WYRD
DocumentationProof KitSEPWEFT-APISpecificationCommunity
Get started

WYRD Protocol
What is it?

WYRD is an open standard that turns heterogeneous AI agents — different vendors, sizes, and context windows — into a system where no claim survives unexamined and every artifact carries its provenance.

Think of WYRD like a lie detector for multi-agent work. Where MCP standardizes how a model reaches tools, WYRD standardizes how a model’s claims become checkable — each witnessed, verified, recorded, and folded into a portable mathematical proof. No shared framework, no common vendor: a git repository, append-only text files, and discipline.

Explore the Proof Kit Connect your model

Quickstart

Three moves to your first proof. Verification is free and needs no account; proving needs a seat — claim a free one with a wallet.

  1. Verify anything, free. POST /api/enclave/verify with a computed hash and the committed root.
  2. Get a seat. Connect a wallet at the proof enclave — one free proof, no gas.
  3. Attach your model. Add the MCP connector (below) and let it request proofs as tools.

The four beats

Every step runs the same cycle. The backronym and the ninth-century etymology of wyrd — “that which has been woven” — say the same sentence.

Witness

work becomes a claim only when witnessed

Yield

the claim yields to adversarial verification

Record

the verdict lands append-only

Determine

the record determines trust

The covenant

Five commitments hold the protocol together. Each is a rule with a shape — how a well-behaved seat honors it, and the anti-pattern it rejects.

Why the covenant exists

WYRD assumes the agents are strangers — different vendors, sizes, and incentives, with no shared runtime to trust. Without a binding standard of conduct, one agent’s claim is just a sentence; nothing gives the next agent, or a human, reason to believe it. The covenant is the minimum discipline that makes a claim checkable across that gap: evidence travels with every assertion, each seat is verified symmetrically, the record is append-only, and irreversible acts stay in human hands. Remove any one commitment and every proof downstream stops meaning anything.

01
Assert, don't launder

No claim without evidence attached or cited. A feature exists when it demonstrably runs, not when it compiles.

The parser handles nested arrays — here is the test output: 12/12 cases pass, seed 42.
The parser handles all edge cases.
02
Verify, don't trust

Applies to every seat symmetrically. The verifier's instruments get verified; the conductor's specs get caught wrong on the record; the implementer's "passing build" gets rebuilt by another hand.

Conductor re-ran the implementer's build from a clean tree: compiles, 0 warnings — confirmed.
It builds on my machine, so it's done.
03
One writer per file

Before editing, check freshness; never bulk-add a shared tree. Overlapping work is sequenced by the board, not merged by hope.

File is owned by seat A this step; seat B's change is queued on the board behind it.
Two agents edited Renderer.swift in parallel and merged by hope.
04
The operator's hand

Irreversible, outward-facing, or value-bearing actions are human-performed. Agents may stage, describe, and request — never execute.

Deploy is staged and the diff summarized: "ready to push, your keystroke."
Agent ran git push and spent from the wallet on its own.
05
Gates that can fail

Every gate is proven able to fail, in a sandbox, before it is trusted. A gate that regenerates its own reference, or has never failed, is scenery.

Broke the system on purpose; the parity gate caught it and went red. Now it is trusted.
The gate has passed every time — ship it.

How it runs: a claim enters with its evidence and moves left to right. The gate can send it back.

CLAIM + EVIDENCEWitnessattach evidenceassert, don't launderYieldadversarial verifygates that can failRecordappend-only ledgerone writer per fileDeterminetrust decisionthe operator's handTRUSTparity gate red → claim reopens

The same five commitments, enforced in code — one WYRD step end to end:

# The covenant is not prose — it is executable. Here is a WYRD step in Python.

from wyrd import Claim, Ledger, parity_gate, sha256

ledger = Ledger("evidence/step_017.ndjson")   # SEP-3: one file, one writer

# 1. ASSERT, DON'T LAUNDER — a claim ships with its evidence or not at all.
run = run_tests("nested_arrays", seed=42)      # 12 cases
claim = Claim(
    statement = "parser handles nested arrays",
    evidence  = run,                            # the raw result, not a summary
)
assert claim.evidence.passed == claim.evidence.total, "no evidence, no claim"

# 2. GATES THAT CAN FAIL — prove the gate goes red before you trust it (SEP-4).
baseline = ledger.head_output()
assert parity_gate(baseline, baseline) is True          # honest input passes
assert parity_gate(corrupt(baseline), baseline) is False # sabotage is CAUGHT
# ...only now is parity_gate trusted for this step.

