RFC-0114: The Sonder Protocol

Abstract — The Attention Inversion Theorem

As the marginal cost of generating synthetic text and deploying autonomous agents approaches zero, recipient human attention emerges as the sole strictly bounded constraint in the global economic system. Unconstrained probabilistic outreach induces systemic communication failure: domain reputation collapse, inbox filter fortification, and zero-sum attention destruction. The Sonder Protocol specifies a dual-speed edge intelligence standard that transitions outbound interaction from extractive synthetic volume to verified statutory self-diagnosis, governed by deterministic identity resolution, continuous cognitive headroom calculation, and cryptographic egress attestation (X-Sonder-Proof).

Section 1.0

The Living Human State Vector

The atomic state unit of the Sonder Protocol is the Human State Vector ((mathbf{S}_h)), a persistent, self-decaying JSONB entity maintained across Cloudflare edge nodes. Unlike ephemeral tracking cookies or static CRM tables, (mathbf{S}_h) continuously reconciles explicit user-entered telemetry with public sector filings and decay curves.

Equation 1.1 — State Vector Time Decay & Provenance Summation $$mathbf{S}_h(t) = mathbf{S}_h(t_0) cdot e^{-lambda(t - t_0)} + sum_{i=1}^{n} mathcal{T}_i(t) cdot mathbf{W}_i$$ Where (lambda = 0.015, ext{day}^{-1}) (active state half-life), (mathcal{T}_i) denotes verified diagnostic completions, and (mathbf{W}_i in {1.00, 0.85, 0.70}) represents provenance weighting (Granted > Projected > Cohort).

1.1 Deterministic Identity Resolution Layers

The protocol strictly forbids speculative probabilistic merging. All identity stitching executes deterministically across three defined layers:

Resolution Layer	Identifier Format	Attribution Weight	Protocol Invariant
Layer 1: Explicit	RFC 5322 Email	(mathbf{W} = 1.00)	Deterministic merge to canonical identity (`snd_*`). Highest confidence.
Layer 2: Corporate	Registered Domain Root	(mathbf{W} = 0.85)	Stitches statutory company filings (Companies House / SEC / HMRC).
Layer 3: Session	Cryptographic Token	(mathbf{W} = 0.70)	Maintains pre-conversion anonymous calculator continuity without tracking.

Section 2.0

The Cognitive Headroom & Fatigue Engine

Before any outbound communication or solution recommendation is permitted, the engine computes the real-time Cognitive Headroom Score ((H in [0, 100])).

Equation 2.1 — Cognitive Headroom Scoring Function $$H(t) = w_t T(t) + w_f (100 - F(t)) + w_v V(t) + w_u U_c(t)$$ Weights: (w_t = 0.35) (Temporal Index), (w_f = 0.30) (Fatigue State), (w_v = 0.15) (Engagement Velocity), (w_u = 0.20) (Catalyst Urgency).

2.1 Constitutional Fatigue Limits

The protocol enforces two absolute runtime invariants:

The Trailing 7-Day Saturation Ceiling: If contacts in trailing 7 days (ge 3), (H(t) equiv 0). The engine returns HTTP 429 ATTENTION_FATIGUE_EXCEEDED.
The Universal 30-Day Cooldown: An unsubscribe or negative sentiment signal immediately activates an immutable 30-day focus blackout across all connected spokes.

Section 3.0

Cryptographic Egress Attestation (X-Sonder-Proof)

Outbound messages that pass the Pre-Flight Attention Gate are issued an immutable HMAC-SHA256 signature. Receiving mail transfer agents (MTAs) and Personal AI Gatekeepers verify this header to bypass spam filters and prioritize verified communications.

STAGE 01

Diagnostic Intake

Recipient entity self-diagnoses verified statutory exposure (e.g. £37,800 full-expensing relief).

STAGE 02

Pre-Flight Attention Gate

Sub-20ms edge verification: Headroom > 70, Fatigue 0/7d, Jury Test passed.

STAGE 03

Issued X-Sonder-Proof

Cryptographically signed header attests compliance to recipient MTAs and Personal AI Gatekeepers.

Formal BNF Header Syntax

X-Sonder-Proof: v=1;sig=0x[0-9a-f]{16};id=snd_[a-z0-9_]+;jury=pass;headroom=[0-9]+;src=[A-Z0-9_]+;iat=[0-9]+;exp=[0-9]+

Section 4.0

The Public Statutory & Regulatory Oracle

Sonder nodes continuously ingest, cryptographically sign, and expose active legal deadlines and tax revisions. Outreach is permitted solely when grounded in active statutory pressure:

Catalyst ID	Jurisdiction	Authority / Statutory Basis	Statutory Cutoff	Verified Commercial Consequence
hmrc_fleet_capital_allowance_2026	United Kingdom	HM Revenue & Customs (HMRC)	2026-12-31 UTC	Full-Expensing Capital Relief (£900/vehicle)
epc_commercial_mees_2027	UK / England	DESNZ Energy Act 2023	2027-04-01 UTC	EPC Band C Minimum Energy Standard
irs_sec179_indexed_cap_2026	US Federal	IRS Rev. Proc. 2024-40	2026-12-31 UTC	$1,250,000 First-Year Equipment Cap

Section 5.0

The Sovereign Trust Seal & Verification Standard

Connected tools and verified outbound communications embed the official Sonder Trust Seal. Unlike legacy marketing badges, the seal is a live cryptographic certificate granting recipients immediate inspection rights and 1-click universal silence controls.

