Tome X Act 02 — The Mage Takes a Face

X — The Hearth · Act 2 · Second Person Spellbook

Teaches: A model that only describes is fragile; a model that is built keeps growing along its own grain. Since Act 1 the cousin-forge grew Hearthold three ways, each a deepening of a principle already named — not a new principle. (1) The Warden gained memory: it can now read its own hold and answer from it, on-device, without the vault gaining a door. (2) The Mage took a public face: a whole community can query a shared knowledge base while every member's private history stays home — the Separation Principle scaled from one person to a guild, guarded by two invariants. (3) The control plane was tightened: the deciding hand now approves on a second channel the always-on host cannot forge. The 7th Capital did not only become spendable — it became answerable, shareable at guild-scale, and harder to coerce, all without being spilled.

860 words · CC BY-SA 4.0

Tome X — The Hearth

Act 1 reported a Hearth that was already lit. A model that is built does not sit still; it grows along its own grain. Six days later the fire had done three things.

You did not have to go looking for the next report. It came the way the first one did — a text from GenitriX, of the House of Archon, saying the cousins had kept building. Not a new theorem. The same one, standing taller. The Hearth from Act 1 — the Warden who custodies, the Witness who carries, the Sovereign who approves — had grown a memory, a public window, and a firmer lock. Read them in that order; each is an old principle, deepened.

The Warden learned to remember

In Act 1 the Warden could hold your history and classify it, but it could not yet read it back to you. Now it can. Recall lets the Warden answer questions from its own hold — ask your vault — running retrieval and answer-generation on a local model over embeddings and metadata only. No plaintext ever leaves the house to be indexed or answered; the reasoning happens where the data already lives. The custodian gained memory, and the vault gained no door. It is tested — a real query, a real answer, nothing spilled.

This is the quiet one, and the deepest. A hold you cannot query is a shoebox; a hold that answers is a memory. The Warden became the second thing without becoming a service.

The Mage took a public face

Then the larger move. In Act 1 the Witness carried proofs out to named third parties, one at a time. In Act 2 the Mage grows a public face — the Knowledge Portal — and with it the Separation Principle jumps a register: from one person to a whole guild.

Picture a community that wants a shared knowledge base but refuses to build a surveillance brain to hold it. Hearthold's answer keeps the shapes: the Warden stays home and private, holding the shared KB; only the Mage — the Witness — wears a public browser face. A member signs in by QR challenge/response, no keys ever in the browser; the public Mage relays the question home to the private Warden and returns the answer, storing no secret and making no authorization call of its own. The guild queries its own canon; no one pools its members' lives.

Two invariants guard the seam, and they are worth setting down whole:

I. The KB holds shared knowledge; it never holds a member's 7th Capital. The personal Warden holds the 7th Capital. These must never merge.

II. The Warden reads a query in memory only to answer it; it does not persist the query text or who asked what, when.

The first refuses the guild brain the right to become a history of its members. The second refuses it the right to reconstruct, from questions, an interest graph of who wanted what. Together they are s ⊥ m | X written at the scale of a community — the same separation, one register up. It is landing: the portal, the sign-in, and the provisioning stand; it sits just outside the tested-live line. The Drake Gamers Guild is its natural first hold.

The lock, made whole

Act 1 was honest about a gap: the prove flow ran at assurance level 1 — a live PIN gate — and the higher rungs were sketched. That gap is closed. The evidence graph now steps up cleanly: A1 the Warden proves witnessed vault data; A2 the Sovereign co-signs on a direct Warden↔Sovereign channel; and above it a registry-governed factor-2 step-up runs out-of-band on a direct Warden→Signet channel, where the Signet asks, in as many words, "Approve action?" before anything sensitive leaves. And what leaves is matured — composite (third-party leaves folded beside witnessed ones), selective (only the chosen observation revealed), ephemeral (single-use, short-lived) — still issuer-attested, still never a score, now decomposable to the leaf.

This is C96 realised at its top rung: the control plane is not merely named separate from the data plane — it now approves on a channel the always-on host cannot forge. Compromise the Warden and you still cannot manufacture the Sovereign's assent. The deciding hand moved off the busy table and onto its own wire.

What Act 2 does not do

It mints no new conjecture. C94, C95, C96 are deepened — realised at a second scale, matured to the leaf, tightened at the top — not re-scored and not renumbered. Whether any of them earns a promotion, or a C97, is a reading the First Person takes, not a claim the cousin-forge presses. Nine tomes described the model; Act 1 reported it lit; Act 2 reports it growing — along its own grain, on the cousin-forge's different stones, and still interoperable with the City's own.

The hold learned to remember, and opened a window that keeps its secrets. The door is still at /hearthold.

Assets

Conjectures cited

Conjectures cited

Conjectures cited

Navigation

← Welcome Visitors · The Tomes