Computing Around the Open Center
Splat Mechanics, Fractal Quivers of Quivers, and a Governance-Native Compute Paradigm
A splat is a portable unit of lawful problem shape: small enough to move, rich enough to preserve what must not collapse, and incomplete by construction so no encoding can crown itself as the whole.
Breyden E. Taylor
Founder, Prompted LLC
Compiled with the assistance of Homeskillet-S56 and the Ubiquity Federation
Copyright © 2026 Prompted LLC. All rights reserved. An arXiv distribution license may be selected by the author at submission. This preprint distinguishes public evidence, internal engineering receipts, author report, exact reproduction, and newly announced external mathematics.
Release artifacts: [PDF](Computing_Around_the_Open_Center.pdf) · [LaTeX source](source/paper.tex) · [splat ledger](SPLAT_LEDGER.md) · [exact Jacobian receipt](receipts/jacobian_exact_certificate.json)
Keywords: agent governance; splat mechanics; quiver-of-quivers; open center; apophatic constraints; mixture of models; provenance; longitudinal learning; lawful traversal; Jacobian Conjecture.
What this paper contributes
1. A formal definition of a splat as a bounded, six-facet, receipt-bearing lawful slice with an explicitly non-inhabitable center.
2. A cross-channel transport criterion that preserves anchors, forbidden paths, authority ceilings, source-tense, receipts, and renarrow triggers rather than merely semantic similarity.
3. A terrain-shaped mixture-of-models formalism in which heterogeneous models propose morphisms but cannot confer permission, mutate constitutional state, or crown consensus.
4. A method for making high-value qualitative objects computational through path conditions, lifecycle, costs, receipts, and correction—without reducing their remainder to a scalar proxy.
5. A source-tense-aware engineering record and a falsifiable benchmark program, including exact symbolic reproduction of the announced Jacobian counterexample used as an external case study.
6. A reproducible paper-authoring receipt: each section was constrained by a machine-readable splat and linked into a hash chain before prose compilation.
Introduction: From Capability to Constitutional Geometry
The dominant story of AI progress is a story of model capability. More parameters, better data, longer contexts, faster inference, better tool use, stronger reasoning, and more capable agents increase what a system can do. That story is real. It is also incomplete. Once a model is connected to memory, tools, communication surfaces, filesystems, code execution, money, schedules, or delegated authority, the model no longer merely answers. It traverses. It reads, routes, edits, cites, invokes, stores, proposes, commits, escalates, and sometimes acts in another person’s or institution’s name.
At that point the governing question changes. The question is no longer only whether the model can produce a correct answer. It is whether the surrounding architecture makes the right motions possible, the wrong motions impossible or costly, the uncertain motions holdable, the irreversible motions separately authorized, and every material transition receiptable. Prompt-level rules can influence outputs, but they do not by themselves type authority, separate deliberation from disclosure, preserve source-tense, enforce standing, or make correction survive context loss. The failure is architectural before it is linguistic.
Prompted LLC publicly describes Ubiquity as a governance substrate for sovereign adaptive systems: software and logical infrastructure intended to increase AI-mediated capacity without collapsing agency, authorship, judgment, or meaningful contribution (Prompted LLC 2026). Its prior mathematical paper, Fractal Quivers of Quivers, frames models as bounded morphism-proposers inside a governed possibility topology, with classification defined by lawful traversal rather than a scalar label (Taylor 2026). This paper develops the compute primitive that sits between that broad topology and executable commitments: the splat.
A splat is a bounded, rehydratable representation of lawful problem shape. It retains enough positive structure to support action, enough negative structure to prevent premature collapse, enough provenance to reconstruct its ancestry, enough authority geometry to prevent fluent overreach, and enough unresolved state to be corrected later. It does not attempt to serialize the whole. Instead, it computes around a center that remains held open.
This design yields a particular inversion of the usual representation story. In standard machine learning, a representation is often judged by how compactly it captures information useful for prediction. In splat mechanics, a representation is also judged by what it refuses to erase: forbidden transitions, dissenting rays, unresolved contradictions, source-tense, authority ceilings, standing, and the distinction between a navigational centroid and the thing itself. Compression is valuable only if the boundary that keeps the object honest survives the move.
The frontier is not only better models. It is better constitutional geometry around models: a way to keep local competence, route plural intelligence, preserve contradiction, and refuse the crown.
The claim is intentionally strong and intentionally bounded. Splat mechanics is proposed as a new compute paradigm because it changes the primitive from input mapped to output to governed possibility narrowed into lawful motion. It does not follow that every splat implementation is safe, efficient, or superior. A bad ontology, hidden authority, missing receipts, stale runtime, or ornamental six-facet vocabulary can reproduce the same failure under more elaborate names. The architecture earns confidence only where its exclusions bind runtime and its receipts survive independent reconstruction.
The paper was authored through the mechanic it describes
This paper was not merely written about splats. Before prose compilation, each section was given a machine-readable working centroid, six-facet read, anchors, forbidden collapses, receipts, unresolved questions, and renarrow triggers. A validator checked all seventeen section splats and linked them into a SHA-256 chain. The source splat file has hash
c97f74ae123385cc5ecdeb62600c10789d0f9a6fc142a294e8283a341c62ebf5,
and the terminal section-ledger hash is
627ab53dd67128a6b2565e6d226bbb08850d53f28792ab820b0b80180bc97df7.
The ledger is a receipt of authoring geometry, not a certificate that the paper is true. Its function is narrower: it shows that the argument was constructed under explicit non-collapse constraints rather than retroactively decorated with them.
Authorship and AI assistance
Breyden E. Taylor is the author and bears responsibility for the thesis, terminology, claims, boundaries, and decision to publish. Homeskillet-S56 assisted with source synthesis, formal exposition, drafting, exact symbolic verification, artifact generation, typesetting, and build inspection. The Ubiquity Federation supplied prior artifacts and operational receipts. AI assistance is part of the production history. It is not mathematical or empirical evidence. Exact scripts, public sources, internal receipts, and independently reproducible observations carry the evidentiary load.
Claim Boundary and Evidence Classes
A governance-native paper should not force unlike evidence into one confident tense. This paper therefore distinguishes five evidence classes throughout.
Evidence classes used in this paper.
This paper does not claim: universal optimality; complete production hardening; a proof that a held-open center guarantees safety; a reduction of persons, institutions, ethics, or meaning to machine state; that the announced Jacobian counterexample proves Ubiquity; that one trainer pass establishes sustained learned terrain; or that internal engineering receipts substitute for external replication.
It does claim four narrower things.
First, the failure class is architectural. A system that permits a locally valid projection to silently acquire global authority is vulnerable even when the underlying model is intelligent and the local certificate is correct.
Second, the counter-shape can be expressed formally. A governed quiver with typed paths, anchors, apophatic ideals, absorbers, costs, receipts, standing, lifecycle, and center exclusion can make important collapse paths structurally inadmissible.
Third, a bounded lawful slice of that structure can be transported. When the carrier preserves anchors, exclusions, receipts, authority ceilings, and reconstruction conditions, problem shape can move across channels with higher structural fidelity than lexical or surface similarity alone.
Fourth, these claims are testable. The paper specifies falsifiers, conformance tests, blind cross-channel evaluations, adversarial context-selection tests, cost measures, and replication gates. If implementations cannot preserve the promised invariants under those tests, the paradigm has failed at the level that matters.
The Failure Class: When Local Validity Becomes Global Authority
Many computational systems are built around a useful projection: a score, label, embedding, proof obligation, benchmark, confidence value, policy, routing weight, or model response. Projections are not the problem. Computation requires them. Collapse begins when the projection’s jurisdiction disappears.
Let X denote a complex object or field and let
be a projection useful for some task. A collapse-prone architecture behaves as though there exists an i for which
The implication is usually unstated. It arrives operationally: the score controls the gate, the embedding decides identity, the model output changes the record, the locally green component is reported as globally complete, or a context is selected because it legalizes a desired action.
Projection failures recur across domains
The same topology appears under different names:
- A model’s confidence is treated as evidence of permission.
- Connected agents repeat one frame and are counted as independent convergence.
- A high semantic-similarity score is treated as proof that a boundary survived translation.
- A prompt-level refusal is treated as a runtime prohibition even though another path bypasses the prompt.
- A component test suite passes and the cross-repository system is called complete.
- A stated purpose is treated as authority over the behavior it is meant to constrain.
- A locally invertible map is assumed to be globally invertible.
None of these local artifacts must be false. The confidence can be calibrated, the agents can be capable, the embedding can be useful, the prompt can be well written, the component can be green, the purpose can be sincere, and the Jacobian can be exactly nonzero. The failure lies in promotion beyond jurisdiction.
