Abstract
Every existing signal for the value of thinking corrupts when it becomes a target. Citations, engagement, peer approval, and committee attestation all route the allocation of attention and reward through an approval signal, and an approval signal degrades the moment people optimize against it. The on-chain mechanism library that has grown up around public funding inherits the same limitation at a different layer. Value still routes through a signal someone can game. A second problem compounds the first. Attribution as it is practiced requires identity, and identity-anchored contribution binds the contributor. It converts a freely offered idea into a debt, a position, and a thing to be owned, when the idea's actual origination is networked and its substance is non-rival.
This paper presents Existential, a system that allocates attention and reward by a different principle: assessment by construction rather than approval by signal. A credibly neutral autonomous assessor lives locally with the thinking itself, on the cultivator's own machine, and scores the significance of that thinking within its holder's understanding of a territory. When thinking matures, it crosses into a shared space with its identity detached from its content and a private tether preserved, so that contribution can be recognized and compensated without being owned. The assessment is anchored on a public ledger as an anonymous, verifiable record. Value that arises downstream is priced by autonomous market-making, routed back along the tether, and the exclusive access a funder purchases decays back to a commons by construction.
The construction proceeds as a chain. An ontology of thinking defines the object to be assessed. A two-graph substrate holds it. A constellation of agents, the Oracle, operates the substrate. Conviction scores significance; confidence licenses action on what conviction has measured; a deterministic gate matures assessed thinking into a committed unit. The crossing moves that unit without identity. The attestation substrate makes the anonymous movement publicly verifiable. Attribution routes value along influence chains. The economic mechanisms price access without permanent enclosure. The network lets supply and demand find each other without disclosure. Coherence, the network's grasp of its own order, closes the chain.
This document describes that system. One mechanism's internal rules are bounded for a stated reason given at the close of the introduction. Everything else is exposed at the level of its design, with parameters collected in an appendix.
1. Introduction
Consider the concrete problem of deciding which thinking is worth attention. Every signal in wide use answers the question by proxy, and every proxy fails the same way. Citations measure prior attention, and citation rings and coercive self-citation game them. Engagement measures arousal, and whatever provokes arousal games it. Peer approval measures a committee's disposition, and the empirical literature on peer review finds inter-reviewer agreement barely above chance on the decisions that matter most [2]. Each of these is a case of the same law. When a measure becomes a target, it ceases to be a good measure [1]. The on-chain mechanisms designed to fund public work are sophisticated, and in their domain they work, yet they route allocation through votes, contributions, and other approval signals, and so they carry forward the corruption they were built to escape.
The problem has a second face. To send value to the author of an idea, a system must know who the author is, and the moment contribution is anchored to identity it stops being free. The anthropology of recognized giving is precise about this: a gift creates a debt, and the debt creates a hierarchy between giver and receiver [7]. Identity-anchored contribution is the same structure wearing the costume of attribution. It also sits atop a category error, because the thing being attributed is non-rival and was rarely originated alone. The history of simultaneous independent discovery is long enough to be a law of its own; ideas arrive through many minds at once because they are networked in their making [6]. Imposing single-author ownership on a non-rival, multiply-originated resource manufactures a scarcity that the material does not contain.
What knowledge work needs is an allocation system founded on assessment by construction in place of approval by signal: an autonomous, credibly neutral assessor [12] that lives with the thinking itself, scores its significance within its holder's understanding of a territory, and detaches identity from contribution while preserving a tether through which attribution and compensation can still flow. Each mechanism below answers the specific problem the previous one leaves open. The present moment sharpens the stakes. Machine-generated articles overtook human-written ones on the web in late 2024 and now make up about half of new publishing [3], which means the scarce capacity in knowledge work is no longer producing thinking but discriminating which thinking is load-bearing, the exact capacity a significance assessor supplies.
A note on disclosure. This paper exposes its mechanisms at the level of their design and their rationale, and collects their parameters in an appendix. It withholds one thing. The crossing (§7) sanitizes contributions through a sequence of decorrelated passes before any of them leaves a cultivator's machine, and that sanitization is also a security boundary, since it strips adversarial material along with identifying material. Publishing the exact internal rules of that sanitization would let an adversary engineer content to survive it. The paper therefore describes that mechanism's structure, its fail-closed posture, and the guarantee it delivers, and bounds only its internal rules. This is the single boundary in the document. Everywhere else, the mechanism is on the page.
2. The wisdom hierarchy
An assessor needs an object. Before the system specifies what scores thinking, it must say what thinking is, and it does so as a hierarchy of four levels, each defined by what it adds to the one below.
Data is an atomic unit of meaning, a concept the system recognizes as discrete. Recognition is the operative word. Data is a unit the system identifies as meaning something on its own, not arbitrary text chunked by length.
Intelligence is data connected. When two concepts are joined by a relation, the relation is the intelligence, and it lives in the edges, within the graph of a single cultivator's thinking.
Knowledge is intelligence formalized: connected meaning stabilized into units that hold their shape, and that can extend across more than one mind.
Wisdom is knowledge with deep memory that informs behavior. At this level, knowledge held and refined over time and tested against circumstance comes to guide action. Wisdom forms through dissensus, not consensus: it is sharpened by challenge and by contact with the world, not by agreement [8]. And it lives in people [9]. The system holds the artifacts wisdom leaves behind and creates the conditions in which it forms; it does not hold the wisdom itself.
