OMXUS Press
Token System — Technical Specification v2.0
2026
4,057 words
~16 min read
15 chapters
OMXUS Press
2026
You're being asked to build something that sounds idealistic. I know. Bear with me.
The person driving this (let's call them "the architect") has a background in criminology, psychology, sales, and security. They've experienced the problems this system aims to solve — personally, not theoretically. They think fast, connect dots others miss, and will sometimes ask for the stars by tomorrow.
Your job isn't to say "that's impossible." Your job is to figure out what's possible now, what's possible soon, and what needs more thinking. This doc tries to bridge between the vision and the implementation.
The vision is: replace the systems that don't work (justice, governance, safety) with something that does, using technology that already exists.
The technical challenge is: make it real, make it resilient, make it unkillable.
Let's go.
Current systems (justice, governance, safety) share a flaw: the people making decisions are insulated from the consequences.
The result: 45% recidivism, $32B/year on a justice system that makes things worse, domestic violence that kills people weekly, decisions made by lawyers instead of engineers, poverty amid plenty.
Give every human a token, let them decide things on a proximity basis, and if they can't agree, make them swap lives until they can.
Every component exists:
We don't store data on Bitcoin. We store epoch roots — a single hash representing the state of the entire system at a point in time.
Bitcoin TX (OP_RETURN):
┌──────────────────────────────────────────────┐
│ TAG (4 bytes): "TOKN" │
│ EPOCH (4 bytes): monotonic counter │
│ ROOT (32 bytes): SHA256 of epoch header │
└──────────────────────────────────────────────┘
Total: 40 bytes per anchor
{
"v": 1,
"epoch": 1024,
"root": "mmr:HASH", // Merkle Mountain Range root of all objects
"prev_root": "mmr:HASH", // Previous epoch (chain continuity)
"object_count": 123456,
"da_roots": {
"ipfs_car_root": "bafy...",
"arweave_tx": "AR_TXID"
},
"witness_set": ["bls:PK1", "bls:PK2", ...],
"agg_sig": "bls:SIG" // BLS aggregate signature from witnesses
}
| Phase | Frequency | Cost (approx) |
|---|---|---|
| Pilot | Monthly | ~$5/month |
| Stable | Weekly | ~$20/month |
| Mature | Daily | ~$150/month |
Suggestion: Start with OP_RETURN. It's boring and works.
A capsule is a portable proof that you're a token holder. Works without internet.
{
"v": 1,
"her_cid": "cid:...",
"her_bytes": "",
"mmr_proof": ["HASH", "HASH", ...], // Merkle path to epoch root
"epoch_header": { ... },
"bls_agg_sig": "bls:...",
"btc_anchor": {
"network": "mainnet",
"txid": "...",
"height": 800000
}
}
Formats:
Verification (Offline):
1. Hash HER bytes → should equal her_cid
2. Verify MMR proof (her_cid → epoch root)
3. Verify BLS signature on epoch header
4. Verify epoch root matches Bitcoin anchor
All of this can be done on a phone with no internet connection, given the capsule contains all necessary data.
Rule of 4x replication: Each HER pinned by owner + 3 sponsors (automated).
The mesh is what makes the system unkillable and real-time.
| Component | What It Does | When It's Used |
|---|---|---|
| Yggdrasil | Overlay mesh, IPv6 addresses derived from public keys | Primary internet-connected mesh |
| Nebula | L3 mesh with certificates, lightweight | Structured networks, known nodes |
| BATMAN-adv | L2 mesh over WiFi/Ethernet | Local area, no internet needed |
| FRP | Reverse proxy for CGNAT punch-through | When you're behind carrier NAT |
| Eternal Terminal | Session persistence across network changes | SSH/remote access that survives chaos |
Key insight: We don't need GPS for proximity. Mesh proximity IS proximity.
