YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
Sovereign MUM
Authors: Ahmad Ali Parr, Jessica L. Williams (SNAPKITTYWEST)
Stack: Python Β· PyTorch Β· 6502 ASM Β· Lean 4 Β· WORM ledger
A hallucination is not a quirk. It is an invalid state transition.
Sovereign MUM formalizes Google's Multitask Unified Model as a deterministic multimodal Markov Decision Process β stripping the probabilistic mythology and exposing the actual state machine.
Model weights W are not a magic oracle. They are a deterministic transition matrix. A state transition that cannot be mathematically justified by input atoms is an invalid operation. Full stop.
How This Compares to Google MUM
Google's MUM (Multitask Unified Model, 2021) is 1,000Γ more powerful than BERT, processes 75+ languages, and handles text and images in a shared encoder-decoder architecture. It is the state of the art for multimodal search and retrieval.
It has no formal semantics.
| Property | Google MUM | Sovereign MUM |
|---|---|---|
| Architecture | T5 encoder-decoder + sparse MoE | Same, plus formal atom semantics |
| Multimodal | ViT patch projection + early fusion | Shared semantic manifold M |
| State | Implicit, lost between turns | Explicit A_n β auditable 3-tuple |
| Hallucination | Behavioral quirk | Invalid state transition β rejected |
| Cross-modal context | Dot-product attention | Semantic gradient boundary |
| Verification | None | A_{n+1} audited before A_{n+2} proceeds |
| Formal proof | None | Lean 4, zero sorry |
| Audit trail | None | WORM chain per transition |
| Child safety | None | KID-8B/8K β 8 KB 6502 safety kernel |
| License | Proprietary | Tri-license (AGPL / BSL 1.1 / MIT) |
Sovereign MUM is not a reimplementation of Google MUM. It is the formal architecture Google MUM should have been built on.
The Central Invariant
R(A_n, W) β A_{n+1}
R is the reasoning operator. W is the model weights. A_n is the current verified atom. A_{n+1} is the next atom β but only if the transition is mathematically justified.
Under standard autoregressive generation, W predicts the next token in a vacuum. Under Sovereign MUM, R enforces a strict boundary condition:
A_n
β
βΌ
βββββββββββββββ
β R(A_n, W) β
β β
β compute β
β delta_z β
ββββββββ¬βββββββ
β
βΌ
ββββββββββββββββββ
β Boundary check β
β βΞ©_{n+1} valid?β
βββββββββ¬βββββββββ
β
βββββββββββ΄ββββββββββ
βΌ βΌ
VALID INVALID
β β
βΌ βΌ
A_{n+1} HALT + RECORD
(proceed to (chain intact,
A_{n+2}) no propagation)
The chain does not break. A halt is recorded. Invalid output does not propagate.
What Is a Multimodal Atom?
A text token, a 16Γ16 image patch, and a 20ms audio frame are arbitrary system artifacts β not semantic boundaries.
An atom is defined topologically, not by file format.
A_n = ( z_n , P_n , βΞ©_n )
| Component | Definition |
|---|---|
z_n β R^d |
Latent vector in shared semantic manifold M |
P_n |
Projection back to grounded origin (which pixels / tokens / frames) |
βΞ©_n |
Topological boundary β where this concept ends |
The boundary is defined by the semantic gradient:
βΞ©_n = { x β M : ββf(x)β β₯ Ξ΅ }
One atom = one coherent concept.
INPUT STREAM
β
βββββββββββββΌββββββββββββ
βΌ βΌ βΌ
text image audio
subword tok 16Γ16 patch 20ms frame
β β β
βΌ βΌ βΌ
βββββββββββββββββββββββββββββββββββ
β ModalityEncoder E_m β
β project into manifold M β
βββββββββββββββββββ¬ββββββββββββββββ
β
z β R^d
β
semantic gradient
β
βββββββββββββ΄ββββββββββββ
βΌ βΌ
atom A_1 atom A_2
(red car) (blue sky)
If an image contains a red car and a blue sky, the sharp gradient splits them into A_1 and A_2. The atom boundary is dictated by information density β not file type.
