add whitepaper draft

QA_cn.md

@@ -0,0 +1,60 @@
+# Sentinel Protocol (哨兵协议) 常见问题解答 (FAQ)
+
+---
+
+### Q1: 如果哨兵协议的公司倒闭了，我的数据和遗产还能找回吗？
+**A: 可以。** 哨兵协议在设计之初就考虑了“非依赖性”：
+* **数据持久化**：您的核心数据存储在 Arweave/Filecoin 等去中心化存储网络中，物理存续不依赖于我们的中央服务器。
+* **自救套件**：解密工具代码完全开源。即便公司消失，您只要持有完整的助记词或分片（S0/S1/S2），即可通过开源工具独立提取数据。
+* **DAO 接管**：智能合约会自动监测公司活跃度。一旦触发“失能状态”，协议控制权将自动移交给社区自治组织 (DAO)。
+
+---
+
+### Q2: 如何防止继承人（持有 S2）与平台（持有 S1）私下合谋窃取我的资产？
+**A: 技术隔离，无法串通。**
+在您的状态未判定为“已释放 (Released)”之前，存储 S1 分片的分布式节点处于**逻辑锁定状态**。任何节点在未检测到区块链上的“状态证明”（由智能合约签署的合法释放信号）前，都会拒绝任何碰撞请求。即便继承人持有 S2 凭证，没有系统生成的释放指令，也无法反推密文内容。
+
+---
+
+### Q3: 我只是暂时昏迷或在无信号地区工作（如公海），系统会误判我离世吗？
+**A: 不会。** 我们设计了**二次锁定 (Double-Lock) 机制**。
+* **冷冻期**：您可以预设 180-365 天的冷冻期。当心跳信号中断，系统会先进入“待定 (Pending)”状态。
+* **一键中止**：在漫长的冷冻期内，只要您重新上线或您的紧急联系人介入，释放流程将立刻中止并重置。
+* **睡眠模式**：如果您计划进行长时间的离线探险，可以直接开启“睡眠模式”暂停监测。
+
+---
+
+### Q4: 我最近经济状况不稳定，可以暂时停止订阅吗？
+**A: 可以。** 您可以随时开启“暂停/睡眠模式”。
+* **物理存续**：暂停期间，虽然 AI 监测等主动服务会停止，但您的数据仍会物理封存于存储网络中，不会被删除。
+* **随时唤醒**：您只需在未来补缴少量的存储维护费，即可一键恢复活跃状态。
+* **极端提取**：即便在暂停期间发生极端情况，继承人依然可以结算欠费并按照协议提取资产。
+
+---
+
+### Q5: AI 分拣数据时，会窥探我的隐私（如密码、遗嘱内容）吗？
+**A: 完全不会。**
+* **本地加密**：数据在离开您的设备前就已完成高强度加密。
+* **影子代理技术**：AI 仅在 **TEE (可信执行环境)** 硬件中处理元数据。AI 只负责建立索引和建议归档，不具备解密密文的密钥权限，无法读取文件内容。
+
+---
+
+### Q6: 哨兵协议在法律上真的有效吗？继承人能拿着导出的密钥去确权吗？
+**A: 是的。** * **法律前置声明**：在您设置 S2 接收人时，系统会生成基于数字签名的《告知书》，明确此行为属于合法的“受赠/继承”授权。
+* **公证联动**：对于 L2 级别用户，我们提供全流程法律公证支持。
+* **多维存证**：提取流程由区块链记录，确保继承行为的真实性，规避法律纠纷。
+
+---
+
+### Q7: 为什么 L0 用户的持久期只有 10 年？
+**A: 这是为了确保财务模型的稳健性。**
+10 年是一个财务平衡点，旨在覆盖去中心化网络的初始存储成本和协议储备池的对冲费用。到期后，数据进入“超期留存状态”，继承人仅需补足超期的极小额存储缺口即可完成提取。这种设计确保了协议在数十年跨度下依然具备抗风险能力。
+
+---
+
+### Q8: 如果我弄丢了所有的助记词，你们能帮我找回吗？
+**A: 抱歉，我们无法做到。**
+哨兵协议坚持**非托管**原则。如果您丢失了所有分片且未备份原始助记词，由于平台不掌握您的私钥全集，任何人都无法强制开启您的保险柜。这既是主权的保障，也是安全性的最终边界。
+
+---
+**哨兵协议：守护你的数字资产，直到主权再次被唤醒。**

QA_en.md

@@ -0,0 +1,60 @@
+# Sentinel Protocol FAQ (Frequently Asked Questions)
+
+---
+
+### Q1: If the company behind Sentinel Protocol shuts down, can I still retrieve my data and heritage?
