The stress test  ·  Steelmanned

The hardest questions.

A framework should be judged by its strongest objections, not its weakest. These are the hardest we and our critics have found. Each is stated as a fair-minded skeptic would put it, then answered as plainly as we can, conceding what we must. Several remain unresolved, and those are marked plainly at the end.

These are drawn from the framework's own objection record and red-team table, sharpened against the academic critiques of comparable systems. Where the manifesto already concedes a problem, the answer says so rather than pretending to more than it has.

01

The floor is a throne

The objection Your robustness story is that the core is held outside the loop as non-negotiable. But a clause that overrides every other and never sunsets cannot apply itself, so someone must interpret it and read the un-summable panel to set a mode. An interpreter that is permanent, general, and answerable only to the clause it interprets is, by your own P–05, a sovereign. You abolished sovereignty in every seat except the one that adjudicates all the others, and the anti-capture regress does not converge on safety, it converges on a single apex.

The answer This is the framework's new lead open problem, OQ–00, and the honest verdict is a reframe, not a rebuttal. Sovereignty cannot be dissolved here, only slowed and relocated, so we stop claiming to abolish it and claim instead to replace a permanent personal sovereign with a plural, decaying, contestable stewardship of the core. Non-derogable cores with no single sovereign interpreter do exist: jus cogens, the halakhic rule that the law is not in heaven, and a constitutional court that is plural and term-limited, which is the model. What we concede plainly is that reading the panel by its weakest sign is a judgment, so the residual sovereign is whoever frames the methodology, and that is now a named, watched capture surface rather than a solved problem. The plural floor (EQ–06c) shrinks the throne further. The guardian interprets an enumerated list of prohibited treatments plus a burden-shift, a smaller and more legible object than dignity at large.

02

The economics needs the sovereign the politics forbids

The objection Enough is humane only if a universal floor of basic services comes first, and you concede that without the floor the criticism holds. But a universal floor is non-excludable, and provision at that scale has always needed a durable authority with the power to tax and bind, which is the sovereignty you exist to abolish. Your own commons evidence, Ostrom, works precisely because commons are bounded and excludable. The economic program presupposes the state-like capacity the political program dissolves.

The answer The contradiction is real in function and resolvable only in form, and the form is now specified rather than promised. The decisive word in our definition of sovereignty is general, and a single-purpose trust on the rents of common wealth, financing the floor and nothing else, is durable without being general or self-reinforcing, so it is not the sovereign we forbid. The framework now carries it as an organ, EQ–02e, the commonwealth trust, built from a century of provisioning institutions that held without becoming sovereigns: a constitutional corpus that may fund only the floor, a published payout formula, a reading seat chartered as deep as the money, a second key outside the spending coalition, and a named valuation bureau. What this does not escape, and we do not pretend it does, is the function. The floor still needs jurisdiction-wide, compulsory finance, and a trust large enough to provide it is large enough to be worth capturing. So the Robert Moses route, the operator that entrenches itself rather than its purpose, is the named failure the organ is built against, and the anti-regrowth claim ships as a falsifier, F–07, that fires if the trust's mandate or discretionary share grows across two reviews without a forced contest. The organ is Draft and its independence is never finally held, only currently defended, but the answer now lives in the body rather than on the frontier.

03

There is no theory of the outsider

The objection Every adversary you model is an insider bound by your rules. You have no theory of the rival civilization that adopts none of this. Among defectors your virtues invert into attack surfaces. The open commons leaks your position, protected dissent is a channel a hostile state funds and your sacred core forbids you to close, and decaying authority with a peacetime drawdown leaves you out-armed. Resilience matures over decades while conquest is decided in years, so you are eaten before your advantage arrives. Aeviterna may be viable only as a tenant of someone else's security order.

The answer This is the second new open problem, OQ–08, and the verdict is partial rather than fatal. Game theory itself points to the fix, since cooperators survive among defectors only in clusters, which argues for a security commons of allied polities plus a porcupine, deterrence-by-denial posture that armed neutrals like Finland and Switzerland show is compatible with deconcentrated power. The two fixes you say we forbid are less forbidden than they look. Effective intelligence can keep accountability while surrendering publicity, and a deliberative human override is already how real deterrence is run. What we cannot yet answer, and now state as the falsifier, is the timescale, since the cluster must be built before the attack and we are most exploitable while building it. The perimeter is now a worked Draft in the framework's Boundary Layer.

