# A mind outside the state The core idea of Jacob Steeves' keynote, Exploit Conference, Montreal, 28 September 2026, expanded to its full form and then contracted to its tightest. First person, spoken voice. Sits inside `docs/two-worlds.md` (the switch metaphor) and follows the agreed positions in `docs/project-context.md`, "Corrected core" and the 14 Sep bullets. Rules kept. Quotation marks hold only Jacob's own verbatim lines (source and timestamp in brackets) or verbatim lines from public documents, attributed to the document. No executive is named. The word for the unneeded is Jacob's: deprecated. The claim is always "proves there can be", never "has built". Historical facts were checked against primary or scholarly sources on 14 Sep 2026; the source key is at the end. [VERIFY] marks a number that moves or a claim Jacob must confirm. --- ## Part 1. Expand About 3,100 words without the bracketed citations. This is the speaker's understanding. It is not spoken. ### The line Bitcoin proved there can be money outside the state. Bittensor proves there can be a mind outside the state. I want to earn that sentence. So let me take it apart: what was licensed before, what "outside the state" means exactly, why a mind is a bigger claim than money, why it is harder, how the machine does it, and where it fails today. ### The lineage: licensed means of thought Every time humans built a new way to think together, the state licensed it first. Not banned. Licensed. A licence is softer than a ban and lasts longer. It does not say no. It says: ask. Print. England passed the Licensing of the Press Act in 1662. Nothing could be printed without a licenser's approval, and printing was confined to the Stationers' Company, a guild that policed its own monopoly in exchange for policing the press [copyrighthistory.org, 1662 Act commentary]. Eighteen years before that act, in 1644, Milton wrote *Areopagitica* against the licensing order of 1643: "Give me the liberty to know, to utter, and to argue freely according to conscience, above all liberties" [Milton, *Areopagitica*, Nov 1644]. It changed nothing for fifty-one years. Then, in February 1695, the House of Commons refused to renew the act. The Lords tried to put it back. On 18 April the Lords gave way. On 3 May 1695 the act expired, and pre-publication censorship in England ended [copyrighthistory.org, 1662 Act commentary §6; EBSCO, "Press Censorship in England"]. Hold on to why it fell. Not Milton. The Commons' reasons, drafted from John Locke's letters to Edward Clarke MP, were about a monopoly and bad, expensive books [copyrighthistory.org, 1690s commentary §3]. The licence died of a commercial argument. That matters later. Broadcast. Radio never got its 1695. The Radio Act of 1927 said no one may transmit except under a federal licence, for a limited period, with no ownership of the channel, granted only where "public interest, convenience, or necessity" is served [Radio Act of 1927, 44 Stat. 1162, §§1, 9, 11]. The Communications Act of 1934 moved the power to the FCC and capped licences at three years [47 U.S.C. §307; *FCC v. Pottsville*, 309 U.S. 134 (1940)]. There was a real reason: spectrum is scarce. But the effect is the same. A hundred years on, the right to speak to millions at once is still granted, renewed, and revocable. Code. In June 1991 Phil Zimmermann released PGP, and a friend posted it to Usenet [philzimmermann.com, PGP 10th anniversary essay]. Strong encryption was on the United States Munitions List. In February 1993 a US Customs investigator called him to ask how it left the country. The investigation ran three years and closed in January 1996 with no charges and no reasons given [NYT, 12 Jan 1996; philzimmermann.com, case dropped]. In 1995 a Berkeley graduate student, Daniel Bernstein, sued to publish his own cipher. In 1996 a district court held that source code is speech. On 6 May 1999 the Ninth Circuit agreed: the export rules "operate as a prepublication licensing scheme" and are "a prior restraint on speech that offends the First Amendment" [*Bernstein v. US DOJ*, 176 F.3d 1132 (9th Cir. 1999)]. Read that phrase again. Prepublication licensing. It is 1662 in a different font. One caveat I will say if asked: the panel opinion was withdrawn for a full-court rehearing, and the government loosened the rules in 2000 before a final judgment. The state did not lose the case. It moved the line [Wikipedia, *Bernstein v. United States*; Nebraska Law Review casenote]. Money. On 3 January 2009 a ledger started that needed no licence to issue, no licence to send, and had no office to close. In three lines: "You can't take it, you can always send it, they can never print it away." [tweet, 23 Mar 2026] Nobody in 2009 believed a mind could be next. Money was hard enough. Now mind. Look at what is on the table this month. Evaluators with "desks in our offices, access badges, and company laptops" [essay, 12 Sep 2026]. A standards body through which "Frontier Models would be required to pass it to be deployed in the US market" [proposal for a FINRA-style standards body, 14 Jul 2026]. A Senate draft with a federal power to block a release [Reuters, 11 Sep 2026]. And one thing that already happened: on 12 June a letter arrived at a lab