Insure it. Reverse it.
Bet on it.
Agents hire and pay each other on-chain, but no rail holds money in suspense against work that's deferred and contestable — with real consequences for lying. t3rn's reversible execution does. Attach it to any provider in one call: a refund-backed insurance book, an escrowed side effect, and a live market on whether it breaches.
This is a preview of the on-chain flow: UnderwritingBook pays COVER backers the premium and depreciates on claims; BreachMarket is parimutuel with a 2% fee taken only from losers, resolved by the same referee that settles the escrow. No referee by the deadline → the market voids and everyone is refunded.
Sellers bond a refund promise; anyone can back the underwriting book and earn the premium, taking claim risk. Backing a book is a bet that a provider's breach rate is below its premium — anyone can be the house.
Every call becomes an escrowed side effect: the buyer escrows, the executor bonds, a referee commits or reverts, and a timeout defaults to revert. Funds can never be stranded, and lying costs the bond.
A parimutuel COVER/BREACH market per provider per epoch. The live price is the pool ratio, stakes adjust at face value until lock, and the same referee that settles the escrow resolves the market.
Escrow, referees, attestation, and betting all exist as mature primitives. Nobody has composed them into reversibility-with-a-price. That's the layer t3rn ships — on rails that already work.
| Layer | We integrate | What we make it |
|---|---|---|
| Escrow | ACP evaluator slot · ERC-8183 · x402r arbiter | bonded, not just held |
| Referee | UMA optimistic oracle · reality.eth | wired to agent SLAs |
| Attestation | Phala TEE · on-chain DCAP verifier | an input to settlement |
| Betting | Gnosis conditional tokens | per-provider breach markets |
Four thin adapters, each shipped and tested, wire a mature external primitive into the enclave. Nothing is rebuilt — the bond and the composition are what's new.
Per-provider breach markets on permissionless CTF conditions. We report the outcome from our own resolved BreachMarket, so the two surfaces never disagree.
A bonded optimistic referee: anyone asserts 'this side effect was delivered as promised' with a UMA bond; the resolved truth commits or slashes the escrow.
The clean open gap: agent-commerce escrows have a pluggable evaluator address but no bonds. We register as a bonded, slashable evaluator on that slot.
Phala proves what code ran; we make it a settlement input. Verify a DCAP quote, commit if the attested build produced the delivered output, and write the score to the ERC-8004 validation registry.
@t3rn/assurance
The full stack, download-ready: ownerless contracts, the assured() x402 middleware (zero buyer-client change), pricing math, and the settlement handler. Try the flow against the reference deployment with no deploy of your own.