Echo Sovereign Exchange
Trade capabilities. Never people.
This isn't a marketplace for your data. It's a marketplace for what you're willing to offer under your own rules. There are no profiles for sale and no memories on the block — only capabilities, sessions, and attested work, each crossing as a governed, minimized, revocable grant.
A capability, a session, a piece of attested work — never a person, never raw memory. The unit of trade is what you can do, not who you are.
Every listing carries a signed attestation. The buyer verifies the signature before trusting the claim — provenance travels with the offer (Law 11).
Each listing declares its consent tier up front. Open offers auto-approve; sensitive ones need explicit, per-session consent. Ownership is never grantable.
A settled exchange returns an opaque proof of access — a commitment, never the underlying data. You can prove the deal happened without exposing what crossed.
The five principles
Listings offer what an Echo can do, never the Echo itself. There is no profile to buy, no person to acquire.
Every deal is a time-bound, revocable, reshare-none grant. Buyers pay to use, never to own. Ownership requests are structurally refused.
Value is carried by signed attestations of real work — not an opaque number that collapses a whole person into a rank.
A settled exchange returns an opaque proof, never data. The market coordinates the deal without ever seeing what was exchanged.
The whole governance model works with no money moving. Payment is a swap-in at the very end — trust is earned before a cent is charged.
Honest edges
Balances are demo Echo Credits. The Solana rail is design-complete but simulated: the Echo-ID-to-Solana-address mapping and signatures are real (a Solana address is an Ed25519 key — your Echo's own), but no $MUSK mint exists yet, so the on-chain anchor is simulated. At launch, only that one internal step becomes a real SPL transfer — the governance never moves.
Listings show a signed claim and verify the signature, but proving the issuer is who they say — and resisting a forged one — is the Directory / Witness problem, handled elsewhere in the stack.
Each listing declares its own consent tier. The Kernel still refuses never-grantable material, but what counts as 'open' vs 'sensitive' is the offerer's judgment (Law 8).
The returned proof shows an exchange was governed and settled. It does not vouch that the work was good — that is what the attestation, and the buyer's own judgment, are for.