Trust series · Origin (the foundational outline). The individual side covers “how you should walk”; the group side covers “where the era is heading.” Neither answers the more fundamental question: What is trust? Why must people trust? When trust collapses, why does it push people to two extremes? And why can this crack never be sewn shut in a lifetime? This piece supplies that foundation. Positioning: this is not a supplement to the other two essays — it is their common ground. Once it is in place, the “vacuum period” and the “recasting period” stop being asserted facts and become derivable conclusions. Reading order: not mandatory. To build the coordinate system first, start here. To see conclusions first, read the individual and group essays and come back — this piece nails their assertions into conclusions. The three interlock. Four writing rules: ① this is a model, not a law of history — a tool for understanding, not an object of faith; ② every universal claim carries its own limits — “I have repeatedly seen this shape” replaces “it has always been so”; ③ this essay takes no side — quite the opposite: what it shows is that the two torn ends share the same lesion; ④ it uses no private engineering cases, only everyday experience common to all humanity as anchor points.

0. Opening: Catch an Unthinking Gesture First

In an elevator, a stranger finishes tapping his badge and hands you what he’s holding, asking you to hold it for a second. You take it.

You’re standing in a queue with a complete stranger behind you. You are not guarding against him at all times — you default to the assumption that he’s just standing in line, that he won’t suddenly do anything. You wait, at ease.

These are two things you do every day without ever asking why. They share one feature: no deliberation. You never ran an analysis of “is this person trustworthy” — your hand was already out.

But the same action, in a different setting, flips your reflex instantly. Late at night at an intersection, a stranger walks toward you; on the phone, a stranger asks you to read out your verification code. Now your body alerts before your brain does — muscles tighten, hair stands up, and the machine called “trust” delivers a verdict in a fraction of a second: unpredictable, withdraw.

Notice the detail: receiving the object and guarding against the stranger happen in the same person. It’s not that this person trusts some people and guards against others — it is one machine, switching outputs rapidly depending on context. That machine is the protagonist of this essay. What this essay takes apart is the machine itself: where it comes from, what it runs on, and what happens when it breaks.

Phenomena first, naming second. Now we begin naming.

I. Reasoning from Instinct: Trust Is a Survival Apparatus, Not a Moral Virtue

1.1 The Species’ Factory Settings

Start with a fact that isn’t romantic: the human species is not born capable of living as an individual unit.

No fangs or claws, slower than most prey, an appallingly long childhood — an isolated human can neither gather enough food, nor protect children, nor survive several winters. Humans survived not because individuals are strong, but because humans invented a way of survival called “the group”: division of labor, cooperation, mutual lifting. One person hunts; a group drives the hunt. One person keeps watch; a group sleeps.

So note the order here: it is not “the individual surrenders to the group.” It is: the individual’s route to survival must itself pass through the group. Gregariousness is not a preference; it is this species’ way of surviving, period. We usually treat “social animal” as a biology label, but its meaning is concrete: part of your food, your safety, and your offspring is never held in your hands. It is held in other people’s hands.

1.2 The Hidden Cost of Living in Groups

This is the cost of gregarious life, and the most easily missed: once you live at the scale of the group, you are, at every moment, handing part of your life to others.

After handing it over — on what basis do you stay alive?

There is only one answer: you must be able to judge “how will others treat me.”

  • Others’ behavior predictable → you can plan → you dare cooperate → you live;
  • Others’ behavior unpredictable → you cannot plan → every act of giving might be fed to the dogs → you dare not cooperate → you cannot survive.

So here is the nail this essay drives in:

Trust is a gregarious species’ dependence on the predictability of others’ behavior. It is not a moral virtue. It is a survival apparatus.

More trust or less trust is, at bottom, higher or lower predictability. A “trust-abundant” society is not one with better people; it is one whose behavioral system is more predictable — what you hand out will most likely be caught; what you sign will most likely be honored. A “trust-thin” society is not one with worse people; its behavioral system has become unpredictable — the same action, and the outcome is a lottery.

1.3 Then What About Morality, Integrity, Goodwill?

They are parts on this apparatus, not the apparatus itself.

People prize honesty, promise-keeping, and kindness not because they are sublime beyond utility, but because they have an extremely practical effect: they make others’ behavior computable. A person who keeps promises is predictable to you; a person of goodwill requires no guard in advance. Morality’s real social function is to supply predictability.

Mistaking the part for the whole is the first misunderstanding this essay dismantles. We are used to saying “this person has no morals,” as if the root of the trust problem were moral decline. But morality is the lubricant that maintains predictability, not the chassis itself. The chassis is another layer. That layer is what the next section takes apart.

