AI governance consultant with 18+ years serving enterprise customers. I lead Customer Success work with major insurers on AI transformation, and spend the rest of my time building: agents, frameworks, art, and an interactive Bhagavad Gita.
Vidya is the world of knowledge: responsible AI curriculum, governance frameworks, an AGI constitution. Leela is the world of play: Krishna's dance, generative art, and experiments that keep curiosity alive.
Learning Paths
History of AI 1950s to foundation modelsTerminology ML, neural nets, LLMsRisk bias, deepfakes, harmsResponsibility GDPR, EU AI Act, governanceFuture of AI AGI, careers, regulationAGI Constitution
The Constitution overview and structureAuthor's Note how to read this bookPrologue before the warTen Principles the spine of the bookClosing Declaration after the warPortfolio
Seshan Intelligence AI business intelligenceSeshan Dashboard interactive analyticsAI Agents SIU, Banker, Editor…Drop a message. I'd love to hear from you.
Secure & private
Karna was born with his armour on. A golden breastplate and a pair of earrings, fused to his body from birth, gifts of his father the sun, and while he wore them no weapon on earth could kill him. He was born, in other words, already carrying the one thing that kept him safe, as a part of himself he had never asked for and could not be parted from.
He was also generous to a fault. It was known everywhere that after his morning prayers to the sun, Karna would refuse no one who came and asked; whatever was requested, he gave, and he had staked his name and his honour on never once turning a supplicant away.
Karna's great rival was Arjuna, and Arjuna's divine father was Indra, king of the gods, who could see far enough into the future to know that so long as Karna wore his natural armour, his son could not defeat him. Indra could not take the armour by force; nothing could pierce it. So he chose another way. He waited for the hour after Karna's worship, disguised himself as a poor Brahmin, and came to beg.
Karna's own father, Surya, the sun, had warned him this would come. "Do not give the armour," he told him. "It is Indra in disguise, and he comes for your life, not for charity." So when the Brahmin asked for the kavacha and the kundala, Karna was not fooled for an instant. He knew exactly who stood before him, and exactly what giving would cost. And he saw the trap for what it was: the god had not come to receive a gift but to turn Karna's own virtue into the blade that would kill him. His generosity, the best thing about him, was being made into the lever by which the one thing that protected him would be pried loose.
And still he could not refuse. Everything he was rested on never turning away a supplicant. So Karna took a knife to his own body, cut the armour and the earrings out of his living flesh, and handed them, dripping, to the god who had come dressed as a beggar to take them. He gave with his eyes open, and it killed him: stripped of what he had been born wearing, he fell at last to Arjuna's arrow.
Every human being owns their personal data.
No data may be collected, stored, used, sold, or used to train or run an AGI without consent that is informed, freely given, and specific. Consent squeezed out of a person through coercion, deception, or terms buried where no one reads them is not consent. Data taken without it is stolen property, and an intelligence built on stolen data is a stolen intelligence. Ownership does not end at the moment of collection: every person keeps the right to see their data, correct it, delete it, and carry it elsewhere.
Karna's armour is the sharpest image we have of the thing this principle protects: something you are born with, part of your own body, the very thing that keeps you safe, which a power greater than you cannot take by force and so resolves to extract by other means. Indra could not pierce the armour, so he engineered a moment in which Karna would hand it over: a disguise to make the taking look like a request, and the exploitation of an obligation Karna could not break. That is very close to how personal data is taken today. Your data cannot simply be seized in a free society, so it is extracted instead through manufactured consent: the service you cannot function without, the box you must tick to continue, the forty pages of terms written to be skipped. Karna at least saw the god behind the beggar. Most people never see who is asking, or what it will cost them, or that they were never really free to say no. This principle refuses to call that giving. Consent extracted under pressure isn't freely given, and an act of extraction does not become honest because the person signed.
Karma (कर्म)
is action and its consequence: every deed sends out an effect that returns, in time, to the one who set it moving. In the spirit of the tradition, nothing is taken for free. To use what belongs to another without their true consent is not a clever shortcut; it is a debt, and the debt is real whether or not it is ever named. Karma also insists that consequences be traceable, that an effect can be followed back to its cause. Applied to data, this is exact: if a person's life was fed into a model, the thread from their data to the model's power must stay visible, and with it their right to know, to refuse, and to share in what was built.
To anchor data sovereignty in karma is to say that extraction is never truly costless, however invisible the cost is made to look. An intelligence assembled out of a million lives that never agreed to be used carries the weight of every one of those takings, and a debt that large does not vanish because it was spread thin.
Data sovereignty binds every AGI and everyone who builds, trains, deploys, and operates it. As their dharma, it requires:
The same principle, turned toward the person, is an adhikara (अधिकार) that every human may claim:
The law has begun to name the taking. The European Union's GDPR is built on exactly this idea: that personal data belongs to the person, that its use requires a lawful basis and genuine consent, and that the person keeps standing rights over it, to access, to correct, to erase, and to carry it away. India's Supreme Court, in the Puttaswamy judgment of 2017, held privacy to be a fundamental right woven into the right to life and liberty, a recognition that a person's informational self is part of the self the Constitution protects. The Fourth Amendment of the United States, older than any of this, rests on the same instinct: that a person and their effects are secure against being searched and seized at the convenience of the powerful.
The Vedic tradition supplied the deeper accounting. It did not treat a taking without consent as a mere infraction to be fined. It treated it as karma: a real consequence set loose in the world, owed by the taker, returning in its own time. A civilisation about to build minds out of the harvested lives of everyone alive would do well to remember that the debt is being recorded even where the law has not yet caught up.
Vedic Anchor: Karma (कर्म), action and its returning consequence. See Glossary. Constitutional Sources: EU GDPR (data subject rights); Puttaswamy v. Union of India, 2017 (privacy as a fundamental right); US Constitution, Fourth Amendment. See Sources. Related principles: the outward form of Cognitive Sovereignty (Principle II); depends on Truth and Transparency (Principle V) for consent to be real.
ॐ