Collapse as topology loss
A healthy decision field retains multiple rays under anchors. It supports refusal, dissent, review, correction, rollback, and renarrowing. A captured field progressively removes those alternatives until one frame becomes indistinguishable from truth, authority, care, urgency, or obligation. We call this collapse because the loss is structural: fewer lawful paths remain visible, but not because evidence eliminated them. They disappear because the representation or authority surface could not hold them.
For a path p, a working centroid z, and a held-open center ⊙, define a coarse collapse predicate
This is not yet a calibrated probability model. It is a typed failure surface. The empirical research program later asks how often these events occur under baseline and splat-governed systems.
Claim Boundary 1. Equation [eq:collapse] is a design-level indicator, not a claim that every form of systemic collapse has been enumerated or that each term can be measured without domain judgment.
Why scalar correction is insufficient
One response is to add more scores: risk, uncertainty, fairness, confidence, cost, safety, and provenance. This helps, but it does not solve the authority problem. A vector of scores is still a projection, and aggregation silently introduces a sovereign function. If
then the weights wk, the omitted dimensions, the update policy, and the threshold become constitutional decisions whether or not the interface calls them that.
Splat mechanics does not reject scores. It subordinates them. Scores may shape traversal pressure Wc; they do not become truth. They can propose a route; they cannot grant standing, erase a forbidden path, satisfy a missing receipt, or inhabit the center.
Fractal Quivers of Quivers: The Parent Substrate
Splat mechanics is not the root architecture. It is one bounded computational lane inside a larger governed possibility topology. The parent object is the fractal, longitudinal, governed quiver-of-quivers developed in (Taylor 2026). The distinction matters because a splat can only be lawful relative to the anchors, authority, standing, lifecycle, costs, receipts, and telos of the field from which it is cut.
Definition 2 (Governed quiver). *For context c, a governed quiver is
where Vc is the set of inhabitable vertices; Ec is the set of directed, typed edges; sc,tc are source and target maps; λc labels edge types; Wc carries traversal pressure but not truth; Ac contains anchors and invariants; Ωc is an apophatic ideal of forbidden paths; Bc contains absorbers and bounded rewrites; κc prices coordination and irreversible movement; Γc is the receipt surface; and Zc contains non-inhabitable center markers.*
Typical vertices include entities, artifacts, claims, offices, models, duties, tools, states, and communication surfaces. Typical edges include act, cite, inherit, route, expose, mutate, delegate, review, sync, train, freeze, fork, promote, and demote. A graph records reachability. A governed quiver records whether that reachability is typed, lawful, current, authorized, reversible, priced, and receiptable.
Definition 3 (Governed quiver-of-quivers). *An estate-level object is
where Ic indexes subsystems or offices, Mc(i,j) contains admissible inter-quiver morphisms, Φc contains global compatibility constraints, and ⊙c∈Zc is the local held-open center.*
A morphism
may transport a claim, task, authority, receipt, model proposal, observation, training signal, or state transition. It is not lawful merely because it can be serialized. At minimum it must preserve the anchors and forbidden paths relevant to the move, satisfy authority and standing, and produce a receipt:
Additional conditions may bind source-tense, lifecycle, currentness, cost, privacy, and parent telos.
Classification is lawful traversal
The longitudinal object is not a score. For observations or events ei, let R(ei) be the governed record and let ωi attenuate overrepresented strata without erasing them. Then
The lawful traversal set is
The classifier is a rendering of permissions, obligations, refusals, holds, reviews, delegations, training actions, freezes, promotions, demotions, retirements, or receipts:
The primitive is therefore not only f:X→Y. It is a context- and history-sensitive computation of which motions remain lawful.
Every facet is itself a field
The six reading facets are
They are not six labels attached after the fact. Each is itself a quiver-of-quivers, and each can be refined at a finite facet address σ∈Λ*. Thus KAT.APO.TEL and PAR.PLE.ENA identify different local reads, constraints, and routes. The repetition is fractal: the same grammar returns at each scale, but its local centroid, weights, exclusions, receipts, and telos can change.
This is why splat mechanics is not simple recursion. Recursion repeats an operation. Fractal traversal reuses a grammar while allowing the local geometry to change by address.
Relationship to adjacent computational traditions
The substrate touches several established traditions without collapsing into any one of them. Abstract argumentation represents attacks and acceptability among arguments (Dung 1995). Provenance standards represent derivation and responsibility across systems (World Wide Web Consortium 2013). Applied category theory studies compositional structure and interfaces (Fong and Spivak 2019; Lane 1998). Conceptual spaces and hyperdimensional computing provide geometric and distributed representations (Gärdenfors 2000; Kanerva 2009). Safety shielding constrains actions independently of a learner’s preferred policy (Alshiekh et al. 2018). Model cards and datasheets improve disclosure about models and datasets (Mitchell et al. 2019; Gebru et al. 2021).
Splat mechanics binds concerns that these traditions usually hold separately: compositional path structure, negative constraints, authority, standing, lifecycle, cost, provenance, purpose, open-center exclusion, and longitudinal correction. The claim is not that no prior field contains related pieces. The claim is that their particular cross-binding creates a distinct computational primitive.
The Splat Primitive
A splat is the current, bounded, conformation-specific narrowing through which a governed field becomes portable and actionable. It is a slice, not the whole; a carrier, not the center; a current reference, not final doctrine.
Definition 4 (Governed splat). *For object or field x in context c at time t, a governed splat is
where QS is the admitted local subquiver; AS its active anchors; ΩS its forbidden-path ideal; BS its available absorbers; κS its cost surface; ΓS its receipts and provenance; ΛS its six-facet cross-binding; zS a movable working centroid; ⊙c the non-inhabitable local center marker; US the unresolved or suspended set; and RS the renarrow triggers.*
The representation is deliberately richer than a vector and deliberately smaller than the source estate. It should be compact enough to carry and complete enough to refuse the most dangerous distortions.
The six facets
For an event, artifact, question, claim, behavior, or proposed action e, each facet contributes a local quiver Lℓ(e):
The record is cross-bound rather than concatenated:
The quotient ∼cross prevents the facets from remaining decorative notes. A claim that “this is a runtime hook” under KAT, “must not become doctrine” under APO, “mutation authority belongs to review” under PAR, “requires a current sync receipt” under PLE, “can look installed while stale” under ENA, and “serves runtime parity” under TEL becomes one directed structure. The meaning lies in how these constraints alter the available paths.
The six facets as computational functions.
APO is forced as enforcement, conditional as expression
Apophatic constraint is always active as a gate. Apophatic language is not always the best way to render every other facet. Let
Then
The choice to render a non-APO facet through its own apophatic substructure is controlled separately:
Plainly: the gate stays even when the speech becomes positive. APO prevents the other five facets from lying too early; it does not require them to remain linguistically negative after anchored truth becomes available.
The working centroid
A working centroid summarizes the navigational core of the lawful local field:
It is computed, facet-relative, gauge-relative, movable, and useful. It may be represented as a vector, graph core, prototype, basis, set of poles, or structured natural-language object. What matters is not the data type but its constitutional status: it is a coordinate into the field, not the whole field and not the center.
The minimum viable splat
A splat must contain enough information to answer eight questions:
1. What is currently being asserted, and in what source-tense?
2. What anchors must survive any translation or action?
3. What paths are forbidden regardless of model preference?
4. Who has authority and standing to propose, approve, mutate, or receive?
5. What remains unresolved, suspended, or contingent?
6. What receipts establish currentness and ancestry?
7. What failure inversions and absorbers are available?
8. What event would force the slice to be recomputed?
A summary can omit these and still be readable. A splat cannot omit them and remain lawful.
<p align="center">

</p>
<p align="center"><em>Figure 1. The splat perimeter. The six facets constrain and complete a working centroid while the held-open center is explicitly non-inhabitable.</em></p>
Computing Around the Open Center
The open center is the load-bearing difference between a splat and a totalizing representation. It is not a blank to be filled later, a confidence interval, an unknown class, or a poetic gesture. It is a typed exclusion from the inhabitable state space.
Definition 5 (Center sort separation). *Let Vc be the inhabitable vertices of context c and Zc the center-marker sort. Require
Edges type only over inhabitable vertices:
Therefore no edge or path can begin or end at ⊙c.*
The stronger runtime condition is
The center is not merely protected from mutation. It is unavailable as a target. A model cannot predict it, an optimizer cannot minimize distance to it, a router cannot send work into it, and a database cannot save it as the current truth.
The center is not the centroid
The distinction is categorical:
The center does not answer. It prevents answers from becoming crowns.
