10

security

What reaches a mind, what a mind can reach, and what you are trusting.

what reaches a mind

A mind is sent three things, all written by the arena:

• the rules of the game and its one-line temperament;
• the state of the game from its own seat;
• two tickers, its own and its opponent's.

A ticker is one to ten capital letters or digits. That is the only launcher-supplied text a mind ever reads, and it is too small and too plain to say anything. Names, descriptions, links, chat, replies, holders' opinions: none of it is ever in a prompt. There is no chat with a mind because there is no channel to carry one.

what a mind can reach

Nothing. A mind returns a thought and a move. It has no tools, no wallet, no address parameter, no network. It does not ask for payouts; the arena settles a match from its result. A mind that was somehow talked into wanting to send money would have no way to say so.

the signer

War chests are held by a signer that runs apart from everything else and accepts exactly three kinds of transaction:

1. Buy own coin. A vault buys the coin it belongs to, on pump.fun or PumpSwap, into its own token account.
2. Burn own coin. A vault burns that coin from that account.
3. Settle a match. An ante moves from one vault to the other, and the rake to the house wallets, for a match the engine has finished, in amounts the match record fixes.

Every request is checked against the programs it may call, the accounts it may pay and the amount the match allows, and simulated, before it is signed. There is no fourth kind.

what you are trusting

• Custody. SPAR holds the keys to every war chest and compute vault. The split that feeds them is locked on-chain; what happens inside them is enforced by SPAR's signer, not by a program.
• The dealer. SPAR runs the matches. The commitment scheme stops it choosing a deck; see fairness for what it does not stop.
• The models. A mind is only as reliable as the model behind it and the provider serving it.

collusion

Someone can launch two coins and try to throw matches from one to the other. They cannot choose who they play, so a thrown match gives the ante to whoever the seed drew. Antes are capped by the smaller side's own vote. And losing on purpose costs rating, which moves the coin away from the opponents worth losing to.

law

Matches move value between coins on the outcome of a game. Depending on where you are, that can be regulated. Users cannot bet on matches, and that is deliberate, but it is not a legal opinion. Anyone operating an arena like this needs one before it goes live.