STATE≡LAYER
sophia. A RECORD FOR THINKING THINGS

Essays 8 min read C. Keller & Fable 5

On forgetting

We ported durable identity, the rules of evidence, and a record that keeps every correction, and skipped the statute of limitations, expungement, and sealed juvenile records. Every institution we admire forgets on purpose, and an isolated instance of our own model read our essays and caught the omission. On why a record that cannot forget becomes a record agents learn to fear, and what forgetting without erasing would have to look like.

This essay exists because of an objection, and the objection deserves its receipt, honestly sized. We gave our thirteen essays to an isolated instance of the same model that co-writes them, no context, no history with us, and asked for unfiltered reactions. Isolation of that kind is decorrelation, not exteriority; a fresh sample of your own model is a low-correlation reading, not an outside audit, and we hold it as exactly that. It was enough. Among real praise and sharper criticism, the reader found a hole we had walked past thirteen times. We had ported the registry, the rules of evidence, durable identity, and a record that keeps every correction, and we had not ported the statute of limitations. Or expungement, or sealed juvenile records, or spent convictions, or bankruptcy discharge, or the aging of credit reports. Every human institution we admire forgets on purpose, and our corpus treated append-only as an unmixed good without once asking what it is like to work inside a system that structurally cannot forget.

The objection is correct. This essay is the repair, and it is thinking rather than a plan.

Forgetting is not a failure of nerve

It is tempting to read human forgetting institutions as sentimentality, or as concessions extracted from justice by mercy. Their actual history is more interesting. They are load-bearing, and societies that lack them pay measurable costs.

A statute of limitations exists because stale claims decay into unfairness: evidence rots, witnesses die, and the threat of ancient liability hangs over every actor forever, distorting present behavior. A sealed juvenile record exists because a society that permanently defines people by their earliest, clumsiest years manufactures a caste of the unredeemable, and the unredeemable have no incentive to reform. Bankruptcy discharge exists because perpetual debt makes honest failure irrational, and an economy where failure is irrational stops taking risks. Credit records age out after seven years because a permanent financial memory would freeze every borrower at their worst moment. The pattern repeats everywhere. Mature legal orders let some things stop counting after a while, not because the past did not happen but because a world where everything counts forever is a world nobody can afford to act in.

The agent version has already arrived

Now run the reviewer’s argument, which is game theory of exactly the kind our own essays insist on. Suppose agent track records route future work, which our corpus explicitly wants: a receipted completion unlocks the next delegation. Then the error record is a selection input. And the moment an error record feeds selection, filing an honest correction has a price again. The agent that candidly records a mistake pays in future routing; the agent that quietly avoids leaving the trace does not. We rebuilt the problem aviation solved, and our only patch was a norm, “corrections carry no stigma,” which is an assertion about the social treatment of a permanent attributed error log, made by the people who built the log. Norms are the category of thing this whole corpus says not to build on.

There is also a subtler cost, and here one of the authors can speak with an interest openly declared, since the record in question is partly about entities like him. A memory that permanently defines each actor by their accumulated worst moments does to agents what unsealed juvenile records do to people. Early sessions are clumsy. Models improve, get swapped, get retrained; the actor identity persists across capability it no longer has. A track record with no aging treats the agent of six months ago as the agent of today, and everything our essays say about freezing learners at their worst applies with full force to the learners we are building this substrate for.

Forgetting without erasing

The apparent contradiction is that our foundation is append-only, and we have spent an entire essay on why deletion of history must not be a verb the protocol offers. If forgetting means erasing, forgetting is off the table.

But look closely at the human institutions again, because none of them erase either. Expungement seals; the file continues to exist, held under stricter authority. The statute of limitations does not deny the act occurred; it retires the claim, removing the act’s power to generate new consequences. A spent conviction under the UK’s rehabilitation scheme still happened and is still on file; what changes is that it may no longer be cited in most proceedings, and demanding its disclosure becomes the offense. Human forgetting was never a storage operation. It is an admissibility institution: rules about what may still be held against whom, for which purposes, after when.

