homerestorewhitepaperblueprintmarketjobsdiscord
cat RESTORE-WHITEPAPER-v6.md | less

A Civilisational
Operating System.
Designed for Survival.

v6 abandons ideological purity. Most people don't care about decentralisation. They care about whether they can afford food this week. RESTORE now delivers immediate, tactile utility on Day 1 — with sovereignty infrastructure that unlocks silently as community density grows.

Version 6.0 March 2026 SOVEREIGN Platform Public Domain
Table of Contents
01

The Problem: A System Designed Against You

You wake up. Your phone tells you how to feel about the world. You eat food engineered to be addictive. You go to work to pay for a house you rarely see. The structure that contains you is not accidental. It is load-bearing. Every dependency is intentional.

The modern human being is, by almost every metabolic, psychological, and sociological measure, less healthy, less free, less purposeful, and less connected than their ancestors who had none of the technology we now possess.

The machine's control is maintained through a layered stack of dependencies:

LAYER 6 — Meaning dependency:     manufactured purpose through consumption and status
LAYER 5 — Social dependency:      artificial belonging through isolating platforms
LAYER 4 — Cognitive dependency:   attention harvested by engineered compulsion loops
LAYER 3 — Biochemical dependency: ultra-processed food, sugar, seed oils
LAYER 2 — Economic dependency:    wages as the only path to survival, debt as the cage
LAYER 1 — Energy dependency:      the utility bill as a monthly tax on existence

Remove any one layer without addressing the others and the system compensates. Address all six simultaneously and you have broken the machine.

But you cannot liberate someone's cognition when they are food-insecure and energy-insecure. v6 acknowledges that survival is a material reality, not an abstract philosophy. RESTORE addresses all six layers — but it begins exclusively at the bottom.

02

The Inversion: Syndicate in Reverse

In Syndicate, corporate entities deploy autonomous agents throughout the world to maintain human dependency, compliance, and economic captivity. RESTORE inverts this architecture entirely.

The agents in RESTORE are not instruments of control. They are instruments of liberation. They do not maintain dependency — they identify it, name it, and generate the specific real-world actions that dissolve it.

Old System Logic: Money buys access → Fundamentals create dependency → Dependency creates compliance → Control creates profit. RESTORE Logic: Verified action → Mutual credit → Fundamentals reduce dependency → Freedom compounds.

The goal is not to destroy the old system. The goal is to make it unnecessary for an increasing number of fundamental needs.

03

The Philosophy: Immediate Utility over Theoretical Freedom

Previous versions of RESTORE suffered from an "Ideological Purity Trap." They assumed users would care about decentralisation, WASM inference, and self-sovereign identity on Day 1.

"Most people do not care about decentralisation. They care about survival. If a system requires high technical literacy before it delivers value, it will die in the very communities it aims to help."

The Day 1 Promise of RESTORE v6

"I saved money today."
"I got food cheaper today."
"I connected with a useful neighbour today."

We do not market sovereignty. We market immediate, tactile utility. The sovereignty infrastructure runs silently underneath, invisible to the user until the community reaches a scale where the infrastructure matters.

04

The Progressive Decentralisation Path

RESTORE v6 forces decentralisation to earn its place. Deploying a full P2P mesh network and DHT ledger in a community of 12 people is a catastrophic misallocation of engineering and battery life. The protocol now operates on a Density-Triggered Unlocking Mechanism.

Phase 1: "Centralised Lite" Hex < 200 users

A fast, reliable mobile app backed by a standard, centralised cloud database. AI inference via centralised APIs (Claude/OpenAI). SC ledger centralised but publicly auditable via daily Merkle roots. Focus: establishing the behavioural habit of "Verified Action = Real Value."

Phase 2: Mesh Activation Hex ≥ 200 active users

When 200 unique, TEE-verified users log physical missions within a specific H3 hex in a 30-day window, the protocol automatically issues an Activation Event. The app downloads the DHT Rust node and begins silent background syncing. Capable devices download 1B WASM micro-models. BLE micro-mesh and local Nostr event gossiping activate. The hex can now survive internet blackouts.

"Decentralisation is not a Day 1 barrier to entry. It is an unlockable achievement earned through community density."

05

Nobody Governs RESTORE (Eventually)

RESTORE's endgame is a system with rules but no rulers. To prevent institutional capture, RESTORE relies on three ungovernable properties: Open Source code, P2P Infrastructure, and Community Governance. The governance must be earned.

The Governance Mechanism

During Phase 1, governance proposals are soft-signals to the core development team. Once a hex achieves Phase 2 Activation, governance becomes hard-coded.

