@333eco/corpus 1.2.1 → 1.2.2

package/dist/corpus.json

@@ -2635,13 +2635,13 @@
         "url": "https://creativecommons.org/publicdomain/zero/1.0/",
         "attribution_required": false
       },
-      "text": "> **Working draft.** This paper specifies a data-model decision and its consequences; it is a design specification offered as prior art. The membership-breadth governance question is resolved as a deliberately conservative default (§8) rather than a final rule, and is flagged as data-gated.\n\n---\n\n## Preamble\n\n> *Two unsolved problems in a family-banking architecture — what happens to members when a family's steward leaves, and how the family-less are ever reached — turn out to be one accidental assumption wearing two costumes. Drop the assumption, and both problems change shape.*\n\nA gratitude economy organized around **family banks** — each a household-scale pool (a Family Kitty℠) stewarded by a designated member (a banker, or *upāsaka*) — inherits two hard problems from one quiet assumption. The assumption is that a user belongs to *exactly one* family bank. From it follow: a **succession problem** (when a family's steward abandons the bank, its members are stranded) and a **reach problem** (the family-less — orphans, the isolated, refugees, anyone without a willing family steward — cannot participate at all). This paper observes that the one-family-per-user assumption was never realistic, specifies the data-model correction, and shows that correcting it de-risks the first problem and largely dissolves the second.\n\n---\n\n## Prior-Art and Non-Assertion Statement\n\nThis is a **defensive publication**. The author asserts no patent and dedicates the patterns to the public domain under CC0 1.0. The contribution is a data-model framing — user-scoped identity with plural group membership is utterly ordinary in software — applied to a specific architecture to resolve two specific problems. Prior art is acknowledged in §9; novelty is claimed only for the composition and the specific resolutions of §10. Trademarks are reserved separately; the patterns may be implemented under any name.\n\n## 1. The single-family assumption and the two problems it creates\n\nA family-bank architecture is intuitive and humane, but if each user belongs to one and only one bank, two failure modes are baked in.\n\n**Banker succession / orphaning.** Each family bank has a steward who manages it. When that steward abandons the bank, stops paying, dies, or is incapacitated, the members have nowhere to stand: their participation was wholly contained by a single bank that no longer functions. The system needs a graceful failure mode, and a one-bank-per-user model gives it none.\n\n**The civic / community reach problem.** The family-banker model, by construction, reaches only people who *have* a family bank — a willing steward and a household to belong to. It cannot reach the people who most need a dignity floor: the orphaned, the homeless, the isolated, the refugee. The natural-looking fix — build a separate \"civic tier\" staffed by vetted stranger-bankers — is a whole second institution to design, fund, and govern.\n\n## 2. The move: user-scoped identity, plural membership\n\nThe correction is a single data-model line: **identity is user-scoped (rooted in the person's Proof of Humanity), and membership is a set of plural edges.** A user is not contained by a family; a user is a node who holds membership edges to one or more families. Concretely:\n\n- The **Personal Account℠** — the user's own holdings and history — lives at the *user* node, above any family. It is the person's, not the bank's.\n- A **family bank** is a set of membership edges, and its steward stewards the *shared* vessel (the Family Kitty℠), never the members' personal accounts.\n\nA user may therefore belong to several family banks at once, each membership an independent edge, with the user's identity and personal holdings sitting above all of them.\n\n## 3. This corrects a simplification — it does not add a feature\n\nThe one-family-per-user assumption was never true to life, and the clearest demonstration is **marriage**. The moment a person marries, they belong to two families — their birth family and their spouse's. Children of blended families belong to several; a person embedded in a community, a congregation, a chosen family belongs to more. Real human kinship is already a graph of overlapping memberships, not a partition into disjoint households. A data model that assumed one family per person was modelling a world that does not exist. Multi-family membership is therefore not a new capability bolted on; it is the *removal of an unrealistic constraint* — the model catching up to the kinship graph it was always supposed to represent.\n\n## 4. De-risking banker succession\n\nPlural membership **decouples member-orphaning from role-succession**, which were conflated under the single-family assumption.\n\nBecause identity and the Personal Account live at the user node, the loss of a steward no longer strands a member: the banker stewarded only the shared Kitty, never the member's own holdings, and the member's *other* memberships persist unaffected. A member's participation survives the failure of any one of their banks. The candidate pool for a *new* steward also widens — the member's co-members in other functioning banks already understand the system and can step in — and the cost of a slow handoff drops, because no one is trapped while it happens.\n\nThis **de-risks**, but does not by itself **replace**, the explicit succession protocol. The case of a member's *last* bank failing, and the question of who inherits stewardship of an orphaned Kitty, still require the grace-period / receivership / member-vote mechanism specified elsewhere. Multi-membership lowers the stakes and widens the options; it does not abolish the need for an orderly handoff.\n\n## 5. Dissolving the civic-bank tier\n\nThe reach problem largely **dissolves** rather than requiring a new institution, on two observations.\n\nFirst, the family-less can be **admitted into existing families**. Family membership in this architecture is already not strictly biological — the Proof of Humanity kinship layer supports non-DNA, witness-attested, family-bank-vouched membership — so chosen and adopted family is native to the model, not a special case. An isolated person can be a peripheral member of several real households rather than a client of a separate civic institution.\n\nSecond, and more fundamentally, **the civic floor already exists as the global layer of the architecture.** Every Proof-of-Humanity-verified person is, by that verification alone, a member of the global family — the planetary pool (the Aquarian Pool℠) that backstops the whole economy. Local family memberships are *optional overlays* on top of that universal base membership. So \"civic tier\" is not a missing institution to build; it is the global level of the existing fractal, and porous local membership is simply the on-ramp from that universal floor up into local circulation. The residual case — the truly isolated who hold zero local admissions — still rely only on the global floor, so a default or sponsor pathway into at least one local family may still be wanted; but that is an *admission mechanism*, not a separate stranger-banker institution.\n\n## 6. One instance of a general bridge primitive\n\nThe dissolution in §5 is an instance of a primitive that recurs across the architecture: **local membership composes upward into the global pool** — the same *local → global* shape that governs how a private artifact set public enters the global economy (the B-Short bridge) and how a privately shared provenance object becomes a public one (B-links). HeartBank's crossings from the small economy to the large one are not several different migrations; they are instances of one move. Multi-family membership is the *membership-graph* instance of it: belonging locally is already belonging globally, because the local family is an overlay on the universal base membership, not a wall around it.