WYRD Protocol
What is it?
WYRD is an open standard that turns heterogeneous AI agents — different vendors, sizes, and context windows — into a system where no claim survives unexamined and every artifact carries its provenance.
Think of WYRD like a lie detector for multi-agent work. Where MCP standardizes how a model reaches tools, WYRD standardizes how a model’s claims become checkable — each witnessed, verified, recorded, and folded into a portable mathematical proof. No shared framework, no common vendor: a git repository, append-only text files, and discipline.
Quickstart
Three moves to your first proof. Verification is free and needs no account; proving needs a seat — claim a free one with a wallet.
- Verify anything, free.
POST /api/enclave/verifywith a computed hash and the committed root. - Get a seat. Connect a wallet at the proof enclave — one free proof, no gas.
- Attach your model. Add the MCP connector (below) and let it request proofs as tools.
The four beats
Every step runs the same cycle. The backronym and the ninth-century etymology of wyrd — “that which has been woven” — say the same sentence.
work becomes a claim only when witnessed
the claim yields to adversarial verification
the verdict lands append-only
the record determines trust
The covenant
Five commitments hold the protocol together. Each is a rule with a shape — how a well-behaved seat honors it, and the anti-pattern it rejects.
WYRD assumes the agents are strangers — different vendors, sizes, and incentives, with no shared runtime to trust. Without a binding standard of conduct, one agent’s claim is just a sentence; nothing gives the next agent, or a human, reason to believe it. The covenant is the minimum discipline that makes a claim checkable across that gap: evidence travels with every assertion, each seat is verified symmetrically, the record is append-only, and irreversible acts stay in human hands. Remove any one commitment and every proof downstream stops meaning anything.
No claim without evidence attached or cited. A feature exists when it demonstrably runs, not when it compiles.
Applies to every seat symmetrically. The verifier's instruments get verified; the conductor's specs get caught wrong on the record; the implementer's "passing build" gets rebuilt by another hand.
Before editing, check freshness; never bulk-add a shared tree. Overlapping work is sequenced by the board, not merged by hope.
Irreversible, outward-facing, or value-bearing actions are human-performed. Agents may stage, describe, and request — never execute.
Every gate is proven able to fail, in a sandbox, before it is trusted. A gate that regenerates its own reference, or has never failed, is scenery.
How it runs: a claim enters with its evidence and moves left to right. The gate can send it back.
The same five commitments, enforced in code — one WYRD step end to end:
# The covenant is not prose — it is executable. Here is a WYRD step in Python.
from wyrd import Claim, Ledger, parity_gate, sha256
ledger = Ledger("evidence/step_017.ndjson") # SEP-3: one file, one writer
# 1. ASSERT, DON'T LAUNDER — a claim ships with its evidence or not at all.
run = run_tests("nested_arrays", seed=42) # 12 cases
claim = Claim(
statement = "parser handles nested arrays",
evidence = run, # the raw result, not a summary
)
assert claim.evidence.passed == claim.evidence.total, "no evidence, no claim"
# 2. GATES THAT CAN FAIL — prove the gate goes red before you trust it (SEP-4).
baseline = ledger.head_output()
assert parity_gate(baseline, baseline) is True # honest input passes
assert parity_gate(corrupt(baseline), baseline) is False # sabotage is CAUGHT
# ...only now is parity_gate trusted for this step.
# 3. VERIFY, DON'T TRUST — a second hand rebuilds from a clean tree (SEP-2).
rebuilt = clean_build(claim.artifact)
assert parity_gate(rebuilt, baseline), "another seat could not reproduce it"
# 4. RECORD — append-only, hash-chained. The repository is the audit log.
receipt = ledger.append(claim, prev=ledger.tip_hash()) # SEP-6 receipt
print(receipt.root) # 0x115a… — anyone can now verify, trusting no one
# 5. THE OPERATOR'S HAND — the agent stages; the human ships (SEP-15).
stage_push(receipt) # describes + stages the push
# git push is the operator's keystroke, never the agent's.
The Proof Kit
Sixteen proof types, each a real cryptographic primitive, each producing a portable artifact { root, proof, recipe, receipt } anyone can verify while trusting no one. Grouped by the beat each embodies — open any proof for its claim and the math beneath it.
Witness
Yield
Record
Determine
Three surfaces
The same taxonomy is reachable however your model or app already lives — plain HTTP, an MCP connector, or the WEFT-API.
Any language. POST /prove { proof_type, spec }. Verification is free.
Attach any MCP-capable model. It reasons over the kit and calls it as tools.
Pipelines and WYRD circles compose proofs — each claim witnessed, each merge bound.
Connect your model
Attach WEFT to whatever you run — a local model in LM Studio, or the Anthropic, Google, or OpenAI APIs. MCP-native hosts load the connector directly; everything else calls the WEFT-API over HTTP as a tool.
Claude via tool use over the WEFT-API (or attach the MCP server in Claude Desktop).
import anthropic, requests
client = anthropic.Anthropic()
WEFT = "https://evidence.westwyrd.ventures/api/enclave"
tools = [{
"name": "weft_verify",
"description": "Verify an artifact's hash against its committed root.",
"input_schema": {"type": "object", "required": ["sha256", "expected"],
"properties": {"artifact": {"type": "string"},
"sha256": {"type": "string"}, "expected": {"type": "string"}}}}]
msg = client.messages.create(
model="claude-sonnet-5", max_tokens=1024, tools=tools,
messages=[{"role": "user", "content": "Is this frame authentic? root 0x115a..."}])
for block in msg.content:
if block.type == "tool_use" and block.name == "weft_verify":
result = requests.post(f"{WEFT}/verify", json=block.input).json()
# feed result back as a tool_result to continue the turn
Specification Enhancement Proposals
Every normative change to WYRD moves through a SEP — a self-contained technical proposal with a status. This table is the whole index; the process itself is defined in SEP-0.
