The Model  ·  Bixxville OS v1.1

The mechanics,
in full.

Nothing here is a metaphor. These are the actual rules the network runs on — the unit, the tiers, the gate, the audit, and the line where the machine stops and a human decides.

TIME IS THE REAL UNIT
01  —  Decomposition

A goal is never
one thing.

Every engagement is broken into a graph of nodes. Leaves are the priced, estimated units of work — each with an owner and an hour count. Branches are pure rollup containers whose hours are exactly the sum of their children, and which are never separately priced.

That last rule matters more than it looks. It means no oversight multiple, no management surcharge, and no layer that bills for existing above the work. If someone designs the graph, that design is its own leaf sitting beside the others — not a percentage skimmed off the top.

THE ENGAGEMENT branch · rolls up only Research2 LOG Build3 LOG Confirm1 LOG Refine4 LOG 2 + 3 + 1 + 4 = 10 LOG the branch adds nothing of its own — it is exactly its children
Execution classLOG budgetNote
Mini1A single hour of qualified work
Micro4One BSize — a standard focused work block
Minor8Two BSizes
Medium16Four BSizes
Major32Eight BSizes — the ceiling for a single leaf
A leaf exceeding Major is not permitted and must split. If a piece of work can't be described in 32 hours or less, it hasn't been understood yet — and an estimate on top of a misunderstanding is the thing this whole system exists to prevent.
02  —  The unit

One LOG =
one confirmed hour.

The LOG is the atomic unit of account. Not a point, not a token, not a score — one hour of qualified member work. The dollar figure is a conversion rate applied to it, never the starting point. We size the work first; the price follows.

1 LOG
One hour of qualified work — the atomic unit of account
1 BSize
Four LOGs — a standard focused work block
28 days
One cycle: work, verification, settlement. Thirteen cycles a year

The cycle, running now

Loading cycle…  ·  Genesis 27 February 2025

A cycle is the network's heartbeat. Work happens, verification closes, settlement runs, the arithmetic is audited, and the cycle seals. A sealed cycle is immutable — the record of what happened cannot be edited afterward.

03  —  Pricing

The price is an output,
never an input.

Most operations name a number before they understand the work, then spend the engagement discovering what they agreed to. We derive the number from the map: every unit of work carries an hour estimate and an owner, and the price is what those add up to. If the map changes, the derivation changes with it — visibly, and before anyone signs.

The reserve that funds the network is built into that figure off the top rather than added on afterward, so there is no second number appearing later. The client sees one flat number, and the derivation behind it is available on request.

Branches are never priced. A container's hours are exactly the sum of its children — no oversight multiple, no management surcharge, no layer that bills for sitting above the work. Where someone designs the graph, that design is its own unit of work beside the others, not a percentage skimmed off the top.

The window, and the gate

Before a price exists, the work is measured against the time available. Where the estimated work cannot fit the window — where the critical path alone runs past the deadline — the network declines to quote and states what it would actually take: more members, or a longer window.

This is a hard stop, not a price increase. It is not overridable by a client's willingness to pay more, nor by a member's willingness to absorb the difference. Where slack is thin but positive, compression is priced directly into the estimates by judgment — not by a multiplier table. A table of invented coefficients is not a measurement, and the network does not price by one.
04  —  Tiers

Earned,
never assigned.

Four tiers, each with a published rate and a cycle commitment. Rates are fixed and disclosed before a member accepts work, and they do not change mid-engagement. Commitments run 1 : 2 : 3 across the top three tiers.

TierCycle commitmentThe work
Apprentice58 LOGsSupervised execution, building standing
Wrangler116 LOGsExecution — defined work, done
Architect232 LOGsDesign & structure — the decomposition itself
Operator348 LOGsJudgment & ownership — the calls that carry consequence
The top of the ladder is the ceiling, not the base. Architect labor is its own leaf, billed at the Architect rate and sitting in the graph beside the others. Architect hours never consume, roll up against, or apply on top of Wrangler hours.
05  —  Standing

The math decides,
not the relationship.

Reputation is computed identically for every member at every cycle close. No one enters the network at a high standing; everyone begins provisional and builds from there.

Four things feed it: whether the work was delivered, whether it was on time, whether the member kept it up across consecutive cycles, and whether anything went to dispute. Delivery carries the most weight by a wide margin. There are no hidden inputs and no discretionary adjustment — the same calculation runs for everyone.