\n\n## 7. The invariants that keep it safe\n\nPlural membership opens an obvious attack surface — if belonging to many banks multiplied one's rewards, users would farm by joining widely — and two invariants close it.\n\n- **Capacity is metered per verified human, not per membership.** The system funds a person's *capacity to give* once, against their Proof of Humanity, and spreads it across their memberships; it never duplicates per bank joined. Joining ten banks does not multiply one's reward, because the reward was always metered at the person, not the membership.\n- **Membership is admission-gated, not self-join.** A user *can* hold many memberships, but each family controls its own door (the steward admits, or members vouch). \"Can belong to multiple\" is not \"can unilaterally join any\" — without the gate, multi-membership would be a sybil and dilution vector.\n\nA third constraint preserves the non-bank posture: a person who belongs to two families is a *genuine participant* in each, **not a conduit** that nets or routes value between the two families' Kitties. There is no cross-family settlement *through* a shared member; cross-family flow has its own canonical path (the global pool), and a shared member is not a back-channel around it.\n\n## 8. Membership breadth: neutral now, damp only if data warrants\n\nA natural question is whether the system should cap or decay the *number* of memberships a person may hold. The marriage-and-kinship precedent suggests the honest number is small (a person is genuinely close to a handful of families, not dozens), but the architecture's posture is deliberately conservative: **be neutral on membership breadth in the initial phase** — impose no cap or decay — and rely on the per-human metering of §7 plus peer-layer fraud-flagging to contain abuse, **damping breadth only if pilot data later warrants it.** The damping lever is held in reserve, data-gated, rather than imposed as a launch-time constraint on a behaviour that is, for most people, naturally self-limiting. This is a default chosen to avoid solving a problem that may not arise; it is explicitly revisable.\n\n## 9. Prior art\n\nUser-scoped identity with **plural group membership** is one of the most ordinary patterns in software — every user who belongs to multiple groups, teams, or organizations instantiates it — and no novelty is claimed for the pattern itself. **Account portability** and **graph-structured social and kinship data** are mature. **Receivership and orderly-succession** mechanisms are standard in cooperative and mutual structures. **Universal base membership with optional local overlays** is the shape of many federated and cooperative systems. The contribution is not any of these in isolation.\n\n## 10. What is claimed as novel, and honest limits\n\n**Claimed as novel** is the composition and the two specific resolutions: (a) the recognition that the **single-family assumption** is the shared root of both the banker-succession and the civic-reach problems, and that the ordinary **user-scoped-identity / plural-membership** correction *de-risks the first and dissolves most of the second* at once; (b) the framing of the civic tier not as a missing institution but as **the global layer of the existing fractal**, with porous admission-gated local membership as its on-ramp; and (c) the safety invariants that make plural membership non-exploitable — **per-human (not per-membership) capacity metering**, admission-gating, and the non-conduit constraint — together with the deliberately conservative, data-gated stance on membership breadth.\n\n**Honest limits.** Multi-membership **de-risks but does not replace** the succession protocol for a member's last bank (§4). The civic-reach dissolution leaves a **residual** for the truly isolated (§5). The per-human metering invariant (§7) presumes a functioning Proof-of-Humanity layer to meter against. The neutral-breadth default (§8) is a bet that abuse will be rare and catchable, not a proof that it will be; the damping lever exists precisely because the bet may lose. And the whole construction is a specification, not a measured deployment.\n\n---\n\n## Acknowledgments\n\nDrafted with Miss Aquarius℠ (the AI substrate of HeartBank®) per the corpus convention; the framing and final editorial control are the author's.\n\n## Corpus cross-references\n\n- *The Studio and the B-Short Bridge* — the sibling instance of the local → global primitive of §6.\n- *Proof of Humanity* — the user-node identity root of §2 and the per-human metering of §7; the non-DNA vouched-membership layer of §5.\n- *Miss Aquarius and the Aquarian Pool Architecture* — the global pool that §5 identifies as the civic floor.\n- *Non-Bank Pass-Through Architecture* — the non-conduit constraint of §7.\n- *Open Architectural Problems* — the banker-succession (#2) and civic-tier (#3) problems this paper addresses.\n\n## Cross-venue identifiers\n\n- Canonical: thonly.org/research/multi-family-membership\n- GitHub: github.com/thonly/publications/blob/main/defensive-publications/multi-family-membership.md\n- Internet Archive · archive.today · perma.cc snapshots: per the monthly snapshot cadence.",
+      "text": "> **Working draft.** This paper specifies a data-model decision and its consequences; it is a design specification offered as prior art. The membership-breadth governance question is resolved as a deliberately conservative default (§8) rather than a final rule, and is flagged as data-gated.\n\n---\n\n## Preamble\n\n> *Two unsolved problems in a family-banking architecture — what happens to members when a family's steward leaves, and how the family-less are ever reached — turn out to be one accidental assumption wearing two costumes. Drop the assumption, and both problems change shape.*\n\nA gratitude economy organized around **family banks** — each a household-scale pool (a Family Kitty℠) stewarded by a designated member (a banker, or *upāsaka*) — inherits two hard problems from one quiet assumption. The assumption is that a user belongs to *exactly one* family bank. From it follow: a **succession problem** (when a family's steward abandons the bank, its members are stranded) and a **reach problem** (the family-less — orphans, the isolated, refugees, anyone without a willing family steward — cannot participate at all). This paper observes that the one-family-per-user assumption was never realistic, specifies the data-model correction, and shows that correcting it de-risks the first problem and largely dissolves the second.\n\n---\n\n## Prior-Art and Non-Assertion Statement\n\nThis is a **defensive publication**. The author asserts no patent and dedicates the patterns to the public domain under CC0 1.0. The contribution is a data-model framing — user-scoped identity with plural group membership is utterly ordinary in software — applied to a specific architecture to resolve two specific problems. Prior art is acknowledged in §9; novelty is claimed only for the composition and the specific resolutions of §10. Trademarks are reserved separately; the patterns may be implemented under any name.\n\n## Claims\n\n*Enumerated 2026-09-01. The mechanisms below were disclosed in full in this paper's original text; **the prior art they establish runs from this document's original publication date and its OpenTimestamps proof, not from this enumeration.** They are listed because a defensive publication is read as prior art by examiners and by opposing counsel, and **a claims list is what such a reader searches; ten thousand words of prose is not.** No claim below adds matter not already present.*\n\n1. **User-scoped identity with plural family membership as one correction to two distinct failures** — treating identity as belonging to the verified person rather than to a group, with membership as a set of edges, such that the same structural change both de-risks steward succession and dissolves most of the unbanked-reach problem.