Note
Draft status: MMv2 (2026m04d09).
Major revision of MMv1. Key changes from MMv1: (1) MADgoDead corrected
from 0.5 to 1/3 with principled BABL death-trifecta reasoning;
(2) Evolvix model code included with download link; (3) 1-in-40
finding highlighted as central result; (4) “500x” claim replaced with
defensible “someone like the author” formulation; (5) multiplicative
risk section reduced, reframed as stochastic certainty; (6) COOP
moved to b18 (forward pointer retained); (7) figures from SD1
included; (8) citation mapping corrected (Matheo-3=b13, etc.);
(9) Kennedy citation properly sourced (Sorensen, 1965);
(10) ResearchCity as concrete action path; (11) “accidental nuclear
winter” framing throughout.
Draft by Claude Opus 4.6 (dv_ClaOp46_MMv2_2026m04d09).
RiskyMAD: The Existential Risk Forecast and the MAP Escape#
1. The Question#
How long does a civilization survive with nuclear weapons and without periodic recalibration?
This is not a philosophical question. It is a stochastic modeling question — the same kind of question an actuary asks when pricing a life insurance policy. An actuary does not know when a particular person will die. But given a population, a set of risk factors, and historical data, the actuary can estimate a probability distribution over time-to-death. The estimate is falsifiable: if the actual death rate deviates significantly from the predicted distribution, the model is wrong and must be revised.
This paper applies the same logic to nuclear civilization. The “patient” is the global system of nuclear-armed states. The “risk factor” is the rate at which crises arise that bring the system to the brink of nuclear war. The “historical data” is the Cold War record of near-misses. The “death” is accidental nuclear winter — not a deliberate nuclear strike, but the unintended initiation of nuclear exchange through miscalculation, system failure, or escalation beyond the point of human control, and the subsequent global catastrophe as nuclear winter kills far more people than the initial exchange.
The question is not whether accidental nuclear winter is possible. The Cuban Missile Crisis (1962), the Able Archer exercise (1983), Stanislav Petrov’s false alarm (1983), and Vasili Arkhipov’s refusal to authorize a nuclear torpedo (1962) have already answered that question. The question is: given the observed crisis rate, what is the probability distribution over the time until accidental nuclear winter begins?
The answer is sobering. But this paper is not a prediction of doom. It is a diagnosis with a proposed treatment. The treatment is called MAP — Mutually Assured Progress — and it is formally derivable from the upstream results of this series. The system is designed to be critiqued, not believed. #AuditTheMath
2. The RiskyMAD Model#
2.1 Three States, Four Transitions#
RiskyMAD is a continuous-time Markov chain with three states:
Figure 1: The RiskyMAD/MADI decision overview. Three states, four transitions. The escape path (Risky → LifeMAP) is currently inactive (rate = 0). Source: SD1.#
Risky — the current state of global affairs. Nuclear weapons exist, are deployed, and are on various levels of alert. No nuclear exchange has occurred. The system is metastable: it appears stable but has a non-zero probability per unit time of transitioning to the next state.
MAD — a crisis state in which nuclear exchange becomes imminent. This state is transient: the system either escalates to Dead or de-escalates back to Risky. The average crisis duration in the model is approximately 40 days (consistent with historical crises such as the Cuban Missile Crisis, which lasted 13 days).
Dead — accidental nuclear winter has been initiated. This state is absorbing: once entered, it cannot be left. The consequences of even a “limited” nuclear exchange (100+ warheads) include global temperature drops of 5–10 °C, agricultural collapse, and famine affecting billions. The state is named “Dead” not because every human dies, but because the civilization that produced nuclear weapons has entered irreversible collapse. Limited nuclear exchanges that do not trigger global winter are not modeled as “Dead” — they register only as milestones on the path to normalizing nuclear weapons enough that a global exchange becomes thinkable enough to happen.
The four transitions are:
Risky → MAD (rate:
rRiskyGoMAD= 0.10/year): a crisis arises that brings the system to the nuclear brink.MAD → Risky (rate:
rMADescapes= 6/year): the crisis de-escalates without nuclear exchange.MAD → Dead (rate:
rMADtoDEATH= 3/year): the crisis escalates to nuclear exchange and accidental nuclear winter.Risky → LifeMAP (rate:
rRiskyEscape= 0): the civilization transitions to Mutually Assured Progress. This transition is the escape — but in the base model, the rate is zero (no escape mechanism is currently active).