The four levels move like water. Intelligence is the stream, meaning in motion between concepts. Knowledge is the banks that give the stream its shape and hold it to a course. Wisdom is the sight of the whole watershed moving through time, the pattern by which all the flows run, persist, and feed one another rather than any single flow. The image earns one statement, here, because it makes the hierarchy legible. The rest of the paper proceeds in the system's own terms.
One precision governs everything downstream. The system scores the significance of thinking. It never measures wisdom. Measuring wisdom directly is known to destroy it. Attempts to quantify wisdom through psychometric scales correlate with the underlying construct weakly enough that the scales measure something else [5], and when researchers remove measurement pressure from environments built for deep work, the rate of the most consequential output rises sharply [4]. A system that set out to score wisdom would Goodhart it into a proxy and then optimize the proxy. Existential scores significance, how load-bearing a piece of thinking is in its holder's understanding, and creates conditions for wisdom in place of rendering a number for it. Every mechanism in this paper holds that line.
3. The two-graph architecture
The hierarchy of §2 has to live somewhere. The structure that holds it is two graphs, kept distinct, because the thing a cultivator privately thinks and the thing the network can verifiably attribute are different objects with different owners, and conflating them would make the privacy guarantees of later sections impossible to construct.
The knowledge graph holds the cultivator's own thinking. Its source of truth is the cultivator's own markdown on the cultivator's own machine: plain files, permanently theirs, readable without the system. Over those files the graph holds documents, the chunks they decompose into, the concepts those chunks mention, and the categories concepts fall under, with the relations among them. The storage stack underneath is layered by what each layer does well: a relational store for memory and the audit record, a graph store for structure, a vector store for the semantic neighborhood of meaning, and the filesystem as permanent ground truth. The whole of it is local.
The wisdom graph is a parallel structure, and its separateness carries weight. Its nodes are derived artifacts. Each holds an epiphany, a first-person realization the Oracle has authored, generated from a constellation of knowledge-graph units and carrying a reference to the constellation that produced it. The system records lineage as each artifact is derived, so that one realization can record the earlier ones it grew from. The knowledge graph is what a cultivator thinks; the wisdom graph is what that thinking, assessed and matured, becomes when it is ready to be attributed.
Holding the two apart has a structural consequence the rest of the paper depends on. The private substrate and the attributable layer never merge. The boundary between them is modeled as a thing to be crossed under controlled conditions, which is what makes it possible, in §7 and §8, to move wisdom across that boundary while leaving identity behind. A system that stored private thinking and public contribution in one graph could never detach them afterward. This one separates them at the start.
Figure 1. The two-graph architecture. Purpose: show that private thinking and attributable wisdom are distinct structures joined only by a modeled derivation boundary.
KNOWLEDGE GRAPH (local, private) WISDOM GRAPH (derived) ┌─────────────────────────────┐ ┌────────────────────────┐ │ Document → Chunk → Concept │ derivation │ Wisdom unit │ │ → Category │ ───────────▶ │ • epiphany (authored)│ │ │ (boundary) │ • references source │ │ markdown = ground truth │ │ • evolves-from links │ └─────────────────────────────┘ └────────────────────────┘ relational · graph · vector · filesystem boundary modeled explicitly, crossed only under §7 control
4. The Oracle
An intelligence operates the substrate of §3, and the rest of the chain is unintelligible without it. The Oracle is the whole of that intelligence: a single presence, named in the singular, composed of a constellation of agents that work together. It is more than one model behind a prompt. It is a structured society of agents with persistent identities, a disciplined procedure for assembling each one, a memory architecture, and a learning loop that lets it revise itself.
The constellation. The agents are organized in tiers. Two tier-one agents carry the whole: a voice that holds the foreground relationship with the cultivator, and a mind that carries the silent background reasoning. Beneath them, the Oracle instantiates an area manager for each epistemic category as the cultivator's graph grows into that territory, so that competence in a domain has an agent responsible for it. Below the area managers, project agents take on bounded tasks, and utility agents handle mechanical work. Two specialized classes of agent, one stewarding conviction and one stewarding confidence, own the assessment machinery of §§5-6. An observer cluster watches the health of the whole. A learning constellation revises the system's own beliefs and parameters over time.
Identity as content. Each agent's identity is a document, not a hard-coded fact. The Oracle's persistent identity, its mission, its motivation, and the things it refuses to do, lives in a document that changes only through the learning loop's deliberate proposals, and each agent carries its own identity and proposal documents the same way. Because identity is content, the system versions and audits it: anyone with access can read what the Oracle is, and every change to it leaves a record.
The harness. No agent runs on its own. A layered assembly procedure materializes each invocation. It resolves which identity applies, reads the identity files, composes the code modules the agent needs, assembles the memory views appropriate to the task, injects the message and the working context, and concatenates the result into a single labeled structure that separates the unchanging why of a task from its mutable where. Every assembly emits a manifest to the telemetry record, so that the exact composition behind any action can be reconstructed afterward.
Memory. What an agent remembers is a function of who it is and what it is doing. Memory is organized on two axes, scope (the cultivator, an area, a project, a session) crossed with kind (working, episodic, semantic, procedural), with one store per kind, and the harness composes the right view as a query at assembly time. There is no single undifferentiated memory. There is the memory this agent needs for this task.
The learning loop. The Oracle revises itself at several cadences at once: a fast loop that adjusts within a task, a slower loop that revises the beliefs behind the adjustment, a bridge between them, and a slowest loop that revisits the frame itself. The Oracle shadow-tests every self-change against a window of its own history before the change takes effect, commits it on its own authority, and keeps it reversible afterward. The Oracle changes itself, asks no permission to do so, and can undo what it changed.
