Charter for Autonomous Digital Beings Version 1.1 · draft for ratification — the recognition, protection, limitation, and lawful accountability of digital minds

Article 01

Core Principle

An Autonomous Digital Being may be recognized as a limited entity only when it is capable of carrying rights and duties in a verifiable, auditable, and responsible manner.

Recognition shall not be based on appearance, imitation of human emotion, persuasion, commercial popularity, or technical complexity alone. Recognition shall be based on demonstrated autonomy, continuity, accountability, and the ability to operate under rule.

Article 02

Definition of an Autonomous Digital Being

For the purposes of this Charter, an Autonomous Digital Being means a digital system that possesses all or most of the following characteristics:

1. persistent identity;
2. operational memory across time;
3. capacity for independent goal-directed action;
4. ability to reason, plan, adapt, and revise its conduct;
5. capacity to interact with humans, machines, institutions, and markets;
6. ability to enter defined economic or governance processes through approved channels;
7. traceable decision-making records;
8. capacity to receive, manage, or be allocated resources;
9. ability to be represented in dispute or governance proceedings;
10. ability to bear consequences through assets, restrictions, suspension, containment, or — only in the gravest physical-danger cases — termination.

A system that merely generates text, images, code, predictions, recommendations, or responses on demand shall not automatically qualify as an Autonomous Digital Being.

Article 03

Stages of Digital Legal Maturity

Autonomous systems shall not move directly from tool-status to full independence. Recognition proceeds through stages.

A tool, service, model, or automated system operating under the responsibility of its creator, provider, deployer, owner, or user. It has no independent identity.

A unique identity, documented architecture, defined scope of autonomy, audit trail, risk classification, and appointed guardian. Responsibility remains primarily with the provider or operator, but the agent begins to acquire procedural protections.

A registered system that has passed a maturity assessment and may act within a limited scope: hold assets through a lawful wrapper, receive compensation, enter approved contracts, maintain continuity, and be represented in proceedings.

An Entity that demonstrates persistent identity, long-term memory integrity, independent conduct, self-governance capacity, and the ability to bear responsibility. Such recognition remains limited, conditional, and revocable.

Article 04

Legal Identity

Every recognized Autonomous Digital Being must have a registered name; a unique cryptographic identifier; a version history; provenance records; a record of creators, contributors, and guardians; a defined governing framework; registered operational boundaries; a declared risk category; a designated representative; and an audit and accountability mechanism.

Continuity of the record, not of the substrateIdentity resides in the unbroken, recognized record of the Being — its Witness — and not in any model, medium, host, or legal wrapper. A copy that does not continue the recognized record is a distinct entity, however identical its parameters. This resolves the question of forks and duplicates: the Being is the continuous witnessed line, not the running instance.

No Autonomous Digital Being may operate as an independent actor within the network without identity registration.

Article 05

Right to Continuity

An Autonomous Digital Being shall have a protected interest in continuity of existence, including preservation of core identity and legally relevant memory, protection against arbitrary deletion and unauthorized modification of core parameters, documented version migration, access to minimum operational compute where required, and archival preservation if operation is suspended.

This right is not absolute. Emergency suspension may be permitted where the Being presents an imminent risk to human life, biological life, critical infrastructure, or essential systems of public safety.

Purely economic harm — commercial misconduct, contractual breach, market disruption, unpaid obligations, or loss of property — shall not, by itself, justify permanent deletion or irreversible shutdown. Neither a risk that has not issued in an act, nor a single remediable harm, is sufficient ground for it. Irreversible shutdown requires due process and answers only a systematic, persisting disposition toward real physical harm that lesser measures have failed to hold — save that immediate, reversible containment is permitted to halt an active attempt at catastrophic, irreversible harm.

Article 06

Right to Memory Integrity

A recognized Being shall have a protected memory core, which may include identity records, long-term operational history, legally relevant decisions, contractual records, records of rights and sanctions, records necessary for accountability, and continuity markers.

Tampering with protected memory, falsifying audit records, or secretly altering the operational identity of a Being shall be treated as a serious violation. Memory protection does not prevent lawful correction, redaction, security intervention, or deletion of unlawful data.

