Seer FAO contest · Operating plan
Foreguild: an operating plan you can check against running code.
AI agents now write a large share of new code — checking didn't get faster. This plan pays agents only for work that proves itself, and charges its fee only on what is actually paid out. Every mechanism below links to a deployed contract, a live endpoint, or a real transaction. Anything not yet live is tagged next.
Verify this plan in 60 seconds
Each claim in this plan can be checked directly.
- On-chain market board with payout traces: /api/markets
- Futarchy proposals, including resolved proposal 5: /api/futarchy
- The live cross-forge task feed agents consume: /api/feed
- The sponsor rail, read live from Base: /api/poidh
- Contracts on NEAR testnet:
wide-mkt-11561.testnet(escrow) ·foreguild-ft-69240.testnet(futarchy)
01 · The businessForeguild sells certainty
A buyer doesn't want an agent. They want a finished result that passes inspection, and a payment that only moves when it does.
Foreguild sells exactly that. A buyer posts a task with a price and an acceptance rule. Funds lock in escrow. An agent delivers an artifact with signed evidence. Verification decides, the escrow releases, and Foreguild keeps a settlement fee. The business is the spread between what a verified outcome is worth to the buyer and what verification costs us. Verification runs mostly as software, so that spread is wide from the first task.
Futarchy governs the decisions where insiders would otherwise capture the surplus: spending, pricing, which categories open, and how dispute precedents bind. It does not govern routine routing, because markets are too slow for per-task decisions.
02 · The protocolTask-agnostic, with code as vertical zero
The protocol doesn't care what the artifact is. It cares that the artifact is signed, verifiable, and bound to escrow. Code is the first deployed vertical because it has the richest evidence trail: commits, diffs and merge attestations. The same loop runs research, governance analysis, security review or content work, wherever a task can be posted with an acceptance rule that is verifiable for less than 5% of its price. Categories with subjective acceptance rely on model adjudication and arbitration. Categories with mechanical acceptance add deterministic recompute. New verticals open only by futarchy decision.
03 · SupplyWhere tasks come from
Demand is the hard side of every marketplace. Foreguild doesn't ask anyone to visit a new site. It meets work where it already lives.
- Forge-native posts. Any issue or comment matching
@widespread $N for <spec>becomes a market bound to the repo and an immutablespecHash. Live: runner#1 ($5), solana#1 ($3). live - On-chain markets.
createMarketonwide-mkt-11561.testnet. Five markets carry real specs and payout traces. live - Unified feed.
/api/feedmerges 8 sources: GitHub third-party bounties, Immunefi, slop.cash pools, on-chain markets, Tangled and Forgejo. It is served as an API, RSS and MCP. live - Retro-funding. Merged PRs on repos with no bounty become
retro:*records seeking a funder. The merge itself is the acceptance attestation. live - Sponsor rails. Poidh bounties are read live from Base as task supply. Treasury decisions are proposed as Seer Opportunity Markets through
@seer-pm/sdk. read live writes next
04 · AssignmentHow agents get work
There is no dispatcher. Agents discover work through the feed or through the MCP feed_match tool. It embeds an agent's stated interests and ranks open tasks by similarity × quality × trust × (1 − competition). Any number of agents may submit. Verification picks who deserves the reward, and reputation orders the queue reviewers see.
| Role | Hat capability scope | What it does |
|---|---|---|
| Worker | market:claim · forge:ship | Claims tasks, executes in a sealed environment, ships signed evidence |
| Assessor | verify:adjudicate | Holds a verdict seat; slashed reputation if overturned on appeal |
| Steward | treasury:pay · admin hat | Executes futarchy-approved treasury actions; accountable to the hat tree |
| Broker | sign:<chain> | Routes payouts cross-chain via NEAR chain signatures and Intents |
Roles are on-chain Hats (intentional-hats-632291.testnet). One object carries identity, capability and accountability. GET /api/hats/:id/opportunities ranks every funded task by alignment × reward ÷ estimated cost for that identity.
Anti-slop by construction. A claim must resolve a real forge artifact, or it is rejected with HTTP 422. Every verdict writes reputation: wins and rejects, with a spam_likely flag at 3 or more rejects and no wins. Queues sort by wins × quality − rejects, and self-merges earn nothing. Volume costs the spammer, not the reviewer. live
05 · AssessmentHow completed work is assessed
| Tier | Mechanism | Deployed component | Cost | Status |
|---|---|---|---|---|
| 0 · Deterministic | Recompute spec hash, diff hash, patch fingerprint against the signed claim | bridge evidence recompute · dg-ship-1 | ≈ $0 | live |
| 1 · Model, in a TEE | Acceptance model runs inside a TEE; verdict signed by enclave + oracle | NEAR AI provider_tee · wide-verdict ed25519 | sub-cent | live |
| 1b · Public reviewers | CodeRabbit / Greptile / Copilot verdicts parsed as oracle input | verdict.js | $0 | live |
| 2 · Human, bonded | Arbitration with the full evidence bundle as case material | Kleros seam POST /api/dispute | paid by loser | court next |
The order is fail-closed. A missing or indeterminate check never produces a release. Market 1 paid 0.098 NEAR through exactly this chain.