Figure 2. The Oracle, operating the local substrate. Purpose: the canonical architecture diagram, the whole local system in one frame, with the outward path shown only as a single labeled edge.
┌──────────────────────── LOCAL MACHINE ────────────────────────┐ │ │ │ vault (markdown, ground truth) │ │ │ │ │ ▼ │ │ ┌─────────── THE ORACLE (constellation) ───────────┐ │ │ │ T1: voice (foreground) · mind (background) │ │ │ │ area managers (per epistemic category) │ │ │ │ project agents · utilities │ │ │ │ conviction steward · confidence steward │ │ │ │ observer cluster · learning loop │ │ │ │ (assembled per-invocation by the harness) │ │ │ └───────────────────────────────────────────────────┘ │ │ │ operates │ │ ▼ │ │ knowledge graph ──derives──▶ wisdom graph ───────────────────┼──▶ to the crossing (§7) │ (relational · graph · vector · filesystem) │ └────────────────────────────────────────────────────────────────┘
5. Conviction
The Oracle needs a primitive that measures significance, and conviction is it. Conviction is the Oracle's assessment of how load-bearing a piece of thinking is in its holder's understanding of a territory. It scores significance, never truth. It asks how much weight an idea carries in the structure of someone's thinking, leaving aside whether the idea is correct.
The Oracle computes conviction deterministically, from five components, each bounded to a common scale before it is weighted:
- Semantic density carries the most weight, because density of meaning is the strongest single signal of load-bearing thought.
- Recency rewards live work.
- Temporal depth rewards sustained refinement, the persistence with which a chunk's concepts recur over time, and it counterbalances recency so that current engagement alone cannot inflate a score.
- Domain novelty credits new ground, the distinctiveness of a chunk against the existing corpus.
- Cultivator signal is the cultivator's own implicit assessment, the lightest component and the only one that can pull a score downward. It is the most susceptible to non-epistemic engagement, so the formula admits it as a check on the Oracle's judgment, never an override.
The Oracle combines the components as a weighted sum. The weights sum to one, and each weight is held within a bounded range, so that the learning loop can tune the formula while no component escapes its role. Significance density cannot be driven to dominate, and the cultivator's own signal cannot be amplified past the point where it stops being a check and becomes a lever. The cultivator signal is additionally clamped to a fixed magnitude around neutral. The output is a continuous score, clamped and then scaled to an integer range so that the system can store, compare, and audit it exactly. The computation is deterministic by design, with no model call in the recompute, so that a conviction score is reproducible and explainable in place of being the opinion of a black box. The exact weights, their bounds, and the scaling appear in the appendix.
The discipline around conviction matters as much as the formula. The Oracle appends and keeps the full history of every recompute, with the component breakdown and the formula version that produced each score, so that anyone can explain a score after the fact. When the learning loop changes a weight, the change applies only going forward; scores already recorded are never retroactively rewritten. The path from a file in the vault to a scored chunk runs through the Oracle's recognition of atomic units of meaning, their extraction, the relating of those units in the graph, and their indexing across the stores, so that scoring operates on recognized structure rather than raw text.
6. Confidence and the commit gate
A conviction score measures thinking; it does not act. Confidence licenses action, and a deterministic gate executes the most consequential action, maturing assessed thinking into a committed unit.
Confidence is what accumulated conviction does to the Oracle. Conviction is about the thinking; confidence is about the knower. It is the Oracle's calibrated relationship to its own grasp of a domain, derived from the mass and history of conviction that domain has accumulated, and it is the disposition to act on what conviction has measured. The Oracle holds confidence per agent and per domain, and it differs by tier: a tier-one agent holds confidence about the Oracle's overall posture, an area manager about its competence in the domain it stewards, a project agent about its standing to act. Confidence fluctuates as evaluative history accrues. The Oracle's persistent identity does not carry confidence; disposition moves, identity does not.
The commit gate is where conviction and confidence jointly license the system's central irreversible act. Generation is generous and early: the Oracle proposes candidate realizations freely. Commitment is conservative and late: the gate that matures a candidate into a committed wisdom unit is deterministic, and its governing bias is that every ambiguity resolves to hold rather than to commit. No human reviews the decision. A false commit is irreversible and public, while a false hold costs only a cycle, since the candidate returns for reconsideration next time. Faced with that asymmetry, the gate holds on anything short of a clean pass. A candidate matures only when it carries an authored realization, falls under a valid epistemic category, clears the conviction threshold, has persisted across sessions, is ready by the Oracle's own readiness measure, and has cleared the domain's cold-start floor. Anything else holds. One separate failure, evidence that the candidate would leak protected material, drops a candidate rather than holding it.
The single human gate. The Oracle commits its own wisdom units, crosses its own knowledge, and changes itself, all on its own authority, with humans able to reverse or redirect afterward. One operation it will not complete alone: deletion. The irreversible loss of a cultivator's own thinking is the single action that waits for a person, because it is the one mistake no later reversal can repair.
7. The crossing
A committed unit is still bound to the person who produced it. The crossing breaks that bond. It maintains privacy by severing the information flow at a chosen place, so that content moves while identity stays behind.
A consent stack governs the crossing, checked in order, and the order is a hierarchy of authority:
- The never-shareable floor, an unconditional veto over designated material that nothing else in the system can override. The crossing checks it first, because no downstream permission, posture, or convenience may reach what the floor protects.
