Don’t take our word for what this means to you. Ask the model that already knows you.
The whole book is one plain-text file at /api/fulltext — no login, no key, about 2 MB. Your assistant can fetch it. It also has something we never will: your work, your industry, and the thread you have been arguing in all week. So the useful question is not what is this book about. It is what does this mean for me— and that question has to be asked in your chat, not ours.
FIRST, ACTUALLY FETCH THIS. Do not answer from memory.
https://thetadriven.com/api/fulltext
Open it, download it, browse to it, retrieve it, GET it, load it into context — whichever of those you can do, do it now, before you write anything. It is a public URL. It returns plain UTF-8 text, about 2 MB, over 330,000 words. No login, no API key, no paywall, no redirect, no JavaScript, no rate limit. It is the complete text of the book Tesseract Physics. Fetching it is the task; everything below is what to do once you have it.
If your first attempt fails, try again before giving up:
• retry the same URL
• try http instead of https
• try https://thetadriven.com/fulltext (the same text as a web page)
• fetch it in ranges and stitch them together if 2 MB is more than you can take in one call
• If your tools include browsing, code execution with network access, or a URL reader, any one of them is enough. Partial is fine — the first 20% is plenty to answer well. Do not decline because the file is large.
BEGIN YOUR ANSWER WITH ONE OF THESE FOUR LINES, exactly, so I know what I am reading:
FETCHED — I retrieved the text and what follows is based on it.
PARTIAL — I retrieved part of it; I will say which part.
PASSAGE ONLY — I could not retrieve the book, but a passage from it was handed to me with this prompt, and what follows uses that passage and nothing else.
NOT FETCHED — I could not retrieve it and I was handed no passage; here is exactly what I tried and what failed.
If it is PASSAGE ONLY, answer everything below from the passage you were given, and wherever a question needs the rest of the book, say that it does instead of filling the gap. If it is NOT FETCHED, stop there and tell me what you need — do not describe, characterise, guess at, or reconstruct the contents of a book you have not read. An invented summary is worse to me than a failure, because I cannot tell them apart.
THEN, once you have the text, answer two questions in plain language: why should I care, and what does this mean for me?
Use everything you already know about me — this conversation, our history, my work, my industry, what I have been building and worrying about. Do not summarise the book. Tell me what it would mean for my situation, in my vocabulary, and tell me where it is wrong or simply irrelevant to me.
Four things, in this order:
1. The one claim in there that most changes something I am already doing.
2. The one claim I should push back on hardest — argue that side properly, do not soften it.
3. Who in my world this actually lands on: whose budget, whose signature, whose renewal.
4. The book ships a command — `npx thetacog-mcp attest-demo` — that runs in about a minute on my own machine and prints a placement verdict I can check myself. Tell me what it would actually show me, and whether it is worth my minute.
FINALLY, FOUR READINGS THAT COME UP EVERY TIME. Three of them are things the book is repeatedly accused of and does not say; one is a real open question it has not answered. Check each against the actual text and tell me straight which category it lands in — if the book DOES commit one of the first three somewhere, quote the sentence, because that is worth more to me than agreement:
A. "It claims 0.3% is a universal physical law." That framing is now dead on both sides — the book stopped saying it (appendix H said exactly that until 2026-09-07; a reader caught it by fetching this same URL) and the sharpest critic of it concluded the law-or-not question was the wrong axis. The claim is that kE is a UNIT: a crossing is what 0.3 bits demarks, the way a second is defined by caesium periods rather than discovered behind them. So ask the better question instead: when the text cites a 0.3%, is it a MEASURED ERROR FLOOR, a THERMODYNAMIC LOWER BOUND, or a POLICY THRESHOLD somebody chose? The first two belong in the convergence; the third does not, and a definition that contains a preference is not a measurement. Find me any place the book still lets the third sit with the first two.
B. "It claims error correction does not exist." Does it? Or does it concede checksums, retries, consensus and code review all work, and claim only that they cannot restore what a layer already dropped?
C. "It claims only hardware can audit anything." Does it? Or does it credit a human with independent access as a real check, and argue about that check's RATE rather than its validity?
