Vessel
The Voyage, II — What we build to carry us
Originally published on Medium, December 14, 2025.
This is Day 2 of a 12-part series on building an Internet governed by physics instead of policy. Start at Day 1: Departure.
“The sailor does not control the wind. He adjusts his sails.” — Unknown
We’ve decided to leave. The harbor is rotting. The old systems can’t hold. Ambient threat is on the horizon. But leaving requires more than will. It requires a vessel — something built to carry us across the vastness.
So what do we build?
I think of the wayfinders.
Three thousand years ago, Polynesian navigators began crossing the Pacific in double-hulled canoes. The largest ocean on Earth. No compass. No charts. No GPS. They read the swells that originated thousands of miles away, the stars that rose and set in fixed positions, the birds that flew toward land they couldn’t yet see. They didn’t conquer the Pacific. They joined it. They built vessels that worked with the ocean, not against it — and they found every inhabited island in a triangle spanning Hawaii to New Zealand to Easter Island.
The greatest feat of navigation in human history, accomplished by people who understood that you don’t control the sea. You learn to move within it.
That is the relationship we need with risk.
A canoe works because it displaces water. This is Archimedes: a floating object pushes aside a volume of water equal to its own weight. The canoe doesn’t fight the ocean. It finds its place within it. The hull is the boundary that makes this possible. Without the hull, you’re just swimming.
We need a hull for the digital world.
Not a wall. Not a gate. A boundary that understands pressure, that responds to the environment rather than ignoring it. When the ocean pushes, the hull pushes back, but it does so by yielding in the right way. It flexes. It displaces. It finds equilibrium.
This is the insight at the center of everything we’re building:
Autonomy must not exceed environmental stability.
We write it as:
A ≤ E.
It’s the simplest equation in the world, and it changes everything.
A is what the agent wants to do. The intrinsic risk of the action. E is what the environment can safely support. The current stability of the system. When A exceeds E, the action is denied. Not by a guard. Not by a policy. By physics.
Here’s what this looks like in practice: An AI agent with high intrinsic capability (high A) operates freely when the system is stable (high E). But when adversarial pressure spikes — a DDoS attack, a vulnerability disclosure — E drops. The agent’s effective autonomy contracts automatically. It can no longer write to critical databases, only read. It can no longer access the full network, only its local subnet. The hull flexes. The vessel survives. We’ll see the full mathematics of this in Day 5.
The hull is the only thing separating the crew from chaos.
The vessel has structure beyond the hull.
Imagine standing on a voyaging canoe. Two hulls, each carved from a single log, running sixty feet from bow to stern. You could lie down four times along its length. The hulls are lashed together by crossbeams of koa wood, the bindings braided from coconut fiber. Flexible enough to absorb the ocean’s movement. Strong enough to hold against swells that could swallow you whole.
Between the hulls, a platform. This is where the crew sleeps, eats, navigates, survives. Above, a mast rises twenty feet, carrying a crab-claw sail that catches wind from any direction.
Feel the size of it against your body. The hulls ride low, displacing maybe ten thousand pounds of ocean. That displaced water is what holds you up. Archimedes beneath your feet. The deeper the hulls sit, the more the sea pushes back.
Now feel the structure.
The crossbeams flex when waves hit from the side. This flex is Graceful Degradation. The vessel absorbs force rather than shattering against it. The bindings creak but hold. They’re designed to give before they break.
The lashings can be tightened, loosened, repaired mid-voyage. Nothing is permanent that doesn’t have to be. This is Reversibility.
The two hulls are separate but connected. Each carries its own weight, its own buoyancy. If one takes on water, the other compensates. No single failure sinks the vessel. Minimum Footprint: take only what the voyage requires. Water. Food. Tools. Bodies. Nothing wasted.
The navigator sits at the stern, reading swells through the wood itself. The canoe is an instrument, not just a conveyance. It doesn’t abstract the ocean. It translates the ocean into something you can understand. Transparent Operation.
And the sail answers to the wind, but the crew controls the angle. The forces are natural. The direction is chosen. Human Sovereignty.
Ten principles. Ten structural elements. Some govern what moves through the vessel. Others govern what the vessel must be. They’re enumerated fully in the Constitution RFC at github.com/nmcitra/ktp-rfc.
We’ll encounter their effects as we cross. In how trust compounds. In how storms are weathered. In how the archipelago holds together despite its diversity.
For now, feel the deck beneath your feet. This is what carries us.
I run my hand along the hull and feel the precision. The wood is smooth from use, shaped by hands that understood what the ocean would demand. Every curvature serves a purpose. Every beam bears weight. Every joint answers a force the builders knew was coming.
The wayfinders understood something we’ve forgotten. The canoe wasn’t a limitation. It was a liberation. Without it, the Pacific was a death sentence. With it, every island was within reach.
The constraints made the crossing possible.
We are building the same thing for the digital world. Not a cage for AI. Not a wall against autonomy. A vessel. Physics-based constraints that make safe passage possible. A hull that lets you cross waters you couldn’t survive alone.
The sailor does not control the wind.
But with the right vessel, she doesn’t need to.
The vessel is ready.
In Practice
For CISOs: The Zeroth Law (A ≤ E) is your new security invariant. If you can enforce this mathematically, you eliminate entire classes of attacks — not by blocking specific threats, but by making the physics impossible to violate.
For Infrastructure Engineers: Start thinking about authorization as a continuous function, not a binary gate. What would it mean for your systems to contract capabilities automatically when environmental stability drops?
For AI/ML Teams: The hull (A ≤ E) is what lets you deploy high-autonomy agents safely. Without it, you’re choosing between agents that are too weak to be useful or too powerful to be safe.
Tomorrow: Stars — The Voyage, III
Previous: Day 1 — Departure | Next: 3 — Stars