Civic Kernel · a thin protocol for public decisions

It will not democratise your firm. It will make your firm legible.

The machinery — counts anyone can verify, rules that cite themselves, a record nobody can quietly rewrite — does not care whether the community it serves is a nation, a workforce, or a shareholder register. What changes is only what you must declare.

The evidence first

Five documented business wrongs, triaged

Each entered the same triage that ranks the civic corpus: a real citation at the door, substance refused on principle, and a score — reach × leverage — that shows its inputs. One of the five lands at the very top of the whole table, beside Horizon — and all five are now walked in full as machine-validated scenarios, every verdict a strain, every limit named on its page.

The count nobody can check shareholder-vote-plumbing · 3 × 3 = 9

Corporate elections pass through chains of custodians no outsider can audit. In the Dole Foods settlement a Delaware court met a third more facially valid claims than there were shares in existence; Procter & Gamble's proxy fight reversed on a recount, inside plumbing nobody could independently re-walk. This is the kernel's home ground — an end-to-end verifiable count in an append-only register turns trust the intermediaries into check the tally. The Horizon lesson, applied to the ballot itself. Now encoded: the full walkthrough — a register forced to add up before ballots open, a flipped instruction caught the hour it lands, a 41,124-vote margin anyone can recompute.

Honest limit: one share, one vote is a weighted franchise. The equal-persons floor does not bind here — and the manifest below has to say so out loud. Verdict: strains — the counting holds; the strain lives in the franchise and the adopters.

Dismissed by a model, reasons withheld gig-deactivation-no-reasons · 3 × 2 = 6

Drivers deactivated by automated decision, no reason served, nothing to appeal — until a court in Amsterdam ordered explanations under data-protection law, years after the accounts went dark. Under the kernel every adverse decision cites the rule it acts under at the moment it acts, so a decision with no reason becomes a visible missing reason, dated and appealable from day one. The corpus already holds this wrong with the state as defendant: the welfare algorithm that could not say why. Now encoded: the full walkthrough — the trigger sealed but committed, the "purely symbolic" human review timed and published, the licensing cascade answered from the record.

Honest limit: it cannot judge whether the rule is fair or the model biased — it makes the missing reason a fact. Verdict: strains — thin review is measured, not cured, and lost days are repaid only where a rule says so.

A ballot inside the boss's power union-ballot-employer-interference · 2 × 2 = 4 ⚠

Mandatory meetings, watched infrastructure — and at Amazon's Bessemer warehouse, a regulator's finding of interference and an ordered rerun that ran under the same fear. Receipt-free ballots are the kernel's oldest discipline: nobody can prove their vote to anyone, so nodding along in the meeting costs nothing at the count. Now encoded: the full walkthrough — the mailbox abolished as a category, a watched cast unmade from a kitchen, a tally both adversaries co-sign.

Honest limit: retaliation operates outside the booth. The organiser dismissed before any ballot opens is a wrong no ballot design reaches — the triage carries the caveat, the scenario honours it. Verdict: strains.

Delisted, citing no rule marketplace-delisting-no-rule · 2 × 2 = 4

Sellers suspended with revenue held and no rule named — a wrong so routine the EU legislated a statement of reasons (Regulation 2019/1150) because platforms would not give one. The kernel's forms discipline is the same demand made structural: every demand cites its rule, rules change on notice with an expiry, and the rule change itself lands in the record. Now encoded: the full walkthrough — retroactive enforcement made arithmetic, the frozen money given an author and a clock, the confession industry starved of its market.

Honest limit: it binds platforms that adopt it, or that law compels. The EU shows the second path exists. Verdict: strains — the platform still writes the rules.

Member democracy in tiers coop-governance-opaque · 2 × 2 = 4

The Co-operative Group — owned by millions — ran its member democracy through tiers no member could follow or check, and was found "manifestly dysfunctional" (Myners, 2014) only at the point of near-collapse. This is the club-AGM machinery at scale: verifiable member votes, and layers whose every decision sits on a register a member can walk. Of the five, this is the one a willing adopter could run this year — a mutual chooses its own constitution. Now encoded: the full walkthrough — the motion that cannot vanish, the carpetbagger raid dated by arithmetic, the board act that cites its power.

Honest limit: legibility is not competence. The losses that nearly sank the Group were substance, and substance stays the members' problem. Verdict: strains — and the real movement, offered repair, chose less democracy instead.

The honest pitch

A manifest, not a makeover

Every adoption of the kernel must publish, in a form anyone's phone can read, exactly which parts it took and which it left out. Point that rule at a firm and it does something no governance code quite manages: it makes the firm's actual constitution legible. A company that adopts the ballot machinery does not become a democracy — it becomes checkable:

personhood: share register — weighted, one share one vote [subtraction] decisions: end-to-end verifiable · receipt-free [full] rights guard: none — employment law applies, externally [subtraction] record: append-only log, independently witnessed [full]

The subtraction is not a failure of the pitch; it is the pitch. What a firm claims about its own governance becomes something an employee, a shareholder, or a regulator can check against what it published — and what it will not grant sits on the page instead of in the fine print.

The refusals travel too

What it will not decide, in the office as anywhere

  • Whether the dismissal was fair, whether the union should win, what anyone ought to be paid — substance, refused. The kernel makes the decision and its reasons checkable; it never makes the judgment.
  • The refusal is not politeness. A machine that judged these would be worth capturing — by the employer first.

Where this starts

Small, willing, and checkable

Not with a listed company. The scores above point the long way — the shareholder count is the biggest wrong and the hardest adopter. The short way is the willing end: a mutual, a co-op, a members' club that chooses its own rules. The machinery for that already runs — the invitation and the run sheet for a shadow AGM, with the official result still decided the old way while the new record proves itself beside it.

And the same standing offer as everywhere on this site: the corpus these five have joined, the triage that scored them, and the game, if you think you can rig it.