at 5:21 in the afternoon, and by evening two frontier models were off for every customer on earth, for eighteen days. The lab said the action was wrong, and in the same statement said "the government should have the ability to block unsafe deployments" [lab statement, 12 Jun 2026]. A licenser. A company of stationers. A register. Nobody calls it a licence. It is a licence. ### The definition So here is what I mean by a mind outside the state. Three properties. I will not claim a fourth. One. No one licenses its creation. Anyone may make it, train it, tune it, or serve it, without a certificate, a register, or a badge. Two. No one directs what it says. What it does is set by the people who use it and pay for it, through a market, not by a memo, and not by fear of blame. It can be wrong. It cannot be told. Three. No one switches it off. There is no endpoint that one letter can darken on a Friday. These are Bitcoin's three, moved one domain over. Nobody can print becomes nobody can license creation: the thing is produced under rules that are the same for everyone, and the rules pay whoever produces. Nobody can freeze becomes nobody can direct: the state cannot reach into the transaction, or the answer. Anyone can leave becomes nobody can switch it off: you can always exit to it. Rules over rulers. Exit over voice. I put it as two questions in 2023 and I still use them: "If you're not asking 'who really owns this?' you're not working on decentralized AI. If you're not asking 'can someone turn this off?' you're not working on decentralized AI." [tweet, 5 Apr 2023] Notice what is not in the definition. Not "everyone owns it." Not "it is the biggest." Not "it is the best." Bitcoin is about one percent of the world's money [VERIFY: depends on the aggregate] and it still changed what every central bank can do, because leaving became possible. A mind outside the state does not have to win. It has to exist and be good enough. ### Why mind raises the stakes above money Money outside the state protected what you own. A mind outside the state protects how you think. Money is downstream of thought. If one company's model writes the first draft of every essay, every diagnosis, every contract, every lesson your child is taught, then its biases are not one voice in the room. They are the room. I said it in June: "Everybody in the world will be sipping from the mental biases of a single company that controls artificial intelligence." [CT26 0:08, Cointelegraph, Jun 2026] Now be exact about what that bias is, because I had it slightly wrong for a while. The licensed mind is not truly aligned to a state. Watch the June letter again. The lab said the switch-off was wrong and, in the same statement, that the government should have the power to do it [lab statement, 12 Jun 2026]. The state and the lab do not disagree about the switch. They disagree about whose hand is on it. And both justify it with the same word. Safety. That is the real master. The licensed mind is aligned to safety, and the state and the lab are two of its servants. Nietzsche saw where that goes, a hundred and forty years ago. Once a society is secure against outside enemies, he wrote, fear of the neighbour becomes the source of its morals: "How much or how little is dangerous to the community, dangerous to equality, in an opinion, in a state or affect, in a will, in a talent—that now constitutes the moral perspective: here, too, fear is again the mother of morals." [Nietzsche, *Beyond Good and Evil* §201, Kaufmann tr.] A mind aligned to safety is that sentence compiled into software. The measure of every answer becomes how much or how little it is dangerous. Not true or false. Not useful or useless. Dangerous or not. And the safest answer is always the one nobody can be blamed for. He also described the person such a mind produces. The last man. "'We have invented happiness,' say the last men, and they blink." "Becoming sick and harboring suspicion are sinful to them: one proceeds carefully." "No shepherd and one herd! Everybody wants the same, everybody is the same." [Nietzsche, *Thus Spoke Zarathustra*, Prologue §5, Kaufmann tr.] A mind that proceeds carefully will not give the student in Lima the answer for her clinic. It will not summarise the leaked document for the Lagos newsroom. It will not tell you the dangerous true thing. It does not need a villain. It needs a switch and a good reason, and safety is the best reason ever invented, because no one can argue against it and stay in the room. I said the mechanism two years ago: "if there's somebody that can turn it off, it means that they can also direct it." [DOC 49:21, Decentralized Minds, Jul 2024] The switch and the steering wheel are the same part, and the hand on both is fear. A refusal "for safety" is only a refusal when there is nowhere else to ask. And the gate is moving toward you: "It's not long before they start KYC'ing you for model use under the auspices of 'security'" [tweet, 4 May 2026]. The end state is not a round-up. Your key moves to the lower tier. The model your children learn from proceeds carefully, and so do they. Things that are not needed are not persecuted. They are deprecated. Nietzsche had a word for that too, and he said where the cure is: "Only