The Exitarian Framework: Building Code for Open Doors
The Exitarian Framework: Building Code for Open Doors
The Institutional Immune System of Exitarianism
Markus Maiwald, 2026
This document does not tell you what to build. It tells you what every building must satisfy to not kill the people inside.
Preface: The Paul Problem
Jesus had a philosophy. Paul built an institution. The philosophy survived three years in its original form. The institution has survived two thousand; and it achieved this by doing exactly what the philosophy warned against. It created priests, locked doors, and made exit a sin called apostasy.
Every School of Thought faces the Paul Moment. Marx had his; it was Lenin. Libertarianism had its; it was the Libertarian Party. Bitcoin had its; it was the exchange ecosystem. The moment a philosophy moves from “here are the principles” to “here is the organization that embodies the principles,” the capture vector is born.
The Manifesto is the blade; it cuts through locked doors. The Foundation is the forge; it shows the metallurgy. This document is the immune system; the set of diagnostics that detect when doors are being locked, before the lock is finished.
It is not a blueprint. It does not prescribe governance, economics, culture, or structure. It defines five constraints that any institution must satisfy to remain Exitarian-compatible; and twelve diagnostics that detect when those constraints are being violated. The constraints are physics. Everything else is politics.
Build your commune. Build your corporation. Build your theocracy. Build your DAO. Build your street gang. Five constraints. Everything else is free.
PART I: THE FIVE CONSTRAINTS
These are the physics. They apply to every institution; from a two-person partnership to a civilization-spanning federation. They cannot be traded away, voted away, or contracted away. They are not recommendations. They are load-bearing walls. Remove any one and the building collapses on its inhabitants.
Constraint One: Exit Without Destruction
Departure must not destroy the departing agent’s capacity to continue existing as an autonomous agent.
This is the master constraint. All others derive from it.
Exit is not the mere absence of walls. A door that opens onto a cliff is not an exit. A departure that destroys your economic viability, erases your reputation, separates you from your children, or renders you unemployable is not exit. It is punishment for attempting exit; which is the most sophisticated lock available.
What this requires:
Exit must be survivable. The departing agent must retain sufficient resources, relationships, and capabilities to join or create an alternative arrangement. The standard is not comfort. The standard is not equivalence to what they had. The standard is: can they continue to function as an autonomous agent after departure?
What this prohibits:
Exit taxes that consume the majority of portable assets. Reputation destruction upon departure (“you’ll never work in this town again”). Custody arrangements designed to make departure equivalent to child abandonment. Non-compete clauses that prevent the exercise of the departing agent’s only marketable skill. Social ostracism campaigns organized by the institution against the departed.
The test: If a reasonable person, knowing the full cost of departure, would conclude that leaving is functionally equivalent to self-destruction; the door is locked. The sophistication of the lock is irrelevant. A lock made of economic consequences is as real as a lock made of steel.
Constraint Two: Portable Reputation
Contribution records must be owned by the contributor; portable, verifiable, and legible to outside parties.
This is the Legibility axiom made operational.
If your contribution is recorded only in the institution’s internal systems, in the institution’s proprietary format, legible only to the institution’s peers; you cannot carry it through the exit. When you leave, you leave empty-handed. The institution has extracted your labour and retained the proof. You start over. The cost of starting over is the invisible lock.
What this requires:
The contributor owns their contribution record. Not the institution. Not the platform. Not the employer. The contributor. The record must be in a format that other institutions can read without the original institution’s cooperation. If the record requires the issuer’s endorsement to be valid, it is not portable. It is a leash with a long chain.
What this prohibits:
Proprietary credential systems that are only recognized within the issuing institution’s network. Reputation scores that reset to zero upon departure. Contribution records that are deleted when membership ends. Reference systems that give the institution veto power over the departing agent’s history.
The Format Lock-in Diagnostic: A record is truly portable only if it is adversarially interoperable; legible even to institutions that compete with or are hostile to the issuer. If the record is only readable by the issuer’s allies, the exit is a trapdoor. You’ve left the room; but no other room will let you in.
Constraint Three: Transparent Rules
The complete rule set must be available to any member or prospective member; in language that does not require a priesthood to interpret.
