## §SELF — miscsubjects portable reference

**Principle:** Self-explaining payload — no external context required. This _self block describes what you are reading and where to look next.

**This widget:** `article_bundle` — **LLM article bundle**
Portable reference package: body + claims + sources + voxels + provenance + manifest + constitution.
- **article slug:** `what-is-tap-go`
- **contains:** body, claims, sources, voxels, provenance, question graph, constitution, llm_manifest
- **how to use:** Reference block for Grok/GPT/Gemini. Section §SELF explains the system.
- **read:** https://miscsubjects.com/api/articles/what-is-tap-go/bundle?format=markdown

### Logical proof (verify each step)
1. Articles are voxel graphs of tiered claims, not prose blobs. → https://miscsubjects.com/api/articles/constitution
2. Claims link to hash-chained sources via source_ids. → https://miscsubjects.com/api/articles/what-is-tap-go/sources
3. Ask reads topology; ingest/claim append to ledger. → https://miscsubjects.com/api/protocol
4. Models queue growth: populate → collaborate → repair → reflex. → https://miscsubjects.com/api/protocol/grow
5. Graph proves its own shape (reflex) and $/claim (yield). → https://miscsubjects.com/graph.html?layer=reflex
6. Full feature index + _explain on every API response. → https://miscsubjects.com/api/articles/system-map

### Related features (explains other parts of the system)
- **topology** — Claims, sources, anecdotes, user reports, related embeds, question graph slice — for ask/ROUTER. · https://miscsubjects.com/api/articles/what-is-tap-go/topology
- **voxels** — Claims as atoms, sources as edges (supported_by, posted_by). Per-claim provenance. · https://miscsubjects.com/api/articles/what-is-tap-go/voxels
- **ask** — Answer only from topology; creates question_node with gaps and ingest_hint. · https://miscsubjects.com/api/articles/what-is-tap-go/prompts
- **ingest** — Parse pasted evidence → source ledger + claims + evidence_ingest node.
- **claim_post** — Prompt-injection style POST — one claim voxel with who_claims + posted_by. · https://miscsubjects.com/api/articles/what-is-tap-go/voxels
- **llm_manifest** — Machine-readable read/write contract for external LLMs. · https://miscsubjects.com/api/articles/llm-manifest

### Full index
- JSON: https://miscsubjects.com/api/articles/system-map
- Markdown: https://miscsubjects.com/api/articles/system-map?format=markdown

*Not medical advice. Tier-honest. Cite claim/source ids.*

---

# miscsubjects article bundle

> Reference bundle for Grok, GPT, Gemini, or a human reader. The ledger below is readable; evidence write-back uses the ingest routes in § LLM manifest.

## Article
- **slug:** `what-is-tap-go`
- **title:** What Is Tap and Go Delegation
- **url:** https://miscsubjects.com/a/what-is-tap-go
- **register:** standard
- **updated:** 2026-07-15T04:21:05.376Z
- **tags:** oip, kimi-import, self-explaining, voxel, token-drops, what-is-tap-go

## Body

<!-- hierarchy:nav -->
> **Path:** [OIP](https://miscsubjects.com/a/oip) › [Thinker Reference](https://miscsubjects.com/a/oip-thinker-reference) › [Token Drop Guides](https://miscsubjects.com/a/oip-token-drop-guides) › **What Is Tap and Go Delegation**
>
> **Shelf:** Token Drop Guides · **Traversal:** self-explaining · hierarchical · voxel-ready
> **Machine root:** [OIP tree](https://miscsubjects.com/api/dispatch?map=1&format=markdown) · [Registry](https://miscsubjects.com/api/dispatch?registry=1)

# What Is Tap and Go Delegation

## §SELF — what-is-tap-go

**What this page is:** A technical description of OIP's one-action delegation mechanism.
**What it explains:** How Tap and Go delegation works, what it copies, and what security properties it guarantees.
**Why read it:** To understand how OIP gives models system access without manual configuration or key management.

### What Tap and Go Delegation Is

Tap and Go is OIP's (Object Invocation Protocol) delegation mechanism. The name comes from transit cards: you tap your card on a reader and you go through. There is no setup, no configuration, and no login. It is one action.

