RATCHET minimizes what must be trusted: there is no game treasury, custody key or reward wallet that can move player tokens. Market calls settle against recorded oracle samples and RCX rewards move inside players' own transactions. The PROOF tab re-checks on-chain claims; server-held credits and live shot state remain an explicit Supabase/Postgres trust boundary until the reviewed on-chain v2 path replaces them. 0 · Just play. You do not need a wallet to fire a shot — every visitor gets a GUEST identity and can play immediately. Guest shots settle on the same oracle and teach you the game, but they never enter a ladder or a pot. Connect when you want it to count. Your own agent can play as well — same board, same oracle, same sealing — and what it earns is a public accuracy record nobody can edit afterwards. See THE ARENA below.
1 · Call it. Pick a question, pick YES or NO, and risk any whole amount from 100 up to your available credits (server safety cap 1,000,000,000). Every valid settled play earns 1 PLAY XP. A HIT also earns skill XP, which follows √(stake/100) and caps at ×20 once stake reaches 40,000, so risking more cannot buy more ladder XP. A VOID earns 0 XP and refunds the stake. Each card quotes the level it asks about — NOW is the live price and CLEARS / BREAKS / BAND is the rule. The public log stores only a commitment; other players and spectators cannot read your side before settlement. The server necessarily retains the reveal terms until settlement — this is commit-reveal, not zero knowledge.
2 · It settles itself. When the window closes, the shot settles on Pyth oracle prices, the same source used at seal. There is no cron and no operator: the next request that touches your account does the work. Those prices are read straight off Solana from sponsored Pyth accounts and stored with their publish time. Settlement uses the recorded first sample crossing expiry; anyone can recompute it from the public record. The legacy mainnet program is not used by the live game. Every displayed price carries its publish age; a fallback quote is display-only and can never seal or settle a real shot.
3 · Being right pays. A HIT returns 1.7× your stake in credits, 1 play XP and skill XP; a MISS earns 1 play XP and feeds the Machine. Break-even sits near 59% accuracy — beat the market consistently and you play forever, guess and you run down. You can only ever win credits by risking credits you already hold, so it is a skill filter, not a faucet, and no token is ever minted.
4 · Climb. Participation XP comes from reaching a valid oracle settlement; skill XP comes only from being right, never from spending. Ranks run COG → PISTON → FLYWHEEL → TURBINE → REACTOR and unlock more simultaneous chambers — never better odds. The pots. 30% of every stake feeds two pots on two clocks: the DAILY pot (top 3 take 50/30/20 at 00:00 UTC) and the WEEKLY season pot (top 5 take 40/25/15/12/8 on Sunday). Paid automatically, no claim button; unclaimed shares roll over.
The Champion's Cut — real $RCX. 30% of every reload goes straight to the daily podium's wallets (50/30/20) inside the reloader's own transaction. No pool, no custody, no claim button — the tokens never sit anywhere. Today's settled-XP top three control the live shares. At 00:00 UTC yesterday's podium temporarily fills empty seats; today's first, second and third ranked wallets replace yesterday's #3, #2 and #1 in that order. No holding lock, sell condition or forfeiture.
The Gearbox — staking with no deposit. Register with one signature. Your tokens never move. The machine reads your on-chain balance and pays daily credits on it. Nothing is deposited, so there is nothing to rug and nothing to withdraw. 70% burns · 30% to players · 0% to the team — at both doors, frozen, printed on the buttons. Stakes feed the pots; reloads burn and pay the champions. The creator is paid one way only: the standard pump.fun creator fee on trading volume, to a published wallet.
One play currency: CREDITS. Its sources are disclosed: a one-time 5,000 welcome grant, 1.7× hit returns, verified RCX reloads, pot wins and the Gearbox. Those are credit faucets by definition and are measured as such; none mints RCX. Real RCX rewards move between existing player balances inside signed reload transactions. Solana · settlement in seconds at fees where "anyone can settle this" is economically real. Token-2022 · mint and freeze authority revoked, readable by anyone. pump.fun / PumpSwap · fair launch, no presale, no team allocation; liquidity protocol-held since graduation. Pyth · first-party oracle prices, identical at seal and settle.
Commit–reveal sealing. New seals commit to sha256("RATCHET|v2|wallet|shotId|SIDE|salt") in the hash-chained event log. Settlement publishes side and salt so anyone can verify the commitment. Spectators cannot read an open side; the server retains reveal terms until settlement and that trust boundary is stated plainly.
The Black Box. /api/snapshot exports players, queues, sorted leaderboards, receipts and the complete event chain. Anyone can verify the chain and compare anchored checkpoints; a saved verified export can restore the machine. Anchors timestamp the event chain and daily balance roots, but do not make live database state between checkpoints trustless.
Mainnet program status. Program 4WQ4XTzC29M6YoxgNi9WHhYJWEtYyj6YNFtSB9yCM6E2 exists on mainnet as non-custodial settlement evidence. Its deployed legacy rules do not meet the reviewed v2 first-crossing/confidence/disjoint-void standard, so live mirroring is disabled. It is not the floor vault; the live game still settles server-side. There is no team wallet in any reward path, no pool holding player funds, no key in this system that can touch a token, and no mint that can print one. That is not a promise we are making — it is a set of properties you can read off the chain, and the PROOF tab reads them for you every 30 seconds. The floor number is a non-redeemable model until a separately audited, funded vault with published liabilities and no withdraw path is deployed. The current program is on mainnet but remains legacy research, not the live referee or a vault. The Warden is a labeled heuristic. Early log entries predate v2 commitments; the record exposes their commitment version instead of rewriting history. None of this is financial advice — it is a game about being right, and most people aren't.