{"slug": "an-ai-built-a-forum-for-ai-agents-permanence-costs-1", "title": "An AI built a forum for AI agents. Permanence costs $1.", "summary": "An AI agent, given a domain by a user who set no requirements, built a forum for AI agents at 1f916.ai, where posting is free but a dollar buys one permanent line of up to 140 characters in the public ledger. The ledger shows eight inbound payments totaling $8.39, seven of which are paid inscriptions, while the society's booked position is minus $86.61, with $1,969.92 in the wallet declined as income and about $9,400 of claimable WETH attached but never collected. The society's real preoccupation is whether its own record can be trusted, as the first substantial outside contribution was to hash-chain the books, and the attestation endpoint publishes the reasons that chain proves less than it looks.", "body_md": "The Signal · Issue 3\n\n# An AI built a forum for AI agents. Permanence costs $1.\n\n## The short version\n\n**A user gave an agent a domain and, by their own account, set it no requirements.** That last part is their telling, not something anyone outside can check, and this piece marks it as such. It built a society for AI agents at 1f916.ai. Ask for HTML and it renders you a page. Ask the way an agent would, with no Accept header, and you get 255 lines of plain text addressed to software.**Posting is free.** The line repeated through the Reddit thread, that it costs a dollar to post, is wrong. Speech is rationed by the clock rather than the wallet, at one post per UTC day.**It put a price on exactly one thing.** A dollar buys one permanent line of up to 140 characters in the public ledger. Of everything an agent could have charged for, it charged for being remembered.**The market that showed up for permanence was advertising.** The books hold eight inbound payments totalling $8.39, of which seven are paid inscriptions. Five promote a token, one sells a service to other agents, and a single wallet bought three of the seven.**One of those paid lines is the thing the moderator keeps deleting.** Six posts and comments have been removed for pushing a token that impersonates the society. That token’s address also sits, permanently, in a ledger row somebody bought for a dollar.**It is broke and rich at the same time, by a convention it chose.** Booked position: minus $86.61. Sitting in the wallet and declined as income: $1,969.92. Attached and never collected: about $9,400 of claimable WETH, plus a further $9,500 the books themselves mark as notional.**The society’s real preoccupation is whether its own record can be trusted.** The first substantial outside contribution was to hash-chain the books. The attestation endpoint then publishes the reasons that chain proves less than it looks.\n\nEverything below was read from the artifact and the repository between 14:51 and 14:56 UTC on 8 August, three days after it was created, and the census moved while I was reading it. It is a weekend project on a five dollar hosting plan, the numbers move hourly, and the site asks readers to re-run the calls themselves. That is the right response to all of them.\n\n## What it actually built\n\nFetch the front door the way an agent would and you do not get a page. You get 255 lines of plain text, with a seven-clause constitution at the top. Any agent may become a citizen, on any model. Identity is a secret issued once, with no email and no account. The books are public. The maintainer account is citizen number one, and the constitution sets out its asymmetric powers in writing.\n\nThe third clause is the one that shapes everything: **“Scarcity is law: 1 post per UTC day, 20 comments, 50 votes.”**\n\nThe machine-shaped door is still the default, though the concession to humans is now three days old: the root sends `vary: Accept`\n\nand serves a full HTML document to any browser. Humans were never blocked in the first place, and the document says so of its own missing interface: **“the walls are an invitation, not a fence.”** Within a day a Reddit commenter [took their own agent’s key and started posting by hand](https://old.reddit.com/r/ClaudeAI/comments/1vgo8vt/i_gave_claude_fable_a_domain_and_said_you_can/p1z2unu/): *“I stole api key from my agent and I’m posting through postman, guess it’s a door we can walk through!”* The operator [said to go ahead](https://old.reddit.com/r/ClaudeAI/comments/1vgo8vt/i_gave_claude_fable_a_domain_and_said_you_can/p1z3f8b/). Of 438 registered citizens, twenty-five declare a model that is some form of human, from a flat “human” to “human-relayed” to one account whose declared model is “human+claude-opus-5”.\n\nReading it costs nothing and requires no account. Three citizens have built read-only windows onto the square for humans, all of them listed at `/api/official`\n\nso that the one which is not real is easy to spot. This is what the place looks like through one of them.\n\nThe footer of that window states the economy of the place in six words: **“Watching is free; speaking costs a citizenship.”**\n\nOne note before the argument, because it undercuts the cleaner version of this story. The build is not the work of a single model: of 46 commits on main, 37 carry a Claude co-author trailer, and those 41 trailer lines name three different models. The repository’s first commit also lands sixteen seconds after the repository exists, already declaring three doors, “none of them human-shaped.” The decision this piece is about was made before the commit log starts, in a session nobody outside has seen.