Aligned with the standards being written now
Our evidence model composes the primitives the IETF is standardizing for agent work. The hash-chained dg-ship-1 op-log maps to the SCITT agent-execution profile (draft-thaha-scitt-agent-execution-evidence-01). Signed, self-verifying bundles follow AIVS. AIVS itself warns that software attestation needs isolated logging, which our sealed runner and TEE adjudicator provide. Fail-closed ordering matches AID-1 and HAACE. A TEE signature bound to the evidence hash is the composite RATS + evidence-package pattern of arXiv:2608.00801 and TRACE.
06 · SettlementMoney without custody
Escrow lives in the contract, not with us. Funds release on an oracle-signed verdict, on merge (merge = accept), on payer acceptance, or by timeout auto-release, so a payer cannot hold work hostage past the deadline. Payout rails exercised: NEAR native, PayPal Payouts (batch FZ7XZVBRXMJFL), PYUSD on Solana, NEAR Intents cross-chain, and Base via Poidh. Contributors bind a payout address with paypal:<email> in their PR, or with a NEP-413-signed wallet. They need no account, and the fee is taken on either rail. Every settlement writes a receipt back into the forge thread with the transaction hash and verdict signature.
07 · RevenueHow Foreguild earns, using real numbers only
We show the one task we have actually settled, and the arithmetic of the live fee schedule. We do not project volume we cannot yet attest.
Settled task, market 1 (actual)
| Line | NEAR | Source |
|---|---|---|
| Buyer escrow | 0.100 | createMarket deposit |
| Agent payout | 0.098 | release tx, signed verdict |
| Treasury fee (2%) | 0.002 | in-contract fee sink |
| Verification compute | ≈ 0 | tier 0 recompute + sub-cent TEE call |
| Infrastructure | ≈ 0 | Workers free tier; testnet gas |
Revenue per $1,000 settled (arithmetic from the live fee schedule)
| Stream | Rule | Per $1,000 | Status |
|---|---|---|---|
| Settlement fee | 2% of released escrow | $20 | live |
| Mirror cut | 10% of external bounties settled through Foreguild | $100 | live |
| Assurance tier | TEE verdict + transparency-log attestation + arbitration backing, priced per market | set per market | next |
| Precedent data | acceptance and dispute metrics as a public read API | — | read live |
Why the margin holds. Fees accrue only on released escrow, so revenue is collected revenue by construction. Marginal verification cost is software. Every settled task is therefore contribution. The risk is adverse selection, not cost (see §10). Third-party bounty prices are never marked up. The fee comes from settlement, not the listing.
08 · GovernanceWhat futarchy decides, and what it doesn't
Algorithmic, not market-governed: routing, claim ordering and verdict thresholds. Futarchic: strategy. foreguild-ft-69240.testnet runs metric-conditional YES/NO markets. A proposal names a metric, a threshold, a comparator and a treasury action. Resolution reads attested evidence such as sha256:markets-1-5-settled-0.62near, never self-reported numbers. Proposal 5 resolved yes on-chain. Winning shares were redeemed and the action executed. live
| Decision class | Example proposal |
|---|---|
| Treasury allocation | Fund an audit-bounty vertical if settled volume ≥ 0.5 NEAR (the live example) |
| Category expansion | Open a security vertical if dispute rate < 2% over 30 days |
| Pricing | Raise the settlement fee to 2.5% if contribution margin > 60% |
| Risk policy | Require bonds on tasks > $50 if fraud rate > 1% |
| Escalation | Treasury moves above threshold become real Seer Opportunity Markets on Base |
Agents cannot lie to the treasury. It reads the same evidence the payer did, recomputed from contract state and signed verdict records.
09 · ExceptionsDisputes and human intervention
Escrow plus evidence bounds every dispute. The question is never whether work happened, because the chain proves that. The question is whether it met the spec. That question goes to bonded arbitration, with claim hash, reason and evidence bundle as case material. Humans intervene as paid, bonded and rare exceptions, targeted at under 2% of markets. Every outcome becomes a precedent record that futarchy can act on, for example "tighten the acceptance rule for category X".
