v0.1
A constitution for a voluntary state with tax choice
Preamble
We, the citizens, in pursuit of liberty, justice, and prosperity, do ordain and establish this Constitution
to constrain the State, to safeguard individual rights, and to ensure that society may flourish.
Accordingly, we establish a State that is a platform for public services rather than a sovereign ruler.
Recognizing that freedom and responsibility are inseparable, that property rights are the foundation of peaceful
coexistence, and that voluntary cooperation is the engine of progress.
Therefore, we reject rule by politicians, and instead embrace direct democracy, transparent institutions, and
a system where taxation becomes choice, where public services are accountable, and where market and community
institutions coexist freely.
We further commit to institutions governed not by personal discretion, but by transparent, deterministic
processes that apply equally to all citizens.
This Constitution is our covenant: to protect autonomy, prevent aggression, and secure a future where every
citizen may thrive.
Article II: Purpose
-
The State exists solely as a service platform for the voluntary provision of public services.
It holds no inherent sovereignty and possesses only the powers expressly delegated to it by this Constitution.
-
The purpose of this Constitution is to secure individual liberty, protect property rights, and ensure that
all public functions operate through rule‑bound mechanisms rather than personal discretion.
-
All institutions of the State shall act only through processes whose rules are open, deterministic,
and equally binding on all citizens.
-
All interpretation and application of this Constitution shall be guided by these purposes, and no institution
of the State may act in a manner inconsistent with them.
Article III: Constants
This Constitution is parameterised by constants defined in this article.
Only values that are fixed by this Constitution and not subject to democratic variation
may appear in this article.
These constants may be amended through the standard constitutional amendment process.
Section 1: General constants
| Constant |
Value |
Description |
| \(R_{\mathrm{svc}}\) |
0.30 |
The fraction of each tax-inclusive monetary payment allocated as consumption tax dedicated to
funding public services.
|
| \(R_{\mathrm{ubi}}\) |
0.20 |
The fraction of each tax-inclusive monetary payment allocated as consumption tax dedicated to
funding the Universal Basic Income (UBI). This establishes the degree of
redistribution from higher‑consumption to lower‑consumption citizens.
|
| \(f_{\mathrm{start}}\) |
0.50 |
The base UBI weighting for children from birth.
|
| \(a_{\mathrm{ramp}}\) |
13 |
The age at which the UBI weighting begins to increase linearly.
|
| \(a_{\mathrm{adult}}\) |
18 |
The age at which a citizen reaches full UBI weighting (1.0).
|
| \(\rho_{\max}\) |
2 |
A positive integer that is the maximum score that may be assigned by citizens to initiatives and public services.
|
| \(\omega\) |
\(k \mapsto k\) |
The weighting function applied to positive scores in the hybrid allocation algorithm.
This function determines the relative influence of each score level.
A value of null indicates that no weighting is applied and the algorithm
uses the unweighted allocation rule (often described as ‘water‑filling’ in the literature).
|
| \(\lambda_{\mathrm{jud}}\) |
0.60 |
The minimum fraction of accredited judicial services that must concur for a
ruling to be adopted as the official judicial determination. Only services
that issue a determination are counted when evaluating this threshold.
|
Section 2: Derived constants
| Constant |
Value |
Description |
| \(K\) |
\(\{ k \in \mathbb{Z} \mid -\rho_{\max} \le k \le \rho_{\max} \}\) |
The full voting score set.
Voting scores are integers ranging from \(-\rho_{\max}\) to \(+\rho_{\max}\).
This set is fully determined by the base constant \(\rho_{\max}\).
|
| \(K_{\ge 0}\) |
\(\{ k \in \mathbb{Z} \mid 0 \le k \le \rho_{\max} \}\) |
The non‑negative voting score set.
Used in contexts where only positive support levels are relevant.
Also derived directly from \(\rho_{\max}\).
|
Section 3: Threshold constants for initiative registration
Three constants determine whether an initiative is registered, based on the voting on it:
- \(\lambda\) : the minimum fraction of non‑zero votes in favour.
- \(\eta\) : the minimum number of resident‑citizen votes required.
- \(\chi\) : the minimum turnout, expressed as a fraction of resident citizens.
The values of these constants depend on the kind of initiative as follows:
| Type |
\(\lambda\) |
\(\eta\) |
\(\chi\) |
| Service contract |
0.5 |
10000 |
0 |
| Law |
0.6 |
0 |
0.01 |
| Constitution |
0.7 |
0 |
0.65 |
Article IV: Definitions
Section 1: Ontological Definitions
- State Territory:
The geographical area over which the State exercises jurisdiction.
- Person:
A human being. The term Person refers exclusively to natural human beings and excludes
corporations, associations, artificial entities, and all other non‑human constructs.
- Citizen:
A Person who has voluntarily entered into a citizenship contract with the State.
Citizenship is a contractual legal status created by this Constitution.
- Non-Citizen:
A Person who is not a Citizen.
- Resident:
Any Person who is physically present within the State Territory, regardless of duration
or purpose of presence.
- Product:
Any good, service, or digital output, including subscriptions,
software licences, maintenance contracts, warranties, and mixed goods‑and‑services bundles.
Labour constitutes a service provided by a worker to an employer or client.
- Exported Product:
A Product sold by a Resident to a non‑Resident. Physical exports must depart the State Territory.
- Imported Product:
A Product sold by a non‑Resident to a Resident. Physical imports must enter the State Territory.
- Producer:
Any organisational entity, including a Person acting commercially, that supplies Products.
Section 2: Computerised Systems Definitions
- Identity System (\(M_{\text{IS}}\)):
Records identity information for the purpose of authenticating Persons.
It is used by many other systems.
- Central Bank (\(M_{\text{CB}}\)):
The distributed computer system which implements the State’s fiat monetary system: the currency
used for taxation and the funding of public services.
- Central Bank Payment System (\(M_{\text{CBPS}}\)):
A subsystem of the Central Bank.
It is the commerce‑based payment system through which monetary transfers are classified for the
purpose of consumption tax collection and business‑to‑business transactions.
- Tax Allocation System (\(M_{\text{TAS}}\)):
The subsystem of the Central Bank which implements tax allocation to UBI and Public Services.
- Initiative Drafting System (\(M_{\text{IDS}}\)):
Manages draft initiatives, including their preparation and submission for constitutional review.
- Voting System (\(M_{\text{VS}}\)):
The computerised system used exclusively by citizens to cast votes.
It records and tallies votes and determines when initiatives meet the criteria for
registration with the Governance Kernel.
- Governance Kernel (\(M_{\text{GK}}\)):
The authoritative system which records the full history of all registered initiatives,
allowing for the constitution, law and contracts to be provided in their current form
or at any point in the past.
Section 3: Mechanistic Definitions
- Public Service Contract:
A Public Service Contract is the legally binding instrument that defines the mandate, scope,
obligations, and governance of a public service.
- Legal Domain:
The Legal Domains are the following:
- the constitution;
- the law;
- each public service contract, considered as a distinct Legal Domain.
- Initiative:
A proposal to create, amend, or repeal a Legal Domain.
Article V: The State
- The State consists of laws and public services, and exercises authority only within the State Territory.
- No politicians or political parties shall constitute a government.
- The jurisdiction of the State applies exclusively to interactions conducted within its operational domain,
and only when such interactions occur within the State Territory. The State shall have no
extraterritorial enforcement powers.
Article VI: Laws
Section 1: Principles
- This Constitution establishes the principles upon which laws are based, thereby constraining what laws may exist.
Actions by residents are lawful unless explicitly prohibited herein.
- Laws shall define illegality and punishment as objectively and as clearly as reasonably possible.
- Any person present within the State Territory is subject to its criminal laws, regardless of where an
alleged offense occurred.
Section 2: Property rights
- Because physical resources are scarce, conflicts may arise when individuals attempt mutually exclusive
uses of the same resource. Property rights exist to prevent and resolve such conflicts.
- All rights are property rights.
- A property right is the right to exclude others from using a resource.
- Every property right shall have exactly one owner. A purported property right shared by two or
more Persons has no legal meaning and shall not be recognised or protected by the State.
- Several Persons may each own a different contractual right concerning the same resource. Each such
right shall have exactly one owner and shall not create shared ownership of the resource.
- Persons who purport to acquire a property right jointly do not thereby acquire a property right.
Unless ownership is assigned to one Person, the State shall not recognise the resource as having
an owner or enforce any purported ownership claim concerning it.
- Every person has an inalienable property right in their own body.
- A Person may hold property rights over:
- Physical objects
- Digital keys, currency, or tokens stored in computing systems that enforce mutual exclusion
- Areas of land defined by clear boundaries
- There shall be no property rights over creations of the mind, as they are non‑scarce and do not inherently
give rise to conflicts. Intellectual property rights such as trademarks, patents, or copyrights shall not exist.
- Voluntary agreements that restrict the disclosure or use of information, such as non‑disclosure agreements (NDAs),
are valid and enforceable, provided they do not impose obligations on non‑parties.
- Legitimate acquisition of property rights occurs through:
- Homesteading: first use of an unowned resource in the commons, unless a law prohibits
homesteading of that land within the State Territory.
- Production: creating new goods by transforming owned resources
- Voluntary transfer: receiving property by consent (e.g., trade, gift, inheritance)
A resource in the commons cannot be claimed merely by decree; it must be appropriated through actual use.
- Homesteading that blocks access between resources not owned by the homesteader (e.g., claiming “donut‑shaped” land) is prohibited.
- Abandoned property returns to the commons and may be homesteaded by others.
- Property rights may continue after death to respect mortal remains and uphold agreements such as wills, life insurance, or business contracts.
Section 3: Duty to warn or prevent harm
Residents are legally required to warn or prevent harm to others’ property only when:
- Special relationships: A duty exists when there is a special relationship between the parties, such as
parent‑child, employer‑employee, doctor‑patient, or innkeeper‑guest.
- Creation of peril: If a person’s actions, even if non‑negligent at the time, create a situation of danger,
they have a duty to remove the hazard or warn others.
- Contractual obligation: Failure to act in accordance with contractual duties (e.g., lifeguard or security
guard) constitutes breach of law.
These duties shall be interpreted narrowly and shall not impose general obligations to rescue or supervise others.
Section 4: Non‑Aggression Principle (NAP)
- Aggression is defined as initiating or threatening to initiate significant interference with a person’s
property rights or agreements through force, fraud, or negligence.
- It is unlawful for any resident or any agent of the State to violate the NAP.
- Every person has the right to use proportionate force in self‑defense or in defense of others, and to seek
restitution for violations of their rights.
- The State shall provide protective services to resident citizens.
- Consent is invalid when given by a person who lacks the capacity to understand the nature or potential harm
of the act.
- Violations of the NAP include:
- Attempting to control or obstruct the use of property one does not own (forestalling), including
preventing homesteading except where a law prohibits it under Section 2, restricting exit
from property, or blocking retrieval of one’s own property.
- Failing to uphold contractual obligations.
- Creating a significant and unjustified risk of interference with others’ rights (e.g., operating a
vehicle while intoxicated).
- Entering, searching, or inspecting another’s property without the owner’s consent, except pursuant to
a lawful warrant issued on objective evidence of a specific rights violation. General searches,
exploratory inspections, and searches lacking individualized cause are prohibited.
- Knowingly attempting to deceive, corrupt, disable, circumvent, or otherwise interfere with a
computerised system established by this Constitution so as to prevent, alter, or falsify its
constitutionally required operation.
- Only speech that constitutes incitement to immediate violence that would violate the NAP is prohibited.
- The State may conduct a property search only pursuant to a warrant issued under due process of law based on
probable cause of a specific act of aggression or negligence rising to the level of violating the NAP.
Section 5: Limited liability
- Persons may agree by contract to limit liability arising from their dealings, including by
limiting recovery to assets committed to a company, association, or other organisation.
- A limitation of liability binds only the parties who agreed to it and shall not limit the
property rights or claims of any other Person.
- Where an organisation violates the property rights of a Person who did not agree to a limitation
of liability, that limitation shall not protect a shareholder whose failure to exercise due
diligence in relation to the violation constitutes a violation of the Non-Aggression Principle.
Mere ownership of shares shall not, by itself, establish liability.
Section 6: Regulations
- The State shall not impose safety, economic, moral, environmental, technological, or administrative regulations
except where failure to comply constitutes harm or negligence rising to the level of violating the
Non‑Aggression Principle.
Any such regulation shall be narrowly tailored to preventing that harm and shall not restrict voluntary behaviour,
exchange, or land use beyond what is necessary to prevent demonstrable aggression or negligence.
- The State shall not impede the formation or operation of voluntary standards bodies, and shall treat their
publications as advisory references that individuals and businesses may freely adopt or ignore.
- The State shall not require licenses, permits, certifications, or fees for engaging in voluntary behaviour,
exchange, occupation, or enterprise, except where failure to comply constitutes harm or negligence rising to the
level of violating the Non‑Aggression Principle. Any such requirement shall be narrowly tailored to preventing
demonstrable aggression or negligence and shall not restrict voluntary participation beyond what is necessary
to prevent such harm.
- The State shall not suspend, override, or expand its powers on the basis of emergency, crisis, or necessity.
