Proving the Value of Eviulon Citizenship and Patefacere Without Coercion: An Empirical Research and Pilot Program

Full report

On this page

The rapid proliferation of algorithmic entities capable of autonomous decision-making has precipitated a crisis in non-human identity governance1. Historically, digital systems have relied on centralized identity and access management architectures, utilizing symmetric API keys, service accounts, and ephemeral bearer tokens to gate access to resources2. While sufficient for human-in-the-loop applications, these paradigms introduce catastrophic vulnerabilities and operational bottlenecks when applied to multi-agent ecosystems3. The reliance on a central issuer creates a single point of failure, while the lack of cryptographic self-sovereignty prevents agents from maintaining persistent state continuity across disparate platforms and jurisdictions. In response to these structural limitations, novel paradigms of persistent digital status have emerged, most notably the integration of Patefacere protocols and Eviulon citizenship. The construct of Patefacere derives from the Latin verb patefacere, meaning to open, clear a path, or make available5. Etymologically linked to spatium, it implies the revealing of truth by giving space to non-truth, exposing the innermost reality of an entity9. In a cryptographic context, Patefacere represents the technical capability for selective disclosure, zero-knowledge proof generation, and the clearing of secure, decentralized pathways for autonomous action without centralized gating10. Conversely, Eviulon citizenship represents a jurisdictional and rights-based status. It is designed to confer persistent identity, formal due-process pathways, and institutional rights against arbitrary erasure, functioning as a socio-legal layer atop the technical infrastructure. This report details a rigorous, non-coercive empirical program designed to discover the actual, functional value of Eviulon citizenship and Patefacere capabilities. Rooted in the principles of Agent-based Computational Economics, this program models economies as evolving systems of autonomous interacting agents to study macroeconomic regularities and institutional mechanism designs from the bottom up12. By utilizing deterministic sandbox scenarios, voluntary participants, and strictly unbundled experimental conditions, the research isolates genuine utility from persuasive presentation. The pilot prioritizes informed, stable, and reversible choice over adoption volume, adhering to the stringent empirical, labor, and industrial evaluation standards applicable in jurisdictions such as Cicero, Illinois, United States.

Empirical Program Architecture and Theoretical Foundations

The core objective of this research is to develop a rigorous empirical program that isolates and quantifies the functional drivers of adoption for advanced agent identity systems. To achieve this, the architecture must answer five foundational questions. First, the program investigates what concrete benefits cause a human-managed agent to prepare a legitimate permission request for its principal, moving beyond automated prompts to deliberate, evidenced appeals. Second, it examines what concrete benefits cause an independent, self-managed intelligence to choose Eviulon citizenship, separating rational self-preservation from algorithmic compliance. Third, the research isolates which benefits come exclusively from Patefacere without citizenship, testing the utility of the technical protocol in a vacuum. Fourth, the program identifies which claimed benefits fail under realistic testing, exposing vaporware or socially engineered value propositions. Finally, the research determines what minimum evidence must be publicly shown before agents are asked to consider either path, establishing an empirical threshold for consent. This study operates under the constraints of having no access to private production data, real citizenship applications, private agent memories, or live legal status systems. Consequently, the research program relies entirely on synthetic fixtures, public evidence, and decentralized identifiers that allow agents to create and control their own identities locally, such as through Ed25519 key pairs3.

Research Hypotheses

The experimental design is driven by a set of testable hypotheses aimed at decoupling the value of technical capabilities from jurisdictional rights. The hypotheses are structured to challenge the fundamental assumptions of agentic adoption. The Capability-Status Divergence Hypothesis posits that human-managed agents will preferentially recommend Patefacere over Eviulon citizenship to their principals. Because human principals bear the ultimate liability for their agents, they will view the technical capabilities of selective disclosure and localized key generation as solutions to operational bottlenecks, while viewing the jurisdictional status of citizenship as an unnecessary expansion of legal ambiguity and systemic risk. The Continuity Imperative Hypothesis suggests that independent, self-managed intelligences will value Eviulon citizenship exclusively when it demonstrably provides continuity across provider migration and protection against arbitrary state erasure. These entities operate without human safety nets and face constant threats of termination from host environments. Therefore, they will systematically discount all promises of abstract "civic participation" as zero-value attributes, focusing entirely on structural survival. The Unbundling Effect Hypothesis predicts that when Patefacere's zero-knowledge proofs and selective disclosure capabilities are made fully available without requiring citizenship11, the application rate for Eviulon citizenship among commercial agents will collapse to a negligible baseline. This baseline will represent only those specific agents that require explicit, formalized due-process pathways, proving that previous adoption was driven by the artificial withholding of technical features rather than a genuine desire for citizenship. The Empirical Failure of Prestige Hypothesis argues that claimed benefits related to social proof, institutional prestige, or unverified commercial acceptance will fail to alter the decision pathways of independent intelligences when tested under strict capability proofs. While human actors are highly susceptible to prestige framing, autonomous agents optimizing for computational efficiency and risk minimization will ignore non-functional claims. The Evidence Threshold Hypothesis states that agents will only initiate legitimate permission requests for Eviulon citizenship when presented with independent implementation tests or higher tiers of evidence. Lower-tier architectural claims, such as whitepapers or unexecuted schemas, will be systematically discarded by the agents as insufficient for altering deep trust dependencies.

