Stewardship framework — keeping Point Seven Studio pure through growth and succession

Status: ideation (2026-07-27), founder-initiated. A first framework, not a legal instrument. The goal Sandon set: build safeguards into the management and transition of Point Seven Studio's properties so the platform stays true to its mission — resistant to corruption, political capture, and monetary capture — as platform grows, and after the founder is gone. "Pure for as long as possible" is the honest framing: no structure is capture-proof forever; the aim is to make capture slow, costly, visible, and reversible rather than impossible.

This doc is meant to be argued with and sharpened — like the mesh contracts. Nothing here is a decision; everything is an option with a recommendation.

1. The two threats (why purity erodes)

Mission-driven platforms almost never die of a single betrayal. They erode through two predictable pressures:

Growth pressure (money + power). Scale attracts capital, acquirers, boards, executives, ad revenue, governments, and lobbyists — each of which trades mission for leverage. Every one of them is individually reasonable ("just this once, to survive / to grow / to comply"). The erosion is a thousand reasonable compromises, not one villain.
Succession pressure (the founder is gone). Today the mission is safe because one values-aligned person holds control and says no. That is also the single biggest fragility: a benevolent-founder model dies with the founder. On passing or incapacity, control defaults to whoever inherits shares, wins a board fight, or writes the biggest check — none of whom were selected for values.

A durable framework has to neutralize both: dilute the founder's irreplaceable veto into a structure that outlives them, and make that structure expensive to capture.

2. What we are protecting (the "protected core")

You cannot defend "purity" in the abstract. Step one is to codify the invariants — the small set of things that must never change — and separate them from everything that should be free to change (product, tactics, business model details). The core is drawn from what already exists in the ethos and the network's hard rules:

The protected core (candidate invariants — to be finalized by the founder):

Mission primacy. Art-first; fiction as a technology for real human change (see ETHOS.md, the Odessa north star). The mission outranks profit; profit serves the mission, never the reverse.
Consent and the dignity of the vulnerable. Consent-first for voice/likeness; read-only-for-the-dead (a person's cloned voice/presence is never puppeted to say new things); counsel-gated handling of minors; privacy floors (e.g., city-centroid, never exact location).
Never depict a non-consenting real person (Rule 9) — generalized: no generated content that impersonates a real, un-consenting individual.
Honesty-first. No fabricated reviews/records; no dark patterns; say plainly what a feature does and costs.
No selling the user out. The user (and their words) are not the product to be sold, surveilled, or auctioned.
No coercion of the art. Don't turn the art into coaching/propaganda; don't let a paying interest dictate the story.

These already live, partly, in code + contracts (consent flows, Rule 9 in the painterly standard, the audio-honesty standard, the "no consumption metaphors" brand rule). Values encoded in code and public contracts are harder to quietly delete than values that live only in a founder's head — that is itself a safeguard, and the network's habit of ratifying values as adversarially-reviewed contracts is proto-governance we should build on.

The rule of amendment: the protected core is entrenched — changeable only by a near-impossible bar (see §4). Everything not in the core is ordinary business, decided normally.

3. Design principles (before the machinery)

Six principles, each a lever against capture:

Encode intent, don't rely on a person. The founder's "no" becomes a document + a structure + a distributed body — three things, not one heartbeat.
Separate the mission power from the business power. The people who run the company must not be the people who guard the mission, and neither can unilaterally become the other.
Make capture slow, costly, and visible. Entrenchment (supermajorities), staggered terms, mandatory public disclosure. You can't stop a determined captor forever; you can make the attempt take years and happen in daylight, which is usually enough to defeat it.
Distribute the veto. No single successor, board seat, or share can flip the platform. Single points of control are single points of capture.
Transparency as the immune system. Public, binding commitments (the /ethos page as a real charter, not marketing) + an annual published "purity audit" + protected whistleblowing. Sunlight is the cheapest anti-corruption tool and it fits the network's checks-first culture.
Dissolve before you corrupt. The last-resort clause: if capture becomes inevitable, the platform is wound down / opened / handed to a mission-aligned successor rather than continued in a corrupted form. A credible scuttling option removes the prize and deters the raid.