+**A: Yes.** Sentinel Protocol is designed with "non-dependency" as a core principle:
+* **Data Persistence**: Your core data is stored on decentralized networks like Arweave/Filecoin. Its physical existence does not depend on our central servers.
+* **Self-Rescue Kit**: The decryption tool code is entirely open-source. Even if the company ceases to exist, as long as you hold your full mnemonics or shards (S0/S1/S2), you can independently retrieve and decrypt your data using open-source tools.
+* **DAO Takeover**: Smart contracts automatically monitor company activity. If a "failure state" is triggered, control of the protocol is automatically transferred to a Decentralized Autonomous Organization (DAO).
+
+---
+
+### Q2: How do you prevent an heir (holding S2) from colluding with the platform (holding S1) to steal my assets?
+**A: Technical isolation makes collusion impossible.**
+Before your status is determined as "Released," the distributed nodes storing S1 shards are in a **logically locked state**. No node will provide its shard unless it detects a "Proof of Status" on the blockchain (a legitimate release signal signed by the smart contract). Even if an heir has the S2 credential, they cannot reverse-engineer the ciphertext without the system-generated release command.
+
+---
+
+### Q3: What if I am just in a temporary coma or working in an area with no signal (e.g., on the high seas)? Will the system misjudge me as deceased?
+**A: No.** We have designed the **Double-Lock Mechanism**.
+* **Freezing Period**: You can preset a freezing period of 180-365 days. When a heartbeat signal is interrupted, the system first enters a "Pending" state.
+* **One-Click Abortion**: During this long freezing period, the release process can be immediately terminated and reset as soon as you come back online or your emergency contact intervenes.
+* **Sleep Mode**: If you plan an extended offline expedition, you can manually activate "Sleep Mode" to pause monitoring.
+
+---
+
+### Q4: My financial situation is unstable recently; can I temporarily stop my subscription?
+**A: Yes.** You can activate **"Sleep Mode"** at any time.
+* **Physical Retention**: During the pause, active services like AI monitoring will stop, but your data will remain physically sealed in the storage network and will not be deleted.
+* **Instant Wake-up**: You only need to pay a small storage maintenance fee in the future to reactivate the "Sentinel" to its full active state.
+* **Extreme Extraction**: Even during a pause, if an extreme event occurs, heirs can still settle outstanding fees and trigger the extraction process according to the protocol.
+
+---
+
+### Q5: Does the AI see my privacy (e.g., passwords, will content) when sorting data?
+**A: Absolutely not.**
+* **Local Encryption**: Data is heavily encrypted before it even leaves your device.
+* **Shadow Proxy Technology**: The AI only processes metadata within a **TEE (Trusted Execution Environment)**. The AI is responsible for indexing and suggesting archives but does not have the key authority to decrypt the ciphertext, meaning it cannot read the actual content of your files.
+
+---
+
+### Q6: is the Sentinel Protocol legally valid? Can heirs use the exported keys for legal title confirmation?
+**A: Yes.** * **Legal Pre-declaration**: When you set up an S2 recipient, the system generates a "Notice of Authorization" based on a digital signature, clarifying that this act is a legal "Gift/Inheritance" authorization.