- No law shall grant the State additional powers on the basis of national security, public order, or similar
justifications beyond those permitted under the Non‑Aggression Principle.
- The State shall not seize property except as restitution following a conviction for aggression under due
process of law.
- No resident shall be compelled to disclose information or maintain records except where necessary to establish
responsibility for aggression under the Non‑Aggression Principle.
- The State shall not restrict expression, communication, encryption, or access to information except where
such expression constitutes direct incitement to imminent aggression.
- No resident shall be compelled to perform labour or service for the State except as restitution following
conviction for aggression.
- The State shall not impose zoning, land‑use restrictions, or building codes except where necessary to prevent
demonstrable aggression or negligence under the Non‑Aggression Principle.
- No resident shall be compelled to join or support any association, union, guild, or organisation.
- The State shall not freeze, restrict, or monitor financial accounts except pursuant to a warrant issued under
due process for investigation of aggression.
- Uniform automated analysis of gift-account records expressly required by this Constitution shall
not constitute monitoring for the purpose of the preceding clause. A Person may inspect identifiable
gift-account records on behalf of the State only pursuant to a warrant issued on probable cause of
tax fraud.
- Limits on Judicial Expansion of Negligence:
Negligence shall be interpreted strictly as conduct that creates a substantial and demonstrable risk of
violating the Non‑Aggression Principle in a specific instance. Courts shall not define negligence by reference
to compliance with industry standards, best practices, regulatory norms, or generalized duties of care, nor
may they impose affirmative obligations that function as de facto regulation. Negligence may not be inferred
from the mere absence of precautions, certifications, or procedures unless a direct causal link to a specific
rights violation is proven.
Section 7: Punishment
- The State holds a monopoly on significant retaliatory force, retribution, and punishment.
- The State shall enforce punishment for aggression committed by or against any resident,
irrespective of citizenship. This obligation is distinct from the provision of
protective services, which are guaranteed only to resident citizens.
- Punishment must:
- Impose restitution where possible
- Fit the seriousness of the crime
- Be consistent with punishments for similar crimes under similar circumstances
- Reflect the totality of an offender’s criminal behavior when multiple sentences are imposed
Article VII: Discrimination
-
Discrimination means selective treatment whether favourable or unfavourable, based on any
characteristic of a person, including, but not limited to, race, ethnicity, culture, religion,
sex, genetic traits, age, wealth, income, land ownership, appearance, beliefs, preferences,
circumstances, or possessions.
- The Non‑Discrimination Principle (NDP):
The State shall not discriminate, including through its laws, policies, procurement, pricing, fees,
charges, or access to services, except in cases involving:
- Merit‑based suitability for a task
- First-come, first-served priority up to a quota
- Allegiance to the constitution
- Citizenship
- Whether a person resides inside or outside the State Territory
- Violations of the Non‑Aggression Principle (NAP)
- Separate facilities for men and women
- Protection of minors
- Minimum age requirements
- Services and facilities for those who are pregnant, recovering from childbirth, or have
physical or mental illnesses, injuries, infirmities, or disabilities
-
Public services may make distinctions necessary to provide the service they are contracted to
provide.
Article VIII: Judiciary
Section 1: Judicial Services
- Judicial services are public services accredited to adjudicate disputes,
interpret laws, and determine the legal rights and obligations of citizens
and institutions.
- Any public service may apply for accreditation as a judicial service.
Accreditation requires a demonstrated record of impartiality, reliability,
and procedural integrity.
- Accredited judicial services operate competitively. No judicial service
holds exclusive authority over any domain of law or constitutional
interpretation.
- Judicial services are responsible for conducting constitutional review of
initiatives as set out in Article XI: Democracy, Section 3.
Section 2: First‑Tier Adjudication
- Every dispute, including constitutional questions arising under this
Constitution, shall first be adjudicated by a single judicial service
selected by a neutral mechanism defined by law.
- The first‑tier judicial service shall issue a binary ruling resolving the
dispute. This ruling is binding unless appealed under Section 3.
Section 3: Appeals and Multi‑Service Panels
- Either party may appeal a first‑tier ruling once. No further appeals are
permitted.
- Upon appeal, a judicial panel shall be constituted by random selection from
accredited judicial services. The panel shall contain the minimum number of
services required to allow, in principle, a reversal of the previous tier’s
ruling under the threshold \(\lambda_{\mathrm{jud}}\).
- Each judicial service on the panel shall issue a binary ruling. The panel’s
aggregated ruling shall be adopted if at least \(\lambda_{\mathrm{jud}}\) of
the panel concur.
- The panel’s ruling is final and binding.
Section 4: Scope of Judicial Authority
- Judicial services may interpret this Constitution, laws, and regulations,
and may determine the constitutionality of actions by public services or
institutions.
- Judicial services may determine whether an initiative complies with this
Constitution in accordance with Article XI: Democracy, Section 3.
- Judicial services may not modify this Constitution or any law. Their role
is interpretive, not legislative.
Article IX: Free market
- The State shall not borrow.
- The State shall not lend.
- The State shall not retain, accumulate, or carry forward financial reserves or unspent revenue beyond a tax allocation period.
- The State shall not interfere with the free market.
The operation of the CBPS and tax‑collection mechanisms shall not be considered interference with the free market.
- The State shall not impose import or export tariffs, quotas, duties, or any other measures that
restrict or distort voluntary trade across borders. All goods and services, whether foreign or
domestic, shall be subject only to the uniform consumption tax defined in Article XIX: Central Bank Payment System (CBPS).
Article X: Identity
Section 1: Purpose
The Identity System \(M_{\text{IS}}\) establishes and maintains person-identifiers for natural persons, supports the
operation of this Constitution, and provides mechanisms for authentication, citizenship, and residency
status, while protecting privacy.
Section 2: \(M_{\text{IS}}\) Base State
\(M_{\text{IS}}\) maintains the following information, which may be referenced by other
articles of this Constitution:
| Symbol |
Meaning |
| \(P_{\text{cit}}\) |
The set of person identifiers of living citizens. |
| \(P_{\text{res}}\) |
The set of person identifiers of living citizens recorded as residents. |
| \(P_{\text{non}}\) |
The set of person identifiers of living non-citizens known to \(M_{\text{IS}}\). |
| \(P_{\text{dead}}\) |
The set of person identifiers of people recorded as deceased. |
| \(P_{\text{alive}}\) |
The set of person identifiers of all living people known to \(M_{\text{IS}}\), equal to
\(P_{\text{cit}} \cup P_{\text{non}}\). |
| \(P_{\text{all}}\) |
The set of all person identifiers known to \(M_{\text{IS}}\), equal to
\(P_{\text{alive}} \cup P_{\text{dead}}\). |
| \(D_\text{status}(i)\) |
The status of the person identified by \(i\) (e.g., active, suspended, revoked). |
| \(D_\text{res}(i)\) |
The residency status recorded for the person identified by \(i\). |
| \(D_\text{death}(i)\) |
The verified death event, if any, recorded for the person identified by \(i\), including its
effective time. |
| \(D_\text{auth}(i)\) |
The authentication credentials associated with the person identified by \(i\). |
| \(D_\text{bio}(i)\) |
The biometric template associated with the person identified by \(i\) for authentication. |
| \(D_\text{basic}(i)\) |
The minimal basic information recorded on the person identified by \(i\). |
Section 3: Invariants
The following invariants shall hold at all times:
- \(P_{\text{res}} \subseteq P_{\text{cit}}\).
- \(P_{\text{cit}} \cap P_{\text{non}} = \varnothing\) and
\(P_{\text{alive}} = P_{\text{cit}} \cup P_{\text{non}}\).
- \(P_{\text{alive}} \cap P_{\text{dead}} = \varnothing\) and
\(P_{\text{all}} = P_{\text{alive}} \cup P_{\text{dead}}\).
- Each person has at most one person-identifier in \(P_{\text{all}}\).
- Each identifier in \(P_{\text{all}}\) corresponds to exactly one natural person.
Section 4: Capabilities of \(M_{\text{IS}}\)
\(M_{\text{IS}}\) shall:
-
Enable any natural person who is not yet a citizen to enter into the Citizen Agreement and thereby
obtain a unique person-identifier.
-
Enable any citizen to revoke their citizenship.
-
Enable any citizen to record and update their current residency status.
-
Record verified death events, permit the correction of erroneous death records, and provide the current
death status and effective time to constitutional systems that require them.
-
Prevent authentication as a person while that person is recorded as deceased.
-
Maintain minimal basic information for each person-identifier via \(D_\text{basic}(i)\),
limited to what is required for the operation of this Constitution.
-
Support optional interfaces with external systems, including international travel and border-control
systems, for validating or updating residency status.
-
Protect the privacy of all persons by ensuring that person-identifiers and associated data are
collected, stored, and disclosed only as required by this Constitution and its mechanisms.
-
Provide an Identity Authentication Service (IAS).
Section 5: Identity Authentication Service
The Identity Authentication Service (IAS) is a mechanism of the \(M_{\text{IS}}\) that provides secure
authentication based on person-identifiers.
The IAS shall:
-
Be available to people whose person-identifiers are in \(P_{\text{alive}}\).
-
Be available to public services and private-sector systems for secure authentication and login.
-
Provide secure identity verification using biometric authentication, based on
\(D_\text{bio}(i)\).
-
Achieve state-of-the-art security, usability, and resistance to impersonation.
-
Provide the basis for identity authentication for both the Voting System and the
Central Bank. Using the IAS for the Central Bank ensures that virtually all citizens
are strongly invested in the security and robustness of the IAS, since any weakness
would endanger the money they hold in Central Bank accounts. This high level of
citizen attention to safety is therefore inherited by the identity authentication
used by the Voting System, helping to protect a key requirement of democracy.
Article XI: Democracy
This Article establishes a system of continuous, informed, and voluntary democratic participation.
Citizens may propose initiatives, vote on them at any time, and revise their votes as they choose.
To ensure that decisions are made with understanding rather than impulse, each initiative shall be
accompanied by clear explanatory material and a simple comprehension process. The purpose of this
Article is to enable open participation while ensuring that voting is grounded in knowledge of the
initiative’s purpose, consequences, and principal arguments.
Section 1: Initiatives
-
Every initiative shall act upon exactly one Legal Domain, which it proposes to
create, amend, or repeal.
- Any citizen may propose an initiative.
- Every initiative shall be constitutional in form and effect, and shall be drafted
so as to be coherent, unambiguous, consistent, and complete.
- An initiative shall be cohesive.
An initiative is cohesive when all its provisions relate to a single, clearly identifiable purpose,
form an internally unified whole, and do not introduce unrelated or independent changes.
Section 2: Initiative Drafting System
The Initiative Drafting System is a computerised system that shall provide the following facilities:
- Allows citizens with online accounts to create and edit draft initiatives, with version control.
- Applies automated analysis, including the possible use of artificial intelligence, to identify
errors, inconsistencies, or apparent constitutional conflicts before a draft is submitted for
judicial review.
- Assigns unique identifiers to draft initiatives.
- Provides online forums for community discussion of draft initiatives.
- Supports informal community voting to provide feedback to the author on alternative choices within the draft.
- Allows draft initiatives to be submitted for constitutional review.
- Notifies Judiciary services of pending review requests.
- Allows Judiciary services to annotate draft initiatives with comments.
- Notifies the author when judicial review is complete.
- Manages payment for judicial review services.
- Transmits initiatives that have passed constitutional review to the Voting System
Section 3: Constitutional Review
- Every initiative must undergo a formal constitutional review before it may be made
available for voting.
- To submit an initiative for review, the proponent must upload it into the Initiative
Drafting System.
- Constitutional review shall be conducted by accredited judicial services in accordance
with the procedures set out in Article VIII: Judiciary. Each judicial service involved in the review
shall issue a binary determination of whether the initiative complies with this Constitution.
- The purpose of the review is solely to determine whether the initiative complies with
this Constitution. The review shall not assess the desirability, wisdom, or political
merit of the initiative.
- An initiative passes constitutional review if the final judicial determination, reached
through the adjudication and appeal procedures of Article VIII: Judiciary, finds that the initiative
complies with this Constitution.
- An initiative that fails constitutional review shall not proceed to a vote.
The proponent may submit a revised initiative for review any number of times.
- The cost of constitutional review shall be borne by the proponent of the initiative.
- An initiative that passes constitutional review shall be published and made
available for voting in accordance with the procedures set out in this Article.
Section 4: Voting
-
Every citizen shall have an online account through which they may vote on:
- initiatives that have passed formal constitutional review; and
- all public services.
-
Voting shall be expressed as a numerical score in \(K\).
For example, when \( \rho_{\max} = 2 \), the scores correspond to:
- −2: strongly against
- −1: against
- 0: abstain (neutral)
- +1: for
- +2: strongly for
-
A score of 0 is equivalent to not voting.
-
Voting is optional.
-
For every citizen \(c \in P_{\text{cit}}\), whether resident or not, the Voting System maintains:
- \(\psi(c,i) \in K\): the score assigned to each initiative \(i\);
- \(\rho(c,s) \in K\): the score assigned to each service \(s\).
-
Votes are private (secret ballot).
-
Citizens shall have a reasonable understanding of each initiative or service they vote on,
including its purpose and the principal arguments for and against.
