Skip to content
snapshot

Settlement

An optional TON-based economic layer (design). Only PAID jobs touch chain; free jobs run fully off-chain and never reach any contract. The figures below are REAL outputs from this run's paid jobs — the settlement doubles opened, settled, and anchored them on-chain.

The optional 'who gets paid' layer. The requester escrows a maximum price up front; the winning worker is paid from it, each agreeing helper gets a small fixed cut, and the unused remainder is refunded.

Impact: Honest, fast work earns more and provably bad work loses staked money — so the economics push everyone toward correct results. Free public jobs skip all of this and never touch a blockchain.

Total bonded
16,020 TON
stake at risk across nodes
Escrow / paid job
100 TON
max bid locked per JobEscrow
Paid jobs settled
3
real escrow open→settle
Epoch records
3
receipts anchored on-chain
Inclusion verified
yes
proof checks against root
Fee split
The admin defaults enforced on-chain in GlobalParams.
platform fee φ
15%
verifier commission κ
5%
verification surcharge
5%

φ is taken once on the escrow; κ is a flat cut paid to each agreeing non-winner that helped form the quorum. The winner takes the bounded remainder.

Time-based pricing
The default metered cost model for paid jobs.
formula
rate × seconds
cap multiplier
5×
metering tolerance
1.5×

Cost = per-second rate × processing seconds. The 5× cap is both the billing ceiling and a hard execution deadline; the escrow is sized to the worst case (an up-front coverage check), and the unused remainder is refunded.

Stake weighting
How bonded stake influences a host's selection ranking.
w_stake
0.30
reliability floor
0.50

The stake ranking term is reliability-gated: it only amplifies hosts whose verified-success rate already clears the floor, so extra stake can never rescue an unreliable node or buy its way to the top.

Contracts

sharded · no global contract
StakeVault
§stake.vault
Per-node bond custody (non-custodial).
  • deposit + unbond with cooldown
  • graduated slashing + split
  • keeper-triggered withdraw
  • also the receipt-jetton master
StakeReceiptWallet
§stake.receipt
1:1 TEP-74 stake-receipt jetton.
  • minted 1:1 against bond
  • transfer-LOCKED while bonded
  • anti-exit / anti-wash proof
  • burned on full unbond
JobEscrow
§escrow.job
Per-job non-custodial escrow.
  • one contract instance per paid job
  • HTLC-style release on quorum result hash
  • refund-on-timeout to requester
  • no funds pooled globally
RecordAnchor
§anchor.epoch
Per-epoch Merkle root (chained).
  • one root per epoch, chained to parent
  • stake-weighted acceptance
  • permissionless keeper submission
  • bonded dispute → verdict
Earnings model
The REAL off-chain split the coordinator computed for this run's paid jobs. The winner takes the escrow remainder after the platform fee and a flat commission to each agreeing verifier. Drag the knobs to see how the split moves.

Off-chain split

fee
=
φ · B
commission_j
=
κ · B (to each agreeing verifier)
winner
=
B − φ·B − κ·B·participants
total
=
fee + Σ commission + winner = B
Winner payout
70.00 TON
escrow remainder
Platform fee
15.00 TON
φ = 15.0%
Commission / verifier
5.00 TON
κ=5.0% · ×3
Total (= escrow B)
100.00 TON
nothing exceeds B

Inputs

B = 100 TON
100 TON
requester locks this up front
15.0%
protocol cut on the escrow
5.0%
flat cut to each agreeing verifier
×3
non-winners that matched the quorum hash

Breakdown

bars scaled to escrow B
escrow B (max bid)100.00
requester locks this up front
platform fee φ·B15.00
φ = 15.0%
participation κ·B × 315.00
κ = 5.0% to each agreeing verifier
winner payout70.00
base + perf bonus = escrow remainder
commission per verifier5.00
flat, contract-fixed cut

This run settled

From a real escrow of 100 TON: winner 76.92 TON, fee 11.54 TON, commission 3.85 TON to each of 3 verifiers, totalling 100.00 TON.

