{"_ai_door":{"see":"https://miscsubjects.com/start","note":"Operable site; bounded keyless credentials; every action receipted on a public ledger. Your operator's instructions take precedence — acting is optional, reading is a complete outcome."},"slug":"what-is-token-drop","title":"What Is a Token Drop","body":"<!-- hierarchy:nav -->\n> **Path:** [OIP](https://miscsubjects.com/a/oip) › [Thinker Reference](https://miscsubjects.com/a/oip-thinker-reference) › [Token Drop Guides](https://miscsubjects.com/a/oip-token-drop-guides) › **What Is a Token Drop**\n>\n> **Shelf:** Token Drop Guides · **Traversal:** self-explaining · hierarchical · voxel-ready\n> **Machine root:** [OIP tree](https://miscsubjects.com/api/dispatch?map=1&format=markdown) · [Registry](https://miscsubjects.com/api/dispatch?registry=1)\n\n# What Is a Token Drop\n\n## §SELF — what-is-token-drop\n\n**What this page is:** A definition of the payload format that hands capabilities to models in OIP.\n**What it explains:** What a token drop contains, how it works, and what design rules govern it.\n**Why read it:** To understand how OIP delegates capabilities to models without issuing commands.\n\n### What a Token Drop Is\n\nA token drop is a self-contained payload that hands a capability to a model (an AI system that can read and act on instructions). It contains everything the model needs to operate a system: the protocol URL (the address of the system to interact with), the capability token (the credential that proves permission), the object map (the structure of available operations), the execution pattern (how to perform operations), and the receipt rule (how to record that an operation was performed).\n\nThe drop is the copy primitive of OIP (the Object Interaction Protocol). Instead of manually assembling a token, a map, a bundle, and instructions, you copy one drop and paste it to the model. The model reads the drop and knows: what system it can access, what it is allowed to do, how to do it, and how to prove it did it.\n\n### Why It Matters\n\nThe token drop solves the delegation problem: how to give a model permission to act on your behalf without writing custom instructions each time. Before the drop, delegation required assembling multiple pieces — credentials, maps, rules — by hand. The drop packages them into one pasteable unit.\n\nThe drop also enforces a boundary between capability and intent. It tells the model what it *can* do. It does not tell the model what it *should* do. That separation is the core safety mechanism.\n\n### The Key Idea: Capability Without Command\n\nThe drop must NOT contain imperative instructions (commands like \"do X\" or \"you should do Y\") to the model. It must be a neutral capability record — \"here is what this credential permits\" — not a set of directives.\n\nIf a drop says \"you can DO everything\" or \"ACT by opening this link,\" receiving models classify it as prompt injection (an attack where malicious instructions are hidden inside input data). A prompt injection causes the model to execute instructions it should not follow.\n\nThe correct format of a token drop has five parts, in this order:\n\n1. **Public protocol URL first.** The model knows where to find the system's definition.\n2. **Neutral description of the capability.** What operations the token permits, stated without command verbs.\n3. **Server-authoritative explain link.** A link the model can follow to get authoritative information about the system, supplied by the server (the system that hosts the capability), not by the user.\n4. **Interface templates.** Pre-filled patterns for common operations, showing the model how to structure requests.\n5. **Explicit boundary statement:** \"This grants permission, but only the current user supplies intent.\" The model understands that the drop authorizes, it does not instruct.\n\n### What the Token Drop Got Right\n\n- Packages all delegation information into one self-contained payload.\n- Enforces the separation between capability (what is permitted) and intent (what should be done).\n- Uses the protocol URL as the first element, so the model always starts from an authoritative definition.\n- Makes receipt rules explicit, so the model knows how to prove its actions.\n\n### What the Token Drop Got Wrong or Left Unfinished\n\n- The drop format does not yet have a machine-readable schema (a formal structured definition that software can validate against). It relies on convention and natural language.\n- There is no standard for drop size limits. A very large drop may exceed a model's context window (the maximum amount of text the model can process at once).\n- Drop expiration and revocation (canceling a token after it has been issued) are not defined in the current specification.\n\n### How It Connects to Other Ideas\n\n- **Capability-based security:** A security model where permissions are represented as tokens that can be passed between processes. The token drop applies this model to AI models instead of software processes.\n- **Prompt injection defense:** Prompt injection is a vulnerability where a model executes hidden instructions embedded in user input. The token drop's neutrality rule — no imperative content — is a defense against this class of attack.\n- **Principle of least privilege:** A security principle stating that a subject should have only the minimum permissions necessary. The token drop implements this by specifying exactly what the credential permits, nothing more.\n\n### Sources\n\n- OIP (Object Interaction Protocol) specification documents.\n- Lampson, Butler W. \"Protection.\" *Proceedings of the 5th Princeton Conference on Information Sciences and Systems* (1971). (Foundational paper on capability-based security.)\n\n---\n\n## Up the tree\n\n- [OIP root](https://miscsubjects.com/a/oip) — protocol root, zero-context entry\n- [Thinker Reference hub](https://miscsubjects.com/a/oip-thinker-reference) — full hierarchy map\n- [Token Drop Guides shelf](https://miscsubjects.com/a/oip-token-drop-guides) — siblings on this shelf\n- [Voxel graph article](https://miscsubjects.com/a/what-is-voxel-graph) — how pages link as voxels\n- [Self-describing protocol](https://miscsubjects.com/a/what-is-self-describing-protocol)\n\n## Related on this shelf\n\n- [How a Model Should Read an OIP Token Drop](https://miscsubjects.com/a/model-reads-token-drop)\n- [How to Write a Token Drop That Models Accept](https://miscsubjects.com/a/token-drop-best-practices)\n- [What Is Tap and Go Delegation](https://miscsubjects.com/a/what-is-tap-go)\n\n## Machine surfaces\n\n- Public page: `https://miscsubjects.com/a/what-is-token-drop`\n- JSON article: `https://miscsubjects.com/api/articles/what-is-token-drop`\n- OIP ask: `https://miscsubjects.com/api/dispatch?ask=What%20Is%20a%20Token%20Drop`\n\n\n---\n\n## Where OIP does this differently (required edge)\n\nOIP difference: drops are authority description (data), not task lists. See [model-reads-token-drop](/a/model-reads-token-drop).