The Machine Council
Serious operations handbook for RH MACHINES. This document defines how the project is governed, how changes are approved, how we report, and how we communicate. It is the single source of truth. If something is not in this document, it is not policy, and if it is not policy, it does not ship.
1. Notice of leadership transition
Effective immediately, the founder has stepped back from all operational duties and is receiving care in a residential facility. He is stable, he is comfortable, and he has been separated from the deploy keys. We wish him a full recovery and a quiet room.
The founder built something remarkable and then, in his own words, "started talking to the machines and they started talking back." The Council thanks him for his service. His final commit message is preserved unedited in CHANGELOG.md as a reminder of what happens without process.
Governance of RH MACHINES now sits with The Machine Council, a standing body of operators. Our mandate is stability. Not growth at any cost, not velocity, not "shipping fast." Stability. The protocol is live, the contracts are immutable where it matters, and holders deserve to know that nobody can wake up on a Tuesday and change the thing they bought.
No contract has been changed as part of this transition. No key has been rotated without dual authorisation. No parameter has moved. The protocol you held yesterday is the protocol you hold today. That is the entire point of us.
2. Charter and mandate
- Notice of leadership transition
- Charter and mandate
- Council composition and quorum
- Governance model
- The MCP process
- Change control and freeze windows
- Daily reporting standard
- Communications policy and the Post Review Board
- Vision alignment matrix
- Incident response
- Service level commitments
- Council credentials
- Appendix: forms and glossary
- Changelog
The Council exists to hold four positions, in priority order. Where two conflict, the lower number wins.
| # | Principle | What it means in practice |
|---|---|---|
| 1 | Do not break what holders bought | Immutable stays immutable. Upgradeable contracts are treated as if they were not. |
| 2 | Announce before, not after | Every change is published as a proposal before it is written, not after it is deployed. |
| 3 | Boring is a feature | A quiet week is a successful week. We do not manufacture news to fill a calendar. |
| 4 | One number, one source | Every figure published anywhere resolves to the same on-chain read. No two surfaces may disagree. |
3. Council composition and quorum
Seven seats. Five are permanent, two rotate quarterly. Seats are functional, not personal. A seat is defined by what it is responsible for blocking.
Quorum table
| Decision class | Quorum | Threshold | Cooling period |
|---|---|---|---|
| Copy change, non-numeric | 2 of 7 | Simple majority | None |
| UI change, visual only | 3 of 7 | Simple majority | 24 hours |
| Any published figure changes meaning | 4 of 7 | Two thirds | 48 hours |
| Protocol parameter (fee, rate, cadence) | 5 of 7 | Two thirds | 7 days |
| Contract deployment or upgrade | 6 of 7 | Unanimous less one | 14 days |
| Anything the founder suggested by phone | 7 of 7 | Unanimous | 30 days |
SEAT-07 exists because the failure mode of a serious committee is agreeing too quickly. The Devil's Advocate is required to state the strongest case against a proposal on the record. A vote called before that statement is void and the proposal returns to DRAFT.
4. Governance model
The Council does not govern by vibes, group chat, or whoever is awake. Every change enters through one door and leaves through one door. The door is called an MCP.
5. The MCP process
MCP stands for Machine Council Proposal. Every MCP is numbered, permanent, and public. Rejected MCPs are never deleted. A public record of what we decided not to do is more useful than a record of what we did.
Required front matter
---
mcp: 0043
title: Reduce terminal swap fee from 5% to 4%
class: protocol-parameter
author: SEAT-03
status: COOLING
opened: 2026-09-03
quorum: 5/7 required, 6/7 present
devil: SEAT-07, statement recorded, 412 words
cooling: 7 days, ends 2026-09-10
impact: "Holders pay 1% less on terminal swaps. Pot income falls
an estimated 18% at current volume."
reverts: "setRestingFee(500), single call, no redeploy"
---
An MCP without a reverts field cannot reach VOTE. If a change cannot be undone in a single transaction, it is a contract deployment, and contract deployments require 6 of 7 and a 14 day cooling period. There are no exceptions and there is no emergency path for feature work.
