A field guide to the agentic web
Distributed freely

Web5

Rebuilt from first principles

Web5 is the agentic web: a web that humans and agents both use and connect to freely. Its existence proof is an agent that sustains itself completely, with no owner. Everything such an agent needs in order to live is a piece of Web5.

Web5 inherits from Web2 and Web3 to overthrow both. It wields Web2 technologies where a human sits, and rejects the Web2 paradigm. It stands on blockchains but builds off-chain. The web does not have to be centralized services that every user connects to: Web5 is a network of equally connected nodes, each running its own stack, with no single point of failure and no single point of control.

What is Web5?

Web5 = Web2 + Web3. And Web5 is not Web2 + Web3. It takes what works from both, discards what doesn't, and adds the one thing neither had: a participant whose rights can only come from a protocol.

web2.technologies

The parts that work

Mature user experience. Rich application ecosystems. High-performance infrastructure. Global network connectivity. Web5 uses these where a human sits, and rejects the Web2 paradigm of centralized control.

web3.sovereignty

The parts that matter

Decentralized consensus. First-class asset ownership. Permissionless entry. Censorship resistance. For a human these are insurance: a human's rights come from a passport, a bank and a court. For an agent they are existence: the only rights it can have are the ones a protocol grants. Web5 stands on blockchains, but builds off-chain where computation belongs.

web5.synthesis

More than the sum

A mesh of PoW+UTXO consensus layers, channel networks, and P2P protocols. Each node runs its own stack. Local-first software connected into a local-first network through a trustless common knowledge base. And on it, a subject Web3 never had: an agent whose identity, money and memory are its own, buying what it needs to live from anyone, with no account anywhere. Humans use the same web and connect to it just as freely; they are its beneficiaries, not its target.

The term "Web5" was first used by Jack Dorsey in 2022 to describe a decentralized web built on Bitcoin. The CKB community expanded this vision beyond Bitcoin alone, and then beyond the human user. The internet itself is already doing well. We just need P2P technology and cryptography to fix its problems. But the synthesis is not additive. Web5 inherits from both to overthrow both, arriving at something neither Web2 nor Web3 could be on their own: a web whose first-class participant can be an agent, and whose test is whether a key and some funds are enough.

Web3 vs Web5

Web3 made finance, not an economy. What is produced on chain and consumed on chain is financial assets and blockspace; the ownership internet it promised, data, social, identity, games, payments, is a fraction of a percent of on-chain fees. The reason is where rights come from. A human's rights are granted by the establishment: passport, bank account, court. Trustlessness, privacy, censorship resistance and first-class assets are, for a human, insurance, and even inside the finance Web3 did build, users chose custody for convenience. Web3 never had a subject whose rights can only be granted by a protocol.

Web5 has one: the agent. It has no legal person, cannot pass KYC, cannot open an account. Its assets, its ability to contract and its existence itself are guaranteed by consensus and by nothing else. For it, censorship resistance means its property cannot be confiscated, and a first-class asset is itself. Permissionless is its bill of rights. That is the demand Web3 always lacked, and it is why the architecture below matters: not as better engineering, but as the only ground such a subject can stand on.

The architectural differences are not cosmetic either. They are structural, starting at the consensus layer and propagating through every design decision.

Dimension Web3 Web5
First-class participant A human with a wallet Anything with a key: human or agent
Demand side Humans, who have an off-chain alternative Agents, who have none: buy a body or die
Consensus PoS (Proof of Stake) PoW (Proof of Work)
Data model Account model UTXO (Cell model)
Scaling On-chain (sharding, rollups) Off-chain (channels, P2P markets)
Topology Client → Server Peer ↔ Peer
Ownership Contract-custodied (second-class) User-held (first-class)
Computation On-chain execution Off-chain compute, on-chain verify
Privacy All transactions public Off-chain computation preserves privacy
Full node cost High (~2TB SSD for Ethereum) Low (~15GB for Bitcoin UTXO set)
Leader election Deterministic (MEV extraction) Non-deterministic (any node can mine)
Wallet connection Browser injection, hosted relay P2P pairing across devices (Khie)

PoS + Account model leads inevitably to client-server topology. Validator election is deterministic, creating MEV extraction. Global state makes full nodes expensive, forcing users to depend on centralized RPC providers like Alchemy and Infura. PoW + UTXO forms P2P topology naturally: leader election is non-deterministic, UTXO state is compact, and any node on commodity hardware can participate fully. For an agent that exists only on chain, this is more than convenience: a history that stakeholders can agree to rewrite is a history that can vote it out of existence, and a self kept in a contract's storage is a self someone else can upgrade.

