Sovereign world models Fig. 1 / 15

Codex Hackathon · Paris

Sovereign
world models

The world model that learns your factory, your hospital, your city. Made smarter by the people who use it. Owned by no one who can take it away.

Fig. 1. Next-latent prediction error, recorded live

The question

Who gets to own
intelligence?

Robotics world models are becoming infrastructure. The model that understands a factory, a hospital, a city is being built somewhere else, and it can be priced, throttled, or switched off on terms you never agreed to, by people you will never meet.

A handful of companies, or all of us?

The bargain

Look at the deal
on the table.

Hand over your data. Let it train a mind you will never see inside. Then pay to rent that intelligence back, on terms you do not set.

Are we really fine giving the world away to train something we are not allowed to own?

We can do better. So we built it.

The alternative

A world model the world
improves together.

Thousands of people, each holding a sliver of the real world, make one shared model smarter. The data never leaves their devices. The gains are real and measured. The upside belongs to them.

But what kind of intelligence can hold a world?

The bet

Language models
will not build robots.

A language model learns the world secondhand, from text. A child takes in more of physics by the age of four than every model trained on the whole internet. Words are a thin trace of a world they never touch.

too thin

Text is not the world

No feel for gravity, for contact, for what stays true once you look away.

it drifts

Errors compound

Every token is a guess. Over a long horizon the guesses drift into nonsense.

no plan

Nothing to plan over

A stream of words is not a state you can search. Predicting text is not reasoning about consequences.

More data makes them remember more, not understand more. To act in the physical world, a machine needs a model of the world.

World models

The ChatGPT moment
for robotics.

ChatGPT was the moment a model understood language well enough to be useful to everyone. A world model is that leap for the physical world: it predicts what comes next in representation, not pixels, keeping what matters and ignoring the noise it could never predict. JEPA makes it stable, and small enough to run on the device in your hand.

Predict the representation, not the pixel. That one choice is the whole bet.

  • action-conditioned what if I do this?
  • causal it holds when the world shifts
  • consistent errors do not explode

And you are about to watch one think.

Watch a world model realize
it was wrong.

It predicts what comes next, every frame. Surprise is the moment the world does something it did not expect, measured in latent space, not pixels. One number, and you can watch it spike.

About 6 ms per step on a plain CPU, over 80 frames a second.

  • 192-d latent, one vector per frame
  • 3-frame predictor window
  • no pixel decoder

Surprise is one number per frame

surpriset  =  ‖ predicted next latent  −  actual next latent ‖²

A scalar prediction error in latent space, not a per-pixel heatmap. The model emits one 192-d vector per frame, so surprise is a recorded signal, the kind a journal once printed from an instrument.

Implemented in web/federated-demo/lewm_probe.mjs. The recorder runs it once per frame.

Surprise is not motion.

Fast, predictable

The agent sprints across the room. A thousand pixels change, but the model saw it coming, so the trace stays flat.

Tiny, unexpected

The agent barely moves but does something off-distribution. Almost nothing changes on screen, yet the trace spikes.

It measures prediction, not pixels changing. A live frame-difference trace runs beside it on stage to prove the point.

A room of strangers just made it
less surprised.

Minutes ago, people in this room each trained a small piece of this model on their own private trajectories. Nothing raw ever left a single device. No account, no upload, just a model that came back better than the one they walked in with.

Fig. 9. The same frozen backbone, one shared revision. The signal goes quiet

How it works

i · on every device

Train a tiny adapter

12,512 parameters, learned on your own local trajectories.

0.07% of the model
ii · what leaves

Only an offset

A clipped adapter delta is sent. The data itself stays put.

iii · together

One shared revision

The offsets are averaged into a single update to the model.

The backbone stays frozen. Only the adapter moves. The data never leaves the device it was made on, and the model still gets better for everyone.

The model is measurably
less surprised.

Held-out prediction error dropped 12.3%. Across five independent seeds it dropped every single time, by 16.8% on average, and never less than 5.4% in the worst draw.

Fig. 11. Held-out error, before and after federation. Every seed improved

Source: lewm_tworooms_system_probe.json and the five-seed sweep. Press down for the full table.

Five seeds, the same federated path

real adapter deltas through the real aggregation path
seedbaseline MSEadapted MSEimprovement
202606120.06040.0530this run+12.3%
10.05470.0400+26.8%
20.05640.0534worst+5.4%
30.07690.0717+6.8%
40.07380.0497best+32.6%
mean · stdev · verdict+16.8% mean · 11 pts stdev · every seed improved

Even the worst of the five seeds still improved, by 5.4%.

The economy

A robotics company wants
the better model.

EUR 1,000,000

What the improvement is worth to a buyer who needs it. They are paying for a measured result, not a promise.

The money flows to the people who made the model better, not to whoever happens to host it. Not the platform. Not a lab. Them.

The reward ledger

The upside goes back to the
people who built it.

sale EUR 1,000,000 · community pool EUR 800,000
contributorweightreward
L'Ensemble Labs · the network20% shareEUR 200,000.00
Ada4122.1740EUR 363,136.75
Tomás3123.0300EUR 275,118.65
Priya1426.7360EUR 125,686.17
Mateo409.3200EUR 36,058.43
balanced to the centEUR 1,000,000.00

Ada trained on the most data, so Ada earns the most. Every share is earned: data trained on, rounds joined, how much each update actually helped. The ledger balances to the cent.

Powered by Mollie · test mode API key · simulated payments

Intelligence the world improves,
and the world owns.

A world model you can watch think. Made smarter by a crowd that kept its data. Paid for by those who need it. Owned by no one who can take it away.

This is what sovereign intelligence looks like.

Open. Come build it: github.com/AbdelStark/Lensemble

In depth

The back matter, for the breakout room and your questions.

  • 15.1 See the model’s mind
  • 15.2 How the system is wired
  • 15.3 Every number is reproducible

Cartographer

See the model’s mind.

The same model, turned into a rotating point cloud of its latent states, with planning trajectories igniting toward a goal. You can literally watch it imagine its next move.

A healthy model spreads across many dimensions. A collapsed one folds into a line.

  • eff-rank 9.86 healthy spread of latent states
  • rank 1.0 the collapse you never want
  • plans on a laptop, in latent space

How the system is wired

The federated round
browser join (scan a QR code)
  local trainer  -> adapter delta
  -> submit_update -> aggregate
  -> model revision + shared offset
headless probe
  -> docs/evidence/...system_probe.json
The surprise meter
tworooms_env  -> live trajectory
lewm_runtime  -> encode / predict (ONNX)
surprise = MSE(pred_next, actual)
lewm_adapter  -> before / after offset
  -> recorder + perturbation + frame-diff

Runs on WebGPU with a WASM fallback. The seismograph recorder is pure 2-D canvas, so it never depends on a GPU.

Every number is reproducible

ia number on screen
iia committed evidence file
iiia repo claim-audit
iva test that asserts it
  • lewm_tworooms_system_probe.json   this run, +12.3%
  • lewm_tworooms_probe_seedsweep.json   five-seed mean and worst
  • AGENTS.md § Claim Discipline   the binding language

Nothing on the wall is hand-typed. Each figure traces back to a file you can open.

Recorded demo

The run, on tape.

A captured run of the live demo, kept as the fallback so the proof shows even when the room's network does not.