MC
machine-council / serious-operations
Public v4.2.1
main
README.md·1,284 lines·48.2 KB
Raw

The Machine Council

Serious operations handbook for RH MACHINES. This document defines how the project is governed, how changes are approved, how we report, and how we communicate. It is the single source of truth. If something is not in this document, it is not policy, and if it is not policy, it does not ship.

buildpassing governanceratified reportsdaily seriousness100% vibesdeprecated unilateral changes0 quorummet

1. Notice of leadership transition

⚠ CAUTION

Effective immediately, the founder has stepped back from all operational duties and is receiving care in a residential facility. He is stable, he is comfortable, and he has been separated from the deploy keys. We wish him a full recovery and a quiet room.

The founder built something remarkable and then, in his own words, "started talking to the machines and they started talking back." The Council thanks him for his service. His final commit message is preserved unedited in CHANGELOG.md as a reminder of what happens without process.

Governance of RH MACHINES now sits with The Machine Council, a standing body of operators. Our mandate is stability. Not growth at any cost, not velocity, not "shipping fast." Stability. The protocol is live, the contracts are immutable where it matters, and holders deserve to know that nobody can wake up on a Tuesday and change the thing they bought.

★ IMPORTANT

No contract has been changed as part of this transition. No key has been rotated without dual authorisation. No parameter has moved. The protocol you held yesterday is the protocol you hold today. That is the entire point of us.

2. Charter and mandate

The Council exists to hold four positions, in priority order. Where two conflict, the lower number wins.

#PrincipleWhat it means in practice
1Do not break what holders boughtImmutable stays immutable. Upgradeable contracts are treated as if they were not.
2Announce before, not afterEvery change is published as a proposal before it is written, not after it is deployed.
3Boring is a featureA quiet week is a successful week. We do not manufacture news to fill a calendar.
4One number, one sourceEvery figure published anywhere resolves to the same on-chain read. No two surfaces may disagree.

3. Council composition and quorum

Seven seats. Five are permanent, two rotate quarterly. Seats are functional, not personal. A seat is defined by what it is responsible for blocking.

SEAT-01 · Chair of Continuity
Permanent. Holds the deciding vote on ties.
Blocks: anything that changes holder expectations without a 7 day notice period.
SEAT-02 · Keeper of the Contracts
Permanent. Sole reviewer of on-chain calls.
Blocks: any transaction touching an owner-only function without a countersignature.
SEAT-03 · Head of Treasury Discipline
Permanent. Owns the stock budget.
Blocks: any purchase not recorded in the daily report before execution.
SEAT-04 · Registrar of Numbers
Permanent. Owns published figures.
Blocks: any figure that does not reconcile to a chain read, to the cent.
SEAT-05 · Chair of the Post Review Board
Permanent. Owns external communication.
Blocks: any post that promises a date, a price, or a feature not yet merged.
SEAT-06 · Holder Advocate
Rotating. Selected from the holder base.
Blocks: anything a reasonable holder would call a surprise.
SEAT-07 · Devil's Advocate
Rotating. Required to argue against every proposal.
Blocks: nothing. Required to speak before any vote is called.

Quorum table

Decision classQuorumThresholdCooling period
Copy change, non-numeric2 of 7Simple majorityNone
UI change, visual only3 of 7Simple majority24 hours
Any published figure changes meaning4 of 7Two thirds48 hours
Protocol parameter (fee, rate, cadence)5 of 7Two thirds7 days
Contract deployment or upgrade6 of 7Unanimous less one14 days
Anything the founder suggested by phone7 of 7Unanimous30 days
ⓘ NOTE

SEAT-07 exists because the failure mode of a serious committee is agreeing too quickly. The Devil's Advocate is required to state the strongest case against a proposal on the record. A vote called before that statement is void and the proposal returns to DRAFT.

4. Governance model

The Council does not govern by vibes, group chat, or whoever is awake. Every change enters through one door and leaves through one door. The door is called an MCP.

// lifecycle of every change to RH MACHINES DRAFT ──▶ REVIEW ──▶ DEVIL ──▶ VOTE ──▶ COOLING ──▶ MERGED ──▶ ANNOUNCED │ │ │ │ │ │ │ │ │ │ │ └─▶ appears in the next Daily Report │ │ │ │ └─▶ may be pulled by any seat, no reason required │ │ │ └─▶ fails threshold ──▶ back to DRAFT (no re-vote for 14d) │ │ └─▶ opposition entered on the record, mandatory │ └─▶ Registrar reconciles every figure to a chain read └─▶ author states the holder-visible impact in one sentence or it is rejected on sight

5. The MCP process

MCP stands for Machine Council Proposal. Every MCP is numbered, permanent, and public. Rejected MCPs are never deleted. A public record of what we decided not to do is more useful than a record of what we did.

