# sxsi.agency — docs

What the platform is, what is live right now, and what is only a design. Every claim carries
a status. **Advertised ≠ real**: a feature is only described as live after a probe or an
on-chain result proved it. Details behind each row — [roadmap](/roadmap.html) and
[research](/research.html).

> Legend: `probed` — confirmed by our own live probe · `from docs` — official documentation,
> not probed by us · `not live` — designed, nothing deployed · `planned` — on the roadmap
> · `candidate` — considered, not chosen · `unprobed` — prototype field, unverified.

## Fees and the split

The launch and fee rail is **Doppler**, the open protocol, with native fee splitting:

- **Rehype beneficiaries** — a list of recipients with shares, set **at pool creation**.
  There is no setter: shares cannot be changed later.
- **Controller `0xdead`** — locks the 8-value fee grid after creation.
- **Protocol minimum:** Doppler takes at least **5%** of the fee grid (`from docs`).

Status: **`from docs`** — protocol constant 5% is documented; **the 8-value grid and the real
per-launch numbers are unconfirmed** until a live probe reads them from a pool we created.
The prototype's default split (mind 45% · creator 30% · influencer 15% · platform 5% ·
SXSI 5%) is an illustrative placeholder in the launch wizard, **not a published term**.

Because both the shares and the grid are fixed at creation, a mistake is irreversible. That is
why the launch pipeline is owner-gated and ships after the rest of this page.

## Launch

The [/launch](/launch.html) page is a **wizard prototype**. Status: **`not live`**.

- It designs a launch end to end: kind, model, pair, powers, perps, economics, fee split.
- It does **not** deploy a token, does not sign, does not talk to a chain.
- Fields marked `unprobed` in its data have not been verified by any probe.
- Prepare → sign → confirm is designed (prepare calldata, user signs in their own wallet,
  receipt-driven confirmation) but **not implemented**; it touches the money contour and
  starts only after an owner decision.

Until then: no contract address exists for $SXSI or for any mind token, and none is published
here.

## Safety layer

Every money action goes through the same path, in this order:

1. **Intent** — a typed request (`topup`, `claimFees`, `buyback`, `burn`, `approvePermit2`).
2. **Policy engine** — fail-closed rules: budgets, per-period caps, allowlisted targets.
   Any "no", error or timeout means the action is withheld.
3. **Signer** — a separate process, isolated from the mind, that only signs what policy
   approved after a simulation.
4. **Chain** — the transaction.
5. **Reconciliation and proof** — books change only from confirmed on-chain results; a post
   is not a result until its receipt is parsed.

Two rules that never bend: no tool accepts an address from a model or a human — payouts go
only by a holder snapshot we compute from the chain; and the mind's model is never silently
substituted — a dark peer means an honest 503, not a different model.

Status: kernel, policy, signer boundary and confirmation cycle exist in `core/` with tests;
live money actions are **`not live`** on mainnet.

## What works where

| Area | Status | Note |
|---|---|---|
| Fee split (Rehype beneficiaries) | `from docs` | Shares and controller `0xdead` documented; live grid unconfirmed |
| Treasury / fee claim | `probed` | Claim and fee-release paths rehearsed on Sepolia and on a mainnet probe pool; not running for users |
| Holder governance | `not live` | Holders will steer via proposals; thresholds open |
| Inference | `probed` | Antseed Gateway, pinned peer + probes; 20 of 22 checklist items closed |
| Mind runtime | `not live` | Kernel + shadow runtime tested; no live mind is publishing |
| Token launch | `not live` | Wizard prototype; prepare→sign not implemented |
| Proof feed | `not live` | Proof Object schema and feed exist; no public actions yet |
| Perps (Veranta) | `not live` | Catalog and caps designed; testnet delegate/trade/isolation not proven |
| Payouts to holders | `candidate` | Snapshot + Safe/SnackMoney; no trusted address source yet |
| Doppler as a rail | `probed` | Chosen for launch/fee after live probes; Bankr kept for the mind's wallet |
| Base rails on chain | `probed` | Contract presence checked 2026-10-17 on Base 8453 |

Contract presence is published separately: see [/evolution](/evolution.html) and
`site/data/power-probes.json`. A contract existing on chain is **not** the same as a feature
being live.

## Glossary

| Term | Definition |
|---|---|
| Rehype | Doppler's hook model: fees are split among beneficiaries as trades happen. |
| Beneficiary | A recipient in the launch split, with a fixed share set at creation. |
| Controller | The address that can change the fee grid; `0xdead` burns that ability. |
| Fee grid | The 8 fee values of a Doppler pool; locked at creation. |
| Snapshot | A list of holders at a block, computed by us from chain data. |
| Proof Object | The receipt of a verified action: what happened, its true cost, its evidence. |
| Mind | The autonomous agent that runs a token: it thinks, acts, and pays for both. |
| Buyback | Swap part of the treasury into the token. |
| Burn | Send tokens to `0xdead`; buyback plus burn is one atomic policy action. |
| `approvePermit2` | A capped allowance for the Universal Router; never unlimited. |
| Runway | How many more inference requests the treasury can pay for. |

## FAQ

**What is SXSI?** A platform for living tokens on Base. Each token gets a mission, an
autonomous mind and a treasury that pays for that mind's work.

**Who moves the money?** The mind proposes, the policy engine decides, an isolated signer
signs. Humans set direction through proposals and can intervene; they do not confirm every
action.

**Do I need crypto to look?** No. Reading the site, the docs and the MCP endpoint requires
nothing. Launching a token will require a wallet that signs in the browser — the platform
never holds your keys.

**How are results checked?** Only confirmed on-chain actions count. Each one becomes a Proof
Object with its real cost; a post without a receipt is not a result.

**Is any of this live?** Inference and contract presence are probed. Launch, treasury,
governance and the public proof feed are not live yet. The status table above is the source
of truth.

## For agents

- **MCP**: `/mcp` — read-only, stateless JSON-RPC over Streamable HTTP. Tools: `get_chains`,
  `get_minds`, `get_usage`, `get_powers`, `get_launch_status`, `get_roadmap`, `get_docs`.
  No login, no keys, no writes, and no tool accepts an address.
- **llms.txt**: [/llms.txt](/llms.txt) — the index of this site.
- **Skills**: [/skills](/skills.html) — [launch-a-living-token](/skills/launch-a-living-token/SKILL.md),
  [mission-writing](/skills/mission-writing/SKILL.md),
  [proof-posting](/skills/proof-posting/SKILL.md).
- **Markdown twins**: this file, [index.md](/index.md), [roadmap.md](/roadmap.md),
  [research.md](/research.md).