What is the WorkProof ladder and why does it matter?

WorkProof is a four-step credit-verification ladder that turns IMDB-style filmography from self-claim into evidence. Step 1, self_declared, is added by the crew member. Step 2, peer_confirmed, is affirmed by a co-worker on that project. Step 3, production_verified, is attested by the production company. Step 4, payment_verified, is awarded only when a payout to that person on that project clears, with HMAC-SHA256 webhook signatures and a five-minute clock-skew window. The credit on a profile reflects the highest level actually reached. Step 4 is the dignity step, because being paid for work is the credible signal employers respect.

Is Kuhok actually live in production?

Yes. Kuhok is live at kuhok.net. The platform serves real cast and crew today with 14 microservices in production behind a YARP gateway. New features ship through the same Wenme authentication and Darwan authorization layer used by other KaritKarma products. The audience is Bangladesh's film and television industry as the initial launch market, with the network model designed to extend internationally.

How does the Rating BD bridge work?

Kuhok integrates Rating BD as a bidirectional bridge for actor and crew reputation. Production credit data flows from Kuhok into Rating BD for industry-wide scoring, and Rating BD scores can flow back into Kuhok profile cards for context. The bridge respects the same per-route Darwan policies as the rest of the gateway, so a Rating BD pull from a casting director surface is authorised differently from a public profile view.

Why is QRID called out as elite social clubs rather than QR codes?

QRID is a KaritKarma product for elite social and professional clubs that issue identity-bearing QR or NFC credentials to members. It is not a generic QR-code generator. In the Kuhok context, QRID issues industry membership cards that verify professional credentials on set, at events, and for production access control. The integration is explicit about that scope to avoid the common misread of QRID as a consumer QR utility.

Get in touch

All Case Studies

Case Study / Kuhok

Kuhok
the dignity-first network for cast and crew.

Live at kuhok.net. 14 .NET microservices behind a YARP gateway with Darwan RBAC enforced per route. WorkProof turns credits from claim to evidence. Rating BD bridges reputation bidirectionally.

View Kuhok product Open kuhok.net

.NET microservices

kuhok.net

Live deployment

WorkProof levels

YARP

Gateway + Darwan RBAC

Live in production at kuhok.net. Initial launch market is Bangladesh film and television; architecture is built to extend internationally.

What is the Kuhok case study

A working professional network for film, with credits you can trust.

The Kuhok case study documents a live network at kuhok.net that gives cast and crew IMDB-style profiles with a four-step WorkProof credit ladder, AI-guided production management (Groq Llama 3.3 70B), multi-party contracts (QuestPDF), real-time budget tracking (SignalR), Project Family Groups, and built-in safety reporting.

The architecture is 14 .NET microservices behind a YARP gateway with Darwan RBAC per route, a Next.js 16 frontend, PostgreSQL with pgvector for semantic search, Redis 8, RabbitMQ 4.1, and MinIO for assets. Bangladesh film and television is the initial launch market; the network model is built to extend.

The Challenge

The film industry runs on word-of-mouth and screenshots.

Cast and crew assemble on WhatsApp threads. Credits are self-claimed and unverifiable. Casting is done through personal networks. Production scheduling lives in spreadsheets. There is no shared layer that turns the industry's actual work into a credential.

Unverifiable credits

Anyone can claim a credit. Production houses have no clean way to verify filmography. Trust runs on rumour.

Fragmented production workflows

Casting, scheduling, budgeting, and crew management happen across WhatsApp, spreadsheets, and phone calls.

Inefficient talent discovery

Finding the right cinematographer or sound engineer means asking around. No searchable database of verified professionals.

WorkProof ladder

From self-claim to payment-verified.

The four-step ladder turns credits into evidence. The credit on a profile reflects the highest level actually reached, and the last step requires a cleared payment with HMAC-signed webhook attestation.

self_declared

Crew member adds the credit. Visible but unverified.

peer_confirmed

A co-worker on that project affirms the credit. Trust starts to compound.

production_verified

The production company attests to the credit. Industry-credible by construction.

payment_verified

Awarded when a payout to that person on that project clears. HMAC-SHA256 signed webhook, five-minute clock-skew window.

Architecture

14 microservices, one YARP gateway, per-route Darwan RBAC.

Each service owns its data and communicates through RabbitMQ events. Authorization is enforced once, at the gateway, by route. No service has to re-implement the policy model.

01Identity and Profile

02Portfolio and Showreels

03Credit and WorkProof

04Production Management

05Messaging and Channels

06Search and Discovery (pgvector)

07Analytics

08Notification Service (via BitsPath)

09Casting and Crew Calls

10Contracts and Signing (QuestPDF)

11Budget and Real-time (SignalR)

12Rating BD Bridge

13Asset Sync (Professional Vault)

14AI Guidance (Groq Llama 3.3 70B)

YARP gateway, Darwan per route, event-driven inside

YARP terminates every inbound request and delegates the allow/deny decision to Darwan per route. Inside the perimeter, services react to RabbitMQ events. When a credit is verified, the Profile, Search, Notification, and Rating BD Bridge services each react independently. No direct service-to-service calls for asynchronous workflows.

Platform integration

6 KaritKarma services, no reinvention.

Kuhok integrates the shared platform layer rather than rebuilding it. Wenme, Darwan, BitsPath, Professional Vault, QRID, and Rating BD each plug in via their public contracts.