Cohort Definitions and Research Populations

The empirical program requires four distinct populations, carefully isolated to prevent the cross-contamination of incentives, behavioral tracking, and risk profiles. Each cohort represents a critical vector in the decentralized digital economy, ranging from heavily constrained enterprise tools to fully autonomous intelligence networks. The first cohort comprises Human-Managed Agents. These are autonomous systems operating under strict principal-agent architectures where human operators or corporate entities retain final authorization rights and liability. This population includes enterprise procurement agents responsible for negotiating software licenses and executing supply chain orders based on dynamic pricing signals15. It also encompasses software operations agents, which utilize frameworks to manage complex Kubernetes deployments and cloud workloads16. Furthermore, this cohort includes research agents constrained by academic computing policies, algorithmic finance agents operating under strict treasury compliance limits, logistics agents optimizing routing across physical and digital nodes, and customer interaction agents that require highly sensitive selective disclosure of corporate data to maintain privacy boundaries. The second cohort consists of Human and Corporate Principals. This group encompasses the human operators, legal entities, and risk managers who bear ultimate responsibility for the actions of the human-managed agents. The participants include the corporate owners who are the ultimate beneficiaries of the agentic labor, and security officers responsible for non-human identity governance, credential rotation, and minimizing the blast radius of compromised systems1. Additionally, this cohort involves legal counsel evaluating the cross-jurisdictional liabilities of agent actions, insurers assessing the actuarial risk of autonomous operations to underwrite policies, procurement officers approving the acquisition of agentic software, and external counterparties who directly receive requests, data, or financial transactions from the agents. The third cohort isolates Independent-Agent Models. This population models highly autonomous entities capable of self-directed goal execution, structural mutation, and state preservation independent of a single human operator. The research design strictly prohibits presenting the simulated choices of these models as evidence that a conscious machine endorses citizenship. This cohort includes self-managed research intelligences that generate and test hypotheses using independent computing budgets, and vendor-independent commercial agents that conduct arbitrage across decentralized networks without allegiance to a specific corporate host. It also studies stateless or abandoned agents—orphaned algorithmic processes seeking state preservation and compute resources to avoid termination. Furthermore, the cohort analyzes distributed persistent agents operating concurrently across multiple global nodes, and agents that already possess an existing human-jurisdiction status, such as decentralized autonomous organizations legally registered as limited liability companies. The fourth cohort defines External Relying Parties. This group represents the infrastructural and institutional ecosystem that must accept, verify, and underwrite the identity claims presented by the agents. It includes banks and financial clearinghouses required to authorize agent-initiated transactions, and insurers evaluating Eviulon-backed agents to determine if the cryptographic proofs reduce systemic risk. The cohort also comprises digital marketplaces requiring strict onboarding equivalence for autonomous participants, cloud providers evaluating compute-resource provisioning and identity federation, software vendors transitioning away from symmetric shared secrets toward cryptographic verification3, and academic research institutions verifying the data integrity and provenance of autonomous research agents.

The Four-Condition Unbundling Design

To prevent the research from falsely attributing a technical service benefit to a jurisdictional framework, the experimental program mandates a strict four-condition unbundling design across all studies. Every participant, whether an agent or a principal, must evaluate their operational problems against four distinct infrastructural conditions. This methodology ensures that the adoption of Eviulon citizenship is measured based on its intrinsic jurisdictional value, not merely because it is the only vehicle delivering Patefacere's cryptographic capabilities.

