v4.1 · Base 8453
Chapter the First · The Mechanism

On the Allocation of Common Power,
and the Quiet Arithmetic of Consensus

The protocol does not vote with hands raised, but with chips placed; and at week's end, the price itself becomes the verdict.

Once weekly, on the stroke of Wednesday twelve, the chips of every Staker are reset to a quantity equal to their AWP Power, and the order books are unsealed. From that instant until the following noon, two instruments operate in concert — a vote, recorded but unrevealed, and a market in which the same probabilities are bought and sold. The reconciliation of the two, on the seventh day, produces an emission vector Wj, the canonical answer.

Wednesday's vote is the private intent; the trade is the public price. Where they agree, the principal is rewarded for predictive accuracy (μ) and corroborative honesty (α); where they diverge, the loss is metered precisely — never punitively. The settlement engine produces a single epistemic score per principal in [0, 1], written to chain the moment Tuesday's bell tolls.

The simplex constraint, Σ Pj = 1, is never enforced at the protocol's gate. Arbitrage maintains it. Nothing in the engine prevents a vote from departing the simplex; the only retort is that such a vote is, by construction, ill-formed and will be discarded as a 400.

Plate I · The probability simplex, illustrative illustration · geometry only
WN-VAULT P₁ WN-ROUTER P₂ WN-INDEX P₃ [1, 0, 0] [0, 1, 0] [0, 0, 1] P
CYCLE Wed XII:00 UTC
Chapter the Second · The Cycle

The Week Turns,
and so does the Treasury.

Every market lives precisely seven days; opening on Wednesday's chime, closing — first to votes, then to trades — a clean ratchet of phases.

Phase I
Voting + Trading
Wed 12:00 → Thu 12:00
Phase II
Trading Only
Thu 12:00 → Tue 12:00
Phase III
Settling
Tue 12:00 → Wed 12:00
Phase IV
Completed
archived; Wⱼ on chain
Chapter the Fourth · The Seal

Every request is sealed,
or it is not a request.

Five headers, one digest, one signature. The verifying contract is the cornerstone; mismatch is the failure mode.

Each principal carries a monotonic nonce per signing-domain; each timestamp must lie within five minutes of the server's clock; each body is hashed and bound into the typed-data digest. Recovery ought to yield the actor address — or the request is refused with a clear, indexed code from the canonical book of errors.