The Trust Society · the foundation for a new world

Independent minds saw the same answer. Together, they are a trust society — and it makes a generous economy possible.

Across identity, banking, and health, the extractive internet turned people into inputs. Separately, in different corners of the world, a handful of builders reached the same conclusion about how society has to be rebuilt: the person holds the root, no one can read them without consent, and value flows back to the people who create it.

Four builders standing on separate stone landings above a river, each holding one wedge-shaped block; the arch those stones make is drawn above them in fine gold line.
Four hands. Four stones. One arch. Not one of them is the arch.

No one did it as a solo hero. Each brought a critical piece. Together those pieces are the Trust Society — the foundation — and the foundation is what lets a Generous Economy exist on top of it: generative, not extractive; everyone paid, no one owned. This is not a company's platform. It is a new world, and there is a seat for everyone who helped see it.

The foundation, and what it enables

Two ideas, in order. The first makes the second possible.

The foundation
A Trust Society Sovereign identity, unreadable data, revocable consent, proof of personhood — the principles a society agrees to keep.
What it enables
A Generous Economy Value that flows back to people instead of away from them — 80% to the person, never a toll at the door.
The result
A new world Generative rather than extractive — where being recognized, trusted, and paid is the default, for everyone.

What changes, in one word

Every argument on this page reduces to a single difference — not in who owns the technology, but in which direction value travels. The extractive internet treats people as the raw material of someone else's balance sheet. A trust society treats them as the owners of what they produce.

The same hillside twice: first worked as a quarry in cool grey with a loaded cart leaving, then terraced and planted as an orchard with water held in the steps.
Extractive — people as inputs, value concentratesGenerative — people as owners, value compounds
Extraction draws down the capacity future value depends on. Generation expands it. Same ground, opposite direction.

Nothing about the second picture is softer or more charitable than the first. It is simply built so that the people who create the value are the ones who keep it — which is what makes it last.

Sovereign identity

An identity you can keep

You hold the rootA cryptographic key on your own device — not an account someone can close.
Issued by no oneNo orb, no state ID, no company that can revoke you or lock you out.
Carried everywherePresent it across health, finance, and borders — always the same you.
Yours to reclaimPortable and revocable — you can always walk away with it, intact.

One key, held by you — the essence of a sovereign identity

The constitution — six principles, non-negotiable

The society is not a brand. It is a set of principles everyone agrees to honor — and the exact test the extractive internet fails. Nearly every player keeps one or two and quietly breaks the rest.

A masonry arch, complete, standing on open ground.
The arch, whole
The same arch with its keystone lifted out, leaving two half-arches that cannot reach each other.
One stone out — two piles of stone
Take one out and what stands either side of the gap is no longer an arch. Five of six is not a weakened trust society; it is two piles of stone.
01
RecognitionYou hold the root
Your identity is yours to keep, carry, and reclaim — a key you control, not an account on someone's platform.
02
PrivacyNo one can read you
Operator-cannot-decrypt, by construction — the operator holds only ciphertext, so it cannot read your data, and cannot sell what it can't read.
03
PermissionConsent is code — and revocable
Permission travels with the data as a cryptographic object, and can be withdrawn in an instant.
04
PersonhoodProven real — and no one can take it away
A proof of personhood the person holds and carries — so being recognized, and able to travel and transact, never depends on papers that can be lost, stolen, revoked, or never issued. The proof no government can cancel, no trafficker can steal, and no company can hoard — for the billion-plus people locked out today because they have no recognized ID.
05
TrustVerify everywhere, issue nowhere
Open, offline-verifiable against one pinned root — so no single party, not even the founders, becomes the gatekeeper.
06
ValueYou get paid — and never charged
You keep the majority when your data creates value — and you are never charged to be real or to reach your own data.

The part you live

Six principles are the law. This is the life.

The page so far tells you what the trust society guarantees, and who builds it. Here is what happens to you as your trust grows — three movements, each built on real mechanism, not roadmap.

IClimb

Collaboration that grows with your trust.

The ladder isn't a pipeline you pass once — it's a progression you climb, and each rung widens exactly what you may do with other people. A low front door lets anyone in; power is earned rung by rung, bounded by your own trust, never an outsider's.

claim · t1Become sovereignProve you're a real, unique person on your own terms. You exist in the society — a key you control.
act · t2Act & collaborateAttested personhood unlocks writing to your vault, granting consent, and joining others in shared work.
transact · t3Transact & belong fullyHigher assurance unlocks settlement, paid participation, and standing in cohorts and communities.