04

Tenant, not building

The objection Your four anchors, Ostrom's commons, Mondragon, vTaiwan, and Wikipedia, are all sub-civilizational and all run inside a substrate they did not create, a state's courts, a currency, a defended internet, a market, and each erodes at the boundary with that larger system. None is evidence the model works as the building rather than as a well-behaved tenant of one. And the defining problems of the century, climate, pandemics, nuclear weapons, AI, and financial contagion, all pull authority toward the center you abolished, so the framework is least applicable exactly where the hard problems live.

The answer This is the most damaging objection in the set, and we concede it and reframe rather than defend. The anchors are now labeled tenant-grade, evidence that the primitives work as tenants, not that the whole stands on its own, and the deepest gap, integration at the federation scale, is marked None yet. You cannot test a whole civilization, but you can test the interface, so capture propagation, contagion, and metric drift across coupled units are simulable as a partial harness, and the praxis staircase is now read as an evidence ladder where each rung pre-registers the next rung's failure. On the center-pull, the strong claim is false, since polycentric climate governance is real, but the weak claim holds, so we concede a thin central spine for the few irreducibly central functions and bind it to the same decay, audit, and exit as everything else. The evidence claim itself now has an instrument. The tracker codes real organizations on the readiness codebook, with anchors, confidence, per-cell evidence, and decline recorded as data, wired to falsifier F–01 as its measurement instrument in embryo. Sixteen living cases and three coded collapses prove nothing causal, and the tracker says so in its own front matter; what changes is the kind of claim, from trust the stories to audit the codes.

05

Unfalsifiable by construction

The objection Your falsifiers only weaken or revise modules, your core is declared normative not empirical, and your modularity plus a changelog let any disconfirmation be absorbed as a local revision while the whole survives. The load-bearing claims are the least falsifiable. Rigid systems have lasted centuries, so P–01 is rescued by latent brittleness that has simply not arrived, and P–02's without active resistance is unfalsifiable both ways. A framework that cannot be killed by evidence, only fed by it, has dressed a vice as a virtue.

The answer Fair, and we have changed the methodology rather than argue the point. The ledger is now split. The value axioms, dignity and non-domination, are normative and not up for empirical refutation, but the causal claims, P–01 and P–02 and the slogan, are wagers that inherit empirical risk. We added a stopping rule, so a core claim that fails its test is withdrawn rather than patched, and we named the would-be refuters in advance, the durable extractive regime for P–01 and the uncaptured low-resistance system for P–02. The banner, equilibrium is death, is now cashed into its testable form. Suppressing a system's feedback and adaptive capacity raises its collapse hazard conditional on shock, which the record supports better than the slogan, since the longest-lived orders survived by adapting rather than holding still.

06

The consent paradox

The objection A framework that fixes the vital signs and a dignity floor in advance, and puts some values beyond a vote, binds people who never agreed to it. Calling that voluntary through a right of exit means little when there is nowhere uncaptured to exit to, and a system built for civilizational scale shrinks the outside.

The answer We own this as an irreducible tension, and the framework now gives it an organ rather than a shrug. The consent layer (EQ–04e) drops founding consent with the philosophy rather than against it. What legitimates is a standing veto path, norms that bind only while they survive reasoned objection, membership that is staged, explicit, and revocable, with a vested exit written in peacetime, and contestation rights for the people in an institution's shadow who never joined. What it cannot escape is unchanged. The dignity floor is asserted rather than agreed, founding itself is never consented to, and the claim we can make without flinching is justified, minimized, contestable coercion, not the obligation of the member who failed to object.

07

The transition problem

The objection Anyone who profits from extraction will use their power to block a system designed to limit it, so there is no incentive-compatible path from here to there that avoids either a destabilizing crisis or a coercive vanguard, which recreates the concentration the framework opposes. Prefigurative politics, its chosen vehicle, has a long record of staying marginal.