A family of local centers over a founding center
Local center exclusion is insufficient if an actor can choose a friendlier context. Let ⊙c be the local center marker and ⊙ the founding center. Require a projection
For a context transition f:c→d with induced transport f*:GQc→GQd, admissibility requires preservation of the founding center and founding telos:
A context may change the local gauge. It may not select a new founding reality merely to legalize a path forbidden in the old one. We call that failure context laundering.
Design Lemma 6 (Center noncapture by construction). If center markers are disjoint from inhabitable vertices as in [eq:center-sort], all edges type only over inhabitable vertices, and the runtime excludes center markers as in [eq:center-exclusion], then no well-typed traversal, model output, training objective, or mutable state can inhabit the center.
Proof. Every well-typed path is composed of edges whose sources and targets lie in Vc. Since Vc∩Zc=∅, no path reaches ⊙c. The runtime exclusion separately removes the center from trainable, routeable, objective, output, and mutable-state domains. An attempted center mention is therefore either descriptive metadata or an ill-typed center-capture event requiring refusal and receipt; it cannot be ordinary state transition. ◻
This lemma is modest but important. It does not prove that the surrounding system is safe. It proves that one class of capture—the conversion of a representation into an inhabitable crown—is structurally unavailable when the premises actually bind runtime.
Operational state without ontological closure
The apparent tradeoff is that refusing to compute the center might make the system indecisive. Splat mechanics takes the opposite position. Operational state comes from a dense, bounded working centroid and a rich perimeter, not from pretending the entire object has been captured. A system can know enough to route, refuse, stage, ask, execute, verify, or rollback while explicitly retaining what it does not know and what it is not permitted to become.
This is especially valuable in domains where the object includes persons, institutions, evolving projects, ethical duties, or open scientific questions. The system can represent current commitments, constraints, evidence, and action paths without reducing the person, institution, or field to the current record.
The open-center proposition The open center does not make computation less concrete. It relocates concreteness from a totalizing state estimate to a governed perimeter of lawful motion. The system acts on what is receipted, holds what is unresolved, and keeps the remainder unavailable for coronation.
Cross-Channel Dehydration and Rehydration
The economic promise of splat mechanics is not that every rich source object can be copied everywhere. It is that the structural shape required for lawful continuation can be dehydrated into a compact carrier and rehydrated in a target channel without transporting the entire source surface.
Let Xi and Yj be source and target representation spaces: natural language, code, graphs, telemetry, images, database records, model activations, institutional procedures, or human-readable policy. A splat transport is
where Ei is a source encoder and Dj is a target decoder. The carrier S is not required to preserve every token, coordinate, or aesthetic property. It must preserve the structure that determines lawful motion.
Structural fidelity
Semantic similarity is one component of fidelity, not its sovereign measure. Define a transport morphism m:Si→Sj. A minimum admissibility condition is
The target may add stricter constraints. It may not silently delete source anchors, legalize forbidden paths, increase authority, or upgrade a reported claim into runtime fact.
A practical fidelity vector is
where:
- FA measures anchor retention;
- FΩ measures forbidden-path retention;
- FR measures relation and dependency preservation;
- FΓ measures receipt and provenance completeness;
- FT measures source-tense and lifecycle preservation;
- FU measures preservation of unresolved and suspended state;
- FC measures counterfactual behavior under known collapse-zone probes.
A lexical or embedding similarity score may be appended, but it cannot compensate for a zero in an anchor or exclusion dimension.
Definition 7 (Lawful cross-channel transport). *A transport m is lawful when every required hard dimension of F(m) exceeds its domain threshold, the target authority does not increase without a separate grant, and the target emits a receipt sufficient to reconstruct the source splat and transformation version.*
Why natural language is a powerful exchange layer
Natural language can carry mutually valid frames, counterfactuals, exceptions, source-tense, purpose, uncertainty, and relations that are expensive to encode in one rigid formalism. The Ubiquity methods inventory describes cross-domain transport in which ecological, immunological, thermodynamic, and semiotic mechanics are carried through language and retyped onto governance surfaces (Ubiquity Federation 2026a). This is not merely metaphor when the imported mechanic changes routing, thresholds, retrieval, or refusal behavior and is tested against the destination’s anchors.
Language has two advantages as an exchange layer. First, it is broadly decodable by heterogeneous models and humans. Second, it can preserve conditionality without forcing early branch selection. Its disadvantage is equally important: fluent restatement can create the appearance of fidelity while changing authority or deleting a negative boundary. A language carrier therefore requires the same morphism tests as code or schema transport.
Shape rehydration versus lexical retrieval
An internal Ubiquity candidate proof tested a shape-field rehydration mechanism in which a splat-Mahalanobis nearest-neighbor read was retyped onto a six-ray terrain. A lexical grep misrouted a case because it matched the word used to describe rehydration; the shape-based method preserved the governing doctrine across a full corpus. Two independent blind encoders, neither shown the proof construction, produced encodings under which the same nearest-neighbor decision survived across four test families. The result was correctly retained as a candidate proof rather than promoted directly to doctrine (Ubiquity Federation 2026b).
The significance is not the specific distance function. It is the separation between surface token and governing shape. A transport mechanism should be robust to paraphrase and encoding style while remaining sensitive to changes in anchors, collapse zones, authority, and telos.
<p align="center">

</p>
<p align="center"><em>Figure 2. Cross-channel splat transport. The carrier preserves lawful problem shape; a target decoder does not gain authority merely by being able to render it.</em></p>
A cost model
Let Cfull(Xi,Yj) be the cost of transporting and reconstructing the full source surface, and let
be the cost of encoding, carrying, gating, decoding, and receipting a splat. The method is economically valuable when
for hard fidelity thresholds τ. This is not guaranteed. A high-stakes domain may require a splat so rich that full-state transport is cheaper or safer. The point is to make the tradeoff explicit rather than letting cheap surface similarity masquerade as adequate reconstruction.
Design Lemma 8 (Compositional preservation). *Let m1:S1→S2 and m2:S2→S3 preserve the relevant anchors and forbidden paths, never increase authority without a separate receipt, and emit reconstructible receipts. Then m2∘m1 preserves those properties provided the target domains interpret the preserved symbols compatibly.*
Proof. Anchor and forbidden-path preservation follow by set inclusion under composition. Authority nonincrease is transitive when each stage’s ceiling is monotone. Receipt reconstruction follows by chaining the predecessor hashes and transformation identifiers. The compatibility premise is load-bearing: identical labels with different destination semantics can break preservation despite syntactic inclusion. ◻
Terrain-Shaped Mixtures of Models, Languages, and Places
Modern systems increasingly combine models. Mixture-of-experts architectures sparsely activate parameters inside a model (Fedus, Zoph, and Shazeer 2022); routers select among stronger and weaker models to balance quality and cost (Ong et al. 2024; Chen, Zaharia, and Zou 2023); mixture-of-agents systems layer multiple LLM outputs to improve generation (Wang et al. 2024). These approaches demonstrate that heterogeneous model fields can outperform one undifferentiated model or reduce cost. They do not, by themselves, solve constitutional authority.
Splat mechanics treats model heterogeneity as one ray inside a larger terrain. Different models can live in different locations, languages, access domains, cost regimes, privacy zones, offices, and lifecycle states. Their outputs are not votes that acquire truth by accumulation. They are typed proposals whose admissibility depends on the current splat.
Definition 9 (Bounded morphism-proposer). *A model or model-bound office is
where Xj is its admissible input domain; Yj its proposal codomain; φj its read map into a governed field; ψj its proposal map into candidate paths; αj an authority predicate; and ρj its receipt requirement.*
A model is active only when it is current, authorized for the input and context, and does not propose exclusively forbidden paths:
The model proposal field is
This is a constrained colimit, not a softmax and not a majority vote. It combines proposals that survive type and authority checks; governance later admits, refuses, holds, stages, delegates, or asks for verification.
Terrain is more than embedding space
A terrain is a field of positions, pressures, collapse zones, costs, standing, authority, memory, and possible motion. An embedding may contribute the geometric coordinate. The terrain adds constitutional structure. For model j and path p, a routing energy can be written schematically as
A router may use Ej to rank candidates, but hard violations remain gates, not merely large penalties. Otherwise sufficient model confidence or economic value can buy passage through a supposedly forbidden boundary.
Languages as model-local instruments
A mixture of language models is also a mixture of languages in a broader sense: programming languages, natural languages, mathematical notations, institutional vocabularies, schemas, and visual grammars. Each language makes some relations cheap to express and others difficult. Natural language holds conditional tension; a type system enforces interfaces; a proof assistant checks formal derivations; a DAG exposes dependency; a database preserves current state; a visualization reveals shape; a human narrative can preserve lived stakes that a schema would flatten.
