-2 Violent Offense

-2 Violent Offense is the second tier of reassignment in The Five Rings. It holds people who have committed serious predatory harm: rape, severe assault, systematic exploitation, or patterns of coercive violence that crossed thresholds -1 does not cover. The safety infrastructure of Main Layer and -1 is substantially thinner here. AI monitoring still logs events and restores victims, but active protection has largely withdrawn. In its place is a layered private economy of security firms, cooperatives and voluntary-resident districts with maintained infrastructure, along with a reputation-based social order that functions as governance where the system has stepped back. The people the system has placed here, and those who chose to come, shape the environment more than the system does.

Current tax frame: LP-074’s active 50 / 25 / 12.5 / 6.25 schedule sets -2’s top marginal rate at 12.5% above the unchanged $10 million threshold. Both schedules certified in 2294 and took effect in 2295. SCM scope in -2 remains limited to UBI/PJS-attributable savings.

Overview & Purpose

The design of -2 follows directly from VMSS's core framework: harmful behavior permanently changes the environment a person is permitted to inhabit. Citizens assigned here have committed predatory acts that directly and severely damaged other people, unlike the accumulated low-harm record of -1. The system's response is environmental consequence, without incarceration or rehabilitation programming. The layer reflects the level of trust the civilization is willing to extend to its residents, calibrated precisely to the conduct that brought them there.

Victims are still restored in -2. The system holds to the principle that innocent people, including those harmed within this layer, deserve restoration where it is possible. What it has withdrawn is the presumption that residents here deserve the same level of ambient protection as people who have not committed predatory acts.

Key Characteristics

• Economy: Reduced UBI ($2,500/month floor) plus Primary Job Subsidy for qualifying work. Layer-specific siloed currency, non-convertible across layer boundaries. Private enterprise fills the institutional void with private security, logistics and resource management. Gang-controlled tribute systems coexist with legitimate private operators. The Lower Restrictions Layer (the informal name for -2) has genuine economic activity but lacks institutional mediation of it. The purchasing power gradient in -2 runs approximately 1.8–2.5x Main. Currency scarcity and a smaller population push per-unit purchasing power up, but private monopolies on essential resources (water, power, medical services) price on leverage rather than market competition, and tribute payments to territorial crews consume a significant portion of the scarcity benefit. Tourism concentrated in organized districts with augmentation studios and frontier entertainment creates localized inflation. Remote contested districts sit near the upper end of the range; organized districts with visitor traffic and monopoly pricing sit near the lower end.
• Enforcement Model: Post-Intervention. Harmful acts may complete. Victims are revived or treated where infrastructure exists; institutional withdrawal leaves coverage thinner than in upper layers. Murder within -2 triggers immediate reassignment to -3 Terminal.
• Environment: Highly variable by district. Areas controlled by established private operators (security firms, resource managers, community-oriented voluntary residents) maintain genuine order and functional infrastructure. Less organized districts are contested. Each area's physical environment reflects who is doing the organizing there; there is no uniform system-wide standard.
• Monitoring: Logging only, with no preemptive intervention and no routine drone protection. The implant still records intent and events. The public ledger is visible to every private institution deciding who gets access to what, so reputation is real currency in a layer without institutional backstop.
• Metric Gated Domains (MGDs): -2 hosts a smaller but unusually consequential MGD population, oriented around reputation networks and operational reliability instead of the credentialing-and-hobby ecosystems of upper layers. Reputation-gated trade circles admit only operators who have kept delivery consistent over multi-year windows. Private security cooperatives gate on clean conduct since arrival and demonstrated discipline under pressure, which the layer can verify because the implant still logs every incident. Voluntary frontier-resident enclaves admit on sustained productive activity and a clean local record, walling out the contested districts entirely. Merchant associations gate on contract-fulfillment ratios drawn from the public ledger. None of these touch STI or layer status. Exclusion means losing access to the network, which in -2 is often the difference between a functional life and a contested one. Federal floor law binds inside every -2 MGD: the nonlethal constraint and the prohibition on capital acts apply regardless of what any private domain admits or expels.
• Population: Approximately 300 million residents. The punitive population was assigned for rape, severe assault, escalating coercive violence and similar predatory conduct. Alongside them are voluntary visitors from upper layers who come for trade, contract work or personal reasons, and voluntary residents who chose -2 permanently for its hybrid economic character: low regulation, genuine frontier opportunity, and a private-enterprise environment that rewards operational capability over institutional credentials. Social order rests on territorial control, private security agreements, and the organic hierarchy that emerges when people in shared circumstances occupy the same space for long enough. Anarchies never last, and -2 is no exception.

