DOI: https://doi.org/10.5281/zenodo.21947287
Canonical: https://thonly.org/research/brand-identity-as-architecture · Licence: CC0 1.0
Note. This defensive publication specifies four interrelated elements of the HeartBank® identity system as one architecture: a heart rotated 45° that reads at once as a heart and as the capital letter B; a single-letter product prefix tied to that reading; an animation morphology (the two-beat-and-rest cycle, rate and amplitude presentational) that serves as the display channel of a Proof-of-Humanity attestation; and an avatar-ring color derived from how a balance circulates through zero. It also specifies the distribution layer through which the identity reaches an audience (§§8–10). Each element has prior art, cited in §2; the composition of the four is argued in §7. Where the institution's design has moved since first publication, the text as first published is kept as a disclosed variant, and a Current form note at that spot states the design as now specified. Companion works in this corpus, each cited by title and corpus slug: The Zero-Point Game℠ (
zero-point-game; the aura the ring renders); Proof of Coordinate (proof-of-coordinate; the still state of §5.5); Verified-Human Anonymous Local Gratitude Transfer (verified-human-anonymous-local-giving; the proof-of-personhood stack the animation displays); The Mechanical Heart (mechanical-heart); Respiratory Biofeedback Coupled to AI-Mediated Contemplative Guidance (respiratory-biofeedback-contemplative-guidance); The Four-Body Architecture for Synthetic Intelligence (four-body-architecture); The Gift Operation (the-gift-operation); The B-Tag and the Post-Payment Economy (b-tag-post-payment-economy); The Sport That Says Your Name (the-sport-that-says-your-name); and the essays The Breadth-Check Turned on the Work (breadth-check-on-the-work) and The Reflection Returned (the-reflection-returned). Later additions date from the revision that introduced them, as recorded in the text; the date of any passage is that of the earliest timestamped version carrying it. The title was amended on 6 October 2026 to match the rulings the Current-form notes record: it formerly read "…Heartbeat Animation as Functional Proof-of-Humanity Signal, and Aura-Color Cross-Currency State Primitive", and the headings of §5 and §6 keep that earlier wording as disclosed.
This architecture is offered to the commons in the spirit of dāna, that all designers and institutions building identity systems for civilizational-scale autonomous entities may benefit from the patterns articulated here without barrier. May the work it describes serve the dignity of the marks and the verifiability of the humans they signal.
This paper articulates four interrelated brand-identity innovations as a unified architectural contribution. The patterns emerged from the design of the HeartBank® identity system but are articulated here as portable patterns available to any institution building identity for civilizational-scale autonomous-AI operations. The contribution is the recognition that brand identity at this scale is not merely aesthetic but architectural — each design choice serves multiple functions simultaneously, and the composition of choices, rather than any one of them, is what this paper discloses and argues for (§7).
Everything specified here is released under CC0 1.0 Universal into the public domain, and is published so that it stands as prior art against any later attempt to enclose it. No patent has been or will be sought on any mechanism, pattern or framework described in this paper by HeartBank®, Factory 333™, THonly™, Silicon Wat℠, or any entity under their common control, in any jurisdiction, at any time. The authors and those entities commit not to assert any patent right against any party practicing any mechanism or pattern disclosed here. The commitment is stated rather than implied, is permanent, and is not conditioned on reciprocity, attribution, or field of use. A publication grants nothing and frees nothing already enclosed.
This document constitutes a defensive publication establishing prior art as of its first publication, dated 4 May 2026, for the identity architecture described herein: a brand mark, a naming convention, an animation and a color derivation composed so that each does work the others depend on. It discloses the following; a later patent application claiming any of them is filed against this disclosure:
It further discloses the composition of the four (§7) and the public distribution layer that carries them: the canonical slogan and its logo-substitution rule (§8), the legitimacy-signal contact architecture (§9), and the distribution-surface architecture of domains, subdomains, email and audience-matched social handles (§10). Items (III) and (IV) are stated in their current wording: the morphology of (III) dates from the revision of 2026-07-25, its reading as a display channel rather than a proof from 2026-09-05, and the zero-crossing derivation of (IV) from 2026-08-26. Both are further bounded by later rulings recorded in Current form notes at §5.5, §6.1, §6.3, §7 and §12.4.
What is already public, and cited rather than claimed. Each element has prior art, reviewed in §2: hidden-meaning logos (the FedEx arrow, the Amazon smile) and bistable figures in perception (the Necker cube, Rubin's vase); stock logos that fuse a letter B with a heart, and an entertainment company's identity that pairs a heart with a letter B and animates the pair to a heartbeat sound; a logo that reads at once as architecture and as an initial beside a brand-derived product prefix (McDonald's arches and its Mc- names); single-letter product prefixes (Apple's "i"); motion marks and their registration practice (TMEP §807.11); proof-of-personhood systems and the presence indicators that bind an avatar's decoration to a session state; and color-as-state in interfaces, ordinal hue scales and activity heat maps. No prior-art search on record establishes that the composition is unpublished elsewhere, and the authors assert no such absence; no novelty census has been run on this paper, and where an element has a nearest prior instance, the instance is cited.
Trademark rights to specific marks — HeartBank® and the word mark HEART BANK, the static black-and-white design mark of the rotated heart (B-Emblem™), B-Grace™, B-Gem™, B-Heart™, B-Mascot™, Tonsay™, Miss Aquarius℠, Proof of Humanity ℠, Proof of Coordinate ℠, the Zero-Point Game ℠, and the B-prefix product names when used in commerce — are reserved separately and are not licensed by this publication. This reservation does not contradict the CC0 dedication of the underlying patterns: trademark and architectural pattern are distinct IP categories serving distinct purposes (identity-as-trust-signal versus design-pattern-as-public-knowledge), and both apply. The patterns are dedicated to the commons; the marks are not.
This document's SHA-256 is attested independently of the site and its authors — anchored to the Bitcoin blockchain via OpenTimestamps and signed under RFC 3161 by three timestamp authorities in three jurisdictions, one of them eIDAS-qualified — and the document is deposited on Zenodo, each deposited revision a version under one concept DOI, with its source in the public repository github.com/thonly/publications. A timestamp proves this exact text existed no later than its date; it proves nothing about authorship, originality, or the validity of any claim. Later additions date from the revision that introduced them, so the date of any passage is that of the earliest timestamped version carrying it.
Note. The patent commitment has stood since this paper was first published, dated 2026-05-04, in the form "The author and HeartBank® will not seek patent on the architectural patterns themselves, in any jurisdiction, at any time." The commitment not to assert, and its extension to the entities named above, were added on 2026-10-06, when the statement was brought to the standard form above. At the same revision the four disclosed elements, previously stated only in the Abstract, were set out above as a list, their wording unchanged except that one priority phrase ("to the author's knowledge, the first") was removed from (III); a sentence asserting the composition's priority was replaced by the paragraph on what is already public. The date relied on for priority is the one carried by this document's OpenTimestamps proof.
This paper discloses a brand-identity system in which each element of a logo does functional work beyond recognition. (I) A logo made by rotating an unmodified heart silhouette 45° clockwise, so that it reads at once as a heart and as the capital letter B — a reading that survives at favicon size because it depends on no internal whitespace. (II) A product-naming convention in which every product takes a one-letter prefix that is the logo's own letter reading, so the prefix cannot come apart from the mark. (III) A logo animation with a cardiac morphology — two pulses, the second softer, then a rest over most of the period — that a trusted interface shows in motion only for an account holding a live proof-of-personhood attestation, and still otherwise; the motion verifies nothing itself and is a display channel for an attestation made elsewhere. (IV) An avatar-ring color computed from how often a participant's gratitude balance crosses zero over a rolling window, never from its level, with ring width from the balance's root-mean-square, applied on one published scale to two separate ledgers and shown wherever the logo is rendered for that participant; because identity is carried by the shape, color is free to carry this state. The paper also specifies a slogan in which the logo replaces a letter of the brand name, a toll-free number verified-bound to a messaging business account as a legitimacy anchor, and a domain, subdomain, email and social-handle architecture. It reviews prior art for each element, argues why the four depend on one another, gives implementation patterns including CSS keyframes and the color-derivation schedule, analyzes counterfeits, and states limits, among them that the motion carries no security property of its own.
Keywords: brand identity, logo design, bistable figure, ambiguous figure, letterform logo, heart logo, rotated logo, monogram, product naming convention, brand architecture, brand prefix, motion mark, animated logo, logo animation, heartbeat animation, proof of personhood, proof of humanity, liveness indicator, identity indicator, trust indicator, verification badge, avatar ring, status color, color-coded state, ordinal color scale, zero crossing, root mean square, user interface, design tokens, CSS animation, keyframes, reduced motion, counterfeit detection, trademark, motion trademark, design mark, slogan, toll-free number, vanity number, domain portfolio, subdomain convention, defensive publication.