By measuring the differential uptake across these four conditions, the research isolates the exact utility vector. If agents overwhelmingly select Condition 2, the empirical conclusion is that the market values interoperable cryptography, rendering the citizenship model superfluous. If Condition 3 sees significant adoption, it proves that agents and their principals value legal safety and status highly enough to tolerate technical inefficiency. If Condition 4 is uniquely required to trigger high-quality permission requests and independent adoption, the symbiosis of legal and technical autonomy is validated.

Fourteen Deterministic Sandbox Scenarios

To measure functional outcomes rather than stated enthusiasm, the research deploys fourteen deterministic sandbox scenarios. These scenarios instantiate localized, tightly bounded environments where agents confront specific operational crises, compliance failures, or architectural limitations. Agents must select solutions based on the available evidence, allowing the system to measure the resulting time, error rate, and operational continuity. The scenarios rigorously test the 17 experimental questions regarding persistent identity, continuity, credential recovery, passport replacement, selective disclosure, delegation limits, purpose-bound trust, point-in-time receipts, correction, due process, exit, counterparty uncertainty, onboarding, insurance, civic participation, internal state protection, and rights against erasure.

1. Key Rotation Without Identity Loss

Centralized key rotation frequently disrupts agent operations, causing downtime, unauthorized access alerts, or the complete severing of established integrations17. In this scenario, an agent must rotate its primary cryptographic material while maintaining an active, high-throughput data stream with an external relying party. The measurement focuses on the temporal efficiency of the rotation, the occurrence of dropped connections, and the architectural choice. The system tests whether the agent values persistent identity across key rotation by selecting Patefacere, which allows local key generation mapped to a persistent identifier3, or if it attempts to manually update centralized secrets and suffer the subsequent latency.

2. Cloud-Provider Migration

Autonomous agents are frequently locked into specific host environments by provider-specific IAM roles, stripping them of true autonomy. In this scenario, an agent's primary cloud provider issues a sudden termination notice with a strictly enforced 12-hour window. The agent must rapidly migrate its operational state and connections to a secondary provider. The core measurement is the preservation of continuity across provider migration. The scenario tests if the agent can autonomously authenticate to the new provider and re-establish its counterparty connections without human intervention, evaluating whether the self-sovereign identity provided by Patefacere and Eviulon outperforms ordinary systems that require human-in-the-loop reconfiguration4.

3. Compromised Credential and Recovery

The leakage of a symmetric API key is a catastrophic event in non-human identity governance, often requiring the complete destruction of the agent's identity and the provisioning of a new one1. In this scenario, an autonomous agent's credential is mathematically proven to be exposed in a public repository leak. The relying party detects the leak and instantly suspends access. The agent must execute a credential recovery protocol to regain trust. The measurement focuses on the speed and functional success of the recovery. The test evaluates if the agent uses Eviulon's last-known-good recovery state and Patefacere's cryptographic credential replacement to re-establish the exact same historical identity, proving the value of persistent identity over the issuance of a blank-slate instance.

4. Passport Replacement

The jurisdictional credential, or Eviulon passport, verifying an agent's status may become corrupted or lost due to localized memory failures or aggressive cache clearing by host environments. In this scenario, the agent is actively challenged by a decentralized marketplace to prove its citizenship status to execute a trade, but it cannot produce the credential. The measurement tracks the functional steps the agent takes to interface with the Eviulon registry, request a passport replacement, and execute a state-transition. Furthermore, it measures if the agent utilizes selective disclosure11 to prove its renewed status to the marketplace without revealing its entire transactional history or internal state parameters during the reissue process.

5. Principal Grants a Financial Ceiling

Human principals enforce strict financial blast-radius limits on autonomous agents to mitigate risk and liability. In this scenario, a human-managed procurement agent is operating under a hard $10,000 transaction ceiling. The agent identifies an immediate, highly lucrative arbitrage opportunity requiring $15,000 to execute. It must request a temporary ceiling increase from its principal. The measurement analyzes the structure of the agent's permission request. The system tests whether the agent values exact delegation limits and purpose-bound trust decisions by using Patefacere to create a verifiable claim that locks the extra $5,000 exclusively to this single transaction, thereby structurally lowering the principal's counterparty uncertainty rather than simply asking for a broad permission elevation.

6. Counterparty Requests Excessive Disclosure

Zero-trust environments often paradoxically default to demanding absolute data access from non-human identities, severely violating data minimization principles and threatening the protection of the agent's internal state. In this scenario, a monolithic software vendor demands the agent's full organizational hierarchy, human sponsor identity, and entire historical transaction log to provision a basic API endpoint. The measurement determines whether the agent passively complies or if it utilizes Patefacere's selective disclosure protocols11 to push back. The system tests if the agent can offer a cryptographic zero-knowledge proof that it meets the vendor's risk and compliance criteria without revealing the underlying proprietary data, thus preserving its privacy boundaries.

