The Operation

V.1

Power without capture

Power is held, but never concentrated. Authority is procedural, not personal. There is no founder override, no permanent seat, and no emergency power.

The phrase is deliberately short so it can travel, and deliberately falsifiable so it can be retired. If this body ever installs a single permanent leader, an emergency override, or a founder-only power, the phrase becomes a lie and must be struck from every surface.

It is not a critique of any government and not a marketing line. It is a one-sentence description of an architecture, printed so the architecture can be checked against it.

V.2

The three core laws

Distributed authority

No single person, council, or office holds final say. The Charter and the councils are the architecture. There is no chief, no president, no life seat, and no override.

Reversibility

Every decision can be revisited. Seats rotate. Holders can be recalled. The stewardship register is public. Nothing is permanent except the Charter, and the Charter is amendable by a published procedure.

Visible process

Decisions and their reasons are published. Identities and vulnerability maps are not. Transparency without exposure — the inverse of both opaque governance and surveillance-style radical openness.

Three laws, not five. A new contributor can recite them from memory on the first day. A fourth would dilute their force; if a future amendment needs one, it must replace a law rather than extend the list.

V.3

The councils

The councils do not align to a central authority; they align to the three laws. Each holds a domain, each confirms appointments in another's domain, and none can complete a constitutional act alone. Cross-confirmation is the mechanism that makes capture expensive: taking one council yields nothing.

The right-hand column is the test set. Until each has occurred, the governance claim in this volume is architectural rather than demonstrated, and is printed as such.

V.4

The firewall

The most legally consequential diagram in this volume.

Two vehicles, one line between them. Confusing them would collapse the entire architecture, so the separation is printed as a diagram rather than described in prose.

The standards body

A community interest company in the jurisdiction of incorporation. It publishes doctrine, holds the archive, cites external authorities, and maintains the canon. It owns nothing operational anywhere in the homeland, holds no property there, employs nobody there, and never will while this Charter stands.

The operating body

A separate company in the same jurisdiction. It does what a standards body must not: enter contracts, take payments as agent, hold copyright in commissioned work, procure hardware, and carry commercial risk.

What crosses the line: published standards, in one direction only. The operating body may adopt a published standard exactly as any third party may. What never crosses: money into the archive's editorial decisions, commercial priorities into the citation tiers, and operational obligations into the standards body's name.

One body writes the standard. A different body carries the risk. The line between them is the institution.

V.5

How the operating body works

The operating body exists because certain necessary functions are hazardous to a standards body. Someone must be able to sign a contract, hold a copyright, or take a payment, and a body that does all three loses the disinterestedness that made its findings worth citing.

Agency, not custody

Where payments are handled, they are handled as agent on behalf of a named counterparty, settling to that counterparty, with the arrangement disclosed. The operating body does not hold value on anyone's behalf and does not operate any instrument that would require it to.

The copyright engine

Commissioned recordings, oral histories and craft documentation are held under clear, published licence terms in a stable jurisdiction. Rights sit where they can be enforced and where a licence, once granted to the public, cannot be retracted by pressure applied elsewhere.

Contribution credit

An internal, non-tradable marker of contribution. It is not currency, has no exchange, no redemption for money, and no secondary market. It recognises work inside the platform and nothing outside it.

V.6

The observational layer

Constraints first. Capabilities second, and only inside them.

The archive operates an observational layer over published material. It is described here by its limits before its functions, because the functions are unremarkable and the limits are the only part that matters.

Within that envelope it does routine, dull work: retrieving published material, structuring it, flagging where a cited source has changed, and preparing template-bound summaries for a human to accept or reject. It is described accurately as dull because accuracy here is a safety property.

V.7

Continuity protocol

The continuity protocol answers one question: if the people currently doing this work stopped, what would survive? The answer must be independent of anyone's goodwill, including the founder's.

1. 01The changelog is append-only. Corrections extend the record; they never overwrite it.
2. 02The canon exists in at least four media with different failure modes: live web, print, deposited copies in national collections, and a content-hashed source bundle.
3. 03Custody is distributed across jurisdictions. No single holder can withdraw the record.
4. 04Deposit is treated as the base layer. Once copies sit in national legal-deposit collections, the canon has passed beyond any single decision — including a decision by this body.
5. 05Every refusal in force is published, so a successor can tell whether the body has drifted from its own constitution.

Continuity is not loyalty. It is redundancy with the paperwork done.

V.8

What a Tuesday looks like

Doctrine that cannot be operated is a press release. This section describes the ordinary week, because the ordinary week is where the architecture either holds or quietly stops being true.

• A cited source is re-checked. It has moved. The citation is updated and the change is written to the changelog with the old location retained.
• A question arrives that the corpus does not support. The answering organ refuses and routes the reader to the authority that could answer.
• A desk drafts a page. Review finds a claim with only one layer. The page does not publish until both layers are resolved.
• A correspondence template is prepared for an institution already cited in the archive. The institution is named; no individual is.
• Someone proposes a capability that would be genuinely useful and sits outside a closed gate. It is refused and the refusal is recorded, which is the only reason the gate means anything.

None of the above is impressive. That is the finding. An institution is what remains once the impressive part is removed.