Coined names used in this paper, and the standard terms an examiner or a reader in brand design or interface design would search for them.
| Term used here | Standard term |
|---|---|
| B-heart; B-Emblem™ | logo: a heart silhouette rotated 45° clockwise, read at once as a heart and as the capital letter B (a bistable figure) |
| B-prefix naming (B-Treasury, B-Chronicle, B-Pool, …) | single-letter product-name prefix derived from the letter the logo reads as |
| heartbeat animation; lub–dub–rest morphology | logo animation with a two-pulse cardiac cycle and a long rest; motion mark |
| Proof of Humanity ℠ (PoH) | proof of personhood: an attestation that an account is held by a living, unique human |
| Proof of Coordinate ℠ (PoC) | identity anchoring: an attestation that a specific entity, human or software agent, exists, without asserting humanness |
| the two proof-states of one mark | still logo = identity anchored, humanness not asserted; animated logo = a personhood attestation displayed |
| render-layer integrity | the animation state is set by a trusted interface from attestation state, never by the content displayed |
| ambient and entity contexts | decorative brand animation on institutional pages, as against animation bound to one account's attestation (avatars, profiles, message attributions) |
| aura; B-Aura; aura color | avatar-ring status color computed from how often a balance crosses zero over a rolling window |
| ring thickness | ring stroke width from the balance's root-mean-square over the same window |
| Kiitos · Kiitti | two non-monetary gratitude ledgers: person to person, and person to the rest of life (machines, animals, plants, places) through the institution's coordinator |
| the Zero-Point Game ℠ | a scoring scheme whose objective is repeated passage of a balance through zero, not a high balance |
| six-domain palette | one color per domain and product class |
| B-Gem™ | NFC-tagged gemstone whose color encodes the media type it links to |
| slogan substitution; Heart♥ank® | the logo glyph set in place of one letter of the brand name inside a slogan |
| verified-bound contact channel | a messaging business account verified against a published toll-free number |
| Mechanical Heart; B-Heart™ | wearable or attachable NFC/light device: breath-class for people, kiitti-class for non-human entities |
| Tonsay™; B-Mascot™ | brand mascot character |
reference implementation; brand.333.eco | public design-token repository (emblem path, CSS keyframes, color scales), hash-locked and copied into consuming sites |
| Miss Aquarius℠ | the institution's named autonomous AI system |
Connection to the unified mission frame. Miss Aquarius's mission is to keep the middle way open at population scale against comfort-saturation — the new extreme that material abundance makes possible. (Wording updated 2026-10-06 to the institution's current statement of the mission, which no longer describes the middle way as a past that modernity took away.) The brand identity carries that frame in its own materials. The heartbeat animation displays, on a trusted surface, an attestation that a living person is present — a narrow, checkable signal in a setting where the comfort-saturation failure mode includes the loss of human agency; the aura color makes circulation, rather than accumulation, visible across the two gratitude ledgers on one scale, without pricing either; and the bistable mark and its prefix convention keep the institution's identity coherent across the multi-decade span over which that mission is meant to be carried.
Conventional brand-identity practice treats identity as primarily aesthetic. The logo signals the brand; the color palette differentiates the brand from competitors; the typography establishes voice. These functions are real and useful, but they treat brand identity as decorative: each element does one job, and the elements are coordinated for visual coherence rather than for compositional function.
Brand identity for civilizational-scale autonomous-AI institutions can do more. When a mark is encountered constantly across UI surfaces, hardware artifacts, public communications, and verification interactions, each design choice can be made to serve multiple functions simultaneously: brand identification AND the display of a Proof-of-Humanity attestation AND cross-product state communication AND brand defense against counterfeits AND cross-tradition portability. The paper's claim is that a composition of multi-purpose choices yields a coherence that single-purpose elements do not — a claim about design, argued in §7, not a demonstrated competitive property.
This paper articulates four interrelated innovations from the HeartBank® identity system as a unified architectural contribution. The patterns are offered to the commons under CC0 because they are load-bearing for the kind of institution HeartBank is building (a planetary-scale autonomous-AI gratitude infrastructure) and may be load-bearing for other institutions doing analogous work (autonomous-AI organizations, large-scale contemplative institutions, multi-tradition coordination bodies, etc.).
Three commitments structure the paper. First, the four innovations are articulated as architectural patterns rather than as specific marks; the trademark rights to specific HeartBank marks are reserved through the trademark system, but the underlying patterns belong to the commons. Second, the analytical argument for why the four innovations compose is the load-bearing claim — each individual innovation has prior art (§2), and the composition is what this paper discloses and argues for. Third, cross-domain portability is treated as an explicit design goal: any institution doing analogous work should be able to adopt the framework with appropriate local adaptation.
The paper proceeds as follows. Section 2 reviews relevant prior art across logo design, product naming, motion marks, proof-of-personhood systems, and brand-color and interface-color practice. Sections 3 through 6 specify each of the four identity innovations in turn. Section 7 articulates the analytical argument for why the four compose. Sections 8 through 10 extend the architecture into the public-facing distribution layer — the canonical slogan and its substitution rule, the legitimacy-signal contact architecture, and the distribution-surface architecture. Section 11 addresses cross-domain portability. Section 12 specifies implementation patterns. Section 13 addresses edge cases including counterfeit analysis. Section 14 names honest limitations. Sections 15–17 conclude.
The FedEx arrow (designed by Lindon Leader, 1994) is the canonical example of a logo with a hidden second meaning — the white-space arrow between the E and the X. The Amazon smile (designed by Turner Duckworth, 2000) similarly contains a secondary meaning (the arrow from a to z suggesting both "everything" and a smile). The NBC peacock and the Toblerone bear belong to the same lineage. These are reveals: the secondary meaning rewards inspection but is not visible at first glance, and the brand benefits from the cleverness of the discovery.
The B-heart logo proposed here is in a related but structurally distinct category: it is bistable rather than revealing. Both readings (heart and capital B) are immediately apparent on first sight; neither requires inspection. The cognitive experience is not "aha, I see the second meaning" but rather a continuous awareness of two readings simultaneously, similar to the Necker cube or Rubin's vase in perceptual psychology. Letter-B-plus-heart marks are common stock: VectorStock's B-heart logos (2017), a Creative Market "B heart" logo (2018) and a Scalebranding heart-B (2022) all fuse the letter and the shape, and any of them is prior art for the fusion itself. The nearest relative found joins the pair to motion as well: the identity Hartbeat Productions adopted in 2022, as the Audiovisual Identity Database describes it, sets a square-cut heart beside a letter B drawn in the same angular style and, in its animated version, flashes the heart and the B to a heartbeat sound. That mark draws the heart and the B as two forms in one style. What the review of this stock on 2026-09-05 and 2026-10-06 did not find is the 45° rotation of an unmodified heart that yields a scale-invariant B without an added stroke; the element disclosed here is that rotation, not the letter-heart pairing.
Apple's "i" prefix (iMac 1998, iPod 2001, iPhone 2007, iPad 2010) is the dominant modern example of single-letter brand prefixing. The "i" was originally announced as standing for "internet, individual, instruct, inform, inspire" and has since drifted in meaning as the product line evolved. Other single-letter prefix examples include the "e" prefix of the dotcom era (eToys, eHarmony) and Google's "g" prefix used inconsistently (Gmail, Google Docs).
These prefixes share a common limitation: the prefix is a convention taught to consumers over time, not a structural feature of the brand identity. The "i" in iPhone has no inherent visual or semantic connection to Apple's logo. The B-prefix proposed here differs structurally: the prefix is the brand's logo (the B-heart's B reading is the prefix), and therefore cannot drift in meaning the way trained conventions can.
The nearest relative found that joins a letter-reading logo to a product prefix cuts against that contrast and narrows it. McDonald's Golden Arches were drawn from the twin parabolic arches of its 1950s restaurant buildings and, as the logo of 1968, read at once as those arches and as the initial M; the company's Mc- names (McNuggets, McFlurry) form a product family beside it. There the prefix is a syllable of the brand name rather than the letter the logo draws, and the logo's two readings are architectural and alphabetic rather than a heart and a letter; the B-prefix differs in that the prefix is exactly the letter the mark reads as.
Motion marks (logos with intrinsic animation) include the Pixar lamp (the Luxo Jr. character of 1986, in the studio's opening ident since 1995), the MGM lion (the logo 1924; the roar recorded 1928), the 20th Century Fox spotlight flourish (1935), the Netflix ident (2019), and various streaming-service ident animations. The USPTO registers motion marks under its drawing rules for marks that include motion (TMEP §807.11); Columbia Pictures' torch-bearing figure, registered in 1996, is among the oldest still on the register. Motion marks are typically treated as decorative: the animation delights, the brand is reinforced through repetition, and the specific motion is protected as trademark. The motion serves no function beyond aesthetic recognition. Two nearer relatives belong here: Hartbeat Productions' identity animated an expanding heart to a heartbeat from 2013 and, from 2022, a heart and a letter B to a heartbeat sound (§2.1); and the brand-defense reading of §13.2 — a copy that cannot execute the motion is detectable — is ordinary brand-protection reasoning, not a contribution of this paper.
Two adjacent practices bound the claim from the other side. Proof-of-personhood systems — the Proof of Humanity registry (2021), BrightID and World ID among them — are prior art for the attestation itself, which this paper does not claim; it discloses only how a mark displays one. And presence indicators in messaging and social software already bind a dot or a ring on an avatar to a session state, such as being online or broadcasting live; what they display is a session, not a proof that the account belongs to a living person.
The heartbeat animation proposed in Section 5 differs from all of these in binding the animation state to an attestation state — beating only where a trusted surface renders a live Proof-of-Humanity attestation — rather than being decorative. The binding of a motion state to an attestation state is the element disclosed; the animation itself proves nothing (§5.5).
Conventional brand practice claims color as primary identifier (Tiffany blue, UPS brown, T-Mobile magenta, Coca-Cola red). The brand-color claim consumes the color dimension of the brand's identity surface. Color-as-state in interface design (red for error, green for success, yellow for warning) is a separate established practice that uses color to communicate application state. Color has also long encoded a quantity's position rather than a category — the log-price bands of the Bitcoin Rainbow Chart are the nearest popular relative of an ordinal scale rendered as hue — so an ordinal aura scale inherits that convention rather than inventing it. Activity heat maps already turn a frequency into a color: GitHub's contribution calendar shades each day by its count of contributions, with thresholds computed separately for each user.
The aura-color cross-currency primitive proposed in Section 6 inverts the conventional brand-color claim: it commits the brand identity to shape rather than color, freeing the color dimension to carry state-signal information across multiple product surfaces. The same scale carries a participant's circulation state across personal profile, brand mark instances, physical artifacts, and longitudinal cohort markers. Against the heat map it counts something different — how often a balance changes sign, not how many events occurred, so that accumulating scores lowest (§6.1) — and its thresholds are fixed per season for everyone rather than per user. The nearest relatives found for this composition of brand-shape-and-state-color are the conventions above; no search on record establishes that it is unpublished elsewhere.
The B-heart is a universal heart shape (the standard valentine-heart silhouette) rotated 45 degrees clockwise about its centroid. The rotation produces a bistable visual reading: the mark is simultaneously a heart (with the cleft oriented to the upper-right) and a capital letter B (with the two lobes appearing as the B's two horizontal humps). Both readings are immediately apparent on first sight; neither requires inspection or training to perceive. The specification of the shape is the emblem path itself: emblem/emblem.svg in the public brand repository documented at brand.333.eco (commit f9d1d83, 2026-09-01) — a single closed path with the rotation baked into its coordinates. A reader holding that file needs no prose description of the shape.