⬡ PROTECTED BY SONDER PROTOCOL • RFC-0114 CONDUCT CERTIFIED

Clicking the seal opens the live cryptographic verification modal on sonderprotocol.com/verify/:signature, allowing the recipient to inspect verified statutory grounds and activate universal silence directives across all connected spokes.

5.1 Embedding the Seal on Web Spokes (1-Line Drop-In)

<!-- Embeds the floating Sovereign Trust Seal in spoke bottom-right corner -->
<script src="https://sonderprotocol.com/seal.js" data-spoke="sec179_rules" defer></script>

Section 6.0

Live Edge Protocol Testbench

Interact directly with the Cloudflare Worker runtime below to inspect real-time state transformation, statutory pressure matching, and cryptographic attestation generation:

sonder-edge-testbench // rfc-0114-node

READY

1. Signal Ingestion Parameters

Director Identifier (Email)

Fleet Size (Commercial Vans)

Simulate Subcent402 M2M Paywall (HTTP 402)

Edge Response Output (JSON)

// Click 'Execute Protocol Endpoint' to dispatch live HTTP request...

Section 7.0

The 7 Constitutional Invariants

Every node executing the Sonder Protocol is cryptographically bound by the Sonder Ethical Constitution:

Invariant Article	Doctrine Name	Operational Requirement
ARTICLE § 1.1	The 12-Person Jury Test	Twelve reasonable peers must unanimously agree communication was beneficial and respectful.
ARTICLE § 1.2	The 20-Year Retrospective Test	Outreach must remain defensible after two decades of public scrutiny.
ARTICLE § 1.3	Strict Data Provenance	Zero hallucinated personalization; Granted (1.0) > Projected (0.85) > Cohort (0.7).
ARTICLE § 1.4	Absolute Saturation Ceiling	Hard maximum 3 contacts in trailing 7 days across the entire connected mesh.
ARTICLE § 1.5	Consequence-Anchored Pricing	Solution fee (le 10%) of diagnosed financial exposure (e.g. £797 to resolve £37,800 statutory exposure).
ARTICLE § 1.6	Sovereign User Transparency	Full inspectability and 1-click silence directives on `me.sonderprotocol.com`.

Section 8.0

Developer Quickstart, MCP & M2M Monetization

The Sonder Protocol can be integrated into autonomous AI workflows (Claude Desktop, Cursor, LangChain, CrewAI, AutoGen) in under 60 seconds to provide domain safety, regulatory compliance, and cryptographic egress attestation:

8.1 Model Context Protocol (Claude Desktop, Cursor & Windsurf)

Configure your autonomous LLM assistant to consult the Sonder pre-flight gatekeeper before taking outbound actions or dispatching webhooks:

// Add to claude_desktop_config.json or cursor settings:
{
  "mcpServers": {
    "sonder": {
      "command": "npx",
      "args": ["-y", "@quitegoodproject/sonder-mcp"],
      "env": {
        "SONDER_API_URL": "https://api.sonderprotocol.com",
        "SONDER_SPOKE_ID": "my_ai_agent"
      }
    }
  }
}

8.2 1-Line AI Agent Circuit-Breaker Middleware (LangChain / CrewAI / TypeScript)

Wrap any outbound communication or LLM tool call with cryptographic pre-flight gating:

import { withSonderGate } from '@quitegoodproject/sonder-sdk';

// Automatically queries /v1/gate/preflight; aborts if fatigue or jury checks fail
export const sendExecutiveBriefing = withSonderGate({
  spokeId: 'sec179_fleet_intelligence',
  rateLimitPerWeek: 3
}, async (targetEmail: string, content: { subject: string; html: string }) => {
  return await mailer.send({ to: targetEmail, subject: content.subject, body: content.html });
});

8.3 Autonomous M2M Settlement via Subcent402 ($0.005 / stamp)

Autonomous agents operate without human credit cards. When the developer free tier (1,000 checks/month) is exhausted, Sonder issues an HTTP 402 Payment Required challenge with an L402 Macaroon:

# 1. Unauthenticated request receives 402 Challenge with L402 Macaroon
curl -X POST https://sonderprotocol.com/v1/gate/preflight   -H "Content-Type: application/json"   -d '{"targetPersonId": "david.baker@apexlogistics.co.uk"}'

# Response: HTTP/1.1 402 Payment Required
# WWW-Authenticate: L402 invoice="subcent:invoice:0x9f...:0.005:0x742d...", macaroon="eyJ2ZXI..."

