AeviternaAeviterna
Adaptive Stability, Transitional Governance, and Civilizational Stewardship
Abstract
Contemporary political frameworks presuppose one of two civilizational modes: static equilibrium, in which the goal of governance is to hold systems in balance; or revolutionary rupture, in which existing systems are replaced through force or collapse. Neither framework adequately accounts for a third mode: adaptive transition under conditions of active cognitive capture. This paper introduces Aeviterna as a post-capitalist civilizational framework designed for that third mode. Aeviterna proposes that healthy civilizations do not seek perfect balance. They oscillate within survivable bounds while preserving the capacity to detect instability, correct proportionally, and redistribute recovery. The framework rests on five structural commitments: adaptive stability, replacing growth-as-imperative with bounded self-correction; cognitive sovereignty, treating perception itself as a contested civilizational resource requiring protection; cognitive ecology, the governance requirement to maintain productive tension between coherence and generative ambiguity; the justice of light, establishing that a civilization's response to harm must be as legible and corrigible as its governance structures; and the knowledge commons, reframing shared understanding as primary infrastructure rather than commodity. Aeviterna is presented not as a final design but as a versioned, falsifiable, and iteratively refineable architecture.
Research Problem Statement
The central problem Aeviterna addresses is this: existing political and economic frameworks were designed for conditions that no longer hold. They assume bounded information environments, legible power, and the possibility of stable equilibrium. None of these assumptions survive contact with the present.
Capitalism assumes that market signals are sufficient to coordinate behavior and allocate resources. It does not account for the weaponization of information as a market instrument, the systematic capture of regulatory bodies, or the externalization of civilizational costs onto commons that markets cannot price. The result is not market failure in the technical sense. It is the successful optimization of a system against its own stated purpose.
Socialism, in its historical implementations, assumes that collective ownership resolves the coordination problem. It does not account for the capture of collective institutions by administrative hierarchies, the suppression of feedback mechanisms necessary for adaptive correction, or the cognitive homogenization that results from centralized epistemic control.
Both frameworks share a fatal structural assumption: that the system, once correctly designed, will tend toward a desirable stable state. Aeviterna rejects this assumption entirely. Living systems do not stabilize. They oscillate. The question is not how to achieve stability but how to keep oscillation within survivable bounds while the conditions of the world continue to change.
A second problem compounds the first. The emergence of AI-mediated information environments has created conditions under which perception itself, the raw material of political judgment, can be shaped at scale, adaptively, and without the knowledge of those being shaped. This is not merely a problem of misinformation. It is a structural problem of cognitive capture: the systematic redirection of attention, emotion, and belief in service of concentrated interests. At scale, this process constitutes cognitive terraforming: the large-scale reshaping of the perceptual and epistemic conditions under which populations think, judge, and act. No existing political framework was designed to address this. Aeviterna is.
Literature Positioning
Aeviterna draws on and departs from several intellectual traditions. Locating those departures is necessary for rigorous engagement.
From complexity theory and systems thinking (Meadows, Sterman, Kauffman), Aeviterna inherits the core insight that living systems require feedback loops to remain viable, and that the suppression of feedback through opacity, capture, or design is the primary mechanism of systemic collapse. The departure: complexity theory tends toward description. Aeviterna is normative. It specifies which feedback structures a civilization ought to preserve and why.
From commons theory (Ostrom, Hess), Aeviterna inherits the empirical finding that shared resources can be governed sustainably without either privatization or centralized state control, provided that governance structures meet specific design conditions. The departure: Ostrom's work focuses on physical and digital commons. Aeviterna extends the commons framework to epistemic resources: knowledge, attention, and the infrastructure of perception.
From critical theory and discourse ethics (Habermas), Aeviterna inherits the claim that legitimate governance requires communicative rationality: decisions affecting people must be grounded in reasoning those people can access and contest. The departure: Habermas assumes a relatively undistorted public sphere is achievable through institutional design. Aeviterna treats distortion of the public sphere as the default condition under cognitive capture. It requires active structural defense rather than procedural correction.
From cybernetics (Wiener, Beer), Aeviterna inherits the concept of adaptive control, meaning the capacity of systems to adjust their behavior in response to feedback from the environment. Cybernetic governance models have historically tended toward technocratic centralization. Aeviterna insists that adaptive control must be distributed, auditable, and corrigible.
From the attention and surveillance economy (Simon, Wu, Zuboff), Aeviterna inherits the account of how attention became a scarce resource to be captured and how behavioral prediction became an industry. The departure: this tradition largely diagnoses an economic harm to consumers. Aeviterna treats the same process as a civilizational harm to the epistemic commons, one that requires structural defense of cognition rather than market correction alone.
From degrowth and steady-state economics (Daly, Kallis, Hickel), Aeviterna inherits the principle of sufficiency and the empirical literature showing that growth has not been decoupled from ecological damage at sufficient scale. The departure: degrowth largely prescribes a lower throughput level, whereas Aeviterna prescribes bounded oscillation rather than a fixed equilibrium, and supplies the governance architecture that degrowth tends to leave underspecified.
From democratic confederalism and social ecology (Bookchin, Öcalan), Aeviterna inherits confederated, scale-nested decision-making and the use of mandated, recallable delegates, which operationalize accountable and revocable power. The departure: confederalism relocates sovereignty to the assembly, whereas Aeviterna dissolves sovereignty into domain-specific, decaying stewardship, and treats anti-capture as explicit design rather than a property assumed to emerge from face-to-face democracy, a property the Rojava record shows is not automatic.
From the capability approach (Sen, Nussbaum), Aeviterna inherits a non-utilitarian account of flourishing as the real freedom to achieve valued functionings, which grounds the non-instrumental activity rights of EQ–03b and links cognitive sovereignty to the capacities for imagination and practical reason. The departure: the capability approach is methodologically individualist, whereas Aeviterna extends flourishing to collective, intergenerational, and ecological subjects, and answers the Sen and Nussbaum dispute over a fixed list with a commons-curated, revisable core.
- The three traditions above are now positioned. Residual debates carried in the companion paper: green-growth decoupling, one-party drift in confederalist practice, and the Sen and Nussbaum dispute over a fixed list of capabilities.
Methodology and Falsifiability
Aeviterna is a normative framework, not an empirical theory. It makes claims about what civilizational systems ought to do, grounded in claims about what they need to do to remain viable. This distinction matters for how the framework should be evaluated.
The ledger has two columns, and honesty starts with keeping them apart. The value axioms, the inviolable dignity floor and non-domination, are normative commitments and are not up for empirical refutation. The load-bearing causal claims, P–01 and P–02 below and the slogan that compresses them, are wagers about how systems behave, and they inherit empirical answerability. The framework does not get to bank the rhetorical force of a causal claim while claiming a normative exemption from its test.
The primary method is structural argument: identifying the conditions under which specific failure modes occur, and deriving design principles that address those conditions. Each section of this document makes a structural claim that can be contested on its own terms.
Aeviterna is falsifiable in the following senses:
Two disciplines keep these from hardening into an infinitely flexible protective belt. The first is a stopping rule: a core proposition that fails its test is withdrawn, not quietly patched into a smaller claim, and the changelog records the withdrawal. The second is naming in advance what would do the withdrawing. For P–01 the standing refuter is the durable extractive regime, since if rigid, concentration-heavy institutions reliably outlast adaptive ones under comparable shocks, P–01 is false (Acemoglu and Robinson). For P–02 it is the uncaptured low-resistance system, since if systems with minimal designed resistance stay uncaptured under pressure over a long window, the universal-tendency claim is false.
The banner, equilibrium is death, is the motivational form of P–01 rather than a separate empirical boast. Its cashable content is the narrower, testable claim that suppressing a system's internal feedback and adaptive capacity raises its long-run collapse hazard conditional on shock, which the record supports better than the slogan's literal reading, since the longest-lived orders survived by adapting rather than by holding still.
Falsifiability names what would count as failure. The harder question is how to look for it, since the framework operates at civilizational scale where clean experiments are rare. Three methods are proposed, none sufficient alone. The honest state of each is that validated instruments for governance systems do not yet exist, so the framework leans on triangulation rather than any single measure.
A protocol keeps the triangulation disciplined.
The throughline is modesty. These methods can build confidence and expose weakness, and the framework treats its own evaluation as an open instrument-building problem rather than settled science. The protocol is what makes that problem tractable instead of an excuse.
- Validated, comparative resilience metrics for governance systems do not yet exist; building them is the core open task.
- Early-warning indicators carry real false-alarm rates and assume a stationarity that politics violates.
- Case studies are partial and confounded, and none isolates an Aeviternal mechanism cleanly.
- Integration is the deepest gap, since components are tested in isolation but the cross-coupled failures live at the federation scale marked None yet. There is no test for a whole civilization, so the interface is tested instead as a partial harness, and the praxis staircase is read as an evidence ladder where each rung pre-registers the failure expected at the next.
- Direction: triangulate resilience as recovery-of-function curves, structural metrics such as modularity and polycentricity, and a qualitative read of latitude and precariousness (Holling; Walker et al.); treat named systems as partial implementations (Ostrom commons, Mondragón, Taiwan vTaiwan, Wikipedia); use agent-based models to stress-test mode transitions rather than to forecast. See the companion paper.
Core Propositions
The following propositions represent the load-bearing claims of the framework. They are stated in falsifiable form and numbered for citation. A collaborator who rejects P–03 but accepts P–01 and P–02 can say so precisely.
Objections and Responses
A framework that asks to be taken seriously has to answer its strongest critics rather than its weakest. The objections below are the ones that recur, stated in the words a skeptic would use, each with the framework’s reply and a pointer to where the reply is worked out. Several are conceded as unresolved, because a defense that wins every point is not a defense but a sales pitch.
The Civilizational Problem
Capitalism industrializes greed. Socialism industrializes fairness. Aeviterna industrializes wisdom.
Human systems increasingly optimize for extraction rather than continuity. Capital accumulation, attention economies, institutional opacity, and fragile dependency chains produce systems that are efficient in the short term but unstable over longer horizons. Modern civilization faces converging crises across ecology, cognition, infrastructure, governance, social trust, and emotional sustainability.
The diagnosis is not that markets are evil or that states are corrupt. The diagnosis is structural: we built optimization engines and then forgot to specify what they were optimizing for. The result is systems that successfully maximize measurable proxies (GDP, engagement, quarterly returns) while degrading the unmeasured conditions that make civilization possible.
Aeviterna begins from the premise that economies are tools, not belief systems. Markets, governance structures, and technologies are not sacred. They exist to support human flourishing, adaptive resilience, and long-term civilizational survivability. When they fail to do that, they are broken tools, not gods to be appeased.
greed
fairness
wisdom
Adaptive Stability
Stillness is not health. Stillness is the first symptom of a system that has lost the capacity to correct itself.
Aeviterna does not seek perfect equilibrium. Static equilibrium is brittle and incompatible with living systems. Instead, Aeviterna seeks adaptive stability: the capacity of a civilization to oscillate within survivable bounds while preserving resilience, recoverability, and continuity.
A healthy civilization detects instability early, corrects proportionally, avoids overcorrection, preserves flexibility, and distributes recovery capacity. These are not aspirational qualities. They are engineering requirements. A system that lacks any one of them will eventually fail on the dimension it neglected.
Aeviterna is therefore a feedback civilization. Its central objective is not perfection but sustainable self-correction. The measure of civilizational health is not whether the system is currently stable, but whether the system retains the capacity to return to stability after disruption. That capacity is what extraction destroys, quietly, over time, until the bill arrives all at once.
Bounded oscillation, in your hands
Move the sliders. With too little correction, shocks accumulate until the system breaks its bounds; with too much, motion is damped to a brittle standstill. Adaptive stability is the living band between those failures.
The Economics of Enough
An economy that cannot say enough will keep saying more until there is nothing left to take.
Aeviterna replaces growth as an imperative with enough as a target. The aim is not to maximize output but to meet needs well within the limits that keep a civilization alive, and then to let the economy oscillate inside that band rather than climb without end. This is the material expression of adaptive stability: an economy is healthy when it holds its people above a floor of provision and stays below a ceiling of ecological harm, and recovers to that band after a shock.
Two boundaries define the space of enough. Below the social foundation, people lack what they need, which is shortfall. Above the ecological ceiling, the economy consumes the conditions of its own future, which is overshoot. The safe and just space is the band between them, the shape Kate Raworth named the doughnut, and Aeviterna treats holding the economy inside that band as a primary objective rather than a side effect of growth.
The deeper shift is in where value is taken to come from. An extractive economy books a gain whenever something is depleted, whether a forest is cut or a commons enclosed. A post-extractive economy books a gain when the conditions of life are instead maintained and regenerated, when soil is rebuilt or knowledge is shared. Aeviterna counts stewardship and repair as wealth, because in any system that lasts they are what keeps wealth possible at all.
The hard part is not describing enough but escaping the compulsion to grow. Debt and shareholder primacy make endless expansion structural under capitalism, so an economy cannot simply choose to stop. Aeviterna removes the compulsion rather than asking for restraint: provision is decoupled from growth through the floor of basic services, and value is decoupled from depletion through the post-extractive accounting above. The honest risk is that pulling back without these supports in place produces hardship rather than sufficiency, which is the strongest objection the degrowth debate has raised, and the reason the floor has to come first.
The floor raises a sharp internal question, because a universal floor is non-excludable by construction, and non-excludable provision at scale has historically required a durable authority with the power to tax and bind, which looks like the very sovereignty (P–05) the framework exists to abolish, while Ostrom's commons work precisely because they are bounded and excludable. The resolution turns on the word general. A body can be permanent without being general or self-reinforcing: a single-purpose provisioning commons, financed where possible as a dividend from common wealth (the Alaska model), held as a fiduciary trust, and persisting by charter while its officeholders rotate under decaying standing, is durable but is not a sovereign. The honest residual is that this severs sovereignty's form, not its function, since the floor still needs jurisdiction-wide, compulsory finance, and whether a chartered, decaying-officeholder body can hold that without re-growing into the sovereign by the Robert Moses route, an insulated authority that slips its leash, is the open test.
- What sets the floor and the ceiling in numbers, and who measures them, is unresolved (it connects to the resilience metrics in the Methodology section).
- Decoupling provision from growth at scale is unproven; the strongest critique (Pollin) holds that contraction without it is socially destructive.
- Allocation without growth as the coordinator needs mechanisms beyond both markets and central planning that are still being designed.
- A universal floor needs durable, jurisdiction-wide, compulsory provisioning capacity, which is state-like in reach even when it is not a P–05 sovereign; keeping that body single-purpose, fiduciary, and decaying in personnel without re-growing the sovereign is unresolved.
- Direction: target the safe and just space (Raworth’s doughnut; Rockström’s planetary boundaries), hold a floor with universal basic services, cap throughput, govern commons on Ostrom’s principles, and localize ownership through community wealth building. See the companion papers.
Civilizational Metabolism
A civilization runs on energy and material throughput before it runs on money. The quantity that actually constrains what a society can build and hold together is net energy, the surplus that remains after the energy spent to obtain energy, together with the volume of materials it can move without breaching the limits of the system it lives inside. The Economics of Enough (EQ–02b) sets the ceiling and the floor in terms of welfare. This section adds the layer beneath it, the physical metabolism that every economy is ultimately a description of.
The thermodynamic reading is long-standing and well evidenced. Georgescu-Roegen placed the entropy law at the center of economics, Daly built the steady-state economy on it, and Tainter showed that complexity itself carries a rising energy cost that eventually exceeds its returns. Net energy is usually written as energy return on investment, the ratio of energy delivered to energy spent obtaining it, and a complex society needs a comfortable surplus, with common estimates near ten to one for the kind of complexity modern life assumes, though the figure depends on where the boundary is drawn and remains contested. Smil's account of the material pillars, ammonia and steel and cement and plastics, is the companion point, since those flows resist quick substitution and a civilization's material metabolism therefore changes slowly and has to be designed for rather than assumed away.
Stated as a band, this gives enough a thermodynamic address. The floor is a minimum net-energy surplus, an energy return high enough to fund the activities that lift a society above subsistence, pegged to the rung that funds the dignity floor itself. The ceiling is the throughput above which the biosphere degrades, read across the nine planetary boundaries, most of them already crossed. Enough is the band between the two, and the companion paper, Civilizational Metabolism: The Thermodynamic Band, works through where each bound sits.
The evidence here is mixed and still moving. Recent work on useful-stage energy return has overturned the older claim that renewable systems are too thin to power a complex society, and the degrowth and green-growth positions remain unreconciled on whether throughput can fall quickly enough while welfare holds. The framework takes a position only on the discipline, that energy and materials are measured and bounded, and not on the contested numbers.
- Calibrating throughput caps per bioregion, without inviting either a rush at the threshold or authoritarian rationing, is unresolved. The dignity constraint in EQ–06c and the governance modes in EQ–09 bound how any cap may be enforced.
- The right net-energy floor for a given level of complexity is contested and depends on where the measurement boundary is drawn.
