Democratising Computer Science for Everyone

 The Church Machine

Why the Church Machine is the key to civilising computer science for us all

The Elevator Pitch

Every computer you have ever used is built on a mistake we stopped questioning: it trusts by default and contains by exception. Permissions, passwords, firewalls, patches — all of it is apparatus bolted on after the fact, guarding a machine that was never built to be safe. That is why we patch forever, why breaches are inevitable, why no critical system can promise it will not fail. We built computing on sand and have been reinforcing the sand for fifty years.

The Church Machine starts from the opposite premise. It is built on Alonzo Church's lambda calculus, where everything is a function, and every function carries its own boundary — a capability. Nothing can reach what it was not explicitly given. No ambient authority, no privileged mode, no trusted overseer to corrupt. Security is not a feature added on; it is the mechanism itself. A hostile program does not get caught — it simply cannot express the reach to do harm. Containment is structural, not vigilant.

And because the capability is the addressing, the whole tower vanishes — no operating system, no protection rings, no seven-layer stack. Function code runs on bare metal: smaller, faster, and safe, all at once, because the same unification that makes it secure makes it minimal. I proved the core of this in 1972 with the PP250, a capability computer that ran telephone exchanges at decade-scale reliability. The idea was right then. The silicon is finally ready now.

But I have spent a lifetime on this not for performance. It is McLuhan's insight: technology is the extension of man — and therefore bounded by man. A computer that trusts by default becomes an overseer; a computer that contains by design stays a tool. The Church Machine keeps the human at the root of trust, reason, and choice. That is not a limitation to apologise for — it is the whole point. A machine that knows it is an extension of man remains under man.

That is what civilising computer science means: not a faster machine, but a trustworthy one — the computational foundation for a free civilisation, where security is a structural right built into the mechanism, the way liberty is built into a just society's laws rather than granted by its rulers. We have spent fifty years making computers powerful. It is time to make them safe by construction — and give people a machine worthy of the civilisation we want to build.

The image that makes it stick — Two Clocks

If the argument above is the case, the parable is the picture. It is the fastest way to make someone feel the difference, and it is available as its own downloadable document: two-clocks-parable.md.

In one breath: the pendulum clock was the most accurate clock in the world — as long as it stood in a still room. Its accuracy was borrowed from a stable environment. Put it on a pitching ship, and it fails completely. John Harrison's marine chronometer kept time on the open sea because its correctness was intrinsic—springs balancing their own forces, carrying stability within themselves, needing nothing from the environment.

Every conventional computer is a pendulum clock: accurate as long as the world is kind. The Church Machine is Harrison's chronometer: correct because it does not ask the world to be.

We don't need a more accurate pendulum. We've had three centuries of ever-finer pendulums, and every one still fails the moment it leaves the calm room. We need the clock that keeps time on the open sea.

(Full parable: two-clocks-parable.md.)

Compression — as the doors are closing

The one-sentence version:

Every computer trusts by default and patches forever; the Church Machine contains by design — security built into the mechanism, not bolted on — because a machine that knows it's an extension of man stays a tool, not an overseer.

The five beats (compress or expand to fit the ride):

  1. The original sin — computers trust by default and patch forever.
  2. The fix — capability is built in and contained; security is the mechanism.
  3. The bonus — the whole stack vanishes; safe, fast, and small at once.
  4. The credential — PP250, 1972, proven at decade-scale reliability.
  5. The why — McLuhan: the machine is an extension of man, bounded by man; a tool, not an overseer. The foundation for a free civilisation.

If you have ten seconds, beats 1, 2, and 5 are the spine.

Companion documents: two-clocks-parable.md (the image), and the design record (the proof). The pitch is the argument; the parable is the picture; the silicon is the proof that closes it.

Comments

Post a Comment