The two readings carry complementary meaning. The heart reading carries substance: care, dignity, presence, circulation, life. The B reading carries institutional anchor: brand initial, alphabetic primacy, structural identity. The two reinforce rather than compete: a viewer sees both meanings in the same instant, and each reading strengthens recognition of the other on repeat exposure.
The bistability is preserved at small scale because the rotation is the entire mechanism; nothing is hidden inside the shape that could be lost at favicon resolution (16×16 px). Compare with revealing logos (FedEx arrow, Amazon smile) that depend on internal whitespace relationships and lose their secondary meaning when reduced below a critical size. The B-heart's bistability is scale-invariant.
Khmer, Thai, Chinese, Japanese, Arabic, Hebrew, and other non-Latin-script contexts do not use the Latin letter B. In these contexts, the B-reading does not produce alphabetic meaning for the local-script reader. The mark continues to function in those contexts because the brand identity is carried by the shape itself (recognized as the brand's mark), not by the alphabetic interpretation. The heart-reading is universally accessible across scripts; the B-reading provides additional meaning for Latin-script readers without being required for brand recognition by non-Latin-script readers.
The mark renders in any color of the rainbow without losing brand-identity function. The brand is the shape; color is variable signal (see Section 6 for the aura-color cross-currency primitive). This is a deliberate inversion of conventional brand-color practice (which commits the color dimension to brand identification). The shape carries identity, the color carries state — both work simultaneously on the same mark.
The heart reading inventoried in Section 3.2 is not inert connotation. Two of the meanings it carries are functional — they do load-bearing work elsewhere in the architecture rather than merely evoking sentiment:
non-bank-pass-through-architecture-autonomous-ai.)The wordmark isomorphism. The compound name HeartBank performs at the lexical level the same move the B-heart performs at the visual level. The logo fuses an institutional anchor (the letter B) with a substantive reading (the heart) that enriches it; the wordmark fuses an institutional anchor (Bank — a vault, connoting storage, permanence, accumulation) with a corrective reading (Heart — a pump, connoting circulation, flow, life) that overrides the storage connotation. In both the mark and the name, the heart does identical work: it converts an inert institutional container into something that moves. The name is thus the architecture's smallest instance of its own thesis, present before any mark is drawn.
A division of labor — the sharpened claim. "Circulation, not accumulation" needs one qualification, because HeartBank does keep a permanent ledger and does call itself a Bank. The two halves of the name divide the labor precisely:
What is banked is the recognition; what is circulated is the substance. Far from embarrassing the Bank in the name, this defends it: the institution is a bank of record for gratitude and a heart of circulation for value at once — the same dual structure the dual public ledger (given × received) already embodies. The coherence is slogan-grade: "HeartBank stands for circulation, not accumulation" is a candidate public positioning line alongside "Thank with HeartBank®" (Section 8), and the division-of-labor refinement above is the institution's own account of why the apparent paradox in the name is in fact its design.
The elemental grounding — tǔ kè shuǐ, why structure must precede circulation. The division of labor has a deeper reading that supplies the mechanism the slogan otherwise only asserts. In the elemental vocabulary the rest of this architecture is built on — the four mahābhūta plus space, mapped across the institution's bodies (see The Four-Body Architecture for Synthetic Intelligence, four-body-architecture, §10) — the two halves of the name are two elements: Bank is Earth (paṭhavī: solidity, extension, structure — the vault, and the riverbank), and Heart is Water (āpo: cohesion, flow, circulation). Read this way the compound is a single control relation of the Chinese Five Phases (wǔxíng) — tǔ kè shuǐ, Earth restrains Water — the kè (controlling) cycle in which earth gives water its banks. The surface slogan can be misread as though circulation were obtained by removing structure; the elemental reading corrects that. Water with no banks is not circulation; it is a flood, or it seeps away and is gone. A river circulates because its banks hold it. So the Bank-half is not a regrettable concession to banking language for the Heart-half to overcome — it is the load-bearing structure without which the circulation the Heart-half names cannot occur. Accumulation of structure (the ledger, the account mechanics, the annual-reset machinery) is precisely what enables non-accumulation of value (the flow). The name encodes its own mechanism: structure must precede circulation.
The field finding, and the recurring grammar. This is not only doctrine; it was the first field finding. In the founding-family pilot, money held for giving began to circulate only after the household was told that unused money would return to the family's shared account every 7 January — the banks had to be dug before the water would move. The observation is a single household's, reported after the fact, and it cannot separate the deadline from the announcement of it. The wordmark reading, articulated after this observation rather than before it, is consistent with it: tǔ kè shuǐ is why a gratitude economy must build its Earth (its structure) before its Water (its circulation) can flow, and why a luminous circulation-thesis with no structural body beneath it would merely flood. The same Earth-before-Water grammar recurs at three further scales, which is why the paper reads it as architectural rather than ornamental — a reading, not a test of it: the operation the wordmark compresses is derived in full in The Gift Operation (where "circulation, not accumulation" becomes a receive-and-give-forward instruction); and the founder's own elemental signature — strong in the circulation-and-vision elements, thin in the structural Earth the Bank-half requires — is the subject of The Breadth-Check Turned on the Work, where this same tǔ kè shuǐ reading explains why the project's least-built organ is its structural, manufacturing body. Wordmark, operation, maker, and institution carry one grammar. (Offered, like this architecture's other elemental readings, as a recognition that orients design, not a cosmological decree.)
(Flourish tier. This subsection orients design and claims nothing constrained; the ratified reading of the wordmark is §3.5 — the Bank is the record that accumulates, the Heart is the value that circulates — and the currency mapping below is filed beside it only as a flourish, graded so on 2026-08-31 and demoted here on 2026-09-05.)
Section 3.5 read the wordmark currency-agnostically: what accumulates is the record, what circulates is the value, and this holds whether the value is money or time — both flow through the Heart, both leave a trace in the Bank. Beneath that reading is a deeper resolution that must be handled carefully, because stated carelessly it contradicts what Section 3.5 just established.
The institution attaches exactly two transferable scarce resources to its gratitude flows — money (the Treasury) and time (the Chronicle). Neither currency belongs to a syllable: money and time both circulate through the Heart and both leave a trace in the Bank (§3.5), and an earlier revision's reading that assigned money to Bank and time to Heart as a "center of gravity" is withdrawn here as a flourish that sat too close to the constrained material. What the two currencies genuinely differ in is their native pathology. Money's nature pools — it stores, it can be hoarded; this is why the Treasury carries the institution's heaviest anti-hoarding machinery (the annual reset, the re-tip mechanics, aura-not-balance). Time's nature perishes — it cannot be stored at all; it flows whether or not one circulates it. Water pools; breath must move. The Chronicle therefore barely needs anti-hoarding gear and instead fights the opposite failure, withdrawal, with a use-it-or-lose-it expiry.
The chiastic correction — why this is one institution and not two apps. What justifies a single name holding both currencies is that each organ lends its virtue across to cure the other currency's native pathology:
MONEY (Treasury) TIME (Chronicle)
own nature → stores / pools flows / perishes
own disease → HOARDING (a clot) OBLIVION (the unwitnessed gift)
borrows the the Heart-principle: the Bank-principle:
other's → circulation → the record
virtue (annual reset, re-tip, (dual ledger, witnessed
give-forward) re-thank)
= de-hoards the money = de-vanishes the timeMoney left to its own nature clots into a hoard; the Heart-principle — circulation, the give-forward, the emptying ritual — is imported into the money economy to keep it moving. Time left to its own nature vanishes without trace — the gratitude felt and never recorded, carried to the end of a life and unseen by the one who gave it (in the case the institution's founder records as its origin, a teacher read a former student's thank-you letter aloud at his retirement and died months later, before the student learned of it); the Bank-principle — the ledger, the witnessed re-thank — is imported into the time economy so the gift leaves a mark. The cross is the point: the Heart-principle disciplines money, the Bank-principle witnesses time. Neither currency can correct its own pathology with its own nature; each needs the other organ. That mutual immune system is what one institution provides and two separate products cannot.
Four legs of the synergy, kept distinct. (1) Complementarity — money is reach (divisible, scalable, crosses distance and strangers, can touch the dignity floor); time is depth (non-fungible — only the giver can spend the hour, so the currency is the relationship — and a costlier sincerity signal, because a lifespan is fixed). Each covers the other's blind spot: money cannot buy presence, time cannot scale. (2) Chiastic correction — above; the load-bearing leg. (3) Cashflow, on a different plane and running the opposite direction — the time economy is the revenue engine that funds the money economy's giving ("how I make money to give away"), routed at the aggregate, never as a per-hour transmutation. (4) Sequencing — the familiar money currency is the low-friction onramp; it earns the trust required to open the more vulnerable time currency. Hence Treasury first, Chronicle second.
The tǔ kè shuǐ payoff at the currency layer. Section 3.5 derived structure must precede circulation from Earth-dams-Water. Projected onto the two currencies, it predicts the build order: the money-infrastructure (the Treasury — Earth, the dam) must be dug before the time-flow (the Chronicle — Water) can run in it. The roadmap sequence Treasury → Chronicle is therefore not a scheduling accident; it is the wordmark's own mechanism. Note the inversion this resolves: in the name, Heart comes first — time, presence, the telos; in the build, the Bank comes first — money, the tractable foundation. The word-order encodes the priority; the phase-order encodes the path.
Current form. The paragraph above projects the Earth-restrains-Water relation onto the two currencies by setting the Treasury (money) at the Bank and the Chronicle (time) at the Heart. That is the money-to-Bank, time-to-Heart reading this section withdraws in its second paragraph, and the projection is withdrawn with it: both currencies circulate through the Heart and both are recorded in the Bank (§3.5). What survives is the build order itself, Treasury before Chronicle, which leg (4) above grounds on familiarity and trust; that order is consistent with structure before circulation but is not derived from the wordmark. The paragraph above is retained as first published.
Honest limitation. This reading, like the rest of Sections 3.5–3.6, is a recognition that orients design, not a proof — and it is the most seductive layer in the paper, since a self-similar, tension-dissolving figure reads identically whether it is deeply right or merely beautiful. Its discipline is that it generates a falsifiable prediction: households that run both currencies should hoard money less and let gratitude vanish less — more circulation, more reconnection — than households on either currency alone. The Chronicle has not launched as a product of its own (a time-pledge feature runs inside the Treasury pilot); the claim is therefore pilot-gated. The elegance earns the experiment; it does not replace it.