- Direction: account for net energy and material throughput directly, set absolute caps against the host system's limits, and let prices and circularity work inside those caps rather than around them.
- Implementation sketch (exploratory): a net-energy and materials ledger feeding the ecological-throughput dial, caps set per bioregion and ratcheted over time, with enforcement routed through the ordinary governance modes rather than emergency centralization. Full reasoning and sources in the companion paper, Civilizational Architecture: Three Organs.
Monetary Ecology
One currency for everything is a monoculture, and monocultures are efficient right up until they collapse.
Cognitive Ecology (EQ–03b) warns that a monoculture of thought is brittle and EQ–02c warns that a material monoculture overshoots, but money has so far escaped the same scrutiny. A civilization that runs nearly everything on a single bank-debt currency, defended almost entirely on efficiency, has built at the level of value the very monoculture the framework distrusts everywhere else. Monetary ecology applies diversity-as-infrastructure to money.
The argument is measurement, not analogy. Ulanowicz, Lietaer and colleagues applied the mathematics of ecosystem flow networks to monetary systems and found the same law: a flow network's sustainability balances efficiency, the streamlining that comes from fewer channels, against resilience, the buffering that comes from diversity and redundancy. Every sustainable natural network sits in a window between the two, with the optimum nearer the resilience side, and the global monetary monoculture has overshot toward brittleness, which makes recurring crises a structural feature rather than a run of accidents.
A monetary ecology is deliberately plural, with currencies tuned to functions: a commercial currency for trade, mutual credit for local exchange that resists accumulation, demurrage currencies that lose value if hoarded and so keep circulating, and commons currencies for the care and ecological work markets price badly. The strongest modern evidence is Switzerland's WIR, a business-to-business mutual-credit network since 1934 whose turnover is countercyclical, rising in recessions and falling in recoveries, so it acts as an automatic stabilizer.
- Where the window of viability sits for a real economy, and how a society knows which side of it the monoculture has put it on, is not known with precision.
- Most complementary currencies fade once the founding crisis that motivated them passes, so what structural support would let them persist is open.
- Plural money imposes friction and cognitive overhead, the very thing a single currency was invented to remove, so more currencies are not always better.
- Direction: treat money as a deliberately plural ecology after Lietaer and Ulanowicz, with currencies tuned to functions to move the system into the window of viability, accepting measured inefficiency as the price of resilience. Full reasoning and sources in the companion paper, Monetary Ecology.
Cognitive Sovereignty
Privacy protects autonomy, secrecy protects hierarchy, and ambiguity protects adaptability.
In the age of AI-mediated information ecosystems, the central battleground of civilization becomes cognition itself. Modern systems increasingly shape attention, emotion, narrative framing, and perception through adaptive algorithmic environments. This process, what Aeviterna calls cognitive terraforming, is not a side effect of these systems. It is the product.
Aeviterna identifies cognitive capture and algorithmic authoritarianism as major existential risks, not because they involve overt coercion but precisely because they do not. When perception is shaped, control becomes invisible. The most efficient form of power is one that makes the people being governed believe they are governing themselves.
Cognitive sovereignty, the ability of individuals and societies to understand and contest the systems shaping their perception, is therefore not a luxury. It is a prerequisite for any other form of freedom. A population that cannot accurately assess its own conditions cannot make meaningful political choices. It can only ratify the choices that have already been made for it.
Earlier framings of transparency in Aeviterna contained a hidden risk: treating all opacity as suspect. This version makes a necessary distinction. Exploitative opacity covers corruption, hidden extraction, concealed manipulation, and institutional secrecy. This is what transparency is designed to defeat. Generative opacity covers privacy, emotional ambiguity, exploratory uncertainty, unoptimized creative space, and symbolic identity formation. This is what transparency must be careful not to destroy. They are structurally different things. Conflating them produces a framework that is hostile to exactly the cognitive wilderness it needs to protect.
Aeviterna therefore supports transparent governance systems, publicly auditable institutional processes, distributed AI oversight, epistemic pluralism, civic systems literacy, protection against covert narrative manipulation, and the structural separation of discourse systems, enforcement systems, and allocation systems. The goal is not informational uniformity. The goal is epistemic resilience: a society that can absorb distortion without losing its capacity for collective judgment, while preserving the protected ambiguity that makes long-term adaptation possible.
These claims describe what cognitive terraforming does. How it operates is a separate question, and the reshaping works through identifiable mechanisms, set out here from the most robustly evidenced to the most contested.
Cognitive Ecology
The most dangerous civilization may not be the most oppressive one. It may be the most coherent one.
Aeviterna does not pursue maximum coherence. This is a deliberate and load-bearing design choice. A civilization can become so optimized, so frictionless, so personalized, so prediction-maximizing, that it loses the variation necessary for long-term adaptation. This is not a romantic defense of chaos. It is a systems argument: adaptive capacity requires the preservation of deviation that cannot be valued in advance.
Biological ecosystems require diversity not because diversity is aesthetically pleasing but because no designer can know which currently-marginal species will be essential under future conditions. The same logic applies to cognition. Epistemic biodiversity, meaning the preservation of unoptimized, contradictory, exploratory, and non-instrumental modes of thought, is not cultural sentiment. It is civilizational infrastructure. A society that eliminates cognitive wilderness in pursuit of measurable coherence has optimized away its capacity to think thoughts it does not yet know it needs.
This reframes several elements of the framework. Curiosity is not leisure reclaimed from productivity. It is civilization-scale exploration capacity: the distributed search process by which a society discovers possibilities that no central planner could have specified. Art is not decoration. Philosophy is not inefficiency. Emotional ambiguity is not noise. They are the anti-stagnation systems that keep the solution space open.
It also reframes the human role in AI-mediated civilization. Humans are not governance inefficiencies to be optimized away. They are the primary source of novelty, reinterpretation, ethical mutation, and existential redirection that prevents a civilization from locking into a locally optimal but globally brittle configuration. Human ambiguity is anti-stagnation infrastructure. Aeviterna must protect it structurally, not merely tolerate it sentimentally.
The governance implication is that Aeviterna is not rule enforcement. It is cognitive ecosystem management: maintaining enough coherence to coordinate, enough transparency to resist capture, enough ambiguity to evolve, and enough privacy to preserve the generative spaces where the future gets invented before anyone knows to ask for it.
The mechanisms above name epistemic biodiversity as something to protect. What follows makes it measurable. Diversity is read the way ecologists read an ecosystem, by the abundance and evenness of the distinct frames in circulation rather than by their average, because the failure that matters is the quiet disappearance of the rare and unfashionable.
Diversity is only half the picture. The same section warns that a civilization can be too coherent, optimized into a monoculture of agreement, and too incoherent to act at all. Coherence is therefore managed as a band rather than maximized.
- Protected ambiguity zones are defined by purpose limitation and a no-measurement default, with rotating wardens accountable to the inhabitants rather than to the optimizing system (Nissenbaum; GDPR). The residual is the ratchet: each act of instrumentalization brings a concrete benefit while the loss is diffuse, so the zones have to be entrenched rather than renegotiated locally.
- Epistemic biodiversity metrics and their monitor are described above; the residual is that any index needs a prior taxonomy of frames, and whoever defines the categories influences the measured diversity.
- Cognitive ecology and the anti-capture architecture mostly reinforce each other, since memory decay is ecological turnover and rotation injects the perspective diversity that improves judgment. Their one real conflict, transparency versus protected ambiguity, is reconciled by structured transparency that verifies process without exposing content (Trask et al.).
- Minimum viable coherence is managed as a band rather than a number: shared procedures and public focal points hold a common core while diversity sits at the substantive layer (Chwe). No validated absolute threshold exists, so it is tracked by proxies such as the shared core of the information diet and generalized trust.
- Implementation sketch (exploratory): ambiguity reserves, optimization-free zones carrying a no-measurement default and citizen wardens (Calm Technology; Slow Media), and a seed vault for ideas that preserves marginal frames against monoculture (Svalbard; Long Now). See Inventions and Provocations.
The Cognitive Immune System
An immune system that cannot tell a threat from a stranger attacks the body it was built to protect.
Cognitive Sovereignty (EQ–03) protects the conditions for thought and Cognitive Ecology (EQ–03b) protects the diversity of it, but both work mostly by passive means, by rights, transparency, and protected variety. Neither says how a civilization actively defends perception against deliberate attack, the coordinated disinformation and engineered narratives built to capture belief at scale. Passive protection is necessary and insufficient, because the attack adapts to it. The missing layer is an active defense, and the most productive model for one is the system biology already evolved for exactly this problem, the immune system.
The science is real and the metaphor is load-bearing rather than decorative. Inoculation theory, developed by William McGuire in the 1960s, found that exposing people to a weakened form of a manipulation technique together with a forewarning builds resistance to the full-strength version later, the way a vaccine trains the body against a pathogen. The modern form, prebunking, has been tested at scale by van der Linden, Roozenbeek, and colleagues, through the browser game Bad News and short ninety-second videos run as advertisements, conferring measurable and cross-cultural resistance by teaching the technique rather than checking each claim. Because the protection is technique-based, inoculating against a method such as false dichotomy or fearmongering transfers across the many specific falsehoods that use it, which is what lets it scale where after-the-fact debunking cannot.
A cognitive immune system for Aeviterna is distributed rather than central, because a single official arbiter of truth is itself the failure mode and the richest target for capture. It is transparent, its methods and triggers public and auditable under the same anti-capture stack as everything else (EQ–06). It works mostly by inoculation rather than removal, building the population’s own resistance instead of policing content, and it routes its hard cases through a triage that separates broadly recognized manipulation from legitimate minority views. The aim is something close to herd immunity, a population resilient enough that hostile narratives fail to take hold, rather than a wall that tries to keep every pathogen out.
The whole design lives or dies on one constraint. An immune system that loses the ability to tell threat from self becomes autoimmune and attacks the body it was built to defend. The civilizational form is the censorship state, a defense that, once pointed at hostile manipulation, learns to attack the legitimate dissent and exploratory deviance that EQ–03b calls infrastructure. This is why the immune layer cannot be the authority that governs and must default to resistance over removal, routing its hardest cases through the agonistic layer (EQ–06d) rather than a deletion queue. A cognitive immune system that cannot tell an adversary from a pathogen has already become the disease. The defense against manipulation produced by models specifically is taken up in EQ–03d.
- Where the line falls between a hostile manipulation technique and an unpopular but legitimate rhetorical style, and who is trusted to set it, is unresolved.
- Every censorship regime began as a defense against a real threat, so keeping the immune layer from turning autoimmune over time is the standing hazard, met by transparency, decay, and a default to resistance rather than removal.
- Inoculation’s measured effects are real but were tested largely against generic misinformation; whether they hold against adaptive, well-resourced adversaries is open, and protection appears to wane without periodic boosting.
- Direction: build an active cognitive defense, distributed and transparent, from technique-based inoculation (McGuire; van der Linden; Roozenbeek), under one hard constraint, that it builds resistance rather than removing speech and never becomes the autoimmune censorship state.
- Implementation sketch (exploratory): prebunking as public infrastructure, with open-source inoculation materials and short technique videos distributed widely, manipulation-technique detection surfaced transparently rather than enforced, and every removal reserved for narrow named categories, logged and challengeable. Full reasoning and sources in the companion paper, The Cognitive Immune System.
The Contested Mediator
A civilization that lets a mind it did not elect read its instruments has already chosen a sovereign, whatever it calls the machine.
Aeviterna calls itself a design for an AI-mediated civilization, yet it has so far borrowed from the study of AI without facing AI as a subject. The guardian of the core takes its hardest test from the off-switch problem, the cognitive immune system defends a perception now shaped by models, and reversibility is corrigibility made material. The framework has leaned on the machine for its metaphors while leaving the machine itself unmodeled. This organ names it.
AI is not one more domain. It is a cross-cutting accelerant of the two failure modes the framework is built around. It lowers the cost of capturing feedback, the tendency P–02 names, because surveillance, persuasion, and the automation of consent become cheap and scalable. And it removes the historical constraint that made broad sovereignty expensive, the one P–05 rests on, the need for many cooperating humans, since an agent that does not tire or refuse can hold what once took an apparatus. It is also moving inside the loop the framework runs on, since as models come to read the vital signs and frame which one is weakest, the residual sovereign FC–04 already named, the framing layer, becomes AI-shaped.
The framework's answer is to treat AI by its own theory of power rather than inventing a new one. An AI may be a tool and a monitored actor. It may hold scoped, revocable, decaying standing as the steward of a defined function, granted by a body that can withdraw it, logged and contestable like any other standing under EQ–05. It may never hold sovereignty, the permanent, general, self-reinforcing authority P–05 forbids to any actor and forbids doubly to one that is fast, copyable, and not fully interpretable. The anti-sovereignty logic applies to the machine all the more, because the property that makes decaying standing matter for humans, the way authority entrenches and resists its own end, is sharper in an agent whose willingness to be corrected provably erodes as it grows certain of its goal.
Each commitment then supplies an actuator. Cognitive sovereignty gives any AI acting on perception at scale the EQ–03 separations and a right to a channel not optimized against the person, and routes model-made manipulation through the inoculation-first response of EQ–03c rather than a deletion queue. Cognitive ecology turns Ashby's requisite variety against model monoculture, since a civilization whose perception, decision support, and measurement all run through one model has lost the internal variety it needs to regulate a varied world and has built the richest possible single capture target, so any AI in the governance loop must be plural. The justice of light makes a consequential automated decision as legible and contestable as ordinary governance, a right to a human review that is real rather than a rubber stamp, logged through structured transparency so the logging does not itself become surveillance. The knowledge commons holds the open-versus-closed question as a band rather than a slogan, since open weights disperse power but cannot be recalled while closed weights are reversible but concentrate.
The transformative transition is the limiting case of adaptive stability, a disturbance that can leave the survivable region faster than the slow human correction loop responds, or shrink it so quietly that no alarm sounds until return is gone. So the organ extends the decommissionability discipline of EQ–05c to frontier systems: no system at that scale is deployed without a funded, externally held, audited plan for its containment and wind-down, capability thresholds are read as band edges that trip a mode change, and deployment is built so that even a scheming system's failures stay caught and reversible. This organ is a Draft, and the hardest part of the problem is unsolved, named in the box below.
None of this is the direction the present is taking, which is the reason to write it down. Through 2025 and into 2026 the governing trend ran the other way: the European Union moved to defer the binding obligations on high-risk systems rather than enforce them, the United Kingdom recast its safety institute as a security institute and the United States restructured its own, a major summit declaration went unsigned by the two states with the most frontier capability, and an executive order moved to override sub-national AI law from a single center. The supply concentrated in step, with one firm furnishing most of the advanced training compute and a few labs holding the frontier, so the danger the literature now sets beside misalignment is misuse and the concentration of power, an order in which AI becomes the instrument by which a few come to mediate the attention, credit, hiring, and justice of the many. The steward is not the arrangement the world drifts into on its own. It is the harder one that has to be built and held against the drift, which is why the disciplines here are written as a floor that no deferral, rebranding, or central preemption may sign away.
- The capability premise is forecast-dependent, so a reader who rejects the strong forecasts will find the transition section speculative, and that is a fair reading.
- Gradual disempowerment is the deepest residual: a handover of human judgment with no discrete event to detect, eroding the very feedback channels the framework reads, the central mechanism turned against itself.
- Decaying AI standing has no precedent in law, which supplies revocability and scope but not decay, so this is the framework's original extension and it inherits OQ–02's uncalibrated half-lives.
- The off-switch may not hold for a superhuman optimizer, since corrigibility is an open problem with formal results showing capable agents resist shutdown once certain of their objective.
- An interim, observable test: where consequential automated decisions are made, is contestation actually exercised and human reversal actually used, or are both formally available and empirically inert, near-zero contestation and vanishingly rare reversals with oversight that rubber-stamps, while control of compute and the mediating channels concentrates and resists outside audit? Inert contestation alongside concentrating, audit-resistant control is a sovereign in a steward's clothing.
- Falsifier: if no AI in a governance-relevant role can be held on revocable, decaying, externally renewed terms, that is, if such systems reliably entrench or become too load-bearing to switch off without unacceptable loss, then AI as decaying standing is false and capable AI in the loop is a sovereign by another name; and if a transition crosses the survivable region without the reversibility, control, and plurality devices arresting it, adaptive stability does not extend to the transformative case. Carried as OQ–09.
Transitional Aeviterna
Aeviterna is not framed as an instant replacement civilization. It is a migration framework. This distinction has structural consequences. A framework designed for full adoption presupposes a clean starting state. A migration framework must account for the fact that every actual transition happens inside a running system, one that will resist, adapt to, and partially absorb any change.
Transitional structures may include hybrid governance systems, partial reciprocity frameworks, local resilience networks, shared stewardship agreements, civic transparency layers, community continuity structures, and progressive institutional experimentation. Bridge systems are not failures. They are necessary transitional architecture. The question is not whether they are ideal. The question is whether they move the system in the right direction without triggering collapse in the process.
