Sov · Research — An Explainer
The blade that counts, the blade that reads — the architecture in plain language
Musashi is a way of granting permission in a computer system without keeping a switch anyone can flip. A credential is issued with a fixed number of uses, like a book of matches; every action strikes one; the conditions around each action are read before anything is spent; and when the book is empty, the credential is finished by arithmetic rather than by administration. A second layer, Mana, gives each account an amount of authority that fades on a smooth curve and is spent against prices. This paper explains the whole architecture without its mathematics. The mathematics is real, machine-checked, and lives in the companion whitepaper — nothing here leans on anything that was not proven there.
Every computer system you have ever used treats your permission as a switch. You are logged in, or you are not. The key works, or it doesn’t. Somewhere, a database remembers that you are allowed, and everything you do asks that database — still allowed? still allowed? still allowed? — until someone flips the switch off.
Nothing else in your life works this way. Your attention runs out. Your patience runs out. A tank of fuel, a book of stamps, the goodwill of a friend — these are not switches. They are amounts. You spend them. Spending them changes them. And when they are gone, no administrator needed to decide that; the running out was the decision.
Musashi is what happens when a credential is built the second way.
The system is named for Miyamoto Musashi, the seventeenth-century swordsman whose school taught the wielding of two swords at once — two blades of entirely different natures. The long sword commits: once it falls, the stroke cannot be taken back. The short sword reads: it meets the opponent, tests the ground, feels the conditions, and withdraws without consequence — a hundred times, if the engagement demands it.
Neither blade alone makes the swordsman. The school is the discipline between them: the irrevocable blade moves only after the reading blade is satisfied.
That is the entire system. Everything below is those three sentences wearing different clothes.
A Musashi credential is a book of matches. When it is made, it is made with a fixed number of them. Every action tears one match out and strikes it. A struck match cannot be unstruck, cannot be glued back, cannot be struck a second time. And when the book is empty, it is empty. Nobody revoked it. Nobody consulted a list. The arithmetic ran out, and arithmetic does not take appeals.
Watch it live. Requests arrive at the guard; some are admitted and strike a match — and the lock walks, because each struck match becomes the new lock. Some are refused — and notice what the refusal costs:
The quiet trick deserves one paragraph in plain terms. Each match, once struck, becomes the new lock. The next match must fit the lock the last one left behind. So a thief who steals a match you already used holds a key to a door that no longer exists — and no ledger anywhere had to remember that. The door itself moved.
Underneath, this is a chain of one-way fingerprints; the whitepaper draws it properly. You lose nothing by trusting the matchbook.
Before any match is struck, the guard reads the room. Is this the same kind of place the credential was issued in? The same rhythms, the same surroundings, the same bearing? If the reading is satisfied, the guard hands over a small chit, and the strike proceeds. If not — as Fig. 1 keeps showing — the refusal costs nothing. Not one match.
Why does that matter so much? Because conditions drift innocently all the time. You travel. You change devices. The light is different in winter. A system that spent a match every time the room looked unfamiliar would bleed its own users dry — a thousand honest mornings would destroy a credential that was never once misused. The older generation of this very architecture made that mistake: it struck first and read second, and we measured what that costs. The discipline exists because the cost was real.
And the chit is not a formality. In the running system the striking arm is built so that it physically requires the chit — there is no motion of it without one, the way a stamp with no ink pad makes no mark. The guard’s say-so is not a rule someone could forget to check. It is a part the machine is missing until the reading supplies it.
Now the second half of the title. Ask the guard why you were refused, and the answer is: you were refused. Not “you were close.” Nothing with a dial on it. Every hint of how close is a bearing — and a patient burglar with a thousand costumes would happily creep toward the door, reading the guard’s face each time, walking in warmer and warmer. So the guard’s face does not move. Try it yourself:
This sounds like coldness and is actually a kindness with two faces. The honest user loses nothing — they were refused either way, and no scolding number comes attached. The dishonest one loses everything, because a door that never says warmer cannot be crept toward.
None of this machinery ever glances at a wall clock, and that is deliberate. Wall clocks can be set back. Anything that can be set back can be lied to.
