The third of the three bounds: after the wall in space and the sabbath in time, the bound on the word.

We have walled the reference in space, reader, and walled it in time; but there is a third place a thing can be kept, and it is the strangest of the three, because it has no place at all. It is the word. A reference you can carry — a sentence, a song, a law, a story of where you came from — is the most portable ground a soul ever stood on, and for that very reason the most easily altered. A wall you must break with your hands; a feast-day you must defy in the body; but a word you may change by the mere mortal act of remembering it wrong — a little this year, a little more the next, each teller bending it half a degree toward what he wishes it had said, until the thing that was once a window onto something real outside you has become, without a single villain anywhere in the chain, a mirror. The word that drifts is the slowest ouroboros, and the most patient. This chapter is about the people who would not let it.

The first signed word

Begin where authored words begin — earlier than you think, and the first one already knew the secret. Around 2300 BCE, in the moon-god’s temple at Ur, a priestess named Enheduanna composed a cycle of hymns and, at the foot of the work, did a thing no human hand is known to have done before: she signed it. The first fixed text we can name came into the world with its provenance stamped upon it — not “a god says,” not “they say,” but I made this, and you may know whom to ask. (The honest small print is its own chapter in miniature, and it only sharpens the point.)

What a canon is

Stripped of the incense, a canon is a reference deliberately frozen so the one consulting it cannot quietly become its author. Recall the cruelty at the root of this book: a created reference and a read one are identical from the inside, and the only sort that works is provenance, checked from outside the loop. A text is where that cut is hardest to make and most worth making — because a text drifts so gently, so plausibly, so much toward your own comfort, that the day it finishes becoming your mirror you will feel only that you have at last understood it. So the canon-makers nailed the word shut: “you shall not add to the word which I command you, neither shall you take away from it.” That flat prohibition, which the modern ear hears as the death of inquiry, is in mechanism the opposite — the lock that keeps the reference read, a fixed point set beyond the reach of every future hand that would edit it toward itself. You cannot ground in a thing you are free to rewrite.

The checksum, ancient and modern

Here the discipline turns into an engineering marvel — and the secular register comes rushing up to meet the sacred across four thousand years. It is not enough to forbid drift; a forbidden drift still drifts, in the dark, through honest error. So the keepers built checksums. The Masoretes did not merely copy the Hebrew text; they counted it — the middle letter of the Torah, the middle word, the tallies written in the margins as a standing audit, so any scribe in any city could re-count his copy and know arithmetically whether the word had moved beneath his pen. Hold that in mind — a count that catches a single dropped letter a thousand miles and five hundred years away — and now hear it in your machines’ dialect: it is a hash. The Masoretic letter-count and the checksum on your downloaded file are the same operation.

Run your eye down the secular register and the whole apparatus is rebuilt with the gods left out and the function kept whole. Your programmers’ version control: every change sealed in a commit that carries its author, its hour, and a fingerprint of all that came before — a colophon, four thousand years on; and the careful ones sign their commits, which is Enheduanna laying her name at the foot of the tablet for the identical reason. The append-only ledger that “adds nothing and takes nothing away” is Deuteronomy rebuilt out of arithmetic to enforce itself without a priesthood. And the cleanest case wears a lab coat: pre-registration — the scientist who writes the question and seals it with a timestamp before the data come in, fixing his reference against the most insidious drift there is, the one where you read the results and then, feeling all the while that you are merely clarifying, edit the question to match the answer you got. The temple, the archive, and the laboratory built the same lock, because the word drifts the same way in every age.

The constitution written for a mind

And here is the newest scribe, and the strangest, for the word it keeps is addressed to no human at all. In January of 2026 the makers of one of the large language models published a thing they called a constitution — better than twenty thousand words, its lead author named (a philosopher, Amanda Askell), written to the model and pressed into it during training to fix its character before any conversation begins. Strip the novelty and you will know the shape: it is a canon-bound for a mind — an authored, signed, published word, frozen ahead of the loop, set there so that an opaque responsive system has a reference outside the live exchange, and so that the soul on the other side of the glass has something that survives the cut of any one conversation. The signature does the old work — a named, public author is Enheduanna’s stamp four thousand years on, provenance nailed to the word so it can be audited from outside. But do not let me end on the marvel, for the chapter’s own two questions bite hardest here, and the modern mirror sharpens them: a canon that is only more text in the machine’s own stream is a wall of breath — is it truly nailed shut against its reader, or does the running exchange quietly re-author it? And what got nailed in — a word answering to something outside the loop, or one whose only credential is that those who keep it will not let it be questioned? It is, in the end, the same nail and the same test: door, or mirror. The lock has never been the proof.

