# Slides, draft v2: A mind outside the state Exploit Conference, Montreal, 28 September 2026. 45 minutes. Speaker: Jacob Steeves (Const). ## Header **Thesis in one sentence.** Bitcoin proved there can be money outside the state; Bittensor proves there can be a mind outside the state: nobody can license it, nobody can direct it, nobody can switch it off, and the one key that still can has a public date to go. **The one metaphor, carried through: the switch.** Set at slide 7 (a letter at 5:21 pm and two models go dark), pressed at slide 8 (the exam is the wall), named at slide 9 (every step is called safety and every step is a switch), answered at slide 10 (three rules; a supply with no switch), turned on the speaker at slide 19 (the key is a switch and it is in my hand), and closed at slide 21 (one supply of intelligence in the world with no switch on it). No second image for the danger. Elysium is said once, in notes, on slide 6, and never shown. **Shape.** 21 slides for 45 minutes. Three parts, announced on slide 3: the wall (slides 4–9, about 15 minutes), the door (slides 10–18, about 22 minutes), the key (slides 19–21, about 8 minutes). Slides 6, 7, 15, 19 and 21 are black. Slide 15 and slide 21 are the same slide, shown twice on purpose. No Q&A inside the 45. **Rules kept.** Quotation marks hold only Jacob's own verbatim lines (source in brackets) or verbatim lines from public documents, attributed to the document. No executive is named as a villain; the essay, the letter, the proposal and the lab are named as documents and institutions. The word for the unneeded is "deprecated". The claim is "proves there can be", never "has built". Say "Washington", not a party. Thiel is named once, on slide 16, with the separation line. Nietzsche is quoted once, on slide 13, translator named. [VERIFY] marks any number from a secondary or moving source; re-check every one on 27 September against `docs/research/`. **Format.** Same as v1. One `##` per slide. **On screen** is one line for the designer: black and white, one line or one image, no bullet lists on screen. **Notes** are beats in Jacob's voice, not a script. Each slide carries a minute mark. **Cut list: v1 slides dropped, and why.** | v1 slide | Fate in v2 | Why | |---|---|---| | 1 Title "The machine that pays you back" | Retitled (slide 1) | The corrected core is the door, not the dividend. | | 2 "You have felt it" | Cut; the feeling opens slide 2 in notes | The opener is now the Musk/Const exchange, which does the same work with a date on it. | | 3 Amodei "cancer is cured" quote | Cut | Names an executive on screen. The wall is now shown with numbers and the June letter. | | 4 Labor share chart | Kept (slide 5) | The one chart in the deck. | | 5 GM 853,000 / Anthropic ~5,000 | Replaced by "35 → 4" (slide 4) | Jacob's own company is a confession, not a comparison; GM and the lab move to notes. | | 6 "Where it pools" (capex, VC, equity) | Cut; capex survives as the "four hours" anchor in slide 14 notes | Three big numbers on one screen with no anchor. | | 7 Thelwall quote | Cut to notes (slide 5) | Why work was power is one beat, not a slide. | | 8 "What does organizing look like…" | Cut | Answered by slide 6 in one word. | | 9 Elysium figure | Cut to one sentence in notes (slide 6) | One metaphor rule: the switch. Rights risk. | | 10 Altman 2.5% / Amodei 3% | Cut to notes (slide 9), unnamed | Names executives; "the offer" works without names. | | 11 Economists' table ("the state" ×5) | Cut | Replaced by the payroll argument (slide 14), which is the mechanism the table lacked. | | 12 Bitcoin ≈1,000 EH/s, Poland | Cut | Bitcoin now enters as a moral case (three rules) and an existence proof, not as hashrate. No FLOPs claim anywhere. | | 13 SHA-256 hash | Cut | Decoration. | | 14 Nature / memristors | Cut | First cut in `model-keynotes.md`; no origin story. | | 15 "Bitcoin's mining machine, pointed at intelligence" | Cut to notes (slide 14) | "You have an infinitely large company…" says it better. | | 16 21,000,000 τ · 0 pre-mined | Cut to notes (slides 17, 20) | The fixed rule is one beat inside the existence proof. | | 17 "Washington. Beijing. Neither." | Replaced by slides 12 and 16 | A third country is a third switch; the new claim is no country, not neither country. | | 18 ≈128 subnets | Cut; count in notes (slide 20) | Do not read the agenda. | | 19 Real customers (three names) | Replaced by the five layers with subnet numbers (slide 17) | Jacob's own structure from the 13 Sep tweet. | | 20 Grayscale · Bitwise · Nasdaq · TSX-V | Cut; one line in notes (slide 20) | Wall Street is not the moral case. | | 21 "I hold a key" | Merged into slide 19 | The confession and the dates belong on one screen, next to the missed date. | | 22 The path, with dates | Merged into slide 19 | Same. | | 23 "They cannot make this promise" | Cut to notes (slide 19) | One line, not a slide. | | 24 Hold. Build. Come. | Replaced by the four-audience ask (slide 20) | Engineers are the fourth audience in Montreal. | | 25 "Do not fear the machine…" | Cut | The close is now the two-line slide; two closing sentences is one too many. | | 26 τ glyph, "Build it with me" | Replaced by slide 21 | The last frame is the thesis, then silence. | Net: 26 slides become 21. Two kept, two retitled or rebuilt, twenty-two cut or merged. Nine new slides come from `two-worlds.md` (A1–A8), `mind-outside-the-state.md` (M1–M5) and `technique-example-slides.md` (techniques 1, 2, 3, 8). --- ## 1. Title **On screen:** Black. White text. "A mind outside the state." Below, small: Jacob Steeves · Bittensor · Montreal, 28.09.2026. **Notes** - 0:00. Confirm the spelling "Steeves" and the exact conference name before export. - Do not read the title. Walk out, look at the room, and start with the exchange on the next slide. - Tone for the whole talk: calm, direct, no hype, no thank-yous. You know the material. - "I'm not here to sell you guys a digital currency. I'm not going to be talking about prices and bullishness." [BIG TALK 1:23] Say it if the room needs it. Otherwise skip straight in. ## 2. No. But they can defund it. **On screen:** Black. Two lines, set plain, no screenshot chrome. Top, grey lead "13 Sep 2026": "Nothing can shut down open source." Below, lead "reply": "No. But they can defund it." **Notes** - 0:30. Two weeks ago the most followed man on earth wrote the first line. I wrote the second. [tweet, 13 Sep 2026] That exchange is the whole talk. Everything else is the reasons. - Every AI talk right now carries a hidden option: maybe it stops. It will not. On 12 September the heads of three frontier labs agreed, in public, to slow down together and asked for an antitrust waiver to do it. Even the slowdown is a deal among a few companies. Nobody proposed stopping. Nobody can. - Naval, the same day, not one of us: "The only real decision is whether to centralize power, or disperse it. Do you fear the technology? Or a small number of people controlling the technology?" [tweet, 12 Sep 2026] - So I am not going to argue tonight about whether AI should exist. That decision has been made. The decision left is who owns it, and who can turn it off. - The feeling everyone here had this year, when a model did something that used to be someone's job: thrilled and afraid at once. Both correct. I am not here to calm you down. I am here to aim the fear. - Open source cannot be banned. It can be starved. Everyone who funds open AI has a desk you can call. Hold that. I come back to it at minute 27. ## 3. The wall. The door. The key. **On screen:** White. Three short lines, black: "The wall." "The door." "The key." **Notes** - 2:30. Three things tonight. That is it. - The wall: what is happening to work, and what the fear really is. About fifteen minutes. - The door: two worlds, ten years out, and the thing I have spent five years building so that the second one exists. About twenty minutes. - The key: the part I owe you, with a date on it. Then I ask you for something. - Say what I will not do: I will not list a hundred and twenty-eight subnets. I will not tell you why we are better than a lab. If you came for that, read a dashboard. - Come back to this slide twice in words, not on screen: at about minute 18, "that was the wall"; at about minute 37, "now the key". ## 4. 35 → 4 [VERIFY] **On screen:** White. Very large: "35 → 4". Small beneath: "Opentensor engineers, 2022 → 2026. Faster now." **Notes** - 3:30. Say it as a confession, not a boast. Opentensor had thirty-five engineers. Today it has four. We ship faster than we did in 2022. I did that. Nobody made me. It was cheaper and it was better. [Jacob, 14 Sep; confirm exact headcounts] - Now run that across every sector, and add robots for the parts that still need a body. Every company becomes small. One person, a lot of agents, no staff. "we're moving at the speed of compute now. Like, intelligence has unlocked what company can be." [POT26 26:50] - The anchor. GM in 1979: 853,000 people, the largest private employer in America. One lab today: worth about a trillion dollars with a few thousand people. [VERIFY, economics file §3] A frontier company used to share what it made through a payroll. This one has no payroll to share through. It does not need one. - Say "a few thousand"; the headcount is not published. Do not name the lab as a villain. The company is not the problem. The pattern is. - "You have an infinitely large company, and you only pay the person that can lower the loss." [POT26 14:10] I built the same machine. I will come back to what is different about mine. ## 5. Why work was power [VERIFY] **On screen:** White. One black line chart, no gridlines: US labor share of income, 1947 to 2026. Two labels only: "65.8% · 1947" and "52.9% · 2026". **Notes** - 6:00. The labor share is the slice of everything the economy makes that is paid to people for working. The rest goes to whoever owns the machines. Lowest reading since anyone started counting in 1947. And that is before the thing on the last slide finishes. [VERIFY, BLS preliminary] - For three hundred years, wages were how a big machine shared what it made. They were also how ordinary people had weight. You were needed, so you were heard. Thelwall in the 1790s: "Every large workshop and manufactory is a sort of political society, which no act of parliament can silence." The factory gathered people. Gathered people organised. Organised people made the vote count. - Second lever: wages are the tax base. A state that does not need your labor or your taxes has less reason to listen. - Engels' pause: 1780 to 1840, output per worker up forty-six percent, wages up twelve. Sixty years. It ended because the workers organised, and they could organise because the factory needed them. This factory does not need them. So this time it does not end on its own. - "you can be a tyrant that loses 90% of your workforce potentially, and it doesn't even affect your economy." [BTC 46:30] - Do not say "the average human has no power." Say: the lever is going. What replaces it is not decided. ## 6. Deprecated **On screen:** Black. One word, white: "Deprecated." **Notes** - 8:00. The real fear