01 / Integrate
Command-bound APIs
Credentials are scoped to a Workspace and Environment. Hosted interventions are explicit capabilities, not hidden admin shortcuts.
Infrastructure for consequential auctions
Auction logic you can prove.
A headless engine for products where correctness, authority and a reconstructable record matter. Your experience on top. Deterministic mechanics underneath.
Isolated environments Explicit authority Verifiable evidence
One boundary at a time
Compose a product.
Keep the mechanism deep.
Use narrow APIs for commands, reads and evidence without moving auction authority into a browser or integration layer.
02 / Isolate
Separate execution cells
Sandbox and Production are distinct security boundaries. A credential issued for one cell is rejected by every other cell.
03 / Operate
Bounded by construction
The initial Sandbox policy permits two concurrent open lots and twenty first-time lot provisions per UTC day.
A browser is not an auctioneer
Human access stops at the platform boundary.
People authenticate to the control surface. Services receive narrowly scoped, separately held credentials. The bid path validates authority locally without consulting platform state mid-bid.
Person→Platform→Credential custody→Engine
Evidence is an interface
Resolve first.
Explain from the record.
Deterministic transitions and signed evidence let another system reconstruct what happened without trusting a dashboard screenshot.
Start in Sandboxcommand.authorized
bid.accepted
proxy.resolved
evidence.signed
sha256:d47f…81a2