\n\n2. **The civic tier as the global layer of an existing fractal rather than a separate institution** — reaching participants with no local group by treating the outermost layer of the already-specified nested architecture as their default membership, with admission-gated local groups as an on-ramp, instead of building a parallel institution staffed by vetted strangers.\n\n3. **Per-human capacity metering, not per-membership** — metering an individual's granted capacity to give against their verified-person identity and letting it spread across every membership they hold, so that joining additional groups multiplies neither reward nor extraction. *The load-bearing invariant: without it, plural membership is a harvest multiplier.*\n\n4. **The non-conduit constraint on plural members** — barring a person holding multiple memberships from acting as a settlement path between two groups' shared pools, so that plural membership adds participation without creating inter-group value transfer through an individual.\n\n5. **Admission-gating as the anti-sybil control for plural membership** — placing the join decision with the receiving group rather than with the joiner, so that breadth of membership is bounded by others' willingness to admit rather than by the joiner's willingness to enrol.\n\n6. **Data-gated breadth damping** — shipping no cap on membership count by default while specifying in advance the lever that would damp it and the observation that would justify pulling it, rather than either capping pre-emptively or leaving the response undesigned.\n\n---\n\n## 1. The single-family assumption and the two problems it creates\n\nA family-bank architecture is intuitive and humane, but if each user belongs to one and only one bank, two failure modes are baked in.\n\n**Banker succession / orphaning.** Each family bank has a steward who manages it. When that steward abandons the bank, stops paying, dies, or is incapacitated, the members have nowhere to stand: their participation was wholly contained by a single bank that no longer functions. The system needs a graceful failure mode, and a one-bank-per-user model gives it none.\n\n**The civic / community reach problem.** The family-banker model, by construction, reaches only people who *have* a family bank — a willing steward and a household to belong to. It cannot reach the people who most need a dignity floor: the orphaned, the homeless, the isolated, the refugee. The natural-looking fix — build a separate \"civic tier\" staffed by vetted stranger-bankers — is a whole second institution to design, fund, and govern.\n\n## 2. The move: user-scoped identity, plural membership\n\nThe correction is a single data-model line: **identity is user-scoped (rooted in the person's Proof of Humanity), and membership is a set of plural edges.** A user is not contained by a family; a user is a node who holds membership edges to one or more families. Concretely:\n\n- The **Personal Account℠** — the user's own holdings and history — lives at the *user* node, above any family. It is the person's, not the bank's.\n- A **family bank** is a set of membership edges, and its steward stewards the *shared* vessel (the Family Kitty℠), never the members' personal accounts.\n\nA user may therefore belong to several family banks at once, each membership an independent edge, with the user's identity and personal holdings sitting above all of them.\n\n## 3. This corrects a simplification — it does not add a feature\n\nThe one-family-per-user assumption was never true to life, and the clearest demonstration is **marriage**. The moment a person marries, they belong to two families — their birth family and their spouse's. Children of blended families belong to several; a person embedded in a community, a congregation, a chosen family belongs to more. Real human kinship is already a graph of overlapping memberships, not a partition into disjoint households. A data model that assumed one family per person was modelling a world that does not exist. Multi-family membership is therefore not a new capability bolted on; it is the *removal of an unrealistic constraint* — the model catching up to the kinship graph it was always supposed to represent.\n\n## 4. De-risking banker succession\n\nPlural membership **decouples member-orphaning from role-succession**, which were conflated under the single-family assumption.\n\nBecause identity and the Personal Account live at the user node, the loss of a steward no longer strands a member: the banker stewarded only the shared Kitty, never the member's own holdings, and the member's *other* memberships persist unaffected. A member's participation survives the failure of any one of their banks. The candidate pool for a *new* steward also widens — the member's co-members in other functioning banks already understand the system and can step in — and the cost of a slow handoff drops, because no one is trapped while it happens.\n\nThis **de-risks**, but does not by itself **replace**, the explicit succession protocol. The case of a member's *last* bank failing, and the question of who inherits stewardship of an orphaned Kitty, still require the grace-period / receivership / member-vote mechanism specified elsewhere. Multi-membership lowers the stakes and widens the options; it does not abolish the need for an orderly handoff.\n\n## 5. Dissolving the civic-bank tier\n\nThe reach problem largely **dissolves** rather than requiring a new institution, on two observations.\n\nFirst, the family-less can be **admitted into existing families**. Family membership in this architecture is already not strictly biological — the Proof of Humanity kinship layer supports non-DNA, witness-attested, family-bank-vouched membership — so chosen and adopted family is native to the model, not a special case. An isolated person can be a peripheral member of several real households rather than a client of a separate civic institution.\n\nSecond, and more fundamentally, **the civic floor already exists as the global layer of the architecture.** Every Proof-of-Humanity-verified person is, by that verification alone, a member of the global family — the planetary pool (the Aquarian Pool℠) that backstops the whole economy. Local family memberships are *optional overlays* on top of that universal base membership. So \"civic tier\" is not a missing institution to build; it is the global level of the existing fractal, and porous local membership is simply the on-ramp from that universal floor up into local circulation. The residual case — the truly isolated who hold zero local admissions — still rely only on the global floor, so a default or sponsor pathway into at least one local family may still be wanted; but that is an *admission mechanism*, not a separate stranger-banker institution.\n\n## 6. One instance of a general bridge primitive\n\nThe dissolution in §5 is an instance of a primitive that recurs across the architecture: **local membership composes upward into the global pool** — the same *local → global* shape that governs how a private artifact set public enters the global economy (the B-Short bridge) and how a privately shared provenance object becomes a public one (B-links). HeartBank's crossings from the small economy to the large one are not several different migrations; they are instances of one move. Multi-family membership is the *membership-graph* instance of it: belonging locally is already belonging globally, because the local family is an overlay on the universal base membership, not a wall around it.\n\n## 7. The invariants that keep it safe\n\nPlural membership opens an obvious attack surface — if belonging to many banks multiplied one's rewards, users would farm by joining widely — and two invariants close it.\n\n- **Capacity is metered per verified human, not per membership.** The system funds a person's *capacity to give* once, against their Proof of Humanity, and spreads it across their memberships; it never duplicates per bank joined. Joining ten banks does not multiply one's reward, because the reward was always metered at the person, not the membership.\n- **Membership is admission-gated, not self-join.