# CongoVersity — the web of trust (disrupting peer review, degrees, and the SSOT of knowledge)

> **New layer (AJ, 2026-07-03).** The [education arm](CONGOVERSITY.md) named accreditation as its
> load-bearing honest gate: a schooling tier is only *real* with an accredited partner, else it's
> "supplementary, not certified." **This is the answer to that gate — not by joining the accreditation
> cartel, but by routing around it with a web of trust.** Bootstrap from credentials verified *at the
> source*; from there, verified peers confer standing on each other; everyone who earns standing in a
> field becomes a mentor in it. And the same trust graph governs what enters a shared body of
> knowledge — a cite-or-refuse SSOT that is Wikipedia and Plausible reimagined.

## ⭐ The lodestar (extends the education arm's)
> **A brilliant self-taught researcher with no institution, and a tenured professor, stand in the same
> graph. Neither's standing is bought or granted by a gatekeeper — it is *vouched* by verified peers,
> in the open, auditable by anyone. The professor's degree is a seed of trust, not a moat.**

If a feature lets someone *buy* or *fake* standing, it has failed the lodestar. Trust here is **earned
and auditable**, never asserted and never sold.

## The honesty knife-edge (the load-bearing decision)
CongoVersity confers a **trust-graph standing**, *NOT a legal degree.* Every surface says exactly what
it is: *"X is vouched-for by N verified peers in field Y."* It **never** says "accredited BSc." This is
what separates it from a diploma mill: it is powerful *precisely because it does not lie* about being a
state-recognised qualification. It sits **alongside** the accreditation-partner path in
[CONGOVERSITY.md](CONGOVERSITY.md) — an honest parallel signal, not a counterfeit of the state's.

## How it works (proven in `the420code/proofs/web-of-trust/`)

### 1. Bootstrap — verified-seed-only roots
Trust is rooted only in credentials **checkable at the source**: an ORCID iD with works, an
institutional-email challenge/response, DOI-linked authorship, a cryptographically signed diploma, or a
national qualifications-verification API. **A self-asserted PDF never becomes a root.** The graph is
exactly as honest as this issuer check — so we make it the only door in.

*(The 72 scientists already verified in the a₀ campaign — the 9 + 63 — are a clean, real, verified seed
set. The web of trust bootstraps from work already done.)*

### 2. Vouches → field-scoped standing, with distance-decay (the Sybil brake)
A verified person **vouches** for another in a named **field**. Standing flows from roots through
vouches and **decays with each hop** from a verified root. So a rootless ring of fake accounts vouching
for each other earns **~zero standing and mints no professors** — the whole attack the design exists to
stop. A ring gains real standing *only* if a genuine root vouches into it: an **auditable, costly** act
by a real, named person. (Proven: the self-vouching ring scores 0; standing appears only when a real
root vouches in.)

### 3. Accolades — earned and field-scoped
Mentor → Teacher → Professor tiers require **standing in that field**. You **cannot confer a tier you
lack**, and a tier **cannot be gifted to someone who hasn't earned it** through the graph. Physics
standing confers *nothing* in organic chemistry. **Everyone who clears the mentor bar in a field
becomes a mentor in it** — that is the "everyone with a degree teaches" flywheel, but *earned through
the graph, not asserted.*

### 4. Governed knowledge ingestion — the megamind
Everyone uploads their thesis / PhD / body of work. It does **not** enter the shared body of knowledge
on upload. It enters **only** when:
- a **quorum of peers who hold verified standing in the work's field** vouch for it, AND
- it is **coherent** with what the SSOT already holds (it doesn't negate a settled fact or claim to
  solve a known-open problem).

When both gates pass, the work is:
- **chunked into citeable Lucid passages** (title / venue / year / DOI / abstract — **public metadata
  only**, no paywalled full text),
- **compression-stored** against the corpus already ingested (the estate's novel shared-prior codec —
  *transmit the surprise, not the whole*; later works cost only their novelty),
- **appended to a Merkle provenance chain** — every accepted work is **tamper-evident and attributable**
  to the peers who agreed to it.

The result is a governed, cite-or-refuse **single-source-of-truth**: the *"world's smartest Lucid"* —
smart not because it's a trained model, but because every passage is **peer-verified, provenance-chained,
coherent, and honestly cited or refused.**

## Wikipedia and Plausible, reimagined
- **Wikipedia reimagined** — un-enclosed knowledge, but with **peer-verified provenance** instead of
  anonymous edits. Every fact traces to the verified peers who agreed to admit it; nothing enters by
  fiat or by an edit war.
- **Plausible reimagined** — attribution without surveillance. An **auditable, non-surveillance record
  of who contributed and who agreed to what**, not a tracker of what readers do. Attribution flows to
  contributors ([[pay-the-foss-debt]] extended to knowledge), not extraction from readers.

