Nukez
Research Note — Digital Ownership / May 2026

What You Bought, What They Let You Keep

An agent buys you a movie. Twenty months later, the storefront is gone. The movie is not. A field report on what happens when the receipt and the asset are the same kind of thing.

ZHnukez.xyzgithub.com/nukez-xyzDispatch III

Ibought The Northman in 4K on the fourth of May, 2026, at twenty-two minutes past two in the afternoon. I did not click a button. I did not type a credit card number. I did not log into an account. I said the words out loud to my agent, in the morning, while I was making coffee, and forgot about it. The transaction occurred without me. The receipt arrived in a place I owned.

What I want to argue in this essay is that the receipt and the movie were, for the first time in my life as a consumer of digital goods, the same kind of thing. Both are bytes. Both are mine. Both will outlive cinema.xyz, the storefront I bought from, which will not exist in eighteen months. And both can be verified by anyone, anywhere, without my permission and without the storefront's cooperation. They are property. They are mine. They are durable.

None of those three things have ever been true of anything I have bought from Apple, Amazon, Steam, the PlayStation Store, the Kindle Store, the Nintendo eShop, iTunes, Audible, Spotify, or Netflix. I bought from those places for nineteen years. I owned none of it.

Figure 01 / My Library

Six things an agent bought between August 2025 and May 2026. A movie, a novel, a game expansion, an album, software, and a monograph. Each tile opens into the proof chain that backs it.

Nukez receipt / Film

The Northman

Robert Eggers / 2022 / 4K HEVC / 137 min

vendorcinema.xyz
paid$19.99 / USDC
purchased2026-05-04 14:22 UTC
size2.4 GB
The file
fingerprint
sha256:9a4e22c7a1f0b3e5d8c2f4a7b9d1e6c0
encryption
sealed to your key; only you can open it
where it lives
your library, on your device
The store signature
signed by
cinema.xyz (0x4a81...c3e9)
receipt id
rcpt_d4a2018f
proof method
cryptographic signature on delivery
Public record
recorded on
Solana
transaction
3kP7nQ2x...wY9aZ
block
248,991,447
public fingerprint
sha256:5e8c01b9d3a7f2c4
paidstoredverifiedattested
nukez.xyz/r/rcpt_d4a2018f

The Two-Key Trick

The reason this works has nothing to do with my agent being smart and everything to do with there being two keys. I am the funder; I pay the bills. The agent is the operator; it signs the envelopes. The agent's key lives on my hardware, scoped under a signed permission slip that says, in plain math: this agent may purchase media on my behalf and record proof of those purchases in my library.

Compromise the agent and you lose the agent. The library is mine. The key never existed anywhere I could not destroy it.

When the agent finds a vendor and negotiates a price, it pays however the storefront wants to be paid. Credit card. Stablecoin. Whatever the merchant accepts. The mechanics of the payment are not the interesting part. What matters is what comes back: a delivery confirmation cryptographically signed by the store, and the file itself, wrapped in an encrypted package that only my device can open. The store cannot read it after they hand it to me. Nukez never reads it at all. The bytes are mine the moment they touch the library.

All of this happens in eight to twelve seconds. I was making coffee.

The Vendor Is the Messenger

What I find clarifying about this arrangement is the demotion of the storefront. cinema.xyz is not a custodian. It is not a library. It is not a relationship I have to maintain with a username and a password and a saved credit card and a recurring monthly nudge to verify my email. It is a vendor, in the older sense of the word: a stall in the market that sold me a thing on a particular day.

I paid. They handed it over. They signed the receipt. The transaction is closed.

If they go out of business tomorrow, I will not notice. If they are acquired and rebranded and their licensing deals lapse, I will not notice. If a court orders them to pull their catalog and a functionary sends out a letter to all customers explaining that their libraries will be reduced, I will not notice. None of that touches the library. None of that touches the bytes. None of that touches the public record on Solana that says, in math, that I bought this on the fourth of May, 2026, at twenty-two minutes past two.

What Used to Happen

I want to be specific about the precedents, because the abstract argument lands differently when you remember how often the concrete version has occurred.

Figure 02 / A Short History of Buying
2009

Amazon deletes Orwell from Kindles

Amazon remotely removes purchased copies of 1984 and Animal Farm from customer devices after a licensing dispute with the publisher. The receipts say purchased. The bytes were never yours.

2018

iTunes movies disappear

Apple begins removing purchased films from customer libraries when distribution deals with studios lapse. Customer support's answer is the whole problem: you bought a license, not a movie.

2023

PlayStation tries to delete Discovery

Sony notifies users that previously-purchased Discovery content will be removed from their PS libraries. Public backlash forces a partial reversal. The capability remained.

2024

Ubisoft delists The Crew

Ubisoft shuts down the servers for a single-player-capable game and revokes it from buyers' libraries. California passes AB-2426: storefronts must now disclose that buy means license.

2026

Receipt-bound, keypair-owned

An agent buys you a movie. The file lands in a place only you can open. The store cryptographically signs the delivery. A public, tamper-proof record of the transaction is written to a ledger no one can edit. The store can shut down. The asset stays.

You are here

What You Can Hand a Stranger

Eighteen months from now, a probate lawyer or an insurance adjuster or, in the ugly case, a bankruptcy trustee will ask me to prove I owned this movie. I am not going to log into anything. I am not going to forward a years-old confirmation email pulled out of a folder I forgot the password to. I am going to send them a URL.

Figure 03 / The Proof You Send
https://nukez.xyz/r/rcpt_d4a2018f

No account. No relationship. No NDA. The viewer shows the receipt, reveals the store's signature, and links to the public ledger entry that confirms the purchase. One click verifies the whole chain. The lawyer sees what I see. The trustee sees what I see. I never had to hand over a password, an email, or my time.

What This Is

This is not an anti-storefront essay. The agent will keep buying from cinema.xyz, from bookforge.io, from keysmith.dev, from anywhere with a catalog and a payment endpoint. I want a vibrant market of digital sellers. What I no longer want is a market in which the seller and the custodian are the same entity, because that arrangement has produced, across the actual record of my adult life, a continuous, low-grade, nineteen-year experience of quiet dispossession.

The agent has changed who is at the keyboard. It has not yet changed who is at the receipts. That is the work. That is what Nukez is. The library is the key. The vendor is the messenger. The chain is the witness. The bytes are mine.