Courses
A manual for what we built
Permanent memory is not a button. For it to work as intended you need to understand three things: where each thing is stored, who holds the key, and what actually happens when you delete. This is that, taken apart step by step — from the first conversation to reading your own referral grid.
How the three memory layers work
PADAM is not a metaphor. It is three separate stores with different speeds, costs and lifespans.
Why exactly three
AI memory usually fails in one of two places. Either it is too short — the assistant remembers the last few messages and forgets everything from yesterday. Or it is too expensive — re-reading the whole archive on every request runs straight into the size of the context window and into the compute bill.
Splitting memory into three layers solves both at once. The fast store keeps what is needed right now and costs almost nothing. The semantic store finds the right piece of the past without re-reading all of it. The permanent store makes sure the past still exists in twenty years — and takes no responsibility for speed or search.
Most comparisons make the same mistake: they line the layers up and ask which is best. They do not replace each other. Remove the first and the conversation falls apart within a single session. Remove the second and the assistant stops recognising you. Remove the third and everything you have accumulated lives exactly as long as the company holding the servers.
Layer one: working memory
Technically this is a key-value store held in RAM: Redis, in our case through Vercel KV. It holds the context of the conversation you are having now — the last exchanges, who you are, what is being discussed, which clarifications have already been made so you do not have to repeat them.
The defining property of this layer is speed. A lookup takes milliseconds, which is why the assistant answers without pauses. The second property is impermanence. RAM is not built for decades, and treating it as an archive is the most common beginner's mistake.
The practical conclusion: if a conversation ran for hours and mattered, do not rely on the first layer to hold it. It is not supposed to. Two other layers exist for exactly that, and the handover happens without you doing anything.
Layer two: semantic memory
This is a database with vector search: pgvector on top of Postgres in Neon. Every meaningful fragment of experience becomes a vector — a set of numbers describing what the fragment means rather than which letters it contains. Things close in meaning end up close together in that space, even when written in completely different words.
This is where the effect everything was built for comes from. You ask “what did we decide about that whole business with the move”, naming no dates and no names. Keyword search finds nothing — there is nothing to match. Meaning-based search finds it, because it searches by proximity of sense.
The second layer also handles the economics. What goes into the model is not the whole archive but the few fragments closest in meaning. That is why the size of accumulated memory has almost no effect on the cost of an answer: the storage grows, the per-conversation bill does not.
This layer has an honest limitation worth knowing in advance. It searches by meaning, and meaning is approximate. Ask something too broad and too much matches, and the answer comes back vague. A precise question almost always gets a precise answer. It is a skill, and it takes about a week to pick up.
Layer three: permanent memory
Arweave is a permanent storage network where you pay once and storage is prepaid for a horizon measured in generations rather than years. A Solana cNFT — a compressed non-fungible token — acts as the receipt: it ties a specific saved snapshot to a specific owner and makes that link verifiable by anyone, without us being involved.
The key difference from an ordinary cloud backup: a cloud backup has an owner, an invoice and a “terminate service” button. An Arweave record has no owner in that sense. It does not depend on whether we pay for hosting next month, or whether we exist at all.
That is precisely why sixty-five per cent of everything the router receives goes to the treasury to buy AR, the Arweave network token. It is not a reserve for future development; it is a direct payment for the place where your memory will sit after us. A promise of permanence with no storage purchase behind it is just a line in an advert.
The other side of immutability is fairer said up front: what is written to Arweave cannot be erased. Not by us, not by you, not by a court. That is exactly why access to the contents is closed with a key — what gets destroyed is not the record but the ability to read it. There is a separate walkthrough on that below.
How the three work together
The sequence is this. You write a message; it lands in working memory and takes part in the conversation instantly. In parallel, meaningful fragments move to the second layer and become part of semantic search. Once an hour — or immediately, as soon as the dialogue file passes ninety kilobytes — what has accumulated goes to the third layer.
There is not a single button press anywhere in that chain, and there never will be. Manual saving would mean that one day somebody does not press it: tired, distracted, in a hurry. Memory that depends on the owner's discipline is not memory, it is a diary.
The ninety-kilobyte threshold exists for exactly one case — a very long and very important conversation. Waiting out the full hour when twenty minutes have produced a book's worth of text would be unreasonable, so size fires before the clock does.
Both rules apply on every plan, including the free one. Saving your correspondence is the foundation of the system, not a paid feature: charging a person for the right not to lose their own words strikes us as indecent.
Memory you have to remember to save is not memory, it is a diary. The difference is who is responsible for keeping it: the person or the machine.
— From the walkthrough “Three layers”
What to do about keys
The shortest chapter by length and the most expensive by consequence.
Where the encryption actually happens
The order of operations matters more than the cipher. Contents are locked before they leave for permanent storage, not on arrival. The distinction looks like a formality right up until the first legal request or the first breach: in both cases what sits on the server is an unreadable run of bytes, not text with a note saying “encrypted in transit”.
From that follows the property we consider central to the whole system: we physically cannot read your correspondence. Not “we do not read it as a matter of internal policy”, not “we read it only with your consent” — we cannot, because we do not hold what opens it.