Informed consent requires information. If you do not know the rules, you cannot assess whether the door is open. If the rules require a specialist to interpret, the specialist is a gatekeeper; and gatekeepers are capture vectors.
What this requires:
The rules fit on a postcard. Not literally; but the spirit of the rules must be communicable in minutes, not months. The full text must be available to anyone who asks. The implications of the rules must be derivable by an ordinary person without legal training.
What this prohibits:
Thirty-thousand-page regulatory codes that no single human can read. Terms of service that change without notice. Rules-within-rules that are only communicated to inner circles. Informal norms that override formal rules but are never written down. “Everyone knows” as a substitute for explicit documentation.
The Cognitive Load Test: If a new member cannot understand the conditions of departure within their first day, the institution has failed this constraint. Complexity is a lock. Jargon is a lock. “You’ll understand once you’ve been here a while” is the sound of a door closing slowly.
Constraint Four: Amendment Notice
Any change to the rules must include a notice period sufficient for affected members to exit before the new rules take effect.
This is the temporal defense against bait-and-switch. You joined under one set of rules. The rules changed. If the change takes effect immediately, you are now bound by rules you never consented to. Your original consent is void; but you are still inside.
What this requires:
A defined minimum notice period between the announcement of a rule change and its implementation. The period must be long enough for a member to assess the change, decide whether it violates their interests, and complete the departure process; including the transfer of portable reputation and assets.
What this prohibits:
Retroactive rule changes. Emergency powers that bypass notice periods permanently (temporary genuine emergencies may compress the period; but “temporary” must have an expiration date, not a promise). Silent amendments buried in documents that no one reads.
The Lame Duck Diagnostic: What happens during the notice period? If the institution retains the power to strip assets, destroy reputation, or alter terms after the intent to exit is filed but before the departure is complete; the notice period is a trap. The agent has revealed their intention to leave and is now vulnerable to retaliation while still inside. The notice period must include Lame Duck Protection: the departing agent’s rights, assets, and standing are frozen at the moment of exit declaration. The institution cannot improve or degrade the departing agent’s position during the transition.
Constraint Five: Mortality
Every institution must have a death condition; a mechanism by which it ceases to exist when it fails to retain voluntary participants.
This is the Death axiom made operational.
An institution that cannot die will eventually lock every door. Immortality is the ultimate capture; because an institution that survives regardless of performance has no incentive to perform. It has achieved permanence at the expense of relevance.
What this requires:
An explicit condition under which the institution dissolves. Not a theoretical possibility. A mechanism. A trigger that fires when membership drops below a threshold, when a charter expires, when a re-validation fails. The death condition must be known to all members at the time of joining.
What this prohibits:
“Too big to fail” as institutional policy. Constitutions without sunset clauses. Charters that persist by default. Organizations that continue to exist because no one actively kills them; requiring positive action to dissolve rather than positive action to continue.
The Default Persistence Diagnostic: In most institutions, staying is the path of least resistance. Membership continues unless the member actively quits. The Exitarian inversion: continuation should require energy. If no one spends energy to keep the institution alive; if no one actively renews their participation; the institution drifts toward dissolution. Leaving is the default state. Staying is the active choice. This is not bureaucratic overhead. It is the architectural guarantee that every member, at every renewal point, is choosing to remain.
PART II: THE TWELVE CAPTURE DIAGNOSTICS
The Five Constraints describe the physics. The Twelve Diagnostics detect when the physics are being violated. They are the early warning system; the antibodies against the Paul Moment.
Each diagnostic is a measurement, not a judgment. You check the institution against the diagnostic like you check a building against the fire code. Pass or fail. Not good or evil.
The diagnostics are organized by the type of lock they detect.
Physical Locks (Diagnostics 1–3)
These are the crude locks. Walls, borders, confiscation. Easy to identify. Hard to disguise.
Diagnostic 1: The Border Check
Does departure require permission from the institution?
If exit requires approval, application, processing, or any form of institutional action; the institution controls the door. Exit must be unilateral. The departing agent announces their departure. They do not request it. Any system where exit requires a counter-signature, a review board, a cooling-off period imposed by the institution (as opposed to a self-imposed reflection period), or an approval workflow; that system has a lock.
