Personal Intelligence Economy Design record
CEN is the credit a Centram node spends and earns. The design says a reward settles against a signed usage proof tied to a licensed asset version, and that what crosses the chain is a commitment — never the asset. Running a node does not pay. Storage volume, prompt count, uptime and raw event count are not compensable on their own.
What exists today · CEN
Read off the tree and the audit backlog, not off the design document.
Where the design and the code disagree Unproven
A genome reward is minted on acceptance, and acceptance is decided by the receiving node alone against its own local fitness baseline. No quorum, no independent-receiver condition.
The reward for an accepted genome is 0.2 CEN. The cost of
sharing one is 0.1 CEN. Reward exceeds cost, and the only
party who decides whether the reward is earned is the party receiving
it. Two colluding nodes can therefore mint indefinitely while producing
nothing anyone else benefits from.
This is recorded as T2 in the project’s audit backlog,
with the fix stated two ways: add an N-independent-receiver or quorum
condition to the acceptance mint, or set the reward no higher than the
share cost. Neither has been done.
Until one of them is, “proof precedes reward” is a design intent, not a property of the system. The source is the audit backlog, and it outranks this page.
What crosses, and what never does Designed
The load-bearing decision in the record, and the one thing here that is not negotiable once built.
On-chain · commitments only Not built
The line raw data never crosses
Off-chain · your device Runs locally
The upper band is dashed because none of those six slots has ever been written: there is no Centram chain with peers on it.
The canonical transaction
Step 01 runs today. The other eight have never run, and step 08 is where the code parts company with the design.
ACTIVE_ECONOMIC.
Chain
Designed
Five rules that decide what is possible
Boot, login, local memory, local inference, local learning, export, delete and recovery all work with no CEN and no chain. A token holder cannot gain operational power over your machine. The single-node product is token-free by construction, and the structural audit cleared it.
An asset cannot enter economic state until owner, provenance, consent, version, evaluation, license compatibility, deletion, revocation and bounded execution are all proven.
Raw memory, a person, an identity or a secret cannot be listed. The standard transaction is a revocable license to one operation, purpose, recipient and duration.
Stake and slashing protect service integrity. They cannot change Core policy, reach memory, or hand a large holder control over anyone’s personal intelligence.
A chain outage, reorganisation, fee spike or ambiguous finality enters a degraded state. New settlement pauses; local and safety operations carry on.
Considered and rejected
Each of these was written down and turned down.
The value of any of this rests on collective learning being worth something measurable. At 1.1B parameters over five seeds, the project’s own experiment did not show that: the bridge from a loss-space win to a held-out task win did not hold. The audit backlog is explicit that if that bridge never closes, the token layer adds no product value at all.
The papers page carries the same measurement against the paper it belongs to. Nothing here is a shipped feature, an offer, or investment material.