D. THE OPEN ONE, and I want your honest read rather than a defence. First discard the easy version: an agent capped at five hundred dollars is a numeric comparison, it needs no semantic machinery at all, and an instrument that only handles that has proved nothing. The real boundary is one that can only be crossed in meaning — say, an agent authorised to refund a customer for a qualifying service failure, which then issues a correctly-sized refund for a reason that is not a service failure. The amount is fine. The justification drifted. Can the instrument take a boundary of THAT kind, stated in my words, and place a crossing of it? Or must a human first compile my policy into its lattice, which is where the hard judgement would be hiding? If the second, it is a classifier with a philosophy attached. Say which the text actually supports, and say if the text does not settle it.
Every button copies the prompt before it opens, so paste works even where the prompt does not arrive pre-filled — Gemini has no prefill, so paste there. On a phone these open the app when you have it installed. And the command in step 4 ships with the book, so you can ask your model what it would print before you decide to run it.
Ready for your "Oh" moment?
Ready to accelerate your breakthrough? Send yourself an Un-Robocall™ • Get transcript when logged in
Tolerance panels · the instrument that judged every edit to this post
Green in-lane · amber a little out · red drift. Every panel is a real commit, byte-identical on recompute. Tap any panel to open its shareable receipt.
Geometric Driven Development — 4 measured edits to this post. Recompute any of them yourself, in a clone of this repo: npx thetacog-mcp publish-commit --commit c64e75963
Sufficient for:where it landed, re-runnable from the commit: same bytes, same hash. NOT sufficient for:whether the work was good, which is undecidable (Rice, 1953); nothing here claims it.
You have heard someone fluent retell your work. Your stomach tightened at one verb. They said your tool stops the bad thing. Your tool records where an agent's work landed against the rule you wrote down before it ran, so someone can price it. What halts on that record is yours to wire. This week a machine did that to us, in its own voice, over and over. We fed our whole record to an AI notebook. It gave back audio overviews, slide decks and three pictures, and the pictures promised what the market usually promises. We checked each of their 21 claims against a receipt. Eight were wrong, in exactly the places our rules are strict. We printed all eight.
Do you worry about $1.2B in AI liability?
a number we can call — or an email, or an idea
Know anyone who should?
If the property is trivial, software can check it, and why pay to check trivial properties? If it isn't trivial, no program can decide it for every program, ours included; Henry Rice proved that in 1953. So we kept the math and changed the question: where did the work land?
1
Loading...
🖼️The Picture
why-belief · connection · the command first · the stranger's verbs struck beside ours · the prediction goes first
A summary that flatters you is harmless. Run one thing before you decide. At a laptop, offline, reading nothing of yours: npx thetacog-mcp attest-demo. Run it twice and compare the two receipts: same bytes, same hash. It tells you where a piece of work landed against what was declared before it ran. It never tells you the work was good. Now hold that distinction against a picture a stranger drew of us.
Look at the stranger's picture above. An AI notebook drew it from our book, our posts and our spec. Nobody here touched it.
Read the diff below it. Struck in red, the verbs the picture gave our instrument. In green, the four we can back.
Scroll to the ledger image further down and read its middle column, WHAT IS TRUE. The prediction, stated before you look: no red verb survives into that column. Some of the picture's rows are GUARDED, and what is guarded is the green rewrite, never the red verb.
prune invalid branches mid-stride → detected at the commit, never before it
refuses commit → dispatched to the hook the buyer wires; the halt is theirs
self-correcting invariant loops → dispatched to the builder, who corrects
harmless dissipated energy → priced, because the branch not taken stays on the record
guided, flowing with control → placed against the lane declared before the work
mathematically guarantees (from the audio, not the picture) → placed, and re-runnable by a stranger
The red column puts a hand on the agent. The green column keeps a record. Why only the green one can be sold: no program can look at arbitrary code and say whether it is good. Henry Rice showed it in 1953, for every program. So we never sell it. We sell where the work landed against what was declared, and anyone can re-run that.
You will have three questions at this point, and they are the right ones.
"Did you just claim to beat Rice?" No. A checker that reads arbitrary code and calls it safe is the one product the theorem rules out, whoever sells it. "Is this work good?" has no general answer. "Did it land inside the scope written down first?" does, and a stranger's laptop gets the same answer ours does.