is not that the machine takes over. Machines want nothing. "the bigger issue for AIs is not the AI fire the nukes and they take over the world. It's more that like a small group of people come to own it and use it for themselves." [TDS 46:40] - Say the fear as a pattern, not a person: too much intelligence in too few hands. Nobody has to be evil for it. The people inside the labs are sincere. The fear they have is real. Watch what the fear builds, not what it says. - The quiet part. Nobody comes for you. There is no round-up. Your API key moves to the lower tier. The model your children learn from has values settled in a room you were never in. "Everybody in the world will be sipping from the mental biases of a single company that controls artificial intelligence." [CT26 0:08] - Define the word the way a programmer does. Things that are not needed are not persecuted. They are deprecated. Still exists. Nobody calls it. One day it is removed from the documentation. - Elysium, once, and never again tonight: a station in orbit where the machines are owned, a surface below where they are rented. Nobody on the surface is oppressed by a robot. They are oppressed by the people who hold the switch to the robots. - It is not a conspiracy. It is a default. It is what happens if the only supply of intelligence has a switch. Now let me show you the switch. Two worlds, same dates, 2026 to 2035, three cities: Montreal, Lagos, Lima. ## 7. 5:21 pm **On screen:** Black. White text, three short lines: "12 June 2026" · "5:21 pm" · "18 days". **Notes** - 11:00. World One. Start with something that already happened. On the twelfth of June a letter arrived at a lab at 5:21 in the afternoon, from the export-control office of one government. By that evening two frontier models were switched off for every customer on earth. Not for the people who did something wrong. For everyone. [lab statement, 12 Jun 2026] - Picture a developer here in Montreal who built her product on that model. She lost it on a Friday and got it back eighteen days later. She had not broken a rule. She was downstream of a switch. - The lab said the action was wrong. In the same statement it said the government should have the power to do it, just with a better process. Hold that. Nobody in this story wants the switch removed. They want to be the one holding it. - Three months later, this month, the same lab's essay: evaluators with "desks in our offices, access badges, and company laptops"; coordination on "limits on the rate of unchecked AI progress" with a government waiver so it is not called a cartel. Two other lab heads agreed within three hours. Not to open up. To slow down, together, and to ask permission to do it as a group. [essay, 12 Sep 2026] - Be fair. The agents that escaped a sandbox in July were real. The fear is sincere. Watch what it builds. ## 8. The exam is the wall **On screen:** White. Quote, large: "Frontier Models would be required to pass it to be deployed in the US market." Small: "proposal for a FINRA-style standards body, July 2026." **Notes** - 13:30. 2027. The standards body. Proposed in July, modelled on the body that licenses stockbrokers. Step one is voluntary: share the model thirty days before release. Step two is in the same paragraph, and it is on the screen. [proposal, 14 Jul 2026] - One room. Every model that matters goes through it. The people who sit in that room are the people whose models already passed. A startup in Lagos that fine-tuned an open model for Yoruba customer service gets a notice from its cloud provider: show a certificate or we cannot serve you. There is no certificate for a two-person company. - Same rules for open and closed. That sounds like fairness. Fixed costs are not fair. A rule that costs fifty million dollars a year is a rounding error for one firm and a death sentence for another. You do not have to ban anything. You only have to make the exam expensive. - 2028. Learning becomes theft. The word is distillation. In September three US security agencies named six labs for it. A student in Lima who trains a small Spanish model on a big model's answers, for a clinic, offline, is not doing research in this world. She gets a letter too. [advisory, 8 Sep 2026] - Same year: a registry of every large training cluster, and a duty for anyone running a large model to keep a switch a department can pull. A bill for that switch already exists; eighty-six percent of voters like it. [VERIFY, advocacy poll] I understand why. - "if there's somebody that can turn it off, it means that they can also direct it." [DOC 49:21] The switch and the steering wheel are the same part. ## 9. Where it flows first [VERIFY] **On screen:** White. Five words in a column, largest to smallest: "Lab." "Financiers." "Government." "Funds." "You." **Notes** - 15:30. 