Instead, a metronome elsewhere in the system beats out moments one by one, and signs each beat — like a notary stamping every page of a diary in sequence. When a match is struck, the record of the strike carries the signed beat it happened on. And the records themselves link hand-to-hand, each one gripping the one before it, so the whole history is a string of pearls. Touch one:
The system does not remember the time. It carries the time, witnessed, in a chain that will not keep a secret about being tampered with.
And note what the pearls do not contain: how close any reading ever was. The permanent record keeps the guard’s silence forever.
So far, one credential, one matchbook. Mana is the second idea, and it answers a different question — not may you? but how much of you is there?
Think of it as an allowance with evaporation. Every account holds an amount, and the amount fades on a fixed curve — smoothly, continuously, the way a hot cup cools. There is no cliff, no midnight expiry, no moment a switch flips. Staleness is not punished by rule. It is simply what the curve does. Drag time forward and watch:
Three rules give the allowance its character. It only ever arrives from the meter: there is no button anywhere that credits an account; the balance grows only when an observed source actually ticks, the way a water wheel only turns when water actually passes. Spending asks first: every action has a price, the system checks whether you can afford it before anything moves, and a no leaves the balance exactly where it was — with a written note saying no, and why. Baskets are all-or-nothing: if one moment of work needs five things, the question is asked once, for all five. You will never be charged for three of them and refused the fourth, standing there half-bought with no way to un-buy.
Together the two layers divide the labor cleanly. Musashi is how authority is exercised — the reading, the chit, the strike. Mana is how much authority there is to exercise — its amount, its fading, its price. One is the sword. The other is the strength of the arm holding it.
An empty matchbook is not a failure. It is the design reaching its destination — a credential whose whole point was to be finite, arriving at the end it promised. So the system treats coming back as a first-class ceremony, not an apology.
To be reissued, you do a remarkable thing: you show the whole book of stubs. Not the last match — the origin, the thing the entire book grew from, which no strike along the way ever revealed. From it, the mint can regrow the complete book in one motion and watch it land exactly on the lock it published long ago. Only someone who held the book from its first day can do this. A thief who grabbed a few matches mid-life cannot; their fragment grows into the wrong shape and sails past the lock:
Then the room is read once more — are you still recognizably you? — and, if the stubs and the reading both hold, a fresh book is struck: new matches, no overlap with the old ones, and the exchange recorded so the same dead book can never be traded in twice.
Here the two layers shake hands. The price of the new book listens to your history. Come back promptly, recognizably yourself, with a full honest record, and the toll might be a tenth of what a stranger pays. Drift away for a week and the discount fades — on the very same cooling curve of Fig. 4. Loyalty, in this system, is not a sentiment. It is a measurable discount with a half-life.
One last piece of grace. Suppose you strike a match and the receipt is lost in the mail — the strike landed, but you never heard back. You now believe you have one more match than you do. Ask naively and you will be told your match is fake (it was spent — by you). Panic, and you might spend another finding out.
Musashi’s answer costs nothing: show the clerk your last stub. The clerk holds it against the current lock. If your stub is the lock, the lost letter said yes — your strike landed, carry on. If the lock sits a few steps past your stub, the clerk can say precisely how many letters you are missing. Either way: no match spent, no guessing, and — in the most common case of all — no clerk needed, because the very next match in your book happens to fit the moved lock on its own. The same one-way structure that caused the confusion repairs it.
A thief who steals your unstruck matches and rebuilds your room so perfectly that the guard is satisfied will walk through the door. No honest system can promise otherwise, and this one does not.
Every paragraph above is a claim someone checked — not in the sense of we feel confident, but in the sense of a machine ran it ten thousand times last night and counted. A thousand strikes and a refusal at one thousand and one. A thousand readings refused with the book untouched, every single time. The fading curve held to within a billionth. A hundred account histories replayed to the exact bit, and one flipped byte in the record caught. The full tally — every number, every formula, every edge we declined to claim — lives in the technical whitepaper, and the experiments travel: a small harness with one dependency reruns the entire set on any machine, deterministically, in under a second, so the results on the proving grounds are results you can refuse to take our word for.
The long sword only falls when the short sword has read the ground. That was a swordsman’s discipline four hundred years ago. It is a running machine’s discipline today — and for the first time, the discipline is the kind of thing you can check.
Paired reading, in order of appetite: this page · Musashi — The Mathematics of Finite Authority (the technical whitepaper) · the proving harness, for the reader who trusts no one cargo run --release