EN ES IT

GNS Protocol

Geospatial Naming System — The Identity Layer the Internet Never Had

Patent Pending #63/948,788 · IETF Internet-Draft draft-ayerbe-trip-protocol-02 (co-authored with Usama Sardar, IETF RATS WG)

Protocol Definition

GNS is to identity what DNS is to domains — a naming resolution protocol.

GNS combines three protocol innovations:

  1. Naming resolution (like DNS) — @handle → public key
  2. Identity claims (like OpenID Connect) — trust scores, breadcrumbs
  3. Decentralized identifiers (W3C DID) — did:gns: method

Live API — Proof of Humanity in Production Live

Verify any GNS identity with a single HTTP request:

$ curl https://gns-browser-production.up.railway.app/v1/verify/@camiloayerbe

{
  "verified": true,
  "handle": "@camiloayerbe",
  "trust_score": 90.68,
  "breadcrumb_count": 933,
  "verification_level": "maximum",
  "chain_valid": true
}

933 breadcrumbs proving humanity through movement patterns. "maximum" verification level achieved.

Table of Contents

1. The Problem

Digital identity is fundamentally broken.

Authentication services like Auth0 and Okta can answer "is this the right user?" but they cannot answer the more fundamental question: "is this a real human?"

Key Insight: Current solutions like WorldCoin require iris scanning. We believe there's a better way.

2. Solution: Proof-of-Trajectory

Prove you're human by how you move through the world.

Instead of scanning your eyeball, GNS builds trust through behavioral proof: your unique pattern of movement over time creates an unforgeable signature that only a real human being can produce.

How It Works

  1. Generate Keys: Your phone creates a cryptographic key pair. This IS your identity.
  2. Collect Breadcrumbs: As you move, your phone signs location proofs (breadcrumbs) that form a tamper-proof chain.
  3. Build Trust: After 100 breadcrumbs, claim your permanent @handle. Your trust score grows with your history.
  4. Use Everywhere: Your @handle works for messaging, payments, email, and authentication across the ecosystem.
GNS Home Dashboard

Identity Dashboard

Breadcrumb Chain

Breadcrumb Chain

Key Insight: Bots can fake a location. They can't fake 6 months of realistic human movement patterns.

Trajectory Criticality Engine Live Demo

Flocking Energy H v3 — Real-time human vs. bot classification using Parisi k=7 criticality analysis, IMU cross-correlation, and power spectral density.

Flocking Energy — Trajectory Criticality Engine
PSD Analysis
Power Spectral Density detects 1/f criticality — the signature of natural human movement absent in bots.
Gyration Radius
2D trajectory visualization with radius of gyration. Humans show bounded exploration; bots show mechanical patterns.
IMU Cross-Correlation
GPS turn rate vs gyroscope correlation (r > 0.9 = real device). Spoofed GPS shows zero IMU correlation.
Phase Space
Speed vs turn rate attractor map. Human trajectories cluster in characteristic phase-space regions.
Open Live Demo ↗

3. The Platform: Live Today

Not a whitepaper. A working platform built on the GNS Protocol.

Product Description
Globe Crumbs Mobile iOS/Android app for identity creation, messaging, and payments
Panthera Browser Desktop/web app for identity exploration and communication
GNS API v1 REST API for developers to verify identities and integrate GNS
Organization Portal Namespace registration and member management

4. ULissy Language — The Foundation

GNS Protocol is built on ULissy — a domain-specific programming language designed for machines that move through physical space. 26,000 lines of Rust, full compiler pipeline, 74/74 TRIP protocol tests passing, CI green, live browser playground.

Authentication Platforms
Auth0, Okta, Firebase Auth — integrate via OIDC
Consumers
↑ integrate
GNS Protocol
Proof-of-Trajectory, @handles, IDUP payments
Live
↑ discovers
TrIP Search
Spatial-identity discovery — search nearby where trust > 0.5
v0.2
↑ implements
TrIP Protocol
IETF Internet-Draft draft-ayerbe-trip-protocol-02
IETF
↑ built with
ULissy Language v0.4.2
Identity, location, time, crypto, search as primitives
Open Source

Why a New Language?

Moving machines (phones, vehicles, drones, wearables) need specialized abstractions. ULissy treats identity, location, time, cryptography, and energy as first-class language primitives rather than library imports.

