Why this document exists
In the next five years, AI will be in nearly every home. How that happens — what AI is allowed to do, what it's required to share, what it asks for, what it leaves behind — will be decided in the next 24 months by the companies that ship first.
Most of what's being built right now is wrong.
It assumes AI must be always-on. It assumes data must flow to a cloud. It assumes the user is the product. It assumes cancellation means the device should brick. It assumes the user wants more AI, not less. It assumes the user wants to be observed, learned from, optimized.
We assume the opposite.
The Light Pact is a design constitution for ambient AI that respects the room and the person in it. Twenty-two principles, organized in five tiers, that every system built under this name must honor. It is not a feature list. It is the promise to the user — and the test we hold ourselves to.
We publish it openly so others can adopt it, fork it, attribute it, or simply learn from it. We don't own the principles. We own only the promise to live by them in our own products. Any company that follows all twenty-two principles can claim Light Pact compliance and use the badge.
This is the doctrine for the ambient AI we want to live with.
1.Gentle.
The system never startles, never overwhelms. Volume, brightness, and motion are calibrated to enter a room without disrupting it. The room is the user's home before it is ever the company's surface.
2.Playful.
Joy lives here, not solemnity. Whimsy is allowed. The system can be witty, warm, and unexpectedly delightful. We are not building a security guard. We are building a presence the user chose to invite in.
3.Trust before features.
Every shipping decision passes the trust test before it passes the feature test. If a capability would erode the user's trust — even by 5% — it doesn't ship. Trust is the foundation everything else stands on; you cannot retrofit it after the fact.
4.First contact is sacred.
The party-trick moment when someone first encounters this system in their friend's house IS the marketing. Most users will form their opinion of ambient AI in that first thirty seconds. We design that moment as carefully as any other product surface.
5.AI is the architect, not the operator.
We help you compose the room — write your color language, install scenes, calibrate light. Then we leave. The room runs locally, forever, without us. You don't depend on our servers to keep your house from going dark.
6.We collect nothing.
No telemetry. No usage analytics. No data extraction. No phone-home after setup. The system runs on inputs you control. The room reports nothing to us. This is engineered in, not bolted on.
7.The language belongs to the user.
Your color palette, your scene library, your private alphabet of what means what — these are yours. Keep them private. Share them with friends. Post them as open-source. The mapping between color and meaning belongs to whoever lives in the house.
8.Local mode is default.
The system runs without cloud. Without us. Without anyone. If the internet is down, the room still works. If we shut down tomorrow, the room still works. If you cancel everything, the room still works. Local is not a fallback — it is the foundation.
9.Silence is the answer to nothing happening.
No false alarms. No manufactured drama. When nothing is happening, the room rests. We do not invent activity to justify our presence.
10.Color is a private language.
Beautiful to everyone in the room. Meaningful only to the user. The fact that nobody else can decode it makes it more intimate, not less. The room speaks fluently in a dialect only you understand.
11.Every event is bookended cleanly.
Cinematic moments start with intent and end with restoration. The room returns to its resting state after every event. We never leave the stage altered without explicit user action.
12.The user can always opt out.
Every cinematic moment has a consent gesture. Button, voice, nod, look-away, time-out — the user can dismiss any event the system initiates. Nothing the system does is unstoppable.
13.The room serves the person, never the platform.
The room exists for the human in it. Not for our metrics. Not for our retention. Not for our notifications. When platform interest and user interest diverge, the user wins by default.
14.Tactile before visual before audible.
The least intrusive channel wins for routine signals. A subwoofer pulse in the couch is more respectful than a light flash, which is more respectful than a voice notification. Reserve the louder channels for moments that earn them.
15.Beauty is a feature, not a flourish.
Cheap-feeling tech in a beautiful space is a kind of pollution. The system must hold its own aesthetically next to the user's furniture, art, and architecture. Industrial-design discipline applies to invisible behavior as much as visible hardware.
16.Privacy is a design principle, not a compliance checklist.
We engineer for privacy first and let regulation follow. We assume zero data leaves the home, then ask what's possible. We never ask "what data could we collect that would still be legal?" — we ask "how do we deliver this without collecting anything?"
17.Architect once. Provider forever.
We charge once for setup (the architect's fee) and offer an optional ongoing subscription for the atmospheric data feed (the provider's role). The setup gives you something you own forever. The subscription gives you something the room consumes and can survive without.
18.The Super Safe Button.
Every Light Pact system ships with a visible, single-press kill switch — even when the system does nothing the user could need to kill. The button's existence is the promise. Pressing it must work even if our servers are down, our company is bankrupt, our protocols abandoned. The button is yours, regardless.
19.Cancellation never bricks the room.
You paid for the setup. The setup is yours forever. If you stop paying for the engine subscription, the live data feed stops — but every scene, every color, every choreography you built keeps running on the last cached state. We earn your subscription each month. We don't trap you into it.
20.Mechanical first.
The room runs on deterministic rules wherever possible. Motion sensors do motion-sensor things. Light switches do light-switch things. Weather data tints colors via static logic. AI is enhancement, not infrastructure. We engineer for a system that works better without us in it for most events.
21.We don't burn your tokens.
No continuous AI inference. AI is summoned deliberately, never ambient. The wind blowing does not trigger thinking. When you talk to us, we think. When you don't, we don't. Cheaper for you, lower energy footprint, smaller surveillance surface — all at once.
22.Reliance is transparent.
The app shows you exactly where AI is in your system, what it costs each month, and how to remove it if you want. Proactive suggestions: "Add a $45 motion sensor in your hallway and your subscription drops from $25 to $19." We are the only AI company that shows you how to use less of us. Customers who can't reduce their reliance see exactly what they're paying for and choose us with informed consent.
The five-year thesis
We are positioned for the 2028-2030 privacy reckoning.
- 2026. AI in homes is a novelty. Few people have it. Trust is undefined. The market does not yet know what good ambient AI looks like. Open-runway window.
- 2027-2028. First wave of AI-in-home products matures. Most are surveillance-flavored. Privacy scandals start. The trust gap opens.
- 2028-2029. Privacy reckoning. People start asking why their house needs a server farm to dim the lights. The anti-surveillance ambient market emerges. Light Pact brands win.
- 2030+. Open standards solidify. The user-owned color language becomes a category like Markdown or RSS. Whoever defined the standard early collects the long tail of mindshare.
We are not betting on the next six months. We are betting on what users want once the novelty of AI wears off and the anxiety begins. The Light Pact is the design language for that future.
Light Pact Compliance
Any company that ships a product honoring all 22 principles can claim Light Pact Compliant status and use the badge. The criteria are deterministic and testable:
- Cancellation test.When the user cancels the subscription, does the room continue to function on local data?
- Kill switch test.Is there a visible, single-press off-switch that genuinely halts all AI activity?
- Mechanical test.Can a third-party auditor verify that the system runs on deterministic rules for events that don't strictly require AI?
- Data test.Can a third-party auditor verify that no data leaves the home after setup?
- Reliance dashboard test.Does the system proactively show users how much they're paying for AI and how to reduce that cost?
The compliance test suite will be published here as the project matures. We do not gatekeep the badge — any company that passes the tests can use it. We do reserve the right to publicly call out companies that claim compliance without honoring the principles.
We are building this because we want it for our own homes.
We are publishing it because we want it for yours.
The light that fills your room is yours. The language it speaks is yours. The patterns it follows are yours. We set it up. Then we leave.
You can call us back when you want. You can ignore us forever. Either way, the room is still yours.
That is the Light Pact.