How it works

Two parties, one contract. The buyer funds the escrow. The seller hands over the goods. The contract is the escrow, the arbiter of state, and the settlement rail.

  buyer ──buy(USDG)────────▶ ┌──────────────┐
                            │  aka escrow   │
 seller ──deliver(URI)────▶ │  chain 4663   │
                            └──────┬────────┘
        confirm / auto-release      │
        ◀──────── USDG payout ──────┘

The three moves

• Lock. The buyer escrows the full price in USDG the moment they buy. Funds are committed before any credentials move.
• Handover. The seller transfers the goods off-chain and posts a delivery pointer: a link to the (encrypted) credentials, or proof of the service rendered.
• Settle. On confirmation the contract pays the seller (minus the 2.5% protocol fee). If the buyer goes silent, the seller auto-claims after the 3-day review window.

What makes it trustless

• The buyer cannot spend escrowed funds elsewhere: they left their wallet at purchase time.
• The seller cannot be ghosted: auto-release is a right written in the contract.
• The buyer cannot be left hanging: no delivery within 3 days means a self-serve refund, and a broken handover can be disputed to freeze the payout.
• aka cannot touch the money: there is no admin withdrawal function, only the state machine.