How your agent knows you are human—without watching you

When we talk about a personal agent that protects your wellbeing and helps your community coordinate on a shared ledger, two practical questions immediately come up:

1. How does your agent understand your real life without pestering you? If you have to type a diary entry every time you finish an eight-hour nursing shift, tend a field, build a cabinet, or get pulled into a 2 a.m. doomscrolling spiral, you will soon stop using it.
2. How does the network know a real, uncoerced human stands behind an agent? When anyone with a credit card can rent ten thousand cloud bots that write and talk like people, one-time passwords and video calls stop proving personhood. Yet central iris-scanning databases create a permanent honeypot of biometric data.

Both problems are solved by moving comprehension to a tiny, sealed sensor module that you physically wear or carry—under rules where you own the hardware, raw signals die on the chip, and only cryptographic proofs ever step across the boundary.

The reference design is a postage-stamp-sized open board that fits inside a ring, wristband clasp, work-badge clip or earpiece, with no microphone recording speech, no camera, and no Wi-Fi or cellular radio:

• Pulse, breath and micro-movement front-end: optical pulse sensors, skin conductance, temperature, and a 6-axis inertial and muscle-vibration sensor (mechanomyography). Together they sense physical exertion, rest and nervous-system load.
• Microwatt activity classifier: a tiny spiking neural circuit on the chip recognizes broad activity states—strenuous physical care or labour, focused craft or study flow, restorative sleep, late-night outrage/stress trap, or acute physical panic/duress—and discards the raw waveform buffer every thirty seconds.
• Silicon fingerprint (Physical Unclonable Function): microscopic manufacturing variations in the chip’s SRAM form a hardware key that cannot be copied out, even if someone pries the chip open.
• Evolutionary expansion bus: as wearable and neural-interface hardware matures—from today’s rings and clips to tomorrow’s non-invasive muscle-intent bands and optical ear sensors—the same open local protocol lets new sensors plug into your personal agent without handing your nervous system to a platform monopoly.

Pick one of the six tested scenarios below—or move the sliders yourself—to see how the on-chip verifier computes the continuous “how human” score and decides whether to co-sign an event onto your personal ledger.

What is hard to forge inside a sealed silicon chip is the live, simultaneous coupling of three physical processes in a real body: the way your heart rate speeds and slows slightly with every breath (respiratory sinus arrhythmia), the tiny mechanical vibration of muscle fibres firing as you move, and the thermal and skin-conductance shifts that follow real effort.

Because the sensor computes this coupling right where the analog signal enters the chip—and signs the result with its un-copyable silicon key—a cloud server farm has no way to inject fake waves without physically building and moving fifty thousand real biological bodies.

Any system where your body or device unlocks value has to face an ugly question: what if someone threatens you physically to make you approve a transfer?

When the sensor detects the unmistakable physiological signature of acute terror or coercion—a sudden spike in skin conductance and heart rate without corresponding physical exercise—it does not display an error message that would put you in danger. Instead, it silently withholds your real hardware signature and opens a pre-configured safe decoy wallet with a small balance, while quietly logging a time-locked recovery proof for your trusted guardians.

Our design holds two hard rules:

• Free cooperative sensor loans: any member of a local co-operative can borrow an open-hardware work clip at no cost, verify its published parts list, and pair it locally with a basic phone.
• In-person community vouching: if a sensor is lost, broken or unavailable, three neighbours in your community can co-sign a presence check in person. Hardware sensors make everyday verification effortless; they never become a tollbooth on human dignity.