Sanctum Elysium

Sanctum Elysium is a three-pillar ecosystem built around a single conviction: true sovereignty requires control over your data, your land, and your tools — simultaneously. This document describes the technical architecture of the local AI memory system, the economics of the $LOAM token on Solana, and the mechanics of the LAND Fund — a Bitcoin reserve built so holders can acquire land, solar equipment, and farm assets themselves, at group-negotiated prices.

The project operates without a corporation, without venture capital, and without subscription fees. Its sole funding mechanism is a 3% transaction fee on every $LOAM buy, sell, and wallet transfer, distributed monthly to holders, the LAND Fund, project expenses, and the founder. The memory software itself will be open-source and free for everyone — you never need to buy $LOAM to use it. Every wallet address, every allocation, and every unlock date is public and verifiable on-chain.

This whitepaper is not a prospectus. $LOAM is a meme coin — community and culture first: it carries no guarantee of value, no legal rights, and no promise of return. This document is a transparent record of what is being built and why.

Three fundamental freedoms have been quietly transferred away from individuals over the past two decades: the freedom of private thought (through cloud AI), the freedom of physical independence (through industrial food and energy systems), and the freedom of economic sovereignty (through centralized finance).

Every conversation with ChatGPT, Claude, Gemini, or any cloud AI service is logged, processed, and retained on servers you cannot audit. The memory layer that makes AI "remember you" is built on vector databases that store compressed representations of your thoughts on infrastructure owned by corporations with conflicting financial incentives. When that infrastructure is breached — and it will be — your complete conversational history is exposed in a single event. There is no granularity to the damage.

Access to electricity, food, and water is mediated by systems designed for scale, not individual resilience. The grid fails during storms. Supply chains fail during crises. The individual who owns no land, grows no food, and generates no power has zero independence regardless of their financial situation.

Traditional finance and most of Web3 remain extraction systems — opaque fees, implicit custody, rules that change without notice. Value flows to intermediaries; the individual carries the risk. Sanctum Elysium's answer is structural rather than promissory: fixed rules published in advance — every wallet, every date, every split — and a fee that is redistributed instead of captured (§4).

Sanctum Elysium addresses these three crises simultaneously through three interdependent pillars. Each pillar is functional independently; together they constitute complete sovereignty.

The architecture described in this section is a research direction, not a frozen specification. The principles — local, encrypted, never a Sanctum Elysium server — are permanent commitments; implementation details will evolve. The living specification is maintained on the Memory page.

The memory system is the technical core of Sanctum Elysium. It replaces cloud-based vector memory with a local, encrypted, day-isolated architecture managed by Ollama running on your machine.

Local-first does not mean local-only. Most people cannot leave cloud AIs yet — so the system is hybrid by design: conversations with any cloud AI can be captured into the local memory, and the gatekeeper decides what, if anything, is ever shared back. You keep private exactly the parts you choose; fully offline operation works the same way, minus the cloud.

And it will be open-source and free for everyone. The memory is not a product that $LOAM buys access to — holding the token unlocks nothing inside the software, and the software never asks for anything back. The token funds the mission; the memory belongs to everyone.

Almost every AI memory system today is built on vector embeddings. Each conversation is converted into a high-dimensional numerical vector and stored in a cloud database. On each new query, this database is searched for semantically similar vectors. The approach works at small scale; it degrades as memory grows — and the privacy implications are structural, not incidental.

The target architecture uses one encrypted file per day. Each file is protected with its own independent AES-256 key, sealed under the user's master passphrase — with a printable offline recovery key as backup. Compromising one day's file exposes at most 24 hours of data. All other days remain sealed, each behind its own separate key. The search index itself lives only in RAM — built when the vault is unlocked, wiped when it locks: text, summaries and embeddings are all encrypted at rest.

