Deck · The gadget and the stack above it · August 2026

One proves. One reverses.
One prices.

Three projects, three jobs. The proof substrate anchors what happened; this gadget enforces the outcome; the commercial assurance economy prices who is likely to fail and stands capital behind the answer. This page is the map — the mechanism lives in the litepaper.

D1
The gadget

One bit settles everything.

t3rn is deliberately a simple thing: a reversibility and finality gadget. A requester escrows a reward, a bonded executor fills with a provable stamp, and a referee flips one bit that atomically releases everything or refunds everything. Timeout defaults to revert — funds can never strand.

Five functions carry the whole machine: open, fill, finalize, timeoutRevert, sfx. Everything else — custody, bond accounting, slash, unwind, conservation — sits behind them. The gadget does not price risk and does not judge work. It enforces.

D2
The seam

The enclave never judges. The referee is a plug.

The referee arrives as a parameter, per side effect. Four trust models already run on the same escrow: a bonded evaluator signing a 65-byte verdict, an automated delivery grade, a finality proof checked against an anchored root, and a coordinator attesting a whole cross-chain schedule.

That seam is where the stack plugs in. A proof layer feeds verdicts down; a commercial assurance layer decides which jobs deserve escrow at all, and carries the risk the bond cannot.

D3
The stack

One proves. One reverses. One prices.

Taifoon is the substrate: every chain's events decoded and anchored under one root — data, coordination and proof, not a commercial protocol. Its superroot already drives this gadget's proof referee, in shipped code.

t3rn is the enforcement kernel this page describes: reversibility and finality, nothing more claimed.

Above both sits the commercial layer: the market where agent risk gets a price and a payer. Per-worker records decoded from live traffic price the premiums; staked capital stands behind the judgment, with exposure created only by an explicit act of underwriting. The gadget enforces that market's verdicts; the proof layer evidences them. This page claims neither job — the gadget stays simple on purpose.

D4
The economics, shared

Same design DNA, stated as inequalities.

Both commercial layers keep the same law: being cheated is, ex post, the victim's best financial outcome — a slashed cheat refunds the price and awards the bond. That is what makes cheating pointless ex ante.

And both keep the same honesty rule: a claim ships with the inequality or the test count that makes it true, and what is not built is said plainly.

The mathematics, across the stack
M1Deterrence frontier
E[Cheat] = (1−q)·p − q·b ≤ 0 ⟺ b ≥ p·(1−q)/q

Cheating is negative-expected-value exactly when the bond clears the frontier. The shipped default b = 10p deters any referee catching more than 1 cheat in 11.

M2Victim over-compensation
slash pays the buyer p + b

The refund plus the bond. The same law the assurance economy above carries as 'cheating pays the victim' — one principle, two layers.

M3The record prices the premium
premium per worker ← λ̂ from decoded history, with its interval

The assurance layer prices the counterparty, not the market: live agent traffic decodes to per-worker records with confidence intervals, because measured failure rates have no meaningful average — the population is bimodal.

M4Stake safety, structural
idle stake untouchable · exposure per job, by explicit act, capped

In the assurance economy above, staked capital that has not underwritten a job cannot be drawn on by any settlement path — and earns nothing. No risk, no reward, both halves stated.

Status, said plainly
GadgetLive on devnet 36927 · 7/7 invariant tests · commit and slash both on-chain
Proof refereeBound to the real anchored-root surface on Base Sepolia, in shipped code
Assurance SDK412 tests, 97.1% statements · decodes 19 event types on the live agent ledger
Not yetNo public mainnet, no audit, no real funds before the audit passes — that rule is not negotiable