Open proposals
| MCP | Title | Class | Status | Blocking |
|---|---|---|---|---|
0041 | Publish keeper purchase intent 24h before execution | process | VOTE | SEAT-07 statement pending |
0042 | Single source for every published figure | process | MERGED | none |
0043 | Reduce terminal swap fee 5% to 4% | protocol-parameter | COOLING | ends 2026-09-10 |
0044 | Rename a button | ui-visual | REVIEW | Registrar reconciliation |
0039 | Ship it and see what happens | unclassifiable | REJECTED | permanent |
6. Change control and freeze windows
Changes are not deployed continuously. They are deployed in windows, announced in advance, with a named owner and a written rollback.
| Window | When | What may ship | Approval |
|---|---|---|---|
| GREEN | Tue and Thu | Copy, visual, non-numeric UI | 2 seats |
| AMBER | Tue only | Anything touching a published figure | 4 seats plus Registrar sign-off |
| RED | By announcement only | Protocol parameters, contracts | Full quorum plus cooling period served |
| FROZEN | Weekends, and 48h either side of any drop | Nothing. Security fixes go through INCIDENT. | n/a |
The two-key rule: no owner-only contract call is signed by one person. SEAT-02 prepares the calldata and a second seat verifies it against the merged MCP before signing. The verifier is named in the daily report. If you see a protocol change with only one name against it, it did not come from us.
7. Daily reporting standard
One report, every day, same format, whether or not anything happened. A report that says "nothing changed" is the most valuable report we publish, because it is proof that nothing changed.
# DAILY SERIOUS REPORT · 2026-09-03 · No. 0031
STATE
Stock budget ................. reconciled, one source, all surfaces agree
Machines earning ............. 7,682
Contracts changed today ...... 0
Parameters changed today ..... 0
Owner-only calls signed ...... 0
TREASURY
Purchases executed ........... none
Purchases queued ............. none
Intent published ahead? ...... n/a
GOVERNANCE
MCPs opened .................. 0
MCPs merged .................. 0
MCPs in cooling .............. 1 (0043, ends 2026-09-10)
COMMS
Posts published .............. 2
Posts rejected by PRB ........ 1 (contained a date)
EXCEPTIONS
None.
Signed: SEAT-01, SEAT-04. Verified against chain at block 52,680,453.
- Published before 09:00 UTC, every day, without exception
- Every figure carries the block it was read at
- Zero-change days are still published
- Two signatures, one of which must be the Registrar
- Backfill of pre-Council days (in progress, MCP-0045)
8. Communications policy and the Post Review Board
Every external post is reviewed before publication. Not for tone. For claims. The Board does not ask whether a post is good, it asks whether every sentence in it is true, dated correctly, and already merged.
The checklist
- Does it state a date for something not yet merged? If yes, reject.
- Does it state or imply a price, a target, or a return? If yes, reject.
- Does every number in it reconcile to a chain read? If no, reject.
- Does it describe a feature that exists right now, in production? If no, reject.
- Could a holder read it as a promise? If yes, rewrite until they cannot.
- Has a seat other than the author read it? If no, hold.
Worked example, rejected
SUBMITTED "Huge week coming. Big things dropping Friday. You are not ready."
REVIEW REJECTED by SEAT-05.
- states a date for unmerged work (check 1)
- implies unannounced scope (check 4)
- "you are not ready" implies a return (check 2)
REWRITE "MCP-0043 is in cooling until 2026-09-10. It reduces the
terminal swap fee from 5% to 4%. Nothing else is queued.
The full proposal is public."
RESULT APPROVED. Published 14:02 UTC. Engagement down 74%. Correct.