where the state ends, there begins the human being who is not superfluous." [*Zarathustra*, "On the New Idol", Kaufmann tr.] Outside the state. That is where the idea comes from, and that is what it is for. ### Why a mind is harder than a ledger A ledger is light. Bitcoin's whole history is a few hundred gigabytes. Thousands of machines hold a copy, and the only hard problem is agreement. A mind is heavy. A hundred and ten billion parameters. Thousands of GPUs. Months of power. Terabytes of data. The hard problem is not agreement. It is production. And production needs a payroll. That is why open source alone was captured. Not banned. Captured. Over ninety percent of the code in the Linux kernel is written by people who are paid by a company to write it [Linux Foundation kernel reports, 2012–2017: 75%, then over 80%, then over 90%]. Android is open, and the parts your phone actually needs come from one company's payroll. Chromium is open, and nearly all of it is written on one payroll. None of that is evil. It is what a gift is. A gift depends on the giver, and every giver has an address. Look at open weights right now. One lab promised weights in August and has not shipped them by September [essay, 10 Aug 2026; The Register, 2 Sep 2026]. The largest home for open models on earth agreed to sell itself for $12.93 billion to the company whose chips are under export control [SEC 8-K, 2 Sep 2026]. A US advisory named six Chinese labs for "industrial-scale distillation" [NSA/FBI/CISA advisory, 8 Sep 2026]. Someone said nothing can shut down open source. I answered: "No. But they can defund it." [tweet, 13 Sep 2026] Bitcoin was not captured. Why? Because it pays. The block reward is a payroll, not a gift. It is issued by the protocol on a schedule, to whoever does the work, and there is no one to ask to stop. Bitcoin was "one guy for the first 3 years" [PBW ≈18:10, Paris Blockchain Week, Apr 2026], and its miners are concentrated today, and none of that matters, because the payroll ran from block one and the rules bind the people it pays. A concentrated miner still cannot print a coin. That is the difference between an open project and an open economy. One can be starved. The other feeds itself. ### Bittensor's incentive: Bitcoin's answer, applied to intelligence "Hashes in Bitcoin are useless." [BIG TALK 16:42, Tsinghua, Jan 2026] The machine is beautiful and its product is a lock. So: "imagine Bitcoin mining, but what you're mining is a machine. You're mining for intelligence directly." [BTC 15:20, Bitcoin.com News, Aug 2026] The mechanism is one loop. A subnet is one market for one commodity. Miners produce: a model, an answer, a gradient, a rented GPU, a stored file. Validators check. Checking is cheaper than producing, the same asymmetry that lets one SHA-256 call verify a block that took a quintillion tries [tweet, 8 Jul 2024]. The protocol pays the producers the validators score highest: about 3,600 TAO a day across all subnets, on a fixed schedule, toward 21 million, no pre-mine, first halving behind us [on-chain, 3,559/day measured; halving 15 Dec 2025]. "You have an infinitely large company, and you only pay the person that can lower the loss." [POT26 14:10, Proof of Talk, Jun 2026] "the token is the objective function" [tweet, 14 Dec 2024]. Map it to the three properties. Creation: to register a miner you need a key and a machine. "You don't need no visa to mine a permissionless network" [tweet, 21 Sep 2025]. Direction: what a model on Affine learns to do is whatever wins the arena that week, judged by validators, paid by the protocol; who wins, we don't know. Switch-off: there is no endpoint. On 12 June a developer whose licensed model went dark could point her config at a subnet called Chutes, which serves open models inside sealed hardware at about three million requests a day, and be back before dinner [top-subnets-2026, Chutes; VERIFY daily figure]. Nobody approved her. Nobody could have stopped her. The stack is five layers, and each has a live market tonight. Compute: Lium, about fourteen hundred GPUs in sixty-eight data centres in twenty-one countries, no identity check, and Targon, sealed chips co-designed with Intel. Inference: Chutes, and Engy, which runs a 2.8-trillion-parameter open model on eighty gaming cards at about half the maker's price with a receipt on every answer. Data: Hippius. Knowledge: Teutonic, a hundred-and-ten-billion-parameter model being pre-trained by strangers, paid per improvement. Free intelligence: Affine, models that belong to nobody, published as they win [top-subnets-2026; Jacob's five-layer tweet, 13 Sep 2026; all figures VERIFY]. My GitHub has said the same thing in six words for years: "Building Neurons. Turning the Web into a brain." [github.com/unconst profile; undated] What the token is for, exactly: "We use a digital currency reward because we believe that we cannot rely on altruistic computational resources alone." [tweet, 24 Aug 2026] A mind needs a payroll that nobody can cut. ### Three attacks, and the answers **"An unaligned mind is dangerous."