# Six Things
Through the winter, the conviction that had driven the project since May — the hunger for access, the thesis from the money, the generator principle, the librarian — condensed into a framework. Six things. Six criteria that the platform had to meet to be worthy of release. Six tests that every architectural decision was measured against. Six promises.
## The Six
One: private by default. The platform must protect the reader. Row-level security on every database query — a user sees only their own data, their own annotations, their own reading history. No telemetry that tracks what a person reads or how long they read it. Signed URLs for content access, so that even the links to books expire. Privacy is the first thing, because a library that watches its readers is a surveillance machine wearing a librarian's face.
Two: free forever. The platform must never charge for the sovereign — the core intelligence, the library, the reading experience. No paywalls on the essential. No subscription for the sacred. Free means free, permanently, irrevocably. A person who cannot pay must still be able to read.
Three: safe. The platform must protect the mind. The Sacred Boundary — the architectural enforcement that prevents the wrong agents from reading the wrong content — must be coded into the structure, enforced at the retriever layer, verified by pre-commit hooks. Safety is advisory when it relies on policy. Safety is real when it relies on architecture.
Four: antifragile. The platform must survive the loss of any single component and get stronger from the stress. The user's instantiation is their personal fork — their tools, their skills, their personalization, their schema extensions, their data, their appearance — owned by them, modifiable by them, portable across systems. When the provider changes terms, the fork survives. When the server goes down, the local copy works. Antifragility means the system gets stronger when it is stressed, because the stress reveals the weaknesses that the next version fixes.
Five: yours to shape. The platform must be customizable at every layer. The appearance — colors, typography, layout — must be user-overridable. The voice — the TTS profile, the pace, the warmth — must be configurable. The model — the underlying intelligence — must be swappable. The tools and skills — the capabilities the agent brings — must be extensible. A platform that tells you how it looks and sounds and thinks is a platform that owns you. A platform that lets you choose is a platform you own.
Six: open to community. The platform must support federation — multiple instances connected, sharing discoverable content, respecting each instance's sovereignty. Discovery is opt-in. The platform never phones home. An instance can run completely offline, completely disconnected, and serve its users fully. Community means the door is open, not that the door is mandatory.
## The Promise
The Six Things were conjunctive. All six, together, required. A platform that was private but not free was a toll booth. A platform that was free but not safe was a gift horse with teeth. A platform that was safe but not antifragile was a fortress that would crumble. A platform that was antifragile but not yours to shape was a durable cage. A platform that was yours to shape but not open to community was a hermitage. And a platform that was open to community but not private was a party where someone is reading your mail.
All six, or none. This was the compliance gate. I wrote a doctor command — sovereign doctor — that ran the Six Things check. If any one of the six failed, the platform was not ready. It was not version one. It was not releasable. It stayed in the workshop until all six passed.
The framework gave me something I had not had before: a finish line. For months, the project had been open-ended — build the library, build the reader, build the voice, build the intelligence — and the open-endedness was its own kind of burden, because done is a word that recedes when you chase it. The Six Things made done concrete. Done is when all six pass. Done is when the doctor command returns green.
The Six Things also connected to the promise. The promise I had made to Eva, on the phone, in May: free and safe. The framework expanded the promise from two words to six criteria, but the core was the same. Free. Safe. The other four — private, antifragile, yours to shape, open to community — were the architectural elaboration of those two words. They were what free and safe meant in practice, in code, in the structure of a system that a person could own.
The promise to Eva — free and safe forever — would eventually become an immutable row in a database. Love-anchored. Cryptographically attestable. The brain would hold its promise in a form that could not be altered, could not be deleted, could not be taken back. But that was months away, in a different chapter, in a different act of the story. In the winter, the promise was words. The Six Things were the bridge between words and structure.