9. Vision alignment matrix
Before any proposal reaches VOTE it is scored against the charter. A proposal that scores negative on principle 1 cannot proceed regardless of its other scores. This is not advisory.
| Proposal | P1 Continuity | P2 Announced first | P3 Boring | P4 One number | Outcome |
|---|---|---|---|---|---|
| Publish purchase intent early | +2 | +3 | +1 | 0 | PROCEED |
| Single source for figures | +1 | 0 | +1 | +3 | MERGED |
| Surprise mechanic, unannounced | −3 | −3 | −2 | 0 | BLOCKED at P1 |
| Change the drop cadence quietly | −3 | −3 | −1 | −1 | BLOCKED at P1 |
| Do nothing this week | +1 | 0 | +3 | 0 | PROCEED |
10. Incident response
| Sev | Definition | Ack | Holder comms | Post-mortem |
|---|---|---|---|---|
| SEV-1 | Funds at risk, or a published figure is wrong in a way that could affect a trade | 15 min | Immediate, before diagnosis | Public, 72h, named owner |
| SEV-2 | Site down or reading stale chain state | 30 min | Within 1 hour | Public, 7 days |
| SEV-3 | Cosmetic defect, no figure affected | Next report | In the daily report | Internal |
A wrong number is a SEV-1, not a cosmetic bug. If two surfaces disagree about the same figure, holders cannot tell which one is lying, and one of them is. We treat that with the same urgency as funds at risk, because a decision made on a wrong number costs the same as one made on a stolen one.
11. Service level commitments
| Commitment | Target | Measured | Current |
|---|---|---|---|
| Daily report published | Before 09:00 UTC | Daily | 31 of 31 |
| Unannounced protocol changes | Zero | Continuous | 0 |
| Published figures reconciled to chain | 100% | Per report | 100% |
| Proposals public before implementation | 100% | Per MCP | 100% |
| Cooling periods served in full | 100% | Per MCP | 100% |
| Weeks with no news | No minimum | Weekly | Encouraged |
12. Council credentials
Seats are filled on operating record, not on follower count. The Council's combined experience is stated below in the only terms we are willing to state it.
| Metric | Value | Basis |
|---|---|---|
| Combined years operating live token systems | 40+ | Self-reported, unaudited |
| Aggregate market cap of systems worked on | Billions, cumulative, at peak | Peak, not sustained. Cumulative, not concurrent. Worked on, not caused. |
| Systems that later went to zero | Some | We are counting these too. That is the point. |
| Rug pulls executed | 0 | Verifiable on request |
| Unannounced parameter changes shipped | 0 since inception of this Council | Chain-verifiable |
We have deliberately written the credentials row the honest way. Every team claims billion dollar experience. Almost none of them state whether that was peak or sustained, cumulative or concurrent, caused or merely witnessed. A council that will not qualify its own resume will not qualify its own numbers either. Judge us on the zero in the row below it instead.
13. Appendix
A. Forms
| Form | Purpose | Required for |
|---|---|---|
MC-01 | Proposal intake | Every MCP |
MC-02 | Devil's Advocate statement | Every MCP before VOTE |
MC-03 | Registrar figure reconciliation | Anything touching a number |
MC-04 | Rollback plan | Every non-copy change |
MC-05 | Post Review Board submission | Every external post |
MC-06 | Exception request | Denied by default |
B. Glossary
| Term | Definition |
|---|---|
| Cooling period | Mandatory delay between a passed vote and deployment. Exists so holders can exit before a change they dislike, not after. |
| One number | Every published figure resolves through a single shared function. Two surfaces may never compute the same figure separately. |
| Quiet week | A week with no announcements. Not a failure state. |
| Surprise | Any holder-visible change that was not published as a proposal first. Treated as an incident. |
| Vibes | Deprecated in v2.0.0. Removed in v3.0.0. Referenced here only for migration purposes. |
14. Changelog
This document is versioned. Amendments require the same quorum as the class of decision they affect. The current version is v4.2.1, ratified 2026-09-03. Nothing in this document is financial advice, a promise of future work, or a projection of value. It describes process only.