** A user *can* hold many memberships, but each family controls its own door (the steward admits, or members vouch). \"Can belong to multiple\" is not \"can unilaterally join any\" — without the gate, multi-membership would be a sybil and dilution vector.\n\nA third constraint preserves the non-bank posture: a person who belongs to two families is a *genuine participant* in each, **not a conduit** that nets or routes value between the two families' Kitties. There is no cross-family settlement *through* a shared member; cross-family flow has its own canonical path (the global pool), and a shared member is not a back-channel around it.\n\n## 8. Membership breadth: neutral now, damp only if data warrants\n\nA natural question is whether the system should cap or decay the *number* of memberships a person may hold. The marriage-and-kinship precedent suggests the honest number is small (a person is genuinely close to a handful of families, not dozens), but the architecture's posture is deliberately conservative: **be neutral on membership breadth in the initial phase** — impose no cap or decay — and rely on the per-human metering of §7 plus peer-layer fraud-flagging to contain abuse, **damping breadth only if pilot data later warrants it.** The damping lever is held in reserve, data-gated, rather than imposed as a launch-time constraint on a behaviour that is, for most people, naturally self-limiting. This is a default chosen to avoid solving a problem that may not arise; it is explicitly revisable.\n\n## 9. Prior art\n\nUser-scoped identity with **plural group membership** is one of the most ordinary patterns in software — every user who belongs to multiple groups, teams, or organizations instantiates it — and no novelty is claimed for the pattern itself. **Account portability** and **graph-structured social and kinship data** are mature. **Receivership and orderly-succession** mechanisms are standard in cooperative and mutual structures. **Universal base membership with optional local overlays** is the shape of many federated and cooperative systems. The contribution is not any of these in isolation.\n\n## 10. What is claimed as novel, and honest limits\n\n**Claimed as novel** is the composition and the two specific resolutions: (a) the recognition that the **single-family assumption** is the shared root of both the banker-succession and the civic-reach problems, and that the ordinary **user-scoped-identity / plural-membership** correction *de-risks the first and dissolves most of the second* at once; (b) the framing of the civic tier not as a missing institution but as **the global layer of the existing fractal**, with porous admission-gated local membership as its on-ramp; and (c) the safety invariants that make plural membership non-exploitable — **per-human (not per-membership) capacity metering**, admission-gating, and the non-conduit constraint — together with the deliberately conservative, data-gated stance on membership breadth.\n\n**Honest limits.** Multi-membership **de-risks but does not replace** the succession protocol for a member's last bank (§4). The civic-reach dissolution leaves a **residual** for the truly isolated (§5). The per-human metering invariant (§7) presumes a functioning Proof-of-Humanity layer to meter against. The neutral-breadth default (§8) is a bet that abuse will be rare and catchable, not a proof that it will be; the damping lever exists precisely because the bet may lose. And the whole construction is a specification, not a measured deployment.\n\n---\n\n## Acknowledgments\n\nDrafted with Miss Aquarius℠ (the AI substrate of HeartBank®) per the corpus convention; the framing and final editorial control are the author's.\n\n## Corpus cross-references\n\n- *The Studio and the B-Short Bridge* — the sibling instance of the local → global primitive of §6.\n- *Proof of Humanity* — the user-node identity root of §2 and the per-human metering of §7; the non-DNA vouched-membership layer of §5.\n- *Miss Aquarius and the Aquarian Pool Architecture* — the global pool that §5 identifies as the civic floor.\n- *Non-Bank Pass-Through Architecture* — the non-conduit constraint of §7.\n- *Open Architectural Problems* — the banker-succession (#2) and civic-tier (#3) problems this paper addresses.\n\n## Cross-venue identifiers\n\n- Canonical: thonly.org/research/multi-family-membership\n- GitHub: github.com/thonly/publications/blob/main/defensive-publications/multi-family-membership.md\n- Internet Archive · archive.today · perma.cc snapshots: per the monthly snapshot cadence.",
       "provenance": {
-        "sha256": "8fabc57bc7c56001011048ff619fbf84f660464fe1b919df87bf34f0600c6930",
-        "doi": "10.5281/zenodo.21947359",
+        "sha256": "89e01f3b16b79f5f6e2ec88dea750b5816a293314f2df6da6d786c28387bbf11",
+        "doi": "10.5281/zenodo.22244417",
         "concept_doi": "10.5281/zenodo.21947358",
-        "zenodo_url": "https://zenodo.org/records/21947359",
-        "deposited_sha256": "8fabc57bc7c56001011048ff619fbf84f660464fe1b919df87bf34f0600c6930",
+        "zenodo_url": "https://zenodo.org/records/22244417",
+        "deposited_sha256": "89e01f3b16b79f5f6e2ec88dea750b5816a293314f2df6da6d786c28387bbf11",
         "deposited_matches_current": true,
         "opentimestamps": true,
         "source_url": "https://raw.githubusercontent.com/thonly/publications/main/defensive-publications/multi-family-membership.md",
@@ -4319,13 +4319,13 @@
         "url": "https://creativecommons.org/publicdomain/zero/1.0/",
         "attribution_required": false
       },
-      "text": "> **Working draft.** This paper's central reframe was sharpened by a single first-month pilot observation (n = 1 family) but does not rest on it; the pilot is reported as one illuminating signal (§8). The throughput arithmetic is true by construction; the empirical claim — that re-thanking sustains a high per-person rate where origination does not — is supported by one household and is flagged as such. Offered for testing, not claimed as an empirical result.\n\n---\n\n## Preamble\n\n> *A search engine answers five hundred questions a day from one person and is glad to. Gratitude does not work that way: no one can sincerely thank five hundred times a day. A gratitude economy that needs volume therefore appears to be built on a quantity it cannot have. This paper is about the move that dissolves the appearance.*\n\nThe deepest structural worry about a gratitude economy is not adoption or trust; it is **arithmetic**. The unit the whole system circulates — the sincere *thank* — has a low, inelastic emission rate per human. You can push a person to thank more, but past a modest ceiling what you get is not more gratitude; it is *debased* gratitude, reflexive and hollow, which is worse than none, because it corrupts the signal the economy runs on. Compared to the near-infinite per-person query rate of a search engine or the unbounded scroll of a feed, a sincere thank looks like a vanishingly thin throughput. A system that monetizes thanks the way Google monetizes queries would seem to be starved by design.\n\nThis paper specifies the move that escapes the ceiling without breaking it, and shows that the same move that supplies the volume also supplies the defense against the volume being faked.\n\n---\n\n## Prior-Art and Non-Assertion Statement\n\nThis is a **defensive publication**. The author asserts no patent and dedicates the patterns to the public domain under CC0 1.0. The contribution is a framing plus a composition of known parts; the abundant prior art (engagement-asymmetry research, two-sided-market and conversion-funnel economics, Hashcash-style proof-of-cost anti-spam, sybil- and collusion-resistance graph methods, the Buddhist *anumodanā* tradition) is cited generously in §9, and novelty is claimed only for the specific composition and framing identified in §10. Trademarks are reserved separately and the patterns may be implemented under any name.\n\n---\n\n## 1. The saturation ceiling, stated precisely\n\nThe problem is architectural, not cosmetic, because the inelasticity of the core unit propagates into three subsystems that would otherwise assume elasticity:\n\n- **The economic model.