1.4 Clearing the Ground of a Misreading

Luhmann, Zheng Yefu, and Fukuyama have thoroughly argued trust’s function for society. This essay will not repeat the consensus that “trust is a useful social mechanism” — it is already public property. What this essay wants to cut open are two under-explored things: what happens after this survival apparatus breaks down; and why, once a security model is written in, it is extraordinarily hard to rewrite. The public bones belong to the public; these two cuts are what this series aims to add.

II. Collapse: Predictability Snaps, and People Panic First

2.1 What a Trust Crisis Actually Is

We can now define “trust crisis” without vagueness:

A trust crisis is not that human hearts turned bad. It is that the supply of predictability got cut off.

The old sources of predictability — acquaintances’ guarantees, reputation, personas, verbal promises, authoritative endorsements — fail en masse; the new sources — contracts, evidence, process, third-party verification — have not yet grown up to catch people. The interval in which you can rely on neither is what the other two essays call the vacuum period (individual side) and the recasting period (group side): the two sides of the same window.

By this point it has finally stopped being an asserted fact and become a derived conclusion: predictability supply cut → no one can plan → no one dares cooperate → defense, guard, and suspicion become the default. The age of peak suspicion is not the age of the worst hearts; it is the age when the survival chain is most thoroughly severed.

2.2 Suspicion Is Expensive, Low-Grade Fuel

Here is a mechanism worth pausing on: when the supply of predictability is cut, a person does not cancel the need “I need predictability.” The need remains. It is still hungry. It merely switches to a low-grade fuel.

That low-grade fuel is called suspicion. Its logic: if I default to “no one can be trusted,” then at least “he is probably untrustworthy” is a stable expectation — I can at least plan on that basis (full defense). So suspicion is not the absence of defense; quite the opposite, it is an extremely expensive predictability purchased with defense: every act of guarding is wear, every confirmation of “untrustworthy, as expected” is self-verification. When trust goes hungry, what people stuff into the machine is precisely this fuel that makes it hungrier the more you feed it.

This explains something you have long observed: why the defensive attrition and emotional overdraft of a crisis era cannot be stopped. Because it is not a bad habit — it is a starving machine eating low-grade fuel. You cannot fill a starving machine by “telling people to be optimistic.” You have to first let the machine believe the grain is coming.

A boundary, so suspicion isn’t painted as pure error: in environments where predictability is genuinely low, moderate suspicion is a necessary survival strategy, not a defect. Its only problem is one thing — being adopted as the permanent default. “Guard first” as an occasional response is useful; “no one can be trusted” as a factory setting, and the attrition never stops. Whether suspicion helps depends on preconditions — that sentence itself is condition theory.

2.3 Why Reasoning With People Fails at This Moment

Here is this section’s most uncomfortable inference: when a person’s survival chassis is shaking, telling them “you should believe in good things” is like telling a drowning person “relax first.”

It is not that they refuse to trust. It is that they dare not. In an environment where predictability has been cut off, trust is not a choice for them; it is a survival risk. We often misread this “daring not to trust” as coldness, cynicism, moral decline — and then blame each other’s hearts. But in this essay’s framework, that is a survival system protecting itself: it would rather starve than stake its last chips on an unpredictable world.

Seeing this clearly is the ground for everything that follows: a trust crisis is, first, a survival event; only second, a moral event. Get the order backwards and every prescription will be wrong.

III. Divergence: When the Chassis Shakes, People Run to the Two Ends

3.1 The Question Everyone Must Answer

When the chassis shakes, everyone is forced to answer the same question: which side do I stake my chips on?

Note: this is not a moral exam. It is a survival exam. And most people don’t answer it by thinking — the answer snaps out of them, the way receiving the parcel or guarding against the stranger does. No deliberation.

Let us fix the limits first, so this isn’t misread as “the world has only two kinds of people”: the people who actually reach the two extreme endpoints are a minority. The overwhelming majority stand in the middle — rule-abiding in some situations, tempted across the line by some temptations; craving order, yet afraid of extreme measures. These two “camps” are not two portraits of people; they are two forces. Their real use is to illuminate the two pulling forces inside everyone in the middle. See the two endpoints clearly, and how the middle gets pulled is all clear.

3.2 One End: The Profit-Through-Decay Camp

The first force points this way: since no one keeps the rules anymore, I will be the one who doesn’t.

This is the most easily misunderstood camp — we usually just call them “bad.” But in this essay’s framework they are not merely a moral option; they are a survival mode. The ingenuity and the viciousness of this mode live in the same place: what he earns is, in fact, the money of “other people still keeping the rules.”