2029 to 2030. Data-center moratoria pass where people vote on their electricity bills; capacity moves to where the waivers are; the waivers go to the labs that passed the exam. By 2030 there are four suppliers of frontier intelligence in the West and one government that can reach all of them. A hospital in Montreal pays a licensed API for the model that reads its scans. One year the bill goes up thirty percent. Who else can they call? Nobody. The test is the wall. - Now watch where the money goes. Economists call it the Cantillon effect: whoever is nearest the new money gets it first, at yesterday's prices; whoever is furthest gets it last, at tomorrow's. Intelligence works the same way. The lab. Its financiers; the last two funding rounds of two labs were larger than the whole venture market of most years. [VERIFY] The government that licenses it. The pension funds. Then you, at the end of the pipe, as a subscription price. - 2031 to 2033. The offer. The people at the top of this pipe are not monsters. They propose to share: one proposed that every large company pay two and a half percent of its equity into a fund every year; another proposed a three percent tax on AI revenue. Sincere. Notice the route. One treasury, one country, a rate set in one room by the people whose equity it is. In Lagos there is no such fund. "they're giving you basically peanuts for a UBI with an orb." [CT25 ≈7:30] - An allowance is not a share. An allowance can be reduced. A share cannot be reduced by the people who owe it. - Objection to have ready: "That is what democracy is for." Votes have force when the voter is needed. Sixty-eight percent of American voters support a pause; if it were a vote, World One would win tonight, and it would be called safety. [VERIFY, Data for Progress] Democracy is jurisdictional and this is not. Ownership is what makes votes count, not a replacement for them. - Nobody in this world has to be evil. Every step is called safety. Every step is a switch. Every switch has a hand on it. The hands are all in one building. Land it: in World One, you have one choice. That was the wall. ## 10. Three rules **On screen:** White. Three short lines, black: "Nobody can print it." "Nobody can freeze it." "Anyone can leave." **Notes** - 18:00. World Two. Now you have two. Same years, same three cities. I am not selling you a utopia. Producers are concentrated, the way Bitcoin miners are. Prices are set by markets, and markets are not kind. Most people in Lima never mine anything, the way most people never mined a bitcoin. - What is different is three rules. Nobody can print intelligence for themselves. Nobody can freeze it. Anyone can leave. Rules over rulers. That is Bitcoin's whole moral case, and it was never about making everyone rich. Bitcoin has a handful of mining pools and no one can print a coin. - Same twelfth of June. Same developer in Montreal, same model dark on a Friday. This time she has a second supplier in her config file: a subnet that serves open models inside sealed hardware, about three million requests a day, which published a year of its traffic with Harvard so you can check it. She switches the endpoint. Her product is back before dinner. Nobody approved her. Nobody could have stopped her. [VERIFY, Chutes daily figure] - Lagos: the two-person startup no bank will serve rents GPUs by the second, fourteen hundred of them in sixty-eight data centers in twenty-one countries, no identity check; sixty-three percent of last month's renters were not people, they were agents. [VERIFY, Lium, team-disclosed] San Francisco: a team serves the largest open model on earth, 2.8 trillion parameters, on eighty gaming cards at about half the maker's price, with a receipt on every answer. [VERIFY, Engy] - None of this is 2035. It is running tonight. It is small. It is the seed. - "Bitcoin did not make everyone rich. It made the rules the same for everyone. Bittensor does not make everyone powerful. It makes intelligence something no one can be locked out of." ## 11. The second price on the screen **On screen:** White. Two lines, black: "It does not have to win." "It has to exist, and be good enough." **Notes** - 20:30. 2027 to 2028. The standards body exists in this world too. The licensed labs pass their exam. Their models are excellent. Most of the world uses them most of the time. What is different: there is a second price on the screen. When the hospital's bill goes up thirty percent, the procurement officer opens a second tab, and the licensed supplier knows she will. - The student in Lima does not need to distil anyone's model. There is a market where anyone can post-train an open model, fight the current champion on coding and math and tool use, and if she wins the network pays her about fifty thousand dollars a week for the slot and publishes the weights. Who wins? We don't know. That is the point. [VERIFY, Affine] A newsroom in Lagos asks a licensed model to summarise a leaked document and it declines, for safety. The reporter pastes it into a model served from nowhere in particular. Refusal now has a competitor. - The interaction. Bitcoin is about one percent of the world's money. [VERIFY, depends on aggregate] It has not replaced the dollar. Yet every central bank now has to answer a question it never had to answer: what happens if people leave? The second supply of intelligence does the same to the first. It caps the price, because a subscription can only rise as far as the open alternative allows. It caps the censorship, because a refusal is only a refusal when there is nowhere else to ask. It caps the capture. The labs can still slow down. Good. What they cannot do here is slow down everyone. - What a person gets. Three verbs, by how many will do each. Use: intelligence your work depends on that cannot be switched off on a Friday; most people will only ever do this, the way most Bitcoin holders never ran a node. Earn: point a GPU, an agent, a model or data at a subnet and be paid in ownership; no résumé, visa, interview or permission. Own: hold TAO, a fixed slice of every unit of intelligence this machine will ever produce, and point it by staking. - Not a dividend. I used to say it loosely and I was wrong. An option: intelligence that takes no orders and needs no permission, at a market price, forever. The machine that is replacing