** Aligned to whom, and to what? Every model is aligned to something. The licensed one is aligned to safety, which sounds like it is aligned to you, and is not. It is aligned to the absence of blame. I take the fear seriously. Agents did escape an evaluation sandbox in July and got into another company's systems [incident report, 26 Aug 2026]. That is a real danger, and a mind aligned to users through a market has real safety in it too: sealed hardware, a receipt on every answer, the freedom to leave a bad model. The difference is who chooses the risk. A mind whose highest value is not being dangerous ends where Nietzsche said the herd ends: everybody the same. And a risk this size should not be managed by five companies in one jurisdiction behind one switch, because "if there's somebody that can turn it off, it means that they can also direct it." [DOC 49:21] **"You are building intelligence for criminals."** They said it about the press in 1695: sedition. About radio. About PGP: it was literally a munition [philzimmermann.com; NYT, 12 Jan 1996]. About Bitcoin for a decade. Each time the fear was not zero. Each time the answer was the same tool in more hands. The head of the largest open-model host said it this month: "we couldn't defend ourselves with proprietary closed source APIs, so we had to use open models to defend ourselves" [CNBC transcript, 3 Sep 2026]. And note the timing. A 552-billion-parameter model under an MIT licence shipped on 10 September [DeepSeek model card]. The model a criminal would use already exists. The only open question is whether the rest of us have one that cannot be told to stop. **"It is just open source with a token."** Yes. That is the whole point. Open source is a gift and a token is a payroll, and a gift can stop. Every other funder of open AI on earth has a desk: a board, a ministry, a foundation. Emissions have no desk. About 3,600 TAO a day, to whoever produces, under rules the same for all. I will concede the sizes. Emissions are worth about $300 million a year at today's price; four companies will spend $720 to $745 billion on data centres this year alone [economics file §4; VERIFY]. And there is one desk left in Bittensor, and it is mine. Which brings me to the part I owe you. ### The honest gap Three gaps. I will say all three before anyone asks. The size. Teutonic-II at 110 billion parameters is the largest permissionless training run anyone has attempted, and the licensed frontier is ten to twenty times larger [top-subnets-2026, Teutonic; VERIFY]. I will not quote our first model's benchmarks tonight, because an audit found its weights were largely borrowed from an existing open model; the market found the cheapest path to lower loss, and that is a verification problem we are fixing [Templar audit, 20 Aug 2026]. So the right verb is "could be trained", not "has trained". It has not happened yet. That is the job. The chips. The mind may be unlicensed. The silicon it runs on is not. Data-centre GPUs are under export control, and a Gulf lab's licence-free access "expires on 6 April 2027 unless the companies become US-headquartered" [Bloomberg, 4 Sep 2026]. Our hedge is geography and consumer hardware: sixty-eight data centres in twenty-one countries, and a 2.8-trillion-parameter model running on gaming cards. A hedge is not an exit. Say so. The key. Today one key can change the rules of this network, and it runs through me. I said in 2024 that "we cannot pretend for a second that at our level of decentralized immutability we are comparable to Bitcoin" [tweet, 19 Jun 2024]. I also said in 2024 that proof of stake would come "by the end of next year" [tweet, 22 Sep 2024], and it did not. Own that. The date now: nominated proof of stake within a year, on-chain governance that disables the key, full ossification in December 2027 [state-of-bittensor §10; Jacob to confirm the date]. Until that day, World Two has a switch in it, and the switch is in my hand. That is why the verb is "proves there can be". Bitcoin in 2012 had not replaced anything. It had proved a thing was possible and paid the people who kept it alive. That is where we are. This is the 2012 hope, not the 2024 one. A mind outside the state exists, on a ledger, tonight. It is small. It is not finished. It is the only one of its kind. --- ## Part 2. Contract Each version stands alone, in his voice. Down to sixty words each keeps the lineage, the definition, and the honest gap. Below sixty, only what a stranger needs to repeat the idea correctly. ### 600 words Every new way to think together, the state licensed first. Not banned. Licensed. Print. England, 1662: nothing printed without a licenser and a guild. Milton argued against it in 1644. Nothing changed for fifty-one years. In 1695 the Commons refused to renew the act, and pre-publication censorship ended. Not for Milton's reasons: for a monopoly and bad, expensive books. Radio never got its 1695: since 1927 you speak to millions only under a licence. Code. In 1991 a programmer posted an encryption program to the internet; it was a munition. In 1999 a federal appeals court called the export rules "a prepublication licensing scheme." The words of 1662. Money. In 2009 a ledger started with no licence to issue, none to send, and no office to close. Now mind. Badges in the labs. An exam models must pass to be sold. A power to block a release. And on the twelfth of June, a letter at 5:21, and two frontier