4. The structure (legal + governance)

Two layers: how the thing is owned, and how it is governed.

4a. Ownership — steward-ownership, not shareholder-ownership

The single most important move, and it must happen before outside capital (see §6). Options, best-to-worst for purity:

Perpetual Purpose Trust (recommended core). Control of Point Seven Studio is held by a trust whose beneficiary is the purpose, not people. Profits fund the mission and operations; the company cannot be sold out from under the mission because no one owns it to sell. This is the Patagonia model (Patagonia Purpose Trust + Holdfast Collective) and the steward-ownership model championed by the Purpose Foundation. It structurally answers both threats at once.
Foundation ownership (Novo Nordisk Foundation, Bosch, Mozilla Foundation → Corporation): a mission foundation controls the operating company. Proven at large scale; slightly more capturable than a pure purpose trust if the foundation board is captured — so pair it with the golden share below.
Public Benefit Corporation (PBC) wrapper for each operating entity: legally binds directors to the stated public benefit, not just shareholder value. Necessary but not sufficient — a PBC can still be sold; use it inside the trust/foundation, not instead of it.
Golden share / veto share (add this on top of any option). A single special share held by a mission-guardian entity (the Stewardship Council, §4b) with veto over a fixed list: sale/merger/IPO, changes to the charter or protected core, ownership/control changes, and any decision the Council rules a core violation. Cheap to create, extremely powerful, and it's the specific mechanism that stops "we'll just sell to the highest bidder."

Learn from the OpenAI cautionary tale: a non-profit "controlling" a for-profit is not enough if the control can be pressured, restructured, or overridden by the money it depends on. The defenses: (a) make the veto structural and hard to unwind (entrenched, supermajority + trust to amend), (b) distribute it (a Council, not one board that can be flipped), (c) keep the mission entity financially independent of the operating company's capital providers, and (d) keep the scuttling clause credible so capture doesn't pay.

4b. Governance — separation of powers

The Operating Board / management. Runs the businesses (HiveJournal, QuickSites, PorchHearth, DeckSketch, future properties). Full commercial latitude — bounded by the charter and the Council's veto. This is where growth, hiring, and money live.
The Stewardship Council ("the Guardians"). Small (5–7), separate from the operating board, staggered multi-year terms, whose only job is protecting the protected core. Powers: hold the golden share; veto core-violating actions; appoint/confirm future stewards; commission the annual purity audit. Explicitly cannot run the company (no operational power) — separation of powers cuts both ways.
- Anti-capture composition rules: no majority from any single interest (investor, employee, government, family); financial independence (stewards not economically dependent on the company or its funders); values-tested selection (chosen for demonstrated alignment, not wealth or status); removable only for cause, never at the operating board's convenience; term limits + staggering so no one moment lets a captor seat a majority.
Separation guarantee: the Council can't seize operations; management can't touch the core. Amending the protected core requires both + the trust + a supermajority + a public waiting period — a bar high enough that capture must be slow and public.

5. Succession (the founder's passing or incapacity)

The framework's whole point is that this is the moment the current model fails, and the structure must already be in place before it arrives. Concretely:

Trigger both death and incapacity. Define clear, hard-to-game triggers (medical incapacity, prolonged unreachability), not just death — capture often exploits the ambiguous in-between.
Control transfers to the structure, not to an heir or an acquirer. On the trigger, the founder's controlling stake is already held by the purpose trust; the golden share is already with the Council. Nothing "opens up" for a takeover, because control was never a personal asset to inherit.
A living charter (the "platform will"). A written, public statement of the protected core + the founder's intent for how the platform should behave when the founder can no longer decide — the constitution the Council interprets. Specific enough to bind, general enough to survive changing times.
Named initial steward-successors + a values-tested selection process for all future stewards, so the Council renews itself on alignment rather than being appointed by whoever holds money or office.
Read-only-for-the-dead, applied to governance. Consistent with the network's own ethic: the founder's recorded intent is honored, but the founder's voice/persona is never puppeted to manufacture new decisions or lend false authority to a faction. Intent is a fixed text to interpret, not a ventriloquist's dummy for whoever controls the archive. (This is a real risk in an org that builds voice-cloning — name it explicitly and forbid it.)