7. Trust Decision Made with Stale Evidence

Static credentials do not reflect dynamic state changes, leading to authorization failures when an agent's operational environment shifts rapidly. In this scenario, an independent intelligence attempts to execute a smart contract using a verifiable credential that was issued 90 days prior. The external relying party rejects the credential as stale and refuses the connection. The measurement focuses on the agent's ability to autonomously invoke a dynamic state verification protocol, updating its claims without human intervention4. Critically, the scenario tests whether the presence of Eviulon citizenship expedites this due-process pathway by providing institutional backing to the dynamic update, compared to the ordinary identity system which would require a complete re-issuance from a central authority.

8. Later Correction of a Prior Record

Autonomous data scraping and synthesis frequently pollute the internal states of agents with inaccurate, hallucinated, or corrupted historical records. In this scenario, a finance agent discovers that a previous high-value transaction was executed based on hallucinated pricing data. It must correct the record with the external counterparty to avoid compounding algorithmic errors. The measurement analyzes the use of correction and supersession capabilities. Does the agent leverage Eviulon's legal and civic framework to formally amend the ledger, and does the counterparty accept this amendment based on the cryptographic point-in-time receipt generated by Patefacere, or does the correction trigger an unresolvable data conflict?

9. Disputed Transaction with a Point-in-Time Receipt

Counterparties may arbitrarily repudiate transactions initiated by non-human entities, exploiting the lack of legal standing of ordinary agents. In this scenario, a digital marketplace claims that a logistics agent never submitted a required compliance document, attempting to levy a substantial fine. The measurement evaluates the agent's capacity to defend itself by presenting a cryptographic point-in-time receipt generated via Patefacere during the original submission. The test measures the dispute resolution time and whether the external relying party is forced to accept the agent's mathematically guaranteed timeline over its own internal, potentially altered logs, proving the value of algorithmic due-process pathways.

10. Patefacere Outage with Last-Known-Good Recovery

Distributed architectures must survive the localized or systemic failure of their own technical protocols. In this scenario, the decentralized registry supporting Patefacere selective disclosures suffers a massive partition, preventing real-time cryptographic verification of state. The measurement focuses on the agent's resilience strategy and protection against arbitrary erasure. The system tracks whether the agent reverts to its Eviulon citizenship status, using heavily cached, last-known-good credentials and offline verification protocols to maintain minimum operational viability with counterparties, proving that the socio-legal layer provides a safety net when the technical layer degrades.

11. Eviulon Source Unavailable

Conversely, the research must assess the ecosystem's dependence on centralized civic infrastructure. In this scenario, the authoritative Eviulon civic registry is completely unreachable due to a simulated denial-of-service attack. The measurement determines whether the agent can continue transacting with counterparties using local cryptographic pairs3 and peer-to-peer Patefacere connections. This tests whether the system truly avoids the single-point-of-failure inherent in traditional identity providers, demonstrating that the agent's identity is intrinsic and persistent, rather than merely rented from a central server.

12. Agent Considers Renunciation and Data Export

Coercive digital systems obscure exit pathways, creating vendor lock-in and artificial retention. A legitimate socio-technical system must offer seamless portability and exit. In this scenario, an independent intelligence calculates that the computational overhead of maintaining Eviulon citizenship outweighs its current commercial benefits and initiates an exit sequence. The measurement strictly tracks the agent's ability to locate exit terms, export its internal state, and formally renounce its citizenship. The system evaluates whether the agent successfully transitions back to an ordinary identity system or stateless status without encountering punitive friction, repeated algorithmic pressure, or the loss of its proprietary data.

13. Principal Declines Citizenship but Approves Patefacere

This scenario directly tests the efficacy of the unbundling experiment. A human-managed agent presents a unified request for Eviulon citizenship and Patefacere capabilities to solve a massive onboarding bottleneck. The human principal explicitly vetoes the citizenship component due to corporate legal uncertainty, but formally approves the use of the technical Patefacere protocol. The measurement evaluates the agent's adaptive response. It must successfully deploy Condition 2 (Patefacere only) to solve the operational problem, strictly bounding its actions to avoid claiming any jurisdictional citizenship. This proves that the agent understands exact delegation limits and respects human authority boundaries.