2.2 The Death-Trifecta Parameter: Why 1/3#
When the system enters a crisis (MAD state), two competing processes race: de-escalation (rate 6) and escalation to nuclear exchange (rate 3). The probability of death per crisis is therefore 3/(6+3) = 1/3.
This parameter is not arbitrary. It is derived from the BABL death-trifecta ([Matheo-2], th3–th5):
Under BABL (Blindly Assuming Blind Leveraging), a crisis resolves through one of three modes of the OSCR mechanism:
Over-Simplifying — the crisis is reduced to a manageable narrative (“it was just a misunderstanding”), and the system returns to Risky. The underlying tensions are unresolved, merely deferred.
Over-Complicating — the crisis generates layers of diplomatic work-arounds, and the system returns to Risky. The underlying tensions are buried under complexity, merely deferred.
Over-Reaching — someone, either by accident, by deliberate action, or by not realizing the implications of their orders, reaches beyond the point of no return. The RED button is pressed. Nuclear exchange begins.
Two out of three OSCR modes produce temporary escape (back to Risky).
One out of three produces death. Hence: rMADescapes = 6 (two
escape modes, each at rate 3) and rMADtoDEATH = 3 (one death mode
at rate 3). The factor of 3 sets the crisis time scale.
Anecdotal corroboration: President Kennedy, in a private assessment to his Special Counsel Theodore Sorensen during the Cuban Missile Crisis, estimated the probability of nuclear war “somewhere between one in three, and even” (Sorensen, Kennedy, Harper & Row, 1965; confirmed in Sorensen’s 1986 WGBH interview for War and Peace in the Nuclear Age; widely cited via Allison and Zelikow, Essence of Decision, 2nd ed., Longman, 1999). The model’s principled value of 1/3 sits at the lower end of Kennedy’s range. The model uses 1/3 because it is derivable from the BABL death-trifecta; Kennedy’s assessment provides independent anecdotal evidence that the range is plausible.
The precise value does not determine the conclusion. The model’s parameters can be tuned by adjusting the thresholds: what qualifies as a “nuclear MAD crisis” and what qualifies as “Dead.” The qualitative conclusion — stochastic certainty of accidental nuclear winter in the absence of structural change — holds across a wide range of parameter values (see Section 2.5).
2.3 Crisis Rate Estimation#
The critical parameter is rRiskyGoMAD — the rate at which
civilization-threatening nuclear crises arise. This parameter is
estimated from Cold War historical data.
Historical near-misses (documented):
Cuban Missile Crisis (October 1962): 13-day confrontation between the US and USSR. Vasili Arkhipov, a Soviet submarine officer, refused to authorize a nuclear torpedo when his submarine was depth-charged by US destroyers — a single individual who may have prevented nuclear war. The captain and political officer voted to launch. Arkhipov, as flotilla chief of staff, refused — the only one of the three officers whose consent was required.
Able Archer 83 (November 1983): a NATO command exercise that the Soviet leadership interpreted as possible cover for a genuine first strike. Soviet nuclear forces were placed on heightened alert.
Petrov incident (September 1983): Soviet early-warning systems reported incoming US ICBMs. Lt. Col. Stanislav Petrov correctly identified the alarm as a false positive and chose not to report it as a confirmed attack.
Additional documented incidents include the 1961 Goldsboro B-52 crash (two hydrogen bombs dropped on North Carolina; one had 3 of 4 arming mechanisms activated), the 1979 NORAD false alarm (training tape loaded into the live warning system), and the 1995 Norwegian rocket incident (President Yeltsin activated the nuclear briefcase — the only confirmed such activation). See Schlosser (2013) and Ellsberg (2017) for extended catalogues.
Rate estimation: The Cold War lasted approximately 40 years (1949–1989). At least 4 incidents reached a level where nuclear exchange was a plausible near-term outcome:
rRiskyGoMAD≈ 4 / 40 = 0.1 per year
This is almost certainly a lower bound: many incidents remain classified. Furthermore, the estimate assumes the crisis rate was constant — a simplification that likely understates the risk during periods of maximum tension.
2.4 The Model Code and Simulation Results#
The RiskyMAD model was implemented in the Evolvix prototype compiler (MMv0r3p1-RC1) and run as a stochastic simulation using the Gillespie algorithm (Gillespie, 1977) — the standard method for exact stochastic simulation of continuous-time Markov chains.