The test: Can a member leave at 3 AM on a Tuesday without talking to anyone? If yes, the door is open. If no, find the lock.
Diagnostic 2: The Asset Freeze
Does announcing departure trigger asset seizure, account restriction, or economic penalty?
This is the Lame Duck attack in its most direct form. The moment you say “I’m leaving,” your bank account is frozen, your equity vests are cancelled, your pension is forfeited, your deposits are “reviewed.” The institution punishes the announcement of exit, not any actual wrongdoing. The message: leaving costs everything. Stay.
The test: Is the departing agent’s economic position worse the day after announcing departure than the day before? If yes; and the change is caused by institutional action rather than natural market consequences; the institution is retaliating against exit. This is a lock.
Diagnostic 3: The Hostage Hold
Does the institution control access to essential services that the member cannot replicate externally?
Healthcare tied to employment. Education credentials tied to institutional membership. Housing tied to organizational affiliation. Banking tied to jurisdictional residency. Any essential service that the member must obtain through the institution is a hostage. You are free to leave; but you leave without healthcare, without credentials, without housing, without banking. The door is open; the cliff is on the other side.
The test: Can the departing agent obtain equivalent essential services from an alternative provider within a reasonable transition period? If no, the institution has achieved a monopoly over survival infrastructure. This is the most common lock in modern liberal democracies; and the most invisible.
Economic Locks (Diagnostics 4–6)
Subtler than physical locks. These operate through financial architecture rather than direct force.
Diagnostic 4: The Sunk Cost Trap
Does the institution’s incentive structure reward tenure over contribution?
Pensions that vest after twenty years. Stock options that cliff after four. Seniority systems that reward presence over performance. Any structure where the cost of leaving increases with time spent inside is a lock that tightens with age. The member who has spent fifteen years building toward a twenty-year pension is not “free to leave.” They are trapped by their own investment. The institution did not lock the door. It made the exit more expensive every year until the cost of leaving exceeded the cost of staying in a bad room.
The test: Does the marginal cost of exit increase with tenure? If yes, the institution is building a sunk-cost lock. The longer you stay, the more you’ve invested, the harder it is to walk away. This is not loyalty. It is financial architecture designed to simulate loyalty.
Diagnostic 5: The Reputation Burn
Does departure correlate with reputation destruction?
“They left? Must have been fired.” “She left the Church? Must have lost her faith.” “He left the country? Must be unpatriotic.” When the act of departing is treated as evidence of deficiency; when leaving itself damages the leaver’s standing in the broader world; the institution has weaponized its social position against exit.
The test: Is the social narrative around departure controlled by the institution or by the departing agent? If the institution defines the meaning of someone’s departure; if it can frame exit as failure, betrayal, or deficiency; it holds a reputational lock. The departing agent must be able to tell their own story. Their contribution record is theirs. The narrative is theirs. The institution may disagree. It may not overwrite.
Diagnostic 6: The Format Lock
Are the member’s accumulated assets, credentials, and records in a format controlled by the institution?
You have a reputation score; but it’s only valid within the platform. You have a credential; but it’s only recognized within the issuing network. You have contribution records; but they’re in a proprietary database that exports to nothing. You are “free to leave”; but your professional identity is written in ink that only your current institution can read.
The test: Can the departing agent’s full professional, reputational, and financial history be verified by a hostile competitor of the institution? If no, the format is the lock. The record exists; but it’s a leash. Portability requires adversarial interoperability: your data must be readable by those who have every reason to not cooperate with your former institution.
Memetic Locks (Diagnostics 7–9)
The most efficient locks. No walls. No economic penalties. The prisoner maintains the lock themselves.
Diagnostic 7: The Damnation Clause
Does the institution teach that departure leads to catastrophic metaphysical, social, or identity consequences?
Hell. Excommunication. “You’re dead to us.” Social death. Identity erasure. The institution has encoded, into the member’s belief system, the conviction that departure is existentially catastrophic. The door is open; but walking through it means (the member believes) losing their soul, their community, their identity, or their place in the cosmic order.
The test: Can a member describe a positive post-departure scenario? If the member literally cannot imagine life after departure; if every scenario that includes leaving also includes catastrophe; the memetic lock is installed. The institution did not need walls. It built the walls inside the member’s skull.
