diff --git a/public/assets/common.js b/public/assets/common.js index 63c87c1..8f70aa2 100644 --- a/public/assets/common.js +++ b/public/assets/common.js @@ -32,6 +32,7 @@ window.IAP = (function () { + 'How it works' + 'Ad packages' + 'Live ledger' + + 'The contract' + 'Members' + '…'; document.body.prepend(nav); diff --git a/public/assets/contract.js b/public/assets/contract.js new file mode 100644 index 0000000..4a46cd0 --- /dev/null +++ b/public/assets/contract.js @@ -0,0 +1,13 @@ +// Contract page: inject live address, chain, explorer + verified-source links. +(async function () { + await IAP.renderNav('contract'); + const c = await IAP.getConfig(); + const $ = IAP.$; + $('cAddr').textContent = c.contract.slice(0, 10) + '…' + c.contract.slice(-6); + $('cChain').textContent = c.chainName; + $('mockAddr').textContent = c.contract.slice(0, 18) + '…'; + $('lnkExplorer').href = c.explorer + '/address/' + c.contract + '#code'; + const src = 'https://repo.sourcify.dev/contracts/full_match/' + c.chainId + '/' + c.contract + '/'; + $('lnkSource').href = src; + $('lnkSource2').href = src; +})(); diff --git a/public/contract.html b/public/contract.html new file mode 100644 index 0000000..0ee2007 --- /dev/null +++ b/public/contract.html @@ -0,0 +1,135 @@ + + + + +The contract | InstantAdPay + + + + + +
+
+

The contract, in plain language.

+

Every dollar on this platform moves through one smart contract. This page explains + what it does, what nobody can change, and exactly what powers we kept. Verify every claim + yourself. That is the point.

+

+ address: … + … +

+

+ Raw contract on the explorer ↗ + Verified source code ↗ +

+
+ +
+

The six laws the code enforces

+ +
+ +
+
+

What the operator CAN do

+
    +
  • Add ad packages to the catalog (price floor $1, ceiling $500)
    • +
  • Queue a price change, which waits behind a public 24-hour timelock before anyone can apply it
    • +
  • Retire a package from sale, and reactivate it later
    • +
  • Rotate the fee-receiver, ad-engine, and owner addresses (key-loss insurance)
    • +
  • The ad engine can burn credits, but only as your campaigns consume delivery
    • +
+
+
+

What the operator CANNOT do

+
    +
  • Change any split percentage or qualification threshold
    • +
  • Pause, upgrade, or replace the contract
    • +
  • Hold, redirect, or claw back anyone's payout
    • +
  • Mint credits, take credits, or touch anyone's membership record
    • +
  • Move a price outside the $1 to $500 bounds, or skip the 24-hour notice
    • +
+
+
+ +
+

Where every purchase goes

+
+
50%
direct sponsor
+
20%
level 2
+
10%
level 3
+
20%
platform
+
+

On a $20 package: $10.00 to the direct sponsor, $4.00 to level 2, $2.00 to level 3, + $4.00 to the platform. Rounding dust of a few billionths of a cent goes to the platform wallet so the + books always balance to zero. When a level has no qualified recipient, that share visibly passes up + to the next qualified person; if none exists within 25 candidates, it goes to the platform. Every one + of these movements is an event on the live ledger.

+
+ +
+
+

Dollar prices, POL settlement

+

Packages are priced in dollars and settled in POL using the Chainlink POL/USD + oracle at the moment of purchase. If you send slightly too much because the rate moved, the excess + refunds to you in the same transaction. If the oracle ever goes quiet, the contract keeps selling + at its last fresh price for up to 24 hours, then new purchases pause until the feed returns. + Settled money, credits, and memberships are never affected by an oracle outage.

+
+
+

Nobody can stall it

+

Payouts are pushed with a strict gas allowance. A wallet that refuses to + accept payment is simply treated as unqualified and its share passes up. No escrow forms, no + purchase reverts, nobody waits on anybody. One practical note: use a normal wallet address for + payouts. Some exotic smart-contract wallets cost more gas to receive than the allowance and would + be passed over.

+
+
+ +
+

How it was tested

+

Before deployment the contract passed a suite of 24 tests covering every split + scenario, the pass-up walk to its exact 25-candidate boundary, oracle outages and price swings, + refunds, hostile recipient wallets, and catalog rules. On top of that, an invariant fuzzer ran + 128,000 randomized transactions and confirmed after every single one: the contract balance stayed + zero, every wei in equaled every wei out, credits equaled purchases minus delivery, and nobody was + qualified without earning it. The full specification was then audited line by line against the code. + The source you see at the verified-source link is byte-for-byte what runs on chain.

+
+ +
+
+

Do not trust this page. Check it.

+

The whole reason this platform exists is that you should + not have to take anyone's word, including ours. Open the source, open the ledger, click a + transaction.

+ Read the verified source + Open the live ledger +
+
+
contract
+
+
compiler checkexact match
+
bytecode checkexact match
+
upgrade pathnone
+
pause switchnone
+
+
+
+ + +
+ + + + diff --git a/public/index.html b/public/index.html index 45b0daa..b6a32ca 100644 --- a/public/index.html +++ b/public/index.html @@ -5,7 +5,7 @@ InstantAdPay: advertise and earn, locked in code - + @@ -191,6 +191,7 @@

Level 1 is open to every member: your direct referrals each pay you 50 percent of every package they ever buy, straight to your wallet.

@@ -344,8 +345,8 @@ - - - + + + diff --git a/public/ledger.html b/public/ledger.html index 5447535..22be73c 100644 --- a/public/ledger.html +++ b/public/ledger.html @@ -5,7 +5,7 @@ Live ledger | InstantAdPay - +
@@ -25,7 +25,7 @@
InstantAdPay · how it works · contract source ↗
- - + + diff --git a/public/my.html b/public/my.html index f8b54d6..d0c235a 100644 --- a/public/my.html +++ b/public/my.html @@ -4,7 +4,7 @@ My account | InstantAdPay - +
@@ -130,8 +130,8 @@
- - - + + + diff --git a/server.js b/server.js index 96ebdaa..7bdbd96 100644 --- a/server.js +++ b/server.js @@ -337,6 +337,7 @@ const server = http.createServer(async (req, res) => { if (req.method === 'GET') { if (p === '/') return sendFile(res, path.join(PUBLIC_DIR, 'index.html')); if (p === '/ledger') return sendFile(res, path.join(PUBLIC_DIR, 'ledger.html')); + if (p === '/contract') return sendFile(res, path.join(PUBLIC_DIR, 'contract.html')); if (p === '/my') return sendFile(res, path.join(PUBLIC_DIR, 'my.html')); const safe = path.normalize(p).replace(/^([.\\/])+/, ''); const file = path.join(PUBLIC_DIR, safe);