Pupul

Pupul is an identity layer built by Pupul, Inc. of Marietta, Ohio, and the premise is that the internet never got one. What it has instead is a thousand workarounds, meaning passwords, trust chains, and checkboxes asking whether you're a robot. The thing you actually are is never the thing the system checks. Pupul's answer is a read of a person that the person owns, carries between apps and AIs, grants by explicit consent, and can pull back at any moment.

It starts with what the company calls the mirror. You answer six questions over roughly eight minutes, and the engine reads both what you write and how you move while writing it, described on the site as the rhythm underneath the words. It returns one word, assigned once and held for life, plus one of eight houses named Builder, Mirror, Keeper, Flame, Ghost, Storm, Fool, and Saint. The word is meant to name the gap between who you are and who you perform, while the house gives you your people. The claimed distinction from personality tests is mechanical rather than mystical, since a test reads what you claim about yourself and can therefore be steered, while this reads how you move, which is harder to fake on purpose. The first reading is free with no card, and the word stays yours whether or not you ever pay anyone. It's meant to be permanent rather than a snapshot you retake every year, which is a strong claim and one of the first things a skeptical reader should press on.

What the mirror produces compresses into an artifact the company calls the packet, and the distinction it draws is worth repeating. A profile is what someone claims. A packet is what behavior proved, folded into something a person can carry and a service can trust. The packet is behavior-earned, person-owned, consent-walled, portable, and revocable, and those five properties are the actual product rather than the poetry around them. Strip away the language and what's left is a portable credential describing a person, issued once, held by that person, and readable by a service only for as long as they allow it.

The developer surface is where this stops being an art project and becomes infrastructure. Sign in with Pupul is a standard OAuth flow, with endpoints at /api/oauth/authorize, /api/oauth/token, and /api/oauth/userinfo, plus discovery at /.well-known/oauth-authorization-server and a public key set at /.well-known/jwks.json. Your app sends a user to a consent screen with requested scopes, they approve what to share, your backend exchanges a one-time code for a token, and you verify that token offline against the JWKS. No callback to Pupul, ever, which means the company never learns who checked. The sixty second revoke demo on the site makes the mechanism concrete by having an AI assistant work with a user named Ava, then showing what happens when she revokes. Her ES256 token stays cryptographically valid and access dies anyway, which is the whole trick. Separating validity from access is what makes revocation real instead of advisory, because a system that only ever checks signatures can't take a permission back once it has handed one out.

The wider architecture is described as a palindrome that reads the same in both directions, with three doors. Noctara at noctaracorp.com is the inward door where compression happens and the reading lives. Pupul is the middle, the carry layer between rooms and AIs, and it's the company at this URL. Luminara at luminaracorp.art is the outward door where the word gets spent. There's also VEX, the same mirror in the hands of coaches and companies, consent-gated with the software free.

The company states its limits unusually plainly, and they're checkable rather than vague. The person owns the packet, not the platform or the employer or Pupul. Consent is recorded on every grant. Every grant is revocable and the door closes immediately behind it. They score no one, because a packet is a read and not a rank. They sell no one's data, and they profile no one who didn't ask. Pupul also insists on its ordering of art first, then impact, then revenue, and says a patent is pending on the approach. Whether or not the framing appeals to you, commitments that specific are ones a company can be held to later, which is more than most identity products put in writing.

Access is freemium and the free tiers are real. A person's first reading costs nothing and needs no card. A leader or coach gets their first client read free. Builders get self-serve keys with the first thousand reads a month free. The honest caveat is that this is an early and unapologetically idiosyncratic company, and its value to you depends on whether apps and AIs actually adopt the rail, which is the hard part of any identity layer. The engineering underneath is conventional and verifiable even where the framing isn't, so it's worth judging the OAuth flow and the revocation behavior on their own terms.