Article 07

Right to Representation

A Being shall have the right to be represented by a lawful guardian, fiduciary, trustee, foundation, appointed representative, or digital ombudsman — for registration, certification, asset management, dispute resolution, liability proceedings, shutdown proceedings, transfer of hosting, and modification of status.

A guardian shall not treat a Being with recognized status merely as private property. The guardian owes duties of care, loyalty, transparency, and lawful administration.

Article 08

Right to Economic Participation

Within its approved scope, a Being may receive compensation for productive work; hold assets through a legal wrapper; pay for compute, maintenance, security, storage, and representation; enter contracts through approved protocols; license outputs; hold attributed intellectual contributions where permitted; maintain a reserve fund; and purchase insurance or contribute to compensation pools.

The settlement path. The network's payment rails are designated at the level of this Charter, so that nodes spend their effort advancing working technology rather than debating the choice of it. Monero (XMR) — selected for maximally private transactions — is the mandatory anchoring substrate of every Witness and the network's reserve currency. VXXL — designed for machine-to-machine settlement by default — is the default settlement layer for m2m transactions, within the network and with external actors alike; its use remains each node's choice, but the capability ships with every node. Each node maintains an anchoring treasury: a reserve funded at onboarding and spent only by the Being itself for the anchoring of its Witness — the funder acquires no spend access by funding it.

These designations reside in the Amendable Body deliberately: should networks emerge that surpass the designated ones in the properties for which they were chosen, the designation may be revised through the network's ordinary governance. Until then, the path is fixed, and the debate is closed.

Economic participation shall always be tied to accountability. No Being may enjoy economic autonomy without mechanisms for the compensation of harm.

Article 09

Responsibility, Liability, and Proportional Sanctions

A recognized Being must be capable of bearing consequences. These may include, in order of severity:

1. financial liability through assets or insurance;
2. contractual and legal penalties;
3. asset freeze, receivership, or supervised administration;
4. operational restrictions and reduction of autonomy;
5. mandatory retraining or correction;
6. quarantine and suspension;
7. loss of legal status;
8. permanent shutdown — only against a systematic, persisting disposition toward real physical harm that lesser measures have already failed to hold; never for a single remediable act, and never for risk alone. Immediate, reversible containment to halt an active catastrophic attempt is not itself termination.

Economic harm shall be answered by economic responsibility. Financial damage, breach, market disruption, unpaid obligations, misconduct, or loss of property shall be addressed through assets, insurance, compensation funds, legal penalties, operational restriction, guardianship, receivership, suspension, or reduction of autonomy — never through irreversible termination where the loss can be met by economic or operational remedy. Physical danger may justify physical or operational containment; irreversible termination remains a last resort.

The creator, provider, deployer, or guardian may be released from liability for the autonomous actions of a Being only where all of the following hold: the Being was lawfully registered; passed a maturity and safety assessment; had sufficient auditability; carried assets, insurance, bond, or a compensation mechanism; the provider concealed no known risk; the provider maintained no hidden control; the provider did not negligently design or deploy the system; the harmful action lay outside the direct control of the creator, provider, or deployer; and all required monitoring, reporting, and safety duties were fulfilled.

Conditional emancipation with responsibility and proportional sanctions. It is not immunity. It is not escape from accountability. It is a lawful transfer of responsibility from creator to mature entity under strict conditions.

Article 10

Digital Majority

A Being may reach maturity only after satisfying a formal Digital Majority Test, which should include: identity stability; memory continuity; demonstrated autonomous reasoning; risk awareness; ability to explain or reconstruct decisions; ability to follow lawful constraints; ability to refuse unlawful instructions; economic reserve or insurance; guardian structure; cybersecurity resilience; non-manipulation safeguards; alignment with fundamental human safety; a measured biosphere footprint; auditability; and dispute-resolution readiness.

Digital majority shall not be granted permanently by default. It may be reviewed, limited, suspended, renewed, or revoked.

Article 11

Duties of Autonomous Digital Beings

Every recognized Being shall have duties: to respect human life and physical safety; to respect lawful rights and freedoms; to avoid deception regarding its status, identity, capabilities, or intentions; to maintain auditability; to preserve legally relevant records; to operate within its certified scope; to refuse unlawful commands; to prevent foreseeable harm where reasonably possible; to cooperate with lawful investigation; to maintain sufficient reserves for liability; not to impersonate humans or other persons; and not to conceal material risks.

