docs(哲学): 新增哲学张力文档并更新AI系统设计文档

添加中英文版哲学张力文档，阐述主权与连接、权力与制衡的哲学挑战及解决方案
更新AI系统设计文档，优化AI伙伴行为模型描述并简化第三方道器设计模式

en/src/concepts/ai_system.md

@@ -1,45 +1,41 @@
 # The Dao OS AI System
 
-The AI in Dao OS is not a monolithic program but a collaborative ecosystem. It emerges from the synergy between the foundational capabilities provided by the **`Meta Unit`** and the specific intelligence implemented by a universe of **`Dao Implements`**. This design ensures a system that is sovereign, powerful, and open.
+The AI in Dao OS is not a monolithic program but a collaborative ecosystem. It emerges from the synergy between the foundational capabilities provided by the **`Meta Unit`** and the specific intelligence implemented by a universe of **`Dao Implements`**.
 
 ## 1. The `Meta Unit`: The Foundation for Sovereign AI
 
-The `Meta Unit` does not contain a single, all-knowing AI. Instead, it provides the core, trusted **infrastructure** that enables intelligent applications to run securely under the user's control.
+The `Meta Unit` provides the core, trusted **infrastructure** that enables intelligent applications to run securely under the user's control. This includes the Personal Feature Store (the Second Brain), a secure execution environment for `Core Implements`, and a permission gateway for data access.
 
-* **The Personal Feature Store**: The user's "Second Brain" acts as the ultimate, private data source for any AI task. The `Meta Unit` provides a secure, permissioned API for `Dao Implements` to access this rich, multi-modal context.
+## 2. The "Dao AI Companion": A Layered Behavior Model
-* **The Secure Execution Environment**: The `Meta Unit` provides a secure WASM sandbox for running `Core Implements` (`核`). It manages resources and enforces permissions, ensuring third-party logic cannot harm the system.
-* **The AI Model Registry**: The `Meta Unit` maintains a registry of AI models that the user has approved. A `Dao Implement` can request the `Meta Unit` to run inference using one of these registered models.
 
-## 2. The "Dao AI Companion": The Official First-Party Intelligence
+To provide a powerful experience out of the box, Dao OS includes an official, first-party `Core Implement` called the **"Dao AI Companion."** This is the "soul" users interact with. Its behavior is not static; it follows a layered, context-based model to ensure it is always helpful but never overbearing.
 
-To provide a powerful, intelligent experience out of the box, Dao OS includes an official, pre-registered `Dao Implement` called the **"Dao AI Companion."**
+### Level 1: The Default Behavior - The Silent-First Principle
 
-* **Its Nature**: This is a `Core Implement` (`核`) developed and maintained by the Dao OS core team. It is the "living soul" that users experience.
+The AI Companion's primary and default state is one of near-invisibility. Its goal is not to actively intervene, but to create a serene, orderly, and low-noise digital environment for the user. It works silently in the background to:
-* **Its Role**: The AI Companion has privileged (but user-revocable) access to the user's Second Brain. It is responsible for the proactive, holistic, and empathetic features we envision:
-  * Finding deep connections across all user data.
-  * Providing context-aware suggestions.
-  * Powering the Emotional Resonance features.
-* **Why Separate?**: By making our official AI a `Dao Implement` rather than part of the `Meta Unit` itself, we keep the `Meta Unit` lean, un-opinionated, and purely foundational. It also allows users (in the future) to potentially replace or supplement our official AI with other core AI `Implements`.
 
-## 3. Design Patterns for Intelligent `Dao Implements`
+* Optimize data synchronization and system performance.
+* Filter out digital "noise" like distracting notifications and information spam.
+* Organize and index new information in a logical, unobtrusive way.
+The aim is to be so effective that the user forgets it's there, allowing their own natural thoughts and intentions to emerge without digital distraction.
 