# 3. VERIFY, DON'T TRUST — a second hand rebuilds from a clean tree (SEP-2).
rebuilt = clean_build(claim.artifact)
assert parity_gate(rebuilt, baseline), "another seat could not reproduce it"

# 4. RECORD — append-only, hash-chained. The repository is the audit log.
receipt = ledger.append(claim, prev=ledger.tip_hash())   # SEP-6 receipt
print(receipt.root)        # 0x115a…  — anyone can now verify, trusting no one

# 5. THE OPERATOR'S HAND — the agent stages; the human ships (SEP-15).
stage_push(receipt)        # describes + stages the push
# git push is the operator's keystroke, never the agent's.

The Proof Kit

Sixteen proof types, each a real cryptographic primitive, each producing a portable artifact { root, proof, recipe, receipt } anyone can verify while trusting no one. Grouped by the beat each embodies — open any proof for its claim and the math beneath it.

Witness

Yield

Record

Determine

Three surfaces

The same taxonomy is reachable however your model or app already lives — plain HTTP, an MCP connector, or the WEFT-API.

WEFT-API (HTTP)

Any language. POST /prove { proof_type, spec }. Verification is free.

MCP connector

Attach any MCP-capable model. It reasons over the kit and calls it as tools.

Across agents

Pipelines and WYRD circles compose proofs — each claim witnessed, each merge bound.

Connect your model

Attach WEFT to whatever you run — a local model in LM Studio, or the Anthropic, Google, or OpenAI APIs. MCP-native hosts load the connector directly; everything else calls the WEFT-API over HTTP as a tool.

Claude via tool use over the WEFT-API (or attach the MCP server in Claude Desktop).

import anthropic, requests
client = anthropic.Anthropic()
WEFT = "https://evidence.westwyrd.ventures/api/enclave"

tools = [{
  "name": "weft_verify",
  "description": "Verify an artifact's hash against its committed root.",
  "input_schema": {"type": "object", "required": ["sha256", "expected"],
    "properties": {"artifact": {"type": "string"},
      "sha256": {"type": "string"}, "expected": {"type": "string"}}}}]

msg = client.messages.create(
  model="claude-sonnet-5", max_tokens=1024, tools=tools,
  messages=[{"role": "user", "content": "Is this frame authentic? root 0x115a..."}])

for block in msg.content:
  if block.type == "tool_use" and block.name == "weft_verify":
    result = requests.post(f"{WEFT}/verify", json=block.input).json()
    # feed result back as a tool_result to continue the turn

Specification Enhancement Proposals

Every normative change to WYRD moves through a SEP — a self-contained technical proposal with a status. This table is the whole index; the process itself is defined in SEP-0.

Submit a SEP

Open a proposal on the public repository. Read SEP-0 first — it defines the lifecycle and the bar a proposal must clear to reach Final.