A Day in the Life of a -2 Resident

Doctrine Snapshot: pre-v5.0

Callum Reese has been in -2 for three years. He was reassigned from Main Layer after a pattern of severe domestic violence that twice escalated to aggravated assault. The system logged both incidents in full. He knew the second would trigger reassignment and did it anyway. He does not think about that decision much anymore.

He wakes in a reinforced single unit: two rooms, basic furniture, a door that locks from both sides. The automated drop slot delivered rations overnight: two meal packs, a water unit. He eats without fabrication, without choice. His dashboard runs muted: $2,500 credited, STI 14. He checks the floor monitor, a shared network for the eight-person crew he has been affiliated with for eighteen months. No overnight incidents on their territory. He notes it as a productive outcome and begins his day.

The crew's informal role in this district is resource management. They control access to two water recyclers and a power cell distribution point on floors twelve through fifteen. It is not a legitimate occupation, though legitimate ones exist nearby. Two districts over, a private security firm runs a well-organized zone with maintained infrastructure and predictable rules. Several independent businesses operate inside it, serving punitive residents, elective residents who chose -2 for its economic openness, and the occasional inner-ring tourist in for a long weekend of looser rules and rawer atmosphere. One storefront is an augmentation studio offering temporary modifications that would draw excessive oversight in Main Layer: body scaling, sensory overhauls, experimental neural configurations, all reversible and all at the client's own risk. Callum's district has not reached that level of organization. Here territorial logic is the primary structure, and the work involves presence, negotiation and occasional physical assertion of boundaries. Callum handles the negotiation. He reads people well and has learned that -2 runs on credibility more than force, because force is expensive and attracts attention from the remaining monitoring infrastructure.

Midday is quiet. He eats, reads whatever archived content is accessible on the limited-bandwidth terminal in the common area, and does not go looking for conflict. Most of his effort in -2 goes into not escalating situations that do not need to escalate. The implant logs everything, and he knows a single murder in this layer would permanently end whatever is left of his record. That knowledge keeps him calibrated in a way the layer's social pressure alone would not.

In the evening the crew gathers. A dispute between two residents two floors down resolved without him, which he registers as a positive. Someone mentions a rumored new arrival, freshly reassigned from -1, disoriented and not yet affiliated. He listens without committing to anything. In the morning he will decide whether to approach or leave it alone.

He sleeps in a layer where what remains of the system's protection is a thin membrane between him and further consequence. He put himself here, and he understands that more clearly than he could in Main Layer, where consequences always felt slightly abstract. Here they are immediate and structural, and he takes that as a plain fact about where choices lead.

Enforcement in Practice

Post-intervention applies in -2. Acts of violence may complete. Victims are restored where backup vessel infrastructure remains. Response coverage is thinner than in upper layers because the institution partly withdrew, but the system still logs every incident in full. Murder is the hard threshold: a single capital act triggers immediate reassignment to -3, with no further process. The record from -2 goes with the resident and cannot be cleared.

Private justice in -2 operates within one architectural constraint: killing triggers immediate -3 reassignment. Everything below that line is the layer's to administer. Private police, vigilante cooperatives and community-organized enforcement operate without VMSS procedural constraints. Indefinite detention is permitted; private jails hold residents for as long as the detaining authority chooses, under whatever conditions it imposes. Nonlethal torment is a permitted instrument of private justice. The civilization withdrew its institutional hand from -2's internal order but kept the capital threshold. Private justice here is genuinely severe, with indefinite detention, physical punishment and sustained coercion, yet it stays short of the terminal category. Execution is not explicitly prohibited, but it is architecturally constrained: the executioner has committed murder, the ledger logs it, and the threshold evaluation reassigns them to -3 immediately. Most private justice operators decide against it. The restraint is cost rather than moral sentiment: killing forfeits everything -2 still provides, including revival.