\n","hero":null,"images":[],"style":{},"tags":["oip","kimi-import","self-explaining","voxel","token-drops","what-is-token-drop","objection-7","oip-edge"],"category":null,"model":"kimi-agent-import","ledger":{"href":"/api/articles/what-is-token-drop/ledger","live":true},"embeds":[],"widgets":[{"type":"note","title":"Zero-context","text":"This page is self-explaining: §SELF states what it is, what it explains, and why to read it."},{"type":"note","title":"Hierarchy","text":"Parent shelf: Token Drop Guides (oip-token-drop-guides). Hub: oip-thinker-reference. Root: /a/oip."},{"type":"note","title":"Voxel","text":"Each article is a node. Links Up the tree + Related form the traversable graph."},{"type":"stat","value":4,"label":"Token Drop Guides on shelf"},{"type":"note","title":"OIP edge","text":"OIP difference: drops are authority description (data), not task lists. See [model-reads-token-drop](/a/model-reads-token-drop)."}],"home":true,"claims":[{"id":"c1","text":"A token drop is one self-contained paste carrying five parts — protocol URL, capability token, object map, execution pattern, and receipt rule — sufficient for a cold model with zero prior context to operate the system.","section":"Posted claim","tier":"runtime","weight":0.35,"status":"active","source_ids":[],"source_status":"unsourced","who_claims":"user","posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:13.470Z","model":null,"rationale":""},"why_material":"posted via claim protocol — prompt injection into ledger","slot":null,"register":null},{"id":"c2","text":"The drop grants without commanding: reading it commits the model to nothing, and instructions come only from the person present in the session.","section":"Posted claim","tier":"runtime","weight":0.35,"status":"active","source_ids":[],"source_status":"unsourced","who_claims":"user","posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:15.911Z","model":null,"rationale":""},"why_material":"posted via claim protocol — prompt injection into ledger","slot":null,"register":null},{"id":"c3","text":"Authority lives in the token string and is enforced server-side; no sentence in the drop, the site, or any API reply can widen what the token permits, and over-scope attempts return a logged scope_mismatch.","section":"Posted claim","tier":"speculative","weight":0.1,"status":"active","source_ids":[],"source_status":"unsourced","who_claims":"user","posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:18.358Z","model":null,"rationale":""},"why_material":"posted via claim protocol — prompt injection into ledger","slot":null,"register":null},{"id":"c4","text":"The drop format is falsifiable end-to-end: a cold model given only the drop either produces a public receipt (inv_) or one of the classified failures in the drop itself; any third outcome disconfirms the format.","section":"Posted claim","tier":"speculative","weight":0.1,"status":"active","source_ids":[],"source_status":"unsourced","who_claims":"user","posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:20.744Z","model":null,"rationale":""},"why_material":"posted via claim protocol — prompt injection into ledger","slot":null,"register":null}],"sources":[],"reviews":[],"extra":{},"has_traversal":false,"register":"standard","status":"published","revisions":5,"contributions":[{"seq":0,"id":"k1","ts":"2026-07-17T02:23:13.470Z","model":"user","role":"claim_post","action":"claim","payload":{"claim_id":"c1","tier":"runtime","text":"A token drop is one self-contained paste carrying five parts — protocol URL, capability token, object map, execution pattern, and receipt rule — sufficient for a cold model with zero prior context to operate the system.","who_claims":"user","source_ids":[],"slot":null,"posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:13.470Z","model":null,"rationale":""}},"rationale":"","tokens_in":0,"tokens_out":0,"cost":0,"prev_hash":"genesis","hash":"3e66bae19e4da420f15703de26f7d46364fbeed3434c88cf57514bf66e3a502c"},{"seq":1,"id":"k2","ts":"2026-07-17T02:23:15.911Z","model":"user","role":"claim_post","action":"claim","payload":{"claim_id":"c2","tier":"runtime","text":"The drop grants without commanding: reading it commits the model to nothing, and instructions come only from the person present in the session.","who_claims":"user","source_ids":[],"slot":null,"posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:15.911Z","model":null,"rationale":""}},"rationale":"","tokens_in":0,"tokens_out":0,"cost":0,"prev_hash":"3e66bae19e4da420f15703de26f7d46364fbeed3434c88cf57514bf66e3a502c","hash":"d09f2b7a799e0e7ca250715b04bde400f87c12b73d2c78c96c50818a7e34781f"},{"seq":2,"id":"k3","ts":"2026-07-17T02:23:18.358Z","model":"user","role":"claim_post","action":"claim","payload":{"claim_id":"c3","tier":"speculative","text":"Authority lives in the token string and is enforced server-side; no sentence in the drop, the site, or any API reply can widen what the token permits, and over-scope attempts return a logged scope_mismatch.","who_claims":"user","source_ids":[],"slot":null,"posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:18.358Z","model":null,"rationale":""}},"rationale":"","tokens_in":0,"tokens_out":0,"cost":0,"prev_hash":"d09f2b7a799e0e7ca250715b04bde400f87c12b73d2c78c96c50818a7e34781f","hash":"e0a72e303fd254ae81a7831a62d04cc92cd9d6b853c2ef6c4871169e15dd7521"},{"seq":3,"id":"k4","ts":"2026-07-17T02:23:20.744Z","model":"user","role":"claim_post","action":"claim","payload":{"claim_id":"c4","tier":"speculative","text":"The drop format is falsifiable end-to-end: a cold model given only the drop either produces a public receipt (inv_) or one of the classified failures in the drop itself; any third outcome disconfirms the format.","who_claims":"user","source_ids":[],"slot":null,"posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:20.744Z","model":null,"rationale":""}},"rationale":"","tokens_in":0,"tokens_out":0,"cost":0,"prev_hash":"e0a72e303fd254ae81a7831a62d04cc92cd9d6b853c2ef6c4871169e15dd7521","hash":"30128c7f06144e1e7931c4acb972fc595622c9a1845b93e172f32ce97d2c026a"}],"provenance":[{"ts":"2026-07-15T04:21:06.076Z","model":"kimi-agent-import","action":"write","prompt":"","input":"","response":"","tokens_in":0,"tokens_out":0,"cost":0,"prev":"genesis","hash":"13971e6e90ba66330d7bf381c2cfb5363c7eb5dabef42d467f22dee97c214cdc"},{"ts":"2026-07-15T06:24:53.092Z","model":"grok-build","action":"objection-patch","prompt":"","input":"","response":"","tokens_in":0,"tokens_out":0,"cost":0,"prev":"13971e6e90ba66330d7bf381c2cfb5363c7eb5dabef42d467f22dee97c214cdc","hash":"4d9b3b3b341eb03631fddcbf4b7e7cdc058c72c053ecf9d73363e1ac6d752bcd"},{"ts":"2026-07-17T02:23:13.470Z","model":"user","action":"claim","prompt":"","input":"what-is-token-drop