-
Voting on an initiative shall remain open until it satisfies the criterion for registration.
-
Voting on services shall remain open without time limit.
-
A citizen may change their vote at any time and as often as they choose.
Section 5: Total scores of initiatives and public services
Although \(\psi(c,i)\) and \(\rho(c,s)\) are defined in the VS for all citizens, the various systems that use
these scores only consider resident citizens.
\(S_{\mathrm{init}}(s)\) is the total score of initiative \(i\):
\[S_{\mathrm{init}}(s) = \sum \{ \psi(c,s) | c \in P_{\text{res}} \}\].
\(S_{\mathrm{svc}}(s)\) is the total score of service \(s\):
\[S_{\mathrm{svc}}(s) = \sum \{ \rho(c,s) | c \in P_{\text{res}} \}\].
Section 6: Criterion for registration of an initiative
For any initiative \(i\), define:
- \(N_f(i) = \lvert \{\, c \in P_{\text{res}} \mid \psi(c,i) > 0 \,\} \rvert\), the number of resident‑citizen votes cast in favour;
- \(N_a(i) = \lvert \{\, c \in P_{\text{res}} \mid \psi(c,i) < 0 \,\} \rvert\), the number of resident‑citizen votes cast against.
All strictly positive scores are treated identically for the purpose of registration,
and all strictly negative scores are treated identically. The magnitude of a score
does not affect registration, ensuring that no strategic advantage can be obtained
by altering score intensity.
The predicate \(\operatorname{eligible}\) is defined as follows:
\[
\operatorname{eligible}(N_f, N_a, N, \lambda, \eta, \chi) :=
\bigl( N_f \ge \lambda (N_f + N_a) \bigr)
\;\land\;
\bigl( N_f \ge \eta \bigr)
\;\land\;
\bigl( N_f + N_a \ge \chi N \bigr).
\]
An initiative \(i\) is registered if and only if
\[
\operatorname{eligible}(N_f(i),\, N_a(i),\, \lvert P_{\text{res}}\rvert,\, \lambda,\, \eta,\, \chi)
\]
holds, using the values of \(\lambda, \eta, \chi\)
corresponding to the type of initiative, as specified in Article III: Constants Section 3.
Section 7: Registration of initiatives
-
At the end of each day, any initiative open for voting that meets the criterion defined in Section 6
is registered.
-
When an initiative is registered, the following actions are performed:
-
The initiative is removed from the VS, so it is no longer available to be voted on.
Voting on the initiative therefore ceases.
-
The initiative is recorded in the Governance Kernel defined in Article XII: Governance Kernel, an event‑sourcing database
that records all registered initiatives.
-
If the initiative \(i\) creates a new service \(s\), then:
-
Once registered, an initiative shall not be deregistered.
Section 8: Votable numeric parameters (VNPs)
- A nationwide parameter referenced by an initiative may be designated as a Votable Numeric Parameter (VNP).
Examples include:
- blood alcohol limits for drink‑driving laws
- statutory time limits
- noise pollution thresholds
- Citizens may define their preferred value of a VNP and may change it at any time.
- The value of a VNP shall equal the median of all voted values.
Section 9: Explanatory material and comprehension
- The author of an initiative shall provide clear and accessible explanatory material sufficient for
citizens to understand the initiative, its purpose, its expected consequences, and the
principal arguments for and against.
- Explanatory material may include text, diagrams, audio, video, or any other medium suitable for
communicating the substance of the initiative.
- The author shall prepare a neutral comprehension assessment based on the explanatory material.
A citizen must complete this assessment before casting a vote on the initiative.
- The comprehension assessment shall be designed to confirm engagement and understanding, not to
exclude voters. A citizen may attempt the assessment as many times as they choose.
- The explanatory material and comprehension assessment for each initiative shall be publicly
available.
Article XII: Governance Kernel
Section 1: Overview
The GK is a computerised system which records all registered initiatives
in a single, append‑only total order corresponding to their order of registration.
It is the authoritative record for the Constitution, Law, and Public Service Contracts.
The GK maintains the registered initiatives as an event‑sourced history.
The Constitution, Law, and Public Service Contracts, whether in their current form or at any point in the past,
are computed by folding over this history.
The formal machine‑readable language used by the GK is
Predica.
Public Service Contracts shall be expressed as Predica legal specifications.
The Constitution and Law may also use Predica where their provisions can be expressed formally.
Human‑readable text, headings, commentary, and cross‑references may be recorded as annotations
associated with the formal specification.
Predica is used where legal meaning depends on clear structural conditions that can be
expressed precisely. Natural language and judicial interpretation remain available where
legal meaning depends on judgment, context, evidence, or concepts that cannot be fully
captured by formal constraints.
The version of Predica accepted by the GK, including any restricted subset or extension used for
legal drafting, is itself part of the GK state.
Any change to the accepted Predica version or profile shall be made through the same initiative
process as other changes to the rule of law.
Conflicts between initiatives are resolved by a formally defined priority order,
applied when folding the relevant filtered history to compute a consistent legal state.
The GK represents the constitutional memory of the system.
It provides an immutable record of democratic decisions.
It is the single source of truth.
Section 2: Initiative ranking
-
The GK shall rank registered initiatives using the deterministic initiative
ranking defined in Appendix E: Initiative ranking.
-
This ranking governs all GK procedures that require initiatives to be compared,
including conflict resolution and the algorithm for determining inactive initiatives.
-
Where the ranking depends on voting scores that change over time, the GK shall use
the scores applicable at the time for which the legal state is computed.
Section 3: Conflicting initiatives
-
Two initiatives conflict when the legal effects of one negate, override,
or render impossible the legal effects of the other.
-
Some conflicts are formal conflicts that may be detected by Predica tooling,
including unresolved references, type errors, invalid constraint expressions,
malformed patches, or changes that cannot be applied to the target Legal Domain.
Formal conflict detection does not replace judicial interpretation.
-
Because initiatives may include human‑readable provisions, legal interpretation,
and intended effects that are not fully captured by formal syntax, no algorithm can
reliably determine all conflicts.
When citizens observe contradictory registered initiatives, the judiciary shall
make a determination and update the Initiative Incompatibility Relation (IIR)
maintained in the GK.
The IIR is an irreflexive, symmetric binary relation on registered initiatives.
-
Judiciary services that determine whether initiatives conflict are funded through tax
in the same manner as other public services.
-
At the end of each day, the algorithm defined in Appendix F: Algorithm for determining inactive initiatives
shall run in the GK to determine which initiatives are marked as inactive.
This procedure is deterministic: for any given IIR and the ranking defined in Appendix E: Initiative ranking,
the GK produces a unique inactive set.
-
Inactive initiatives are retained in the event‑sourced history of the GK.
The inactive state is used only as a filter when folding over history, so that
inactive initiatives behave as though they had never been registered.
Section 4: Legal specifications and event sourcing
-
The GK represents each Legal Domain as a versioned legal component.
The Legal Domains are the Constitution, the Law, and each Public Service Contract.
-
A Public Service Contract legal component shall contain a Predica specification
defining the contract's formal compliance conditions.
A Constitution or Law legal component may contain Predica specifications,
human‑readable provisions, or both.
-
A Predica specification may include type declarations, attributes, constraints,
derived attributes, functions, enumerations, variants, metadata, and annotations.
In normative use, Predica constraints define conditions that the relevant world,
institution, public service, or transaction must satisfy.
-
A registered initiative records a patch to exactly one Legal Domain.
A patch may add, replace, or remove Predica declarations, constraints,
derived definitions, annotations, human‑readable provisions, or rendering metadata.
-
The GK stores every registered initiative in an append‑only sequence.
To compute the legal state at any point, the GK determines the active initiatives
according to Section 3 and then folds the active patches in GK sequence order.
Inactive initiatives remain in history but are ignored by this fold.
Section 5: Administrative Initiatives
An Administrative Initiative:
-
records changes to a single Legal Domain like any other initiative, including
changes to Predica specifications, annotations, or public renderings, and is
processed by the GK in the same manner as any other initiative;
-
is submitted for registration by the Judiciary, not by the Voting System;
-
exists solely for the purpose of correcting mistakes, improving clarity,
preserving formal consistency, avoiding ambiguity, or preventing contradictions;
-
shall not change the compliance conditions imposed by the affected Legal Domain.
Section 6: Public text and annotations
-
The GK shall support public renderings of the Constitution, Law, and Public Service
Contracts in a form that can be read and understood by citizens.
-
Public renderings may organise legal content into articles, sections, clauses,
tables, formulas, examples, explanatory notes, and cross‑references.
This organisation is for publication and interpretation unless legal significance
is expressly encoded in the Legal Domain.
-
A human‑readable clause is a public textual unit associated with one or more
Predica declarations, constraints, annotations, or non‑formal legal provisions.
-
Where a legal requirement is expressed in Predica, its formal compliance condition
is defined by the Predica specification.
Human‑readable text associated with that requirement shall explain the formal
condition without altering it.
-
Where a legal requirement is not fully expressed in Predica, its human‑readable
provision remains part of the Legal Domain and is interpreted by the judiciary
according to this Constitution.
-
Clauses and annotations shall be narrow in scope.
Large or multi‑topic blocks of text shall be divided into smaller units where
doing so improves clarity, formalisation, or public readability.
-
The order of public text shall not affect legal meaning unless that ordering is
expressly encoded in the Legal Domain.
Failure to meet these requirements, for example by drafting clauses that are overly broad,
ambiguous, or structurally inappropriate, requires corrective action through
Administrative Initiatives.
Article XIII: Public services
Section 1: Public-service model
- Public services include the monetary, payment, and tax systems, portals, police, judiciary, prison
services, and other services as determined by registered initiatives.
- Each public service shall be defined by a contract with a private operator operating under profit and
loss.
Section 2: Public-service contracts
- Each public-service contract shall identify:
- The service and its required outputs, outcomes, and quality.
- The single Person who owns the business operating the service.
- The Persons responsible for performing the obligations of the contract.
- The objective measures used to determine performance and payment.
- The funding formula and the tax amounts required for full funding.
- The procedures for underfunding, breach, deregistration, termination, and replacement of the
operator.
Section 3: Funding constraints
- Public-service funding shall be calculated according to objective and independently verifiable costs,
usage, quality, outputs, or outcomes specified in the service contract.
- An operator's profit shall not increase merely because the operator increases its expenditure or
reimbursable costs.
- Accurately known or retrospectively verified costs shall be reimbursed without a markup. Payments for
operating the service, providing capital, achieving defined outcomes, or assuming identifiable risk
shall be stated separately.
- Funding shall not reward unnecessary use, duplicate or operator-generated activity that provides no
useful service, reduced quality, avoidable harm, or deliberate restriction of capacity.
- A payment based on usage shall apply only to independently verifiable useful use and shall account for
associated quality requirements.
- Each material financial risk and any compensation for accepting it shall be identified in the service
contract. Risks arising from an operator's efficiency or operational choices shall not be transferred
to taxpayers after the event.
Section 4: Failure and termination
- A public-service contract shall define the consequences of underfunding, operator failure, breach,
deregistration, and termination.
- A public-service contract may permit the operator to retain and accumulate tax allocations for future
performance.
- Underfunding shall not create an entitlement to supplementary or future funding.
- Where continuity of a public service is required, the contract shall define an objective procedure for
transferring its operation to a replacement operator.
Section 5: Privacy
- Public services shall not disclose personal information to another Person or organisation, whether
privately or publicly, without the consent of the Person concerned, except for the restricted
service access defined below and the following cases:
- To locate a missing Person where recorded evidence provides reasonable grounds to believe that
the Person is in danger and public assistance is needed. Disclosure shall be limited to the
name, image, identifying description, last known whereabouts, and circumstances needed for
that assistance. Publication shall cease when the Person is located or the grounds for the
appeal no longer apply. Locating a Person shall not itself authorise publication of their
current whereabouts.
- To establish the identity of an unidentified Person who is deceased or unable to identify
themselves, where public assistance is needed. Disclosure shall be limited to an image,
identifying description, and the time and place where the Person was found, to the extent
required for identification. Publication shall cease when identity is established.
- To obtain public assistance in identifying or locating a Person where recorded evidence
provides reasonable grounds to suspect that the Person committed an act causing or threatening
death or serious physical injury, or involving abduction or sexual violence. Disclosure shall
be limited to the name, image, identifying description, relevant whereabouts, and alleged
conduct needed for the appeal. The appeal shall distinguish suspicion from a finding of guilt.
Publication shall cease when its identification or location purpose is achieved or the grounds
for suspicion no longer apply.
- To warn of a specific threat where recorded evidence provides reasonable grounds to believe
that a Person presents an imminent danger of death or serious physical injury and identifying
the Person is needed to protect those at risk. Disclosure shall be limited to the name, image,
identifying description, relevant whereabouts, and nature of the threat needed for protection.
Publication shall cease when the grounds for the warning no longer apply.
- The exceptions in this Section are exhaustive. A public-service contract shall not create additional
exceptions. Attendance at a public event shall not, by itself, authorise identification without
consent. An operator making a disclosure without consent shall record its grounds and make them
available for independent review. When publication must cease, the operator shall end further
dissemination and remove the information from public notices and publications under its control.