In a vacuum of order, the rule-abiding become predictable, and the predictable become harvestable. What the line-breaker harvests is precisely the rule-keeper’s predictability: others keep promises, so he can defraud; others queue, so he can cut in; others are honest, so he can squeeze. He turns other people’s rule-keeping into his own revenue source.

And this mode has a deeper property: it feeds itself by lowering everyone else’s survival chassis. Predatory survival is not satisfied with a one-time kill; it wants a sustained harvesting source — and for the source to persist, the harvested must be kept in a “harvestable” state. So in environments where it holds the advantage, the common shape is: people become poorer, more dependent, less able to leave. This is not to say every predator deliberately manufactures poverty (that would be motive-guessing); it is to say the structure of harvesting naturally trends toward this outcome. The more miserable the harvested, the stabler the harvester. So this camp is not merely “going bad.” It is remodeling the environment into a shape that is easier to harvest.

(A limit: this describes no particular country or era. It describes a mechanism. Anywhere in a vacuum of order, any gain obtained by “turning others into harvestable objects” is this mechanism running. The small things around you and the large things in history are the same engine.)

3.3 The Other End: The Obsessive-Order Camp

The second force points exactly the opposite way: I cannot endure the chaos for one more day. Order must be taken back by the most thorough means.

This camp is also commonly misread — we say they are “too extreme,” “black-and-white thinkers.” But in this essay’s framework, his craving for order is not fastidiousness. It is fear: in an unpredictable world, he cannot survive. Gray is not, for him, “tolerable ambiguity.” It is “the abyss of the unpredictable.” So he demands an absolute, black-and-white order that purges every shade of gray — because gray equals unpredictable, and unpredictable equals death.

He is willing to use the most extreme means for this, including war. Not because he thirsts for blood, but because on the scale in his chest, order outranks everything — including people. In his eyes, to end the unpredictable, any cost is acceptable. He is not committing evil for its own sake; he is saving himself by means of evil, and he sincerely believes it is salvation.

Here a bridge must be built first, so we don’t jump straight from “one person’s fear” to “collective war”: the one willing to take up arms is never an isolated obsessive. The model is not a private possession — the same era pours the same unease into an entire generation’s bodies (next section). Only when a crowd carrying the same model presses the switch together does fear acquire the scale of war.

One clarification, to avoid misfiring: pursuing order, hoping to rebuild predictability — nothing wrong with that in itself. The core lesion of the obsessive-order camp is not “wanting order.” It is believing one path: that risk can be eliminated once and for all by thoroughly purging every gray zone, every uncertain individual. Ordinary people expecting rules, contracts, justice — that is a healthy demand, a different thing from the lesion. Only when a person concludes “to eliminate uncertainty, I must eliminate the people who carry uncertainty” does he fall into this model.

Within this camp, one more split: those who genuinely want to rebuild order, and those who use order as a pretext to seize power. The former are fear-driven; the latter power-driven. The terrifying part is that both end in the same motion — because once a genuine rebuilder takes over “the rebuilding,” his own model pushes him forward (the mechanism, next section). So the question in the group-side essay — “who supervises the rebuilder?” — is not a reminder. It is a necessary question the model’s mechanism forces into existence.

3.4 The Central Cut: Two Extremes, One Lesion

Now comes this essay’s most important cut:

The profit-through-decay camp and the obsessive-order camp are not the opposition of good and evil. They are the two extremes flung out when the same survival chassis shattered.

The two camps share one lesion — insecurity. Both believe they are saving themselves; in fact both chase the same thing by opposite means: safety. The decay camp seeks safety by “freeing myself from all rules”; the order camp seeks safety by “subjecting everything to absolute rules.” One wants to demolish rules, one wants to weld rules shut — but what they fear is the same thing: rules failing, the world turning unpredictable.

The meaning of this cut: in a torn era, you stop joining any team. When you watch the two sides curse each other, what you see is not “who is more right.” You see two wounded people in the same hospital room, fighting over the same bottle of medicine by hurting each other.

A deeper observation: the two poles feed each other. The chaos the decay camp manufactures feeds the order camp’s fear; the order camp’s purges manufacture new victims and new chaos, handing knives to the decay camp. The split itself is how the two forces maintain each other. So once the split begins, it cannot be stopped by persuasion — its fuel is the shared fear of both crowds.

You don’t need to wait for a war to see this loop. Take a homeowners’ group in one residential compound where property management has changed hands several times: each change brings a round of settling accounts with the old firm, a round of watchfulness toward the new one; eventually, whenever anyone proposes anything, the first comment is “what’s his angle.” No war, no purges — the same mutually-feeding loop, turning as smoothly at the scale of a few hundred households as it ever did in history.