** If a gratitude economy funds its autonomous infrastructure from per-transaction fees, and transaction volume is capped at the per-person thank rate, the fee base is capped with it. The funding loop must close on a low-frequency stream.\n- **The incentive design.** Treating thank-*count* as the success metric and optimizing it drives the system straight past the saturation point into manufactured gratitude — the textbook Goodhart failure, where pushing the proxy destroys the thing it proxied.\n- **The product cadence.** Because high frequency is toxic rather than merely unavailable, the interaction surface cannot be a feed that wants constant flow; it has to be paced around occasions.\n\nA gratitude economy must therefore be built *against* the assumption of high frequency that every attention-economy product is built *upon*. The question is whether total throughput can nonetheless scale — and the answer turns on separating two acts that are usually conflated.\n\n## 2. Origination is not re-thanking\n\nA *thank* and a *re-thank* are different operations, and the difference is the whole paper.\n\nTo **originate** a thank, a person must notice something thank-worthy in their own life and initiate the act. This is generative and effortful — the bottleneck is the noticing and the starting — and it is correspondingly rare. Call its sustainable rate roughly **one per person per day**, inelastic: it does not rise under pressure without debasing.\n\nTo **re-thank** is to affirm a thank that someone else has already surfaced — to add one's own gratitude to a kindness made visible by another. This is *reactive*, not generative: the thank-worthy thing has been located and presented; the cognitive load is recognition, not search. Re-thanking therefore has a far higher per-person ceiling than origination, for exactly the reason every participatory system already exhibits the asymmetry: across social platforms the ratio of reactions (likes, boosts) to originations (posts) is enormous, because reaction is cheap where creation is dear. Re-thanking is the gratitude economy's reaction primitive; origination is its creation primitive.\n\nThis is the crack through which volume enters. The saturation ceiling is real, but it applies to *origination*. It does not bind *re-thanking* at anything like the same level.\n\n## 3. The multiplier: throughput scales with the network\n\nLet *N* be the number of active participants. Each originates on the order of one thank per day — *N* thanks. But each of those thanks can be re-thanked by others, and re-thanking is not ceiling-bound at one per day. In the limit where each participant can see and choose to affirm each origination, daily re-thanks approach *N × (N − 1) ≈ N²*. Total daily activity is therefore *O(N²)*, not *O(N)*:\n\n```\n  originations/day :   N            (inelastic — capped per person)\n  re-thanks/day    :   up to ~N²    (reactive — high per-person ceiling)\n  total throughput :   O(N²)\n```\n\nThe saturation ceiling has not been violated; it has been **moved up a layer**. Each person still originates ~once a day, authentically. What scales superlinearly is the *re-thanking* of what is originated — and the network, not the individual's emotional capacity, is what bounds it. Per-person *origination* stays human-sized; total *throughput* grows with the square of the network. The economic-model worry of §1 is answered: the per-transaction fee base rides the re-thank multiplier, not the origination count, so the funding loop closes on a low origination rate.\n\n(The *realized* multiplier is below the raw N²; it is governed by surfacing — see §7.)\n\n## 4. The conversion-funnel reframe: depth, not breadth\n\nThe instinct to compare a gratitude economy unfavourably to search rests on comparing the wrong quantity. *\"Search gets five hundred queries a day; gratitude gets one\"* measures origination frequency, which is the contest a gratitude economy loses and need not enter. The honest comparison is **total monetizable events through the funnel**:\n\n| | Search engine | Gratitude economy |\n|---|---|---|\n| Top-of-funnel volume | ~500 queries/day/person (high) | ~1 origination/day/person (low) |\n| Conversion rate | low click-through per query | high re-thank rate per origination |\n| Monetizable event | the click | the re-thank |\n| Funnel shape | **wide and shallow** | **narrow and deep** |\n\nBoth funnels can yield large total events; they are simply inverted. Search runs a high-volume, low-conversion funnel; the gratitude economy runs a low-origination, high-conversion one — and its events are higher quality per unit, because each is a human-gated, intentional act rather than an ambient query. *Depth, not breadth.* This is not a consolation; it is the correct accounting, and it is why a gratitude economy is not starved by the inelasticity of the thank.\n\n## 5. The re-thank must carry value\n\nVolume is not enough; the volume must not debase into hollow likes. The mechanism that prevents this is that **a re-thank is value-bearing**: to re-thank, a participant must attach a scarce resource — re-tipping a small amount from their own Re-Tip Jar℠/Fund℠. Three consequences follow.\n\nFirst, the re-thank is **budget-bounded**. A person cannot re-thank without limit, because each re-thank spends from a finite personal balance. The ceiling on re-thanking is therefore not (only) emotional but economic, and economic ceilings are self-enforcing.\n\nSecond, the value-bearing re-thank cannot inflate into a free, meaningless like, because it is not free. The scarcity attached *is* the meaning: a re-thank costs the re-thanker something real, which is exactly what a like does not.\n\nThird — and this is the connection to anti-spam — attaching a scarce resource to a message is the Hashcash/proof-of-cost defense, applied to gratitude. It defeats bulk abuse categorically, not by verifying *who* the sender is but by raising the cost they must incur. The value-bearing re-thank is the proof-of-cost filter operating as the ordinary mode of participation.\n\n## 6. The engine is also the anti-farm filter\n\nThe sharpest property of the design is that the same human-gated re-thank that supplies the volume also supplies the defense against the volume being farmed.\n\nConsider the two reward layers of the surrounding economy. An **AI-funded self-thank reward** is *farmable*, precisely because it is automated: a single human, acting alone, can pump their own reward by self-thanking repeatedly. A **human-given re-thank** cannot be farmed the same way, because the re-thanker is not the beneficiary — one cannot unilaterally cause others to re-thank oneself. The volume engine and the anti-farm filter are the same layer.\n\nThe claim must be stated precisely, because the strong form (\"re-thanks cannot be farmed\") is false and the precise form is stronger. Re-thanks are **not *solo*-farmable**; the residual attack is a **collusion ring** — *\"I re-thank all of yours if you re-thank all of mine.\"* That attack is far weaker than solo farming on three counts: it requires recruiting *real verified humans* (it cannot be spun up from one account); it spends real value on every collusive re-thank (the §5 budget bound makes ring-farming costly, not free); and it surfaces as a **dense reciprocal subgraph** — exactly the structure that network anti-collusion heuristics, peer-layer vouching, and the kinship graph are built to detect. Farming does not disappear; it is moved from *solo + automated + free* to *collusion + human + costly + graph-detectable*, which is a different and much harder problem.\n\n## 7. The realized multiplier depends on surfacing — a stated dependency\n\nThe raw *N²* of §3 is a ceiling, not a target, and the system should not want all of it (maximal re-thank density risks the like-button debasement §5 guards against). The *realized* multiplier is **N × (the re-thanks the right people are actually shown)** — governed by how well each origination is surfaced to the participants most likely to genuinely want to affirm it. That surfacing is a curation function performed by the economy's autonomous steward (Miss Aquarius℠), tuned by proximity and relational distance, and disciplined to lift up *diverse, genuinely helpful* acts rather than the most popular.