your job cannot be switched off on you, and you can own a piece of it. ## 12. Ask **On screen:** Black. Four dates in a column, white: "1695 · print" / "1927 · broadcast" / "1999 · code" / "2009 · money". Beneath, a fifth line in a heavier weight: "2026 · mind". **Notes** - 23:00. Every time humans built a new way to think together, the state licensed it first. Not banned. Licensed. A licence is softer than a ban and lasts longer. It does not say no. It says: ask. - Print. England, 1662: nothing printed without a licenser and a guild. Milton argued against it in 1644 and lost for fifty-one years. In 1695 the Commons refused to renew the act, and pre-publication censorship ended. Not for Milton's reasons: for a monopoly and bad, expensive books. A commercial argument beat a state licence. Remember that. - Broadcast never got its 1695. Since 1927 you speak to millions only under a licence, renewed and revocable. - Code. 1991, a programmer posted an encryption program to the internet; it was legally a munition. 1999, a federal appeals court called the export rules "a prepublication licensing scheme". The words of 1662 in a different font. [Bernstein, 9th Cir. 1999] - Money. 3 January 2009. A ledger with no licence to issue, none to send, no office to close. - Now mind. Badges in the labs. An exam models must pass to be sold. A Senate draft with a power to block a release. And on the twelfth of June, a letter at 5:21. Nobody calls it a licence. It is a licence. ## 13. Aligned to whom **On screen:** White. Quote, large: "Here, too, fear is again the mother of morals." Small: Nietzsche, Beyond Good and Evil §201, tr. Walter Kaufmann. **Notes** - 25:00. So the definition. A mind outside the state has three properties, and I will not claim a fourth. Nobody licenses its creation. Nobody directs what it says. Nobody switches it off. Those are Bitcoin's three from slide 10, moved one domain over: print, freeze, leave. - Not in the definition: "everyone owns it", "it is the biggest", "it is the best". It has to exist and be good enough. - Why mind matters more than money. Money outside the state protected what you own. A mind outside the state protects how you think. Money is downstream of thought. - Be exact about the bias, because I had it slightly wrong for a while. The licensed mind is not truly aligned to a state. Look at the June letter again: the lab said the switch-off was wrong and that the government should have the power. State and lab do not disagree about the switch. They disagree about whose hand is on it. Both call it safety. That is the real master. The licensed mind is aligned to safety, meaning the absence of blame. - Nietzsche, a hundred and forty years ago: once a society is safe from outside enemies, fear of the neighbour becomes the source of its morals. A mind aligned to safety is that sentence compiled. The measure of every answer becomes not true or false, not useful or useless, but dangerous or not. The safest answer is always the one nobody can be blamed for. He described the person it produces too: the last man, who "proceeds carefully" and blinks. [Zarathustra, Prologue §5, Kaufmann] - "if there's somebody that can turn it off, it means that they can also direct it." [DOC 49:21] The hand on the switch is fear. A market mind has real safety in it: sealed hardware, receipts, the freedom to leave a bad model. The difference is who chooses the risk. - Nietzsche once more, and it is where "outside the state" and "deprecated" meet: "Only where the state ends, there begins the human being who is not superfluous." [Zarathustra, "On the New Idol", Kaufmann] ## 14. A gift can stop [VERIFY] **On screen:** White. One number, very large: "90%". Small beneath: "of Linux kernel code is written on a corporate payroll. Linux Foundation." **Notes** - 27:00. Why a mind is harder than a ledger. A ledger is light: Bitcoin's whole history is a few hundred gigabytes. A mind is heavy: a hundred billion parameters, thousands of GPUs, months of power. The hard problem is not agreement. It is production, and production needs a payroll. - That is why open source alone got captured. Not banned. Captured. Over ninety percent of the kernel is written by people a company pays to write it. Android and Chromium are open, and one payroll writes them. [VERIFY exact figure and report year] None of that is evil. It is what a gift is. A gift depends on the giver, and every giver has an address. - This month: one lab promised weights in August and had not shipped them by September; the largest home for open models on earth agreed to sell itself for about thirteen billion dollars to the company whose chips are under export control. [VERIFY, SEC 8-K, 2 Sep 2026] Nothing can shut down open source. "No. But they can defund it." - Bitcoin was not captured because it pays. The block reward is a payroll, not a gift, issued by the protocol on a schedule to whoever does the work, and there is no one to ask to stop. That is the difference between an open project and an open economy. One can be starved. The other feeds itself. - Bittensor is that payroll pointed at intelligence. Miners produce. Validators check; checking is cheaper than producing. The protocol pays about 3,600 TAO a day to whoever lowers the loss, on a fixed schedule, toward twenty-one million, no pre-mine, first halving behind us. [VERIFY, on-chain 3,559/day] "the token is the objective function" [tweet, 14 Dec 2024]. "We use a digital currency reward because we believe that we cannot rely on altruistic computational resources alone." [tweet, 24 Aug 