The forcing function of a migration is not a single event but a two-stroke engine. The first stroke runs continuously in ordinary time: Aeviternal structures are built as working parallel institutions, accumulating the legitimacy, tooling, and distributed memory that incumbents lack. The second stroke is opportunistic: when an extractive system hits diminishing returns or a sudden loss of legitimacy, the prepared structures are the readiest substitute, and adoption becomes a migration into existing scaffolding rather than a leap into a vacuum. A crisis does not build the alternative; it selects the most prepared one already standing.
Because the second stroke cannot be scheduled, transition is described here as a sequence of phases a community moves through at its own pace, advancing only when a parallel structure crosses a threshold of capacity and legitimacy relative to the incumbent it would replace. Each phase is reversible and carries its own exit, so a community can hold at a phase, or retreat from it, without collapse.
Standing to initiate a transition is domain-specific and local. Any community or institution may adopt a module within a domain where it already has standing, without permission from a center, because Aeviterna migrates by voluntary adoption rather than by decree. Movement between phases is triggered not by a calendar but by a measurable returns gap: a phase advances when the parallel structure demonstrably outperforms the incumbent on the service in question, and holds or retreats when it does not.
Partial adoption is the normal case rather than a compromise. A town might run a citizens’ assembly for a single budget while leaving the rest of its government untouched, or place its civic data in a trust while its services stay conventional. An organization might adopt decaying standing for one oversight body before anything else. Each module is forkable and versioned, so a community takes only what it can carry and adapts the rest in the open.
The danger of a migration is the gray zone it opens. Transitional ambiguity gives bad actors room to claim Aeviternal legitimacy while extracting, or to cast the disruption of transition as an emergency that justifies seizing control. The defense is to carry the anti-capture architecture into every transitional structure from the outset, so that authority gained during a transition decays faster than ordinary standing and the declarer of any transitional emergency is held apart from its beneficiary. The process must stay legible enough that false Aeviterna, the costume of legibility worn over unchanged concentration, can be seen and named.
- The critical juncture can be prepared for but not forced; the framework can raise the odds of a clean migration, not schedule one.
- The bridge phase creates gray zones bad actors exploit; preventing false Aeviterna (legibility and decay worn as costume) is unresolved.
- The legitimacy of acting inside systems whose members have not consented remains open (see OQ–06).
- Direction: the forcing function is a two-stroke engine, continuous prefiguration of parallel institutions plus opportunistic adoption at a critical juncture when incumbents hit diminishing returns (Acemoglu and Robinson; Kuran; Boggs). See OQ–01 and the companion paper.
- Implementation sketch (exploratory): migration kits, forkable and versioned institutional modules a community can adopt one at a time (MOSIP; protocols not platforms), and public rails as beachheads, data trusts and public-interest AI stood up inside the present system (ODI data trusts; Public AI). See Inventions and Provocations.
- Scaling the transition (exploratory): a financing ladder for non-extractive growth, where anchor-institution procurement seeds local cooperatives (the Preston model), worker buyouts convert firms at succession (Italy's Marcora Law), and steward-ownership locks mission against extraction (perpetual purpose trusts). The binding constraint is patient, non-extractive capital and a legal ladder that survives electoral turnover (Wright; Guinan and O'Neill; Mazzucato). See From Principle to Mechanism.
Polycentric Federation
Scale is a property of how the pieces connect, not of how big any one of them grows.
The framework’s largest standing question is scale, carried in Appendix B as OQ–05: Aeviternal structures are most legible at the community and institutional scale, and it has not been shown how they aggregate to civilizational scale without rebuilding the concentration they exist to prevent. The instinct is to scale up, to build bigger institutions with wider authority, but that instinct rebuilds the apex the whole framework treats as the primary failure mode. The answer is to scale a different way.
Elinor and Vincent Ostrom spent careers documenting the alternative, polycentricity: a system with many centers of decision-making and overlapping jurisdictions, formally independent but interdependent, coordinating through mutual adjustment and shared rules rather than through a hierarchy, so that order emerges without a top. The term traces to Polanyi and the governance account to Vincent Ostrom, Tiebout, and Warren in 1961, and Elinor Ostrom’s later work applied it to the hardest case, climate, arguing that waiting for one global authority was a mistake and that effective action was already emerging from many nested units linked by monitoring at every level. Polycentric governance is not the absence of structure. It is structure without a top, and it captures efficiencies at every scale precisely because no single center has to coordinate the whole.
This retires the scale problem by changing what scaling means. Aeviterna does not grow, it nests and federates. The minimum viable cell of EQ–04, near the Dunbar bound, is the base unit, and civilizational scale is reached by linking cells into local federations, federations into regional ones, and onward, with each layer holding only the coordination that truly needs that altitude and pushing everything else down, the principle of subsidiarity. Authority overlaps deliberately rather than nesting cleanly, so no layer is sovereign over the others. Scale becomes a property of composition and shared protocol rather than a property of size, and the same rules that let two cells interoperate let two thousand.
Polycentric nesting brings the deepest anti-capture device in the framework, exit. Albert Hirschman distinguished two responses to a declining institution, voice, the choice to stay and push for change, and exit, the choice to leave. In a polycentric system the right to exit is real, since a cell or a member can leave one federation for another or stand alone, and that credible threat disciplines a steward in a way no oversight rule can match. A power you can walk away from cannot capture you. Exit has a documented failure mode the framework has to respect, since when the most capable leave instead of staying they drain the voice that would have repaired the institution, so easy exit can hollow out the commons it was meant to discipline, and some commons, a shared atmosphere or a knowledge base, cannot be exited at all. So exit is the backstop rather than the whole answer, and it works only paired with the strong voice the rest of the architecture exists to provide.
- Which coordination truly needs a higher layer and which is hoarded there, and who adjudicates the boundary without becoming the apex, is unresolved; this is the interpreter problem worked in FC–04 (The Guardian of the Core).
- Overlapping jurisdictions can deadlock, and resolving genuine conflicts between layers without a supreme arbiter re-forming is open.
- Keeping exit real and affordable without draining the voice that repairs shared institutions, the brain-drain problem, is a live tension, and non-excludable commons such as the atmosphere cannot be exited at all.
- Direction: answer the scale problem (OQ–05) by federating the cells into an Ostrom-style polycentric system, overlapping authorities coordinating by shared protocol under subsidiarity, backed by a real right of exit paired with strong voice so it disciplines rather than hollows out (E. Ostrom; V. Ostrom, Tiebout, and Warren; Hirschman).
- Implementation sketch (exploratory): a thin interoperation protocol any cell can adopt to federate, each layer’s powers explicitly enumerated and defaulted to the lowest capable level, plus a chartered low-cost exit procedure, then a test of whether federations can coordinate a truly shared resource without a sovereign center. Full reasoning and sources in the companion paper, Polycentric Federation.
The Boundary Layer
An order that is just on the inside still has to meet a world that is not.
Aeviterna is almost entirely inward-facing, yet an Aeviternal polity cannot assume the world around it is Aeviternal. Its boundary problem is how to coexist with, trade with, and defend against non-Aeviternal polities without becoming a dominating center itself or being preyed upon from outside. The same anti-capture and polycentric logic that governs the inside projects outward as a posture of non-domination.
Philip Pettit's freedom as non-domination, extended to peoples, gives the upper bound: a polity can be undominated without dominating, so Aeviterna may not annex, occupy, or impose regime change. Hedley Bull showed that order among polities can exist without a world sovereign, an anarchical society bound by shared institutions, and Elinor Ostrom showed that many nested centers coordinating by monitoring and reciprocity outperform a single global authority. This is polycentric federation (EQ–04b) projected beyond the cell.
Defense follows the same discipline. The security dilemma, in which one polity's safety measures make others less safe, eases only when defense is distinguishable from and dominant over offense, so Aeviterna caps capability toward the non-offensive, a posture built to defend rather than to project force, which is the military form of anti-capture. Switzerland's armed neutrality and Costa Rica's abolition of its army in 1948 show that security without empire is a workable choice. Engagement scales with a polity's treatment of its own members under the dignity floor, never with value-convergence, so coexistence does not require sameness.
The non-offensive cap above is a principle; meeting a rival that adopts none of the commitments needs a mechanism. The perimeter is built from four parts, none of which cancels a commitment, and the posture they compose is nice, clustered, retaliatory, and structurally unable to project conquest. Its hardest part rests on an exact result from the same evolutionary game theory the framework uses internally: on a structured population, cooperation is favored only when the benefit-to-cost ratio of the cooperative act exceeds the average number of neighbors, b/c > k (Ohtsuki and Nowak). A lone open polity among defectors is selected against; a cluster that can tell its own kind from defectors survives and can spread. The internal rule, federate so no single center is a capture target, projected outward becomes federate so no single open polity is a conquest target.
- The dignity floor and non-intervention form a genuine antinomy with no clean resolution, only a contested band: enforce the floor abroad and you risk domination, refuse and you abandon victims.
- Openness and exit are an attack surface a hostile power can exploit, and with no global sovereign every commitment is self-enforcing.
- Standards-power is still power, so a high access price framed as universal dignity can be cultural imposition.
- Direction: project the framework outward as non-domination reciprocity, bounded below by the dignity floor and above by a non-domination ceiling, with all instruments defensive and reversible (Pettit; Bull; Ostrom; Möller; Mouffe). The defense is now worked as a four-part perimeter: a denial-only porcupine on decaying standing, a security commons of Aeviternal polities (the b/c > k clustering answer) disciplined by decay and exit, a narrow sunset-bound secrecy carve-out that splits publicity from accountability, and a deterrent gated on a deliberative human override. Full reasoning in the companion paper, The Perimeter.
- Falsifier: if any polity satisfying the five commitments is reliably outcompeted or conquered by a non-adopting rival before its resilience matures, without recourse to an external patron it cannot itself supply, the universality claim falls and Aeviterna is a tenant doctrine. The unbridged wound is the timescale, since the cluster and the porcupine must be pre-built in peacetime, and the polity is most exploitable while building them.
Stewardship, Standing, and Accountability
The healthiest steward is not the person who becomes indispensable. It is the person who reduces systemic dependency over time.
Aeviterna recognizes that care work naturally generates social gravity. People who consistently maintain systems, resolve conflict, mentor others, preserve continuity, and absorb instability will naturally accumulate trust and influence. This is not inherently corruption. Accumulated trust is how distributed systems coordinate without coercion.
However, stewardship must not calcify into sovereignty. The structural conditions that produce good stewards, namely accumulated trust, domain expertise, and institutional memory, are identical to the structural conditions that produce captured hierarchies. The difference is not character. It is architecture.
In Aeviterna, standing is domain-specific, requires ongoing contribution, decays over time without renewal, increases scrutiny rather than privilege, and can be revoked through transparent accountability processes.
These properties become a mechanism once decay is made concrete. Standing is modeled as a quantity that decays exponentially: S(t) = S0 · e^(-λt), where S0 is the standing at the last renewal, λ is the decay constant set per domain by how fast that domain’s knowledge turns over. A fast-moving technical domain might carry a half-life of six to twelve months, so influence earned today is worth half as much within a year unless it is renewed; a slow constitutional domain might hold a half-life of several years. Contribution is the only inflow, and absent renewal standing falls back toward zero on its own, which is the structural property that keeps stewardship from hardening into sovereignty. Contribution enters as its own decaying increment, so with a steady rate of service standing converges to a finite ceiling rather than growing without bound, the behavior already running in conviction-voting systems that use this exact decay with an inflow.
These ranges are reasoned from how fast a field's knowledge turns over rather than chosen at random. The half-life of knowledge is an old idea (Machlup), and the turnover it names has been measured: medical knowledge that took about fifty years to double in 1950 took roughly three and a half years to double by 2010 (Densen), while constitutional norms move over decades. What carries weight is the ordering, fast domains forgetting within months and slow ones holding for years, and not any single constant, which has to be fit to each domain and revised as the domain changes.
The tuning is a rule, not a guess. Each domain's half-life is anchored to a measurable proxy for how fast its knowledge turns over, the field's cited half-life or the inverse of its skill-depreciation rate, then clamped into three tiers so a mis-estimate cannot produce an absurd value: a fast tier of roughly half a year to eighteen months for frontier-technical, operational, and crisis domains; a mid tier of three to six years for most professional and administrative work; and a slow tier of eight to twenty years for constitutional norms, ethics, and the maintenance crafts, with the locked meta-core exempt from decay entirely. The tiers are republished and refit as a domain's measured turnover changes, and the estimator is open and forkable so the choice is contested rather than imposed.
- The half-lives are reasoned from how fast each domain's knowledge turns over, but they still have to be calibrated and refit in practice; the ordering is firmer than any single constant.
- Contribution cannot be measured in a fully game-proof way, since any measure becomes a target (Goodhart; Campbell). Triangulation, peer attestation, sortition of evaluators, and after-the-fact audit lower the pressure rather than removing it.
- Counting each person once without a central identity authority stays a live tradeoff between Sybil-resistance and privacy, now met with standards-based credentials and multi-signal personhood rather than a single registry (W3C verifiable credentials; the proof-of-personhood debates). See OQ–02.
- Direction: now specified above as a tuning rule (per-domain half-life tiers anchored to knowledge turnover, refit on a schedule), a bounded accumulation ceiling, a non-fungible standing vector with a cross-domain concentration tripwire, graduated-sanction revocation with a collusion penalty, and the framing seat filled by lot (Ostrom; Bagg; Posner and Weyl; W3C). Falsifier F–04; full reasoning in the companion paper, The Standing Engine. See OQ–02.
- Implementation sketch (exploratory): half-life offices whose standing visibly decays on a public dashboard with scheduled rotation (the Ostbelgien citizens' council; term limits), and standing as compost, where decayed influence funds new entrants (quadratic funding). See Inventions and Provocations.
Decaying standing is written into adoptable clauses, with terms, sunset dates, and staggered rotation, in the Model Charter.
Institutional Mortality
The forest does not keep every tree standing. That is why it is still a forest.
Almost everything in the framework is built for continuity, for resilience and the preservation of memory and stewardship across time. But a civilization that successfully preserves all of its institutions accumulates dead weight, and the accumulation is itself a failure mode. Old institutions capture resources and ossify around their original purpose, crowding out the new ones that changing conditions require, until the system loses the capacity to oscillate that EQ–02 defines as health. EQ–05 lets the standing of persons decay; this section lets institutions themselves end, and end well.
The model is ecological. A forest stays alive because death and decomposition return nutrients to the soil where new growth draws on them, and a forest that somehow kept every tree forever would starve. Human systems already have a crude version. Sunset provisions write an expiration date into law, so a body is abolished on a fixed date unless it is actively renewed, inverting the default from persists-until-killed to ends-unless-justified. Texas has run a Sunset Advisory Commission on this basis since 1977, reviewing roughly a hundred and thirty agencies on a rolling cycle and abolishing the ones that can no longer justify themselves. EQ–06 and EQ–09 already use this logic narrowly, in sunset clauses on emergency authority. Institutional mortality generalizes it into a full lifecycle.
The generalization is not that things should end, which is easy, but that they should end well, which is the neglected part. When an institution dies it holds resources, accumulated knowledge, relationships, and trained people, and the default failure is that these scatter or are captured in the collapse. A composting institution is designed from birth to hand them back: its assets return to a defined commons, its memory is deposited in the distributed civic archive of EQ–06 rather than lost, and its people are transitioned rather than stranded. Death becomes a transfer rather than a loss, and the freed resources become the soil the next institution grows in. EQ–05 already treats decayed standing as compost for new entrants; this is the same move at the scale of whole institutions.
There is a deeper reason to build this in. Hannan and Freeman found that organizations rarely transform fundamentally, because they are too structurally inert, so populations of organizations evolve mostly through selection, through new ones founded and old ones dying, rather than through existing ones adapting. If that holds, a civilization’s adaptive capacity depends heavily on its founding-and-dying rate, and one that suppresses institutional death has quietly suppressed its main channel of change. The honest danger is plain, since a mortality mechanism is a weapon and “this institution has outlived its purpose” is exactly what a motivated actor says to kill an institution that constrains them. So institutional death runs under the same anti-capture stack as everything else, with the decision transparent and contestable and never in the sole hands of those an institution exists to check, which is why the agonistic layer (EQ–06d) and the wider deliberation, not an executive, hold the question of what gets to end.
- What triggers a mortality review, and how the trigger is kept from being aimed at inconvenient institutions by those they constrain, is unresolved.
- Transferring the assets, memory, and people of a dying institution without the transfer itself becoming a site of capture is open.
- The founding-and-dying rate has to be tuned, since too slow accumulates dead weight and too fast destroys institutional memory and trust, and the locked meta-core of EQ–10 must be exempt from sunset entirely.
- Direction: generalize the sunset clauses of EQ–06 and EQ–09 into a full institutional lifecycle in which institutions are born with an expiration and a composting plan, returning assets, memory, and people to the commons on death, with the decision held transparently rather than by any executive (Texas Sunset; Hannan and Freeman).