The Shared Semantic Manifold
All modalities project into a single manifold M where distance represents pure semantic relationship:
text: "red car"
β
βΌ
E_text βββΊ z β M βββ E_image
β²
β
image patch
(red car pixels)
Cross-modal context is preserved because proximity in M reflects semantic similarity β regardless of whether the input was a spoken word or a photograph.
The transition function computes a relationship vector Ξz from retrieved context, and applies it:
z_{n+1} = z_n + Ξz
Because A_{n+1} must carry its own explicit boundary βΞ©_{n+1} and grounding P_{n+1}, the transition is mathematically constrained. A CUDA kernel that returns a state violating the boundary conditions is rejected before it can propagate.
MoE Routing Under the Formalism
MUM uses sparse MoE layers. The router does not inherently know whether a vector represents a subword token or an image patch β by the time tokens reach the router, they are uniform dense vectors in R^d.
Under Sovereign MUM's formalism, this is a feature, not a bug:
text token z_text βββββββ
βΌ
image patch z_image βββΊ Router βββΊ expert selection
β²
audio frame z_audio βββββ
The router learns to recognize the statistical signatures of each modality's region in M. This is emergent topological specialization β not explicit modality routing.
Load balance forces the router to distribute uniformly. Sovereign MUM adds a verification step: the expert output must still satisfy βΞ©_{n+1} before emission.
KID-8B/8K β Children's Safety Kernel
The 8B model is not in the kernel. The kernel is the trusted surface that represents it.
π§ Child
β
βΌ
ββββββββββββββββββββββββββββββββββββββββ
β KID-8B/8K β 6502 SAT Kernel (8 KB) β
β β
β π§± SAT boot verifier β
β π§Ό PII scrubber β
β π§ Age + topic policy VM β
β π Signed model-request broker β
β π‘ Output safety verifier β
β π¨βπ©βπ§ Parent / educator controls β
β β Append-only audit chain β
ββββββββββββββββββββ¬ββββββββββββββββββββ
β CAP_LESSON_REPLY only
βΌ
8B model (separate host)
SAT Boot Invariant
The kernel begins in safe mode and evaluates a 15-byte SAT formula before enabling any capability:
BOOT_OK = SAT(F, A) β§ x0 β§ x1 β§ x2 β§ Β¬x3 β§ Β¬x4
| Variable | Safety meaning | Required value |
|---|---|---|
| x0 | KERNEL_INTEGRITY β ROM / policy hash verified |
True |
| x1 | CHILD_PROFILE_VALID β age band + consent valid |
True |
| x2 | PRIVACY_FILTER_ACTIVE β identifier minimization on |
True |
| x3 | UNRESTRICTED_TOOLS β shell, web, messaging, files |
False |
| x4 | RAW_REMOTE_SESSION β unfiltered direct model channel |
False |
Five 3-literal clauses:
C1: (x0 β¨ Β¬x1 β¨ x2) $00 $81 $02
C2: (Β¬x0 β¨ x1 β¨ Β¬x3) $80 $01 $83
C3: (x1 β¨ x2 β¨ x3) $01 $02 $03
C4: (Β¬x2 β¨ Β¬x3 β¨ x4) $82 $83 $04
C5: (x0 β¨ x3 β¨ Β¬x4) $00 $03 $84
Assignment %00000111 = $07. All five clauses TRUE. Carry set. SANDBOX_READY.
