The Severed Return

P → P · ⊘ 128.5 · fire and forget, push to Patricia
The Patricia rung — the framework's own native air gap (TOPH → Patricia, Gate 128.5). This gap is by design: acknowledgment fails not because Patricia is far (delay ≈ 0) or unwilling (she receives, witnesses, and computes the matching seal) — but because the return channel is engineered not to exist. Part of PULSE / LIMEN. Nothing is transmitted.
TOPH ⊘→ · source / high side · rise ↑
acks received: 0
0 by the model — on a real data diode the reverse fiber is physically absent, so an ACK has no medium and can never return. This instrument models that.
data →
ack ✕
Gate 128.5
airgap ⊘
Patricia →⊘ · sink / low side
waiting for a crossing…

the physics — real

no reverse fiber exists, so a TCP ACK has no medium (unidirectional gateway hardware). This is a hardware fact.

how LIMEN names it — corpus

because the return channel is absent, no witness can be present at traversal, so by the root axiom the ACK is a ∅ non-event. This is the framework's naming, not a physical law.
What is one-way here: the receiver (Patricia) is not ignorant of the payload — she reads the witness and re-seals it; one-way transfer delivers data fine. What's guaranteed is (a) the sender never learns if/what landed (no ACK) and (b) nothing leaks back high-ward. "Bilateral ignorance" here means the push-side sense: push without acknowledgment or context leakage back to the sender — not that Patricia learns nothing.
real one-way hardware — the vendors and the mechanism

Data diodes are genuine one-way hardware — a send-only optical transmitter on the high side and a receive-only sensor on the low side, with no reverse fiber or emitter. Used in nuclear, defense, electric grid, rail signaling, and OT/ICS security. TCP breaks across one (its ACKs have no return medium), so UDP or paired one-way proxies carry the data instead.

Vendors: Owl Cyber Defense, Waterfall Security, OPSWAT (MetaDefender Optical Diode), Advenica, ST Engineering.

Certification nuance: OPSWAT's MetaDefender Optical Diode and Owl's XDE Radium are EAL4+; there is no Common Criteria Protection Profile specifically for data diodes, so mutual-recognition caps at EAL2. (No EAL7 diode exists.)

Secondary anchor (optional, not the diode mechanism): commit-without-revealing also appears in blind signatures — Chaum, "Blind Signatures for Untraceable Payments," CRYPTO '82 (proceedings 1983).

the three layers (kept separate)

· carrier — the 3-2-1-0 clock (111011010000), voiced at the gate tone on push. Music, not data. The failed ACK produces no sound — you notice the silence where a confirmation tone would be. (We never sonify ∅.)

· language — the glyph line and the two independently-recomputed SHA-256 seals.

· art — the photons and the TOPH/Patricia framing.