What can never be sold.
Every system draws a line somewhere. Most draw it around what they can sell and expand outward forever. Echo draws it around what must never be sellable — and builds everything else inside that boundary.
Four things sit beyond the boundary. They are not priced high — they are removed from the market entirely. Each is held there by a law the architecture already enforces.
Who you are is not a product.
There is no profile to buy, no person to acquire. An Echo can offer what it can do; it can never offer itself. The self is the one thing the market may never index.
Your history is not inventory.
Raw memory never crosses a boundary. What an agent receives is a minimized slice for one purpose — never the vault, never the record itself. Nobody owns your memory but you.
The keys are not for sale.
Passphrases, recovery fragments, and encryption keys are the keys to the Kernel, not contents of it. No scope, no agent, no administrator, and no future model can ever be granted them. There is no backdoor to auction.
Permission cannot be pre-purchased.
You cannot buy the right to a deal someone did not agree to. Every crossing is a fresh, time-bound, revocable grant. Consent is authored in the moment by the human — never bundled into a sale.
The boundary is not a wall around everything — it is a wall around the self. What you choose to offer crosses freely, precisely because it is never you.
What an Echo can do, offered as a time-bound, revocable grant — never the Echo itself.
A signed claim of real work, verifiable offline. Provenance travels; the person stays home.
The smallest sufficient context for one stated purpose — never the vault behind it.
A commitment that a governed deal happened — the market coordinates it without ever seeing what crossed.
is a promise written by whoever runs the company. It can be revised, suspended, or quietly dropped the day the incentives change. You are asked to trust.
is enforced by the architecture itself. Never-grantable material is not a setting — it is a code path that refuses. You do not have to trust; you can verify.
That is the whole difference. A company that chooses not to sell you can change its mind. A system that cannot sell you never had the option.