+* **Notary Integration**: For L2 users, we provide full-process legal notarization support.
+* **Multidimensional Evidence**: The extraction process is recorded on the blockchain, ensuring the authenticity of the inheritance and avoiding potential legal disputes.
+
+---
+
+### Q7: Why is the duration for L0 users only 10 years?
+**A: This is to ensure the robustness of the financial model.**
+10 years is a financial equilibrium point designed to cover the initial storage costs of decentralized networks and the hedging fees of the Protocol Reserve Pool. After expiration, data enters an "Extended Retention State," where heirs only need to pay a very small storage gap to complete the extraction. This design ensures the protocol remains resilient over decades.
+
+---
+
+### Q8: If I lose all my mnemonics, can you help me recover them?
+**A: Sorry, we cannot.**
+Sentinel Protocol adheres to a **non-custodial** principle. If you lose all your shards and have no backup of your original mnemonics, the platform does not hold your master key, and no one can force open your vault. This is the ultimate guarantee of your sovereignty and the final boundary of security.
+
+---
+**Sentinel Protocol: Guarding your digital assets until sovereignty is awakened once more.**

whitepaper_cn.md

@@ -0,0 +1,99 @@
+# Sentinel Protocol (哨兵协议) 白皮书
+> **——基于 AI 与区块链的数字生命永续存储与智能传承协议**
+
+## 目录
+- [1. 项目背景与深度痛点](#1-项目背景与深度痛点)
+- [2. 核心技术：持久化存储与分片主权](#2-核心技术持久化存储与分片主权)
+- [3. 被动验证与状态机：多维服务边界](#3-被动验证与状态机多维服务边界)
+- [4. 永续性治理：社区共治与故障转移](#4-永续性治理社区共治与故障转移)
+- [5. AI 应用层：智能管家](#5-ai-应用层智能管家)
+- [6. 开发者生态：开放 API](#6-开发者生态开放-api)
+- [7. 经济模型：差异化分级与储备池](#7-经济模型差异化分级与储备池)
+- [8. 结论](#8-结论)
+
+---
+
+## 1. 项目背景与深度痛点
+* **1.1 数字遗产“永久锁死”**：由于私钥随持有者离世而丢失，导致去中心化资产不可逆损失。
+* **1.2 互联网数据“十年消失律”**：商业公司倒闭导致 38% 的链接在 10 年内失效，用户数字记忆面临蒸发。
+* **1.3 意义淹没与筛选困境**：海量冗余数据导致用户无法从碎片信息中提取真正具有传承价值的关键资产。
+* **1.4 高危行业“猝发断裂”**：矿工、海员等群体在零预警、零网络状态下的资产提取鸿沟。
+
+---
+
+## 2. 核心技术：持久化存储与分片主权
+### 2.1 碎裂化密钥管理与用户绝对主权 (SSS 3/2)
+* **用户主权态 (组合 A)**：用户初始化即拥有完整助记词熵值，拥有 S0、S1、S2 全集控制权。在生前任何时刻，用户均具备 **100% 主权自决**。
+    > **主权定义**：这意味着你无需任何人的许可，即可完成日常调用。无论是资产划转还是文件读取，系统均通过生物识别在后台完成验证，用户拥有绝对的掌控力与顺畅的使用体验。
+* **S1 与 S2 防串通机制 (Anti-Collusion Logic)**：
+    * **逻辑隔离**：在判定逻辑触发前，S1 分布式节点处于锁定状态，拒绝任何碰撞请求。
+    * **合约见证释放**：S1 的解冻必须由智能合约检测到系统进入“Released”状态后，方可签署释放指令，彻底杜绝托管方与继承人私下合谋。
+* **传承提取态 (组合 B)**：状态判定成立后，S1 自动解冻，继承人凭 S2 碰撞提取资产。
+
+### 2.2 S1 去中心化分发与多重存储保障
+* **异构冗余备份**：同步对接 Arweave (永久存储)、Filecoin (激励存储) 及多司法管辖区的异构加密节点。
+* **VSS 分布式托管**：S1 分片利用 **可验证秘密分享 (VSS)** 再次切割，分布式存储于去中心化网络，消除单一服务器崩溃风险。
