# Distributed Charter of the Extropy Engine Randall Gossett 6 September 2026 Working document. Not Codex Version 2.1. Not a corporate filing. Not a verdict. This is the follow-along: every coupling from a job in the world to a spark on a ticket, and from a pocket of rooms to a mesh other rooms can copy or leave. If you only wanted slogans, stop. The point of this file is the chain. --- ## A. What kind of document this is A company files articles so a state knows who owns the shares. This overlay is not a company and standing is not a share. A Codex freezes letters. Codex v2.1 already did that. This charter does not replace it. This charter is the **process document**: how rooms, models, contracts, meters, and people actually interact if anyone uses the thing. It is written so a critic can walk the chain instead of quoting two sentences from a reply. It is also a **fork license in plain language**. Someone else can orchestrate a different proxy, different letters, different rooms. The only stone in this mesh is listed in §C. If their mesh measures better and strangers can still close, people should go there. --- ## B. The sentence the whole file unpacks A person or a room does work. An edge packager turns that work into a **claim** with a boundary, evidence pointers, and a proposed ΔS. The other edge can refuse. If both edges hold, a **vertex** lands on a causal DAG. If the signed mint rules fire, **XP** may move as global standing. If this web tracks showing-up, **CT_W** may move as community standing. At a till running the overlay, **H_cap** (Auto from this door’s signed cash) and that same **CT_W** make **L** on that ticket. **EP = XP · L + λ · L** is born and burned in that sale. Cash, or whatever tender that country already uses, still prints on the receipt. Later evidence can attach and **burn** status without erasing history. Standing **leaks** even when nobody fights. None of those meters list on an exchange. That is the Engine as a process. Everything below is that paragraph with the screws visible. --- ## C. Lose-conditions These are the only clauses this mesh treats as load-bearing. 1. **No liquidity of standing.** You cannot sell XP, CT, CAT, IT, or EP. A token as a bag is a lose-condition. 2. **No transfer of standing as an object you pass.** Alice cannot wire Bob her XP. CT_W is the same readout at every compatible till. The laundromat does not get a different CT unless it left the language. 3. **No frozen constant as the territory.** ΔS is a bits-equivalent *proxy*. Mappers version. Unknown leakage stays unknown. Recalibration is a vertex, not a scandal. 4. **No ninth instrument** to park an awkward case. Boundary, uncertainty, harm, and leakage ride on the claim. 5. **No Engine gavel.** The graph can hold evidence. It does not mint guilty, execute, or write a morality constitution for children, the sick, or the broke. 6. **No treasury that reimburses a till in dollars.** The house eats its own discount. That is why collusion at Alice’s register is Alice lighting her own inventory. A fork that adds an order book or a sinking fund in XP has left this mesh even if it keeps the logo. --- ## D. Two computers **Classical computation** runs the coupling: clip, log, leak, burn, unique-in-DFAO, slam window, Auto H. If-then. You can audit the function. `packages/xp-formula` is that box. **Models at the edge** interpret messy human work into a claim packet: what happened, how long, which evidence, which mapper version, a proposed ΔS. They are packagers. They are not oracles of the universe and they are not the ledger. A human looking at a graph to hunt WHO still writes a vertex. **Smart contracts** are rails so you do not hire an executive caste to babysit the coupling. They do not get to be a priesthood. If a contract starts issuing a bag, it violated §C. **Personal Signed Local Log (PSLL).