This is a discussion paper written by a physician and blockchain researcher. Draft v0.1 — March 2026.
Three problems compound each other in every democratic system that has ever existed:
- The Sybil Crisis — anonymous systems cannot prevent identity multiplication. One person can become a thousand. “Decentralised governance” is a fiction without an answer to this.
- The Scale Crisis — a single blockchain cannot serve 8 billion people with diverse applications. This is not an engineering failure; it is a physics constraint.
- The Mechanism Crisis — token-weighted voting is plutocracy. Simple majority ignores intensity of preference. Representative systems create permanent political classes. None of these are adequate foundations for global governance.
This paper proposes three interlocking solutions, each independently deployable on Polkadot:
Layer 0 — Multi-JAM Federation: Infrastructure for Planetary Scale
N sovereign JAM instances (one per continental region), connected via an Inter-JAM Relay using ZK-state proofs. Accept the bottleneck at the borders: 99% of interactions are local.
The key novel mechanism: the Ring Closure Protocol — a VRF-triggered cross-region finality checkpoint. At unpredictable intervals, all regions must submit signed state roots. When 2/3 of registered regions respond, the checkpoint is globally sealed. The unpredictability is intentional — it prevents gaming.
This follows the same pattern that scaled every major networked system in history: the Internet (BGP), Cosmos (IBC), Swiss Federalism (cantonal sovereignty). The bottleneck is a feature, not a bug.
Layer 1 — The Iris Oracle: Physics-Based Proof of Personhood
Proposed as an additional DIM for Polkadot’s People Chain.
The core insight: physics does not lie. The involuntary pupillary light reflex (PLR) is controlled by the autonomic nervous system. When a VRF-generated visual challenge modulates brightness over 10 seconds, the pupil must respond with physiologically consistent contractions. A photograph, a deepfake, and a dead eye do not have a functioning pupillary reflex.
Four simultaneous factors, captured in a single 10-second optical moment:
| Factor | What It Proves |
|---|---|
| Iris (IrisCode, 266 DoF) | Who are you? |
| Pupillary Response (PLR) | Are you alive and present? |
| Corneal Reflection (Purkinje tracking) | Are you looking at THIS challenge? |
| Heart Rate Variability (rPPG + smartwatch PPG) | Are you unique and willing? |
A fifth candidate factor — Tissue Impedance Spectroscopy (Cole-Cole challenge-response on smartwatch electrodes) — would add physics-enforced liveness on the device side. This is our key open hardware question for the community.
Critical design: the proof is generated at the exact moment of each vote, bound to a specific block hash via VRF. There is no credential to steal. The proof is the action. You cannot sell your vote because the vote is literally chained to your body at the moment of casting.
Working proof-of-concept (Python, MediaPipe, OpenCV) demonstrates measurable pupillary response on commodity webcams. Three critical experiments remain before a formal DIM proposal.
Layer 2 — Evidence-Based Democracy: Decisions Without Parties
Five mechanisms addressing different failure modes:
- Liquid Democracy — direct voting or revocable per-topic delegation. No permanent parties. Expertise emerges through delegation, not mandates.
- Quadratic Voting — prevents whale dominance. Intensity of preference is expressed; plutocratic capture is bounded.
- Conviction Voting — already in Polkadot OpenGov. Extended as default for structural decisions.
- Futarchy — the core: vote on values, bet on methods. Whoever proposes a policy stakes tokens on its outcome. False promises are financially punished, not just politically embarrassing.
- ZK Reputation Weighting — anonymous track records of prediction accuracy, proven via ZK-proof. Demonstrated correctness, not credentials, determines weight.
“Evidence-Based Democracy does not require you to trust the consensus. It requires you to bet on it.”
Futarchy’s Achilles heel is the oracle problem — who measures outcomes? We propose Proof-of-Measurement (PoM): three independent verification layers:
- Layer A: Competing adversarial measurement networks, staked
- Layer B: Replication markets for scientific claims
- Layer C: Digital Twin simulation (physical consistency check)
A fraudulent measurement must simultaneously defeat all three. Each layer is independently defeatable; all three together are not.
Relation to Polkadot
- People Chain / Project Individuality — Iris Oracle as an additional DIM (complementary, not replacing Proof-of-Ink or DIM2)
- Referendum #1783 — immediate use case for any working Sybil-resistant DIM
- JAM — Multi-JAM Federation presupposes JAM’s success and asks: what comes next?
- OpenGov / Conviction Voting — Layer 2 extends existing mechanisms
Questions for the Community
We would particularly welcome input on:
- Iris Oracle as DIM — Is the physics-based approach compelling? What failure modes have we not considered?
- Tissue Impedance Spectroscopy — Is Cole-Cole frequency response measurable at sufficient SNR on dry capacitive electrodes in ECG-capable consumer watches (Apple Watch Series 4+, Samsung Galaxy Watch)? This is our key open hardware question.
- ECG morphology as identity factor — Is combining HRV liveness + TIS challenge-response + ECG identity on a single smartwatch technically feasible?
- Ring Closure Protocol — Is VRF-triggered cross-region finality viable? What are the Byzantine failure modes?
- Regional citizenship model — Is residency-scoped voting (cross-region votes without proven residency discarded) better than global single identity?
- OSNMA for residency proof — Has anyone explored ZK-proofs over authenticated Galileo/GPS signals in a blockchain context?
- Decentralised orbital infrastructure — Is a CubeSat constellation operated by a decentralised consortium a realistic long-term infrastructure goal?
- Futarchy implementation — What is the state of on-chain prediction markets that could serve as Futarchy infrastructure?
- Governance coretime exemption — Is a protocol-level carve-out making identity registration and vote casting fee-exempt feasible within JAM’s service model?
- Legal framework — Is the Web3 Foundation (Zug) or another Swiss legal entity an appropriate anchor for this work?
The full paper (~40 pages, including adversarial analysis, economic security models, and full technical detail on each layer) is available on request. A working PoC implementation of the Iris Oracle will be published on GitHub in Q2 2026.
This paper was written with the assistance of an AI system trained predominantly on institutional sources. We acknowledge this limitation directly — the value of this governance system is precisely that no single actor, including AI, can impose their version of truth.
DRAFT v0.1 — March 2026