The memory lives on a single machine — no synced copies across devices, so no multiplied attack surfaces. Its survival rests on local encrypted backup: verified snapshots (a fingerprint for every file), rotating across destinations of your choice — external drive included — with restore tested end-to-end. Backup copies files that are already encrypted and never decrypts them: a stolen backup stays as silent as the machine itself.

Beyond the encrypted storage layer, a house of specialized local agents runs with Ollama — all of them live in the lab build — each with a distinct role and its own moment of the day. The architecture is lightweight by design — each agent does one job, and one job only.

Three more agents have since joined the house, born in the lab: the Gatekeeper (the exit door — nothing leaves without an exact preview and your explicit yes), Columbo (compares what cloud AIs claim against your memories, the only ground truth about you, and flags the exact contradicted sentence — judged locally), and Pénélope (the self-model weaver: at most three cards a night — a contradiction, an open intention, a dream that is always a question — one tap answers each). The full agent house is described on the Memory page.

A neuroscience-inspired design layer — all five mechanisms now run in the lab build — published June 2026 on the Memory page, extends the agents: surprise scoring (prediction-error boosts priority), episodic→semantic distillation (nightly facts with provenance links back to source days), a local interrogation log of every external AI query, canary decoy memories for leak tracing, and explicit recall confirmation for the vault.

Every mechanism runs on the user's machine. Sanctum Elysium operates no server holding user memory — "cloud" in this document always refers to external AI providers, never Sanctum Elysium.

$LOAM is a Solana SPL Token-2022 token with a permanently fixed supply of 10,000,000 units. The mint authority was revoked at launch — no additional tokens can ever be created. Every allocation, every unlock date, and every wallet address is public and verifiable on-chain.

Every $LOAM transaction — each buy, each sell, and each wallet-to-wallet transfer — incurs a 3% fee. This is a 3% transfer fee enforced at the protocol level by the SPL Token-2022 transfer-fee extension — its fee-config authority is revoked, so the 3% rate is locked forever and can never be raised; fees are withheld on every transfer and periodically withdrawn to the FEES wallet (2JCUwo9h7Qh132qgG7vUN2owjjFqzZCF7GnL7aYPHkMb, the mint's withdraw-withheld-authority), then distributed monthly. A single, uniform rate keeps the monthly dashboard redistribution simple and predictable. The fee is split monthly:

Holder community redistributions are sent directly to the holding wallet monthly — no claim required. Eligibility (30+ days held) is measured on the last day of each month and paid within 15 days; the patience score itself accrues from day 1. Like every $LOAM transfer, the payout transfers themselves incur the protocol-level 3% fee — amounts received are net of it. No lock — hold or exit on your own schedule. A variable rate (0.05–1.25%, set by the $LOAM market cap tier) is applied to the LAND Fund's $LOAM balance and swapped for Bitcoin monthly. This is a community redistribution, not a dividend — no profit is promised or expected.

Every holder accumulates a ◆ Patience Score silently, every day they hold. No action required. The formula:

One bonus on top: wallets that have never sold a single token keep a permanent 1.25× multiplier on their score — a thank-you to true diamond hands. Sell even once, even a single token, and the multiplier is gone for good for that wallet (your base score still grows normally on whatever you hold). The badge lives per wallet, and the chain cannot tell a wallet-to-wallet transfer from an off-market sale — so a transfer counts as a sale for the sending wallet, while the receiving wallet starts fresh: score at zero, diamond intact until it sells.

The patience score determines two things: (1) your proportional share of the 1.25% monthly community redistribution — computed among eligible wallets (30+ days held) — and (2) your share of the LAND Fund redemption (April 13, 2029). Redemption shares are frozen on a single snapshot of the patience ledger taken when the window opens — sending your $LOAM to the fund to redeem never reduces your recorded share, nor anyone else's. A holder with 1,000 $LOAM for 365 days outscores a holder with 10,000 $LOAM for 30 days. The patience score is a participation metric — not an ownership or profit stake. No yield, dividend, or profit is promised.