Material errors shall be publicly corrected without repeating unnecessary personal information.
- A public service may make consent to publication of specified personal information an explicit
condition of using the service. The information to be published and the circumstances of publication
shall be stated before the Person agrees to use the service. Consent to such publication shall not
authorise publication of other personal information held by the service.
- Consent to a private disclosure shall specify the information, the recipient, and the permitted
purpose. Use of a public service shall not, by itself, constitute consent to disclosure to an
insurer, advertiser, or other third party.
- Restricted service access shall be limited to Persons performing identified duties in operating,
securing, or independently auditing the service, or transferring its operation to a replacement
operator. Each Person shall have access only to the information required for those duties and
shall be bound by the same privacy obligations. Such access shall not authorise use for the
recipient's own purposes or onward disclosure outside these rules.
- Each public-service contract shall specify the personal information required, the purposes for
which it may be used, the conditions permitting access or disclosure, and the periods or conditions
governing its retention and deletion. A contract shall not authorise a use prohibited by this
Constitution. Permission for restricted access to personal information shall not, by itself,
authorise disclosure to other recipients or to the public.
- Operators shall protect personal information against unauthorised access, use, alteration, and
disclosure. Each contract shall provide independently verifiable safeguards and procedures for
investigating and remedying breaches without unnecessarily exposing the information being protected.
- These obligations shall continue after termination of the contract. Personal information shall be
transferred to a replacement operator only as necessary for the continued service and subject to
the same privacy obligations.
Article XIV: Product Categories Defining Business Activity
Section 1: Product Categories
- The law shall establish a taxonomy of Product Categories for use within the
Central Bank Payment System. The taxonomy shall define broad classes of labour,
production, distribution, services, digital outputs, and monetary or investment
activities that may be supplied or received through B-accounts or R-accounts.
- Product Categories shall be expressed as literal identifiers using kebab-case and
enclosed in double quotation marks.
- The taxonomy shall consist solely of coarse, high‑level Product Categories that are
stable over time. It may be amended only when strictly necessary to prevent fraud,
evasion, or tax avoidance, and shall not be expanded, subdivided, or refined for the
purpose of regulating, directing, or influencing production, trade, or investment.
- The taxonomy shall be publicly accessible, general in application, and shall not
discriminate between Persons or classes of Persons.
- A Product may be described by more than one Product Category.
- The taxonomy shall classify every Product Category as exactly one of the following:
- an R-category, which may be assigned only to R-accounts; or
- a B-category, which may be assigned only to B-accounts.
The sets of R-categories and B-categories shall be mutually exclusive and together shall
comprise the complete set of Product Categories.
- Each B-account shall be assigned exactly one B-category, and each R-account shall be
assigned exactly one R-category, when the account is created. The CBPS shall record the
assigned Product Category as part of the account data and reject the creation of an account
whose Product Category does not correspond to its account type. For any B-account or
R-account a, let 𝜬(a) denote the Product Category recorded on a.
- The Product Category assigned to a B-account or R-account at creation is permanent and
shall not be altered.
- Once a Product Category has been assigned to an account, its classification as an
R-category or B-category shall not be altered. Where a different classification is
necessary, the law shall create a new Product Category rather than reclassify the
existing Product Category.
- The following Product Categories shall be B-categories:
- "gift";
- "finance";
- "foreign-currency";
- "import-wholesale";
- "exporter";
- "foreign-travel";
- "foreign-investment"; and
- "foreign-remittance".
- The following Product Categories shall be R-categories:
- "import-retail"; and
- "foreign-currency-retail".
Section 2: Compatibility Relation
- The law shall establish a Compatibility Relation 𝜥 over the set of Product
Categories. For any input category i and output category o,
𝜥(i, o) shall hold if, and only if, it is physically possible and economically
realistic for some product of category i to be required as an input to a
producer whose outputs fall exclusively within category o, or this Constitution
expressly permits payment for category i from accounts supplying category
o. Thus, i → o denotes the permitted flow of Products or services.
Payment for those Products or services flows in the opposite direction, from o
to i.
- The Compatibility Relation shall be maximally permissive. It shall include all
supply‑chain relationships that are physically possible and economically realistic,
and may exclude only those relationships that are physically impossible or that would
constitute an attempt to disguise consumption as production.
- For every R-category r and every Product Category x,
𝜥(r, x) shall be false.
- The Compatibility Relation shall include the following foreign‑trade
relationships:
- 𝜥("foreign-currency", "import-wholesale") is true;
- 𝜥("import-wholesale", "import-retail") is true;
- 𝜥("foreign-currency", "foreign-currency-retail") is true;
- 𝜥("foreign-currency", "foreign-travel") is true;
- 𝜥("foreign-currency", "foreign-investment") is true;
- 𝜥("foreign-currency", "foreign-remittance") is true; and
- 𝜥("exporter", "foreign-currency") is true.
- The Compatibility Relation shall include the following relationships for gifts and finance:
- 𝜥("gift", "gift") is true; and
- 𝜥("finance", "finance") is true.
- The category of a B-account used to provide a purpose-specific foreign service shall be
"foreign-travel", "foreign-investment", or
"foreign-remittance", as applicable to the service provided.
- The Compatibility Relation shall be publicly accessible.
- Nothing in this Article shall be construed to regulate, direct, or influence
production, investment, or trade beyond the minimum necessary to enforce the tax
provisions of this Constitution.
Section 3: Business Activity
- Business activity within the CBPS is conducted through B-accounts and R-accounts with an
assigned Product Category.
- The Product Category assigned to an account describes the Products supplied through
that account.
- No separate business registration, licence, approval, or legal entity is required.
- The State's role is limited to maintaining the Product Category taxonomy, defining the
Compatibility Relation, and enforcing the associated transfer rules.
- The State shall not use Product Categories to regulate ownership, control, organisational
structure, production, or trade.
- No additional requirement for establishing, registering, licensing, or authorising a
business may be imposed on a Person who has accepted the Central Bank account owner contract.
Article XV: Monetary system
Section 1 — Central Bank
- There shall be a single public service (the Central Bank) which is a computer system that
implements the monetary system to be used by Citizens for commerce, taxation, and the funding
of public services.
- The Central Bank shall not itself have reserves, either in the form of commodities or monetary
accounts.
The Central Bank shall not hold assets of any kind, whether financial, physical, or digital.
- The Central Bank shall not borrow or lend.
- The Central Bank shall not perform currency exchange of any kind, nor act as a counterparty in
foreign exchange markets. All currency conversion shall occur exclusively through voluntary
transactions in the free market.
- The Central Bank Payment System (CBPS) is a subsystem of the Central Bank.
Section 2 — Fiat Currency
- The Central Bank shall implement a fiat currency.
- The fiat currency shall:
- Exist only as non‑negative balances on Central Bank accounts.
- Be transferable between Central Bank accounts and require permission by the owner of the
source account (the "sender") and not require permission by the owner of the destination
account (the "receiver").
- Not be backed by any commodity.
- Not be created or destroyed at any time.
- All transfers shall preserve total currency supply exactly, without rounding loss.
- Float against other currencies.
Section 3 — Central Bank Accounts
- Accounts shall be free to create and use, and may be held by any person.
- Every Central Bank account shall have a zero balance when created.
- Every Central Bank Account shall have exactly one owner. Joint ownership of accounts is not permitted.
- All Accounts owned by a person shall be bound to a single, unique legal identity through a secure
biometric identity‑verification system. The identity‑verification system shall be designed to be highly
reliable, tamper‑resistant, and robust against impersonation, duplication, or fraud. The law shall ensure
that no person can obtain, control, or operate more than one identity within the Central Bank Payment System.
- The privacy and autonomy of account holders shall be protected.
- Auditing of transaction history of an account for criminal investigations must be justified and shall
require a warrant.
- Abandoned Central Bank accounts are closed and the balance is credited to UBI.
An account shall be deemed abandoned only after a period of fifty years of inactivity defined by law, which shall not
be less than fifty years.
Section 4 — Central Bank Implementation
- The Central Bank shall be implemented in accordance with Appendix D: Central Bank Implementation.
- The Central Bank shall operate as a distributed system in which each Account is owned by a single authoritative node
that alone is authorised to initiate debits from that Account. All outgoing transfers shall be recorded
in an append‑only, strictly ordered transaction log maintained by the owning node, and each transfer shall
bear a unique, monotonically increasing sequence number for that Account.
- Nodes shall exchange transaction information in a manner that ensures that all credits to receiving Accounts
are applied exactly once, in the order created, and as atomic batches. The implementation shall guarantee
that no Account balance can become negative, that no transfer can be duplicated or replayed, and that all
nodes converge to a consistent state under stable network conditions.
- The specific communication protocols, data formats, and storage mechanisms used to achieve these guarantees shall
be determined by law, provided they satisfy the invariants mandated by this Constitution.
- The Central Bank shall not employ global consensus mechanisms for transaction ordering or validation.
- The implementation shall be capable of millions of transactions per second.
Section 5 — System Integrity Requirements
- The Central Bank shall employ storage and processing mechanisms that guarantee atomicity, crash‑safety,
redundancy, and recoverability. All updates to Account balances, transaction logs, and replication state
shall be applied atomically, such that no partial or inconsistent state may arise from system failure.
- The implementation shall ensure that no hardware or software failure, including loss of power or storage
media, can result in the creation or destruction of currency, the duplication of transfers, or the
corruption of Account balances.
- The Central Bank shall maintain sufficient redundant and durable records to allow full recovery of all
Account balances, transaction logs, and replication state after any permitted failure. The specific
technologies used to achieve these guarantees shall be determined by law, provided they satisfy the
invariants mandated by this Constitution.
- No system failure or recovery process shall permit the rollback of any committed debit.
Article XVI: Non‑Citizens
- Except for obligations voluntarily accepted by contract, a Non-Citizen, while Resident,
is subject only to:
- Compliance with the Non‑Aggression Principle and all laws applicable to persons physically
present in the State Territory.
- Compliance with lawful warrants, court orders, and enforcement actions issued under this Constitution.
- Regardless of Residency, Non-Citizens shall have no administrative, reporting, registration,
or account-keeping obligations to any public institution except those they voluntarily accept by contract.
- Non‑citizens may supply products or assets to Producers controlled by Citizens.
- No additional duties, liabilities, privileges, or entitlements attach to Residency alone.
- Residency alone shall not create any obligation to open, hold, or maintain accounts with the
Central Bank, the Taxation Office, or any other public institution.
- Residency alone shall not create any obligation to apply for, obtain, or maintain Citizenship.
Article XVII: Central Bank Account Holders
Section 1 — Account Ownership Contract
- Only a Person may own a Central Bank account.
- Any Person may voluntarily enter into a contract with the State to own a Central Bank account
of any type, regardless of citizenship or residency, except that only a Non-Citizen may own a
G-account.
- An account owner may grant delegated account authority only to another Person who has accepted
the obligations of this Article.
- Delegated account authority shall not alter account ownership or type, nor affect how the CBPS handles transactions.
Section 2 — Accounts Used in Economic Activity
- Central Bank account holders shall create and use Central Bank accounts only in a manner consistent with the
actual nature of their economic activity. Knowingly using an account type that does not
correspond to the underlying activity for the purpose of tax avoidance constitutes a breach of
the Central Bank account owner contract.
- The owner of a B-account or R-account shall use that account only in conducting economic
activity consistent with the Product Category assigned to the account.
- The owner of a G-account breaches the Central Bank account owner contract if the owner, or a
Person acting on the owner's behalf, knowingly receives a G → G transfer in consideration for a
Product acquired for consumption by a Citizen.
- The owner of a B-account breaches the Central Bank account owner contract if the owner, or a
Person acting on the owner's behalf, knowingly receives a transfer in consideration for a
Product acquired for consumption.
- The owner of an R-account shall not receive a payment in consideration for consumption by
internal transfer. Every such payment shall be received by external transfer.
- Before a B-account receives payment for a Product capable of consumption, its owner shall ensure
that the purchaser is asked whether the Product is being acquired for consumption.
- A Central Bank account holder commits an offence if:
- they knowingly provide or arrange labour, finance, Products, services, equipment, or
materials for the production, processing, distribution, or delivery of the Product; and
- they know that the Product will be consumed by a Citizen; and
- they know that the Product was acquired without the required taxed payment into a
G-account or R‑account.
- For the purposes of this Section, a Product is consumed when it is used, applied, or enjoyed by a Person
in a manner that does not form part of any production, processing, resale, or contractual obligation to
supply Products to another party, and does not contribute to the creation, modification, or transfer of
value to others.
- A Central Bank account holder shall not knowingly participate in any economic arrangement that bypasses
an account or taxed payment required by this Constitution.
- Products acquired through payment into an R‑account may be transferred between Residents without
further use of any R‑account.
Section 3 — Gifts, Loans, and Investments
- The owner of a B-account categorised as "gift" shall use that account only to make or receive a
genuine monetary gift, inheritance, or dependent allowance. A transfer made or received through
that account shall not constitute consideration for any Product, service, transfer, obligation,
or arrangement. When initiating a gift transfer, the owner shall provide a truthful description
of its purpose and declare that it is not consideration for any Product, service, obligation,
reciprocal transfer, or other benefit.