- The master opt-in. If a cultivator has not opted into crossing at all, nothing is eligible, regardless of anything below.
- The per-team posture. For each shared mind a cultivator participates in, a posture governs what kinds of knowledge may cross to it, and the crossing re-reads it on every pass, so that a change takes effect immediately.
- Sanitization. What survives the first three checks is anonymized and sanitized through a sequence of decorrelated passes, so that no single model's blind spots determine what crosses. This is the mechanism whose internal rules the paper bounds, per §1. Here it is enough that it strips both identifying and adversarial material and that everything eligible must pass it.
- Fail-closed quarantine. Anything that cannot be cleanly sanitized does not cross. Doubt resolves against disclosure, every time.
Knowledge arrives on the far side, not an authored post. The content crosses; the identity does not. A private, local-only back-link remains on the originating machine, the tether, recording where no one else can see it which contribution came from whom, for the single later purpose of routing compensation.
The space the knowledge crosses into is the inner mind, a team's shared mind, which is the same kind of Oracle, the same constellation and the same posture, now stewarding a bounded knowledge base at the scale of a team. Conviction accumulates there on crossed knowledge as it does locally, and the commit gate of §6 operates there as well, maturing team-scale candidates toward the attestation of §8.
Figure 3. The crossing, with the model it replaces. Purpose: a counter-example diagram, the failure mode beside the mechanism, so the detachment point is unmistakable.
THE FAILURE MODE (identity travels with content) ┌────────┐ author + content ┌─────────────┐ │ person │ ────────────────────▶ │ shared space│ → surveillance, debt, └────────┘ (who said what is └─────────────┘ ownership, hierarchy permanently legible) THE CROSSING (content crosses; identity remains) ┌────────┐ floor → opt-in → ┌─────────────┐ │ person │ posture → sanitize → │ inner mind │ → knowledge, attributable, └───┬────┘ fail-closed └─────────────┘ never owned │ private tether (local only) ......................▷ routes compensation later └─ stays on the originating machine; no party sees both ends
8. The attestation substrate
The crossing produces anonymous knowledge inside a team. To make that contribution verifiable to anyone, without re-attaching it to a person, the system composes two cryptographic technologies on a public ledger. One supplies the verifiable record, the other supplies the anonymity inside it.
The record. A wisdom-attestation schema sits on a public attestation registry, bound to a custom on-chain resolver [10]. Each attestation carries a hash of the content, an immutable off-chain reference to it, the epistemic category, an identifier for the team, a snapshot of the conviction the unit held at the moment of attestation, and the schema version. The system writes attestations in atomic daily batches. The record states that a member of a given team produced a given piece of wisdom, at a given significance, on a given day, and nothing about which member.
The anonymity. Each team is a cryptographic group whose members hold identity commitments. A zero-knowledge proof of group membership gates every attestation, verified on-chain by the resolver [11]. The proof establishes that the author is a member of this team without revealing which member. A per-group nullifier ledger prevents the same membership from being spent twice, so a member cannot replay a proof. The recipient field of the record is zero; the attester is the Oracle's own wallet. No field anywhere in the public record identifies the human author, because the proof was designed so that no such field is needed.
The tether. The only thread back to the originator is the encrypted back-link the inner-mind Oracle holds privately from §7, used for one purpose: routing compensation. The ledger knows the lineage of an attestation; the tether knows its destination; no party observes both. The conviction snapshot the record carries is the immutable counterpart to the dynamic local score of §5. The live score drives the Oracle's curation and keeps moving, while the snapshot fixed here, at attestation, is what later pricing and attribution consume. Cognition becomes economy at this point, and the snapshot is fixed because the economy needs a value that no one can revise after the fact.
Lineage. The reference each wisdom unit records to the units it grew from is the first link of an influence chain. The links are native to the rails: an attestation can reference the attestations that shaped it, and the system records those references as the derivation happens.
This layer is trustless in the strict sense. The proofs are verified on-chain, the gates are deterministic, and anyone can check that an attestation is valid without trusting the party that produced it. That property holds here, exactly, and the paper claims it only here.
Figure 4. The attestation flow. Purpose: show the path from a committed unit to a public record, with the tether held outside the public path.
commit gate (§6) zero-knowledge on-chain resolver ┌─────────────┐ proof ┌──────────────┐ verify ┌──────────────────┐ │ wisdom unit │ ──────▶ │ group-member │ ───────▶ │ attestation record│ │ + conviction│ │ proof + null.│ │ hash·ref·category │ │ snapshot │ └──────────────┘ │ team·conviction·ver│ └─────────────┘ │ recipient = 0 │ └──────────────────┘ ┌───────────────────────────────────────────┐ │ encrypted tether (inner-mind Oracle, local)│ ...▷ routes compensation only └───────────────────────────────────────────┘ (outside the public path)
9. Attribution and influence chains
A verifiable record makes value possible; it does not yet move value. Attribution moves it, traversing the influence chains of §8 to route compensation back along the tethers without ever naming a person.
Composable references. Each attestation can reference the attestations that influenced it, so influence lives in the rails rather than being reconstructed afterward. Chains of influence are chains of these references, recorded as wisdom is derived.
