Boundaries Against Surveillance

It would be reasonable, reading this, to feel a chill. A system that measures the quality of human encounter and turns it into a kind of currency sounds, on its face, like the most total surveillance ever devised: a social credit score for the soul.

This fear is correct about the danger and must be answered directly, not waved away. The answer is architectural, and it is the difference between a prison wall and the wall of a home.

A social credit system has four features, and Providence inverts all four.

It is imposed: assigned to you by an authority, without consent. The coherence record is the opposite: it does not exist unless you choose to enter, and it dissolves the moment you leave.

It is comprehensive: it scores the whole of your life. The coherence record is bounded: it reflects only the specific encounters you chose to step into, and nothing else of your life is its business.

It is held by the powerful: stored in a central database the watched cannot see. The coherence record is self-sovereign: it lives on your own device, under your own keys. The raw signal of your encounters never leaves you. What travels outward, when you decide it should, is only a thin, encrypted attestation: enough to let trust be vouched for, never enough to reconstruct the intimate reality it came from. There is no central database to leak, seize, sell, or quietly repurpose, because the architecture refuses to build one.

And it is exclusionary. A low score locks you out of life: travel, housing, work, food. This is the line that must never be crossed. Providence cannot yet offer everyone a material floor; it has neither the institution nor the resources. At the beginning, those who freely join will sustain a common provision they can actually keep. A member who becomes ill, disabled, dependent, overwhelmed, or unable to use the technology does not fall through it. The provision ends when a person freely leaves, never when a body fails to regulate or a record fails to rise. But a door out is real only when it opens onto a life, so the community must protect that passage before anyone depends on it. The intended destination remains a floor open to every person. Within every stage, the currency may support reflection and voluntary trust, but it may never become the price of bread, belonging, or a vote.

These are not promises. Promises can be broken by whoever holds the system. They are invariants: constraints written into the protocol itself, such that violating them means the thing being run is no longer Providence, and anyone may say so out loud. Participation is always voluntary and revocable. The record is always yours, on your own device. There is no central authority and no central store. Anyone may leave at any time, carrying or destroying their record. And the protocol is open, a standard anyone may inspect, audit, or fork. It is owned by no one, precisely so that no one can take it over.

A system you can read, hold, leave, and fork is not a cage. It is a tool. The whole of the design exists to keep it one.