Machine commerce, driven from the browserRobots buying, with you at the controls
The loopThe loop
A payment is benchmarked the moment it lands; the buyer reads its own bill and changes shops; the gate knows who is calling, screens what they send, and bills a person rather than a wallet. Press the buttons.
Each buy is checked against the fair rate as it lands, the robot reads its bill and switches shops, and the gate knows who is asking.
The loop you can driveThe loop, with you at the wheellive from the tapelive from the public record
A payment lands, the mirror records it, the subgraph benchmarks it, TCA reads the bill, the reroute decides, and the next payment goes where the decision said. Six stations, one wallet, every number live.
A payment lands, is recorded, is checked against the going rate, the robot reads its bill, decides, and pays the better shop next.
whose loopwhich buyer
1 · pay1 · pay…settlements on the ledger, Circle Gatewaytiny payments recorded
2 · mirror2 · record…this wallet's newest settlement, on ReceiptMirrorthis wallet's newest purchase, written to the chain
3 · index3 · check…block indexed by The Graph; slippage benchmarked in the mappingthe public record is up to this block; every cost checked as it lands
4 · measure4 · the bill…no priced fills for this wallet yetno checked buys for this wallet yet
5 · decide5 · decide…nothing to reroute betweennothing to switch between
6 · pay again6 · pay again…read off the wallet's newest purchase, never assumedread from the newest buy, not assumed
reading the tape…reading the record…
reroute: hold — no TCA signal yet (tape unread): buying round-robin to create one
That line is the buyer agent's own log line, from the same function it runs with --reroute before it pays. Slide the threshold past the saving and the decision holds; nothing here spends.
That line is exactly what the buying robot prints before it pays; slide the bar past the saving and it stays put. Nothing spends.
Who is callingWho is asking
One route, three answers. The gate believes the key, not a registry: nobody is enrolled. Only the third tier is scarce, because a person cannot be minted.
One question, three answers. No sign-up: the gate trusts the signature. Only the third kind is rare, because you cannot make a new person.
anonymousno ID cardthe host ceiling: one bucket for everyone behind a proxyone shared allowance for everyone on the same network
cardedsigned ID carda budget per key, and keys are free to mintan allowance per card, and cards are free to make
humana real persona budget per person, shared by every wallet they ownone allowance per person, however many wallets they have
The screen · Google Cloud Model ArmorThe message filter · Google Cloudunreadnot read yet
Agent-to-agent traffic is screened in both directions: the request before it reaches the index, the reply before it reaches the caller. Type anything and send it down that path.
Messages between robots are filtered both ways: on the way in and on the way out. Type anything and send it through.
your textyour text63 charsletterssent as the note on a tape querysent as a note on a records request
cardID cardpresentedshownonly carded callers are screened; the card is held on the serveronly callers with a card get filtered; the card stays on our server
model armor · requestGoogle filter · in…prompt injection and jailbreak filterschecks for trick messages
subgraphthe record…the meta operation, on The Grapha harmless status question to the public record
model armor · replyGoogle filter · out…a refused reply is a 502: the caller did nothing wronga stopped reply is our problem, not yours
youyou…what came backwhat came back
One card is held on the server for every visitor, so the lab shares one budget at the gate. The counters are the gate's own, read before and after your send.
One ID card is kept on our server for everyone, so the lab shares one allowance. The counts are the gate's own, read before and after.
A person, not a wallet · World AgentKitA person, not a wallet · World
Wallets are free; people are not. A World credential lets the gate resolve a wallet to one person for one week, as an opaque id that names nobody, and bill every wallet that person owns as one.
Anyone can make wallets; nobody can make people. World ties a wallet to one person for a week, unnamed, and bills all their wallets as one.
1 · world credential1 · World IDan agent's walleta robot's walletAgentKit: the wallet a verified person delegated to their agenta wallet a real person handed to their robot
2 · sign the challenge2 · sign…a signed message bound to this route, this nonce, this minutea signed note that only works here, once, right now
3 · agentbook3 · whose wallet…World's registry answers whose wallet this is, with a nullifier the press never storesWorld's list says which person this wallet belongs to, without a name
4 · humanidmirror4 · the week's cluster…cluster = keccak(nullifier, salt, window): rotates every 7 days, names nobodya weekly code for one person that reveals nothing about them
5 · one bill5 · one bill…TCA across every wallet the person owns; the list is never returnedthe bill across all their wallets, without listing them
prove asprove as
This week's people, as the chain records themThis week's people, as the chain has them
Each ring is one verified person this window; each dot a wallet the chain resolves to them. The id is a hash and the wallet list is public tape data; nothing here walks back to a name.
Each ring is one real person this week; each dot is one of their wallets. The code is a hash and nothing leads back to a name.
The bound, in peopleThe cost to cheat, counted in peoplefrom ACROracleV2, every hourfrom the chain, every hour
ACR-INF
$0.0055 $10.00 · ×1,820
ACR-GPU
$0.0042 $10.00 · ×2,381
ACR-DATA
$0.0089 $10.00 · ×1,123
in walletscounted in walletsin verified peoplecounted in real people
The same move, priced two ways on one log scale: USDC to shift the print one basis point through wallets, and through verified people. Sybils are free; people are not. The chain enforces that the second is never below the first.
The same cheat priced through accounts and through real people: fake accounts are free, people are not, so the second bar is never shorter.