The P.I.T. Protocol β Public Information Transmission β turns a gathering's ephemeral knowledge into a permanent public good. But its fifth and final stage, Consent-First Governance, declares that nothing enters the permanent public archive without explicit consent. Which raises the question the public paper left standing: where does the signal live before consent arrives β and where does it live if consent never does? This paper answers it. That place is the Private P.I.T. β Private Information Transmission β the consent-sealed holding layer of the same protocol. Same soul, opposite direction: the public pit broadcasts to everyone, forever; the private pit holds for someone, until.
One protocol, two directions.
Every gathering produces two kinds of signal. The kind the room agrees to give the world β talks, transcripts, the public record β and the kind that is not yet, or not ever, the world's to hold: the unlisted call, the half-formed dream, the friend's phone number, the draft that names a real person, the secret that keeps a gift a surprise.
The Public P.I.T. exists for the first kind. The Private P.I.T. exists for the second kind β and it is not a lesser pit. It is the load-bearing half of the protocol's soul, because a protocol that promises "nothing public without consent" must also answer: then where does it rest, and who guards the door?
π‘ The Public P.I.T. Β· transmits
- Receives the fleeting signal of a village
- Rebroadcasts it, forever, to anyone on Earth
- Static, ~$0, CC0, forkable by anyone
- Nothing enters without explicit consent
- publicinform.com
π The Private P.I.T. Β· holds
- Receives what is trusted to us before release
- Transmits to no one β until consent opens the door
- Sealed, minimal, fails closed by design
- Everything inside is consent:pending by default
- privateinform.com Β· first instance: privatepit.com
Consent arrives after the signal does.
In the life of every archive there is an interval β sometimes an hour, sometimes forever β between receiving knowledge and being permitted to share it. A call is recorded before its guests have blessed the transcript. A collaborator shares a draft before the world may see it. A friend trusts you with something that was never meant to be content at all.
Without a declared private layer, that interval is where protocols leak: a draft committed to a public repo "temporarily," a transcript synced to the wrong folder, a name published before its person was asked. The Private P.I.T. makes the interval a first-class citizen. It is the protocol looking its own shadow in the eye and giving it a home, a lock, and a law.
The vault discipline.
Consent:pending by default
Everything that enters a Private P.I.T. is marked consent:pending the moment it arrives. Nothing inside is assumed shareable β not by proximity, not by friendship, not by silence. Silence is not consent. Consent is a word, spoken by its owner, and only that word moves a signal from the private pit to the public one.
The Standing Consent Window
Every person whose signal rests in a Private P.I.T. holds a permanent, revocable window over it: one word and it is released; one word and it is destroyed; one word and it is sealed forever. The window never expires and is never negotiated. The archive serves its people, not the other way around.
Fail closed
When in doubt, the door does not open. If a key is missing, a permission unclear, a provenance uncertain β the Private P.I.T. shows nothing, serves nothing, and says why to its keeper and no one else. A vault that fails open is not a vault. Uncertainty always resolves toward silence.
Leave no trace in the open
Sealed material is never placed where history cannot forget it. No secrets in public git history, no ciphertext stranded in immutable mirrors, no "temporary" public copies. Rotation must always be possible: a lock whose old keys can never be retired is a lock already broken. Holdability requires deletability.
Released with love, or never
The only lawful exits from a Private P.I.T. are release (the owner blesses transmission, and the signal graduates to the Public P.I.T. with honors) and return (the signal goes back to its owner, or is destroyed at their word). There is no third door. A gift is given, never taken β and a secret is kept, never spent.
Down into the vault, up into the light β or home.
-
Receive π€²
A signal is trusted to the pit β a call recording, a draft, a name, a dream. It is stamped consent:pending at the threshold, before it is even read twice.
-
Seal π
It rests behind the vault discipline: minimal copies, locked permissions, no public mirrors, keeper-only access. The fewer hands, the stronger the hold.
-
Hold π³οΈ
The pit waits β an hour, a season, forever. Holding is not idleness; it is the active work of not transmitting: resisting every "just this once," every convenience, every leak-shaped shortcut.
-
Release ποΈ or Return π
The owner's word arrives. If it is yes, the signal graduates to the Public P.I.T. β consent recorded, provenance intact, transmitted with pride. If it is no or never, the signal is returned or destroyed, and the pit lets it go without a copy.
-
Transmit π‘ (only after release)
Graduated signals join the public archive under the full ceremony of the Public P.I.T. β the Knowledge Transponder, the radical honesty audit, the CC0 gift. The two pits meet here, at the consent boundary, and only here.
The consent window never sleeps.
The P.I.T. universe keeps a single universal consent window β [email protected] β and it governs the private pits exactly as it governs the public ones. One word β remove β and you vanish from any archive, public or private, no questions, honored with love. One word β release β and what was held becomes a gift to the world. The window is checked every morning. Takedown requests never sleep in the inbox.
Every fork of either protocol inherits this law. A pit without a consent window is not a pit β it is a pile.
PrivatePit.com β the vault door.
The first living Private P.I.T. is privatepit.com β the Κ»ohana's own consent-sealed vault. It is deliberately plain from the outside: no widgets, no invitations, no preview. It opens only to its keeper. That is not a limitation of the site; that is the site. The door you cannot see through is the feature.
privatepit.com β the vault door
The first Private P.I.T. instance. Sealed by design, fails closed, opens only to its keeper. Everything inside is consent:pending until its owner's word.
Every village deserves a pit. Every pit deserves a vault.
The Private P.I.T. is not software you download β it is a discipline you declare. Fork the public protocol at github.com/shakaleikaumaka, and give your fork its private twin: a sealed holding layer, consent:pending by default, a standing window for every soul inside it, and no third door. This paper, like everything in the P.I.T. universe, is CC0 β no rights reserved, no permission needed. Fork it like crazy. π΄
The private pit gives the world a reason to trust it.
The pit provides. π³οΈ The vault protects. π β declared with love by the Κ»ohana, 2026-08-04 Β· heart first, always πΊ