# 2. Agent settles $0.005 on Base USDC or Lightning, then submits verified preimage:
curl -X POST https://sonderprotocol.com/v1/gate/preflight   -H "Authorization: L402 eyJ2ZXI...:4a8f91b2c..."   -H "Content-Type: application/json"   -d '{"targetPersonId": "david.baker@apexlogistics.co.uk"}'

# Response: HTTP/1.1 200 OK -> Returns cryptographic X-Sonder-Proof with atomic settlement receipt

8.4 Lightweight Browser Spoke Telemetry (< 2.3 KB)

<!-- Include in spoke diagnostic tools or calculators -->
<script src="https://sonderprotocol.com/sonder.js" data-spoke="sec179_rules" defer></script>
<script>
  window.sonder.track('tool_completed', {
    toolId: 'fleet_allowance',
    estimatedRelief: 37800,
    vehicleCount: 42
  }, 'david.baker@apexlogistics.co.uk');
</script>

8.5 Autonomous Egress Gatekeeping & ListMint.uk Integration Bridge

High-throughput communication engines and dispatch architectures (ListMint.uk, Outlaw, Instantly, Smartlead) use the Sonder Protocol as an autonomous egress firewall. Before any message is dispatched from multi-inbox rotation pools, the engine checks recipient headroom, enforces cross-network saturation limits, and injects cryptographic verification headers alongside the £797 statutory claim schedule:

import { ListMintSonderBridge } from '@quitegoodproject/sonder-protocol';

const bridge = new ListMintSonderBridge({ gatewayUrl: 'https://sonderprotocol.com' });

// 1. Evaluate recipient cognitive headroom before multi-inbox dispatch
const preflight = await bridge.evaluateLead({
  email: 'david.baker@apexlogistics.co.uk',
  proposedSubject: 'Statutory Capital Allowance Window (UK Finance Act 2023)',
  frictionId: 'fleet_q4_depreciation_2026'
});

if (preflight.allowed && preflight.attentionProof) {
  // 2. Inject deliverability & proof headers
  const headers = bridge.generateHeaders(preflight.attentionProof);
  // X-Sonder-Proof: sig_0x9a8f21bc; jury=pass
  // X-Sonder-Verification: https://sonderprotocol.com/verify/sig_0x9a8f21bc

  // 3. Append verified £797 relief claim card & sovereign privacy footer
  const bodyWithFooter = emailBody + bridge.generateHtmlFooter(preflight.attentionProof);
  await listmint.dispatch({ to: lead.email, headers, body: bodyWithFooter });
} else {
  // Automatically held in queue until recommended dispatch window (eliminates mailbox burn)
  await listmint.postpone(lead.id, preflight.recommendedDispatchWindowUtc);
}

8.6 Academic & Industrial Specification Citation

To cite this specification in academic research, security audits, or formal RFC proposals:

@techreport{sonder2026rfc0114,
  author      = {{The Quite Good Project} and {Sonder Architecture Working Group}},
  title       = {RFC-0114: Autonomous Attention Gatekeeping, Statutory Pressure Oracles, and Egress Attestation},
  institution = {Quite Good Project Standards Series},
  year        = {2026},
  month       = {September},
  type        = {Request for Comments},
  number      = {0114},
  url         = {https://sonderprotocol.com}
}

Section 9.0

Sovereign User Attention Vault & Rights Management

Unlike legacy extractive ad networks where recipient data is permanently monetized without recourse, the Sonder Protocol guarantees recipients absolute cryptographic sovereignty over their living state vector. Through the /v1/vault/* interface, human recipients can inspect provenance lineage, adjust attention thresholds, or trigger permanent cryptographic tombstones:

Sovereign Primitive	API Endpoint	Payload Parameter	Protocol Action & Guarantee
1. Provenance Inspection	`GET /v1/vault/me?id=...`	RFC 5322 Identifier	Returns complete audit log of attributed data sources, active frictions, and fatigue scores.
2. Granular Focus Snooze	`POST /v1/vault/snooze`	`durationDays: 30 \| 90 \| -1`	Activates universal blackout across all connected spokes (Quarterly, Seasonal, or Permanent).
3. Statutory-Only Filter	`POST /v1/vault/policy`	`policy: statutory_only`	Blocks all advisory notices; permits outreach solely for direct statutory exposure (HMRC/IRS/EPC).
4. Zero-Knowledge Purge	`DELETE /v1/vault/purge`	`personId: ...`	Instantly erases state vector from edge KV memory and mints signed cryptographic deletion receipt.

9.1 Example: Executing a Zero-Knowledge Erasure Request

curl -X DELETE "https://api.sonderprotocol.com/v1/vault/purge"   -H "Content-Type: application/json"   -d '{"personId": "david.baker@apexlogistics.co.uk"}'

Launch Sovereign Recipient Vault (me.sonderprotocol.com) →

The Sonder Protocol Autonomous Attention Gatekeeping & Egress Attestation