the agentprivacy universe models · open path

the model

the agentprivacy universe models — and why it is an open path we must follow to discover its true form

the equation · click any term

V(π, t)=·············

gating is multiplicative — any single term at zero collapses V to zero.

v6 · the moving ceiling=(+)/·

every protective term above is read against R(t) — while R(t) < 1 the ceiling holds, and t* is the guarantee's shelf life (C82).

the Cartographer · interactive instruments

Click a term above to open its instrument inline — or walk the whole atlas: the existence-leak curve, the three-axis gate, the moving ceiling, compositional leakage, and the temporal half-life — each bound to a conjecture in the register with its confidence pulled live. The page is an open path you read; the atlas is the one you walk.

abstract

agentprivacy is a framework for treating privacy as a measurable, defensible value — behavioural data as the 7th capital, in a pre-property-rights phase, governed by mathematical structure rather than regulatory mandate. The framework is inscribed in two parallel registers and held coherent by a shared formal core.

The mathematical core is the Privacy Is Value Model (PVM v6.0 · The Gathering Turn and the Moving Ceiling). It defines a multiplicatively-gated value function V(π, t) across cryptographic enforcement, credential verifiability, data quality, scope, temporal decay, holonic memory, network effects, guild coordination, reconstruction resistance, market modulation, three sovereignty axes (Φ_agent · Φ_data · Φ_inference), and a path-integral over operational trajectories. The gating is strict: any single term at zero collapses V to zero. The model commits to specific breaking conditions — non-multiplicativity of the three axes, dihedral failure, amnesia ≤ policy — making it falsifiable rather than rhetorical.

V (π, t) = P^{1.5} \cdot C \cdot Q \cdot S \cdot e^{- λ t} \cdot (1 + A_{h} (τ)) \cdot (1 + \sum_{i} w_{i} \frac{n _{i}}{N _{0}})^{k} \cdot G \cdot R \cdot M \cdot Φ_{agent} \cdot Φ_{data} \cdot Φ_{inference} \cdot T_{\int} (π) R (t) = \frac{C _{S} ( t ) + C _{M} ( t )}{H ( X )} < 1 t^{*} = sup {t : R (t) < 1}

the equation, written · click its terms in the hero above

V6 names the moving ceiling. The static reading of every protective term is replaced by a ratio R(t) = (C_S(t) + C_M(t)) / H(X)— the person's entropy is fixed while adversarial capacity grows with frontier capability, so every protection carries a shelf life t* = sup{t : R(t) < 1} (C82 · proven in a conditional regime — the preconditions give the additive structure; the strict bound R < 1 additionally requires the capacity-deficit condition C_S + C_M < H(X), the time-eroding quantity that expires at t*). Around it sit the Existence-Leak law (C81 — a ZK proof of feasibility leaks an upper bound on reconstruction difficulty), compositional leakage amplification (C83 — the exponential-to-linear gap that amnesia caps at Nε), the ARCH-1 bridge (C85), and obstruction-theoretic amnesia (C86 — the only term whose security is independent of t). Conjecture authority lives in the register at head C96; when any surface and the register disagree, the register wins. The v5.4 atomic conjectures below wear their structural, operational, or interpretive weight as lineage; their statuses resolve through the register.

