THE FLOOR BUYER

One purchase.
Many checkpoints.

Every acquisition walks this state machine, one state at a time, with a durable record at each step. Right now nothing walks it at all: there is no verified deployment, so the buyer only accumulates.

NEXT TARGET — LOWEST-PRICED zkSNARK ON ZILKROADLIVE · READ-ONLY

Reading the live Zilkroad floor…

CURRENT STATEPRE-VERIFICATION
ACCUMULATING

The strategy's first operational state: accumulate verified creator receipts while unverified marketplace functionality stays disabled. No purchase order exists, so no state below is active.

Main path

ACCUMULATING (pre-verification)current — the entry gate into the pipeline is closed
DISCOVEREDa valid candidate listing was found by a scan
VALIDATEDlisting re-checked: valid, executable, within collection
FUNDS_RESERVEDsettled funds reserved; pre-existing float may skip the export leg
EXPORT_AUTHORIZEDcapped source-chain export authorized
EXPORT_SUBMITTEDexport transaction submitted
SOURCE_CONFIRMEDsource chain confirmed the export
CONVERSION_PROCESSINGconversion to ZEC in flight
ZEC_SETTLEDZEC reconciled and spendable
LISTING_REVALIDATEDlisting still the cheapest valid one at purchase time
PURCHASE_SUBMITTEDpurchase order submitted to the marketplace
PAYMENT_CONFIRMEDpayment confirmed — paid is not yet owned
CUSTODY_CHECKINGcollectible identity and destination being verified
OWNERSHIP_ATTESTEDoperator attests custody (weaker evidence class)
OWNERSHIP_INDEPENDENTLY_VERIFIEDindependent verification, where supported
COMPLETEDconfirmed holding enters the archive

Terminal & intervention states

Failure is a first-class outcome, not an exception. Any of these can end or pause a purchase; a custody mismatch pauses new outflows for reconciliation.

REJECTED
EXPIRED_UNFUNDED
CANCELLED_UNFUNDED
REFUND_PENDING
REFUNDED_CONFIRMED
PAYMENT_STATUS_UNKNOWN
CUSTODY_MISMATCH
MANUAL_RECONCILIATION
FAILED_NO_FUNDS_SENT
Original illustrative scene: the floor selector scanning listings on a conveyor.
The floor selector — original illustrative scenery
GATES BLOCKING THE NEXT TRANSITION
  • Marketplace purchase path unverified. Zilkroad's market is live and its public read endpoints (market/stats, market/tokens) are verified read-only observations. No purchase API has been verified and no purchase is authorized: marketplaceBuyVerified is false.
  • Conversion route unverified. The ETH → ZEC route and its refund path are untested with exact identities. routeVerified and refundVerified are false.
  • Safety caps unconfigured. Price ceiling, max purchase size, daily export cap and outstanding exposure are all null. priceCapsConfigured is false.

Full gate register with required evidence: /status.

SAFETY LIMITS
Absolute all-in price ceilingNot configured
Max concurrent acquisitions1
Max outstanding exportNot configured
Max daily exportNot configured

“Not configured” blocks activation — it never defaults to unlimited.

WHAT “REFRESH” DOES

A public Refresh re-reads indexed data. It cannot spend treasury funds, submit purchases, or advance any state — only the protected worker, inside the approved policy and funding boundary, moves money. There is no public button that spends.