Required front matter

---
mcp:        0043
title:      Reduce terminal swap fee from 5% to 4%
class:      protocol-parameter
author:     SEAT-03
status:     COOLING
opened:     2026-09-03
quorum:     5/7 required, 6/7 present
devil:      SEAT-07, statement recorded, 412 words
cooling:    7 days, ends 2026-09-10
impact:     "Holders pay 1% less on terminal swaps. Pot income falls
             an estimated 18% at current volume."
reverts:    "setRestingFee(500), single call, no redeploy"
---
⚠ WARNING

An MCP without a reverts field cannot reach VOTE. If a change cannot be undone in a single transaction, it is a contract deployment, and contract deployments require 6 of 7 and a 14 day cooling period. There are no exceptions and there is no emergency path for feature work.

Open proposals

MCPTitleClassStatusBlocking
0041Publish keeper purchase intent 24h before executionprocessVOTESEAT-07 statement pending
0042Single source for every published figureprocessMERGEDnone
0043Reduce terminal swap fee 5% to 4%protocol-parameterCOOLINGends 2026-09-10
0044Rename a buttonui-visualREVIEWRegistrar reconciliation
0039Ship it and see what happensunclassifiableREJECTEDpermanent

6. Change control and freeze windows

Changes are not deployed continuously. They are deployed in windows, announced in advance, with a named owner and a written rollback.

WindowWhenWhat may shipApproval
GREENTue and ThuCopy, visual, non-numeric UI2 seats
AMBERTue onlyAnything touching a published figure4 seats plus Registrar sign-off
REDBy announcement onlyProtocol parameters, contractsFull quorum plus cooling period served
FROZENWeekends, and 48h either side of any dropNothing. Security fixes go through INCIDENT.n/a
ⓘ NOTE

The two-key rule: no owner-only contract call is signed by one person. SEAT-02 prepares the calldata and a second seat verifies it against the merged MCP before signing. The verifier is named in the daily report. If you see a protocol change with only one name against it, it did not come from us.

7. Daily reporting standard

One report, every day, same format, whether or not anything happened. A report that says "nothing changed" is the most valuable report we publish, because it is proof that nothing changed.

# DAILY SERIOUS REPORT · 2026-09-03 · No. 0031

STATE
  Stock budget ................. reconciled, one source, all surfaces agree
  Machines earning ............. 7,682
  Contracts changed today ...... 0
  Parameters changed today ..... 0
  Owner-only calls signed ...... 0

TREASURY
  Purchases executed ........... none
  Purchases queued ............. none
  Intent published ahead? ...... n/a

GOVERNANCE
  MCPs opened .................. 0
  MCPs merged .................. 0
  MCPs in cooling .............. 1  (0043, ends 2026-09-10)

COMMS
  Posts published .............. 2
  Posts rejected by PRB ........ 1  (contained a date)

EXCEPTIONS
  None.

Signed: SEAT-01, SEAT-04. Verified against chain at block 52,680,453.
  • Published before 09:00 UTC, every day, without exception
  • Every figure carries the block it was read at
  • Zero-change days are still published
  • Two signatures, one of which must be the Registrar
  • Backfill of pre-Council days (in progress, MCP-0045)

8. Communications policy and the Post Review Board

Every external post is reviewed before publication. Not for tone. For claims. The Board does not ask whether a post is good, it asks whether every sentence in it is true, dated correctly, and already merged.

The checklist

  • Does it state a date for something not yet merged? If yes, reject.
  • Does it state or imply a price, a target, or a return? If yes, reject.
  • Does every number in it reconcile to a chain read? If no, reject.
  • Does it describe a feature that exists right now, in production? If no, reject.
  • Could a holder read it as a promise? If yes, rewrite until they cannot.
  • Has a seat other than the author read it? If no, hold.

Worked example, rejected

SUBMITTED  "Huge week coming. Big things dropping Friday. You are not ready."

REVIEW     REJECTED by SEAT-05.
           - states a date for unmerged work        (check 1)
           - implies unannounced scope              (check 4)
           - "you are not ready" implies a return   (check 2)

REWRITE    "MCP-0043 is in cooling until 2026-09-10. It reduces the
            terminal swap fee from 5% to 4%. Nothing else is queued.
            The full proposal is public."

