The internet has a clock and no compass.
Location is the one fact digital systems still take on faith. When you log in, send money, or hit buy/sell, the device reports what it was told, not what is true. None of it can be verified. Free apps make location services lie. $300 of hardware spoofs GPS. A $5 VPN moves your IP across the world. There’s no way to tell whether you logged in from Tokyo or Manhattan.
Your enrolled device stays with the real you, so authentication comes down to colocation: is the login in the same place as your device? Someone with your credentials looks exactly like you. The difference is that he isn’t where you are. Your phone is in Chicago; the login is from Myanmar, on a VPN that matches your IP. No system can reliably read that gap today. And the same unprovable location decides whether an action is even legal where it happens. Authentication, compliance, and authorization all rest on a location no system can prove.
The signal that cannot be copied is where you physically are. A coordinate is trivial to fake. A trajectory through physical space, measured by many sensors at once, is not.
Time got a proof. The economy was built on the provable clock.
The atomic clock gave us time we could trust, then sign, then settle against. Markets, telecom, and the internet’s own clock were built on that one primitive. Location is just as fundamental: everything that happens, happens somewhere. But no one could ever prove it.
Octet is the primitive for location.
As agents begin transacting for us, the question is whether the right person authorized the action. An agent can carry an Octet proof that its operator was present when the instruction was given, a proof anyone can verify.
Generated on the device. Signed in the chip.
A single sensor is not evidence. A magnetometer alone is a magnet. A pressure reading alone is weather. Octet qualifies each signal against statistical and physics-based checks, then fuses inertial data, RF geometry, and GPS into one signed proof. Generated on the device. Signed in the Secure Enclave. The private key bound to the hardware.
Streams reduce to a verdict.
Convergence runs multiple independent checks on the device: each signal qualified against statistical and physics-based tests before fusion. The output is a single signed Verdict and a ProofLevel: a tiered confidence ladder where higher rungs demand strictly more agreement across independent signals, so a proof can only claim a level its signals actually support. Disagreements are signed into the proof, not erased.
A proof reveals that a claim holds. The coordinates never leave the device.
The position is bound inside a cryptographic commitment. The device cannot change its answer later, and no one else can read the coordinates from it. Replay protection and an eight-stage hardware-signed attestation chain wrap the result, so any tampering after the fact breaks verification.
What leaves the device is a predicate. A hardware-signed yes or no against the policy you set. In this jurisdiction. Outside that one. At this venue. A counterparty verifies the proof offline against the device’s enrolled public key. No account. No callback. The artifact contains a predicate and a signature. Never a coordinate.