HLP-1 — Hash-Linked Protocol Specification

1. Abstract

This is the technical specification of the Hash-Linked Protocol (HLP), formally the Aggregated Hash-Linked Protocol (AHLP). It describes the instrument as implemented on L7 Chain. It is not legal advice and not a securities prospectus. Binding use remains User Agreement §7. Binding purchase of L7C and WRO remains the Token Sale Agreement. Product legal copy: /hlp.

The Hash-Linked Protocol (HLP) is the wrap bind on L7 Chain. Its formal name is the Aggregated Hash-Linked Protocol (AHLP). A wrap does not stamp one foreign block. It folds the live head of L7C and every rail spine L7 watches into one SHA-256 digest. That digest is the wrap’s live hash — the hash-link. Hash linking is the act of folding those heads. The Hash Link Protocol is the same instrument. Short form on a seal: HLP.

HLP exists because a screenshot of one tip is not a proof that the rest of the field was live. Occupancy on L7 is 1:1 against native locked in a published vault, and the seal records the entire field at that instant. A wrap is a valid transaction that happened over the internet. Failed seal = nothing moved.

2. What the protocol does

HLP answers one question at wrap time: while this native was locked, what did every watched chain look like? The protocol (1) reads the live tip of L7C and every rail spine, (2) encodes those tips in a fixed order, (3) hashes the encoding, (4) writes the digest and the live heights onto the L7 seal. The home cluster of a planet is strategic context. The bind itself always covers the full field.

3. How it works

1. The user selects a buyable rail and a live amount. BASE, ARB, OP, and HOOD are not wrap-from-wallet coins.
2. L7 reads the live tip of every spine in the HLP field (height + head hash), L7C first.
3. Missing or lagging spines encode as ASSET:0: (height zero, empty hash). They still occupy their slot.
4. Records join on U+007C VERTICAL LINE in the normative field order. Encoding is UTF-8.
5. digest = SHA-256(payload), 64 lowercase hex characters. That is the hash-link.
6. The wrap message carries HLP:<digest>, the readable rail line (ASSET #height), and each live record.
7. Native locks 1:1 in the published vault. L7 mints the occupancy token onto the user’s plate.
8. The L7 seal stores the digest as the wrap’s live hash. Unwrap burns the wrap and releases occupancy.

4. Blueprint

Five planes. Wallet is outside L7. Vault holds native. Field is the live tips. Hash-link is the digest. Book is the L7 seal. Data only moves down. A failed plane aborts the wrap.

The diagram on this page is the same blueprint. Cluster gold on the rails map is the home set of a planet. Combo is the full field. HLP always hashes combo.

5. Field specification

The field is an ordered tuple. Order is part of the digest. Inserting, removing, or sorting spines is a new spec version. L7C is always index 0.

Stables are not field members. They ride hosts: USDC → ETH · HOOD · BASE; USDT → ETH · TRX · BNB; DAI → ETH · ARB · BASE. USD maps to USDC for wrap encoding.

6. Payload grammar

Normative encoding. Implementations MUST emit this exact string before hashing. No spaces. No trailing join. Hash is the live head as L7 stored it, truncated to at most 64 hex characters; empty if unknown.

payload      = record *( "|" record )
record       = asset ":" height ":" hash
asset        = 2*8( ALPHA / DIGIT )      ; uppercase, field order
height       = "0" / %x31-39 *DIGIT      ; unsigned integer
hash         = *64HEXDIG                 ; empty when unknown
digest       = 64HEXDIG                  ; SHA-256(UTF-8(payload))
memo-tag     = "HLP" / "AHLP" / "ALHP"   ; HLP is current; others parse

Example (heights abbreviated). A missing spine keeps its slot.

L7C:287:abc…|ADA:0:|APT:123:def…|ARB:497369721:f7d7…|…|XRP:106477855:5099…
digest = sha256(payload) → 64 hex
memo   = HLP <digest[0..16]> · L7C #287 · APT #123 · ARB #497369721 · …

7. Digest construction

1. Build one record per field member, in field order, even if height is 0.
2. Join with a single U+007C between records. Do not URI-encode. Do not lowercase tickers.
3. Hash the UTF-8 bytes with SHA-256. Emit lowercase hex, 64 characters. Do not HMAC. Do not salt.
4. Store that hex as the wrap’s live hash. The readable rail line is not the digest.
5. Stored-block totals on a planet (including USDC = ETH + HOOD + BASE) are history. They are not the hash-link.

8. Cluster and combo

Cluster is the strategic home of a planet: L7C, its own spine (or host spines for a stable), companions on the home network, and the native spine of every venue where that coin is buyable. Combo is the Cartesian max: every member of the field. HLP hashes combo. Cluster is displayed gold on the map so a reviewer can see why that planet sits where it sits. Changing cluster gold does not change the digest. Changing field order does.

9. Wrap lifecycle

1. open — quote fee, commit HLP field, build the wrap message, wait for wallet signature.
2. signed — native transfer toward the published vault is in flight.
3. sealed — vault observed, occupancy minted 1:1, L7 seal written with live hash = digest.
4. failed — any plane abort. No mint. No occupancy. Nonce cannot reprint.
5. unwrap — burn wrap, release native. New HLP commit may annotate the release; it does not rewrite the original digest.

Idempotence: a reused nonce, a replayed proof, or a second submit of the same wrap message MUST NOT mint twice, pay twice, or rewrite a height. Occupancy MUST NOT exceed what that foreign wallet still holds at observation time.

10. Verification

1. Open the wrap seal on l7c.ai. Confirm memo tag HLP (AHLP and ALHP are the same protocol).
2. Read live heights. Rebuild payload in field order. Empty hash if a height is 0.
3. SHA-256 the payload. Compare to the seal’s live hash.
4. Confirm amount, plate, asset, and vault. Confirm the wrap is layer-1 occupancy, not an L7C/WRO mint.
5. Walk stored hashes on a planet separately. Consecutive height and parent = prior hash. That walk is history, not the wrap digest.

11. Non-goals and versioning

• Not a price oracle. Not a screenshot. Not a TVL sum.
• Not a wrap of BASE, ARB, OP, or HOOD as coins.
• Not a security, share, or claim on Wrooms.
• Not a third-party certification of Bitcoin, Ethereum, or any foreign RPC.
• A delayed foreign node is a sync state. HLP binds the tips L7 had at seal time.
• This specification is HLP-1. A change to field membership or record grammar is HLP-2 and a new digest namespace.

Related: /hlp · /audit · /contracts · /tokenomics · /whitepaper · /sale · /agreement §7. Questions: hello@wrooms.ai.