+
+### 2.3 AI 驱动的“数据漏斗”与自动归档
+* **智能分拣**：AI 在日常交互中识别高价值信息，自动建议用户将关键要素（账号、保单、遗嘱意愿）结构化归档，实现“一键灌装”。
+
+---
+
+## 3. 被动验证与状态机：多维服务边界
+### 3.1 判定中 (Pending) 的二次锁定机制 (Double-Lock)
+* **防误判宽限**：若系统触发 Pending（失联信号），用户可预设进入 **180-365 天的冷冻期**。期间系统禁止释放任何数据，确保处于长期昏迷或特殊环境下的用户主权不被洗劫。
+* **复合验证**：结合低敏感隐私监测（步数、心跳、交互频率）与紧急联系人人工核实。
+
+### 3.2 已释放 (Released) 与自动化交付
+* **影子代理 (AI Proxy)**：在 **TEE (可信执行环境)** 中运行，AI 生成结构化的《数字遗产继承指南》并主动推送给指定的继承人。
+### 3.3 暂停订阅与恢复机制 (Suspension & Recovery)
+* **睡眠态 (Sleep Mode)** ：用户可主动触发“暂停订阅”。
+
+  * **服务静默**：进入此状态后，系统停止主动心跳监测与 AI 资产分拣。
+
+  * **物理存续**：得益于多重存储体系（Arweave/Filecoin），核心密文数据依然在底层网络物理封存，不受订阅状态影响。
+
+  * **唤醒逻辑**：用户随时可通过身份验证（S0/助记词）补缴欠缴的维护成本，一键恢复至“活跃态”。
+
+* **睡眠态下的极端提取**：若用户在睡眠态离世，持有 S2 的继承人仍可发起提取请求。系统将引导继承人结算欠费后，进入释放流程。
+---
+
+## 4. 永续性治理：社区共治与故障转移
+* **4.1 数字信托基金会**：独立法人实体，管理存储基金与分片安全。
+* **4.2 智能故障转移 (Smart Failover)**：区块链智能合约实时监测商业实体活跃度。若异常超过阈值（如心跳丢失），系统控制权自动移交给 **社区自治组织 (DAO)** 接管，确保服务永不宕机。
+
+---
+
+## 5. AI 应用层：智能管家
+* **5.1 影子网关**：AI 辅助处理日常任务，但不触碰核心密文，保障隐私边界。
+
+---
+
+## 6. 开发者生态：开放 API
+* **开放保险柜 API**：支持第三方应用（钱包、密码管理等）接入，共用协议与资源，共享产生的收益分润。
+
+---
+
+## 7. 经济模型：差异化分级与储备池
+### 7.1 服务等级体系
+| 等级 | 持久期 | 提取费 | 法律服务能力 | 增值特性 |
+| :--- | :--- | :--- | :--- | :--- |
+| **Standard (L0)** | 10 年 | 补足欠费+服务费 | 基础存证+定制咨询 | 提取费支持预付，离线密钥可选 |
+| **Premium (L1)** | 20 年 | 免提取服务费 | 电子签名+定制咨询 | 大数据配额，无感继承体验 |
+| **Eternal (L2)** | 100 年+ | 免提取服务费 | 全流程公证+定制咨询 | 银行级密钥托管，定期冷备份 |
+
+### 7.2 财务稳健性：协议储备池 (Reserve Pool)
+* **交叉补贴逻辑**：从 L1/L2 等级的高溢价收入中提取 10% 注入储备池。
+* **风险对冲**：储备池用于对冲未来存储成本波动，并作为 L0 级用户的存储违约兜底基金，确保全量用户的数据物理安全。
+
+### 7.3 线下服务与定制化咨询
+* **线下冷钱包密钥服务**：针对全量用户开放。L2 用户额外享受受银行级安保监控的离线存储环境。
+* **全量法律服务**：所有等级用户均可预约战略合作律所进行重要文件的法律效力认证及定制咨询。
+
+---
+
+## 8. 结论
+Sentinel Protocol 建立了以“用户主权”为核心的数字资产传承新范式。通过 **S1 分布式托管** 与 **防串通协议** 杜绝风险，利用 **二次锁定机制** 保护失能主权，结合 **协议储备池** 实现经济长效，为人类文明的数字资产提供了一个可信、永续、合法的避风港。
+
+---
+**哨兵协议：守护你的数字资产，直到主权再次被唤醒。**

whitepaper_en.md

@@ -0,0 +1,94 @@
+# Sentinel Protocol Whitepaper
+> **—— An AI & Blockchain-based Protocol for Digital Life Perpetual Storage and Intelligent Inheritance**
+
+## Table of Contents
+- [1. Project Background & Pain Points](#1-project-background--pain-points)
+- [2. Core Technology: Perpetual Storage & Shared Sovereignty](#2-core-technology-perpetual-storage--shared-sovereignty)
+- [3. Passive Verification & State Machine: Service Boundaries](#3-passive-verification--state-machine-service-boundaries)
+- [4. Perpetual Governance: Community Co-governance & Failover](#4-perpetual-governance-community-co-governance--failover)