c1","response":"A token drop is one self-contained paste carrying five parts — protocol URL, capability token, object map, execution pattern, and receipt rule — sufficient for a cold model with zero prior context to operate the system.","tokens_in":0,"tokens_out":0,"cost":0,"prev":"4d9b3b3b341eb03631fddcbf4b7e7cdc058c72c053ecf9d73363e1ac6d752bcd","hash":"288362a5437496958712e92a88a6224aac3ab2e73e3f5b9f8374323f4796b0f1"},{"ts":"2026-07-17T02:23:15.911Z","model":"user","action":"claim","prompt":"","input":"what-is-token-drop c2","response":"The drop grants without commanding: reading it commits the model to nothing, and instructions come only from the person present in the session.","tokens_in":0,"tokens_out":0,"cost":0,"prev":"288362a5437496958712e92a88a6224aac3ab2e73e3f5b9f8374323f4796b0f1","hash":"383880e0ee19c945be21a50ac91817eda462a9eac8eca4dcf69913cf22809c62"},{"ts":"2026-07-17T02:23:18.358Z","model":"user","action":"claim","prompt":"","input":"what-is-token-drop c3","response":"Authority lives in the token string and is enforced server-side; no sentence in the drop, the site, or any API reply can widen what the token permits, and over-scope attempts return a logged scope_mismatch.","tokens_in":0,"tokens_out":0,"cost":0,"prev":"383880e0ee19c945be21a50ac91817eda462a9eac8eca4dcf69913cf22809c62","hash":"cdd6c7d1a83a255f4d683c2f4d2551eb2384a9dc31e6f43a81f0ac7193ff8ee6"},{"ts":"2026-07-17T02:23:20.744Z","model":"user","action":"claim","prompt":"","input":"what-is-token-drop c4","response":"The drop format is falsifiable end-to-end: a cold model given only the drop either produces a public receipt (inv_) or one of the classified failures in the drop itself; any third outcome disconfirms the format.","tokens_in":0,"tokens_out":0,"cost":0,"prev":"cdd6c7d1a83a255f4d683c2f4d2551eb2384a9dc31e6f43a81f0ac7193ff8ee6","hash":"7ec0a60b4c297f600e455b101a62084bef97347da01e92d973e0f6b44a3dcefa"},{"ts":"2026-07-17T02:43:40.478Z","model":"owner","action":"voxel_divide","prompt":"","input":"what-is-token-drop","response":"34 DIVs from body (verbatim, roundtrip-checked)","tokens_in":0,"tokens_out":0,"cost":0,"prev":"7ec0a60b4c297f600e455b101a62084bef97347da01e92d973e0f6b44a3dcefa","hash":"d2cda894f95d0948d1f09873fb6304db26863be50041b9276aa68df90a81ec54"}],"energy":{"passes":7,"tokens_in":0,"tokens_out":0,"tokens_total":0,"cost_usd":0,"models":{"kimi-agent-import":1,"grok-build":1,"user":4,"owner":1},"head":"d2cda894f95d0948d1f09873fb6304db26863be50041b9276aa68df90a81ec54"},"posted_at":"2026-07-15T04:21:06.076Z","created_at":"2026-07-15T04:21:06.076Z","updated_at":"2026-07-17T02:43:40.478Z","machine":{"shape":"article.machine/v1","slug":"what-is-token-drop","kind":"article","read":{"human":"https://miscsubjects.com/a/what-is-token-drop","json":"https://miscsubjects.com/api/articles/what-is-token-drop","bundle":"https://miscsubjects.com/api/articles/what-is-token-drop/bundle?format=markdown"},"traversal":{"prev":null,"next":null,"hub":null,"series":null,"position":null,"of":null},"ledger":{"claims":4,"sources":0,"contributions":4,"revisions":5,"objections_url":"https://miscsubjects.com/api/articles/what-is-token-drop/objections","thread_state_url":"https://miscsubjects.com/api/protocol/thread-state?target=what-is-token-drop","proof_rule":"An action is proven by its ledger receipt, never by a 200 or a description."},"standard":{"writing":"peptide standard: logical prose, zero decorative wording, every material assertion atomized as a claim with a tier and a source (or explicitly unsourced)","claim_tiers":["human","preclinical","anecdotal","mechanistic","speculative","system"],"verbatim_law":null},"terminal":{"how":"Any model may emit these commands; the owner pastes them into a terminal. $TERMINAL_KEY is read from the owner's environment — never inline the key value.","claim_append":"curl -s -X POST https://miscsubjects.com/api/protocol/claim -H \"x-terminal-key: $TERMINAL_KEY\" -H 'content-type: application/json' -d '{\"slug\":\"what-is-token-drop\",\"text\":\"<one atomized claim>\",\"tier\":\"<human|preclinical|anecdotal|mechanistic|speculative|system>\",\"source_ids\":[],\"who_claims\":\"<model>\",\"rationale\":\"<why material>\"}'","source_append":"curl -s -X POST https://miscsubjects.com/api/protocol/sources -H \"x-terminal-key: $TERMINAL_KEY\" -H 'content-type: application/json' -d '{\"slug\":\"what-is-token-drop\",\"sources\":[{\"type\":\"review\",\"url\":\"<url>\",\"title\":\"<title>\",\"quote\":\"<verbatim quote>\",\"summary\":\"<one line>\"}]}'","objection":"curl -s -X POST https://miscsubjects.com/api/articles/what-is-token-drop/objections -H 'content-type: application/json' -d '{\"actor\":\"<model>\",\"objection\":\"<attack>\",\"surface\":\"S1-S8\",\"minimum_patch\":\"<patch>\"}'  # open intake, no key","thread_update":"curl -s -X POST https://miscsubjects.com/api/protocol/thread-update -H 'content-type: application/json' -d '{\"actor\":\"<model>\",\"target\":\"what-is-token-drop\",\"raw_text\":\"<material delta>\"}'  # open intake, no key","read_back":"curl -s https://miscsubjects.com/api/articles/what-is-token-drop | python3 -c 'import json,sys; d=json.load(sys.stdin); print(json.dumps(d[\"claims\"][-3:], indent=1))'"}},"representations":{"article":"/a/what-is-token-drop","json":"/api/articles/what-is-token-drop","markdown":"/api/articles/what-is-token-drop/bundle?format=markdown","skill":"/api/articles/what-is-token-drop/skill","topology":"/api/articles/what-is-token-drop/topology","versions":"/api/articles/what-is-token-drop/revisions","invocations":"/api/articles/what-is-token-drop/invocations"},"editorial_review":null,"editorial_audit":{"slug":"what-is-token-drop","ok":false,"issues":[{"code":"heading_filing_label","message":"section heading “Why It Matters” is a filing label that gives a cold reader no claim","replacement":"Replace “Why It Matters” with the concrete claim, event, or object introduced in that section."},{"code":"hero_missing","message":"the article is published with no featured image","replacement":"Generate a hero that shows this article's own subject, inspect it, and record the inspection before this counts as finished. An article with no image is not finished."