## The honest gates (named, not hand-waved)
- **Not a legal degree — ever.** Output is auditable standing, never an accredited qualification. The
  accreditation-partner path in CONGOVERSITY.md remains the route to a *state-recognised* credential.
- **Verified-seed-only.** No self-asserted credential roots the graph. Slower to bootstrap; sound at the
  root — the only honest way to build a trust system.
- **Sybil cost is a real, named, corrupt voucher.** The graph doesn't claim to be Sybil-*proof*; it
  raises the cost so that faking standing requires suborning a *real* verified peer — an act on the
  public, auditable record.
- **Public metadata only.** The megamind ingests rights-clean abstracts/metadata (or a person's own
  uploaded work by consent), never scraped paywalled full text.
- **Coherence is structural, not a truth oracle.** The gate catches mechanical incoherence
  (contradiction, solved-open-problem claims); it does **not** judge whether a coherent claim is *true*.
  A coherent bad idea can still enter — and be argued down in the open. Honest by design.
- **Free stays free — golden-share-locked** ([[golden-share-anti-betrayal]]): standing and knowledge
  cannot later be paywalled against the poor.

## Why it fits the estate (the interlock)
- **Lucid** — the cite-or-refuse engine's highest calling: a governed SSOT that cites provenance or
  refuses ([[lucid-engine]], `the420code/a0/lucid-pack`).
- **One-Record / delta-store** ([[one-record-knowledge-store]], [[delta-store-proof]]) — the Merkle,
  append-only, delta-only store IS the provenance chain.
- **Coherence-ledger** (`the420code/proofs/coherence-ledger`) — the deterministic agreement gate.
- **Novel compression** (`the420code/proofs/compression`) — the shared-prior store; the corpus is the
  prime, so knowledge grows dense, not bloated ([[stack-boring-bandwidth-aware]]).
- **The a₀ campaign** — its 72 verified scientists are the bootstrap seed; the emails aimed at G's
  father's real goal ([[g-father-real-goal]]) become the first verified roots of a body of knowledge.
- **Never-enclose creed** ([[pay-the-foss-debt]], Open Agriculture) — knowledge un-enclosed, attributed
  to those who built it. The mind's half of never-enclose.

## What's built vs honest gaps
- ✅ **Governance core — PROVEN.** `the420code/proofs/web-of-trust/` (21 self-verifying checks,
  deterministic): verified-seed roots, distance-decay Sybil resistance, field-scoped earned accolades,
  quorum + coherence ingestion gate, tamper-evident Merkle provenance.
- ✅ **Ingest pipeline — BUILT + tested.** `ingest_pipeline.py`: metadata → citeable passages →
  agreement gate → compression-store (primed on the corpus) → Merkle chain. Lossless round-trip
  asserted per passage.
- ◻ **Real issuer verification** — the proof MODELS the ORCID/email/DOI/national-API check with an
  oracle. The real arm wires the actual issuer calls (the #1 build unlock).
- ◻ **The megamind seed** — swarm-ingesting G + the 72 emailed scientists' public works (this session);
  the 144 follow. Public metadata only.
- ◻ **The peer UI** — upload, vouch, see-your-standing, audit-the-graph surfaces (unbuilt).
- ◻ **Semantic/vector retrieval** — today Lucid is BM25 cite-or-refuse; a vector tier is a later,
  additive layer (no model, still cite-or-refuse).

## The honest one-liner
CongoVersity's web of trust bootstraps from **source-verified** credentials, lets verified peers confer
**earned, field-scoped, distance-decayed** standing (Sybil-resistant, never sold), and uses that same
graph to **govern a cite-or-refuse SSOT**: works enter only on **peer quorum + coherence**, are
**Merkle-provenanced** and **compression-stored**, and are served by Lucid which **cites or refuses**.
It is **not a legal degree** and never claims to be — it is Wikipedia's openness with peer-verified
provenance, and Plausible's attribution without the surveillance. Knowledge, un-enclosed and *earned*.
The first *real* verified roots may already exist: government teachers running free schools for
neurodivergent kids in town shops — state-registered (source-verifiable) and already doing the
neurodiversity-affirming work. The pilot that turns them into CongoVersity's first roots is in
[PILOT_SHOPFRONT_SCHOOLS.md](PILOT_SHOPFRONT_SCHOOLS.md).

Companions: [CONGOVERSITY.md](CONGOVERSITY.md), [PILOT_SHOPFRONT_SCHOOLS.md](PILOT_SHOPFRONT_SCHOOLS.md), `the420code/proofs/web-of-trust/`, [[lucid-engine]],
[[one-record-knowledge-store]], [[g-father-real-goal]].