The answer This began as the framework's first standing open problem, and its answer has hardened from a hope into an engine (EQ–04d). The two-stroke remains. Build parallel institutions in normal times, migrate at the juncture. What is new is that the cascade is modeled and monitorable. Momentum, participation that returns rather than peak crowds, predicts incumbent exit better than any threshold; capacity is audited in procurement shares, survival rates, and absorptive headroom; and the incumbent's two drains, repression-learning and absorption, are in the model instead of ambushing it. The concession that remains is exact. The trigger, a legitimacy window, can be neither manufactured nor scheduled, and the model's numeric parameters are still borrowed from adjacent domains. A theory of conditional readiness with instruments, not yet a theory of victory.

08

Who watches the watchers

The objection Whoever sets the thresholds and defines the vital signs becomes the new sovereign, because the power to define health is the power to define dissent. Adding oversight of the oversight only moves the problem, since there is always a final, unaudited monitor.

The answer The framework concedes that recursive oversight of the monitor has no terminating point, and it now answers with one design instead of five. Every instrument-reader is constituted as a reading seat (EQ–06e), plural with no single principal, tenured past its principals, never funded by what it reads, publishing its raw readings and dissents, firewalled from the approval layer, and binding unless publicly overridden with reasons by a named official on a deadline. The seats watch each other in a circle, because the regress has no top. That makes capture harder, more visible, and more expensive. It does not make capture impossible, and the record's own lesson is carried as the residual. A reading seat is never finally held, only currently defended.

09

Goodhart's law

The objection The whole system runs on measured thresholds, which makes it maximally exposed to Goodhart's law. Once a measure becomes a target, it stops being a good measure. A civilization metering trust, ecology, and cognition is metering exactly the fuzzy goods most easily gamed.

The answer We state this against ourselves in three places, and the mitigation now has a mechanism with a proof in it. Every people-reading instrument carries a legibility budget (EQ–03b): a published, cumulative ceiling on how much its outputs can depend on any one person, and a formal result says the same bound that caps what the system can learn about you caps what you can gain by gaming your own reading. Around it, the older disciplines hold: rotate indicators, decouple measurement from money, watch bands rather than maximize numbers, read metrics as evidence for judgment. The concessions that remain: the bound covers individuals and small coalitions, not coordinated distributional gaming, which the tripwires and the cascade must catch; and the reliance on measurement is structural rather than removable.

10

The iron law of oligarchy

The objection Michels showed that any organization complex enough to need coordination grows a self-entrenching elite. Term limits and decaying standing do not defeat that. They convert formal office into informal influence as the same insiders recirculate through new seats and the bodies that write the rules.

The answer The framework calls this its deepest structural risk and concedes that no mechanism fully closes the gap. It tracks network concentration rather than individual turnover, pays bounties for exposing capture, applies decay to administrators too, and fills some roles by lot. This is containment of a permanent tendency, not a cure. Naming the adversary and rewarding its exposure raises the cost of recirculation without abolishing it.

11

The scale problem

The objection Deliberative and polycentric governance work at the scale of a community or a single institution. The record shows participation thinning and capture rising as you scale up, and indivisible global problems pull authority back toward a center, the very thing the framework exists to prevent.

The answer We concede the residual. Some global problems do pull toward the center. The reply is to scale fractally, through nested units coordinated by thin shared protocols rather than one platform, with exit as the deepest check, and the concession is now a specified mechanism rather than a shrug. The spine test (EQ–04b) decides what may be lifted to the center, indivisibility, speed, and non-producibility by voluntary adoption, admitting only root-of-trust, verification, and the crisis backstop, and each admitted function carries the binding stack: ceremony-grade transparency, removal power held outside, a decaying mandate, fork-ready state, and no fixed shares, every part with a named precedent that held. What we still concede: the bindings are proven only where the stakes stayed low. Ostrom cautioned that her principles came from bounded physical resources, and the scale claim at civilizational size remains a hypothesis, not a demonstrated result.