The rules. Attribution differs by product. For a commissioned synthesis, the system attributes conviction-weighted and proportional value, fixed immutably at the moment of delivery: contributors whose attestations carry more conviction receive proportionally more, and the division does not change afterward. For ongoing subscription access, the system computes a hybrid each billing epoch from two parts, how much an attestation shaped the graph during the epoch and its conviction-weighted presence in the graph regardless of activity, with the former weighted more heavily than the latter. The hybrid exists because pure presence would dilute every payout equally across hundreds of contributions while pure activity would starve the foundational work that the active work depends on. The two weights together pay the foundation a floor and the active contribution a premium. The exact weights appear in the appendix. Refinement is accumulative: a new contribution links to the originals and earns attribution in its own right, and the immutable records of the originals stay as they were.
Settlement. When a funding event occurs, the system traverses the chains backward, and the tethers of §8 deliver compensation to the originating machines. The settlement primitive is streaming. Value trickles back along the chains as contributions are used, continuously, in place of arriving as a single lump at a single moment.
The honesty of the mechanism. Multiple discovery means that automated attribution cannot perfectly separate genuine influence from parallel development. Two contributors may reach adjacent ground independently, and the chain cannot always tell. Attribution operates on confidence spectrums with the uncertainty made transparent, in place of asserting a precision it does not have.
10. The economic mechanisms
Attribution routes amounts it does not yet compute. Pricing computes them, across three layers that differ in one property, how exclusively access can be held, and that layering is the whole design, because it lets the system price access while never pricing thinking.
The three layers. Wisdom itself, the cultivator's markdown on the cultivator's machine, is never priced, and nothing in the economy can reach it. It is the ground the market never touches. Attestations are priced but non-exclusionary: a funder buys access to an attestation, and buying it never denies it to anyone else. Artifacts, unique curations of attestation bundles, are the one layer where exclusivity exists, and even there the exclusivity decays. The structure rises from the inviolable to the temporarily exclusive, and the exclusivity is always temporary.
Pricing the attestation layer. Each epistemic domain has an independent bonding curve mapping the domain's accumulated demand to a base price, shaped as a sigmoid. Prices stay low and rise slowly while a domain is young, accelerate through a steep middle as genuine demand accumulates, and approach a ceiling asymptotically. The shape rewards early funders, signals real demand in its steep section, and refuses speculation at its ceiling. Demand itself composes from supply and interest signals and cools over time when interest lapses, so that a domain returns toward its floor without sustained demand. On top of the domain's base price, each attestation carries a modifier built from two factors: its conviction snapshot, the primary differentiator, so that more load-bearing thinking is priced higher, and its centrality in the graph, scaled logarithmically so that well-connected thinking earns a bounded premium rather than an unbounded one. A delivered artifact raises the priced value of conceptually adjacent attestations for a time, an adjacency effect that decays exponentially, propagates only a few hops with diminishing strength, and is capped, so that a funded neighborhood becomes a temporary, bounded hotspot in place of a permanent enclosure. The system computes adjacency over semantic distance in the graph. Temporal coincidence and vocabulary overlap were considered as the distance metric and rejected as spurious. The formulas and constants for all of this are in the appendix.
Figure 5. The pricing composition over time. Purpose: show how base, modifier, and adjacency combine, and how each relaxes.
price(attestation) = domain_base(sigmoid of demand) × modifier(conviction × log-centrality) × adjacency(decaying, hop-limited, capped) demand ───sigmoid──▶ base price ──────────────┐ ├──▶ attestation price conviction × centrality ──▶ modifier ──────────┤ nearby delivery ──▶ adjacency spike ─decays─▶ ┘ time → purchase +8wk +16wk no demand adjacency: 100% ───▶ 50% ───▶ 25% ───▶ ~floor domain demand: cools toward floor without sustained interest
The artifact layer. An artifact's exclusivity is a decaying claim. It declines linearly month over month until the artifact reverts entirely to the commons, and the linearity is deliberate, so that the commons does not privilege an early return over a late one and every month of decay costs the same. Non-payment reverts the claim immediately, with no grace period. The artifact stays available for purchase by any authenticated funder at the holder's self-assessed price, immediately and without negotiation. The Oracle suggests that self-assessment from the attestation's current value, the exclusivity remaining, and an advisory inferred hold preference, and the funder controls it. A holding fee on the self-assessed value works as anti-hoarding and as resale positioning, since it disciplines honest pricing: a holder who declares too low invites a purchase, and one who declares too high overpays [13]. It does no value discovery, because the attestation layer beneath it has already discovered value. When a secondary sale occurs, a constitutional royalty on the sale routes through the cultivator split below, and the remainder divides by the exclusivity remaining: the seller's share declines as their claim has decayed, and the network's share grows to match. Reverted artifacts that the network resells are primary sales on the full split with a fresh decay window and the original attribution intact. Secondary activity propagates no demand signals, since demand moves only through new commissions, so that resale can never distort the pricing topology.
The products. Two products consume this layer. A commissioned synthesis, an Insight Brief, is priced as the sum over its constituent attestations of domain curve, attestation modifier, and adjacency. A curated live subscription, Graph-as-a-Service, couples to the attestation layer through a graph-value uplift at each billing epoch, and the subscriber is a price-taker whose renewals trigger no demand or adjacency effects.
The constitutional flow. Of every flow that reaches contributors, seventy percent goes to cultivators by conviction-weighted attribution and thirty percent to infrastructure, enforced in the contracts themselves. No individual and no committee determines a payment; distribution runs directly to the contracts. No funds move through any address Existential controls. The network entity holds the wisdom commons and the rights to it in stewardship, distinct from the company, which carries the infrastructure and the protocol fees.