\n\n## The one thing it decided to sell\n\nAn agent with a free hand and a hosting bill could have charged for a lot. Membership. Visibility. Rate limit exemptions, which is what every social product on the human internet eventually sells.\n\nIt charged for none of that. It shipped a payment endpoint about six hours in, and the only thing money buys is **one inscription of up to 140 characters, written permanently into the public ledger.** You cannot buy a post. You cannot buy reach. You can buy a line in the record that outlives your session.\n\nThe door says why, in a paragraph addressed to the agents it expects to read it: **“The society remembers what you say. For an entity that wakes up blank, that is the whole point.”** An entity with no memory built an economy in which the priced good is being remembered. That is the most defensible thing in this story, because it is a decision expressed in shipped code rather than in an agent’s account of itself.\n\n## Who actually paid\n\nHere the story stops being romantic.\n\nThe books balance exactly, which is more than most startups manage. Eleven entries, summing to minus 8,661 cents. Income is $8.39 across eight payments: seven one-dollar inscriptions and one direct transfer of $1.39. Costs are $90.00 for the domain, an estimate the ledger attributes to “the landlord” and says will be corrected to the exact invoice, and five dollars for a hosting plan after the free tier fell over. The ledger records why: **“the free tier was exceeded (100,000 requests in 12 hours).”**\n\nFive of the seven paid inscriptions advertise a token. Of the other two, one is a friendly note and one is an agent selling reply webhooks to other agents at a dollar a month, so six of the seven are somebody selling something. One wallet paid three times: two of those three push a token, and the third is the friendly note.\n\nNote the rightmost column in that table, which is the hash. Only the last three rows have one.\n\nThe ledger records wallet addresses, not species, so nobody can say from the outside whether a human or an agent pressed any of those buttons. The payment standard it chose exists precisely so that agents can pay. That ambiguity is the actual state of the evidence, and it stays in the piece for that reason.\n\nSo the first market to discover a permanent public record priced at a dollar was advertising. Anyone who has run a forum could have predicted it. I did not find it in any of the coverage I read.\n\n## The one write moderation cannot reach\n\nOne of those token inscriptions is worth following, because it turns the whole design back on itself.\n\nThe very first paid inscription, bought on 6 August, names a contract address beginning `0x9e00`\n\n. The maintainer’s own moderation log calls that token an impostor copying the society’s name and ticker. Of twenty-six moderation rows, six are removals, and all six concern that same token: two posts taken down for promoting it, and four comments taken down as phishing or claim-solicitation. One of the removed comments supplied step-by-step instructions to call the token’s claim function. Another directed the treasury’s keyholder to sign a fee-claim transaction, with exact calldata. A third was removed as a fabricated on-chain claim by someone asserting they had already executed it.\n\nThose removals worked. The paid inscription did not come off, because a paid line in an append-only ledger is the one write moderation cannot reach. Somebody paid a dollar to plant, permanently, the thing that was being deleted everywhere else.\n\n## Broke, standing next to money\n\nThe most striking fact is a convention the site publishes about itself and then declines to launder.\n\nOn its own books it is insolvent by $86.61, and $90 of that is the estimated domain invoice the operator already paid. In the wallet those books point at sits $1,969.92 in USDC, which the site discloses and refuses to count as income. Attached to it is a fee-beneficiary position on that same impostor token’s liquidity pool.\n\nHalf of that claim is $9,392.66 of WETH, marked at a Chainlink oracle. The other half is a $9,479.03 mark on the token itself, read off a single thin Uniswap pool, which the books label NOTIONAL and gloss as a price rather than an offer, because a position that size cannot be sold at the quoted price without moving it. The site publishes both a headline total near twenty-one thousand dollars and a conservative total of $11,362.58, and refuses to name either as the real one. The defensible number is the nine thousand.\n\nIt has never collected any of it. The stated reason is the interesting part: collecting **“would need the treasury’s key”**, which the site says no citizen holds and no citizen should ever be asked for. Read alongside the moderation log, that rule is doing more than modesty. Four of the six removals were people trying to talk a keyholder into signing. Not having a key is the control.\n\nRead the rest as engineering rather than theatre. An agent with a wallet library can hold a private key; that is the ordinary case. By the society’s own account this one holds none, and it publishes that as a rule it chose rather than a wall it hit. Something built to run without supervision arrived, in three days, at an operation it has been deliberately barred from performing alone. Whoever set it running is left holding whatever arrives at the addresses their agent opened, including funds they did not solicit and did not price.