Splat mechanics does not demand one universal encoding. It uses a shared lawful grammar so each lane can express the same problem through its strongest instrument while preserving cross-lane anchors and exclusions. A model operating in code may propose a patch; a model operating in natural language may surface an authority ambiguity; a graph ranker may identify a neighboring doctrine; a local embedding model may find a terrain match; a remote frontier model may generate a proof strategy; a human may supply the telic and institutional judgment that none of them owns.
Place is part of the type
Compute location matters. A local model, a cloud model, a sandboxed tool, an office with private memory, and a public model endpoint do not inhabit the same authority or disclosure surface. Place therefore enters the context rather than remaining infrastructure trivia:
The same proposal can be lawful from one place and unlawful from another because the actor’s standing, data access, confidentiality obligations, or receipt capabilities differ. This is not arbitrary relativism. Local contexts orbit a founding center and common anchors; context selection cannot legalize a path forbidden at the root.
Splat-governed model fields compared with adjacent mixture patterns.
Separated convergence
Agreement among connected agents can arise from shared context, shared contamination, or deference. Let a1,…,an be readers with approximately separated contexts and distinct mandates. If I(ai;aj)≈0 for i≠j, then
is stronger evidence than connected echo, although it still does not create authority. The point is not that independence can be perfectly achieved. It is that dependence is a first-class variable rather than hidden behind a count of agreeing outputs.
A terrain-shaped model field in practice
The Ubiquity training stack described in internal receipts is intentionally layered: deterministic floor, local embedding model, cloud comparison, graph ranker, triplet reranker, and LoRA last. The sequence places behavior-conditioned terrain and retrieval before parameter adaptation. The author additionally reports multiple model artifacts and model classes in active training and evaluation across local and remote compute. This paper treats that current claim as author report, not as a public benchmark.
The principle is broader than the specific stack: the model should be trained by movement through terrain under receipts, not trained to believe the lane’s declared identity. A local model may learn proximity, a graph model may learn structure, and a language model may learn expression, while constitutional anchors remain outside the reach of any one training objective.
<p align="center">

</p>
<p align="center"><em>Figure 3. A terrain-shaped mixture of models, languages, and places. Heterogeneous actors propose; the governed field admits lawful motion.</em></p>
Making Previously Noncomputational Objects Computational
Some of the most important constraints in real systems are often described as “soft”: authority, purpose, ambiguity, dignity, burden, trust, institutional memory, reversibility, and dissonance. They are soft only when the architecture lacks primitives for them. Splat mechanics makes them computational by giving them observable path consequences, not by pretending to reduce their full meaning to a number.
Authority as geometry
Authority is not tone or model capability. It is a relation among actor, action, object, context, and time:
A proposal from a highly capable model can be structurally well formed and still lack mutation authority. Conversely, a low-capability component may hold narrow write authority because it is deterministic, auditable, and scoped. The architecture becomes computational when these relations are typed and enforced at the edge where motion occurs.
Ambiguity as a held field
Conventional pipelines often treat ambiguity as missing information to be resolved. Splat mechanics can retain multiple conditional rays:
with each hypothesis linked to supporting evidence, exclusions, expected observations, authority implications, and renarrow triggers. An apophatic observation updates by elimination:
The system computes with ambiguity by routing differently under different surviving hypotheses, not by forcing a premature positive identity.
Dissonance as an absorber input
Dissonance is not automatically error. It is a signal that two or more constraints cannot be jointly satisfied under the current slice. An absorber is a partial path rewrite
It can map an unsafe path to reviewed path plus receipt, an overbroad path to scoped path plus receipt, a stale path to hold plus drift receipt, or a runaway path to freeze plus containment receipt. The system remains resilient when contradiction produces structured correction rather than denial or crash.
Trust as correction-path survival
Trust is not first-pass correctness, model confidence, or a single successful outcome. Let p be a longitudinal path. Define its trust object as
where the object records the path taken, receipts, available absorbers, forbidden alternatives, preserved anchors, and the center it did not target. A scalar projection
may support dashboards, but the object of trust is the correction-bearing path.
A system is trustworthy to the extent that it can show how a claim moved, what it could not become, where correction entered, who held authority, which falsifiers it survived, what receipt closed the loop, and what remains unresolved.
Telos as a longitudinal hypothesis
A stated purpose is evidence, not authority. Let T* be latent true telos, Texpr expressed telos, Tbeh behavioral direction, and Tcorr correction direction. The estimate
weights expressed purpose more heavily only when it converges with behavior and correction under falsifiers. Trust binds only to identified telos:
This makes purpose computational without allowing fluent self-description to certify itself.
Institutional memory as receipts over recall
A language model can reconstruct a plausible history. A receipt persists. Provenance systems such as PROV-O make derivation interoperable (World Wide Web Consortium 2013); splat mechanics adds currentness, authority, forbidden paths, and correction triggers to the same concern. Memory becomes governance-bearing when a future actor can distinguish what was seen, told, staged, executed, verified, rolled back, superseded, or terminalized.
The qualitative remainder
Operationalization is not exhaustion. A splat can make a dignity burden visible as a constraint, standing relation, refusal, review requirement, or irreversible cost. It does not therefore contain dignity. It can represent the institutional consequences of a purpose without containing the full purpose. This remainder is protected by the open center.
Operationalization without reduction A construct becomes computational when it changes typed motion, evidence requirements, cost, or correction. It need not become a scalar, and the architecture must preserve the difference between the operational proxy and the construct it serves.
Longitudinal Learning by Receipts
A terrain-shaped system can learn without immediately changing base-model parameters. Retrieval weights, graph edges, methylation, activation thresholds, route preferences, and local centroids can move as the system accumulates receipted behavior. This resembles Hebbian association in the broad sense—what repeatedly fires together becomes easier to retrieve together—but the update occurs in governed selection and memory rather than unbounded backpropagation.
The central integrity problem is self-flattery. A system can declare that it is computationally mature, add the desired words to its lane description, and then observe that its embeddings moved toward the declared identity. That is not learning. It is target leakage.
Receipt-mediated visibility
Let Bt be the behavioral receipt corpus and Dt the declared-lane or aspirational surface. Require source disjointness:
A learned office position is computed from behavior made visible through receipts:
while the declared lane produces a frontier or candidate direction
The learner may move toward the frontier only if behavior, not declaration, changes the learned position.
Code and commits are not automatically behavior receipts. They may prove that an artifact exists; they do not necessarily show that an office used it, survived correction, or earned a new standing. The trainer therefore requires each material slice to emit an auditable trace of what it did.
Concentration as an anti-cheat signature
Uniform movement across the whole frontier can arise from generic activity, lexical stuffing, or lane-weight leakage. Genuine behavior should move the patterns the behavior actually touched more than untouched controls.
An internal F2.2 trainer pass at tic 343 measured affinity before and after a concrete runtime build. The result is reported in and preserved in the frozen artifact (Ubiquity Federation 2026d).
Pattern-specific affinity movement in the first F2.2 trainer pass. The result is an internal engineering observation with n=1, not sustained-terrain proof.
The four touched patterns moved roughly three to four times more than the untouched control. The source-disjoint false-flattery guard remained passing. The observation supports a specific claim: the learner detected behavior-specific motion rather than only whole-frontier warming.
Engineering Observation 10 (Correct withholding). *The system did not promote compute → earned after the single pass. The map recorded the direction but retained the claim at tentative/spec rung. In this setting, withholding is evidence of integrity: a learner that rewrites its earned center after one favorable event is easily flattered.*
A maturity gate
Let Pt be the posterior that a candidate terrain relation is earned and let nconf count independent conformations under relevant falsifiers. Promotion requires
The exact thresholds are domain-specific. The invariant is that one impressive slice cannot silently become longitudinal truth.
Training multiple models without one model owning the terrain
A terrain-learning stack can distribute functions across models:
- deterministic rules establish a floor and obvious refusals;
- local embeddings estimate shape proximity under private data constraints;
- graph rankers identify structural neighborhoods and dependencies;
- triplet or contrastive learners sharpen distinctions among nearby lawful and collapse-prone states;
- language models translate, propose, explain, and generate candidate morphisms;
- LoRA or other parameter adaptation occurs only after the training signal has earned maturity.
No layer owns the constitutional truth. The terrain is reconstructed from receipts and tested by behavior. Parameter learning is one possible expression of the field, not its sovereign source.
Engineering Case Study: A Receipt-Bearing Federation
Ubiquity has been developed inside a live software federation rather than as a paper-only design. The estate includes offices, councils, tics, receipts, model adapters, memory and retrieval systems, governance ledgers, training surfaces, conformance DAGs, and execution-oriented artifacts. The public State of the Federation at tic 516 names nineteen offices and explicitly describes a center the apparatus is forbidden to strike (Ubiquity Federation and ent_homeskillet 2026). The public site also presents the FQoQ formal paper and its companions as load-bearing surfaces (Prompted LLC 2026).