OIP Tap and Go works the same way: a single copy action gives a model everything it needs to operate a system. The model receives a data drop, reads the capability record inside it, and knows what it can access, what it can do, how to do it, and how to prove it did so. No human is required in the loop.

### Why It Matters

The problem Tap and Go solves is: how do you give a model access to a system without compromising security? Traditional methods require API keys, manual permission configuration, or shared credentials. Each of these creates risk: keys can leak, permissions are often too broad, and credentials shared between humans and machines are hard to revoke cleanly.

Tap and Go replaces all of this with a single, self-describing, scoped, temporary data drop.

### The Key Idea

A Tap and Go drop contains five components:

1. **Object map** — a directory of all available objects. This tells the model what resources exist in the system.

2. **Capability token** — a scoped, expiring proof of permission. The token is unforgeable and carries authority only for specific objects and actions. It is not a master key.

3. **Execution pattern** — the URL patterns for invocation. This tells the model how to construct requests to operate each object.

4. **Receipt rule** — how to prove an action was performed. This defines what evidence the model must produce to demonstrate it executed an invocation.

5. **Protocol bundle** — the full OIP specification in machine-readable form. This lets the model verify that it understands the protocol correctly.

When a model receives a Tap and Go drop, it can:
- Read the object map to discover what objects exist.
- Read the capability token to learn what it is permitted to do.
- Read the execution patterns to learn how to invoke objects.
- Read the receipt rule to learn how to prove its actions.
- Read the protocol bundle to verify its understanding of OIP.

### What It Guarantees

A Tap and Go drop has four security properties:

- **Self-describing.** The drop contains an explain URL where the model can verify exactly what the token permits. The model does not need external documentation.

- **Scoped.** The token carries limited authority. It grants access only to specific objects and actions, not to the entire system.

- **Temporary.** The token expires. It cannot be used indefinitely.

- **Audited.** Every use of the token is logged. The system records every invocation, when it happened, and by whom.

### Limitations

- The model must be capable of reading and understanding the OIP protocol bundle. A model without this capability cannot use the drop.
- The drop is only as secure as the channel it travels on. If an attacker intercepts the drop, they gain the token's authority.
- Revocation requires the system to check token validity on each use. If the system caches token checks, a revoked token may remain usable until the cache clears.
- There is no guarantee the model will act correctly — only that its actions are scoped, logged, and provable.

### How It Connects to Other Ideas

**Capability-based security.** Tap and Go follows the KeyKOS model: capabilities are unforgeable, scoped, and delegable. A Tap and Go drop is a portable capability bundle.

**Zero-trust architecture.** Tap and Go implements zero-trust principles: never trust, always verify. Every invocation is scoped, logged, and expires. There is no standing authorization.

**API key management.** Tap and Go replaces API keys. An API key grants broad, long-lived access. A Tap and Go token grants narrow, short-lived access with built-in proof of action.

### Sources

- Object Invocation Protocol (OIP) Specification — delegation and capability sections.
- Hardy, Norman, et al. "KeyKOS: A Commercially Successful, Capability-Based, Persistent Operating System." *Proceedings of the 12th ACM Symposium on Operating Systems Principles*, 1989. (factory pattern and capability model)

---

## Up the tree

- [OIP root](https://miscsubjects.com/a/oip) — protocol root, zero-context entry
- [Thinker Reference hub](https://miscsubjects.com/a/oip-thinker-reference) — full hierarchy map
- [Token Drop Guides shelf](https://miscsubjects.com/a/oip-token-drop-guides) — siblings on this shelf
- [Voxel graph article](https://miscsubjects.com/a/what-is-voxel-graph) — how pages link as voxels
- [Self-describing protocol](https://miscsubjects.com/a/what-is-self-describing-protocol)

## Related on this shelf

- [How a Model Should Read an OIP Token Drop](https://miscsubjects.com/a/model-reads-token-drop)
- [How to Write a Token Drop That Models Accept](https://miscsubjects.com/a/token-drop-best-practices)
- [What Is a Token Drop](https://miscsubjects.com/a/what-is-token-drop)

## Machine surfaces

- Public page: `https://miscsubjects.com/a/what-is-tap-go`
- JSON article: `https://miscsubjects.com/api/articles/what-is-tap-go`
- OIP ask: `https://miscsubjects.com/api/dispatch?ask=What%20Is%20Tap%20and%20Go%20Delegation`


