Affordances

Um vocabulário compartilhado de capacidades: o que ferramentas e protocolos descentralizados tornam possível, organizado por domínio de confiança.

43 affordances

Co-Creation & Knowledge

Conflict-free editing

#

Two or more people can edit the same document simultaneously — even while offline — and when their edits are synced, the result correctly incorporates all contributions without data loss or overwriting. This is guaranteed by the data structure (CRDT), not dependent on a coordination server to arbitrate.

Por que isso importa

Real-time collaborative editing is now an expectation, but most implementations depend on a central server. CRDT-based editing works peer-to-peer and offline, making collaborative knowledge work genuinely decentralized. No one person's changes are silently overwritten.

Provenance tracking

#

Every piece of information in a shared knowledge base carries its origin — who added it, when, citing what source, attested to by whom. This provenance travels with the content, not just with the version history of a specific document.

Por que isso importa

Shared knowledge bases degrade when it is unclear who is accountable for any given claim. Provenance tracking creates accountability without requiring a central moderator to police accuracy — the community can evaluate claims based on who made them and what they cited.

Version history

#

Every change to a shared knowledge base is recorded — what changed, when, by whom — and prior states can be retrieved. Knowledge evolves without the past being lost or quietly overwritten.

Por que isso importa

Community knowledge is not static. Positions evolve, decisions are revisited, errors get corrected. Version history lets communities learn from their past without being imprisoned by it — and ensures that changes cannot be retroactively revised without a trace. Institutional memory becomes auditable.

Interoperable formats

#

Documents produced in one tool can be opened, edited, and built on in another without format conversion or data loss. The format is governed by an open standard or the community itself, not by the vendor that produced the tool.

Por que isso importa

Format lock-in is a primary mechanism by which platforms capture communities. When an organization's entire knowledge base is in a proprietary format, switching costs become prohibitive even when the platform deteriorates. Open, interoperable formats keep exit costs low and prevent involuntary dependency.

Communication

End-to-end encrypted

#

Messages are encrypted on your device before they leave it and decrypted only on the recipient's device. The server transmitting the message sees only ciphertext — it cannot read, analyze, export, or hand over the contents even under legal pressure.

Por que isso importa

Communication security is not a luxury for marginalized communities — it is an operational necessity. Organizers, activists, and community leaders regularly face surveillance, and infrastructure that cannot be compelled to betray its users is a prerequisite for genuine freedom of assembly.

Protocol federation

#

A user on one server or application can send a message to a user on a different server or application using the same underlying protocol. No central hub is required; the protocol defines how independent implementations talk to each other directly.

Por que isso importa

A single platform with all users is a single point of failure and control. Federation means communities on different servers can communicate and coordinate without being dependent on any one provider — even the server they are currently hosted on.

Ephemeral or archival

#

You choose whether a message disappears after being read, expires after a set time, or is permanently archived. Different communication contexts have different needs — crisis coordination may require ephemerality for safety; community decisions need to be on the record.

Por que isso importa

Current platforms either keep everything forever or make deliberate retention awkward. Communities need to distinguish between "this conversation should be ephemeral for safety" and "this decision must be auditable." Treating every message with the same retention policy serves neither need.

Works offline / mesh

#

Messages can be composed, queued, and delivered even when internet connectivity is unavailable — through Bluetooth mesh, local WiFi, LoRa radio, or store-and-forward gossip protocols that sync when peers reconnect.

Por que isso importa

Reliable internet is not universal. Disaster response, rural communities, communities facing censorship or infrastructure attack, and events where cell towers are overwhelmed all require communication that does not depend on stable connectivity. This affordance is the baseline for resilience.

Events & Coordination

Nested coordination

#

A coordination structure operates at multiple scales simultaneously — a local chapter, a regional federation, a global network — with information and decisions flowing appropriately between levels. Neither flattening everything to one level nor breaking into isolated silos.

Por que isso importa

Most coordination tools are built for a single scale. A tool that works for 20 people breaks for 2,000; a tool designed for a global network does not serve the daily needs of a local chapter. Nested coordination acknowledges the multi-scale reality of most movements and provides infrastructure for all of them at once.

Decentralized scheduling

#

Events can be published, discovered, and RSVP'd to without going through a central platform. Calendars are federated — an event published on one instance is discoverable from another. No single company owns the event graph or the relationship between organizers and attendees.

Por que isso importa

Calendar platforms (Eventbrite, Facebook Events, Meetup) own the relationship between event organizers and their audiences. When a platform changes its algorithm, increases fees, or shuts down, organizers lose access to their attendee lists and community history. Decentralized calendaring keeps those relationships in the community's control.

Ecosystem mapping

#

A live, navigable map of organizations, projects, and people in an ecosystem — not owned by any single party, updated by participants themselves, aggregated from federated sources, and browsable without authentication.

