The Earthlings Digital Platform

The Earthlings digital platform is the core in which four levels of the people come together:

• identity - confirmed and at the same time private;
• participation - signing the Declaration, voting, discussions, joint action;
• projects and Cells - initiating, forming, coordinating, carrying out, and recording results;
• the economy of participation - the unit of account, the common fund, reward for contribution.

The platform is not a social network or one more blockchain system. It is the instrument through which the Earthlings people can exist: with infrastructure that is transparent and at the same time protective of the person.

The main task is to make participation practical, safe, and honest: from the first signing of the Declaration to the delivery of complex international projects.

The architecture is built on a multi-layer principle. Each layer solves its own task and intrudes on the others as little as possible.

1. Presentation level. Web interfaces, mobile applications, an API for external integrations. Here a person sees the Declaration, the map of projects, the panel of Cells, votes, and their personal account. The priority is accessibility and clarity.

2. Application level. Modules of functionality: profile management, submission of initiatives, the work of Cells, voting, delegation, fund management, supporting AI tools. Business logic without the storage of low-level data.

3. Data level. Profile stores, project metadata, Cell statuses, DAO configurations, voting results, event logs. The principles of minimization, separation, and "collect nothing superfluous".

4. Identity and trust level. The people's own identity-verification system, the issuance and accounting of non-transferable identity tokens, the recording of the Declaration's signing. This layer is isolated and protected to the maximum degree.

5. Level of the economy of participation. The infrastructure of the unit of account, the common fund, the distribution of rewards, integration with projects and Cells.

6. DAO integration level. The interfaces and protocols through which decisions of the Assembly are reflected in the work of the platform: settings, access rights, economic parameters, development priorities.

The layers evolve separately: the application level can be updated without touching identity, and economic mechanisms can be changed without affecting the DAO core.

Who operates the platform

Technical operation is provided by the Core Nodes - elected technical coordinators (Charter, Article 2). They maintain the infrastructure and are responsible for cybersecurity and technical support of voting, but they take no decisions on behalf of the people, do not manage finances, have no special weight in votes, and cannot block DAO decisions. They are recalled by a simple majority at any time.

The Emergency Multisig (Charter, Article 3) is entitled to suspend particular smart contracts when a critical vulnerability or a cyberattack is discovered. Every such action requires a public report within 48 hours and confirmation by the Assembly within 7 days, failing which it is reversed.

No other persons or structures with technical powers over the platform exist.

On AI

At the initial stage the platform uses existing artificial-intelligence models to analyse initiatives, support projects, and automate routine work. In the longer term, developing an in-house model adapted to the people's tasks is under consideration.

The limits on the use of AI are set by Article 10 of the Declaration: no digital architecture can justify hidden manipulation or the suppression of human autonomy. Hence three strict rules that apply whichever model is used:

• AI decides nothing. Any output it produces is advisory and is not a ground for refusal.
• Reasons are disclosed. A person whose initiative AI has flagged receives a statement of the reasons in intelligible form, not a refusal without explanation.
• Human review is guaranteed. The initiator is entitled to demand review by a human being, and such review is carried out within a set period.

Identity is built around a non-transferable digital passport (SBT) linked to a confirmed person. A strict separation is observed:

• biometrics and documents are processed by the people's own identity-verification system in real time;
• the platform receives only the fact that verification succeeded, not raw biometric data or scans;
• after verification, a passport confirming the participant's status is issued to their address;
• one person, one passport; the passport is not transferred, not sold, and not taken away.

Separating the axes: identity, vote, economy

The architecture requires that identity, the vote, and the economic trace not merge into a single point of power:

• identity is set by the passport and by identity verification;
• the vote follows from earthling status: one person, one vote;
• economic activity is reflected in the unit of account and gives no additional votes, whatever its volume.

Burning a passport

As a general rule a passport is burned only by the holder themselves, with their own key, from their own wallet. The platform stores no participant keys and is technically unable either to perform the burning for them or to prevent it.

The Charter (Article 21) establishes two and only two exceptions, which the platform is obliged to support and is not entitled to extend:

1. annulment of an invalid issuance - where it is established that the passport was issued in breach of the conditions of issuance; only by decision of the Assembly with a sanction majority, by secret ballot, with a right of appeal;
2. technical reissue - at the holder's own request on loss of access to a wallet or on migration of the contract; membership is not interrupted.

No other grounds for burning against the holder's will are implemented in the platform. The death of the holder is not among them: the platform does not and cannot hold information about deaths, and the ending of participation is handled by the inactivity mechanism (Charter, Article 20).

The personal account is a person's principal point of contact with the ecosystem.

Main elements of the profile

• the earthling pseudonym - a public name in the ecosystem;
• country of residence or of belonging - at the participant's choice;
• status of the Declaration's signing;
• a mark that a passport is held, without disclosing personal data;
• areas of interest and competence - optional.

Marks of participation

• participation in Cells;
• participation in projects: role, contribution, completion status;
• participation in votes - to the extent set by the rules on openness and secrecy (section 06);
• recognition marks received.

What the account does not contain

Passport data, biometrics, and sensitive legal attributes are neither displayed nor stored. They remain in the identity-verification system and are not retained after verification. The platform works with a pseudonym, a mark that a passport is held, and aggregated indicators of participation.