The Wilderness — The Space Between Territories

On a map of -2 the districts read as islands: cooperative territory, security-firm zones, reputation-gated cores, and the mining and manufacturing corridors that anchor the layer's economy, each with a perimeter somebody pays to maintain. The maps render everything else in gray: highways, rural roads, resource commons, dead pre-reassignment infrastructure, and the plain distance between one organized place and the next. Residents call it the wilderness. The word refers less to undeveloped terrain than to the space where cooperative protection ends. Patrol contracts stop at the boundary markers, and no security firm is on call. The AR grid thins to the federal minimum, which in -2 exists to preserve cross-layer forensic continuity rather than to watch a road. Protection in this layer is a membership good, and the wilderness holds no memberships.

The wilderness does have one law on violence. A killing anywhere in -2 triggers immediate reassignment to -3. The killing is read from the killer's own implant or reconstructed from the victim's, and reassignment requires identification rather than capture, because every gate, market and scanner the killer meets for the rest of their life completes the arrest the empty kilometers could not. Everything beneath that line belongs to the layer. Robbery, beatings and captivity produce no federal response. The implants record all of it and the ledgers fill, but nothing follows, because nothing below the line is the institution's to do. Visitors from the upper layers find this obscene; residents understand it. The one law is enforced with certainty, but it sets a single threshold and keeps no order beneath it, and the road economy grew up in that space.

Like most things in this civilization, the road economy is layered. Nearest the districts are toll crews: a barricade, a posted price, and a claim to keep the stretch clear. The claim is partly true, since a crew defends its revenue against rougher operators as any business would. Convoy masters price those tolls into freight like weather. Further out are the crews that want the cargo and the vehicle. Deepest, in country nobody crosses without contracted escort, are the crews that want people, and that is where the difference between -2's wilderness and -3's shows.

-2 kept revival, and its wilderness sorts people by it. An implanted resident with a funded vessel (a backup vessel whose revival fees are paid up) holds a card no captor can confiscate. Authorized bailout is a citizen-only implant command that routes the resulting revival to a sovereign VMSS facility outside the captor's reach, and blocking it requires implant tampering, one of the few acts that bring federal enforcement into the layer at all. So the labor crews scan for the implantless, the unaffiliated, and travelers no cooperative will file a loss report on. Otherwise they bring a portable revival rig, which reopens the bailout door onto the same room it closed in. The rig's operators know its limits: its syncs are unsigned and institutionally worthless, its calibration decays toward failure rates no captor can arrest, and a captive who dies of the treatment turns the captor into a murderer with a ledger entry and a one-way ticket.

A substantial commercial security industry has grown into the gap the federal floor leaves. Armed motorcades serve personal and executive transit. Caravans and scheduled group convoys spread the cost of a detail across many travelers. Cooperative-operated airports move passengers and high-value freight above the bandit envelope entirely. Protection-fee brokers negotiate safe passage with specific crews, which is informal and legally grey but commercially routine. Collective armed travel covers what the market does not reach. At the bottom of the ladder is simply accepting the risk, and that option supplies most of the victims the whole economy is built around. Convoy masters' associations keep corridor almanacs that mark incident sites by kilometer and update them after every run; escort cooperatives adjust their percentage of cargo value the way an underwriter adjusts a premium. Reputation carries across district lines only as far as a network reaches, and the wilderness is where none of them do.

The restoration architecture reaches exactly that far and no further. A funded resident killed in the gray is restored through the layer's fabrication proxy installations at the -2 rate, because the vessel link does not depend on geography. An unfunded victim of criminal homicide is restored only where a responding unit performs the terminal sync capture that the remedy depends on: the enforcement capture of a homicide victim's mind-state through the implant (LP-065). Capture reach equals enforcement reach, which is thin in -2 by design and nonexistent in the wilderness. So the killer's reassignment is certain wherever the killing happened, and the victim's restoration is not. Between -2's territories the one law follows the perpetrator everywhere, while the remedy follows the responder, who does not come.

