Devil's Noose · Aethelos School

Aethelos Command

no deed

Guide

A fortress any body can occupy.

Pilot for sovereign use. Keys stay on the device. Models learn. You confirm. Play wraps this same origin — it does not rewrite it.

  1. 01

    Mint a deed

    Create a did:aethelos on this device. There is no account vendor. The key is the identity.

  2. 02

    Arm the body

    Record a five-beat presence rhythm and hold the last beat. Device wrap is destroyed. A script cannot spoof jitter.

  3. 03

    Put one object

    Encrypt a note or dataset. Cleartext never leaves the session. Sharing is a wrapped package, not an email.

  4. 04

    Ratify the market

    Read charter 1.1. Silence is prohibition. Sell a license, not a person.

  5. 05

    Know the dead hand

    Capture, tamper, ultrasonic covert channel, or a refused sweep while sentinel is live is failure. Failure detonates. A shadow hit is warn: lock and reclaim. Recovery is Super Agent confirmation after the body unseals.

  6. 06

    Sweep what is yours

    Declare an identifier. Public indexes, paste mirrors, broker directories, and leak-adjacent residual are searched. Hidden services are refused. PII locks into the vault. Extras are destroyed. Auto-reclaim queues a signed notice for Super Agent confirm.

  7. 07

    Install

    Tap Install in Chrome, or download a package for this machine — Windows .exe, iPhone profile, Android opener, Mac and Linux launchers. Play wrap stays folded if you need a store listing.

Install

This command is already an app. Tap Install. Play wrap stays folded if you need a store listing.

This device (installable app)

  1. Tap Install. That is the whole act when Chrome or Edge can prompt.
  2. If a preview is in the way, tap Install anyway — it opens the real browser. Or download a package on the same page.
  3. Windows: Aethelos-Command.exe. iPhone: the profile, then Settings → Profile Downloaded. Android: the HTML file, then Chrome menu → Install app. Mac and Linux launchers are there too.
  4. iOS Share → Add to Home Screen still works. Launch from the home screen. The deed and vault stay on the device.

Android / Google Play (TWA wrap)

  1. This origin is already a PWA. Play distribution is a Trusted Web Activity around the same URL — not a rewrite.
  2. Download the installer kit. Run bubblewrap.sh, or: bubblewrap init --manifest <this-origin>/__grok/manifest.webmanifest
  3. Package name, signing key, and Digital Asset Links (assetlinks.json) must match the Play app and this origin.
  4. Play Console: create the app, upload the AAB, complete content rating, Data safety (keys stay on-device; no account), and privacy policy.
  5. Do not ship a second WebView shell that intercepts keys. The TWA must open this origin directly.

Home hub (Privacy Guard)

  1. The Python hub, WireGuard stitch, and firewall scripts remain the body on an always-on node.
  2. Point this command at that life: Guard is the live kernel view; the hub enforces drops.
  3. Phone install bundles and TV APK scripts from the archive still apply to the hub, not to this PWA.

Google Play checklist

  • pwaPWA installable (this app)
  • httpsServed on HTTPS in production
  • twaTWA / Bubblewrap wrap of this origin
  • dalDigital Asset Links to the Play signing cert
  • safetyPlay Data safety: no account, local crypto, no sale of personal info
  • ratingContent rating questionnaire
  • policyPrivacy policy URL naming on-device keys and the market charter
  • iconHigh-res icon + feature graphic from the command palette

FAQ

Who is the Super Agent?

You. Models are instruments. Chamber briefs are not verdicts. Market listings, key rotation, bio disarm, vault drops, and dead-hand recovery wait for your confirmation. Type I AM THE SUPER AGENT with a complete X-Coordinate.

Where are my keys?

In this device, wrapped. The signing key is ECDSA P-256. The agreement key is ECDH P-256. The master is AES-256-GCM. If the bio lock is armed, only the presence rhythm plus last-beat hold can unwrap. Nothing is uploaded.

What is the dead hand?

When capture events, integrity failure, or a freeze threshold fire, the fortress executes without waiting. Open shares revoke. Mutations freeze. Device auto-unlock is refused. Ciphertext stays — inert to an attacker. You unseal with the body, then confirm as Super Agent. Optionally rekey so old wraps are garbage.

Can someone spoof my bio lock?

A perfectly even tap train is rejected as mechanical. A last-beat hold is mixed into the wrap. Replay without the hold cannot decrypt. Eight failures are capture. Three capture events trip the dead hand.

Is this an account?

No. There is no password vendor, no recovery email. Optional recovery phrase is a local wrap you set. Lose the body and the phrase and the ciphertext remains sealed. That is the point.

How do I install this on a phone?

Tap Install. Chrome and Edge put it on the home screen. If the prompt is blocked, download a package from Install: iPhone gets a home-screen profile, Android opens Chrome then Install app. Windows gets an .exe launcher. iOS Share → Add to Home Screen still works. Play Store wrap is folded under Install. The hub Termux bundle remains the body on an always-on node.

What can I sell?

A named license to a vault object. The market sees title, hash, price, and terms. Residuals you do not name are forbidden. Buying a peer listing decrypts a payload into your vault under your key.

What does Guard do versus Fortress?

Guard is the network kernel — peers, blocks, anomaly score. Fortress is the sovereign kernel — integrity, dead hand, pending Super Agent acts, anti-spoof. Looking is Aethelos. Acting on the wire is Guard. Acting on title is Fortress.

Can I use my own APIs and systems?

Sources seals tokens under your master. Add a sovereign HTTPS endpoint you built. The probe is GET/HEAD only, public hosts only. xAI is the thinking instrument and never holds title.

What if law changes?

Charter 1.2 is a draft slot. File legal weather on Market. You ratify. No vendor ratifies on your behalf. Compliance is a patch. Title does not convert.

Do you scrape the dark web and delete other sites?

No. Watch searches public indexes, paste mirrors, broker directories, and leak-adjacent residual of hidden services. .onion hosts are refused. Nothing is deleted on a foreign host. PII is locked in your vault. Extraneous hits are destroyed locally. Auto-reclaim drafts a signed legal challenge you confirm — GDPR, CCPA, cease-and-desist — so you have standing. That is the legal right. It is not a raid.

What is the logic bomb?

A local counterforce. On failure of an armed section it seals, revokes shares, overwrites share ciphertext with a coherence trap under a discarded key, and burns session keys. A stolen copy is inert ciphertext. No payload is sent to the thief's machine. We do not touch their bot. We make what they took useless.

What is the acoustic interceptor?

A microphone FFT on this device plus RF/network. Ultrasonic (18–22 kHz) covert channels used in some air-gap and Wi-Fi-adjacent attacks, or acoustic jamming, are failure. A link drop under acoustic load is a Wi-Fi attack signature. Mic refused: acoustic stays idle, RF still live. Idle without a grant is not failure. Losing a live arm is.

What if the dead hand fires and I never armed a bio lock?

The device wrap still unseals so you can reach Fortress. Mutations stay frozen until you type I AM THE SUPER AGENT with a complete X-Coordinate. If the bio lock is armed, only the presence rhythm plus last-beat hold can unseal. Optional recovery phrase is a second wrap you set yourself.

Reference

Mint an identity to occupy the fortress. Bio off.