Photographs and scans are not retained; biometrics are processed only at the moment of verification. What exactly is retained to prevent repeat registration is in the Biometric Verification Policy.

The platform supports the full cycle: from the appearance of an idea to the completion of a project.

1. Project application. Any earthling may propose a project through their personal account. The application includes a description of the subject, the aim, the expected effect, the competences required, and the horizon of delivery. The initial analysis is performed by AI - for conformity with the Declaration, with ethics, and with priorities - and this analysis is advisory: it constitutes no refusal, the reasons are disclosed, and review by a human being is guaranteed (section 02).

2. Notification of relevant participants. After the initial analysis the application is directed to those whose declared competences match it - lawyers, engineers, programmers, analysts, and others.

3. Forming the Cell. The Cell is formed from those who respond. Size is from 2 to 6 people (Charter, Article 23). If a task requires more people, several linked Cells are created rather than one unwieldy one.

4. Coordination and delivery. A task board, timelines, communication channels, stage reporting, integration with document storage and supporting tools.

5. Completion and recording. The platform records the result, distributes rewards where they are provided for, updates the status of participants, and reflects the project's contribution on the general map of activity.

The platform is the main interface for the practical use of the unit of account. The separation between economy and power is observed strictly.

Internal uses

• reward for contribution to projects and Cells;
• management of internal funds;
• payment for access to particular services and tools;
• support for initiatives: micro-grants, experiments, pilot programmes.

What the unit of account does not do

• it gives no additional votes and no political weight;
• it does not determine access to basic participation: signing the Declaration, voting, discussions;
• it does not affect a proposal's place in the feed or the priority of its consideration;
• it cannot be used as an instrument of pressure or of excluding people from processes;
• it does not replace national currencies and is not imposed as a means of everyday settlement.

The unit of account reflects contribution and makes it possible to launch projects, but it does not divide people into the important and the unimportant. The platform ensures that economic logic does not destroy equality of participation.

The platform is built with the principles of the GDPR and comparable standards in mind. The starting principle: preserving human dignity and the right to a private life matters more than the convenience of analytics.

Main principles

• minimization - only what is genuinely necessary is collected;
• separation - identity, participation, economy, and analytics are spread across layers and stores;
• transparency - a participant understands what data about them exists and how it is used;
• control - a participant may request correction or deletion of the data processed by the platform.

What happens to data in the distributed ledger

Honesty is needed here, not a promise that cannot be kept.

Data held in the platform's databases are corrected and deleted at a participant's request. Entries in a distributed ledger are by their nature not deletable - and that is precisely why there are no personal data in it: they hold pseudonymous addresses and marks of actions, not a name, not a document, and not biometrics.

On exit the passport is burned, and a pseudonymous mark remains in the ledger recording that membership existed during a particular period. This is a fact of the past, not a continuing membership. This model matches the practice settled in European disputes over church registers: the entry is preserved; the status is marked.

Freedom of association does not require the erasure of history: renouncing citizenship does not destroy state archives.

Identity verification and data protection

• biometrics and documents are processed by the people's own system at the moment of verification; images and scans are not retained;
• the platform receives only the technical result: success or failure;
• on requests from state authorities, the people may confirm the fact of a participant's status where there are lawful grounds, but does not disclose biometric data, which it does not hold;
• entries in the registry follow the principle of pseudonymity and of minimizing personal links.

The platform is not built as a system of total record-keeping. It aims to become an example of careful handling of data in an age when almost everything is technically possible.

Particular technologies - blockchains, databases, languages, frameworks - may change. What matters is the architectural logic:

• modularity - the core, the identity subsystem, the DAO component, the economic layer, and the interfaces develop independently;
• scalability - the architecture is designed for growth in membership by orders of magnitude without loss of availability or security;
• resilience - fault-tolerant configurations, backup stores, independent nodes;
• recovery - backup copying, a recovery plan for critical failures, protocols for action when keys are compromised;
• auditability - the possibility of external technical and legal audit of key components.

The platform is not tied forever to a single technology stack. Through any migration the principles are preserved: non-transferable identity, an equal inalienable vote, verifiability of processes, and protection of the person.

Both how the target architecture is arranged and how it is to be reached are essential.

Stage 1. The core - built and deployed. The personal account, signing the Declaration, the map of projects, Cell statuses, the voting mechanism, integration with the people's own identity-verification system. The minimum of functions sufficient to begin.

Stage 2. Cells and projects - built and deployed. The cycle of work with Cells: applications, formation, delivery, recording of results. Supporting AI tools for analysing initiatives.

Stage 3. Filling it with practice - still ahead. Regular substantive votes, a secret ballot with a verifiable count, delegation by area, working funds, a wider range of uses for the unit of account. Filling begins when entry opens and proceeds as the number of participants grows.

Stage 4. External engagement - still ahead. Engagement with international organizations, universities, and research centres. Provision of aggregated data for the analysis of global processes. Participation of the people in discussing questions that go beyond a single country.

The division into what is built and what is still ahead is given honestly: the infrastructure exists and has been tested in a working environment, but its evidentiary and practical value arises as participation accumulates, not at the moment of deployment.