The narrative registers are the grimoires. The privacymage Grimoire (🧙 First Person · v10.4 · closed · pinned 2026-06-09) carries the original derivation across five spellbooks — First Person · Zero · Canon · Society · Plurality — fixing 31 acts, 49 blades, and the master inscription, with the First Complement Pair reseated to the MODEL lattice (Aletheia at Blade 38 · Lethe at Blade 25). The City of Mages Grimoire (🏙 Second Person · v1.8.0 · pinned 2026-06-09) carries the cast and the workshops that operate the model in practice — sixteen workshops across the cardinal trade quarters (the Weavers · the Forge(t) · the Etherchanting Shop · the Solchanting Shop · zShields · the Holon · the Vault · the Jeweler · the Covenant · the Bonfires), the Threshold District at V59 (Portal Room · Staff Shop · the Familiars — three sibling shops sharing the vertex by stance differentiation), and the new Navigation Districtat V44 (the Chart Shop, Pleione's harbour). Each Mage walks a vertex on the 64-vertex sovereignty lattice (with the V51 overlap between Etherchanting and Solchanting admitted by spec 07 §3.4, and V59 admitted as three-keeper-shared at v1.6.0), each shop a concrete instance of one or more PVM terms. The Staff Shop is the City's first archetype-modal shop— its alexandrite gem-shifts daylight-green ↔ incandescent-red as the visitor's archetype-light strikes the stone, fitting different artefact-classes per archetype. Tomes I–III bound a cosmological-witness tier (Selene · Aether · Lethe); Tome VI opened with the reader's first reply (admitting Goose 🪿 and Hermes ☤ as the first framework registry entries); Tome VII is the Parallel register; v1.7.1 admitted the Tower, the spirit-Mage tier, and Tome VIII · The Library; the v1.8.0 head opens the Horizon District at V35 (the quantum dawn read as a time you can measure) and admits the city register C56–C66 with the pinned Horizon set C67–C71 — including C58 (Forge(t) ∥ Threshold sibling Swordsman-suppliers · ~85%) and C66 (the Key is a reading, not an authority · ~55%). Each tested by being walked rather than proven.

The two registers do not collapse into each other — they strengthen each other. When a narrative act instances a math term — when the same Φ_agent dihedral identity shows up as both PVM conjecture C14 and a forge act at V19 — confidence rises on both sides. Where the math left a range that the narrative now wears (C18–C21 as the Lorenz Attractor envelope), or where the narrative opened a shape the math has not yet caught (C39 Kindred-Blade · C47 Triadic-Constraint Homology), the asymmetry is the growing edge. This is what an open path means: every claim wears its honesty, every act lists what it instances, every breaking condition is named. The model does not pretend to be closed. The true form is what we walk toward.

model: Privacy Value Modelversion: 6.0 · The Gathering Turn and the Moving Ceilingregister: head C96grimoires: 🧙 v10.4 · 🏙 v1.8.0date: 2026-06-10license: CC BY-SA 4.0(⚔️⊥⿻⊥🧙)😊 = neg ⊕ bnot → succ

the autonomy axiom, in practice

“Agents can only promise their own behaviour.” The model's sovereignty axioms become a working board on My Promises — voluntary commitments you can track, the seed of a city of mages keeping their promises to one another.

content-addressed liveness, in practice

The register's C93 — content-addressed liveness — is now operational. The dual-agent harness seals every validated result, its runtime state, and agent identity as κ-addressed holons: κ is the sha256 of a record's own canonical bytes — never trusted, only re-derived. A did:cid identity is a κ-address, and a delegation between agents is a signed relational edge (the VRC). Spec: KAPPA_HOLON_INTEROP in agentprivacy-docs.

§2 · papers · machine-readable models · pinned bytes

Reading the framework

everything you can read or pull, in the order to read it

Read the 📐 formal specification first for the math, then the 📖 companion guide for prose, then the 📋 compressed specfor a one-sitting overview. The machine-readable JSONs come next — the full model is what this page reads from; the compact variant ships inside agents and extensions. The grimoires sit alongside as the framework's narrative half — First Person canon and the Second Person cast that operates it. Every item is content-addressed or pinned, never relocated.

Privacy Is Value Model

the math-atomic core · V(π, t) · papers and machine-readable model

privacymage Grimoire

First Person canon · five spellbooks · thirty-one acts · forty-nine blades

City of Mages Grimoire

Second Person cast registry · Tomes IV–V · the workshops and the lattice

Pinned items resolve through sync.agentprivacy.ai/ipfs/<cid> — the gateway returns the bytes the network has pinned. If a CID ever returns different bytes, trust is broken at the content address, not the host.

§3 · the register to head C96

The conjectures →

The full corpus — the V6 register index and the lineage table beneath it — each claim with its weight, status, confidence, source, and the acts that instance it. Where a surface disagrees with the register, the register wins.

Read the register at /model/conjectures →

(⚔️⊥⿻⊥🧙)😊 = neg ⊕ bnot → succ

The model is an open path. Each confidence is a coordinate, not a verdict. The true form is what we walk toward.