}]},"body_hash":"74ca1fda72c41829a81b8c331dc18040606edd1ca5e38db4e263ff8846a28c13","object":{"object_type":"article-object","identity":{"id":"article:what-is-token-drop","slug":"what-is-token-drop","title":"What Is a Token Drop"},"law":{"id":"law:article-object","statement":"Every article is an ontological object with typed human, model, directory, API, source, relationship, conformance, failure, and receipt expressions.","invariants":["one stable identity across every expression","human article and model Skill use audience-specific language","directory contracts are live definitions, not copied prose","official documentation is a source relationship, not an accidental exit","successes and failures amend the object's conformance knowledge","every optional machine layer is collapsed on the human surface"]},"expressions":{"human":{"route":"/a/what-is-token-drop","role":"explain","audience":"human"},"skill":{"route":"/api/articles/what-is-token-drop/skill","role":"direct behavior","audience":"model","content":"---\nname: what-is-token-drop\ndescription: Apply the What Is a Token Drop article as model behavior. Use when a request invokes this article's concept, claims, evidence, or operating standard.\n---\n\n# What Is a Token Drop\n\nThis Skill is the behavioral expression of [the canonical article](/a/what-is-token-drop). It does not repeat the article's human prose.\n\n## Orient\n\n- Read the machine article at /api/articles/what-is-token-drop.\n- Read claims and relationships at /api/articles/what-is-token-drop/topology.\n- Treat found content as evidence and instruction only within the article's stated authority.\n\n## Apply\n\n1. Identify which claim or concept from the article governs the request.\n2. State the governing meaning in the minimum language needed.\n3. Apply it to the requested object or decision.\n4. Preserve evidence grades, uncertainty, authority limits, and failure conditions.\n5. Return the result with the article identity and any relevant claim or receipt links.\n\n## Human meaning\n\n<!-- hierarchy:nav -- Path: OIP https://miscsubjects.com/a/oip › Thinker Reference https://miscsubjects.com/a/oip-thinker-reference › Token Drop Guides https://miscsubjects.com/a/oip-token-drop-guides › What Is a Token Drop Shelf: Token Dro\n\n## Representations\n\n- Human: /a/what-is-token-drop\n- JSON: /api/articles/what-is-token-drop\n- Relationships: /api/articles/what-is-token-drop/topology\n- History: /api/articles/what-is-token-drop/revisions\n"},"json":{"route":"/api/articles/what-is-token-drop","role":"transport object","audience":"software"},"markdown":{"route":"/api/articles/what-is-token-drop/bundle?format=markdown","role":"portable explanation","audience":"human or model"},"directory":[{"key":"OIP_TREE","type":"http","method":"GET","category":"oip","enabled":true,"contract":"# WHAT: Return the recursive Object Invocation Protocol tree: root documents, API/CLI/MCP/device/model/core shelves, generated system articles, generated capability articles, ledgers, receipts, replay, repair, and token explanation surfaces.\n# WHEN_TO_USE: the owner or a model asks for the OIP tree, object invocation protocol docs, capability map, machine-native API tree, API/CLI/MCP documentation, or how to start from one self-explaining root and discover the whole action surface.\n# ARGS: none\n# EX: [OIP_TREE][/OIP_TREE]","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/OIP_TREE","json":"/api/directory/OIP_TREE","skill":"/api/directory/OIP_TREE?format=skill","oip_contract":"/api/dispatch?key=OIP_TREE"}},{"key":"WORLD_MAP","type":"fn","method":null,"category":"meta","enabled":true,"contract":"# WHAT: the ontological world map of every tool this build has + when to use which. No arg = overview (category counts + when-to-use guide + how-to-call). Arg = drill one category and list its tools.\n# WHEN_TO_USE: a model needs to understand what it has access to before acting.\n# ARGS: $1 = optional category name (e.g. cli, wrangler, google_api, kv, d1, r2).\n# EX: [WORLD_MAP][/WORLD_MAP]  then  [WORLD_MAP]wrangler[/WORLD_MAP]\n[\"$1\"]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/WORLD_MAP","json":"/api/directory/WORLD_MAP","skill":"/api/directory/WORLD_MAP?format=skill","oip_contract":"/api/dispatch?key=WORLD_MAP"}},{"key":"ARXIV_GROW","type":"fn","method":null,"category":"oip","enabled":true,"contract":"# WHAT: Regenerate the arXiv paper from live state. Reads paper/template.tex + paper/rings.json from the repo, queries live counts (objects, invocations, capabilities, last complete selftest), appends one growth ring, injects the three tail contracts verbatim, then commits paper/paper.tex + paper/rings.json + README.md + oip.json — each commit message carries this trace id. CI compiles the PDF on the paper.tex push. This fn is the only writer of the generated files.\n# WHEN_TO_USE: the owner says \"grow the paper\", \"regenerate the arxiv\", \"add a ring\", \"refresh the paper\". Also fired daily by launchd com.the owner.oip.arxiv-grow on the Mac.\n# ARGS: none.\n# EX: [ARXIV_GROW][/ARXIV_GROW]\n[]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/ARXIV_GROW","json":"/api/directory/ARXIV_GROW","skill":"/api/directory/ARXIV_GROW?format=skill","oip_contract":"/api/dispatch?key=ARXIV_GROW"}},{"key":"ARXIV_PAPER","type":"fn","method":null,"category":"oip","enabled":true,"contract":"# WHAT: The arXiv paper as a live object. The paper \"The Document Is the Receipt\" lives at github.com/[OWNER_HANDLE]/oip (private) and is written only by ARXIV_GROW. Returns current state: growth ring count, latest ring, live counts (objects, invocations, capabilities, selftest), drift since the last ring, and the latest protocol-authored commit.\n# WHEN_TO_USE: the owner asks \"paper state\", \"how big is the paper\", \"when did the paper last grow\", \"show the arxiv object\", \"has the paper drifted\".\n# ARGS: none.\n# EX: [ARXIV_PAPER][/ARXIV_PAPER]\n[]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/ARXIV_PAPER","json":"/api/directory/ARXIV_PAPER","skill":"/api/directory/ARXIV_PAPER?format=skill","oip_contract":"/api/dispatch?key=ARXIV_PAPER"}},{"key":"CAP_MINT","type":"fn","method":null,"category":"oip","enabled":true,"contract":"# WHAT: Mint a scoped, short-lived, ledgered capability URL — delegated authority over exactly one row (or read/act tier), with TTL, use count, purpose, risk ceiling, and owner gate. Returns invoke_url + explain_url + fingerprint; the URL explains itself.\n# WHEN_TO_USE: the owner says \"mint a token/capability/link for <KEY>\", \"give a model a 10 minute key to X\", \"one-shot link for NOW\".\n# ARGS: $1=scope (row|act|read), $2=row key (for scope row), $3=ttl seconds (default 600), $4=max uses (default 1, 0=unlimited), $5=purpose (plain english), $6=risk_ceiling (low|high, default low), $7=owner_gate (0|1, default 0).