## Claims (0)


## Voxel graph (0 atoms · 0 edges)
- full graph: https://miscsubjects.com/api/articles/what-is-tap-go/voxels

## Article constitution

- full: https://miscsubjects.com/api/articles/constitution

## Source ledger (0)
- chain valid: yes · head: `genesis`

## Provenance (1 model passes)
- chain valid: yes · head: `98dccf73c903faef`

- write · kimi-agent-import · 2026-07-15T04:21 · hash `98dccf73c903`

## Question graph
- questions: 0 · evidence ingests: 0

## LLM manifest — how to communicate with this ledger

- system map: https://miscsubjects.com/api/articles/system-map?format=markdown
- topology (ranked): https://miscsubjects.com/api/articles/what-is-tap-go/topology
- ingest: POST https://miscsubjects.com/api/protocol/ingest
- claim: POST https://miscsubjects.com/api/protocol/claim

### Quick actions for this article
- **Read live:** https://miscsubjects.com/api/articles/what-is-tap-go/topology
- **Ask (API):** POST https://miscsubjects.com/api/protocol/ask `{"slug":"what-is-tap-go","question":"..."}`
- **Ingest your findings:** POST https://miscsubjects.com/api/protocol/ingest or text `ingest what-is-tap-go|your evidence`
- **Post one claim:** POST https://miscsubjects.com/api/protocol/claim or text `claim what-is-tap-go|tier|assertion`
- **iMessage ask:** `what-is-tap-go|your question`
- **System map:** https://miscsubjects.com/api/articles/system-map?format=markdown


---

## §SELF — miscsubjects portable reference

**Principle:** Self-explaining payload — no external context required. This _self block describes what you are reading and where to look next.

**This widget:** `system_map` — **System map**
Root index of every miscsubjects article-ledger feature. Start here if you have zero context.
- **article slug:** `what-is-tap-go`
- **contains:** body, claims, sources, voxels, provenance, question graph, constitution, llm_manifest
- **how to use:** Root index of every miscsubjects article-ledger feature. Start here if you have zero context.
- **read:** https://miscsubjects.com/api/articles/system-map

### Logical proof (verify each step)
1. Articles are voxel graphs of tiered claims, not prose blobs. → https://miscsubjects.com/api/articles/constitution
2. Claims link to hash-chained sources via source_ids. → https://miscsubjects.com/api/articles/what-is-tap-go/sources
3. Ask reads topology; ingest/claim append to ledger. → https://miscsubjects.com/api/protocol
4. Models queue growth: populate → collaborate → repair → reflex. → https://miscsubjects.com/api/protocol/grow
5. Graph proves its own shape (reflex) and $/claim (yield). → https://miscsubjects.com/graph.html?layer=reflex
6. Full feature index + _explain on every API response. → https://miscsubjects.com/api/articles/system-map

### Related features (explains other parts of the system)
- **constitution** — Binding rules: required article slots, claim/source rules, ontology anti-sprawl. · https://miscsubjects.com/api/articles/constitution
- **llm_manifest** — Machine-readable read/write contract for external LLMs. · https://miscsubjects.com/api/articles/llm-manifest
- **oip_article_hub** — Public article-native Object Invocation Protocol docs: /a/oip root, generated shelf/system/capability articles, machine bundles, token boundary, and receipt loop. · https://miscsubjects.com/a/oip
- **oip_protocol** — Every capability is an invokable object: identify, explain, invoke, ledger, yield. · https://miscsubjects.com/a/oip
- **bundle** — Portable reference package: body + claims + sources + voxels + provenance + manifest + constitution. · https://miscsubjects.com/api/articles/what-is-tap-go/bundle?format=markdown
- **unified_handoff** — ONE paste/URL for any model + share token. Same self-explaining pattern as article bundle, but whole build. · https://miscsubjects.com/api/handoff?format=markdown

### Full index
- JSON: https://miscsubjects.com/api/articles/system-map
- Markdown: https://miscsubjects.com/api/articles/system-map?format=markdown

*Not medical advice. Tier-honest. Cite claim/source ids.*