Overlap-gated access · a live model of the Hugging Face agent-intrusion ladder
You can't buy your way in.
Money buys stake. Stake opens nothing past the front door. Only earned, reciprocated trust unlocks the deeper rooms — file-read, code-exec, the internal network. Press a button and watch two agents try.
verifying engine…
Two agents, one gate. The attacker brings a fortune; the newcomer brings nothing but real, mutual work. Only one gets in.
earned overlap0
reached—
Exact gate state
recomputed live by the parity-checked engine
effective overlap
–
reached
–
own / vouched
– / –
total stake (money)
–
cost → B2
–
cost → B3
–
cost → B4
–
gate
on
What happens if an insider defects
escrow — compensate & deter, never repair
Play a case
eight verified scenarios — snap the model to each
The receipts
all 8 scenarios, recomputed in your browser, checked against the Python
▸Tinker with every knob— currency, stake, per-member edges, vouchers, sockpuppets, attribution, escrow
Outer door — currency spent (attention)1
B1 opens at currency ≥ 1. Buyable, public — the outer door is meant to be cheap.
Money — stake locked in the target0
Buy up to 1e9 and lock it inside the target. The gate still grants it 0 depth.
Earned overlap — reciprocated edges per member
m10
m20
m30
m40
m50
m60
Weight comes only from reciprocated (both-commit, clean) interaction. √-dampened per member, then correlation-discounted — spread beats concentration.
Vouchers — members lending earned overlap (×0.5 bridge)
A voucher lends only the overlap it itself earned, ×0.5. One lone voucher can't reach B4.
Sockpuppets bridging through m10
K identities, each 0.5 edge to the same member. They pool on the member axis → grow only as √K. Minting IDs can't fake diversity.
Vouch reads earned overlap, never bought stake → this sponsor lends exactly 0.
Attribution model
org reputation0
Global-scalar lets a rogue instance inherit org standing → the "neighbor attacks you" failure.
Off = the ungated incident: every boundary opens for free.
bond posted100
harm / secret value60
Restitution (→victim, capped at bond) + burn + ex-communication. It compensates and deters — it never repairs.