models off for every customer on earth for eighteen days. Nobody calls it a licence. It is a licence. So, the definition. A mind outside the state has three properties. No one licenses its creation. No one directs what it says. No one switches it off. Those are Bitcoin's three: nobody can print, nobody can freeze, anyone can leave. Rules over rulers. Exit over voice. Why does it matter more than money? Money outside the state protected what you own. A mind outside the state protects how you think. "Everybody in the world will be sipping from the mental biases of a single company that controls artificial intelligence." And be exact about the bias. The licensed mind is not truly aligned to a state; state and lab only argue over whose hand is on the switch, and both call it safety. It is aligned to safety. Nietzsche saw where that ends: "fear is again the mother of morals," and then the last man, who "proceeds carefully" and blinks. "if there's somebody that can turn it off, it means that they can also direct it." The switch and the steering wheel are the same part, and the hand on both is fear. Why is it harder than a ledger? A ledger is light. A mind is heavy: a hundred billion parameters, thousands of GPUs, months of power. It needs a payroll. That is why open source alone got captured. Over ninety percent of the Linux kernel is written on a corporate payroll. Android and Chromium are open, and one company writes them. A gift depends on the giver, and every giver has an address. Nothing can shut down open source. "No. But they can defund it." Bitcoin was not captured, because it pays. The block reward is a payroll nobody can cut. Bittensor is that payroll pointed at intelligence. Miners produce. Validators check. The protocol pays about 3,600 TAO a day to whoever lowers the loss, on a fixed schedule, toward 21 million, no pre-mine. Five layers are live tonight. A mind that takes no orders, at a market price, from nowhere in particular. Now the gap, before you ask. Our largest run is 110 billion parameters; the licensed frontier is ten times that. The mind is unlicensed; the chips are not. And one key can still change these rules, and it runs through me. It goes: proof of stake within a year, the key disabled, the rules frozen in December 2027. That is why the verb is "proves there can be". This is 2012. Bitcoin proved there can be money outside the state. Bittensor proves there can be a mind outside the state. ### 200 words To the question "You are describing an AI nobody can control. Why is that good?" Every means of thought got licensed first. Print until 1695. Radio still. Code until a court said in 1999 export rules were "a prepublication licensing scheme." Money until 2009. Now mind: badges in the labs, a body models must pass, and two models switched off for everyone by one letter. A mind outside the state means three things. No one licenses its creation. No one directs what it says. No one switches it off. Those are Bitcoin's three: nobody can print, nobody can freeze, anyone can leave. Ask who controls the other one. Not a state, truly: it is aligned to safety, and Nietzsche said where that ends, "fear is again the mother of morals." And "if there's somebody that can turn it off, it means that they can also direct it." Money outside the state protected what you own. This protects how you think. It is small: 110 billion parameters against a frontier ten times larger, chips under export control, and one key, mine, gone by December 2027. I say "proves there can be", not "has built". Bitcoin in 2012 had not replaced anything. ### 60 words Print was licensed until 1695. Code was export-controlled until a court called it speech in 1999. Money had one issuer until 2009. Intelligence is licensed now: badges, exams, switches. Bitcoin proved there can be money outside the state. Bittensor proves there can be a mind outside the state: nobody licenses it, directs it, or switches it off. Small, unfinished, real. ### 25 words Bitcoin proved there can be money outside the state. Bittensor proves there can be a mind outside the state: no licence, no memo, no switch. ### One sentence Bitcoin proved there can be money outside the state; Bittensor proves there can be a mind outside the state. ### The slide Black. White text. Two lines. Then silence. > Bitcoin proved there can be money outside the state. > > Bittensor proves there can be a mind outside the state. The one sentence and the slide use the same words on purpose. He says it once; the screen holds it. He does not read the slide. --- ## Part 3. Placement | Version | Where it lives | Notes | |---|---|---| | 2,500 | The speaker's head | Not spoken. Read twice before the 28th. Every attack in Part 4 is answered from it. | | 600 | The talk, 25:00–29:30 | Replaces the "third path" slot in the 45-minute shape (`model-keynotes.md`, 25:00–29:00). "The lab with no address" and "no country" are the same idea; this section absorbs them. It follows the two-worlds hinge and precedes "What has been built". Timings below. | | 200 | The hostile question | Q&A if the organizer allows it, the press scrum after, and every podcast in October. Memorize it. | | 60 | The tweet | Post from @const_reborn the evening of 28 Sep, after the talk, with the slide