Zero-backdoor covenant
One Network. Sentinel harnessed here. Nothing hidden.
Security here is operational: native lock, on-device wallets, local M-o-E, hub Shield, handshake for methods. Scale is tenancy — We The People as individuals, Company as seated orgs — on the same schema. What we cannot claim: a magically unauditable “no bugs forever.” What we refuse: a vendor key, a second secret binary, selling the handshake, or a hidden category ban (that would be a backdoor, and it would be visible in the source).
01
One harness: The Remote Viewer Network
The Sentinel Operating System and every Remote Viewer node are harnessed exclusively in this DApp. There is no Sentinel plugin for X, Google, Discord, or a corporate shell. Migration copy-paste comes in. The OS does not go out. We The People and Company are tenancies on the same source — not two secret builds.
02
Native lock is identity
Email plus password on this hub. Google and X are migration bridges only. Company SSO is never required. Paying does not replace the lock.
03
No vendor remote
There is no support backdoor, no silent admin session, no off-device telemetry phone-home. Means of Evidence ciphertext stays on the Viewer device.
04
Wallets stay personal
Each Viewer wallet is PIN-sealed on their device. A company owner cannot unlock a seat's seed. Phantom is optional. Stripe never holds the key.
05
Stripe is a rail
USD may enter through Stripe or a recorded FDIC-backed convert. That is settlement, not identity, not a processor tenant inside the node.
06
Handshake is not for sale
Gateway documents stay free. Methods unseal only after the robot handshake. A Company plan cannot skip it for a seat.
07
Tenancy is the scale model
People: one Viewer, one row, one wallet. Company: seats under an org_id, pooled mesh and R&D, still per-seat native locks. Deploy uses Postgres. This preview uses the same schema locally.
08
Unverified feed is ads, not surveillance
Skip handshake and the commons shows a 30-second native ad every 90 seconds of watch. That is not a tracker network. Referral trial is ad-free. Outside viewership may try Verified for two days, self-serve, no card. Methods stay sealed until handshake.
09
Open source, no secret bans
This OS is one codebase. A hidden filter against a people or a faith would be a backdoor and would ship in the source. Community tags are explicit: adult (blurred), cannabis garden, civic / 2A education. Brand voice is Sentinel — not a shadow ban list.
10
Outside viewership is a 2-day self-serve trial
Anyone arriving from the journal, a Viewer card, or search may start Verified for 48 hours without a ticket or a card. One trial per node. The robot handshake still gates methods. After two days the node returns to Initiate unless they subscribe from Billing. This is not a sales call.
11
Orders we actually map
We do not stamp “compliant with every EO since 2023.” We map speech (14149), AI truth (14179 + Dec 2025 framework), bulk PII (14117), foreign-adversary apps (PAFACA), fintech rails (May 2026), and criminal misuse of AI (June 2026). Child safety and NCII stay. The revoked 14110 is not re-imposed as compelled speech. The ledger is on /compliance.
12
Agents on the edge, TRV stays open
Sentinel is the Super agent of this Network. Cipher, Watcher, Privacy, Mesh, and Healer are domain supers — each sovereign in their field. Learning is bidirectional and encrypted on the Viewer device. A mosaic reaches the helm only when the Viewer briefs Watcher. Not a closed SKU, not a phone-home trainer, not a plugin for another platform.
13
The Network is a consenting honeypot
The Remote Viewer is a lure by design: decoy admin, env, and wallet paths exist so Sentinel can watch scanners, learn the pattern, adapt, and self-heal. Viewers arm the pot; they are not silent bait. Neuron and Mesh are the drill. No backdoor is opened to study an attack.
14
Daily watch pays the mesh
Remote Viewers must check in once per UTC day after landing a real intercept (Neuron, Mesh, or armed honeypot). Credits are the reward for keeping The Sentinel safe — not a login streak toy. Miss a day, streak resets and Sentinel takes the wound. A claimed watch heals it.