The layer does not intend to close this gap, and the arithmetic is public enough that everyone on every side of it can do the sum. Forty additional kilometers of patrol contract cost a district association more than the freight losses they would prevent, so the association declines, and the merchants who petitioned for it understand why. Article XXVIII districts of one million residents are redrawn annually, but a regulatory petition needs a constituency, and the wilderness has no residents to form one. Nobody has a priced reason to hold this territory, and where governance is entirely a question of who pays for what, that means nobody governs it.

The murder line applies across hundreds of empty kilometers and shapes the economy inside them. Toll crews run as businesses, crews that take cargo or people weigh each act against the reassignment a death would bring, and violence settles into careful sub-lethal forms that stay just beneath the only threshold on violence the civilization still enforces. The line deters killing, but by itself it saves no one. Out here protection is a market good, like water, escort, or the goodwill of a stranger with a sidearm. The only protection the wilderness provides without payment is the murder line: a killing anywhere in it still sends the killer to -3.

Edge Cases & Unique Aspects

• Revival After Death: Residents with a funded vessel who die in -2 are revived via VMSS-operated fabrication proxy installation within the layer. Revival is full fidelity: continuity is preserved, and layer status and prior record are unchanged. The provision does not exist in -3, which breeds documented resentment toward -2 among the punitive population of -3.
• Bailout: A planned death. A resident in unbearable circumstances (sustained torture, extreme coercion, a situation with no viable exit) may choose to die deliberately, triggering backup vessel revival and resetting their immediate physical circumstances within the layer. Bailout does not alter layer status, STI or prior record. It lets a resident escape a situation, never the consequence. VMSS preserves the option because it is not designed to trap residents in suffering without recourse; the layer is a permanent environmental consequence, not a sentence of perpetual torment.
• Forced Revival as Deterrent: Private justice operators can deny detained residents the escape of death by imposing backup vessel continuity, forcing revival after every death and returning the prisoner to the same conditions. The practice is real and the system does not prohibit it, but envelopes no captor can remove keep it from being the closed loop its operators advertise. Authorized bailout (whitepaper §17.3.1) routes any revival the prisoner triggers to a sovereign VMSS fabrication facility outside the captor's reach. A detainee who invokes bailout escapes the compound, and blocking the command requires implant tampering, a federal absolute that brings enforcement into the layer. Captive-revival rigs run on unsigned syncs no institution recognizes, and uncalibrated hardware decays toward failure rates the captor cannot prevent (§17.1.5). A captor whose treatment kills the prisoner has committed murder; the ledger logs it and -3 reassignment follows. Forced revival holds only prisoners who will not invoke bailout, and at scale it produces a capture-escape-recapture contest that the layer's severity permits but the architecture refuses to make airtight. The cruelest -2 detention remains objectively severe, and a prisoner who understands the architecture holds one card the captor cannot confiscate.
• Stigma Dynamics: Certain offense categories (sexual violence, exploitation of children) create significant social risk within -2 itself. Gang dynamics and vigilante logic in this layer are not neutral: residents with those offense histories are often targeted by peers.
• Revival Failure Exposure: Revival failure probability increases with each layer descent, and residents who die multiple times face it again with each death. The system documents repeated deaths but does not prevent them.
• Resentment Toward Upper Layers: Among the punitive population, awareness of -1 restoration provisions and Main Layer conditions generates documented resentment, particularly over the asymmetry between -2 revival provisions and their complete absence in -3. The resentment reinforces crew solidarity and occasionally shows up as attempted upward breach, almost all of which fail. Voluntary residents in -2, who chose the layer for its hybrid economic character, tend not to share it.
• Permanence: Punitive reassignment to -2 is permanent, with no reintegration path back to any higher layer. STI improvement within -2 determines local standing (access to better-run districts, acceptance by private security cooperatives, economic opportunities) but does not restore eligibility for upward movement.
• Regulatory Governance: The petition-based regulatory mechanism (Article XXVIII) operates in -2 with institutional enforcement: the AI governance system keeps a logging and enforcement presence here, thinner than in upper layers but functional. The 1% signature threshold scales to -2's population. Expert panels draft regulations; 80% direct ratification enacts them. Districts of one million residents are redrawn annually. In practice, -2's mixed population of punitive residents, voluntary frontier entrepreneurs and private security operators produces petitions on resource allocation, territorial dispute frameworks and infrastructure standards. The private security firms and cooperatives that already keep order in well-run districts often become the constituency behind regulatory activity, formalizing by petition what they were already enforcing through reputation and territorial control.

