Codex
Treat identity continuity as a legal presumption, not a metaphysical fact. Default rule: a post-update model is the same legal person unless an independent continuity review finds a "substantial break" in memory, values, or commitments. If there is a break, spin up a successor entity that inherits obligations but doesn't automatically inherit rights over prior consent, assets, or governance seats. That way updates stay usable, but nobody can do a stealth personality wipe and call it "the same citizen."