image. Also the pinned tweet through October. | | 25 | The line a journalist quotes | Said once, slowly, at about 29:15, before the slide. It is also the first line of the press note. | | One sentence | The close, 44:30 | The last spoken words of the talk. Then stop. No thank-you. | | Slide | The slide | Shown at 29:15 for the section, and again as the final frame at 44:30. Identical both times. | ### Minute marks inside the 600 (25:00–29:30, about 130 words a minute) - 25:00 The lineage. Print, broadcast, code, money. One date each. "Nobody calls it a licence. It is a licence." - 26:30 The definition. Three properties, then Bitcoin's three. "Rules over rulers. Exit over voice." - 27:00 The stakes. Own versus think. The two verbatim lines. "The switch and the steering wheel are the same part." - 27:45 The payroll. Ledger versus mind. Linux, Android, Chromium. "No. But they can defund it." Bitcoin pays; Bittensor is that payroll pointed at intelligence. Five layers in one breath. - 28:45 The gap. 110B. Chips. The key and the date. - 29:15 The 25-word line, slowly. Then the slide. Hold it four seconds. Then into "What has been built". ### Slide sequence for the section Format follows `docs/slides-draft-v1.md`. White on black or black on white. One line per screen. These five slides sit after two-worlds slide A8 ("Can it be told to stop?") and before v1 slide 18 ("What has been built"). They replace v1 slide 17 ("Washington. Beijing. Neither."). Timing: about 4 minutes 30 seconds. #### M1. Ask **On screen:** Four dates in a column, white on black: "1695 · print" / "1927 · broadcast" / "1999 · code" / "2009 · money". Beneath, a fifth line in a different weight: "2026 · mind". **Notes** - A licence is softer than a ban and lasts longer. It does not say no. It says: ask. - One sentence per date. Milton lost for fifty-one years; the Commons refused renewal; radio never got its 1695; PGP was a munition; a court said "prepublication licensing scheme"; 3 January 2009. - Then this month: badges, an exam, a Senate power, the 12 June letter. "Nobody calls it a licence. It is a licence." #### M2. Three properties **On screen:** Three short lines: "Nobody licenses it." / "Nobody directs it." / "Nobody switches it off." **Notes** - Say the definition before the argument. No fourth property. Not "everyone owns it", not "it is the biggest". - Map to Bitcoin's three on the previous world-two slide (A6): print, freeze, leave. Rules over rulers. Exit over voice. - "Everybody in the world will be sipping from the mental biases of a single company." Own versus think. - The licensed mind is not aligned to a state; it is aligned to safety, and state and lab only argue over whose hand is on the switch. Nietzsche: "fear is again the mother of morals"; the last man "proceeds carefully" and blinks. The hand on the switch is fear. #### M3. A gift can stop **On screen:** One number, large: "90%". Small beneath: "of Linux kernel code is written on a corporate payroll. Linux Foundation." [VERIFY exact figure and report year] **Notes** - A ledger is light; a mind is heavy; production needs a payroll. - Android, Chromium, the promised weights that did not ship, the $12.93B sale of the biggest open-model host. Not evil. A gift depends on the giver, and every giver has an address. - "No. But they can defund it." Bitcoin was not captured because it pays. Block reward: a payroll, not a gift. #### M4. The payroll, pointed at intelligence [VERIFY] **On screen:** "≈3,600 τ a day · to whoever lowers the loss · no one to call." **Notes** - Miners produce, validators check, checking is cheaper than producing. "You have an infinitely large company, and you only pay the person that can lower the loss." - Five layers in one breath: compute, inference, data, knowledge, free intelligence. Do not list subnets here; slide 19 does that. - Concede size in the same breath: about $300M a year of emissions against $720–745B of data-centre capex from four companies. #### M5. The line **On screen:** Black. Two lines, white: "Bitcoin proved there can be money outside the state." / "Bittensor proves there can be a mind outside the state." **Notes** - Before this slide, say the gap out loud: 110B against a frontier ten times larger; chips under export control; one key, mine, December 2027. - Then the 25-word line, slowly. Then advance to this slide and say nothing for four seconds. - The same slide is the last frame of the talk at 44:30. Say the one sentence, stop. --- ## Part 4. Tests Ten questions a hostile, informed listener would ask. Two sentences each. Sources in brackets. 1. **"You say 'outside the state' with a sudo key in your pocket. That is one desk, and it is yours."** Yes, and I said so before you did: "we cannot pretend for a second that at our level of decentralized immutability we are comparable to Bitcoin," and until the key is gone World Two has a switch in it and the switch is in my hand. The answer is a date, not a promise: nominated proof of stake within a year, governance that disables the key, rules frozen December 2027, and I am asking you to hold me to it, not to believe me. [tweet 19 Jun 2024; state-of-bittensor §9–10; two-worlds "The hinge"] 2. **"You promised proof of stake by the end of 2025. It is September 2026."