Read this before you trade

Rules of the Game

Walendria Protocol has no admin, no support desk, and no override switch. Every outcome is produced by the contracts exactly as written, executed by whoever presses the button — including you. This page is the definitive rulebook: what each role is allowed and expected to do, and every operation available to them, cross-referenced to the whitepaper sections that define it.

Who's who

Four kinds of participants exist, and none of them need permission from anyone to act in their role.

Universal rules — these apply to everyone, no exceptions

• Never send payment directly to a seller's wallet. A direct transfer is not a listing payment, is not protected by the Integrity Bond, and gives you no dispute rights. The only real payment is calling pay() on the Settlement contract for a specific listing and slot.
• 72 hours is the floor, not a suggestion. No listing can offer a shorter completion window (Section 2.5) — the contract itself rejects the attempt.
• A dispute freezes the window. Once opened, a slot can never be finalized by window expiry again — only by a price threshold, a poke, or a mutual close (Section 2.5).
• No single trade ever resolves anything. Price can move to 99%+ in one transaction and nothing happens immediately — only one full hour of cumulative time spent at 93% or higher on one side resolves a case (Section 2.6.5). This is deliberate: it guarantees everyone a real window to react to any single large trade before it can become final.
• Mutual close is a one-shot, fragile option. It only works while no third party has ever held a share on either side of that dispute. The instant any outside address buys in — even one wei of shares, even if they immediately sell back out — this option is gone forever for that dispute (Section 2.6.10).
• Nothing here is admin-reversible. There is no override, no chargeback, no support ticket. Whatever the contracts compute is final.
• Every listing price is capped.The protocol enforces an immutable per-transaction value hardcap — a deliberate blast-radius ceiling on any single bug, not a judgment about what counts as a “reasonable” price (Section 9). createListing reverts above it, and it can only be raised by a future redeployment at a new address, never an admin write.

How to be a correct Buyer

Being a “correct” buyer means understanding that the protocol only protects money that actually passed through it, and that you carry the responsibility of acting before the completion window closes.

1. /listings shows every listing ever created (price, seller, slot count, completion window), scanned straight from on-chain events — but a listing carries no description of what's actually being sold, only numbers. Confirm the exact listing ID, price, and slot index with your seller yourself (Discord, a marketplace post, a direct message, whatever channel you already used to agree on the sale) before paying.
2. Before paying, check the slot's status. Only an Empty slot can be paid — Payment confirmed, Disputed, or Removed all mean that slot is no longer available to you.
3. Pay via Settlement.pay(listingId, slotIndex), sending at least the full listing price. Send less and the entire call reverts — no partial payment, no partial state change. Send more and the excess is refunded automatically in the same transaction.
4. The moment your payment confirms, the completion window starts (72 hours minimum, sometimes longer if the seller set it that way). The seller receives 99.5% of your payment immediately — this is not a refundable escrow sitting in the contract; it is real, spendable money in the seller's hands from the instant you pay.
5. If the seller delivers as agreed, you don't need to do anything else. Once the window expires with no dispute opened, anyone (including the seller) can call finalizeExpiredSlot, which recycles the slot back to Empty so the seller can resell it — it does notreturn the seller's bond (that capital was never at risk and stays locked behind the slot). You can also finalize your own purchase early via confirmCompletiononce you're satisfied, which does the same thing before the window is up.
6. If something is wrong, you must act before the completion window expires. Call fundGuiltySideto contribute toward half the listing price. Anyone else may also contribute — the instant the cumulative total reaches that threshold, the dispute opens automatically in that same transaction. Miss the window and this option disappears forever for that sale: the slot simply recycles for the seller's next buyer, with no dispute and no restitution. Funding below the threshold is never lost. If the window closes before the cumulative total reaches half the price, the dispute never opens, and every contributor can pull their exact contribution back with reclaimGuiltyFunding — it was locked while the window was live, not spent.
7. Once the dispute is open, you can trade shares yourself in the Spectral Market — buying Guilty shares if you believe the case should resolve against the seller, Innocent if not. This is a real bet: you can profit if the market ends up agreeing with you, and you can lose your stake if it doesn't. Note that the initiating 0.5× price you funded is locked as the market's opening liquidity (as is the seller's matching stake) — it can't be sold back mid-dispute, only redeemed or forfeited at resolution. Only shares you buy afterward on the open market are sellable.
8. Submit evidence (screenshots, messages, photos, anything relevant) at any time through the dispute's evidence panel — it's hosted on IPFS and referenced on-chain, visible to everyone, and the protocol never judges which side's evidence is “true”; the market does that through trading.
9. If you and the seller are the only two addresses that have ever held shares on either side, you can both vote the same verdict via mutualClose to resolve immediately instead of waiting on price discovery.
10. If the case resolves Guilty, your restitution does not arrive automatically — it is a pull payment. Call IntegrityBond.claim()yourself once it's owed to you.
11. If you hold winning-side shares once any dispute resolves (Guilty or Innocent, whichever side won), call SpectralMarket.redeem()to cash them out at up to $1 each — capped at whatever the market's pool still holds if a heavily-traded dispute left it short (Section 2.6.9).