** Append-only, hash-chained, yours. SignalFlow reads it. The mesh gets receipts, not the diary. Digital Autarky means intelligence, identity, and local context stay at the edge. The network is a handshake, a claim schema, and a DAG. --- ## E. Faces of the same overlay People keep assigning SignalFlow’s job to LocalFlow. Stop. **LocalFlow** is an errand face. Post the thing you cannot do because you have no car. Someone nearby does it. You confirm. Confirmation is a receipt. Users never have to say XP. **HomeFlow** is the household face. Inventory, recurring chores, the toilet paper problem. Same mint grammar. Different skin. **Quests** are posted work with a settle knob. **SignalFlow** is the protocol mouth. You talk to it. It talks to the model you trust, your PSLL, prior numbers, and the network. You do not type “this is worth 12 XP.” **The till** is where EP exists for one ticket and then dies. **The desk** is where a MACRO publishes ρ = overlay-touch / (cash + overlay-touch). A HUD. Not a person-score. --- ## F. Letters, ranges, clocks Do not remap. Public key: https://extropyengine.com/key ``` XP_mint = R × F × ΔS × (w · E) × log(1/Tₛ) Tₛ = exp(−λ min(Δt, Δt_cap)) XP(n) = XP_settled · 0.99ⁿ L = clip(H_cap · S · κ · CT_W · β, 0, 1) EP = XP · L + λ · L EP = XP × L IT(m) = IT_start · (0.95)^m # idle months, order of magnitude ``` **R — rarity of the action class.** Property of the *kind of job* on this room’s class table. First time this class closes in this room is not the same as the thousandth identical lawn. Range roughly [0.1, 10]. Not reputation. Not a room name. If the class table is empty, that door does not mint. **F — Frequency of Decay.** Repeats of this class pull F down. Not fidelity. Not script-ℱ. **ΔS — bits-equivalent proxy.** Domain-native signal goes through mapper M_v into a number that can sit on one graph with other domains. Not XP. Not joules-per-kelvin of “society.” If leakage was not measured, it does not default to zero so the mint can fire. **w · E — weighted emergence.** Eight-domain weight vector dotted with this loop’s effort vector. Cognitive, code, social, economic, thermodynamic, informational, governance, temporal. Digital air is near-zero here. **Tₛ — slam window.** Instant confirm ⇒ Tₛ = 1 ⇒ log(1/Tₛ) = 0 ⇒ XP = 0. Cap so stalling past the expected duration does not print. This is *not* the standing leak. **XP — global standing.** Survived closed loops. Non-transferable. Leaks. Visible as a passport *of standing*, not as money. **CT — community standing on web W.** Same number at grocery and laundromat if they still speak base CT. The door does not own this. The door owns H. **H_cap — this till this window.** Auto from signed cash. Training: remainder 0 until 10 days of signed tickets. Then clip(0.5 × cash_in / cash_out, 0, 1). No slider. No Off on the register. Unplug is Off. Auto must not require a person-level forehead. **β — optional door-local band.** ZKP or mapper band. Default 1. **L — this ticket.** clip(H_cap · S · κ · CT_W · β, 0, 1). **EP — till spark.** XP × L. Born and burned in that sale. Not a wage. Not a currency. Not stored value you take home. **CAT — skill record.** (DID, lane, level, issuer). Off the mint. **IT — this-proposal standing.** IT = clip(H_gov · S_gov · κ · CT_W · β_gov, 0, 1). Burns in the tally. No pile. Not XP · G. **ρ — index, not a person.** Overlay-touch over cash-plus-overlay-touch at a door or desk. Mycelium HUD. Not a moral rank. Three clocks: slam (Tₛ), class repeat (F), standing leak (0.99ⁿ, n = idle 10-day counts). IT is not a leak clock. Do not mash them. --- ## G. Follow one job, slowly ### G1. Something happens A lawn is mowed. A cooler is repaired. A duplicate row is merged. A Tuesday grocery run happens. A volunteer plates food at a care DFAO. A patch lands. None of these are XP yet. ### G2. Claim packaging SignalFlow plus the model you trust plus the PSLL propose: - declared boundary (what is in, what is out) - evidence pointers (photos, logs, receipts, diffs) - mapper version M_v - proposed ΔS - action class (for R and F) - elapsed time (for Tₛ) - domain weights for w · E You still do not type a score. ### G3. The other edge If-then. The other party can refuse. A shop can refuse a “I was here” as a ΔS mint. A merge reviewer can refuse a fake duplicate. Silence is not verification. Close mints. Burn anytime. ### G4. Vertex The accepted packet becomes a vertex with causal parents. Immutability means **the history is not deleted**. Status can change. A later vertex can mark BURNED. Downstream standing derived from a burned close is supposed to move. If it does not, the implementation is wrong. ### G5. Mint gates Preconditions in code today: ΔS > 0, Tₛ in (0, 1], w and E same length. Instant slam still produces XP = 0 even if ΔS looks pretty. Provisional first. Confirmed or burned on settle. Late burn has no expiry. ### G6. CT may also move Only if this door tracks that class as community standing. Repairing the cooler is both: global loop and this-door node. Buying milk every Tuesday may be CT-only. Publishing a mesh mapper attack case may be XP-only at a coffee till that never asked for that class. ### G7. Time passes XP(n) = XP_settled · 0.99ⁿ even if nobody sued. Idle standing dies. That is demurrage, not a moral lesson. ### G8. A ticket You stand at a till that set H_cap > 0. L = clip(H_cap · S · κ · CT_W · β, 0, 1). EP = XP · L + λ · L. If κ is 0 they left the language. If they unplugged, there is no overlay. Charlie does not set Oak’s H. --- ## H. XP only, CT only, both, neither This is the distinction videos keep flattening. **XP only.