Every person holds their own Source. No gateway, helper, or pillar may spend for them.
| Actor | May | Must not |
|---|---|---|
| Person | Hold optical Personal Source; Kindling; sign | Give seed to a “helpful” app server |
| Light Pillar | Provide screen/camera for Kindling | Store private keys |
| SMS / USSD | Balance, status, invite | Authorize spend or hold Source |
| Helper / co-op | Aim lights, teach ceremony | Sign on behalf of the farmer |
| Sequencer | Illuminate pixels | Seize people’s UTXOs without their sig |
Default custody form is an optical maze light card (forgePersonalSource / unlockPersonalSource):
No English 12-word ritual required. No telco custodial balance.
Primitive doors exist so people can enter. They branch toward Kindling + Personal Source — they do not replace self-custody with M-Pesa cosplay.