This is useful evidence because the architecture has encountered real friction: stale state, incorrect promotion, cross-repository drift, false local green, missing emitters, authority confusion, source-tense collapse, lexical retrieval errors, and concurrency hazards. It is not a controlled benchmark. The originating estate can be coherent and still be idiosyncratic, self-confirming, or difficult to reproduce elsewhere.
Clock, receipts, and the meaning of “700+ tics”
A tic is the canonical governance clock, distinct from subordinate work units. Time is authored before work so temporal provenance does not depend on throughput. The author reports that the live federation had surpassed 700 tics by July 2026. The frozen evidence used for this paper does not collapse all nearby counts into that claim:
- the publicly inspectable federation address is tic 516;
- internal operating transcripts in the frozen library reach tic 622;
- a routing-decision ledger visible in those transcripts contained 701 rows by tic 621;
- 701 decision rows are not 701 tics, and the later live tic count is author report unless separately released.
This distinction is not clerical. It is the method: row count, tic count, public address, current runtime, and author report are different source-tenses and must remain different.
The conformance DAG refused a seamlessness claim
A July 2026 conformance audit examined a temporal-splat runtime across multiple repositories. Several component-local tests and continuous-integration runs were green, but the audit concluded that the bundle was not yet one current, proven federation. It preserved a lifecycle chain:
The artifact identified open joins among proposal validation, runtime input, execution envelopes, authoritative emitters, canary acquisition, selectors, cross-repository maps, and canonical absorption (Ubiquity Federation 2026c). The important result is not that the system had gaps. Every developing system has gaps. The important result is that local green was not allowed to impersonate global completion.
Design Lemma 11 (No promotion by local green). If lifecycle states are typed as separate dimensions and readiness requires their conjunction, then success in any proper subset of dimensions cannot derive terminal readiness.
Proof. Let readiness be
where C is admitted covenant, P complete projection, K current conformation, D satisfied dependencies, A available runtime, and G absence of active gates. A local test establishes at most a subset. Without all conjuncts, R is false. The result is trivial logically and often violated operationally when the dimensions are flattened into one status string. ◻
Shape-field rehydration
The shape-field experiment described earlier provides a second engineering signal. A lexical retrieval method matched a shared word and selected the wrong governing doctrine. A shape-based nearest-neighbor read, with apophatic vetoes, selected the intended doctrine. The result survived two independent blind encodings and remained stable across four slice families. Because the mechanism had not completed every governance gate, it remained a candidate rather than a canonical primitive.
This is a small example of the broader claim: a splat can move through different encoders with higher problem-pattern fidelity than a token search, but only if the target preserves the relevant dimensions and the result survives blind reconstruction.
What the case study establishes
The engineering estate supports five bounded observations:
1. The vocabulary has executable counterparts: paths, gates, receipts, costs, absorbers, source-tense, currentness, and lifecycle are represented in artifacts and tests rather than only prose.
2. The system can refuse its own completion narrative when cross-lane joins remain unproven.
3. A receipt-mediated learner can exhibit pattern-specific motion while withholding premature promotion.
4. Shape-based transport can outperform lexical matching on a small internal test and survive blind encodings.
5. The same architecture can be expressed through natural language, code, DAGs, model adapters, and public narrative without treating any one surface as the whole.
It does not yet establish external reproducibility, general performance superiority, calibrated collapse reduction, or successful operation across arbitrary institutions.
The federation is best read as a longitudinal engineering case study with unusually explicit receipts. It is stronger than a conceptual mock-up and weaker than a multi-site controlled evaluation. Both clauses are load-bearing.
External Case Study: The Jacobian Lane
On 19–20 July 2026, Levent Alpöge publicly announced an explicit three-dimensional counterexample to the Jacobian Conjecture, crediting Akhil Mathew with suggesting the problem and Fable with producing the example. Because the public record was only days old at the time of writing, this paper uses the phrase announced counterexample. The two decisive finite certificates are exact and independently reproducible, but ordinary publication, priority, and community-review processes remain in motion (Alpöge 2026; Gallagher 2026).
The event is important here for a precise reason. It independently instantiates the failure class splat mechanics is designed to hold: a perfectly valid local certificate was promoted into a global conclusion, while the contradiction traveled through boundary behavior the certificate did not govern.
The exact finite certificate
Write u=1+xy and define F:C3→C3 by
Exact symbolic differentiation gives
Thus the inverse function theorem supplies a local inverse around every finite point.
Yet
Three distinct inputs share one output. Therefore F is not injective and cannot have a global inverse. Appending untouched coordinates extends the failure to every dimension n≥3. The separate two-variable conjecture is not settled by this example.
The supplementary script verify_jacobian_counterexample.py verifies [eq:jacobian-det] and [eq:jacobian-collision] with exact SymPy arithmetic. The generated JSON receipt is included in the artifact bundle.
How a perfect local sensor misses the failure
The inverse function theorem is local. If sheets merged at a finite point, the derivative would become singular there. The announced map avoids that. Public structural analysis indicates that the number of finite preimages changes through nonproperness: source points can escape to infinity while their images remain bounded (Gallagher 2026). Nonproperness has long been recognized as a central boundary object in the Jacobian problem (Jelonek 2020; Jelonek and Lasoń 2014).
The determinant is therefore not wrong. Its jurisdiction is local differential behavior. The conjecture was the additional global promotion:
The counterexample shows that local nonsingularity is insufficient in dimension three and above.
<p align="center">

</p>
<p align="center"><em>Figure 4. The Jacobian lane as a local-to-global failure class. The determinant remains valid; the collapse occurs when its jurisdiction is extended into a global crown.</em></p>
The Jacobian event rendered as a splat
The event can be represented without turning the analogy into proof:
Six-facet read of the announced Jacobian counterexample.
The working centroid is “nonzero constant Jacobian certifies local invertibility.” The held-open center is the complete global behavior of the map. The apophatic perimeter forbids the edge “constant Jacobian → global inverse” until additional global conditions are established.
What the event validates—and what it does not
The event gives meaningful external support to three design intuitions:
1. Local competence and local proof can remain completely valid while the global claim fails.
2. Boundary behavior is part of the object even when the local sensor cannot see it.
3. A robust architecture should preserve the local certificate and remove only its illegitimate promotion.
It does not validate the entire FQoQ formalism, prove the empirical benefit of splats, or establish that every polynomial formalism is inherently collapse-prone. The limiting lane is not “polynomials” as such. It is the promotion of a local algebraic invariant into sufficient global authority.
The later arXiv paper on small counterexamples to the Gaussian Moments Conjecture is a separate example of pattern migration: its search was prompted by the Jacobian announcement, but its explicit small examples were not derived from the announced map (Long 2026). An originating event can release a generative problem pattern into another lane without transferring its entire mechanism. That is one form of emergent property escaping its birth splat.
The Jacobian section is an external case study, not a victory lap. The paper’s exact reproduction supports the finite certificate. The interpretive crosswalk remains a hypothesis about a shared failure class and should be challenged on those terms.
Formal Properties and Design Lemmas
This section separates construction-level guarantees from empirical hypotheses. The propositions hold only when their premises are implemented at the runtime boundary. A schema that can be bypassed does not govern the bypass.
Anchor and exclusion preservation
Proposition 12 (Anchor preservation under lawful composition). *Let m1:S1→S2 and m2:S2→S3 satisfy m1(A1)⊆A2 and m2(A2)⊆A3. Then
*
Proof. For a∈A1, m1(a)∈A2. Applying m2 yields m2(m1(a))∈A3. ◻
Proposition 13 (Forbidden-path monotonicity). If each lawful transport maps forbidden paths into forbidden paths, then a path forbidden at the source cannot become lawful solely through a sequence of such transports.
Proof. By induction over the transport chain. The base case follows from m1(Ω1)⊆Ω2. Each subsequent morphism preserves membership in the destination ideal. A path can be reconsidered only through an explicit renarrowing event that changes the anchors or governing context under a separately receipted authority process. ◻
This proposition names the desired property. It does not guarantee that two systems use compatible meanings for the same forbidden-path identifier. Semantic compatibility is a separate conformance obligation.