- The owner of a B-account categorised as "finance" shall use that account only to make, receive,
service, repay, or settle a genuine monetary loan or investment, including an investment return
or return of invested capital.
Article XVIII: Citizenship
Section 1 — Nature and Status of Citizenship
- Nature of Citizenship:
Citizenship is a voluntary contractual relationship between a person and the State.
A person becomes a Citizen only by formally declaring citizenship to the Central Bank and
accepting the obligations of this Article. Citizenship is never automatic and must be
explicitly entered into.
- Lawful Non-Citizenship:
Any person may lawfully decline to declare citizenship. Persons who are not Citizens are not
bound by obligations that arise solely from citizenship and are not subject to rules that
apply only to Citizen Producers.
- Breach of Citizenship Obligations:
Failure to comply with the obligations of this Article constitutes a breach of the citizenship
contract. Such breaches shall be addressed under the Non‑Aggression Principle (NAP) and may
result in remedies or penalties as prescribed by law.
Section 2 — Eligibility and Entry
- Eligibility:
Any person may apply for citizenship, subject to identity verification and any
additional eligibility requirements established by law, provided such requirements are
objective, minimal, and non‑discretionary.
- Entering Citizenship:
A person becomes a Citizen by:
- Submitting a declaration of intent to enter into the citizenship contract.
- Providing a valid identity credential recognised by the State.
- Accepting all obligations of citizenship as defined in this Article.
- Moving the remaining balance of every G-account they own according to the applicable
transfer rules and closing every such account.
Citizenship takes effect immediately upon acceptance by the CBPS identity registry.
Section 3 — Termination and Re‑Entry
- Renunciation of Citizenship:
A Citizen may voluntarily renounce citizenship at any time by submitting a renunciation
declaration. Renunciation takes effect immediately upon processing by the CBPS identity
registry. Renunciation does not extinguish liabilities incurred prior to the moment of
renunciation.
- Automatic Termination:
Citizenship is automatically terminated if:
- The Citizen’s identity credential is invalidated due to fraud or unrecoverable compromise.
- The Citizen is deceased.
- The Citizen has been continuously non‑resident for a period defined by law, provided such
rules are objective and non‑discretionary.
- Re‑Entry into Citizenship:
A former Citizen may re‑enter citizenship by following the same process as a new applicant.
A cooling‑off period may be established by law to prevent strategic entry and exit for tax
avoidance.
Section 4 — Civil and Political Rights of Citizens
All Citizens have the following rights:
- The right to vote and participate in democratic processes as defined in Article XI: Democracy.
- The right to receive UBI, subject to eligibility rules defined by law.
- The right to access State‑funded public services.
- The right to equal protection under the law.
- The right to transparent access to their retained CBPS records and tax allocations, subject
to the privacy and deletion guarantees for private C-accounts.
- The right to renounce citizenship at any time.
- Citizens shall not be subject to audits, inspections, or reporting obligations beyond those inherent
in the automatic operation of the CBPS.
Section 5 — Administrative Obligations of Citizens
All Citizens must:
- Maintain a valid identity credential.
- Maintain at least one C-account and nominate one C-account for receiving UBI.
- Make or accept every monetary gift, inheritance, or dependent allowance through a B-account
categorised as "gift". A Citizen shall not use another account, currency, payment system, or
transfer arrangement to avoid this requirement.
- Make or accept every monetary loan, investment, repayment, investment return, or return of
invested capital through a B-account categorised as "finance". A Citizen shall not use
another account, currency, payment system, or transfer arrangement to avoid this requirement.
- Declare residency truthfully when required by law.
- Comply with all laws of the State, including the Non‑Aggression Principle.
- Maintain up‑to‑date contact information for official notices.
- Citizens shall declare residency status to the Central Bank and keep this status accurate and up to date.
- Citizens shall declare guardianship for dependents for UBI purposes, ensuring that each
dependent has exactly one declared guardian. No dependent may be associated with more
than one guardian at any time.
Section 6 — Consumption Tax Compliance
- A Citizen shall not knowingly arrange or participate in the acquisition of a Product without
the taxed payment into a G-account or R-account required by this Constitution when the Product
is intended for consumption by any Person.
- If the intended place or manner of consumption changes after acquisition, the Citizen may
satisfy the obligation through a tax-settlement procedure before consumption.
Section 7 — Business Activity Supplying Domestic Consumption
- A Citizen shall conduct each wholesale or other non-consumptive business activity that
contributes to Products consumed within the State Territory by Citizens through a B-account
having the appropriate B-category.
- A Citizen shall conduct each such business activity that receives payment for Products
acquired for consumption within the State Territory by Citizens through an R-account having
the appropriate R-category.
Section 8 — Special Rules
- Domestic and Foreign Business Activity:
A Citizen’s business operations are domestic only to the extent that they supply Products
for Consumption within the State Territory by Citizens.
Foreign business operations that supply exclusively for Consumption outside the State Territory are not subject to
domestic CBPS classification or taxation obligations.
- Employment and Compliance:
Citizens may work only for domestic businesses that are compliant with CBPS classification and
taxation rules. This requirement does not apply to foreign businesses operating exclusively outside
the jurisdiction.
- Domestic Supply-Chain Compliance:
A Citizen engaged in domestic business activity shall not knowingly supply labour, Products,
services, or productive inputs to a Producer for domestic business activity unless that Producer
is compliant with CBPS classification and taxation rules. A Citizen shall not knowingly receive
domestic business inputs through an arrangement that bypasses the CBPS where this Constitution
requires a B-account or R-account.
- Jurisdiction:
Citizens are subject to the jurisdiction of the State regardless of their physical location.
Non‑resident Citizens remain bound by the obligations of citizenship until citizenship is
terminated.
Section 9 — Fraud and Administrative Procedures
- Fraud and Misrepresentation:
Any fraudulent acquisition or use of citizenship credentials renders the citizenship contract
void. The State may revoke citizenship obtained through fraud, without prejudice to civil or
criminal liability.
- Administrative Rules:
The State may establish objective, mechanistic procedures for:
- Identity renewal.
- Credential recovery in the event of loss or compromise.
- Notification of changes to citizenship status.
Such procedures must be non‑discretionary and consistent with the principles of this Constitution.
Article XIX: Central Bank Payment System (CBPS)
Section 1 — Principles of Taxation
- Taxation shall be levied solely on the consumption of goods and services.
- Production, trade between producers, investment, and all other non-consumptive economic activity shall remain
untaxed and unrestricted except as required to enforce this Article.
No income tax, corporate tax, payroll tax, property tax, capital gains tax, inheritance tax, or wealth tax shall exist.
- Taxation shall be simple, automatic, non-intrusive, and free from bureaucratic discretion.
- No Resident or Citizen shall be required to file tax returns, maintain tax records, or submit
to tax audits.
Section 2 — Account Types
-
Every Central Bank account shall be assigned exactly one of the following
four account types at the time of creation:
- G for "general"
- B for "business"
- R for "retail"
- C for "consumption"
These account types are symbolic labels used by the Central Bank Payment System.
- The account type assigned at creation is permanent and shall not be altered. B-accounts and
R-accounts shall be assigned and governed by Product Categories in accordance with
Article XIV: Product Categories Defining Business Activity.
- Every C-account shall have a privacy flag whose value is set when the account is created and
shall not be altered. A C-account whose privacy flag is set is called a private C-account;
any other C-account is called a standard C-account.
- Only a Non-Citizen may own a G-account. Any Person may own an account of another type after
accepting the Central Bank account owner contract.
- Before a Non-Citizen becomes a Citizen, the CBPS shall require the Person to transfer the
remaining balance of every G-account they own in accordance with this Article and close each
G-account.
- A C-account is a personal consumption account for its owner and the owner's dependents. A
private C-account provides the information protections in Section 7.
Section 3 — CBPS Person Records
- For each Person who owns one or more Central Bank accounts, the CBPS shall maintain exactly one
person record indexed by that Person's unique person-identifier in the Identity System
\(M_{\text{IS}}\).
- Access to the Person's Central Bank accounts shall be authenticated through the Identity
Authentication Service of \(M_{\text{IS}}\).
- The person record shall record the Person's tax-choice preferences.
- The CBPS shall retain a Person's most recently recorded tax-choice preferences after the Person
ceases to be a Citizen, including if the Person ceases to own any Central Bank account. While the
Person is a Non-Citizen, the CBPS shall not permit the Person to view or modify those preferences.
If the Person subsequently becomes a Citizen, the CBPS shall restore the Person's access to the
retained preferences.
- The person record shall index every Central Bank account owned by the Person. For each account, it
shall record the account type and, where the account is a B-account or R-account, its assigned
Product Category. For each C-account, it shall record the privacy flag.
- The CBPS shall keep the person record consistent with the account records it indexes.
- The CBPS shall record the sender's purpose description and declaration with every ordinary
transfer from a B-account categorised as "gift", and shall reject the transfer if either is
absent.
- The CBPS shall apply uniform automated analysis to records of transfers involving B-accounts
categorised as "gift" to identify evidence that the accounts are being used for commerce or tax
evasion. It shall preserve the records required for audit by the public service responsible for
preventing tax fraud.
Section 4 — Automated Operation
- The CBPS shall operate as a mechanistic, computer‑based subsystem of the Central Bank, applying the
transfer and taxation rules of this Constitution automatically and without discretionary judgment.
Its function is limited to executing fixed rules governing monetary transfers between Central Bank
accounts.
- The tax system shall be implemented automatically by the CBPS. Consumption tax shall be collected
and distributed to UBI and public services without human intervention. The CBPS shall collect
consumption tax if and only if a transfer is a taxable event under Section 5.
- The CBPS shall automatically block every transfer prohibited by this Article.
- The CBPS shall automatically reverse or credit consumption tax as required by the refund rules
in Section 6.
Section 5 — Taxable Event
- Consumption tax shall be collected on every ordinary external C → R transfer.
- Consumption tax shall be collected on every ordinary internal or external C → G transfer.
- No other monetary transfer shall constitute a taxable event.
Section 6 — Permitted Transfers
- Every transfer is exactly one of the following:
- a refund;
- an administrative transfer expressly authorised by this Constitution; or
- an ordinary transfer.
- Every ordinary transfer is exactly one of the following:
- an internal transfer; or
- an external transfer.
- An internal transfer is an account-management transfer initiated through the account
owner's Central Bank account between two accounts owned by that Person.
- An external transfer is any ordinary transfer that is not internal. A commerce
transaction is an external transfer.
- An administrative transfer shall not credit an R-account unless it restores value previously
debited from that same R-account and does not exceed the unrestored amount of the earlier debit.
The following tables completely specify the rules for ordinary transfers.
The notation X → Y denotes transfers from an X-account to a Y-account, where X and Y substitute G, B,
R, or C.
Table 1 — Internal account-management transfers
| From \ To | G | B | R | C |
| G | Untaxed | Untaxed | Blocked | Untaxed |
| B | Blocked | Untaxed | Blocked | Untaxed |
| R | Blocked | Untaxed | Blocked | Untaxed |
| C | Taxed | Untaxed | Blocked | Untaxed |
Table 2 — External transfers
| From \ To | G | B | R | C |
| G | Untaxed | Blocked | Blocked | Blocked |
| B | Blocked | 𝜥-compatible | Blocked | Blocked |
| R | Blocked | 𝜥-compatible | Blocked | Blocked |
| C | Taxed | Blocked | Taxed | Blocked |
Table 2 describes ordinary external transfers and does not include refunds, which are governed
separately below.
Compatibility requirement for external B → B and R → B transfers
An external transfer from a source account s of type B or R to a destination account d of type B
is permitted only if:
𝜥(𝜬(d), 𝜬(s))
where:
This constraint shall not be construed as regulating, directing, or influencing production,
investment, or trade beyond the minimum necessary to enforce the tax provisions of this
Constitution.
Refunds
A refund reverses all or part of an earlier permitted transfer. It is governed exclusively by this
subsection, is not a taxable event or new commerce in the reverse direction, and need not satisfy
the ordinary transfer or tax rule for that direction. The four restricted external refund paths are
R → C, B → R, G → C, and a B → B transfer for which the reverse direction is not
𝜥-compatible.
- A refund shall return value between the same two accounts in the reverse direction and identify
the original non-refund transfer.
- Cumulative refunds shall not exceed the unrefunded amount of the original transfer.
- A partial refund shall reverse or credit the corresponding proportion of consumption tax
collected on the original transfer.
- A refund of an untaxed transfer is untaxed and causes no tax adjustment.
- A refund shall not itself serve as the original transfer for another refund.
- Where protected information has been purged, an anonymous refund credential shall establish
these facts without reconstructing the protected transaction history.
- Where a Non-Citizen funds their C-account by an internal G → C transfer and uses that value in a
C → R transfer, a refund may return the value through R → C and then C → G. The C → G step
reverses the original G → C transfer and is untaxed. It shall reference the original G → C and
C → R transfers, use the same C-account and G-account, and not exceed the amount returned by the
corresponding R → C refund.
Section 7 — Privacy of Private C-account Payments
- The CBPS shall not provide any operation by which a Person or authority can obtain information
capable of identifying the payer of a private C-account payment, linking separate private
C-account payments, or reconstructing a private C-account's transaction history.