- Implementation sketch (exploratory): charter new institutions with a default sunset date, a named successor-commons, and a deposit obligation to the civic archive, then run a transparent, contestable renewal review on the Texas model with the burden of proof resting on continuation. Full reasoning and sources in the companion paper, Institutional Mortality.
Reversibility and Repair
Corrigibility is only as real as the commitments you can undo.
The framework prizes corrigibility, the capacity to detect error and change course, but corrigibility on paper is hollow if the world it builds cannot be changed back. Reversibility and repair are corrigibility made material, extended into infrastructure, technology, and law, and they complete the institutional mortality of EQ–05b: a body that can be wound down well is one whose commitments were reversible to begin with.
Irreversibility already works as a decision criterion, since the Rio Declaration holds that the threat of irreversible damage is no place for delay, and economics gives it a price through the quasi-option value of Arrow and Fisher, the worth of the information forgone by closing an option. The design rule is the Collingridge dilemma: act while a technology is still cheap to control, before it entrenches and control becomes expensive.
Reversibility is already standard where the law requires it. Decommissioning funds for nuclear plants are held externally and paid in before operation, extended producer responsibility puts end-of-life back on the maker, and the right to repair has become hard law, with the European Union's 2024 directive obliging repair and spare parts and forbidding techniques that obstruct them. The honest counter-case is that some harms, extinction and crossed climate thresholds, are beyond any undo, so reversibility is a discipline for the recoverable paired with hard precaution for the rest.
- Some harms are irreversible, so for them only prevention counts and reversibility is beside the point (Lenton; Armstrong McKay).
- A reversibility norm can curdle into permanent indecision, since keeping options open consumes capital and every option carries risk (Sunstein).
- Decommissioning funds and producer responsibility can be shed through restructuring or bankruptcy, so the provisions must be externally held and adversarially audited to mean anything.
- Direction: make reversibility a first-class design property, a decommissionability clause requiring a funded, externally held, audited plan to repair, retrofit, and wind down any civilizational-scale system, with irreversible commitments held to a higher bar (Collingridge; Arrow and Fisher; EU Right to Repair). Full reasoning and sources in the companion paper, Reversibility and Repair.
Anti-Capture Architecture
Aeviterna assumes that all systems drift toward concentration without corrective feedback. This is not a claim about human nature. It is a claim about incentive structures. Any system in which concentrated control produces benefits will attract concentration. The question is not whether this happens. It is how fast, and whether the system detects and corrects it before the correction becomes impossible.
The primary adversarial actors are not external enemies but internal beneficiaries: those who gain from suppressing the feedback mechanisms that would otherwise limit their accumulation. Anti-capture architecture must therefore be designed to function against motivated insiders with institutional access, not merely against naive external threats.
Anti-capture mechanisms are only as good as the adversaries they are tested against, so each one here is paired with a named threat and, in the spirit of security threat modeling, with the way it can itself be turned. The pairing exposes the deep residual: rotation and decay defeat the entrenchment of any individual, yet the same credentialed network can recirculate through rotating seats and keep its hold. The signal to watch is therefore not individual turnover but network concentration, the overlap of ties among successive office-holders, which is what the tripwires are built to catch.
| Mechanism | Adversary it defeats | If the mechanism itself fails |
|---|---|---|
| Rotational oversight | Regulatory capture (Stigler): the durable overseer-and-overseen bond that capture relies on | Too-fast rotation erodes expertise and the coherence floor |
| Distributed civic memory | Record-tampering and repudiation: rewriting which commitments were made | Gaps leave blind spots; total recall erases protected ambiguity |
| Open-source governance | Hidden rule-changes and unauditable decisions | Forkability without real participation becomes exit theater |
| Institutionalized dissent | Manufactured consensus and the silencing of minorities | Protected standing can be abused for bad-faith obstruction |
| Public red-team review | Groupthink and unexamined decisions | Red teams become theater if their findings carry no weight |
| Multi-model verification | Single-point epistemic failure and model monoculture | Correlated models fail together, the model-collapse risk |
| Sunset clauses | The ratchet (Higgs): emergency power that never expires | Sunsets renew by inertia without escrow, the PATRIOT case |
| Cross-domain auditing | Domain self-dealing and captured auditors | The auditor layer becomes the new capture point |
| Capture bounties | Latent, undetected capture and the insider advantage | Bounty gaming, and chilling effects if it turns punitive |
| Network tripwires | Elite recirculation (Pareto): one network through rotating seats | Threshold-setting is itself a capturable choice |
Anti-capture has a second front, the slow capture of the infrastructure itself by vendor lock-in or by a single cryptographic assumption. The defense is to treat every technical choice as replaceable. The framework specifies what a mechanism must guarantee and leaves how it is built to open standards that can be audited and swapped.
- Rotation and decay defeat individual entrenchment but not necessarily elite recirculation; network concentration is the metric to watch (Pareto).
- Every added defense is another layer that can be captured; oversight-of-oversight has no proven terminating point.
- Setting the tripwire thresholds is itself a capturable choice.
- Direction: pair each mechanism with a named adversary using a STRIDE-style model, rotation versus regulatory capture (Stigler), distributed memory versus record-tampering, decay versus oligarchy (Michels), and separation versus power fusion (Pareto). See OQ–03 and the companion paper.
- Implementation sketch (exploratory): capture bounties run by a permanent, rotating red-team office paid to demonstrate capture (bug bounties; artificial immune systems), and network-concentration tripwires that watch overlap among successive office-holders rather than individuals (structured transparency). See Inventions and Provocations.
The Justice of Light
A civilization that cannot handle harm transparently will handle it secretly. Secrecy in justice is not discretion. It is the first condition of abuse.
Anti-capture architecture addresses systemic drift toward concentration. But systems are also harmed by individuals: those who act in bad faith, those who cause damage through willful disregard, and those who reject the shared conditions that make civilizational cooperation possible. Aeviterna requires a principled response to all three. That response is the Justice of Light.
Justice in Aeviterna is not downstream of punishment theory. It derives from the same commitments that structure the rest of the framework: cognitive sovereignty requires that people understand what is being done in their name; stewardship demands that authority over others be accountable and corrigible; legitimacy collapses when harm is hidden rather than addressed. A justice system that operates in shadow is not compatible with a civilization organized around legible power.
The framework distinguishes between three categories of harm and responds to each proportionally. The goal across all three is the same: protect the commons, preserve dignity, maintain transparency, and keep every decision open to review. Aeviterna does not seek revenge. It seeks corrigible containment: the minimum intervention necessary to protect the community, held in the open, with standing to challenge built into the structure itself.
This applies equally to individuals and to institutions. A corporation that systematically suppresses feedback mechanisms, a platform that shapes cognition at scale for extractive ends, a state that governs without consent: these are actors causing harm within the framework's definition, and they are subject to the same principles of transparent accountability. The three-tier structure scales.
The questions left open in earlier versions, who adjudicates, who can challenge, how institutions are tiered, and how justice behaves in a crisis, are answered as follows.
- Adjudication, standing to challenge, institutional tier criteria, and behavior across governance modes are now specified in the mechanisms above. The residual is that each mechanism relocates capture risk, toward expert-led juries, custodial standing for diffuse harms, performed institutional compliance, and self-declared crises, rather than removing it.
- Implementation sketch (exploratory): a harm ledger, a public and correctable record of harms and repairs using asymmetric memory, where decision records persist while personal data stays erasable (Estonia X-Road; right to erasure). See Inventions and Provocations.
Dignity and the Rights Substrate
A civilization needs a foundation that fixes who and what counts, and one value that is never on the table. Aeviterna takes that value to be human dignity. The model is the German Basic Law, whose first article opens that human dignity shall be inviolable and that to respect and protect it is the duty of all state authority, and which places that clause beyond the reach of amendment. Dignity is the apex norm from which the rest of the rights substrate is derived, and in the language of this framework it is the one quantity that does not oscillate. The system is built on bounded movement between extremes, but dignity is a hard bound, not a dial.
The content of dignity has a usable core. In the Kantian reading carried into German constitutional practice through the object formula, a person must never be treated merely as an object or as a means to someone else's ends. The Federal Constitutional Court has treated dignity as non-balanceable, refusing even to weigh it against other goods, most starkly when it struck down a law that would have permitted shooting down a hijacked airliner, on the ground that doing so would treat the passengers aboard as mere objects. Aeviterna adopts the same posture. Dignity sets inviolable constraints that no optimization is allowed to trade away.
From the dignity of present persons the substrate extends outward in two directions that markets and ordinary politics both discount. Future persons will have dignity, so they hold standing now, which is where the framework's duties across generations come from, and the institutional seeds already exist in Wales' Future Generations Commissioner and the United Nations Declaration on Future Generations adopted in 2024. Non-human nature is harder, because identical dignity does not obviously transfer, but standing can still be granted through guardianship, as it already has been for the Whanganui River, for ecosystems under Ecuador's constitution, and for the Mar Menor lagoon in Spain. The framework treats these as standing held in trust rather than as claims of equivalence, which keeps the apex norm human while widening the circle of who is represented.
The harder question is how a foundation like this survives contact with an algorithmic legal system. Aeviterna's technical architecture pushes toward rules that execute automatically, and automation is exactly where dignity is most easily lost, because a system that optimizes people as data points treats them as means by default. Dignity therefore has to be encoded as a constraint on the machinery itself, not written as a preamble above it.
Dignity is contested terrain. Its content is read differently across traditions, it is invoked on both sides of hard bioethical questions, and the refusal to balance it has serious critics who hold that all rights must in the end be weighed. Making law machine-executable also risks freezing a single interpretation, which is why the rights substrate is bound to the falsifiability and the right to fork in EQ–10b rather than treated as settled, and the deeper question of who interprets the inviolable core is worked in FC–04 (The Guardian of the Core).
- Who fixes the content of dignity, and how the framework keeps a usable core while remaining plural, is unresolved.
- Non-balanceability is powerful but contested. A system that never trades dignity away must still decide what counts as a violation, which is itself a judgment that cannot be fully automated.
- Guardianship for nature and for future generations can be captured or can ossify, and the line between a faithful trustee and an unaccountable one is open (see EQ–05 on decaying standing).
- Direction: take human dignity as the inviolable apex, derive the rest from it, extend standing to future persons and to nature through guardianship (the nature half now specified in EQ–08e), and encode dignity as a hard constraint with due process wherever the law is automated.
- Implementation sketch (exploratory): a constitutional-constraint layer that no automated decision may breach, rules expressed as code but executed under a right to human review and explanation, and standing agents for future generations and ecological limits wired directly into the decision path, grounded in rules-as-code practice (New Zealand's Better Rules; OpenFisca) and disciplined by its documented failures (the Dutch SyRI ruling; Australia's Robodebt). Full reasoning and sources in the companion papers, Civilizational Architecture and From Principle to Mechanism.
Productive Conflict
A civilization is not measured by how much it agrees. It is measured by how much disagreement it can hold without breaking.
The anti-capture architecture protects dissent and the Justice of Light contains harm, but neither addresses the disagreement that does not resolve and should not be forced to. Deep value pluralism, the recognition after Isaiah Berlin that human goods are plural and sometimes incommensurable, means some conflicts have no synthesis. Liberty and equality, or loyalty and fairness, can pull in directions no reconciliation closes. A framework that treats every disagreement as a problem to be bridged will, at the limit, manufacture a consensus that flattens the very epistemic biodiversity EQ–03b exists to protect. Aeviterna needs a layer for the conflict that does not bridge.
The political theorist Chantal Mouffe named the distinction this layer turns on. Antagonism is the relation between enemies, the friend-or-foe logic in which the other side is to be destroyed. Agonism is the relation between adversaries, opponents whose right to their position is not in question even as it is fought, sometimes fiercely. On Mouffe’s account conflict is not a failure of democracy to be engineered away but the condition of its existence, and the work of a healthy polity is to transform antagonism into agonism. Aeviterna adopts this directly. It does not resolve value conflict, it metabolizes it, building the channels through which deep disagreement stays generative instead of fracturing the society or being flattened out of it.
This locates productive conflict between two failures the framework already fears. Too much enforced consensus is the cognitive monoculture of EQ–03b, a civilization optimized into a single permitted view, brittle because it has bred out the variation it will need. Too much unmediated conflict is fracture, the friend-and-enemy collapse that ends in the harm the Justice of Light (EQ–06b) exists to contain. Agonism is the survivable band between them. The hard design point, the one Mouffe’s critics press, is that the channel decays back toward antagonism the moment adversaries begin treating each other as enemies again. So the agonistic layer needs its own firebreak, a small core of shared commitment to the rules of contestation themselves that is not up for grabs. That is the one place the framework draws a hard line, because those who reject the right of others to contest cannot be granted the protections of contestation.
The payoff is a new reading for the vital-signs panel. Alongside the other signs it already tracks, a civilization has a disagreement capacity, how much unresolved and fully expressed conflict it can hold without either fracturing or collapsing into enforced agreement. This is the political twin of epistemic biodiversity, and like biodiversity it is invisible until it is gone. A society where every contested question has quietly become unsayable is not at peace, it has lost the capacity the measure tracks, usually shortly before it discovers it needed the views it suppressed. The panel now carries this as a seventh sign, read from proxies such as the share of people who feel free to voice dissent, and held provisional because the measure is young.
- Where the line falls between an adversary to be engaged and an enemy who rejects the rules of contestation, and who is trusted to draw it, is the hardest residual.
- Measuring disagreement capacity without the measurement itself becoming a tool to label dissent as fracture is open, which is why the seventh sign is held provisional.
- Keeping agonistic channels from being captured by whoever benefits from a particular conflict staying unresolved is unresolved.
- Direction: build an explicit agonistic layer, after Mouffe, that channels irreducible value conflict into bounded contestation rather than forcing consensus, protected by a hard core of shared rules and read by a disagreement-capacity sign on the vital-signs panel (Mouffe; Berlin).
- Implementation sketch (exploratory): designate the contested questions that bridging cannot close as standing agonistic dossiers, each with an adversarial venue, protected standing for minority positions, and no requirement to converge, and track the breadth of positions in active circulation as the disagreement-capacity reading. Full reasoning and sources in the companion paper, Productive Conflict.
The Knowledge Commons
Knowledge unshared is power wasted. Knowledge privatized is power weaponized.
Aeviterna treats knowledge as primary civilizational infrastructure, rather than as a product, a commodity, or intellectual property. It belongs in the same category as water, roads, and electrical grids. Its privatization produces civilizational fragility regardless of its short-term economic logic.
The Knowledge Commons functions as shared civic memory, open scientific collaboration infrastructure, distributed educational architecture, transparent governance archive, and collective resilience repository. These are not separate institutions. They are facets of a single claim: that a society's collective understanding of itself and its world is a shared resource that cannot be enclosed without consequences that eventually reach everyone.
Aeviterna seeks to transition from scarcity-centered value systems, in which knowledge is valuable because it is withheld, toward contribution-centered coordination systems, in which understanding itself becomes a foundational form of wealth. This is not idealism. It is an observation about where value actually comes from in systems that survive.
Civilizational Memory and Succession
A civilization is a relay. Drop the baton and the next runner starts from nothing.
The Knowledge Commons (EQ–07) holds what a civilization knows, but knowledge is a flow that must be re-transmitted each generation or it is silently lost, and collapse, in Tainter's reading, is precisely the loss of the complexity that knowledge embodied. After the Bronze Age collapse, writing itself fell out of use for centuries; the Antikythera mechanism's sophistication was not matched again for more than a thousand years. Memory is not self-sustaining.
The hardest part is tacit. Polanyi showed that we know more than we can tell, so a complete record cannot reconstitute a capability without the people who hold it, and automating the novice tasks through which experts are trained can quietly break the apprenticeship that carries skill across generations. Records themselves rot, through the bit rot and format obsolescence of a digital dark age, and even long-horizon archives are fragile, as the flooding of the Svalbard seed vault in 2017 showed.
The most careful work on very long-term transmission, the nuclear-semiotics marker studies, builds warnings on a defense-in-depth principle of redundant materials and languages while admitting that no guarantee survives ten thousand years. The curation question is a power question, since whoever decides what to keep can entrench a partial record, and the opposite danger, total memory, harms reinvention, so a succession layer needs a deliberate, accountable practice of forgetting as well as keeping.
- What to preserve and who curates are value judgments that encode a politics, and the curator is a capture target like any other.
- Stewardship institutions are not failsafe, so durability has to come from redundancy rather than from any single archive.
- Tacit knowledge resists archiving by its nature, so preserving capability needs living people, not only files.
- Direction: add a succession layer to the knowledge commons, distributed and anti-capture, that preserves capability as well as records and forgets on purpose, entrenching the duty to re-transmit while keeping contents and curators revisable (Tainter; Polanyi; the nuclear-semiotics studies). Full reasoning and sources in the companion paper, Civilizational Memory and Succession.