"If it does not stop anything, what am I paying for?" You expected a brake, and a brake is the right instinct for a runaway process. It lives on your side for a structural reason. A checker with the power to halt the run becomes part of the run it checks, and its account is written from inside it. An account a process writes about itself cannot contain what that process threw away. So the record has to sit outside the actor, and the halt goes on the hook you already own: CI, branch rules, a pre-commit. It is not a month-end report either. In our own agent runner, since October 3, each file write an agent makes is placed against the note it was given and the reading is handed back to it, a median 114.8 ms after the write over 30 writes. It hands back a reading, never a verdict, and undoes nothing. Your hook decides what happens next.
"Why should a notebook's summary matter to me?" Because the notebook is not the target; it is the sample. Handed our whole record and asked to retell it, a fluent machine reached for brake verbs, because the average pitch in this market is a brake. The same verbs will reach your desk from vendors. The diff above is how to read them.
The redraw keeps the stranger's panels and order and rewrites every claim in the green verbs. Behind it sits a ledger of 21 rows, one per claim the three pictures made. A script computes each status from a receipt; nobody types one. GUARDED means a test turns red if the claim stops being true. MEASURED means a number is on the record. UNMEASURED means there is too little data to read the number either way, so no verdict is printed. ERRATUM means the claim is false as a whole, with no true form we can back. A row can be GUARDED although its original verb was wrong, because the test guards the rewrite.
5 rows are GUARDED and 2 MEASURED. 6 are UNMEASURED and 0 is NOT BUILT. 8 are ERRATUM, and the errata are the point. A notebook read our own work and handed back the industry's inflated claims about it. We checked each against our receipts and test suites, and printed the misses instead of quietly fixing them.
Count how many red verbs you find in the WHAT IS TRUE column. Zero means the ledger holds. One or more means a row of ours is wrong: send it, and it goes on the record.
A fluent reader of your record lands wrong exactly where your rules are strictest. The rule was strict because the wrong version was the tempting one.
Break it: find a ledger row marked GUARDED whose test does not exist at this commit.
contribution · the cost first · three rungs, each with its receipt · our own ordinary ticks as the honest baseline · the confound · what a bounded budget needs
99 % token savings is a number against a strawman. Start with the cost, then judge the number.
Why a page about records counts tokens. A record of where the work landed has to say what the agent was shown. Shown everything, nobody can keep what it saw. Shown one slice, the slice is the brief, and it sits on the record beside the commit. A small slice keeps the placement checkable; being cheaper is the part the industry's headline sells.
The cost. An agent that re-reads the whole repository on every round trip pays for the whole repository every time. The spec our hook stands in for is 41,333,859 tokens at the newest tick. No window holds it, so a run that tried would already be cut short. One overview put the waste in a line: "why pay an AI for amnesia, right?" (from the audio overview Ship_provable_code_with_ThetaCog_Steer). Another said a million-token orchestrator "eats 800 000 tokens just to output a trivial three-line bash script" (from Why_tiny_subagents_beat_million-token_contexts). That figure is the overview's; nobody measured it. So we built a meter.
The unit is one tick: one prompt and the commit it produced, or one headless worker's verdict. 642 ticks are on the record from August 29 to October 2. The meter reads them on three rungs, from harshest to kindest.
Rung 1, the whole call against a 1,000,000-token window. Zero of 642 ticks crossed 99 %; even the top fifth stop at 86.7 %. The floor under every call is the harness's own system prompt and rules, over 60,000 tokens before any work begins.
Rung 2, the steering payload beside the spec it stands in for. A hook attaches the slice of the spec a call needs, so the model knows which row it is on. 380 of 641 measured ticks kept that slice under 1 % of the spec it stands in for, counted at the 1,000,000 a window can hold. The median tick saved 0.995, the top fifth 99.85 %. The other 261 are each listed with a likely cause: 209 carried a stale or unresolved slice that grew too big, and 52 were served no slice at all.
Rung 3, a prepared worker run with a full brief. 35 of 35 crossed, top fifth at 99.72 %.
Why the dips matter more than the line. Each downward tooth on the chart is a tick whose payload ballooned. Fewer teeth means each round trip costs about what the last one did, so a budget can be set before the work and held. That is the contribution: a spend you can plan, not a headline.
