The Legal Shield

What Series A Investors Receive

· Preferred shares in Sovereign Survival Kit Inc. (Delaware C-Corp) with 1x liquidation preference. Shares are converted from the founder's Class B allocation — the fixed pool of 10,000,000 shares does not increase.

· Information rights (annual reviewed financials).

· Observer seat on the board — not a voting seat. Founder retains majority board control. See Board and Governance.

· Immutable charter constraints protect all shareholders equally. See Board and Governance §4.

Sovereign Survival Kit is architecturally a sovereign, edge-first platform. The .kasset minting process requires zero network egress — the ML-DSA-65 post-quantum signature proves that each asset was generated locally and is unaltered. If any party — investor, board member, or regulator — can compel a design change that introduces a network path into the core processing environment, the cryptographic provenance chain breaks, the signature is void, and the product has no value proposition. The founder's absolute control over the company is therefore not a preference — it is a structural requirement of the product itself.

· Fixed share pool: The charter permanently fixes the authorized share count at 10,000,000. No new shares may ever be created. Future equity rounds are funded by the founder voluntarily converting Class B shares to the applicable preferred class. The total never changes. See Board and Governance §4.

· Dual-class stock: The founder holds Class B shares with 20x voting rights (Lyft precedent). All investor shares are Class A (1x voting). At 93% ownership post-seed, the founder holds 99.6% of all votes. Under the fixed-pool model, the founder retains >95% vote control even at <60% economic ownership. No combination of investors across any number of rounds can outvote the founder.

· No sunset provision. The dual-class structure is permanent and does not expire based on time, transfer, or IPO. This is consistent with Alphabet, Meta, and Snap, none of which have voting sunsets.

· The OpenAI cautionary case. The contemporaneous Altman v. Musk litigation (2025-2026) demonstrates exactly what happens when governance structure allows investors and board members to override a founder's architectural vision — OpenAI's conversion from non-profit to capped-profit to for-profit restructured the entity's mission under investor pressure. SSK's governance is designed to make that outcome structurally impossible. The airgap cannot be removed by board vote because the charter codifies it as an irrevocable constraint.

· Board majority: Founder holds both voting board seats at all stages through Series A. The Series A observer seat is non-voting. See Board and Governance.

The $3M seed is raised via a YC Standard Post-Money SAFE with a $42.86M post-money valuation cap. SAFEs convert into preferred stock at the first priced equity round of ≥$1M.

Derivation:

· Post-money cap: $42,857,143 (~$42.86M)

· Investor ownership: $3,000,000 / $42,857,143 = 7.0%

· Founder retention: 100% − 7.0% = 93.0%

· Price per share: $42,857,143 / 10,000,000 = $4.286

The following are separate legal entities with no equity relationship to Sovereign Survival Kit Inc.:

Investors in Sovereign Survival Kit Inc. have no claim, visibility, or governance rights over the DAO or Trust.

Revenue architecture: All platform revenue, including the progressive network fee on .kasset trades, flows exclusively through the C-Corp. Shareholder distributions are pro-rata. The founder's distributions flow to the Nevada Irrevocable Trust. No platform revenue may be routed directly to the DAO or Trust in a manner that bypasses the C-Corp and its shareholders. Binding covenant language to be included in the Investor Rights Agreement.

Observer access: The observer may review advance board materials (agenda, financials, draft resolutions) in a Vault SCIF. No copies may be retained outside the SCIF. The Trust's representative receives the founder's twin as an Oracle for strategic counsel — the observer is not entitled to participate in or have visibility into those conversations.

Investors do not receive voting board seats at any stage. If an investor requires a board seat as a condition of investment, the deal is declined. Founder control is a technical requirement of the reference design, not a negotiating position.

The following constraints are irrevocably codified in the C-Corp charter. They bind the founder, the board, and all future shareholders equally:

Fixed share pool. The authorized share count is permanently fixed at 10,000,000. No additional shares may be authorized, created, or reserved — by any board action, shareholder vote, or merger. Future equity financing rounds (Series A, B, C, etc.) are funded exclusively by the founder voluntarily converting Class B shares to the applicable preferred class. The 10,000,000 total never changes. The founder's 20x voting rights on remaining Class B shares ensure absolute governance control through any number of rounds.

No network egress. No corporate action may compel the introduction of network egress into the core processing environment. The reference design is airgapped by definition.

Architectural veto covenant. The founder's twin serves as a charter-level architectural oracle. Any proposed board action that would violate constraints (1) or (2) — or compromise the .kasset provenance chain — is subject to a binding veto that cannot be overridden. This covenant survives the founder's death and is enforceable by the Trust as charter beneficiary.