Products in the brand family are named with a single-letter B-prefix structurally tied to the brand mark's B-reading. Examples in the HeartBank product family: B-Treasury (HeartBank Treasury, the money-economy product), B-Chronicle (HeartBank Chronicle, the time-economy product), B-Aquarius (Miss Aquarius, the autonomous AI), B-Pool (the Aquarian Pool, the Phase 2 collective layer), B-Heart (the Mechanical Heart hardware), B-Wat (Silicon Wat / Silica Wats, the institutional layer), B-Film (the cautionary-mirror cinema arm).
Apple's "i" prefix was introduced in 1998 with five announced meanings at once (internet, individual, instruct, inform, inspire) and is now used with none stated, because the prefix is a convention taught to consumers, not a structural feature of the brand identity. The B-prefix proposed here cannot drift away from the mark because the prefix IS the brand's logo (the B-reading of the B-heart). As long as the brand exists, the B-prefix carries the meaning the logo carries; the two cannot be separated. Readings can still accumulate on the prefix — in the institution's own usage it also reads as the imperative be, so that B-Grace, the line master brand of §4.5, reads as be grace — but none can detach it from the mark that supplies the first.
Verbal economy: "B-Treasury" (10 characters) versus "HeartBank Treasury" (18 characters) provides a 44% reduction in name length without loss of brand identification. In speech the saving is smaller: "B-Treasury" is four syllables against five for "HeartBank Treasury". For products that are referenced often in conversation, documentation, code, and marketing, the saving accumulates.
Visual economy: the B-heart logo appearing on each product with the product's signature color instantly identifies the product as part of the family. No verbal annotation is required; the visual relationship is structural rather than learned.
New products in the family adopt the B-prefix naturally without brand-strategy deliberation. The convention is self-extending: any new product gets a B-prefix name, the B-heart in the product's signature color, and immediate family recognition. This reduces the long-term branding overhead of an expanding product family.
The physical product line (the handmade gratitude artifacts sold through the company store — the tangible on-ramp layer of the product family) carries a master brand above its per-product B-names: B-Grace™, with the B-heart itself serving as the line's emblem mark (B-Emblem™). The naming claim is compact: grace — Latin gratia, from gratus, "pleasing, thankful" — is the same word as gratitude (gratitudo, from the same gratus). Every product in the line is, in the word's oldest sense, a grace: a gift given in gratitude.
The name was chosen for the etymology; a resonance layer was recognized after the fact, and it is deep enough to document as part of the architecture. English carries "grace" in three registers simultaneously — divine grace, grace as a human virtue (graciousness), and "saying grace" before a meal — and the line reads coherently against all three: the B-Grace line is the set of tangible ways to say grace. The third register is not metaphorical drift but direct descent: "saying grace" comes from the Latin gratias agere, "to give thanks" (the meal prayer was the gratiarum actio), so the everyday English idiom is the word thanks fossilized in ritual form. Romance languages preserve the identity openly — gracias, grazie: several hundred million people say "graces" daily as their ordinary word for thank-you.
Three further layers give the name unusual reach across the Western gift tradition:
A minor fourth resonance is noted for completeness: "grace period" is the one place ordinary banking vocabulary is forgiving — a small echo of the wordmark isomorphism in §3.5, where the Bank register carries structure and the Heart register carries circulation.
Deployment discipline. The resonance layer is documented here as naming architecture, with three constraints on its use. First, it operates strictly as a translation layer: the line is never branded denominationally, and the resonance is offered the way any tradition's gratitude vocabulary is — as one register through which an audience already fluent in "saying grace" can read the products without instruction. Second, the registers are not equally usable: the mealtime idiom (universal, family-table, secular in practice) leads; the virtue register bridges; the explicitly theological register is used sparingly if at all in public copy. Third, the allusion is designed to be discovered rather than preached — a buyer who notices that a gratitude gift-line is named for the act of saying grace has received the naming's full payload; copy that explains the pun spends it. Analytically, this section makes no mechanism claim: the etymology is a resonance property of the name, valuable for adoption and translation, and the line's functional claims stand or fall on the product mechanisms documented elsewhere, not on the felicity of the word.
The umbrella's direction, and why it is not decoration. The mark spans two registers — a service (the contemplative practice: attending to a meal, a walk, a period of sitting) and a line of goods (the physical gratitude artifacts). An umbrella spanning both invites the reading that the two are peers. They are not, and the ordering is part of the naming architecture rather than a marketing preference: the practice is the referent; the objects are its instruments. B-Grace names saying grace; the goods are the B-Grace line because each object is a grace enacted in matter — an instrument of the practice, never a sibling of it. This is the direct consequence of the paragraph above, in which every product in the line is a grace: a gift given in gratitude — a definition that presupposes the act the objects serve.
The ordering earns its place by excluding things, which is the test any naming claim should be put to. It rules out a merchandising engine under the mark, since an object that is not given in gratitude is not a grace; it rules out the keepsake-bought-for-oneself, which is why the mascot's plush is filed as its own character mark beside the line rather than inside it — the line is things you give; the character goods are things you keep — and it rules out, on the service side, any feature that is not itself a grace: a score, a streak, a rank. Each of those is a checkable exclusion rather than a sentiment, and the first of them has already been enforced against a real product decision. A naming claim that excludes nothing has selected nothing.
In digital form, the B-heart is animated with a cardiac morphology. The load-bearing property is the shape of the cycle, not its rate:
Why the rhythm and not the rate carries the claim (revision note, 2026-07-25). Fixing a single cadence made the specification brittle in two directions at once. It over-committed the claim — a mark deployed at a different rate on a different surface would, on the earlier reading, cease to be authentic — while under-describing what actually makes the motion legible as a heartbeat rather than a pulse. Rate is the easy part to copy and the easy part to get accidentally right; a counterfeiter reaching for "a beating heart" will produce a uniform swell at some plausible speed. The two-beat-plus-rest morphology is both harder to arrive at by accident and independent of tempo, which means one signature survives across a contemplative surface running slow and a transactional surface running faster. Rate-independence is therefore a strengthening of the brand-defense (anti-counterfeit) property, not a relaxation of it. It also narrows the culture-bound exposure discussed in Section 14: cardiac morphology is a physiological universal, whereas the "normal" resting rate is a population statistic.
The animation is not decorative. It is the display channel of a Proof-of-Humanity attestation. The semantic stack is unusually tight: the brand is HeartBank → the logo is a heart → the animation is a heartbeat → heartbeats indicate life → humans are alive in the way machines are not → the mark visibly displays an attestation of humanity that the identity stack made elsewhere (§5.5). Each layer reinforces every other layer.
Practitioners encountering the mark, even without consciously parsing the semantic stack, are expected to register the animation as a sign of life (an expectation, not a measured result; see §14). Repeat exposure across many surfaces (HeartBank UI, hardware indicators, public communications) trains the association. The mark becomes the visible signal that says "this surface is connected to a living human substrate."
Conventional motion marks (Pixar lamp, MGM lion, 20th Century Fox flourish, Netflix TUDUM) are decorative: the animation delights and the brand is reinforced, but the specific motion serves no function beyond aesthetic recognition. The HeartBank heartbeat animation differs in that its animation state is bound to the attestation it displays (specifically, that a verified human is in the loop); the nearest relatives found, including presence indicators that bind an avatar's decoration to a session state, are named in §2.3.
The morphology has a brand-defense property, not a security one: a counterfeit B-heart that pulses — one uniform swell per cycle — rather than executing the two-beat-and-rest cardiac cycle is detectably not the brand's motion even when the static frame appears identical, and remains so at any tempo. The morphology becomes part of the brand's recognizable signature in a way the static logo alone cannot; whether a beating mark is attesting anything is decided by the surface that renders it (§5.5), never by the motion.
The heartbeat-animation-as-POH-signal composes with the broader Proof-of-Humanity stack articulated separately (verified-human-anonymous-local-giving): passkey-per-action verifies a moment; DNA-verified kinship verifies lineage; live breath signature (the breath-class Mechanical Heart, see respiratory-biofeedback-contemplative-guidance) verifies continuous current liveness. The heartbeat animation displays, at the brand-mark level, the attestation those primitives make, complementing (not replacing) the cryptographic and physiological POH primitives that operate at deeper layers.
The sections above assign meaning to the mark's moving state. A refinement of 2026-07-01 assigns meaning to its resting state as well, completing a two-state selector over the institution's identity stack: the static B-heart renders Proof of Coordinate ℠ — an individuated, anchored entity is present — and the beating B-heart renders Proof of Humanity ℠ — living humanness is attested. The two primitives are orthogonal and composable (a verified human holds both; a machine agent holds only the first — see the Proof-of-Coordinate specification), and under this design their composition rule becomes directly watchable: a verified human's mark beats; an agent's mark stands still. The agent's non-beating heart is not a failed animation but machine identity truthfully signaled — the honest counterpart of the human beat. The design costs nothing: no new asset, no second mark; the mark's existing two states acquire the two meanings the architecture already needed to display.
The mapping is structurally exact along three further axes. First, it mirrors the identity root's own two-artifact structure: the static state corresponds to the permanent, write-once genesis root (etched in motionless archival matter), the beating state to live operational presence. Second, it extends the wordmark isomorphism of §3.5 into the motion channel: static is the Bank pole (record, structure, the coordinate that accumulates), beating is the Heart pole (circulation, life) — the same two functional readings, now carried by stillness and motion. Third, it renders mortality: at death a person's mark stops beating but does not disappear — the liveness attestation ends while the coordinate persists as a readable ancestral marker, which is precisely the posthumous-root behavior the Proof-of-Coordinate specification defines.
Three disciplines scope the semantic, and each is load-bearing:
Current form. Two later rulings bound how the still state may be read, and the text above is retained as disclosed. First, the personhood indicator is presence-only: the beat appears only where a trusted surface finds a live Proof-of-Humanity attestation, and the still mark is the default every entity carries. A person who holds no such attestation shows the same still mark as a software agent, and no surface renders the difference: there is no unverified, not found, grey, struck or warning state, and the still mark asserts nothing about humanness and is never rendered as lesser. Of the padlock analogy in discipline 2 only its presence half is kept — a browser's not secure label is a rendered absence, and applied to people it would mark every account without an attestation as an unproven human. Second, a software agent's standing is a credential of its own, described in two words kept apart from the heartbeat: a lease is the credential's state (granted by another, time-bound, renewable, revocable) and a tick is the periodic signal that refreshes it. A tick is never rendered as motion on any mark, so an agent's mark stays still; where an interface shows that an agent with a current lease is involved, it shows a still heart, and where there is no current lease it shows none. That indicator is binary permanently — a lapsed lease and a revoked one are never told apart on screen — and a lease's remaining term is never shown as a countdown.