** A closed loop the mesh will treat as standing, at a door that does not count that class as CT. You patched a public duplicate-data door. You buy coffee. Coffee CT is your Tuesday habit or nothing. The patch is XP. The coffee spark uses whatever CT this café already had for you. **CT only.** This room can plan around you and nobody filed a global ΔS packet, or the packet failed the mint gates. Regular grocery demand is the example. Highly entropic random shopping is the counter-example: the house cannot plan, so CT should not climb just because cash moved. **Both.** Same body of work is a verified loop and this door’s standing. Staff maintenance, a posted LocalFlow errand confirmed both ways, a supplier that hits the order window every week *and* can show the loop. **Neither.** H = 0. Other edge refused. ΔS not positive. Slam. Unknown leakage blocked the mint. Cash only. EP is never “the pay.” EP is the overlay on a tender that already existed. --- ## I. What “they pay staff in EP” gets wrong A generated film said shops pay staff and distributors in EP. As mechanics that is false. Labor law still sees wages in legal tender. A distributor invoice still wants dollars or the local equivalent. The Engine does not replace payroll. What *can* happen on the same people: - Wages in cash (legal). - XP if they closed real loops (standing). - CT if this door can plan around them (local). - A spark on *their own tickets* at tills that opted in (pennies off groceries, employee cafeteria, whatever H allows). Long-run ρ can make it *feel* like the overlay is doing more of the clearing. That is an index climbing. It is not “EP is the paycheck.” Mixing those sentences is how a regulator hears a security or a wage-theft story. Distributors: same split. Pay the invoice in tender. If that firm is a reliable node, CT and XP can exist *in addition*. Do not write “we settled the freight bill in sparks.” --- ## J. Ledger, checkability, convergence **Vertex.** Claim + mapper version + evidence pointers + signatures + parents. **Checkable.** You can open the vertex and see why a number was proposed, who agreed, which M_v, what was inside the boundary. You can attach a later contradiction. **Not checkable.** “The community feels this is aligned.” “Twelve people were told to agree.” “A registry stamped a tonne.” **Convergence.** Independent closes of the same class start proposing similar ΔS. Leakage terms appear instead of staying hidden. After you control for evidence quality, a stranger’s close rate is not systematically worse than an insider’s. If it is, that door is captured. Name it. **Spite burns.** A mesh can still coordinate to burn someone they hate. Deleting the honeypot deletes the *extractive* reason to fake a close. It does not delete hatred. That is a room problem, not a missing letter. **Looking writes a vertex.** WHO is visible on the graph. That is the anti-panopticon rule for the overlay: the till gets a band, not a diary; the people who stare still leave a mark. --- ## K. DFAO scales A DFAO is a room that can vote *local* knobs and cannot vote cash-out or rewrite the XP mint. - **MICRO** — shop, kitchen, patrol, classroom, household. - **MESO** — strip, base, district, HOA cluster. - **MACRO** — firm, city desk, agency, large service. - **PLANETARY** — mint grammar and §C. Parent bounds stop a child room from minting infinite local glory that the parent must treat as physics. **Individual.** did:key on the box. Loops you close. Kids can have a DID. A closed chore can mint. They still do not carry rent. Parent bounds exist so a household cannot print a child into a pile. Do not put a public forehead on a minor. **Firm.** Wages stay wages. Tills publish ρ if they want the HUD. Vendor reliability can be CT. Lying about cash that still rang is still lying about books. **Military / large hierarchy.** Maintenance, logistics, training-as-closed-loop can use the same grammar. Rules of engagement and targeting do not. “We filed the form” as a class will Goodhart the form. **Care, church, nonprofit.