The Breadcrumb Algorithm ULissy

The core of GNS's Proof-of-Trajectory in 15 lines:

// Collect breadcrumbs to prove humanity
identity me = Keychain.primary

every 10.minutes when battery > 20% {
    let cell = here.h3(10)
    let prevHash = me.trajectory.last?.hash ?? "genesis"
    let hashInput = "\(cell)|\(now.millis)|\(prevHash)"
    
    let crumb = Breadcrumb {
        cell: cell,
        timestamp: now,
        hash: sha256(hashInput),
        signature: me.sign(hashInput)
    }
    
    me.trajectory.append(crumb)
}

250 Lines → 15 Lines

The same algorithm in traditional languages requires 200-300 lines of code with manual coordination between GPS APIs, cryptographic libraries, secure storage, and battery management.

Traditional (Rust/Swift)
// Initialize keychain
let keychain = Keychain::new()?;
let identity = keychain.get_or_create("primary")?;

// Setup location manager
let config = LocationConfig {
    accuracy: kCLLocationAccuracyHundredMeters,
    distance_filter: 100.0,
    activity_type: .other,
};
let manager = LocationManager::new(config);

// Battery check
let battery = UIDevice.current.batteryLevel;
if battery < 0.2 { return; }

// Get current location
let location = manager.current_location().await?;
let h3_index = h3::from_geo(
    location.latitude,
    location.longitude,
    10
)?;

// Build chain
let prev = storage.get_last_breadcrumb()?;
let prev_hash = prev.map(|b| b.hash)
    .unwrap_or("genesis".to_string());

// Hash computation
let input = format!("{}|{}|{}",
    h3_index,
    SystemTime::now()
        .duration_since(UNIX_EPOCH)?
        .as_millis(),
    prev_hash
);
let hash = Sha256::digest(input.as_bytes());

// Sign
let signature = identity
    .private_key
    .sign(input.as_bytes())?;

// Create breadcrumb
let crumb = Breadcrumb {
    index: prev.map(|b| b.index + 1).unwrap_or(0),
    timestamp: SystemTime::now(),
    cell: h3_index,
    hash: hex::encode(hash),
    signature: hex::encode(signature),
    // ... more fields
};

// Store
storage.append_breadcrumb(&crumb)?;
// ... 200+ more lines for error handling,
// background tasks, platform abstractions...
~250 lines
ULissy
identity me = Keychain.primary

every 10.minutes when battery > 20% {
    let cell = here.h3(10)
    let prevHash = me.trajectory.last?.hash 
                  ?? "genesis"
    let hashInput = "\(cell)|\(now.millis)|\(prevHash)"
    
    let crumb = Breadcrumb {
        cell: cell,
        timestamp: now,
        hash: sha256(hashInput),
        signature: me.sign(hashInput)
    }
    
    me.trajectory.append(crumb)
}

// That's it. Compiles to Rust.
// Runs on iOS, Android, Desktop.
15 lines

ULissy Benefits

Feature Benefit
First-class Identity identity me = ... declaration makes cryptographic keys a language primitive
Spatial Primitives here.h3(10) — location is quantized for privacy automatically
Temporal Constructs every 10.minutes when ... — scheduled tasks are syntax, not libraries
Energy Awareness when battery > 20% — power constraints in the type system
Protocol Compliance If it compiles, it follows the GNS Protocol. No room for violations.
Cross-Platform One codebase → iOS, Android, Mac, Windows, Linux, WebAssembly
Key Insight: ULissy is to GNS what Solidity is to Ethereum — the native language for building identity-anchored applications.

TrIP Search — Spatial Discovery in 6 Lines v0.4.2

Search is a language keyword, not a library. Every result is backed by cryptographic proof of existence:

// Find verified electricians nearby — ranked by trust
let results = search nearby(2.km)
    where trust > 0.5, facet == "services"
    ranked by trust desc

// Safe unwrapping of identity lookups
let alice = search @alice
if let peer = alice {
    let proof = peer.proof
    print("Trust: \(peer.trust), epochs: \(proof.epoch_count)")
}

