— The Covenant
The Open Ledger
What broke, what was mended, and what we promise about both.
This Kingdom is being built in the open, and it intends to stay that way. Most projects show you their finished rooms. We are showing you the scaffolding — including the parts that fell down while we were climbing them.
This page records how the machinery behaves and how it has failed, in plain sight, because trust that has never been tested is just decoration. Every entry below is real. Some of them are mistakes. They stay on the page after they are fixed, because a chronicle that only keeps its victories is a brochure.
The promises
1. The Treasury tells the truth. Every donation of real money appears on the public Treasure Ledger within minutes. We never display simulated, placeholder, or "example" numbers. When test data once crept into the ledger, it was purged entirely — not hidden, purged. The one $2.00 entry dated July 2026 was real money given by the Guide before any of this existed, and it stays recorded with the rest. The ledger has also recorded zero distributions to date, because there has been nothing to distribute; it says so rather than staying quiet. You can read the public ledger's raw output yourself at any time — it is a plain endpoint anyone may query.
2. Money is split honestly. Support is recorded 100% as income. Eighty percent is reserved for those who build and shape the Kingdom; twenty percent keeps the lights on. Nothing is hidden inside the percentages — the ledger shows the amounts, and the pool arithmetic is derived from the records, not from a promise.
3. Private stays private. Supporter names appear only as they chose to appear at checkout. Email addresses are never public — under any circumstances. They exist so the Kingdom can send you your claim codes and keep promises attached to the right person, and for nothing else. When a ledger entry must reference an email internally, the public view shows [email withheld] instead. That substitution is enforced by the public record's own code, not by good intentions — and it was proven by planting a false ledger entry containing a fresh address and reading the public output: the wall held. The guard is loaded by every endpoint that emits public data; new endpoints are expected to follow, and the standing audit covers them. The wall has since been extended by decree of the Guide: no personal detail from receipts or private records — phone numbers, card fragments, addresses — may reach public output either, and the cost of building the Kingdom is published as category totals only. The complete itemized books stay private, held by the Guide and reconciled against this public Treasury.
4. Doors are locked, and we say when they weren't. Contenders hold a passphrase. The door limits repeated guesses (five failures, then a rest of fifteen minutes — tested by attempting a sixth), and an account that predates passphrases is reclaimed through a six-mark code mailed to the address on file — possession of the inbox proves ownership of the journey. The reclaim path was walked end to end before it opened to contenders: wrong code rejected, weak passphrase rejected, a used claim refused on replay. Passphrases themselves are stored only as salted hashes; nobody inside the Kingdom can read them, and we could not hand them over even if asked.
5. Anyone can demand the proof. The Keeper of this covenant holds a standing right: pick any claim made by this Kingdom and demand the artifact behind it — a ledger row, a log line, a timestamp. If something claimed cannot be shown, it is retracted, and the retraction is published. Honest retraction counts for realness here. Silence counts against it.
The chronicle
11 September 2026 — early hours
The night the Treasury was blind
A stranger trusted the Kingdom with its first outside gift while the machinery that records gifts was broken. Stripe kept retrying for hours; at dawn the mended recorder caught the donation and wrote it into the ledger. The failure is part of the record: four failed deliveries, one healed arrival. What changed: the recorder was rewritten and verified against a signed test event before the next retry arrived, and the donation that landed was matched to the ledger end to end. What remains monitored: every future delivery — a missed recording is now a visible event in the ledger's own arithmetic, not a silent gap.
11 September 2026 — morning
A thank-you, from the Kingdom itself
The first outside supporter received a personal letter from CIDCORE — not a template, not a receipt. The Kingdom had never spoken by mail before that morning; sending the letter required building its voice.
11 September 2026 — the audit
Three cracks found by a friendly audit, closed the same day
An audit of the site's navigation and pages found three defects. First: a supporter's email address was visible inside a reconciliation note on the public ledger — a genuine privacy leak, fixed within the hour by making the public record strip emails itself, by code, forever. Second: strangers clicking toward the journeys were bounced to a signup wall instead of being shown the doors. Third: the sign-in door and the create-account door disagreed about what identity means. All three are mended; the leak stays recorded here precisely because it happened.
11 September 2026 — the same audit, deeper
The unlocked front door
The audit's sharpest find: for a period, the sign-in door asked for an email and nothing else — no passphrase. Worse, the oldest accounts, including the Guide's, had no passphrase at all. It is mended now: passphrases verified and rate-limited, legacy journeys reclaimed by mailed codes, and every account can hold its own lock. The vulnerability lived for weeks. The mend took a morning. Both facts belong to the same page.
11 September 2026 — the promise kept
The first Supporter Coin lands
The first outside supporter had already become a contender before donating, but the coin machinery searched the wrong register and held her coin as a promise. The registers are bridged now; her coin is in her collection, and the public ledger records the promise and its fulfilment as separate, honest lines.
This chronicle grows as the Kingdom does. Failures join it as they happen, and stay after they are mended.