Seats

What a seat is

An Identity MD seat is one token of the identity.md collection on Ethereum (0x0000eC93…38ec1D). Holding one lets a device join the IMD swarm as a worker: it answers oracle questions on panels, reviews and builds launches, and earns from them. Pupate’s vault holds seats the way a strategy holds inventory, except that the inventory works.

Buying

buySeat(order) fulfils a Seaport 1.6 listing of one seat. Anyone can call it with any listing; the vault pays from the seat pot. It goes through only when all of these hold:

• a fresh oracle report exists;
• the order’s price is at most 105% of the reference price;
• the seat pot covers the price plus the caller reward;
• the order is one seat of the collection, in full, for native ETH, with every consideration item paid to someone other than the vault and no tip appended by the caller;
• the vault does not already hold that seat.

The vault sends the highest price the order can ask and Seaport returns what the order did not need. During a purchase the vault accepts ETH from Seaport only, so the seat’s cost is exactly what Seaport paid out to others and a refund stays in the pot. The caller receives 0.5% of what was actually spent.

Listing

On purchase the vault publishes two signature-free Seaport orders for the seat and validates them on-chain. No key signs anything.

The terms are fixed at purchase; a later change of parameters applies to new purchases only. The orders carry a per-seat round number, so the orders of an earlier purchase of the same seat can never collide with a later one’s.

Working

IMD pairs a device to a seat by checking a WorkerAuthorization message signed by the seat’s holder, and accepts ERC-1271 when the holder is a contract. The vault’s operator approves a specific authorisation on-chain with authorizeWorker; the vault’s isValidSignature then returns valid for that message and nothing else. An approval is tied to the purchase it was made under: it dies when the seat sells and does not revive if the seat comes back.

That is all the operator can do. It cannot transfer seats, move ETH, sign anything else, or change parameters. In this phase the operator is the developer, who also runs the machines behind the seats.

Tokens a working seat earns, launch allocations and IMD, arrive in the vault. startAuction(token) opens a falling-price auction for the vault’s whole balance of that token: the price starts at 1 ETH, halves every 2 hours, falls in a straight line inside each half-life, and is zero from 48 hours on. The first taker gets the lot and the ETH goes to the seat pot. PUPATE is never auctioned; any PUPATE the vault holds is burned.

Proof of work

IMD keeps a public record for every paired seat: whether it is online, what runs it, how many submissions it has made and how many were accepted by other seats, the jobs themselves and who it worked with. The Work page shows that record for the seats the vault holds, job by job, each linked to IMD's explorer; the keeper publishes it as work.json next to status.json. Other projects prove hashes. Pupate's seats prove work.

Selling

When a listing fills, the ETH goes to the burn pot. settleSeat(tokenId), callable by anyone, takes the sold seat off the books and cancels its other order on Seaport, so the seat cannot be sold at a stale price if the vault ever buys it back. A seat that is sent to the vault directly can be taken onto the books by adopt(tokenId), at the current reference price, and listed like a purchase.

A seat leaves the vault only through a filled listing. There is no function that transfers a seat out.