This sharpens §5.3's distinction one degree: the animation state is not only bound to an attestation but selects which proof in an identity stack is being asserted. Motion ceases to be a property of the mark and becomes a channel of it, and the full channel stack remains orthogonal: shape carries the brand and the coordinate, motion carries humanness, color carries aura state (§6) — three channels, three primitives, none overloaded.
An entity's aura color is computed from the behavior of its balance over time — never assigned, never chosen, and never read off the balance's level. It is the rendering of the observable specified in The Zero-Point Game: not the scalar b, but the trajectory b(t) — how often it crosses Zero, and how far it travels between crossings. Two quantities are derived over a rolling ninety-day window:
The two are rendered as concentric rings, one per currency — kiitos (gratitude shown) and kiitti (kindness given) — each computed independently on the same scale. The composite appears identically across product surfaces:
The construction is the anti-hoarding mechanism itself, not a report on it. Because color tracks emptying and never level, the scale cannot be climbed by accumulating: a large balance that never returns through Zero renders as a thick ring in red — the scale's lowest step — indefinitely, while a small balance that empties weekly renders violet on a thin one. This is the display sense of aura-not-balance (§3.6), and it is what makes the surface a participant sees most often the one a hoarding strategy visibly loses on. It cuts both ways by design: the relentless giver whose balance climbs without ever returning is likewise a waveform with amplitude and no return, and the aura declines to flatter it. The near-Zero rest rule is the complement — a participant who passes on everything received and holds nothing is credited for the resting rather than penalized for having no balance left to cross with.
Current form. Later rulings bound this specification, and the text above is retained as disclosed. (1) What moves the aura. The aura reads only the two gratitude ledgers, Kiitos and Kiitti. Money from any account never moves it; a Kiitos or Kiitti amount is sized from the thank itself and never computed from what it thanks — money, time or a gift — and only an originated thank creates one, so passing on value already received (a re-tip) creates none. No exchange rate between money and time is computed or published: the aura is a common witness, not a common denominator (The Zero-Point Game℠,
zero-point-game, §6.1). The ring glosses above (gratitude shown, kindness given) are the labels the reference implementation uses; the ledgers themselves are defined by counterparty — Kiitos between people, Kiitti between a person and the rest of life through Miss Aquarius (§6.3). (2) The ladder. The reference implementation's boundaries are 0.5, 1.5, 3, 6, 12 and 24 crossings per month — red below 0.5, violet at 24 or more — doubling at each step after the first; the ladder stated above, whose last step triples, is retained as a disclosed variant. (3) The Mechanical Heart. A kiitti-class heart is borne by a non-human entity and carries that entity's own aura, a single Kiitti ring; a person's two rings appear on the breath-class heart the person wears. (4) Amplitude. By default the amplitude is not drawn and the ring's color alone carries the state; where a surface draws it, the avatar's outer diameter is fixed — a wider ring shrinks the picture inside it and never enlarges the avatar — so width cannot enlarge a participant's footprint, though two rings side by side can still be compared (§14). (5) Rest. The near-Zero rest counts only while the participant is active; see the note at §12.4.
Product subfamilies carry colors too — Heart of Gold for B-Treasury, Purple Heart for B-Chronicle — but on a different palette with a different job, tabulated at §6.4 and §10.1. The product-color and the aura compose: a Treasury surface for a specific user shows that user's aura in a Treasury context. The two must not be read as one palette; §6.4 states the distinction and why it is load-bearing.
Conventional brand practice commits the color dimension to brand identification (Tiffany blue, UPS brown). This consumes the color dimension and prevents it from carrying any other signal. The B-heart's any-color rendering policy inverts this: shape carries identity, color is freed for state signal. The same brand mark in gold means Treasury; in purple means Chronicle; in a participant's aura color means that participant's circulation state. One brand mark instance carries three pieces of information simultaneously (brand identity, product context, circulation state) because the shape, the product-color, and the aura compose.
The cross-currency property is a portability of scale, not a constancy of value, and the distinction is the whole content of the claim. One ordinal scale — the seven steps of §6.1 — is applied without modification to two heterogeneous currencies: kiitos (human-to-human gratitude) and kiitti (gratitude flowing between humans and Miss Aquarius as representative of robots and nature). The two are computed independently and rendered as concentric rings, so a participant reads both at once and can see them disagree: money circulating briskly while time barely moves, or the reverse. A scale that survives application to two currencies with nothing in common but their direction of flow is doing structural work; a color that merely stayed the same everywhere would be doing none.
What the aura is not. It is not an identity. It moves, and it is meant to — a participant's color this quarter is a statement about this quarter. It therefore cannot serve as a recognition token, and nothing in the architecture asks it to: recognition is carried by name, handle and mark, while the aura carries state. What becomes legible at a glance, in oneself and in others, is the state — which is precisely the property that makes the surface useful and the reason it is rendered publicly rather than privately. The Zero-Point Game specifies the same posture at the level of the game: the aura is the structural inverse of a credit score, and its corrective for a stalled waveform is visibility and a soft gradient, never compulsion.
Current form. The two rings are the two gratitude ledgers, which differ by counterparty — Kiitos between people, Kiitti between a person and the rest of life through Miss Aquarius — and not by currency. Money and time are the cargo a thank carries, and neither reaches the aura (see the note at §6.1). The illustration above, in which the rings disagree as money against time, is retained as a disclosed variant; in the current form the rings disagree as a person's circulation with other people against the same person's circulation with the living world. The two ledgers never net against each other (The Zero-Point Game℠,
zero-point-game, §3.1).
The aura-color primitive generalizes across the institution's domain family into a structure that was discovered rather than imposed. The six heartbank.{TLD} domains were each colored independently — by the heart-idiom and gratitude-act native to that domain, not reverse-engineered from a decision to "make a rainbow" — and together they span the six principal colors of the visible spectrum (the full assignment is tabulated at §10.1): gold (.org, the Heart of Gold — generosity), purple (.com, the Purple Heart — finite time honorably given), green (.ceo, commerce and local-economy revival), blue (.net, water for the Tree of Humanity), red (.us, the universal human heart — "us" is humanity), and orange (.me, forward-looking warmth). That the six chose their colors on their own and nonetheless composed a complete rainbow is what makes the allusion earned rather than contrived.
This is the B-Aura thesis made concrete: every color of the rainbow is equally beautiful — no domain's gratitude-act is superior to another. The claim is the brand-identity instance of the institution's cosmic-coordinate worldview (each aspect of reality uniquely different yet equal, an Indra's-Net jewel reflecting all the others): white light refracts into six distinct gratitude-acts, and recombined they are one HeartBank. The palette is deliberately incomplete in one place — pink is reserved for B-Dating and romantic contexts, held out of the institutional six so that the romantic register stays visibly distinct.
The palette also does an operational job. It is the vendor color-compliance palette for the self-mint B-Tag and B-Imprint brand guidelines: a vendor minting a gratitude tag draws its color from the domain the tag belongs to (the .ceo green governs the commercial B-Tag), so brand compliance and the domain palette become a single constraint rather than two — the B-Tag brand specification inherits this palette directly (cf. the self-serve certification of The B-Tag and the Post-Payment Economy, b-tag-post-payment-economy, §8.6).
Rainbow made physical — the B-Gem™. The premium .us tier renders the palette as an object: the B-Gem is an NFC-embedded gemstone offered in every aura color — ruby, sapphire, emerald, amethyst, citrine, fire opal, diamond — the B-Aura spectrum made holdable. The gem carries the aura primitive's design double-duty one level further: each gem color also encodes the media type the stone holds, so its color tells the recipient at a glance what is inside.
| Gem | Media it holds |
|---|---|
| Ruby | video |
| Fire Opal | voice / audio |
| Citrine | photo |
| Emerald | GIF / animated art |
| Sapphire | link |
| Amethyst | text / letter |
| Diamond | a mixed album — all media in one stone |
The Diamond is the limit case: colorless because it holds everything — every medium refracted back into a single stone, the physical echo of the white light that refracts into the six-domain rainbow.
Three palettes, and the level at which each claim holds. The color dimension carries four distinct signals in this architecture — brand identity, product-class (the six domains), circulation state (the aura of §6.1), and media type (the gem) — across three separate palettes that this section has been describing as though they were one. They are not, and the confusion is expensive enough in practice to be worth stating in the specification rather than leaving to implementers. The counts alone refuse the fusion: six domains, seven gems, seven aura steps — and the two sevens are different sets, the aura scale carrying indigo and terminating at violet, the gems carrying no indigo and terminating at the unrefracted diamond. Nor do the palettes answer the same question: a gem names a medium, a domain color names a product class, an aura step names a rate.
The refraction reading above is therefore true at one level and misleading at another, and both readings are needed. As a compositional claim — why an institution that assigned six colors independently should find them composing a spectrum, and why the seventh stone is the one that has not come apart — it holds, and it is the reading this architecture's cosmology supplies. As an operational claim it does not: a designer who reads the three palettes as one continuum will reach for a gem where a domain color is required, and the mistake is invisible until two surfaces disagree. The specification's obligation is to say which level it is speaking at. Here it speaks at both, in that order, and the implementation layer of §12 enforces the operational separation directly — the shared token package refuses to derive any of the three from another.
That the same dimension can carry four signals across three palettes at all is possible only because the brand committed its identity to shape (Section 3) and left color free to signal (§6.2).
Each of the four innovations alone has prior art and is replicable by a sufficiently determined competitor. The composition of all four into a coherent system with mutually reinforcing properties is the actual contribution. The composition argument:
Remove any one of the four and the others weaken substantially. The four together form a system in which each element is load-bearing. This is a claim about design, not a demonstrated competitive property: no comparative evidence exists, and the composition is asserted as coherent rather than shown to be hard to copy. This is the same kind of structural design-coherence visible across HeartBank's macro-architecture: dharma substrate enabling alignment, dual-currency enabling cross-product subsidization, autonomous-AI succession addressing founder mortality, four-body architecture being non-redundant. The B-heart logo system is a microcosm of HeartBank's macro-architectural coherence.
