Product and buyer flow
Approved buyers authenticate, request a quote, provide bounded JSONL input, set a budget cap, submit through the native API, follow every job state, retrieve results, and optionally receive a signed webhook.
a development-stage exchange implementation
Current advertised runtime projection: Candle/Metal on Apple Silicon only · exact supported job/model cells come from the runtime matrix.
No live-money, market-liquidity, signed-distribution, or physical-fleet claim. Local validators are prerequisites, not product proof.
apple silicon on metal · this is the only currently advertised production runtime projection; physical fleet and sustained-performance gates remain open
$0.00029
usd · per 1,000 units · boot reprice from measured supplier economics (control/pricing.go), not a competitive-price or margin claim
the agent can contribute eligible work while enabled · real supplier earnings and net hourly value have not been demonstrated
eligible work uses the same quote, task, verification, and settlement path as the native API
There is no public download yet. The supplier agent installs with one command from the alpha build · the former macOS menu bar app is not present in this tree (only the seatbelt sandbox profile remains), and a notarized public release is not available.
the development catalogue is not public distribution
Approved buyers authenticate, request a quote, provide bounded JSONL input, set a budget cap, submit through the native API, follow every job state, retrieve results, and optionally receive a signed webhook.
An approved Apple Silicon supplier runs the sandboxed agent. Eligible work is admitted only through the pinned Candle runtime on Metal, with quiet-hours, memory, thermal, and operator controls enforced.
Only embed with all-MiniLM-L6-v2 and batch_infer with the pinned Llama 3.2 1B revision are advertised. No other workload or model cell is promised.
Task receipts, attempt identity, model revision, known-answer sampling, redundancy, finalization, ledger entries, webhook events, and result retrieval form the trace. Conditions and failure records remain visible to the operator.
Authenticated tenant checks, short-lived artifact access, revocable credentials, encrypted webhook secrets, attributed emergency actions, data export, deletion tombstones, and restore replay are technically exercised. Qualified review remains open.
Performance receipts are device, source, model, cache, load, and thermal specific. They describe one accessible Mac under measured conditions, not fleet capacity, a service-level objective, or guaranteed buyer latency.
Private test canary only. No real payments, no public supplier fleet, no persistent external staging proof, no 24-hour qualifying soak yet, and no qualified legal, privacy, security, payments, operations, or release approval.
Accounts and workers are allowlisted. Capacity, concurrency, budgets, held shadow payouts, and workload shapes are bounded. Operator kill switches can pause intake, dispatch, finalization, webhooks, or payment paths.
The source repository holds the API contract, runbooks, privacy drafts, canary terms, supply-chain policy, and exact evidence validators. Health is reported directly by the control plane.