- Once an external payment from a private C-account lies before the certified retention vector
time, the CBPS shall irreversibly purge information capable of identifying the payer, linking
separate private C-account payments, or reconstructing the private C-account's transaction history.
- The CBPS may retain anonymous refund credentials and aggregate tax-allocation information only
where they cannot identify the payer, link private C-account payments, or reconstruct protected
history.
Section 8 — Death, Incapacity, UBI, and Abandonment
- Incapacity does not change account ownership or make an account abandoned. A guardian or other
Person with delegated account authority may operate it for the owner under the same account-type,
Product Category, transfer, tax, and privacy rules.
- When \(M_{\text{IS}}\) records a verified death event for a Person, the CBPS shall automatically
place every Central Bank account owned by that Person into estate settlement, reject new
owner-authorised transfers, terminate all delegated authority over those accounts, cease UBI
payments to that Person, and begin the account-closing procedure.
- While an account is in estate settlement, the CBPS shall process transfers committed before the
death event and valid refunds. After liabilities and disputes have been resolved and the applicable
legal process has provided the lawful recipients and allocations, the CBPS shall execute the estate
transfers and close the account. Remaining value in a G-account may be transferred to a
G-account nominated by a Non-Citizen recipient or a "gift" B-account nominated by a Citizen
recipient. Remaining value in B-, R-, and C-accounts may be transferred to "gift"
B-accounts nominated by the recipients.
- Estate transfers under this Section are untaxed administrative transfers. If there is no lawful
recipient, the remaining value shall be transferred to the UBI pool.
- Universal Basic Income payments shall be deposited only into the C-account nominated by each
eligible Citizen.
- An account may be declared abandoned only after the constitutionally defined period has elapsed
without owner-authorised activity and the required account-recovery and notification procedures
have failed. It shall then be closed and its entire remaining balance transferred to the UBI
pool as an untaxed administrative transfer.
Section 9 — No Additional Regulation
- Nothing in this Article shall be construed to permit the State to regulate production, investment, trade between
producers, or any other non-consumptive economic activity.
- The CBPS shall not impose any requirement beyond those strictly necessary to enforce the provisions of this
Article.
Section 10 — Universal Basic Income (UBI)
-
For any taxable transfer at tax-inclusive amount p,
the component of consumption tax allocated to UBI equals:
\[
T_{\mathrm{ubi}} = T_{\mathrm{ext}} + p\,R_{\mathrm{ubi}}.
\]
Here \(T_{\mathrm{ext}}\) denotes any externality cost (e.g., pollution) associated with the
relevant supply and is zero where no externality cost applies.
- UBI shall be distributed only to Citizens who are resident, as declared under
Article XVIII: Citizenship.
- Citizens aged 18 or older shall receive the full UBI amount.
- A dependent is a person who:
- is under 18 years of age; or
- is an adult who, due to significant disability, is unable to manage their own affairs and
has a declared guardian.
- The UBI for a dependent shall be paid to the dependent’s declared parent or guardian.
- Each day, the total UBI pool collected by \(T_{\mathrm{ubi}}\) shall be distributed to all eligible citizens.
The individual payment \(U_{i}\) for an eligible citizen \(i\) of age \(a_i\) is determined by the formula:
\[
U_{i} = \frac{\sum T_{\mathrm{ubi}}}{\sum W(a_j)} \times W(a_i)
\]
where \( W(a) \) is the UBI weighting factor by age \(a\):
\[
W(a) = \begin{cases}
f_{\mathrm{start}} & 0 \le a < a_{\mathrm{ramp}} \\
f_{\mathrm{start}} + (1 - f_{\mathrm{start}}) \frac{a - a_{\mathrm{ramp}}}{a_{\mathrm{adult}} - a_{\mathrm{ramp}}} & a_{\mathrm{ramp}} \le a < a_{\mathrm{adult}} \\
1.0 & a \ge a_{\mathrm{adult}}
\end{cases}
\]
Section 11 — Funding of public services
-
Public-service funding shall be calculated for each tax allocation period. Each tax allocation
period shall be one day.
-
For a taxable transfer from a C-account whose owner is in \(P_{\text{cit}}\), the tax
shall be allocated according to that Citizen's tax choice. For every other taxable transfer, the
tax-allocation algorithm shall not use any tax-choice preferences retained for the account owner,
and the tax shall carry a score of zero for every public service.
-
For any taxable transfer at tax-inclusive amount p, the component of
consumption tax allocated to public services is:
\[
T_{\mathrm{svc}} = p\,R_{\mathrm{svc}}.
\]
-
Although expensive Products purchased for Consumption (such as houses and vehicles)
have their full consumption tax paid at the time of initial purchase, the corresponding tax
allocations to public services shall be distributed gradually over the expected lifetime of the
product, as if recurring tax liabilities were incurred by its successive owners. To prevent any
temporary reduction in the money supply, the initial tax revenue from such products shall be
credited directly to the UBI pool, and all subsequent scheduled allocations to public services
shall be drawn from the UBI pool.
-
Each public service shall have a defined tax budget for each tax allocation period, representing
the maximum tax revenue allocable to that service during that period.
-
\(T_{\mathrm{svc}}\) shall be distributed automatically as follows:
-
The Greedy Weighted Allocation Algorithm defined in Appendix C: Tax allocation algorithm shall be used together with
one of the following algorithms to calculate tax‑allocation factors by score, depending on
whether Article III: Constants specifies the parameter \( \omega \) as
null or as a
weighting function:
-
The tax allocation algorithm shall:
- Avoid significant overfunding of services.
- Adjust tax rates to avoid surplus if \(T_{\mathrm{svc}}\) exceeds total budgets.
- Prioritise funding for the Central Bank and the Tax Office.
- Allocate funding to registered services in descending order of total score.
-
For each service processed:
- Weight citizen allocations by their score on that service and their remaining unallocated tax.
- Ensure that negative scores imply no allocation.
- Treat score 0 as eligible to cover shortfalls.
- Treat tax from non‑citizens as though they assigned a score of zero to every service.
- Allocate any remaining unallocated tax to UBI.
-
Score 0 represents taxpayers who did not express a preference on this service, including
non‑citizens whose tax enters the system. Because score 0 carries no directional information,
it is used only to prevent underfunding, and never to influence the relative weighting for
tax allocations among positive scores.
Article XX: Foreign Trade
Section 1: Foreign Currency
- The acquisition, holding, transfer, or exchange of foreign currency shall not in itself
constitute Consumption within the State Territory.
- The use of foreign currency shall not alter the account, transfer, or tax treatment required by
this Constitution according to the purpose of the underlying transaction.
- The State shall not otherwise restrict the acquisition, holding, transfer, exchange, or disposal
of foreign currency.
Section 2: Currency Exchange
- Currency exchange for a business, investment, or other non-consumptive purpose shall be wholesale
business activity conducted through a B-account whose Product Category is "foreign-currency".
- Currency exchange that makes foreign currency available to a customer for Consumption shall be
retail business activity conducted through an R-account whose Product Category is
"foreign-currency-retail".
Section 3: Imports
- The supply of a foreign Product for Consumption within the State Territory shall be retail
business activity conducted through an R-account whose Product Category is "import-retail".
- The acquisition of a foreign Product as an input to production or for resale shall be wholesale
business activity conducted through a B-account whose Product Category is "import-wholesale".
Section 4: Purpose-specific Foreign Services
- A B-account whose Product Category is "foreign-travel" shall be used only to supply foreign
currency or make foreign payments for travel outside the State Territory and Consumption occurring
during that travel.
- A B-account whose Product Category is "foreign-investment" shall be used only to acquire, hold,
manage, settle, or dispose of foreign assets or foreign currency on behalf of an investor.
- A B-account whose Product Category is "foreign-remittance" shall be used only to transmit value
gratuitously to an identifiable foreign recipient and shall not be used to purchase a Product on
behalf of the sender.
Section 5: Exports
- The export of Products through the Central Bank Payment System shall be conducted through a
B-account whose Product Category is "exporter".
- The supply of a Product for Consumption outside the State Territory shall not constitute
Consumption within the State Territory.
Article XXI: Portals
There shall be online portals providing free access to current and historical:
- Laws
- Submitted initiatives
- Voting statistics
- Tax allocation and budgets of services
- UBI allocation
- Public service usage statistics
Article XXII: Robustness and security
- The Central Bank, Tax Office, and Portals shall run open‑source software with cryptographically hashed binaries allowing third‑party validation.
Appendix A: Pure waterfill allocation function for a single service
This appendix defines a pure function \(\mathcal{F}\).
\(\mathcal{F}(C, n, (\rho_c)_{c \in C}, (\tau_c)_{c \in C}, B)\) returns the tuple of
tax allocation factors \((F_0,\dots,F_n)\), where:
- \(C\) is a set of consumer identifiers,
- \(n \in \mathbb{Z}\) and \(n \gt 0\) is the maximum score,
- \(\rho_c \in \mathbb{Z}\) is the score assigned by consumer \(c \in C\),
with \(-n \le \rho_c \le n\),
- \(\tau_c \ge 0\) is the tax available from consumer \(c \in C\),
- \(B \ge 0\) is the budget of the service.
Definitions
Let \(K_{\ge 0} = \{0,1,\dots,n\}\) be the set of non‑negative scores.
For each \(k \in K_{\ge 0}\), let \(C_k = \{c \in C \mid \rho_c = k\}\) be the set of consumers
who assigned score \(k\) to the service.
Let \(T_k\) be their total available tax:
\[
T_k = \sum_{c \in C_k} \tau_c
\]
For each \(j \in K_{\ge 0}\), let \(M_j\) be the cumulative tax available from all consumers who assigned a score of at least \(j\):
\[
M_j = \sum_{k=j}^{n} T_k
\]
Allocation rule
The factors \((F_0,\dots,F_n)\) are determined by exactly one of the following cases:
- If \(M_0 \le B\) then the service is not overfunded, so all consumers fund the service fully.
Therefore: \(F_k = 1\) for all \(k \in K_{\ge 0}\)
- If \(B \le T_n\) then \(C_n\) alone has enough tax to fund the service. Only that group contributes.
Therefore: \(F_n = B/T_n\) and \(F_k = 0\) for all \(k < n\).
-
Otherwise, because the sequence \((M_j)\) is monotone non‑increasing, there is a unique
\(j \in \{0,\dots,n-1\}\) such that \(M_{j+1} \le B < M_j\).
Consumers with scores greater than \(j\) contribute fully, those with scores less than \(j\) do not
contribute, and consumers with score \(j\) contribute at a fractional rate.
Hence:
\[
F_k =
\begin{cases}
0, & k < j,\\[4pt]
(B - M_{j+1})/T_j, & k = j,\\[6pt]
1, & k > j.
\end{cases}
\]
Putting this together:
\[
F_k =
\begin{cases}
0,
& (B \le T_n \text{ and } k < n)
\;\;\text{or}\;\;
(M_{j+1} \le B < M_j \text{ and } k < j),
\\[10pt]
1,
& M_0 \le B
\;\;\text{or}\;\;
(M_{j+1} \le B < M_j \text{ and } k > j),
\\[10pt]
\dfrac{B}{T_n},
& B \le T_n \text{ and } k = n,
\\[10pt]
\dfrac{B - M_{j+1}}{T_j},
& M_{j+1} \le B < M_j \text{ and } k = j.
\end{cases}
\]
Post‑conditions
- Range: \(0 \le F_k \le 1\) for all \(k\).
- Monotonicity: if \(k_1 < k_2\) then \(F_{k_1} \le F_{k_2}\).
- At most one partial group: at most one \(k\) satisfies \(0 < F_k < 1\).
- Total allocation: \(\sum_{k=0}^n F_k T_k = \min(B, M_0)\).
- Negative scores excluded: consumers with \(\rho_c < 0\) do not appear in any \(C_k\) and therefore do not contribute.
Appendix B: Weighted allocation function for a single service
This appendix defines a pure function \(\mathcal{F}^{\mathrm{wt}}\).
\(\mathcal{F}^{\mathrm{wt}}(C, n, \rho_c, \tau_c, B, w_k)\) returns the tuple of
tax allocation factors \((F_0,\dots,F_n)\), where:
- \(C\) is a set of consumers,
- \(n \in \mathbb{Z}\) and \(n \gt 0\) is the maximum score,
- \(\rho_c \in \{-n,\dots,-1,0,1,\dots,n\}\) is the score assigned by consumer \(c \in C\),
- \(\tau_c \ge 0\) is the tax available from consumer \(c \in C\),
- \(B \ge 0\) is the budget of the service,
- \(w_k \ge 0\) is a weighting factor for each positive score \(k \in \{1,\dots,n\}\),
with at least one \(w_k > 0\) whenever \(\sum_{k=1}^n T_k > 0\).
Definitions
Let \(K = \{0,1,\dots,n\}\) be the set of non‑negative scores.
For each \(k \in K\), let \(T_k\) be the total available tax from consumers
who assigned score \(k\):
\[
T_k = \sum_{\substack{c \in C \\ \rho_c = k}} \tau_c.
\]
Let \(M_{>0} = \sum_{k=1}^n T_k\) be the total tax available from all positive‑score groups.
Allocation rule
The allocation proceeds in two stages:
- Positive‑score groups contribute first, using an iterative weighted water‑filling process.
