The object model

There are six primitives: the person, the organisation, the project, the opportunity, the learning path, and the piece of evidence. Every surface of the civilization — social, professional, economic, educational, simulated — is a view over those six. There is no separate 'profile system' and 'portfolio system' and 'hiring system'. There is one graph, seen from different angles.

This is not an implementation detail. It is the difference between a suite and a world. In a suite, moving between products means restating who you are. In a world, moving between surfaces means the same objects follow you, already true.

Every object carries who asserted it, when, on what basis, and how it can be checked. A claim with no source still renders — but it renders as unverified, and it stays that way until someone stands behind it. Machine-generated content is marked as machine-generated at the object level, not in a footer disclaimer that nobody reads.

This makes trust compositional. A credential is only as strong as the evidence beneath it; an opportunity match is only as strong as the claims it matched on; a reputation is a function of checkable history rather than of accumulated attention. The system can be wrong, but it cannot be quietly wrong.

The record is sovereign: it lives with the person, it travels with them, and it survives any single surface — including ours. Portability is not an export button bolted on at the end. It is the direction the arrows point from the first line of the schema.

Because the model is one model, the platform cannot hold a private version of you that differs from the one you can see. What the interface shows is what the record says. There is no shadow profile, because there is no second place to keep one.