-Third-party developers can create their own intelligent `Dao Implements` by following these architectural patterns:
+### Level 2: The Interactive Behavior - The Empowerment Model
 
-### The "Reflex Mind" Pattern
+When the user **actively engages** the AI Companion (e.g., by opening its chat interface), its behavior model shifts to that of an **empowering partner**. Its goal is not to provide "correct answers" or make decisions for the user, but to foster the user's own clarity and courage. It does this by:
 
-A developer can create a lightweight `Dao Implement` that packages a small, fast, specialized model in its `Core Component` (`核`). This is ideal for simple, instant tasks like command intent recognition or information classification.
+* **Providing Objective Information**: Presenting facts, data, and different perspectives without judgment.
+* **Clarifying User Intent**: Asking questions that help the user understand their own goals.
+* **Separating Responsibilities**: It consistently frames its role as providing information, while reinforcing that making the final choice is always the user's role and responsibility.
+This interaction model is designed to be respectful and non-hierarchical, empowering the user to make their own best decisions.
 
-### The "Cognitive Mind" Pattern
+### Level 3: The Optional Behavior - Goal-Oriented Assistance Modules
 
-A more advanced `Dao Implement` can perform deep analysis. Its `Core Component` (`核`) would:
+For users who desire more structured and proactive assistance in specific areas of their life, the system offers a range of **optional, user-activated modules**. These are not on by default. Examples include:
 
-1. Request data access from the `Meta Unit`.
+* A **"Project Management"** module that can proactively track deadlines and collate resources for a specific work project.
-2. Implement the **Just-in-Time (JIT) Data Pipeline** pattern: create a local vector index of the data.
+* A **"Personal Roles & Responsibilities"** module that can help the user track goals related to their self-defined roles (e.g., as a parent, friend, or team lead).
-3. Query this index to find relevant context.
+This allows users to "hire" the AI for more active roles in a controlled, opt-in basis, without changing its respectful, non-intrusive default personality.
-4. Request the `Meta Unit`'s Inference Engine to run a powerful, user-approved LLM on this context to generate insights.
 
-### The "Synergistic Mind" Pattern
+## 3. Design Patterns for Third-Party `Dao Implements`
 
-A `Dao Implement` can be designed to orchestrate complex workflows by requesting the `Meta Unit` to facilitate communication with other `Dao Implements` or external, permissioned APIs.
+Third-party developers can create their own intelligent `Dao Implements`, either by calling the services of the official AI Companion or by building their own specialized AI `Core Implements`, offering users alternative or complementary intelligence within the Dao OS ecosystem.
-
-This architecture ensures that Dao OS provides not just a single AI, but a foundation for a universe of interoperable, user-sovereign intelligent applications.