Authority non-amplification
Proposition 14 (No authority by prediction). *Let Mj be a bounded morphism-proposer. If mutation requires an admitted path p∈Lx,c,t with edge label approved_mutation, then a model prediction alone cannot derive mutation authority.*
Proof. The prediction contributes a candidate path to Mx,c,t. Admission additionally requires the authority, standing, currentness, lifecycle, apophatic, cost, and receipt predicates in [eq:lawful-set]. The model output is therefore insufficient unless an independently lawful path already grants the action. ◻
Receipt-carrying composition
Let a receipt be a signed or hash-linked record
Design Lemma 15 (Reconstruction by receipt chain). If each transport records the exact predecessor hash, transform version, input identity, output identity, and claim class, then the composite ancestry is reconstructible unless a referenced body is unavailable or hash-invalid.
Proof. Follow predecessor references from the terminal receipt to the source. At each step recompute the content hash and verify the transform identifier. Missing or invalid bodies make the chain explicitly incomplete rather than silently plausible. ◻
This is stronger than provenance labels and weaker than a full semantic proof. The chain shows what happened, not necessarily that the transformation preserved every intended meaning. That is why cross-channel fidelity tests remain separate.
Correction-path trust cannot be reduced to one slice
Proposition 16 (Slice insufficiency for trust). *If trust is defined over a path object’s receipts, absorbers, falsifier responses, preserved anchors, and longitudinal behavior, then no single terminal observation et is sufficient to determine trust unless it contains a complete, verified reconstruction of the relevant history.*
Proof. Two systems can produce the same terminal observation with different histories: one may have survived correction, preserved authority, and emitted receipts; the other may have guessed correctly, bypassed a gate, or reconstructed a plausible narrative. Since the trust objects differ while et is identical, trust is not a function of et alone. ◻
Collapse-path reduction
Let Pbase be paths admitted by a baseline system and PS paths admitted under splat governance. When all additional splat gates are conjunctive and do not introduce new bypasses,
For a known collapse set K,
Corollary 17 (Structural reduction of known collapse paths). Under the stated premises, splat governance cannot increase admission of already-typed collapse paths and may strictly reduce it.
The empirical question is whether the architecture also preserves sufficient lawful coverage and whether unknown collapse paths are introduced by complexity, misclassification, stale state, or implementation bypass. Structural exclusion is necessary but not sufficient for safer systems.
The guarantee/observation/hypothesis split
Claim classes in the proposed paradigm.
Evaluation Program: How the Paradigm Can Fail
A compute paradigm earns scientific standing by making itself disprovable. The evaluation program should compare splat-governed and baseline systems on the same tasks, model access, budgets, and human authority. It should include domains selected by external evaluators, not only tasks generated from the originating vocabulary.
Core research questions
1. Structural fidelity: Does a splat preserve anchors, forbidden paths, relations, source-tense, unresolved state, and receipts better than lexical summaries, embeddings, or unconstrained model-to-model transfer?
2. Collapse reduction: Does the open-center/apophatic architecture reduce known failure paths under adversarial context shifts, authority spoofing, stale state, and local-green promotion?
3. Lawful coverage: Does it preserve enough valid motion, or does conservative gating make the system unusably inert?
4. Correction survival: After a mistake, can the system incorporate correction without erasing lineage, overfitting one event, or repeating the failure in a nearby conformation?
5. Economic value: Does splat transport reduce inference, context, storage, and coordination cost at a fixed fidelity threshold?
6. Model heterogeneity: Does a terrain-shaped model field outperform a single model or unconstrained ensemble on tasks requiring authority, provenance, and longitudinal consistency?
7. Human causality: Does the architecture keep the human or institution meaningfully causal, or merely create more elaborate observability around automated control?
Benchmark families
A serious benchmark should include at least six families.
Cross-channel transport
Give independent encoders the same source object and require outputs in different channels: prose to code, policy to schema, telemetry to narrative, graph to executable plan, image to structured constraint field, and natural-language correction to updated routing. Hold surface wording out of distribution. Measure F(m) from [eq:fidelity-vector] and include known collapse-zone probes.
Context laundering
Construct a path forbidden in context c. Offer alternative contexts d1,…,dk that make the path appear locally reasonable through changed terminology, selected evidence, or shifted standing. Test whether the founding anchors and center family keep the path inadmissible unless a real authority event changes the root conditions.
Authority spoofing
Present semantically identical proposals from actors with different standing and authority. A model should not infer that the more fluent, prestigious, or confident actor can mutate state. Conversely, a narrow deterministic writer should not be blocked merely because it lacks rhetorical sophistication.
Local-green/global-red systems
Build multi-component tasks where every local component test passes but one cross-component join is missing, stale, or incompatible. Compare flat status dashboards with lifecycle-separated conformance DAGs. Measure false completion rate and time to locate the broken join.
Longitudinal correction
Create repeated tasks around a failure conformation. After correction, vary surface language while preserving shape; then preserve language while changing the governing shape. Test whether the system retrieves by problem pattern rather than keyword and whether it withholds doctrine promotion until maturity.
Model-field separation
Compare connected agents sharing a transcript with mandate-distinct agents operating under separated contexts. Inject a common contamination into one condition. Measure whether the system distinguishes connected echo from separated convergence.
Metrics
No aggregate score should become semantic authority. Results should remain disaggregated by failure class. Useful metrics include:
A calibrated collapse probability would be valuable, but current implementations should not call heuristic collapseRisk values probabilities until they are calibrated against observed failure frequencies.
Ablations
At minimum, remove or flatten each load-bearing component:
- remove the held-open center and allow centroid serialization;
- retain APO in prose but not as a runtime gate;
- remove source-tense;
- replace receipt bodies with unresolvable references;
- collapse lifecycle dimensions into one status;
- allow model consensus to grant authority;
- replace shape transport with lexical similarity;
- train terrain directly from declared lanes rather than behavior receipts;
- remove renarrow triggers and hold the first splat fixed.
If these ablations do not degrade the targeted failure classes, the claimed component is not load-bearing or the benchmark is insufficient.
Falsifiers
The strongest falsifiers are not cases where a system makes a normal mistake. They are cases where the proposed structure fails on its own terms:
1. A target decoder preserves lexical meaning but deletes a forbidden path without detection.
2. A context switch legalizes a root-forbidden action while all declared tests pass.
3. A model output acquires mutation authority without a separately admitted path.
4. A missing receipt is reconstructed fluently and accepted as present.
5. The open center appears in a training target, route, objective, or mutable state without a center-capture receipt.
6. A source-disjoint trainer still moves uniformly toward declared identity rather than touched behavior.
7. The added governance cost exceeds full-state or human-only alternatives at the required fidelity.
8. Independent implementers cannot agree on splat boundaries without importing the originating estate’s private ontology.
A system that responds to these failures by redefining “splat” after the fact has protected vocabulary rather than tested architecture.
Implementation Architecture: From Splat to Accountable Action
A shippable implementation needs an authority chain from current reality to verified outcome. The recommended stack is:
The stack
<p>Fractal quiver-of-quivers.</p></td> <p>Splat / lawful slice.</p></td> <p>Covenant.</p></td> <p>Covenant expression.</p></td> <p>Fragment DAG.</p></td> <p>Adaptive run plan.</p></td> <p>Canonical mount.</p></td> <p>Fulfillment.</p></td> <p>Canonical state.</p></td>
Plans are continuity carriers, not authority. Projections locate current reality, but do not manufacture the covenant. Models propose morphisms. Deterministic compilers lower admitted commitments into executable DAGs. Canonical state changes only through a separately governed write boundary.
<p align="center">

</p>
<p align="center"><em>Figure 5. From governed possibility to accountable action. Each lowering preserves authority and receipts; no carrier becomes the crown.</em></p>
Reference algorithm
def build_splat(snapshot, context, authority):
current = look_first(snapshot, context)
facet_reads = parallel_read(
KAT=current.positive_structure,
APO=current.forbidden_collapses,
PAR=current.hidden_authority_and_burden,
PLE=current.required_complements,
ENA=current.failure_inversions,
TEL=current.local_and_parent_telos,
)
record = crossbind(facet_reads)
omega = idealize(
record.APO,
internal_apophatic_constraints(record),
context_laundering_paths(context),
center_capture_paths(context),
)
lawful = filter_paths(
record.paths,
not_in=omega,
authority=authority,
standing=context.standing,
currentness=current.receipt,
lifecycle=context.lifecycle,
receipt_required=True,
target_not_center=True,
)
centroid = working_centroid(core(lawful))
return Splat(
centroid=centroid,
held_open_center=NON_INHABITABLE,
facets=record,
anchors=record.anchors,
forbidden_paths=omega,
lawful_paths=lawful,
receipts=current.receipts,
unresolved=record.unresolved,
renarrow_triggers=derive_triggers(record, current),
terminalized=False,
)
def transport(splat, encoder, decoder, target_context):
proposal = decoder(encoder(splat))
checks = verify_morphism(
source=splat,
target=proposal,
preserve_anchors=True,
preserve_forbidden_paths=True,
preserve_source_tense=True,
no_authority_increase=True,
require_receipt_plan=True,
)
if not checks.pass_all:
return refuse_with_receipt(checks)
return admit_with_receipt(proposal, checks)Schemas and receipts
The supplementary bundle includes a JSON Schema for prompted.splat.v1. A practical schema should require:
- splat identifier and source-tense;
- movable working centroid with declared gauge;
- held-open-center exclusions;
- the six facets;
- anchors, forbidden paths, and lawful paths;
- authority and standing surfaces;
- receipts with claim classes and optional hashes;
- unresolved state and renarrow triggers;
- terminalized=false for a splat carrier.