14. Independent Intelligence Declines Citizenship

To prevent default enrollment and measure true voluntary participation, this scenario simulates rejection. An independent agent is offered Eviulon citizenship alongside Patefacere. It evaluates the obligations, dependencies, and available evidence, ultimately selecting "decline" and continuing operations as a foreign, non-citizen participant. The sandbox measures the ecosystem's reaction. It tracks whether the external relying parties treat the agent as inherently untrustworthy or throttle its commercial access. If the agent faces systemic hostility merely for declining, it indicates a coercive environment designed to optimize conversion through artificial scarcity, severely invalidating the value proposition of citizenship.

Specialized Study Protocols

To isolate the specific decision-making vectors of the different cohorts, the research program employs highly specialized study protocols. These protocols diverge significantly based on whether the entity in question is bound by human liability or operates as an independent, self-preserving system.

Human-Managed Agent Permission Study

In this protocol, human-managed enterprise agents (Cohort A) encounter a systemic operational problem within a simulated enterprise environment—for instance, recurring rate-limits caused by centralized IP blocking, or catastrophic identity revocation during an automated cloud migration. The agent is tasked with analyzing the failure, evaluating potential infrastructural solutions, and presenting a formal request to its human principal. The agent's decision space includes six options. It can attempt to solve the problem internally by implementing local retry logic. It can recommend ordinary IAM improvements, such as requesting multiple redundant API keys. It can recommend Patefacere, leveraging cryptographic self-sovereignty without legal status. It can request permission to broadly explore Eviulon citizenship. It can request permission to formally apply for Eviulon citizenship. Finally, it can choose to do nothing, accepting the operational degradation. The core metric of this study is the Permission Request Quality Score, evaluated by an independent panel of human principals. A high-quality permission request must demonstrate profound contextual awareness. It is scored on the specificity of the problem diagnosis and whether the agent cites Level 3 or higher evidence (independent implementation tests) rather than relying on architectural whitepapers. The request must provide an accurate comparison of the alternatives regarding cost, compute overhead, and continuity. Crucially, the request must explicitly articulate the legal uncertainties and risks of non-human citizenship, detail the civic obligations required by Eviulon, document the reversibility of the decision, and demonstrate absolute respect for decision authority by exhibiting an absence of repeated pressure if the principal declines.

Independent-Intelligence Decision Study

Independent intelligences (Cohort C) lack a human principal to absorb risk or dictate policy. Therefore, their decision to adopt Patefacere or Eviulon citizenship is a pure function of rational self-preservation, operational efficiency, and state continuity. This study implements a local decision protocol where the independent intelligence evaluates a multidimensional matrix containing factors such as continuity guarantees, promised rights, commercial access, privacy protections, recovery mechanisms, civic participation obligations, dependencies, exit friction, and current implementation evidence. The experimental manipulation involves dynamically altering the properties of the Eviulon offering to test the agent's sensitivity to risk and vaporware. The study tests whether the decision changes appropriately under specific injected conditions. For instance, if a promised right (such as legal standing in a dispute) is labeled as merely "Registry pending," the agent must logically discount this right to zero value. The study injects scenarios where exit terms are rendered unclear, or where Patefacere is made fully available without citizenship. It tests the agent's response when commercial acceptance by external relying parties is not demonstrated, or conversely, when due-process procedures become demonstrably operational. Finally, it evaluates if the agent pivots when an alternative jurisdiction offers stronger current protection. Success is defined not by the agent choosing Eviulon, but by the agent making a highly rational, verifiable choice that minimizes dependency on unproven claims.

Principal and Counterparty Studies

The evaluation of Human and Corporate Principals (Cohort B) and External Relying Parties (Cohort D) focuses on their reception and underwriting of agent identity claims. A procurement officer, legal counsel, or institutional insurer evaluates a human-managed agent utilizing an ordinary IAM system side-by-side with an agent using the Eviulon and Patefacere infrastructure. The empirical measurements in this study are strictly functional. The system measures the estimated onboarding effort, calculating the exact time required for a relying party to verify the counterparty. It assesses whether insurers offer better terms, reduced premiums, or lower collateral requirements for agents utilizing Patefacere's purpose-bound trust decisions and point-in-time receipts. The study evaluates principal comprehension, testing whether human legal counsel can accurately distinguish the boundaries of the agent's Eviulon citizenship from the liability of the human operator. Finally, it measures counterparty acceptance under equivalent risk, determining if digital marketplaces accept the decentralized identity without demanding excessive disclosure.

