Continuous human verification for Web3. No KYC. No biometrics. One soulbound badge any contract reads in a line of code.
Airdrops, governance, allocations, gated mints, retroactive rewards. Anywhere a protocol pays out, sybil farms show up. The 2024 cycle made it worse, not better. Clean wallet histories are commodity priced. A thousand fake users costs less than a single real customer acquisition.
The mainstream answer is to collect identity. Iris scans, KYC, biometric capture. These work, and most users reasonably refuse them. The fallback answer is CAPTCHAs and social graphs, both of which farms cracked years ago. There's room for a third thing.
A wallet checks in once a day for seven days. Each check-in is a signed message. No gas, no transaction, no personal data leaves the wallet. After the seventh day, the protocol evaluates the check-in history against a set of internal rules. No identity is ever collected. No PII enters the system at any point.
Wallets that qualify get a soulbound badge. One token, permanent, non-transferable. After it mints, the user is done. They can transact, govern, and earn on any dApp that reads Pulse, without ever checking in again. Any contract can read it. Any backend can query it.
$ curl pulse-protocol.../reputation/0x1d5d…61a21 { "wallet": "0x1d5d4f8a…61a21", "tier": "bronze", "streak": 7, "lastCheckInAt": "2026-05-20T21:27Z" }
Entry tier. Proves consistent, signed wallet activity across a full week. The Phase 0 baseline.
Layered signals beyond the streak. Sustained activity over longer windows.
PHASE 1
The hardest signal to fake. Reserved for wallets that compound participation across protocols and time.
PHASE 2The conviction behind it isn't new. The contracts are deployed and verified. The backend is live. Token #1 exists.
The hard part is finding the protocols that care about this problem before they care about a launch announcement. We're not announcing. We're looking for partners who'd rather see receipts than slides.
Underneath are layers we're not publishing. Additional gates. Correlation signals. Higher tiers earned through sustained activity. Each layer raises the cost of impersonating a human.
We're not naming the techniques. The longer they stay quiet, the longer they work. Partners who want to know what's coming can ask in private.
Airdrop platforms. Allocation tooling. Governance frontends.
Whichever shape your protocol takes, if you've watched real users get diluted by farms, this is for you.
The first is a single read against the Pulse Badge contract using ERC-721's balanceOf. One returns means verified. Zero means not. No SDK, no auth, no rate limit.
The second is the reputation endpoint, which returns tier, streak, and last check-in time. The card above shows real JSON for Token #1's holder.