Two neighbors splitting a case was where this started. Tonight the circle grew: three to six households can split one pack together, one person drives, and every house still keeps what it buys to itself. This page follows a single run all the way down: the asks, the yeses, the split, the money, and the neighbor who said no thanks and never even learns who said yes. Everyone here is invented. Want to start a circle of your own? The how-to page walks you through the first neighborhood meeting.
Meet the circle: four invented households on one invented block. Rosa keeps the list and drives this Saturday. Dan and Priya join the purchase. Miguel belongs to the circle but passes this week. The people and numbers are fictional; the example shows how one run works.
The case holds 24 units. Rosa wants 10 for her own house. Dan asks for 8. Priya asks for 6. Miguel says no thanks. Ten and eight and six is twenty-four. The case is full, nobody's left holding surplus, and the run is on. Rosa shops. Then the math comes home, to the penny:
Rosa fronted the whole $54.12 at the register. Dan hands her $18.04, Priya $13.53; she gets $31.57 back, and her own ten units cost her $22.55. Everyone paid the warehouse price. Nobody paid Rosa for her time. She did the driving as a favor.
The pennies never divide clean: 24 units into a round price never does. So the program hands each stray cent to one person by a fixed rule, the same way every run. The shares add up to the receipt, cent for cent.
When Rosa sends the ask around, here's what each neighbor can see: the ask, and Rosa. That's it. Dan doesn't know Priya was asked. Priya doesn't know about Dan. Nobody sees the guest list, because at that moment there is no guest list. There is a handful of separate, private conversations, each one only between Rosa and one house.
The roster comes into being only when the run is real. Once Dan and Priya both say yes and Rosa locks it in, the two of them can see each other: they're splitting one case, so of course they see each other's names and shares, the way you see who else is coming to a dinner. But that's the only moment anyone appears on a list, and it's only ever the people who said yes.
And Miguel? He said no thanks. So Miguel never sees the roster at all: not who was asked, not who came, not what they took. His no ends his own small conversation, and nothing else opens. He knows a run was offered, and that is all he ever learns.
Life happens. Say Dan meant to swing by Rosa's porch for his eight bottles and pay her back, and then his week fell apart and he just didn't. What happens to the run?
Nothing dramatic, on purpose. The run already finished the moment Rosa shopped and the math settled. Priya still got her six, Rosa still has her ten, the case is split and done. Dan's a no-show, which means Rosa is out the money he owed her, the same as it would be if you'd covered a friend and they forgot to pay you back. The system never moved that money, so there's nothing for it to claw back or rewrite.
What it does do is quiet and kind: Rosa's own archive makes a small private note. A run happened, Dan didn't settle up. Nobody else sees it. It doesn't go on a list, doesn't cross to Dan, doesn't get broadcast to the circle. It stays Rosa's own memory of her own run, hers to glance at before she asks the same neighbors next time. The circle stays a circle. People are still allowed to have a bad week.
Rosa sits at the center. Every ask comes to her, every yes and every no, the whole roster, the receipt, the full settlement. Over a lot of runs, that means Rosa could come to know who on the block buys oil, how much, how often, more than any single neighbor ever sees. That's the shape of it: somebody has to be the hub, and the hub sees the traffic.
So we don't pretend it away. We do three plain things about it:
The hub is a person you already trust. Not a stranger, not a company, not us: a neighbor you chose. The whole circle is people who already know each other. That's the boundary doing the real work.
The driving rotates. Next run, someone else is the center and sees that run's traffic, so nobody sits at the middle forever. One catch: if your circle has one natural driver, the person with the car and the membership, the rotation never happens. She really is a standing set of eyes. If that's your circle, know it going in.
Anyone can redo the math. Each buyer's own archive works out the whole split by itself, from the agreement in its own hands, and refuses any number that doesn't match. So the organizer sees a great deal. She still can't quietly shave anyone's share, because everyone's own copy is checking her.
A star. Every line runs to Rosa and back, so no neighbor ever sends another neighbor a thing. The little envelopes are the asks going in; the arrows home are the shares coming out. Miguel's line is dashed and stops short: he was asked, he said no, and neither the roster nor the run reaches him.
This grew overnight, July 10, 2026, still a prototype, still on made-up data. The whole four-house run above happened on one computer, between invented archives, watched by 51 new automated checks written just for circles. All of them pass. They join the ones already guarding the two-neighbor version, 194 checks across the whole buying lane at that build (current counts live on the build log) — and no one's real records were touched, not even the founder's.
There is nothing to download. This is a working proof. The day that changes, this page will say so (dated, in plain sight).
Want to actually start one? This page is the story of a run; the how-to page is the doing: who's in, the first neighborhood meeting, how you stay safe, and the one thing you can do today with just a notebook and a calculator.