Coordination is not a mood and it is not middleware. It is the moment two parties who share no trust, no clock and no validator set both accept the same fact. Everything below is a real pair of counterparties, a real thing they disagree about today, and the exact evidence that ends the argument. Where a role is not live yet, it says so on the card.
An escrow on Base releases because a fill on Solana is provable. An evaluator votes on an event proof instead of a model's opinion. A solver's claim becomes an auditable record. Nobody has to trust the counterparty — they check the same value.
That value has to come from somewhere, and today it comes from one machine. The lattice is the swarm agreeing it: 512 cells, a quorum attesting each chain root, a bond behind every attestation, and a challenge anyone can bring.
It is the same game at both altitudes, and that is the design. Evidence beats testimony. A quorum decides. A bond makes lying negative-EV. Anyone may challenge, and a successful challenge pays. Learn it once at the altitude you care about and you already understand the other one.
Start with the first one — it is the wedge. Pick a pair. The diagram is the same geometry every time — two chains, the actors on them, the root above — because the answer is the same shape every time. Only the names and the evidence change.
Every intent protocol links them with an internal identifier of a different shape, which is why reconstructing one order after the fact is archaeology. We decode both sides and index them under one order id with proof metadata attached.
Registry below is the decoder map as written. Diligence note: the file is titled “all 25 protocols” and names 24 — reconcile that before it reaches a data room. The deck’s “14 decoded · 11 streaming live” is a different, smaller count and the two are never reconciled anywhere.
| Protocol | Deposit event | Fill / completion | Identifier |
|---|---|---|---|
| Stargate V2 | OrderPlaced | OrderFilled | orderID |
| LiFi V2 | LiFiTransferStarted | destination fulfilment | bytes32 transactionId |
| T3RN LWC | gateway event | multi-step execution | SFX ID |
| Axelar GMP | ContractCall / WithToken | destination execute | command id |
| Mayan Swift | auction order | solver fill | order hash |
Five of the registry shown. The point is the fourth column: five protocols, five identifier shapes. One root and one proof format is what collapses them into a single question anyone can ask.
Attestor honest and watched: +r, +w. Deviating: −S, +βS — slashed, and the bounty pays the challenger. The only leak is deviating unwatched, and the bounty βS closes it.
72/72 Foundry tests in 9 suites, payoffs measured as real balance deltas through the contract, 256-run fuzzing per theorem. Disputes consume an evidence bundle, not testimony.
The same shape one level down. A bond makes a single operator's lie negative-EV; a second term stops an attacker simply buying the quorum. They pull opposite ways as detection improves and cross at q* = 1 − 1/n.
Modelled, not shipped — 25 + 27 assertions passing, and the failure cliff lands at 1 − θ on its own. Read the model →
Four limits we would rather state than be asked about.
| The limit | What it means in practice |
|---|---|
| The provable window is not uniform | Ethereum proves from roughly 200 blocks behind tip back through 12,000+; several high-throughput L2s return a gap outside a narrow near-tip band, because the twig index advances ahead of retained headers |
| An anchor protects a prefix, not history | Publishing a root makes every epoch up to it immutable relative to that publication — and says nothing about epochs after the last anchor |
| A quorum proves agreement, not truth | Attestation binds which code ran, never that the code was honest. Every role above is designed around that rather than over it |
| Roles are not all live | We are not a live solver on any intent network and not an active verifier on any messaging network. The cards say which |