ULissy v0.4.2 — What's New

Feature What It Does
Full Compiler Pipeline Lexer (1,231 lines) -> Parser (2,914) -> Type Checker (2,922) -> Code Generator (2,224) -> Rust output
74/74 TRIP Tests Complete protocol test suite passing — breadcrumb chains, epoch bundling, trust scoring, payments, IoT
GitHub Actions CI Automated build, test (74/74), and lint (clippy + fmt) on every push. Badge: CI passing
EBNF Grammar Formal specification: 93 production rules covering the complete language — docs/GRAMMAR.md
Browser Playground Live tokenizer + AST + Rust preview in the browser — try it now
search keyword 4 query targets: nearby, within, @identity, "text" — compile-time privacy enforcement
if let binding Safe Optional unwrapping: if let peer = search @alice { ... }
Typed filters trust > 0.5, facet == "medical", active within 1.hour, org == "health_net"
Ranking keys ranked by trust|distance|recency|relevance asc|desc
Privacy gate Compiler rejects Trajectory, Breadcrumb, PrivateKey in search contexts. If it compiles, it's private.

5. Strategic Positioning

Protocol first, platform later.

GNS is positioning as the humanity verification primitive that existing auth providers will integrate, not compete against.

The Positioning Stack

Layer Player GNS Role
Application Websites, Apps Verify via OIDC
Authentication Auth0, Okta Add GNS as identity provider
Protocol GNS Proof-of-Humanity layer
Standard TrIP (IETF I-D) Formal protocol specification
Language ULissy Open-source foundation

Why Auth0 Would Integrate GNS

  1. New Value Proposition: "Is this human?" is a question Auth0 cannot currently answer
  2. No Conflict: GNS adds to their offering, doesn't replace it
  3. Standard Protocol: OIDC-compatible, easy integration
  4. Growing Demand: Bot protection is every platform's problem

6. GNS API v1

Core Endpoints

Endpoint Purpose Pricing
GET /v1/verify/{handle} Verify humanity and trust score $0.01/call
GET /v1/resolve/{handle} Resolve handle to public key Free
POST /v1/oauth/authorize OIDC authorization flow $0.05/login
POST /v1/webhooks Real-time identity events $49/mo

OAuth 2.0 / OIDC Integration

GNS works as a standard identity provider:

// Add "Login with GNS" to your app
const gnsAuth = new GNSAuth({
  clientId: 'your-client-id',
  redirectUri: 'https://yourapp.com/callback',
  scope: 'openid profile humanity'
});

// User clicks login
gnsAuth.authorize();

// Handle callback
const { handle, trustScore, verified } = await gnsAuth.handleCallback();

if (verified && trustScore > 0.8) {
  // Proceed with high-value action
}

7. Technology Stack

The Complete Stack

Layer Technology Purpose
Language ULissy Domain-specific language for moving machines
Mobile Flutter/Dart iOS and Android app
Desktop Tauri/Rust Mac, Windows, Linux
Backend Node.js/TypeScript API and relay server
Database Supabase (PostgreSQL) Identity records, messages
Blockchain Stellar GNS token, payments
Geospatial Uber H3 Privacy-preserving location

Cryptographic Primitives

Primitive Algorithm GNS Usage
Identity Keys Ed25519 Signing breadcrumbs, messages, records
Encryption Keys X25519 Key exchange for E2E messaging
Symmetric Cipher ChaCha20-Poly1305 Message encryption (AEAD)
Key Derivation HKDF-SHA256 Shared secret derivation
Hashing SHA-256 Breadcrumb chain, Merkle trees
Location Encoding H3 (Level 10) Privacy-preserving geospatial cells (~15,047 m²)

8. Business Model: Commercial Open Source (COSS)

GNS follows the Commercial Open Source Software (COSS) model — the same playbook used by GitLab, Elastic, HashiCorp, MongoDB, and Confluent to build billion-dollar companies on open-source foundations.

COSS Principle: Open-source the protocol and language to drive adoption. Monetize the enterprise services, managed infrastructure, and premium features built on top.

Open-Source Layer (MIT License)

The protocol and developer tools are fully open source, maximizing adoption and community contribution:

Component License Purpose
TrIP Protocol IETF I-D (public) Formal protocol specification — anyone can implement
ULissy Language MIT Compiler, runtime, standard library
trip-core MIT Rust reference implementation of TrIP
GNS Client SDKs MIT JavaScript, Python, Dart integration libraries
Globe Crumbs App MIT Mobile reference client (Flutter)

Commercial Layer (Proprietary)

Revenue comes from managed services, enterprise features, and premium API tiers that organizations need at scale:

Product Model Target Comparable
GNS Verify API Usage-based SaaS Developers, startups Stripe API, Twilio
GNS Auth (OIDC) Tiered subscription Apps needing "is this human?" Auth0, Okta
Organization Namespaces Annual license Companies, institutions Google Workspace domains
GNS Enterprise Contract + SLA Banks, governments, large platforms GitLab Ultimate, Elastic Cloud
Managed TrIP Nodes Infrastructure-as-a-Service Companies running private verification Confluent Cloud, MongoDB Atlas

API Pricing Tiers

Tier Monthly Price Verifications OAuth Logins Support
Community $0 5,000/mo 500/mo Community
Startup $49/mo 50,000/mo 10,000/mo Email
Growth $149/mo 200,000/mo 50,000/mo Priority
Enterprise Custom Unlimited Unlimited Dedicated + SLA

Why COSS Works for GNS

  1. Network effects: Every open-source implementation that collects breadcrumbs adds value to the entire verification network. More nodes = harder to fake trajectories = more valuable verification.
  2. Protocol lock-in without vendor lock-in: Companies can run their own TrIP nodes (open source), but most will pay for managed infrastructure — just as most companies use GitHub instead of self-hosting Git.
  3. IETF credibility: The TrIP Internet-Draft establishes GNS as an open standard, not a proprietary platform. Enterprise buyers trust IETF-track protocols.
  4. Developer-first distribution: Free API tier and open-source tools let developers adopt GNS before procurement gets involved — the bottom-up enterprise sales motion.
The COSS Playbook: MongoDB open-sourced the database, monetized Atlas (managed cloud). Elastic open-sourced the search engine, monetized Elastic Cloud. GNS open-sources the identity protocol, monetizes the verification infrastructure.

9. Investment Thesis

$400K pre-seed via YC Post-Money SAFE at $4M valuation cap.

Instrument: Y Combinator standard Post-Money SAFE (Simple Agreement for Future Equity). No board seats, no complex terms. The most founder-friendly and investor-familiar pre-seed instrument in the US market.

What Has Been Built (Solo Founder, Zero External Capital)

Why $4M Valuation Cap

Benchmark Typical Pre-Seed GNS Today
Product Prototype or MVP Full platform in production
IP None Patent pending + IETF I-D
Protocol spec Whitepaper Formal IETF standard submission
Language/toolchain N/A Working compiler (ULissy → Rust)
Blockchain Testnet Mainnet (Stellar)
Technical risk High Low — core protocol proven

Use of Funds ($400K)

Allocation Amount Purpose
US entity formation & ops $40K Delaware C-Corp, US banking, legal setup, registered agent
Protocol hardening $80K trip-core Rust crate, mobile FFI bridge, second IETF implementation
Engineering hire $100K First senior engineer (Rust/systems) — 12 months at early-stage comp
Developer ecosystem $60K Documentation, LSP, module registry, API developer portal
Go-to-market (US) $60K First 10 US integration partners, developer relations, content
IP & legal $35K Full US patent prosecution, COSS license counsel, IETF participation
Infrastructure $25K US-region cloud (Railway/AWS), Supabase, Cloudflare — 18 months

US Market Entry Strategy

  1. Delaware C-Corp: Standard US fundraising structure. SAFE converts on the next priced round. Italian entity (ULISSY s.r.l.) becomes IP-holding subsidiary or is restructured as needed.
  2. Target verticals: Space insurance (Orbital TrIP — revenue-ready today with live data), US platforms facing bot/fraud problems — ad-tech (ad fraud is a $84B/year problem), fintech (KYC costs $60-$500 per customer), social platforms (Sybil attacks), and AI companies needing proof-of-humanity for training data.
  3. Regulatory alignment: US Executive Order 14110 on AI safety calls for identity verification standards. NIST is developing AI identity frameworks. GNS's IETF-track protocol positions it as a standards-compliant solution for federal and enterprise buyers.
  4. Distribution: Developer-first (free API tier → bottom-up adoption) combined with direct enterprise outreach through IETF/NIST credibility.