How to be a correct Seller

Being a correct seller means keeping enough bond posted, delivering within the window you agreed to, and understanding exactly what happens to your bond in either outcome.

1. Deposit enough into your Integrity Bond before creating a listing — every listing locks 1.5× its price per slot, non-withdrawable while it's backing that listing. Capital not currently backing anything (“Free IB”) is yours to withdraw whenever you like.
2. Create the listing with a price, a slot count, and a completion window of at least 72 hours. Share the resulting listing ID with your buyer directly.
3. Once your buyer pays, you receive 99.5% of the price immediately (the remaining 0.5% is the protocol's Developer Fee) — this money is genuinely yours from that instant, regardless of what happens afterward. It is not returned to the buyer as part of any later dispute; a Guilty verdict pays restitution out of your bond, not by clawing back this payment.
4. Deliver what you agreed to, within the completion window.
5. Running late, or want to reassure a buyer? You can extendany slot's completion window with extendWindow from the listing's slots page — works both before a buyer pays (pre-setting a longer window) and during a live sale. It only ever lengthens the window (never below the 72h floor, never shortens it), so it can only ever give the buyer more protection — a visible good-faith signal, at no cost but your own bond staying locked a little longer.
6. If no dispute opens before the window expires, anyone calling finalizeExpiredSlot (or your buyer calling confirmCompletion early) recycles the slot back to Empty — ready for your next buyer, with its bond still locked behind it. You keep the 99.5% payment; the bond is not returned here, because it was never spent and stays put backing the slot for its next sale. This is the entire, correct happy path: the same slot resells indefinitely on this bond. When you actually want that capital back, reclaim it from any Empty slot with reduceSlots or closeListing.
7. If a dispute opens against you, half your locked bond (0.5× the price) is drawn out automatically and becomes your own starting Innocent-side position in the Spectral Market — you are structurally forced to have real capital defending your own case, not just words.
8. You may buy more Innocent shares yourself, submit evidence, or propose a mutual close (only while eligible — see the universal rules above).
9. If the case resolves Innocent, your remaining locked bond (the other 1× the price) unlocks back to your Free IB. Combined with the 99.5% you already received at payment, this is your full, correct payout for a legitimate sale that was wrongly disputed.
10. If the case resolves Guilty, that remaining locked bond is slashed straight to the buyer as restitution — you do not get it back, on top of whatever you already spent delivering nothing.
11. Withdraw anything sitting in your Free IB at any time — only capital actively locked behind a listing is unavailable.

Operations at a glance

Every on-chain action available across the protocol, in roughly the order they occur.

Every operation above has a button somewhere in this app — finalizeExpiredSlot and confirmCompletion on a listing's slots page, reclaimGuiltyFundingon the dispute page for any sale you funded below the threshold, and the rest where you'd expect them. Anything can also be called directly against the contract (a block explorer, or your own script) if you prefer — the protocol never depends on this site being the one to press the button.

Mistakes that cost people money

• Paying a seller's wallet directly instead of through pay() — this is never protected, and there is no recourse.
• Forgetting to dispute before the completion window expires — once it's gone, it's gone: the slot simply recycles for the seller's next sale and you have no recourse, regardless of the truth.
• Assuming one big trade settles a dispute in your favor — it never does; only accumulated time at 93%+ does.
• Trading against your own dispute from a second wallet — this doesn't win you anything and permanently burns mutual-close eligibility for both real parties.
• Expecting a support desk to fix a mistake — there isn't one, and there never will be. Read this page again before you act if you're unsure.

This page describes the protocol exactly as coded and deployed — every rule above has a corresponding line of Solidity behind it, and the adversarial properties (no instant resolution, the mutual-close third-party lock, the self-dealing capital floor, permissionless poke resolution) have all been proven live on Gnosis Chiado, not just in local tests. See Articles for deeper technical write-ups on specific mechanisms.