Nonnegotiable Requirements

The constitutional prohibitions on the first version of the application are at least as important as its capabilities, because the prohibitions are what prevent it from drifting toward the platform logic that the constitutional principles are designed to resist. The first version should not ship unless the following prohibitions are enforceable, observable, and accompanied by remedies.

The first version does not optimize for engagement. It has no engagement metrics, no features designed to maximize time spent in the application, no algorithmic systems whose objective is to capture participant attention. The design is for purposeful use rather than for habitual use, and success is measured by completed purposes, comprehension, consent, and harm rather than by time spent or repeated return.

The first version does not sell advertising or share participant data with advertisers. The economic model is explicitly incompatible with advertising: advertising requires behavioral data that the constitutional principle of data sovereignty prohibits collecting, and advertising optimizes for attention capture that the application design explicitly refuses. The revenue model must remain viable without behavioral targeting.

The first version does not create participant profiles that are owned by the application operator. The data architecture is designed so that participant profiles exist under participant control, on infrastructure governed as part of the commons, not in application-operator-controlled databases that can be used for purposes other than those to which participants consented. The data model should enforce consent, purpose limitation, portability, and deletion, and should give an honest account of records that cannot be withdrawn from other parties.

The first version does not use AI to make consequential decisions about participants without their knowledge and consent. Every AI-assisted function is transparent: participants know when AI is involved, what the AI is doing, and how to contest AI-assisted outputs that they believe are incorrect or inconsistent with the constitutional principles. Each assisted function needs disclosure, a comprehensible reason, a human appeal path, and a way to refuse without losing basic access.

The first version must not be acquirable and repurposable by actors whose interests are inconsistent with the constitutional principles. The legal architecture of the commons infrastructure, the constitutional constraints on the application operator, and the distributed governance of the core protocols are all meant to make acquisition and repurposing impossible without destroying the thing that would be acquired. This is still a requirement rather than an accomplished legal or technical fact. Ownership, licensing, protocol governance, operator succession, and remedies need public documentation before the claim can be tested.

The design theory literature on values in design, the tradition that examines how technology embeds and reproduces values, is foundational to understanding why the constitutional specification in this chapter is not merely rhetorical. Langdon Winner's foundational analysis in 'Do Artifacts Have Politics?' (1980) established that technical systems can embody political and social relations in ways that persist regardless of the intentions of their designers or the stated purposes of their operators. Value Sensitive Design, developed by Batya Friedman and Peter Kahn, provides a methodology for how values can be systematically incorporated into technical design processes rather than treated as constraints added after the technical design is complete.

The adversarial interoperability literature, the work of Cory Doctorow, Yochai Benkler, and others on how platform lock-in is achieved and how it can be resisted, is directly relevant to the architectural choices that would make the first version difficult to acquire. Doctorow's concept of 'adversarial interoperability', the practice of building systems that interoperate with dominant platforms in ways that reduce participants' dependence on those platforms, informs several of the first version's design choices, though no technical pattern can make an institution legally non-acquirable by itself.

The human-computer interaction research on how application design shapes user behavior and psychology, including B.J. Fogg's work on persuasive technology, Tristan Harris's analysis of attention capture design, and the recent literature on digital wellbeing, provides the empirical foundation for understanding why the first version's refusal to optimize for engagement is not merely a moral preference but a design necessity if the application is to serve the constitutional principles rather than gradually undermining them. The specific design claims still need a dated evidence review.

The most consequential open question about the first version concerns the transition to scale. The first version is designed for the first community, a specific community of people who have committed to the architecture and who are motivated to navigate the friction that comes with constitutional design constraints. As the application reaches more participants, it will reach people who are less motivated by constitutional commitment and more motivated by the functional capabilities the application provides. How the application maintains its constitutional character as its participant base diversifies, how it resists the pressure to make technically possible but constitutionally prohibited features available to retain participants who would prefer them, is a governance question that the constitutional specification does not fully answer. The governance system must show how the prohibitions survive pressure from users, funders, operators, and vendors who would prefer easier or more profitable features.

This is why the first five hundred matter beyond all proportion to their number. They would not be a test market on the way to millions. They would test whether the architecture can hold a living community in coherence through real complexity and real time, the one thing no argument can establish and only a place, somewhere, with real people paying the real price of its principles, can. Everything the wider vision hopes for rests on whether this can be done genuinely, once. That is the weight the first community would carry, and the gift it would offer everyone who comes after.