quis custodiet - nobody watches, everybody checks; the people are the sky

docs/architecture/GOVERNMENT.md

@@ -394,3 +394,83 @@ unbreakability from the structural floor it cites:
 That is §30 again, wearing a chair: trust by impossibility,
 never by virtue. The best Watcher is whoever points hardest at
 something that cannot be threatened.
+
+---
+
+# QUIS CUSTODIET — watching the watchmen in this system
+
+Will:
+
+"Who watches the watchmen. In the US it's supposed to be the people,
+but the electoral college kinda makes that a joke, and direct
+democracy is a nightmare. What does this look like in the way we
+agree on truth?"
+
+## The diagnosis
+
+Both American failures come from giving WATCHING a middleman:
+
+    Electoral college  → watchers watched by delegates, who become
+                         a small unelectable class with real power
+    Direct democracy   → watchers dissolved into a crowd, which then
+                         votes on truth → §34b: atrocity, stagnation
+
+The trap assumes watching must be DELEGATED UP (college) or
+DIFFUSED DOWN (referendum). Both hand truth to a count.
+
+## This system's answer: nobody watches. Everybody checks.
+
+The question "who watches the watchmen" presumes watchers hold
+discretionary power worth seizing. The architecture removes the
+prize instead of appointing police:
+
+1. **WATCHERS HAVE NO DISCRETION TO CAPTURE.**
+   The verification layer doesn't rule; it COMPARES. A judge of
+   hashes cannot be bribed toward an opinion — there is no opinion
+   inside the job. Capture requires corrupting arithmetic itself,
+   which announces itself as a fork alarm.
+
+2. **EVERY ACT OF WATCHING LEAVES ITS OWN RECEIPT.**
+   Checks are writes: each verification appends to the same
+   append-only, hash-chained record everyone else holds. A watcher
+   who lies mid-watch forks the chain under their own feet — the
+   watching is self-incriminating if corrupted. Quis custodiet?
+   The ledger. It was present for every inspection.
+
+3. **THE FLOWS STACK DOWNWARD INTO THE UNBRIBABLE.**
+   schema → ledger → reality (§34a correction). Any human watcher
+   cites one of these floors when they say NO; overpowering the
+   speaker never removes the cited floor. The bottom layer of the
+   system is made of things that historically cannot be threatened.
+
+4. **THE PEOPLE ARE THE SKY, NOT THE POLICE.**
+   Direct democracy asks everyone to ADMINISTER (a nightmare —
+   full-time governance is how you get manipulated mobs). The
+   electoral college lets everyone administer ONCE REMOVED (a joke —
+   the removal becomes the power). This third way: the people
+   VERIFY OUTPUTS ONLY — sunrise rights. No one needs political
+   skill to notice whether the sun rose, whether the seal fired on
+   schedule, whether the restore test opened their own photos.
+   Recognition, not administration. Two seconds, unblinking,
+   available to every party including the least powerful.
+
+5. **DISAGREEMENT BETWEEN WATCHERS IS AN EVENT, NOT AN ELECTION.**
+   When checkers disagree, forks open — held, dated, visible — and
+   resolve by evidence or remain honestly open. No supreme panel,
+   no casting vote on fact, ever.
+
+## The formula
+
+    Legitimacy of oversight ∝ how little the watcher can gain
+                               from lying × how loudly lying
+                               echoes × how cheaply anyone can
+                               re-check.
+
+Drive the first term toward zero with structure, the second toward
+infinity with chained witnesses, the third toward free with open
+verification — and the ancient question dissolves. Not answered:
+DISSOLVED. There is nothing left worth bribing, and nowhere left
+for bribery to hide.
+
+The people were never supposed to be the watchdogs.
+They were always supposed to be the sky.