** Volunteer loops mint. The person receiving care does not have to mint to be fed. That room spends cash and time. Planetary text does not write their morality. **State desk.** Can publish waste vs overlay-touch. Cannot delete Treasuries with a function. Debt is coupons and legislatures. ρ is a HUD. --- ## L. Network effects and the low threshold This is not “everyone must hold the bag so the bag pumps.” A pocket is enough: one shop and its regulars, one HOA, one care room, one duplicate-data door with published attacks. Inside the pocket, CT, H, and EP can move without the next city agreeing. XP exists globally as standing and is *worthless at a till that parked H*. Why a small slice of a population can make the rest feel inevitable: 1. Holdouts still use cash. No conversion holiday. 2. A pocket that actually reduces waste produces a ρ you can point at. 3. The next door copies a mapper instead of inventing measurement. 4. Regulars are already demand nodes. Adjacent shops want that predictability. 5. Forks compete. Better measurement wins people. Allowed. 6. You do not need saints. You need more than zero rooms that close honest loops and will not list a bag. Star-threshold language in the book is this pocket math. It is not a claim that 10% of Earth must sign a EULA next quarter. National ratings are a different Goodhart and a bad bootstrap plan. --- ## M. Law-shaped design (not counsel) **Howey-shaped aim (US).** Classic story: money in, common enterprise, profits from others, a thing you can dump. This overlay does not sell XP, does not list EP, burns the spark, keeps cash as tender, and gives the house the cost of its own discount. That is the design. A court can still surprise you. **IRS / tax.** A cancelled dollar on a grocery ticket is still economic. Wages are wages. Do not tell anyone EP is tax-free income. File facts with a lawyer. **Stored value / e-money (EU and others).** Some regimes treat leftover points as money. EP is designed to have no leftover. If a country still stamps it as money, that shop parks H. **Other states.** Some will ignore non-transferable standing. Some will ban anything that looks like private money. Edge sovereignty: unplug. The mesh does not invade. **Not a currency** is a design sentence: no unit you hold and pass. If a government calls it money anyway, you still do not add an order book to “make it clearer.” Hire counsel before payroll copy mentions sparks. --- ## N. Bootstrap sequence that does not require a founder caste 1. Publish the letters and the lose-conditions. 2. Ship one hostile door (duplicate data is the cheap one) with mapper, boundary, attack cases, stranger-close metric. 3. Let a MICRO till turn H on for real tickets of pennies. 4. Publish ρ for that door without a person forehead. 5. Copy the door, do not copy a church. 6. Talk. Clone. No one has to wait for Randall. Randall can sell a box at cost as a DFAO like any other shop. That is a service, not ownership of the mint. --- ## O. What stays unfrozen Action-class tables. Exact CT formula inside a door. Settle window length. Auto-H policy. Which models sit at the edge. How a care DFAO spends cash. Whether a town wants a prosecutor-shaped room (evidence graph) separate from a cage. Someone else can pair-report, recalibrate, and never say ΔS. If their graph is more attackable and strangers can close, their mesh should win. The holy-fuck at the end of the chain is not that this is the only physics. It is that if-then machines already existed and we kept selling stamps: credits, verdicts, likes, tonnes, gold-against-the-dollar. --- ## P. What to attack first Do not add a letter. Attack a door. - Mapper version on the vertex. - Boundary language. - Known attack cases (deletion theater, puff, slam, repeat farm). - Who may contest. - Late evidence path. - Stranger close rate vs insider, evidence-controlled. - Whether EP can exist without a cash line on the same ticket (it must not). If that holds for duplicate data, a real patch, and one metered till, the charter is no longer a speech. --- ## Q. Pointers Letter key: https://extropyengine.com/key Meter math: https://extropyengine.com/docs/METER-MATH.md Liquidity paper: https://extropyengine.com/papers/liquidity-and-decay Carbon, debt, coordination: https://extropyengine.com/instead Kernel formula: https://github.com/00ranman/extropy-engine/tree/main/packages/xp-formula This file: https://extropyengine.com/docs/DISTRIBUTED_CHARTER.md PDF: https://extropyengine.com/docs/Distributed_Charter.pdf