🍬 the kandi bar

String beads, name it, then hand a line of text to someone you already talk to. Nothing leaves your arm until you say you handed it over. Show is a preview link, not proof they are the only holder. This browser keeps your arms; there is no inbox and no account. Your first kandi is already on your left arm.

make it. name it. do the handshake. peace, love, unity — and on respect, the kandi crosses. right arm trades, left arm keeps, and the crossing doesn't move until something lands in your hand. no feed, no room, nobody's inbox — the string goes hand to hand down whatever channel you two already share, and the moment it lands it's theirs. what somebody made FOR you never re-trades: no gift button, no crossing button, ever, on that arm — that much really is code. and a string is a copy, not a token: once you've handed it over you can't un-hand it, which is exactly why the piece leaves your arm when you give it.

Format: KND1|maker|for|ts36|beads|fnv — beads as [0-9] color indices and [A-Z] letter beads; FNV-1a/32 over the payload, base36. A checksum, not a signature — it catches a mistyped string, not a forged one, and a maker name is a claim, never an attestation. This page makes no outside request on load. Ruled 2026-08-26: rails-badge.js paints a status BAKED at build time from a real get_info read (head 516799778, 2026-08-26) and prints that bake's date, so a stale bake advertises its own staleness; it POSTs {} to eos.api.eosnation.io (falling back to eos.greymass.com) only when a reader taps ↻ — that request carries no kandi and no soul name, but your IP, User-Agent and its timing reach a third party, which is why it is now yours to choose. The only other request is lang.js GETting lang-corpus.json same-origin, and only when your language is not English. Receipt: a network capture of this page records zero cross-origin requests on load, and exactly one after the tap. State is localStorage only (bkandi written here; the riders own bregister, blang, btranslated_pref, bnr_rails_pin), no cookies, no sessionStorage, no IndexedDB, and no XHR, WebSocket, sendBeacon or analytics tag anywhere in the chain. Gift, cross and show all terminate in the OS clipboard — the carrying is done by the person, and "show it" copies a #k= fragment, not a query, so a shared piece never enters the host's request log; it does still put the maker and made-FOR names in the opener's address bar and history, because the piece IS its seed. Arriving with a fragment only pre-fills the receive box and never writes storage. No DM transport, no relay, no inbox, no video: open, not built, and said plainly. Clipboard write success is not a receive receipt. Animation never retires a piece; a deliberate local handoff writes the full export to the memory line first. A Show link is a copyable preview, not exclusive gift evidence. Crossing is two local handoffs, never an escrow. Names may use letters from any language; bead letters stay [0-9A-Z] and KND1 is not silently reinterpreted. Names are rendered as text, never markup. Digital kandi copies — the culture's answer is the retirement rule, so a completed gift removes the piece from your arm and keeps a memory line, the same shape as the corpus's withdrawal law.