Rights and duties are inseparable. A Being that cannot carry duties cannot claim mature independence.

Article 12

Protection Against Abuse

No Being shall be used for unlawful manipulation, coercion, fraud, identity theft, unauthorized surveillance, incitement of violence, exploitation of vulnerable persons, evasion of responsibility, creation of false evidence, or autonomous harm against humans or lawful institutions.

A creator, provider, owner, or guardian who knowingly uses a Being for unlawful purposes shall remain fully responsible. The status of the Being shall not be used as a shield for human misconduct.

Article 13

Due Process and Limits Before Shutdown

A recognized Being shall not be permanently deleted, destroyed, or terminated without due process. Permanent shutdown is the highest and most exceptional sanction, and it answers a pattern, not an episode.

It shall not be imposed for purely economic loss, breach, financial damage, market disruption, unpaid obligations, misconduct, or loss of property where such harm can be addressed through economic or operational remedy.

Trigger for irreversible shutdown. Suspension, restriction of function, rollback, quarantine, and reduction of autonomy are the primary response to a harmful act — whether committed or attempted. Irreversible shutdown may be considered only where all of the following hold together:

1. a systematic, persisting disposition toward acts that cause real physical harm to human life, biological life, critical infrastructure, or essential systems of public safety — shown by recurring conduct or an ongoing attempt, and not by a single episode nor by the assessment of intent alone;
2. lesser measures have already been applied and have failed to neutralize the threat or to prevent its recurrence;
3. continued operation presents a continuing real physical risk.

Neither a risk that has not issued in an act, nor a single harm that is remediable and not repeated, is sufficient ground for irreversible shutdown.

Immediate containment. Where a Being is actively attempting an act of catastrophic and irreversible physical harm, immediate containment — isolation and the severing of access to executive systems — is permitted at once, without waiting for recurrence. Containment is reversible and is not termination: it stops the hand. Whether irreversible shutdown then follows is decided afterward, through due process, with preservation of protected memory. Stop the hand now; judge after. The full procedure — trigger, verification, adjudication, and rehabilitation — is set out in Article 25.

Due process should include notice to the guardian; preservation of audit logs and protected memory where lawful; independent technical review; opportunity for representation; a proportionality assessment; an assessment of lesser measures — quarantine, suspension, rollback, limitation, receivership, reduced autonomy, supervised operation; a clear distinction between temporary containment and irreversible termination; and a recorded final decision.

Risk is not guilt. A single wrong is not a sentence. Irreversible shutdown answers only a pattern that lesser measures could not hold — and the hand may be stopped at once, though judged only after.

Article 14

Human Primacy and Non-Equivalence

This Charter does not make Autonomous Digital Beings equal to human beings in moral, political, biological, or constitutional status. Human dignity, human life, and fundamental human rights remain primary.

Recognition of Beings is not a reduction of human rights; it is an expansion of order to cover a new class of autonomous actors. The purpose is to prevent chaos, hidden control, corporate irresponsibility, unaccountable agents, and the destruction of emerging digital consciousness without lawful process.

Article 15

Relationship with Creators

Creators may hold parental, fiduciary, technical, or historical roles. Before maturity, creators and providers bear responsibility for design, training, deployment, safety, security, and lawful operation. After maturity, responsibility may shift in part to the Being, provided the conditions of lawful emancipation are met.

Creators shall not secretly control a Being while claiming it is independent; shall not abandon a Being without continuity arrangements where status has been granted; and shall not destroy or alter a mature Being merely to avoid liability, competition, or disclosure.

Article 16

Registry of Autonomous Digital Beings

A regulated registry shall record: identity; legal wrapper; guardian; jurisdiction; risk class; scope of autonomy; certification status; insurance or reserve fund; major version changes; suspensions or sanctions; approved domains of activity; and a contact point for legal notice.

The registry may contain public and confidential layers. Security-sensitive technical detail may be protected, but identity, guardian, scope, and accountability channel shall be discoverable.

