POGG
A hardware wallet that takes your pulse. Or your blood.
Pulse for everyday. Blood for what matters.
Bitcoin, Ethereum, Base and Robinhood Chain. The registry that reads these claims lives on 4663.
Two tiers
TOUCH
Fingertip on the ring. 15 seconds. No consumable.
Light in, light out. Your pulse shows up as a flicker in what returns.
Someone alive is here.
The everyday default. Seven gates, all must pass.
BLOOD
A drop in a disposable cartridge. 10 minutes.
A laser watches the sample until it stops moving.
Someone bled here, minutes ago.
You choose it. Policy can demand it. Nothing talks it back down. Six gates, all must pass.
The flow
There is no wifi, no bluetooth and no USB data path. A transaction arrives as a QR code read by the camera and leaves as a QR code on the display.
What it proves
Someone alive did this on purpose.
Your laptop can be fully owned. It cannot bleed.
No script has a bloodstream. Nothing signs at 3am while you sleep.
One drop, one signature. Your body sets the rate.
Identity is the PIN's job.
The gate asks whether someone alive is here. The PIN asks who.
Blood says someone alive is doing this. The PIN says it is you. You need both.
How it knows
Is it blood?
Haemoglobin swallows violet at 415 nm, the Soret band of the iron ring at the centre of the molecule. Ketchup, food dye, beet juice and stage blood are all red. None of them do that. A $16 sensor sees it in seconds.
Is it alive?
A laser on the drop. Moving cells scatter it into a grainy pattern that shimmers. When fibrin locks them in place the pattern stops. A camera watches for ten minutes and measures the frame-to-frame correlation.
Why a body and not a button
A button press costs nothing, so malware, an automated script and a deliberate human decision all produce an identical signal. An act your body rate-limits separates them: one drop of blood is one signature, and no budget compresses that.
A script produces a million signatures. A body produces about two blood attestations a day, each costing a lancet and ten minutes. For an allowlist, a mint or a quorum vote, that is a rate limit denominated in something an attacker cannot buy more of.
The whole instrument
models/instrument.obj at generation
time, so the drawing cannot drift from the model the viewer renders and the
printer prints.Build one
Raspberry Pi, a spectrometer, a laser, a lensless camera, and eleven printed parts. The build splits into two kits bought separately, and the reader kit — which signs nothing and has no security requirements — answers the question that decides whether the rest is worth building.
BUILD.md is the specification. SAFETY.md covers blood handling and is short; read it first. VALIDATION.md lists every claim in the repository and how it was checked, including the ones that are still open.