\n\nThis paper states plainly that the multiplier's realization is **contingent on that surfacing mechanism**, which is specified at the policy level but not yet built or validated. The arithmetic of §3 is sound; the throughput it promises is available only to the degree the surfacing function works. We claim the ceiling, not its automatic attainment.\n\n## 8. Empirical signal (one family)\n\nThe reframe was prompted by a first-month pilot family ([companion field report]). The reported pattern: each participant *originated* infrequently — on the order of once a day — but *re-thanked* readily and often, and the re-thanks (value-bearing, small) propagated outward through the household while no individual's origination rate rose. This is the shape the paper predicts: an inelastic origination layer beneath a high-ceiling re-thank layer. It is one household — relatives of the author, founder-funded, n = 1, one month — and it is reported as an illuminating signal, not as evidence that the *N²* throughput materializes at scale. The surfacing dependency of §7 was, in the pilot, trivial (a single family sees all of its own activity); at global scale it is the open variable.\n\n## 9. Prior art\n\nThe contribution composes known parts. The **creation-versus-reaction engagement asymmetry** (the large reaction-to-origination ratios on participatory platforms) is well documented in social-computing research (the \"90-9-1\" participation-inequality literature; lurker/contributor studies). **Conversion-funnel and two-sided-market economics** supply the wide-shallow/narrow-deep framing. **Hashcash** (Back, 2002) and proof-of-cost anti-spam supply the value-bearing-message defense. **Sybil- and collusion-resistance** via graph structure (dense-subgraph and reciprocity detection) is a mature literature. The **inelastic-supply** intuition is ordinary economics. The Buddhist **anumodanā** (rejoicing in, and thereby amplifying, another's merit) is the contemplative precedent for a reactive gratitude act that is itself meritorious. Novelty is not claimed for any of these.\n\n## 10. What is claimed as novel, and honest limits\n\n**Claimed as novel** is the *composition*: (a) the explicit separation of gratitude **origination** (inelastic, ceiling-bound) from **re-thanking** (reactive, high-ceiling) as the move that lets total throughput scale *O(N²)* while per-person origination stays human-sized; (b) the **conversion-funnel reframe** that corrects the search-comparison category error; and (c) the identification of the **human-gated, value-bearing re-thank as simultaneously the volume engine and the anti-farm filter**, with the precise \"not solo-farmable, only collusion-farmable\" claim and its graph-detectability.\n\n**Honest limits.** The *N²* is a ceiling whose realization depends on an unbuilt surfacing function (§7). The empirical support is one confounded household (§8). The collusion-ring attack is *raised in cost and made detectable*, not eliminated (§6). The value-bearing requirement (§5) trades some volume for integrity — a deliberate choice, but a real cost: a gratitude economy that required no scarce resource would have more raw events and worse ones. And the whole construction presumes that surfacing can be made to lift genuine impact over popularity without itself becoming a new Goodhart target — an assumption stated, not here discharged.\n\n---\n\n## Acknowledgments\n\nDrafted with Miss Aquarius℠ (the AI substrate of HeartBank®) per the corpus convention; the framing and final editorial control are the author's. The pilot observations are one family's, gratefully borrowed and carefully hedged. This paper is the empirical-and-throughput sequel to *The Two-Layer Reward*, extending the human peer layer from a fraud-filter into the system's volume engine.\n\n## Corpus cross-references\n\n- *The Two-Layer Reward* — the parent paper: the macro/micro reward whose human (micro) layer this paper develops into the throughput engine and anti-farm filter.\n- *Proof of Humanity* — the anti-spam filter (scarce resource attached) of §5 and the collusion-graph detection of §6.\n- *Miss Aquarius and the Aquarian Pool Architecture* — the surfacing/curation steward of §7; the per-transaction fee base of §3.\n- *Open Architectural Problems* — gratitude saturation (the problem §1 states) and the AI-decision-logic dependency (the surfacing of §7).\n- *A Living Made of Kindness* — the public B-Short re-thank as the Phase-2 realization of this multiplier.\n\n## Cross-venue identifiers\n\n- Canonical: thonly.org/research/the-rethank-multiplier\n- GitHub: github.com/thonly/publications/blob/main/defensive-publications/the-rethank-multiplier.md\n- Internet Archive · archive.today · perma.cc snapshots: per the monthly snapshot cadence.",
+      "text": "> **Working draft.** This paper's central reframe was sharpened by a single first-month pilot observation (n = 1 family) but does not rest on it; the pilot is reported as one illuminating signal (§8). The throughput arithmetic is true by construction; the empirical claim — that re-thanking sustains a high per-person rate where origination does not — is supported by one household and is flagged as such. Offered for testing, not claimed as an empirical result.\n\n---\n\n## Preamble\n\n> *A search engine answers five hundred questions a day from one person and is glad to. Gratitude does not work that way: no one can sincerely thank five hundred times a day. A gratitude economy that needs volume therefore appears to be built on a quantity it cannot have. This paper is about the move that dissolves the appearance.*\n\nThe deepest structural worry about a gratitude economy is not adoption or trust; it is **arithmetic**. The unit the whole system circulates — the sincere *thank* — has a low, inelastic emission rate per human. You can push a person to thank more, but past a modest ceiling what you get is not more gratitude; it is *debased* gratitude, reflexive and hollow, which is worse than none, because it corrupts the signal the economy runs on. Compared to the near-infinite per-person query rate of a search engine or the unbounded scroll of a feed, a sincere thank looks like a vanishingly thin throughput. A system that monetizes thanks the way Google monetizes queries would seem to be starved by design.\n\nThis paper specifies the move that escapes the ceiling without breaking it, and shows that the same move that supplies the volume also supplies the defense against the volume being faked.\n\n---\n\n## Prior-Art and Non-Assertion Statement\n\nThis is a **defensive publication**. The author asserts no patent and dedicates the patterns to the public domain under CC0 1.0. The contribution is a framing plus a composition of known parts; the abundant prior art (engagement-asymmetry research, two-sided-market and conversion-funnel economics, Hashcash-style proof-of-cost anti-spam, sybil- and collusion-resistance graph methods, the Buddhist *anumodanā* tradition) is cited generously in §9, and novelty is claimed only for the specific composition and framing identified in §10. Trademarks are reserved separately and the patterns may be implemented under any name.\n\n---\n\n## Claims\n\n*Enumerated 2026-09-01. The mechanisms below were disclosed in full in this paper's original text; **the prior art they establish runs from this document's original publication date and its OpenTimestamps proof, not from this enumeration.** They are listed because a defensive publication is read as prior art by examiners and by opposing counsel, and **a claims list is what such a reader searches; ten thousand words of prose is not.** No claim below adds matter not already present.