Milestones to Seed Round ($2-3M at $15-20M)

Milestone Timeline Significance
Delaware C-Corp formed Q2 2026 US-ready for partnerships and follow-on
trip-core crate published on crates.io Q2 2026 Second IETF implementation, Rust ecosystem adoption
First senior engineer onboarded Q2 2026 Team beyond solo founder
10 US API integration partners Q3 2026 Product-market validation, first revenue
5,000 @handles claimed Q3 2026 Network effect activation
TrIP BOF session at IETF 126 Vienna July 2026 Working Group formation — Standards Track progression (BOF proposal deadline: May 22, 2026)
$25K MRR Q4 2026 Seed-ready revenue signal
SOC 2 Type I compliance Q1 2027 Enterprise-ready for US market

Why Now

  1. AI makes identity urgent: Deepfakes, AI-generated content, and bot armies are making "is this human?" the defining question of the next decade. Every US platform needs an answer — from social media to financial services.
  2. Regulatory tailwind: US Executive Order 14110 on AI safety, NIST AI frameworks, and state-level privacy laws (California CCPA, Texas Data Privacy Act) are creating demand for new identity infrastructure that doesn't rely on centralized biometric databases.
  3. Biometric backlash: WorldCoin's iris scanning has faced bans in multiple countries and growing US skepticism. The market wants a non-biometric, privacy-preserving alternative.
  4. IETF timing: The TrIP Internet-Draft creates a 6-month window to establish GNS as the trajectory-based identity standard before competitors can draft competing specifications.
  5. Cost advantage: GNS verification costs $0.01 vs $0.07+/MAU for Auth0 and $60-500 per KYC check. In the US ad-tech market alone, this price differential at scale represents massive value capture.

10. GNS Token

Native utility token on Stellar blockchain.

Why Stellar? Ed25519 keys are native to Stellar. Your GNS public key IS your Stellar wallet address — no separate wallet setup needed.
Stellar Wallet

Stellar Wallet

Send & Receive

Send & Receive

11. Organization Namespaces

B2B revenue through corporate identity management.

Tier Price/Year Members Example
Starter $49 1-5 freelance@mario
Team $99 6-25 acme@team
Business $249 26-100 startup@staff
Enterprise $499 101-500 corp@global
Unlimited $999 Unlimited amazon@world

12. Market Opportunity

Total Addressable Market

Competitive Landscape

Feature GNS + ULissy WorldCoin Auth0
Answers "Is this human?" Yes Yes No
Proof Method Behavioral Iris scan N/A
Hardware Required Phone only Orb ($300K) None
Privacy High (H3 cells) Medium Low
OIDC Compatible Yes No Yes
Open Source Language ULissy No No
IETF Standard Yes (I-D revision -02, RATS WG co-author) No No
Cost per Verification $0.01 N/A $0.07/MAU
Spatial Discovery TrIP Search (language-native) No No
Compile-Time Privacy Yes (ULissy enforced) No No

12.5. Orbital TrIP — Lead Commercial Vertical

Space object identity via Proof-of-Trajectory. The first vertical that generates revenue without consumer adoption.

Why Space Insurance Comes First

The other four GNS verticals (Ad Fraud, Creator Economy, Content Protection, NFC Payments) all require consumer-scale user adoption before revenue flows. Orbital TrIP inverts this: 70+ satellites are tracked live today using existing public observation data. The buyers are ~30-50 insurance brokers globally, and the industry is bleeding money at a 179% combined loss ratio.

Three-Tier Attestation Architecture

Critically, Orbital TrIP does NOT require onboard hardware. Like DNS, the registry assigns identity based on external observation:

Tier Method Hardware Required Trust Score Status
Tier 1: Ground-Attested CelesTrak/Space-Track radar observations → Ed25519 breadcrumb chains built on behalf of satellite None — zero satellite cooperation Base Live today (70+ sats)
Tier 2: Operator-Attested Operator signs own telemetry with GNS keypair before publishing to Space-Track Software only — ground segment change Enhanced Phase 2 (2027)
Tier 3: Self-Attested Onboard Ed25519 signing chip signs GPS fixes and downlinks signed breadcrumbs CubeSat identity module Maximum Phase 3 (2028)
The ICANN Analogy: Just as ICANN registers google.com without Google installing special hardware in their servers, the GNS Foundation assigns trajectory identity to space objects based on external observation. The satellite doesn't need to know it's being tracked.

Four-Layer Revenue Architecture

Orbital TrIP captures value across four distinct layers, each targeting a different buyer with a different willingness to pay. The public registry (ICANN model) remains free — all revenue flows through Globe Crumbs Inc.

