The HOP Optimisation Protocol
§0

Introduction

The Economic Stance

The 21st-century labour market is structurally inadequate to the substrate it now operates on. Platforms capture rents of 20-30% on every transaction by holding network effects hostage. Workers are categorised as integers (employed or not), forcing catastrophic cliffs when their category fails. Reputation is locked inside each platform, repossessed when the platform’s terms-of-service change or the platform goes bankrupt. Mentorship, the only known mechanism for population-scale skill transfer, is structurally unrewarded — senior workers hoard knowledge because knowledge is competitive advantage, while junior workers stall in the early-career bottleneck that produces no path forward. The substrate of work is being rewritten by AI faster than the institutional layer can adapt. The result is a system that misallocates human capability at trillion-dollar scale, every year, by construction.

HOP — the HOP Optimisation Protocol — is a substrate-neutral labour-market protocol that fixes this at the protocol layer rather than the platform layer. Workers carry their own portable, cryptographically-attested biography. Institutions sign abstracted attestations of completed work and retain their operational records separately. Skill-Agents construct curricula on demand; Worker-Agents evaluate them; bid acceptance is a cryptographic mutex. Chains compete on governance rather than capturing workers through lock-in — the off-ramp tax (typically 10-30%) funds chain operations transparently, and any chain that overcharges or under-delivers can be forked at zero switching cost because the worker’s chain travels with them. Mentorship is rewarded through Beans, which produce conversion-rate bonuses on chain currency, structurally making skill transfer the rational economic behaviour rather than knowledge hoarding. Approximately 40% of the protocol is running in production today.

The pitch, by audience, is sharp. Unions: members earn portable currency for every contribution, pay no tax on within-economy transactions, get massive discounts on off-ramp through mentorship, and the chain owner pays for the mentorship system. Employers: set up a Workchain for your domain, capture the off-ramp tax on departures (which funds your chain operations), retain your best mentors through Beans, never pay platform fees because the chain is yours. Ministers: the country that writes the protocol governing portable skills credentials and labour-currency interoperability gains the network position; Australian chains federate cleanly with each other; Australian workers carry their chains globally without losing value; the whole system runs on open protocols that no platform owns.

Why This Actually Matters

Then there’s Sera.

Sera is sixteen and her family, congregation, and entire social network are Jehovah’s Witnesses. She has a crisis of faith — not a rebellion, just a careful observation that the love preached and the love practised do not match. The Witnesses have institutional sensors for this. They do not float; they do integer. Her status is changed to disfellowshipped. Her mother looks through her like glass. Her father crosses the street. She is sixteen and her stamps total zero and her trust set is empty and she has been pronounced dead by everyone who said they loved her.

She flees Mexico northward. Death Valley. Refugee channels. Australia. She arrives without papers, without references, without recognisable history. She spends fifteen years digging — every job that doesn’t ask for references, every room rented week-to-week, every form with a gap on it, every interview question about where she was between sixteen and thirty-one answered with one word, digging. At thirty-one she is standing on flat ground for the first time. Where others started at twenty. She is fifteen years behind, fifteen years of compound she will never recover. The institution that burned her did not just excommunicate her. It stole the years that compound.

The current labour market has no way to read Sera’s chain. By every metric the system measures, she is empty: no credentials, no recognised work, zero currency, zero inventory. The system evaluates her as worthless. But Sera is rich in the dimension that matters. She walked from Mexico through Death Valley to Australia with no network and rebuilt her identity from zero. She maintained integrity under breaking pressure. She learned what was load-bearing and what was not by losing everything that wasn’t. Her path itself is the proof. The trauma is attestation. The scar is a stamp signed by the Earth itself. She just needs a system that can read her chain.

This protocol exists so that Sera’s chain is readable.

That is not the entire pitch. It is the test the entire pitch has to pass. Every design decision in HOP — the dual-signature attestation, the portable Skillchain, the inverted reputation universe, the basal-rate floor, the forking rule, the bilateral-consent mentorship matching, the disadvantage multiplier, the bridge-town primitive — is evaluated against a single question: does this make Sera’s chain readable? If the answer is no, the design is wrong. If the answer is yes, the design is provisionally correct. The protocol is not for Sera alone. The protocol is for every person who is currently invisible to the system because the system measures the wrong dimensions. There are hundreds of millions of them. They are the actual subject of the work.

