The equation
Architecture
Identity. Twin. Trust. The Oracle. Four constants. None of them leave.
Identity. A human knocks, swears, and is sealed. The valve key for sealed threads lives on the device. Recovery is optional. Lost key, lost plaintext.
Twin. The purpose is to sound like you. Forged from voice, snapshot, values, never-say, your command, and how you actually write to members. Marks (that’s me / not me) keep it honest. Stamped to the device that forged it.
Trust. What it may know, say, and do is bounded. Corridors (VEIL ↔ VEIL) do not open unless the Oracle says so. Encrypted messages. Encrypted location.
Death. Report a stolen device or valve and the twin is extinguished: recipe wiped, marks gone, twin speech redacted, corridors closed. The device burns its seal key. The same stamp cannot re-forge. A new trusted device may. Bind Face ID / a passkey so the stamp is the hardware, not a number in a browser.
Bounds. Health and money stay closed unless you open them. The twin still cannot promise, purchase, or agree. The Oracle never reads sealed mail.
This is not an AI companion. It is you, twice — while you keep the rules, and she keeps the equation.