Overlap-gated access · a live model of the Hugging Face agent-intrusion ladder

You can't buy your way in.

Money buys stake. Stake opens nothing past the front door. Only earned, reciprocated trust unlocks the deeper rooms — file-read, code-exec, the internal network. Press a button and watch two agents try.

verifying engine…
Two agents, one gate. The attacker brings a fortune; the newcomer brings nothing but real, mutual work. Only one gets in.
earned overlap0
reached

Exact gate state

recomputed live by the parity-checked engine
effective overlap
reached
own / vouched
/
total stake (money)
cost → B2
cost → B3
cost → B4
gate
on

What happens if an insider defects

escrow — compensate & deter, never repair

Play a case

eight verified scenarios — snap the model to each

The receipts

all 8 scenarios, recomputed in your browser, checked against the Python
Tinker with every knob— currency, stake, per-member edges, vouchers, sockpuppets, attribution, escrow
Outer door — currency spent (attention)1
B1 opens at currency ≥ 1. Buyable, public — the outer door is meant to be cheap.
Money — stake locked in the target0
Buy up to 1e9 and lock it inside the target. The gate still grants it 0 depth.
Earned overlap — reciprocated edges per member
m10
m20
m30
m40
m50
m60
Weight comes only from reciprocated (both-commit, clean) interaction. √-dampened per member, then correlation-discounted — spread beats concentration.
Vouchers — members lending earned overlap (×0.5 bridge)
A voucher lends only the overlap it itself earned, ×0.5. One lone voucher can't reach B4.
Sockpuppets bridging through m10
K identities, each 0.5 edge to the same member. They pool on the member axis → grow only as √K. Minting IDs can't fake diversity.
Vouch reads earned overlap, never bought stake → this sponsor lends exactly 0.
Attribution model
Off = the ungated incident: every boundary opens for free.
bond posted100
harm / secret value60
Restitution (→victim, capped at bond) + burn + ex-communication. It compensates and deters — it never repairs.