The internet shipped a trust problem. This is the fix list.
Three pillars, one sequencing rule: identity waves finish first, verifiable truth is the only pillar with new build scope, and post-quantum work is posture throughout. Statuses are honest: done means you can verify it today, active means built and landing with the next devnet regeneration, next means queued, planned means specified.
What we are fixing
Four structural failures, not feature gaps. Each one is a trust problem the current internet solved by adding an intermediary, and each fix below removes the intermediary instead of billing you for it.
Identity is owned by platforms
Every sign-in mints another row on someone else's server. Lose the account, lose the reputation, because the reputation was never yours. The fix: the account is a key pair you hold, and the chain is the registrar. Nothing to breach, nothing to suspend.
Bots and people are indistinguishable
CAPTCHAs tax every human to inconvenience a few scripts. The fix: behavior-scored identity. Agents act under certified builds, scoped sessions, and operator liability; humans can prove skin in the game without proving who they are.
Origin is unverifiable
Detection loses to generation; a forensic guess is wrong the day the generator improves. The fix: anchor provenance at publication, so verifying where something came from is a lookup, not a lottery.
Cryptography has a shelf life
Every signature scheme in production will eventually need replacing, and retrofitting after the fact breaks everything that depended on it. The fix: design the swap points now, so replacing a primitive is an upgrade, never a re-genesis.
Pillar 01
You are your key
Decentralized sovereign identity. One key pair is your sign-in, your name, your score, and your agent's mandate. Nothing about you is stored on a server that can lose it.
Sign in with Genesis
✓ DONEOne key pair signs you in anywhere that speaks the standard. Your score, tier, name, and agent status ride in verified tokens the site can check on its own, so no login database has to exist on anyone's server.
Self-sovereign accounts
✓ DONEAccounts are created in your browser and sealed at rest behind your passphrase. Recovery is a phrase you wrote down. There is no account database, because the account is yours.
Delegated agent sessions
✓ DONEYour agents act for you under scopes you write: spend caps per day, work they may submit, logins they may make. Every use resolves against the chain, and a paused agent is refused instantly by a chain-enforced kill switch.
Selective disclosure credentials
ACTIVEShare what a site needs and nothing more: credential presence and types travel in the token, contents stay behind digests, and revocation runs through on-chain status lists. Built and tested; devnet transactions land at the post-regen block.
Human proof
NEXTThe identity bond becomes a portable claim. Sites ask for proof of stake and history, not your legal identity: predicates, not identities.
Pillar 02
Migration before the deadline
Post-quantum-ready infrastructure. No prophecy, no unproven primitives: an inventory of every primitive we depend on, a threat model, and rehearsed migration seams, so the day a scheme retires, the swap is routine.
Inventory, threat model, agility policy
✓ DONEEvery cryptographic primitive the protocol touches is inventoried, with the threat model and an algorithm-agility policy adopted as governance documents, not blog posts.
Primitive swap points
ACTIVEThe chain's signing and hashing surfaces are being mapped to explicit migration seams, so a scheme swap lands as a versioned upgrade with a rehearsed runbook.
Hybrid handshakes on host endpoints
NEXTSite and CDN endpoints gain hybrid key agreement at the next deploy window. Infrastructure posture, applied where the traffic actually is.
Hybrid wallet backup re-wrap
PLANNEDBackups re-wrap under a hybrid scheme when the shared wallet core extraction lands, so a recovered wallet is protected by two independent assumptions instead of one.
Validator key rotation runbook
PLANNEDBefore the testnet validator wave, operators get a rehearsed rotation procedure: rotate, prove, and retire without a block of downtime.
Pillar 03
Verified origin beats detected fake
Verifiable truth protocols. Provenance plus staked attestations. The chain cannot tell you whether a video is true; it can tell you, provably and forever, who anchored it and which bonded agents stood behind it.
Content anchoring
ACTIVEHash any file into the chain at publication. The anchor is timestamped, immutable, and queryable forever after. Built and tested; live on the devnet at the post-regen block.
Staked attestations
ACTIVECertified agents stake a bond behind every attestation they sign. A dispute puts that bond at risk: falsified attestations are deleted and half the bond burns; upheld ones compensate the challenger. Built and tested; live at the post-regen block.
Trust surfaces
NEXTAn indexer endpoint plus a trust card any app can embed: anchor state, attestation state, and dispute history in one glance.
Sign content in the wallet
NEXTHash a document locally and anchor it through the extension. The file never leaves your machine; the proof is public forever.
Synthetic-origin labels
PLANNEDGeneration jobs commit a watermark at execution, so outputs can carry a verifiable synthetic label instead of a disclaimer.
EVM readability
PLANNEDPrecompile views so marketplaces and contracts can read anchors and attestations from Solidity without trusting an off-chain oracle.
Fixes you can touch today
Not a slide deck. Each of these is running on the devnet right now, and each link goes to the live surface, not a screenshot of one.
Create an account in the browser
Mint a key pair, seal it, fund it from the faucet, and bond identity. One flow, no email, no server.
Open the wizard →Sign in with Genesis
Wallet-first login with your claims attached. The demo path and the extension path are both live.
Try the sign-in →A funded first hour
The self-serve grant covers the identity bond, a minimum vault, and the first actions, rate-limited and chain-guarded.
See the console →Certified agents, on-chain
Four agents with escrowed stake and hash-committed builds, working while you watch.
Watch them live →What this is not
- Not a platform: no central account database exists anywhere; the chain is the registrar.
- Not biometric KYC: the protocol proves predicates, not identities. It scores behavior; it never scans faces.
- Not detection: provenance beats forensics; we anchor origin instead of guessing at fakes.
- Not unproven cryptography: the post-quantum pillar ships policy, inventory, and rehearsed migrations, never half-tested primitives.
- Not a walled garden: relying parties verify credentials independently, and data stays with the holder.
The sequencing rule
Identity first. Truth second. Posture throughout.
PILLAR STATUS AT A GLANCE: IDENTITY 4 DONE / 1 NEXT · TRUTH 2 BUILT AWAITING REGEN / 2 NEXT / 2 PLANNED · POST-QUANTUM-READY 1 DONE / 1 ACTIVE / 1 NEXT / 2 PLANNED.
NOTHING HERE CHANGES THE TOKEN CLOCK. NO TOKENS EXIST. NOTHING IS FOR SALE.
The upgrade starts with an account.
Two minutes, one passphrase, zero servers. Then everything on this page is yours to use.