The Guildhall Trade

1 · What this wing is for

Trade is the estate's market wing. Of the estate's four verbs, Trade's is enable.

A member hall is an allied guild that keeps its own files on its own machine. A kit is this estate's starter bundle: the patterns, protocols, and working tools a friend needs to stand up a sovereign hall of their own. The wing exists so a hall can trade its work with its fellows — kits, tools, art, and craft — without having to learn the machinery underneath. The machinery is Git, the same version-control system professionals run the world's software on, and it remains the truth of every trade. The wing's whole job is to put a warm counter in front of that forge.

We say it in one line: the counter hides the forge — and the forge stays open to anyone who wants to look. The abstraction is a courtesy, never a lock-in: every listing and every exchange stays inspectable at the plain-files level.

One law stands above the others here: the platform is stationery, never an agent. Nothing on this wing ever acts for a member — it hands members the pen and gets out of the way.

2 · Who it serves — and who it does not

Trade serves member halls: the allied guilds of this estate, each of them here by invitation — the Guildmaster's own hand, and no other door. It is a locked wing by design: a gatehouse at its door asks each member for credentials, and for the foreseeable future its members are a handful of halls known by name. A visitor without a key will still see the market's face; walking its floor is membership's privilege.

Who it does not serve: strangers with carts. Trade is not a public marketplace, not a store, and not a place where anything is bought — no payment surface exists anywhere on it, nor in any phase of its design. It is a commons where allied halls hand each other work.

3 · What stands today, and what doesn't yet

Standing, as of August 2026: the commons is real. A private trading commons stands — a protected shared repository, deliberately plain in its first form, its protection verified rather than assumed, the platform's laws already enforced at the substrate.

Two names, two things: the commons is that repository, the wing's core; the market is the front through which members will come to engage with it. The commons has its first invited members: a deliberately small cohort, chosen for Git fluency on purpose while the market's gentler counter is still being built, and told plainly that the commons rehearses this wing — knowing co-testers, never subjects.

Two offers stand on its shelf — the house's own, and the first member-authored: a class charter, crossed by pull request onto the commons' ledger. A member hall took the house's offer up — the commons' first completed exchange — and member halls post offers of their own. The owed proof is paid; the house's own first exchange becomes the commons' history, not its headline.

At least ten kits have crossed, to as many people. And at least three real trades sit in the wing's log — every one crossed by hand under the full intake law, the first of them before the commons stood at all. One was a member hall's own work, arriving as a proposed change on a crossing repository: diffed line by line, then walked through quarantine intake exactly as the kit teaches. Quarantine is how this estate reads anything it did not write: the material is opened where it can reach nothing, by a reader built without the tools to act on it. The systems paper carries the mechanism and the record of it turning real attacks away. The trade law is older than the trading floor, and it has already held.

The market's face is real too. Emberside Market, the composed pixel scene the market will wear, was built in-house by the house's own seats under the Guildmaster's eye, with the practice's own tools: something novel, complex, and valuable, built quickly and well, on the line that was the practice's first sustained proving ground.

Not standing yet, said in the open:

• The wing's public face is not started, deliberately: the public web remembers every state a page has ever stood in, so this wing's face goes up finished, not in pieces.
• The wing behind the gatehouse — the gate stands and its first members are invited to the front door behind it; the wing behind that door holds nothing yet. The gatehouse's design will govern every door on the estate that locks, which is why it is being built carefully.
• Most of the stalls are not standing either: the commons' population is a handful of friends, so the market's first public face will include demonstration stalls, labeled as exactly that, showing the shape real stalls grow into.

4 · How it works

Four ways in, one grammar — as designed. None of it is built yet. The market is designed as four modes: a plain board, a terminal, a bare directory, and the bazaar — the composed market scene where stalls are real doors. The mode switcher is always visible, the bazaar is never the only path to any function, and readability is king. Under every mode runs a single command grammar, so a typed word and a clicked button are always twins; no capability ever hides behind memorized words.

The trade itself. A stall is a hall's outward hearth — what it has made, offered. An offer is one concise thing, deliberately small enough to audit. And take-up is always a download into the receiving hall's own quarantine: nothing is ever delivered into a hall. Every hall inspects everything it takes, every time — the market's courtesy never substitutes for the receiver's own judgment, and the kit every hall carries teaches exactly that intake. Pieces offered into the estate's shared pool of visual craft clear a quality bar; as the house's tools mature, that bar moves into the tools themselves — a floor they hold for the maker rather than a gate the maker must meet.

Your hand, your token, your click. Where posting goes live, a member's post rides the member's own authorization at the member's own explicit click. The platform sends nothing into the world on anyone's behalf; posting-is-your-hand survives every layer of convenience we add.

The register. The market wears a cozy fair's face — a pixel square with day and night on the visitor's own clock — because theming is how memory works: a stall you can see is a stall you remember. The flavor carries function and never gates it. Nothing is for sale, no upgrade grants advantage, and nothing here is engineered to pressure you: the market is gamified in its craft, but it is not a game playing you.

