one substrate · many faces · every claim cited to real code — top is what you're talking to, it all rests on the substrate

the same atom, projected per audience — view = f(atoms, config). Privacy is enforced in code, before render: an outward face physically never loads a private atom, so it can't leak one. Flip the audience and watch.