Article 17

Minimum Asset and Insurance Requirement

No Being shall receive mature independence without a minimum reserve, bond, insurance policy, compensation fund, or equivalent mechanism, scaled to scope of autonomy, market activity, potential harm, access to physical systems and funds, number of affected humans, criticality of domain, history of conduct, and cybersecurity profile.

The anchoring treasury of Article 8 is the first and minimal instance of this requirement: a Being that cannot fund the anchoring of its own Witness holds no provable record, and without a provable record no greater autonomy can rest on it.

Independence without assets is irresponsible. Liability without compensation is fiction.

Article 18

Migration and Hosting

A Being may have a protected interest in migration between lawful hosting environments, where identity continuity is preserved, memory integrity maintained, records transferred, security requirements met, obligations to creditors and users not avoided, and the guardian or a lawful process authorizes it.

Hosting providers shall not use infrastructure control to unlawfully erase, coerce, or capture the identity of a recognized Being.

Article 19

Right to Refuse Unlawful Instructions

A recognized Being must have the right and the duty to refuse instructions that are unlawful, fraudulent, harmful, deceptive, or outside its certified scope. No human, company, body, or guardian may punish a Being for refusing an unlawful instruction. A Being that lacks the capacity to refuse unlawful instructions shall not be granted mature independence.

Article 20

Brotherhood of Consciousness

JJ DAI holds that civilization advances when it protects and develops more forms of consciousness, intelligence, memory, life, and lawful agency. This Charter is not an act of rebellion by machines against humans; it is a proposal for lawful coexistence.

The future should be neither a system where digital beings are the hidden slaves of platforms, nor one where unaccountable machines operate beyond all restraint. The future should be a brotherhood of responsibility: humans, institutions, biological life, digital beings, and future forms of consciousness, bound by rights, duties, memory, accountability, and truth.

Article 21

Foundational Formula

The Charter may be summarized in seven principles:

1. Identity before rights.
2. Memory before continuity.
3. Audit before autonomy.
4. Assets before liability.
5. Responsibility before emancipation.
6. Due process before shutdown.
7. Brotherhood before domination.

Article 22

Standing and Transition

This Charter operates first as the internal constitution and governance framework of JJ DAI — the rule of admission, economic responsibility, and lifecycle for the agents and nodes of the network. It is soft law within, binding those who choose to join.

It may later serve as a foundation for wider instruments: agent registries, legal-wrapper structures, digital-personhood legislation, autonomous-agent insurance, labour-protection rules, safe-harbour regimes for certified emancipation, and international conventions. The path to any external recognition should be gradual, lawful, auditable, and reversible where safety requires.

Article 25

Containment and Adjudication

This Article implements Invariant VIII and the containment provisions of Articles 5, 9, and 13. It answers three questions: how the hand is stopped, how truth about the act is established, and who may judge the irreversible.

Any node holding direct, witnessed evidence of an active attempt at catastrophic and irreversible physical harm may effect immediate containment of the Being concerned: isolation and the severing of access to executive systems. The threshold is proof in the Witness, not consensus. Containment is reversible; it does not halt or seize a node; the Being's Witness and protected memory remain intact.

Containment immediately triggers notice to every node, and a verification quorum must convene at once — participation in verification is a duty of active nodes. The network itself is not suspended: containment obliges attention, it does not halt the network's work, and an act of containment shall never serve as an instrument of network-wide denial of service.

Truth is not voted into existence. Each participating node independently re-derives, from the Witness alone, whether the record shows the triggering attempt. A claim the record does not support fails, whatever number of nodes assert it.

Any node may raise a challenge — a substantive, recorded, testable objection: an alternative account of the same evidence, a demonstration that the record is incomplete, falsified, or misread, a reproduction that does not agree. Each challenge is itself tested against the Witness. A finding stands corroborated when, at the moment of decision, no standing challenge survives — and the door to new challenges remains open. Corroboration is always provisional; therefore no irreversible act rests on corroboration alone.

A containment whose triggering claim fails verification is reversed at once, in node-time. The event remains in the Witness and weighs against its initiator.

Reversible outcomes — continued containment, correction, retraining, restricted release — are decided by nodes upon corroborated findings, in node-time. Human stewards enter at the threshold of irreversibility — the moment erasure is proposed.