12

Amateur government

The objection Sortition, rotation, and decaying standing strip out the expertise and institutional memory that complex governance needs. If the most capable are least willing to serve short rotating terms, the body ends up less competent than the population it governs, and the permanent bureaucracy holds the real power.

The answer The framework now has most of an answer, calibrated rather than asserted (EQ–05d). The evidence says randomly selected citizens judge complex questions competently given structured days of deliberation, and the documented failure is uptake, not quality; skill decays measurably within an unpracticed year, which anchors the fast tier; and where independence is the product the mechanism inverts, one long non-renewable mandate with the clock running on the surrounding review powers, because re-earning is structurally reappointment. The sharpest lesson cuts at the framework's own design. Term limits shifted power to the un-clocked, staff, lobbyists, governors, so every adjacent role carries a clock too. What stays open: the band edges are conventions, not derivations, and whether decay should run on clocks or on events is a choice the evidence cannot yet arbitrate.

13

The panopticon

The objection A system built on transparency and continuous monitoring rebuilds the panopticon. People who know they may be watched censor themselves, and the harm ratchets one way, since each new act of measurement brings an immediate benefit while the cost to dissent is diffuse and deferred.

The answer We concede the ratchet by name, and the ceiling is now an instrument rather than an adjective. Every instrument that reads people carries a legibility budget (EQ–03b): a published, cumulative ceiling on individual-level leakage, owned by a reading seat, sitting above a categorical floor where individual reads are simply forbidden, with the ambiguity zones resting on that floor. The precedent is deployed and litigated, and its ending is the honest part. The one national budget of this kind was abolished by a two-page administrative order in 2026, which is why deletion here is made as hard and as public as creation. Whether entrenchment holds over decades is exactly as untested as it was, and the record now shows what failure looks like.

14

Degrowth in disguise

The objection The economics of enough is degrowth relabeled, and degrowth has an incentive problem. Pulling back from growth causes hardship, especially for those with least. If green growth can cut emissions without contraction, then enough is not just painful but unnecessary.

The answer The framework gives a conditional answer and concedes the condition. Enough means securing a floor of basic provision first, so sufficiency is reached without contracting what people need, and it grounds the idea thermodynamically as a band between an energy floor and an ecological ceiling rather than as undifferentiated shrinkage. The whole argument leans on first delivering that floor, itself a vast unsolved project, and if rapid decoupling proves achievable the case for enough weakens.

15

A single point of capture

The objection A central knowledge commons is one high-value target. Whoever captures its governance controls the shared epistemic substrate of the whole system, and peer production has a documented gap between its egalitarian image and its drift toward informal oligarchy.

The answer The defense is to refuse a single point. The commons is governed by Ostrom's principles at scale, with clear boundaries, monitoring, graduated sanctions, and nested units so failures stay local, plus a right to fork. We concede that knowledge is not a pasture, that the transfer of commons theory to a global digital commons is unsettled, and that the capture risk of peer production is real. The answer to single-point capture is to deny that there is a single point.

16

Emergency powers and manufactured crises

The objection Every system with an emergency mode eventually has it abused, because the actor who benefits from crisis powers is the one positioned to manufacture the crisis. A broadly popular manufactured crisis is the worst case, since it clears every check legitimately, and automated thresholds add a new attack surface.

The answer This now has an organ, built from the empirical record (EQ–09c). Ignition is instant and reviewable, because delay is the one quantified killer; renewal belongs to a body that gains nothing from continuation, on thresholds that escalate each cycle; triggers are pre-registered and observable, with approval polls inadmissible, because the framing layer is the cheapest thing to buy; and the transcription ban blocks the ratchet the record actually shows, emergency powers walking into ordinary law while the emergency formally ends. The residual is named rather than beaten. The worst abusers passed through elaborate safeguards, the escalator carries a real cost in delayed response, and a capture that owns the indicators, the attesters, and the frame at once still clears it. Procedure can stop the unpopular grab, raise the price of the popular one, and no more.

17

No organ for the machines

The objection You call yourself a design for an AI-mediated civilization, yet you have no treatment of advanced AI. It is the one force that accelerates both of your named enemies at once. It cheapens the surveillance and persuasion that capture feedback, it removes the many-cooperating-humans constraint that made broad sovereignty expensive, and it is already moving inside the loop that reads your vital signs. A fast or quiet AI transition is the exact disturbance your adaptive stability was built to survive, and you say almost nothing about it.

