Design Principles

Eleven principles. They are stated tersely and without justification; the rest of the codex is the justification.

P1. Generality precedes specialization. No surface is added unless it can be expressed against the shared latent.

P2. Representations are owned by the network, not by any model that uses them. A checkpoint that produces an incompatible latent is a fork, not an update.

P3. Verification is statistical, not cryptographic. A surface that cannot be checked by sampling is not deployed.

P4. Latency is a first-class constraint. Every surface declares a worst-case latency. Surfaces that miss their latency budget are removed from the active routing table until they recover.

P5. Data is referenced, not held. The network stores manifests, hashes, and pointers. Bulk data lives in content-addressable storage external to the chain.

P6. Models are released or they do not exist. A checkpoint funded by the protocol that is not published, with weights, within the disclosure window, is treated as if it had never been trained.

P7. Every validator runs an identical binary on identical inputs and produces an attestable output. Divergence is the signal; convergence is the substrate.

P8. Compute is paid for, not promised. The protocol issues no obligation it cannot meet from the current period's revenue plus its reserve.

P9. Governance acts on parameters, not on values. The constants of the system, supply, fee ceiling, license type, are not in the parameter space.

P10. Failure modes are documented before they occur. Any surface, validator class, or protocol component without a written failure analysis is excluded from the routing layer.

P11. The system has no permanent operators. Foundation employees, original authors, and named contributors lose their roles within a finite, scheduled period. After that period, the network is the operator.

These principles are referenced throughout the codex by tag. When a chapter cites P3, it means the design under discussion has been chosen because the alternative would violate principle three.