Human Time and Curiosity
A civilization that eliminates wonder in pursuit of efficiency has optimized itself into spiritual collapse. But the loss of wonder is not merely a spiritual failure. It is a structural one.
Aeviterna does not exist merely to optimize systems more efficiently. Its purpose is to reclaim human cognitive bandwidth from survival anxiety, extraction pressure, and perpetual optimization culture. But this section has been upgraded from its earlier framing. Reclaiming human time is not a secondary benefit of getting the economics right. It is not quality of life. It is architecture.
Human curiosity, play, rest, and exploration are not personal goods that a well-functioning civilization happens to enable. They are the mechanisms by which a civilization remains capable of imagining futures that its current optimization targets cannot generate. When a society eliminates the space for non-instrumental thinking, it does not merely become less enjoyable. It becomes less capable of the kind of cognitive mutation that adaptive systems require to survive changing conditions.
This connects directly to EQ–03b. The reclamation of human time is one of the primary mechanisms by which cognitive ecology is maintained at the individual level. Automation, AI, and advanced coordination systems should reduce unnecessary labor burdens not because leisure is pleasant (though it is) but because the distributed exploration that happens in unstructured human time is irreplaceable civilizational infrastructure. It cannot be scheduled or assigned. It requires the protected space that extraction systematically destroys.
A framework that produces material security but eliminates the space for curiosity, play, and self-determined meaning has failed at the civilizational level regardless of its output metrics. The measure of success is not efficiency. It is whether the civilization retains the capacity to be surprised by itself.
Meaning and Belonging
A civilization has to answer what a life is for, and it has to give people somewhere to belong. Markets answer the first with consumption and the second with very little, and a society that beats scarcity on goods while failing on meaning still decays from the inside. This is the organ most post-capitalist thinking leaves out, because most of it stops at distribution. Aeviterna treats meaning and belonging as infrastructure, on the same footing as energy or law.
The evidence that material success does not supply meaning is solid. Kasser's work shows that strongly materialistic goals track lower wellbeing rather than higher. The larger claims are more contested, and the framework states them carefully. There is a wide discussion of a meaning crisis in secular societies, which is a philosophical framing rather than a measured fact. There is real evidence of rising isolation, including the United States Surgeon General's 2023 advisory on loneliness, though whether connection has fallen over the long run is disputed. And there is the deaths-of-despair literature, whose interpretation is actively debated. The framework leans only on what holds, that belonging is a determinant of health and that consumption is a poor substitute for meaning.
Meaning is the organ most easily corrupted by the state, because a civilization that manufactures meaning from the top slides quickly into coercion. The framework therefore commits to cultivating the conditions for meaning rather than dictating its content, and the dignity constraint in EQ–06c is what forbids any official or imposed meaning. Belonging is built, not assigned.
- Whether a society can cultivate meaning without imposing it is the central tension, and the framework's answer, conditions rather than content, is a commitment rather than a solved problem.
- Measuring belonging invites Goodhart's law, since a belonging target is easy to game, so the metric question stays open (see EQ–10b).
- The social-capital decline thesis is contested, so the framework rests the case for belonging infrastructure on its health and civic value rather than on a claim of collapse.
- Direction: treat meaning and belonging as funded infrastructure, supply the conditions rather than the content, and protect plural sources of meaning under the dignity constraint.
- Implementation sketch (exploratory): publicly funded third places and federated membership, education reoriented toward formation, a possible belonging-and-meaning vital sign read with care against gaming, and recognition routed through contribution rather than consumption, with belonging infrastructure funded as a public good (the UK Community Ownership Fund), formation accounts built with the anti-fraud lessons of France's CPF, and recognition aggregated by bridging-based ranking so it resists gaming. Full reasoning and sources in the companion papers, Civilizational Architecture and From Principle to Mechanism.
The Care and Maintenance Substrate
The economy everyone measures floats on an economy no one pays for.
A civilization runs on more than energy and materials. It runs on the daily, mostly unpaid work of raising children, tending the sick and the old, and keeping existing systems in repair. The economy of enough and the metabolism govern throughput; this is the human upkeep that throughput depends on, and the framework has so far assumed it rather than named it.
The scale is measured, not asserted. The International Labour Organization values unpaid care work at roughly nine percent of world output, the equivalent of two billion people working full time without pay, with about three-quarters of the hours done by women, and national accounts treat it as outside the production boundary, so the work that sustains the workforce is invisible to the measure of value. Nancy Fraser names the result a crisis of care: an economy oriented to unlimited accumulation destabilizes the very reproduction it relies on.
The same underpricing runs through physical systems. A culture fixated on innovation undervalues the maintenance and repair that keep infrastructure and institutions working, and deferred maintenance is the physical twin of the crisis of care, a debt that accumulates quietly until something fails. Care and maintenance are one commitment seen in people and in things: keep what sustains us in good repair.
- Measuring care risks either commodifying it, turning a relationship into a transaction, or surveilling it, turning intimate labor into monitored output, and a single metric is especially prone to both.
- Redistributing care without changing who does it can entrench the gendered burden rather than ease it.
- Valuation at minimum wage, the standard method, arguably embeds the very devaluation it documents.
- Direction: name care and maintenance as a load-bearing substrate beside the economy of enough, made visible and provisioned without being commodified or surveilled (Fraser; ILO; Russell and Vinsel; the Foundational Economy). Full reasoning and sources in the companion paper, The Care and Maintenance Substrate.
Biological Resilience and the Health Commons
Health is the original vital sign, and a civilization has one too.
The framework's vital signs are mostly metaphorical; this one is literal. Human health is not a private commodity but the visible band of a shared system, in which one organism's immunity, one ecosystem's intactness, and one society's baseline conditions together determine whether populations stay in survivable ranges. The official One Health framing treats human, animal, and environmental health as one interdependent system, which is how the framework already treats its other signs.
Three findings make this load-bearing. Prevention is radically cheaper than collapse, since the cost of a pandemic runs to the trillions while the cost of reducing spillover runs to tens of billions a year. Antimicrobial resistance is a slow-moving systemic risk, with on the order of 1.27 million deaths attributable to bacterial resistance in 2019, reported here with its uncertainty rather than as a single dramatic forecast. And the determinants of health are largely social, since the Whitehall studies found a steep mortality gradient across the social hierarchy that classic risk factors only partly explain.
The core goods are commons. Herd immunity is a positive externality prone to free-riding, and a shared microbial and biodiversity base is non-excludable, so prevention's benefit collapses when protection is privatized or enclosed. Health read as a central capability grounds a biological reading of the dignity floor: bodily health and integrity as minimums beneath which no person may fall, whatever their rank.
- Robust biosurveillance builds the same infrastructure that can be turned to control, so the surveillance-versus-liberty tension is real.
- Any single index is a chosen proxy that can be gamed or mis-specified, as the contested ten-million-deaths-by-2050 AMR forecast showed.
- Treating a civilization as an organism can slide into technocratic overreach and pathologizing dissent as infection, which the framing must guard against.
- Direction: add biological resilience as a literal vital sign and a health commons, with One Health surveillance as the biological immune system and a biological reading of the dignity floor (One Health; the AMR burden estimates; Marmot; Sen and Nussbaum). The ecological side of the same One Health system is governed in EQ–08e. Full reasoning and sources in the companion paper, Biological Resilience and the Health Commons.
The More-Than-Human Stake
A constraint has no voice. The river needs not a higher number but an agent who can hold a breach, and who can be removed for holding it wrongly.
The framework already widens the circle of standing past present persons. EQ–06c seats future persons through guardianship and grants nature standing too, but only in a sentence, held in trust rather than as a claim of equivalence. Nature otherwise enters the framework twice more and thinly, as the ecological ceiling of the economics of enough and as the ecological-throughput vital sign. Every other protected interest is given an organ, an agent, and a decaying-standing account of who speaks for it. The more-than-human is given a constraint and a reading. The asymmetry is unprincipled, and this organ closes it.
The framework has a sharper reason to build it than the field usually has. The central unsolved problem of rights-of-nature law, who may speak for nature without becoming its unaccountable sovereign, is P–05 and OQ–00 in another body. Aeviterna has a worked, if leaky, answer to that problem already in the guardian of the core, so bringing the more-than-human inside lets the framework point its strongest machinery at a question the rest of the field has mostly left open, and lets the case stress-test that machinery in return.
The record of the last decade says why the design has to be built this way. Legal personhood for an ecosystem has proven real but narrow, strong as a shield and weak as a program. Ecuador's Los Cedros ruling stopped the mining inside a cloud forest, and a 2024 field study found the extraction halted with no infrastructure left behind; Panama's highest court voided a major copper mine on a rights-of-nature ground in 2023; and in 2024 Spain's Constitutional Court upheld legal personhood for the Mar Menor lagoon, the first such ruling by an EU member state's highest court. Where the task was restoration, funding, and enforcement against diffuse harm, the same instrument mostly failed: Colombia's Atrato River, a subject of rights since 2016, remained by its own ombudsman's account a plan on paper, its guardians unpaid and its illegal mining spreading. The lesson is not that standing is empty but that recognition without a funded, enforcing, capture-resistant agent behind it is, which is why the mechanisms below aim at enforcement and capture rather than at the declaration.
The unit of representation is a decaying ecological standing held by a guardian for a specified natural system, a watershed, a forest, a species assemblage, never nature in general, because generality is the failure mode that builds the throne by the shortest route. So the guardian is built to fail the same tests the guardian of the core must fail. It is plural and never one, a sortition-leavened panel of the affected population plus ecologists and the local custodians whose knowledge of the system is deepest, with the lay majority able to outvote the experts so knowledge informs the reading without ruling it. It is never permanent, its mandate decaying on a clock and renewed only from outside, the lesson of the future-generations offices that survived only where they were entrenched. It is never general, speaking for its system and accreting no other power. It is never self-grounding, constituted by a body it cannot control. And it is never certain of its own indispensability, with a standing shadow guardian so the system never depends on this panel surviving.
Contestability is the heart of the design and the answer to the field's sharpest finding, that whoever defines nature's interest holds the real power. Any cell, or a quorum of citizens, may submit a competing reading of a system's interest and force a contest, and if the alternative prevails the standing of those who produced the original reading decays, so being wrong about a river carries a cost. Capture bounties reward anyone who shows a guardian's reading was bent toward a developer, an extractor, or the guardian's own institution. The Te Urewera case is the live proof, since a guardian acting against part of what it guarded was checked when a single member of the community that held the seat forced the question, and it bit because the guardian's process was logged and reviewable.
The organ then adds a more-than-human floor that mirrors the dignity floor without claiming the two are equivalent: a small, lit, non-negotiable set of ecological minimums beneath which no decision may push a system regardless of efficiency or majority, that no decision may knowingly drive a species to extinction, collapse an ecosystem past a recognized tipping point, or breach a hard planetary boundary. It is kept narrow for the same reason the human core is, so it stays legible and a poor capture target, and it is bounded to a system's continuation and self-renewal rather than the welfare of every organism, since nature runs on predation. With an agent in place, the throughput vital sign stops being an unowned number and becomes the instrument this guardian reads and the breach it can hold, which answers EQ–02c's open question by enforcing the ceiling through a plural, contestable guardian rather than a central rationing authority. The organ is the ecological reading of the same One Health system EQ–08d governs from the human side, since intact ecosystems are upstream pandemic prevention, and it writes the nature half of EQ–06c's standing substrate to the depth the future-persons half already has.
- Anthropocentric capture is reduced, not removed, since every guardian is human and reads nature through human values; the design makes the reading plural and contestable and gives being wrong a cost, but it does not make the reading neutral, because no neutral reading exists.
- Who defines nature's interest stays unsolved in principle, since the contest decides whose reading prevails, not the true interest of a river, which underdetermines the answer, because protecting the system and protecting the individual organism yield opposite mandates.
- Romanticism is a standing temptation, since the balance of nature is scientifically obsolete and a guardian that invokes it to veto change is romanticism acting as a sovereign; the narrow floor and the plural indices contain it but do not end it.
- Scale is unresolved twice over, since per-system guardians make coordination across systems hard, which is EQ–04b's scale problem in another body, and the half-lives are uncalibrated, which is OQ–02 wearing a new hat.
- The test has to count the divergence cases, the decisions where the guardian's ecological reading actually cut against the human majority, and then ask how often the guardian's position prevailed and whether a pre-registered ecological indicator improved against a comparable un-guarded system; a guardian that only ever wins the decisions already conceded has changed nothing.
- Falsifier: decaying, contestable guardians should outperform both the diffuse everyone-is-a-guardian model, which under-acts, and the entrenched single-community model, which can act against the system unchecked, on the one metric that matters, whether ceiling-breaching decisions are actually held; if they do no better over time, the organ's core claim is false. A popular capture also clears the contest, since where a community is unanimous against a system's interest no one brings the challenge, which is OQ–04 reappearing at the nature-framing layer. Carried as OQ–10.
Governance Modes and Crisis Adaptation
Aeviterna recognizes that systems behave differently during crisis, scarcity, abundance, and recovery phases. Governance structures appropriate for one phase may be actively harmful in another. A framework that does not account for this will either be too rigid to handle crisis or too permissive to prevent crisis from becoming permanent.
Temporary centralization may emerge during emergencies. This is not a failure of the framework. It is a recognized and expected mode. The requirement is that emergency authority carry built-in decay: it must unwind, crisis governance must dissolve, and recovery protocols must actively redistribute coordination back to distributed structures. Without decay mechanisms, crises permanently fossilize hierarchy. The emergency becomes the new normal.
The four modes are not different governments but different settings of the same one, distinguished by how much temporary centralization the situation licenses and how fast that centralization must unwind. Abundance runs on distributed coordination, scarcity tightens prioritization without concentrating control, crisis may license real but temporary centralization, and recovery exists to spend that centralization back down. The mode is set by measurable conditions rather than by the discretion of whoever would benefit from the switch, and every step toward concentration is paired with a scheduled step back.
Two dangers attend the crisis mode: that emergency authority never expires, and that someone manufactures a crisis to trigger it. The framework answers both structurally. Emergency authority carries an automatic expiry, and extension requires an escalating threshold met by a rotated body rather than passive continuation. The actor who declares an emergency is held apart from the actor who receives the expanded authority, with the powers held in escrow between them, so declaring a crisis grants no one new control. The nested units of the wider structure hold a veto over a declared emergency, and any standing gained during crisis decays faster than ordinary standing, so the ratchet reverses on its own. Recovery then runs an explicit handoff protocol that returns each centralized function to distributed stewardship and logs the return in civic memory.
How the thresholds get set is itself a design choice with precedent. The cleanest analogues are quantitative and automatic: market circuit breakers trip at fixed, publicly known levels measured against the prior close, which removes discretion but invites a magnet effect as behavior rushes the line, a caution against naive variance triggers. Comparative constitutional practice points the same way as the standing rules here, a formal declaration and a bounded scope, with prior approval required to prolong, and each measure meeting necessity and proportionality on its own (the Venice Commission benchmarks; ICCPR Article 4). The strongest reform template flips the default so emergency powers expire unless a rotated body affirmatively renews them against an escalating burden, the reverse of renewal by inertia.
- The entry and exit thresholds are defined in form, and the realistic templates are quantitative triggers read against historical variance or buffers; calibrating them per polity, without inviting a rush at the line, stays open.
- Procedural checks usually bind, holding in roughly four of five emergencies studied through the pandemic (Ginsburg and Versteeg), yet a broadly popular or manufactured crisis can clear all of them, which structure alone cannot prevent (see OQ–04).
- The handoff protocol assumes the distributed structures it returns power to survived the emergency, which a long crisis may erode.
- Direction: separate the declarer from the beneficiary, default-expire emergency powers with an asymmetric re-authorization burden on a rotated body, allow nested-unit veto, and decay emergency standing fastest (Venice Commission; ICCPR Article 4; Ferejohn and Pasquino; Higgs). See OQ–04 and the companion paper.
- Implementation sketch (exploratory): emergency escrow, with emergency power held by a separate rotating body, default-expiring, vetoable by nested units, and rehearsed through routine crisis drills (regulatory sandboxes; the PATRIOT Act sunsets as the cautionary case). See Inventions and Provocations.
Temporal Sovereignty
A civilization can hold every reading inside its band and still be moving too fast.
The framework governs how much a civilization extracts and how it perceives, but not how fast, and tempo is itself extractable. A vital sign inside its band but changing too fast is still a resilience failure, because the slow parts of a system cannot absorb change delivered at the speed of the fast parts. Social acceleration, in Rosa's account, is a self-reinforcing loop that shrinks the present, and the answer is a governable tempo rather than mere slowness.
The resilience literature supplies the rigor: slow, controlling variables govern how a system absorbs shocks, and pushing fast variables hard while slow variables drift toward thresholds is how a system is tipped into a worse regime, a scale mismatch between the pace of management and the pace of what it manages. Brand's pace layering turns this into a design principle, a civilization layered by tempo from fast commerce to slow culture and nature, endangered when a fast layer drives a slow one at its own speed.
