Tribal OS: How Social Machinery (Status, Shame, Coalition) Works, and What Breaks When It Scales

Tribal OS is a working model of the social machinery humans actually run. It is an iterative synthesis, assembled primarily from evolutionary science, psychology, anthropology, and behavioral research, and supplemented where useful by older traditions of disciplined first-person observation. It is deliberately modular rather than totalizing. The version number is literal: some claims will turn out to be wrong, and the framework is built so they can be identified, tested, and replaced without the rest collapsing. The model asks three questions in order. What is the machinery? Humans evolved to sort other people into ours and theirs, then allocate attention, investment, and deference within that boundary through four ancient channels: we copy the competent, submit to the formidable, desire the attractive, and tend the needy. These systems were calibrated in bounded, repeatedly interacting groups, where signals could be checked against the person producing them, against people who knew them, or against consequences everyone could observe. How is that machinery exploited? Each channel can be activated by a signal detached from the state it originally indicated. Once someone controls the cue environment, competence can be simulated, formidability projected, beauty manufactured, need performed, and coalition membership issued on demand. Broadcast scale makes the problem qualitatively different, because the signal reaches millions while the verification that once accompanied it does not. Seen this way, the supernatural monitor, the credential, the follower count, and the algorithmic feed are not equivalent institutions, but they are intelligible as different solutions, or exploits, of one underlying problem: how human social machinery assigns trust, standing, and allegiance beyond the range in which everyone can check everyone else. What would repair require? If the mechanism is approximately right, it should specify what a healthier environment, institution, or intervention must restore: which signals need verification, which audiences need boundaries, which sanctions need legitimate standing, which relationships require exit and voice, and which social loops require a real path to termination. A specification earns its place only by ruling out interventions that fail to supply the missing function. This is not a catalog of social pathologies, and the historical cases are not indictments. Supernatural monitoring, law, courts, credentials, professional institutions, audit, and reputation systems are all solutions to genuine scaling problems, each with characteristic strengths and failure modes. The contemporary problem is narrower: the cost of producing signals human social machinery will accept has collapsed faster than the ability to verify them, while the ancestral brake on concentrated authority, a coalition of people who know one another well enough to compare notes and impose consequences, does not scale cleanly against diffuse or mediated power. On method. Claims are typed. Architecture is an organizing choice judged by portability. Composed claims are offered for disconfirmation and carry the observation that would count against them. Specifications are design requirements conditional on the mechanism. A failed prediction damages that claim, not the architecture; a claim cannot move into the architecture column once it fails. Weak joints are marked inline rather than gathered into a disclaimer, and a strain table states the evidential status of every major component. Where a distinction comes from a contemplative tradition rather than an empirical literature, principally the near-enemy structure, it is labeled as a hypothesis with a long observational history and no instrument, and no empirical claim rests on it. Working with this document using an AI. The deposit includes the full framework, diagnostic sequence, strain table, and guidance for AI-assisted interrogation. The Markdown file is provided for machine reading. It can be dropped directly into a chatbot or notebook, and the document opens with a Quick Start and a ten-step diagnostic sequence written for that use. This is an intended use rather than a tolerated one: the document is dense and built to be interrogated. Two cautions apply, and both are the framework applied to itself. Model output is fluent by construction and unverified by default, which is precisely the manufactured-prestige problem the document describes; check the citations rather than the summary. Agreement across separate model sessions is one prior stated twice, not independent corroboration. Related work. A companion framework, The Dominance Operating System (DOI: 10.5281/zenodo.21969095), is a diagnostic instrument for operators whose primary optimization target is dominance rather than outcome. DOS holds that such operators run conserved hominin group architecture rather than a novel pathology; this document attempts to model that architecture, what inputs it expects, what once checked them, and what happens when the checks do not run. DOS begins with the operator and works outward; Tribal OS begins with the social machinery and works inward toward dominance as one configuration of it.