This is published so it can be copied. It is the entire governance of the collective — three never-votable laws, a membership ladder, a two-sided accountability loop, a distributed vouching web. Take it, run it on your own local problem, change what does not fit. No permission needed and nothing owed back.
Where this actually is: written, not started. One person, no members yet, no kitchen. Nothing here has been tested with a second human being — the vouching web in particular is unproven at n=1. Being early is not a reason to wait, but you should know it is early.
> Part of the digital-oleg ecosystem. Concept: CONCEPT.md. Guardrails + session rules: > CLAUDE.md. Trust lineage: wellness-directory CONCEPT.md / REPUTATION.md > (distributed trust, identity cost, two-sided Careem loop) — transferred here to food.
The list is not a customer database — it is a collective solving its own food problem. Governance exists so the collective can decide, hold the kitchen to account, and stay honest as it scales, without (a) drifting into design-by-committee mush, (b) pooling money for return, or (c) making Oleg the single point of trust. Decentralized, not trustless.
1. Money buys food or voice — never a return. A pledge/pre-order is buying product early, not investing. No equity, profit split, loan, or promised yield to members. This kills the money-pooling rot vector and keeps the collective clear of securities law. 2. The quality floor is not up for a vote. Honest ingredients, published build sheets, blameless free remakes, public changelog, food safety — constitutional, not a ballot item. You can vote the menu; you cannot vote to lower the standard. 3. The guardrails bind governance too. Honest, no astroturf, staff never targeted, fork-not-fight. A vote cannot authorize crossing them.
Joining means something different at each rung, and identity cost rises with each step — the higher you climb, the harder your standing was to earn and the more you'd lose by burning it. That cost is what makes the collective self-regulating.
| Rung | Joining means | Identity cost (verification) | Rights |
|---|---|---|---|
| Interested | Submitted the wish form / email. On the list, gets updates. | Email only — cheap, disposable. Unverified. | Read updates. Answer preference polls (non-binding). |
| Pledged | Named a concrete intent: "I'd buy ~X/week," picked a location, voted a shortlist. Proto-member. | Verified reachable person — phone/WhatsApp (one real number per member; the channel Oleg already monitors). Harder to fake, one per human. | Binding vote on votable domains. Shortlist input. Enters the accountability loop. |
| Founding member | Honored a real pre-commitment: showed up, pre-ordered/paid cash for a first batch or tasting, or brought others up the ladder. | Real transaction or in-person — hardest to fake, costliest to lose. | Everything Pledged has + first access, founder status, heavier weight on binding calls. |
Verification is distributed, not centralized in Oleg. A founding member can vouch for a newcomer (peer attestation, capped — you stake your own standing on them), echoing the wellness cold-start: good members only vouch for people they'd put their name behind, so quality compounds instead of diluting. Oleg's personal stamp seeds the first cohort; after that the vouching web carries it. No central gatekeeper, no anonymous free-for-all.
Standing = rung + accountability record. It is earned, portable within the collective, and can be lost. Nothing about money pledged raises your standing — only reliability does.
The anti-mush rule: members never face a blank page. "What should our menu be?" is mush. "Which of these three opening menus?" is a decision. Stewards do the narrowing; the collective picks the winner.
infeasible, and present a shortlist of 2–4 real choices. They shape the ballot; they do not pre-pick the winner.
on votable domains; Founding weight is heavier on binding calls (reward for skin in the game). Weight tracks rung and reliability, never money — cash never buys votes.
they don't care about. Keeps participation real, not coerced.
