The Data Never Moves

Ron Reynolds · 2026-09-05 · 4 min read

Fourth in the Federations of Federations series. Every marketplace charges a price it never prints. This is the design that refuses to charge it.

To be findable, hand it over.

That's been the deal since the first online marketplace opened. Want customers to discover you? Upload the catalog. Give them your inventory levels, your booking calendar, your prices, your history — into their systems, under their roof, where their analysts learn your rhythms and their next product quietly competes with yours. The deal is so old it feels like weather. Nobody even calls it a price.

It's the piece of the platform bargain that bothered us most, so the network's answer surface was designed against it from the first sentence: every member's world becomes findable through one shared index — and the data never moves. The map is not the territory

When something changes in your world — a product added, a price changed, a Tuesday slot opening up — your machine's next sync carries a listing for the shop window: what a buyer needs to find you (product names, prices, descriptions, the hours your providers take bookings), stamped with the machine it came from.

A listing carries what a buyer needs and nothing about who bought. It is built field by field to a fixed shape, and the network refuses any booking field its strict schema doesn't name, so a customer reference has nowhere to ride. The rule the design holds to is blunt: your customers, your orders, and your history stay on your machine, and anything that would carry them across gets treated like a hole in a boat.

The network holds the map. The territory stays home. Two kinds of question, honestly labeled

A network of maps has to be honest about what a map can answer, so questions come in two kinds.

Who has this? is answered instantly from the index, and a listing from a machine that's gone quiet is marked stale rather than passed off as current. Worlds that stay quiet fade from the map rather than answering as ghosts.

Can I actually have it? goes to your machine — the owner of the truth — and gets answered before any money moves. Browse the map, commit against the territory. The worst a stale listing can cost anyone is a "sorry, just sold out" — never a wrong charge. You don't have to trust us on this

Here's the part worth slowing down for. When a platform says "we don't exploit your data," that's a policy — it's true until a strategy meeting decides otherwise. What this design offers is different in kind: the network couldn't take your data, because of how the wires point.

The previous piece in this series covered the connection: your machine makes every call, and nothing ever calls in. There is no path by which the network reaches into your world — so the only things it will ever hold are the listings your machine sends. That's a shape rather than a promise, and anyone technical you trust can verify it by reading the direction of the arrows.

One honest footnote, because a careful reader will go looking for the edge: backups. Your machine writes its backup archive to a place you choose, owner-only, and the network never receives a copy. The rainy-day box stays in your own back room, with everything else. Membership without custody

Findable and harvested have been bundled together for thirty years. This design unbundles them: a business discoverable across an entire network while every record it owns sits on a machine in its own back room. And if the network vanished tomorrow, every world would keep running alone — because nothing any of them needs was ever taken from them.

That's the marketplace we'd want to join. So it's the one we built.