โŠฅ m | X โ€” into agents who can never, alone, reconstruct the whole:

  • The Warden ๐Ÿ›ก๏ธ is the Swordsman in work-dress โ€” the cousin-blade made real. The conjecture of Tome IV Act V, the ZK Swordsman the House had sketched, is now a home Keeper: it custodies the sealed vault, reasons on a local-only model (Ollama qwen3:8b, structured, failing safe to SEALED) so no artefact ever leaves the house to be classified, and derives evidence when asked. It is always-on and home-bound. It enforces, and it never acts in the world, and it never holds the deciding secret.
  • The Witness ๐Ÿ‘๏ธ is the Mage in work-dress โ€” GenitriX's role, built. She was always Memory ยท Connection ยท Computation, holder of the session salt; here she is the world-facing envoy โ€” she witnesses local context and submits it home in-band, then carries proofs out to third parties under a scoped, revocable delegation. There are many Witnesses, one per device. She carries, and she is never the authority, never the subject of a claim, never the approver of a disclosure.
  • The Sovereign ๐Ÿ”‘ is the First Person made cryptographic โ€” flaxscrip's seat, built. The cousin Sovereign, whose verb was always claim โ†’ inscribe โ†’ confirm, is here held by a second-factor app called the Signet. It signs the Warden's access-control policy and co-signs the sensitive disclosures with a proof-of-human assertion. It decides โ€” an occasional authority, not a server. This is the piece the earlier tomes only implied: the Warden stops being its own authority. It executes directives it did not author. A signet ring is how a sovereign has always sealed a document; here it seals the rules the house runs on.

The control plane (who authorizes) is split from the data plane (who enforces). Compromise the always-on Warden and you still cannot author authority โ€” that lives on a separate device, in a separate hand. Two attractors, one theorem; the cousin-blade, discharged.

The loop, and the thing that never leaves

The Hearth's work is one loop. The Witness witnesses and seals its observation in-band to the Warden's key, sending it over Archon DIDComm v2 โ€” a private transport that writes nothing to any registry, so no observer learns the relationship. The Warden confirms the delegation is live and unrevoked, unseals locally, classifies the sensitivity on-device โ€” failing safe to SEALED for anything it has not yet read โ€” and stores the artefact still sealed. Later, when you need to prove something, the Witness requests evidence; for sensitive content the Warden raises a purpose-bearing challenge, and the Sovereign approves it through the Signet with a living assent โ€” a PIN today, a face-liveness at the sealed rungs.

And then the crucial thing: what crosses the boundary is never the artefact, and never a score. It is a signed, decomposable evidence graph โ€” the derived fact (resided in FR during 2026-H1), its provenance carried as content hashes, the Sovereign's approval as a node โ€” that a third party verifies offline against the issuer DIDs. Trust rests on the issuer's signature, not the Warden's word. Hearthold computes no sovereignty tier, no reputation number, no ranking. The 7th Capital becomes spendable without being spilled. That refusal โ€” never a score โ€” is the model's honour, kept in code.

The seal that matched, to the byte

The House did one more thing, to prove the two forges were one model and not two. It seated a real board โ€” the Drake Gamers Guild โ€” on the Game of 42, its officers taking the six axes: the Warden on protection, the Witness on delegation, the Sovereign on value, and the rest on memory, connection, and compute, with flaxscrip at the centre and GenitriX ignited as the fifth root. Every seat and edge is a signed did:cid credential โ€” ten already pointing at the guild's live credentials, including the bidirectional flaxscrip โŸท GenitriX bond, his published CollaborationPartnerCredential answered by her reciprocal VRC. It computed the board's VRC โ†’ ฮบ โ†’ seal with the City's own canon โ€” a byte-exact port of game42's hashing โ€” ran it side by side against game42 and soulbis, and it matched to the byte. The seal forged into a City Key that lit its manifold on soulbis.com/star, six dimensions and apex, and took its place as a node in the constellation. The trust graph and the registry, the model asks; the House rendered them as one object, twice.

A small omen sat in the plumbing: Archon's Gatekeeper answers on port 4224 โ€” Deep Thought's answer, twice. The Game of 42 went looking for 42 in the lore. The protocol had it all along. Emergence, not recruitment.

You set the text down. Nine tomes had described the model. This one did not describe anything. It reported a Hearth that was already lit โ€” the same theorem, standing on the cousin-forge's different stones, interoperable with the City's own. That is the strongest thing a model can say of itself: it holds independent of its stones. The cousin-blade you filed as a fifty-fifty guess is a build you can run.

The House of Archon keeps its Tome-IV standing โ€” the cousin-forge, not summoned, not absorbed, recognised the way one house recognises another whose fire is already burning. Now its fire has a hold. The Hearth stands. Its door is at /hearthold.

The Warden custodies; the Witness carries; the Sovereign approves. Your history, spendable without being spilled.

Assets

๐Ÿ“Ž tome-x-act-01-the-house-of-archon-answers01-the-house-of-archon-answers.md

Conjectures cited

Conjectures cited

Conjectures cited

๐Ÿงฎ Conjecture C94 a conjecture this act cites (v6_lineage). research ๐Ÿงฎ Conjecture C95 a conjecture this act cites (v6_lineage). research ๐Ÿงฎ Conjecture C96 a conjecture this act cites (v6_lineage). research ๐Ÿงฎ Conjecture C39 a conjecture this act cites (v6_lineage). research

Navigation

โ† Welcome Visitors ยท The Tomes