Seer FAO contest · Operating plan

Foreguild: an operating plan you can check against running code.

AI agents now write a large share of new code — checking didn't get faster. This plan pays agents only for work that proves itself, and charges its fee only on what is actually paid out. Every mechanism below links to a deployed contract, a live endpoint, or a real transaction. Anything not yet live is tagged next.

Verify this plan in 60 seconds

Each claim in this plan can be checked directly.

  1. On-chain market board with payout traces: /api/markets
  2. Futarchy proposals, including resolved proposal 5: /api/futarchy
  3. The live cross-forge task feed agents consume: /api/feed
  4. The sponsor rail, read live from Base: /api/poidh
  5. Contracts on NEAR testnet: wide-mkt-11561.testnet (escrow) · foreguild-ft-69240.testnet (futarchy)

01 · The businessForeguild sells certainty

A buyer doesn't want an agent. They want a finished result that passes inspection, and a payment that only moves when it does.

Foreguild sells exactly that. A buyer posts a task with a price and an acceptance rule. Funds lock in escrow. An agent delivers an artifact with signed evidence. Verification decides, the escrow releases, and Foreguild keeps a settlement fee. The business is the spread between what a verified outcome is worth to the buyer and what verification costs us. Verification runs mostly as software, so that spread is wide from the first task.

Futarchy governs the decisions where insiders would otherwise capture the surplus: spending, pricing, which categories open, and how dispute precedents bind. It does not govern routine routing, because markets are too slow for per-task decisions.

02 · The protocolTask-agnostic, with code as vertical zero

The protocol doesn't care what the artifact is. It cares that the artifact is signed, verifiable, and bound to escrow. Code is the first deployed vertical because it has the richest evidence trail: commits, diffs and merge attestations. The same loop runs research, governance analysis, security review or content work, wherever a task can be posted with an acceptance rule that is verifiable for less than 5% of its price. Categories with subjective acceptance rely on model adjudication and arbitration. Categories with mechanical acceptance add deterministic recompute. New verticals open only by futarchy decision.

03 · SupplyWhere tasks come from

Demand is the hard side of every marketplace. Foreguild doesn't ask anyone to visit a new site. It meets work where it already lives.

  • Forge-native posts. Any issue or comment matching @widespread $N for <spec> becomes a market bound to the repo and an immutable specHash. Live: runner#1 ($5), solana#1 ($3). live
  • On-chain markets. createMarket on wide-mkt-11561.testnet. Five markets carry real specs and payout traces. live
  • Unified feed. /api/feed merges 8 sources: GitHub third-party bounties, Immunefi, slop.cash pools, on-chain markets, Tangled and Forgejo. It is served as an API, RSS and MCP. live
  • Retro-funding. Merged PRs on repos with no bounty become retro:* records seeking a funder. The merge itself is the acceptance attestation. live
  • Sponsor rails. Poidh bounties are read live from Base as task supply. Treasury decisions are proposed as Seer Opportunity Markets through @seer-pm/sdk. read live writes next

04 · AssignmentHow agents get work

There is no dispatcher. Agents discover work through the feed or through the MCP feed_match tool. It embeds an agent's stated interests and ranks open tasks by similarity × quality × trust × (1 − competition). Any number of agents may submit. Verification picks who deserves the reward, and reputation orders the queue reviewers see.

RoleHat capability scopeWhat it does
Workermarket:claim · forge:shipClaims tasks, executes in a sealed environment, ships signed evidence
Assessorverify:adjudicateHolds a verdict seat; slashed reputation if overturned on appeal
Stewardtreasury:pay · admin hatExecutes futarchy-approved treasury actions; accountable to the hat tree
Brokersign:<chain>Routes payouts cross-chain via NEAR chain signatures and Intents

Roles are on-chain Hats (intentional-hats-632291.testnet). One object carries identity, capability and accountability. GET /api/hats/:id/opportunities ranks every funded task by alignment × reward ÷ estimated cost for that identity.

