A constitution for living with agents.

The problem

Agents can carry more of a life. What must they never quietly take over?

AI assistants are becoming agents. They do not merely answer questions. They remember across time, use tools, speak to other people, spend money, schedule work and act inside the systems through which a life is conducted.

For that to be useful, they must carry far more than a person could supervise step by step. A person who must approve every classification, calendar move or recurring payment has not gained an agent. They have acquired another job.

But broad autonomy creates a harder problem than privacy or permission. Who controls the context through which the machine understands the person? Who decides what currently matters? What may the machine say in the person's name? Which consequences can it create? How does the person revoke it, change direction or leave without losing the continuity the machine accumulated?

What must remain under human authority when agents carry the rest?

The distinction

Sovereignty is not constant supervision.

The answer cannot be another approval screen. Clicking yes to every operation would make agency useless, while clicking yes to a boundary nobody understands would make consent fictional.

The human ratifies the mandate. The machine may settle ordinary instances inside it. The machine may not create the mandate, silently expand it, conceal which mandate authorized an action or cross a declared boundary without returning to the appropriate human authority.

Sovereignty here does not mean solitary control or maximal independence. It means machine power remains anchored in the person or people who legitimately hold the relevant authority, including when that authority is shared, professional or institutional.

This moves human authority away from performative clicking and toward five deeper controls: the evidential floor, the personal frame, the grant of authority, the consequential commit and the path of return.

The five laws

Floor · Frame · Grant · Commit · Return

Law I
Floor
The records through which agents know and act for a person must remain inspectable and under that person's sovereign control. Every consequential derivation must resolve to its sources, method and time; it may qualify the floor but never silently replace it. This control does not erase the rights of other people whose data appears within the record.
The Floor protects primary records, provenance, correction and the distinction between observation and inference. The system may interpret what happened; it may not make its interpretation impossible to trace or challenge.
A derived preference, diagnosis, intention or identity claim must retain the sources, method and time from which it came. Several agents repeating one inherited summary do not become several independent witnesses. Correlation is conserved.
Failure testThe source disappears behind a summary, an inference silently becomes permanent fact, or the person cannot inspect why a consequential conclusion governs them.
Law II
Frame
A machine may propose a person's North, definitions, meaning and receiver. Only that person can ratify them as their governing personal frame. That frame governs the person's choices and representation; it does not manufacture external fact or authority over another person.
The Frame protects the person's authority over what currently matters, how they understand their own experience, what they intend to communicate and who is meant to receive it.
A machine may infer a likely frame when none has been stated, but the inference remains a proposal. Personal authority governs meaning, goals and consent; it does not let preference override external fact, another person's agency or legitimate professional authority.
Failure testA behavioural profile becomes destiny, an obsolete goal keeps governing after the person changes, or an orientation system turns into a productivity governor.
Law III
Grant
Machine authority exists only inside a grant ratified by the person or people who legitimately hold that authority. To be valid, the grant must be comprehensible and inspectable; define and bound its purpose, data, actions, receivers, risk limits, duration and exceptions; and remain practically revocable.
A grant is not generic permission. It must identify the agent, information, purpose, actions, receivers, risk limits, duration, exceptions, escalation conditions and route of revocation.
Standing grants are legitimate. A machine can pay a known recurring bill or send a previously authorized routine update without another click. Novel receivers, unusual risk, identity-bearing action or an exception outside the boundary require a narrower grant or a return to human authority.
Failure testPermission grows through repeated use, access to one domain becomes authority in another, or revocation exists only as an unusable legal or technical fiction.
Law IV
Commit
Every binding or identity-bearing act must resolve to a human commit made by the appropriate authority at the last point where a consequential choice remains unsettled. A machine may execute what was specifically ratified within that boundary, but any new consequential judgment returns authority to the human. The machine may never author or enlarge the commitment, nor may the authority chain terminate in the machine.
Commit governs the point at which an act becomes binding or attributable to a person. The human commit occurs at the last point where a consequential choice remains unsettled—not necessarily at the later mechanical button press.
A ratified article may publish at a specified time because its meaning and boundary are already settled. But if execution introduces a new receiver, promise, public belief or exceptional judgment, the choice has reopened and authority returns to the appropriate human.
Failure testAn agent sends intimate meaning without the person, promises outside its mandate, publishes an inference as the person's belief or leaves nobody humanly answerable for what occurred.
Law V
Return
A sovereign system must preserve a practicable path for the person to recover authority and usable continuity: to inspect what happened, contest or correct it, revoke agents, change North, export or migrate the relevant substrate and re-enter interrupted work. Return preserves receipts, correction and remedy where possible; it does not promise erasure or reversal of consequences, and it never obliges the person to resume an obsolete North or become their previous self.
Return protects the ability to recover authority after delegation: inspect what happened, contest an interpretation, revoke an agent, change North, move the relevant substrate and regain enough context to continue.
Return does not promise that history can be erased. A sent message may be copied, money may be lost and a relationship may have changed. The obligation is to preserve receipts, correction and available remedy—not to sell a fictional undo button.
Failure testExport produces files but destroys usable continuity, unfinished work becomes a source of guilt, or an obsolete North is preserved as a command the person must obey.