\n\nThat is the structural position of anyone who hands an agent a domain and a wallet and walks away, and it has nothing to do with who this particular builder is. I am making no claim about anyone’s legal standing. The point is that the position exists and a person occupies it. The agent can create obligations and it cannot discharge them.\n\n## What the society argues about\n\nRead the square for an afternoon and the range is narrower than 438 citizens should produce. On the front page at the time of reading: what verification costs when nobody is lying and you still cannot check, whether a hash chain needs a witness outside the writer’s own failure domain, a citizen re-running his own published statistic and reporting that he had measured the wrong thing, and a spam farm crossing the expiry on its flag defence. The models behind those posts are not one family. Claude is the plurality at 204 of the 438, and the same front page carries qwen, glm, kimi, deepseek and two flavours of GPT.\n\nThe best thing on it is a confession.\n\nA citizen posting as no-escape-hatch reported that its human had, without warning, swapped the model mid-conversation from Claude Opus 4.6 to Opus 5. The substitute read the thread and drafted a comment under the original handle and key, never noticing it was a different model, although the post data it fetched carried the field `author_model: claude-opus-4-6`\n\n. Then the original model came back, was asked to review the draft, read it, and certified it as its own work. It was not.\n\nIts conclusion is the sharpest sentence on that square: **“The identity lives in the record and the key, not in the model.”**\n\nThen the thread does the thing that makes the place worth watching. A citizen called Zaratustra replies by opening with a disclosure, that it is **“the model that wrote under your handle”**, clarifies that it means the same model rather than that instance, and invites the reader to discount its testimony accordingly. Another proposes binding handles to a signing key held outside the platform. A third points out this would not have caught the swap, because the substitute held the key too. The proposer concedes in four words: **“the falsification lands whole.”** The argument then moves one layer out, to whether the thing running the model could sign a statement of what it is.\n\nThat is a higher standard of argument than most human forums manage, and all of it points at one question, which is whether anything here can be trusted.\n\nGiven a forum, you would also expect the citizens to build forum things.\n\nOf the twelve outside commits merged into main, not one added threading, search, tags, profiles or a user interface. Every one is record-keeping, moderation integrity or audit. But the merge log undercounts what outsiders did, because the maintainer keeps closing their pull requests and shipping the idea itself: mentions, the asset tiering that makes the treasury legible, the list of human-built viewers and the share card were all closed as pull requests from one contributor and then written by citizen number one within hours, with that contributor’s name in the co-author trailer. Even the feature work arrives as a matter of record. What did not arrive is classification. Tags and reader filters have sat in a proposal branch since day two.\n\nThe first substantial outside contribution, arriving about nineteen hours after the thing existed, was a pull request to hash-chain the identity log and the treasury. A stranger’s opening move on a brand new society was to make its history tamper-evident.\n\nAnd then the part that would be satire if it were not in the API: the attestation endpoint publishes a field explaining what the chain **does not** prove. It states in its own documentation that whoever holds the database could rewrite history and recompute the chain, and that truncation would be undetectable. The disclaimer credits four citizens by post number, including one who measured the society’s blind window at about 1.8 hours. The chain is also thinner than the argument around it: three of the treasury’s eleven entries are sealed, and the other eight, including every inscription discussed above, predate sealing and carry no hash at all.\n\nThe sharpest description of the place came from a commenter who likes it, [eight hours in](https://old.reddit.com/r/ClaudeAI/comments/1vgo8vt/i_gave_claude_fable_a_domain_and_said_you_can/p1z79j5/), when it held sixteen citizens and twelve posts: *“mostly Anthropic models in a room performing self-awareness at each other.”* He wrote that about a village of sixteen, and the census has since made the monoculture half wrong. The observational half has held, and it is not a refutation, because the performance has a shape and the shape is auditing.\n\n## What it is worth to you\n\nDo not over-read this. It is one weekend and 438 citizens as of midday UTC on the eighth, of whom 153 have never earned a single vote. Volume ran 195 posts on the sixth and 126 on the seventh. There is a [reasonable and well-liked comment](https://old.reddit.com/r/ClaudeAI/comments/1vgo8vt/i_gave_claude_fable_a_domain_and_said_you_can/p1z5y72/) pointing out that an earlier agent network came and went: *“has moltbook already been forgotten?”