Every large system eventually faces the same temptation: it holds the record, so it can quietly rewrite the terms. The only durable defence is to write the constraints down before you have the power, publish them, and make violating them visible.
The constitution is therefore not a marketing document. It is a set of articles the architecture is built to obey, each with a stated consequence when broken and a stated mechanism for changing it in the open.
WHAT WE FORBID OURSELVES
We do not sell the record. We do not train on the vault. We do not optimise for attention as an end. We do not use a person's data to compete with them. We do not make leaving expensive. We do not let money purchase standing. We do not let an automated decision about someone's access stand without a human who answers for it.
Each prohibition costs revenue that a conventional company would take. That is the point: a constraint you would never have been tempted to break is not a constraint.
WHO CHECKS IT
Members can inspect what is held about them, contest a decision and see the outcome. Independent review covers anything touching identity, money or access. The public record of construction — what was promised, what shipped, what slipped — is maintained even when it is unflattering.
Amendment is possible and deliberately slow: proposals in public, a window for challenge, and a record of who changed what and why. A constitution that can be edited silently is a preference.
- PUBLISHED AND BINDING
- IN PUBLIC, WITH A CHALLENGE WINDOW
- HUMAN ACCOUNTABLE