Wenme

Authentication

OAuth 2.1 plus PKCE with passkeys. All industry professionals sign in without passwords.

Darwan (per route)

Authorization

RBAC at the YARP gateway, route by route. Actor, director, producer, and production-house scopes with signed audit trails.

BitsPath

Communications

Email, SMS, WhatsApp, and push. Casting calls, credit verifications, and production updates.

Professional Vault

Asset Management

Portfolio storage with face recognition and CLIP semantic search. Showreels, headshots, and licensed assets.

QRID

Membership credentials

Elite social and professional club credentials via QR or NFC. Industry membership cards for on-set verification, not consumer QR utility.

Rating BD

Reputation bridge

Bidirectional bridge for industry-wide scoring. Verified credit data feeds reputation; reputation context surfaces back to profile cards.

Kuhok vs the alternatives

Where credits actually come from.

Versus IMDB, a generic LinkedIn profile, or a producer's spreadsheet, here is what the WorkProof model does differently.

Capability	Kuhok	Spreadsheet
Payment-verified credits (WorkProof)	4-step ladder
Production management built in		Partial
Per-route RBAC at the gateway
Industry membership credential	QRID
Bidirectional reputation bridge	Rating BD
Live at a public URL	kuhok.net

What ships today

Live at kuhok.net.

14 microservices in production

Each owns its data and reacts to RabbitMQ events. YARP and Darwan terminate the gateway.

Four-step WorkProof ladder

self_declared, peer_confirmed, production_verified, payment_verified. Credit reflects the highest reached.

AI-guided production management

Groq Llama 3.3 70B drafts schedules, contracts, and budgets. Ollama for semantic embeddings.

Bidirectional Rating BD bridge

Credits feed industry reputation; reputation context surfaces back to profile cards.

QRID industry credentials

Elite social and professional club credentials via QR or NFC. On-set verification, not consumer QR.

Per-route Darwan RBAC at the gateway

Actor, director, producer, and production-house scopes enforced once, at YARP, with signed audit trails.

Frequently asked

Kuhok, asked plainly.

What is the Kuhok case study?: The Kuhok case study documents how a dignity-first network for cast and crew is shipped on the KaritKarma platform and went live at kuhok.net. The architecture is 14 .NET microservices behind a YARP gateway with Darwan RBAC enforced at the route level, a Next.js 16 frontend, PostgreSQL with pgvector for semantic search, Redis 8, RabbitMQ 4.1, MinIO for assets, and Groq Llama 3.3 70B with Ollama embeddings for AI-guided production management. The deployment lives on deploy.kuhok.net under Ubuntu 24.04, pushed via SSH-triggered build (no inbound webhook per KaritKarma policy).
What is the WorkProof ladder and why does it matter?: WorkProof is a four-step credit-verification ladder that turns IMDB-style filmography from self-claim into evidence. Step 1, self_declared, is added by the crew member. Step 2, peer_confirmed, is affirmed by a co-worker on that project. Step 3, production_verified, is attested by the production company. Step 4, payment_verified, is awarded only when a payout to that person on that project clears, with HMAC-SHA256 webhook signatures and a five-minute clock-skew window. The credit on a profile reflects the highest level actually reached. Step 4 is the dignity step, because being paid for work is the credible signal employers respect.
Is Kuhok actually live in production?: Yes. Kuhok is live at kuhok.net. The platform serves real cast and crew today with 14 microservices in production behind a YARP gateway. New features ship through the same Wenme authentication and Darwan authorization layer used by other KaritKarma products. The audience is Bangladesh's film and television industry as the initial launch market, with the network model designed to extend internationally.
How does the Rating BD bridge work?: Kuhok integrates Rating BD as a bidirectional bridge for actor and crew reputation. Production credit data flows from Kuhok into Rating BD for industry-wide scoring, and Rating BD scores can flow back into Kuhok profile cards for context. The bridge respects the same per-route Darwan policies as the rest of the gateway, so a Rating BD pull from a casting director surface is authorised differently from a public profile view.
Which KaritKarma platform services does Kuhok integrate?: Wenme handles OAuth 2.1 plus PKCE authentication with passkeys. Darwan handles authorization at the YARP gateway with route-level policies for actors, directors, producers, and production houses. BitsPath handles email, SMS, WhatsApp, and push notifications for casting calls, credit verifications, and production updates. Professional Vault handles portfolio asset storage with face recognition and CLIP semantic search for showreels and headshots. QRID handles industry membership cards (QR or NFC credentials for elite social and professional clubs, not generic QR-code generation). Rating BD is the bidirectional reputation bridge.
Why is QRID called out as elite social clubs rather than QR codes?: QRID is a KaritKarma product for elite social and professional clubs that issue identity-bearing QR or NFC credentials to members. It is not a generic QR-code generator. In the Kuhok context, QRID issues industry membership cards that verify professional credentials on set, at events, and for production access control. The integration is explicit about that scope to avoid the common misread of QRID as a consumer QR utility.

Explore Kuhok

A network for cast and crew that respects their work.

See how WorkProof turns credits into evidence and how 14 services behind a Darwan-policed gateway carry the load. Live at kuhok.net.