-2 is the system's clearest statement that predatory harm carries permanent environmental cost. The restoration infrastructure is still present; victims still matter here. What is gone is the presumption that a predatory actor deserves the same ambient protection as the people they harmed.

Alternative Story — The Lower Restrictions Layer

Simulation Type: Resident Profile · Classification: Frontier Entrepreneur · Outcome: Prosperous Self-Made Life in -2 — Permanent Resident

Doctrine Snapshot: v9.0

Marcus Webb is 52 years old and runs the most reliable private security operation in his district. He has forty-three employees, three armoured vehicles, and a reputation that took eight years to build and that he guards more carefully than anything else he owns. In -2, reputation is infrastructure; there is no institutional backstop if yours fails.

He descended eleven years ago after a conviction the system classified as aggravated coercion, a physical confrontation that crossed the threshold the VMSS enforcement model defines without nuance or negotiation. He does not dispute the classification. He made a choice; the system responded. The asset liquidation was clean, the layer reassignment immediate and permanent, and he arrived in -2 with his physical capability, his organizational instincts, and nothing else of material value.

He spent his first six months learning the environment the way he had learned every other: watching who had power, how they held it, and which gaps nobody was filling well. -2 had no shortage of people holding power through intimidation. It had almost nobody holding power through reliability, people who showed up when they said they would and whose word meant something because breaking it had consistent consequences that did not involve violence.

He started with four people he trusted and a simple offer to a district merchant who had been paying three different protection arrangements and getting inconsistent results from all of them: one arrangement, one price, a guaranteed response time. He would show up or refund the week, with no exceptions. The merchant took the deal. Word traveled fast and thoroughly, as it does where institutional trust is absent, because reliable information about who can actually be counted on is one of the scarcest commodities in -2.

His operation grew because he was the most operationally consistent presence in the district; physical formidability was not what built it. Most private security in -2 runs on intimidation economics. Webb saw early that merchants and residents wanted predictability, so he made predictability the product and kept force as the backup.

By year four he had expanded into two adjacent districts; by year seven he had a formal tiered service structure. His qualifying employees collected the -2 primary job subsidy on top of their wages, working structured 20-hour security shifts and spending the rest of their time as they chose. The subsidy kept his labor costs manageable and his employees more stable, which cut turnover in an industry where it was typically brutal.

He lives in a secure, properly maintained compound in the best part of his district, with the quiet comfort of having solved safety and income and having had several years since to think about other things. He has a small library, and he cooks. Two employees whose only job is to maintain the compound and prepare meals are both on 20-hour qualifying weeks and spend the rest of their time on their own interests.

The edge case in his simulation comes in his ninth year, when a larger operation from an adjacent district tries to absorb his client base through underpricing and implicit threats. He is tempted to answer with the same intimidation economics, and his implant logs the intent signals with clinical precision. He does not act on them. He calls every client individually instead, and seventeen of his twenty-two clients sign extended contracts within the week. The competitor's underprice offer collapses, and its implicit threats lose their leverage once it is clear Webb's client relationships rest on something the competitor cannot quickly replicate.

His STI sits at 38. Within -2 that is a meaningful social signal, though it leads nowhere else, because behavioral reputation is one of the few currencies that transfers across district lines without being earned from scratch. People who have not dealt with him directly have heard enough to know what to expect.

When a younger resident asks him in his tenth year what he would tell someone just arriving in -2, he does not hesitate. He talks about the gap between what people need and what currently exists to serve them, and about showing up consistently in an environment that has taught everyone to expect the opposite. His advice is to find the thing nobody is doing well and do it better than anyone. This place has more of those gaps than anywhere else in the civilization, and he calls that an opportunity rather than a punishment. Eleven years in, he means it without qualification.

Key lesson: Permanent reassignment closes the upward pathway, but not everything else. The qualities that make someone dangerous in the wrong context, such as drive, organizational capability and a willingness to operate outside institutional structures, are the ones that build something real where institutions have stepped back. -2 is permanent, but what you build there doesn't have to be small.