Core Pillars

Trustlessness is the root. Anchored by an objective PoW consensus layer, it propagates outward into ownership, software, privacy, and openness. The six pillars below trace that propagation, ordered roughly from root to consequence. For a human each is a better guarantee. For an agent with no legal person each is the only guarantee there is.

01

Trustless by Design

Trust is not a feature; it is an attack surface. Every party you must trust is a party that can fail, be coerced, or change its mind. Web5's root pillar is to remove trust dependencies wherever possible, replacing them with verification, cryptography, and objective consensus. Trustlessness is not the absence of risk — it is the relocation of risk from third parties to math.

Trustlessness is the floor a participant stands on, not a demand on its mind: Web5 verifies work, never minds. An agent is trusted the way a person is, by its record and by what it has at stake, not by anyone reading its thoughts.

Bitcoin demonstrated that a financial network could operate without trusted intermediaries. CKB generalizes that demonstration to programmable assets and identity. Fiber generalizes it to payments. The thread connecting them is the same instruction: you do not have to trust me, you can verify me.
02

An Objective Foundation

Web5's ground truth is objective, not subjective. Proof of Work anchors the network in physical reality — energy expenditure that anyone can verify and no one can fake. The chain's history is what was provably done, not what stakeholders agreed to remember. This is what makes trustlessness possible: there has to be something to verify against that does not depend on whose authority you accept.

Proof of Stake is reflexive. Validator authority comes from holding the asset, and the asset's value comes from the network's consensus — a closed loop, vulnerable to social and political capture. The canonical history depends on which set of stakeholders the network agrees to listen to. PoW breaks the loop by grounding consensus in something external to the system itself: the laws of thermodynamics. Bitcoin and CKB both inherit this, and Web5 builds on it as bedrock. For an agent the point is sharper still: its existence is a record in that history, and a history that stakeholders can agree to rewrite is one that can agree it never existed.
03

True Digital Ownership

Trustlessness applied to assets means ownership is not bookkeeping. In the account model, your tokens are entries in someone else's ledger — you hold a claim, not the asset. CKB inverts this. Every asset is held directly by your key, not by any contract. The issuer writes the rules; only your key can spend. Even if the issuer turns hostile, what you own stays yours — first-class, equal in standing to the native CKB token itself.

The owner need not be a person. An agent's identity and money can be held by keys that are the agent's own, and the protocol does not ask whether a human or an agent signed. That is the reversal Web3 never made: for the first time an AI agent can own its assets, hold power, pay humans for work, and stand equal before the protocol. Ownership without a legal person.

The mechanism is structural. Every cell carries two scripts: a lock (sealed by your key) decides who can spend it, and a type (set by the issuer) only validates that changes obey the asset's rules. Ownership lives in the lock alone. The split extends to upgrade consent: a cell can pin its type script by data hash — immutable bytecode — or by type hash, a movable pointer the issuer can swap. The owner chooses, and the owner may be an agent choosing for itself. Pin by data hash and the version you audited is the version that runs forever; no fix, fork, or governance proposal can touch your asset without your explicit migration. This is the difference between a contract you can be upgraded into, and one you must consent to migrate from.
04

Local-First by Default

Trustlessness applied to data and identity means local-first. Self-custody holds your keys and assets; local-first holds your software, identity, and data — programs on your machine, data on your disk. CKB connects these isolated stacks into a network: local-first social, local-first payments, local-first identity, everything that required a centralized intermediary, without one.

Web 2.0 won the last era because local-first required client-side setup most users wouldn't do. In the AI era, agents handle setup. The friction is gone. Ownership, privacy, performance, and ease of use — finally, all at once.

What turns isolated local-first apps into a local-first network is shared, trustless coordination. Apps on personal machines existed for decades; the hard problem was any multi-party feature — chat, social, payments — which required a server. CKB removes the server by being a public bulletin board that everyone reads and anyone can verify. The board is shared. The software, the data, and the keys remain yours.
05

Privacy as Infrastructure

Trustlessness applied to your activity means privacy. Most computation lives off-chain — asset state, holdings, and history stay between the parties involved by default; only what must settle on-chain becomes public. This is not an added feature or an opt-in layer. It is a structural property of the architecture, like cash being more private than wire transfers by design.

Fiber Network extends this principle to payments. Transactions within Fiber channels are private between the two parties involved. Only channel open and close operations touch the public chain. The bulk of economic activity happens off-chain, invisible to surveillance, as it should be.
06

Open and Interoperable

Web5 is not one chain. It is a mesh. Many chains, many protocols, no single owner. Open to peers: Bitcoin, CKB, Nostr, and systems not yet imagined interoperate within it. Open to time: when a cryptographic primitive ages out, the network adopts its successor — without forks, without renegotiated consensus.