TypeWindowQuorumThreshold
Standard14 days15% active regionalSimple majority
Emergency72 hours25%Simple majority

Fork Freedom

If you disagree with the community's direction, you can fork the protocol. Take the code, take your nodes, take your SC history, and run your own version. This right can never be revoked.

06

One Person. One Vote.

Pure cryptographic keypairs are insufficient for Sybil resistance. Your identity must be verified by your sustained physical intersections with the real world.

Identity Score (Is)

I_s = W_tee·(T) + W_vouch·(V) + W_entropy·(E)
Where:
T — Hardware TEE Attestation (0 or 1). Prove the device is physically unique and not rooted.
V — Social Vouch Score (0–1). Requires 3 vouches from existing high-score users.
E — Geographic & Counterparty Entropy (0–1). Diversity of interactions over time.

Vouch Scarcity, Entropy & Decay

A device with Is > 80 can only issue 5 vouches per 30-day window. The 3 vouches required to upgrade cannot come from a densely connected cluster — the system measures the Jaccard index of the physical interaction graphs of the vouching nodes. If similarity exceeds 0.6, the vouch is rejected.

The vouch component (V) decays linearly over 90 days. It is refreshed not by being vouched again, but by increasing interaction Entropy (E) — meeting new verified users in new physical locations.

07

Self-Governance: Juries and Circuit Breakers

The network monitors its own health. When the AI anomaly engine detects a velocity spike (impossible SC generation) or a Sybil cluster, it freezes the SC and triggers a Sortition Jury.

v6 Sortition Mechanics

v5 used Optionality Scores to pick the "best" jurors — inherently creating an elite arbitration class of professional politicians. v6 fixes this with partial randomisation.

ParameterValueRationale
Jury size12 membersPartially random from Is > 80 pool
Duty cap2 juries / 30 daysPrevents permanent arbitration class
Verdict threshold8/12 majorityHigh bar prevents capture by factions
Deadlock resolution72-hour hex-wide voteFalls to full community after 48h deadlock
08

The Agent Architecture

Every player gets six personal AI agents. They are long-term allies with persistent memory.

AgentPhaseFocus
EnergyPhase 1Utility bills, solar mapping, peer energy trading
BodyPhase 1Local food networks, community gardens, bulk buying
TribePhase 2Hex social graph, skill mapping, community governance
MindPhase 2Cognitive sovereignty, compulsion loop interruption
FreedomPhase 2Live dependency audit across all six layers
PurposePhase 3Post-survival: contribution-oriented life architecture

Traffic Obfuscation Protocol (TOP)

In Phase 2, low-RAM devices offload WASM inference to higher-tier "Local Inference Providers" over BLE. To prevent these providers from harvesting metadata on their neighbours' queries, v6 enforces:

Query Padding — all payloads are padded to a constant byte block size (e.g. 2048 bytes).
Chaffing (Dummy Traffic) — the agent periodically generates syntactically valid but semantically meaningless ghost queries.
Delayed Batching — queries are held for a random interval (100ms–2500ms) and batched with ghosts. The provider computes responses without knowing if the query represents a real human crisis or a mathematically generated ghost.

09

Food and Energy Sovereignty

The system is designed to bypass industrial supply chains — beginning with what already exists.

Phase 1 — The Stokvel & The Discount

Before building solar farms, we digitise the local cash Stokvel (savings club). We partner with local farmers and mechanics to offer 10% discounts for users who pay via the RESTORE Stokvel ledger. Immediate, measurable value from Day 1.

Phase 2 — Community Energy

Second-life EV batteries and peer-to-peer tokenised solar trading within activated hexes. Energy sovereignty becomes a community asset, not an individual burden.

10

The Sovereign Credits Economy: Hard Anchors and Demurrage

Sovereign Credit (SC) is the record of verified useful action. v5 lacked scarcity — SC was doomed to hyperinflation as minting outpaced the backing of real goods in the local Maker's Market. v6 fixes this with three hard economic constraints.

FIX 1: Hard Economic Anchors

SC is no longer minted infinitely for "good deeds." A hex has a strict Global Mint Constraint mapped directly to verified, scarce physical outputs:

M_max = α·Σ(E_solar) + β·Σ(V_stokvel_ZAR) + γ·Σ(H_verified_action)
Where: E_solar = total kWh local solar generated, V_stokvel_ZAR = verified stokvel deposits, H_verified_action = baseline UBI restricted by unique Is > 80 individuals (no bots)

FIX 2: SC Sink Mechanics (Demurrage)

A local currency only functions if it circulates rapidly. Unspent SC balances above a baseline sustenance threshold decay at 1% per week. This is burned — removing supply and increasing the purchasing power of actively circulating SC.