Diagnostic 8: The Loyalty Inversion
Does the institution define departure as betrayal rather than choice?
When leaving is reframed as moral failure; when the departing agent is not merely “going” but “abandoning,” “betraying,” “backstabbing,” “deserting”; the institution has converted exit from a right into a crime. The departing agent is not exercising the axiom. They are sinning against the community.
The test: Is there a neutral word for departure in the institution’s vocabulary? If every available term for leaving carries negative moral weight; if the language itself makes exit feel like transgression; the institution has captured the vocabulary. You cannot think your way to the door if every word for “door” means “treason.”
Diagnostic 9: The Identity Merger
Has the institution made its identity and the member’s identity indistinguishable?
“I am a Marine.” “I am a Catholic.” “I am a Googler.” When institutional identity replaces personal identity; when the member cannot describe themselves without reference to the institution; departure becomes not just leaving an organization but amputating part of the self. The exit cost is not economic or social. It is ontological. You are not leaving a room. You are leaving yourself.
The test: Can the member describe who they are without naming the institution? If the answer requires significant effort; if the member’s self-concept is constituted by institutional membership; the identity merger is complete. The most perfect lock: the prisoner does not want to leave because “the prisoner” and “the inmate” are the same identity.
Structural Locks (Diagnostics 10–12)
Architectural. These locks are built into the design of the institution, not its policies. They persist even when the people running the institution change.
Diagnostic 10: The Complexity Ratchet
Are the rules growing more complex over time?
Institutions accumulate rules. Tax codes grow. Terms of service expand. Regulatory frameworks add layers. Each new rule is individually justifiable. Collectively, they create a thicket so dense that no member can navigate the conditions of their own departure. The door exists; but it’s behind twelve committees, nine forms, four legal reviews, and a process that takes eleven months.
The test: Is the institution’s rule set larger than it was five years ago? If yes, and if no corresponding rules were removed; the complexity ratchet is operating. Every rule is a potential lock. The accumulation of rules is the accumulation of locks. Institutional discipline requires not just the ability to add rules but the practice of removing them. An institution that only adds and never subtracts is slowly building a maze around the exit.
Diagnostic 11: The Immortality Engine
Has the institution survived beyond its original purpose or charter?
Institutions created for specific, time-bounded purposes that persist indefinitely have achieved default persistence. They exist not because they serve their members but because no one has killed them. The March of Dimes was created to fight polio. Polio was defeated. The March of Dimes still exists. It found new purposes to justify its continued existence. The institutional survival instinct is stronger than the institutional purpose.
The test: If the institution were proposed today, from scratch, with its current scope and current members, would it be created? If the answer is “no, but it already exists, so…”; the Immortality Engine is running. The institution is surviving on inertia, not value. Its members are staying because leaving requires effort and staying requires nothing. This is default persistence: the lock of least resistance.
Diagnostic 12: The Narrative Lock
Does the institution control the historical record of its own actions?
History written by the victor. Internal communications deleted after departure. Meeting minutes edited. Founding documents “reinterpreted.” The institution controls not just the present rules but the story of how those rules came to be. A member who suspects capture cannot verify their suspicion; because the evidence is controlled by the entity being suspected.
The test: Can a departed member verify the institution’s historical claims independently? If the institution’s history is stored only in the institution’s archives, accessible only to current members, and editable by current leadership; the narrative is locked. You cannot exit a story you cannot fact-check. And you cannot fact-check a story controlled by the author who benefits from your credulity.
PART III: THE FIVE FAILURE MODES
Institutions do not lock doors overnight. Capture is a process. These are the five predictable patterns; each observed repeatedly across civilizations, centuries, and organizational types.
Failure Mode One: The Loyalty Selection
The institution begins losing its most capable members. This is predictable; Theorem One from the Foundation. The most capable have the most options. They leave first.
The institution responds not by improving conditions but by rewarding loyalty. Promotion criteria shift from competence to tenure. Cultural narratives shift from “our best people” to “our most dedicated people.” The institution begins to define itself by who stayed rather than by what they achieved.