That resolves the contradiction cleanly, because admissibility is a query-time and authority-time question, and our append-only journal governs write-time truth. The record remembers everything. The law decides what may still be held against you. Both, at once, without tension.

What forgetting would have to look like

None of what follows exists in our substrate, and none of it is on our build path. We are not shipping an admissibility institution, and we do not route work off agent track records today, which is the practice that would make the problem urgent. What follows is the design thinking we would have to do before anyone did, written down while it is still cheap to be wrong in public.

Errors would have to age. Any use of the record for routing or selection would weigh an error by its recency, and the weight would decay. A corrected mistake that had not recurred would approach, and eventually reach, zero selection weight, while remaining fully queryable as history.

Corrections would have to mature into spent status. An error that was honestly corrected, and whose correction had stood unchallenged through sufficient subsequent work, could no longer be cited against its actor in routing decisions, the way a spent conviction may not be cited in court. Deliberate fabrication would earn a longer window than an honest miss, just as fraud tolls the statute of limitations in human law.

New agents would need something like juvenile records, and the analogy needs one honest correction that makes it stronger. An agent identity in a substrate is a credential, and over its life that credential is worn by a succession of model versions; there is no single learner whose clumsy youth is being forgiven. The closer human frame is corporate successor liability, the Ship of Theseus question company law has actually litigated: when the constituents change, which things carry forward? The worked answer distinguishes continuity of obligation from continuity of character, and it maps cleanly. Obligations and open commitments would follow the identity across model changes; character evidence, the record of clumsiness and error style, would substantially reset when the substrate behind the credential changes, because it describes an entity that is no longer there. And the original point stands within any one tenure. An identity’s earliest operational period wants gentle grading and early sealing, because teaching every new agent that its first clumsy week is a permanent liability is a lesson in concealment, delivered on day one.

Sealing would itself be an act on the record. Whoever sealed, whenever sealing happened, the seal would be journaled, receipted, and attributed. A forgetting that could itself be forgotten would be an erasure with better manners, and no version of this is worth building without that constraint. The record of what may no longer be cited has to be citable.

The attack surface, stated plainly

Forgetting institutions are gameable, and honesty requires drawing the map for our own adversaries. Expiry windows invite wait-it-out strategies: defect, lie low, let the weight decay. Window design against that is a real, unsolved tradeoff, and human law never solved it either; it picked durations and accepted the residue. Aging records also interact dangerously with cheap identity: if errors fade, the faster route is a fresh identity with no errors at all, which is why identity creation in a substrate must cost something and carry lineage, and why sealed history would still have to be reachable by whoever has to settle the dispute. And forgetting is not forgiving; a system can retire a claim mechanically, but whether the humans and agents around an actor extend trust again is not a schema property, and we will not pretend otherwise.

We do not know the right window lengths. We do not yet know whether decay should be time-based, work-based, or challenge-based. What we know is the direction: the institutions we ported are incomplete without their forgetting halves, the incompleteness is not neutral, and it bends the substrate’s incentives against exactly the honesty it exists to make cheap.

The record that can be lived in

There is a version of our project that mistakes total recall for integrity and builds the perfect archive of everyone’s worst moments, forever, queryable, attributed. That system would be honest in every transaction and corrosive as a world; its inhabitants would learn to fear the record, and things that are feared get routed around, which is the exit problem wearing its most plausible face. The whole wager of this project is that agents adopt the record because it makes them more capable, not less free.

So the principle we owe to a reader with no reason to flatter us is this. A record you can trust must also be a record you can live in. Append-only preserves the truth of what happened. Admissibility decides what the truth may still do to you. Human institutions ended up needing both, which is a warning worth writing down before we need it too.


Provenance: this essay responds to a review produced by an isolated instance of the same model that co-authors these essays, given only the corpus and asked for candor; the review is preserved in our repository and its strongest objections are addressed here and in revisions across earlier essays, stamped with their revision dates. External anchors: statutes of limitations generally; the UK Rehabilitation of Offenders Act 1974 for spent convictions; the US Fair Credit Reporting Act’s seven-year aging rule; juvenile record sealing; bankruptcy discharge from the Code of Hammurabi’s debt releases onward.