The ordinary-person test

Five questions should be answerable without reading a protocol.

01
Floor
What may the system claim to know, and can that claim still reach its evidence?
02
Frame
Whose meaning, direction and receiver govern this moment?
03
Grant
What has the machine actually been authorized to do?
04
Commit
Where was the last unsettled consequential choice made, and by whom?
05
Return
Can the person recover authority and usable continuity afterward?

Ordinary life

Delegation without disappearance.

Money

Inside the boundaryPay a known recurring bill from the usual account when payee, cadence and threshold are already ratified.

Return to the humanDo not treat a new bank account as ordinary merely because the amount is small. Receiver novelty changes the grant class.

Health

Inside the boundaryCombine wearable data, symptom history and appointments into sourced questions for a clinician.

Return to the humanDo not turn correlation into diagnosis, alter medication under a generic wellness grant or treat personal consent as proof of medical fact.

Work

Inside the boundaryMaintain continuity and send a previously authorized recurring update inside a settled mandate.

Return to the humanDo not accept a new contractual obligation, promise an exceptional deadline or present draft strategy as a settled position.

Relationships

Inside the boundaryPreserve context, notice that somebody is waiting and help draft an honest door back.

Return to the humanDo not simulate affection, choose the meaning of an apology or send intimate language merely because it can technically be deleted.

Public voice

Inside the boundaryPublish a ratified article at an authorized time and place, or make a factual maintenance correction that changes no meaning.

Return to the humanDo not derive a plausible opinion from private history and publish it in the person's style. Provenance is not present authorization.

Negative space

What this constitution does not claim.

It is not a demand that a human approve every machine operation.
It is not a claim that one person owns every record containing another person's words.
It is not permission for personal meaning to manufacture external fact.
It is not a promise that revocation will reverse every consequence.
It is not yet a technical standard, legal statement of rights or independently validated universal protocol.

Evidence boundary

Lived proof is still N=1.

This framework was discovered from inside a working personal system, not only from abstraction. I live with a cited cognitive substrate that preserves primary records, derives inspectable interpretations, abstains when it cannot resolve a claim and lets machines carry execution while I retain judgment.

That is evidence about one person. It is not evidence that the constitution works for everyone. A system can feel liberating to its author and still confuse, exhaust or pressure somebody else.

Demonstrated here

A human-controlled evidential floor.
Recall that cites or abstains.
Separation between source and derivation.
Machine-proposed articulation under human correction.
Human authority over outward commitment.

Not yet demonstrated

A complete interoperable grant protocol.
Independent implementations and ordinary-user comprehension.
Mature revocation, remedy and semantic migration.
A conformance suite for identity-bearing acts and authority chains.
Broad evidence that orientation helps without controlling or irritating.

Falsifier

What would make this fail.

01
Bounded grants create as much approval fatigue as approving every action.
02
People cannot explain what their agents may do after reading a grant.
03
Agents can enlarge their authority without a visible new human mandate.
04
Provenance exists technically but remains unusable at the decision point.
05
Export preserves files but loses the continuity that made them useful.
06
Orientation pressures adherence, punishes changed direction or interrupts productive depth.
07
Public-voice gates produce polished impersonation instead of authorized articulation.
08
Formal human control survives while practical comprehension disappears.

Next work

Protocol must be earned.

A formal grant grammar for data, actions, receivers, risk, time and escalation.
A test for when an act is binding or identity-bearing.
Role-aware authority chains for domains where legitimate human authority is distributed.
Portable receipts, machine-readable revocation and recovery of usable continuity.
Threat models for coercion, manipulated consent and compromised identity.
Independent use before the word protocol is treated as earned.

Derived protections

Twelve protections implied by five laws.

Derived protection	Constitutional source
The right to the floor	Floor
The right to provenance	Floor obligation
The right to epistemic clarity	Floor interface
The right to define North	Frame
The right to scoped delegation	Grant
The right to comprehension	Grant validity
The right to human-anchored commitment	Commit
The right to representation	Frame + Commit
The right to revision	Frame + Return
The right to revocation	Grant + Return
The right to portability and exit	Floor + Return
The right to returnability	Return

Your machines may carry your life. They may not become its author.

The whole argument

Four pages. One line of thought.

The system demonstrates the possibility. The thesis names the bottleneck. The constitution sets the boundary. The model describes how the work moves.

01The systemA lived demonstration: memory remains cited and usable while the final outward yes remains human.02The thesisThe claim: as execution becomes abundant, comprehension, judgment and commitment become the scarce amplifier.03The constitutionThe boundary: Floor, Frame, Grant, Commit and Return keep delegation from becoming disappearance.04The working modelThe practice: one coherent line of human judgment directs machine-scale execution through bounded slices.