A shared world that agrees with itself.
Two drivers, one byte-exact world.
Share this page's link (or open it in a second tab). Each visitor is an actor driving their own agent; each arrow-key press is a signed action op sent over a live relay to everyone in the room. The relay verifies every op's signature at the door and retains the room's history, so a late joiner is synced the whole trace. Every client replays the merged log under canonical total order and renders the same integer world model — converging on the identical world and session hash, byte-for-byte, regardless of network arrival order. This is the world-model transport: the wire carries the signed action trace, not pixels; the sink renders. A float world model can't promise it — its frames drift and its session is unsigned. Here a generated interactive world is multiplayer-convergent, signed, and auditable.
Why this is the moat
Every action op rides the real MoQ transport: it's published as a signed MoQ object, the relay seals a moq-jwp receipt (Ed25519 + Merkle root + joules), and this page verifies that receipt in-browser (the same WASM verifier that checks the live TV stream) before trusting the payload — then the op's own actor signature is checked on replay. Both tabs print the same session hash the moment they hold the same receipt-verified ops: convergence, with no tolerance and no "eventually". The world they drive is the same pure-i64 integer model the native sink runs. So a shared, generated world is reproducible, signed, metered, and auditable — a session you can pin and put in a receipt. Reference engine + relay in the open-standards repo, Apache-2.0.