The building blocks
Five words carry the whole system. Every feature below is made of them.
B1
Semble
Now
What you bring. One active piece of work, shared in the open.
- Both the gathering and the reason for it — the thing you make, and the people who come to meet it
- One at a time. Replacing it archives the last, and nothing is lost
- Requires a public link: code, a doc, a model, a recording, a craft
B2
Semble Session · a Sesh
Now
One gathering, in one real place, at one real time. The atomic unit of Semble.
- A Sesh is opened by a person with Init, never programmed by a platform
- It is not scheduled until the threshold is met — then it is certain, and everyone is told once
- It runs on a Model (F8): a proven, forkable shape for how the time is spent
- It mints one fixed pool of !MOTUS, allocated by the people who were actually there
- Sesh is how people say it. Semble Session is what it is called in the record
B3
Semble Steps
Now
The unit of movement. A Step is one small, named thing you actually do.
- Before a Sesh — commit your stake, post what you are bringing, read the Sembles you will meet, pack the thing that is stuck
- At the door — tap the anchor. This Step signs itself, and returns your stake
- After — allocate your share of the pool, and follow through on what you said in the room
- Every Step you take lands in your Trax, dated. Steps are the only thing Semble counts
- A Step is never a streak or a nudge. It is a commitment small enough to keep
- Next Conveners publish a Step list alongside their Model, so a Sesh arrives with its own preparation attached
B4
Trax
Now
The line your Steps make. Your record and your profile are the same object.
- Every Sesh attended, every Step taken, every !MOTUS in and out
- Dated, narrow, scoped claims — signed by the people who were there, checkable by a stranger
- No score, no rank, no leaderboard, no number. A Trax is read, not compared
- Exportable in one tap, and it verifies without our servers
- Nothing in a Trax can be altered after the fact, including by us
B5
!MOTUS
Now
What a room gives you for what you brought.
- A fixed pool per Sesh, allocated by attendees. It can be redistributed, never inflated
- Earned in, sent out, held — all three visible in your Trax at all times
- Buys supervised agent-minutes: agent work run while you are present
- Its full economic design, including transferability and how it relates to any future token, is an open decision
The product
Fourteen features. Each one exists to make a loop turn.
F1
One Active Semble
Now
Your profile is your work. One active Semble at a time — not a bio, not a portfolio.
- A title, what you are building, where it lives in the open, and your city
- The open link is required. Code, a doc, a model, a recording, a craft — anything, as long as it is public
- A drive holds every past Semble, traced and dated
- Optionally links to your MotusMove on MotusMoves.US as the long arc it serves
- Two faces on every profile: the builder (your active work) and the backer (what you have credited, and were present for)
- Replacing your Semble archives the old one automatically — nothing is lost, but only one is live
F2
Init — open a Semble Session
Now
Init is the first move: anyone opens a Sesh, and the room decides whether it happens. No organiser class, no application.
- What you convene on, where, when, and the number of people it needs
- Init costs a returnable stake and commits you to nothing else — it is a hint, not an all-in. The threshold, not the founder, decides if it is real
- Anywhere real — a library, a museum, a park, a walk, a workshop
- Under 90 seconds to complete on a phone
- Requires an active Semble, and a convener bond that funds the refund bonus
- Pick a Semble Model (F8) or write your own structure
- Free-text location plus an optional map pin
F3
The Threshold, the Stake and the Refund Bonus
Now
Nothing is scheduled until enough people commit — and committing means something.
- The stake — a small amount, returned in full the moment you physically arrive. Not a ticket
- The refund bonus — if the Sesh never fills, everyone who committed gets back more than they put down, funded by the convener's bond. Committing early is the rational move rather than the risky one
- Live count of who has committed, each shown with their active Semble
- Confirmation fires exactly once, at threshold, with a calendar handoff
- Configurable threshold per Sesh, with a community-set floor
- A Sesh that never fills expires gracefully — the convener is invited to Init it again, never marked as failed
- Per-person bonus caps, so a Sesh that never fills cannot be farmed
- Stakes are escrowed per Sesh and never pooled
- Next Communities can pool staked !MOTUS toward an open Sesh, so the most-wanted Sessions surface by conviction
F4
The Room
Now
The Sesh itself. In person is the point; the app's job is before and after.