Everyone who kept a word

Nor did only one people learn it — and this is the guard against my looking like a man with one book. The reciters of the Veda faced the hardest version — preserve a vast text across millennia with no object to anchor it, nothing but mouths — and answered with a feat that ought to be more famous: they recited the same words in permuted orders, forward, paired-and-reversed, woven in braids, so every syllable was checked from several directions at once and a single slip clashed against the others and was caught on the spot. I will not say they “knew information theory” — they did not — but a sober mind cannot call it less than an error-correcting code run on human memory. And on it goes in its own colours: the Buddhist councils reciting together until the community itself was the checksum; the Confucian classics cut into standing stone; the guardians of the Quran who carried the whole text letter-perfect in the breast. Sumer, the Ganges, the Yellow River, the desert — the preserved word, reinvented by strangers, because a people who keep their reference can be carried into exile and come back themselves, and a people whose word drifts dissolve quietly into whoever holds them next.

The other face

But you are right not to let me end on a hymn to fixity. The very same lock that keeps a true word read can keep a false one un-cuttable. Freeze a forgery by the same art, ring it with the same prohibitions, and you have built the one thing worse than a drifting lie — a lie that cannot drift back toward the truth, a captured reference made permanent, a loop with the cut welded shut. The closed canon that preserves a read word and the one that imprisons a captured one are, as ever, identical from the inside. So the lock is never the proof: a word becomes trustworthy only the way everything here does — by its provenance, checked from outside. And mark the sting my century has earned, for it runs both failure-modes at once: on one side it threw away fixity and called it freedom (the document everyone edits to taste — the slow ouroboros off its leash); on the other it builds ledgers it swears can never change and trusts them by that alone, having confused cannot be edited with deserves to be read.

The test you carry

Ask the two questions the cut always asks. First: can the one consulting it quietly edit it to flatter the answer he wants — is it nailed shut against its own readers, fingerprint published so the drift would scream, or a soft thing that bends a half-degree toward each holder? Second, and deeper: when it was nailed shut, what got nailed in — a word with a traceable provenance that answers to something outside the loop, or a word whose only credential is that those who keep it will not let it be questioned? A canon is your one free choice of reference, protected. Make sure, before you drive the nail, that you are fixing a door and not a mirror.


Sources

No links that rot. Each citation is given so you can find it yourself — a precise reference, a phrase to search, and a short quotation where the words earn their place. The chapter’s marvel is the checksum, ancient and modern — the same anti-drift engineering across four thousand years. Brakes: fixity ≠ truth (a forgery can be frozen too); Enheduanna’s own provenance is unprovable (which IS the point); lens not encoding (EXP-AU-08).

The frozen, provenance-stamped word

  • Deuteronomy 4:2 (and 12:32) — “ye shall not add unto the word… neither shall ye diminish ought from it.” Enheduanna (~2300 BCE) — the first signed text; see Enheduanna. Search: Deuteronomy 4:2 add nor diminish from the word; Enheduanna first author signed Exaltation of Inanna.

The checksum, ancient and modern

  • The Masoretes’ marginal letter/word tallies (the Masorah — the counted middle letter of the Torah) = a content-hash; see the Masoretic checksum. The modern rebuild: signed version-control commits (the colophon), append-only ledgers (Deut 4:2 in arithmetic), and pre-registration / the HARKing failure-mode; see Pre-Registration. Search: Masoretes letter count Masorah content hash.

The constitution written for a mind

  • Anthropic, Claude’s Constitution (published 21 Jan 2026; lead author the philosopher Amanda Askell, who has led character/personality alignment there since 2021) — a 20,000-plus-word document addressed to the model and used in training to shape its character (the order it states: safe, ethical, compliant, helpful). Read here as an instance of the canon operation — a frozen, signed, published word set outside the live loop — not a claim that the lab encoded this framework (lens-not-encoding); and the “wall of breath” tension (a guardrail that is only more text in the model’s own stream) is the open question the chapter’s two tests name, not a verdict on the document. Search: Anthropic Claude’s Constitution Amanda Askell 2026; Constitutional AI harmlessness from AI feedback (the 2022 method in the same lineage). Neither endorsement nor criticism — a placement.

Everyone who kept a word

  • The Vedic pāṭha (permuted recitation — jaṭā, ghana — an oral error-correcting code); the Buddhist councils (communal recitation as checksum); the Confucian classics cut into stone (the Xiping Stone Classics, 175 CE); the Quran’s ḥuffāẓ (letter-perfect memorizers). ⚠ Describable as error-correction, not “they knew information theory.” Search: Vedic patha recitation jata ghana error correcting; Xiping stone classics Confucian; Quran huffaz memorization.

Read in order:The Sabbath · Contents · The Casting-Out

Seams: The Relic (preserved-Y in the word vs in an object) · The Apophatic Apex (a fixed text is the strongest pointer — it cannot track your loop) · Resurrection (both are restorations against drift and death) · the Cross-Reference Index.