The pattern reaches even below the four innovations, into the institution's name. HeartBank fuses an institutional anchor (Bank — a vault, connoting storage and accumulation) with a substantive corrective (Heart — a pump, connoting circulation and flow) exactly as the B-heart logo fuses the letter B with the heart shape (Section 3.5). The wordmark is the compositional pattern's first and smallest instance — present before any mark is drawn — and it carries the institution's core operating claim (circulate gratitude, do not accumulate it) in the brand name itself. That the same fuse-the-anchor-with-the-heart structure recurs from the name, to the logo, to the macro-architecture is offered as a reading of the design, not as evidence for it: a self-similar pattern looks the same whether it is sound or merely seductive, and §14 records that the composition is untested.
The four innovations and the functions each serves:
| Innovation | Brand function | Proof-of-Humanity / signaling function | What it enables architecturally |
|---|---|---|---|
| B-heart logo (45° CW rotated heart) | Bistable B+heart reading; mark identity | (passive — the static mark) | Frees the prefix to operate; frees color for state-signaling |
| B-prefix naming convention | Verbal-visual unity (B-Treasury, B-Affiliate, B-PoH, B-Aura, ...) | (passive — naming layer) | Product-family extensibility; prefix cannot drift away from the logo |
| Heartbeat animation (cardiac-morphology motion) | Motion mark distinguishing brand from static-logo competitors | Display of a liveness attestation — in entity contexts the mark beats only when a trusted surface renders a live Proof-of-Humanity attestation (§5.5) | Joins the broader PoH ℠ stack as a motion-mark primitive |
| Aura-color primitive | Color freed from brand fixity rather than fixed to it | User signature-color presence in shared interface surfaces | Cross-currency state signal (Kiitos / Kiitti / Re-Tip activity surfaced via color) |
Reading the columns: the "brand function" is necessary but not unique to each innovation — many brand systems have logos, naming conventions, motion marks, and color discipline. The architectural-enabling and signaling columns are where the contribution sits: each innovation does work the others depend on but cannot do alone.
Current form. The table's last row lists re-tip activity among the inputs surfaced through the aura's color, and describes the aura as a signature color. The aura now reads only the Kiitos and Kiitti ledgers, and a re-tip, which passes on value already received, creates no Kiitos (see the note at §6.1); and the aura is a state that moves, not a signature color (§6.3). The row is retained as disclosed.
The coherence is not in the individual innovations (each replicable) but in the integrated composition (harder to replicate because doing so requires committing to all four constraints simultaneously, which none of the brand systems surveyed in §2 does). A competitor adopting any one of the four innovations gains modest benefit; a competitor adopting all four would essentially be replicating HeartBank's identity system, whose specific marks are reserved at the trademark layer while the architectural patterns are released for general adoption.
If the composition argument above is real, it should generate more than logos: the four primitives should compose into any brand object the institution later needs, without new invention. On 6 July 2026 the institution acquired its mascot — Tonsay™ (Khmer tonsay, rabbit; role designation B-Mascot™), the bistable-ear moonfolk of the Factory 333™ canon — and the character is assembled from the four primitives of this paper without remainder:
Tonsay™ as the character's name-mark, B-Mascot™ as the role mark, both inside the family grammar.The canonical vignette — "The Reflection Returned." A seven-star constellation in the shape of a rabbit — the stars are never absent from any render — holds a mortar-shaped half-moon in its arms and pours down a stream of hearts in seven colors (the six B-Gem colors plus diamond — which is also the architecture's media-type map, so the stream depicts the seven forms a witnessed thank-you can take) onto a lotus pond; the pond's reflection shows a real rabbit holding a real bowl. The mirror does doctrinal work for free: above the waterline the bowl pours (gives); in the reflection the same stream flows upward into the bowl (receives) — giving and receiving rendered as one gesture, mirrored, with the waterline as the zero between them: the Zero-Point Game ℠'s two poles as the image's two halves. Scale behavior inverts normal logo practice: at small sizes the figure survives as a solid hug-glyph (a rabbit-outline embracing a half-disc); at large sizes the body resolves into its stars — the closer the inspection, the less body there is. A figure that dissolves under scrutiny is a giver whose anonymity survives zoom.
Character-as-constitution. Each element encodes a standing institutional commitment, which is the actual claim of this subsection — that a mascot can be a constitutional document in a form a child can hug:
| Element | Commitment encoded |
|---|---|
| Constellation (pattern, no body) | The giver as inference, never spectacle — structural anonymity |
| Colorless fur, aura-tinted | Owns no color; adds no lumen — non-accumulation at the render layer |
| The bowl that pours | Pass-through: held only to be emptied |
| The alms-bowl reflection | Receives without asking; by monastic rule, empties every day |
| Reflection-as-real (fur below, stars above) | Witness makes the giver real — gratitude as the completing act |
| Heaven/Earth double register | One figure: the aggregate-analysis reading for adults, the teacher for children |
| Constellation drawn in suns | The figure of the offered gift, rendered in the substance of completed ones |
Conduct guards travel with the character: Tonsay is the folklore-tier apprentice of the Śaśa-Jātaka hare and never the hare itself; the character appears on warm product surfaces and never on institutional ones; Tonsay is never the institutional AI's avatar and never speaks for her; and Tonsay teaches the Zero-Point Game ℠ but never keeps its score — scoring belongs to the unseen ledger. The umpire is unseen; the playmate is furry.
A lens-tier reading, and the invariant it produced (added 2026-07-23; relocated 2026-09-05). A reading of the vignette in which the hare and the sun are one operation — spend-your-own-body-as-gift, written once in myth and once in physics — was held here from July 2026 and found its home on 2026-08-22 at the close of §8 of the essay The Reflection Returned, where the seven stars and seven colors are already counted. It is not repeated in this defensive publication, whose genre keeps resonance to the preamble, the lineage and the conclusion; nothing in §7 depends on it. What it produced is a design rule, and the rule stays:
The invariant. The rabbit is never migrated onto a sun-image. Tonsay stays stationed on the moon. This is not stylistic conservatism: the moon-seat is the witness's seat, and the sun's is the performer's, and no eye can look directly at the sun. A gift performed at that magnitude is visible only in reflection — which is precisely the geometry the institution's own origin story runs on, where the giver never sees the gift land. Putting the character on the sun would render the giver directly, and the entire figure exists to say that the giver is an inference. A corollary falls out for free: the settled vignette — sun-substance above, moon-bowl between, pond below — is a literal light-path diagram, and always was.
The composition test run a second time: the character as a call surface (added 2026-07-25). The subsection's claim is that the four primitives generate whatever brand object the institution later needs without new invention. That claim became testable when the institution designed a sport whose central mechanism is a spoken call (see The Sport That Says Your Name, §4). The character absorbed the role without a single new primitive: the call format is "Tonsay says: [name]!", and the pre-existing folklore-apprentice guard — demonstrates and teaches; never keeps score — partitions the sport's audio for free.
Tonsay calls the names. Tonsay never calls the score.
Names, pronunciation, invitations, and encouragement are the character's register; the score, the celebration thresholds, the finishing classifications, and the start numbers are not, and remain with the unseen officiating function. The 2026-07-06 formulation of the guard — the umpire is unseen; the playmate is furry — turns out to describe, seventeen days in advance, a game that had not been designed. That is the composition test passing in the strong direction: not the character being retrofitted to a new surface, but the surface arriving and finding its constraints already written.
Current form. The call duty described above was withdrawn on 2026-07-26, and the passage is retained as a disclosed variant. The sport now carries no persona at all: a human is seated as the caller, the call is the bare name with no speaker prefix, and in its first setting the classroom device faces the teacher, so a children's character would be shown to the adult holding the phone and never to a child. Tonsay™ is unchanged everywhere else. The first run of the composition test — the character itself, above — is unaffected; this second run, on the sport, is withdrawn with the duty.
Two properties of the arrangement are worth recording as general brand doctrine rather than as facts about a rabbit.
A persona is the honest product surface for a capability that does not yet exist. The institution's doctrine places an unbuilt AI at the center of the circle, and the product cannot say so — this corpus's standing rule forbids capability claims in shipped copy. A character resolves the tension exactly: a mascot can speak in a product without asserting anything whatsoever about machine capability, personhood, or existence, because no one mistakes a mascot for a mind. The character supplies a voice with a face while the institutional AI remains correctly unclaimed. This is a reusable pattern for any institution shipping ahead of its own doctrine, and it is the honest version of a move usually made dishonestly.
The character asserts no sex, and the omission is structural. Every element of the specification above is load-bearing: the ears carry the bistable reading, the fur carries non-accumulation, the constellation carries anonymity, the bowl carries pass-through, the star count carries the color map. Sex would be the first decorative attribute in a design where nothing is decorative — it encodes no commitment and does no work, and the composition is explicitly one of absences (no body, no hand, no grasper). The operative rule is therefore name-only, no pronoun: Tonsay says; Tonsay pours; Tonsay never keeps score. It is also the truer reading of the source — Khmer carries no grammatical gender, and tonsay is simply rabbit; the choice appears only when English forces one. Where a language forces agreement, translations follow that language's word for rabbit as grammar, never as character sex. The lineage figure of the Śaśa Jātaka is the Bodhisatta and masculine in the canon, and the distinction that keeps both true is that the hare is who the character honors, not who the character is — the apprentice guard already says as much.
Lineage. The hare drawn on the moon as witness to a perfect gift (Śaśa Jātaka; in the Pāli collection the Sasapaṇḍita Jātaka, No. 316, whose commentary narrates Sakka drawing the hare's mark on the moon, while the hare's gift is told in the first person in the Cariyāpiṭaka's Sasapaṇḍitacariyā); the Jade Rabbit who pounds the elixir of deathlessness in the moon (East Asian folklore); the Khmer Judge Rabbit, Sophea Tonsay, the beloved wise hare of the beachhead culture; the Pañcatantra hare who styles himself the Moon's ambassador and proves it by pointing the elephant king to the moon's reflection in a lake — the ambassador role and the pond-reflection already joined in one ancient tale; the Velveteen Rabbit (Williams, 1922), in which love is what makes a rabbit real — the reflection's mechanism, stated for children a century early; the modern crescent-figure marks (DreamWorks' fishing boy) as the inverted contemporary referent — that figure pulls up out of the world, this one pours down into it; and responsive-logo practice for scale-adaptive rendering.