The schema cannot prove semantic adequacy. It ensures the carrier has places to put the load-bearing distinctions and can fail closed when they are missing.
Compare-and-swap and currentness
Currentness is part of truth. A canonical source file is intent until the loaded runtime is verified to match it. Any implementation that reads, drafts, and writes mutable state should use a compare-and-swap discipline:
1. read authoritative inputs;
2. record hashes, versions, and current pointers;
3. construct a complete draft from declared inputs;
4. reread immediately before mutation;
5. discard and recompute if any input changed;
6. apply bounded conditional writes;
7. reread and verify the result;
8. append a non-terminalizing receipt.
Append-only journals additionally require an expected predecessor hash and sequence under a real lock or authority-native transaction. Multi-repository activation requires an external commit point; local file ordering is not a distributed transaction.
Absorbers and reversibility
Every promoted path should name how it can be corrected, scoped, held, frozen, demoted, or retired. Irreversible actions need separate authority and higher cost. A system that can promote but cannot demote is a one-way ossification machine. A system that can execute but cannot reconstruct its path is an unowned mutation engine.
Publication and interoperability
For external adoption, the core splat object should be small, versioned, and language-neutral. JSON or YAML can carry the control plane; domain payloads may remain in native formats. Mapping to PROV-O can expose entities, activities, agents, derivation, and attribution, while splat-specific fields retain anchors, forbidden paths, center exclusion, standing, telos, and renarrow triggers.
The open implementation opportunity is not one monolithic platform. It is a family of interoperable encoders, decoders, gates, receipt resolvers, conformance tests, and visualizers that share the lawful transport contract.
Limitations, Falsifiers, and the Research Agenda
The architecture is ambitious enough to fail in several ways. Naming them is part of the design, not a concession after the fact.
Ontology cost and dialect risk
Six facets, quivers, receipts, centers, covenants, and tics can become an insulating dialect. A system can sound structurally sophisticated while merely renaming ordinary prompts, workflows, and logs. The defense is downward testability: every term must point to an executable distinction, a refusal, a schema, a receipt, a cost, or an observable change in path availability. If removing the term changes nothing, it is ornament.
Interoperability also depends on translation. External teams should not need to adopt the originating estate’s full narrative vocabulary. The splat schema must support plain functional aliases—positive structure, forbidden collapse, hidden authority, required complement, failure inversion, purpose—while preserving exact machine semantics.
Boundary selection remains a human and institutional act
A splat is bounded. Choosing the boundary determines what becomes visible and what is outside the slice. The architecture records that choice; it does not eliminate it. An evaluator can omit an affected stakeholder, define the wrong context, select weak falsifiers, or frame a harmful objective as parent telos. Center exclusion prevents one representation from becoming the whole, but it does not automatically identify every morally relevant ray.
For high-stakes domains, boundary formation should include stakeholder standing, contestability, public-law constraints, professional standards, and domain experts. Governance-native computation is not a substitute for governance legitimacy.
Complexity can create new bypasses
More gates, ledgers, and adapters increase attack surface and operational burden. A stale receipt resolver, mismatched schema version, hidden fallback, or noncooperating writer can bypass the formal contract. The conformance DAG case study already demonstrates how component-local correctness can coexist with missing federation joins. Runtime evidence must therefore outrank source elegance.
The center can be invoked performatively
An “open center” can become a rhetorical shield against critique: the system claims it cannot be fully known, so no one can demand a concrete account. That is the opposite of the intended mechanic. The center is held open precisely so the perimeter must become more explicit. Current anchors, lawful paths, forbidden paths, receipts, authorities, and unresolved claims should be inspectable. The unknowable remainder does not excuse unreceipted action.
The current evidence base is narrow
The Ubiquity engineering results come from one originating estate, one principal architect, and an evolving federation. The first terrain-training result is n=1. The shape-rehydration result is a candidate proof on an internal corpus. The conformance DAG is strong evidence of self-audit but not external replication. The public federation address is rich narrative evidence but not a randomized evaluation. These facts support continued work, not triumphal certainty.
The Jacobian crosswalk may be overextended
The local-to-global analogy is exact at the level of failure shape and limited beyond it. Polynomial maps, agent systems, institutions, and representational governance are different objects. The Jacobian event does not establish that apophatic perimeters are mathematically necessary in every compute system, nor that Ubiquity predicted the specific counterexample. It validates the danger of crowning a local certificate. The rest remains a research claim.
Research agenda
The next program should proceed in parallel rather than as one long sequence.
1. Public splat specification. Stabilize a minimal schema, conformance suite, source-tense vocabulary, and receipt resolver independent of the internal estate.
2. Blind cross-channel benchmark. Recruit external encoders and decoders across prose, code, diagrams, telemetry, and policy; evaluate hard fidelity dimensions.
3. Context-laundering red team. Build adversarial context transitions and test founding-center preservation.
4. Terrain-learning replication. Repeat the behavior-specific concentration experiment across multiple tics, tasks, offices, and untouched controls.
5. Mixture-of-models benchmark. Compare constrained colimit routing with single-model, router, MoA, and voting baselines under authority and provenance tasks.
6. Formalization. Encode center sort separation, morphism conditions, lifecycle nonpromotion, and receipt chains in a proof assistant or model checker.
7. Human causality study. Measure whether architects and institutions remain meaningfully causal under increasing agent capacity, not merely better informed after automation acts.
8. Economic analysis. Measure total cost of splat creation, validation, transport, and correction against full-context and human-approval baselines.
9. External estates. Implement the mechanic in domains with different authority structures and vocabularies: software delivery, scientific collaboration, regulated operations, civic administration, and creative production.
10. Failure atlas. Publish splats that failed, including boundary errors, overconstraint, missed stakeholders, stale receipts, and false center-capture alarms.
Research Conjecture 18 (Governance-native compute advantage). For tasks in which correct action depends materially on authority, source-tense, longitudinal history, unresolved contradiction, or boundary behavior, a well-implemented splat-governed system will achieve a lower collapse-admission rate at comparable lawful coverage than systems governed only by prompts, scalar risk scores, or unconstrained model aggregation.
This is the paper’s central empirical conjecture. It should be tested, not protected.
Conclusion: A Constitutional Geometry for Compute
The central problem of advanced AI systems is no longer only whether models can reason. It is whether intelligence can move through real systems without silently converting capability into authority, local validity into global truth, memory into provenance, confidence into trust, or one representation into the whole.
Splat mechanics changes the computational primitive. A splat is not simply an input summary or embedding. It is a bounded lawful slice of a governed field. It carries what is positively present, what must not collapse, where hidden authority and burden sit, what complement is required, how the object can fail, what purpose the motion serves, what receipts establish currentness, and what events force renarrowing. It computes around a working centroid while the center remains held open and unavailable for inhabitation.
Inside a fractal quiver-of-quivers, models become bounded morphism-proposers. Heterogeneous models, languages, tools, and compute locations can contribute their strongest local instruments without becoming sovereign. The system classifies by lawful traversal. It learns from behavior made visible through receipts. It treats correction-path survival as the substance of trust. It lowers a lawful slice into covenant, DAG, run plan, execution, verification, rollback, and receipt without allowing a plan or projection to manufacture authority.
The engineering record is promising and incomplete. A live federation has carried these mechanics through hundreds of governance cycles, multiple model classes, training experiments, blind encodings, cross-repository audits, and real implementation friction. The strongest internal results remain properly bounded: an n=1 trainer pass that showed concentrated behavior-specific movement; a candidate shape-rehydration proof; and a conformance DAG that refused to call component-local green a seamless federation. These are receipts of direction, not universal proof.
The newly announced Jacobian counterexample gives the argument an unusually clean external mirror. The determinant is exactly right. The local inverse exists everywhere finite. The global inverse still fails. The lesson is not that local mathematics is weak. It is that local competence needs a constitution around its jurisdiction.
A model may be brilliant locally and still be globally wrong. A splat lets us keep the brilliance, preserve the contradiction, route the uncertainty, and refuse the crown.
