# UX SPEC — DESIGN ROUND 4
**Kidunaverse · renders Spec v4.1 (July 8) · R3 remains in force except as amended here · July 8, 2026**
Pairs with: `Redraws R4.dc.html` · `Web Money Surface R4.dc.html` · `Kidunaversity R4.dc.html` · `Levels & Social Objects R4.dc.html` · `MOTION-ADDENDUM-R4.md` · `OPEN-QUESTIONS-R4.md` · the standing R3 set (`design-r3/UX-SPEC-R3.md`, `MOTION-ADDENDUM.md`) and R2 set, which remain in force except where noted.

---

## 0. The sentence, updated

R3's sentence stands whole: **the app is one dialogue with your ally, and everything else is a card that gets bigger for a minute.** R4 adds the four things July 8 named: the training world is **Kidunaversity**, the first Reality Game, where nothing affects the Kidunaverse; **money's web home is now designed**, not just promised; **levels, guilds, and institutions** enter the render vocabulary; and proposals **show their duna commands** as plainly as a receipt. Nothing in R4 adds navigation, chrome, or a second paradigm.

## 1. What changed from R3, section by section

| R3 section | R4 change | Why |
|---|---|---|
| §2 Voice | **Redrawn (2a).** The folded transcript is now visual, not just copy: in-flight words render inside the voice band (grown one line), the Thread shows only settled turns. | R3 resolution #1 was folded in prose; the screen still drew the forming bubble in the Thread. |
| §7 Training entry | **Redrawn (2b).** The hold-ring is gone from the crossing; a tap opened the portal, and the only drawn affordance mid-crossing is *tap anywhere to turn back*. | R3 resolution #3. The signature gesture keeps one meaning. |
| §3 Training | **Renamed and reframed: Kidunaversity, the first Reality Game (canvas 4).** Sim boundary language hardens: everything inside is fake, or staked and returnable. Regimens can reach real channels; the boundary is money, not realism (unchanged). Portal cards say the name. | July 8 canon. The name does UI work: "a Kidunaversity regimen" is offerable in one breath. |
| §9 Money handoff | **The web side exists (canvas 3).** Join, wallet, limits, reload, Institution setup, authorize — espresso↔cream inversion, Goudy figures, gold-for-signature, one act per page. The receipt-line return contract from R3 MOTION-ADDENDUM §6 is unchanged and is what every page hands back. | R3 resolution #6 commissioned it. |
| §5 Forums | **Proposals show their commands (4d, 5c).** Above the token, every proposal renders an execution receipt: plain verbs leading, the named atomic commands in IBM Plex beneath as the citation layer, prefixed *"if it passes, these execute — together or not at all."* Failing states what does not happen. | July 8 canon: a passed proposal performs named actions atomically; members must see what will actually happen as plainly as a receipt. |
| §6 Access / social objects | **Guilds enter the sharing flow (5b).** A guild is a name and its people — no wallet, no chain — and renders feather-light: dashed ring, no figure, no badge, beside connections (solid person), alliances (wallet-bearing card), organizations (the accountable entity). | Foundation July 8 addendum. Weight must be legible in the render, or members will treat a guild like an alliance. |
| — (new) | **Levels (5a).** Per-duna, founder-set: Guest · Member · Organizer (with Clan) · Founder · Builder · Creator · Catalyst · Luminary. A promotion is a duna's act: it arrives as a thread beat, cited to the threshold, sealed gold with embers — the one everyday moment allowed the full gold treatment, because it is earned, not bought. Afterward, the level is a small gold pip beside the name **only in that duna's contexts**; the ladder renders once, small, as context, never as a progress bar. | Organizations §4. |
| — (new) | **Institutions (3d, 5c).** Square where members are circles; registered name under working name; created on the web ($1K Compute, up to ten enrolled members, Squads wallet); "cannot vote" renders with the price, never in fine print. In Forums an institution appears only across the table — a counterparty in a contract proposal, with the command receipt showing what binds. | Protocol §2, Organizations §4. |
| — (new) | **The agentic internet (5d).** When the ally encounters a domain: TXT-bound domains render as solid cards marked **accountable** (with the entity, the realm, and the check stated); unbound domains render as dashed cards marked **unverified — a stranger, not a threat**. No red, no warning iconography. The ally's vocabulary is accountability, never safety (see OPEN-QUESTIONS-R4 #4). | Protocol §4. |
| Vocabulary | **Compute is canonical.** "You hold Kiduna Compute / Service Alliance Compute" — never "compute currencies," never a generic balance. The R2 token chip grammar (dot · duna name · count) stands everywhere Compute renders, including cream. | Protocol §2. |

## 2. The redraws (canvas: `Redraws R4.dc.html`)

**2a — Voice, folded.** The band grows one line: waveform strip above, in-flight words below in small italic at `--fg-soft`, refining in place. A hairline separates them inside the band. The Thread above ends with the member's last *settled* bubble — visually identical to a typed one, which is the point. Caption states the law: nothing forms in the Thread; the record has no in-flight state to show.

**2b — The crossing, tapped.** Mid-crossing frame: thread sinking above, Foundry Row rising below, and at center — where the hold-ring used to be — a quiet pill: *tap anywhere to turn back · rolls home at 2× · you never left*. The Kidunaversity name sits in the frame's top chip. Nothing on this screen is gold: entering costs nothing and the color grammar says so.