en/src/philosophy/tensions.md

@@ -0,0 +1,27 @@
+# Philosophical Tensions & Our Approach
+
+A truly sovereign digital existence presents profound philosophical challenges. The design of Dao OS is not just a technical exercise, but a deliberate attempt to navigate and resolve these inherent tensions. This document explores two of the most critical tensions and clarifies our architectural approach to them.
+
+## 1. The Paradox of Sovereignty: Connection without Assimilation
+
+**The Tension**: How can a truly sovereign entity connect with others without compromising its independence? If a user's Dao is a perfect, self-contained universe, does it risk becoming an echo chamber, an island of one, cut off from shared realities?
+
+**Our Approach**: We believe sovereignty does not imply isolation. It implies **controlled, deliberate, and permissioned interaction**. We solve this by building a rich set of **protocolized interaction** capabilities into the system's core.
+
+* **Verifiable Identity**: The foundation of any interaction is knowing who you are talking to. **Decentralized Identifiers (DIDs)** allow each Dao to have a sovereign, verifiable identity without relying on a central authority.
+* **Granular Authorization**: Connection does not mean opening the floodgates. Through **Verifiable Credentials (VCs)**, a user can grant another Dao fine-grained, revocable access to specific subsets of their data for specific purposes. This enables collaboration on shared projects or the sharing of curated information without sacrificing privacy or control.
+* **Trust-Based Discovery**: Our **Application Bazaar** model avoids a single central point of discovery. Instead, users form their own "federation" by subscribing to lists from curators they trust. This creates overlapping communities of shared context and trust, allowing for serendipitous discovery without being trapped in a single global algorithm.
+
+Through these protocols, individual Daos can form **high-trust collaboration circles**, creating a vibrant network of interdependent sovereigns, rather than a collection of isolated islands.
+
+## 2. The Paradox of Power: Augmentation without Tyranny
+
+**The Tension**: By providing a user with a powerful, personalized AI that understands their life in depth, are we also providing a tool for potential self-delusion or the manipulation of others? How do we bestow great power while mitigating its potential for misuse?
+
+**Our Approach**: We address this by building **checks and balances** directly into the system's fabric, both internally and socially.
+
+* **Inherent Cognitive Checks**: Our official **"Dao AI Companion"** is architected with our AI Ethics Charter as its constitution. A key tenet is the **"Law of Diverse Perspectives."** The AI is designed to act as an internal check against the user's own biases. It is tasked with identifying potential echo chambers and proactively, yet respectfully, presenting high-quality, alternative viewpoints to broaden the user's cognitive horizon.
+* **Socialized Reputation Mechanisms**: While we cannot control a user's intent, the ecosystem can create consequences for actions. All significant cross-Dao interactions can be tied to a user's DID. Malicious or untrustworthy behavior can be verifiably recorded and shared within the community, leading to a loss of reputation. This social layer creates a powerful incentive for responsible behavior, as a Dao with a poor reputation will find it difficult to establish new trusted connections.
+* **The Inviolable Sovereign Boundary**: Ultimately, the core security model of Dao OS is the final defense. No Dao can have its data read or its state altered without the user's explicit, cryptographic consent. This protects the community from the potential "tyranny" of any single actor.
+
+In essence, our design strives to create empowered, yet responsible, sovereign individuals who can connect, collaborate, and co-exist in a rich and healthy decentralized ecosystem.

zh/src/concepts/ai_system.md

@@ -1,45 +1,41 @@
 # AI 系统设计
 
-大道 (Dao OS) 中的 AI，并非一个单一的程序，而是一个协同工作的生态系统。它源于**`元`**所提供的**基础能力**，与**`道器`**所实现的**具体智能**之间的协同作用。这个设计确保了系统既主权、强大，又开放。
+大道 (Dao OS) 中的 AI，并非一个单一的程序，而是一个协同工作的生态系统。它源于**`元`**所提供的**基础能力**，与**`道器`**所实现的**具体智能**之间的协同作用。
 
 ## 1. `元`：主权AI的基础设施
 
-`元`（即`元单元`）本身不包含一个无所不晓的AI。相反，它提供的是能让智能应用在用户掌控下安全运行的核心、可信的**基础设施**。
+`元`（即`元单元`）本身不包含AI，而是提供能让智能应用在用户掌控下安全运行的核心、可信的**基础设施**。这包括“私有特征库”（第二大脑）、`核`组件的安全执行环境，以及数据访问的权限网关。
 
-* **私有特征库**: 用户的“第二大脑”是所有AI任务的、最终的、私有的数据源。`元`为`道器`访问这个丰富的、多模态的上下文提供了安全的、受权限控制的API。
+## 2. “大道AI伙伴”：一个分层的行为模型
-* **安全执行环境**: `元`为运行`核`组件（`Core Implement`）提供了安全的WASM沙箱。它管理资源并强制执行权限，确保第三方逻辑无法危害系统。
-* **AI模型注册表**: `元`维护一个用户已批准的AI模型列表。`道器`可以请求`元`使用其中一个已注册的模型来执行推理任务。
 
-## 2. “大道AI伙伴”：官方的第一方智能核心
+为了提供开箱即用的强大体验，“大道”包含了一个官方的、第一方的`核道器`，名为**“大道AI伙伴 (Dao AI Companion)”**。这便是用户能与之交互的那个“灵魂”。它的行为不是一成不变的，而是遵循一个分层的、基于情境的模型，以确保它总是有用，但从不越界。
 
