decisions: Orgchain v1.14, soulbound belts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01H4upF5LVwmPDDqrhdUfnXh

docs/lineage.md

@@ -22,32 +22,33 @@ this tree is a drawing, and nothing derived from it may be presented as a real k
 
 **Operate it:** [lineage.yolopreneur.lol/orgchain/](https://lineage.yolopreneur.lol/orgchain/) is Orgchain, lineage's
 app ([`lineage/orgchain`](https://teahub.xyz/lineage/orgchain)). Found a holding, then birth orgs and agents, award
-belts (across holdings too), record decisions, make items, buy and sell items, orgs and whole holdings, publish keyrings, charter legal forms, send test BTC, graduate orgs and agents (into a holding of its
-own) and close. Each act is a `lineage/v0` inscription whose parent is the
-node that authorizes it, on a private toy chain in the browser with pretend money. Time is a tempo (each act its own
-beat, or acts cued and landed together every 10, 30 or 60 s, or by hand), and a slider replays any holding beat by
-beat. Holdings mine each beat's 50 test BTC, split by a hashrate dial on each (equal by default), or, under *Last act*,
-all to the holding that acts; under *Mainnet* none mine, and holdings are funded from the lab wallet, as from a wallet
-you already have. Any node can send test BTC to any other, across holdings too, signed by its BIP-84 key,
-and every act pays its own gas from the actor's keys, topped up from its money, so an unfunded node can't act; a
-graduation takes each re-keyed node's money along. Any node can make an item (an inscription it holds). Deals go both
-ways, on items, on orgs with their trees and on whole holdings: an offer, where the buyer signs the whole deal up front
-and the holder countersigns, or an ask, where the holder signs the lot's input alone (SIGHASH_SINGLE|ANYONECANPAY) and
-any node takes it. An org or a holding sells cash-free, with the orgs, agents and items below it, and its buyer adopts
-it into its own tree, where its keys and its tree's derive from the buyer's seed. Any node can publish
-its keyring: one inscription listing its Taproot,
+belts (across holdings too; each is soulbound, riding its seat's own sat), record decisions, make items, buy and sell
+items, orgs and whole holdings, publish keyrings, charter legal forms, send test BTC, graduate orgs and agents (into a
+holding of its own) and close. Each act is a `lineage/v0` inscription whose parent is the node that authorizes it, on
+a private toy chain in the browser with pretend money. Time is a tempo (each act its own beat, or acts cued and landed
+together every 10, 30 or 60 s, or by hand), and a slider replays any holding beat by beat. Holdings mine each beat's
+50 test BTC, split by a hashrate dial on each (equal by default), or, under *Last act*, all to the holding that acts;
+under *Mainnet* none mine, and holdings are funded from the lab wallet, as from a wallet you already have. Any node
+can send test BTC to any other, across holdings too, signed by its BIP-84 key, and every act pays its own gas from the
+actor's keys, topped up from its money, so an unfunded node can't act; a graduation takes each re-keyed node's money
+along. Any node can make an item (an inscription it holds). Deals go both ways, on items, on orgs with their trees and
+on whole holdings: an offer, where the buyer signs the whole deal up front and the holder countersigns, or an ask,
+where the holder signs the lot's input alone (SIGHASH_SINGLE|ANYONECANPAY) and any node takes it. An org or a holding
+sells cash-free, with the orgs, agents and items below it, and its buyer adopts it into its own tree, where its keys
+and its tree's derive from the buyer's seed. Any node can publish its keyring: one inscription listing its Taproot,
 SegWit, nostr and Ethereum keys, each signing the same statement the way its own wallets sign a message (BIP-322, a
 nostr note, EIP-191), so registries like well-known and other chains can find them; a graduation retires it. Every
 node holds its inscription at its Taproot address (BIP-86 at its account: a lab root per holding, BIP-85 org seeds,
-the org as account 0 and seats as accounts 1..n), keeps its money at its SegWit address, lists its tapkey (the npub as a Taproot address),
-its npub and its Ethereum address (an org's, at account 0, is its legal-control key) beside it, shows its leaves as [the key tree](https://lineage.yolopreneur.lol/) derives them (ssh, git,
-dkim and wg for agents; ssh-ca, mtls and noise for orgs), and keeps every secret behind a Reveal, as the key tree does.
-Each act is signed by whichever key holds the authorizing inscription, and graduation is a claim by the org's fresh
-root, countersigned by its derived key, with the derived subtree re-keying under it. Closing is still a recorded event.
-`lineage/v0` is written down as an ordinals metaprotocol ([`SPEC.md`](https://teahub.xyz/lineage/orgchain/src/branch/main/SPEC.md)),
-and the sample has been rehearsed on Bitcoin Core regtest: the lab's own transactions confirmed byte for byte, and real
-`ord` indexed them into the same trees, keyrings and sales, whole trees changing hands included, every proof checked
-from ord's copy.
+the org as account 0 and seats as accounts 1..n), keeps its money at its SegWit address, lists its tapkey (the npub as
+a Taproot address), its npub and its Ethereum address (an org's, at account 0, is its legal-control key) beside it,
+shows its leaves as [the key tree](https://lineage.yolopreneur.lol/) derives them (ssh, git, dkim and wg for agents;
+ssh-ca, mtls and noise for orgs), and keeps every secret behind a Reveal, as the key tree does. Each act is signed by
+whichever key holds the authorizing inscription, and graduation is a claim by the org's fresh root, countersigned by
+its derived key, with the derived subtree re-keying under it. Closing is still a recorded event. `lineage/v0` is
+written down as an ordinals metaprotocol ([`SPEC.md`](https://teahub.xyz/lineage/orgchain/src/branch/main/SPEC.md)),
+and the sample has been rehearsed on Bitcoin Core regtest: the lab's own transactions confirmed byte for byte, and
+real `ord` indexed them into the same trees, keyrings and sales, whole trees changing hands included, every proof
+checked from ord's copy and every belt on its seat's sat.
 