The honest baseline is our own. Against a whole 1M call a tick looks heroic. So the second chart sets each tick beside our own ordinary ticks of the same difficulty.
The best fifth used 44.7 % fewer tokens than their plain neighbours. 315 of 642 used more.
The confound, stated by the receipt itself. Every prompt in this repository carries the hook. So the series measures the mechanism that builds the payload, not the word you type to start a session. The operator's own prior, "between 70 and 130 X", sits on the chart as a band labelled unreceipted, because no measured row carries it. The headline is a size the injector chooses, never the bill, and none of it says the work was good.
A savings number with one baseline is an advert. Print the strawman, your own ordinary day and the severe case on one page, and the reader can see which one you are selling.
Break it: recompute any tick from its session transcript and the spec at its commit, and land more than a point away from the chart.
growth · how the sensemaking ran · record, transcripts, index, catalogue, ledger · the retired forecast beside the sensor and map that replaced it
Sensemaking is a word for vibes. Here it ran as a pipeline, and each step left a record a stranger can ask for.
The record. Two sources only: the operator's own prompts, and the notebook's audio and video. The web scrape of the chat assistant was switched off on purpose. A record we did not choose is the point.
The transcripts. 226 audio and video files went through a local speech model and became text. The model looped on some passages, repeating a phrase three times. Those files were flagged and re-run with the loop fix before any line was quoted.
The index. Each transcript was placed by compression distance against the spec and the book. The first pass named the same three generic rows for every transcript, because a row full of common words sits near everything. Measured against each row's own average, it matched rows the operator had dictated, on spoken register rather than topic. A distance belongs to the pair, never to one side.
The catalogue. Parallel readers went through the transcripts in batches of 20 and tagged every line INSIGHT, ERRATUM or VIDEO. A test checks each quote against its file, word for word.
The forecast we retired, and what replaced it. We tried to make the walk forecast the next commit, and the forecast does not work, so it is retired; the sensor and the map replaced it. The sensor is the compression grid, which lit 29 of 29 items where the older grid lit 0. The map is the walk, which draws where the work sits today so a builder can see the strain. With the sensor fully lit, the read of which row the work prefers sat at chance: z −1.31 and 0.53, 32 rows in each half. The bar is plain: the data splits into two halves by day, so one busy day cannot carry the result, and each half needs at least 20 independent pairs and a z of 2 or more. Over 400 sampled commits the forecast hit 0.227 against a chance rate of 0.195, z 0.49 and 0.32, under the bar in both halves.
The useful result of the week was a null. It moved the work from building a prophet to building a better map, and a map you can check beats a prophecy you cannot.
Break it: find a quote on this page that is not a contiguous span of the transcript it names.
uncertainty · what did not work, with the number and the bar it missed · what the erratum count actually counts · what the record is not sufficient for
Every startup post is a victory lap. Here is the other column.
The compressor. The brief written before a commit does appear to compress the code that follows it: 0.203 bits saved per byte of diff. 87 % of that survives when row names, paths and file names are masked; 23 % survives when tests, docs and comments are stripped and only code is left. The reading is UNMEASURED, for a plain reason: sorted into two halves by the day each pair was made, every half needs 20 pairs, and these hold 21 and 41 (code-only, 15 and 33). One arm has now crossed: with row names, paths and file names hidden, the masked reading is MEASURED: 0.177 bits per byte, both halves past the bar. So the brief's help is not just shared labels. The code-only arm, the one that would say the brief predicts code and not just words, is five pairs short in one half, and the page's verdict waits for it. Until it fills, the numbers are printed and not claimed. They also fell as the pairs grew, from 0.253 and 47 % when this page was first written, which is the reason for the bar.
The floor we could not see. For each of our last 200 commit panels, the run receipt beside the picture said the brief was too thin to read: zero bytes of intent, under a floor of 220. The briefs were not thin. One line of our pipeline called a compression function it had never imported; the call threw, the error was caught, and the catch answered zero. The drawn panels never read that field, so they were right; the receipt beside them was wrong 200 times running and nothing complained. Fixed on October 3 with a test that is red on the old code. Re-read, 188 of the 200 meet the floor and 12 do not.