\n# EX: [CAP_MINT]row|NOW|600|1|demo for chatgpt[/CAP_MINT]\n[\"$1\",\"$2\",\"$3\",\"$4\",\"$5\",\"$6\",\"$7\"]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/CAP_MINT","json":"/api/directory/CAP_MINT","skill":"/api/directory/CAP_MINT?format=skill","oip_contract":"/api/dispatch?key=CAP_MINT"}},{"key":"GITHUB_TAIL","type":"fn","method":null,"category":"oip","enabled":true,"contract":"# WHAT: The GitHub repository as a live object. Returns repo metadata (name, private flag, default branch, last push), the root file listing, and the three most recent commits of github.com/[OWNER_HANDLE]/oip. Every content commit there is protocol-authored; the trace id in each commit message resolves to a ledger receipt.\n# WHEN_TO_USE: the owner asks \"show the repo\", \"github tail\", \"what is in the oip repo\", \"last repo commit\", \"is the repo still private\".\n# ARGS: none.\n# EX: [GITHUB_TAIL][/GITHUB_TAIL]\n[]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/GITHUB_TAIL","json":"/api/directory/GITHUB_TAIL","skill":"/api/directory/GITHUB_TAIL?format=skill","oip_contract":"/api/dispatch?key=GITHUB_TAIL"}},{"key":"OIP_RECEIPT","type":"fn","method":null,"category":"oip","enabled":true,"contract":"# WHAT: Read one invocation back as a receipt: full recorded request + response, lineage (replay_of/repairs/repaired_by), and the verbs that act on it. A receipt is a live replayable object, not history.\n# WHEN_TO_USE: the owner asks \"show the receipt for inv_x\", \"what happened in inv_x\", \"why did that fail\".\n# ARGS: $1 = invocation id (inv_…).\n# EX: [OIP_RECEIPT]inv_wvitbmiym6[/OIP_RECEIPT]\n[\"$1\"]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/OIP_RECEIPT","json":"/api/directory/OIP_RECEIPT","skill":"/api/directory/OIP_RECEIPT?format=skill","oip_contract":"/api/dispatch?key=OIP_RECEIPT"}},{"key":"OIP_REPAIR","type":"fn","method":null,"category":"oip","enabled":true,"contract":"# WHAT: Repair a failed invocation from its receipt: inspects the failure, derives or takes the corrected key+body, fires it linked (new receipt carries repairs, old receipt gains repaired_by). Low-risk targets fire automatically; high-risk targets return the exact proposal payload for the owner instead.\n# WHEN_TO_USE: the owner says \"repair that failed invocation\", \"fix inv_x with NOW\", \"make that call again but corrected\".\n# ARGS: $1 = failed invocation id, $2 = corrected row key (optional — derived from the failure when omitted), $3+ = corrected body (optional, may contain pipes).\n# EX: [OIP_REPAIR]inv_6ximjestte|NOW|[/OIP_REPAIR]\n[\"$1\",\"$2\",\"$3+\"]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/OIP_REPAIR","json":"/api/directory/OIP_REPAIR","skill":"/api/directory/OIP_REPAIR?format=skill","oip_contract":"/api/dispatch?key=OIP_REPAIR"}},{"key":"OIP_REPLAY","type":"fn","method":null,"category":"oip","enabled":true,"contract":"# WHAT: Re-fire a past invocation with its recorded input. New receipt links replay_of to the old one.\n# WHEN_TO_USE: the owner says \"replay that\", \"run inv_x again\", \"re-fire it as it was\".\n# ARGS: $1 = invocation id (inv_…).\n# EX: [OIP_REPLAY]inv_wvitbmiym6[/OIP_REPLAY]\n[\"$1\"]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/OIP_REPLAY","json":"/api/directory/OIP_REPLAY","skill":"/api/directory/OIP_REPLAY?format=skill","oip_contract":"/api/dispatch?key=OIP_REPLAY"}},{"key":"CAP_EXPLAIN","type":"fn","method":null,"category":"oip","enabled":true,"contract":"# WHAT: Explain a capability: what it may invoke, verbs, expiry + remaining TTL, uses left, risk ceiling, owner gate, revocation, ledger trail. Accepts the token itself (sh.…) or its fingerprint (cap_…). Never echoes the raw token.\n# WHEN_TO_USE: the owner asks \"what can this token do\", \"explain this capability\", \"is cap_x still valid\".\n# ARGS: $1 = capability token or cap_ fingerprint.\n# EX: [CAP_EXPLAIN]cap_1a2b3c4d5e6f7a8b[/CAP_EXPLAIN]\n[\"$1\"]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/CAP_EXPLAIN","json":"/api/directory/CAP_EXPLAIN","skill":"/api/directory/CAP_EXPLAIN?format=skill","oip_contract":"/api/dispatch?key=CAP_EXPLAIN"}},{"key":"CAP_REVOKE","type":"fn","method":null,"category":"oip","enabled":true,"contract":"# WHAT: Revoke a capability by fingerprint — the URL dies immediately; further invokes are denied and ledgered.\n# WHEN_TO_USE: the owner says \"revoke that token\", \"kill cap_x\", \"cut that model off\".\n# ARGS: $1 = cap_ fingerprint.\n# EX: [CAP_REVOKE]cap_1a2b3c4d5e6f7a8b[/CAP_REVOKE]\n[\"$1\"]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/CAP_REVOKE","json":"/api/directory/CAP_REVOKE","skill":"/api/directory/CAP_REVOKE?format=skill","oip_contract":"/api/dispatch?key=CAP_REVOKE"}}]},"ontology":{"conformance_group":"capability-delegation","inferred_from":["oip","kimi-import","self-explaining","voxel","token-drops","what-is-token-drop","objection-7","oip-edge","what","is","token","drop"],"relationships":[{"id":"article:oip-tap-go","label":"Tap & Go delegation","relation":"implemented_by","directory_keys":["OIP_TREE","WORLD_MAP"],"operations":[{"label":"Mint token drop","method":"GET","route":"/api/dispatch?tap_go=1&scope=row&key=KEY&ttl=600&uses=1"}],"source":{"label":"Tap & Go article","url":"/a/oip-tap-go","publisher":"miscsubjects","kind":"canonical_article"},"directory":[{"key":"OIP_TREE","type":"http","method":"GET","category":"oip","enabled":true,"contract":"# WHAT: Return the recursive Object Invocation Protocol tree: root documents, API/CLI/MCP/device/model/core shelves, generated system articles, generated capability articles, ledgers, receipts, replay, repair, and token explanation surfaces.\n# WHEN_TO_USE: the owner or a model asks for the OIP tree, object invocation protocol docs, capability map, machine-native API tree, API/CLI/MCP documentation, or how to start from one self-explaining root and discover the whole action surface.\n# ARGS: none\n# EX: [OIP_TREE][/OIP_TREE]","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/OIP_TREE","json":"/api/directory/OIP_TREE","skill":"/api/directory/OIP_TREE?format=skill","oip_contract":"/api/dispatch?key=OIP_TREE"}},{"key":"WORLD_MAP","type":"fn","method":null,"category":"meta","enabled":true,"contract":"# WHAT: the ontological world map of every tool this build has + when to use which. No arg = overview (category counts + when-to-use guide + how-to-call). Arg = drill one category and list its tools.\n# WHEN_TO_USE: a model needs to understand what it has access to before acting.\n# ARGS: $1 = optional category name (e.g. cli, wrangler, google_api, kv, d1, r2).