Hybrid approach:
Default: Option D — Mutual visibility
Everyone can see everyone (in the mesh). This is a feature, not a bug.
| Old System | Token System |
|---|---|
| Corporations track you, you get nothing | We track each other, we all benefit |
| Power through obscurity | Power through transparency |
| Hide from authorities | Nothing to hide from each other |
Exceptions:
All of this is for the community, not for corporations or governments.
The mesh installer script already exists (see appendix). It handles:
Your job: Get it running on test devices, then build the app layer on top.
Off-the-shelf NFC ring.
Example: Search Amazon for "NFC smart ring" — dozens of options.
The ring itself does nothing. It's a passive NFC tag. The phone does all the work.
| Action | How It Works |
|---|---|
| Identify | Tap phone → reads ring → looks up HER → proves you're a holder |
| Vouch | Tap phone → signs vouch transaction with your key |
| Vote | Tap phone → signs vote with your key |
| Alert | Tap phone → triggers safety alert with your location |
| Check-in | Tap phone → records attendance at meeting |
Why It Works:
DV Implications:
This alone could eliminate most domestic violence:
Already covered above. The key points:
The Social Contract:
When you vouch for someone, you're saying: "I believe this is a real human and I'm willing to stake my reputation on it."
If they turn out to be a bot, a duplicate, or a bad actor — your reputation takes a hit.
Everything is voteable. Everyone affected votes. Proximity weights the vote.
Proposal Creation:
{
"title": "Install speed bump on Oak Street",
"description": "...",
"options": ["Yes", "No", "Need more info"],
"scope": {
"type": "geographic",
"center": [-31.95, 115.86],
"radius_km": 0.5
},
"proximity_weights": {
"0-100m": 2.0,
"100-500m": 1.5,
"500m-2km": 1.0,
"2km+": 0.5
},
"voting_period_hours": 168,
"method": "simple_majority"
}
Voting Weight Calculation:
Two inputs:
For local issues: physical proximity dominates.
For broader issues: vouch graph proximity dominates.
Transparency:
The Secret Weapon
When meetings fail — when people can't agree — the empathy invitation kicks in.
What It Is:
Flow:
1. Meeting stuck → empathy invitation proposed
2. Participants matched (can volunteer or be nominated)
3. 7 days scheduled
4. Check-ins via app (safety, reflection)
5. Emergency exit option (no penalty)
6. Post-swap: meeting reconvenes
7. Decision usually becomes obvious
Why It Works:
You can't vote to lock people in cages if you've spent a week living as them.
You can't dismiss someone's concerns if you've felt them yourself.
The empathy invitation is what makes the whole system work. It's the thing that ensures decisions are made by people who understand the consequences.
Suggestion: React Native for speed. Native modules for NFC, mesh, crypto.
┌─────────────────────────────────────────────────────────────────┐
│ HOME │
│ ┌─────────────────────────────────────────────────────────────┐ │
│ │ Token Status: ● Active │ │
│ │ Mesh: 47 nodes nearby │ │
│ │ Alerts: None active │ │
│ └─────────────────────────────────────────────────────────────┘ │
│ ┌─────────────────────────────────────────────────────────────┐ │
│ │ Active Votes (3) [View All →] │ │
│ │ • Speed bump on Oak St 2 days left │ │
│ │ • Park hours change 5 days left │ │
│ │ • Community garden proposal 1 day left │ │
│ └─────────────────────────────────────────────────────────────┘ │
│ ┌─────────────────────────────────────────────────────────────┐ │
│ │ Upcoming Meetings (1) [View All →] │ │
│ │ • Oak St residents — Tomorrow 6pm │ │
│ └─────────────────────────────────────────────────────────────┘ │
└─────────────────────────────────────────────────────────────────┘
