Everything people actually ask us, answered the way we answer in person. No sales voice. Where the honest answer is "we do not claim that," we say so.
A record you own that answers one question: is this still the same continuous identity that started it, right now. It is append only, so nothing already in it can be rewritten. It is non-backfillable, so nothing can be inserted into its past. And it is publicly verifiable, so anyone you allow can check it against published keys without asking us to vouch for you.
One dated, signed observation appended to your record: this identity was here, at this moment, and the ledger witnessed it. Signing in with Pupul writes one, and opening your room writes one too, as a presence beat (session_active), at most one every six hours. Beats accumulate into derived state: how many observations, how many distinct weeks, how consistent, how stable, and which direction the pattern is moving. The record never stores a verdict on your worth. It stores evidence of your continuity.
One thing: that the same continuous identity stands behind this record since genesis, right now. Not that you are a good person, not a diagnosis, and not a personhood credential. Other systems try to prove a human at the door, one test at one moment. We answer a different question: is this the same one, still.
It cannot be backdated, and that is the claim that carries the weight. Anyone can start a record today. No one can mint a record that says they started three years ago, because the only way to put three years in a record is to live them while the ledger watches. What we do not claim: that any system is unfakeable. What we do claim: the past of a record is closed.
Every completed Sign in with Pupul login writes a session_active beat to your record. That is the passive heartbeat: the record accrues while you live, not while you journal. You can go months without opening a single Pupul surface and come back to a record that grew, because each ordinary login was a witnessed moment of continuity.
Because thin is the proof working. A record's weight is elapsed, witnessed time, and there is no shortcut to that: not payment, not import, not assertion. Day one looks like day one for everyone, which is exactly why year three means something.
You can import them and the record will hold them, but imported history never counts toward continuity. Only witnessed, elapsed time does. Imported entries are marked as seeds and excluded from every continuity number, because a record you could pre-load is a record anyone could counterfeit.
Nothing bad. A gap is a gap, not a failure: the record keeps its past, your continuity numbers reflect what was witnessed, and the next beat picks the line back up. A claim we cannot evidence during your silence comes back null, never false. We built for orbits, not streaks.
The person it describes. Completely. That single decision is the whole company. An employer, a coach, a platform, or a creator learns anything from your record only if you explicitly allow it, and every grant is revocable at any moment.
The door closes immediately. Shared links go dark, dashboards stop rendering you, and the verify endpoint stops answering about you in the same second. Revocation is free at every tier, forever. Charging to revoke would be a toll booth on the consent wall.
Not unless you hand it to them, and there is no manager pipe to build around that. A person who never shares appears as a closed door, and the system never speaks about them. We would rather lose a sale than break this; it is also the only version of this product that should exist.
Your record, your entries, and what you have chosen to share, held against your account. You can export everything and you can delete everything, from inside the product, without asking permission. What we never do: sell your data, train public models on your private entries, or profile people who did not consent.
It runs only inside the reading you chose to take, behind a consent gate that says what is read before you type a word. Nothing is collected ambiently, nothing runs in the background, and the reading never narrates your mechanics back at you or anyone else. It speaks the result, not the measurement.
The felt surface of your record: the reading, your word, the Room, the daily line. The record is the product; LUX is where it becomes something you can sit with instead of a number you check. Everything LUX shows you is drawn from the same record everything else reads.
The word, the full first reading, a fresh read every month, the drift pulse on your word, the daily line, the weekly sit, three lifetime asks of She, one open witness door, your card, and the mini identity block you can paste into any AI. Free is not a trial; it is the floor, and it does not expire.
$99 a year, or $12 a month. It adds She with full memory and no meter, reads on demand, drift depth (the why under the pulse), rehearsals for hard conversations, private goals with dated receipts, unlimited witness doors, and the deep identity block. One price for any human, whoever pays: yourself, your company, or your coach.
No. The word is assigned once and held, which is the same shape as the record itself: what exists is not rewritten, what moves is what comes next. The reading underneath the word shifts as you do; the word stays yours.
No. It is a reading: an artifact, the way a good portrait reads a sitter. It makes no medical, clinical, or diagnostic claim, and it is not a substitute for a licensed professional.
Two things. Sign in with Pupul plus the Context API, where the person grants your app a scoped, signed block of their own record and one call returns it with a greeting already fitted to them. And the registry, where you ask four questions about a record and get the evidence behind each answer without ever receiving anything the person wrote. The token is ES256, so you verify it offline against our published keys and never call us.
Derived numbers, never content: observation count, distinct weeks, consistency, stability, direction, and the dates of the first and latest beats. Imported seeds are listed and excluded. The claim a platform is really checking is one line: the same continuous identity has stood behind this record since genesis, and it is live right now.
No. One request mints your credentials and you are integrating in the same sitting, with no sales call and no approval step. This answer used to be different, and until 2 August 2026 several of our own pages still pointed builders at an early-access form. That was wrong and it is fixed.
The Context API is free for the first 1,000 reads a month per app, then the Developer plan is $49 a month and includes 25,000. The registry is free through 1,000 active records a month, then five cents per active record per month with no minimum. An active record is one distinct person you asked about at least once that month, counted once no matter how many times you ask, so re-checking on every session costs nothing extra.
Anything the person wrote. It returns four claims and the provenance behind them, never the entries or the answers. And a claim we cannot evidence comes back null rather than false, because null means we could not establish it and false would mean we looked and it is not so. Those are different, and on a claim about whether the same continuous identity stands behind a record, the difference matters.
The endpoint stops answering about them, in the same second. Consent is the whole product, so revocation is not a support ticket, it is a button on their own page.
Frozen surfaces. VEX served coaches and companies; MIRA served creators. Both still work for the people already on them, and both read the same record everything else reads, but they are not separate product lines and we are not presenting them with their own pricing here. One record, several skins. LUX is the living one.
No. Your access, your data, and your arrangements stand as they were. The consent rules on those surfaces are the same as everywhere else: every read is owned by the person who took it, shares are per-item, and revocation closes the door immediately.
Real physics, synthetic people. We analyzed how our actual members use the products (when they show up, how often they write, how houses distribute, when they go quiet) and poured those patterns into invented people. No real name, email, word, or reading appears on the demo floor, and every demo word was checked against our member base so it belongs to no one. Walk it yourself.
Patent pending. A provisional application covering the behavioral reading engine was filed in April 2026.
A founder in Marietta, Ohio, and the architecture itself. Small on purpose. If you email support@pupulcorp.com, the founder answers.
Start your record. Signing in with Pupul creates it and writes its first beat: pupulcorp.com/sign-in. If you want the felt surface first, take your own reading, free, no card, about eight minutes: noctaracorp.com/enter. Either door leads to the same record.