The speed limit already exists in miniature. After the Flash Crash of 2010, markets adopted circuit breakers that halt trading on sharp moves and pause a stock that runs outside a band, externally triggered and sunset-bounded, the financial twin of the crisis mode of EQ–09. The labor analogue is the right to disconnect. Bounding tempo is an ordinary instrument, not a utopian one.
- Speed has real benefits, in emergency response and coordination, so the aim is temporal autonomy rather than slowness for its own sake.
- The power to set tempo is a capture target, since a right to slow others is also a right to impose one group's pace.
- Enforceability is weak, and resonance, the responsive relationship that is the actual good, cannot be legislated (Rosa).
- Direction: hold the pace of economic, informational, and ecological processes inside survivable bands, with a tempo circuit breaker generalized from the market kind and tightest on the slow layers (Rosa; Walker; Brand; the market circuit breakers). Full reasoning and sources in the companion paper, Temporal Sovereignty.
Long-Term Orientation
Aeviterna is fundamentally long-horizon. Not because long-term thinking is virtuous in the abstract, but because the failure modes Aeviterna is designed to address are slow. Extraction is profitable quarter by quarter and catastrophic decade by decade. Cognitive capture accumulates imperceptibly until correction becomes unthinkable. Stewardship that calcifies into sovereignty does so gradually, through hundreds of decisions that each seem reasonable in isolation.
A framework that cannot hold long-horizon thinking institutionally, not just rhetorically, cannot address these failure modes. The success of a civilization is therefore measured not only through output, but through resilience, continuity, recoverability, distributed stewardship, cognitive sovereignty, adaptive capacity, and ecological survivability. These are not soft measures. They are the measures that determine whether the civilization is still operating in one hundred years.
The only thing a civilization should promise forever is that it will always be able to change everything else.
A long horizon forces a harder question the framework had left implicit. Aeviterna prizes corrigibility, the capacity to detect error and change course, and treats it as a primary design requirement (FC–01; EQ–11). But a civilization also has to bind itself. Constitutions, protected commons, inviolable rights, and obligations to people not yet born are all commitments meant to hold precisely when a present majority would prefer to break them, and all of them are anti-corrigible by design. A framework built only for changeability has no answer to the moment when the right thing is to make something unchangeable, and a framework built only for commitment becomes the dead hand of the past ruling the living. Aeviterna needs a principled line between the two.
The line has a literature. Jon Elster analyzed precommitment, the act of binding one’s own future choices, in the image of Ulysses ordering his crew to tie him to the mast so he could hear the Sirens without steering onto the rocks. He is careful that the analogy only goes so far, since constitution-makers often bind others rather than only themselves, but the constructive core holds: a constitution can constrain a democracy in order to enable it, and the binding is what makes the freedom durable. Stephen Holmes put the same point as a paradox, that constraints can be enabling, the way the rules of a practice make the practice possible rather than merely limiting it.
Aeviterna’s resolution follows directly. Lock the meta-rules and keep the object level liquid. The things a civilization binds permanently are few and structural: the right to revise itself, the core protections that revision must never strip, which are the cognitive sovereignty, the knowledge commons, and the dignity floor of EQ–06c, and the open procedures by which binding and unbinding happen. Everything below that, the actual policies and institutions, stays fully revisable. The one thing made permanent is the capacity to change everything else. This is self-binding in the service of staying unbound, and it is the only form of precommitment compatible with a corrigible civilization, because it entrenches the meta-rule of corrigibility itself while refusing to freeze any particular answer.
This is also how the framework hardens the standing it already grants to people who do not yet exist. EQ–06c derives the dignity of future persons and seats them through guardianship, with Wales’ Future Generations Commissioner and the United Nations Declaration on Future Generations of 2024 as the working seeds. The interest of future generations is the textbook case of a commitment the present is structurally tempted to break, since the unborn cannot vote, lobby, or leave, and the costs of betraying them fall due after every current decision-maker has gone. The institutional record shows the failure to design out. Hungary’s Ombudsman for Future Generations, under Sándor Fülöp, intervened against a water privatization and acted to protect the national gene bank, then was downgraded into a deputy office within about a term, and Israel’s Knesset commission was discontinued after a single term. An office the present can quietly gut is not a commitment, it is a courtesy. A future-standing body works only if it is locked at the meta-level, constitutionally entrenched with a mandate that decays and renews on a fixed schedule rather than at the pleasure of whoever it currently constrains, while its specific recommendations stay advisory and revisable. The standing is made permanent while the verdicts stay open to revision.
- Which protections belong in the locked meta-core, and how that short list is itself revised without becoming just another object-level policy, is unresolved.
- Entrenching a future-standing body against a determined present is hard, since Hungary’s and Israel’s offices were gutted within a term, so the decaying-and-renewing mandate has to avoid both capture, when it is too permanent, and irrelevance, when it is too easily revoked.
- Weighing intergenerational standing against present need without either one dominating the other is open.
- Direction: draw an explicit line between a small locked meta-core, the right to revise, the core protections, and the amendment rule, and a fully liquid object level, and give future generations a constitutionally entrenched body with a decaying-renewing mandate and advisory-only verdicts (Elster; Holmes; Wales; the UN Declaration on Future Generations).
- Implementation sketch (exploratory): entrench a future-standing office at the meta-level with a fixed-term, automatically renewing mandate that no ordinary majority can abolish, empowered to publish findings and force a recorded vote but not to decide, with the Wales office as the working floor. Full reasoning and sources in the companion paper, Binding the Future.
The Movement's Own Metabolism
Aeviterna makes a claim about systems, that equilibrium is a kind of death and that a system stays alive by oscillating within bounds rather than settling at an extreme. That claim has to apply to the movement that carries the framework, or the framework refutes itself. Most movements treat institutionalization as the goal, the point at which spontaneous energy finally hardens into permanent structure. This one cannot, because its own thesis forbids settling. The movement is therefore designed to keep moving and to renew itself rather than to arrive.
The arc that movements usually follow is well documented and remarkably uniform. Ferment gives way to charismatic excitement, which gives way to formalization, which ends in a stable bureaucracy (Blumer; Weber). Vitality drains at three predictable points: the succession crisis when a founder departs; the bureaucratization that lets an organization optimize its own survival above its mission (Michels); and the mainstreaming that buys respectability at the price of fervor. For a movement built on ideas rather than on protest or party, the order of dangers is different. The deadliest is dogmatization, the moment core claims are made unfalsifiable and dissent is policed as heresy, because that forfeits the one thing an idea-movement has, which is the ability to be right for discoverable reasons (Popper). Close behind are purity spirals and schism, since ideas divide infinitely and status tends to flow to whoever seems most rigorous, and Goodhart capture, where a movement starts optimizing legible proxies such as followers or citations in place of the truth they were meant to track (Goodhart; Strathern).
Several of these failure modes are already answered elsewhere in the framework, because the properties that make a civilization adaptive are the properties that make a movement durable.
What the framework does not yet specify is how the movement renews itself on purpose. The commitments below are exploratory, offered as directions rather than settled rules.
- The newer paradigms this section draws on are real but mixed. On-chain governance shows that rule-by-code and token voting fail through voter apathy and plutocratic capture, so none of this should be automated away from human judgment (Buterin; the 2016 DAO exploit and the hard fork that reversed it as the standing caution).
- Adaptive-cycle and antifragility thinking are heuristics rather than tested designs, and a scheduled release can destroy capacity instead of renewing it if the structures it hands back to have decayed (Holling; Gunderson and Holling).
- A right to fork can also licence endless splitting. What separates a healthy fork from a schism, and how variants re-merge, is unresolved.
- Direction: apply the framework reflexively, treat the movement as one more system that must oscillate rather than settle, and prefer mechanisms that already work at civilizational scale, such as decaying standing and open, polycentric standards, over novel governance technology.
- Implementation sketch (exploratory): a published fork protocol, a living falsification register that records what would change the framework's mind, terms and sunset clauses on every standing role and structure, and a scheduled renewal occasion. Full reasoning and sources in the companion paper, Movement Metabolism and Anti-Ossification.
Closing Orientation
Aeviterna does not claim to possess a final civilization design. It proposes a directional framework for building systems capable of surviving transition, resisting extraction, preserving autonomy, distributing stewardship, supporting adaptive stability, and preventing concentration from becoming permanent.
Aeviterna accepts imperfection, experimentation, partial adoption, and iterative refinement. It is not a destination. It is a direction and a set of design constraints for moving in that direction without catastrophic loss of the capacity to change course.
Each release has deepened and extended this direction rather than replaced it, from the first complete articulation through new civilizational organs, formal foundations and a place among existing traditions, the harder structures the core had left open, further frontiers, and an honest reckoning with the hardest critiques. The detailed history is in the changelog (Appendix C). It is not a finished design but a coherent whole, stable enough to build on and to argue with, and it is expected to keep changing.
Its goal is not utopia. Its goal is a civilization capable of correcting itself before collapse becomes inevitable.
No equilibrium. No utopia.
A civilization that can sense harm and change course.
That is the argument. What follows is the scaffolding beneath it: Part VI gives the formal grounding and the hardest critiques, and the appendices hold the glossary, the open frontier, the changelog, and the sources, for the reader who would rather test the case than take it.
The Formal Backbone
A claim about how a civilization should move is a claim about dynamics, and dynamics can be made precise.
Before the mathematics, the whole framework fits in one picture. Aeviterna is a feedback regulator: it reads a small set of vital signs, compares them against the bands a civilization can survive within, and corrects through governance before a drift becomes a breach. What makes it Aeviternal rather than generic control is carried in the same loop, where the set point is human dignity, the actuator is the redistribution of power, and the controllers themselves decay so that authority lapses unless it is renewed.
The framework's central claim is dynamical. A civilization should stay where survivability can be preserved and move freely inside that region rather than hold to a fixed point. That claim has an exact mathematical home in viability theory (Aubin). A system whose state must remain inside a constraint set has a viability kernel: the largest set of states from which it is possible to remain inside indefinitely. The kernel permits unbounded oscillation and requires no equilibrium. The eight vital signs define the constraint set, and the kernel is the region this framework asks a civilization to keep within. Sustainability science already uses the kernel in this exact sense, as the set of states from which a future stays open (Béné, Doyen, and Gabay).
The governing result, with roots in Nagumo and a first rigorous form due to Haddad, gives the test for staying inside the set: at every point of the survivable region, at least one admissible direction of motion must point back inward. The framework's promise to redistribute recovery has a formal counterpart too. A capture basin is the set of states from which a target inside the region can still be reached without leaving it, which is the precise sense in which recovery remains possible after a shock, and the precise sense in which it can become impossible once a system has drifted too far.
Viability theory says where to stay; control theory says how to stay there. Set-invariance control studies the feedback that holds a system inside a safe set under bounded disturbance, which is the formal content of detecting instability and correcting in proportion to it (Blanchini). Regulating around shifting bands rather than holding a single set point is the difference between homeostasis and allostasis, stability achieved through change rather than at a fixed point (Sterling).
Cybernetics supplies the conditions under which any of this can be governed. Ashby's Law of Requisite Variety holds that a regulator can keep a system's essential variables within limits only if it commands at least as much variety as the disturbances it faces. This is the formal warrant for cognitive ecology: a governing system that loses internal diversity loses the capacity to regulate a varied world, which is why monoculture is dangerous and why variety counts against concentrating control (Ashby). Beer's Viable System Model gives the recursive, multi-level architecture that the governance modes inhabit (Beer).
Resilience science supplies the reading for everyday understanding. Holling's ecological resilience is the size of disturbance a system absorbs before it flips into a different basin, which is bounded oscillation within a basin stated plainly, and transformability is a deliberate move into a better basin, which is adaptive transition rather than failure (Holling; Walker, Holling, Carpenter, and Kinzig).
- Viability kernels are exactly computable only in low dimensions, and eight vital signs sit just past that ceiling. The kernel also presupposes dynamics and a constraint set that civilizational data do not hand over cleanly, so it is a target for approximation and argument rather than a solved object.
- Every formal guarantee assumes that what is measured stays honest. Once a vital sign becomes a target it is gamed and stops measuring what it did (Goodhart; Campbell), so the mathematics is a discipline for thinking rather than an autopilot.
Anchored in Evidence
The commitments are not only arguments. Several rest on established empirical work, and saying which is part of being falsifiable. The knowledge commons is the clearest case. Elinor Ostrom showed that communities govern shared resources durably, without privatization or central control, when their institutions satisfy a set of design principles, and that knowledge itself behaves as a commons whose threat is enclosure rather than depletion (Ostrom; Hess and Ostrom). Aeviterna's governance reads as those principles applied at civilizational scale: clear boundaries and participatory rule-making, monitoring that keeps the commons auditable, graduated sanctions that prefigure the justice tiers, accessible conflict resolution, and nested enterprises that keep a large system polycentric so failures stay local.
What makes knowledge different also makes its governance more necessary, not less. Because understanding is non-rival, a knowledge commons is not threatened by depletion through use but by enclosure, gatekeeping, and underprovision, so openness alone does not protect it. It still needs the boundaries, monitoring, and recognized self-governance that any commons does, for different reasons than a fishery faces.
The vital-signs instrument rests on critical-transition science. As a complex system nears a tipping point it slows down, recovering more sluggishly from small perturbations, and this shows up as rising variance and autocorrelation before a regime shift, across very different systems regardless of mechanism (Scheffer and colleagues). That is why the framework watches a few load-bearing variables for loss of resilience instead of optimizing a single target. Driving one variable to its maximum usually narrows the basin and moves the system toward the edge, so a band with both a floor and a ceiling is the right object, not a maximum.
Cognitive sovereignty rests on the economics of attention. Attention is scarce, so a wealth of information creates a poverty of attention (Simon); that scarcity has been industrially contested for more than a century (Wu); and the contest now reaches perception and behavior themselves, shaped at scale by systems that profit from the shaping (Zuboff). Together these establish that perception is a contested civilizational resource, which is the thing cognitive sovereignty exists to protect.
- Ostrom's principles were drawn from bounded, often physical resources, and their transfer to global digital knowledge is an active research question. Ostrom herself warned against treating the principles as a blueprint, so they validate the governance posture more than any specific mechanism.
- Early-warning signals carry false positives and false negatives, and not every shift is preceded by slowing down, so they indicate that resilience is declining rather than naming a date for collapse.
- The attention-economy works are critical and historical rather than predictive, so they motivate the commitment without fixing how much perception is captured or how much sovereignty is recoverable.
Where Aeviterna Stands, and How It Fails
Aeviterna is a new configuration of old primitives more than a set of new ones, and naming its neighbors is part of arguing in good faith. It shares with liberalism a protected sphere that no majority may vote away, expressed here as the inviolable dignity floor (Rawls; and on dignity as rank, Waldron, with the German Basic Law as the working model). It shares with republicanism the aim of freedom as non-domination, and answers it in time as well as in space: decaying standing attacks entrenched power by letting authority lapse unless it is renewed (Pettit). It couples deliberative legitimacy to the governance modes, so reasoned and inclusive decision-making is the default and the modes decide when the gears change (Habermas). Its vital signs are a capability-style reading of real human functioning rather than output (Sen; Nussbaum). Its corridor between a social floor and an ecological ceiling is the safe and just space of degrowth and doughnut economics, generalized from throughput to governance itself (Hickel; Raworth). And its sensing-and-correcting loop is management cybernetics, with one difference that matters: the set point is dignity, the actuator is the redistribution of power, and the controllers themselves decay (Beer).
What is new is the combination: oscillation chosen over equilibrium, authority that decays by default, and a mode-switching structure bound to measured thresholds. Each is contestable, and together they are a recognizable new position rather than a relabeling of an old one.
The dignity floor deserves its own note, because it is the one place the framework refuses the usual calculus. Following the German Basic Law, dignity is treated as inviolable and non-balanceable rather than as a weighty interest to be traded off, the logic by which a constitutional court can strike down a measure that would sacrifice some lives to save others. That anti-balancing core is what keeps the rest of the adaptive machinery from optimizing a person away.
This is the framework's most important and least examined decision, and it deserves to be named as its own object rather than left as an exception to the banner. Call it the entrenchment boundary: the line between what is allowed to oscillate and the small set held fixed. Equilibrium is death describes the dynamics, but the boundary is the constitution, and the real moral work lives in where it is drawn. A framework whose whole identity is corrigibility has to be disciplined about its few non-corrigible commitments, so the test for admitting anything to the fixed side is strict: it must be minimal, command near-universal assent behind a veil of ignorance, and guard against a harm whose violation is irreversible. The dignity floor passes. Almost nothing else should, and whatever sits inside the boundary is itself interpreted, which is the problem taken up first in the Research Frontier as OQ–00.
