A sovereign capability foundry & physical inference engine

Render enterprise reality on silicon you own.

A sovereign, proof-carrying operating estate that renders enterprise reality on local silicon, recycles its own compute through geometric memory, and turns any individual with a Kard into an autonomous, self-powering node in a decentralized mesh.

Composed, not merged. Three minds resolve into one pipeline — a structural lattice, a thermodynamic law, and a thermodynamic pump — open under MIT, sovereign at every seam. Every stage below has a door you can open right now.

See the pipeline → Open fall-os ↗ Federate now ↗
Proof-carrying · nothing trusted unless provable Local-first · edge & consumer metal 100% MIT every stage live
Core mechanical identity

Three minds, one pipeline — composed, not merged

The system is sovereign at the seams: each mind's contribution stays its own, verifiable and creditable, and they resolve into a single mechanical identity.

Structural lattice

Memory geometry that never re-indexes

Records land on an invariant, deterministic lattice by low-discrepancy golden-ratio (Vogel / sunflower) placement, with spacing bounded for any count by the Steinhaus three-gap theorem — so memory stays evenly distributed with no re-indexing daemon.

Thomas Frumkin · Konomi architecture

Thermodynamic law

Inference governed by entropy

State sits un-rendered in a shadow layer and collapses into the lit layer only when an observer's attention touches a coordinate — render on observation, the entropy-guided principle (GEP / NEXUS). It is the credited lens over the estate's real cosine-retrieval and read-gate.

Gary W. Floyd · Lumiea Systems Research Division — ThunderStruck Service LLC

Thermodynamic pump

Completing a computation powers the next

Prefix reuse and capacity pooling collapse cold-start prefill; releasing an exited computation's held state fuels the next observation. Measured on local metal: a 95% prefill-latency cut and 67% of embedding calls recycled on related work.

Simon Gant · FallForge · the Fold-Cycle

The pipeline

A node opens a Kard, then seven stages

One coherent flow from proof to a self-powering node in the mesh. Each stage names its real component and the live door that runs it.

NODE

A person opens their FallKard — a portable, signed identity and capability — and the pipeline runs on their own metal.

STAGE0

Prove

Nothing is trusted unless it is provable. A family of deterministic verifiers gates every artifact.

kar-warden · kar-citelock · witness
▶ live
STAGE1

Own

Mint a sovereign specialist model from a task and its examples — you walk out owning it, with a signed scorecard.

fallforgemint · fallkit
▶ live
STAGE2

Shape

Give it a face and a structure — the Konomi skins and UI layer, structure by Frumkin, carried in your kard's skin reference.

konomi-design-kit
▶ live
STAGE3

Carry

The FallKard: a portable, signed identity that is a capability and a budget it cannot cross, forkable into a verifiable lineage. It hydrates a node on local metal.

kard.mjs + the-wallet
▶ live
STAGE4

Remember

A 12-cell memory routed by locality-sensitive hashing, laid out by low-discrepancy placement, indexed by the moving wisp seam — an attention vector dictates what collapses into recall.

kar-mind · fall-remember · the wisp
▶ live
STAGE5

Run cheap

The Fold-Cycle recycles held compute: prefix reuse and capacity pooling collapse prefill (95%) and embedding cost (67%). Un-rendering the exited state funds re-rendering the next.

kar-foldcycle · render-on-observation (Gary W. Floyd, GEP)
▶ live
STAGE6

Connect

The sovereign mesh: peer-to-peer over real WebRTC, no server. Two Kards federate, exchange signed work, and record it on a signed, conserved contribution ledger. Federate with someone right now.

fall-federate/join · meshos · fallroom · kcc-mesh
▶ federate
Stored nowhere

The mechanical truths under the poetry

The estate is a pattern across its repositories, present wherever the current flows, stored in no one place. The precise mechanisms:

The topological field is a pure function over a content-signed snapshot (estate.json) — no shared mutable graph, no sync locks, and the frontier holds at most one active node. Placement is recomputed, never stored.
run(S) == S is a 64-bit FNV-1a content-addressed memoization (the estate's h16): the same spec collapses once, then replays. The 128-bit FNV content address is a separate hash — it names each memory record.
A bijective integer codec addresses fold-signatures; the 12 memory cells are addressed by LSH routing — two distinct mechanisms. Neither injects tensors into attention heads: the local engine's native prefix cache is respected, not hacked.
Nightly consolidation compresses transcripts into the LSH cells with zero weight updates — the corpus reorganises what it learned overnight; no model is retrained.
The ledger

Contribution recorded on a signed, conserved ledger

Useful work is accounted, not asserted. Every contribution the gate re-verifies is written to an internal ledger — the honest record of who did what.

Signed & hash-chained

Every entry is provable

Idle metal becomes a sovereign node that earns contribution by doing work the gate re-verifies. Each entry is signed and linked into a hash-chained ledger — tamper-evident, so the record of contribution can be checked, not trusted.

Conserved & closed

Internal accounting, no money out

The ledger is conserved — nothing is minted, every unit traces to verified work — and budget-bounded. It is closed internal accounting: contribution stays contribution, with no exchange or money-out path.

The economic inversion

Compute recycles; the moat is proof; the code is free

LeverThe inversion
Marginal inference costnear-zero — the substrate recycles its own compute through the Fold-Cycle
Where it runsedge / consumer metal — a £500 laptop, a Mac Studio; no datacenter
Licence100% MIT — monetised through appliances, capital allowances, minting & SLA, never the code
Trustthe honest wall — deterministic verifiers, zero-LLM arbitration; a proof that can fail, re-run by anyone
Accountinga signed, conserved ledger — verified useful work is recorded on a hash-chained ledger; closed, internal, no money out
Open it now

Every seam is a live door

The proof of a proof-carrying system is that you can open it. Each of these runs today.

fall-osthe OS as one playable game — hatch a Didy, seed it, level upfall-os fall-federate / joinfederate with another person over real WebRTCfall-federate/join fall-federate / testre-verify the signed federation + payout in your browserfall-federate/test kar-foldcyclethe compute pump — 95% prefill, 67% embedding, measuredkar-foldcycle fallforgemintmint a sovereign model + a signed scorecardfallforgemint sovereign-nodethe node shell on local metalsovereign-node the-walletidentity that is a capability + a budget it cannot crossthe-wallet kar-wardenthe integrity gate — intact / drifted / breachedkar-warden kcc-meshidle rigs earn contribution by re-verified workkcc-mesh
See it in ninety seconds

The estate, and how it connects

A 90-second film — FallForge Mint first, then every door above and how they join up — with a source for every number.

The estate map: sovereign-foundry at the centre, every live door around it, over the seven stages
▶ Watch the film90 seconds, captioned, voiced locallyai-nativesolutions.com The brochurethe 2026-09 prospectus, PDFai-nativesolutions.com Every number, sourcedmeasured from a live build, or citedai-nativesolutions.com