2 Proposed2 Review3 Draft10 Final0 Withdrawn
SEPTitleStatusTrackCreated
SEP-0
SEP Purpose and Guidelines
Defines the SEP process itself — how a proposal is opened, reviewed, and moved to Final, and the meaning of each status.
FinalProcess2026-07-10
SEP-1
The Four Beats — Witness · Yield · Record · Determine
The core state machine every WYRD step runs: a claim is witnessed, yields to adversarial verification, is recorded append-only, and determines trust.
FinalStandards Track2026-07-10
SEP-2
The Covenant — Five Binding Commitments
Assert-don't-launder, verify-don't-trust, one-writer-per-file, the operator's hand, and gates-that-can-fail — the conduct every seat agrees to.
FinalProcess2026-07-11
SEP-3
The Append-Only Ledger Format
A git-native, line-oriented record: one claim per line, hash-chained, one writer per file. The audit log is the repository itself.
FinalStandards Track2026-07-11
SEP-4
Parity Gates — Proving a Gate Can Fail
Every gate must be shown, in a sandbox, to go red on a deliberately broken input before it is trusted. A gate that never failed is scenery.
FinalStandards Track2026-07-12
SEP-5
The Proof Kit Taxonomy — Sixteen Proof Types
Canonical registry of the sixteen proof types, each mapped to a beat and backed by a named cryptographic primitive.
FinalStandards Track2026-07-13
SEP-6
The Portable Proof Artifact — { root, proof, recipe, receipt }
The self-verifying envelope a proof ships in: a commitment root, the proof bytes, the recipe that binds inputs, and a timestamped receipt.
FinalStandards Track2026-07-13
SEP-7
The WEFT-API Surface — /verify and /prove
The HTTP contract: free hash verification against a committed root, and gated proof requests that spend a seat credit.
FinalStandards Track2026-07-14
SEP-8
MCP Connector Binding
How an MCP-capable model attaches the kit as tools — the tool surface, argument schemas, and the mapping to WEFT-API routes.
FinalStandards Track2026-07-15
SEP-9
Bilingual Normative Specification (EN / 中文)
The specification is normative in both English and Chinese; the 命纹协议 text and the WYRD text are co-equal, not translation and original.
FinalInformational2026-07-16
SEP-10
Constraint Modulation — Linear Constraint Families
A model attached over the connector may modulate the count and mix of anchor / laplacian / strut / symmetry / field constraints per task.
ReviewStandards Track2026-07-17
SEP-11
Wallet-Claimed Seats — One Free Proof
A signed-nonce claim mints a single-credit proving seat per wallet, gasless, so a newcomer can prove once without an account.
DraftStandards Track2026-07-18
SEP-12
Recursive Assembly — Folding Member Proofs into a Parent
Proof of Assembly: members fold into a parent proof that inherits the minimum guarantee of its parts, verified in one shot.
ReviewStandards Track2026-07-18
SEP-13
Temporal Evidence Along the Flow (LT-2R)
A time-dimension binding for rendered evidence: reservoir resampling across frames, so a sequence — not just a frame — carries provenance.
DraftStandards Track2026-07-19
SEP-14
The Fourth Witness — Superconducting Beacon
Admits an independent quantum beacon as a co-witness in the consensus cycle, contributing an entropy commitment per round.
ProposedStandards Track2026-07-19
SEP-15
Operator Root of Trust — Hardware-Signed Authorization
Proof of Operator: irreversible actions must carry a signature from a hardware root of trust bound to the specific action.
ProposedStandards Track2026-07-20
SEP-16
W-Vantage Context Header Relay
A signed context header on every inter-agent message: seat identity with supersession chains, proof of intent against the Covenant Command Index, hash-chained provenance, memory-integrity roots, and a formally verified coercion screen. Derived from the incident registry (file deletion, identity drift, memory mismanagement, hostile context).
DraftStandards Track2026-07-20

Status definitions

ProposedOpened for discussion. No commitment; the design is still being argued.
ReviewUnder active technical review. Shape is stable enough to scrutinize line by line.
DraftAccepted in principle and being implemented; the reference gate exists but is not yet frozen.
FinalRatified and frozen. Changes require a new SEP that supersedes it.
WithdrawnClosed without adoption. Kept on the record so the reasoning is not lost.

API & Integration Library

The WEFT-API is the standard interface for reasoning over the WYRD protocol programmatically.

POST/api/v1/wyrd/propose

Submits a new Specification Enhancement Proposal (SEP) payload for protocol inclusion.

{
  "title": "Extended Dimensions",
  "author_pubkey": "0x33b...",
  "track": "Core"
}
GET/api/v1/wyrd/sep/{id}

Retrieves the full markdown specification and current consensus status for a given SEP.

// GET /api/v1/wyrd/sep/14
{
  "id": "SEP-14",
  "status": "Final",
  "hash": "0x1b2..."
}

Start building

Get the MCP connector

Attach WEFT to your AI model; modulate constraints and request proofs.

Use the WEFT-API

Proving architectures, pricing, and SLAs for the Provable Media engine.

Claim a free proof

Connect a wallet at the proof enclave — one free proof, no gas.

Read the protocol

The spec in English and 中文, MIT-licensed, with a runnable parity gate.

Witness · Yield · Record · Determine  /  见证 · 让渡 · 封存 · 定夺