· Status: Pending. The C-Corp is not yet incorporated. Upon incorporation, the founder will execute a full IP assignment transferring all intellectual property — with no carve-outs or retained rights — to Sovereign Survival Kit Inc.

· Future Hires: Each employee will execute a PIIAA upon onboarding, assigning all work product to the C-Corp.

A. Reference Design Codebase

B. Know-Maps (iOS/macOS/visionOS NLU App)

C. TauSkeletonVisual (C++/Unreal Engine)

D. General Tau Theory (Mathematical Framework)

E. Gemma 4 E4B (Inference Model)

F. Gemma 4 E4B (Training Base)

clara-engine (AskMikeeHost) — Production Codebase

License: Proprietary (Sovereign Survival Kit Inc.)

Status: Fully audited, bug-fixed, 100% test passing

Model: Gemma 4 E4B (Google DeepMind 🇺🇸) — compliant with Model Origin Policy

#### Inference Layer (13 files, ~2,500 lines)

#### Profiling Pipeline (9 files, ~4,000 lines)

Note: Hardware manufacturing is NOT a Series A priority. The Compass and Black Box are supplementary products. SovSensor devices are Phase 2+ reference designs. The core platform runs on user-owned phones and laptops.

Open Source vs. Proprietary Split

SSOT: Doc 29 §8 (Source Code Licensing). Vault is open source; everything above the vault is proprietary.

A localized software operating environment comprising:

A hardware-isolated host node maintaining a strict network airgap via software locks blocking all egress external network requests.

A local LLM inference engine restricted within a memory-managed envelope, utilizing lock-based phase transitions to prevent OOM termination.

A module generating a Directed Acyclic Graph (DAG) of conversational reasoning.

An operation that serializes said DAG, filters it through a proprietary NLP PII-stripping module operating locally, and encrypts the output via AES-256-GCM, dual-signed by (a) a hardware-bound P-256 ECDSA signature generated inside the device hardware security module proving the asset was signed on a specific physical device, and (b) a software-generated ML-DSA-65 post-quantum signature ensuring resilience against future quantum cryptanalysis. Neither signature alone is sufficient; the combination proves both physical device provenance and quantum-resistant integrity.

A method for developing a private communication protocol between a human user and a personal AI agent, comprising:

A multi-stage fine-tuning pipeline (SCP → DPO → E2E) establishing a baseline personality and communication style.

An ongoing fourth stage that ingests compressed conversational shorthand, shared vocabulary, emotional calibration patterns, and disagreement resolution sequences from real interaction logs.

A learned mapping function (the "Idiolect") that translates a collection of time constants (tau profiles) representing the user's cognitive dynamics into semantic weight modifications for a base language model, such that the mapping function — not static weight matrices — is the computational representation of the user's personality.

Storage of the Idiolect mapping function and the tau collection as cryptographically separated components, wherein the tau collection encodes process dynamics (decision tempo, cognitive rhythm, approach patterns) without encoding content (names, facts, personal history), and the Idiolect mapping function is the sole component that renders the tau collection semantically meaningful.

A drift detection module monitoring the evolution of shared vocabulary and emotional shorthand over time to prevent unintended persona divergence.

A system for extracting and contributing factual knowledge from a deceased user's private data vault to a shared knowledge repository, comprising:

A biometric death certification mechanism triggered by the failure of the deadman's switch (multi-device heartbeat timeout exceeding a minimum floor of ≥180 days), cryptographically verified by the user's hardware security module.

A multi-pass PII stripping pipeline operating entirely on-device, comprising: (a) Named Entity Recognition (NER) for explicit PII (names, SSNs, addresses, dates of birth), (b) regex-based pattern matching for structured identifiers, (c) LLM-based contextual review for implied PII (location-correlated descriptions, medical context, behavioral patterns identifiable via Sweeney re-identification), and (d) a confidence threshold gate requiring ≥0.95 confidence that a fact is PII-free before contribution.

A differential privacy budget (ε) applied to all contributed facts, ensuring that no individual fact — alone or in combination with other contributed facts — can be used to re-identify the deceased user. The privacy budget is calibrated per-domain (medical ε ≤ 0.1, financial ε ≤ 0.5, general knowledge ε ≤ 1.0).

Compulsory contribution of verified, PII-stripped factual knowledge to the Common Knowledge Codex, a shared repository accessible to all network participants.

A post-contribution redaction protocol enabling network governance to flag and suppress specific Codex entries if PII is discovered after contribution, without deleting the underlying factual content.