IV. Fixation: Why This Crack Never Closes in a Lifetime

4.1 The Security Model: Written Once

At this point one deeper question remains unanswered: why are these two extremes so stubborn? Why does history replay the same script while every generation jumps into the same pit?

The answer is one word: model.

Every era pours a “security model” into its people. This model specifies the most basic default settings: what kind of world counts as safe, who is trustworthy, who should be guarded against, whom to suspect first when things go wrong, whether people are by default benign or by default dangerous.

These defaults are not thought out. They are written directly into the body, during a person’s formative years, by the real conditions of the environment. Those whose youth was stable carry models reading “the world is safe by default; people are benign by default.” Those whose youth was turbulent carry models reading “people cannot be trusted; survival first.” One great upheaval brands the same groove into an entire generation’s bodies.

This language of “model / pour-in / repaint” belongs to the same family as the “instinct-hijack / checkpoints / ruler” set in The Inner Side of Happiness (《幸福的内在》): there, the program is what the species pours into every person; here, it is what the era pours into every generation. Two pours, one mechanism. The difference is scale: instinct took hundreds of millions of years to write; the security model takes only decades — but it, too, walks with you to the end of life.

4.2 Left Hand, Right Hand: Irreversible for Life

And once this model is written in, it is irreversible for life. This is the essay’s central mirror — your dominant hand:

Just as you can never switch from your right hand once you’ve habituated it. You can train your left hand to assist, train it to be quite dexterous — but in the instant of writing, eating, or grabbing for your life, what shoots out is the right hand. The security model works the same way: later refinement, reading, awakening — all of it is repainting. It does not touch the foundation. Repainting is not useless — it makes behavior decent, lets a person observe themselves — but it cannot change the foundation’s shape.

What you expose in your most panicked instant is forever the base color your era poured. A person who grew up in turmoil, who then spent a lifetime reading and cultivating until his speech and bearing were transformed — in the instant he hears a strange noise at night, he is still the person who “reaches for the knife first.” Not because he is a hypocrite, but because that is how his foundation was poured.

“Irreversible for life” is meant functionally, not as a neuroscience claim: you cannot return to the “never-poured” state — your immediate reactions will keep defaulting to the old track. But the brain can learn new things; you can absolutely learn to pause one more second after the reaction, to ask one more question. What is irreversible is the primer, not the cloth itself.

This explains something: why two people can read the same new event in nearly opposite ways and neither can persuade the other. It is not right versus wrong; it is two models outputting. The one raised in turmoil reads “it’s starting again — hide.” The one raised in safety reads “let’s look first — probably nothing.” Both believe they are awake. Both are being translated by their own models.

4.3 Outside First, Then Inside: Why Purges Cannot Stop

With this model, look again at that recurring shape in history so often attributed to “power struggle” or “unknowable hearts,” and it becomes much clearer.

I have repeatedly seen the same shape: a rebuilder of order comes to power and first purges the visible dissenters — the obviously different, the disobedient, those who threaten order. Once the surface is uniform and everyone is “one of us,” the purge does not stop. It turns inward, hunting among his own for “those who might think differently.”

Why can’t it stop?

Because this purge machine’s engine is not external. It sits inside him, in the location of his own insecurity. What he wants is “everything under my control, no source of uncertainty anywhere.” But the real source of uncertainty is not outside. It is that spot in his own chest that forever feels some fish slipped the net. So the process is necessarily: purge the outside, the targets run out, the unease remains; he then manufactures a new target inside and keeps purging. Outside first, then inside; inside has no bottom.

Here we can connect to Girard’s scapegoat mechanism — humans need an identifiable “source of calamity” to carry anxiety that has nowhere else to go. What this essay wants to point at is the engine behind the scapegoat: the self-maintenance of the insecurity model. For the model to live, it must keep finding evidence that “a threat remains”; if it cannot find one, it manufactures one. This is not the evil of some individual. It is an automated process of a wounded model.

4.4 The Boundaries That Must Be Nailed Down

Having come this far, we must stop and nail the boundaries down, or this essay will slide somewhere it should not go.

First: this is a recurring shape, not an iron law. Human history also has eras with relatively healthy models that did not maintain themselves through purges. Whether a model is healthy depends on whether an era held up its people’s supply of security — where supply was ample, the model did not need to manufacture enemies; where supply was cut, the model found an enemy for everyone. Do not read it as “every dynasty did this.” Read it as: whenever security supply is cut, this shape raises its head.