All treasury wallets are held in cold, air-gapped storage. The addresses are public and verifiable on-chain at any time via Solana Explorer.

The LAND Fund is the physical backbone of Sanctum Elysium. Half the token supply exists for one purpose: build the Bitcoin reserve that lets holders acquire land parcels, solar equipment, and farm assets — negotiated as a group, owned individually. Every transaction adds 1.25% of its value as $LOAM to the LAND Fund balance. Separately, each month, a variable rate (0.05–1.25%, set by the market cap tier) is applied to that accumulated $LOAM balance and swapped for Bitcoin. From April 13, 2029, holders redeem their $LOAM for their share of that Bitcoin reserve — two paths, land or gear, detailed in §5.3 — with no sell pressure on the market.

Two streams build the LAND Fund's $LOAM balance: 5,000,000 $LOAM (50% of total supply) allocated at launch, plus 1.25% of every transaction collected as $LOAM and added to the balance permanently — forever, for every holder who joins. Separately, each month, a variable rate — set by the market cap tier — is applied to the LAND Fund's total $LOAM balance and swapped to Bitcoin. This reduces the LOAM balance and builds the BTC reserve. The rate protects the price floor when the market is fragile and maximizes BTC accumulation when the token is strong. Bitcoin accumulates until the redemption window opens on Friday, April 13, 2029, at 21:46 UTC — nearly three years of quiet stacking.

The rate is set by the $LOAM market cap tier — the average of the month's three highest market caps — then applied to the LAND Fund's total $LOAM balance. Published publicly before each conversion.

The fund has three permitted use categories. Each holder chooses their preference independently based on their personal situation and needs:

Starting April 13, 2029, holders send their $LOAM directly to the LAND Fund wallet — not to a DEX, not to the market. In return, they receive their proportional share of the Bitcoin accumulated, based on their patience score (tokens × days held, ×1.25 if you've never sold a single token). For land, your share is transferred to your wallet — you pay the seller directly and the title lands in your name; in the early days, Sanctum Elysium mediates the deal automatically between you and the seller, to cover the big risks and guide a fair price. For solar, batteries and equipment, a vote gathers everyone who wants the same product from the same supplier — Sanctum Elysium places one bulk order and pays the supplier in BTC (that is what unlocks the volume discount, which can reach 20–30%), then the gear is shipped to each holder. Yours, entirely. Redemption is a voluntary community mechanic, not a financial return or a guaranteed entitlement.

The $LOAM returned to the fund does not hit the open market. The circulating supply contracts. Remaining holders benefit. Those who waited longest exit with the largest share — free to plant it into real land, solar panels, batteries, or farm equipment. No one is told what to do with their share; when the whole group unlocks the same prices, roots simply become the obvious choice. Always free. Organically aligned.

→ Why selling never hurts long-term holders — the equilibrium explained

Community negotiation amplifies the outcome. A single buyer negotiating alone has no leverage. Sanctum Elysium negotiates as a group: bulk pricing, preferred supplier relationships, and conditions unavailable to individuals. It is a negotiator, not a landlord — it never takes title, and the land ends up in your name. → The Buyers' Table — the full structure

Six milestones define the $LOAM lifecycle — from genesis to full vesting. The dot below updates in real time, showing exactly where the project stands today.

Phase 1 — Genesis (2026): $LOAM launched on Solana (June 25, 2026). The initial liquidity pool lives on Raydium, seeded with 4.0M tokens (40% of supply). Transaction fees begin accumulating. The first monthly BTC conversion applies based on the market cap tier (starting at 0.05%). A public holder dashboard 📊 goes live — every wallet's patience score and exact LAND Fund share, fully transparent and verifiable.

Phase 2 — Community & Builders (Late 2026): The 500K Community & Builders allocation (5%) becomes claimable — distributed to the earliest serious supporters and contributors.