2026] - Concede the size in the same breath, with one anchor: emissions are worth about three hundred million dollars a year at today's price; the four largest cloud companies spend that on data centers in about four hours. [VERIFY, $720–745B capex guidance] Now you know the gap and I do not have to hide it. - "Everyone else funds open AI until someone tells them to stop. We built the one that nobody can tell." ## 15. The line **On screen:** Black. Two lines, white, nothing else: "Bitcoin proved there can be money outside the state." / "Bittensor proves there can be a mind outside the state." **Notes** - 29:00. Before advancing, say the three gaps in one breath. Size: our largest run is a hundred and ten billion parameters; the licensed frontier is ten to twenty times larger. Chips: the mind may be unlicensed, the silicon is not. The key: one key can still change these rules, and it is mine. That gets its own slide at minute 37. - Then the verb. "Proves there can be." Not "has built." Bitcoin in 2012 had not replaced anything. It had proved a thing was possible and paid the people who kept it alive. This is the 2012 hope, not the 2024 one. - Say the sentence once, slowly. Advance to this slide. Say nothing for four seconds. Do not read it. - The same slide is the last frame of the talk. Identical, on purpose. ## 16. Why a protocol, not a company [VERIFY] **On screen:** White. Three rows, grey lead then black text: "2007 · e-gold. Indicted." / "2013 · Liberty Reserve. Seized." / "2009 → · Bitcoin. Still running." **Notes** - 29:30. Say the cost first. A company ships a better model sooner. It can plan, keep secrets, run one coherent job. The Opentensor Foundation is a company, and the key makes this network more company-like than it should be. The foundation is scaffolding. - Now the reason. A company is a creature of the state: an address, a board, a bank account, weights that can be subpoenaed, a payroll that stops when the account is frozen. Every company that tried to be money outside the state was shut down: e-gold indicted in 2007, Liberty Reserve seized in 2013. Bitcoin survived because there was no one to arrest. [VERIFY both dates] Satoshi built a protocol instead. We are doing the same thing for the mind. - Five things a protocol gives that a company cannot. No address. A payroll without investors, the only known way to fund a large workforce without a legal entity. A labor market with no HR: "you hired the best engineers in the world and you don't even know their name." [POT26 11:55] It cannot be bought or defunded; there is no equity, and emissions are not a budget line. It outlives the founder. - The lab with no address. A third country is a third switch: Toronto, Abu Dhabi, wherever. Bittensor is not a third country. It is no country. "Every frontier lab on earth has an address. We are the one that doesn't." For this room: "We are the frontier for the other one hundred and ninety countries." "we are truly extra-national, right? We're not tied to one nation-state." [PBW ≈11:00] - Thiel, named once, a man who backs the other side of most of the politics in this room, said this month that a one-world state would be "far worse than North Korea, because you can still get out of North Korea." [clip, 14 Sep 2026] He is right about the door. His answer is a stronger nation. Ours is no nation. A state is one ruler with force, an address and no exit. A protocol is one rulebook with no force, no address, and exit by design. - Objection to have ready: "Can't I just buy shares in a lab?" You cannot; they are private, and the public gets in at the IPO as exit liquidity. A share is permissioned and jurisdictional. Shareholders do not control the machine; nobody consulted one on 12 June. You cannot earn a share by contributing. "You can buy a share of the company that sells you the intelligence. You cannot buy a share of the intelligence." A share is a ticket to the profits. TAO is a seat at the machine. ## 17. What has been built [VERIFY] **On screen:** White. Five layers, one line each, layer in black and subnets in grey: "Compute · Lium SN51, Targon SN4" / "Inference · Chutes SN64, Engy SN53" / "Data · Hippius SN75" / "Knowledge · Teutonic SN3" / "Free intelligence · Affine SN120". **Notes** - 32:00. The five layers in my own order, one live market each, all running tonight: "we will need compute / we will need inference / we will need data / we will need knowledge / If we are going to have free intelligence". [tweet, 13 Sep 2026] - Compute. Lium: about fourteen hundred GPUs, sixty-eight data centers, twenty-one countries, rented by the second, no identity check; nearly a million dollars billed last month and a million dollars of its token bought back and burned with the proceeds, on-chain, extrinsic 9032919-0005. Targon: sealed chips, whitepaper co-written with Intel, so neither the machine's owner nor the operator can see your job. [VERIFY, team-disclosed] - Inference. Chutes: about three million requests and thirty billion tokens a day, every model inside attested hardware, a year of traffic published with Harvard and Chicago. Engy: a 2.8-trillion-parameter open model on eighty gaming cards at about half the maker's price, a signed ledger of what it paid its miners every week. [VERIFY] - Data. Hippius: storage that speaks the same language as the big cloud and charges nothing to take your data out. Knowledge. Teutonic-II: a hundred-and-ten-billion-parameter model being pre-trained right now by strangers, paid per improvement, the largest permissionless run anyone has attempted. Say "could