The people who hold it up hold the keys.
Morcom is designed so that no single operator, including the one that built it, can quietly change what the registry says or switch it off. Control sits with the institutions that seed it, and every decision that matters leaves a public record.
Who decides
- Anchors
- Universities and labs that commit to seed a defined model set under an availability agreement hold seats in governance. They earn a voice by carrying the load, the same way Debian's official mirrors do. The first anchors write the charter. Become an anchor.
- Seed operators
- Anyone running the seed daemon is credited publicly, with uptime, bytes served and models pinned on their profile. Operators are the base the anchor tier is drawn from.
- Foundation
- Once the first anchors are seeding, the trademark and the index root keys move to multi-party foundation control under a published technical charter and a mirrorability charter. Orchestrator AI builds Morcom; it does not keep it.
What stops a quiet change
- Public transparency log
- Every manifest registration is appended to a signed, append-only log in the style of Rekor. Nobody can rewrite history, including Morcom.
- Multi-party root keys
- Index snapshots are signed under TUF roles, and the root keys are held by distinct member organisations. No single party can sign a forged or stale index, and a compromised mirror cannot serve one.
- Mirrorable by design
- Signed snapshots are replicated git-style and over torrent. If Morcom's servers vanish, any mirror reconstitutes the full signed index without asking anyone. See the index and search stack.
How takedowns work
- Delist, not delete
- Morcom cannot remove bytes from a swarm and does not pretend to. It can remove a manifest from the index through a public notice-and-delist process, the same posture Meta took against the LLaMA torrent on Hugging Face.
- Licence required
- Every manifest carries an SPDX licence field. Without one, Morcom refuses to index the model at all.
- Names are retired
- A deleted organisation name is never reissued, so nobody can register it later and ship a lookalike under a trusted name.