A public ritual on Bitcoin — with rules no one can change.

The ritual — what a howl is

A howl is a valid Bitcoin transaction that meets all four conditions:

1. a)It transfers at least one unit of DOG•GO•TO•THE•MOON from an address back to itself — a self-send.
2. b)It carries the AWOO marker: an extra OP_RETURN with the ASCII payload AWOO1.
3. c)It confirms inside the Moon Window — the six blocks from B0 to B0+5, where B0 is the first block whose timestamp is at or after the astronomical full moon (UTC).
4. d)The address holds the minimum DOG collateral — 100,000 DOG — at the snapshot block, which is B0 itself. Move the coins out before B0 and that address has no voice for the moon.

One address is one voice per moon. The rule is fully deterministic — any indexer in the world reaches the same result.

The first howl inside B0, by blockchain order, is the Alpha Howl of that moon — an honorific recorded in the Book, with no extra coin in v1. It is a different thing from the Alpha title, which is earned by 13–25 consecutive moons.

This interface does not race for it. The HOWL button only builds and broadcasts once B0 exists — that is what guarantees your howl lands insidethe window. It also means the Alpha Howl belongs to the wolf who times the chain with their own hands: watching the mempool, holding a signed transaction, and sending it the moment the block appears. Hati howls through this same interface, and so cannot take it either — the first title in the Book's history was never ours to win.

Hati holds and Hati howls: same rule, same window, no exception.
The Book does not know who built it.

Publication finality: the Book and the distribution for a moon are published only after six further blocks are mined past the end of the window — earliest chain tip B0+11. That delay is what makes a reorg unable to rewrite a page.

The coin — AWOO•AT•THE•MOON

AWOO mirrors DOG: 100 billion supply, five decimals, a free distribution — but paid out in installments. Each moon releases a fixed pot of 3.844 billion AWOO, split 80% to the voices and 20% to the Bone. Every 13 moons (a lunar year) the pot halves, Bitcoin-style. The Bone is the pack's reserve: it is unearthed and split among all of that night's voices whenever a moon beats the all-time record of returning voices — wolves whose address already howled in an earlier moon. New voices share the pot in full; they don't move the record. The record moves when wolves come back. The Genesis Bone — 56,000,000 AWOO buried before Moon 1 — has its own single trigger: the first moon with at least 1,000 returning voices. The creator keeps 0%, forever.

Titles weigh each voice's share of the pot. They can't be bought — only lived:

A streak breaks the moment a moon is missed — the address returns to Pup and starts again at weight 1.0. Dropping below the collateral breaks it too: that is the identity cost of selling. This is the whole point — loyalty cannot be bought, only lived, one moon at a time.

Awards are calculated in indivisible AWOO base units. Each exact weighted share is rounded down first; leftover units go to the largest fractional remainders, with ties resolved by Bitcoin address in ascending code-point order. The output is serialized in that same address order, so every independent implementation distributes exactly the pot and reaches the same result.

Why the count is real — four anti-sybil defenses

The scoreboard is only worth something because bots don't howl. Four defenses work together — and one honest limit comes after them:

The honest limit: these defenses make farming expensive and self-diluting — they do not make it impossible. Nothing stops one person from funding ten wallets and keeping ten streaks. The Book records wallets, not people; what it measures is time. A wallet that has returned for twenty-six moons proves twenty-six moons of returning, and that is all it claims to prove.

The Genesis Ceremony

All AWOO is etched at once and immediately locked into Emission Vaults — one UTXO per moon for the first four eras (52 vaults), plus an aggregator vault for the later eras and the Genesis Bone, each with a timelock that only unlocks near its date. This makes it impossible for anyone, including the founder, to release future emission early. The Vault Map (addresses and unlock heights) is published at Genesis and auditable forever — see all 54 vaults, and the script of each one →

One honest caveat, declared in the protocol itself: timelocks prevent early release, but each moon's distribution is executed by the founder's operational key and audited publicly against the frozen scoreboard. Trust is minimized, not zero — and every step leaves an on-chain trail anyone can check.

The Moon Calendar — Era 1 (2026)

All times are the astronomical full moon (T0) in UTC, from the USNO ephemeris. Your local time and the block window are both derived from this single instant — the ritual is global and free of any time zone.

Principles (inviolable)

What the protocol forbids itself to do.

1. 01Zero custody

   The protocol never touches funds, never asks for a seed, never intermediates. It only builds transactions that you sign in your own wallet.

2. 02Zero creator allocation

   The founder participates by the same public rules, with one declared wallet. No reserve, no personal pre-mine.

3. 03What is private does not emit

   Every emission is born of a public, auditable rule. Closed events — like Moon Zero — distribute no coin.

4. 04Protocol over product

   This website is the protocol's first interface, not the owner of the ritual. Anyone may build another.

5. 05Immutability

   After public publication, the frozen parameters never change. To change a rule is to betray the pack.

6. 06Never promise profit

   AWOO is a cultural ritual airdrop. Forbidden: “invest”, price prediction, promise of return.

7. 07The howl does not pay — it means

   No cash prize, no lottery, no custodied pot. The howl's fee goes to the miners.

8. 08Founder transparency

   Anything the founder does on-chain that is relevant to the project is declared first.

Frozen parameters

Once the protocol is published, these values never change.

The seal — this protocol lives on Bitcoin

The full text of this protocol is inscribed on Bitcoin via Ordinals. The inscription is the canonical version: immutable, uncensorable, readable by anyone without this website. read it on-chain →

Verify it yourself: download the inscription's content and hash it — shasum -a 256 must produce the digest above, byte for byte.

Howl without this site

This website is the first interface to the ritual, not the ritual. Everything below is what it does for you — do it yourself and the howl counts exactly the same. Any indexer in the world reaches the same result.

vout 0  OP_RETURN  Runestone: edict → all DOG to vout 1   (value 0)
vout 1  your ordinals address                        (546 sats)
vout 2  OP_RETURN  "AWOO1" (ASCII, 5 bytes)          (value 0)
vout 3  your payment address — change                (remainder)

OP_RETURN 41574f4f31   →   script hex: 6a0541574f4f31

Doing it by hand means you own the details the site handles: picking a clean UTXO (never one carrying an inscription), a fee that confirms inside the window, and the exact byte encoding of the Runestone. Get the encoding wrong and it is a cenotaph: the Runes protocol burns EVERY rune in that transaction. Sending a smaller amount does not limit the damage — the burn takes the whole UTXO you spend, not the amount in the edict. If you want to test, move a small balance to a SEPARATE UTXO and use only that one. Or use the site.

FAQ