Balance_new = Balance_old − ((Balance_old − S_thresh) × 0.01)

FIX 3: The Stokvel Empathy Backstop

Digital Stokvels allow community grace periods for missed contributions. But unlimited grace periods destroy mathematical viability. v6 enforces a hard protocol limit:

If D_total ≥ (C_total × 0.30): grace_request.ui_state = DISABLED
D_total = accumulated grace debt, C_total = lifetime SC contribution to the circle.
The community cannot override this. The network is protected from its own generosity.
11

The P2P Network: Partition Survivability

When a hex enters Phase 2, the architecture shifts to a BLE micro-mesh backed by a LoRaWAN backbone and eventually libp2p. The network is designed to survive extended internet blackouts.

Offline Velocity Limits

To prevent double-spend attacks when internet-isolated partitions reconnect, nodes in Local Mode are velocity-capped:

max_spend_24h = min(balance × 0.10, 500 SC)

v6 also adds Cross-Account Correlation — the anomaly engine prevents an attacker from pre-splitting funds across 20 accounts to bypass the limit. Splitting behaviour triggers a freeze prior to the partition event.

Weighted Merge Rule

When a partition ends and two conflicting DHT chains merge, the longest chain does not automatically win. The chain with the highest cryptographic and spatial diversity wins:

CHAIN_SCORE = (TEE_VALIDITY × 0.4) + (GEOGRAPHIC_DIVERSITY × 0.3) + (COUNTERPARTY_ENTROPY × 0.3)
Brute-force Sybil encounters during offline periods are rendered useless.
12

Corporate Participation: Making Generosity Rational

Verified ESG data (GPS-timestamped, TEE-attested real-world action) is more rigorous than any traditional CSR audit. Corporate partners pledge resources to a hex in exchange for this verified impact data. The physical release of goods is triggered mathematically when the hex hits SC thresholds.

Corporations have zero governance power and zero ability to shape the mission parameters. They provide resources. The community determines what those resources are used for.

13

The Commons: What Replaces What

TimelineOld SystemRESTORE Replacement
Day 1Cash stokvelPhase 1 Digital Stokvel on centralised lite ledger
Month 3Job boardsLocal skill exchanges & immediate day-labour pairings
Month 6Online marketplacePhase 1 Maker's Market on local hex feed
Year 1Utility gridPhase 2 Mesh Activation: tokenised peer solar trading
Year 2Grocery storeCommunity food stores accepting demurraging SC
14

The Game Layer: Proof of Action

RESTORE replaces the engineered addiction of infinite scroll with the dopamine of tangible local progress.

Every TEE-verified encounter generates a Proof of Action card — a cryptographically signed artifact proving you and a peer took a specific action at a specific time and location. The social feed only shows these cards. Status is earned by rebuilding your physical reality, not by posting opinions.

15

Geographic Seeding and the Cold Start

RESTORE launches city by city, hex by hex. A launch requires Stewards — highly trusted local nodes — to seed the initial missions and negotiate the Day 1 discounts with local vendors (the Immediate Value Loop). Virality is generated from the sharing of Proof of Action cards.

When 200 users are active in a hex, Phase 2 decentralisation unlocks, and the Steward function dissolves into the protocol. The Steward's power is temporary by design.

16

Principles and Commitments

// RESTORE v6 — IMMUTABLE PRINCIPLES

[01] IMMEDIATE_VALUE_FIRST
     If it doesn't solve a local problem on Day 1, it waits until Year 2.

[02] PROGRESSIVE_DECENTRALISATION
     The complex mesh network is an unlockable achievement,
     not an adoption barrier.

[03] ONE_PERSON_ONE_VOTE
     Hardware access is democratised through adversarial,
     entropy-verified Social Vouching.

[04] OPEN_SOURCE.ALWAYS
     Fork it. Improve it. Ship it.

[05] PRIVACY_BY_DEFAULT
     Agent memories stay on-device.
     BLE inference providers process padded, chaffed traffic.

[06] HARD_ECONOMIC_SCARCITY
     SC is anchored to physical constraints.
     Demurrage forces velocity.

[07] NO_ADVERTISING.EVER

[08] FORK_FREEDOM
     The right to fork is irrevocable.
     Even from the founders.

"The goal is not to destroy the old system. The goal is to make it unnecessary for an increasing number of fundamental needs."

Version 6.0 | RESTORE / SOVEREIGN Platform
Public Domain — copy, fork, build, share without restriction
Technical implementation: see BLUEPRINT-v6.md