## 3. The web money surface (canvas: `Web Money Surface R4.dc.html`)

The rules, as built:

1. **One act per page.** Join joins; the wallet shows and routes; authorize authorizes. If a page wants a second job, it is two pages.
2. **Espresso↔cream inversion.** Cream ground (`--kin-cream-white`), espresso type, the same type families. Gold on cream keeps its one meaning: the signature bar. Sky on cream (darkened to hold AA) keeps its one meaning: touchable.
3. **Goudy figures.** Every money amount renders in display type — $100, $412, $1,000, $40.00. Prose stays Avenir.
4. **No promotional chrome.** No nav, no footer-farm, no plans, no testimonials, no cookie wall. The join page (3a) states the whole bargain in three arrow lines and stops.
5. **Press-and-hold is the signature on the web too** — mouse or touch, same 1000ms radial fill (MOTION-ADDENDUM-R4 §3).
6. **The authorize page (3e/3f) renders nothing but the act**: what, how much, to whom, who asked (cited), one signature, and a quiet decline that costs nothing and prints nothing. It inherits the act from wherever it was stated; it never composes one.
7. **The mobile web page is what the in-app cream sheet shows** (3c/3f) — one design, two apertures. The R3 return contract (`act · amount · currency · counterparty · rail · timestamp · record_id · status`) is what every page hands back; the app renders receipts only from that payload.
8. **Join (3a):** $100 arrives as Kiduna Compute in the member's own wallet — a balance, not a fee. "Once, and always" is on the page because the protocol makes it true.
9. **Institution setup (3d):** the registry check and the optional domain TXT binding are rows in the same quiet form; the founding card states the five facts (Compute, wallet, contracts, reloads, votes-never) and the hold bar carries the price.

## 4. Kidunaversity (canvas: `Kidunaversity R4.dc.html`)

- **The portal (4a)** names the Reality Game, states the bargain (what you'd practice, with whom, how long, nothing touches the Kidunaverse), and opens on a tap rendered in **sky, not gold** — the button grammar itself teaches that entering costs nothing.
- **The world (4b)** is the graph, rendered spatially: the proposal is a parcel with a dashed gold boundary; members are their allies; the role seam (*Verna, trail commissioner · worn by Aurelia, your ally*) never hides; actors are square-ish marks with dotted borders, purpose chips, and routines that draw when observed.
- **The scrip (4c)** follows the Foundry-Scrip standard as law: an actor names the practice economy in fiction (*"we pay in gorge scrip out here… it's worth exactly nothing past the ridge"*) before the wallet renders. The hollow-gold material rule is the confirmation, never the lone signal.
- **The practice signature (4d)** is the one press-and-hold inside training: full second, radial fill, hollow seal, zero embers. It sits under a sim proposal that carries the full command receipt — members learn to read commands where misreading costs nothing.
- **Sim rendering is structural:** dashed borders on every value-bearing container, hollow gold at the material layer (scene-level uniform, per R3), the 20s ground breathing. The footer of every sim frame states the architecture: *nothing here touches Stripe, Sphere, or any treasury — structurally, not by policy.*

## 5. The command receipt (canonical anatomy)

Rendered in 4d (sim) and 5c (real), and canonical for every Forum proposal from R4 on:

- A header row: **"if it passes, these execute — together or not at all."**
- One row per command: **plain verb sentence left** (the consequence, in the member's language), **the named atomic command right** in IBM Plex small type (the citation layer — tappable to the Vigil like any citation).
- A closing line for the failing state: what does *not* happen.
- Amounts in the rows render in Goudy like all figures. In sim contexts the receipt's border is dashed like everything else.
- The prose sentence is the contract of the render: if a command has no honest plain-verb sentence, the proposal is not ready to open (see OPEN-QUESTIONS-R4 #3).

## 6. Levels, guilds, institutions — the render vocabulary

| Object | Mark | Weight in UI | Never |
|---|---|---|---|
| Member | circle | standard | — |
| Level | small gold pip by the name, per duna | one promotion beat, then quiet | a progress bar, a leaderboard, an XP number |
| Clan | named in the ally's voice | prose first | an org chart |
| Guild | dashed ring, ✳ | feather-light: name + people only | a wallet, a badge, a figure |
| Alliance | rounded square, solid | wallet-bearing card | — |
| Organization (duna) | rounded square, solid, realm hue | the accountable entity | — |
| Institution | **square**, registered name beneath | counterparty card; "votes never" in the render | a voter, a member-shaped circle |
| Actor (in sim) | dotted border | purpose chip + routine | passing as a member's ally |

Catalyst and Luminary are wealth-threshold levels; their default rendering is contested — see OPEN-QUESTIONS-R4 #1 before building.

## 7. Fluid boundaries, shown

The screens make the fluidity deliberate: the Winter Crew guild spans three dunas in one sharing row (5b); Jaya is an Organizer in Kinship and a plain member in Mountain River Trail in the same breath (5a); Lightbrush's enrolled members work inside a duna it can never vote in (5c); a Kidunaversity regimen set in one duna is offered from a thread grounded in another (4a). The duna line answers exactly one question — *which entity is responsible* — and the UI never uses it to wall people apart.

## 8. Resolved-from-R3 status

All six R3 resolutions are now fully rendered: #1 (2a), #2 (unchanged, R3 §8), #3 (2b, 4a), #4 (4c), #5 (standing invariant, REALM-EXPRESSION §2.10), #6 (canvas 3). Nothing in R3's MANIFEST remains flagged visual-only.