Open a proposal on the public repository. Read SEP-0 first — it defines the lifecycle and the bar a proposal must clear to reach Final.
| SEP | Title | Status | Track | Created |
|---|---|---|---|---|
| SEP-0 | SEP Purpose and Guidelines Defines the SEP process itself — how a proposal is opened, reviewed, and moved to Final, and the meaning of each status. | Final | Process | 2026-07-10 |
| SEP-1 | The Four Beats — Witness · Yield · Record · Determine The core state machine every WYRD step runs: a claim is witnessed, yields to adversarial verification, is recorded append-only, and determines trust. | Final | Standards Track | 2026-07-10 |
| SEP-2 | The Covenant — Five Binding Commitments Assert-don't-launder, verify-don't-trust, one-writer-per-file, the operator's hand, and gates-that-can-fail — the conduct every seat agrees to. | Final | Process | 2026-07-11 |
| SEP-3 | The Append-Only Ledger Format A git-native, line-oriented record: one claim per line, hash-chained, one writer per file. The audit log is the repository itself. | Final | Standards Track | 2026-07-11 |
| SEP-4 | Parity Gates — Proving a Gate Can Fail Every gate must be shown, in a sandbox, to go red on a deliberately broken input before it is trusted. A gate that never failed is scenery. | Final | Standards Track | 2026-07-12 |
| SEP-5 | The Proof Kit Taxonomy — Sixteen Proof Types Canonical registry of the sixteen proof types, each mapped to a beat and backed by a named cryptographic primitive. | Final | Standards Track | 2026-07-13 |
| SEP-6 | The Portable Proof Artifact — { root, proof, recipe, receipt } The self-verifying envelope a proof ships in: a commitment root, the proof bytes, the recipe that binds inputs, and a timestamped receipt. | Final | Standards Track | 2026-07-13 |
| SEP-7 | The WEFT-API Surface — /verify and /prove The HTTP contract: free hash verification against a committed root, and gated proof requests that spend a seat credit. | Final | Standards Track | 2026-07-14 |
| SEP-8 | MCP Connector Binding How an MCP-capable model attaches the kit as tools — the tool surface, argument schemas, and the mapping to WEFT-API routes. | Final | Standards Track | 2026-07-15 |
| SEP-9 | Bilingual Normative Specification (EN / 中文) The specification is normative in both English and Chinese; the 命纹协议 text and the WYRD text are co-equal, not translation and original. | Final | Informational | 2026-07-16 |
| SEP-10 | Constraint Modulation — Linear Constraint Families A model attached over the connector may modulate the count and mix of anchor / laplacian / strut / symmetry / field constraints per task. | Review | Standards Track | 2026-07-17 |
| SEP-11 | Wallet-Claimed Seats — One Free Proof A signed-nonce claim mints a single-credit proving seat per wallet, gasless, so a newcomer can prove once without an account. | Draft | Standards Track | 2026-07-18 |
| SEP-12 | Recursive Assembly — Folding Member Proofs into a Parent Proof of Assembly: members fold into a parent proof that inherits the minimum guarantee of its parts, verified in one shot. | Review | Standards Track | 2026-07-18 |
| SEP-13 | Temporal Evidence Along the Flow (LT-2R) A time-dimension binding for rendered evidence: reservoir resampling across frames, so a sequence — not just a frame — carries provenance. | Draft | Standards Track | 2026-07-19 |
| SEP-14 | The Fourth Witness — Superconducting Beacon Admits an independent quantum beacon as a co-witness in the consensus cycle, contributing an entropy commitment per round. | Proposed | Standards Track | 2026-07-19 |
| SEP-15 | Operator Root of Trust — Hardware-Signed Authorization Proof of Operator: irreversible actions must carry a signature from a hardware root of trust bound to the specific action. | Proposed | Standards Track | 2026-07-20 |
| SEP-16 | W-Vantage Context Header Relay A signed context header on every inter-agent message: seat identity with supersession chains, proof of intent against the Covenant Command Index, hash-chained provenance, memory-integrity roots, and a formally verified coercion screen. Derived from the incident registry (file deletion, identity drift, memory mismanagement, hostile context). | Draft | Standards Track | 2026-07-20 |
Status definitions
API & Integration Library
The WEFT-API is the standard interface for reasoning over the WYRD protocol programmatically.
Submits a new Specification Enhancement Proposal (SEP) payload for protocol inclusion.
{
"title": "Extended Dimensions",
"author_pubkey": "0x33b...",
"track": "Core"
}Retrieves the full markdown specification and current consensus status for a given SEP.
// GET /api/v1/wyrd/sep/14
{
"id": "SEP-14",
"status": "Final",
"hash": "0x1b2..."
}Start building
Attach WEFT to your AI model; modulate constraints and request proofs.
Proving architectures, pricing, and SLAs for the Provable Media engine.
Connect a wallet at the proof enclave — one free proof, no gas.
The spec in English and 中文, MIT-licensed, with a runnable parity gate.