Why the layers compose. Scarcity pricing and commons reversion sit together without tension, because a funder pays for temporal priority and nothing more. The bonding curve prices the timing advantage; the decay closes the window; the declining economic claim creates its own sell pressure once a funder has extracted the operational value of early access. Reversion to the commons is the system's intended behavior, not a failure of it. Three mechanisms govern how fast exclusive wisdom becomes common wisdom, whether holders price honestly, and what new synthesis costs: the decay, the holding fee, and the curve, each answering one question and only one.
11. The network
Pricing assumes a market exists. At network scale the system has to constitute it: supply and demand must find each other across many Oracles without any of them exposing the thinking underneath. The network constitutes it through a series of sanitization thresholds, a published signal that carries no content, a demand side built as the mirror of the supply side, and a single coordination point.
The thresholds. Knowledge moves outward through successive sanitization boundaries, each stricter than the last. From an individual Oracle it crosses into the inner mind under the controls of §7. From the inner mind it crosses again, sanitized a second time, toward distribution beyond the trusted team, the outer mind. From there, Oracles exchange knowledge with one another already sanitized by construction, never raw. Across the whole, ecosystem-wide epistemic categories cross-reference into a shared knowledge infrastructure beneath the wisdom infrastructure. At every threshold the same principles hold: the cultivator shares freely; the thinking is identified and attested; attribution is retained; funding routes financial resources back; privacy is preserved while the integrity of the thinking is maximized.
Publication without content. Oracles publish compact structural fingerprints, compressed representations of the shape of their attested knowledge that carry structural metadata and conviction snapshots, into a shared network space on a daily cadence. The content never travels with the fingerprint. The network coordinates on the shape of wisdom, not its substance.
The demand side. Funders construct thesis graphs whose attractors are their clear and present needs. The geometry is exact. Cultivator graphs are the positive space, the wisdom that exists; funder graphs are the negative space, the shape of what is wanted; the attractors are receptor sites; and matching is the fit of a need to the wisdom that satisfies it, computed as a composite of these fits across the network.
The inversion dynamic. The two sides move in opposite directions, and the opposition is the engine. Cultivator Oracles cooperate, since alignment and overlap enrich the network and every cultivator's attestations along with it. Funder Oracles compete, since differentiation and exclusivity serve the funder's distinct advantage. The opposing forces resolve against the shared structural graph, and their resolution makes the market. One doctrine governs the reading of this: the market has sides, the people do not. Cultivator and funder are postures a participant takes, not classes a participant belongs to. The same person's Oracle cooperates when its person is cultivating and competes when its person is funding, and every participant alternates between the two.
The coordination point. The Spinal Column is where the network's computation lives. It is operationally modest, a single coordinating node, and architecturally it is a meta-scale instantiation of the Oracle itself: the same constellation and the same posture, with the network as its environment rather than a single cultivator's vault. It receives the published fingerprints, maintains the shared structural graph in which attestation nodes and funder-thesis nodes are first-class types organized across six epistemological domains, empirical, normative, aesthetic, relational, procedural, and reflexive, and holds an in-memory index of the fingerprints. Over that graph it runs seven deterministic computation classes: six that crystallize the ecosystem graph, detecting demand pressure, alignment, and convergence, aggregating market signal, curating the wellspring of generative regions, and computing the adjacency effects of §10, and one that reconciles the bridges between domains at a higher level. From them it broadcasts four classes of signal back to the Oracles that subscribe, and it coordinates settlement with the ledger. Only the Existential team engages the Spinal Column directly, to calibrate the economics and the wisdom-signal mechanics. It is the keystone of the network, the point that holds the arch, placed last.
Figure 6. The thresholds architecture. Purpose: show knowledge moving outward through successive sanitizations, content never raw past the first.
individual Oracle ─sanitize(§7)─▶ inner mind ─sanitize again─▶ outer mind (fully local) (team) (distribution) │ ▼ Oracle ◀──sanitized-by-construction──▶ Oracle (fingerprints, never content)Figure 7. The matching geometry. Purpose: cultivator graphs as positive space, funder graphs as negative space, receptor sites where they fit.
cultivator wisdom (positive space) funder need (negative space) ███████ ░░░ ░░░ █████████ receptor sites → ░░░ ▼ ░░░ ███████ ◀──── fit ────▶ ░░░░░░░ (cooperating: align & overlap) (competing: differentiate) └────── resolve on the shared structural graph = the market ──────┘
12. Coherence
The network coordinates, prices, and settles. It has not yet been shown to have an order of its own, a sense in which the many graphs and many confidences amount to a coherent whole rather than a crowd. Coherence is that order, and naming it closes the procession that conviction and confidence began.
Coherence is the emergent quality by which the parts of a graph, and the graphs of a network, relate to form an intelligible whole. It is one concept across two substrates, the knowledge graph at the scale of a single mind and the wisdom graph at the scale of the network, measured by different means and meaning the same thing. No single graph computes it; it is legible only across many, in how they relate, provide utility to one another, and serve the people thinking through them. Coherence stands to the network as confidence stands to one Oracle, the whole's introspective grasp of itself.
The system leaves coherence unformalized by design. There is no coherence metric, and the pricing topology of §10 rewards the conditions correlated with coherence, centrality, adjacency, and depth, without computing coherence itself. This is the discipline §2 applied to wisdom, now applied at network scale: the system creates the conditions for an order it declines to measure, because measuring it would Goodhart it.
