Internet off. Still nearby.
Local devices can sign and verify. No tower or authority server is needed.
PULSE-1 / OPTIONAL EXECUTION GATE
Permission has
a short window.
The device signs. The lease expires. Silence stops the act.
Your revoke tap keeps the final say.
One browser, three keys. The link and payments here are simulated. This lab does not measure radio range.
- 01 / INTERNET
- Checking browser status Never an authority source
- 02 / LOCAL RADIO
- QUIET · simulated Delivers pulses and revokes
- 03 / ACCEPTED PULSE
- No accepted pulse Original deadline always wins
EXECUTOR DECISIONPULSE ONLY
SILENT
Preparing durable local keys…
- Newest counter
- 0
- Simulated budget
- — / 5
PREPARED INTENT ≠ PAYMENT
None. Prepare while nearby; no payment is sent.
Reserves 1 test unit. The exact-action permit also expires in five seconds. No automatic execution or budget refund.
Revocation wins when received before dispatch. It cannot undo an act already sent.
No token. No authority server.
Radio quiet. Pulse 2 s old.
A prepared act can use the remaining window once. All other ticket checks still apply.
No fresh pulse. No act.
At five seconds: SILENT. A later connection or receipt cannot repair that missed window.
01 / OWNER POLICY
Human Heartbeat
A borrowed watch can pass. This is not identity, biological liveness, or medicine. The band is your rule, not a recommended health range.
Sensor disconnected. No substitute reading is generated.
Requires a compatible Heart Rate Service sensor reporting skin contact. A recent notification is a local observation, not a trusted physiological timestamp.
The mode and band are fixed for each ticket. Creating a new ticket revokes the previous one.
02 / LOCAL LINK SIMULATION
Listen. Then act.
The ticket sets scope and caps. The pulse opens a five-second window for one act. The optional heartbeat must also be under fifteen seconds old.
The browser's real offline status is also shown above. Neither status changes permission. Load this lab before going offline.
Radio quiet. Only an already accepted, unexpired pulse can remain usable.
Stop blocks immediately. Radio loss lets the accepted pulse age out. Receipt inspection cannot refresh either a pulse or a permit.
What the executor receives
Only the latest signed envelope. No waveform, BPM, private band, or salt is sent.
No pulse yet.
REFUSAL ORDER
REVOKED › EXPIRED › FORGED › SILENT › CAP / USED › ALLOW
LIVE · SILENT · USED · EXPIRED · REVOKED are lease states. FORGED is a rejected input. “ALLOW” means this gate's policy passed; it does not establish legal authorization.
“Pay tonight while I sleep” needs a separately authorized, bounded ticket with its own expiry. Never stretch a PULSE lease to cover it. Reading your own letter needs no pulse; any low-risk exception must be explicitly configured by the operator.