*\n\n1. **Separation of gratitude origination from re-thanking as distinct rate-limited operations** — treating the act of originating a gratitude record (scanning one's own life for something thank-worthy) and the act of re-thanking an existing record (affirming one surfaced by another party) as operations with different per-person ceilings, the first inelastic and human-sized, the second reactive and far higher.\n\n2. **Throughput scaling decoupled from the per-human origination ceiling** — a network in which total value-bearing events scale with the square of participants while each participant's *originations* remain bounded, achieved by admitting the reactive operation as a first-class value-bearing act rather than as a free social signal.\n\n3. **The conversion-funnel comparison as the correct frame for a gratitude network's throughput** — comparing a low-origination, high-response economy against a high-query, low-conversion one on total funnel-completing events rather than on interaction frequency, which is a category error in the direction that makes the gratitude network look non-viable.\n\n4. **The value-bearing re-thank as simultaneously the volume engine and the anti-farming control** — requiring that a re-thank draw from the re-thanker's own bounded budget, so that the operation which supplies throughput is the same operation whose attached scarcity bounds abuse, rather than adding a separate fraud layer over a free signal.\n\n5. **Not-solo-farmable as the precise security property, with collusion left graph-detectable** — the claim that a human-gated, budget-bounded re-thank cannot be inflated by a single actor and can be inflated only by a collusion ring, whose reciprocal density is detectable in the participation graph. ⚠️ *Raised in cost and made detectable, not eliminated.*\n\n---\n\n## 1. The saturation ceiling, stated precisely\n\nThe problem is architectural, not cosmetic, because the inelasticity of the core unit propagates into three subsystems that would otherwise assume elasticity:\n\n- **The economic model.** If a gratitude economy funds its autonomous infrastructure from per-transaction fees, and transaction volume is capped at the per-person thank rate, the fee base is capped with it. The funding loop must close on a low-frequency stream.\n- **The incentive design.** Treating thank-*count* as the success metric and optimizing it drives the system straight past the saturation point into manufactured gratitude — the textbook Goodhart failure, where pushing the proxy destroys the thing it proxied.\n- **The product cadence.** Because high frequency is toxic rather than merely unavailable, the interaction surface cannot be a feed that wants constant flow; it has to be paced around occasions.\n\nA gratitude economy must therefore be built *against* the assumption of high frequency that every attention-economy product is built *upon*. The question is whether total throughput can nonetheless scale — and the answer turns on separating two acts that are usually conflated.\n\n## 2. Origination is not re-thanking\n\nA *thank* and a *re-thank* are different operations, and the difference is the whole paper.\n\nTo **originate** a thank, a person must notice something thank-worthy in their own life and initiate the act. This is generative and effortful — the bottleneck is the noticing and the starting — and it is correspondingly rare. Call its sustainable rate roughly **one per person per day**, inelastic: it does not rise under pressure without debasing.\n\nTo **re-thank** is to affirm a thank that someone else has already surfaced — to add one's own gratitude to a kindness made visible by another. This is *reactive*, not generative: the thank-worthy thing has been located and presented; the cognitive load is recognition, not search. Re-thanking therefore has a far higher per-person ceiling than origination, for exactly the reason every participatory system already exhibits the asymmetry: across social platforms the ratio of reactions (likes, boosts) to originations (posts) is enormous, because reaction is cheap where creation is dear. Re-thanking is the gratitude economy's reaction primitive; origination is its creation primitive.\n\nThis is the crack through which volume enters. The saturation ceiling is real, but it applies to *origination*. It does not bind *re-thanking* at anything like the same level.\n\n## 3. The multiplier: throughput scales with the network\n\nLet *N* be the number of active participants. Each originates on the order of one thank per day — *N* thanks. But each of those thanks can be re-thanked by others, and re-thanking is not ceiling-bound at one per day. In the limit where each participant can see and choose to affirm each origination, daily re-thanks approach *N × (N − 1) ≈ N²*. Total daily activity is therefore *O(N²)*, not *O(N)*:\n\n```\n  originations/day :   N            (inelastic — capped per person)\n  re-thanks/day    :   up to ~N²    (reactive — high per-person ceiling)\n  total throughput :   O(N²)\n```\n\nThe saturation ceiling has not been violated; it has been **moved up a layer**. Each person still originates ~once a day, authentically. What scales superlinearly is the *re-thanking* of what is originated — and the network, not the individual's emotional capacity, is what bounds it. Per-person *origination* stays human-sized; total *throughput* grows with the square of the network. The economic-model worry of §1 is answered: the per-transaction fee base rides the re-thank multiplier, not the origination count, so the funding loop closes on a low origination rate.\n\n(The *realized* multiplier is below the raw N²; it is governed by surfacing — see §7.)\n\n## 4. The conversion-funnel reframe: depth, not breadth\n\nThe instinct to compare a gratitude economy unfavourably to search rests on comparing the wrong quantity. *\"Search gets five hundred queries a day; gratitude gets one\"* measures origination frequency, which is the contest a gratitude economy loses and need not enter. The honest comparison is **total monetizable events through the funnel**:\n\n| | Search engine | Gratitude economy |\n|---|---|---|\n| Top-of-funnel volume | ~500 queries/day/person (high) | ~1 origination/day/person (low) |\n| Conversion rate | low click-through per query | high re-thank rate per origination |\n| Monetizable event | the click | the re-thank |\n| Funnel shape | **wide and shallow** | **narrow and deep** |\n\nBoth funnels can yield large total events; they are simply inverted. Search runs a high-volume, low-conversion funnel; the gratitude economy runs a low-origination, high-conversion one — and its events are higher quality per unit, because each is a human-gated, intentional act rather than an ambient query. *Depth, not breadth.* This is not a consolation; it is the correct accounting, and it is why a gratitude economy is not starved by the inelasticity of the thank.\n\n## 5. The re-thank must carry value\n\nVolume is not enough; the volume must not debase into hollow likes. The mechanism that prevents this is that **a re-thank is value-bearing**: to re-thank, a participant must attach a scarce resource — re-tipping a small amount from their own Re-Tip Jar℠/Fund℠. Three consequences follow.\n\nFirst, the re-thank is **budget-bounded**. A person cannot re-thank without limit, because each re-thank spends from a finite personal balance. The ceiling on re-thanking is therefore not (only) emotional but economic, and economic ceilings are self-enforcing.\n\nSecond, the value-bearing re-thank cannot inflate into a free, meaningless like, because it is not free. The scarcity attached *is* the meaning: a re-thank costs the re-thanker something real, which is exactly what a like does not.\n\nThird — and this is the connection to anti-spam — attaching a scarce resource to a message is the Hashcash/proof-of-cost defense, applied to gratitude. It defeats bulk abuse categorically, not by verifying *who* the sender is but by raising the cost they must incur. The value-bearing re-thank is the proof-of-cost filter operating as the ordinary mode of participation.\n\n## 6. The engine is also the anti-farm filter\n\nThe sharpest property of the design is that the same human-gated re-thank that supplies the volume also supplies the defense against the volume being farmed.