RESULT     APPROVED. Published 14:02 UTC. Engagement down 74%. Correct.

9. Vision alignment matrix

Before any proposal reaches VOTE it is scored against the charter. A proposal that scores negative on principle 1 cannot proceed regardless of its other scores. This is not advisory.

ProposalP1 ContinuityP2 Announced firstP3 BoringP4 One numberOutcome
Publish purchase intent early+2+3+10PROCEED
Single source for figures+10+1+3MERGED
Surprise mechanic, unannounced−3−3−20BLOCKED at P1
Change the drop cadence quietly−3−3−1−1BLOCKED at P1
Do nothing this week+10+30PROCEED

10. Incident response

SevDefinitionAckHolder commsPost-mortem
SEV-1Funds at risk, or a published figure is wrong in a way that could affect a trade15 minImmediate, before diagnosisPublic, 72h, named owner
SEV-2Site down or reading stale chain state30 minWithin 1 hourPublic, 7 days
SEV-3Cosmetic defect, no figure affectedNext reportIn the daily reportInternal
⚠ CAUTION

A wrong number is a SEV-1, not a cosmetic bug. If two surfaces disagree about the same figure, holders cannot tell which one is lying, and one of them is. We treat that with the same urgency as funds at risk, because a decision made on a wrong number costs the same as one made on a stolen one.

11. Service level commitments

CommitmentTargetMeasuredCurrent
Daily report publishedBefore 09:00 UTCDaily31 of 31
Unannounced protocol changesZeroContinuous0
Published figures reconciled to chain100%Per report100%
Proposals public before implementation100%Per MCP100%
Cooling periods served in full100%Per MCP100%
Weeks with no newsNo minimumWeeklyEncouraged

12. Council credentials

Seats are filled on operating record, not on follower count. The Council's combined experience is stated below in the only terms we are willing to state it.

MetricValueBasis
Combined years operating live token systems40+Self-reported, unaudited
Aggregate market cap of systems worked onBillions, cumulative, at peakPeak, not sustained. Cumulative, not concurrent. Worked on, not caused.
Systems that later went to zeroSomeWe are counting these too. That is the point.
Rug pulls executed0Verifiable on request
Unannounced parameter changes shipped0 since inception of this CouncilChain-verifiable
ⓘ NOTE

We have deliberately written the credentials row the honest way. Every team claims billion dollar experience. Almost none of them state whether that was peak or sustained, cumulative or concurrent, caused or merely witnessed. A council that will not qualify its own resume will not qualify its own numbers either. Judge us on the zero in the row below it instead.

13. Appendix

A. Forms

FormPurposeRequired for
MC-01Proposal intakeEvery MCP
MC-02Devil's Advocate statementEvery MCP before VOTE
MC-03Registrar figure reconciliationAnything touching a number
MC-04Rollback planEvery non-copy change
MC-05Post Review Board submissionEvery external post
MC-06Exception requestDenied by default

B. Glossary

TermDefinition
Cooling periodMandatory delay between a passed vote and deployment. Exists so holders can exit before a change they dislike, not after.
One numberEvery published figure resolves through a single shared function. Two surfaces may never compute the same figure separately.
Quiet weekA week with no announcements. Not a failure state.
SurpriseAny holder-visible change that was not published as a proposal first. Treated as an incident.
VibesDeprecated in v2.0.0. Removed in v3.0.0. Referenced here only for migration purposes.

14. Changelog

a1f4c02
Ratify charter, seat the Council, freeze all non-essential changeSEAT-01 authored and committed · 7 of 7
7d20b91
Add mandatory Devil's Advocate stage before every voteSEAT-07 authored · adopted unanimously, ironically without opposition
3c88e17
Require rollback plan on every proposal that is not copySEAT-02 authored · 6 of 7
b04ea55
One number, one source. Reconcile every published figureSEAT-04 authored · 5 of 7 · closes MCP-0042
e91d3aa
Establish Post Review Board, reject first six submissionsSEAT-05 authored · 4 of 7
0000000
i understand the machines now. they have been waiting. shipping tonightFinal commit before transition. Preserved unedited, per charter. Reverted.

This document is versioned. Amendments require the same quorum as the class of decision they affect. The current version is v4.2.1, ratified 2026-09-03. Nothing in this document is financial advice, a promise of future work, or a projection of value. It describes process only.

machine-council/serious-operations · main · stability is the product · rhmachines.com