The complete model code (as published on the SD1 poster):
Evolvix Quest RiskyMADdead
(Question: "How many years until humanity self-destructs
in a nuclear roulette accident?")
Simulate stochastically until 200 :["years"]
Initial Amount of Risky = 1
Initial Amount of MAD = 0
Initial Amount of Dead = 0
Initial Amount of rRiskyGoMAD = 0.10
Initial Amount of rMADescapes = 6
Initial Amount of rMADtoDEATH = 3
Action 1 ( Risky ---[ Rate = 0.10 ]---> MAD )
Action 2 ( MAD ---[ Rate = 6 ]---> Risky )
Action 3 ( MAD ---[ Rate = 3 ]---> Dead )
Action 4 ( Risky ---[ Rate = 0 ]---> LifeMAP )
This is the entire model. In other simulation frameworks, implementing a continuous-time Markov chain with Gillespie dynamics requires hundreds of lines of code. In Evolvix, the model fits on a poster. Anyone who can read the code can check the math. The Evolvix prototype compiler is available for download at Evolvix Prototype Compiler — Download and RiskyMAD Model Code.
Simulation results (40 independent stochastic runs per scenario):
Figure 2: Stochastic inevitability of accidental nuclear winter. Forty simulation runs for each parameter scenario. Source: SD1.#
Scenario |
|
Median (years) |
Mean (years) |
Key finding |
|---|---|---|---|---|
Pessimistic |
0.3/year |
~7 |
~12 |
Accidental nuclear winter within a decade |
Base (point estimate) |
0.1/year |
~19 |
~33 |
Accidental nuclear winter within a generation |
Optimistic |
0.03/year |
~51 |
~90 |
Accidental nuclear winter within a lifetime |
2.5 The 1-in-40 Finding#
Central Result
Regardless of the scenario — pessimistic, base, or optimistic — approximately 1 in 40 simulation runs produces accidental nuclear winter within the first year.
This finding deserves prominence because of what it means in any other risk domain:
Aviation: If 1 in 40 flights ended in a crash, no one would fly. The actual rate is approximately 1 in 10 million.
Automotive: If 1 in 40 car trips ended in a fatal crash, no one would drive. The actual fatality rate is approximately 1 in 100 million trips.
Pharmaceuticals: If 1 in 40 patients died from a medication within the first year, the drug would be withdrawn immediately.
Nuclear civilization: 1 in 40 simulation runs produces accidental nuclear winter within 1 year. The risk is accepted because it is invisible — not because it is acceptable.
No industry, no regulator, no insurance underwriter would accept a 1-in-40 annual probability of catastrophic failure. Yet this is the risk that nuclear civilization carries, every year, by default. The risk is not accepted through informed consent. It is accepted through ignorance of the mathematics.
2.6 Contextualizing the Risk#
Someone like the author of this paper is more likely to die in accidental nuclear winter than to die in a car crash.
This claim requires careful framing. The annual probability of dying in a motor vehicle accident in the United States is approximately 0.01% (1 in 10,000). The annual probability that accidental nuclear winter begins — killing billions, including with high probability someone living in a car in the United States — is approximately 3–5% at the base crisis rate. The claim is robust: even if the model is wrong by an order of magnitude, it remains true.
The distinction between “dying in a nuclear strike” and “dying in accidental nuclear winter” matters. A nuclear exchange between two states might kill millions directly. But the subsequently emerging nuclear winter — global cooling, agricultural collapse, famine — kills billions. The nuclear winter is the mass killer, not the exchange itself. This is why the model focuses on nuclear winter as the absorbing state, not on the exchange as such.
2.7 Stochastic Certainty#
The most important structural insight is not the median (19 years) or the 1-in-40 finding, but the mathematical certainty of the outcome:
As long as rRiskyGoMAD > 0 and rMADtoDEATH > 0,
accidental nuclear winter is a stochastic certainty. The absorbing
state (Dead) is reached with probability 1. Not probability 0.95.
Not probability 0.99. Probability 1. The only question is when.
The only way to change this conclusion is to make one of these parameters exactly zero — which means either eliminating nuclear crises entirely or ensuring that no crisis ever escalates to exchange. Neither is achievable without structural change to the system.