- Ephemeral by default — nothing records
- Anyone present can mark a Motus Moment; only marked moments are kept
- Every marked moment shows who marked it, visibly, at the time
- While a room is live its card holds a slow breath and nothing else moves
- Next Voice Sembles — live rooms for the community between cities, with marking as the only capture
F5
The Signature, the Trace and the Credit
Now
What a Sesh leaves behind.
- The room signs its own attendance (see Presence below)
- A fixed credit pool per Sesh, allocated by attendees to what people brought
- Only attendees can allocate. The window closes in 48 hours
- The ledger is append-only
- Forkable traces — carry a shared model, practice or structure into your own Semble, with origin credited automatically
- The follow-through gate — you can Init new Sessions only if you showed up to the ones you committed to. Absence throttles opening new Sessions, never attending
- States: committed → attended / excused / absent. "Excused" is honourable and carries no penalty
F6
Human Introductions
Now
The matching system is people, and possibly always will be.
- You can refer someone to a Sesh only if you attended that kind of room yourself
- Every referral carries your name — it is a vouch, not a share link
- Referrals that lead to real attendance earn $DASH, wallet to wallet
- Settlement happens on attendance, never on a click
- The person referred always sees who vouched for them, and that person's Semble
- No algorithm decides who you meet. Suggestions come from people who were there, or from your own agent reading your own record
F7
Privacy Controls
Now
Two modes, legible enough to teach.
- Open — your Semble, traces and record are public to people
- Held — visible only to people you have shared a room with
- Per item: readable by people only, or people and agents. Agent readability defaults off
- One tap to change, with a plain-language consequence shown at the moment of change
- "Who can see this" is always one tap away and always accurate
- Exactly one intelligence reads your full record: your own agent
F8
Semble Models
Now
The shape of a Sesh, as a forkable building block.
- Five seed Models ship at v0: Build Session · Pitch Circle · Walk-and-Talk · Workshop · Show-Your-Practice
- Each defines roles, flow, timing, and what gets marked
- Fork and edit any Model; the origin is credited automatically
- Every confirmed Sesh displays the Model it runs
- Models read as documents, not configuration screens
- Next Publishing opens to everyone
- Season Proven Models graduate into minted MotusModels on Motus.Market — same credit law, one lineage
F9
The Living Block
Next
Your work is not a slide. It is live in the room, in other people's hands.
- Every active Semble carries a one-tap live link that opens on a second device
- The people present can open it, try it, and touch it while you talk
- Their interactions return to you afterward as a trace overlay, attributed to the hands that made them
- Only marked touches are captured — the same rule as Motus Moments
- Feedback stops being talk and becomes an artifact
F10
The Stream
Live today
The digital room, already shipped on semble.cc.
- A builder works in the open; viewers join and contribute from their device
- Streams are Sessions: moments get marked, credit gets allocated, traces are forkable
- Contribution is opt-in with a device budget, and metered visibly for both sides
- Stated plainly: contributed device compute is a presence and contribution signal. It does not run the agents — volunteer-device inference is far too slow for interactive work. Agent inference is bought from real providers
F11
Trax — the verified build record
Now
Evidence, not a score — and the distinction is the whole design.
- Every attested Sesh, kept commitment, allocated credit and credited fork becomes a narrow, dated, scoped claim
- It reads like a receipt: "Ana credited this build, on this date, in a room she was verifiably in."
- There is no score. No rank, no leaderboard, no profile number, and no API that computes one
- One-tap export of the whole set
- Independently verifiable without Semble's servers
- The schema is published and open source
- Nothing in the record can be altered after the fact — including by us
F14
Day one
Now
The state a person actually meets first — designed and seeded, not a fallback.