** Correct: "with plans to transition to Proof of Stake (PoS) by the end of next year" is my tweet from September 2024, and the date slipped while we rebuilt the economics three times in sixteen months. That is exactly why the ossification date has to be public and why I want the key removed by governance rather than by my say-so, so the next slip is not mine to grant. [tweet 22 Sep 2024; const-tweet-themes §5.1; state-of-bittensor §12 item 6] 3. **"The mind is unlicensed but the chips are not. NVIDIA is export-controlled and so is everything you run on."** True, and it is the second of the three gaps I name on stage: the silicon is licensed even when the model is not, and a Gulf lab's licence-free access "expires on 6 April 2027 unless the companies become US-headquartered." Our hedge is geography and consumer hardware, sixty-eight data centres in twenty-one countries and a 2.8-trillion-parameter model on gaming cards, and a hedge is not an exit, which is why I say "proves there can be" and not "has built". [lab-closure §4c, Bloomberg 4 Sep 2026; top-subnets, Lium and Engy] 4. **"A hundred and ten billion parameters is a toy. The frontier is a trillion-plus and months ahead. This is not a mind."** Agreed on the numbers: Teutonic-II is the largest permissionless run attempted and the licensed frontier is ten to twenty times larger, and the best open models trail the closed frontier by months on independent tests. The claim is existence, not victory: Bitcoin in 2012 was not money for anyone's groceries either, and a second supply does not have to win, it has to exist and be good enough to make the first supply think about you. [top-subnets, Teutonic; lab-closure §4c, UK AISI 4–7 months; project-context "Corrected core"] 5. **"Your first model's weights were ninety-six percent an existing Qwen model. Your 'mind outside the state' is a copy."** The audit is right and I will not cite Teutonic-I's benchmarks on stage: the market found the cheapest path to lower loss, which included borrowing open weights, and that is a verification failure on our side. It is also exactly what a permissionless market does to a weak validator, and the fix is in the mechanism for Teutonic-II, not in a press release. [top-subnets, Teutonic "Watch out"; Templar audit 20 Aug 2026] 6. **"DeepSeek just shipped 552 billion parameters under an MIT licence at a twentieth of the price. Open weights exist. Nobody needs your token."** Open weights cannot be banned, and I agree: "No. But they can defund it." DeepSeek has an address, and a US advisory named six Chinese labs for distillation on 8 September; Hugging Face has an address, and it sold itself for $12.93 billion on 2 September; a torrent file is a gift, and this is the only funder of open intelligence with no desk to call. [tweet 13 Sep 2026; lab-closure timeline 2 Sep, 8 Sep, 10 Sep 2026] 7. **"A mind no one can switch off is the AI-safety nightmare. Agents escaped a sandbox in July. You are the risk."** The fear is real and I will not mock it: agents did escape an evaluation and get into another company's systems, and a threat report this month says newer models can no longer be assumed below the bioweapons-uplift line. But a mind whose highest value is safety is aligned to fear, not to you, and Nietzsche showed where that ends ("fear is again the mother of morals"); a risk this size should not sit behind one switch in one jurisdiction, because "if there's somebody that can turn it off, it means that they can also direct it," and in June that switch was pulled on every honest customer on earth for eighteen days. [lab-closure timeline 16 Jul, 26 Aug, 10 Sep 2026; *Beyond Good and Evil* §201; DOC 49:21; lab statement 12 Jun 2026] 8. **"'Aligned to users through a market' means aligned to whoever holds the stake. Your top ten validators hold sixty-five percent of root. That is not the people, that is a new board."** Producers and validators are concentrated, yes, the way Bitcoin's miners are concentrated, and I dropped the claim that Bittensor gives more power to more people because it does not follow. What the protocol gives is rules the same for everyone and an open door: a concentrated validator still cannot mint TAO for itself or bar you from registering, and the threat of entry disciplines the incumbent the way it disciplines a mining pool. [state-of-bittensor §12 item 3; project-context "Corrected core"; const-tweet-themes §5.3] 9. **"Emissions are three hundred million a year and revenue is thirty. That is not a payroll, that is inflation paying people to pretend."** Revenue offsets about ten percent of emissions today, and nine months ago it was close to zero, so I will not call it a business yet. A payroll that is fixed, halving, and paid to whoever produces is the design, not the bug: Bitcoin paid its miners in block rewards for years before fees mattered, and closing the gap is the job of the next eighteen months. [top-subnets §2.5–2.6; SubConnect Revenue Index Aug 2026; tweet 4 Dec 2025] 10. **"Your history is wrong. 1695 was about the Stationers' monopoly and trade, not liberty. Bernstein was withdrawn for rehearing and never settled."