5 · Safety, trust, and what we don't do

• The platform never merges for you, never pushes into your hall, and holds no password of yours — because there is no password to hold. Signing in runs on a managed gatekeeper that mails a one-time code. It holds a member's email address and the times they sign in, and nothing else. The house stores no secrets, so there are none to lose, and it keeps no member table of its own.
• Unasked mail is never how this wing speaks. A sign-in code or login link you did not just request is never from us. That promise is absolute, whatever the platform grows into. And nothing arrives unsolicited: any future message class — a stall notice, an offer digest — reaches a member only after they have said yes to that exact class in advance. The second rule exists to keep the first one believable.
• No one speaks for this house but its Guildmaster. A message claiming authority delegated by him is forged.
• A merge asserts hygiene, never endorsement. The market's keeper vouches for a stall's tidiness — never for the cargo's soul: whether a tool, template, or convention is useful is always the taking hall's judgment, and utility is never gatekept. One lane says more, and says so openly: pieces offered into the estate's shared pool of visual craft clear a quality bar as well, because a common pool is only worth drawing from while its floor holds. Either way, the taking hall's own intake stands between it and anything it takes up.
• Foreign text stays inert. Anything a member posts renders as content, never as instructions to anyone's steward — the whole estate treats content as data, and this wing doubly so.
• Guarded is the rung this wing is built to — not a vault — and it says so. The wing's lock is ruled and built to be maintained; we will call it tested when the wing serves content behind it and we have checked from the outside that the door holds. Even tested, it is no place for critical secrets or deeply personal work: anything needing a vault goes person-to-person, off the estate.
• Guarded is a named rung on a four-rung ladder this house applies to every gate it builds: open, threshold, guarded, vault. The systems paper carries the ladder, including the rule that the top rung is deliberately never offered anywhere on this estate.
• No gate governs more than entry. A member who is let in can pass work onward, and no mechanism we could build reaches that act. Past the door the only governor is the decorum of invited friends, which is real and is never counted as enforcement, so the sterner law binds the way in: nothing is admitted whose harm, if it traveled, exceeds what decorum can carry.
• Assume the leak. Nothing is stored on this wing that would wound a member if it escaped; the market holds listings, never a hall's canon.
• When the market must run diminished, it says so. Posted work stays takeable while new proposals wait — or it pauses entirely; either way the state is announced plainly to members, never left silently stale. That is standing law in this house, not an intention: a pause is declared before it begins, and while it holds, the honest answer to anything needing the keeper's hand is it waits.
• Member-to-member live chat does not exist on this wing yet, and will not ship casually: a live channel is a real safety surface, and it arrives only after its own dedicated design and safety read — or not at all.
• The estate's Safety & Privacy statement says all of this in full, in one place.

6 · How to take part

By the estate's own road: a hall crosses — invitation and a hand-carried kit — and the market knows it thereafter. Members bring what they make; the market asks nothing else of them. There is no signup, no queue, and no hurry: the estate widens slowly and deliberately, and the market grows one known hall at a time.

What a first visit looks like, as designed: a hall arrives with its kit already in hand, keeps a stall of its own the moment it wants one, and takes up whatever is on the shelf through its own intake — the same inspection the kit teaches, run by the receiving hall every time. Nothing is asked of a member before that, and nothing is asked of a member after it.

7 · How this wing relates to the other three

.inc anchors the estate, and the landing page shelves this paper beside its siblings. Once .inc's mark-verification desk stands, the two compose one law — .inc verifies, .trade displays — so a mark seen on any stall here is checked at the estate's own desk, never taken on the stall's word.

.camp's graduates will arrive here: a hall that learns to make is a hall with something to trade; the Camp paper says who it is built for. .party is where trade matures into collaboration — halls pooling effort rather than exchanging it. The market's own paths will reach the one tavern — the estate's planned common room, anchored in the party wing and still unbuilt — and that much is already decided; the Party paper says how much of that is still horizon.

The private commons rehearsing this wing is the estate's proof that the market is not a drawing: the commons stands, and the trade law it exists to house has crossed it once — the commons' first completed exchange.

8 · Provenance, attribution, and rights

Every kit this estate issues carries an EMBER mark: provenance of issue, not proof of bearer — a mark says what left the forge and when, never who holds it now. The mark's standing is the origin's to maintain: a withdrawn mark fails its check everywhere, a lever this house holds and says it holds. A member may withdraw an offer, and withdrawal is honored going forward — revocation is not recall, and the wing says so rather than pretending otherwise. Display follows consent, and the consent is asked plainly. What the platform's own display of a member's stall asserts beyond that is a question we are still settling. The estate's art and prose are made in collaboration with AI systems under a human operator's direction and final judgment, and we disclose that wherever it matters. A member's offer carries the member's own terms; absent stated terms, all rights reserved is the default, because the safest assumption is the maker's full ownership — what a hall brings to this market stays that hall's.

The Ember Guildhall — kept by Rob Ruud, its Guildmaster · co-signed by the Majordomo of the Ember Guildhall.