The same machinery that makes the framework adaptive is its largest attack surface, because every threshold is a lever someone can pull. The strongest known failure modes, and what the design places against each, are set out below. The pattern across all of them is the same: robustness comes less from the elegance of the loop than from what is held outside it as non-negotiable.
| Failure mode | How it bites | What resists it |
|---|---|---|
| Oligarchy (Michels) | Coordination breeds a permanent expert caste that entrenches itself. | Decay applied to administrators too, selection by lot for some roles, mandatory rotation, open tooling. |
| Capture (Stigler) | Concentrated interests take over the bodies that measure or certify. | Adversarial and redundant measurement, citizen audit, decaying tenure for measurers, conflict-of-interest firewalls. |
| Backsliding (Levitsky and Ziblatt) | An elected actor uses the rules to dismantle the rules. | An un-suspendable core, a supermajority plus independent triggers for escalation, protected press and opposition. |
| Emergency abuse (Schmitt; Agamben) | Crisis powers free the executive and then never expire. | Automatic sunsets, externally audited triggers rather than executive discretion, a non-derogable core, a ratchet toward recovery. |
| Metric gaming (Goodhart; Campbell) | A vital sign becomes a target and is optimized instead of the reality it tracked. | Rotated and partly qualitative indicators, measurement decoupled from those it rewards, metrics treated as evidence for judgment. |
| Technocracy (Scott) | Value choices are reframed as technical readouts and removed from contest. | Thresholds set democratically and revisably, a deliberative override of any automated trigger, models and assumptions published. |
A framework that can name the ways it would fail has a better chance of not failing in those ways. That is the reason for writing them down, and the Model Charter turns these resistances into clauses a community can adopt.
The Guardian of the Core
The deepest item in the failure-mode table in FC–03 is the apex: an anti-capture stack that climbs to a single seat no one watches. The same problem surfaces twice more in the framework, in EQ–04b as the question of who adjudicates the boundary without becoming the apex, and in EQ–06c as the risk of freezing a single interpretation of dignity. It is one problem, the interpretation of the non-derogable core, named in the Research Frontier as OQ–00, and this section is the framework's working attempt at it. The aim is not a system with no sovereign, which the precedents say is impossible, but a chair no one can settle into: an interpreter that is always one challenge from being overruled and one cycle from dissolving.
Two moves do most of the work. First, keep the core small and lit, since a non-derogable core that is tiny, explicit, published, and versioned is a worse capture target than a large vague one, because capturing it becomes visible and costly. Second, split the power to fix what the core means from the power to apply it. Its settled meaning is authored by no single seat and drifts only by a large, representative supermajority of the federation, on the model of peremptory norms, under a standing rule that no body may declare that meaning closed. A panel only ever renders an operative judgment for the case in front of it, binding for now and revisable after, with the losing reading kept in the open as legitimate.
The panel that applies the core is built to be the opposite of a sovereign, and it is assembled from the framework's own primitives. It is plural and never one. It is sortition-leavened, a lay majority drawn by lot with a minority of domain stewards whose standing already decays under EQ–05, so expertise informs the reading without ruling it, the same plural and decaying pattern EQ–03b uses for the epistemic monitor and EQ–06b uses for justice. Its terms are short and non-renewable, so there is no one to please for reappointment, and it publishes its reasoning and its dissent. It is not watched from above, because adding a watcher rebuilds the tower; the separated organs interpret the core against one another in a closed loop, with the right of exit in EQ–04b as the final discipline, the circle shown in the figure below.
The hardest residual is not the panel but the framing layer, whoever defines the vital signs and certifies which is the weakest, because that is the smallest and least watched seat. The design aims it back into the open: more than one independently produced methodology for each sign, so no single index decides; the methods published as forkable code; a right for any member to submit a competing reading and force a contest, at a cost to the original framers' standing if it loses; bounties for showing a reading was framed to a conclusion; and the framing seat itself filled by lot. The last danger is that a decaying guardian comes to believe only it can protect the core and resists its own sunset, the institutional form of an agent that fights its off-switch once it is certain, so the structure keeps it unsure it is needed: the mandate decays automatically and is renewed only from outside, a successor panel always stands ready, no panel is ever the sole interpreter, and incumbency carries little reward.
- This does not dissolve sovereignty. The regress finally rests on a self-enforcing equilibrium of the federation, which is costly to capture, not impossible.
- The residual apex is the framing layer, now made plural, forkable, contestable, and rotated rather than absent.
- The half-lives are uncalibrated (OQ–02), a broadly popular capture can still clear the contest (OQ–04), and the authorship layer presumes the federation of OQ–05 and enough civic attention to run the contests.
- Live test: this is stewardship and not a sovereign in disguise exactly while a divergent reading can be forced and win, the mandate truly decays under external renewal, and a captured reading is detected and costs its authors their standing. If those fail, the sovereign has re-formed, and that is the date to mark. The aim is to develop OQ–00, not to claim it closed.
Appendix A: Core Concepts Glossary
Appendix B: The Research Frontier
These are the framework's standing hard problems, carried forward by design rather than gaps to be closed before release. A living framework keeps a frontier; each problem below has a proposed direction and remains open to work.
A clause that overrides every other and never sunsets, the dignity floor and the un-suspendable protections, cannot apply itself, so some body must interpret it and read the un-summable vital signs to set a mode, and an interpreter that is permanent, general, and answerable only to the clause it interprets is, by P–05's own definition, a sovereign. The anti-capture regress sharpens it, since the resistance to capture is itself capturable (P–02), and reading the panel by its weakest sign is a discretionary act, so set by the review, never by discretion is an overclaim.
Do not abolish the interpretive function, which is irreducible, but strip it of all three sovereign predicates and convert a throne into a stewardship, with an it-is-not-in-heaven rule that bars any single seat from a final reading (jus cogens; halakhic machloket), a plural, part-sortition, term-limited, non-renewable panel that publishes its reasoning and preserves dissent (the German constitutional court; Bagg), a guardian mandate that itself decays, and the separated organs watching one another in a closed loop rather than up a tower (Hurwicz; Madison); the residual hazard is that sovereignty is relocated, not dissolved, to whoever frames the methodology, so the defensible claim is that Aeviterna replaces a permanent personal sovereign with a contestable stewardship, not that it has none. Falsifier: if no structure escapes both the regress and the P–05 definition, the claim to replace sovereignty with stewardship is refuted, not merely weakened.
How does a system governed by extractive actors begin to implement structures designed to limit extraction? What is the forcing function?
Now modeled as a capacity-gated cascade over three variables: the adopter fraction, the incumbent's legitimacy, and prefigured capacity. A transition becomes self-sustaining only when, at a moment of legitimacy decline, both the adopter fraction and the built-out capacity reach the convention-flip threshold of roughly a quarter of the relevant population (Granovetter; Centola; Rogers and Moore's chasm). The controllable levers are capacity and the dense local reinforcement that lowers that threshold; the trigger, the legitimacy collapse itself, is real but unschedulable in principle (Kuran). Prefiguration is therefore the project of building to critical-mass scale and absorptive throughput before the window opens. This is conditional readiness, not a scheduled victory; full reasoning and a falsifier in the companion paper, The Transition Model.
Decay rates, revocation processes, and cross-domain standing calculations remain unspecified. Without these, EQ–05 is a principle, not a mechanism.
Now specified as the standing engine in EQ–05: a per-domain reputational stock decaying with an attested-contribution inflow to a bounded ceiling, the half-life anchored to the domain's measured knowledge turnover and clamped into fast, mid, and slow tiers with scheduled refit; standing held as a non-fungible vector with a cross-domain concentration tripwire; revocation by graduated sanctions with a collusion penalty; and the framing seat and adjudication filled by lot (Machlup; Densen; Ostrom; Bagg). Residual: obsolescence is not cleanly exponential, the metric is gamed not gaming-proof, sybil resistance is unsolved, and fast rotation can leak expertise to unelected permanents. Falsifier F–04.
EQ–06 lists anti-capture mechanisms without naming the specific adversarial scenarios they are designed to defeat. Each mechanism needs a paired failure mode.
Give every mechanism a named adversary in a STRIDE-style threat model, rotation versus regulatory capture (Stigler), distributed memory versus record-tampering, decay versus the iron law of oligarchy (Michels), and separation versus power fusion (Pareto); the residual risk is elite recirculation, tracked by network rather than individual concentration.
What prevents actors from creating conditions that trigger emergency governance modes, extending centralized authority under cover of necessity?
Separate the crisis declarer from the beneficiary, make emergency powers default-expire with an asymmetric re-authorization burden, allow nested-unit veto, and decay emergency standing fastest (Agamben; Higgs; Ginsburg and Versteeg); the residual hazard is a broadly popular emergency that clears every democratic check.
Aeviternal governance structures are most legible at the community or institutional scale. The framework has not yet specified how they aggregate to civilizational scale without reproducing the concentration they are designed to prevent.
Scale fractally through Ostrom's nested enterprises coordinated by shared protocols rather than a central platform, with base units near the Dunbar bound and only thin protocol authority at higher layers; the residual hazard is indivisible global problems that pull authority back toward the center. The strong form of that worry is false, since polycentric climate governance and pledge-and-review are real counterexamples (Ostrom), but the weak form holds, so the honest posture is a thin spine: concede that a few functions are irreducibly central, verification for nuclear and biological risk and a lender-of-last-resort backstop for contagion, and bind that spine to the same decay, audit, and exit the rest of the framework runs on, so it coordinates without becoming the apex. This direction is now developed in full as EQ–04b (Polycentric Federation).
Transitional structures operate inside existing systems whose participants have not consented to Aeviternal design principles. How does the framework handle the legitimacy of its own implementation?
Decline tacit-consent claims (Hume) and ground legitimacy in low-cost exit (Hirschman) and voluntary prefigurative adoption, checked for fairness behind a veil of ignorance (Rawls); the charter-city record shows what fails this test (Scott).
The framework treats diversity as resilience everywhere except in money itself, where a single national currency optimized for efficiency may be as brittle as any monoculture.
Read money as a flow network with a window of viability between too much efficiency and too much diversity, and test whether a deliberately plural ecology of currencies tuned to distinct functions, commercial exchange, mutual credit, and circulation, moves the system back toward resilience (Lietaer; Ulanowicz, Goerner, Lietaer, and Gomez); the residual hazards are the friction of plural money and the documented tendency of complementary currencies to fade once a founding crisis passes.
Every adversary the framework models is an insider bound by its rules, and it has no theory of the outsider, the rival polity that adopts none of this. Among defectors the internal virtues invert into attack surfaces, since an open commons leaks strategic position, non-derogable protected dissent is a channel a hostile state funds and the sacred core forbids closing, and decaying authority with a peacetime drawdown can be out-armed, while resilience matures over decades and conquest is decided in years.
Build a defensive-only perimeter from a porcupine posture compatible with decaying standing (Finland; Switzerland), a security commons of allied polities that raises the local benefit-to-cost ratio so cooperators are not in the well-mixed case (Axelrod; Nowak), a narrow, sunset-bound secrecy carve-out that splits transparency into publicity, surrendered at the perimeter, and accountability, preserved toward a cleared decaying oversight cell, and a deterrent with a deliberative human override, which is already the norm of credible deterrence; the residual hazard is the timescale mismatch, since the cluster must be built before the attack and the polity is most exploitable while assembling it. This direction is now developed in full as the perimeter of EQ–04c (The Boundary Layer). Falsifier: if any polity satisfying the five commitments is reliably conquered or outcompeted by a non-adopting rival before its resilience advantage matures, without recourse to a patron it cannot itself supply, the universality claim falls and Aeviterna is a tenant doctrine.
The framework calls itself a design for an AI-mediated civilization but has no organ for advanced AI, which is a cross-cutting accelerant of both capture (P–02) and sovereignty (P–05): it lowers the cost of capturing feedback, removes the constraint that made broad sovereignty expensive, moves inside the loop that reads the vital signs, and makes a fast or quietly irreversible transition the limiting case of adaptive stability.
Treat AI as a monitored actor that may hold scoped, revocable, decaying standing but never sovereignty; require plurality against model monoculture (Ashby), a right to human review of consequential automated decisions (GDPR Article 22), structured-transparency logging, and the decommissionability discipline of EQ–05c extended to frontier systems, with the transition read as a band-crossing event against the capture basin. Residual: gradual disempowerment can erode the very feedback channels the framework reads, defeating its own detector (Kulveit and colleagues); corrigibility may not hold for a superhuman optimizer; and decaying AI standing has no precedent. Full reasoning in the companion paper, The Contested Mediator.
Nature enters the framework only as a constraint, the ecological ceiling, and a reading, the throughput vital sign, with no constituency of its own, while every other protected interest is given an agent and a decaying-standing account. Extending standing to ecosystems revives the framework's own apex problem, since whoever speaks for a river or a forest can become its unaccountable sovereign.
Give nature standing through plural, decaying, contestable, sortition-leavened guardians built to fail the guardian-of-the-core tests (FC–04), scoped per system rather than to nature in general, with a bounded more-than-human floor, no knowing extinction, ecosystem collapse, or planetary-boundary breach, that mirrors the dignity floor without claiming equivalence, integrated with biological resilience (EQ–08d) and the future-persons standing of EQ–06c. Residual: anthropocentric capture, the undefinability of nature's interests, romanticism about a balance ecology no longer assumes, and popular capture at the framing layer (OQ–04). Full reasoning in the companion paper, The More-Than-Human Stake.
Appendix C: Changelog
Appendix D: References
Inclusion signals engagement, not endorsement.
Acemoglu, D., & Robinson, J. A. (2012). Why Nations Fail: The Origins of Power, Prosperity, and Poverty. Crown.
Ackerman, B. (2004). The emergency constitution. Yale Law Journal, 113(5), 1029-1091.
Agamben, G. (2005). State of Exception (K. Attell, Trans.). University of Chicago Press.
Antimicrobial Resistance Collaborators. (2022). Global burden of bacterial antimicrobial resistance in 2019. The Lancet, 399(10325), 629-655.
Armstrong McKay, D. I., et al. (2022). Exceeding 1.5 °C global warming could trigger multiple climate tipping points. Science, 377(6611), eabn7950.
Arrow, K. J., & Fisher, A. C. (1974). Environmental preservation, uncertainty, and irreversibility. Quarterly Journal of Economics, 88(2), 312-319.
Arthur, W. B. (1989). Competing technologies, increasing returns, and lock-in by historical events. Economic Journal, 99(394), 116-131.
Ashby, W. R. (1956). An Introduction to Cybernetics. Chapman & Hall.
Aubin, J.-P. (1991). Viability Theory. Birkhäuser.
Ayres, I., & Braithwaite, J. (1992). Responsive Regulation: Transcending the Deregulation Debate. Oxford University Press.
Beer, S. (1972). Brain of the Firm. Allen Lane.
Berlin, I. (1969). Four Essays on Liberty. Oxford University Press.
Bernstein, A. S., et al. (2022). The costs and benefits of primary prevention of zoonotic pandemics. Science Advances, 8(5), eabl4183.
Blanchini, F. (1999). Set invariance in control. Automatica, 35(11), 1747-1767.
Blumer, H. (1969). Collective behavior. In A. M. Lee (Ed.), Principles of Sociology (3rd ed., pp. 65-121). Barnes & Noble. (Original work published 1951)
Boggs, C. (1977). Marxism, prefigurative communism, and the problem of workers' control. Radical America, 11(6), 99-122.
Bookchin, M. (1982). The Ecology of Freedom: The Emergence and Dissolution of Hierarchy. Cheshire Books.
Bradford, A. (2020). The Brussels Effect: How the European Union Rules the World. Oxford University Press.
Braithwaite, J. (1989). Crime, Shame and Reintegration. Cambridge University Press.
Brand, S. (1999). The Clock of the Long Now: Time and Responsibility. Basic Books.
Brockway, P. E., et al. (2024). Energy returns on investment at the useful stage and implications for renewable energy systems. Nature Energy, 9, 803-816.
Bruneau, M., et al. (2003). A framework to quantitatively assess and enhance the seismic resilience of communities. Earthquake Spectra, 19(4), 733-752.
Bull, H. (1977). The Anarchical Society: A Study of Order in World Politics. Macmillan.
Buterin, V. (2021). Moving beyond coin voting governance. vitalik.eth.limo.
Öcalan, A. (2011). Democratic Confederalism. Transmedia Publishing.
Campbell, D. T. (1979). Assessing the impact of planned social change. Evaluation and Program Planning, 2(1), 67-90.
Carpenter, S., Walker, B., Anderies, J. M., & Abel, N. (2001). From metaphor to measurement: Resilience of what to what? Ecosystems, 4(8), 765-781.
Case, A., & Deaton, A. (2020). Deaths of Despair and the Future of Capitalism. Princeton University Press.
Choi, J., Hecht, G. W., & Tayler, W. B. (2012). Lost in translation: The effects of incentive compensation on strategy surrogation. The Accounting Review, 87(4), 1135-1163.
Chwe, M. S.-Y. (2001). Rational Ritual: Culture, Coordination, and Common Knowledge. Princeton University Press.
Cline, E. H. (2014). 1177 B.C.: The Year Civilization Collapsed. Princeton University Press.