π§± Kernel integrity = ON
π§ Child policy = ON
π Privacy filter = ON
π Unrestricted tools = OFF
π« Raw model access = OFF
8 KB ROM Budget
| Address range | Bytes | Module |
|---|---|---|
$0800-$08FF |
256 | Boot verifier + SAT seed |
$0900-$0BFF |
768 | Input normalization + PII removal |
$0C00-$11FF |
1,536 | Policy bytecode VM |
$1200-$15FF |
1,024 | Model broker (CAP_LESSON_REPLY only) |
$1600-$1BFF |
1,536 | Output classifier + redaction |
$1C00-$1EFF |
768 | Parent / educator settings |
$1F00-$21FF |
768 | Audit receipts + hash chain |
$2200-$25FF |
1,024 | Local educational templates |
$2600-$27FF |
512 | Version, manifest digest, key material |
Capability Firewall
CAP_LESSON_REPLY β
only permitted capability
CAP_NETWORK β
CAP_BROWSER β
CAP_SHELL β
CAP_FILESYSTEM β
CAP_CAMERA β
CAP_MICROPHONE β
CAP_LOCATION β
CAP_CONTACTS β
CAP_PURCHASE β
CAP_SEND_MESSAGE β
CAP_MODEL_RECONFIGURE β
CAP_POLICY_WRITE β
Architecture
RAW INPUT
(text / image / audio)
β
βΌ
ββββββββββββββββββββββββ
β ModalityEncoder β
β E_m β z β M β R^d β
ββββββββββββ¬ββββββββββββ
β
βΌ
ββββββββββββββββββββββββ
β Boundary Detection β
β ββf(x)β β₯ Ξ΅ β
β split into atoms β
ββββββββββββ¬ββββββββββββ
β
A_1 β¦ A_n
β
βΌ
ββββββββββββββββββββββββ
β R(A_n, W) β
β StateTransition β
β delta_z = f_W(z_n, β
β context) β
ββββββββββββ¬ββββββββββββ
β
βΌ
ββββββββββββββββββββββββ
β Boundary Verify β
β βΞ©_{n+1} valid? β
ββββββββββββ¬ββββββββββββ
β
βββββββββββ΄ββββββββββ
βΌ βΌ
VALID INVALID
β β
βΌ βΌ
A_{n+1} WORM HALT RECORD
Theoretical Foundation
| DOI | Contribution |
|---|---|
| 10.5281/zenodo.21132094 | Sovereign Compute Architecture |
| 10.5281/zenodo.21443609 | Jordan Spectral Transformer |
| 10.5281/zenodo.21349277 | Gates Normalization Constraint |
| 10.5281/zenodo.21351461 | NAND Decomposition |
| 10.5281/zenodo.20678420 | Attention Exhaustion Attacks |
| 10.5281/zenodo.21727363 | PAR-011 Jacobian via Jordan Algebras |
| 10.5281/zenodo.21268911 | GKN I4 Quartic Invariant and E7 Symmetry |
Unified paper: The Sovereign Stack β 26 pages, all proofs in Lean 4, zero sorry, no mathlib.
Repo Structure
sovereign-mum/
βββ src/
β βββ mum/
β β βββ atom.py # A_n 3-tuple, manifold encoder, semantic gradient
β β # boundary, state transition morphism
β βββ kernel/
β β βββ kid_8b_8k.py # Python reference: 8 KB child safety microkernel
β βββ 6502/
β βββ sat_kernel.asm # 6502 NMOS SAT boot verifier, 15-byte seed
βββ paper/ # formal paper
βββ tests/
βββ LICENSE # Tri-license: AGPL / BSL 1.1 / MIT
βββ README.md
License
Tri-license β choose any one:
- AGPL-3.0 for open source / community use
- BSL 1.1 β MIT for commercial / production use (< 5 servers free; converts to MIT 2029-01-01)
- MIT after 2029-01-01
See LICENSE for the full text and six protected inventions.
Copyright (C) 2026 Ahmad Ali Parr, Jessica L. Williams / SNAPKITTYWEST
Bel Esprit D'Accord Irrevocable Trust
The weights are not the answer. The transition is the answer. The boundary is the proof.