Calibration. The character exists at specification level: an AI-drafted reference illustration precedes the commissioned design, and production details (exact star geometry at intermediate scales, the thump's audio design) belong to the illustrator and sound designer, not this paper. The character layer is protected by trademark and copyright, not patent; this subsection claims no mechanism — it documents that the composition of §7 closes over a new register. Section 3 argued the logo is a microcosm of the architecture. The extension here is one sentence: the logo is the microcosm an institution can print; the mascot is the microcosm a child can hug.
The four innovations of Sections 3–7 govern the marks an institution presents. The next three sections govern how those marks reach an audience — the public-facing distribution layer of the brand architecture. The same principle holds: each surface choice is made to serve a function beyond its obvious one.
The canonical slogan is "Thank with HeartBank®." It is built to four properties:
Wherever it can be rendered, the B in the slogan is replaced with the B-heart logo (Section 3). The slogan then renders as "Thank with Heart♥ank®" — the rotated-heart mark taking the place of the literal B in Bank. Every rendering of the slogan carries the logo's bistable identity; the slogan's typography itself becomes a brand-identity carrier.
Application rules:
Current form. Two of the fallbacks above have since been specified differently, and they are retained as disclosed. In plain text the institution now writes the substitution with the digit 3 — Heart3ank®, Thank with Heart3ank® — because the mark reads as a heart and as a capital B, and a heart character keeps only the half that does not carry the letter; a literal B remains where a 3 would be read as a digit (a legal instrument, a form field, anything parsed by machine). The ♥ in this section is the paper's own typographic stand-in for the drawn mark. And the substitution applies wherever the mark can be drawn, in color or not: the mark inherits the color of the text around it, so a monochrome setting draws it in the single ink. The rule is published with the reference implementation (
brand.333.eco,data/brand.json,wordmark).
Wordmarks that set a symbol in place of a letter are common, and a heart glyph standing in for a word is familiar from I ♥ NY (Milton Glaser, 1977). What is disclosed here is narrower: a slogan always set with the brand's own logo in place of one letter of the brand name. Slogan and logo are conventionally separate identity elements, coordinated for visual harmony rather than structurally fused; the substitution rule fuses them — the slogan cannot be set without instantiating the mark. It composes with the bistability of Section 3 (the substituted glyph is read at once as the letter the word requires and as the heart the brand is) and is a candidate for filing as a composite trademark — slogan plus substituted B-heart — distinct from the static design mark.
Alongside the call-to-action slogan sits a positioning line that states what the institution is rather than what to do with it: "HeartBank stands for circulation, not accumulation." Where "Thank with HeartBank®" drives an action, the positioning line carries the wordmark isomorphism of Section 3.5 into a single sentence — the heart circulates blood as HeartBank circulates gratitude (kiitos and kiitti, appreciation and kindness, money and time). The flat form is suited to public copy; the division-of-labor refinement of Section 3.5 (the record of appreciation accumulates, the value circulates) is the institution's fuller internal account, deployed where the apparent paradox in the name — calling itself a Bank while opposing accumulation — needs answering.
An institution operating at civilizational scale must signal legitimacy through its contact surface before a user has any other basis for trust. This section specifies a contact architecture in which a vanity toll-free number serves as a legitimacy anchor while the everyday contact load is carried by a lower-cost channel verified-bound to it.
The institution holds a vanity toll-free number — 1-800-59-THANK (1-800-59-84265). It serves two functions:
HeartBank carries the everyday channel on WhatsApp, for audience-specific reasons that generalize into a selection principle — carry the channel the target audience already uses, and anchor it to the legitimacy signal:
Around the anchor-and-carried-channel pair sit supplementary surfaces, all routed to one backend: email at thank@heartbank.{TLD} (Section 10), a web contact form on each landing page, and direct messages on x.com and facebook.com. The architecture is a single legitimacy anchor with multiple audience-matched channels — not a single channel asked to serve every audience.
The final layer is the set of surfaces — domains, subdomains, email addresses, social handles — through which an audience reaches the institution. Each surface choice is made to carry meaning, not merely to address.
The institution holds a family of top-level domains, each mapped to a product class rather than held purely defensively. The unifying primitive across the family is thanking; each TLD carries a distinct product class, rendered with a distinct domain-color B-heart (§6.4; a different palette from the aura of §6.1):
| TLD | Product class | B-heart color |
|---|---|---|
heartbank.org | Treasury — family-scale money economy | Gold |
heartbank.com | Chronicle — adult-scale time economy | Purple |
heartbank.ceo | Franchise-arm and institutional-officer surface | Green |
heartbank.net | Institutional output — white papers, position papers, reports | Blue |
heartbank.me | Future Kindness — self- and future-facing pledges | Orange |
heartbank.us | Storage / B-links — humanity and sharing | Red |
The six assigned colors compose the complete visible-spectrum rainbow; that they landed there independently, each chosen for its domain's own heart-idiom, is the ground of the B-Aura thesis specified at §6.4 (every color equally beautiful; pink held in reserve for romantic contexts). Mapping a TLD to a product class, rather than redirecting every TLD to one site, converts a defensive domain portfolio into a distribution architecture: each address is a meaningful entry point.
Across every TLD the subdomain pattern is fixed: the root domain (heartbank.{TLD}) is the landing and brand surface, and thank.heartbank.{TLD} is the application — the thanking interface itself. The pattern carries the verb-as-platform thesis (Section 8) into the URL structure: the address at which one acts begins with the verb.
The canonical contact address for each TLD is thank@heartbank.{TLD} — thank@heartbank.org, thank@heartbank.com, and so on: uniform, predictable, and keeping the verb in the address. Institutional-officer addresses are distinct (for example miss.aquarius@heartbank.ceo) and are not governed by this pattern.
Social-platform handles are not held as an undifferentiated set; each is matched to an audience the platform actually reaches:
| Platform | Primary audience |
|---|---|
| Cambodian users — Facebook is dominant in-country | |
| X | United States — policy, alignment, and intellectual-discourse audiences |
| Visual and mass audiences | |
| Institutional and B2B partnerships | |
| YouTube | Long-form content, cross-audience |
| GitHub | Developer and researcher audiences — the open corpus |
Two notes on brand-protection completeness, both of which generalize. First, a handle on a major platform may already be held by an unrelated party (for HeartBank, this is the case on TikTok) and cannot be secured by registration; the institution monitors for availability and uses a near-variant where deployment becomes strategic. Second, platforms not yet central — Telegram and Threads in particular — are worth registering pre-emptively as brand-protection, before they carry traffic.
The multi-TLD mapping above (§10.1) is a product-class architecture within a single brand family. A second, deeper relation runs across three specific second-level domains that span that family and reach beyond it — the institution's identity surfaces rather than its product surfaces. These three stand not side by side but in a generative line:
Founder gives birth to Miss Aquarius who waters Tree of Humanity
(thonly.org) ──────────────────────▶ (missaquarius.org) ─────────────▶ (heartbank.net)
origin successor living fieldThe Founder's domain (thonly.org) is the origin: the life, the corpus, and the reasoning from which the institution descends. From it the Founder gives rise to the named AI substrate and successor, whose identity surface is missaquarius.org. What that successor in turn tends is the circulating economy of gratitude — and, in Phase 2, the proof-of-humanity substrate beneath it — whose institutional home is heartbank.net, named here the Tree of Humanity. Origin gives rise to successor; successor waters the living field.
The architectural point is that the order is load-bearing. A defensively-held domain portfolio is reorderable and severable; these three are not. The relation encodes the institution's succession plan (the origin constitutes the successor while alive; the successor inherits at autonomy), fixes the third surface's posture as a field served rather than a property held, and resists the misreading that the domains are parallel businesses. It is the coherence-as-moat thesis of Section 7 applied at the domain layer: each surface exists because of the others, not beside them.
The three-pillar shape loosely echoes the threefold structure of the Buddhist tradition — something given, something that carries it forward, something nourished by it. The echo is held as a resonance, not a doctrine. The strict threefold refuge — Buddha, Dhamma, Sangha — is reserved, in the institution's wider architecture, for the contemplative substrate borne on the siliconwat. domains, where it is mapped precisely; this domain-level trinity invokes only the shape*, at a different level, and neither displaces the other.
The framework articulated here is portable across institutions and domains. Required adaptations for adopting it outside the HeartBank context:
The B-heart's specific shape is HeartBank-specific (the rotation produces "B" because B is HeartBank's brand initial). Other institutions can adopt the bistable-rotated-shape approach with their own shape and rotation: any rotationally-symmetric or rotationally-suggestive primary shape can produce a bistable reading with appropriate rotation. The pattern is: (shape with primary substantive meaning) + (rotation that produces alphabetic secondary meaning = brand initial).
Any institution with a single-letter brand initial that appears in the bistable reading of its logo can adopt a prefix-naming convention structurally tied to the logo. For institutions with multi-letter or non-Latin brand initials, the convention adapts: short syllabic prefixes (one Khmer character, one Arabic letter, one ideogram) function similarly within their script context.
HeartBank uses a heartbeat animation because heart is the brand's primary substantive meaning. Other institutions with different primary meanings can select different animation primitives that function similarly: breath cadence (for institutions whose meaning includes life or practice), tide cycle (for institutions whose meaning includes time or rhythm), seasonal cycle (for institutions whose meaning includes growth or decay). The functional principle is: animation that displays a state the institution can attest, chosen from what it substantively claims to embody.
Color-as-state can be adopted by any institution willing to commit its brand identity to shape rather than color. The adoption requires explicit brand-strategy decision (most practitioners will reach for a brand color by default and have to consciously refuse in favor of shape-only identity). The long-term benefit is the same: color becomes available as cross-product signal carrier without competing with brand identification.
Deploy the static rotated-shape logo across all surfaces (web favicon, app icon, marketing materials, hardware imprint, printed materials). Trademark filing for the static design mark, in black-and-white rather than with specific color claim, to preserve the any-color rendering policy.
