design-the-mechanism-from-the-desired-equilibrium
Von Neumann's inverse design fused with adversarial gaming-hardening and Feynman's refusal to trust unopposed incentives: define the equilibrium you want, then make it the cheapest honest move. Organon: P3 fault-model + P15 vary
- P22 adversarial-refute + P24 multi-oracle-gate + P30 ledger. Phase: ACT / PERSIST, grounded by SENSE on the deviation class. Respiratory: build backward from the equilibrium, then keep a strict/lenient ledger so gaming stays visible.
Procedure
State the desired behavior as a best-response. Write what each actor should do when the mechanism is working, not merely what outcome you hope to observe.
Model the gamer. Treat the optimizer, reviewer, bidder, or model as an adversary looking for a profitable unilateral deviation from that behavior.
Choose the nearest strategyproof template. Start from Vickrey / VCG, proper-scoring, commit-reveal, or stake-slash before inventing bespoke rules.
Derive the rule backward. Adjust information flow, payouts, penalties, and verification so the desired behavior strictly dominates the obvious deviations.
Check deviations mechanically. Enumerate the main unilateral deviations and verify none improves payoff or score.
Enforce with independent ledgers. Ship only when a machine-checked conjunction of oracles gates the mechanism, and track strict versus lenient performance so accepted debt cannot masquerade as success.
The gate
The desired behavior passes only if it is a verified best-response: no profitable unilateral deviation remains. Enforcement must be a machine-checked conjunction with a dual strict/lenient ledger, not an attestation that people "should behave." If the gamer can win by gaming, the mechanism failed.
Unilateral deviations are the floor, not the ceiling: collusion, sybil
identities, side-channels, and equilibrium-selection failure are separate
deviation classes — check them or name them as uncovered (this is
audit-the-oracle-coverage applied to your own equilibrium check).
Example
Suppose an agent benchmark rewards "bugs found." That score invites padding with low-value or duplicate reports. Reframe the target behavior: surface only real, non-duplicate bugs with evidence. Model the gamer, then design backward: credit only findings that survive independent reproduction and dedup oracles, slash duplicates, and keep strict versus lenient tallies for unresolved reports. Now padding is not a best-response; verified signal is.