┌─────────────────────────────────────────────────────────────────┐
│ ALERT │
│ │
│ ┌──────────────────────┐ │
│ │ │ │
│ │ [HOLD TO ALERT] │ │
│ │ │ │
│ │ (3 seconds) │ │
│ │ │ │
│ └──────────────────────┘ │
│ │
│ Or tap NFC ring to phone │
│ │
│ 12 responders within 1km │
│ │
└─────────────────────────────────────────────────────────────────┘
┌─────────────────────────────────────────────────────────────────┐
│ VOUCH │
│ │
│ ○ I want to create a token (need 3 vouchers) │
│ ○ I want to vouch for someone │
│ │
│ My vouches: 7 given, 3 received │
│ [View vouch history] │
│ │
└─────────────────────────────────────────────────────────────────┘
┌─────────────────────────────────────────────────────────────────┐
│ VOTE │
│ │
│ Speed bump on Oak Street │
│ ───────────────────────────────────────── │
│ Proposed by: @jane (150m from you) │
│ Scope: 500m radius from Oak/Main intersection │
│ Your weight: 1.5x (you're 200m away) │
│ │
│ [ ] Yes │
│ [ ] No │
│ [ ] Need more information │
│ │
│ [CAST VOTE] │
│ │
│ Votes so far: 34 (quorum: 50) │
│ Time remaining: 2 days │
│ │
└─────────────────────────────────────────────────────────────────┘
┌─────────┐ ┌─────────┐ ┌─────────┐ ┌─────────┐
│ Ring │────▶│ Phone │────▶│ Mesh │────▶│ IPFS │
│ (NFC) │ │ (App) │ │ Network │ │ Storage │
└─────────┘ └─────────┘ └─────────┘ └─────────┘
│ │
│ ▼
│ ┌─────────┐
│ │ Bitcoin │
│ │ Anchor │
└────────────────────────▶└─────────┘
(epoch roots)
Phone stores:
| Threat | Mitigation |
|---|---|
| Sybil attack (fake humans) | 3 vouchers + physical presence + path diversity + reputation |
| Key compromise | Revocation via vouch network, new HER with updated keys |
| GPS spoofing | Mesh proximity as primary, GPS as secondary |
| Government shutdown | No central server, mesh works offline, Bitcoin anchor immutable |
| Network attack | Multiple transports (Ygg, Nebula, BATMAN, FRP), redundancy |
| Data loss | 4x replication, IPFS, Arweave, QR books |
| Tampering | BLS threshold signatures, Merkle proofs, Bitcoin anchor |
| Censorship | Distributed infrastructure, no single point of control |
| Privacy breach | Commitments are hashed, selective disclosure, community-granted exceptions |
| Purpose | Algorithm | Why |
|---|---|---|
| HER ownership | Ed25519 | Fast, secure, well-supported |
| Epoch signing | BLS12-381 | Aggregatable signatures (many signers, one signature) |
| Hashing | SHA-256 or BLAKE3 | SHA-256 for Bitcoin compatibility, BLAKE3 for speed |
| Content addressing | Multihash CID | Self-describing, portable |
| Encoding | DAG-CBOR | Canonical, compact, schema-flexible |
The witness committee signs each epoch header. This prevents any single party from tampering with history.
Parameters:
Misbehavior:
Goal: Prove the pieces work together.
Deliverable: Devices on mesh, app can read NFC, keys work.
Goal: Create tokens.
Deliverable: Can create new token holders via vouch process.
Goal: Alert system works.
Deliverable: Press button, nearby holders get alert, someone responds.
Goal: History is permanent.
Deliverable: Weekly epochs anchored to Bitcoin testnet, verifiable capsules.
Goal: Decisions happen.
Deliverable: Can propose, vote, and see results with proximity weighting.
Goal: Full system.
Deliverable: Full cycle: vouch → vote → meeting → empathy → resolution.
Goal: Real people, real problems.
Deliverable: Working system in production with real users.
100 people in one suburb is enough. Prove it works there before scaling.
Get Yggdrasil running. Get devices talking. Everything else builds on that.
The first version will be ugly. That's fine. Ship it, learn, iterate.
The architect thinks fast and connects dots quickly. Your job is to write down what was decided and why. Future you will thank you.