Por que isso importa

Movement coordination depends on knowing who exists and what they are working on. Current directory and mapping tools are either owned by one organization (creating political tension over control) or quickly go stale without sustained curation. Federated ecosystem maps let the ecosystem represent itself continuously, with each participant maintaining their own entry.

Civic integration

#

A tool or protocol provides explicit connectors between community organizing and formal civic structures — petition submission, legislative tracking, public comment routing, participatory budgeting — so that community power developed through organizing can be applied at the level of formal governance.

Por que isso importa

The gap between online organizing and actual civic participation is one of the primary places where community energy dissipates. Civic integration tools help communities translate organizing into governance leverage, closing the loop between grassroots momentum and institutional change.

Group Formation & Governance

Composable groups

#

A group can contain other groups. A coalition can be formed from independently-governed member organizations. Sub-committees can inherit some permissions from a parent body while maintaining their own autonomy. These structures are encoded in the protocol, not dependent on a vendor's feature roadmap.

Por que isso importa

Real community organizing happens in nested structures — caucuses within organizations, organizations within coalitions, coalitions within movements. Tools that support only flat groups force organizers to fake these structures through workarounds, or abandon them entirely.

Slow deliberation

#

The governance tool allows decisions to have a deliberation window — a period during which discussion happens before any vote closes. Urgency and reflection are treated as distinct modes. Different decisions can operate on different timescales.

Por que isso importa

Instant polling produces lowest-common-denominator outcomes that reflect social pressure rather than considered judgment. Many governance failures in online communities trace directly to tools that made quick reaction easier than careful thought. Deliberation windows are a structural commitment to taking ideas seriously.

Dissent pathways

#

A governance mechanism records who dissented, what their objection was, and under what conditions they might support the proposal. Dissent is treated as information, not noise to be suppressed to reach consensus.

Por que isso importa

In communities with power imbalances, consensus can be a mechanism of coercion — the appearance of agreement masking unspoken objections. Dissent pathways make the political texture of decisions visible and preserve a record for future revisitation. Minority positions do not disappear.

Cross-instance federation

#

A group hosted on one server can coordinate with a group hosted on a different server using the same protocol. Shared channels, joint decisions, and cross-platform membership are possible without either group surrendering their hosting autonomy or merging onto one platform.

Por que isso importa

Coalition building is fundamental to social change, but it currently requires everyone to be on the same platform — which means one organization's platform choice becomes everyone's constraint. Cross-instance federation lets organizations maintain their own infrastructure while coordinating freely across it.

Identity & Trust

Sovereign identity

#

Your identity exists independently of any platform or institution. Credentials — who you are, what roles you hold, what communities you belong to — are stored under your control and cannot be deactivated, shadow-banned, or revoked by a third party. The credential lives with you, not with the service that issued it.

Por que isso importa

Platform dependency is an existential risk for communities. When a platform bans an organizer or shuts down, their identity, relationships, and reputation disappear with it. Sovereign identity means a community's record of who its members are persists regardless of any vendor's decision.

Portable attestations

#

Claims about you — verified by others — travel when you move platforms. A credential from your community org attesting to your role, a reputation score earned on one network, or a badge from a training program can be presented and verified anywhere, without contacting the original issuer.

Por que isso importa

Reputation is one of the most valuable community assets, but today it is trapped inside silos. When someone moves from one platform to another, they start from zero. Portable attestations let trust travel with people rather than residing in the database of whichever platform they happen to be using.

Contextual disclosure

#

You can prove specific things about yourself — you are over 18, you are a resident of this city, you have completed this training — without revealing your full identity, and without those separate disclosures being cross-linked to each other or to your real name.

Por que isso importa

Privacy and accountability are not opposites. Contextual disclosure lets communities build consent and accountability without requiring members to sacrifice anonymity in contexts where anonymity protects them — such as health support groups, survivor networks, or whistleblower channels.

Trust graph portability

#

Your network of relationships — who trusts you, who you have vouched for, the history of your collaborations — is not owned by the platform that hosts it. You can carry it to a new tool or protocol without starting over.

Por que isso importa

Every time communities are forced to migrate (platform shutdown, policy change, hostile acquisition), they lose their social graph along with everything else. Trust graph portability makes migration survivable — communities can move without losing the relational infrastructure they built.

Proof of humanity

#

Demonstrate you are a unique human — not a bot, not a duplicate account — in a way that can be verified without giving any authority your name, phone number, biometrics, or government ID. The proof is cryptographic, not documentary.

Por que isso importa

Sybil resistance — preventing one person from operating many fake accounts — is a prerequisite for fair governance and reliable mutual aid. Current solutions (phone verification, government ID) create surveillance exposure. Privacy-preserving proof of humanity lets communities protect themselves from manipulation without surveilling their own members.