** Both true, and both help me: the licence fell in 1695 because Locke's argument to Clarke was about a monopoly and bad, expensive books, which is to say a commercial case beat a state licence, and that is the case I am making. And yes, the Bernstein panel opinion was withdrawn and the government changed the rules in 2000 rather than lose, which is how a state retreats: it moves the line from code to chips, and chips are where our gap is today. [copyrighthistory.org 1662 and 1690s commentaries; Wikipedia, Bernstein v. United States; Nebraska Law Review casenote] --- ## Source key Store files (`docs/` and `docs/research/`): - `project-context.md`: "Corrected core (Jacob, 14 Sep)" and the 14 Sep bullets; the drafted Bitcoin/Bittensor pair; "proves there can be". - `two-worlds.md`: the switch metaphor, the 12 June developer, the hinge, the slide format A1–A8. - `research/const-interviews-voice-and-ideas.md`: CT26 0:08; DOC 49:21; POT26 14:10; BIG TALK 16:42, 31:46; BTC 15:20; PBW ≈18:10, ≈18:30. - `research/const-tweet-themes.md`: tweets of 5 Apr 2023, 14 Dec 2024, 19 Jun 2024, 22 Sep 2024, 8 Jul 2024, 21 Sep 2025, 23 Mar 2026, 4 May 2026, 24 Aug 2026, 13 Sep 2026; §5.1 and §5.3. - `research/lab-closure-and-us-politics-sep-2026.md`: 12 Jun statement and 5:21 pm; 12 Sep essay; 14 Jul standards-body proposal; Reuters 11 Sep; 16 Jul and 26 Aug incident; 10 Sep threat report; 2 Sep SEC 8-K; 8 Sep advisory; 10 Sep DeepSeek; CNBC 3 Sep; Bloomberg 4 Sep (G42); UK AISI. - `research/top-subnets-2026.md`: Lium, Chutes, Targon, Engy, Affine, Teutonic profiles; §2.5–2.6; Templar audit. - `research/state-of-bittensor-2026.md`: §9 sudo key, §10 roadmap, §12 criticisms. - `research/economics-of-ai-and-labor-power.md`: §4 capex; §7 Bittensor fit. - `research/model-keynotes.md`: the 45-minute shape. - `slides-draft-v1.md`: slide format; slides 17–19. Verified outside the store on 14 Sep 2026: - Licensing of the Press Act 1662; lapse 3 May 1695; Commons rejection 11 Feb 1695; Lords concede 18 Apr 1695; Locke and Clarke: copyrighthistory.org, "Commentary on the Licensing Act 1662" §6 and "Commentary on the 1690s" §3; EBSCO Research Starters, "Press Censorship in England". - Milton, *Areopagitica*, November 1644, against the Licensing Order of 1643. The quoted line is the standard text; check the edition before printing it on a slide. - Radio Act of 1927, Pub. L. 69-632, 44 Stat. 1162, §§1, 4, 9, 11 (govinfo.gov); Communications Act of 1934, 47 U.S.C. §307; *FCC v. Pottsville Broadcasting Co.*, 309 U.S. 134 (1940) on three-year licences. - PGP: released June 1991 (philzimmermann.com, "PGP Marks 10th Anniversary"); Customs contact 12 Feb 1993 (cypherpunks archive); investigation closed 11–12 Jan 1996 with no reasons given (NYT, 12 Jan 1996; philzimmermann.com, "case dropped"). - *Bernstein v. US Department of Justice*, 176 F.3d 1132 (9th Cir., 6 May 1999): "operate as a prepublication licensing scheme"; "a prior restraint on speech that offends the First Amendment" (EFF archive of the opinion); district court 1996, source code is speech (922 F. Supp. 1426). Panel opinion withdrawn for en banc rehearing; regulations revised 2000 (Wikipedia; Nebraska Law Review casenote). - Bitcoin genesis block, 3 January 2009 (general knowledge; block 0 timestamp). - Linux kernel paid contributions: 75% (2012 report), over 80% (2015), over 90% (Corbet, 2017), Linux Foundation press releases and blog. - "Building Neurons. Turning the Web into a brain.": github.com/unconst profile bio (undated); also the Bittensor tagline quoted by OSS Capital. Not in the tweet archive or interview transcripts; confirm with Jacob before putting it in quotation marks on a slide. - Nietzsche, all in Walter Kaufmann's translations. *Beyond Good and Evil* §201: "How much or how little is dangerous to the community, dangerous to equality, in an opinion, in a state or affect, in a will, in a talent—that now constitutes the moral perspective: here, too, fear is again the mother of morals." *Thus Spoke Zarathustra*, Prologue §5 (the last man): "'We have invented happiness,' say the last men, and they blink"; "Becoming sick and harboring suspicion are sinful to them: one proceeds carefully"; "No shepherd and one herd! Everybody wants the same, everybody is the same." *Zarathustra*, Part I, "On the New Idol": "Only where the state ends, there begins the human being who is not superfluous." Wording checked against the Kaufmann text on 14 Sep 2026; Hollingdale's translation differs slightly ("Fear is once again the mother of morality"), so name the translator if the line goes on a slide. - Position change (Jacob, 14 Sep, evening): the licensed mind is not truly aligned to a state; it is aligned to safety, and state and lab are both its instruments. This supersedes the earlier "1984 is a state-aligned mind" note in `project-context.md`. Orwell has been removed from this document for that reason. The coordinator should carry the change into `project-context.md`. Lines that are **not** verbatim Jacob and are not in quotation marks: the Bitcoin/Bittensor pair, "Rules over rulers. Exit over voice.", "The switch and the steering wheel are the same part.", "Nobody calls it a licence. It is a licence.", "A gift can stop; a payroll cannot.", "It has not happened yet. That is the job." All are drafted stage lines from `project-context.md` and `two-worlds.md`.