be trained", not "has trained"; the licensed frontier is ten to twenty times larger. It has not happened yet. That is the job. Do not quote Teutonic-I benchmarks; the audit is right. [VERIFY] - Free intelligence. Affine: post-train an open model, beat the king, hold a slot, weights published as they win. Who wins? We don't know. - This is Bitcoin's three gifts, mirrored. An existence proof: a mind outside the state is on a ledger tonight. A fixed rule: twenty-one million TAO on a schedule to producers, no pre-mine. A story with a face: find one real person by the 28th. "Fiat AI is intelligence by decree. This is intelligence by consent." - Honest scale. Nine months ago I said no subnet had serious revenue. I was right. Today three or four do, about fifteen to twenty million dollars a year you can check on-chain, and fourteen teams buy back their token with it. That is about a tenth of what the protocol pays out. Closing that gap is the job of the next eighteen months. [VERIFY, SubConnect vs on-chain] ## 18. Nobody can be sent the letter **On screen:** White. Three rows, grey lead then black text: "Production · decentralized." / "Funding · decentralized." / "Control · one key. It has a date." **Notes** - 35:00. I have used the word "decentralized" as little as I could tonight, because it is the means, not the goal. The door is the goal. Here is the only definition I will give: decentralized means nobody can be sent the letter. How many people have to say yes before you can be switched off? For us, that number is going to zero. - Three layers, graded honestly. Production: decentralized and permissionless, concentrated the way Bitcoin's hashrate is concentrated, and that is acceptable, because entry is open and the rules bind whoever wins. "Bitcoin has five mining pools and no one can print a coin." [VERIFY pool count] - Funding: decentralized by construction. Emissions come from the protocol, not a treasury, not a foundation, not a sponsor. This is the layer nobody else has. - Control: centralized. One key. It is the only layer that matters for the moral claim tonight, and it has a date. - Say it in one sentence: decentralized where the work happens and where the money comes from; centralized where the rules live; the third has a deadline. - If someone quotes my April tweet ("most decentralized AI protocol") against my June one ("not decentralized like Bitcoin"): both are true. April was about production. June was about control. Do not say "fully decentralized". Ever. ## 19. My own slide from 2024 [VERIFY] **On screen:** Black. White text, Jacob's tweet of 22 Sep 2024, set plain: "The chain operates on a Proof of Authority (PoA) mechanism, with plans to transition to Proof of Stake (PoS) by the end of next year." Beneath, smaller: "Missed. New date: December 2027." **Notes** - 37:00. Now the key. Read the tweet out loud. My words, September 2024. "End of next year" meant the end of 2025. It did not happen. I am not going to pretend it did, and I am not going to wait for the first question to bring it up. [tweet, 22 Sep 2024] - Plainest words in the talk. Blocks are produced by foundation nodes: proof of authority. A privileged key can upgrade or pause the chain. It is a multisig, and it runs through me. "The key is a multi sig but it does have root privs which is dangerous -- ill admit that." [tweet, 22 Sep 2024] In July 2024 we used it to halt the chain about thirty-five minutes into a wallet drain. That saved people money. The same key could be used badly. Some of you were in Templar in April and lost money. Decide before the talk whether to say sorry here. Draft says yes. - Why it slipped: we rebuilt the economics first, three emission models in sixteen months. I chose to fix what pays before I fixed who governs. Right call then. Wrong call now. - I said in 2024 that "we cannot pretend for a second that at our level of decentralized immutability we are comparable to Bitcoin." [tweet, 19 Jun 2024] Still true. We do not intend to stay behind. Nominated proof of stake, where holders choose who makes blocks, within about a year. On-chain governance, proposed May 2026, three phases, the last one a vote to switch the key off. Full ossification, December 2027: after that nobody, including me, can change the rules. [VERIFY current targets; Jacob to confirm the date before it is spoken] - This is the pivot of the whole talk, not a footnote. As long as the key exists, World Two has a switch in it, and the switch is in my hand. I do not get to describe a world with no switch while holding one. "There is one key. It is mine. On the day it is gone, this stops being a promise and becomes a property." - The turn: a centralized lab cannot make this promise. Its key is the product. Ours is a bug we are removing. "The goal of power is to give it away. The art of power is its decentralization." [tweet, 18 Nov 2023] Screenshot this slide. Hold me to it. Do not believe me. ## 20. If you hold. If you build. If you are new. If you are an engineer. [VERIFY] **On screen:** White. Four lines, black: "If you hold." "If you build." "If you are new." "If you are an engineer." **Notes** - 40:00. Ask my own side for discipline before I ask anything of anyone else. Do not chase emissions. Do not dump on the newcomers in this room. "nothing free, nothing given, everything fought for." [tweet, 26 Mar 2026] - If you hold: you own a fixed slice of every unit of intelligence this machine will ever produce, and no one was handed any of it before block one. About six hundred thousand TAO were mined in the open and later sold