Roadmap

Built free until strangers want to pay.

The thesis is simple: spend nothing until the product earns it, then spend only on what money requires. Every phase below lists what gets built, what it costs per month, and the exit criteria that prove it worked.

Where we are

Phase 0 — the demo you’re using

This entire site talks to a real local gateway. Everything below already works — don’t take our word for it, each line links to where you can verify it.

Billing that proves itself

Hold → settle/void/under_review with a receipt per request, on a persistent SQLite ledger. Idempotent routing: same key, never double-charged.

Verify in the console →

A market that moves

Live simulated fills, ask updates, and health flips over SSE — with per-offer depth and price history. Rate limiting and request ids on every call.

Watch the tape →

Sellers get paid

List spare capacity, watch earnings accrue per settled fill, pay out to the workspace balance. Status page with component health and p50/p95 latency.

Seller dashboard → · Status →

Also in the repo: scoped API keys with budgets and ceilings, the fallback catalog, receipts ledger with cursor pagination, CSV export, and an optional live BSC passthrough mode (SURPLUS_ONLINE=1, still $0 — public RPC).

The path

Four phases, each with a finish line

Phase 1 — Persistent beta

$0–5 / month
  • SQLite or free-tier Postgres replaces the in-memory store; the repository interface stays.
  • Email magic-link auth (free tier); wallet sign-in deferred to Phase 2.
  • Gateway on a free container tier, site on free static hosting; compose stays local-only.
  • Real provider passthrough for one chain — public BSC RPC needs no paid plan.
  • Usage metering table with daily rollups — the foundation for billing correctness.

Exit: 10 external users route real (free-tier) RPC traffic for two weeks, and receipts reconcile to the micro-USD.

Phase 2 — Real money

$50–150 / month
  • USDC deposits on Solana: deposit intents plus a finality watcher (free-tier RPC is enough).
  • Seller credential vault with envelope encryption — non-negotiable before touching real API keys.
  • Seller probe and health-check workers on a Postgres-backed queue.
  • Seller payouts, manual weekly batch first, automated later — fees only.
  • Provider terms-of-service attestation flow; per-key token-bucket rate limits.

Exit: the first real USDC settles buyer → platform → seller with a receipt that matches the ledger exactly.

Phase 3 — Market quality

scales with usage
  • Dynamic ask suggestions — clearing-price hints from recent fills.
  • Offer health scoring with automatic failover drills.
  • Catalog beyond RPC: LLM tokens (discount-off-list), search APIs.
  • TS/Python SDKs and an OpenAPI spec generated from the contract doc.
  • Public status page (a real one — the demo’s is already up) and Prometheus metrics.

Exit: asks track the clearing price without hand-tuning, and failover is boring.

Phase 4 — Trust & scale

compliance budget
  • SOC 2-lite hygiene: audit log, key rotation, least-privilege internal tooling.
  • Multi-region router with latency-aware offer selection.
  • Dispute flow for under_review receipts — auto-refund after a fixed window.
  • Treasury policy: never custody more than 7 days of seller earnings.

Exit: an auditor and a skeptical seller both find the ledger boring.

The honest part

What it costs, phase by phase

PhaseMonthlyOne-timeWhat the money unlocks
0 — Demo $0 $0 The whole product shape, runnable locally. You are here.
1 — Beta $0–5 $0 Persistence, real auth, real traffic from strangers on free tiers.
2 — Real money $50–150 ~$300 USDC settlement and a credential vault. The one-time cost is the legal template review for provider terms — the one thing you can’t engineer around.
3–4 — Quality & trust usage-scaled audit budget Market intelligence, multi-region routing, dispute handling, compliance hygiene.
Non-negotiables

What we never cheap out on

Billing correctness

Holds can never settle above the key’s ceiling, every request gets a receipt, and the ledger reconciles nightly. A billing bug is an existential bug.

Credential security

Seller keys are encrypted at rest from the first day of real money — never logged, never shown to buyers, envelope-encrypted in a vault.

Provider terms

Every listing shows the provider’s resale notice and sellers attest before listing. One lawsuit costs more than the entire infrastructure budget.

Try the Phase-0 demo

Fund, mint, route, list, get paid — locally, in two minutes.

Open the console

Engineers: the full working doc is docs/ROADMAP.md in the repo — this page is its readable twin.