See It Work — A cockpit that can't lie — because it has no way to | S2 Vol 2 · The Primacy Cockpit

The deepest design choice is a refusal: the cockpit refuses to know its own data. Every surface — home, approvals, audit, federation — redraws entirely from one live source. No screen caches its own version of the world; there is no code path to modify or invent a value before showing it.

This is what lets you trust the screen. If the cockpit shows a number, that number was just reported by the node — not cached, not edited, not made up. The cockpit can't lie because it was never given a way to.

What this means for you

Every surface draws from one source, and there's no path to show fake data. What this means for you: you can trust the screen completely — there's no way for the cockpit to quietly show you something stale or massaged, because it was deliberately built without the ability to.

Every surface redraws from one live contract — there is no second source:

One Renderer

data sourceone live contract

private cachesnone

can it show invented data?no — there's no edit path

screenshotsreproducible by anyone

The cockpit is replaceable and auditable precisely because it holds no model of its own.

For the technical reader — the command, and how to verify it yourself

# one line · you do not need to run this
edit node_data.js → re-render

open atrium-standalone.html
# -> every surface redrawn from one source, no private caches

Full step-by-step is in Appendix RX: Hands-On Demonstrations in the book.