Mechanics that stop the drift:
re-shortlist. No decision by a vocal three.
vote is a low-stakes, self-correcting entry, not a permanent wound.
solvency, guardrails), never for taste, and every use is explained in the open (the same transparency that earns trust). A veto that isn't about the floor is not legitimate.
| Domain | Who decides | Why |
|---|---|---|
| Menu items (from the shortlist), sides | Collective vote | Taste is the members' call. |
| Format (delivery-first / counter / buying-club-first), from shortlist | Collective vote | The fork is theirs to shape. |
| Location among feasible candidates (each member business picks its own) | Collective vote | Local knowledge lives in the list. |
| Hours, days, opening cadence | Collective vote | Preference, low risk. |
| Name preference poll | Collective vote (advisory) | Final identity pick is Oleg's — see legend. |
| What makes the shortlist (feasibility cut) | Stewards | Expertise + effort; they narrow, don't choose. |
| Quality floor, build sheets, hygiene, remake policy | Stewards → the three laws | Not lowerable by vote. |
| Pricing / solvency | Stewards → Oleg sign-off | Must be solvent; cost-plus is math, not a vote. |
| Supplier quality bar (a taste tie between two vetted suppliers → vote) | Stewards set the bar; collective breaks taste ties | Safety is steward; preference is collective. |
The Careem/wellness loop, mapped to a food collective: members rate the kitchen, and the kitchen sees who's reliable. Both accountable; standing gates access; no operator policing — the loop does it. Anti-abuse from wellness REPUTATION.md §C applies verbatim (mutual reveal, volume-weight + decay, dispute path, bias guard, identity cost).
Kitchen ← members (rate the kitchen):
was made correctly" — that denial is the origin wound; accountability in the open is the cure.
Members ← kitchen (the kitchen sees who's reliable — behavioral tags, B2 model, never personal, so bias can't ride in):
pattern does. (Collection is an objective event — even less gameable than a rating.)
How standing gates access — and defends against money-pooling:
perks; the buying club / subscription kitchen opens to reliable members first.
collective never fronts inventory to unreliable members, so a no-show costs the collective nothing. Reliability, not a cash pool, is what carries pre-commitment risk.
owe public changelog fixes. A kitchen that keeps missing loses the collective, exactly as a flaky member loses access.
A clean trade — effort and trust for voice, access, and honest food. Never money for a return; that line is Law 1 and it is what keeps this legal and un-rotten.
| They give | They get |
|---|---|
| Pledge → later a real pre-order/deposit toward a specific batch (buying food early, not investing) | Voice — the binding vote on votable domains; a seat shaping the shortlist |
| Time / skill — recipe testing, a shift, local knowledge, vouching | First access — early batches, founding tastings, pre-order priority, reserved capacity |
| Word-of-mouth — the only distribution the project has; bringing others up the ladder | Honest food — the actual product: as-ordered, blameless free remakes, published build sheets |
| Honest feedback — rating accuracy, filing the misses that drive the changelog | Founder status — permanent recognition (named only with consent); the standing that gates the best access, earned and losable |
Explicitly NOT (say it plainly, everywhere): not a share, not equity, not a profit split, not a loan, not a promised return, not a security. A pledge buys product and belonging.
Updated 2026-07-27 — no money movements at all. An earlier version of this section said money that pools is "Oleg's legal/financial domain". That is no longer the structure and the change is load-bearing: no money touches this project or the person running it, at any point. Each member business sells its own food, on its own checkout, under its own licence. Pre-orders are between a customer and that business — we are not a party to the transaction, do not hold, channel or store value, and take no fee or cut. What is provided is this framework and a place to coordinate. Members pre-pay a business for food; nobody invests in anything, least of all in us.
Three actors. The mark the autonomy grant demands: what is inherently Oleg's vs the collective's.
| Oleg only (identity · access · payment) | Stewards (Oleg + core) | The collective (Pledged+) |
|---|---|---|
| Legal form registration, license, lease signing | Feasibility cut → the shortlist | Menu / sides (from shortlist) |
| Bank account, any money handling, pricing solvency sign-off | Quality floor, build sheets, hygiene | Format (from shortlist) |
| Final brand identity / name pick | Supplier safety bar | Location among feasible options |
| Media publishing on his accounts | Narrow, public veto (laws only) | Hours / days |
| Any binding legal or financial commitment | Convening + running votes | Name preference (advisory) |
Rule of thumb: if it binds money, identity, or the law, it is Oleg's (cash, present, signing). If it is taste, format, or local preference, it is the collective's. If it is feasibility, safety, or solvency, stewards hold it — in the open, against the three laws.
If any answer is no, it drifts — don't ship it.