This claim should not be taken on trust, ours included. The right question to ask any service promising privacy is: where does encryption happen, and who holds the key. If the service holds the key, everything else is a question of its good behaviour and its ability to withstand pressure, not of how it is built.
Why the record stays and the access disappears
Permanent storage is immutable by nature — that is the entire point of it. A record that can be erased is not permanent, and no amount of promising fixes that. So deletion here is built differently from deletion in an ordinary database.
In an ordinary database, “delete” usually means setting a flag and no longer showing the row. The data stays: in backups, in replication logs, in analytics exports. A year later somebody finds it somewhere nobody was looking.
Here, the key is deleted. The encrypted block stays in the network but turns into noise: without the key it is indistinguishable from random bytes. It cannot be recovered by brute force, by court order or by our goodwill — there is nothing left to recover.
What that means in practice
Three consequences worth accepting before rather than after. First: deletion is instant and final, there is no bin. Second: “restore it, I changed my mind” is the one request we cannot fulfil no matter how much we would like to. Third: whoever gets your key gets your memory, and no setting anywhere changes that.
Which gives simple rules of behaviour. Do not delete while angry — come back to that decision tomorrow. Do not hand over access to your account, including to people close to you, unless you want them reading everything. Family Archive exists for shared access, that is what it was built for, and the separation there is done properly.
And separately, the thing we get asked about most. We do not create accounts on your behalf, we do not enter passwords for you, and we never ask you to send a key over any messaging channel under any circumstances. Any email or message asking you to do that in our name is not from us. Our only address is contact@codeofdigitaleternity.com.
How a personal perimeter differs from a shared one
The Digital DNA tier — one thousand dollars once per device, then two hundred dollars a month — provides a personal protected perimeter. The difference is not in the number of features but in isolation: your own environment instead of a shared one.
Who genuinely needs it: anyone carrying obligations to third parties. Medical confidentiality, legal privilege, clients' commercial data, any correspondence whose safekeeping you are answerable for to somebody other than yourself. Here isolation is not a luxury but the condition under which you are entitled to use a service like this at all.
Who is overpaying: anyone who wants “the top tier” without being able to say what exactly they are isolating. The privacy guarantee for correspondence does not depend on the plan — it is the same on all of them, free included, because it comes from the key. The perimeter solves a different problem, and buying it for privacy means paying twice for something you already have.
How the ambassador programme works
Two kinds of node, three levels of depth and one rule that decides everything.
Two kinds of node
An Ambassador Node is an individual inviting people they know. An Ambassador Team is a company or a partner with an audience of its own. The difference is not the size of the first-level reward but the number of channels: a node has one, a team has three.
Every payout in the system is framed as a Network Validation Fee. The wording was not chosen for elegance: income arises from real memory-usage transactions, not from the act of signing somebody up. Paying for a bare registration is not something the system can do, technically.
The on-chain channel: fifteen, seven and three
This channel works for everyone, regardless of node type. From on-chain memory-usage transactions made by the people you invited, you receive fifteen per cent at the first level, seven at the second and three at the third, paid in $GALATIN.
What is counted is a share of a transaction, not of a subscription. Income is therefore not fixed: it depends on how actively your invitees actually use memory. Someone who registers and disappears brings nothing — that is the design, not an oversight.
The grid goes no deeper than three levels. The smart contract knows no fourth level, and promises of “unlimited depth” from anyone whatsoever simply have no relationship to what the contract says.
Two extra channels for an Ambassador Team
The first is the fiat channel, from sales of licences and subscriptions: seven per cent at the first level, three at the second, one at the third. It is calculated from the price of the plans — fifteen, one hundred or two hundred dollars a month respectively.
The second is the buyback channel. If a partner chooses to be paid in $GALATIN, the rates are higher: eight, four and two per cent. The platform then buys the token on the open market for the amount of the reward.
The higher rate on the second channel is neither a gift nor a promotion. Buying from the market creates steady buy pressure, which against a hard cap of ten billion tokens works in favour of every holder at once. The partner is paid more for choosing a form of payout that is useful to the system.
The level-alignment rule
The most misunderstood part of the programme, and simultaneously the most important. Referral income is calculated from the amount of your own plan, not the plan of the person you invited.
Take it in numbers. You are on Spark at fifteen dollars. Someone you invited takes Digital DNA at two hundred dollars a month. Your first-level percentage is calculated from fifteen, not from two hundred. The gap between what was credited and what could have been credited is shown in the cabinet as its own line — that is the lost opportunity.
The rule does not exist to withhold money. It closes off the arrangement where a person on the cheapest plan builds a network of expensive subscribers and lives off somebody else's tier while putting in nothing. Here the level of income is tied to your own participation.
Upgrading switches on full payouts from your invitees' next payments. Nothing is recalculated retroactively: the lost-opportunity line shows the price of waiting, not a debt that will be repaid to you.
A promise of permanence with no storage purchase behind it is a line in an advert. That is why sixty-five per cent goes to the place where memory will sit after us.
— From the walkthrough “Where a transaction goes”