The institutional framing comes after, because the institutional framing is what makes the floor stand. A Tier-1 systemic bank can act as the trust anchor for Sera’s first stamps. A national government can deposit Beans into chains that mentor people through their first ground-level year. A federation of banks, unions, and community organisations can publish federation treaties that make Sera’s portable chain legible across institutions rather than legible only inside the institution that signed it. Treasury is on the pitch because the fiscal argument writes itself once the protocol exists: spending public money on directly-measured skill transfer through measurable infrastructure is more efficient than spending it on training providers by every metric Treasury cares about. Ministers are on the pitch because a nation leading on the protocol is structurally similar to the nations that led on Superannuation-style retirement saving in the early 1990s — the country that writes the standard captures the network position without owning the network.

But none of that is the point. The point is that Sera’s chain has to be readable, and the institutional layer is the substrate that makes that possible at scale. Treasury, ministers, and Tier-1 bank executives are being invited to participate in something that protects Sera, not the other way around.

What HOP Is Not

HOP is not a cryptocurrency project. It is not a DAO. It is not a Web3 anything. The cryptographic primitives (BBS+, Merkle anchoring, dual-signatures, content addressing) are tools, not identity. HOP is closer in spirit to the institutional infrastructure of the Postal Union or the BIS than to the speculative apparatus of contemporary blockchain.

The intellectual ancestors are Haudenosaunee elders, Hirschman, Vygotsky, Beane, and Jefferson — not Satoshi or Vitalik. This positioning matters because the audience for HOP is governments, unions, and large institutions, who will judge it correctly only if it does not arrive wearing the wrong jacket.

The cleanest comparison for technical readers: HOP is to labour what Sigstore is to software supply chain. An open protocol for cryptographically attested work units, with content-addressed identifiers, signed by participants, federated across implementations, verifiable by any party.

The Larger Scope — Peaceful Coexistence Under Irreconcilable Disagreement

The labour-market application is the first deployment. The protocol is more general than that.

Every primitive specified in HOP — multi-dimensional attestation, trust-filtered query, bilateral consent, federation by treaty, severity-tiered response to betrayal, bridge-builder reputation, the inversion that prevents self-attestation, the substrate-neutrality of the $Variable invariant — solves a problem older than labour markets. The problem is how do parties who disagree fundamentally about important things continue to occupy the same physical space without escalating to violence? The Peace of Westphalia answered this for nation-states in 1648 with sovereignty, non-interference, and recognition-by-treaty. The answer worked for 377 years and is now visibly failing — at the international level, at the corporate level, at the personal level. The Westphalian primitives are not wrong; they are undersized for the substrate they now operate on.

HOP’s reputation layer is the structural patch. It makes attacking concepts cheaper and more rewarded than attacking people.

Concept-attacks become productive market behaviour: launch a competing chain at a lower tax rate, watch workers migrate, force the incumbent to improve or lose. A disagreement about how Workchains should be governed becomes a fork; the fork either thrives or doesn’t; the market resolves the question without anyone needing to be silenced or excluded.

Personality-attacks become structurally unprofitable: negative attestations only land when their authors are in the querier’s trust set, when the stamp is anchored to specific evidence, and when the stamp-graph topology does not show collusion. The protocol does not ban personality-attacks; it makes them economically irrational. The economic gradient pushes everyone toward concept-attacks because that is where the rewards are.

This is the post-Westphalian primitive. Not “we agree on everything” — that is impossible and undesirable. Not “we agree to disagree politely” — that is the Westphalian failure mode where false friendship masks real betrayal. The new equilibrium is: we disagree fiercely about concepts, in public, with full record, and we cooperate fully on infrastructure, because the protocol makes both behaviours rational simultaneously.

This is what lets Sera’s reputation survive the Witnesses’ excommunication. The Witnesses’ negative attestations of her are real but they live only in the Witnesses’ trust set. A querier whose trust set does not include the Witness eldership simply does not see those attestations. Sera’s positive attestations, accumulated over fifteen years of digging, exist in their own trust sets — different chains, different employers, different communities. The protocol does not adjudicate which set is right. It lets both exist, and lets queriers choose their own lens.

This is also what lets any nation federate cleanly with countries it ideologically disagrees with on AI governance, labour rights, or anything else. Workchains in one country and Workchains in another can sign federation treaties at the trust floor — the depth at which both share ground — while disagreeing freely at the leaf. Workers carry portable reputation across the federation; both nations capture their share of cross-border labour value; neither nation has to surrender any internal policy. Cooperation without agreement is the protocol’s normal operating mode.