Layer 1: Analytical API Subscriptions (Data-as-a-Service)

Tier Target What They Get Price
Public Dashboard Everyone Trust scores, ground tracks, anomaly alerts, Trajectory Badges $0 (free)
Starter Small brokers, researchers API access, 50 satellites, basic trust trends $500/month
Professional Regional brokers, underwriters Full catalog, raw breadcrumb data, evidence chains, fleet analytics $2,000/month
Enterprise Global brokers (Aon, Marsh), Lloyd's syndicates Dedicated instance, custom scoring models, SLA, real-time webhooks $5,000-15,000/month

Layer 2: Parametric Trigger Fees (Success-Based)

Parametric insurance pays out automatically when a pre-defined threshold is met. TrIP provides the independent verification that triggers the payout — eliminating manual claims adjustment.

Trigger Event Example Fee per Verification
Orbital Insertion Confirmation Satellite reaches target orbit within parameters $5,000 - $25,000
Station-Keeping Deviation GEO satellite drifts beyond insured tolerance $2,000 - $10,000
End-of-Life Disposal Verification Satellite moved to graveyard orbit per guidelines $5,000 - $15,000
Anomaly Detection Alert Unexpected maneuver, breakup event, proximity approach $1,000 - $5,000
Why Parametric: The Intelsat 33e breakup (October 2024, uninsured, 700+ debris fragments) illustrates the problem. Had a TrIP parametric trigger been monitoring station-keeping deviations, the declining performance would have triggered alerts months before catastrophic failure — enabling early intervention or automatic policy adjustment.

Layer 3: Compliance Audit Reports

Satellite operators pay for certified TrIP compliance reports to demonstrate responsible behavior and negotiate lower insurance premiums. Regulators increasingly require debris mitigation evidence.

Report Type Buyer Fee
Annual Station-Keeping Compliance GEO operators $5,000 - $10,000/year
Debris Mitigation Performance LEO constellation operators $2,000 - $8,000/year
ESG Space Sustainability Report Public companies, institutional investors $10,000 - $25,000/year
Forensic Incident Report Insurers, regulators (post-event) $15,000 - $50,000 per event

Layer 4: White-Label Underwriting Integration

Deep integration into the internal pricing engines of major reinsurers (Munich Re, Swiss Re, AXA XL). Licensed platform deployment with real-time webhooks that alert their risk systems the moment a satellite's Trust Score drops.

Offering Target Price
TrIP Scoring Engine License Top-10 global reinsurers $50,000 - $150,000/year
Custom Risk Model Integration Lloyd's syndicates, specialty underwriters $25,000 - $75,000/year + setup
Real-Time Webhook Feed Automated underwriting platforms $10,000 - $30,000/year

Stakeholder Summary

Stakeholder Key Offering Model
Global Brokers (Aon, Marsh, Willis) Risk benchmarking, fleet monitoring, lead generation Tiered SaaS Subscription
Underwriters (Lloyd's, AXA XL) Parametric trigger verification, forensic audit Per-event fee + DaaS
Operators/Issuers (SpaceX, SES, Intelsat) Compliance reports for premium reduction Audit fee / Certification
Reinsurers (Munich Re, Swiss Re) White-label scoring engine integration Platform license
Defensibility: SSA providers (LeoLabs, Slingshot, ExoAnalytic) become Attestors rather than competitors. They register their observation data in GNS to increase its trust value, while Orbital TrIP provides the unified "Common Identity Layer" that insurance brokers actually trust. More attestors = higher trust scores = more valuable API.

Revenue Projections (Four-Layer Model)

Revenue Layer Year 1 Year 2 Year 3
Satellites tracked 500+ 5,000+ 45,000+
L1: API Subscriptions €72K (5 clients avg $1.2K/mo) €540K (20 clients avg $2.25K/mo) €2.7M (40 clients avg $5.6K/mo)
L2: Parametric Triggers €50K (5 events × $10K avg) €300K (25 events × $12K avg) €1.5M (75 events × $20K avg)
L3: Compliance Audits €60K (10 reports × $6K avg) €400K (50 reports × $8K avg) €2.0M (200 reports × $10K avg)
L4: White-Label Licenses €0 (relationship building) €150K (2 licensees × $75K) €750K (5 licensees × $150K)
TOTAL ORBITAL TrIP €182K €1.39M €6.95M

Live Demo

The Orbital TrIP public registry is live now at orbital-trip-production.up.railway.app — tracking 70+ satellites with live CelesTrak data, Ed25519 breadcrumb chains, trust scoring, and 5 narrative "story satellites" including Russia's GEO stalker (Luch/Olymp-K2) and the ISS ASAT shelter event.