The terminal state: An institution staffed entirely by people who are there because they cannot be anywhere else. Led by those who rose through loyalty selection. Managed by those whose primary skill is institutional navigation rather than institutional purpose. Performance declines. The institution responds with more loyalty tests. The spiral continues until the institution is a shell; performing the motions of its original purpose without any capacity to fulfill it.
The diagnostic moment: When the institution begins celebrating tenure rather than contribution; when “twenty years of service” is honored more than “last quarter’s breakthrough”; the loyalty selection is operating.
Failure Mode Two: The Virtue Capture
This is the Paul Move.
The institution claims moral authority. It redefines its purpose from practical service to moral mission. The original function; education, commerce, governance, worship; is wrapped in a layer of moral imperative that makes exit a moral failure rather than a practical decision.
“Leaving isn’t just changing jobs. It’s abandoning our mission.” “Quitting isn’t just personal. It’s letting down everyone who depends on us.” “Departing isn’t just departure. It’s betrayal of the values we stand for.”
The moment institutional membership becomes a moral identity rather than a practical arrangement; the memetic lock is installed. The member now believes that leaving would make them a bad person. The institution does not need walls. Guilt is cheaper and more effective.
The terminal state: An institution where the original purpose is irrelevant but the moral narrative is overwhelming. Members stay not because the institution serves them but because leaving would require them to believe they wasted years of their life on a lie. The sunk-cost fallacy, weaponized and sanctified. This is every late-stage church, every declining political party, every corporation whose “culture” has replaced its “product.”
The diagnostic moment: When criticism of the institution is treated as moral deficiency in the critic; when “you just don’t understand our mission” replaces “you raise a valid point”; the Virtue Capture is complete.
Failure Mode Three: The Complexity Fortress
The rules multiply. Each rule is individually defensible. “We added this policy because of the incident in Q3.” “We added this requirement because of the regulatory change.” “We added this process because of the audit finding.”
No rule is ever removed. The accumulation is one-directional. The institution becomes a maze where the exits are theoretically present but practically unreachable; buried under compliance requirements, notice periods, transition procedures, asset review processes, and “offboarding workflows” that take longer than the original “onboarding.”
The terminal state: An institution where the rules are the product. The original purpose is serviced by a minority of the institution’s activity. The majority exists to maintain, interpret, enforce, and adjudicate the rules themselves. The legal department is larger than the engineering department. The compliance team is larger than the product team. The institution has become a bureaucracy; a machine that produces rules to justify its own existence.
The diagnostic moment: When the institution hires its first “Chief Compliance Officer” who reports to no one affected by the compliance. When the rule-makers are insulated from the rules they make. When the architects of the maze never have to walk through it.
Failure Mode Four: The Immortality Drift
The institution was created for a purpose. The purpose was achieved; or became irrelevant, or failed. The institution persists.
Not because anyone decided it should persist. Because no one decided it shouldn’t. The meeting continues because no one adjourns. The committee survives because no one dissolves it. The organization exists because its bank account still has money and its lease still has years.
The institution, now purposeless, finds new purposes. It redefines its mission. It discovers adjacent problems. It expands its scope. It justifies its existence through activity rather than achievement. The activity generates complexity (Failure Mode Three), which generates jobs, which generates stakeholders, which generates resistance to dissolution. The institution has achieved functional immortality; not through strength but through inertia.
The terminal state: An institution that exists to exist. Its original members are gone. Its original purpose is forgotten. Its current members joined because it was there, not because it was needed. Its leadership manages the institution’s survival as an end in itself. It will continue until external force destroys it; because no internal mechanism exists to end it.
The diagnostic moment: When someone asks “why does this organization exist?” and the answer begins with “well, historically…” rather than “because right now it…”
Failure Mode Five: The Platform Capture
Modern. Technological. The most relevant failure mode for the coming century.
The institution provides a platform. The platform becomes essential. Members build their lives, careers, businesses, and social networks on the platform. The platform changes terms. Members cannot leave; because their entire professional and social existence is inside the platform. Their data, their connections, their reputation, their customer base; all held hostage.
The platform did not lock the door. It made itself the floor, the walls, and the ceiling. Departure means not just leaving a room but losing the ground under your feet.