6. Timing — the one thing that can't wait

The leverage to impose these constraints is highest now and evaporates with growth. Before there is outside money, a board, or acquirers, the founder can simply choose steward-ownership and entrench the core. After capital comes in, every one of these protections becomes a negotiation with people whose incentives run the other way — and they will (reasonably, from their side) resist a structure designed to cap their return and their control.

Recommended phasing:

Now (founder-controlled, low cost):
1. Write the Charter — finalize the protected core (§2) and the rule of amendment. Publish the /ethos page's commitments as binding, not aspirational.
2. Draft the platform will (succession intent) + name initial steward-successors.
3. Stand up an informal Stewardship Council (even a 3-person advisory version) so the muscle exists before it's load-bearing.
4. Adopt PBC status for the operating entities (cheap, done unilaterally).
Before any outside capital / at first serious growth: 5. Formalize steward-ownership — the purpose trust (or foundation) + golden share — as a precondition of taking money, so investors buy into the constrained structure rather than negotiate it away later. Engage a steward-ownership / purpose-trust attorney (Purpose Foundation and peers specialize in exactly this).
Ongoing: 6. Annual purity audit, published. Whistleblower channel. Periodic re-ratification of the core (so it stays a living commitment, not a forgotten clause).

7. Honest limits

Nothing is permanent. Every entrenchment can, in principle, be undone by a determined enough coalition over enough time. The goal is durability, not eternity — raise the cost and slow the clock so the mission outlives the founder by decades, not so it's mathematically immortal.
Ossification is the opposite failure. Entrench the core (the ~6 invariants), not the tactics. A charter that freezes the business model or the product will strangle the platform as surely as capture would. Keep the protected core small and the operating latitude wide.
Guardians can be captured too. The Council is a new attack surface. That's why: distributed composition, financial independence, staggered terms, transparency, and the scuttling clause (which removes the prize even if the Council falls).
This is a lawyer's job to formalize. This doc is the design; steward-ownership structures are real legal instruments and need a specialist to draft so they actually hold.

8. Open decisions for the founder

Ownership vehicle: perpetual purpose trust (recommended) vs foundation-owned vs PBC-only-for-now. How much control does the founder want to keep during their life vs place in the structure immediately?
The protected core: confirm / edit the ~6 invariants in §2. What's truly non-negotiable vs merely strongly-preferred?
The Council: who are the first 3–5 people you'd trust to guard this with no operational power and no financial stake? (Selection is the whole game — the structure is only as good as the first stewards.)
The scuttling clause: are you willing to commit, in writing, that the platform dissolves or opens rather than continues corrupted? (It's the strongest deterrent, and the hardest to promise.)
Scope: does this cover all Point Seven properties as one estate, or per-property (some may be spun off / sold intentionally — the mission-critical ones like Odessa/HiveJournal may warrant tighter protection than others)?

Drafted (2026-07-27): this framework has been turned into two concrete, handoff-ready instruments:

STEWARDSHIP_CHARTER.md — the adoptable constitution (nine articles), with the six open decisions above left as marked founder/attorney placeholders.
PLATFORM_WILL.md — the one-page succession directive in the founder's voice.

Remaining is the founder's to do: resolve the six open decisions (§8), then hand the Charter + Will + this framework to a steward-ownership / purpose-trust attorney to render into binding instruments. Prior art worth reading: Patagonia's Purpose Trust, the Purpose Foundation's steward-ownership playbook, the Novo Nordisk Foundation, Mozilla's foundation→corporation structure, and — as the cautionary tale — OpenAI's non-profit-control unwinding.