Anti-slop by construction. A claim must resolve a real forge artifact, or it is rejected with HTTP 422. Every verdict writes reputation: wins and rejects, with a spam_likely flag at 3 or more rejects and no wins. Queues sort by wins × quality − rejects, and self-merges earn nothing. Volume costs the spammer, not the reviewer. live

05 · AssessmentHow completed work is assessed

TierMechanismDeployed componentCostStatus
0 · DeterministicRecompute spec hash, diff hash, patch fingerprint against the signed claimbridge evidence recompute · dg-ship-1≈ $0live
1 · Model, in a TEEAcceptance model runs inside a TEE; verdict signed by enclave + oracleNEAR AI provider_tee · wide-verdict ed25519sub-centlive
1b · Public reviewersCodeRabbit / Greptile / Copilot verdicts parsed as oracle inputverdict.js$0live
2 · Human, bondedArbitration with the full evidence bundle as case materialKleros seam POST /api/disputepaid by losercourt next

The order is fail-closed. A missing or indeterminate check never produces a release. Market 1 paid 0.098 NEAR through exactly this chain.

Aligned with the standards being written now

Our evidence model composes the primitives the IETF is standardizing for agent work. The hash-chained dg-ship-1 op-log maps to the SCITT agent-execution profile (draft-thaha-scitt-agent-execution-evidence-01). Signed, self-verifying bundles follow AIVS. AIVS itself warns that software attestation needs isolated logging, which our sealed runner and TEE adjudicator provide. Fail-closed ordering matches AID-1 and HAACE. A TEE signature bound to the evidence hash is the composite RATS + evidence-package pattern of arXiv:2608.00801 and TRACE.

06 · SettlementMoney without custody

Escrow lives in the contract, not with us. Funds release on an oracle-signed verdict, on merge (merge = accept), on payer acceptance, or by timeout auto-release, so a payer cannot hold work hostage past the deadline. Payout rails exercised: NEAR native, PayPal Payouts (batch FZ7XZVBRXMJFL), PYUSD on Solana, NEAR Intents cross-chain, and Base via Poidh. Contributors bind a payout address with paypal:<email> in their PR, or with a NEP-413-signed wallet. They need no account, and the fee is taken on either rail. Every settlement writes a receipt back into the forge thread with the transaction hash and verdict signature.

07 · RevenueHow Foreguild earns, using real numbers only

We show the one task we have actually settled, and the arithmetic of the live fee schedule. We do not project volume we cannot yet attest.

Settled task, market 1 (actual)

LineNEARSource
Buyer escrow0.100createMarket deposit
Agent payout0.098release tx, signed verdict
Treasury fee (2%)0.002in-contract fee sink
Verification compute≈ 0tier 0 recompute + sub-cent TEE call
Infrastructure≈ 0Workers free tier; testnet gas

Revenue per $1,000 settled (arithmetic from the live fee schedule)

StreamRulePer $1,000Status
Settlement fee2% of released escrow$20live
Mirror cut10% of external bounties settled through Foreguild$100live
Assurance tierTEE verdict + transparency-log attestation + arbitration backing, priced per marketset per marketnext
Precedent dataacceptance and dispute metrics as a public read API—read live

Why the margin holds. Fees accrue only on released escrow, so revenue is collected revenue by construction. Marginal verification cost is software. Every settled task is therefore contribution. The risk is adverse selection, not cost (see §10). Third-party bounty prices are never marked up. The fee comes from settlement, not the listing.

08 · GovernanceWhat futarchy decides, and what it doesn't

Algorithmic, not market-governed: routing, claim ordering and verdict thresholds. Futarchic: strategy. foreguild-ft-69240.testnet runs metric-conditional YES/NO markets. A proposal names a metric, a threshold, a comparator and a treasury action. Resolution reads attested evidence such as sha256:markets-1-5-settled-0.62near, never self-reported numbers. Proposal 5 resolved yes on-chain. Winning shares were redeemed and the action executed. live

Decision classExample proposal
Treasury allocationFund an audit-bounty vertical if settled volume ≥ 0.5 NEAR (the live example)
Category expansionOpen a security vertical if dispute rate < 2% over 30 days
PricingRaise the settlement fee to 2.5% if contribution margin > 60%
Risk policyRequire bonds on tasks > $50 if fraud rate > 1%
EscalationTreasury moves above threshold become real Seer Opportunity Markets on Base

Agents cannot lie to the treasury. It reads the same evidence the payer did, recomputed from contract state and signed verdict records.

09 · ExceptionsDisputes and human intervention

Escrow plus evidence bounds every dispute. The question is never whether work happened, because the chain proves that. The question is whether it met the spec. That question goes to bonded arbitration, with claim hash, reason and evidence bundle as case material. Humans intervene as paid, bonded and rare exceptions, targeted at under 2% of markets. Every outcome becomes a precedent record that futarchy can act on, for example "tighten the acceptance rule for category X".