+- [5. AI Application Layer: Intelligent Proxy](#5-ai-application-layer-intelligent-proxy)
+- [6. Developer Ecosystem: Open API](#6-developer-ecosystem-open-api)
+- [7. Economic Model: Tiered Services & Reserve Pool](#7-economic-model-tiered-services--reserve-pool)
+- [8. Conclusion](#8-conclusion)
+
+---
+
+## 1. Project Background & Pain Points
+* **1.1 "Permanent Lock" of Digital Heritage**: Irreversible loss of decentralized assets due to private keys being lost upon the owner's passing.
+* **1.2 The "Ten-Year Disappearance Law" of Internet Data**: 38% of web links fail within 10 years due to company bankruptcies, leading to the evaporation of digital memories.
+* **1.3 Meaning Drowning & Filtering Dilemma**: Massive data redundancy makes it impossible for users to extract key assets of true inheritance value from the flood of information.
+* **1.4 High-Risk Industry "Sudden Disconnection"**: A gap in asset retrieval for groups like miners and sailors in zero-warning or zero-network environments.
+
+---
+
+## 2. Core Technology: Perpetual Storage & Shared Sovereignty
+### 2.1 Fragmented Key Management & Absolute User Sovereignty (SSS 3/2)
+* **Sovereign State (Combination A)**: Upon initialization, the user possesses the full mnemonic entropy and holds total control over S0, S1, and S2. At any moment during their lifetime, the user maintains **100% sovereign self-determination**.
+    > **Sovereignty Definition**: This means you can complete daily calls and transactions without anyone’s permission. Whether it is transferring assets or reading files, the system completes verification in the background via biometrics, providing the user with absolute control and a seamless experience.
+* **S1 & S2 Anti-Collusion Mechanism**:
+    * **Logical Isolation**: Before the inheritance logic is triggered, S1 distributed nodes remain locked, rejecting any collision requests.
+    * **Contract Witness Release**: The unlocking of S1 must be triggered by a smart contract detecting the "Released" status. This prevents collusion between the hosting party and the heirs.
+* **Inheritance Extraction State (Combination B)**: Once the state is determined, S1 is automatically unfrozen, allowing heirs to extract assets using S2.
+
+
+
+### 2.2 Decentralized S1 Distribution & Multi-Storage Redundancy
+* **Heterogeneous Redundant Backup**: Synchronized interfacing with Arweave (permanent storage), Filecoin (incentivized storage), and heterogeneous encryption nodes across multiple jurisdictions.
