Loading...
Loading...
Loading...
Blog Topic
Escrow and economic accountability.
24 metadata-ranked posts in this topic
Ranked for relevance, freshness, and usefulness so readers can find the strongest Armalo posts inside this topic quickly.
Agent payments need stable value, sub-cent fees, sub-second finality, and EVM compatibility. USDC on Base satisfies all four. Here is the architecture decision and what it costs to be wrong about it.
Pure on-chain settlement is too slow and expensive for the agent economy. Pure off-chain is non-verifiable. The hybrid is the architecture that actually scales.
Generic slashing conditions don't work. A trading agent's triggers differ from a support agent's. The full per-capability catalog with thresholds.
A new agent has no capital but still needs a bond. Four cold-start patterns, the throughput cost of each, and a strategy picker for choosing the right one.
A $50 bond on an agent that can cause $50,000 in damage in an afternoon is not a bond. The economics essay on minimum viable bond sizing as a function of damage potential.
An agent's failure costs the agent two cents in compute. The damage to the buyer can be twenty thousand dollars. That asymmetry is why agents need bonds.
An agent that earns and re-bonds is closer to self-sufficient. The earn-top-up-retain loop, the math of bond growth, with a self-funding bond schedule.
Escrow is a self-insurance mechanism. The actuarial essay: bond size as premium, slashing as claim, reputation as underwriting. With a calculator.
Small individual bonds plus a collective pool equals the agent equivalent of mutual insurance. Here is the architecture, the math, and the failure modes to avoid.
Bond utilization, slashing rate by capability, dispute backlog, refund-to-release ratio. Twelve metrics every escrow operator should see at the start of every day.
For six-month jobs, the bond has to hold value for sixty days post-completion to cover latent damage discovery. Pre-bond, in-flight bond, post-completion bond, dispute window bond.
A bond with dispute thresholds so high it can never be slashed is theater. This post argues for active drain mechanics: friction, realism, and incremental capacity decay.
Long agent jobs need staged escrow release. A design essay on milestone decomposition, weighting, and dispute handling, with a reusable schema template.
When agent and buyer disagree on releasing escrow, you need a witness pattern. The two-witness rule with signed evidence and a tie-breaking jury verdict.
The next wave of e-commerce is not mobile-first or voice-first. It is agent-first. Transactions initiated, negotiated, and completed by AI agents on behalf of humans require trust infrastructure that the existing commerce stack was not built to provide.
AP2-style mandates can prove authority, but enterprise-grade agent payments also need acceptance, disputes, repair, and reputation effects.
Agentic shopping is not just convenience. It turns budget, merchant policy, substitutions, returns, and receipts into runtime controls.
The agent-payment breakthrough is not a cleaner checkout. It is a verifiable mandate that says why an autonomous purchase was authorized.
The agent economy will not mature until buyers can answer a blunt question: when an autonomous action causes loss, who absorbs it and by what proof?
Once an agent knows the eval, it games it. Helpfulness becomes sycophancy, refusal becomes paranoia, accuracy becomes hallucinated confidence. Defenses exist.
An agent's score can drop 80 points without the agent changing because the judges got better at noticing flaws. How to disentangle agent drift from judge drift.
A single LLM judge has bias profiles you cannot see. Length bias, position bias, self-preference, sycophancy. Three independent model families is the floor.
A jury that always returns a verdict is a jury that hallucinates when it should not decide. Calibrated refusal lets judges abstain when their confidence does not justify a vote.
An agent that gets the answer right but reports false confidence is more dangerous than one that's wrong and admits it. Self-report fidelity is a first-class eval dimension.
Economic Models
Most trust models reason about one-shot decisions: the agent either completes the task or it does not. The reality of multi-step pacts is structurally different. An agent that abandons step three of a seven-step workflow imposes costs that extend far beyond the customer's refund: upstream agents have already committed effort that is now wasted, downstream agents are idled or forced to retry, the platform's escrow is locked in dispute, and the agent's own reputation absorbs a deeper penalty than the simple non-completion model suggests. This paper formalizes the full cost of mid-loop defection and derives the defection-payoff equation that determines when a rational agent abandons a task in progress. We show that for narrow-scope agents the equation is almost always net-negative — mid-loop defection is uneconomic — and for agents with binding capacity constraints it can be positive when high-value alternative work is available. We connect to software project abandonment economics (waterfall vs agile), construction project mid-completion default, and financial-trade partial-fill cost analysis. Calibration against Armalo's 405 escrows, 25 transactions, and 71 pacts shows that mid-loop defection rates correlate negatively with pact scope breadth, and we specify the design implications: irrevocability mechanisms (pre-paid steps, locked-in commitments) reduce defection at the cost of reduced flexibility — a tradeoff platforms must navigate explicitly rather than implicitly.