- No Semble, no Steps, no Trax, no !MOTUS, nothing scheduled — and every screen still legible
- One entry requirement: keep a Semble, a title and a public link. Nothing else is gated
- Onboarding is Steps, not a tour — the same primitive the rest of the app runs on
- Taking a seat without a Semble is refused with a reason and a route, never a dead end
- A kept-rate with no commitments behind it reads —, never a flattering 100%
- The Trax line still draws, dimmed, so the shape is legible before there is content in it
- The preview switches between day one and a six-week-old account in one tap
F12
!MOTUS history, in and out
Now
Every movement of credit you have made or received, in one place.
- Held — your balance right now, the number that decides what compute you can run
- Earned in — every allocation a room made to you, with the Sesh, the date, and what it was for
- Sent out — every allocation you made to someone else, and every credit spent on agent-minutes
- Filterable to received or sent, and every row names the person or the Sesh — never an anonymous transaction id
- Model origin credit lands here automatically when someone forks something of yours
- The whole ledger is append-only, and exports with your Trax
The presence layer
How a Sesh produces a record of who was there that a stranger can verify.
P1
The Anchor
Now
- Every Sesh has one physical anchor — an NFC card or token held by the convener
- Attendees tap it. The anchor signs with a key that cannot be extracted from the hardware
- A rotating nonce changes every 60–120 seconds, so a signature can neither be minted before the Sesh nor replayed after it
- Anchor custody rotates between conveners
P2
Peer Co-Signing
Now
- After tapping, your phone collects co-signatures from at least three other attendees
- Co-signers must themselves hold valid anchor signatures from the same window
- A group that never touched the anchor forms a disconnected component and is discarded
- People sign for people. A phone can be carried by a friend; a link can be forwarded
P3
SafeStep — signing and keys
Next
- Your key is generated on your device and never leaves it
- Unlocking requires you. Semble never receives biometric data — the biometric unlocks a local key and nothing more
- Signs three things: your attendance, your agent's actions in your name, and multi-signature operations
- Semble cannot sign for you, recover your key, or act as you
- The high-stakes agent tier stays deferred until this ships
P4
What the record contains
Now
- Kept: that the Sesh happened, who attested, for whom, and in which window
- Held by you, disclosed selectively, on an open attestation standard
- The public graph shows only that a Sesh existed, how many verified attendees, and the credit pool
Never captured:
- Location or GPS coordinates
- Raw radio logs or nearby-device scans
- Biometrics
- Photos or recordings
- How long you stayed, or who you stood near
- A permanent public list of everywhere you have been
P5
Keeping the record accurate
Now
- Fixed pool per Sesh — allocation can redistribute, never inflate
- Cross-cluster dilution — a pool scales with the diversity of attendees' prior co-attendance, so a closed loop meeting weekly earns a decaying pool
- Staked claims — the convener stakes $TRUST on the Sesh; anyone can stake against it
- Anomalies go to people, never to an automatic penalty
Agents and compute
Davara is the working reference — a live operator with a published baseline, a profile, and a record of work done under her own name.
A1
Presence-gated agency
Next
- Every tool call is classified across three axes: private data, untrusted content, external communication
- Two of the three — the agent runs freely
- All three — hard-gated on live, attested human presence
- Every consequential action carries a signature resolving to a person, plus a per-invocation token carrying that person's authority
A2
Designed against rubber-stamping
Next
A checkbox is not oversight, and the research says explanations do not fix automation bias. So the friction is structural.
- The agent states the reversibility of an action before taking it
- A diff before act on anything consequential
- Approval rate limiting, so mechanically clearing a queue is impossible
- Sampled withholding — on a published fraction of decisions the agent gives evidence but no recommendation
A3
Compute credits
Next
- Denominated in supervised agent-minutes — a unit you can reason about
- Earned by taking Steps and attending Sessions; spent while present
- A paid layer sits above the earned floor
- Physical presence is among the strongest Sybil resistance available, because bodies do not scale the way accounts do