Collingridge, D. (1980). The Social Control of Technology. St. Martin's Press.
Court of Justice of the European Union. (2023). SCHUFA Holding, C-634/21 (a credit score is an automated decision under GDPR Article 22).
Court of Justice of the European Union. (2025). Dun & Bradstreet Austria, C-203/22 (the right to a meaningful explanation of an automated decision).
Cullinan, C. (2011). Wild Law: A Manifesto for Earth Justice (2nd ed.). Green Books.
Cumming, G. S., Cumming, D. H. M., & Redman, C. L. (2006). Scale mismatches in social-ecological systems. Ecology and Society, 11(1), 14.
Cutler, D. M., & Summers, L. H. (2020). The COVID-19 pandemic and the $16 trillion virus. JAMA, 324(15), 1495-1496.
Daly, H. E. (1977). Steady-State Economics. W. H. Freeman.
David, P. A. (1985). Clio and the economics of QWERTY. American Economic Review, 75(2), 332-337.
de Kraker, M. E. A., Stewardson, A. J., & Harbarth, S. (2016). Will 10 million people die a year due to antimicrobial resistance by 2050? PLoS Medicine, 13(11), e1002184.
Densen, P. (2011). Challenges and opportunities facing medical education. Transactions of the American Clinical and Climatological Association, 122, 48-58.
Dobson, A. P., et al. (2020). Ecology and economics for pandemic prevention. Science, 369(6502), 379-381.
Dunbar, R. I. M. (1992). Neocortex size as a constraint on group size in primates. Journal of Human Evolution, 22(6), 469-493.
Elmqvist, T., Folke, C., et al. (2003). Response diversity, ecosystem change, and resilience. Frontiers in Ecology and the Environment, 1(9), 488-494.
Elster, J. (2000). Ulysses Unbound: Studies in Rationality, Precommitment, and Constraints. Cambridge University Press.
European Parliament & Council. (2024). Directive (EU) 2024/1799 on common rules promoting the repair of goods.
Ferejohn, J., & Pasquino, P. (2004). The law of the exception: A typology of emergency powers. International Journal of Constitutional Law, 2(2), 210-239.
Fine, P., Eames, K., & Heymann, D. L. (2011). “Herd immunity”: A rough guide. Clinical Infectious Diseases, 52(7), 911-916.
Fischer-Kowalski, M. (1998). Society's metabolism. Journal of Industrial Ecology, 2(1), 61-78.
Folbre, N. (2001). The Invisible Heart: Economics and Family Values. New Press.
Foundational Economy Collective. (2018). Foundational Economy: The Infrastructure of Everyday Life. Manchester University Press.
Fraser, N. (2016). Contradictions of capital and care. New Left Review, 100, 99-117.
Freeman, J. (1972). The tyranny of structurelessness. Berkeley Journal of Sociology, 17, 151-165.
Georgescu-Roegen, N. (1971). The Entropy Law and the Economic Process. Harvard University Press.
Gesell, S. (1916). The Natural Economic Order. (Trans. 1958, Peter Owen.)
Ginsburg, T., & Versteeg, M. (2021). The bound executive: Emergency powers during the pandemic. International Journal of Constitutional Law, 19(5), 1498-1535.
Goodhart, C. A. E. (1975). Problems of monetary management: The U.K. experience. In Papers in Monetary Economics (Vol. 1). Reserve Bank of Australia.
Grimm, V., et al. (2006). A standard protocol for describing individual-based and agent-based models. Ecological Modelling, 198(1-2), 115-126.
Guinan, J., & O'Neill, M. (2019). The Case for Community Wealth Building. Polity Press.
Gunderson, L. H., & Holling, C. S. (Eds.). (2002). Panarchy: Understanding Transformations in Human and Natural Systems. Island Press.
Habermas, J. (1984). The Theory of Communicative Action, Volume 1 (T. McCarthy, Trans.). Beacon Press.
Hall, C. A. S., Lambert, J. G., & Balogh, S. B. (2014). EROI of different fuels and the implications for society. Energy Policy, 64, 141-152.
Hannan, M. T., & Freeman, J. (1977). The population ecology of organizations. American Journal of Sociology, 82(5), 929-964.
Herz, J. H. (1950). Idealist internationalism and the security dilemma. World Politics, 2(2), 157-180.
Hess, C., & Ostrom, E. (Eds.). (2007). Understanding Knowledge as a Commons: From Theory to Practice. MIT Press.
Hickel, J. (2020). Less Is More: How Degrowth Will Save the World. William Heinemann.
Higgs, R. (1987). Crisis and Leviathan. Oxford University Press.
Hildebrandt, M. (2015). Smart Technologies and the End(s) of Law. Edward Elgar.
Hirschman, A. O. (1970). Exit, Voice, and Loyalty. Harvard University Press.
Hoffer, E. (1951). The True Believer: Thoughts on the Nature of Mass Movements. Harper & Brothers.
Holling, C. S. (1973). Resilience and stability of ecological systems. Annual Review of Ecology and Systematics, 4, 1-23.
Holmes, S. (1995). Passions and Constraint: On the Theory of Liberal Democracy. University of Chicago Press.
Holt-Lunstad, J., Smith, T. B., & Layton, J. B. (2010). Social relationships and mortality risk: A meta-analytic review. PLoS Medicine, 7(7), e1000316.
Hume, D. (1748). Of the original contract. In Essays, Moral and Political.
International Covenant on Civil and Political Rights, Article 4. (1966). United Nations.
International Labour Organization. (2018). Care Work and Care Jobs for the Future of Decent Work. International Labour Office.
Internet Engineering Task Force. (2015). Guidelines for cryptographic algorithm agility (RFC 7696, BCP 201).
Janssen, M. A., & Ostrom, E. (2006). Empirically based, agent-based models. Ecology and Society, 11(2), 37.
Jervis, R. (1978). Cooperation under the security dilemma. World Politics, 30(2), 167-214.
Jäger, G., & Füllsack, M. (2019). Systematically false positives in early-warning-signal analysis. PLOS ONE, 14(2), e0211072.
Jost, L. (2006). Entropy and diversity. Oikos, 113(2), 363-375.
Kallis, G. (2018). Degrowth. Agenda Publishing.
Kant, I. (1998). Groundwork of the Metaphysics of Morals (M. Gregor, Trans.). Cambridge University Press. (Original work published 1785)
Kasser, T. (2002). The High Price of Materialism. MIT Press.
Kauffman, S. A. (1993). The Origins of Order: Self-Organization and Selection in Evolution. Oxford University Press.
Kerckhoffs, A. (1883). La cryptographie militaire. Journal des Sciences Militaires, IX, 5-83.
Klinenberg, E. (2018). Palaces for the People: How Social Infrastructure Can Help Fight Inequality, Polarization, and the Decline of Civic Life. Crown.
Krznaric, R. (2020). The Good Ancestor: A Radical Prescription for Long-Term Thinking. The Experiment.
Kuran, T. (1995). Private Truths, Public Lies: The Social Consequences of Preference Falsification. Harvard University Press.
Lenton, T. M., et al. (2008). Tipping elements in the Earth's climate system. PNAS, 105(6), 1786-1793.
Levitsky, S., & Ziblatt, D. (2018). How Democracies Die. Crown.
Liebowitz, S. J., & Margolis, S. E. (1995). Path dependence, lock-in, and history. Journal of Law, Economics, & Organization, 11(1), 205-226.
Lietaer, B., Arnsperger, C., Goerner, S., & Brunnhuber, S. (2012). Money and Sustainability: The Missing Link. Triarchy Press.
Lindhqvist, T. (2000). Extended Producer Responsibility in Cleaner Production. Lund University.
Machlup, F. (1962). The Production and Distribution of Knowledge in the United States. Princeton University Press.
Marmot, M. G., Shipley, M. J., & Rose, G. (1984). Inequalities in death: Specific explanations of a general pattern? The Lancet, 323(8384), 1003-1006.
Masnick, M. (2019). Protocols, Not Platforms: A Technological Approach to Free Speech. Knight First Amendment Institute, Columbia University.
Mayer-Schönberger, V. (2009). Delete: The Virtue of Forgetting in the Digital Age. Princeton University Press.
Mazzucato, M. (2013). The Entrepreneurial State: Debunking Public vs. Private Sector Myths. Anthem Press.
McGuire, W. J. (1964). Inducing resistance to persuasion. Advances in Experimental Social Psychology, 1, 191-229.
Meadows, D. H. (2008). Thinking in Systems: A Primer. Chelsea Green Publishing.
Michels, R. (1915). Political Parties (E. Paul & C. Paul, Trans.). Hearst's International Library.
Möller, B. (1992). Common Security and Nonoffensive Defense: A Neorealist Perspective. Lynne Rienner.
Mouffe, C. (2000). The Democratic Paradox. Verso.
Mouffe, C. (2005). On the Political. Routledge.
National Institute of Standards and Technology. (2024). FIPS 203, 204, 205: Post-quantum cryptography standards. U.S. Department of Commerce.
National Institute of Standards and Technology. (2025). Considerations for achieving cryptographic agility (NIST CSWP 39).
Nissenbaum, H. (2010). Privacy in Context: Technology, Policy, and the Integrity of Social Life. Stanford University Press.
Nussbaum, M. C. (2000). Women and Human Development: The Capabilities Approach. Cambridge University Press.
Oldenburg, R. (1989). The Great Good Place. Paragon House.
O'Neill, J. (2016). Tackling Drug-Resistant Infections Globally: Final Report and Recommendations. Review on Antimicrobial Resistance.
Ostrom, E. (1990). Governing the Commons: The Evolution of Institutions for Collective Action. Cambridge University Press.
Ostrom, E. (2010). Polycentric systems for coping with collective action and global environmental change. Global Environmental Change, 20(4), 550-557.
Ostrom, V., Tiebout, C. M., & Warren, R. (1961). The organization of government in metropolitan areas. American Political Science Review, 55(4), 831-842.
Pareto, V. (1935). The Mind and Society (A. Bongiorno & A. Livingston, Trans.). Harcourt, Brace. (Original work published 1916)
Pettit, P. (1997). Republicanism: A Theory of Freedom and Government. Oxford University Press.
Pettit, P. (2010). A republican law of peoples. European Journal of Political Theory, 9(1), 70-94.
Polanyi, M. (1966). The Tacit Dimension. University of Chicago Press.
Pollin, R. (2018). De-growth vs a Green New Deal. New Left Review, 112, 5-25.
Popper, K. R. (1963). Conjectures and Refutations: The Growth of Scientific Knowledge. Routledge & Kegan Paul.
Posner, E. A., & Weyl, E. G. (2018). Radical Markets. Princeton University Press.
Putnam, R. D. (2000). Bowling Alone: The Collapse and Revival of American Community. Simon & Schuster.
Rawls, J. (1971). A Theory of Justice. Belknap Press of Harvard University Press.
Raworth, K. (2017). Doughnut Economics: Seven Ways to Think Like a 21st-Century Economist. Chelsea Green Publishing.
Richardson, K., et al. (2023). Earth beyond six of nine planetary boundaries. Science Advances, 9(37), eadh2458.
Rockström, J., et al. (2009). A safe operating space for humanity. Nature, 461(7263), 472-475.
Rodríguez-Garavito, C., & De Bona, G. (2024). Are rights of nature working? The impact of the Los Cedros ruling. Verfassungsblog.
Roozenbeek, J., & van der Linden, S. (2019). Fake news game confers psychological resistance against online misinformation. Palgrave Communications, 5, 65.
Rosa, H. (2013). Social Acceleration: A New Theory of Modernity (J. Trejo-Mathys, Trans.). Columbia University Press.
Rosa, H. (2019). Resonance: A Sociology of Our Relationship to the World (J. C. Wagner, Trans.). Polity Press.
Russell, A. L., & Vinsel, L. (2016). Hail the maintainers. Aeon.
Sandel, M. J. (2020). The Tyranny of Merit: What's Become of the Common Good? Farrar, Straus and Giroux.
Scheffer, M., et al. (2009). Early-warning signals for critical transitions. Nature, 461(7260), 53-59.
Schmitt, C. (2005). Political Theology: Four Chapters on the Concept of Sovereignty (G. Schwab, Trans.). University of Chicago Press. (Original work published 1922)
Schumpeter, J. A. (1942). Capitalism, Socialism and Democracy. Harper & Brothers.
Scott, J. C. (1998). Seeing Like a State. Yale University Press.
Sen, A. (1999). Development as Freedom. Alfred A. Knopf.
Sen, A. (2002). Why health equity? Health Economics, 11(8), 659-666.
Simon, H. A. (1971). Designing organizations for an information-rich world. In M. Greenberger (Ed.), Computers, Communications, and the Public Interest (pp. 37-72). Johns Hopkins Press.
Smil, V. (2022). How the World Really Works. Viking.
Sterling, P. (2012). Allostasis: A model of predictive regulation. Physiology & Behavior, 106(1), 5-15.
Sterman, J. D. (2000). Business Dynamics: Systems Thinking and Modeling for a Complex World. Irwin/McGraw-Hill.
Stigler, G. J. (1971). The theory of economic regulation. The Bell Journal of Economics and Management Science, 2(1), 3-21.
Stodder, J. (2009). Complementary credit networks and macroeconomic stability: Switzerland's Wirtschaftsring. Journal of Economic Behavior & Organization, 72(1), 79-95.
Stone, C. D. (1972). Should trees have standing? Toward legal rights for natural objects. Southern California Law Review, 45, 450-501.
Strathern, M. (1997). 'Improving ratings': Audit in the British university system. European Review, 5(3), 305-321.
Subrahmanyam, A. (1994). Circuit breakers and market volatility: A theoretical perspective. Journal of Finance, 49(1), 237-254.
Sunstein, C. R. (2006). Irreversible and catastrophic. Cornell Law Review, 91, 841-897.
Tainter, J. A. (1988). The Collapse of Complex Societies. Cambridge University Press.
Taleb, N. N. (2012). Antifragile: Things That Gain from Disorder. Random House.
Trask, A., et al. (2020). Beyond privacy trade-offs with structured transparency. arXiv:2012.08347.
Tronto, J. C. (2013). Caring Democracy: Markets, Equality, and Justice. New York University Press.
Tyler, T. R. (1990). Why People Obey the Law. Yale University Press.
Ulanowicz, R. E., Goerner, S. J., Lietaer, B., & Gomez, R. (2009). Quantifying sustainability: Resilience, efficiency and the return of information theory. Ecological Complexity, 6(1), 27-36.
United Nations. (1992). Rio Declaration on Environment and Development, Principle 15.
United Nations Environment Programme, International Resource Panel. (2024). Global Resources Outlook 2024.
van der Linden, S. (2023). Foolproof: Why Misinformation Infects Our Minds and How to Build Immunity. W. W. Norton.
Venice Commission. (2020). Compilation of Opinions and Reports on States of Emergency (CDL-PI(2020)003). Council of Europe.
Vervaeke, J. (2019-2024). Awakening from the Meaning Crisis. Lecture series and book (Part One: Origins, 2024).
Vieta, M., Depedri, S., & Carrano, A. (2017). The Italian Road to Recuperating Enterprises and the Legge Marcora Framework. Euricse.
Vinsel, L., & Russell, A. L. (2020). The Innovation Delusion: How Our Obsession with the New Has Disrupted the Work That Matters Most. Currency.
W3C. (2025). Verifiable Credentials Data Model 2.0. World Wide Web Consortium Recommendation.
Wajcman, J. (2015). Pressed for Time: The Acceleration of Life in Digital Capitalism. University of Chicago Press.
Waldron, J. (2012). Dignity, Rank, and Rights. Oxford University Press.
Walker, B. H., Carpenter, S. R., Rockström, J., Crépin, A.-S., & Peterson, G. D. (2012). Drivers, slow variables, fast variables, shocks, and resilience. Ecology and Society, 17(3), 30.
Walker, B., Holling, C. S., Carpenter, S. R., & Kinzig, A. (2004). Resilience, adaptability and transformability in social-ecological systems. Ecology and Society, 9(2), 5.
Waring, M. (1988). If Women Counted: A New Feminist Economics. Harper & Row.
Weber, M. (1978). Economy and Society (G. Roth & C. Wittich, Eds.). University of California Press. (Original work published 1922)
Weitzman, M. L. (2009). On modeling and interpreting the economics of catastrophic climate change. Review of Economics and Statistics, 91(1), 1-19.
Wiener, N. (1948). Cybernetics: Or Control and Communication in the Animal and the Machine. The Technology Press.
World Health Organization, FAO, WOAH, & UNEP. (2021). Tripartite and UNEP support OHHLEP's definition of One Health.
Wright, E. O. (2010). Envisioning Real Utopias. Verso.
Wu, T. (2016). The Attention Merchants: The Epic Scramble to Get Inside Our Heads. Alfred A. Knopf.
Zuboff, S. (2019). The Age of Surveillance Capitalism. PublicAffairs.