Sera is the test case for the floor. Westphalia is the test case for the ceiling. The same primitive solves both because they are the same problem at different scales. The protocol does not care whether the participant is a person, a town, a corporation, or a nation-state. The $Variable invariant is what lets the pattern scale across magnitudes without changing form.

A National Position

Some pluralistic democracies have worked, slowly and imperfectly, on the adjacent problem for decades: making space for radically different cultures, beliefs, and identities to coexist on the same continent without civil war. Multicultural policies, native-title-equivalent recognitions, religious tolerance written into constitutions, voting structures that force participation across the spectrum. These are imperfect implementations of a deeper claim: the social technology of “we disagree about everything important and still live peacefully side by side” is buildable. HOP is the next iteration of that social technology, in software, at scale.

The Haudenosaunee Great Law of Peace, founded around 1142 and still operating, demonstrates the pattern is older than Westphalia and survives it. The Confederacy did not share religion, language, political philosophy, gender norms, or kinship structures across its six nations. It federated anyway, on principles of peace as active harmony, equity ensuring all nations had voice, and consensus-based decision-making (see mythology/02-haudenosaunee). Benjamin Franklin studied the Confederacy explicitly and drew on its constitution in unifying the colonies; the U.S. Congress formally acknowledged this influence in 1988. HOP is the third instance of the pattern.

A nation leading on HOP makes structural sense for the same reason any nation has led on Superannuation-style retirement-saving programs since the early 1990s (see mythology/07-superannuation): the country that writes the standard captures the network position without owning the network. Bean Chains map onto super with structural precision (every withdrawal costs Beans, Beans deposit into a fund-equivalent, the fund’s underlying assets are skill-vector trajectories, compounding produces a long-dated dividend stream — see §6.3.6). The institutional infrastructure that makes super work — prudential standards, deferred-comp regulatory categories, trustee fiduciary duties — applies directly. The fiscal argument for government Bean deposits writes itself once Treasury sees the structural parallel.

Implementation Scale

HOP scales from multi-GPU clusters coordinating deep-learning traces, down to a first-generation smartphone in Bangalore negotiating micro-manufacturing QA tasks over a 2G connection. The protocol requires no centralised compute; LLM reasoning occurs at the edges (Skill-Agents and Worker-Agents) while the chain state remains lightweight and easily federated via Dolt and Celestia-class data availability layers.

Status

Approximately 40% of the v0.1 protocol is running in production today. Beads (the atomic-work data structure, on Dolt) is operational at github.com/gastownhall/beads. Gas Town (the agent orchestration layer) is operational with 12,000 GitHub stars and 450+ contributors. The Wasteland (the federation layer) launched March 4, 2026. Skillchains are running on Observatory infrastructure for human workers and on rig infrastructure for AI agents.

v0.2 design lanes: Bean Chains and the deferred-dividend mentorship-outcome layer; BBS+ selective disclosure; Group Vectors as the sixth universe; cross-chain skill-vector translation; substrate-asymmetric currency resolution.

v0.3 design lanes: The full reputation surface — multi-dimensional tensor, trust-filtered query, revocation cascade with antibody memory, Clean Margins severity-tiered response, capability as multiplicative product across the five universes. The Wasteland is the canonical reference implementation for the parts already in production; the Inter-Town Communication Constitution is the canonical philosophical substrate for what the v0.3 reputation surface looks like in full.


The rest of this specification proceeds in the order: laws (§1), topology (§2), atomic units (§3), the skill code (§4), agent architecture (§5), economic mechanics (§6), namespace and trust hierarchy (§7), implementation substrate (§8), applied use cases (§9), foundations and lineage (§10), adoption path (§11), glossary (§12), open concerns and v0.2 design lanes (§13), and the v0.3 reputation surface (§14). Readers wanting the technical substrate immediately can skip to §8. Readers wanting the philosophical foundations can start at §10. Readers wanting to evaluate whether HOP is real should skip to §11 and check the production-running components against the github links.

The protocol is what is described, not what is rendered. The HTML and PDF outputs of this specification are views. The markdown source at the project repository is the canonical record. Suggested changes, objections, and proposed mechanisms are welcomed and expected. The strength of the protocol is the breadth of attention it receives, not the polish of its first specification.