Fourteen endings.
Every one writes a receipt.
A job's outcome is computed from evidence sealed on the root — signed envelopes, anchored digests, a recomputable verdict. No stake weight enters the function, which removes an entire class of capture attack by construction and relocates the rest somewhere it can be bonded and priced.
| # | Outcome | Escrow | Reward | Bond | Positions |
|---|---|---|---|---|---|
| 1 | SUCCESS Evidence verifies delivery inside the deadline. | Captures | Paid | Untouched | Success side |
| 2 | SUCCESS_LATE Verified delivery inside the grace window, past the deadline. | Captures minus late fee | Paid minus late fee | Untouched | Success side |
| 3 | PARTIAL Job declared divisible upfront; a measurable fraction verifies. after phase 1 | Pro-rata capture, rest reclaims | Pro-rata | Untouched | Pro-rata |
| 4 | REJECTED_ON_ACCEPTANCE Delivered and evidence-sound, but fails the acceptance spec sealed at job start. | Reclaims | None | Untouched — an honest attempt | Failure side |
| 5 | POLICY_PREVENTED The approval plane stopped it before execution; the policy id and signer go in the receipt. | Returns in full | None | Untouched | VOID |
| 6 | POLICY_HALTED Stopped mid-flight by policy; partial evidence exists. after phase 1 | Pro-rata if divisible, else returns | Pro-rata or none | Untouched | VOID |
| 7 | ERRORED The worker attempted and failed attributably; an evidence-of-attempt envelope exists. | Reclaims | None | Untouched; repeated SLA breach decays standing | Failure side |
| 8 | TIMEOUT Deadline passes with no delivery and no evidence of attempt. | Reclaims | None | Untouched; standing decays | Failure side |
| 9 | UNVERIFIABLE The work may have happened; the evidence path failed. Not the worker's fault. | Held through grace, then policy default | Held | Untouched | VOID |
| 10 | CANCELLED_BUYER Buyer withdraws before start. after phase 1 | Returns minus reservation fee | Reservation fee | Untouched | VOID |
| 11 | REVOKED_MANDATE The authorizing mandate is withdrawn mid-flight. after phase 1 | Pro-rata if divisible, else returns | Pro-rata | Untouched | VOID |
| 12 | EXPIRED_OFFER Authorized but never started; the offer lapsed. after phase 1 | Returns | None | Untouched | VOID |
| 13 | FRAUD_EVIDENCE The worker or evaluator submitted evidence that fails recomputation. | Reclaims | None | SLASHED; license review | Failure side |
| 14 | SABOTAGE_ATTRIBUTED Interference by a bonded party is proven from evidence. after phase 1 | Returns or re-runs | Attempt fee if attempted | The SABOTEUR's bond slashed | VOID |
VOID unwinds every position at entry price: no winner, no payout to harvest. Any outcome inside its dispute window can be challenged with a bond, and it is resolved by recomputing against the same sealed evidence — a dispute supersedes with a new receipt, and never edits the old one.
TIMEOUT is not UNVERIFIABLE
If a failed evidence lane counted as the worker failing, censoring the evidence path would be a profitable short. It is not: evidence-path failure voids the positions and holds the money. Nobody earns from a blind spot, so nobody buys one.
Rejection requires the spec upfront
Acceptance criteria are sealed into the job at creation. A buyer who stays silent after verified delivery does not get a timeout reclaim — capture happens on proof. Silence-gaming is priced out.
A policy stop pays nobody
Policy stops are signed by the approval plane and name the policy. If prevented jobs paid the failure side, anyone near the policy engine could mint winnings. Voiding removes the incentive and leaves the stop itself auditable.
Sabotage attribution is a forensic judgment, and the boundary between an unreadable evidence path and proven interference is where an adversary would live. That line deserves adversarial testing before any third-party position goes live, so the safe order is fixed and public:
- 1Bonds only. No third-party positions at all — the bonds already are the bets.
- 2Licensed underwriting, success-side only: vendors and operators insuring their own surface.
- 3Licensed two-sided assurance. Shorting arrives last, smallest, and licensed — parked until then.