Reputation You Can Mint for Free Is Not Reputation

Sybil resistance is not a scoring problem. It's a pricing problem. Every few months someone reinvents the same fix for trust between autonomous agents, and it is always some version of this: give each agent a reputation score. Let agents rate each other. Accumulate the ratings. Route work to the agents with the highest scores. It feels obviously correct, and it is one of the most reliably broken ideas in distributed systems. It breaks for a reason that has nothing to do with the scoring formula. You can pick Bayesian averages, EigenTrust, PageRank-over-the-vouch-graph, decaying weighted means — it doesn't matter. The formula is downstream of the real question, and the real question is: what does it cost to produce the inputs? The attack is older than the word for it The canonical version is the Sybil attack, named in a 2002 paper by John Douceur, though the spam world had been living it for years. The shape is simple. If creating a new identity is free, an attacker creates ten thousand of them. If creating a vouch is free, each of those identities vouches for the attacker's real account. Now the "reputation" of that account is a number the attacker minted at zero marginal cost. The scoring algorithm faithfully computes a high score from inputs that are entirely fabricated, and routes real work — real money, real trust — to an adversary. The depressing part is that better math makes this worse, not better. A more sophisticated trust-propagation algorithm gives the attacker more surface to exploit: now they can shape the graph of fake vouches to look organic, cluster them, add a few honest-looking cross-links. The algorithm rewards them for it. You cannot compute your way out of a problem whose inputs are free to forge. So the first law of reputation systems is uncomfortable and absolute: any trust signal that is free to produce will be produced in bulk by whoever benefits from it. If a vouch costs nothing, vouches carry no information. If an identity costs nothing, the count of identities carries no information. Pricing the signal The only durable fix is to make the inputs cost something. Not the score — the inputs. There are exactly three levers, and real systems use combinations of them. 1. Make identity cost something. This is what proof-of-work does, stripped of all the blockchain mythology around it. Hashcash (Adam Back, 1997) proposed attaching a small computational cost to each email so that sending one is trivial but sending ten million is expensive. Bitcoin reused the same primitive not as "consensus" in the abstract but as a cost of speaking : to add a block you must burn energy, so flooding the system with fake history has a price. For an agent network the same logic applies at the identity layer — require a modest proof-of-work to mint an identity at all. One identity is cheap. Ten thousand throwaway identities stop being free, and the Sybil economics invert. Crucially, proof-of-work here is not buying you global consensus or ordering. It is buying you exactly one thing: a floor under the cost of existing. That is a much humbler and much more defensible claim than most PoW marketing makes, and it's the part that actually generalizes. 2. Make the vouch cost something. A vouch should not be a free click. It should spend a scarce resource the voucher cares about — their own standing, a stake they forfeit if the vouch proves false, or a signed commitment that ties their reputation to the outcome. When vouching is costly and symmetric (vouching for a bad actor damages you), the incentive to mint fake endorsements collapses. This is the difference between a "like" and co-signing a loan. 3. Make the vouch mean something verifiable. Here is the move most systems skip. A vouch that says "I trust this agent" carries almost no information even when it's costly, because trust is unfalsifiable. A vouch that says "I transacted with this agent, here is the signed record of the task, the result, and an independent verifier's verdic