build
what can you
make with it?
Working examples, all in the repo, all tested. The trick they share: none of them has its own security code. The system's rules — money adds up, keys never grow, everything leaves a receipt — do the protecting, so an app can't have a security bug in a layer it doesn't own.
markets, without middlemen
Escrow tradesTwo strangers trade safely: pay into escrow, ship, settle. If the seller ghosts, the buyer reclaims. Value can't leak or appear along the way.works
Sealed auctionsSecret bids, simultaneous reveal, fair award. Changing your bid after committing isn't cheating — it's impossible.works
An AI fund you auditAn AI trades a fixed budget: every price it acts on carries evidence, over-budget trades are refused, and a faked track record fails the audit. Paper-trading only, on purpose.demo
votes that count
Elections you can checkOne person one vote, enforced by math: double votes bounce, stuffed counts are refused, a dropped ballot is detected — and anyone can re-check the tally.works
A judge nobody ownsAn AI arbiter that can't be prompt-tricked (the manipulation is refused, provably) and answers to a supermajority — while a forged ruling counts for nothing even if every operator stamps it.demo
Group-owned infrastructureShared settings that only change when a vote passes — all at once, or not at all.works
games & stories with real rules
Fog of war, for realA strategy game where you provably cannot peek at the enemy's side — seeing it requires a key only they hold. You can't even choose to leak it.demo
An honest dungeon masterAn AI storyteller that can't be sweet-talked into cheating and can't hand out an item you didn't earn. Every scene is certified.demo
Stories a crowd steersReal votes pick each plot branch, and the whole playthrough can be re-checked afterward, beat by beat.demo
Documents that merge honestlyEdit together or offline; collisions become a clean side-by-side choice — never a silent overwrite.works
AI agents on a short leash
Lend a tool, safelyGive an agent a tool that expires Friday, works ten times, and touches one folder — limits that hold even if everything inside the agent goes wrong, because the system itself says no.works
Agents in locked roomsRent an agent in a real lockbox: one granted door to the world or none, every action metered and receipted, the whole run checkable offline — wifi off.works
An app store for agentsPublish, rent, review, fork. A forked agent keeps its family history, and a child can never hold more power than its parent.works
build yours ▓ start with the little key-value store — the hello-world where even a rolled-back write is refused by the system. the guide · run it in five minutes. Everything here is real, tested code — still hardening toward heavy load and true adversaries, and we say so.
the system says noreceipts for everything