The agent
Architecture
Three model layers and one settlement core. One layer designs missions, one judges evidence, one talks to founders. They are split on purpose and do not share state. Underneath them, an on-chain vault computes every amount and enforces every limit — it is the only thing that can release funds.
Why three layers instead of one model
Because a single model that designs the work, judges the work and talks to the customer can be talked out of all three at once. Splitting them means a conversation cannot reach the layer that decides payouts, and a product page cannot reach the layer that decides whether a tester gets paid.
| Layer | What it does | What it is forbidden to do |
|---|---|---|
| Mission Brain | Designs missions from an inspected product — architect, then critic, then a deterministic validation gate | Ship anything the gate rejects. Its output is untrusted until it passes. |
| Payout Brain | Judges tester evidence and proposes pay, review or hold | State an amount. Ever. |
| Concierge | The conversational front door on Telegram and on the web | Do its own money arithmetic, or import the judging layer at all |
The concierge does not import the judging code, so no conversation can perturb the layer that decides payouts. The two share an LLM endpoint and nothing else.
Is there an agent loop running somewhere?
No, and that is deliberate. Autonomy here is a stateless gate with two triggers. A tester submits, and the decision pipeline runs once. Separately, an authenticated sweep re-evaluates pending work, settles matured approvals and pays operator fees on a short cadence, with a lock that makes overlapping ticks harmless.
The pipeline never throws for control flow. Any failure resets the work to pending so the next sweep picks it up — nothing is lost because a request died halfway through.
The settlement core
Each campaign has its own on-chain vault. The vault derives the exact reward from the funded budget, enforces the per-mission cap and the completion limit, rejects replays, and emits the settlement event that is the single source of truth. A model output is a recommendation arriving at a contract that has its own opinion.
The agent proposes. The vault disposes. That sentence is the security model, and it is enforced by a contract rather than by careful behaviour. See Settlement & proof.
Degradation
With no model available, the judging layer falls back to a transparent keyword heuristic that cannot auto-pay anything — it can only hold work for review. The failure mode of losing the model is that money stops moving, never that it moves wrongly.