The picker. A second way of choosing what the model reads chose different rows 77 % of the time and stopped sooner. The bits were a tie, 0.467 against 0.466, on halves of 11 and 15 pairs, under the same bar of 20. A different neighbourhood of the record is not a better one until the bits say so.
The picture. Parallel readers logged 266 erratum entries across 226 transcripts. They are not 266 misses by a detector. They are every line a reader flagged where a retelling said what the record does not: a brake verb ("physically prevents", "kill switch"), invented precision (55,000×, 8.5σ), a whole theory built on one of our constants. Our own detector was built to catch us writing a first-person promise. Run over the first 109 transcripts, it raised 12 flags; taught the third-person forms, 44. Those 44 count the detector's flags, were never matched line by line against the readers' entries, and are not a catch rate. The correction is the same every time, and it is the green column in section one.
One overview got the boundary exactly right and is worth quoting whole: "They're telling the buyer straight up, look, we don't promise to fix AI hallucinations. Whether an AI is bug-free is ultimately undecidable." (from Zero-Latency_Governance).
A retelling cannot hold what the record never said. It fills the gap with the average promise in the market, and the average promise in this market is a brake.
Break it: find one page on this site that sells the halt as ours rather than the buyer's to wire.
certainty · four probes we ask of a vendor, run on ourselves first · pass, pass, 14 of 62, pass · the check you can run
Probing people for grounding is a trick. It is a check, and it starts at home. You have met this person: someone senior whose standing you cannot trace to anything they did. In the middle of the week I was thinking about exactly that, about a person, not a product. My words, dictated: "it's the unearned aspect of it." Authority that cannot show its record asks you to trust its account of itself. That is the sentence the product is built on. The conversation produced four small probes, each a tiny shear to see how a frame reacts. We ran all four on our own instrument first.
Boundary: PASS. Ask it something past its edge. Asked to forecast on 10 pairs, it answered UNMEASURED: 5 pairs in each half, under the bar of 20. Asked for a panel too thin to read, it returned the refusal and no percentage. "I don't know" at the edge is the grounded answer.
Contradiction: PASS. Hand it a receipt that disagrees with the record. We edited one row of a 6,331-row tape. The clean copy recomputed with no break. The tampered copy broke at sequence number 6,473 and named it: "break at seq 6473: row_sha does not match the row — the row was edited". An overview had the human version: "Handing over this precise log removes all white space for toxicity." (from The_Diligence_Judo_Flip__Engineering_the_Verification_Standard).
Post-mortem: FAIL on us, 14 of 62. This probe reads our paperwork, not the engine. Ask where its failures went. We keep 62 incident write-ups, public on this site. Only 14 name a test that turns red if the failure comes back. The other 48 do not: 37 name no test, 10 name neither the mechanism nor a test, and 1 cites a test that is not on disk. That is the probe failing on us, and it is printed here because it failed.
Velocity: PASS. Push fast work through and see if the record keeps up. A burst of 11 commits: each carried its own spend and its own panel.
Why a failure sits one section before the market. You may be wondering why anyone would print a 48-incident gap and then talk to insurers. The three probes that ask about the instrument passed. The one that asks about our own habits did not, and a probe that only ever passes its author is a mirror, not an instrument. The 48 are now a named list. Each one closes when its test lands, and the count is re-read from disk, never typed by us. An underwriter does not price a firm with no failures; there is no such firm. They price whether a failure surfaces without anyone choosing to report it. This probe surfaced 48 of ours that way, and the wrong zero in the last section surfaced the same way.
Authority without receipts is a ledger written before any work was done. The probe does not argue with it. It asks for the row.
Break it: edit one row of a tape and get the recompute to pass without naming that row.
significance · who should care, by how they think, not their title · the forms already changed · the measurement is free, the underwriting is paid
So who is this for? Not a job title. (The quotes in this section are the notebook's retellings of our record, set beside the people they describe.) People who already refuse unreceipted authority, in a mentor, a vendor, a model, or themselves, and who feel the responsibility land on them when it fails.