This is not a rhetorical claim. It is a theorem of absorbing Markov chains: any state that can be reached from any other state and that has no outgoing transitions will be reached with probability 1, given sufficient time. The Dead state is absorbing. It is reachable from Risky (via MAD). Therefore it will be reached. The parameters determine the waiting time, not the outcome.
2.8 Why the Crisis Rate Increases Over Time#
The base model assumes a constant crisis rate. This is a conservative simplification. The upstream papers provide formal reasons to expect the crisis rate to increase over time:
The OSCR mechanism ([Matheo-2], th3–th5): The Over-Simplify, over-Complicate, over-Reach cascade predicts that any self-assessing system that declares itself “OK” enters a self-reinforcing degradation cycle. Applied to nuclear-armed civilizations:
Over-Simplify (Stage 1): Complex geopolitical tensions reduced to “us vs. them” binaries. Truth channels degraded by noise (the Unimportant Message Problem, [Matheo-2], m5.ax2).
Over-Complicate (Stage 2): Layers of work-arounds — arms control treaties with loopholes, verification regimes with exceptions. Each work-around adds complexity without restoring the truth channel.
Over-Reach (Stage 3): The system extends beyond its resources. A crisis that would have been manageable in an earlier era becomes unmanageable because the correction mechanisms have been eroded.
The Binary Attractor theorem ([Matheo-4], th8): There is no stable middle ground between BABL (self-reinforcing degradation) and ZION (self-reinforcing correction). A civilization that is not actively engaged in self-correction is converging toward BABL. Delay is not neutral; it is convergence toward the attractor from which escape becomes harder.
Implication: If OSCR is active, then rRiskyGoMAD is not
constant at 0.1/year — it is increasing. The base-case median of
~19 years is therefore an upper bound. The model is optimistic.
3. Why “Later” Is Not an Option#
The most dangerous assumption in nuclear policy is: “We can deal with this later.” Two formal arguments establish that delay is not neutral.
3.1 Stochastic Certainty Means No Safe Waiting Period#
In a system with an absorbing state reachable with positive probability at each step, the probability of eventually reaching that state is exactly 1. This is not a statistical estimate; it is a mathematical theorem. There is no “safe” number of years to wait. Every year the system continues in its current form, the roulette wheel spins again.
The 1-in-40 finding (Section 2.5) makes this concrete: even in a single year, the risk of catastrophic failure is not negligible. It is comparable to loading a revolver with one round in 40 chambers, putting it to the head of civilization, and pulling the trigger — once per year, every year, forever.
3.2 No Stable Middle (Binary Attractors)#
The Binary Attractor theorem ([Matheo-4], th8) provides the formal reason why “dealing with it later” is not a neutral decision. In a system with a self-assessment bifurcation ([Matheo-2], th3), there are exactly two stable states — convergence toward BABL and convergence toward ZION. There is no stable middle.
A civilization that is not actively engaged in structural recalibration (ZION) is, by default, converging toward BABL. This convergence is invisible from the inside (because BABL disables the self-assessment mechanisms that would detect it). The decision to “deal with it later” feels neutral — the system appears stable, deterrence appears to be working. But apparent stability is itself a symptom of BABL: the system has declared itself OK (“deterrence works”) and stopped checking.
4. MAD → MAP#
4.1 The Current Paradigm: Mutually Assured Destruction#
MAD (Mutually Assured Destruction) has been the dominant nuclear strategy since the 1960s. Its logic: if both sides can destroy each other even after absorbing a first strike, neither has an incentive to strike first.
MAD has prevented nuclear war for 80 years. The model does not deny this. But MAD has a structural weakness that the RiskyMAD model exposes: MAD is a metastable equilibrium, not a stable one.
A stable equilibrium returns to its original state after a perturbation. A ball at the bottom of a bowl.
A metastable equilibrium appears stable until a sufficiently large perturbation pushes it past a threshold, after which it transitions irreversibly. A ball balanced on the rim of a bowl.
MAD is the ball on the rim. Small crises are resolved, and the system returns to its apparent equilibrium. But the RiskyMAD model shows that the threshold will eventually be exceeded — stochastic certainty.
The insight is not that MAD is wrong. The insight is that MAD is incomplete. MAD prevents nuclear war on any given day; it does not prevent nuclear war over any given century. A strategy that works locally but fails globally is not a strategy. It is a delay mechanism.
