A trust that’s supposed to hold its purpose permanently also has to survive the ordinary ways organizations go wrong over time. Ownership structure alone doesn’t prevent that — concentrated power, capture, and entrenchment happen inside co-ops, nonprofits, and conventional companies alike. Here’s how this one is designed to resist them.
How Leadership Is Chosen: Sortition
Leadership and oversight roles are filled substantially through sortition — a lottery-style random selection from a broad, minimally-filtered pool of qualified employees — rather than election or appointment. This is a deliberate countermeasure: ordinary selection processes tend to favor people who are good at campaigning and self-promotion, not necessarily people who are good at the job or acting in good faith. Roles carry term limits and staggered rotation, so no one entrenches simply by being good at staying in the role.
Separation of Power
No single role holds unchecked authority. A trustee holds ultimate responsibility for preventing existential violations of the company’s purpose — an unauthorized sale, a dissolution, an attempt to capture the trust for private benefit. A separate, also sortition-selected enforcer panel checks compliance with narrower, documented policies day to day. And employees themselves are the first line of defense — expected to recognize and escalate a trustee failure, not simply defer to it.
A Living Catalog of Failure Modes
Governance failure isn’t a hypothetical risk to design around in the abstract — it has well-documented, recurring patterns: concentrated unchecked power, nepotism, unaccountable spending, capture by narrow interests, and others. One concrete example worth naming directly: many companies and institutions have been forced into financial crisis, sale, or dissolution by open-ended retirement liabilities they promised decades earlier and couldn’t ultimately fund. This project’s compensation design deliberately avoids that failure mode from the outset — the company never carries a future retirement obligation on its books — rather than risking it and hoping future leadership manages it responsibly. The design calls for an explicit, living catalog of these historically observed failure modes more broadly, checked against every major proposal and decision, so the question isn’t just “does this seem reasonable” but “does this resemble a way organizations have failed before.”
Company Ethics
Governance decisions aren’t limited to environmental or safety questions — they extend to how the company treats its own customers, products, employees, and surroundings. Employee-owners would decide things like: does a product stay backward-compatible and interoperable, or get changed in ways that force needless upgrades? Can customers repair what they buy, or are they locked out of doing so? Is a subscription or licensing model designed to serve the customer, or to extract more from them than the product’s actual value justifies?
To give some of these commitments real teeth, the design includes a specific mechanism: certain practices are established as prohibited by default — the kind of thing a company shouldn’t do, not just discouraged from doing. Circumstances can change, and the company may genuinely need to revisit one of these positions to survive something unforeseen. That flexibility is allowed — but only through a deliberate process: open discussion and a documented rationale for the change, kept permanently on the record. The point isn’t to make change impossible. It’s to make backsliding visible rather than quiet. If a future version of this company ever decides to do something clearly unethical, the record of that decision — and the reasoning offered for it — stays attached to the company’s history, not buried. That visibility is itself a deterrent.
Some of these prohibited-by-default commitments are environmental. As one example: no dumping of toxic waste into local waterways or land, regardless of what it might save in disposal costs. Products would be designed with end-of-life in mind — genuine recycling programs rather than symbolic ones, and materials chosen for durability and repairability even when a cheaper, shorter-lived alternative would be more profitable in the short term. As with the customer-facing commitments above, none of this is absolute or unchangeable — but changing it requires the same open, documented, on-the-record process, for the same reason: to make sure any departure from these commitments happens because employee-owners deliberately chose it, in the open, not because it drifted unnoticed.
Defensive Intellectual Property
Intellectual property as a defensive posture. The company intends to build a patent portfolio primarily for defensive purposes — not to aggressively assert against others, but to have leverage if the company is ever targeted by hostile patent action from an outside party. Trademarks will be actively registered and defended, since brand identity is straightforward to protect and easy to lose by neglect. Like everything else here, none of this exists yet — it’s a stated intention for how the company plans to operate once it does.