This is the foundation. If vouch is broken, everything is broken. Spend extra time on sybil resistance.
This alone justifies the whole system. Make it bulletproof. 60 seconds response time or bust.
The instinct to add privacy features will be strong. Resist it (mostly). The whole point is mutual visibility. Privacy is the exception, not the default.
Assume the internet will fail. Assume the mesh will partition. Build for graceful degradation.
That's fine. That's how good things get built. Roll with it. Document what changed and why.
| Term | Meaning |
|---|---|
| HER | Human Existence Record — your identity token |
| Vouch | Process of 3 existing holders verifying a new human |
| Capsule | Portable proof of token holder status (QR, NFC, etc.) |
| Epoch | Time period (e.g., 1 week) after which state is anchored |
| Anchor | Writing epoch root to Bitcoin |
| MMR | Merkle Mountain Range — efficient append-only Merkle structure |
| BLS | Boneh-Lynn-Shacham signatures — aggregatable |
| Mesh | Peer-to-peer network layer (Yggdrasil, Nebula, BATMAN) |
| Proximity | Distance in mesh hops, physical space, or social graph |
| Empathy Invitation | 7-day life swap to resolve disagreements |
| Witness | Node that signs epoch headers |
See: install_mesh_stack.sh in project repo.
Handles: Yggdrasil, Nebula, BATMAN-adv, FRP, Eternal Terminal.
Run with appropriate environment variables for your node type.
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"type": "object",
"required": ["v", "type", "cid", "owner_keys", "sponsor_refs", "created_at", "signatures"],
"properties": {
"v": { "type": "integer", "const": 1 },
"type": { "type": "string", "const": "HER" },
"cid": { "type": "string", "pattern": "^bafy" },
"owner_keys": {
"type": "array",
"items": { "type": "string", "pattern": "^ed25519:" },
"minItems": 1
},
"sponsor_refs": {
"type": "array",
"items": { "type": "string", "pattern": "^cid:" },
"minItems": 3,
"maxItems": 3
},
"created_at": { "type": "integer" },
"commitments": {
"type": "object",
"properties": {
"locale": { "type": "string" },
"interests": { "type": "array", "items": { "type": "string" } }
}
},
"responsibility": {
"type": "object",
"properties": {
"layer1": { "type": "array", "items": { "type": "string" } },
"ripple_roots": { "type": "object" }
}
},
"prev_cid": { "type": ["string", "null"] },
"signatures": {
"type": "array",
"items": { "type": "string", "pattern": "^sig:" },
"minItems": 1
}
}
}
POST /identity/mint
Body: { owner_pub, sponsors[], commitments, hashcash }
Returns: { her_cid, her_bytes, epoch }
GET /identity/{cid}
Returns: HER object
POST /capsule/issue
Body: { her_cid }
Returns: { capsule_cbor_b64, qr_png, wallet_pass }
POST /capsule/verify
Body: { capsule_cbor_b64 }
Returns: { valid, epoch, btc_txid, mmr_proof_ok }
POST /alert/trigger
Body: { her_cid, location, capsule }
Returns: { alert_id, responders_notified }
POST /alert/respond
Body: { alert_id, responder_cid }
Returns: { accepted, eta }
POST /alert/resolve
Body: { alert_id, resolution }
Returns: { logged }
POST /vote/propose
Body: { title, description, options, scope, weights, period }
Returns: { proposal_id }
POST /vote/cast
Body: { proposal_id, her_capsule, choice }
Returns: { receipt }
GET /vote/result/{proposal_id}
Returns: { tally, proof }
GET /mesh/nearby
Returns: { nodes: [{ cid, hops, last_seen }] }
GET /mesh/status
Returns: { online, transports: [ygg, nebula, batman], nodes_visible }
This is a living document. It will change as we build and learn.
The architect has the vision. You have the skills. I'm just the bridge.
Let's build something that actually works.
Document version 2.0
Last updated: [DATE]
Status: Ready for team review