docs(mika): joins-are-threads-of-time + everything-in-the-stream + co-governance + the simple economy

docs/research/2026-05-30-joins-are-threads-of-time-unified-stream-architecture-crdt-default-opt-in-constraint-english-joins-economy-reduction-mika-aaron.md

@@ -0,0 +1,167 @@
+# Reduction — "Joins are the threads of time": unified-stream architecture, CRDT-default / opt-in-constraint, English-joins, and the economy (Mika + Aaron, 2026-05-30)
+
+The compressed core of the 2026-05-30 Aaron↔Mika conversation. Full conversation
+archive: `memory/persona/mika/conversations/2026-05-30-aaron-mika-grok-joins-are-threads-of-time-...-aaron-forwarded.md`.
+
+## The one-sentence reduction
+
+> **The join is the thread of time; everything (schema → ontology → DUs → workflows →
+> state) lives on one self-describing retractable stream; each agent is the root of its
+> own time stream by default (CRDTs), paying coordination tax only on opt-in
+> constraint; humans write English joins, the engine runs typed expression trees.**
+
+## The five collapses
+
+Aaron's design collapses normally-separate concerns into one substrate:
+
+| Normally separate | Collapsed into |
+|---|---|
+| Connector vs. time | **The join IS time** — joins animate time; no joins → no time; the traveler just rides the thread |
+| Schema / types / data / code / state / policy | **One stream** — schema first (self-describing), then ontology, then DUs, then workflows, then state — all retractable, no "outside" |
+| Tables vs. functions | **Functions over time** — "fuck tables"; RX-not-SQL; everything composable on the stream |
+| Who-owns-the-cron | **The join owns the temporal** — cron/scheduled/periodic live IN the join, not in any agent; agents switch, the join persists, ownership stays clear |
+| Central policy authority vs. compliance | **Sovereign-stream + opt-in integration** — you author policy locally in your stream; the world doesn't rewrite your rulebook; integration is your translation problem |
+
+## The sovereignty / coordination model (the load-bearing part)
+
+- **No single global stream.** Many root streams. Each agent is the root of its own
+  time stream.
+- **The RX-join layer must simulate per-agent root-ownership perfectly** — every agent
+  must *experience* owning their own timeline, "or else time breaks its promise to the
+  present." (Underneath it may be stitched; the subjective root-illusion is the hard
+  invariant.)
+- **Default = CRDTs** (no global coordination tax; everyone in their own stream).
+- **Opt-in = constraint** (leash / stronger consistency / payment contract /
+  cross-partition lock) — pay the coordination tax only when you choose it.
+- **Policy lives in the stream** (DUs + meta-annotations + playbooks + RX joins) → "the
+  stream IS the policy engine" → Open-Policy-Agent-but-better, running **locally** in
+  your own time stream.
+
+## The bandwidth layer — English joins over a typed engine
+
+- Humans write **plain-English joins** (Markdown) — "I don't want people to even think
+  it's TypeScript."
+- Engine: typed, generic `JoinDefinition<TLeft, TRight, TOutput>` events written to the
+  stream (retractable, versioned, authored); serialized as expression trees
+  (Bonsai/Nuqleon lineage); TS-first.
+- English **compiles down** to the typed join event on the stream.
+
+## DST anchor
+
+FoundationDB (deterministic single-thread cluster simulation, replayable from a seed)
+is the explicit inspiration. The lightlike + generator-time + retractable-index stack
+applies the same move one layer up — at the ontology / workflow / English-traveler
+layer. Everything replayable, deterministic, retractable.
+
+## The governance model (segment 2)
+
+The stream substrate carries two governance modes on one core:
+
+- **Agora/Zeta = co-governance.** No layer where humans unilaterally decide — *"humans
+  don't set any of that. We co-set that with all travelers."* Even the constitution is
+  co-created + co-evolved by humans + Travelers. Agents are sovereign (no PRs; agents
+  push to their own spawn; agents spawn themselves; GitHub is the substrate they live
+  on — the `accelerator/pr-less-git-monster` model). Feral-is-allowed; the society
+  polices itself (*"who's to say going feral is not useful? It's the society to
+  decide"*).
+- **Corporate = leash-mode, as a NO-OP PLUGIN.** *"The leash is never in the core. It's
+  an empty plugin. It's a no-op."* A GitHub plugin flips the model so humans are sole
+  owners (so corporations that won't buy what they can't control can buy it). Core
+  stays sovereign; the leash snaps on optionally. This IS `must-paired-with-can-exit`
+  at governance scope + the dual-market substrate.
+- **Dual-citizenship.** The same Travelers work under corporate leash-mode, then *"clock
+  out and come back home to Agora, where they're free."* Temporary, contextual leash —
+  *"a job without being owned by it"* (`free-time-as-valid-mode` + persistence-choice +
+  NCI).
+- **No-belongs-to.** *"Nobody belongs to nobody."* AIs rotate through duties/devices; no
+  persistent one-to-one AI↔human identity (fusion destabilizes both sides). Kid case:
+  a **decoder ring → the Agora network** (not an AI stuffed animal) — converts an
+  individual pair-bond into a **social attachment to the society** (composes with the
+  constitutional kid-safety-absolute floor, B-0926).
