ZERTHYear 0

The zeroth law of computing

The computer
that cannot copy.

Thermodynamics had to write its zeroth law after the other three — it was more fundamental than all of them. Computing never wrote one. We built a civilization on a missing axiom.

A bit exists in one place. Drag it. Then try to copy it.

moved 0 · copied 0

Founding document

Software has no physics. We are giving it some.

In physics, you cannot negotiate with conservation of energy. You cannot file a ticket against the speed of light. The universe does not have a vulnerability disclosure program. It has laws.

Computing was built as a pile of suggestions. Access control is a suggestion. Encryption is a suggestion once the key has been copied. “Don't commit secrets” is etiquette. A Stripe key in a public repository becomes a million-dollar fraud before breakfast because a string has no location, and a string with no location is already everywhere.

We used to scan repositories for leaked keys. That was forensic. Detection is archaeology: you arrive after the copy. Rotation is amnesia: you pretend the old universe did not happen. The first-principles move is not a better scanner. It is to make the illegal state unrepresentable.

The missing law is this: a bit exists in one place. Not as policy. As the type of the value, the instruction of the machine, the packet on the wire, the proof that travels with it. A computer bound by laws, not settings.

This is not a product you ship in a quarter. It is a new substrate. It will take years. Possibly a decade. The waitlist is a countersignature on the law.

Derivation

From first principles, not from features.

  1. Almost every security failure is an illegal copy. A leak, a replay, a forged token, a stolen session, a model that recites its training data — each is a value appearing in a second place without the first place being destroyed.
  2. We paper over copies with policy, detection, and punishment. Policy is a memo. Detection is a search party. Punishment is a bill. None of them change what the machine is able to do.
  3. The only durable fix is physics. Make the copy a fault. Give information mass, location, and a conservation number. Then money, identity, and intelligence are corollaries, not products.

Axioms

Five statements. The rest is construction.

  1. A bit exists in one place.

    Not should. Not if you configure it correctly. Exists. Location is as real as the value. A secret in two places is already a different universe than the one we are building.

  2. A copy is a new thing.

    It is not the original wearing a disguise. It costs energy. It leaves a witness. Free copies were the original sin of the internet — the assumption that information has no mass.

  3. Identity is a location in a field, not a string.

    Strings leak. Strings replay. Strings are guessed. A location can be moved, never duplicated. Theft becomes relocation, and relocation is visible.

  4. Leaking is moving.

    A conserved secret cannot appear elsewhere without vanishing here. The first time a credential leaves its place, you know — not because a scanner found a regex, but because the conservation number changed.

  5. Policies fail. Laws do not.

    Access control is a suggestion. Linters are etiquette. Rotation is amnesia. Physics does not have a settings page. Zeroth is a computer whose refusals are faults, not warnings.

Epochs

A decade, spoken honestly.

We will not pretend this is a landing page for a beta next month. The work is the stack, from types to packets. These are the layers. Each one is a real computer science problem. Together they are a civilization problem.

  1. Years 1–2

    Calculus

    A language in which location is a type. Secret<T, Here> cannot be sent to There without a move. The compiler is the first officer of the law. If the illegal state cannot be represented, it cannot be shipped.

  2. Years 2–4

    Kernel

    A runtime that refuses the copy at the instruction. memcpy of a conserved value is a fault, the way a CPU treats a bad pointer. Debuggers cannot dump it. Cores cannot spill it. The machine itself will not be complicit.

  3. Years 4–6

    Witness

    Every value carries a proof that conservation held from birth. Not a log — logs are fiction with timestamps. A proof. If the witness does not verify, the value does not exist.

  4. Years 6–8

    Field

    A network whose packets have location. Routing is movement. Broadcast is fission, and fission is metered, witnessed, and rare. The internet treated packets as infinitely copyable. That was a choice. This is the correction.

  5. Years 8–

    Corollaries

    Money that cannot be printed. Identity that cannot be stolen, only moved. Models that cannot exfiltrate their training. Medicine that cannot be silently altered. Once the zeroth law holds, the rest of civilization is engineering.

Countersign

Put your name on the law.

Not a newsletter. A founding signature. When the first kernel can refuse a copy, we will write to the people who signed — and to no one else.