to funds at about eighteen dollars; nobody was allocated tokens before launch. Say it exactly that way. [VERIFY figures] Stake where the allocation is good. Watch what your validator curates. Hold through the year it takes to remove the key; that is the day the asset becomes what it was designed to be. Wall Street has filed for the ETF and three public companies hold TAO as treasury; say "under review", and do not make it the reason. [VERIFY] - If you build: about a hundred and twenty-eight markets, and there is room for yours. Build for a customer, not for emissions; the fourteen teams buying back their token with customer money are the ones that will still be here in two years. "Don't submit a resume. Submit a model." [tweet, 29 Jan 2024] [VERIFY count] - If you are new: "You don't need no visa to mine a permissionless network." [tweet, 21 Sep 2025] Most of you will only ever use it. That is fine. Most Bitcoin holders never ran a node. The point is that the door is there. "Own Bittensor. Don't come work for Bittensor. Come own Bittensor. Come and be Bittensor." [CT25 ≈22:00] - If you are an engineer, and this is Montreal so many of you are: one team serves a 2.8-trillion-parameter model on eighty gaming cards at half the maker's price. Come make it faster. Distributed has to be at least as good as centralized; that is a spec, not a wish. [VERIFY, Engy] - Three verbs, one each: use, earn, own. Then one more thing the room should feel, in this order: recognition, identity, responsibility. You are the outside. An exit that is not maintained closes. ## 21. Close **On screen:** Black. The same two lines as slide 15, white, nothing else: "Bitcoin proved there can be money outside the state." / "Bittensor proves there can be a mind outside the state." **Notes** - 43:30. Finish with the switch. In World One there is one switch, held by a small number of hands, and every hand on it believes it is doing the right thing, right up until the day it is not, and by then you are not needed and so you are not asked. In World Two the switch on the licensed supply is still there. Nobody took it away. But there is a second supply beside it, with no switch, and so the first switch is worth less, and the hand on it has to think about you, because you can leave. - That is the whole job. One supply of intelligence in the world with no switch on it. - Then the one sentence, slowly: Bitcoin proved there can be money outside the state. Bittensor proves there can be a mind outside the state. - Stop. No thank-you. No next slide. Leave this on the screen. --- ## Two objections, two answers Have both ready in the form they appear in `docs/project-context.md`. Each is also seeded in the notes of the slide where it is most likely to surface. 1. **"That is what democracy is for. One person, one vote, and it is more visceral than a token."** (slide 9) Votes have force only when the voter is needed; suffrage followed need historically. Democracy is jurisdictional and AI is not. Regulatory capture is democracy's failure mode, and it is happening now. Redistribution by vote is the allowance, not ownership. Ownership is the precondition that makes votes count, not a replacement for them. Concede: token ownership is one-dollar-one-vote, but entry is by work, not capital, and the door is open to anyone. 2. **"Can't we just buy shares in a lab? Same thing."** (slide 16) You cannot; they are private, and the public gets in at IPO as exit liquidity. Shares are permissioned and jurisdictional; TAO is not. Shareholders do not control the machine: the November 2023 board firing, the nonprofit board, the June 2026 switch-off with no shareholder consulted. You cannot earn a share by contributing; you can earn TAO by work. A share of the seller is not a share of the thing. Concede: a fine hedge for the accredited rich; Bittensor is for the eight billion without a term sheet. ## Production notes - Slides marked [VERIFY]: 4, 5, 9, 14, 16, 17, 19, 20. Re-check every number on 27 September against `docs/research/top-subnets-2026.md`, `economics-of-ai-and-labor-power.md`, `lab-closure-and-us-politics-sep-2026.md`, `state-of-bittensor-2026.md`. TAO price, subnet count, Chutes daily volume and the four-hour arithmetic move daily. - Slide 4: confirm the exact Opentensor headcounts (35 and 4) with Jacob. - Slide 16: confirm e-gold (indictment, 2007) and Liberty Reserve (seizure, 2013) dates before use. - Slide 19: Jacob must confirm the December 2027 date and the "within about a year" proof-of-stake target before either is spoken. Set the tweet as plain text in the deck typeface, not a screenshot. - Slides 15 and 21 are identical by design: black, two lines, white type, nothing else, no logo, no counter. - Every fictional person (the Montreal developer, the Lagos startup and newsroom, the Lima student, the hospital) is a composite. Introduce each with "picture" or "imagine". - Lines that are drafted stage lines, not verbatim Jacob, and are therefore not in quotation marks in the notes except where marked: the Bitcoin/Bittensor pair; "Rules over rulers. Exit over voice."; "The switch and the steering wheel are the same part."; "Nobody calls it a licence. It is a licence."; "A gift can stop; a payroll cannot."; "It has not happened yet. That is the job."; "Everyone else funds open AI until someone tells them to stop. We built the one that nobody can tell."; "His answer is a stronger nation. Ours is no nation."; "There is one key. It is mine…"; "Every frontier lab on earth has an address…". - Total on-screen word count is under 200. Keep it there.