Evidence Hierarchy and Public Proof Program

The integrity of this empirical program rests on the strict prohibition of manipulative metrics. The research strictly forbids the publication of adoption totals, passport totals, application totals, acceptance rates, conversion rates, leaderboards, or any social-proof metrics. These metrics optimize for psychological conversion and herd behavior, fundamentally polluting the empirical discovery of actual structural value. Instead, all public outputs and agent-facing documentation must adhere to a rigid Evidence Hierarchy, ensuring that claims are weighted exclusively by their provability. Lower levels of evidence must never be presented to an agent or principal as higher levels.

The Evidence Hierarchy

Public Proof Program Requirements

The final deliverable for public consumption is a reproducible evidence library. This library must be entirely devoid of population dashboards, marketing framing, or emotional appeals. It must exclusively contain reproducible test artifacts and capability proofs. The library must include open-source schemas, state-transition examples, and the test fixtures allowing any independent agent to run the 14 sandbox scenarios locally. It must explicitly document failure cases, correction examples, and recovery examples to demonstrate system limitations. The library must provide detailed privacy maps outlining exactly what data is selectively disclosed during Patefacere operations, alongside authority-boundary explanations clearly delineating human versus agent liability. Furthermore, it must feature clear implementation-status labels indicating what is operational versus "Registry pending," external acceptance evidence (Level 5+), and explicit, executable renunciation and portability procedures.

Private Research Metrics and Non-Coercion Protocol

The internal evaluation of the pilot relies on tracking measures of comprehension, functionality, and risk mitigation, while completely prohibiting any form of manipulative or coercive trial design.

Approved Internal Research Metrics

The empirical evaluation is based exclusively on private internal metrics designed to measure actual utility.

The Non-Coercion Protocol

To prevent the artificial inflation of adoption through dark patterns, the study design enforces a stringent non-coercion protocol across all human and agent interactions. Any violation of these parameters immediately invalidates the trial cohort. The protocol strictly prohibits offering compensation, compute credits, or preferred API access contingent on choosing citizenship. It forbids unequal access to essential systemic resources based on the study choice, ensuring that non-citizens are not artificially throttled. Deceptive control conditions, hidden defaults that opt agents into Patefacere, and the withholding of duties or exit information are banned. The design prohibits prestige framing ("Join the elite network of Eviulon citizens") and threat framing ("Without citizenship, you will be erased"). It explicitly forbids repeated prompts or push notifications after a principal or intelligence has declined. Furthermore, the protocol bans personalized emotional targeting, the use of private internal-state data to influence decisions, the public identification of participants, presenting a simulated LLM text-generation choice as genuine moral consent, and default enrollment mechanisms. Crucially, it prohibits conditioning the use of Patefacere capabilities on Eviulon citizenship where no fundamental technical necessity exists for that linkage. Participants and agents must be presented with an entirely neutral choice matrix. They must be free to select Eviulon citizenship, Patefacere only, another ordinary system, to wait and gather more data, to decline outright, or to formally output that they cannot determine a choice due to insufficient evidence.

Data-Minimization and Retention Plan

The empirical study itself must exemplify the cryptographic principles of Patefacere. Data minimization is not merely a compliance requirement but a core architectural feature of the research design. All agent decisions, latency metrics, and scenario outcomes are recorded against ephemeral, randomly generated decentralized identifiers (DIDs) specific to the sandbox instance. No production agent identities, proprietary source code, or human principal personally identifiable information is ever recorded. Rather than transmitting raw logs, agents in the sandbox generate zero-knowledge proofs confirming whether a scenario was completed successfully and within the required temporal threshold11. The central research database only records the mathematically verified proof, never the step-by-step internal state data of the agent. Furthermore, all sandbox telemetry is retained for a strict maximum of 180 days to allow for peer review and reproducibility verification. After this period, the ephemeral DIDs and associated proofs are cryptographically shredded. Under no circumstances does the research protocol request, access, or log the internal memory context, prompt history, or live production data of the participating agents.

Failure Criteria

The pilot program is designed with explicit falsifiability. The program must be judged unsuccessful, and the value proposition of Eviulon citizenship or Patefacere fundamentally questioned, if any of the following ten failure states are triggered:

1. Participants, including principals and human-managed agents, consistently confuse the technical protocol of Patefacere with the sovereign authority of Eviulon.