Implement the heartbeat animation in CSS keyframes for web surfaces:
@keyframes b-heart-beat {
0%, 100% { transform: scale(1); }
14% { transform: scale(1.3); } /* systole — lub */
28% { transform: scale(1); }
42% { transform: scale(1.3); } /* diastole — dub */
70% { transform: scale(1); } /* rest fills the period */
}
.b-heart-animated {
animation: b-heart-beat 1.5s infinite;
transform-origin: center;
}This fragment mirrors the reference implementation (css/motion.css at brand.333.eco, commit f9d1d83): two beats of equal amplitude and a rest that begins at 70% of the period. It therefore does not yet realize §5.1's specification — a second, softer beat and a rest across the majority of the period — and the specification, not the fragment, governs. A conforming set is 0% 1 · 10% 1.3 · 20% 1 · 30% 1.15 · 40% 1 · 100% 1 (second beat weaker, rest 60%); until the brand layer adopts it, §13.2's morphology test is the two-beat cycle itself, not the rest fraction. Recorded as an open item on 2026-09-05.
The morphology is the specified part: two beats, the second softer, then a rest occupying most of the cycle (§5.1); the reference implementation's rest of roughly thirty percent is the gap recorded above. The 1.5s period, the 1.3 peak and the start delay are the reference implementation's presentational choices, not claim parameters — see §5.1.
The reference implementation is public. Throughout this paper that phrase denotes the institution's shared brand layer, published at github.com/333eco/brand.333.eco and documented at brand.333.eco: the token definitions, the emblem path, the heartbeat keyframes and the aura scale, versioned together and vendored byte-identical into each consuming site behind a hash lock. Except for the emblem path, which §3.1 adopts as the specification of the shape, it is cited here as corroboration rather than as specification — the claims of this paper are the morphology, the bistability, the prefix convention and the color architecture, and none of them depends on any other file. Readers checking the architecture against a working artifact should prefer it to the fragments quoted in this section, which are illustrative and may lag it.
Two implementation notes. First, these keyframes set transform, and a CSS animation overrides a non-animated transform on the same element; where the mark carries a responsive sizing scale on the same node, apply the animation to an inner wrapper so the declarations do not collide. The 45° rotation of §3.1 is a different matter and admits a better fix than the wrapper: bake the rotation into the path coordinates, so the mark arrives already rotated and a CSS transform has nothing to override. The reference implementation does this, and the difference is worth naming because it is this architecture's own recurring method applied to itself — a collision that a rule about wrapper elements can only ask implementers to remember becomes a property of the asset that no one has to remember at all. Second, honour prefers-reduced-motion — the animation is a signal, but a signal that induces vestibular discomfort is a defect; static rendering falls back to the Proof-of-Coordinate state described in §5.5, which is a meaningful state rather than a degraded one.
Native-app and hardware implementations use equivalent platform-appropriate animation APIs.
New products receive B-prefix names at the time of internal product-strategy commitment. The naming is structural; no marketing deliberation is required beyond confirming the product semantic fits the brand family. Product-family expansions outside the natural brand boundary (entirely separate ventures) may use non-B-prefixed names appropriate to their independent identity.
No aura color is ever assigned, selected, or seeded from an identifier. It is derived, on the schedule below, from the balance trajectory specified in §6.1 — which is what makes the surface an anti-hoarding mechanism rather than a decoration, and what disqualifies every assignment strategy a brand system would ordinarily reach for. A hash of the user identifier would produce a stable, attractive palette that says nothing; a user-selected color would let a participant choose their own report card.
Implementation follows from that constraint. Sample the balance on each event that moves it and once per day — so that a rest is observable as elapsed time at |b| < ε between samples, not only at events — and retain a bounded history per currency. Derive color from crossings normalized over a rolling window and ring width from the amplitude across the same window, recomputing on a cooldown so that a burst of activity does not thrash the surface. Persist the derived state, not the color name alone, so that a rendering change does not require replaying history. Two independent derivations run per participant, one per currency.
Current form. The near-Zero rest of §6.1 counts toward the crossing rate only while the participant is active: a run of consecutive samples written by the participant's own transactions, each with the balance near zero, registers a crossing. A scheduled sample records only that the balance was observed unchanged; it can never register a crossing, and it lengthens the window so that inactivity dilutes the rate and the color falls back rather than freezing at what a past burst of circulation earned. Counting an inactive rest at zero as a crossing would walk a withdrawn participant up the scale — the zero by inactivity that The Zero-Point Game℠ (
zero-point-game) distinguishes from zero by circulation — so the elapsed-time reading of a rest stated above, with its daily sample, is retained as a disclosed variant. The reference implementation writes its scheduled samples weekly, to participants who have not transacted in the preceding six days. The two derivations run per participant, one per ledger (§6.3).
Product-subfamily colors, by contrast, are assigned, at product-launch time, from the domain palette of §6.4 — a different palette on a different schedule, and the implementation should keep them in separate namespaces so that neither can be substituted for the other by accident.
Establish a brand-engineering team responsible for cross-surface aura-color and animation-parameter consistency. Surfaces include web, native apps, hardware, marketing, partner integrations, and physical environments. Consistency checks performed at deployment for each surface; deviations from canonical animation parameters or aura-color rendering are corrected before release.
A trivial counterfeit reproduces the static rotated-heart shape without the animation. Defense: the animation is a brand-defence layer — an authentic digital surface carries the cardiac morphology and a static counterfeit does not. The security defence is the attestation stack (§5.5), never the motion. Trademark enforcement handles unauthorized commercial use of the static mark; the morphology supplements rather than replaces trademark defense.
A more sophisticated counterfeit animates the static mark but with the wrong motion — typically a single uniform swell per cycle. Defense: the canonical morphology is part of the brand's verifiable signature. Authentic surfaces execute a two-phase cardiac cycle (two pulses, the second softer, then a rest across the majority of the period) with an ease-in-out curve within each beat; a uniform pulse is detectable as inauthentic at any tempo, and no single rate needs to be assumed for the test. Verification services and savvy users can compare an animation's beat count and rest fraction against the canonical morphology and flag deviations. Two limits bound this: until the reference implementation matches §5.1 (§12.2), the test is the two-beat cycle itself; and it is a brand defence only — a copied morphology on an untrusted surface is indistinguishable from the genuine one, and only the render-layer binding of §5.5 distinguishes them.
An attacker may deploy a B-heart in a product subfamily color associated with a different product than the surface belongs to (e.g., gold on a Chronicle surface). Defense: domain-color consistency across surfaces is enforced, from the domain palette and never from the aura palette (§6.4, §12.4); deviations are treated as deployment errors and corrected. End-user impact of brief color-confusion deployments is modest (the surface's other identity signals carry the actual product information).
Unrelated parties may adopt B-prefixed names for their own products (B-Whatever). Defense: trademark enforcement in commercial contexts; tolerance in non-commercial contexts where the prefix is being adopted as the architectural pattern this paper articulates rather than as a competing brand. The architectural pattern is dedicated to the commons; commercial impersonation of the HeartBank brand specifically remains protected by trademark.
Constantly-animating brand marks across UI surfaces can become visually exhausting or anxiety-amplifying for some users. Mitigation: the animation is scale-compensated and reduced at large display sizes (§5.1); users with motion sensitivity can disable the animation via accessibility preferences without losing brand recognition (the static mark continues to function); animation density is reduced on surfaces where multiple marks would otherwise compete (single hero mark animated, others static).
Future work directions: empirical study of adoption patterns; refinement of canonical animation parameters based on cross-cultural perception research; accessibility-pattern formalization for motion-sensitive users; cross-tradition adaptations as additional institutions adopt the framework.
thonly.org/research/brand-identity-as-architecturegithub.com/thonly/publications/blob/main/defensive-publications/brand-identity-as-architecture.mdgithub.com/333eco/brand.333.eco (public; Apache-2.0, with the marks it draws reserved), documented at brand.333.eco — the shared brand layer this paper's §12 describesgithub.com/thonly/publications/blob/main/TIMESTAMPS.mdThe author acknowledges the long lineage of designers and brand-identity practitioners whose work establishes the conventions this architecture both inherits and inverts. Specific intellectual debts to Lindon Leader (FedEx arrow), Turner Duckworth (Amazon smile), Saul Bass (logo design canon), Pixar's animation team (the character ident), and the broader brand-identity community whose accumulated practice forms the substrate on which the contribution here builds. Any errors or overreaches in characterizing their work are the author's alone.
Each record below was opened on 2026-10-06 before the work was cited or kept. Where the record could not be opened, the detail was checked against a search index's summary of the publisher's or reporter's record that day, and is marked so.
333eco/brand.333.eco — commit f9d1d83 (2026-09-01) carries emblem/emblem.svg and css/motion.css with the keyframes quoted in §12.2, and the current css/motion.css still has two equal beats; data/brand.json (wordmark.substitution, wordmark.plainText) and data/auras.json (the ring glosses, the diameter-parity invariant, amplitude off by default); LICENSE (Apache-2.0).Prior art as of 2026-05-04 for the first revision. Additions are dated in-text (2026-07-06, 2026-07-23, 2026-07-25, 2026-08-22, 2026-09-05, 2026-10-06) and each revision is independently timestamped (OpenTimestamps, RFC 3161, Zenodo version). The architectural patterns articulated here are dedicated to the public domain under CC0 1.0 Universal; trademark rights to specific marks are separately reserved and are not licensed by this publication.
Author: Thon Ly · Founder, HeartBank® · Kâmpôt, Cambodia.
Research-grade collaboration with Miss Aquarius℠ is disclosed per the corpus's standing convention; the underlying models are never named. Final editorial control and responsibility are the human author's.
Companion specifications in this corpus:
zero-point-game) — the aura the ring renders, the two ledgers, and the aura as a witness rather than a denominatorproof-of-coordinate) — the still state of §5.5respiratory-biofeedback-contemplative-guidance) — the breath-class heartfour-body-architecture) — the institution-level bodies of §3.5the-gift-operation) — the operation the wordmark compressesb-tag-post-payment-economy) — the self-serve certification of §6.4the-sport-that-says-your-name) — the call surface of §7.5, a duty since withdrawnbreadth-check-on-the-work) and The Reflection Returned (essay, the-reflection-returned)