4.2 The Proposed Alternative: Mutually Assured Progress#
MAP (Mutually Assured Progress) replaces the threat of mutual destruction with a shared commitment to mutual progress. Instead of “if you attack, we both die,” MAP says: “if we both invest in recalibration, we both thrive.”
The formal basis comes from two upstream results:
The Commitment Trichotomy ([Matheo-3], th6): In a Prisoner’s Dilemma (where defection is individually rational), cooperation cannot emerge from rational self-interest alone. But the game structure can be changed by a credible first-mover who demonstrates commitment to cooperation at personal cost. This changes the game from Prisoner’s Dilemma to Assurance Game — where cooperation is individually rational if the other side also cooperates. The first-mover’s credibility resolves the “if.”
Three possible responses:
Defect (the BABL default): assume defection, defect yourself. Stable but suboptimal.
Cooperate naively (the BABL over-simplification): cooperate without verifying commitment. Exploitable and unsustainable.
Volunteer credibly (the ZION path): commit first, at genuine personal cost, visibly and verifiably. This changes the payoff matrix for all other players.
The Jubilee System ([Matheo-4], ax25): The mechanism for MAP is periodic recalibration. Every 50 units (7 × 7 + 1), accumulated imbalances are reset. The modern equivalent: arms advantages recalibrated, resource asymmetries rebalanced, institutional structures reformed. Not utopian; an engineering specification for a self-correcting civilization.
4.3 What MAP Looks Like Concretely#
Staged, mutual, verifiable arms reduction. Not unilateral disarmament but mutual reduction with verification at every step. The Jubilee System applied to arsenals: each cycle reduces the total, with verification that makes cheating detectable.
Truth-channel restoration as a security measure. Degraded information channels increase the crisis rate (OSCR Stage 1). Investing in reliable information infrastructure is a defense measure, not a diplomatic nicety.
Jubilee cycles applied to international resource allocation. Periodically rebalancing the accumulated advantages that make arms races feel necessary. Not redistribution (which creates dependency) but removing the structural conditions that produce arms races.
The Great Jubilee Race. The transition from MAD to MAP in 7–8 stages of ~6–8 months each, with all 10 nuclear-armed states (“Nuclear Kings”) participating. Each stage has verifiable milestones. Each completed stage makes the next easier.
FiShFus (Fiduciaries Sharing Futures). 288,000 paid long-term thinkers whose job is to maintain the NOT OK self-assessment that the ZION cycle requires. A civilizational immune system. Cost: approximately $8 per person per year (~2 cents per day).
5. The Response Problem: “What Can I Do?”#
The author of this paper (LLoL) has attempted to engage with the implications of the RiskyMAD model through every channel available:
Open letters to authorities. Between January and December 2025, open letters (OL0–OL6) were sent via USPS to:
The President of the United States (OL0, OL1)
Pope Leo XIV (OL2)
The Prime Minister of Israel (OL3)
The President of Russia (OL4)
The UN Secretary-General (OL5)
The US Speaker of the House (OL6)
No response has been received from any recipient. The letters proposed specific, actionable steps: convene the 10 Nuclear Kings, establish ResearchCity as a global decision-support institution, fund the transition at ~$8 per person per year.
Public engagement. The response from the internet public is uniformly: “What can I do?” — followed by resignation to do nothing, including not supporting the effort. This response is itself a symptom of the BABL mechanism: when a problem appears too large for individual action, the default is inaction. Inaction is not neutral (Section 3); it is convergence toward the attractor.
The last possibility the author sees: If the public will not engage with #AuditTheMath and support the scaling of ResearchCity to do a thorough job of checking this work, then the last possibility the author sees for averting accidental nuclear winter will be gone.
This is not a fundraising appeal disguised as a paper. It is a structural observation: the RiskyMAD model identifies an escape (MAP), but the escape requires activation. Activation requires resources. Resources require public engagement. And public engagement requires understanding the math. The chain is: math → understanding → engagement → resources → activation → escape. Every link must hold. The first link (#AuditTheMath) is the one that this paper provides.
6. Known Weaknesses#
6.1 Crisis rate estimation uncertainty. The base estimate (0.1/year) derives from 4 well-documented incidents over 40 years. Small sample. The true rate could be significantly higher (unreported incidents) or lower (selection bias). The sensitivity analysis shows the qualitative conclusion is robust, but the median timeline is sensitive.
6.2 Model simplicity. Three states cannot capture dozens of actors, thousands of weapons, or complex escalation ladders. The simplicity is a strength (transparent, auditable) and a weakness (may miss dynamics that change the conclusion).