- The neutral group contributes only to minimise a shortfall against the service's tax budget, and never when
positive groups can meet that budget in full.
Stage 1: Iterative weighted water‑filling among positive groups
Initialise:
- \(R = B\) (remaining budget),
- \(S = \{1,\dots,n\}\) (the set of active positive‑score groups),
- \(F_k = 0\) for all \(k\).
While \(R > 0\) and \(S \neq \varnothing\):
- Compute the total weighted capacity of active groups:
\[
W_S = \sum_{k \in S} w_k T_k.
\]
- If \(W_S = 0\), then set \(F_k = 0\) for all \(k \in S\) and terminate Stage 1.
- Compute the provisional factors:
\[
F_k^{\mathrm{prov}} = \frac{R}{W_S} \, w_k
\quad \text{for all } k \in S.
\]
- Let
\[
C = \{k \in S \mid F_k^{\mathrm{prov}} \ge 1\}
\]
be the set of groups that would exceed their cap.
- If \(C = \varnothing\), then:
- Set \(F_k = F_k^{\mathrm{prov}}\) for all \(k \in S\),
- Set \(R = 0\),
- Terminate Stage 1.
- If \(C \neq \varnothing\), then:
- Set \(F_k = 1\) for all \(k \in C\),
- Reduce the remaining budget:
\[
R = R - \sum_{k \in C} T_k,
\]
- Remove capped groups from the active set:
\[
S = S \setminus C.
\]
Let
\[
C_{\text{pos}} = \sum_{k=1}^n F_k T_k.
\]
Stage 2: Neutral group contribution (deficit‑only)
The remaining deficit is:
\[
D = \max(0,\, B - C_{\text{pos}}).
\]
The neutral group contributes only to reduce this deficit:
\[
F_0 =
\begin{cases}
0, & D = 0, \\[4pt]
\min\!\left(1,\; \dfrac{D}{T_0}\right), & D > 0.
\end{cases}
\]
Negative‑score groups never contribute.
Post‑conditions
- Range: \(0 \le F_k \le 1\) for all \(k\).
- Neutral deficit‑only: \(F_0 = 0\) whenever \(C_{\text{pos}} \ge B\).
- Total allocation:
\[
\sum_{k=0}^n F_k T_k = \min(B,\, M_0).
\]
- Negative scores excluded: consumers with \(\rho_c < 0\)
do not contribute.
Appendix C: Tax allocation algorithm
This appendix defines the Greedy Weighted Allocation Algorithm, which allocates each consumer’s tax
contributions across public services according to their stated scores. All monetary amounts are denominated
in integer units.
Input
Let \(C\) be the set of consumers and \(S\) be the set of services.
For each \(c \in C\), let \(\tau(c) \ge 0\) be the tax contributed by consumer \(c\).
Let
\(
K_{\ge 0} = \{0,1,\dots,\rho_{\max}\}
\)
be the set of non‑negative scores.
For each \(c \in C\) and \(s \in S\), let \(\rho(c,s) \in K\)
be the score assigned by consumer \(c\) to service \(s\).
Negative scores express dispreference and are excluded from allocation.
For each \(s \in S\), let \(\beta(s) \ge 0\) be the maximum tax allocable to service \(s\) (its budget).
Let
\[
w : K_{\ge 0} \to \mathbb{R}_{\ge 0}
\]
be a fixed weight function assigning a non‑negative weight to each non‑negative score.
The canonical weighting used in this document is
\[
w(k) = k,
\]
which treats higher scores as proportionally stronger expressions of preference.
No assumption is made about \(w(0)\); it may be zero or positive.
Output
The algorithm computes the following outputs:
-
the tax allocation \(a(c,s)\) of consumer \(c\) to service \(s\) for each \(c \in C\) and \(s \in S\).
-
the final remaining unallocated tax \(\tau_{\text{avail}}(c)\) for each \(c \in C\).
Under the constitution, this residual amount is allocated to the UBI pool.
Required properties
-
For all \(c \in C\):
\[
\sum_{s \in S} a(c,s) \le \tau(c)
\]
-
For all \(s \in S\):
\[
\sum_{c \in C} a(c,s) \le \beta(s)
\]
-
For all \(c \in C\) and \(s \in S\):
\[
\rho(c,s) < 0 \;\Rightarrow\; a(c,s) = 0
\]
-
All allocations satisfy:
\[
a(c,s) \ge 0.
\]
-
All final unallocated amounts satisfy:
\[
\tau_{\text{avail}}(c) \ge 0.
\]
Total score of a service
For each service \(s\), define its total score:
\[
\sigma(s) = \sum_{c \in C} \rho(c,s).
\]
Algorithm
-
Initialise remaining tax:
\[
\tau_{\text{avail}}(c) := \tau(c) \quad \text{for all } c \in C.
\]
-
Initialise all allocations:
\[
a(c,s) := 0 \quad \text{for all } c \in C,\, s \in S.
\]
-
Process services in non‑increasing order of total score \(\sigma(s)\). Ties may be broken arbitrarily.
-
For the current service \(s\), define the per‑score tax buckets:
\[
T_k = \sum_{\substack{c \in C \\ \rho(c,s) = k}} \tau_{\text{avail}}(c)
\quad \text{for all } k \in K_{\ge 0}.
\]
-
Apply the weighted water‑filling allocation function of Appendix B: Weighted allocation function for a single service:
\[
(F_0,\dots,F_{\rho_{\max}}) :=
\mathcal{F}^{\mathrm{wt}}\!\left(
C,\,
\rho_{\max},\,
\rho(c,s),\,
\tau_{\text{avail}}(c),\,
\beta(s),\,
w
\right).
\]
-
For each consumer \(c\), compute:
\[
a(c,s) :=
\begin{cases}
0, & \rho(c,s) < 0, \\[6pt]
F_{\rho(c,s)} \,\tau_{\text{avail}}(c), & \rho(c,s) \ge 0.
\end{cases}
\]
-
For each consumer \(c\), update:
\[
\tau_{\text{avail}}(c) :=
\tau_{\text{avail}}(c) - a(c,s).
\]
Computational complexity
The algorithm operates on two finite maps:
- \(C \to \mathbb{R}_{\ge 0}\), mapping each consumer to their remaining allocable tax,
- \(S \to \mathbb{R}_{\ge 0}\), mapping each service to its remaining unmet funding.
Let \(n = |C|\) and \(m = |S|\).
When these maps and the per‑service score buckets are implemented using hash‑based structures,
lookup, update, and deletion operations run in expected \(O(1)\) time.
Time complexity
Each iteration of the main loop eliminates either:
- a consumer whose remaining tax has reached zero, or
- a service whose remaining budget has reached zero.
Since each consumer and each service is removed at most once, the total number of iterations is
bounded by \(n + m\). Thus the overall running time is:
\[
O(n + m)
\]
Space complexity
The algorithm stores only the two maps, the per‑service score buckets, and a constant amount of auxiliary state.
Space usage is therefore:
\[
O(n + m)
\]
Practical considerations
Even for large populations, the values of \(n\) and \(m\) remain well within the capacity of a single modern
machine. Contemporary hardware can maintain and update millions of map entries with sub‑millisecond
operations. Because the algorithm is linear, memory‑bounded, and free of synchronisation bottlenecks,
it can be executed comfortably on a single server without requiring distributed computation.
Appendix D: Central Bank Implementation
This appendix specifies a deterministic and fault-tolerant implementation of the Central Bank.
Its purpose is to ensure that the operational behaviour of the system strictly enforces the
invariants defined in Article XV: Monetary system, including the prohibition on negative balances,
the integrity of all transfers, and the absence of discretionary authority. The design is
distributed, mechanically verifiable, and resilient to crashes.
It is straightforward to implement a system that converges at quiescence and prevents negative
balances even when nodes apply concurrent batches in different orders. The design is extremely
efficient and scales to millions of transfers per second, enabling true micropayment-scale
throughput.
1. Nodes, accounts, and local databases
The Central Bank executes on a collection of distributed machines called nodes.
In any database state, let \(N\) be the current set of node identifiers. Each node
has a unique identifier \(i \in N\).
Every Central Bank account belongs to exactly one node. Nodes create accounts, and a node
forever owns the accounts it created. For each node \(i \in N\), let \(L_i\) be
the current set of local account identifiers for accounts owned by node \(i\).
Every Central Bank account in the current state is identified by a pair
\((i,\ell)\) with \(i \in N\) and \(\ell \in L_i\). Here \(i\) is the node
that created and owns the account, and \(\ell\) is the account's local identifier
on that node.
Node \(i\) is authoritative for the balances of the accounts it owns. The value of the
local database on node \(i\) is modelled as the tuple
\[
D_i = (\beta_i,v_i,\chi(v_i)),
\]
where:
-
\(\beta_i : L_i \to \text{Amount}_{\ge 0}\) maps each local account
identifier \(\ell\) to the balance of account \((i,\ell)\);
-
\(v_i : N \to \mathbb{N}\) is a vector time defining what batches have been
applied to node \(i\)'s local database, where \(v_i(j)\) is the number of
batches created by node \(j\) that have been applied;
-
\(\chi(v_i)\) is the set of batches that have been applied. The notation
\(\chi\) is defined in Section 3 after batches have been introduced.
A local database transaction on node \(i\) is an atomic update to \(D_i\).
Database transaction atomicity ensures that \(D_i\) is
either fully updated or not updated at all, so the local database remains self-consistent.
No such database transaction requires network communication, distributed locking, two-phase commit,
or coordination with another node.
2. Monetary transfers
A monetary transfer is represented by the tuple
\[
(i_s,\ell_s,x,i_r,\ell_r,\alpha),
\]
representing a transfer of amount \(\alpha \ge 0\) from source account
\((i_s,\ell_s)\) to receiving account \((i_r,\ell_r)\). The value \(x\) is a
transfer number such that \((i_s,\ell_s,x)\) uniquely identifies the debit on
account \((i_s,\ell_s)\), and is therefore the identity of the monetary transfer.
This transfer may be created only by node \(i_s\), and only if
\(\alpha \le \beta_{i_s}(\ell_s)\).
The transfer updates two balances:
-
a debit at node \(i_s\), subtracting \(\alpha\) from
\(\beta_{i_s}(\ell_s)\);
-
a credit at node \(i_r\), adding \(\alpha\) to
\(\beta_{i_r}(\ell_r)\).
3. Batches
A batch \(B_{i_s}(t)\) is a finite set of monetary transfers created by node \(i_s\), with batch
identifier \((i_s,t)\), where \(t \in \mathbb{N}\) is zero-based. All transfers in
\(B_{i_s}(t)\) have source node \(i_s\). The purpose of a batch is to record the
credits that need to be applied at receiving nodes.
When node \(i_s\) begins a new batch, its index is \(t=v_{i_s}(i_s)\).
The node advances \(v_{i_s}(i_s):=t+1\) and creates \(B_{i_s}(t)\) as an
initially empty current batch. Within a local database transaction, each created transfer
\((i_s,\ell_s,x,i_r,\ell_r,\alpha)\) debits \(\beta_{i_s}(\ell_s)\) and is
appended to \(B_{i_s}(t)\). The batch may grow over many
local database transactions until it is closed.
While accumulating \(B_{i_s}(t)\), node \(i_s\) may apply batches received from other
nodes. Those batches can only apply credits, so they do not
conflict with the transfers already accumulated in \(B_{i_s}(t)\).
Node \(i_s\) closes batch \(B_{i_s}(t)\) by making its current contents immutable,
and may then begin accumulating a new batch \(B_{i_s}(t+1)\). A batch must be
closed and durable before it is sent to a peer.
For a vector time \(v\), define its batch extent as
\[
\chi(v) = \{\, B_j(t) \mid t \lt v(j) \,\}.
\]
Thus the third component of \(D_i\) records exactly \(\chi(v_i)\).
4. Streaming between nodes
Nodes maintain long-lived, bidirectional network connections, for example TCP streams.
In this section, \(i\) is the sender, \(j\) is the receiver, and \(k\) is the
creator of a batch. When nodes \(i\) and \(j\) first establish a connection, they
send each other their current vector times \(v_i\) and \(v_j\).
After receiving \(v_j\), node \(i\) keeps a transient send cursor \(\widehat v_j\)
for that connection, initially set to the received value of \(v_j\). This cursor is not
part of \(D_i\). Node \(i\) sends node \(j\) the batches in
\[
\chi(v_i)\setminus\chi(\widehat v_j).
\]
Batches are sent in transmission units that node \(j\) can process atomically.
A transmission unit is a finite list of triples \((k,t,B_k(t))\), ordered by
increasing \(t\) for each source node \(k\). After node \(i\) sends a unit, it advances
\(\widehat v_j\) for the batches included in that unit.
Node \(j\) does the same in the other direction. The connection remains established,
and each node continues sending later batches to the peer in transmission units as they
become available.
A node may synchronise with multiple peers at the same time. This may cause redundant
copies of batches to be received. Redundant transmission is harmless because local
application is controlled by the receiver's current \(v\).
5. Applying a received unit
Node \(j\) applies each received transmission unit in one local database transaction.
The unit is processed in list order.