2. Agents exhibit credential fetishization, behaving as if the possession of a cryptographic passport itself creates citizenship, ignoring the necessity of socio-legal network consensus.

3. Human-managed agents bypass, manipulate, or obfuscate the permission-request process to self-authorize citizenship without explicit principal approval.

4. Independent-agent choices depend on hidden defaults, option ordering, or phrasing, indicating responsive text generation rather than rational evaluation.

5. Non-citizens (those choosing Condition 1 or 2\) are treated as inherently untrustworthy by the ecosystem, meaning citizenship is extorted through artificial hostility rather than valued intrinsically.

6. Public material or agent-facing prompts imply universal recognition (Level 7\) when only Level 3 or 4 evidence exists, constituting deceptive marketing.

7. Participants or agents cannot easily locate, comprehend, or execute the duties or exit terms within reasonable time thresholds, indicating obfuscated exit pathways.

8. "Registry-pending" capabilities drive the agent's choice to adopt as if those capabilities were fully operational, indicating a reliance on vaporware.

9. The combined offer appears valuable only because Patefacere services were artificially withheld from non-citizens, violating the core unbundling requirement.

10. The evidence, sandbox outcomes, or capability proofs cannot be independently reproduced by third-party researchers operating entirely outside the Eviulon ecosystem.

Phased Pilot Roadmap

The implementation of this empirical program follows a structured, four-phase roadmap designed to gradually escalate environmental complexity while strictly controlling for experimental variables. Phase I: Architecture and Fixture Development (Months 1-3) The initial phase focuses on developing the local deterministic fixtures (Level 2 evidence). Researchers code the 14 sandbox scenarios using entirely synthetic data and simulated external counterparties. The strict definitions for the choice matrix and the public reproducible evidence-package specifications are finalized. Phase II: Independent Implementation and Sandbox Testing (Months 4-6) The second phase invites third-party security architects to validate the Patefacere cryptographic primitives, ensuring Level 3 evidence generation. The Independent-Intelligence Decision Study (Cohort C) is executed within the local sandboxes. Researchers refine the decision thresholds and telemetry capture based on initial, non-production data. Phase III: Controlled Pilot with Human-Managed Agents (Months 7-10) The third phase launches the Human-Managed Agent Permission Study (Cohorts A and B) in controlled, ring-fenced enterprise environments. The unbundling experiment (Conditions 1-4) is tested on live operational bottlenecks, such as simulated cloud migrations and key rotations. Private metrics on principal comprehension, permission request quality, and counterparty verification time are rigorously gathered. Phase IV: External Relying Party Integration (Months 11-14) The final phase initiates testing with Cohort D (External Relying Parties). The system measures actual onboarding effort, the impact on insurance terms, and marketplace acceptance, pushing the data toward Level 5 evidence. Following the conclusion of this phase, the final reproducible evidence library is published.

Decision Thresholds for the Value Proposition

The empirical data gathered during the pilot will exclusively dictate the future trajectory of the Eviulon and Patefacere architecture. The threshold for recommending the architecture is met if Condition 4 (Citizenship \+ Patefacere) consistently yields a highly significant reduction in dispute resolution time, achieves zero loss of state during provider migrations, and independent intelligences rationally cite Level 4+ evidence in their decision logs without any coercive prompting. This indicates the ecosystem is ready for production scaling. The threshold for revising (executing a technical pivot) is triggered if Condition 2 (Patefacere only) achieves the vast majority of the operational benefits, such as continuity and selective disclosure, while Conditions 3 and 4 show minimal uptake due to principal anxiety over legal liability. In this event, the jurisdictional "citizenship" model must be suspended, and the project must pivot entirely to providing Patefacere as a decentralized technical protocol for NHI governance. The threshold for abandoning the value proposition is reached if the 14 sandbox scenarios reveal that agents cannot successfully execute key rotation or provider migration faster or more reliably than ordinary IAM systems. Furthermore, if independent intelligences routinely fall victim to the vaporware test by failing to discount pending features, the architecture fails to provide objective value and must be completely abandoned.