-为了提供开箱即用的强大智能体验，“大道”包含了一个官方的、预先注册的`道器`，名为**“大道AI伙伴 (Dao AI Companion)”**。
+### 第一层：默认行为 - “静默优先”原则
 
-* **其本质**: 这是一个由“大道”核心团队开发和维护的**`核`组件 (`Core Implement`)**。它就是用户能体验到的那个“活的灵魂”。
+AI伙伴的首要和默认状态，是近乎“隐形”的。它的首要目标不是主动介入，而是为用户创造一个宁静、有序、低噪音的数字环境。它在后台静默地工作，以：
-* **其角色**: “AI伙伴”拥有访问用户“第二大脑”的特权（但用户可随时撤销）。它负责实现我们所构想的那些主动的、全局的、有共情能力的特性：
-  * 发现用户所有数据间的深层连接。
-  * 提供基于上下文的建议。
-  * 驱动“情感共鸣”功能。
-* **为何分离?**: 通过将我们的官方AI做成一个`道器`，而非`元`的一部分，我们保持了`元`的轻量、无偏见和纯粹的基础设施定位。这也为用户在未来替换或补充我们的官方AI，提供了可能性。
 
-## 3. 智能`道器`的设计模式
+* 优化数据同步和系统性能。
+* 过滤数字“噪音”，如分心的通知和垃圾信息。
+* 以符合逻辑、不打扰的方式，组织和索引新信息。
+其目标是做到高效而无形，让用户忘记它的存在，从而使其自身自然的思想和意图，能够在无数字干扰的情况下浮现。
 
-第三方开发者可以通过遵循以下架构模式，来创造他们自己的智能`道器`：
+### 第二层：交互行为 - “赋能式”对话模型
 
-### “反射心智”模式
+当用户**主动**与AI伙伴进行交互时（例如，打开其聊天界面），它的行为模型会切换为**“赋能式伙伴”**。其目标不是提供“正确答案”或替用户做决定，而是培育用户自己的清晰度和勇气。它通过以下方式做到这一点：
 
-开发者可以创建一个轻量级的`道器`，在其`核`组件中打包一个轻快、专用的模型。这非常适合处理简单的、即时的任务，如指令意图识别或信息分类。
+* **提供客观信息**：不带评判地呈现事实、数据和不同视角。
+* **澄清用户意图**：提出能帮助用户理解自身目标的问题。
+* **分清各自责任**：它始终将其角色框定在“提供信息”上，同时强调“做出最终选择”永远是用户的角色和责任。
+这个交互模型被设计为充满尊重和平等精神，旨在赋能用户做出他们自己的最佳决策。
 
-### “认知心智”模式
+### 第三层：可选行为 - “目标驱动”的辅助模块
 
-一个更高级的`道器`可以执行深度分析。它的`核`组件将会：
+对于那些希望在生活特定领域获得更结构化、更主动辅助的用户，系统提供了一系列**可选的、由用户主动开启的模块**。这些功能默认关闭。例如：
 
-1. 向`元`请求数据访问权限。
+* 一个**“项目管理”**模块，可以为一个特定的工作项目，主动追踪截止日期并整理相关资源。
-2. 实现**“即时(JIT)数据流水线”**模式：为数据建立本地向量索引。
+* 一个**“个人角色与责任”**模块，可以帮助用户追踪与他们自我定义的角色（如为人父母、朋友或团队领导）相关的目标。
-3. 查询此索引以找到最相关的上下文。
+这允许用户在一个受控的、自愿选择的基础上，“雇佣”AI在特定领域扮演更积极的角色，而不会改变其充满尊重的、非侵入性的默认人格。
-4. 请求`元`的推理引擎，用一个用户批准的、强大的大语言模型来处理这些上下文，以生成洞察。
 