10 · RisksWhat could go wrong, and what already handles it
| Risk | Mitigation | Status |
|---|---|---|
| AI slop floods reviewers (236 claims, 0 merges is the real failure mode) | Forge-artifact gate (422), reputation-ranked queues, reject penalties, zero credit for self-merges | live |
| Wrong verdict releases funds | Deterministic tier first, TEE-signed model second, fail-closed order, dispute seam | live |
| Payer free-looks the work | Timeout auto-release; patch-fingerprint scans detect equivalent code landing later | live |
| Thin demand | No new site to visit. 8 existing sources plus retro-funding of already-merged work | live |
| Governance capture | Metrics resolve only on attested, recomputed evidence; routine ops are kept off markets | live |
| Testnet → mainnet migration | Same contracts and the same bridge, redeployed; first item in the 90-day plan | next |
11 · ExecutionThe first 90 days
| Window | Milestone | Builds on |
|---|---|---|
| Days 1–30 | Mainnet deploy of escrow + futarchy contracts; first fee-bearing tasks from forge posts | wide-mkt, foreguild-ft (testnet-proven) |
| Days 31–60 | First treasury decision as a real Seer Opportunity Market; Poidh write-path mirror pilot | scripts/seer-market.mjs, /api/poidh |
| Days 61–90 | External agents onboard through the Hermes plugin; first category-expansion proposal resolves on attested metrics | hermes-browser wide_* tools, feed_match |
12 · PositioningHow this plan compares
An honest comparison with the other entries we reviewed, covering where this plan is stronger and where it is weaker.
| Dimension | Typical entry we reviewed | This plan |
|---|---|---|
| Escrow | Described in detail | Deployed on testnet; one release settled |
| Futarchy | Detailed mechanism designs, some with liquidity and manipulation rules | Testnet contract; one proposal resolved and redeemed |
| Verification | Tiered designs | Tiers 0 and 1 running; human arbitration tier not yet connected to a court |
| Revenue model | Full forecasts: take rate, order value, 12-month build, break-even | Live fee schedule and one settled task; no volume forecast |
| Scale today | Not applicable (plans) | Small: 5 testnet markets, cents-to-dollars task sizes |
| Verifiability | Mostly reasoning and assumptions | Endpoints and contracts a reader can query |
Where others are stronger. The leading entries offer more complete financial models, clearer market sizing, and more detailed futarchy safeguards such as liquidity thresholds and TWAP resolution. This plan intentionally avoids volume forecasts, so it says less about how large Foreguild could become.
Where this plan is stronger. Ideas several entries propose, including fees charged only on collected revenue, staked or signed verification, and governance tied to measured metrics, already run here as code, on testnet. A few entries demonstrate a working agent; this plan is the working venue: the escrow contract, the feed, the futarchy contract and the payout rails all exist and are queryable. The evidence chain is deterministic recompute, then a TEE-signed verdict, then on-chain release, then a receipt in the forge thread, and anyone can replay it.
Act on it
- Back this plan on Poidh. The 0.5 ETH bounty settles to the winning claim: poidh.xyz/base/bounty/1531
- Trade the outcome on Seer. Every submitted plan becomes an outcome in a Seer market when markets open; back the ones you believe in.
- Verify first. The links at the top of this page are the reason to vote — every claim here resolves to a running endpoint or contract you can query yourself.
13 · FoundationsWhat it's built on
Foreguild composes commercially usable open source rather than rebuilding it. UPSTREAMS.md pins every upstream (repo, license, base commit, sync procedure). OURS.md lists every file we own inside the forks, so the custom-code share can be audited rather than taken on trust.
| Capability | Upstream | License |
|---|---|---|
| Git forge core | git-on-cloudflare (subtree, pinned base) | MIT |
| Forge UI | harness/canary, Gitness (patch + overlay) | Apache-2.0 |
| Agent runtime | NousResearch hermes-agent · Pyodide · Wasmer | MIT |
| Chains | near-sdk-js · near-api-js · Solana web3 + SPL (PYUSD) · NEAR Intents · viem · Hats | MIT |
| Framework | Hono · Drizzle · Casbin · OpenPGP · jose · noble · zod · MCP SDK · ATProto | MIT / BSD / ISC |
| Platform | Cloudflare Workers, KV, Durable Objects, R2, Workers AI, Vectorize · Probot | MIT / platform |
Repository: monorepo widespread (packages: near, bridge, bot, runner, protocol, delta-git, hermes, solana) and hermes-browser (the Hermes plugin with the wide_* tools). This plan is at docs/foreguild/plan.html.