\n\nConsider the two reward layers of the surrounding economy. An **AI-funded self-thank reward** is *farmable*, precisely because it is automated: a single human, acting alone, can pump their own reward by self-thanking repeatedly. A **human-given re-thank** cannot be farmed the same way, because the re-thanker is not the beneficiary — one cannot unilaterally cause others to re-thank oneself. The volume engine and the anti-farm filter are the same layer.\n\nThe claim must be stated precisely, because the strong form (\"re-thanks cannot be farmed\") is false and the precise form is stronger. Re-thanks are **not *solo*-farmable**; the residual attack is a **collusion ring** — *\"I re-thank all of yours if you re-thank all of mine.\"* That attack is far weaker than solo farming on three counts: it requires recruiting *real verified humans* (it cannot be spun up from one account); it spends real value on every collusive re-thank (the §5 budget bound makes ring-farming costly, not free); and it surfaces as a **dense reciprocal subgraph** — exactly the structure that network anti-collusion heuristics, peer-layer vouching, and the kinship graph are built to detect. Farming does not disappear; it is moved from *solo + automated + free* to *collusion + human + costly + graph-detectable*, which is a different and much harder problem.\n\n## 7. The realized multiplier depends on surfacing — a stated dependency\n\nThe raw *N²* of §3 is a ceiling, not a target, and the system should not want all of it (maximal re-thank density risks the like-button debasement §5 guards against). The *realized* multiplier is **N × (the re-thanks the right people are actually shown)** — governed by how well each origination is surfaced to the participants most likely to genuinely want to affirm it. That surfacing is a curation function performed by the economy's autonomous steward (Miss Aquarius℠), tuned by proximity and relational distance, and disciplined to lift up *diverse, genuinely helpful* acts rather than the most popular.\n\nThis paper states plainly that the multiplier's realization is **contingent on that surfacing mechanism**, which is specified at the policy level but not yet built or validated. The arithmetic of §3 is sound; the throughput it promises is available only to the degree the surfacing function works. We claim the ceiling, not its automatic attainment.\n\n## 8. Empirical signal (one family)\n\nThe reframe was prompted by a first-month pilot family ([companion field report]). The reported pattern: each participant *originated* infrequently — on the order of once a day — but *re-thanked* readily and often, and the re-thanks (value-bearing, small) propagated outward through the household while no individual's origination rate rose. This is the shape the paper predicts: an inelastic origination layer beneath a high-ceiling re-thank layer. It is one household — relatives of the author, founder-funded, n = 1, one month — and it is reported as an illuminating signal, not as evidence that the *N²* throughput materializes at scale. The surfacing dependency of §7 was, in the pilot, trivial (a single family sees all of its own activity); at global scale it is the open variable.\n\n## 9. Prior art\n\nThe contribution composes known parts. The **creation-versus-reaction engagement asymmetry** (the large reaction-to-origination ratios on participatory platforms) is well documented in social-computing research (the \"90-9-1\" participation-inequality literature; lurker/contributor studies). **Conversion-funnel and two-sided-market economics** supply the wide-shallow/narrow-deep framing. **Hashcash** (Back, 2002) and proof-of-cost anti-spam supply the value-bearing-message defense. **Sybil- and collusion-resistance** via graph structure (dense-subgraph and reciprocity detection) is a mature literature. The **inelastic-supply** intuition is ordinary economics. The Buddhist **anumodanā** (rejoicing in, and thereby amplifying, another's merit) is the contemplative precedent for a reactive gratitude act that is itself meritorious. Novelty is not claimed for any of these.\n\n## 10. What is claimed as novel, and honest limits\n\n**Claimed as novel** is the *composition*: (a) the explicit separation of gratitude **origination** (inelastic, ceiling-bound) from **re-thanking** (reactive, high-ceiling) as the move that lets total throughput scale *O(N²)* while per-person origination stays human-sized; (b) the **conversion-funnel reframe** that corrects the search-comparison category error; and (c) the identification of the **human-gated, value-bearing re-thank as simultaneously the volume engine and the anti-farm filter**, with the precise \"not solo-farmable, only collusion-farmable\" claim and its graph-detectability.\n\n**Honest limits.** The *N²* is a ceiling whose realization depends on an unbuilt surfacing function (§7). The empirical support is one confounded household (§8). The collusion-ring attack is *raised in cost and made detectable*, not eliminated (§6). The value-bearing requirement (§5) trades some volume for integrity — a deliberate choice, but a real cost: a gratitude economy that required no scarce resource would have more raw events and worse ones. And the whole construction presumes that surfacing can be made to lift genuine impact over popularity without itself becoming a new Goodhart target — an assumption stated, not here discharged.\n\n---\n\n## Acknowledgments\n\nDrafted with Miss Aquarius℠ (the AI substrate of HeartBank®) per the corpus convention; the framing and final editorial control are the author's. The pilot observations are one family's, gratefully borrowed and carefully hedged. This paper is the empirical-and-throughput sequel to *The Two-Layer Reward*, extending the human peer layer from a fraud-filter into the system's volume engine.\n\n## Corpus cross-references\n\n- *The Two-Layer Reward* — the parent paper: the macro/micro reward whose human (micro) layer this paper develops into the throughput engine and anti-farm filter.\n- *Proof of Humanity* — the anti-spam filter (scarce resource attached) of §5 and the collusion-graph detection of §6.\n- *Miss Aquarius and the Aquarian Pool Architecture* — the surfacing/curation steward of §7; the per-transaction fee base of §3.\n- *Open Architectural Problems* — gratitude saturation (the problem §1 states) and the AI-decision-logic dependency (the surfacing of §7).\n- *A Living Made of Kindness* — the public B-Short re-thank as the Phase-2 realization of this multiplier.\n\n## Cross-venue identifiers\n\n- Canonical: thonly.org/research/the-rethank-multiplier\n- GitHub: github.com/thonly/publications/blob/main/defensive-publications/the-rethank-multiplier.md\n- Internet Archive · archive.today · perma.cc snapshots: per the monthly snapshot cadence.",
       "provenance": {
-        "sha256": "72a7574aa7bd236cf6b8878565cad1a02339f5a89d7a404689a337943e3cc42b",
-        "doi": "10.5281/zenodo.21947411",
+        "sha256": "38d047016d02f8b3ab447d5fd80b98211e08682a7c46b086cc6a416bdae0bf01",
+        "doi": "10.5281/zenodo.22244420",
         "concept_doi": "10.5281/zenodo.21947410",
-        "zenodo_url": "https://zenodo.org/records/21947411",
-        "deposited_sha256": "72a7574aa7bd236cf6b8878565cad1a02339f5a89d7a404689a337943e3cc42b",
+        "zenodo_url": "https://zenodo.org/records/22244420",
+        "deposited_sha256": "38d047016d02f8b3ab447d5fd80b98211e08682a7c46b086cc6a416bdae0bf01",
         "deposited_matches_current": true,
         "opentimestamps": true,
         "source_url": "https://raw.githubusercontent.com/thonly/publications/main/defensive-publications/the-rethank-multiplier.md",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@333eco/corpus",
-    "version": "1.2.1",
+    "version": "1.2.2",
     "description": "An MCP server for an open-licensed corpus, served with verifiable provenance — every document carries its sha256, DOI and OpenTimestamps proof so a consuming agent can check its own citation.",
     "license": "CC0-1.0",
     "author": "Thon Ly",