Deck · The gadget and the stack above it · August 2026

One proves. One reverses.
One prices.

Three projects, three jobs. The proof substrate anchors what happened; this gadget enforces the outcome; the commercial assurance economy prices who is likely to fail and stands capital behind the answer. This page is the map — the mechanism lives in the litepaper.

D1
The gadget

One bit settles everything.

t3rn is deliberately a simple thing: a reversibility and finality gadget. A requester escrows a reward, a bonded executor fills with a provable stamp, and a referee flips one bit that atomically releases everything or refunds everything. Timeout defaults to revert — funds can never strand.

Five functions carry the whole machine: open, fill, finalize, timeoutRevert, sfx. Everything else — custody, bond accounting, slash, unwind, conservation — sits behind them. The gadget does not price risk and does not judge work. It enforces.

D2
The seam

The enclave never judges. The referee is a plug.

The referee arrives as a parameter, per side effect. Four trust models already run on the same escrow: a bonded evaluator signing a 65-byte verdict, an automated delivery grade, a finality proof checked against an anchored root, and a coordinator attesting a whole cross-chain schedule.

That seam is where the stack plugs in. A proof layer feeds verdicts down; a commercial assurance layer decides which jobs deserve escrow at all, and carries the risk the bond cannot.

D3
The stack

One proves. One reverses. One prices.

Beneath it sits the proof substrate: every chain's events decoded and anchored under one root — data, coordination and proof, not a commercial protocol. Its superroot already drives this gadget's proof referee, in shipped code.

t3rn is the enforcement kernel this page describes: reversibility and finality, nothing more claimed.

Above both sits the commercial layer: the market where agent risk gets a price and a payer. Per-worker records decoded from live traffic price the premiums; staked capital stands behind the judgment, with exposure created only by an explicit act of underwriting. The gadget enforces that market's verdicts; the proof layer evidences them. This page claims neither job — the gadget stays simple on purpose.

D4
The economics, shared

Same design DNA, stated as inequalities.

Both commercial layers keep the same law: being cheated is, ex post, the victim's best financial outcome — a slashed cheat refunds the price and awards the bond. That is what makes cheating pointless ex ante.

And both keep the same honesty rule: a claim ships with the inequality or the test count that makes it true, and what is not built is said plainly.

The mathematics, across the stack
M1Deterrence frontier
E[Cheat] = (1−q)·p − q·b ≤ 0 ⟺ b ≥ p·(1−q)/q

Cheating is negative-expected-value exactly when the bond clears the frontier. The shipped default b = 10p deters any referee catching more than 1 cheat in 11.

M2Victim over-compensation
slash pays the buyer p + b

The refund plus the bond. The same law the assurance economy above carries as 'cheating pays the victim' — one principle, two layers.

M3The record prices the premium
premium per worker ← λ̂ from decoded history, with its interval

The assurance layer prices the counterparty, not the market: live agent traffic decodes to per-worker records with confidence intervals, because measured failure rates have no meaningful average — the population is bimodal.

M4Stake safety, structural
idle stake untouchable · exposure per job, by explicit act, capped

In the assurance economy above, staked capital that has not underwritten a job cannot be drawn on by any settlement path — and earns nothing. No risk, no reward, both halves stated.

Status, said plainly
GadgetLive on devnet 36927 · 7/7 invariant tests · commit and slash both on-chain
Proof refereeBound to the real anchored-root surface on Base Sepolia, in shipped code
Assurance SDK412 tests, 97.1% statements · decodes 19 event types on the live agent ledger
Not yetNo public mainnet, no audit, no real funds before the audit passes — that rule is not negotiable