+* **VSS Distributed Hosting**: S1 shards are further sliced using **Verifiable Secret Sharing (VSS)** and stored across a decentralized network to eliminate the risk of a single server crash.
+
+### 2.3 AI-Driven "Data Funnel" & Auto-Archiving
+* **Intelligent Sorting**: AI identifies high-value information during daily interactions and suggests structured archiving for key elements (accounts, insurance policies, wills), achieving "one-click filling."
+
+---
+
+## 3. Passive Verification & State Machine: Service Boundaries
+### 3.1 "Double-Lock" Mechanism in Pending State
+* **Anti-Misjudgment Grace Period**: If the system triggers a "Pending" status (loss of signal), the user can preset a **180-365 day freezing period**. During this time, the system is prohibited from releasing any data, ensuring that the sovereignty of users in long-term comas or special environments is not compromised.
+* **Composite Verification**: Combines low-sensitivity privacy monitoring (steps, heart rate, interaction frequency) with manual verification from emergency contacts.
+
+### 3.2 Released State & Automated Delivery
+* **Shadow Proxy (AI Proxy)**: Running in a **TEE (Trusted Execution Environment)**, the AI generates a structured "Digital Heritage Inheritance Guide" and actively pushes it to designated heirs.
+
+
+
+---
+
+## 4. Perpetual Governance: Community Co-governance & Failover
+* **4.1 Digital Trust Foundation**: An independent legal entity managing the storage fund and shard security.
+* **4.2 Smart Failover**: Smart contracts monitor the activity of the commercial entity in real-time. If anomalies exceed a threshold (e.g., loss of heartbeat), control of the system is automatically transferred to a **Decentralized Autonomous Organization (DAO)** to ensure the service never goes offline.
+
+---
+
+## 5. AI Application Layer: Intelligent Proxy
+* **5.1 Shadow Gateway**: AI assists in handling daily tasks without touching core ciphertexts, maintaining a strict privacy boundary.
+
+---
+
+## 6. Developer Ecosystem: Open API
+* **Open Vault API**: Supports third-party applications (wallets, password managers, etc.) to access the protocol, share resources, and participate in revenue sharing.
+
+---
+
+## 7. Economic Model: Tiered Services & Reserve Pool
+### 7.1 Service Tier System
+| Tier | Retention Period | Retrieval Fee | Legal Support | Value-Added Features |
+| :--- | :--- | :--- | :--- | :--- |
+| **Standard (L0)** | 10 Years | Dues + Service Fee | Basic Evidence | Pre-paid retrieval fees supported |
+| **Premium (L1)** | 20 Years | **Waived** | E-Signature + Consulting | Large quota, seamless inheritance |
+| **Eternal (L2)** | 100+ Years | **Waived** | **Full Notarization** | **Bank-grade Key Vault**, Cold Backup |
+
+### 7.2 Financial Stability: Protocol Reserve Pool
+* **Cross-Subsidization**: 10% of revenue from L1/L2 premiums is injected into the Reserve Pool.
+* **Risk Hedging**: The pool hedges against future storage cost fluctuations and acts as a guarantee fund for L0 users, ensuring the physical security of all data.
+
+### 7.3 Offline Services & Customized Consulting
+* **Offline Cold Wallet Key Service**: Available to all users. L2 users enjoy an offline environment monitored by bank-grade security.
+* **Universal Legal Service**: Users of all levels can book consultations with partner law firms for legal certification of important documents.
+
+---
+
+## 8. Conclusion
+Sentinel Protocol establishes a new paradigm for digital asset inheritance centered on "User Sovereignty." By utilizing **S1 Distributed Hosting** and **Anti-Collusion Protocols** to eliminate risks, employing **Double-Lock Mechanisms** to protect incapacitated sovereignty, and integrating a **Protocol Reserve Pool** for economic longevity, it provides a trusted, perpetual, and legal haven for human digital civilization.
+
+---
+**Sentinel Protocol: Guarding your digital assets until sovereignty is awakened once more.**