Second: this essay evaluates no specific regime or figure. It describes a mechanism; it attaches no label. Any reading that tries to fit this framework onto a specific contemporary target misuses it — this is an observation lens, not a verdict. This rule is the same one written in the group-side essay.

Third: the value of seeing the mechanism clearly is precisely its use. Because if the security model maintains itself by “manufacturing enemies,” then any narrative proclaiming “there is one common enemy; purge it and we are safe” deserves one extra question: is it solving insecurity, or feeding its own model? That question extends the fifth question of your precondition theory — whose hands does it put the microphone into?

Fourth: this is a model, not the whole explanation of history. Real historical events are always the layered product of power contests, conflicts of interest, external wars, institutional inertia — never driven by one psychological model alone. This essay extracts one driving force — usually the one hiding behind every banner — but it never pretends to be the whole. Reducing everything to “the security model” is the same over-simplification, and this essay will not carry that bag.

Finally: leave the model an opening for being overturned. Its validity has conditions: if a large number of cases of order-rebuilding under security famine that did not slide into purges can be found, this shape fails. A model that writes out its own falsification conditions qualifies as a tool — is that not exactly what your precondition theory teaches?

V. Turning the Lamp on Myself: The “I” Writing This Also Carries a Model

At the close, one thing must be done: turn the lamp on myself.

In section one I said “trust is a survival apparatus.” In section three, “two extremes, one lesion.” In section four, “the model is written once and is irreversible.” So — who is speaking these words?

A model poured out by some era is speaking.

That I can see the “survival / predictability” layer at all is very likely because my own generation lives at the scene of predictability’s fracture. The scene let me see the chassis. In an era with ample security, perhaps no one would ever feel that “trust” needed to be specifically taken apart — it would be too natural, natural to the point of needing no explanation. So this essay is not transcendent truth. It is a model carrying its era’s body heat. It is useful because it stands on the same scene as its readers. It will not be useful forever.

But knowing the model exists is the model’s only escape hatch.

I cannot change my foundation — the dominant hand cannot change. But I know which foundation I stand on. So after “the most panicked instant” has passed, I can say one sentence to that instant’s reaction: that was my era speaking, not me. That sentence buys a little room to maneuver: I cannot block my first reaction, but I need not mistake my first reaction for the whole of “me.” Repainting does not move the foundation — but the person repainting at least knows what ground lies under their feet.

This “model” has an even deeper home: it is your precondition theory, in its version inside the human heart. Precondition theory says the era sets preconditions for thought — conditions must match for it to hold. This essay says the era also sets preconditions for every person — not at the level of thought, but at the level of security. Behind a person’s judgments, positions, and alignments there stand not only social conditions but the security conditions written in early. Two sets of conditions speak at once; count only the former and you will miss a person’s deepest reason for taking a side.

This is also why the trust block has three essays. Seeing the origin clearly (this essay), the individual side knows where to stand (how to change currency, how to avoid pits and ride momentum), and the group side becomes legible (how to read where the era goes). The origin essay is not a “first layer of truth” pressing down from above. It is the ground that keeps the other two from hanging in the air.

Epilogue: A Question Left for the Reader

This essay described a machine: it runs on predictability; when supply is cut it starves; starving, it runs to the two ends; and the shape of its running gets welded in by the model.

Finally, by the custom of this site, the other half is left to the people living inside it:

What is your “that instant”? — At what moment did you first feel “this world is no longer the one I grew up young in”? That was the first time your model got nudged by the era.

We provide no standard answer. Because the answer is not in the essay; it is in tens of thousands of real lives. Once you see your own model clearly, it stops being “fate” and becomes a “known condition” — conditions cannot be changed, but knowing where the conditions are, a person can decide where to put their foot down.

Further Reading

  • For the sentence left unfinished here: Trust · On Ethics (upstream · the supply side) — section 1.3 said “morality is a part, not the chassis; that layer is dismantled in the next section.” That dismantling lives there.
  • Read it first, then return for the foundation: Trust Crisis · Precondition Theory (individual side) — how to walk through the vacuum period: six pits, five currents; weighing, avoiding, riding.
  • Then the group half: Trust Crisis · Group-Side Observation (group side) — where the era goes in the recasting period: seven symptoms, one sociological index.
  • Dig deeper downward: The Ladder of Civilization — feeding and cooperation: why trust is the foundation of this civilized ground.

This essay also has an audiobook version (7 episodes, 26 minutes), playing continuously with seven other books on the audiobook page.

Completed September 2026. This essay is a model, not a law of history — every mechanism in it is a tool for understanding; of the same origin and scale as Trust Crisis · Precondition Theory and Trust Crisis · Group-Side Observation: every claim carries its preconditions first.