Statement

Identity requires one coherent root; data requires freedom to move. Most systems invert both: identity fragments across N platform-specific accounts, while data centralizes, locked to whichever platform captured it. The correction reverses the inversion — not "decentralize everything," but placing each property where it structurally belongs.

The Inversion, Stated Formally

current:    identity = distributed (N fragmented accounts)
            data     = centralized (locked to platform T)

corrected:  identity = centralized (one root)
            data     = distributed (T independent of A)

Centralize the Self

"One root" is not a slogan here — it names an existing, verified mechanism. A kernel has exactly one seed and one deterministic identity derived from it:

identityHash(K) = keccak256("this.me/identity:v1::" + K.seed)

seed — a 64-hex namespace authority key that never leaves the kernel. Every context, mount, or namespace a person appears under — who am I, here — is computed from that one root rather than issued separately per platform. Identity does not fragment into N accounts; it's one function evaluated in N contexts.

Distribute the Data

Data's freedom is the same relation already established for audience and topology: replicating it does not, by itself, change who can read it.

replicate(T) ↛ change(A)

A backup, a second device, a new host — none of it requires permission from, or expands the reach of, any single custodian. Full mechanism: The Algebra of Encrypted Audiences.

replicate(T) ↛ change(A) running as a deployed system, not only an equation: Smart Cities scopes an entire security branch stealth (me.security["_"]("city-security-ops-2026")); the branch keeps computing internally, and explain() discloses the full derivation to an authorized reader while masking the raw input to everyone else. T and A stay independent under load, not just in the definition.

Where Each Property Belongs

IdentityData
Wantscoherence — one rootfreedom — unconstrained topology
Common webfragmented (N accounts)centralized (locked to platform)
CorrectedidentityHash(seed) — one functionT ⊥ A — replication independent of readability

Scope

"One root, computable, portable" is real and verified — the identityHash/seed mechanism above exists in the current kernel. What is not shipped: a system that simply asks "which self is present" instead of "which platform are you logged into" across arbitrary third-party services. That requires those services to integrate against the root, which is an adoption question, not a cryptographic one — stated here as the actual remaining gap, not glossed over.