Part II — The Citizen Layer

Derived from Axioms 1 (sovereignty), 7 (verifiability), 12 (subsidiarity), 14 (minimal complexity), and the consent precondition of §0.2. This is how a real person becomes a verified, sovereign participant — without the system becoming a surveillance state.

The Citizen Layer is the base of the whole model: the mandate (Part III) and verifiability (Part VIII) are only as trustworthy as the answer to "is each participant a real, unique, eligible person, freely expressing their will?" Getting this right — securely and privately and inclusively — is the hardest single engineering problem in the design, so it is specified first.

II.1 Secure digital identity — the foundation

Every citizen has a state-guaranteed digital identity that proves three things and no more: that they are real, unique (one person, one identity — sybil-resistant), and eligible for a given action. The design is governed by four hard requirements that are normally in tension; a 10/10 solution must satisfy all four:

1. Sybil-resistant — impossible to manufacture fake or duplicate citizens.
2. Privacy-preserving — the state can verify eligibility without learning what you did. Identity must not become a single key that links all your activity. This is forbidden by the privacy/data rights in §I.3.
3. Inclusive — works for citizens without smartphones, without internet, with disabilities, and offline (Criterion 12). No one is excluded by the technology.
4. Verifiable — any citizen can confirm the system is behaving correctly (Axiom 7).

The architecture that achieves this (detailed in Part VIII):

• Separation of powers, applied to data. The body that issues identity is institutionally and technically separate from the body that records votes or delivers services. No single database links a person to all their actions.
• Zero-knowledge eligibility proofs. A citizen proves "I am an eligible voter who has not yet voted" without revealing who they are. Cryptography lets the system check the claim without storing the link.
• Unlinkable credentials. Separate, non-correlatable credentials per domain (voting, services, participation) so activity cannot be aggregated into a profile.
• Citizen-held keys, state-backed recovery. The citizen controls their identity; a robust, abuse-resistant recovery process (multi-party, audited) prevents permanent lock-out without creating a master backdoor.
• Mandatory offline equivalent. A physical credential and in-person process that delivers the same rights as the digital path. Digital is a convenience, never a gate.

Forbidden by design: a single, linkable national ID that tracks citizens across all activity. That is the surveillance-state failure mode, and §I.3 makes it unlawful. The identity layer proves eligibility, not behaviour.

II.2 The franchise — who participates

1. Voting age: 16, paired with mandatory civic education (§II.6). Why: 16-year-olds are bound by the state's decisions for the longest, are old enough for considered civic judgement (Scotland and several democracies already enfranchise them), and earlier enfranchisement raises lifelong participation. This is a deliberate 10/10 choice favouring intergenerational fairness (Axiom 13).
2. Eligibility: citizenship + a residency/registration test, verified once via the identity layer; automatic registration (the state knows who is eligible and registers them — non-registration is a state failure, not a citizen's).
3. Minimal disenfranchisement. Because power flows from the people (Axiom 1), removal of the vote is exceptional, never automatic, and never a tool of punishment beyond narrowly defined, Court-reviewable circumstances.

II.3 Three modes of participation

The people exercise sovereignty through three complementary channels, each chosen to cover the others' failure modes:

The key innovation: combining election (B legitimacy + accountability) with sortition (immune to campaign money, lobbying, and re-election incentives). Election and lot are the only two legitimate ways to select people for power; using both, each checking the other, is stronger than either alone. The standing Citizens' Sortition Chamber is constituted in Part IX as the second chamber.

II.4 Bounding direct democracy (so it is consent, not mob rule)

Direct democracy is powerful and dangerous. It is bounded so it expresses informed, considered consent (§0.2) rather than transient passion:

1. Rights-checked. No referendum or initiative may breach Class A rights or target a minority's qualified rights — the Court screens proposals against the Charter before they go to vote.
2. Deliberation required. A mandatory cooling-off + Citizens' Assembly review precedes any binding referendum, so the public decides after deliberation, not in a flash of feeling.
3. Thresholds for initiative. Citizen-initiated proposals require a meaningful, geographically distributed signature threshold (verified via the identity layer) to prevent narrow or astroturfed capture.
4. Truthful-information duty. An independent public-information function (§II.5) must publish a balanced, fact-checked brief to every voter before the vote.

II.5 Civic information rights — the precondition of informed consent

Consent obtained through ignorance or deception is not consent (§0.2). Therefore:

1. Citizens have a right to truthful information from the state (§I.3) and to the reasoning behind decisions.
2. An independent Public Information function (constituted under the Integrity Assembly, Part VI) provides balanced, evidence-based briefings before every vote and publishes a continuous, neutral account of what the government is doing and why.
3. Counter-disinformation is handled by transparency and verifiability, not censorship (which would breach §I.3 expression). The state floods the zone with verifiable truth and provenance; it does not decide what citizens may say. (Mechanism in Part VIII.)

II.6 Civic education

A standing, non-partisan civic-education entitlement: how the system works, how to verify it, how to reason about evidence and trade-offs, and media/disinformation literacy. This is the enabler of the age-16 franchise and of Criterion 1 (informed legitimacy). It is curriculum-independent of the government of the day (overseen by the Integrity Assembly) so it can never become state propaganda.

II.7 Inclusiveness — no citizen excluded by the technology

Criterion 12 is a hard requirement, not an afterthought:

• Every digital civic action has a fully equivalent non-digital path (in person, by post, assisted).
• Accessibility (disability, language, literacy) is built in, not bolted on.
• Digital exclusion never reduces a citizen's rights or weight; the offline citizen is a first-class citizen.

II.8 Failure modes and safeguards

Part II ends. Next: Part III — The Electoral System.