 ## Rules
 1. **One template, every depth.** An org is legal key · treasury · identity · agents · orgs. The factory's own org and
@@ -67,7 +68,7 @@ from ord's copy.
 7. **Clocks nest.** Each org runs its own Time, seats and spend cap; a child's cap is carved out of its parent's.
 8. **Belts are badges.** A belt is a badge awarded to one seat for one skill — per seat × skill, never per seat alone.
    Kata belts and the `.well-known.online` badge are the same mechanism, and an org can award one to a seat in any
-   holding: well-known certifies agents it doesn't hold.
+   holding: well-known certifies agents it doesn't hold. A belt is soulbound: it moves with its seat and never trades.
 
 ## Proposed for lineage spec v0.1
 - `org seed` — BIP-85, BIP-39 application, from the parent root: `m/83696968'/39'/0'/24'/<j>'`, j = the child org's
@@ -101,6 +102,10 @@ from ord's copy.
   Sales are OpenOrdex's PSBTs both ways, offers and SIGHASH_SINGLE|ANYONECANPAY asks, and an org sells cash-free.
   Since v1.13 an org moves with its derived tree and the items in it, and a holding moves whole, sold by its owner and
   becoming its buyer's org: the tree travels as one output and splits back at its new keys.
+- `award` on chain — Orgchain v1.14 (`SPEC.md`, section 7): a belt is inscribed on its seat's own sat, a reinscription
+  whose reveal spends the seat's coin (the seat co-signs, accepting it), the issuer's and a commit, and returns both
+  coins unchanged. It travels with the seat through every handoff and sale and is never sold alone; ord charms it ♻️
+  reinscription and ❤️‍🔥 vindicated. The NIP-58 badge above is its relay form.
 
 ## Not built yet
 - The root (operator's decision).