# The Purple Hat Guild
## Incentivized by SnapKitty Sovereign OS

---

```
  ▲   ▲
 ▐▓▓▓▓▓▌   PURPLE HAT
 ▐▓▓▓▓▓▓▌  offensive + defensive
  ▀▓▓▓▓▀   incentivized by chain
```

---

## What Is a Purple Hat?

In security, hats signal intent:

| Hat | Intent |
|-----|--------|
| White | Ethical hacker — finds vulnerabilities, reports them |
| Black | Malicious — exploits for gain |
| Red | Aggressive ethical — actively hunts and takes down attackers |
| Blue | Defender — builds the walls, monitors the perimeter |
| **Purple** | **Both — attacks their own systems to build better defences** |

Saint Errant's **Purple Hat Guild** is built on this principle — but with a SnapKitty twist. Purple Hats are incentivized by the chain. Every vulnerability found, disclosed, and fixed earns verified status, chain record, and deeper access. The better you attack us, the stronger our fortress becomes. We reward that.

---

## The Purple Hat in the SnapKitty Stack

The fortress already has automated defence:

```
SENTINEL — classifies threats, triggers lockdown
TENSOR   — scores every payload 0.00 → 1.00
HERALD   — monitors the Bifrost event stream
LEDGE    — burns every attack to the WORM chain permanently
```

But automated systems have blind spots. Purple Hats find them before M4LKIT does.

**Purple Hats probe:**
- The three-pillar preflight (P1:SEAL, P2:CHAIN, P3:IDENTITY)
- The SHA-256 seal integrity
- The Discord Ed25519 verification layer
- The Bifrost injection surface
- The WORM ledger append-only guarantee
- The Ollama local inference isolation
- The Open Banking and Plaid data boundaries

Every finding gets disclosed to the Sovereign Architects privately first. If valid, it gets fixed, then sealed to the chain with the Purple Hat's verified credit attached permanently.

---

## Incentive Structure

Purple Hats earn through the SnapKitty incentive loop:

```
FIND a vulnerability
     ↓
DISCLOSE via responsible disclosure (devops@collectivekitty.com)
     ↓
VERIFIED by Sovereign Architects within 48h
     ↓
FIX shipped and merged
     ↓
SEALED to WORM chain with your Discord ID and GitHub handle
     ↓
EARN:
  ◈ Purple Hat role in Discord (permanent)
  ◈ Verified Contributor status (if not already held)
  ◈ Chain record — immutable proof of your contribution
  ◈ 2× vote weight in Cypherpunk Guild governance decisions
  ◈ Named credit in the security release notes
  ◈ Direct channel access to Sovereign Architects
```

**Critical findings** (remote code execution, chain integrity bypass, WORM ledger corruption):
- Emergency fix within 24 hours
- Full public write-up co-authored with the finder
- Permanent Cypherpunk Guild lead status
- Name in the CHARTER.md founders acknowledgement

---

## How to Become a Purple Hat

1. Join Discord — `discord.gg/dugymT3rj`
2. Select `🔐 Cypherpunk Guild` on entry
3. Read the [CHARTER.md](../CHARTER.md) — understand what we're protecting
4. Study the codebase: `github.com/SNAPKITTYWEST/DEVFLOW-FINANCE`
5. Find something. Report it: `devops@collectivekitty.com`
6. Subject line: `[PURPLE HAT] — [brief description]`
7. Do not open a public GitHub issue for security findings

---

## The Rules of the Purple Hat

**Do:**
- Attack our own infrastructure with intent to improve it
- Report findings privately before public disclosure
- Document your methodology — a good report is as valuable as the finding
- Work with us on the fix

**Do not:**
- Access or exfiltrate any real user data
- Attempt to corrupt the WORM chain in production
- Disclose publicly before the fix is shipped
- Use findings for any purpose outside responsible disclosure

Violation of these rules means permanent removal and a sealed record of the violation on the WORM chain. We take this seriously. The chain remembers.

---

## Current Purple Hat Leads

*First verified Purple Hat earns the founding lead seat.*

`[OPEN — first critical finding takes this seat]`

---

## The Hacker Kitty Connection

M4LKIT — the Red Hacker Cat in our [Hacker Kitty series](https://github.com/SNAPKITTYWEST/SNAPKITTYWEST/blob/main/EPISODE_01.md) — represents what we defend against.

Purple Hats are the internal version of M4LKIT. They think like the attacker. They probe like the attacker. But they report to us and strengthen the fortress rather than exploiting it.

Every time a Purple Hat finds something M4LKIT would have used — the fortress gets stronger. The cat gets locked out. The chain gets one more sealed proof.

---

*Purple Hat Guild — Saint Errant Sovereign Digital Society*
*Find the gap. Report it. Earn the chain. Make the fortress stronger.*

`devops@collectivekitty.com — [PURPLE HAT] in subject`