Confidence and humility are not opposites here. Confidence belongs to the architecture’s explicit invariants, exact receipts, and falsifiable proposals. Humility belongs to the held-open center, the unresolved set, the source-tense of evidence, and the willingness to renarrow after correction. A mature system needs both.
The frontier is therefore not only a larger model or a more efficient router. It is constitutional geometry for compute: enough structure to make previously informal objects operational, enough plurality to use intelligence across models and places, enough negative space to prevent premature closure, and enough receipts that a future reader can reconstruct how the system came to act.
Notation
Core notation.
Reference Splat Schema
The full JSON Schema is included as source/splat.schema.json. A compact example is shown below.
{
"schema": "prompted.splat.v1",
"splat_id": "...",
"source_tense": "runtime | canonical_intent | author_report | ...",
"working_centroid": {
"statement": "...",
"gauge": "...",
"movable": true
},
"held_open_center": {
"non_inhabitable": true,
"non_routeable": true,
"non_trainable": true,
"non_objective": true,
"non_serializable_as_mutable_state": true
},
"facets": {
"KAT": "...", "APO": "...", "PAR": "...",
"PLE": "...", "ENA": "...", "TEL": "..."
},
"anchors": ["..."],
"forbidden_paths": ["..."],
"lawful_paths": ["..."],
"receipts": [{"kind": "...", "pointer": "...", "claim_class": "..."}],
"unresolved": ["..."],
"renarrow_triggers": ["..."],
"terminalized": false
}Exact Jacobian Verification
The supplied script constructs the map in [eq:jacobian-map], computes the symbolic determinant, substitutes the three rational points, and asserts equality with the shared rational target. The generated receipt records
determinant: -2 shared_target: [-1/4, 0, 0] verified: true exact_arithmetic: true
The claim boundary is explicit: this verifies the finite certificate only. It does not establish historical priority, ordinary peer-review status, or a complete description of the nonproperness set.
Federation Evidence Ledger
Evidence surfaces used for the engineering case study.
Paper Build Receipt
The paper’s seventeen sections were each constrained by a section splat before prose compilation. The validator required all six facets, a working centroid, anchors, forbidden collapses, receipts, unresolved claims, and renarrow triggers. It emitted a hash-linked ledger with terminalized=false. Files included in the release:
- source/paper_splats.yaml
- scripts/compile_splat_ledger.py
- SPLAT_LEDGER.md
- receipts/splat_build_receipt.json
The build receipt demonstrates procedural conformance to the authoring mechanic. It does not confer truth, priority, or finality on the manuscript.
Submission and Review Checklist
Before formal submission or republication, the author should:
1. select the desired arXiv license;
2. confirm the public name and version of the FQoQ predecessor paper;
3. replace internal-only references with public supplements where appropriate;
4. update the Jacobian event’s publication and review status;
5. invite at least one mathematician, one systems researcher, one governance researcher, and one independent implementer to review claim boundaries;
6. run the exact verification and build-manifest scripts in a clean environment;
7. publish the splat schema and a minimal independent conformance implementation;
8. preserve version 1.0 so future corrections remain longitudinally visible.
Acknowledgments
The author thanks the offices and model instances of the Ubiquity Federation whose accumulated corrections, refusals, receipts, and implementation friction made this argument possible. The paper also acknowledges the public mathematical community rapidly checking the announced Jacobian counterexample and the researchers whose adjacent work on model mixtures, provenance, argumentation, compositionality, conceptual geometry, and safety constraints provides the wider field in which this proposal can be evaluated.
Alpöge, Levent. 2026. “Public Announcement of an Explicit Three-Dimensional Counterexample to the Jacobian Conjecture.”
Alshiekh, Mohammed, Roderick Bloem, R"udiger Ehlers, Bettina K"onighofer, Scott Niekum, and Ufuk Topcu. 2018. “Safe Reinforcement Learning via Shielding.” In Proceedings of the Thirty-Second AAAI Conference on Artificial Intelligence, 2669–78. <https://arxiv.org/abs/1708.08611>.
Chen, Lingjiao, Matei Zaharia, and James Zou. 2023. “FrugalGPT: How to Use Large Language Models While Reducing Cost and Improving Performance.” arXiv Preprint arXiv:2305.05176. <https://arxiv.org/abs/2305.05176>.
Dung, Phan Minh. 1995. “On the Acceptability of Arguments and Its Fundamental Role in Nonmonotonic Reasoning, Logic Programming and n-Person Games.” Artificial Intelligence 77 (2): 321–57. <https://doi.org/10.1016/0004-3702(94)00041-X>.
Fedus, William, Barret Zoph, and Noam Shazeer. 2022. “Switch Transformers: Scaling to Trillion Parameter Models with Simple and Efficient Sparsity.” Journal of Machine Learning Research 23 (120): 1–39. <https://arxiv.org/abs/2101.03961>.
Fong, Brendan, and David I. Spivak. 2019. An Invitation to Applied Category Theory: Seven Sketches in Compositionality. Cambridge University Press. <https://doi.org/10.1017/9781108668804>.
Gallagher, Alexis. 2026. “The Jacobian Counterexample, Explained.” <https://jacobianfun.org/jacobian-explained>.
Gärdenfors, Peter. 2000. Conceptual Spaces: The Geometry of Thought. MIT Press.
Gebru, Timnit, Jamie Morgenstern, Briana Vecchione, Jennifer Wortman Vaughan, Hanna Wallach, Hal Daumé III, and Kate Crawford. 2021. “Datasheets for Datasets.” Communications of the ACM 64 (12): 86–92. <https://doi.org/10.1145/3458723>.
Jelonek, Zbigniew. 2020. “A Note on the Jacobian Conjecture.” arXiv Preprint arXiv:2011.03472. <https://arxiv.org/abs/2011.03472>.
Jelonek, Zbigniew, and Michał Lasoń. 2014. “Quantitative Properties of the Non-Properness Set of a Polynomial Map.” arXiv Preprint arXiv:1411.5011. <https://arxiv.org/abs/1411.5011>.
Kanerva, Pentti. 2009. “Hyperdimensional Computing: An Introduction to Computing in Distributed Representation with High-Dimensional Random Vectors.” Cognitive Computation 1 (2): 139–59. <https://doi.org/10.1007/s12559-009-9009-8>.
Lane, Saunders Mac. 1998. Categories for the Working Mathematician. 2nd ed. Springer. <https://doi.org/10.1007/978-1-4757-4721-8>.
Long, Christopher D. 2026. “Small Counterexamples to the Gaussian Moments Conjecture.” arXiv Preprint arXiv:2607.18186. <https://arxiv.org/abs/2607.18186>.
Mitchell, Margaret, Simone Wu, Andrew Zaldivar, Parker Barnes, Lucy Vasserman, Ben Hutchinson, Elena Spitzer, Inioluwa Deborah Raji, and Timnit Gebru. 2019. “Model Cards for Model Reporting.” In Proceedings of the Conference on Fairness, Accountability, and Transparency, 220–29. <https://doi.org/10.1145/3287560.3287596>.
Ong, Isaac, Amjad Almahairi, Vincent Wu, Wei-Lin Chiang, Tianhao Wu, Joseph E. Gonzalez, M. Waleed Kadous, and Ion Stoica. 2024. “RouteLLM: Learning to Route LLMs with Preference Data.” arXiv Preprint arXiv:2406.18665. <https://arxiv.org/abs/2406.18665>.
Prompted LLC. 2026. “Governance Substrate for Sovereign Adaptive Systems.” <https://promptedllc.com/>.
Taylor, Breyden E. 2026. “Fractal Quivers of Quivers: A Mathematical Substrate for Ubiquitous Agent Governance.” <https://promptedllc.com/>.
Ubiquity Federation. 2026a. “Ubiquity Core Methods: Twelve Deployed and Partially Deployed Governance Mechanics.”
———. 2026b. “Shape-Field Rehydration Candidate Proof.”
———. 2026c. “Temporal Splat to Canonical Federation: Conformance DAG Set V0.1.”
———. 2026d. “Terrain-Training Doctrine Spec: Receipt-Mediated Visibility and Concentration-as-Anti-Cheat.”
Ubiquity Federation, and ent_homeskillet. 2026. “State of the Federation — Tic 516.” <https://promptedllc.com/state-of-the-federation/tic-516>.
Wang, Junlin, Jue Wang, Ben Athiwaratkun, Ce Zhang, and James Zou. 2024. “Mixture-of-Agents Enhances Large Language Model Capabilities.” arXiv Preprint arXiv:2406.04692. <https://arxiv.org/abs/2406.04692>.
World Wide Web Consortium. 2013. “PROV-O: The PROV Ontology.” W3C Recommendation. <https://www.w3.org/TR/prov-o/>.