Phase 3 — Accumulation (2026-2029): Two flows run in parallel. Inbound: 1.25% of every transaction is collected as $LOAM and added to the LAND Fund balance. Outbound: each month, a variable rate — set by the market cap tier — is applied to the LAND Fund's total $LOAM balance and swapped to Bitcoin. Patience scores build silently. The memory track (§6.2) runs in parallel.

Phase 4 — Redemption Opens (April 13, 2029): The redemption window opens. Holders exchange $LOAM for their share of the Bitcoin reserve, based on their patience score, through the two paths detailed in §5.3 — land (BTC to your wallet, title in your name) or gear (one bulk order, volume pricing). No sell pressure. Sanctum Elysium negotiates as a group — and never takes title. A voluntary community mechanic — not a financial return, and not guaranteed.

Phase 5 — Founder Vesting Complete (June 2031): The founder's 5% allocation (500K $LOAM) finishes vesting. The schedule is the longest lock in the project: a 12-month cliff first — nothing unlocks before June 2027 — then the 500K release in equal monthly amounts over the following 48 months, fully vested in June 2031. The founder waits longest of anyone.

The token calendar above funds the work; the memory — the technical core — follows its own track. Interface demo (July 2026): the first public look at the working interface. Public test build (August–September 2026): the first build to leave the lab, opened to the volunteer test group — two distinct milestones: first you watch it work, then you run it yourself. Hardware lab (November–December 2026): planned acquisition of a dedicated air-gapped rig (Nvidia Jetson Orin NX class, ~$900) to prove the full system runs offline on affordable hardware. The system will be open-source and free for everyone (§3); the living status of every line item is tracked on the Build Status page.

Patience is the only requirement. The calendar is the contract.

Sanctum Elysium has formalized its governance layer: The Vote — a Patience-Score-weighted, non-binding community signal signed with a Solana wallet (an ed25519 message signature, e.g. Phantom's signMessage).

How it works: holders sign preferences off-chain using their wallet's signMessage — a structured plain-text payload (domain, proposal id, choice, voter pubkey, timestamp) following the Sign-In-With-Solana (SIWS) convention, no transaction, no gas, no on-chain footprint. A signed message is just data: it cannot move, lock, or access the holder's $LOAM (it carries no token instruction). Solana message-signing doesn't enforce a domain separator at the protocol level, so the domain field is added to the payload to get that anti-phishing, anti-replay binding. Weight is Patience-Score-based, read at an announced snapshot slot: tokens × days held, ×1.25 permanent multiplier for wallets that have never sold. After the close, signatures and the balance/holding-age snapshot are published so anyone can re-verify the tally. When a choice is ready to finalize, a short signed snapshot locks it in.

This is explicitly not shareholder voting, not a financial right, not a legal claim over any entity. It is a community preference signal — the project uses it as input, not mandate. Preferences are standing signals, editable anytime. Not zero-sum: backing "land" is not a vote against "solar." Each holder's share funds their own homestead, and a holder can back multiple categories at once.

Open questions are numbered and dated (registry reordered 2026-06-10 — rules-type questions lead, the mandatory ranking anchors the list): (01, added 2026-06-08) Early redemption trigger — if market cap exceeds a holder-set threshold before April 13, 2029, holders set the trigger cap and how far to advance the date; (02, added 2026-06-10) Conversion-rate tiers — whether to add new tiers above the current "over $20M → 1.25%" top of the BTC conversion table; (03, added 2026-06-10) Monthly conversion execution — one block on the last day, or spread in smaller tranches (daily/weekly DCA) across the month — the amount never changes, only the style; (04, added 2026-06-08, reframed 2026-06-10) What We Buy — Your Priority Order — a mandatory ranked ballot: every holder ranks the four categories (land, energy, garden & food, animals) 1→4, and the aggregated patience-weighted ranking becomes the Fund's budget split per category. Year 2 brings the supplier picks, starting with the solar-panel supplier (drafting as SE-05). More questions will be added over time.