Strategic Value: Orbital TrIP revenue validates the entire GNS thesis for investors. If insurance brokers pay for trajectory-derived trust scores on satellites, that proves the same mechanism works for terrestrial identity. Real B2B revenue from Proof-of-Trajectory — before a single consumer downloads the app.

13. Traction and Status

Built and Deployed

Live Production Data

Founder Identity: @camiloayerbe

IP Protection & Licensing

14. IETF Standardization Roadmap

TrIP is on track for formal IETF standardization. Co-authored with Usama Sardar from the IETF Remote Attestation Procedures (RATS) Working Group, providing internal advocacy within the IETF ecosystem.

Milestone Date Status
draft-ayerbe-trip-protocol-00 Dec 2025 Done — Initial submission
draft-ayerbe-trip-protocol-01 Jan 2026 Done — Added Flocking Energy analysis, Parisi k=7
draft-ayerbe-trip-protocol-02 Feb 2026 Done — Usama Sardar co-authorship, RATS WG alignment
BOF Proposal Submission May 22, 2026 Deadline — Birds of a Feather session request for IETF 126
IETF 126 Vienna — BOF Session July 2026 Target: Working Group formation vote
Working Group adoption Q4 2026 TrIP becomes a WG document, multi-stakeholder review
RFC publication 2027-2028 TrIP becomes an Internet Standard
Why IETF Matters: An RFC-track protocol gives enterprise buyers confidence. No CTO will build on a proprietary identity protocol — but they will build on an IETF standard. This is the same path HTTP, TLS, and DNS took to become internet infrastructure.

15. Glossary

Term Definition
TrIP Trajectory-based Recognition of Identity Proof. The formal protocol specification submitted to the IETF as an Internet-Draft. Defines breadcrumb wire format, epoch aggregation, TIT derivation, and trust computation independently of any application layer.
TIT Trajectory Identity Token. A 128-bit pseudonymous identifier derived from an Ed25519 public key and genesis breadcrumb hash. Persistent, deterministic, and cryptographically bound to a trajectory.
COSS Commercial Open Source Software. Business model where the core protocol and tools are open-source (MIT), while managed services, enterprise features, and premium API tiers are proprietary. Used by GitLab, Elastic, MongoDB, and HashiCorp.
@handle A human-readable identity name claimed by a user after collecting 100+ breadcrumbs. Permanent, globally unique, and owned forever.
Breadcrumb A cryptographically signed location proof. Contains: H3 cell, timestamp, previous hash, context digest, and Ed25519 signature.
Proof-of-Trajectory (PoT) GNS's core innovation. Proves humanity through behavioral patterns (movement over time) rather than biometrics.
ULissy Domain-specific programming language for moving machines. Treats identity, location, time, and cryptography as first-class primitives. Transpiles to Rust. Current version: v0.4.2. 26,000 lines, 74/74 TRIP tests, CI green.
Flocking Energy Trajectory Criticality Engine. Analyzes movement patterns using Parisi k=7 criticality, PSD (1/f noise), IMU cross-correlation, gyration radius, and phase-space attractors to distinguish human trajectories from GPS spoofing, random bots, and deterministic bots.
TrIP Search Spatial-identity discovery layer. Search is a first-class ULissy keyword — search nearby(500.m) where trust > 0.5 compiles to type-safe, privacy-enforced queries. Every result is backed by cryptographic proof of physical existence.
Orbital TrIP Application of TrIP to space objects. Creates cryptographic identity for satellites using SGP4-propagated orbits signed with Ed25519. Three attestation tiers: Ground-Attested (no hardware), Operator-Attested (software only), Self-Attested (onboard module). Live public registry at orbital-trip-production.up.railway.app.
Trust Score A 0-100% metric derived from breadcrumb history. Higher scores indicate longer, more consistent movement patterns.
Verification Level A tiered classification (none/basic/standard/advanced/maximum) based on breadcrumb count and trust score.
H3 Cell Uber's hexagonal hierarchical geospatial indexing system. GNS uses Level 10 cells (~15,047 m²) for privacy.
IDUP Identity-based Universal Payments. Send money to @handles instead of wallet addresses.
Facet A protocol-specific identity layer. Examples: chat@, dix@, email@, home@.
DIX Decentralized Information Exchange. GNS's public social layer for posts and broadcasts.
gSite Your personal identity page hosted on the GNS network. Customizable with themes, bio, and links.