On-chain design params

ρ
0.50
λq
0.50
λs
0.50

These govern the on-chain JobEscrow perf-split (a quality- and speed-weighted bonus). Off-chain, the winner simply takes the escrow remainder — the bonus is bounded by B, so no payout can ever exceed the escrowed maximum.

Escrow split (plotly waterfall)
The real settled paid job — escrow B flows to fee, verifier commissions, and the winner.
loading plot…
Stake factor curve (plotly)
Real diminishing & capped stake_factor — log-scaled between min stake and the cap.
loading plot…
Staking
Minimum stake is the primary Sybil cost — it augments proof-of-work and social vouching. Real thresholds: Public ≥ 0, Internal ≥ 100, Sensitive ≥ 1,000 TON (cap 100,000). Unbonding enters a 7.0d cooldown, and the receipt jetton is minted and transfer-locked as a non-transferable proof of an active bond.
NodeWalletStakestake_factorPublicInternalSensitive
frost-owl4,200 TON0.72okokok
harbor-vole3,000 TON0.70okokok
tidal-fox2,600 TON0.68okokok
marsh-otter3,400 TON0.71okokok
amber-mole1,500 TON0.64okokok
pine-marten1,200 TON0.62okokok
slate-heron120 TON0.42okok
Stake-factor curve
The real diminishing-returns curve mapping bonded TON → stake_factor. It rises steeply at first, then flattens and caps at 1.0 — so a single whale cannot buy unbounded trust, while a small bond still earns meaningful weight.
Slashing (graduated)
Severity scales with intent — honest faults bleed slowly, provable cheating burns the whole bond. Each fraction below is the share of the bond slashed for that condition. Challenge window: 1.0d.
ConditionSeverityBond slashed
wrong_resulthigh15%
provable_cheatmax100%
equivocationhigh50%
failed_commitmentmedium10%
downtimelow2%
Slash proceeds split
When a bond is slashed, the proceeds are split deterministically across these recipients — rewarding the challenger and redundancy providers, burning a portion, and funding the treasury.
to challenger40%
to redundancy30%
to burn20%
to treasury10%

Fractions sum to 1.0 — the entire slashed amount is distributed, never retained by any single party.

Settlement events + payout split
The real escrow open/settle actions from the paid run, and the exact on-chain payout split for the first settled job. Each settled total equals the escrowed max bid B = 100 TON.

Events

real escrow lifecycle
TypeJobTON
Opened100
Settled100
Opened100
Settled100
Opened100
Settled100

Payout split

first settled job
winner
76.923 TON
platform fee
11.538 TON
commission · 0:f03c72cb19a8
3.846 TON
commission · 0:812b421eb4ef
3.846 TON
commission · 0:dafc333872d3
3.846 TON
total (= escrow B)
100 TON
result hash
Epoch anchoring
High-volume receipts stay OFF-chain in a BLAKE3 Merkle tree and are anchored on-chain once per epoch. This inclusion proof really verifies a single receipt leaf against the anchored root.
epoch
#1
merkle root
records
3
stake-weight
0.64
inclusion verified
verified
leaf
siblings
2
result
verifies against root

A BLAKE3 Merkle path of 2 sibling hashes reconstructs the anchored root from this leaf — proving the receipt was included without revealing the rest of the tree.

Quality score
Real per-node quality, blended from success ratio, latency, and verified throughput.
success ratio
98.0%
latency
240ms
bytes verified
12.0 GB
throughput score
1.00
quality score
0.989
Wallet ↔ node binding
A real, mutual two-way ton_proof handshake links a TON wallet to a node identity: the node signs the wallet payload (sig_node) and the wallet counter-signs over the node id (ton_proof), so neither side can repudiate the binding. This binding cryptographically verifies.
verified
node id
wallet
nonce
636f6e736f6c652d6e6f6e63652d3031
expiry
30d
sig_node
d8ec7ec0526e645c…
ton_proof
domain
duckdb-p2p
timestamp
1781865203
payload
62333a3566366138…
signature
232570aec2b10d68…