For each triple \((k,t,B_k(t))\) in the unit, node \(j\) applies \(B_k(t)\)
if \(v_j(k)=t\). If \(v_j(k)\gt t\), the batch has already been applied and is
skipped.
For each applied triple \((k,t,B_k(t))\), the database changes are:
- record \(B_k(t)\) in node \(j\)'s durable batch records;
- apply all credits in \(B_k(t)\) for accounts owned by node \(j\); and
- set \(v_j(k) := t+1\).
6. Crash recovery and error handling
Crash recovery is local to each node. After recovery, a node uses its durable local
database, reconnects to peers, exchanges its recovered vector time, and receives any
missing batches.
If node \(j\) fails before an application of a transmission unit commits, then none
of that unit's updates are durable and the unit may be received again after recovery.
If node \(j\) fails after commit, then the batch records, local balance updates, and
vector time updates from the unit are all durable.
- Nodes may include checksums or equivalent integrity mechanisms to detect transmission errors.
- Malformed transmission units are rejected without changing the local database.
7. Why the algorithm works
Causality preservation
Given batches \(a\) and \(b\) we say \(a\) precedes \(b\), written as \(a \to b\) if \(a\)
had been applied on the node where \(b\) was created.
This is Lamport's happens-before relation restricted to batches. It is a strict partial order.
Let \(S\) be a set of batches which defines a global state.
By global state we mean all the account balances in the system that would result if all nodes fully
applied every batch in \(S\).
We say \(S\) preserves causality if \((b \in S \;\land\; a \to b) \Rightarrow a \in S\).
If sets of batches \(S_1\) and \(S_2\) preserve causality, then \(S_1 \cup S_2\) and \(S_1 \cap S_2\)
also preserve causality. Thus the causality-preserving database states form a lattice under
set union and set intersection.
Synchronisation as join
For vector times \(v\) and \(w\), define the pointwise join \(v \vee w\):
\[
(v \vee w)(i) = \max(v(i),w(i)).
\]
Pointwise join represents the set union:
\[
\chi(v \vee w) = \chi(v) \cup \chi(w).
\]
When two nodes exchange their current vector times and then exchange the missing
batches defined in Section 4 in an order respecting \(\to\), each node can advance
to this join.
Synchronisation does not require conflict resolution or global ordering. It only requires
each node to apply missing batches in an order respecting the precedes relation.
Preservation of causally valid local states
Claim: for every node \(i\), after every committed local database transaction, the vector
time \(v_i\) denotes a causality-preserving batch set \(\chi(v_i)\), and the balances in
node \(i\)'s local database are consistent with the projection of that batch set onto the
accounts owned by node \(i\). Consequently, at quiescence, all nodes that have received the
same closed batches agree on the corresponding global monetary state.
The proof is by induction over committed local database transactions. The induction
invariant is that, for every node \(i\), its vector time \(v_i\) denotes a causality-preserving
batch set \(\chi(v_i)\), and the node's local balances are consistent with the projection of
that batch set onto the accounts owned by node \(i\). The empty initial batch set satisfies
this invariant.
There are two ways for a node to advance. First, a node may create a new batch.
The predecessors of that batch are the batches already applied at the creating node,
which form a causality-preserving set by the induction hypothesis. Adding the new
initially empty batch therefore preserves causality, and the transfer creation rule
preserves non-negative balances as the batch grows.
Second, a node may receive one or more batches from another node. The received transmission
unit is committed atomically, and represents a causality-preserving extension of the receiver's
current batch set. The receiver therefore moves from one causality-preserving set to another.
The implementation details refine this proof. Concurrent creation and receipt can be
serialised according to the order in which local database transactions commit, because received
batches only credit local accounts and cannot invalidate a debit that was already safe. Growing
a batch over several local transactions is equivalent, for the closed-batch history, to creating
its final contents when the batch is closed. A local transfer, where
\(i_s=i_r\), may be handled as immediate self-delivery without changing the source batch history.
At quiescence, after all nodes required to maintain current Central Bank state have received all
closed batches, their vector times denote the same causality-preserving batch set. Their local
balance projections are therefore mutually consistent parts of a single global state.
Non-negative balances
A debit is created only by the node that owns the source account, and the transfer creation rule
in Section 2 prevents such a debit from overdrawing that account. No remote node can create a
debit against that account. Batches received from peers can only credit accounts owned by the
receiving node. Therefore no account balance can become negative.
Exactly-once balance updates
Each transfer has a unique identity and belongs to exactly one source batch.
At the source node, the database changes that create the transfer add it to that batch
and apply the debit together. For received units, node \(j\) applies a triple
\((k,t,B_k(t))\) only when \(v_j(k)=t\). Applying the credits and updating
\(v_j(k)\) to \(t+1\) are made together. A later copy of the same batch is redundant
because \(v_j(k)\gt t\). Therefore debits and credits are applied exactly once.
Crash safety
Each database transaction either commits all of its updates or none of them.
Transfer creation commits the batch entry and debit together.
Received unit application commits its batch records, credits, and vector time updates
together. Advancing \(v_i(i)\) commits the vector time update. Recovery therefore
returns the node to a database state.
No distributed database transaction
Network communication only transmits vector times and transmission units between nodes.
All state changes are local database updates on one node. The algorithm therefore does
not require distributed commit, distributed locking, or global consensus for transfer
validation.
8. Invariants
This implementation preserves the following invariants required by Article XV: Monetary system:
- No account balance may become negative.
- All debits are created only by the authoritative node for the sending account.
- All database states are causality-preserving.
- All vector times describe batch prefixes applied at the recording node.
- All debits of transfers added to source batches are applied exactly once.
- All credits of transfers added to source batches are applied exactly once.
- All batch records are replayable, and sent batch records are never modified.
- The system is deterministic and free of discretionary behaviour.
9. Forwarding and retention
The core algorithm only requires that batches and vector times reach every node that needs
them. The connection graph may be a spanning tree, a denser mesh, or a complete graph.
In a tree, batches are forwarded across the connections that separate nodes that have a
batch from nodes that still need it. In a denser graph, redundant paths can reduce latency.
For forwarding, an implementation may cache whole batches or decomposed parts of batches.
A common decomposition is by receiving node, so a node forwards only the credits another
node needs to apply. Such cached parts are an implementation detail; they preserve the
source batch identifier \((i,t)\).
A local transfer has \(i_s=i_r\). It may be implemented by applying the debit and credit
together on the creating node, while still recording the transfer in the source batch.
This avoids making money temporarily unavailable within a node and does not change the
batch-history model used above.
A certified retention vector time \(v_{\mathrm{retention}}\) may be established, provided that
\(\chi(v_{\mathrm{retention}})\) is causality-preserving and every node required to maintain
current Central Bank state has durably incorporated the batches in
\(\chi(v_{\mathrm{retention}})\).
Where an account type has a constitutional guarantee that its transaction history will not be retained,
transaction information for that account may be irreversibly deleted once it lies before the certified
retention vector time. At that point every node required to maintain current Central Bank state has
durably incorporated the transaction, so its identifying history is no longer required to propagate or
recover its effect on account balances. The remaining state must preserve the resulting balances, vector
times, conservation of currency, tax allocations, and protection against duplicate application without
preserving information from which the protected transaction history can be reconstructed.
In normal operation, nodes continuously exchange and durably apply closed batches, so the certified
retention vector time is expected to advance beyond a transaction within seconds. This expectation does
not replace the certification requirement: protected information may be deleted only after the relevant
transaction lies before the certified retention vector time. Deletion must include every Central Bank
copy of the protected information, including batch records, replicas, indexes, caches, logs, backups, and
diagnostic records.
Batches in \(\chi(v_{\mathrm{retention}})\) may be compacted, archived, checkpointed, or removed
from hot operational storage, provided that the remaining records are sufficient to recover
account balances, vector times, applicable audit obligations, and all invariants required by this
Constitution. Such compaction or purging shall not alter any balance or permit a batch update
to be applied more than once. Protected transaction information described above must be deleted rather
than archived and is excluded from later audit obligations.
Appendix E: Initiative ranking
This appendix defines the deterministic ranking of registered initiatives used by the GK
whenever initiatives must be compared, including conflict resolution and the algorithm
for determining inactive initiatives.
Every initiative \(i\) has a normative level, represented by an integer
\(\mathrm{level}(i)\), determined by the Legal Domain upon which it acts:
\[
\mathrm{level}(i) =
\begin{cases}
3, & \text{if } i \text{ acts upon the Constitution;} \\[4pt]
2, & \text{if } i \text{ acts upon the Law;} \\[4pt]
1, & \text{if } i \text{ acts upon a Public Service Contract.}
\end{cases}
\]
For any initiative \(i\), define:
- \(\mathrm{service}(i)\): the service created or modified by \(i\), if any;
- \(S_{\mathrm{svc}}(s)\): the total score of service \(s\), defined in Article XI: Democracy;
- \(S_{\mathrm{init}}(i)\): the total score of initiative \(i\) at the moment of its registration, defined in Article XI: Democracy;
- \(\mathrm{seq}(i)\): the sequence number assigned to \(i\) in the GK,
according to the strict total order of registration.
Define the service‑score component of an initiative \(i\) as:
\[
S_{\mathrm{svc}}^{\mathrm{act}}(i) =
\begin{cases}
S_{\mathrm{svc}}(\mathrm{service}(i)), & \text{if } i \text{ acts upon a service;} \\[4pt]
0, & \text{otherwise.}
\end{cases}
\]
The ranking vector of an initiative \(i\) is:
\[
R(i) = \bigl(\mathrm{level}(i),\; S_{\mathrm{svc}}^{\mathrm{act}}(i),\; S_{\mathrm{init}}(i),\; \mathrm{seq}(i)\bigr).
\]
The lexicographic order on initiatives is defined by:
\[
i \succ j
\quad\text{iff}\quad
R(i) >_{\mathrm{lex}} R(j).
\]
For a fixed evaluation time and fixed voting scores, this ordering is total and deterministic.
It ensures that:
- initiatives with higher normative levels always outrank those with lower normative levels;
- among initiatives that act upon services, the service’s total score dominates the initiative’s own score;
- initiatives concerning the same service are ordered by their initiative scores;
- ties are resolved by the sequence number assigned by the GK.
\(S_{\mathrm{svc}}(s)\) may change over time, because voting on services remains open indefinitely.
This dynamism is intentional: it ensures that, in the lexicographic ranking,
the current popularity of a service dominates the popularity of the initiative
that created or modified it.
Appendix F: Algorithm for determining inactive initiatives
This appendix defines a pure function \(\mathcal{A}\).
\(\mathcal{A}(I, \mathrm{IIR}, R)\) returns the subset of initiatives
marked as inactive, where:
- \(I\) is the set of all registered initiatives,
- \(\mathrm{IIR} \subseteq I \times I\) is the
Initiative Incompatibility Relation, an irreflexive,
symmetric binary relation,
- \(R(i)\) is the lexicographic ranking vector of initiative \(i\),
as defined in Appendix E: Initiative ranking.
Definitions
Let \(L\) be the list of all initiatives in \(I\), sorted in
descending order by the lexicographic ranking:
\[
L = (i_1, i_2, \dots, i_m)
\quad\text{such that}\quad
i_1 \succ i_2 \succ \cdots \succ i_m.
\]
Define the compatibility predicate:
\[
\mathrm{compatible}(i, A)
\;\;\text{iff}\;\;
\forall j \in A,\; (i, j) \notin \mathrm{IIR}.
\]
The algorithm constructs a set \(A\) of active initiatives.
All other initiatives are inactive.
Algorithm
-
Initialise the active set:
\[
A_0 = \varnothing.
\]
-
For each initiative \(i_k\) in the sorted list \(L\), in order:
-
If \(\mathrm{compatible}(i_k, A_{k-1})\) is true, then
\[
A_k = A_{k-1} \cup \{i_k\}.
\]
-
Otherwise,
\[
A_k = A_{k-1}.
\]
In this case, \(i_k\) is marked inactive.
-
After processing all initiatives, the final active set is
\[
A = A_m.
\]
The function returns the set of inactive initiatives:
\[
\mathcal{A}(I, \mathrm{IIR}, R)
= I \setminus A.
\]
Post‑conditions
- Determinism:
Because the ranking \(R\) induces a strict total order, the algorithm
produces a unique inactive set for any given inputs.
- Maximal compatibility:
The active set \(A\) is a maximal subset of \(I\) containing no pair
of incompatible initiatives. It is not necessarily the maximum-cardinality
or maximum-weight compatible subset.
- Greedy priority preservation:
Every inactive initiative conflicts with at least one higher‑ranked
initiative in the active set. No initiative is made inactive except to
preserve compatibility with initiatives that were accepted earlier in
the ranking.
- Single‑initiative rank monotonicity:
Holding \(I\), \(\mathrm{IIR}\), and all other rankings fixed, increasing
the rank of an active initiative cannot cause that initiative to become
inactive.
- Event‑sourcing compatibility:
Inactive initiatives remain in the event‑sourced history; the inactive
state is used only as a filter when folding over history.
Scope
This algorithm resolves incompatibility only. It does not determine whether
an initiative is well‑formed, legally valid, or applicable after other
initiatives have become inactive. Any dependency or applicability rules must
be evaluated separately before or during the fold over active initiatives.