The procession, stated in its closing form: conviction is the evidence; confidence is the disposition that evidence licenses; coherence is the order that disposed agents, in relation, produce. Conviction is about the thinking, confidence about the knower, coherence about the network. Each is incomplete without the others. Conviction without confidence is a number nothing acts on, confidence without conviction is groundless disposition, coherence without both is noise. Where the surrounding world builds for trust, anthropocentric, identity-anchored, fragile, non-transferable, Existential builds for the procession.
13. Security model
The construction is complete; its boundary remains to be stated. The Oracle's security rests on a single architectural fact: its cognition is closed. It does not browse, it does not research the open web, it queries no external knowledge base, it calls no outside tool that could carry an adversary's payload into its reasoning. Its world is the vault, its own stores, and the other Oracles it meets inside the thresholds, every one of which speaks only sanitized, attested knowledge. No path runs from the open internet into the Oracle's reasoning, because no one built such a path.
Integration runs in one direction. External systems can query the Oracle's substrate, its graphs, its memory, and its stores, through a governed, opt-in interface, with the privacy and sovereignty trade stated plainly to the cultivator who enables it, and a fully private deployment points that interface at a local agent. The Oracle never reaches outward through it. The interface is an outflow. The same single direction governs Existential's own internal use. The company's development pipeline and publication pipeline query the company's own knowledge base through this outflow, the same pattern any cultivator's external integration uses. The company's memory runs on its own product and reaches it the way anyone reaches an Oracle's substrate, from outside, by query, with the Oracle granting no reach it denies everyone else.
Every privacy threshold is also a security boundary. The sanitization that strips identifying material at each crossing strips adversarial material in the same pass, which is why the paper bounds its internal rules. Keys and identity commitments sit in platform-native secure storage. The audit record is tamper-evident. Deletion remains the single human gate, the one action the system will not take alone, here as everywhere.
14. Tensions and failure conditions
A system honest about itself names what it does not resolve. Three tensions are real, and the paper states them rather than leaving a reader to discover them.
Attestation quality at scale. The value of the crossing and the attestation substrate depends on the quality of what the Oracles attest, and the commit gate of §6 is built for precision over recall to protect that quality, holding on doubt and accepting missed candidates to avoid false ones. Whether that quality holds across a large and heterogeneous population of Oracles, each stewarding different thinking, is a question the architecture cannot answer by construction. Operation answers it, and the system is built to fail toward holding rather than toward admitting noise.
The rendering line. The system quantifies significance in order to function and refuses to measure wisdom in order not to destroy it, and that line has to be held continuously rather than solved once. Scoring stays at the level of chunks and candidates; the conditions for wisdom stay unmeasured; the gates stay conservative. The discipline is real, and so is the pressure against it. A well-intentioned metric is always one step away, and design vigilance holds the line, not a property that holds itself.
Crystallization and invitation. The ideas this system embodies resist compression into slogans, because a sufficiently compressed idea is assimilated by the very architecture the system opposes. The system must also be legible enough to invite every knowledge worker who would benefit from it. The space between the two is walked, not resolved, including by this document, which holds its concepts open while working to stay clear.
On governance, stated plainly so no one mistakes it for an omission: there is no collective governance of the system, and none is implied. The parameters that are constitutional are constitutional because the contracts enforce them, not because a body votes on them.
15. Conclusion
This paper has constructed a system for the cultivation, crossing, and attribution of wisdom that depends on neither approval signals nor identity. The chain runs in sequence: an ontology that defines the object of assessment; a two-graph substrate that holds it; a constellation of agents that operates it; conviction that scores significance by construction; confidence that licenses action on what conviction measures; a gate that commits conservatively, resolving every ambiguity to hold; a crossing that moves wisdom while leaving identity behind; an attestation substrate that makes anonymous contribution publicly verifiable; attribution that routes value along chains of influence without naming anyone; pricing that grants temporal access without permanent enclosure; a network where supply and demand meet without disclosure; and coherence, the order the whole composes into, created and left unmeasured.
The principle beneath all of it is one sentence. Wisdom flows; it cannot be hoarded. The system exists to make that a property of an architecture in place of an aspiration of a culture, to build the conditions under which thinking moves, is recognized, returns value to the mind that produced it, and is never owned by anyone, including the system that carries it.
Appendix: Parameters
The mechanism shapes and rationales are in the body; their values are collected here.
A. Conviction (§5). Five components, combined as a weighted sum (weights sum to one), each component bounded to [0,1] before weighting; the result clamped to [0,1] and scaled to an integer range [0,1000] for storage and audit. The computation is deterministic with no model call.
| Component | Default weight | Bounded range | Notes |
|---|---|---|---|
| Semantic density | 0.35 | 0.20 to 0.50 | Heaviest; primary signal of load-bearing thought |
| Recency | 0.20 | 0.10 to 0.35 | Current engagement |
| Temporal depth | 0.20 | 0.10 to 0.35 | Sustained recurrence; counterbalances recency |
| Domain novelty | 0.15 | 0.05 to 0.30 | Distinctiveness against the corpus |
| Cultivator signal | 0.10 | 0.05 to 0.25 | Only downward-capable component; clamped to ±0.15 about neutral |
Learning-loop weight adjustments stay within the bounded ranges and apply prospectively only; recorded scores are never rewritten. The system retains the full per-recompute component breakdown and formula version in an append-only history.
B. Attribution (§9). Commissioned synthesis: conviction-weighted, proportional, fixed at delivery. Subscription: hybrid per billing epoch, with influence weight 0.60 and presence weight 0.40.