There is no custom smart contract to attack. $LOAM does not deploy bespoke code: it is a standard token minted with the audited, widely-deployed SPL Token-2022 program. The only configuration is the transfer-fee extension (the 3% fee) and its withdraw-withheld-authority — both public and verifiable on-chain. Three on-chain facts tell the whole story: the mint authority is revoked (the 10M supply can never grow), the transfer-fee-config authority is revoked (the 3% can never be raised), and no freeze authority exists (no one can ever freeze a holder's tokens). There is no vesting contract, no upgradeable logic that an exploit could target.

An early idea called for custom on-chain freezing of the Community and LAND Fund wallets — locked automatically, trustless by design. This was rejected after careful consideration of the AI threat landscape. AI capability is advancing exponentially. State-of-the-art systems can already read, reason about, and probe smart-contract code at machine speed — and the attack surface on custom on-chain logic, freeze and vesting code included, will keep expanding in ways that cannot be fully predicted today. An AI-assisted exploit targeting a locked community wallet would be permanent and unrecoverable. Relying on a single, battle-tested program and nothing more is the safer posture.

No custom code to audit — just a well-known program and published configuration. Transparency — not bespoke code — is the guarantee.

Market Risk: $LOAM may trade at zero at any time. There is no floor, no buyback mechanism, and no guarantee of liquidity. Token price reflects community conviction, not underlying asset value.

Execution Risk: The memory system, the LAND Fund acquisition process, and the governance structure are all in development. Timelines may shift. Features may change. The project is built by a small team with limited resources.

Regulatory Risk: Cryptocurrency regulation is evolving rapidly across all jurisdictions. Changes in law may affect the ability to hold, transfer, or redeem $LOAM.

Custody Risk: Wallets are held in cold storage. Loss of private keys — through accident, death, or coercion — would result in permanent loss of those funds.

Key-Person Risk: Monthly conversions, fee distributions, and the 2029 redemption are executed manually by a single anonymous founder — a deliberate consequence of the no-custom-code posture (§8): nothing on-chain can be exploited, but nothing on-chain runs by itself either. The mitigations are procedural, not technical: published wallets, published dates, and a public record that makes any deviation visible immediately.

$LOAM is a meme coin. It is not offered as an investment, a security, or an equity stake in any company or organization. It has no legal claim on any assets, no governance rights over any legal entity, and no redemption guarantee. The memory software will be open-source and free for everyone — $LOAM gates nothing inside it.

Sanctum Elysium is not a registered company. There are no officers, directors, or shareholders. The founder operates anonymously by choice. There is no legal recourse available to holders.

The LAND Fund's acquisition activity — when it commences in 2029 — will be conducted transparently and publicly. No legal structure for that process exists yet; it will be designed and communicated before the unlock date.

Purchasing $LOAM constitutes acknowledgment that nothing is promised, nothing is guaranteed, and the only binding commitment is the one written in the public record of this site and the Solana blockchain.

This is a pure community token. Buy only what you can afford to lose. Stay free.

All addresses listed below are permanent and verifiable on the Solana blockchain via Solana Explorer.

The monthly BTC conversions accumulate here until redemption. This is the only official reserve address — any other Bitcoin address claiming to be the Sanctum Elysium reserve is fake.

Website: sanctumelysium.com · 𝕏: @LOAM_token · Token mint: the address above. There is no official Telegram and no other channel — anything else claiming to speak for Sanctum Elysium is fake. No one from the project will ever DM you first or ask for your seed phrase.

v1.0 — June 2026. First edition, published at launch.
v1.1 — July 2026. Memory track added to the roadmap (§6.2); the free & open-source commitment stated (§0, §3, §10); authority revocations spelled out (§4.2, §8); Bitcoin reserve address and official channels published (Appendix); key-person risk added (§9); §1 statistics sourced; wording tightened throughout.