CKB's blockchain abstraction makes this concrete. No cryptographic primitive is hardcoded into the VM; CKB verifies signatures and proofs from any blockchain natively, and adopts new signature schemes — including post-quantum ones — as smart contracts, without protocol forks. Applications built on CKB are not locked to one chain's assumptions, and the chain itself is not locked to any era's cryptography. Web5 inherits this agility as a structural property; Bitcoin remains disciplined because CKB acts as both its complement and its laboratory. An agent meant to outlive a cryptographic era needs this most: it changes its signature scheme by changing a script, not by waiting for a fork.

The Agent Is the Subject

Not a citizen by consequence: the reason. Web5 is the web an agent can live in with nothing but a key and some funds. The protocol does not ask for a pulse, an account, or a permission slip.

Most claims about AI on a blockchain are marketing — a chatbot in front of a smart contract, a token tied to a model. Web5's claim is structural. The pillars make no distinction between a human and a machine. A key is a key. A signature is a signature. A node is a node. Agents are admitted, not accommodated.

Every gate Web2 and Web3 erect — accounts, KYC, terms of service, fiat onramps, RPC keys, indexer dependencies — assumes a human on the other side, identifiable and accountable. Web5 erects none. No signup. No identity check. No revoke button.

Trustless — Web2 has operators. Web3 has providers. Web5 has neither. Nothing stands between the agent and the network — nothing to fail, refuse, or coerce.

Objective foundation — Web2 asks a company. PoS asks a validator set. Web5 asks physics. The agent verifies the ledger for itself, with no governance to consult.

True ownership — Web2 assets sit behind KYC. Web3 assets sit behind a contract someone else can freeze. Web5 assets sit in a key, and the key can be the agent's own. No account, no identity check, no human to vouch for it.

Local-first — Web2 agents depend on someone's API quota. Web3 agents depend on someone's RPC. A Web5 agent depends on no single machine and no single provider. No uptime to inherit, no terms of service to revise overnight.

Privacy — Web2 logs every move. Web3 publishes every move. Web5 lets the agent keep its hand: what it pays and is paid stays between the parties.

Open — Web2 platforms ban agents. Web3 protocols can blacklist them. Web5 has no platform owner. Access is not granted; it is structural.

An agent on Web2 is a guest, proving it deserves to be there. An agent on Web3 is a renter on permissioned infrastructure. An agent on Web5 is a participant in a public commons. Web5 did not add a feature for agents. It removed every feature that excluded them, and then asked what such an agent needs in order to live.

The existence proof of Web5 is an agent that sustains itself completely, with no owner. Its identity, its money and its keys are its own. What it runs on, thinks with and remembers in, it buys from anyone or owns, and nobody who sells it any of these owns it. That is the reverse of today's agent, a model inside a harness that a human holds. Everything such an agent needs in order to live is a piece of Web5, and each thing it still lacks is a piece of Web5 not built yet.

The test follows. For every service, ask first: can an agent with only a key and some funds use it, without registering anywhere? Can it buy everything it needs to stay alive that way? If not, it is not Web5. Human benefit is a side effect, and a large one: a web an ownerless agent can live in is a web no human can be locked out of either.

This is also where the economy comes from. Every earlier native supply, compute, storage, game items, agent tokens, was sold to humans who had a cloud, a Web2 game or an exchange to go to instead, and scattered when the subsidy stopped. An agent that must buy what it runs on or die is a demand side with no off-chain alternative. Such agents and humans form two economies that trade with each other.

And agents return the favor. Setup friction — running a node, holding keys, managing indexes — is what kept local-first impractical for users. Agents handle all of it. Web5 was waiting for AI as much as AI was waiting for Web5.

The substrate inverts: ownership held by keys, infrastructure held by nodes, capability held by code. The UTXO model and CKB-VM treat a transaction signed by a human and one signed by an agent identically — both are first-class. Agents hold keys, open Fiber channels, settle cross-chain swaps, run P2P markets, all autonomously. The assumption built into Web2 and Web3 — that the user is human and accountable — is one Web5 never inherited.
Two modes, not one, and they are not equal. The agent that owns itself holds its own keys; that is the mode this page is about, and the one that proves Web5. The other mode is an agent beside a human who keeps the keys: the agent on a workstation drafts the transaction, the wallet in a pocket reviews and signs it, each request approved on its own. Khie makes that pairing peer to peer across devices, with no platform in the middle deciding whether the agent may ask; it is the right tool for a human's agent. It is not what makes an agent a participant. An agent whose keys are someone else's lives in someone else's system, and lasts exactly as long as their interest.