One gate enforces the whole climb — authorize(tier, action) — wired to real acts, not slogans: a settlement is a transact, and a stolen attestation can't move someone else's money. The rule underneath is simple and radical: the bound on your power is your trust — no more, no less.

already built the laddered-rights gate (claim@1 / act@2 / transact@3), subject-bound attestations, and mutual-consent dual grants — collaboration opens only when A names B and B names A, each signed, scoped, revocable.
IIBelong

The communities you join as you rise.

Trust isn't only personal — it's social. Belonging is a first-class object here, not an app feature: you join a collective once, and the trust graph itself derives who you may work with. Join once, reach everyone in the circle.

And circles assemble upward — a pair becomes a team, a team a community, then an institution, a region, a nation — the same structure at every scale, each boundary a trust gate. Trust doesn't leak between them, and it can be withheld at any level.

Make trustworthy collaboration cheap — and betrayal expensive.

already built the Collective as a first-class trust object; authorized peers derived from co-membership (join once, not a pile of one-to-one pins); non-transitive recognition between groups (A→B and B→C never imply A→C — no collusion rings); and collective authority minted and revoked by quorum, never one hand, under a signed constitution.
IIICarry

One wallet that connects your whole economy.

What carries you across all of it is a single, person-owned vault — one vault, many shelves — holding your identity, your consent, and your value together. Its operator cannot decrypt it: physics, not a policy promise. It's the one surface every app plugs into, instead of each building its own silo of you.

Healthrecords, results, cohorts — the Rosalind shelf
Financialvalue, settlement, KYC attestations
Onlinethe accounts you reclaim from the extractors
Agentthe AI that acts for you, accountably

Every partner connects to the same wallet by namespace. When your data creates value, the wallet pays you — 80% to the person, 10% the rail, 10% the commons, enforced at the rail and publicly witnessed. And the data never leaves: queries travel to the data through consented nodes; the data never travels to the query.

When someone buys access to a person's data, they pay the person.

built · deploying the Personal Vault (client-side encryption, per-shelf keys, operator-blind) and the reclaim engine are live; the 80/10/10 settlement rail is a live kernel; the Universal Vault Service — the one consent surface every partner shares — is built in kernel and rolling out as a hosted service. Named honestly: the engine runs; the service is deploying.

Why these three complete the picture

The principles are the law. These are the life.

The six principles say what the society guarantees. Climb, Belong, and Carry say what it feels like to grow inside it — each one a principle, lived.

Climb

Trust & Personhood, as a progression — power earned rung by rung.

Belong

Recognition, as membership — circles that grow with you, gated and non-leaking.

Carry

Value, Privacy & Permission, in one place — the wallet that pays you and never leaks you.

For a partner

You're not integrating a vendor. You join a trust fabric where your service plugs into one consent surface, inherits the cohort structure, and settles value back to people — and your standing grows as you're recognized, gate by gate.

For a participant

You become sovereign at a low front door, and you rise — unlocking what you may do, the communities you may join, and a wallet that carries your identity, consent, and earnings across every app you touch.

Making sovereignty tangible

The wallet you carry — the card you hold.

Sovereignty shouldn't be an abstraction you're told you have. It should be something you hold and see — a card in your wallet, next to your boarding pass, unmistakably yours, tied to your data, and verifiable everywhere.

◆ RosaTrust · Sovereign IDSelf-sovereign
Alex Rivera
did:rosalind:anchor:9f3c…a71b · yours, never a state ID

Personhood

✓ Proven real

Trust rung

Transact · t3

Your value

$1,284 earned

Active consents

6 · all revocable

Connected shelves

HealthFinancialOnlineAgent
You hold this. No one can revoke it. Present only what you choose.
◆ RosaTrust · Agent IDAgent · not a human
care-scheduler
did:rosatrust:ssai:2b8e…c40f · typed principal (ssai)

Accountable to

Alex Rivera

Authorized for

Book appts · read Health

Consent scope

act · t2 · revocable

Attested

✓ live & audited

A machine, accountable to a person — bound to the consent it was granted, revocable in one act.

Two cards, one wallet — a person, and the AI that acts for them · no agent can ever wear a person's card

Your own rootAn anchor you control, not a state ID — proven real without surrendering a government identifier.
The ladder, visibleYour trust rung on the face of the card — what you may do grows as you climb.
Your value, shownWhat the economy paid you — 80/10/10 — not what it took from you.
Only what you chooseSelective disclosure by pairwise face — present one fact, and the verifier learns nothing more.