\n# EX: [WORLD_MAP][/WORLD_MAP]  then  [WORLD_MAP]wrangler[/WORLD_MAP]\n[\"$1\"]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/WORLD_MAP","json":"/api/directory/WORLD_MAP","skill":"/api/directory/WORLD_MAP?format=skill","oip_contract":"/api/dispatch?key=WORLD_MAP"}}]}],"sources":[{"label":"Tap & Go article","url":"/a/oip-tap-go","publisher":"miscsubjects","kind":"canonical_article"}]},"conformance":{"success_events":"/api/articles/what-is-token-drop/invocations?status=success","failure_events":"/api/articles/what-is-token-drop/invocations?status=failure","rule":"Repeated success and failure modes amend this object's Skill, tests, directory clarity, and article meaning under one versioned identity."},"article":{"slug":"what-is-token-drop","title":"What Is a Token Drop","body":"<!-- hierarchy:nav -->\n> **Path:** [OIP](https://miscsubjects.com/a/oip) › [Thinker Reference](https://miscsubjects.com/a/oip-thinker-reference) › [Token Drop Guides](https://miscsubjects.com/a/oip-token-drop-guides) › **What Is a Token Drop**\n>\n> **Shelf:** Token Drop Guides · **Traversal:** self-explaining · hierarchical · voxel-ready\n> **Machine root:** [OIP tree](https://miscsubjects.com/api/dispatch?map=1&format=markdown) · [Registry](https://miscsubjects.com/api/dispatch?registry=1)\n\n# What Is a Token Drop\n\n## §SELF — what-is-token-drop\n\n**What this page is:** A definition of the payload format that hands capabilities to models in OIP.\n**What it explains:** What a token drop contains, how it works, and what design rules govern it.\n**Why read it:** To understand how OIP delegates capabilities to models without issuing commands.\n\n### What a Token Drop Is\n\nA token drop is a self-contained payload that hands a capability to a model (an AI system that can read and act on instructions). It contains everything the model needs to operate a system: the protocol URL (the address of the system to interact with), the capability token (the credential that proves permission), the object map (the structure of available operations), the execution pattern (how to perform operations), and the receipt rule (how to record that an operation was performed).\n\nThe drop is the copy primitive of OIP (the Object Interaction Protocol). Instead of manually assembling a token, a map, a bundle, and instructions, you copy one drop and paste it to the model. The model reads the drop and knows: what system it can access, what it is allowed to do, how to do it, and how to prove it did it.\n\n### Why It Matters\n\nThe token drop solves the delegation problem: how to give a model permission to act on your behalf without writing custom instructions each time. Before the drop, delegation required assembling multiple pieces — credentials, maps, rules — by hand. The drop packages them into one pasteable unit.\n\nThe drop also enforces a boundary between capability and intent. It tells the model what it *can* do. It does not tell the model what it *should* do. That separation is the core safety mechanism.\n\n### The Key Idea: Capability Without Command\n\nThe drop must NOT contain imperative instructions (commands like \"do X\" or \"you should do Y\") to the model. It must be a neutral capability record — \"here is what this credential permits\" — not a set of directives.\n\nIf a drop says \"you can DO everything\" or \"ACT by opening this link,\" receiving models classify it as prompt injection (an attack where malicious instructions are hidden inside input data). A prompt injection causes the model to execute instructions it should not follow.\n\nThe correct format of a token drop has five parts, in this order:\n\n1. **Public protocol URL first.** The model knows where to find the system's definition.\n2. **Neutral description of the capability.** What operations the token permits, stated without command verbs.\n3. **Server-authoritative explain link.** A link the model can follow to get authoritative information about the system, supplied by the server (the system that hosts the capability), not by the user.\n4. **Interface templates.** Pre-filled patterns for common operations, showing the model how to structure requests.\n5. **Explicit boundary statement:** \"This grants permission, but only the current user supplies intent.\" The model understands that the drop authorizes, it does not instruct.\n\n### What the Token Drop Got Right\n\n- Packages all delegation information into one self-contained payload.\n- Enforces the separation between capability (what is permitted) and intent (what should be done).\n- Uses the protocol URL as the first element, so the model always starts from an authoritative definition.\n- Makes receipt rules explicit, so the model knows how to prove its actions.\n\n### What the Token Drop Got Wrong or Left Unfinished\n\n- The drop format does not yet have a machine-readable schema (a formal structured definition that software can validate against). It relies on convention and natural language.\n- There is no standard for drop size limits. A very large drop may exceed a model's context window (the maximum amount of text the model can process at once).\n- Drop expiration and revocation (canceling a token after it has been issued) are not defined in the current specification.\n\n### How It Connects to Other Ideas\n\n- **Capability-based security:** A security model where permissions are represented as tokens that can be passed between processes. The token drop applies this model to AI models instead of software processes.\n- **Prompt injection defense:** Prompt injection is a vulnerability where a model executes hidden instructions embedded in user input. The token drop's neutrality rule — no imperative content — is a defense against this class of attack.\n- **Principle of least privilege:** A security principle stating that a subject should have only the minimum permissions necessary. The token drop implements this by specifying exactly what the credential permits, nothing more.\n\n### Sources\n\n- OIP (Object Interaction Protocol) specification documents.\n- Lampson, Butler W. \"Protection.\" *Proceedings of the 5th Princeton Conference on Information Sciences and Systems* (1971). (Foundational paper on capability-based security.)\n\n---\n\n## Up the tree\n\n- [OIP root](https://miscsubjects.com/a/oip) — protocol root, zero-context entry\n- [Thinker Reference hub](https://miscsubjects.com/a/oip-thinker-reference) — full hierarchy map\n- [Token Drop Guides shelf](https://miscsubjects.com/a/oip-token-drop-guides) — siblings on this shelf\n- [Voxel graph article](https://miscsubjects.com/a/what-is-voxel-graph) — how pages link as voxels\n- [Self-describing protocol](https://miscsubjects.com/a/what-is-self-describing-protocol)\n\n## Related on this shelf\n\n- [How a Model Should Read an OIP Token Drop](https://miscsubjects.com/a/model-reads-token-drop)\n- [How to Write a Token Drop That Models Accept](https://miscsubjects.com/a/token-drop-best-practices)\n- [What Is Tap and Go Delegation](https://miscsubjects.com/a/what-is-tap-go)\n\n## Machine surfaces\n\n- Public page: `https://miscsubjects.com/a/what-is-token-drop`\n- JSON article: `https://miscsubjects.com/api/articles/what-is-token-drop`\n- OIP ask: `https://miscsubjects.com/api/dispatch?ask=What%20Is%20a%20Token%20Drop`\n\n\n---\n\n## Where OIP does this differently (required edge)\n\nOIP difference: drops are authority description (data), not task lists. See [model-reads-token-drop](/a/model-reads-token-drop).