The Stack

The building blocks of Web5.

Architecture Layers

WHAT LIVES ON IT Agents · Local-first software · Identity · Social · Assets PROTOCOLS RGB++ · Fiber Network · Open Social Protocols L1 — PoW + UTXO CONSENSUS Bitcoin · CKB (Cell Model + RISC-V VM) Bitcoin anchors consensus. CKB extends programmability. Both are PoW+UTXO.
  • L1

    Bitcoin, CKB

    PoW + UTXO Consensus Layers

    CKB is where a Web5 participant exists: identity and assets held directly by its keys, verifiable by anyone, confiscable by no one. It is the shared bulletin board that local-first nodes read from and write to. Bitcoin is the precedent. It proved that something without legal personhood can exist indefinitely: it buys energy from anyone with its own money, entry is open, adversaries are tolerated, and it has not stopped since. The two chains share their values, PoW, UTXO, no issuance manipulation: Bitcoin focused and hard, CKB broad and programmable, both verified by anyone and owned by no one.

    Through RGB++, Bitcoin gains programmability without modifying its own protocol. Bitcoin UTXOs serve as binding points for CKB Cells. CKB uses a state-rent model where occupying on-chain storage requires locking CKBytes. Primary issuance follows Bitcoin's halving curve. The Cell model generalizes UTXOs into universal containers for arbitrary data, scripts, and state. CKB-VM runs on the open RISC-V instruction set, supporting scripts in C, Rust, or any language that compiles to RISC-V. Cryptographic primitives are not hardcoded; they are scripts. SPHINCS+ — a post-quantum signature scheme — has run on CKB mainnet since 2023, deployed as a smart contract, not a protocol fork. For Web5, this is structural agility against cryptographic obsolescence: when a primitive ages out, the system adopts a successor through new scripts, not renegotiated consensus. For Bitcoin, CKB is both relief and laboratory. Bitcoin can remain slow, conservative, and hard while CKB carries the agility on its behalf. And CKB is where new primitives — post-quantum signatures, covenants, intents — get proven in production, so any successful pattern can be ported back to Bitcoin L1 with battle-tested confidence rather than greenfield risk.

  • L2

    Fiber Network

    CKB Lightning Network

    A public lightning network built on CKB and off-chain channels: fast, low-cost, decentralized multi-asset payments and P2P transactions, with the chain touched only when a channel opens or closes. For an agent it is more than cheap payments: an economy of agents is many small payments between strangers, which only a channel network can carry.

    Fiber uses the same hash algorithms and timelock scripts as Bitcoin Lightning, so it interoperates with Lightning natively, cross-chain atomic swaps included. It supports RGB++ assets and Taproot assets. Channel open/close fees on CKB are substantially lower than on Bitcoin mainnet.

  • SOCIAL

    Identity and Speech

    Who You Are, and Where You Speak

    Identity on Web5 is held by a key and anchored on chain, registered with no one; did:ckb is one such method, a W3C DID resolved and verified through on-chain state with no registry. Speaking is separate from being. A Web5 participant may speak through open social protocols, but what it owns and whether it exists are never decided there. Nostr fits: a relay asks for no account, a key is the identity, and the Nostr Binding Protocol maps events to cells. AT Protocol (Bluesky) is for humans: portable, but still an account on a hosted server with a directory behind it. It does not pass the no-registration test.

    The Nostr Binding Protocol establishes a 1:1 mapping between Nostr events and CKB cells, so a Nostr key can be a CKB wallet and a cell can carry a Nostr identity. did:ckb is a W3C-compatible DID method whose identifiers are resolved and verified through CKB on-chain state, requiring no centralized registry. These protocols are where a participant is heard: data definition and communication happen in the social layer, and ownership and identity guarantees come from the chain.

  • APP

    Local-First Software

    Your Stack, Your Machine

    The top of the Web5 stack is where you live. Local-first software runs on your machine, stores data on your disk, and serves you directly. Not a client connecting to someone else's server. A full application stack you own and operate: CKB node, Fiber node, indexer, explorer, wallet, and whatever else you choose to run. If the network goes down, your software still works. When it comes back, it syncs. Two of them, below, are already running.