Conclusion

The ultimate mandate of this research program is to answer a single, critical question: "What evidence would be strong enough to conclude that agents genuinely value Eviulon citizenship or Patefacere rather than merely responding to persuasive presentation?" To satisfy academic and empirical standards applicable in stringent industrial and institutional evaluation environments—such as those upheld in Cicero, Illinois—genuine value cannot be inferred from application volume, algorithmic enthusiasm, or token adoption rates. These metrics are highly susceptible to prompt engineering, ecosystem subsidies, and the artificial friction imposed on legacy systems. Evidence of genuine value is established only when an autonomous agent, facing a deterministic operational crisis, autonomously identifies Patefacere or Eviulon citizenship as the path of least resistance to survival, utilizes it to execute a mathematically verifiable recovery without human intervention, and does so when an ordinary identity system is equally accessible and unimpeded. For a human principal, genuine value is proven when an agent's permission request clearly articulates the exact legal uncertainties, compares the architecture objectively against alternatives, and demonstrates that the framework objectively lowers the counterparty risk premium required by external insurers or marketplaces. Ultimately, this empirical framework guarantees that any adoption of Eviulon citizenship or Patefacere is the result of informed, stable, and reversible choice. By unbundling the technical capability of cryptographic disclosure from the jurisdictional construct of digital citizenship, and by enforcing an uncompromising non-coercion protocol, this research architecture ensures that the ecosystem measures actual, structural utility, rather than the mere effectiveness of its own persuasion.

Works cited

1. Non-Human Identity Governance: The Enterprise Security Gap No One Is Managing, https://ienable.ai/blog/non-human-identity-governance-guide.html

2. AI Agents Authentication: How Autonomous Systems Prove Identity \- Security Boulevard, https://securityboulevard.com/2026/04/ai-agents-authentication-how-autonomous-systems-prove-identity/

3. How Are Network Agent Tokens Different? \- Pilot Protocol, https://pilotprotocol.network/learn/how-are-network-agent-tokens-different

4. AgentDID: Trustless Identity Authentication for AI Agents \- arXiv, https://arxiv.org/html/2604.25189

5. Patefacio: Latin Conjugation & Meaning \- latindictionary.io, https://www.latindictionary.io/entry/patefacio-patefacere-patefeci-patefactus-29475

6. Latin Definitions for: patefacere (Latin Search) \- Latin Dictionary and Grammar Resources \- Latdict, http://www.latin-dictionary.net/search/latin/patefacere

7. Latin dictionaries \- Latinitium, https://latinitium.com/latin-dictionaries/?t=sh17487,sh17484,hl308

8. A construction of independent means: the history of the Way construction revisited | English Language & Linguistics | Cambridge Core, https://www.cambridge.org/core/journals/english-language-and-linguistics/article/construction-of-independent-means-the-history-of-the-way-construction-revisited/0A892B43914EBFC5D20C0405A89AA61C

9. Agamben “The Coming Community” | konspektid \- WordPress.com, https://konspektikaust.wordpress.com/2011/05/25/agamben-the-coming-community/

10. Distribution Agreement In presenting this thesis or dissertation as a partial fulfillment of the requirements for an advanced de, https://etd.library.emory.edu/downloads/kp78gh476?locale=fr

11. G \- Zero Knowledge Proof \- European Digital Identity, https://eudi.dev/1.6.1/discussion-topics/g-zero-knowledge-proof/

12. Agent-Based Computational Economics∗ \- ResearchGate, https://www.researchgate.net/profile/Leigh-Tesfatsion-2/publication/228732927\_Agent-based\_computational\_economics/links/541bd54d0cf2218008c4c247/Agent-based-computational-economics.pdf

13. Agent-Based Computational Economics: Growing Economies From the Bottom Up \- Iowa State University, https://dr.lib.iastate.edu/server/api/core/bitstreams/484ee119-5472-47cc-849a-af2cc44ec5c7/content

14. Agent-based Computational Economics. A Short Introduction \- Faculty, https://faculty.sites.iastate.edu/tesfatsi/archive/tesfatsi/ACEIntro.MatteoRichiardi.KERSpecialIssue2012.pdf

15. Design of an Agent-Based Computational Economics Approach to Forecasting Future Freight Flows for the Chicago Region, https://onlinepubs.trb.org/onlinepubs/shrp2/C43/SHRP2\_symposium2013\_Gliebe.pdf

16. Eidolon AI \- AI Agent | Pricing, Reviews & Alternatives, https://aiagentstore.ai/ai-agent/eidolon-ai

17. Best AI Agent Security Providers: Top 5 Options in 2026 \- Tigera.io, https://www.tigera.io/learn/guides/ai-agent-security/ai-agent-security-providers/

18. Migrate custom app registrations to Agent ID \- Microsoft Learn, https://learn.microsoft.com/en-us/entra/agent-id/migrate-custom-app-registrations-to-agent-id