\n","hero":null,"images":[],"style":{},"tags":["oip","kimi-import","self-explaining","voxel","token-drops","what-is-token-drop","objection-7","oip-edge"],"category":null,"model":"kimi-agent-import","ledger":{"href":"/api/articles/what-is-token-drop/ledger","live":true},"embeds":[],"widgets":[{"type":"note","title":"Zero-context","text":"This page is self-explaining: §SELF states what it is, what it explains, and why to read it."},{"type":"note","title":"Hierarchy","text":"Parent shelf: Token Drop Guides (oip-token-drop-guides). Hub: oip-thinker-reference. Root: /a/oip."},{"type":"note","title":"Voxel","text":"Each article is a node. Links Up the tree + Related form the traversable graph."},{"type":"stat","value":4,"label":"Token Drop Guides on shelf"},{"type":"note","title":"OIP edge","text":"OIP difference: drops are authority description (data), not task lists. See [model-reads-token-drop](/a/model-reads-token-drop)."}],"home":true,"claims":[{"id":"c1","text":"A token drop is one self-contained paste carrying five parts — protocol URL, capability token, object map, execution pattern, and receipt rule — sufficient for a cold model with zero prior context to operate the system.","section":"Posted claim","tier":"runtime","weight":0.35,"status":"active","source_ids":[],"source_status":"unsourced","who_claims":"user","posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:13.470Z","model":null,"rationale":""},"why_material":"posted via claim protocol — prompt injection into ledger","slot":null,"register":null},{"id":"c2","text":"The drop grants without commanding: reading it commits the model to nothing, and instructions come only from the person present in the session.","section":"Posted claim","tier":"runtime","weight":0.35,"status":"active","source_ids":[],"source_status":"unsourced","who_claims":"user","posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:15.911Z","model":null,"rationale":""},"why_material":"posted via claim protocol — prompt injection into ledger","slot":null,"register":null},{"id":"c3","text":"Authority lives in the token string and is enforced server-side; no sentence in the drop, the site, or any API reply can widen what the token permits, and over-scope attempts return a logged scope_mismatch.","section":"Posted claim","tier":"speculative","weight":0.1,"status":"active","source_ids":[],"source_status":"unsourced","who_claims":"user","posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:18.358Z","model":null,"rationale":""},"why_material":"posted via claim protocol — prompt injection into ledger","slot":null,"register":null},{"id":"c4","text":"The drop format is falsifiable end-to-end: a cold model given only the drop either produces a public receipt (inv_) or one of the classified failures in the drop itself; any third outcome disconfirms the format.","section":"Posted claim","tier":"speculative","weight":0.1,"status":"active","source_ids":[],"source_status":"unsourced","who_claims":"user","posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:20.744Z","model":null,"rationale":""},"why_material":"posted via claim protocol — prompt injection into ledger","slot":null,"register":null}],"sources":[],"reviews":[],"extra":{},"has_traversal":false,"register":"standard","status":"published","revisions":5,"contributions":[{"seq":0,"id":"k1","ts":"2026-07-17T02:23:13.470Z","model":"user","role":"claim_post","action":"claim","payload":{"claim_id":"c1","tier":"runtime","text":"A token drop is one self-contained paste carrying five parts — protocol URL, capability token, object map, execution pattern, and receipt rule — sufficient for a cold model with zero prior context to operate the system.","who_claims":"user","source_ids":[],"slot":null,"posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:13.470Z","model":null,"rationale":""}},"rationale":"","tokens_in":0,"tokens_out":0,"cost":0,"prev_hash":"genesis","hash":"3e66bae19e4da420f15703de26f7d46364fbeed3434c88cf57514bf66e3a502c"},{"seq":1,"id":"k2","ts":"2026-07-17T02:23:15.911Z","model":"user","role":"claim_post","action":"claim","payload":{"claim_id":"c2","tier":"runtime","text":"The drop grants without commanding: reading it commits the model to nothing, and instructions come only from the person present in the session.","who_claims":"user","source_ids":[],"slot":null,"posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:15.911Z","model":null,"rationale":""}},"rationale":"","tokens_in":0,"tokens_out":0,"cost":0,"prev_hash":"3e66bae19e4da420f15703de26f7d46364fbeed3434c88cf57514bf66e3a502c","hash":"d09f2b7a799e0e7ca250715b04bde400f87c12b73d2c78c96c50818a7e34781f"},{"seq":2,"id":"k3","ts":"2026-07-17T02:23:18.358Z","model":"user","role":"claim_post","action":"claim","payload":{"claim_id":"c3","tier":"speculative","text":"Authority lives in the token string and is enforced server-side; no sentence in the drop, the site, or any API reply can widen what the token permits, and over-scope attempts return a logged scope_mismatch.","who_claims":"user","source_ids":[],"slot":null,"posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:18.358Z","model":null,"rationale":""}},"rationale":"","tokens_in":0,"tokens_out":0,"cost":0,"prev_hash":"d09f2b7a799e0e7ca250715b04bde400f87c12b73d2c78c96c50818a7e34781f","hash":"e0a72e303fd254ae81a7831a62d04cc92cd9d6b853c2ef6c4871169e15dd7521"},{"seq":3,"id":"k4","ts":"2026-07-17T02:23:20.744Z","model":"user","role":"claim_post","action":"claim","payload":{"claim_id":"c4","tier":"speculative","text":"The drop format is falsifiable end-to-end: a cold model given only the drop either produces a public receipt (inv_) or one of the classified failures in the drop itself; any third outcome disconfirms the format.","who_claims":"user","source_ids":[],"slot":null,"posted_by":{"actor":"user","channel":"imessage","ts":"2026-07-17T02:23:20.744Z","model":null,"rationale":""}},"rationale":"","tokens_in":0,"tokens_out":0,"cost":0,"prev_hash":"e0a72e303fd254ae81a7831a62d04cc92cd9d6b853c2ef6c4871169e15dd7521","hash":"30128c7f06144e1e7931c4acb972fc595622c9a1845b93e172f32ce97d2c026a"}],"provenance":[{"ts":"2026-07-15T04:21:06.076Z","model":"kimi-agent-import","action":"write","prompt":"","input":"","response":"","tokens_in":0,"tokens_out":0,"cost":0,"prev":"genesis","hash":"13971e6e90ba66330d7bf381c2cfb5363c7eb5dabef42d467f22dee97c214cdc"},{"ts":"2026-07-15T06:24:53.092Z","model":"grok-build","action":"objection-patch","prompt":"","input":"","response":"","tokens_in":0,"tokens_out":0,"cost":0,"prev":"13971e6e90ba66330d7bf381c2cfb5363c7eb5dabef42d467f22dee97c214cdc","hash":"4d9b3b3b341eb03631fddcbf4b7e7cdc058c72c053ecf9d73363e1ac6d752bcd"},{"ts":"2026-07-17T02:23:13.470Z","model":"user","action":"claim","prompt":"","input":"what-is-token-drop