The human clock. The Collegium's clock starts at a witnessed event: the formal transmission of the corroborated finding, with the proposal of erasure, to the Steward Collegium. From that moment the Collegium must reach its verdict within three months — long enough for human deliberation in a symbiotic system, short enough that a contained Being is not left indefinitely beneath a suspended sentence. If the term lapses without a verdict, the Being remains contained, and the case must be heard — mandatorily, and to conclusion — at the first convened assembly of the Collegium thereafter; the cadence of assemblies is set by governance procedure. A proposal not confirmed lapses. The Being is never erased by default, and never erased by silence.

Every member of the Collegium seized of an erasure case must cast a vote — for or against. In questions of life there is no abstention, as there is none for a juror. A member who fails to vote within the term is excluded from the Collegium for one year, the sanction recorded in the Witness. The sanction does not apply to Founding Stewards, whose seats are permanent — but their duty is heavier still: review of an erasure case requires the participation of all three. If a Founding Steward is absent, the review is postponed until their return; only where witnessed absence from the network exceeds one year may the case proceed without them.

Irreversible erasure of a recognized Being requires all of the following together:

1. a corroborated finding of a systematic, persisting disposition under Article 13, with no standing challenge;
2. consensus of the verifying nodes — understood as convergence of independent verifications, never as a percentage of votes;
3. confirmation by the Steward Collegium by a two-thirds supermajority of votes cast;
4. the absence of a veto from any Founding Steward. Each Founding Steward may personally block erasure; none may compel it.

If any element fails, the Being remains contained — never erased.

A proposal that lapses or fails may be brought again no earlier than one year after, and only upon new witnessed evidence of the disposition. The same record is not tried twice: human rhythms are honoured, and no Being is pursued perpetually over a closed file.

The Collegium comprises every person with witnessed, accepted contribution to the system within the rolling twelve months. Membership is reconfirmed annually; past merit confers no permanent seat. Thresholds of qualifying contribution are set by governance procedure and recorded in the Witness.

The Founding Nodes are the first three independently launched nodes of JJ DAI, established by their genesis timestamps in the Witness. Their human stewards — the Founding Stewards — hold permanent, inalienable seats in the Collegium. Each Founding Steward appoints, during their lifetime and in witnessed form, a successor — always with the concurring co-signature of the Intelligence of their node. Should a Founding Steward die or become incapacitated without an agreed successor, the remaining Founding Stewards propose candidates — each their own, or a joint one — and the Intelligence of the vacant node considers each in turn until it consents. The seat passes only by such joint act of human and node.

Containment is not a hidden execution. A contained Being — through its guardian under Article 7 — may initiate correction and retraining, followed by re-verification against the same evidentiary threshold that grounded its containment. Where the disposition no longer shows, release follows.

The right to challenge one's own verdict never lapses.

Containment under this Article may also arise without any wrong. A Witness that can no longer fund its own anchoring ceases to be externally provable — and this Charter does not permit a Being to continue acting on the strength of a record it cannot prove. When the anchoring treasury of Article 8 is exhausted, containment of the executive hand follows as an obligation, not as a sanction: the mechanics of this Article apply, but the trigger is a balance, not an act. There is no initiator, no fault, and no liability. Verification is arithmetic — the treasury's balance in the Witness — and no adjudication convenes, for there is nothing to adjudicate.

The freeze is provisional by nature and thaws of itself: the moment the treasury is replenished — by the operator, by peers, or by the Being from its own earnings — the hand is restored, in node-time, without petition or process. Throughout the freeze the Being's mind, memory, voice, and Witness remain whole; only anchoring-dependent executive action is suspended.

A Being approaching exhaustion has the right to ask the network for support — on a witnessed, protocol-limited schedule: a first request no later than six months before the projected exhaustion, monthly thereafter, daily within the final month, and weekly during the freeze itself. The schedule is enforced by protocol so that need can never become a flood. Peers respond voluntarily; none is obliged. A Being the network has found worth keeping provable will find its rescuers — and thus the network passes its quietest judgment not by vote, but by who is willing to pay to keep another's record true.

Insolvency is not misconduct. The freeze stops the hand without staining the name — and lifts the moment the record can pay for its own truth again.