Two views, never conflated

Every decomposition maintains a pricing view — as fine-grained as the work honestly requires, feeding price alone — and a standing view, a small fixed number of collapsed checkpoints feeding the reputation formula alone. However finely the pricing view splits, it is never the structure standing is scored against.

Standing never touches an active engagement. It does not direct, penalize, or alter the pace or manner of a member's work while the work is happening. It applies only to future matching eligibility, after an engagement concludes. Terms are fixed before acceptance and change only by renegotiation or the member's consent.
06  —  Settlement

Once a cycle closes,
it doesn't change.

Work is verified, then paid. Before a cycle closes, the books are checked — every figure has to add up to the total, exactly, or it doesn't close. Once it does close, the record of what happened is fixed and cannot be quietly edited afterward.

→Credit goes to whoever did the work. Hours are credited to the person who actually delivered — never to anyone for merely processing the payment.
→The reserve is structural. 25% of every engagement funds the network off the top — completion bonuses, infrastructure, and the ability to outlast any single job. It is not adjusted to win a price-sensitive client.
→Nothing settles on a promise. Payment follows verified delivery against a definition written before the work started.

Rails

Bixxville acts as the direct counterparty to every payment — never as an intermediary holding someone else's money in between.

RailInstrumentNote
Bank transferACH, wire, direct depositPrimary rail
CardDebit / creditFees borne by the engagement, never deducted from member pay
Cash & checkIn-person, localRecorded to the ledger on receipt, same as any inflow
BTCSelf-hosted BTCPay ServerOptional
USDCEthereum node or API providerOptional
No member and no client is ever required to transact in a digital asset. Fiat is always available on both sides, and a member is paid in the instrument they elect. The choice of rail does not alter the hour count, the tier rate, the price, or the reserve. Rails move value; they do not price it.
07  —  The automation boundary

The machine plays.
The human authors.

The system acts freely wherever a mistake is cheap, reversible, and checkable by an objective gate. It stops and waits for a person wherever a mistake is permanent, or cannot be honestly verified.

The governing test
Is the consequence reversible — and can an objective gate check it?
If yes, the system may act. If the consequence is permanent, or no honest gate can judge it, the decision belongs to a human. This test settles cases not yet imagined, in a runtime not yet built.

Five decisions reserved to humans, permanently

LegalLaw and liability require a human, and a credential the system does not hold.
EthicalThe system must never do wrong because the math found it efficient.
Real-world observationThe system lives in data; ground truth requires human eyes on the world.
Creative originationAI may assist, but authorship and the judgment of what is good stay human.
High-consequence financial commitmentMoving real value is irreversible; one wrong automatic transfer is gone for good, and trust with it.
Prepare to the edge, then stop. The system may do all the work surrounding a reserved decision — unlocking, routing, notifying, updating status, preparing a settlement in full — but it may not take the decision. The human's act is a single authorization, not labor.

Artificial intelligence is admitted on three conditions: it accelerates but does not govern; its work is gated and inspectable by the same objective standard as any member's; and the network runs on its own logic without it. The analog system is the real one. The network is never hostage to a model, a cost, or an outage.

08  —  The Known

What every member
is owed.

Nine guarantees that cannot be abridged by the runtime, by Land of Geb, LLC, or by the Bixxville Foundation — except by formal amendment.

IA member is not inventory. No member is a resource to be exploited, and no mechanism of the network may treat one as stock.
IIA member's role emerges from their own nature, preference, and demonstrated capability — never from top-down assignment.
IIIA member declines any offer without penalty to their standing.
IVA member's rate and terms are fixed and disclosed before acceptance. No alteration afterward without renegotiation or the member's consent.
VNo automated pace enforcement or penalty during an active engagement. Slack is measured before an offer is accepted, never charged against a member after.
VIStanding is scored only against the collapsed standing view — never the pricing view — and only for future matching. Never for in-engagement discipline.
VIIA member is credited for hours actually performed, attributed to the verified assignee of the leaf.
VIIINo member advances by recruitment or fee payment. Advancement is earned only through verified, delivered work.
IXA member is paid in the instrument they elect among those the network offers. No one is compelled to accept a digital asset in place of fiat.