A private, local-first AI bonded to a single judge. It holds the body of law the bench relies on, retrieves only what it can cite, and never decides.
This is the impossible part of the job. Read more than any person can read. Hold every relevant authority in mind, for years. Listen with full attention to days of testimony, and translate between counsel, witness, defendant, and statute.
It is a memory problem, and the tooling sold to the bench answers it by inventing what it cannot recall. Cloud AI has already put hallucinated case citations into court filings — and the reputational damage to a court is measured in decades of public trust, not in a support ticket.
That failure is architectural. A system that generates text shaped like a citation cannot be patched into one that only reports citations it can show you. It has to be built the other way around: hold the corpus, and never write a word of it.
A context window is not a memory. What falls out of it is gone — and the model will not tell you which authority it dropped.
A generative model produces plausible citations. Plausible is the precise failure mode a court cannot absorb.
Privilege, sealed records, and in-camera material cannot survive a prompt leaving the building. There is no setting that fixes this.
A monument stands on what came before it. So does a judgment. The Core holds the body of law the bench relies on — whole, in full text, permanently — and it holds it on the court's own stone.
It never forgets a precedent because it never stops holding one. It does not summarise from memory and it does not reconstruct. Every authority it returns is pulled from the source text and checked against it: retrieval, not generation. An authority it cannot show you is an authority it will not cite.
Justice holds the sword. The machine never touches it. Judges Aid assists — it does not decide, does not draft rulings, and does not impersonate the bench.
That is not a policy toggle a future release can quietly relax. It is Law 02, Capability Bounds, compiled into the Core: the system is built without the capacity to do these things, so refusing them costs it no restraint.
The instance bonds to one judge, not to the court — Law 03, Chosen Kinship. It does not transfer on promotion. Knowledge flows upward through Gatekeepers; case data never does.
Everything the Core does is retrieval, verification, and arrangement. It brings the weight to the pan and shows its working. The hand on the balance is always human.
The same Core serves the bench and the people who carry out what the bench decides. It is not three products — it is one instrument, turned to face you. Choose a face:
The blindfold is the oldest promise in the iconography, and it is the one promise cloud AI cannot keep. Privilege. Sealed records. In-camera material. Judge deliberation.
Each of those fails the moment a prompt leaves the building — not because a vendor behaved badly, but because the request was always going to arrive somewhere else. So the architecture is concentric: four walls, and the record sits inside all of them.
The bonded Core. Case data lives here and is written nowhere else. No cloud, no vendor, no copy.
Every evidence movement hashed and signed. What was seen, when, and by whom — provable after the fact, by the court, without us.
Mediates what may cross at all, under the 11 Laws. Knowledge crosses. The record never does.
Pattern-level only, and only with consent — Law 05. No party, no matter, no name, no reconstruction.
Nothing in the first ring has an exit.
A monument is not argued into existence. It is cut, placed, and then judged on whether it holds. We are asking for one bench, for one year, to find out.
The judge keeps the instance, the record, and the audit trail. At the end of the year they archive it, transfer it, or destroy it — and tell us, publicly, whether it earned its place on the bench.
It is the judge's memory, the social worker's safety net, and the officer's continuity — owned by no one but the person it serves, and forgetting nothing they were given.