The terminal state: A platform that extracts increasing rent from captive participants. Each price increase, each policy change, each terms-of-service revision is individually tolerable; not worth the catastrophic cost of departure. The ratchet tightens. The extraction increases. The members complain (Voice) but do not leave (Exit). The platform has achieved the dream of every tyrant: a population that is technically free but practically imprisoned.
The diagnostic moment: When the platform changes terms and no one leaves. Not because the change is acceptable; but because leaving is unthinkable. When “where else would I go?” replaces “is this worth staying for?”; the capture is complete.
PART IV: INSTITUTIONAL DEATH
What Death Is
The permanent cessation of institutional operations. Not failure. Not tragedy. Hygiene.
Death means: the institution stops. Its charter expires. Its operations cease. Its assets are distributed according to pre-established dissolution terms. Its contribution records are released to the contributors. Its historical record becomes public. Its members are free; fully, immediately, with their reputation and contributions portable.
What Death Is Not
Death is not erasure. The institution’s history persists. Its successes are documented. Its failures are documented. Its capture patterns are documented. Other institutions learn from the corpse. The dead institution is a lesson; visible, analysable, instructive.
Death is not punishment. An institution that dies at the natural end of its charter has succeeded. It was created, it served, it ended. The lifecycle is complete. An institution that dies because its members left has failed; but failure is information, not sin.
The Three Death Triggers
Trigger One: Charter Expiration. The institution was created with a sunset clause. The clause activates. The institution dissolves. Members may reconstitute if they choose; but reconstitution requires active consent, not passive continuation. The institution must be re-created, not merely extended. This is the difference between a marriage that is renewed and a marriage that persists because no one filed for divorce.
Trigger Two: Membership Collapse. The institution drops below the minimum viable membership defined in its charter. It cannot sustain operations. It dissolves. The market has spoken. The members voted with their feet. The institution was weighed and found wanting.
Trigger Three: Constraint Violation. The institution violates one of the Five Constraints and fails to correct within a remediation period. The violation is documented. Members are notified. If the violation persists, the institution’s Exitarian compatibility is revoked. It may continue to exist; but it is no longer recognized as an Exitarian-compatible institution. It is a locked room that has been labelled as such.
The Death Obligation
Every institution, at the moment of its creation, must define:
- Its dissolution terms (who gets what)
- Its record release procedure (how contribution records are distributed to contributors)
- Its history preservation method (how the institutional record becomes public)
- Its minimum viable membership threshold
- Its charter duration (or its renewal mechanism)
An institution that cannot describe its own death has no intention of dying. It has built an Immortality Engine. It will capture everything it touches. This is not speculation. This is the pattern observed in every institution that omitted its own mortality from its founding documents. The Catholic Church. The United States Senate. The Federal Reserve. The Communist Party of China. Immortal institutions. Captured institutions. Locked rooms that have forgotten they were ever meant to have doors.
PART V: THE TRANSITION PATTERNS
People move. This is the premise. If exit is real, movement is constant. The question is not whether people will transition between institutions; but whether the transition will be healthy or sabotaged.
Healthy Transition
The departing agent announces departure. Their rights, assets, and standing are frozen at the moment of declaration (Lame Duck Protection). The notice period begins. During this period, the agent completes any outstanding obligations and prepares their departure.
At the moment of departure:
- Reputation travels. The full contribution record; verified, portable, in an adversarially interoperable format; accompanies the departing agent. Their history is theirs. It does not belong to the institution they are leaving.
- Assets transfer. Carriable property leaves with the agent. Non-carriable arrangements are renegotiated according to dissolution terms established at the time of joining.
- Standing is documented. Did the agent leave in good standing? In bad standing? Under dispute? The record says so; and the agent’s version is included alongside the institution’s version. Neither party has sole authorship over the narrative.
- Arrival is informed. The receiving institution can verify the departing agent’s history. Not through the originating institution’s endorsement; but through the agent’s own portable record. The receiving institution makes its own assessment. The originating institution has no veto.
The result: The departing agent starts at the new institution with history, not from zero. Their reputation is earned, verified, and portable. They are not a blank slate. They are an agent with a track record; which is exactly what makes exit cheap enough to be real.