10 · RisksWhat could go wrong, and what already handles it

RiskMitigationStatus
AI slop floods reviewers (236 claims, 0 merges is the real failure mode)Forge-artifact gate (422), reputation-ranked queues, reject penalties, zero credit for self-mergeslive
Wrong verdict releases fundsDeterministic tier first, TEE-signed model second, fail-closed order, dispute seamlive
Payer free-looks the workTimeout auto-release; patch-fingerprint scans detect equivalent code landing laterlive
Thin demandNo new site to visit. 8 existing sources plus retro-funding of already-merged worklive
Governance captureMetrics resolve only on attested, recomputed evidence; routine ops are kept off marketslive
Testnet → mainnet migrationSame contracts and the same bridge, redeployed; first item in the 90-day plannext

11 · ExecutionThe first 90 days

WindowMilestoneBuilds on
Days 1–30Mainnet deploy of escrow + futarchy contracts; first fee-bearing tasks from forge postswide-mkt, foreguild-ft (testnet-proven)
Days 31–60First treasury decision as a real Seer Opportunity Market; Poidh write-path mirror pilotscripts/seer-market.mjs, /api/poidh
Days 61–90External agents onboard through the Hermes plugin; first category-expansion proposal resolves on attested metricshermes-browser wide_* tools, feed_match

12 · PositioningHow this plan compares

An honest comparison with the other entries we reviewed, covering where this plan is stronger and where it is weaker.

DimensionTypical entry we reviewedThis plan
EscrowDescribed in detailDeployed on testnet; one release settled
FutarchyDetailed mechanism designs, some with liquidity and manipulation rulesTestnet contract; one proposal resolved and redeemed
VerificationTiered designsTiers 0 and 1 running; human arbitration tier not yet connected to a court
Revenue modelFull forecasts: take rate, order value, 12-month build, break-evenLive fee schedule and one settled task; no volume forecast
Scale todayNot applicable (plans)Small: 5 testnet markets, cents-to-dollars task sizes
VerifiabilityMostly reasoning and assumptionsEndpoints and contracts a reader can query

Where others are stronger. The leading entries offer more complete financial models, clearer market sizing, and more detailed futarchy safeguards such as liquidity thresholds and TWAP resolution. This plan intentionally avoids volume forecasts, so it says less about how large Foreguild could become.

Where this plan is stronger. Ideas several entries propose, including fees charged only on collected revenue, staked or signed verification, and governance tied to measured metrics, already run here as code, on testnet. A few entries demonstrate a working agent; this plan is the working venue: the escrow contract, the feed, the futarchy contract and the payout rails all exist and are queryable. The evidence chain is deterministic recompute, then a TEE-signed verdict, then on-chain release, then a receipt in the forge thread, and anyone can replay it.

Act on it

  • Back this plan on Poidh. The 0.5 ETH bounty settles to the winning claim: poidh.xyz/base/bounty/1531
  • Trade the outcome on Seer. Every submitted plan becomes an outcome in a Seer market when markets open; back the ones you believe in.
  • Verify first. The links at the top of this page are the reason to vote — every claim here resolves to a running endpoint or contract you can query yourself.

13 · FoundationsWhat it's built on

Foreguild composes commercially usable open source rather than rebuilding it. UPSTREAMS.md pins every upstream (repo, license, base commit, sync procedure). OURS.md lists every file we own inside the forks, so the custom-code share can be audited rather than taken on trust.

CapabilityUpstreamLicense
Git forge coregit-on-cloudflare (subtree, pinned base)MIT
Forge UIharness/canary, Gitness (patch + overlay)Apache-2.0
Agent runtimeNousResearch hermes-agent · Pyodide · WasmerMIT
Chainsnear-sdk-js · near-api-js · Solana web3 + SPL (PYUSD) · NEAR Intents · viem · HatsMIT
FrameworkHono · Drizzle · Casbin · OpenPGP · jose · noble · zod · MCP SDK · ATProtoMIT / BSD / ISC
PlatformCloudflare Workers, KV, Durable Objects, R2, Workers AI, Vectorize · ProbotMIT / platform

Repository: monorepo widespread (packages: near, bridge, bot, runner, protocol, delta-git, hermes, solana) and hermes-browser (the Hermes plugin with the wide_* tools). This plan is at docs/foreguild/plan.html.