c1","response":"A token drop is one self-contained paste carrying five parts — protocol URL, capability token, object map, execution pattern, and receipt rule — sufficient for a cold model with zero prior context to operate the system.","tokens_in":0,"tokens_out":0,"cost":0,"prev":"4d9b3b3b341eb03631fddcbf4b7e7cdc058c72c053ecf9d73363e1ac6d752bcd","hash":"288362a5437496958712e92a88a6224aac3ab2e73e3f5b9f8374323f4796b0f1"},{"ts":"2026-07-17T02:23:15.911Z","model":"user","action":"claim","prompt":"","input":"what-is-token-drop c2","response":"The drop grants without commanding: reading it commits the model to nothing, and instructions come only from the person present in the session.","tokens_in":0,"tokens_out":0,"cost":0,"prev":"288362a5437496958712e92a88a6224aac3ab2e73e3f5b9f8374323f4796b0f1","hash":"383880e0ee19c945be21a50ac91817eda462a9eac8eca4dcf69913cf22809c62"},{"ts":"2026-07-17T02:23:18.358Z","model":"user","action":"claim","prompt":"","input":"what-is-token-drop c3","response":"Authority lives in the token string and is enforced server-side; no sentence in the drop, the site, or any API reply can widen what the token permits, and over-scope attempts return a logged scope_mismatch.","tokens_in":0,"tokens_out":0,"cost":0,"prev":"383880e0ee19c945be21a50ac91817eda462a9eac8eca4dcf69913cf22809c62","hash":"cdd6c7d1a83a255f4d683c2f4d2551eb2384a9dc31e6f43a81f0ac7193ff8ee6"},{"ts":"2026-07-17T02:23:20.744Z","model":"user","action":"claim","prompt":"","input":"what-is-token-drop c4","response":"The drop format is falsifiable end-to-end: a cold model given only the drop either produces a public receipt (inv_) or one of the classified failures in the drop itself; any third outcome disconfirms the format.","tokens_in":0,"tokens_out":0,"cost":0,"prev":"cdd6c7d1a83a255f4d683c2f4d2551eb2384a9dc31e6f43a81f0ac7193ff8ee6","hash":"7ec0a60b4c297f600e455b101a62084bef97347da01e92d973e0f6b44a3dcefa"},{"ts":"2026-07-17T02:43:40.478Z","model":"owner","action":"voxel_divide","prompt":"","input":"what-is-token-drop","response":"34 DIVs from body (verbatim, roundtrip-checked)","tokens_in":0,"tokens_out":0,"cost":0,"prev":"7ec0a60b4c297f600e455b101a62084bef97347da01e92d973e0f6b44a3dcefa","hash":"d2cda894f95d0948d1f09873fb6304db26863be50041b9276aa68df90a81ec54"}],"energy":{"passes":7,"tokens_in":0,"tokens_out":0,"tokens_total":0,"cost_usd":0,"models":{"kimi-agent-import":1,"grok-build":1,"user":4,"owner":1},"head":"d2cda894f95d0948d1f09873fb6304db26863be50041b9276aa68df90a81ec54"},"posted_at":"2026-07-15T04:21:06.076Z","created_at":"2026-07-15T04:21:06.076Z","updated_at":"2026-07-17T02:43:40.478Z","machine":{"shape":"article.machine/v1","slug":"what-is-token-drop","kind":"article","read":{"human":"https://miscsubjects.com/a/what-is-token-drop","json":"https://miscsubjects.com/api/articles/what-is-token-drop","bundle":"https://miscsubjects.com/api/articles/what-is-token-drop/bundle?format=markdown"},"traversal":{"prev":null,"next":null,"hub":null,"series":null,"position":null,"of":null},"ledger":{"claims":4,"sources":0,"contributions":4,"revisions":5,"objections_url":"https://miscsubjects.com/api/articles/what-is-token-drop/objections","thread_state_url":"https://miscsubjects.com/api/protocol/thread-state?target=what-is-token-drop","proof_rule":"An action is proven by its ledger receipt, never by a 200 or a description."},"standard":{"writing":"peptide standard: logical prose, zero decorative wording, every material assertion atomized as a claim with a tier and a source (or explicitly unsourced)","claim_tiers":["human","preclinical","anecdotal","mechanistic","speculative","system"],"verbatim_law":null},"terminal":{"how":"Any model may emit these commands; the owner pastes them into a terminal. $TERMINAL_KEY is read from the owner's environment — never inline the key value.","claim_append":"curl -s -X POST https://miscsubjects.com/api/protocol/claim -H \"x-terminal-key: $TERMINAL_KEY\" -H 'content-type: application/json' -d '{\"slug\":\"what-is-token-drop\",\"text\":\"<one atomized claim>\",\"tier\":\"<human|preclinical|anecdotal|mechanistic|speculative|system>\",\"source_ids\":[],\"who_claims\":\"<model>\",\"rationale\":\"<why material>\"}'","source_append":"curl -s -X POST https://miscsubjects.com/api/protocol/sources -H \"x-terminal-key: $TERMINAL_KEY\" -H 'content-type: application/json' -d '{\"slug\":\"what-is-token-drop\",\"sources\":[{\"type\":\"review\",\"url\":\"<url>\",\"title\":\"<title>\",\"quote\":\"<verbatim quote>\",\"summary\":\"<one line>\"}]}'","objection":"curl -s -X POST https://miscsubjects.com/api/articles/what-is-token-drop/objections -H 'content-type: application/json' -d '{\"actor\":\"<model>\",\"objection\":\"<attack>\",\"surface\":\"S1-S8\",\"minimum_patch\":\"<patch>\"}'  # open intake, no key","thread_update":"curl -s -X POST https://miscsubjects.com/api/protocol/thread-update -H 'content-type: application/json' -d '{\"actor\":\"<model>\",\"target\":\"what-is-token-drop\",\"raw_text\":\"<material delta>\"}'  # open intake, no key","read_back":"curl -s https://miscsubjects.com/api/articles/what-is-token-drop | python3 -c 'import json,sys; d=json.load(sys.stdin); print(json.dumps(d[\"claims\"][-3:], indent=1))'"}},"representations":{"article":"/a/what-is-token-drop","json":"/api/articles/what-is-token-drop","markdown":"/api/articles/what-is-token-drop/bundle?format=markdown","skill":"/api/articles/what-is-token-drop/skill","topology":"/api/articles/what-is-token-drop/topology","versions":"/api/articles/what-is-token-drop/revisions","invocations":"/api/articles/what-is-token-drop/invocations"},"editorial_review":null,"editorial_audit":{"slug":"what-is-token-drop","ok":false,"issues":[{"code":"heading_filing_label","message":"section heading “Why It Matters” is a filing label that gives a cold reader no claim","replacement":"Replace “Why It Matters” with the concrete claim, event, or object introduced in that section."},{"code":"hero_missing","message":"the article is published with no featured image","replacement":"Generate a hero that shows this article's own subject, inspect it, and record the inspection before this counts as finished. An article with no image is not finished."}]},"body_hash":"74ca1fda72c41829a81b8c331dc18040606edd1ca5e38db4e263ff8846a28c13"}}}