Module dead_mans_switch 

Dead-man switch — post-death (or believed-death) disposition of the principal’s data, under gamified validation rules, enacted by the person’s chosen friends who hold the dataset.

The consideration (Timothy, 2026-07-06): if the principal (the person) is considered dead, their information may be made public, or become subject to other rules — the erasure-prevention / right-to-truth stance (a murdered person’s record must not simply vanish), governed by the person’s prior self-definition and kept reversible (see the post-death-continuity work).

The trigger must not be one abusable “declare dead” button — that would let an attacker (or a betrayer) fire it falsely. So validation is gamified: a rule set of independent conditions that must all hold — a liveness lapse (no update / no “still here” signal from the principal for X time) and an attestation threshold (a quorum of the participating parties attesting no-contact / believed-dead / abandonment). And it is enacted by the friends who store the encrypted dataset (the EncryptedCommonsPayload storers): they hold the ciphertext and validate the trigger, so no single party — and no outside actor — can enact it alone.

Reversibility is central. The principal showing up alive (principal_alive) resets the liveness signal and un-fires a not-yet-irreversible switch. (Honesty caveat, §9: once a Disposition::MakePublic has actually released keys to a durable commons it cannot be un-published — so which dispositions are reversible, and the grace/limits, are values calls for Timothy.)

Domain model + invariants only; the actual key-release on enactment (publish the data key / issue ConsentCredentials to the disposition parties) and the storage are the crypto/commons composition (coordinate).

Structs

DeadMansSwitch

A dead-man switch over one commons payload.

Heartbeat

A liveness heartbeat — the principal periodically signals “still here”. Its lapse (no update for lapse_after_secs) is one of the trigger conditions; touching it (the person is alive) is the reversibility.

PartyAttestation

One participating party’s attestation toward enacting the switch.

TriggerRule

The gamified trigger rule — the independent conditions that must all hold to fire, resisting a false trigger by any single party or an outside actor.

Enums

AttestationKind

What a party attests toward the trigger.

Disposition

What happens to the data if the switch fires — the person’s prior self-definition governs.