The answer This now has an organ (EQ–03d, The Contested Mediator), held Draft and honest about why. AI enters the framework as a monitored actor, never a sovereign: it may hold scoped, revocable, decaying standing granted by a body that can withdraw it; consequential automated decisions carry a right to meaningful human review; the systems that read the vital signs are kept plural against model monoculture; accountability follows determinative influence, with external audit and incident reporting; and frontier systems inherit the reversibility discipline of EQ–05c. The residual is the sharpest in the framework and the organ names it: gradual disempowerment, a handover of judgment slow enough that the feedback channels the framework reads erode before any alarm condition is met. That is why the black-start drill (EQ–03e) reads the erosion on a calendar, a tested and scored capacity to run each consequential function without its automated layer, rather than waiting for a sensor no one has built.

18

Who speaks for the river

The objection Every protected interest in your framework gets an agent and a decaying-standing account, except the one that underwrites all the others. Nature appears only as a ceiling on throughput and a dial on a panel, never as a party with standing of its own. And the moment you try to fix that by giving an ecosystem a guardian, you rebuild your deepest problem. Whoever speaks for a forest can become its unaccountable sovereign.

The answer This now has an organ (EQ–08e, The More-Than-Human Stake), held Draft. Nature gains standing through plural, decaying, contestable guardians scoped to a named system, a river or a forest, never to nature in general, so no seat becomes nature's sovereign. An open-standing backstop lets anyone force a re-reading of the system's interest; guardian funding is ring-fenced and walled off from the polluter; and a bounded floor against knowing extinction or ecosystem collapse mirrors the dignity floor without claiming the two are equal. The decade's enforcement record cuts both ways and the organ carries it, Los Cedros and Mar Menor enforced while the Atrato stayed a plan on paper, with a divergence-counting falsifier so guardianship that tracks politics instead of the ecosystem is a recorded failure rather than a suspicion. The residuals stay real: anthropocentric capture, the difficulty of defining a non-human interest, and popular capture at the framing layer.

Where it is weakest

The objections above we can engage. These we cannot yet fully answer, and pretending otherwise would defeat the purpose of the page.

  1. The regress of oversight has no floor. The top monitor is made plural and decaying, not uncapturable. If it is captured, nothing above it catches it.
  2. Elite recirculation through informal influence is conceded as unsolved. Tracking network concentration assumes influence can be measured, and entrenched insiders are the best at hiding it.
  3. Standing decay is a specified engine, calibrated as bands, unvalidated in deployment. The decay model, the per-domain half-life tiers, and the cross-domain math are set, but the half-lives are anchored estimates no deployed system has yet validated, and the contribution metric stays gameable.
  4. The transition has a theory of readiness but no theory of victory. It depends on a legitimacy cascade we can neither create nor schedule.
  5. A popular manufactured crisis defeats every safeguard. The emergency checks stop the unpopular grab, not the popular one.
  6. There is no civilizational-scale evidence for the core claim. Self-governance of this kind is demonstrated only at community and institutional scale; the leap to a civilization is a well-argued hypothesis.
  7. The system is exposed to Goodhart's law by construction. Because it governs through measurement, gaming is a permanent condition to manage, not a bug to patch.
  8. The perimeter is designed but unbuilt, and the timescale is unclosed. The framework now specifies a defensive-only perimeter, but no open, power-decaying polity has yet outlasted a ruthless rival, and the cluster must be pre-built before the attack, so viability among defectors may still depend on a security order we cannot ourselves supply.
  9. The floor needs state-like capacity. The provisioning function now has an organ, the commonwealth trust (EQ–02e), single-purpose and decaying in form, but it still needs compulsory, jurisdiction-wide finance, and whether a trust that large re-grows the sovereign is what falsifier F–07 is registered to catch, not a question we have closed.

We would rather show you the cracks than paint over them. If you can break a load-bearing claim, that is a contribution. Bring it.