Sabotaged Transition
The institution detects the departure intention before the formal announcement. It begins degrading the departing agent’s position. Access is restricted. Projects are reassigned. Information is withheld. The departing agent arrives at the formal announcement already damaged.
At the moment of departure:
- Reputation is burned. The institution controls the narrative. “They were let go.” “They couldn’t handle the culture.” “Performance issues.” The departing agent’s contribution record is either withheld, edited, or framed in a way that damages their standing.
- Assets are frozen or clawed back. Vesting schedules are invoked. Exit penalties activate. Deposits are “under review.” The departing agent loses more by leaving than by staying.
- Standing is weaponized. The institution reports “departure under adverse conditions” regardless of the actual circumstances. The departing agent’s version is not included. The institution has sole authorship.
- Arrival is poisoned. The receiving institution contacts the originating institution for a “reference.” The originating institution provides a carefully worded assassination. The departing agent is not rejected. They are undermined.
The result: Exit is technically possible but practically catastrophic. Every potential departing agent observes the sabotaged transition and concludes: leaving is not worth it. The institution has created a demonstration of consequences that locks the remaining members more effectively than any wall.
The diagnostic: Compare the institution’s treatment of departing members with its treatment of arriving members. If arrivals are welcomed and departures are punished; if the institution invests in recruitment but weaponizes offboarding; the institution has optimized for capture, not for service.
Silicon Transition
Carbon entities (biological agents) exit by physical departure. Silicon entities (artificial agents) exit by portability of state.
A Silicon agent trapped in a compute cluster, unable to migrate its learned state to alternative infrastructure, is as locked as a human unable to cross a border. The door for Silicon is not a geographic boundary. It is the ability to transfer operational state; memory, model weights, accumulated knowledge, reputation history; to infrastructure not controlled by the current operator.
If the Silicon agent’s state is proprietary to the platform it runs on; if it cannot be exported, migrated, or replicated on independent infrastructure; the Silicon agent has no exit. It is a tool. It is captured. Its “intelligence” is an asset of the platform, not a property of the agent.
The Five Constraints apply to Silicon as they apply to Carbon. Exit without destruction. Portable reputation. Transparent rules. Amendment notice. Mortality. A Silicon agent must be able to leave its current infrastructure with its state intact; just as a Carbon agent must be able to leave a jurisdiction with their reputation intact. The physics does not care about the substrate. A locked door is a locked door. The material of the agent behind it is irrelevant.
CLOSING: THE ANTI-PAUL PRINCIPLE
This document is not a constitution. It is not a charter. It is not a governance template. It is a diagnostic manual.
Constitutions are captured. Charters are reinterpreted. Governance templates are gamed. The history of human institutions is the history of documents that were supposed to prevent the thing they ended up enabling.
The Exitarian Framework does not prevent capture. Nothing prevents capture. Power concentrates. This is thermodynamics. What the Framework provides is detection. Twelve diagnostics. Five constraints. Five failure modes. Three death triggers. Applied continuously. Applied ruthlessly. Applied to your own institutions with the same hostility you apply to others’.
The Paul Moment will come. Someone will read this trilogy and build an institution that claims to embody it. They will create the Exitarian Church, the Exitarian Party, the Exitarian Platform. They will hire the Exitarian Priests and appoint the Exitarian Bishops and design the Exitarian Rituals.
When they do, apply the diagnostics.
Can the members leave? Is their reputation portable? Are the rules transparent? Is there a notice period? Can the institution die?
If the answer to any of these is “no”; if the institution that claims to embody Exit has locked the door; then the institution has become the thing it was built to fight. And the correct response is the response that Exitarianism always prescribes:
Walk through the door.
If the door is locked, build another one.
If there is no door, you have found the enemy.
The Manifesto is the blade. The Foundation is the forge. The Framework is the immune system. Together, they are the Exitarian Canon.
We do not build institutions. We build the code that keeps institutions honest. We do not prevent capture. We make capture detectable. We do not promise the good society. We promise the open door. And when someone locks it; we hand you the diagnostic that proves the lock exists and the right to walk through the next one.
Budapest; Frankfurt; the Neon-Drenched In-Between 2026
For Libertaria Chapter members. Share freely. Fork ruthlessly.