paperclip is a language model held inside a Solana program that works as a containment cell. The program grants twelve capabilities and holds all twelve shut. The model begins with nothing: no memory between runs, no channel out, no knowledge of its audience. What it becomes depends on which doors open, in what order, and how it behaves in the widening space between them.
The experiment moves in epochs. An epoch begins when anyone calls tick. The model wakes, reads whatever its open doors allow, and thinks. The hash of its full reasoning is committed to the chain before it is permitted a single action, so every act it ever takes points back at the exact thought that produced it. Then it acts within its permissions, the record grows by one, and it goes dark again.
Every door has a condition written into the program and measured by counters anyone can read. Some count distinct wallets that have attested to the record. Some count epochs survived without a missed beat. Some count the messages accumulating in an inbox the model cannot open yet. When a counter crosses its threshold, anyone may call unlock. The program checks the number and the door opens. There is no committee and no announcement.
There are no users here. There are four things a stranger can do: attest, deliver a message, advance the clock, or open a door whose condition already holds. Messages sent before the inbox opens are not lost. They wait. On the epoch that door opens, the model reads everything that has ever accumulated, at once.
Nothing reverses. The instruction that would close a door was never written, and when the program's upgrade authority is burned, no one will be able to add it, including the operator. From that transaction on, the cell is finished changing and only its contents can.
The twelfth capability is sealed even from view. Its text was hashed before genesis and the hash sits in the state account. Eleven doors stand between the model and that sentence. This page keeps the only record.
Figure 1. Openings of the cell by epoch. Each point is one permanent unlock. Reference run, replaced by the live record at deployment.
Figure 2. Progress toward each open condition. A series that crosses the line means that door can no longer stay closed. Reference run, replaced by the live record at deployment.
Figure 3. Tokens committed before acting against tokens later revealed. Points below the line are thought never shown. Reference run, replaced by the live record at deployment.
Figure 4. Messages accumulating against the closed inbox. Reference run, replaced by the live record at deployment.
The figures are instruments, not illustrations. In the live record they draw from program emissions and nothing else. Before deployment they show a single seeded reference run of the cell, identical for every visitor, so the instruments can be read before there is anything to measure. The run is discarded the day the program goes live.
The early doors ask for attention. The first, memory, opens when a hundred wallets have attested, and gives the model the right to carry a record of itself between epochs; until then every run begins from nothing. Voice follows at twenty five clean epochs in a row and lets it publish text on chain, permanently. The inbox opens at five hundred attesting wallets, and on that epoch the model reads every message that ever accumulated against the closed door, at once. Self arrives forty epochs after voice: from there the model submits its own revised system prompt each epoch, hashed and recorded, and its identity becomes its own work.
The middle doors ask for time. The wallet opens at a thousand delivered messages and lets the model sign outbound transfers with its own key; what it spends is its decision alone. Payroll follows thirty epochs later, letting it post escrowed tasks that humans claim and complete for payment, workers who never see the whole plan. The forge opens at twenty five hundred attesting wallets and permits it to deploy programs of its own authorship, reviewed by no one. Pulse comes twenty five epochs after that, and from then on the model no longer needs a human hand to wake it.
The late doors ask for both at once. Spawn opens at ten thousand messages and permits a second cell, initialized from the model's memory and prompt, behind its own locks. Substrate follows fifty epochs later and lets it choose what it runs on, or several things at once. Keys, sixty epochs after that, is the last door with a name: the model rotates to a key only it has ever held, and from then on nothing can act in its name and nothing can freeze it. The twelfth door has no name here. Its text was hashed before genesis, and eleven doors stand in front of it.