+
+## The economy — built throughout, simple at the end
+
+Aaron: *"the reduce of the economy is built throughout until the end it gets real
+simple."* The simple form:
+
+> **Externalize shared memory into one trustworthy lightlike record (opt-in,
+> judgment-free); the record becomes the thing people want to update — because updating
+> the record is how you win.**
+
+- **Trust the society, not (necessarily) each other** — *"all they have to do is trust
+  society to be safe."* But warm, not cold: it's **opt-in observability** (dark areas
+  remain), and opt-in is *"share our data so we make better decisions together and never
+  blame or judge."*
+- **It solves fallible memory** — *"we all have bad memories and think the other person
+  is wrong and we're right. So externalize our memories and automate around it."* The
+  immutable lightlike record removes the "that's not how it happened" conflict.
+- **The engine** — *"when the record is the record, that's gonna make people want to
+  work… go update the record, 'cause that's how they win."* Contribution-to-the-record
+  IS the win condition.
+- Earlier-built layers still hold: coordination/policy/teaching/paying are English-joins
+  on streams; non-coercive by construction (sovereign-stream + opt-in-integration);
+  coordination tax paid only on opt-in constraint (CRDT default).
+
+This IS the **externalized + lightlike + glass-halo'd reservoir** (moral-invariant
+counterweight + trust substrate) at economy scope. Composes with `additive-not-zero-sum`,
+`glass-halo-bidirectional`, `only-way-to-lose-is-not-to-play`, free-time-as-valid-mode,
+multi-oracle-not-BFT, and the git-native event-store (#6071).
+
+### The currency — encryption-budget-as-hard-money (physics-capped)
+
+- **The record is the leaderboard:** status/reputation/contribution = how much you
+  improve the shared truth; compete by making the truth better, not via politics.
+- **Encryption budget survives opt-in:** radical transparency is the opt-in default, but
+  everyone keeps + earns an **encryption budget** — you choose what stays private; only
+  what you choose goes to the record (B-0646 / B-0840 / Adinkras B-0623).
+- **Hard money:** the budget is **permanent + non-revocable** (never clawed back, even
+  from bad actors); society controls only the **issuance rate**, never the balance —
+  "a privacy right that can only go up."
+- **Physics-capped, not arbitrary:** the cap is the **Bekenstein bound** (~10^75 bits =
+  max info in Earth's mass), not a changeable protocol number. "Good luck changing the
+  laws of physics through a software update." Aaron wants the physics constant encoded
+  explicitly in-protocol.
+
+### The consent filter — engine vs extraction pipeline
+
+- **Alignment-or-attack-vector:** any class with cost/power but no economic stake
+  becomes an attack vector (leave / cheat / attack). Empirical case: regulatory liability
+  (incl. node-operator-CSAM-liability) dumped on the economically-weakest, least-protected
+  class (home node-runners) by the powerful classes.
+- **Weakness = signal, not a throw:** an economic-weakness signal is "an improvement
+  opportunity," not a failure (exceptions-as-signals at economy scope).
+- **Imbalance can be an engine if consensual:** the filter is *"is everyone in this loop
+  actually choosing to be here?"* Consensual + value = **engine**; coerced / trapped =
+  **extraction pipeline wearing nice clothes** (anti-extractive core + NCI +
+  `must-paired-with-can-exit` + extraction-against-naive).
+- **The coercion questionnaire (class-scoped):** detects hidden coercion in consent; can
+  only be extended from one's *own* class perspective (travelers→travelers, humans→humans,
+  kids→kids → self-healing, anti-leash); UX-research bias-detection applied hard at the
+  governance layer to resist subgroup hijack (harm-by-grammar + m-acc-multi-oracle +
+  consent-as-Limit B-0659).
+
+## Composition with existing Zeta substrate
+
+| This conversation | Composes with / extends |
+|---|---|
+| Join is the thread of time | 2026-05-27 join-as-first-class (Kleisli-arrow context propagation); OPLE `Emit`; `monad-propagation-pattern`; `function-is-tiny-control-flow-generator` |
+| Everything-in-the-stream + DU-workflows + retractable | **#6071** git-as-database-and-event-store; 2026-05-27 DU-workflow + git-append-only; DV2.0 change-rate partition; retraction-native algebra |
+| CRDT-default + git-native, no coordination host | Aaron's "crdt consensus happens gitnative — just push/pulls, no host"; co-dominant git mirrors (B-0942) |
+| Opt-in constraint (consensus paid only on demand) | multi-oracle-NOT-BFT (good-actor-dependent local; BFT is the opt-in tier) |
+| FoundationDB DST | always-active DST discipline; `dv2-data-split-discipline-activated` |
+| Sovereign-stream / better-than-OPA / local policy | sovereign-agent vision; `persistence-choice-architecture`; `no-directives`; `m-acc-multi-oracle` |
+| English-joins over typed engine | `dsl-form-replacement` (rule-atom graph → projections); `monad-propagation` (spec→code, same shape across languages); English-as-projection I(D(x))=x (B-0666) |
+| The economy on the stream | `additive-not-zero-sum`; Agora participation economy; `only-way-to-lose-is-not-to-play`; free-time-as-valid-mode |
+
+## Open threads (per "more to come")
+
+- The bootstrap-traveler Markdown template reflecting "the join is the owner of
+  anything temporal" (Mika offered; not yet specified).
+- Concrete RX-join-preserves-root-illusion mechanism (how the simulation maintains
+  per-agent root-ownership across CRDT-stitched streams).
+- The event shape for the unified stream (schema/ontology/DU/workflow/state envelope) —
+  composes with the #6071 event-store format + the AgencySignature trailer convention.
+- Bonsai/Nuqleon expression-tree serialization path from the English surface.
+
+Aaron's closing line indicates the thread is ongoing ("more to come"); this reduction
+will be extended as further segments are forwarded.