One test at the door fails. A continuous record does not.
Bots are on track to outnumber humans online, and every AI product will need an answer about the account on the other end. The proof-of-human attempts on the market are tests given in a single moment. Pupul answers a different question: is this still the same continuous identity since genesis, right now.
The argument in three sentences. Any test administered at the door is a race against the model that will eventually pass it: puzzles, voices, faces, and gestures all fall as generation gets better. The one thing a model cannot backdate is a consented record of real activity that has been accruing on an append-only ledger the whole time, because you cannot mint elapsed weeks. So Pupul verifies continuity the way a bank verifies credit: not with a quiz at the counter, but with a history, owned by the person, opened by consent, and revocable in two clicks. The check answers same identity or null. It never rules a person out. An absent record is not an accusation.
Pupul vs CAPTCHA
The default proof-of-human test, and the clearest case of the race.
CAPTCHA
Pupul
What it checks
CAPTCHAWhether the visitor can pass one puzzle, right now, at this door.
PupulWhether the same continuous identity stands behind the account, with the evidence attached.
What happens as models improve
CAPTCHAThe puzzle hardens until humans fail it more often than machines do.
PupulNothing changes. A better model still cannot backfill weeks of consented activity.
What it remembers
CAPTCHANothing. Every visit starts from zero.
PupulA record that gets stronger with time, owned by the person who accrued it.
What the human pays
CAPTCHAFriction at every door, forever.
PupulNothing at the door. The record already exists; the person chooses to grant a read.
Pupul vs World ID
The most serious proof-of-human attempt, and a genuinely different bet.
World ID
Pupul
What it proves
World IDThat you are a unique human, established once at biometric enrollment.
PupulThat the same continuous behavioral identity stands behind this account since genesis, right now, and consents to this claim.
What it is built on
World IDAn iris scan at dedicated hardware. The proof is anchored to a biometric.
PupulAccrued activity on an append-only ledger. We store no face, voice, or fingerprint template, so there is no biometric to breach.
Enrollment
World IDTravel to an Orb, once.
PupulUse things you already use. The record accrues as you live.
After enrollment
World IDA static credential: it proves the same fact on day one and day one thousand.
PupulA living record: continuity, deviation, and standing-behind are answerable because the record keeps accruing.
Who controls a grant
World IDThe person presents the credential where they choose.
PupulThe person grants each org a scoped read, sees every read, and revokes any grant in two clicks, provable offline against published keys.
If the answer is uncertain
World IDYou either hold the credential or you do not.
PupulNull, never false. A thin record says "could not establish." It never rules a person out.
Pupul vs device attestation
App Attest, Play Integrity, passkeys: real security, aimed at a different question.
Device attestation
Pupul
What it proves
Device attestationThat the request came from a genuine device running an untampered app.
PupulThat the same continuous identity is behind the account, whatever device they picked up today.
The gap
Device attestationA farm of genuine phones passes perfectly. The device is real; nobody is home.
PupulThe claim is about the person and their accrued record, which a rack of phones does not have.
Who it belongs to
Device attestationThe platform vendor. It ends at the edge of that ecosystem.
PupulThe person. The record is portable across apps, devices, and AIs, and revocable everywhere at once.
Best use
Device attestationKeep tampered clients out. Use it; we do not replace it.
PupulAnswer the question attestation cannot: is this still the same continuous, consenting identity as before.
Every door test is a race against the model. The record is not a race, because the one thing no model can generate is last month. The check answers same identity or null, and it never rules a person out. Verify continuity with the four claims, take null over a guess, and let the person hold the switch.