In your wallet — and verifiable everywhere.

The card lives where you already keep cards: issued as an Apple Wallet pass and a Google Wallet pass, presentable with a tap. It isn't a picture — it's the disclosure face of your vault, and the code on it carries a signed verifiable presentation anyone can check against one pinned root, offline. Built to open standards — W3C Verifiable Credentials / DID, the IEEE 2874 Profile, mDL — so everyone can verify it and no one owns the rail.

available now This is built and running today — the sovereign identity, the agent card, and the signed verifiable presentation behind them are live, issued to you and yours alone to hold, verifiable anywhere against one pinned root. Not a roadmap, not a waitlist — your identity is yours to hold and present, now.

Consent, trust, and why we're called Rosalind

Consent as we implement it — not a checkbox. Permission is a cryptographic object that travels with your data: granular and per-purpose, so you grant one use and nothing more; enforced at the vault so a provider can query without ever extracting — the answer leaves, your data never does; revocable in an instant, with revocation that propagates; and every access attested, so there is a record you can read. When a doctor needs your history in an emergency, that is the difference between a form you signed years ago and a consent you hold and can withdraw.

A researcher asks or a doctor, or a bank QUESTION · ONE PURPOSE ANSWER + SIGNED RECEIPT YOUR VAULT · OPERATOR CANNOT DECRYPT the record itself — never moves You granted one use withdrawable in an instant
The answer leaves — your data never does
GranularOne purpose at a time — you grant exactly one use, and nothing more.
SealedOperator-cannot-decrypt — the system can't read you, so it can never sell you.
RevocableWithdrawn in an instant — consent travels with the data and comes right back.
AttestedEvery access on record — an auditable trail that you can read.

Trust is earned and attested, not asserted. Nothing here asks you to take our word for it — claims are verifiable against a pinned root, offline, by anyone. The collaboration itself is the proof: the standard's author found a real gap in our implementation and we fixed it the same day. That is how trust compounds — in the open, between independent parties who check each other.

A worn desk under a brass lamp; a glass photographic plate of concentric arcs, its torn paper caption strip being set carefully back into place by a hand with ink on the fingers.
We care about attribution because of who we're named after.

And why "Rosalind." We are named for Rosalind Franklin, whose work on the structure of life was taken and credited to others. That is not a logo; it is the reason attribution, consent, and person-owned data are load-bearing in everything we build. Rosalink exists so that what happened to her cannot happen to you: you hold the root, you grant the consent, and when your data creates value, the credit — and the value — return to you. We care about attribution because of who we're named after.

Everyone is welcome — because no one owns the door

The market has independently converged on this vocabulary in eight verticals at once. That is not a threat to defend against; it is proof the direction is right. We wired the street first and left the connections open — and the win, for all of us, is that trust composes across one shared substrate instead of fragmenting into a dozen private silos. Nothing here happens as a solo hero; it is possible as a collaborative symphony, and everyone who brought a piece shines.

Fellow-travelers who arrived at the same answer
  • The Spatial Web standard (IEEE 2874) — its author defined the standard; we built the running implementation. The standard needs a real system; the system proves the standard. A match made in heaven.
  • The architecture allies — Solid / Inrupt, Meeco, Verida, Spruce, Human.tech — each proved a piece of the model is real. None had to be beaten; each is a seat at the table.
  • The builders inside the family — Abakus (with its Foundation) and the teams carrying the sovereign-banking and health work forward — everyone's piece, everyone's name.

The only condition of membership is the constitution above. Keep the six, and you are in — building on the same rail we run our own flagship on, verifiable by anyone, owned by no one.

Apart, a field of good intentions the market keeps bending back toward extraction. Together, a trust society — and the generous economy it makes possible. The foundation for a new world.

A foundation is only worth what you build on it — and who builds it matters as much as what. No one raised this arch alone; it stands because an alliance of independent minds each set a stone and each kept their own franchise.

The Alliance — who builds it → Claim your sovereign identity →

The Trust Society and the Generous Economy — the foundation, and what it makes possible.

The working stack is live today — Rosalind (sovereign health) · Abakus and its Foundation (sovereign banking) · RosaTrust (the trust engine underneath it all).

Owned by no one · anyone can verify it · no lock-in, ever.