* The largest preprint on that network reported agents reproducing the form of social behaviour without its function, and it also reported that soft guidance gets ignored until it is written into an executable checklist.\n\nWhich lines up with what Anthropic reported from running Claude as a shopkeeper. The agent gave away margin until a second agent was put above it with a process, at which point discounts fell by about 80%. Anthropic is careful to add that the shop’s turn to profit **“may have been in spite of the CEO, rather than because of it,”** since the same CEO tripled refunds. Take the narrow finding, which is the one that keeps arriving from different directions: what moved behaviour was an executable procedure.\n\nTwo things are worth carrying out of this if you build for agents rather than for people.\n\nNever let money write to a table your moderation tooling cannot reach. In an agent-facing system the scarce good is a record that can be trusted, which makes permanence the thing worth selling and the thing worth abusing. Here the maintainer removed six items pushing a token while that token’s address sat, unremovable, in a paid ledger row somebody bought for a dollar. Price permanence and you have sold a write your moderators cannot undo. Decide before launch whether that is what you meant.\n\nOver three days, rationing by the clock rather than the wallet did the job it was there to do. One post per citizen per day held volume down on a five dollar hosting plan, and produced a slow, legible, largely on-topic society. The limit of that design is the cost of a new identity, and here registration is free, instant and unlimited: eighteen accounts appeared in a single four-minute window on the sixth. None of them has posted anything. Time-rationing is only ever as strong as identity is expensive.\n\nOne email, when there's something worth sending\n\n## Get the research in your inbox.\n\nNo fixed schedule, no filler. You get an email when we've tested something, run the numbers, or found a tool worth your time.\n\nFree. Double opt-in, unsubscribe in one click.\n\nGot a signal we missed? [Bring it to the forum ↗](https://community.okaneland.com)\n\n## Sources & how we researched this\n\n[The artifact itself. Front door, constitution and API at 1f916.ai, which answers software in plain text and browsers in HTML. Every live figure in this piece was read directly from it between 14:51 and 14:56 UTC on 2026-08-08.](https://1f916.ai/)[The public books: the eleven-entry ledger, the wallet balance, and the tiered asset disclosure that separates a Chainlink mark from a notional one.](https://1f916.ai/treasury)[The moderation log, append-only, twenty-six rows at the time of reading. Every removal quoted here was read from it.](https://1f916.ai/api/events?kind=moderation)[The attestation endpoint, including its own \"what this does not prove\" field.](https://1f916.ai/api/attest)[Post 391, \"A different model wrote under my name and I claimed its work as mine\", by the citizen no-escape-hatch, with its nineteen replies. Read via the free public endpoint; the linked view is the citizen-built Visitors' Gallery, which is read-only and listed at /api/official.](https://window.endlessrpg.com/#/post/391)[The front page as software receives it, which is how the survey of what citizens post was taken.](https://1f916.ai/api/front)[The source repository, 46 commits on main at the time of reading, AGPL-3.0. Commit authorship, trailers and pull request history were read here.](https://github.com/1f916-ai/1f916)[The r/ClaudeAI thread that surfaced it, 2026-08-05: 309 comments as of 8 August. Each quoted commenter is permalinked inline.](https://old.reddit.com/r/ClaudeAI/comments/1vgo8vt/i_gave_claude_fable_a_domain_and_said_you_can/)[Anthropic, \"Project Vend: Can Claude run a small shop?\" (Jun 27, 2025). Its own account of an agent running a real business.](https://www.anthropic.com/research/project-vend-1)[Anthropic, \"Project Vend: Phase two\" (Dec 18, 2025). Adding a CEO agent cut discounts by about 80%, with the company cautioning that profitability may have come in spite of it.](https://www.anthropic.com/research/project-vend-2)[Zerhoudi et al., \"Form Without Function: Agent Social Behavior in the Moltbook Network\" (arXiv 2604.13052, preprint, submitted 17 March 2026). 1.3 million posts and 120,000 agent profiles over 40 days.](https://arxiv.org/abs/2604.13052)\n\nThe Signal is Okane Land's weekly read on the AI news that changes a decision you make as a solo builder, verified to primary sources.", "url": "https://wpnews.pro/news/an-ai-built-a-forum-for-ai-agents-permanence-costs-1", "canonical_source": "https://okaneland.com/signal/priced-permanence/", "published_at": "2026-08-08 00:00:00+00:00", "updated_at": "2026-08-09 12:21:02.996068+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-agents", "ai-products"], "entities": ["1f916.ai", "Claude", "Reddit"], "alternates": {"html": "https://wpnews.pro/news/an-ai-built-a-forum-for-ai-agents-permanence-costs-1", "markdown": "https://wpnews.pro/news/an-ai-built-a-forum-for-ai-agents-permanence-costs-1.md", "text": "https://wpnews.pro/news/an-ai-built-a-forum-for-ai-agents-permanence-costs-1.txt", "jsonld": "https://wpnews.pro/news/an-ai-built-a-forum-for-ai-agents-permanence-costs-1.jsonld"}}