Learning & Development

Peer learning networks

#

Communities can build and operate learning networks — courses, mentorship circles, skill shares, study groups — without depending on a central platform that controls enrollment, credentials, and access. The network is owned by the participants and persists regardless of any platform's business decisions.

Por que isso importa

Learning platforms create deep dependency — the courses, the student records, the instructor relationships are all owned by the platform. When that platform pivots, raises prices, or shuts down, the community loses its learning infrastructure. Community-owned learning networks keep educational infrastructure in the hands of the people building it.

Open credentials

#

A credential earned in one context — a badge for completing a course, an attestation of a skill, a record of community participation — can be verified and presented in any other context, without querying the original issuing institution. The credential is self-contained and cryptographically verifiable by anyone.

Por que isso importa

Currently, credentials are locked to the institutions that issue them — if that institution closes, the credential becomes unverifiable. Open credentials make learning records portable and institution-independent, enabling recognition of non-formal and community-based learning at the same level as institutional credentials.

Knowledge commons

#

A community's shared knowledge — documentation, research, institutional memory, guides, collective sensemaking — is hosted in a system owned and governed by the community. Contributors have a meaningful say in how the knowledge base is organized, what gets included, and how it evolves.

Por que isso importa

Community knowledge is one of the most valuable assets any group produces, and it is currently mostly hosted on platforms that own it. When a platform changes policy or shuts down, the community loses its institutional memory. Community-governed knowledge commons make that memory durable and keep it under the community's control.

Mutual Aid & Exchange

Relational matching

#

A community member who needs something can be matched with a community member who can provide it — based on shared relational context and trust graph, not a centralized matching algorithm. The match flows through community relationships, preserving the social texture of mutual aid rather than abstracting it away.

Por que isso importa

Algorithmic matching removes the relational context that makes mutual aid meaningful and safe. Trust-based matching means you are connected to someone your community network has some relationship with, not an anonymous stranger scored by an opaque system. The trust layer is the safety layer.

Non-monetary exchange

#

A community can track labor contributions, service exchanges, gift offers, and resource sharing without any of it being denominated in money. The ledger records what was given, received, and committed — enabling reciprocity and accountability without requiring financialization.

Por que isso importa

A great deal of community value is non-monetary — care work, volunteer labor, knowledge sharing, informal support. Tools that only track financial transactions make this value invisible and systematically under-resourced. Non-monetary tracking makes the gift economy legible and sustainable, recognizing the full scope of community contribution.

Transparent stewardship

#

Shared community resources — money, physical property, equipment, collective data — are governed by explicit rules, with every allocation decision visible to community members and auditable against those rules. Governance of shared assets is encoded in transparent process, not held by any individual.

Por que isso importa

Opacity in resource governance destroys community trust. Communities that can see how their shared assets are managed are more likely to contribute and more resilient when leadership turns over. Transparent governance is a precondition for long-term organizational sustainability — it makes the community more than the sum of its current leaders.

Private need expression

#

A community member can express a need — for food, housing, financial support, emotional support — and have that expression seen only by people they trust, or by community coordinators, without it being broadcast to the wider community or captured for external use.

Por que isso importa

In stigmatized contexts, the fear of exposure prevents people from seeking help they need. Mutual aid networks that offer genuine privacy for need expression can serve people who would never use a public system. Lowering the shame barrier is not a nice-to-have — it is the difference between a resource being used and going unused.

Place-Based Mapping

Geographic data federation

#

Geographic data — points of interest, community assets, neighborhood boundaries, event locations — can be shared, updated, and aggregated across independent instances using open standards. No single authority controls the canonical map; different communities can maintain different perspectives on the same geography.

Por que isso importa

Maps encode power. Who controls what gets marked on a map, what places get called what, and whose geography is centered has profound political implications. Federated geographic data lets communities build and share their own geographic representations without depending on platforms whose map reflects commercial and surveilling interests.

Community mapping

#

A community can create and maintain a living map of its own assets, resources, relationships, and geography — governed by community members rather than an external platform. The map reflects the community's own understanding of its territory and can be updated by its members without intermediaries.

Por que isso importa

External mapping tools (Google Maps, Yelp, commercial GIS) represent communities through the lens of commercial data collection. Community-governed maps can surface what the community values — mutual aid distribution points, cultural sites, community gardens, safe gathering spaces — without those locations becoming commercial data points or surveillance infrastructure.

Local network routing

#

Data and messages are routed preferentially through geographically proximate nodes — reducing latency, reducing dependence on long-haul internet infrastructure, and maintaining communication when backbone internet connectivity is disrupted. Mesh networking at the neighborhood or building level.

Por que isso importa

Last-mile internet infrastructure is often the least reliable and the most politically controlled segment of the network. Communities that can route through local mesh networks maintain communication capacity when that infrastructure fails or is deliberately shut down — whether by a natural disaster, a power outage, or government action.