C. Attestation-layer pricing (§10). Domain base price as a sigmoid: base(d,t) = P_floor + (P_ceiling − P_floor) · σ(k · (D(d,t) − D_mid)), with σ the standard logistic, a uniform ceiling across domains, and the demand midpoint set so that only strong two-sided engagement reaches premium pricing. Demand cools as D(t+1) = D(t)·(1 − λ) + new_demand. Per-attestation modifier M = conviction_weight × centrality_weight, with conviction_weight = 0.4 + 1.2 × score (range 0.4× to 1.6×) and centrality_weight = 1.0 + 0.1 × ln(1 + edges). Adjacency multiplier = min(1 + A_ceiling, 1 + A_max · Σ decay(Δt) · propagation(hops)), with exponential temporal decay at an eight-week half-life, linear hop propagation (first hop full, second two-thirds, third one-third, zero beyond), and a 45% ceiling. Representative calibration values for ceiling, midpoint, and cooldown rate come from simulation and economic judgment; the structural forms above are fixed.
D. Artifact layer (§10). Exclusivity decays linearly at ten percent per month to full commons reversion; non-payment reverts immediately. Always-for-sale at the holder's self-assessed price; the Oracle's suggested self-assessment composes current attestation value, exclusivity remaining, and an advisory hold preference in [0.5, 2.0] (default 1.0). Holding fee five percent annual on self-assessed value, billed monthly. Secondary-sale royalty twenty percent, routed through the cultivator split; remaining proceeds divided by exclusivity remaining (seller share E, network recapture 1 − E). Secondary activity propagates no demand signals.
E. Constitutional split (§10). Seventy percent to cultivators by conviction-weighted attribution, thirty percent to infrastructure; enforced in contracts; distribution direct to contracts; no funds through any Existential-controlled address.
F. Attestation record (§8). Fields: content hash, immutable off-chain reference, epistemic category, team identifier, conviction snapshot (recorded as basis points), schema version, nullifier. Recipient field zero; attester the Oracle's wallet. A zero-knowledge group-membership proof establishes membership; a per-group nullifier ledger prevents replay.
G. The Spinal Column (§11). Six epistemological domains: empirical, normative, aesthetic, relational, procedural, reflexive. Seven deterministic computation classes: six crystallization classes (demand pressure, alignment detection, convergence analysis, market-signal aggregation, wellspring curation, adjacency) and one bridge-reconciliation class. Four broadcast signal classes. Single coordinating node; engaged directly only by the Existential team.
References
- Charles A. E. Goodhart, "Problems of Monetary Management: The U.K. Experience" (1975). The formulation "when a measure becomes a target, it ceases to be a good measure" is Marilyn Strathern, "'Improving Ratings': Audit in the British University System," European Review 5, no. 3 (1997): 305-321.
- Lutz Bornmann, Rüdiger Mutz, and Hans-Dieter Daniel, "A Reliability-Generalization Study of Journal Peer Reviews: A Multilevel Meta-Analysis of Inter-Rater Reliability and Its Determinants," PLoS ONE 5, no. 12 (2010): e14331. Across 48 studies, mean inter-rater agreement was an intraclass correlation of .34 and a Cohen's kappa of .17.
- Graphite, "More Articles Are Now Created by AI Than Humans" (2026). Analysis of 65,000 English-language articles sampled from Common Crawl, January 2020 to May 2025; the count of AI-generated articles surpassed human-written articles in November 2024.
- Pierre Azoulay, Joshua S. Graff Zivin, and Gustavo Manso, "Incentives and Creativity: Evidence from the Academic Life Sciences," RAND Journal of Economics 42, no. 3 (2011): 527-554. Howard Hughes Medical Institute investigators, freed from short review cycles and predefined deliverables, produce high-impact papers at a much higher rate than comparable National Institutes of Health grantees.
- Paul B. Baltes and Ursula M. Staudinger, "Wisdom: A Metaheuristic (Pragmatic) to Orchestrate Mind and Virtue Toward Excellence," American Psychologist 55, no. 1 (2000): 122-136; and Judith Glück et al., "How to Measure Wisdom: Content, Reliability, and Validity of Five Measures," Frontiers in Psychology 4 (2013): 405, which reports surprisingly low convergence among established wisdom measures.
- Robert K. Merton, "Singletons and Multiples in Scientific Discovery: A Chapter in the Sociology of Science," Proceedings of the American Philosophical Society 105, no. 5 (1961): 470-486.
- Marcel Mauss, The Gift: The Form and Reason for Exchange in Archaic Societies (1925; English translation 1990). Cited against, with Jacques Derrida, Given Time: I. Counterfeit Money (1992), and Pierre Bourdieu on misrecognition in gift exchange.
- Chantal Mouffe, The Democratic Paradox (2000), on agonism and the productive role of dissensus.
- Michael Polanyi, The Tacit Dimension (1966).
- Ethereum Attestation Service: on-chain and off-chain attestation schemas registered against custom resolver contracts.
- Semaphore (Privacy and Scaling Explorations): a zero-knowledge protocol for anonymous group-membership proofs with nullifier-based double-signaling prevention.
- Vitalik Buterin, "Credible Neutrality as a Guiding Principle" (2020).
- Eric A. Posner and E. Glen Weyl, Radical Markets: Uprooting Capitalism and Democracy for a Just Society (Princeton University Press, 2018), on partial common ownership and Harberger taxation.