One test at the door fails. Elapsed time does not.
Bots are on track to outnumber humans online, and every AI product will need to answer one question about the person on the other end. The answers on the market today are tests given in a single moment. Pupul answers with a record that has been accruing all along.
The argument in three sentences. Any test administered at the door is a race against the model that will eventually pass it: puzzles, voices, faces, and gestures all fall as generation gets better. The one thing a model cannot fake after the fact is a consented record of real activity that has been accruing on an append-only ledger the whole time, because you cannot mint elapsed weeks. So Pupul verifies humanity the way a bank verifies credit: not with a quiz at the counter, but with a history, owned by the person, opened by consent, and revocable in two clicks. And when we cannot evidence a claim, we return null, never false. An absent record is not an accusation.
Pupul vs CAPTCHA
The default test, and the clearest case of the race.
CAPTCHA
Pupul
What it checks
CAPTCHAWhether the visitor can pass one puzzle, right now, at this door.
PupulWhether a continuous human stands behind the account, with the evidence attached.
What happens as models improve
CAPTCHAThe puzzle hardens until humans fail it more often than machines do.
PupulNothing changes. A better model still cannot backfill weeks of consented activity.
What it remembers
CAPTCHANothing. Every visit starts from zero.
PupulA record that gets stronger with time, owned by the person who accrued it.
What the human pays
CAPTCHAFriction at every door, forever.
PupulNothing at the door. The record already exists; the person chooses to grant a read.
Pupul vs World ID
The most serious alternative, and a genuinely different bet.
World ID
Pupul
What it proves
World IDThat you are a unique human, established once at biometric enrollment.
PupulThat a continuous human stands behind this account over time, and consents to this claim, for you, now.
What it is built on
World IDAn iris scan at dedicated hardware. The proof is anchored to a biometric.
PupulAccrued activity on an append-only ledger. We store no face, voice, or fingerprint template, so there is no biometric to breach.
Enrollment
World IDTravel to an Orb, once.
PupulUse things you already use. The record accrues as you live.
After enrollment
World IDA static credential: it proves the same fact on day one and day one thousand.
PupulA living record: continuity, deviation, and standing-behind are answerable because the record keeps accruing.
Who controls a grant
World IDThe person presents the credential where they choose.
PupulThe person grants each org a scoped read, sees every read, and revokes any grant in two clicks, provable offline against published keys.
If the answer is uncertain
World IDYou either hold the credential or you do not.
PupulNull, never false. A thin record says "could not establish," not "not human."
Pupul vs device attestation
App Attest, Play Integrity, passkeys: real security, aimed at a different question.
Device attestation
Pupul
What it proves
Device attestationThat the request came from a genuine device running an untampered app.
PupulThat a continuous human is behind the account, whatever device they picked up today.
The gap
Device attestationA farm of genuine phones passes perfectly. The device is real; nobody is home.
PupulThe claim is about the person and their accrued record, which a rack of phones does not have.
Who it belongs to
Device attestationThe platform vendor. It ends at the edge of that ecosystem.
PupulThe person. The record is portable across apps, devices, and AIs, and revocable everywhere at once.
Best use
Device attestationKeep tampered clients out. Use it; we do not replace it.
PupulAnswer the question attestation cannot: is a real, consenting, continuous human here.
Every door test is a race against the model. The record is not a race, because the one thing no model can generate is last month. Verify the human with the four claims, take null over a guess, and let the person hold the switch.