Platform Evolution & Sovereignty

Self-hostable

#

The software powering a community's communication, governance, or coordination can be installed and run on infrastructure the community controls — a VPS, a server in a member's home, a community-owned data center — without requiring any ongoing relationship with the software developer's hosted service.

Por que isso importa

Self-hosting is the ultimate exit ramp from platform dependency. A community that runs its own instance cannot be deplatformed, subjected to unilateral policy changes, or forced to subsidize a venture-backed growth strategy with their data and attention. It is the baseline condition for genuine data sovereignty.

Data portability

#

A community member or community can export their complete data from one platform — identity, content, relationships, history — and import it into another platform running a compatible protocol. Migration does not mean starting over from zero.

Por que isso importa

Data portability is the precondition for meaningful choice. If migrating away from a platform means losing everything, there is no real choice — you are captured by switching costs. With genuine portability, communities can leave bad actors, try new tools, and consolidate onto better infrastructure without existential loss.

Local-first storage

#

Your data — documents, messages, relationships, history — is stored primarily on your own devices. When you are online, it syncs with peers and collaborators. When you are offline, you have full access to everything you have created, and your changes sync when you reconnect.

Por que isso importa

Cloud-first storage creates dependency on the cloud provider's infrastructure, pricing, and continued operation. Local-first storage means your data survives server outages, service shutdowns, and connectivity loss. It is also the architectural prerequisite for genuine user privacy — data the provider never holds cannot be exposed by the provider.

Privacy-preserving AI

#

AI assistance — summarization, translation, recommendation, pattern recognition — happens on-device or in a community-controlled environment. No community data is transmitted to third-party servers for model inference. The intelligence is local or community-hosted.

Por que isso importa

AI is becoming a necessary layer for working with large volumes of community-generated content. But current AI tools require transmitting data to commercial providers, creating privacy exposure, vendor dependency, and terms-of-service risk. Privacy-preserving AI lets communities benefit from AI capabilities without surrendering their data as the price of admission.

Gradual decentralization

#

A community can start using a more open protocol without requiring all members to immediately become technical users. The migration path is gradual — perhaps starting with a hosted service that runs on an open protocol, then moving to self-hosted, then to full peer-to-peer — with the community choosing its own pace.

Por que isso importa

Full decentralization requires technical sophistication that most communities do not yet have. Incremental decentralization acknowledges this reality and provides a pathway from where communities are to where they want to go, without requiring a sudden leap that would leave most members behind. The on-ramp matters as much as the destination.

Relationship Development

Non-gamified tracking

#

The history of your interactions with another person or within a group is available to you — not processed into engagement scores, not used to optimize recommendations, not visible to platform algorithms. You have access to the relational record that you created.

Por que isso importa

Platforms currently use relationship data against users — feeding it into systems that generate engagement while eroding genuine connection. Non-gamified tracking gives communities visibility into their own relational health without creating surveillance infrastructure for anyone else.

Emotion-aware design

#

The interface is designed to support genuine emotional connection — check-in rituals, context-setting for communication, explicit vulnerability signals — rather than performance metrics (likes, follower counts, viral spread). The UX reflects how communities actually build trust.

Por que isso importa

The affordances built into an interface shape the kind of relationships people have through it. Platforms optimized for engagement produce performative connection. Platforms designed with community health as the primary metric produce something qualitatively different and more useful for organizers.

Anti-addiction architecture

#

The platform has no infinite scroll, no autoplay, no notification maximization, no engagement optimization. Navigation is intentional — you decide what you see. Time limits and intentional session design may be built in.

Por que isso importa

Attention is a commons. Platforms that exploit attentional vulnerability degrade community members' capacity for the sustained, careful attention that organizing and deep relationship require. Anti-addiction architecture is a design commitment to treating users' time as valuable rather than as inventory.

Restorative process tools

#

The platform provides explicit mechanisms for conflict acknowledgment, harm naming, and structured repair — check-in templates, facilitated dialogue structures, harm repair workflows — rather than requiring communities to improvise these processes on top of general-purpose communication tools.

Por que isso importa

Conflict is inevitable in any community. Communities without restorative infrastructure either suppress conflict (which festers) or litigate it in public threads (which destroys trust and onlookers). Scaffolded restoration makes the difference between communities that survive rupture and those that collapse over it.

Collective field sensing

#

Groups have tools for periodic collective check-in — structured prompts for how the group is experiencing its direction, energy levels, and internal relationships, aggregated in ways that surface patterns without singling out individuals.

Por que isso importa

Groups often do not know they are in trouble until a crisis hits. Regular collective sensing — the group equivalent of a health check-in — builds the relational awareness that enables early course correction before small issues become fractures. It makes invisible dynamics visible without requiring someone to name the problem under personal risk.