on-chain / architecture overview
docs / on-chain / architecture overview

Architecture overview

Trading off-chain. Proof and payouts on-chain.

(¬‿¬) over · v1 architecture
>_ billing · ticket_pay
amount160.00 USDC
tofee treasury
statusreceived
01 · feeThe trader buys one mission in USDC. The fee lands in the treasury, and it is Over's revenue, never the payout pool.

Components

The validator runs your mission off-chain, including fills, P&L and the mission rules. Two Solana programs, MissionRegistry and EvidenceRegistry, record the proof on-chain. Two Squads multisigs hold the money.

ComponentWhat it does
MissionRegistryRecords immutable mission terms and the payout cap at purchase. Results are published as versions
EvidenceRegistryCommits trade events every 10 minutes as chained Merkle roots, so any trade can be proven with an inclusion proof
Publisher keysTwo backend keys publish missions, results and evidence roots. Neither can move funds
Payout vaultThe only source of trading payouts. Funded manually by Over and paid only through human-approved proposals
Fee treasuryReceives entry fees and pays referral commissions. Never pays trading payouts or funds the payout vault

How a mission flows

  1. Buy a mission. Your entry fee goes to the fee treasury. MissionRegistry records the mission’s terms, window and payout cap.
  2. Trade. Every trade gets a receipt. Every 10 minutes, one Merkle root covering all new trade events is published.
  3. Result. When the mission ends, its result and the evidence batch it came from are published.
  4. Payout. Payouts are proposed from the payout vault and approved by people. Each transfer is checked against the mission’s registered cap and tagged with its mission.
  5. Rewards. Referral commissions are paid weekly from the fee treasury, each tagged with its type.

Why the programs hold no money

Neither program ever holds a balance. They only record rules, results and evidence. The money sits in two separate multisigs. Entry fees go to the fee treasury, and trading payouts come from the payout vault, which Over funds from its own capital. Anyone can check on-chain that entry fees never flow into a prize pool and that every payout comes from Over, as our Terms of Use state.

What stays private

No balances, trades or names go on-chain. The chain holds fingerprints, roots and payments only. Your trades stay in your account, with the receipts and proofs that tie them to the public roots.

Limits

The proofs show that rules, trades and results were not changed after they were recorded. They don’t prove that market prices were correct, and they don’t replace Over’s review of eligibility and fair play.