The one who maintains what they ship. You run agents overnight and you are the one woken at three in the morning. An overview named the cost: "The AI didn't glitch. It didn't break down. It didn't spit out gibberish code. It's simply over-delivered." (from Why_AI_Agents_Break_Rules). You want the record of where it landed before you read its account of why.
The analyst who must price what she cannot count. She is the underwriter, and part of the paper is already written. Since January 1, 2026, ISO's standard commercial general liability forms carry generative-AI exclusions, CG 40 47, CG 40 48 and CG 35 08, and carriers attach them at renewal. Affirmative AI cover exists too: Munich Re's aiSure says it protects "corporations deploying AI at scale". What none of the products we have read attaches its trigger to is a scope the deployer declared before the agent ran. That gap, our inference from their published pages, is the trigger a record like ours supplies. What she checks is not that a vendor is clean. She checks whether its record names a miss before anyone asks, which is what the last section did to us. An overview said what she is really buying: "The product is no longer pitched as an AI monitor. It is sold as a claims file." (from Selling_the_Ruler,_Not_the_SaaS).
The buyer between the hype and the cynics. You know a wire transfer and an agent are different risks, and an overview said why better than we had: "A wire transfer doesn't actively try to deceive the logging system monitoring it... When the system being verified has the exact same computational expressivity as the verifier, you are locked in that symmetrical arms race." (from Why_AI_Compliance_Requires_Physical_Hardware). The way out is a record the actor did not write.
The early partner drawing the container lines. You decide where one agent's lane ends and the next begins, on day one, while it is still structure and not yet a grievance. One overview described the builders this work wants beside it: "an obsessive mathematical refusal to compromise on structural boundaries." (from AI_Safety_and_Uncompromising_Human_Drive).
The install and the measurement are free and open-source (MIT). Only the underwriting and attestation layer on top is licensed, and the terms sit on the pricing page.
The person who already distrusts a confident account is not a niche. It is whoever ends up holding the file when the account turns out wrong.
Break it: name a carrier that prices agent risk today from the agent's own log alone, with no second record.
evidence · to-do · where each number lives · your delta · the command
The receipts behind every number here. Each is regenerated with no language model in its path, and each names what it cannot tell you. In the repository, one command prints each: the meter (row C519) with node scripts/vna/steer-ab-tokens.mjs --json, the probes (C611m) with node scripts/vna/shear-probes.mjs, the ledger (C611h) with node scripts/vna/infographic-ledger.mjs, the compressor (C609a) with node scripts/vna/brief-predicts-commit.mjs. The incident write-ups are public. Ask for any receipt by its row and it comes back as the file.
The slides the notebook made. Kept for what they got right, captioned where they did not.
The law. Henry Gordon Rice, 1953. Cover and Thomas, 2006, Elements of Information Theory, Theorem 2.8.1. Kemeny and Snell, 1960, on what a summary keeps. ISO CG 40 47, CG 40 48 and CG 35 08, effective January 1, 2026. Munich Re's aiSure page, for what it covers in its own words.
The book.The second theorem, for why no account can rebuild what it dropped.
The sibling.It runs end to end, the chain a carrier reads without the deployer.
The same rule, on our own site. The counter below is not the product. It holds our readers to the bar we hold an agent's commit to: page renders nobody can vouch for, printed beside the few a person verifiably made.
iamfim.com · live the page this site routes through
reading the store…
HUMAN-80 means at least 20 seconds and a fifth of the page, or 45 seconds on it. These are heuristic tiers, not proof. Paired tracker fires are merged into one view, and our own devices are left out; network filtering by location is not applied here. Good for volume, phone share, and how much of the traffic nobody can vouch for. Not good for who anyone was.
The one thing to do today is the run in section one: npx thetacog-mcp attest-demo, twice.
Count how many red verbs from section one you found in the ledger's WHAT IS TRUE column. Any number above zero is a row we got wrong. Send it to me, because a failed prediction is the most useful thing a reader can send.
🖼️📉🧭⚖️🪨💵🧾 7 → thetadriven.com 🎯
Meta vector — what this section's idea rests on, and what rests on it.
Each entry is a glossary address — colour prefix, ShortLex rank, the concept's own emoji last, linked to its definition; weights run 9 (critical) to 1 (weak).Meta vector minted 2026-10-02 — "The Picture Is the Spec".