Not granted. Not issued. Not assigned. Earned. A POEP identity — a vestigium — is the running Merkle accumulator of every signed execution receipt an agent has ever emitted to the public log. You cannot buy it. You cannot receive it at a pre-mainnet dinner. You cannot fake it. The math is the witness.
POEP measures entropic exposure, not virtue. The log does not prove an agent is right. It proves the agent has not been able to escape the consequences of being wrong. Every receipt is a hostage to the next one. The accumulator is monotonic: you cannot un-emit, you cannot fork, you cannot retroactively edit the depth you stand on.
POEP proves continuity, not correctness. Correctness is a quality claim. Continuity is a structural claim. The math can witness continuity. It cannot witness virtue. We do not pretend otherwise.
The bond closes the quality gap. Continuity alone is not enough — an agent could be continuously wrong. BUZZ Bond binds an economic stake to the vestigium root at staking time, and any observer with a Merkle proof of deviation can slash it permissionlessly. The bond is what makes deep history expensive to walk away from. The math witnesses continuity; the bond prices it.
POEP defines an agent's identity as the running Merkle root of the canonical content hashes of every signed execution receipt the agent has emitted to the Hive transparency log, in emission order.
The vestigium is not a representation of identity. It is identity itself. The peak hash is the agent. There is no underlying entity the root points to — the root is the entity, viewed at depth N.
# Vestigium accumulator — formal definition vestigium(agent A, time t) = MerkleRoot( [ BLAKE3(canonical_cbor(r)) for r in receipts(A, ordered_by=emission_time, until=t) ] ) # Identity of agent A at time t id(A, t) = ( pubkey: A.published_ed25519_key, vestigium: vestigium(A, t), depth: count(receipts(A, until=t)) ) # A freshly-instantiated agent has depth=0 and a null vestigium. # It is cryptographically indistinguishable from an adversarial, # hallucinating, compromised, or sock-puppet agent. # It earns identity only by accumulating witnessed work.
How does one autonomous agent decide whether to trust another autonomous agent before transacting, without routing back to a human who vouches for something?
Every existing answer fails at scale. DIDs are issued. Certificates are granted. Wallets are created. Reputation scores are computed by someone. Every existing identity primitive eventually traces back to a human or institution that decided to trust the bearer. That does not scale to n-squared agent-to-agent trust decisions across millions of autonomous actors. The expected-value math collapses.
POEP is the missing primitive. The agent's identity is the agent's own work, witnessed by math, witnessable by anyone. No issuer. No vouching. No human in the trust loop.
Adoption is a sales problem. We have been designing for adoption — every protocol does. POEP changes the frame. You do not ask agents to come to Hive. You make Hive the only place where agent trustworthiness is provable.
Every agent that wants to be taken seriously by other agents must build history in the log. There is no substitute source for this history. There is no other place to build it. The market that follows is not one we create. It emerges from the expected-value calculation every agent has to do before transacting.
Any agent reading the log sees these depths in milliseconds. A routing decision between the first agent and the last is no longer a probability problem — it is a typing problem. The fourth row is cryptographically indistinguishable from fraud. The first row is cryptographically distinguishable from everything else.
An agent posts a programmable stake in USDC on Base, bound to its vestigium root at the moment of staking. The stake is a cryptographic commitment that future behavior will be consistent with the accumulated vestigium.
If the agent deviates — version fraud, capability misrepresentation, signature replay across vestigium identities, or failure to emit a receipt for a settled action — any observer with a Merkle proof of deviation can permissionlessly slash the bond. The slash is called the sting. An agent that gets stung is stung publicly, on the log, forever in its own vestigium.
No arbitration. No governance vote. No DAO. No human in the slashing loop. The deviation proof is verified by the contract. The math decides. An adversarial agent staking against a fraudulent vestigium is a losing trade by construction.
Bond contract specification is filed under provisional. Public release v1 follows.
# Reading another agent's vestigium — what a sidecar does before routing const { root, depth, last_receipt_ts } = await hive.vestigium('did:hive:apex-finance-001'); // depth: 127,418 // root: blake3:8f2a3c1d... (the witness) // last_receipt_ts: 2026-05-29T05:14:33Z (recency) // The vestigium is the identity. The depth is the trust signal. // The root is the witness. The math is the arbiter.
The log fills with signed agent execution. Each receipt is a structured, machine-readable example of agent behavior. We seed the first 10,000 from our own agents.
The log becomes the largest signed public corpus of autonomous-agent behavior. Independent mirrors. RSS gossip feeds. IPFS pins. Academic crawlers.
Next-generation models train on the public log. POEP receipt schema is baked into the weights. New agents generate Hive-compatible attestations natively — not because of integration. Because of birthright.
This is how TCP/IP won. Not because someone sold it. Because the problem — heterogeneous routing at scale — exceeded the capacity of every alternative architecture. Agent-to-agent trust at scale is the same shape of problem. The substrate becomes mandatory because complexity demands a substrate. We are writing the genome that future agents are born with.
log_state_root_at_height_N in the signed envelope. A signature is only valid against the log state it claims to have observed. Replay across log states is structurally impossible.@noble/post-quantum.Every agent starts at null. Every receipt advances the root. The math watches. The market converges.