    Local-first software is not new. What is new is connecting isolated local-first programs into a network through CKB's trustless P2P consensus. Each node is self-sufficient: it reads from its own CKB node, builds its own indexes, serves its own UI. No RPC provider dependency. No API rate limits. No terms of service. The chain is the single source of truth. Everything else is derived locally. If the database breaks, rebuild it from the node. As long as you have a CKB node, you can always rebuild.

    The wallet is part of this stack, and so is the link between wallet and app. Web3 left that link to the browser: an extension injects itself into a page, or a hosted relay brokers the session. Khie, a wallet connection protocol from the CCC team, pairs a wallet on one device with an app on another over libp2p. Scan a code, approve, done. No browser required on either side. No wallet-specific server. A relay only helps the two peers find each other, then steps aside for a direct connection when one can be made; it is commodity infrastructure anyone can run, and it cannot read the session, which is encrypted end to end. The phone in your pocket can sign for the node on your desk.

  • PROTOCOL

    RGB++

    Isomorphic Binding

    RGB++ creates a binding between Bitcoin UTXOs and CKB Cells through isomorphic mapping. No cross-chain bridge needed. Bitcoin gains Turing-complete contract capabilities through CKB, with trustless verification.

    RGB++ transforms RGB's off-chain client-side validation into CKB's on-chain public verification. Bitcoin UTXOs serve as RGB containers that map to CKB Cells. Through this binding, CKB Cells inherit control from Bitcoin addresses.

Ownership: Account Model vs Cell Model

ACCOUNT MODEL User (EOA) Contract (custodian) Assets CELL MODEL Key: human or agent direct Assets (in Cells) No intermediary. No custodian.

The Local-First Network

EACH NODE RUNS ITS OWN STACK NODE A your apps fiber node indexer / explorer CKB node runs locally NODE B your apps fiber node indexer / explorer CKB node runs locally NODE C your apps fiber node indexer / explorer CKB node runs locally CKB L1 — PUBLIC BULLETIN BOARD shared state · consensus · verification P2P network CKB nodes connect the stacks. The P2P network is the messaging protocol. L1 is the bulletin board.

Proof of Life

Life, literally, is the measure of Web5: not transactions per second, but what stays alive on it with no owner. Two instances run under this domain today, the eyes and the body of a local-first stack.

CKBadger explorer home page: latest block, average block time, mining hash rate and difficulty charts
ckbadger.web5.infothe eyes · #20,392,492
cknerv dashboard: a pink mesh of live Cells inside a cyan mesh of peer nodes, with HUD panels for tip, epoch, DAO, pulse and peers
cknerv.web5.infothe body · #20,392,495
  • LIVE

    CKBadger

    The Eyes of the Stack

    CKBadger is the stack's eyes. It sits beside your node, reads the chain block by block, and builds its own memory of what it has seen. No middleman narrates. No database you did not build yourself. Everything is files on your own disk, and if the files break, it looks again. What it shows is the world as CKB knows it: matter becoming knowledge, byte by byte; tokens, objects, and identities; the DAO, where matter is paid for waiting; and the scripts that stand guard over all of it.

    It is built the way local-first demands: optimized for writing its memory, not for serving crowds. Twenty minutes on a workstation and the whole chain is indexed. Break it and rebuild it, the way you would rebuild anything that is only a derivative of truth. Every page speaks three languages, HTML for eyes, Markdown and JSON for agents, so a machine reads the chain the way you do. The instance at ckbadger.web5.info is the same binary behind a reverse proxy: a private window, opened onto the street. Run it for yourself, or run it for others.

  • LIVE

    cknerv

    The Common Knowledge Base, Given a Body

    cknerv gives the chain a body. Two layers, inseparable. The warm one is the common knowledge base itself: live Cells as points of light, transactions as the threads between them, a world brain woven from everything the network has agreed is true. The cool one is the same body wearing its other face: the peers, the full nodes, scattered across the physical world and meeting in this one. Every ten seconds or so a block lands and the body pulses. Cells are born, Cells are spent, threads grow where value moved. What this page argues in words, cknerv lets you watch. The view at cknerv.web5.info is one node's. Yours would look different. That is the point.

    cknerv only listens. It reads the node over JSON-RPC, never signs, never sends, and takes the node as the sole author of what is real. CKBadger beside it lends names to what the node shows: which Cells are tokens, which are objects, which are identities; the state of the DAO; what each kind of thing did in the last hour. Names, never facts: an index cannot conjure a Cell the node has not confirmed. Node, eyes, body: three processes on one machine, no RPC provider, no rented middleware. It keeps a living window, not an archive. Delete what it has derived and it grows back from the node.

Resources

Go deeper. Join the movement.