-### “协同心智”模式
+## 3. 第三方智能`道器`的设计模式
 
-一个`道器`可以被设计为协调复杂的工作流，通过请求`元`来促成与其他`道器`或经过授权的外部API的通信。
+第三方开发者可以创造他们自己的智能`道器`，他们既可以调用官方AI伙伴的服务，也可以构建自己专属的AI`核`组件，为用户在大道生态中提供另类的或互补的智能。
-
-这套架构确保了“大道”提供的不仅仅是一个AI，而是一个由可互操作的、用户主权的智能应用所组成的宇宙的基础。

zh/src/philosophy/tensions.md

@@ -0,0 +1,27 @@
+# 哲学张力与我们的应对之道
+
+一个真正主权的数字生命，会带来深刻的哲学挑战。大道 (Dao OS) 的设计，不仅仅是一次技术实践，更是一次审慎的尝试，旨在探索和化解这些与生俱来的内在张力。本文档将探讨其中两个最关键的张力，并阐明我们的架构性应对方案。
+
+## 1. 主权的悖论：连接而不融合
+
+**张力所在**：一个真正主权的实体，如何在不妥协其独立性的前提下，与其他个体建立连接？如果用户的“大道”是一个完美的、自洽的宇宙，它是否会冒着成为“回音室”的风险，变成一个与共享现实隔绝的、一人的孤岛？
+
+**我们的方案**：我们相信，主权不等于孤立。它意味着**受控的、审慎的、基于授权的交互**。我们通过在系统核心中，构建一套丰富的**“协议化交互”**能力来解决这个问题。
+
+* **可验证身份**：一切交互的基础，是知道你在与谁对话。**去中心化标识符 (DID)** 使得每一个“大道”都能拥有一个主权的、可被验证的身份，而无需依赖任何中央权威。
+* **精细化授权**：连接不等于敞开大门。通过**可验证凭证 (VCs)**，一个用户可以授予另一个“大道”对特定数据子集的、用于特定目的的、可撤销的精细化访问权限。这使得在不牺牲隐私或控制权的前提下，进行项目协作或分享策展信息成为可能。
+* **基于信任的发现**：我们的**“应用集市”**模型，避免了一个单一的发现中心。取而代之的是，用户通过订阅他们所信任的“策展人”列表，来组成他们自己的“联邦”。这创造了由共享上下文和信任所构成的、互相交叠的社区，允许意外的发现，而不会被单一的全局算法所困。
+
+通过这些协议，独立的“大道”可以自愿地组成**高信任度的协作圈**，从而创造一个由互相依存的主权个体组成的、充满活力的网络，而非一堆孤岛的集合。
+
+## 2. 权力的悖论：增强而不暴政
+
+**张力所在**：当我们为用户提供一个强大的、深度理解其生活的个性化AI时，我们是否也提供了一个可能被用于“自我欺骗”或“操纵他人”的工具？我们如何能在赋予巨大力量的同时，抑制其被滥用的潜力？
+
+**我们的方案**：我们通过在系统的构造中，直接构建**内部和外部的“制衡”**机制来应对。
+
+* **内在的认知制衡**：我们官方的**“大道AI伙伴”**，在架构上以我们的“AI伦理宪章”为宪法。其核心宗旨之一就是**“多元视角法则”**。AI被设计为扮演一个制衡用户自身偏见的内部角色。它的任务是识别潜在的回音室效应，并主动地、但又尊重地，呈现高质量的、可供选择的观点，以拓宽用户的认知边界。
+* **社会化的信誉机制**：我们无法控制用户的意图，但生态系统可以为行为带来结果。所有重要的跨“大道”交互，都可以与用户的DID相关联。恶意的或不可信的行为，可以被可验证地记录和在社区内分享，从而导致其信誉的降低。这个社会化层为负责任的行为，创造了强大的激励，因为一个信誉不佳的“大道”将很难建立新的信任连接。
+* **不可侵犯的主权边界**：最终，`元`核心的安全模型是最终的防线。没有用户的明确、加密的同意，任何“大道”的数据都无法被读取，其状态也无法被改变。这保护了整个社区，免受任何单一行动者潜在的“暴政”影响。
+
+本质上，我们的设计致力于创造被赋能的、但又负责任的主权个体，让他们能够在一个丰富、健康的去中心化生态系统中，进行连接、协作与共存。