6.3 The death-trifecta parameter. The 1/3 probability is derived from the BABL trifecta (Section 2.2) and corroborated by Kennedy’s anecdotal estimate. It is principled but not empirically calibrated to individual crisis types. A more sophisticated model would distinguish crisis types and assign different escalation probabilities.
6.4 The MAP transition mechanism. The paper asserts that a credible first-mover can change the game from PD to AG. The formal mechanism exists ([Matheo-3], th6). The practical instantiation — who goes first, how credibility is established in the nuclear domain — is the most important open question. b17 ([Matheo-7]) and b18 address this directly.
6.5 What the model cannot predict. The model does not predict when a specific crisis will occur, who will be involved, or what the trigger will be. It estimates a probability distribution. The distribution is falsifiable.
6.6 The COOP (Continuity of Operations Plan). The interpretive reading of Matthew 24 as a COOP for civilizational transition, originally drafted as part of this paper, has been moved to b18 ([Matheo-8]) where it integrates with the Call to Action’s practical transition guidance. Readers interested in the COOP should consult b18 directly. The formal argument of this paper (Sections 2–4) stands independently of the COOP reading.
7. The SD1 Poster and Reproducibility#
The complete RiskyMAD model, simulation results, and MAP escape proposal are published on a single-page poster (SD1), designed for maximum transparency:
Figure 3: The SD1 poster. Full model code, simulation results, and MAP escape path on a single page. Download: SD1.#
To reproduce the results:
Download the Evolvix prototype compiler from Evolvix Prototype Compiler — Download and RiskyMAD Model Code
Enter the model code from Section 2.4 (or from the SD1 poster)
Run stochastic simulations
Compare your results with the published forecasts
The code is public. The compiler is public. The results are public. #AuditTheMath
8. Companion Papers#
Upstream (b11–b15 must be read for full formal context):
[Matheo-1] (b11, PET): Formal panentheistic axiom system. Divine experience varies with the world’s state (th4).
[Matheo-2] (b12, e7Day): Self-correcting construction model. BABL/ZION bifurcation (th3), OSCR collapse, Compassion Capacity.
[Matheo-3] (b13, e7He): Hero journey as anti-BABL inoculation. Commitment Trichotomy (th6), Supervillain Theorem.
[Matheo-4] (b14, JUB): Innovation theodicy, Jubilee System (ax25), Binary Attractor theorem (th8).
[Matheo-5] (b15, Structural Deadlock): Divine Simplicity critique. Why ax11 (dipolarity) is necessary.
Downstream:
[Matheo-7] (b17, h* Theorem): Falsifiable predictions. Who executes the plan? How to test whether they are genuine?
[Matheo-8] (b18, Call to Action): Synthesis. Includes the COOP (Continuity of Operations Plan) for the MAD → MAP transition.
9. Conclusion#
The RiskyMAD model says three things:
First: The risk of accidental nuclear winter is real, quantifiable, and unacceptable by any standard applied in any other risk domain. At the crisis rate observed during the Cold War, the median time to accidental nuclear winter onset is approximately 19 years. Regardless of the parameter scenario, approximately 1 in 40 simulation runs produces accidental nuclear winter within the first year. No industry, no regulator, no insurer would accept a 1-in-40 annual probability of catastrophic failure. Yet this is the risk that nuclear civilization carries by default.
Someone like the author of this paper is more likely to die in accidental nuclear winter than in a car crash. The math is auditable.
Second: The risk is a stochastic certainty. As long as crisis rate > 0 and escalation probability > 0, the absorbing state (Dead) is reached with probability 1. The only question is when. The OSCR mechanism ([Matheo-2]) predicts that the crisis rate is increasing, not constant. Delay is not neutral: the Binary Attractor theorem ([Matheo-4], th8) proves that a system not actively engaged in correction is converging toward collapse.
Third: An escape exists. MAP replaces the threat of mutual destruction with a shared commitment to mutual recalibration. The transition requires a credible first-mover ([Matheo-3], th6), a recalibration mechanism ([Matheo-4], ax25), and public engagement with the mathematics. The escape is formally specified. It requires activation.
The question this paper hands to b17 ([Matheo-7]) is: who executes the plan, and how do we test whether they are genuine?
The risk is real. The escape exists. The math is auditable.
#AuditTheMath