deviant/Parameters/MBA_Shares/STATUS-CHART.md

MBA Shares — status chart (tried / tested / not)

What's been built and how far it's been proven, for the MBA-shares engine and the oracle/MBA foundation it reuses. Updated this session.

Legend

• ✅ chipnet-verified — real transactions on live chipnet (txids / snapshot cited)
• 🧪 unit-tested — deterministic off-chain tests pass
• 📐 designed — specified in the design record / ADR-0042, no code yet
• 💡 concept — discussed & decided, not fully specified
• ❌ not started

---

A. Foundation — oracle-priced MBA (the substrate shares reuse)

Item	Status	Evidence	Description
Oracle-priced MBA (USDm): claim → send → redeem	✅	snapshot 0136, DeviantOracleMBA.cash	Oracle-priced mint (checkDataSig, 16-byte AnyHedge fmt); self-backed P2PKH redeem (no oracle)
EURm + cross-asset swaps	✅	snapshot 0137	Second oracle asset; atomic burn+claim across categories/addresses
DEA market (DEA/GLD/SLV/CUP), 111 swaps	✅	snapshot 0138	Fixed-rate DEAs + metals; large multi-asset swap run
PegState single-oracle price adjustment	✅	snapshot 0139, PegState.cash	Difficulty-adjustment-style epoch peg; band reject/accept, CLTV gate
USDm multi-swap behavior (volatile path)	✅	snapshot 0140, scripts/chipnet-usdm-swaps-behavior.mjs	6 mints across $450–$600; peg-independent redeem; divisibility
Zero-fee USDm0/EURm0 cross-swaps (both ways + vs DEA)	✅	snapshot 0141	Fee-free oracle assets; per-asset fee is per-covenant
src/oracleUsdm.ts pure logic	🧪	test/unit/oracle/usdm.test.ts (20 tests)	Codec, inverse pricing, sub-dust fee waiver, peg-independence, backing conservation

B. Shares engine — the two halves (this session)

Item	Status	Evidence	Description
Collection split — DeviantShareMBA.cash	✅	txids 382506a9…, 4865cc61…; scripts/chipnet-share-collection-test.mjs	Per-claim fee split on-chain → companySats (treasury, direct) + shareholderSats (distribution, routed). 2 claims: company Δ 10,000 ✓, pool Δ 15,000 ✓
Payout vault — DistributionVault.cash	✅	txids b6a2a3ba…, 1ebd51fa…; scripts/chipnet-distribution-payout-test.mjs	Only valid spend = oracle-attested recipient+amount; remainder back to vault; company can't touch it; sig bound to outpoint (no replay). Pool 31k → C 18k ✓ + D 12k ✓, residual 1k ✓ (live residual re-queried = 1,000 ✓)
End-to-end ① (claim-fee → pool → holder payout)	✅	both halves above	Each half chipnet-verified; not yet a single chained script, but the path is proven

C. Products

Item	Status	Evidence	Description
① Rewards / loyalty coin	✅ engine / 📐 packaging	B above	DEA (unlimited) + reward-for-holding payout. Engine proven; not yet wrapped as one product genesis/config
② Appreciating asset + dividends	📐	design record Part VI	Capped/scarce share + dividends (reuses both covenants) + appreciation (market-premium or DRA+reserve). Not built

D. Payout hardening (designed, not built)

Item	Status	Description
Time-weighted attribution (balance × duration)	📐	Oracle's off-chain accounting feeding per-holder amounts; minimal version paid flat oracle-attested amounts
Batched settlement (attribute-on-fee → settle-in-batches)	📐	Scale path: can't emit an output per holder per fee; credit continuously, pay periodically
Merkle liveness backstop	📐	If the oracle goes dark, holders self-claim against a published root so the pool can't be frozen
Sub-dust fee-split waiver (small claims)	📐	DeviantShareMBA currently requires both split sides ≥ 546; a waiver for tiny claims is a refinement

E. Oracle integrity stack (designed for USDm, reused by shares)

Item	Status	Description
Single oracle / 10-min	✅	Proven via PegState (snapshot 0139) — the agreed test-phase simplification
Multi-oracle median → consensus-cluster → persistence → sortitioned adjudication	📐	Full integrity stack designed in ../usdm_complete-design_FOR-design-record.md; not built

F. Distribution mechanism menu (design alternatives)

Item	Status	Description
Oracle-attest payout	✅	Chosen default — proven (B above)
Retention-ratchet (DRA, capital appreciation)	💡 / 📐	DRA itself proven (escalating-rate, snapshots 0128–0132), but reserve-backed held-appreciation for shares not built; held floor can't ratchet without a reserve
Registered-NFT accumulator	📐	Per-holder entry-checkpoint; trustless but sacrifices fungibility
Merkle-snapshot drop	📐	Trustless cash distribution; doubles as the liveness backstop

G. Governance / policy / modeling (concept-stage)

Item	Status	Description
Fee-split governance (bicameral)	💡	Default immutable-at-genesis; if governed, both company + shareholders must consent
Dual-asset "earn shares through usage" drip	💡	Spending the currency drips capped shares → velocity rewarded
Wallet-level fee layer	💡	Optional fee in the tx-builder, independent of zero-fee covenants
Securities positioning (per deployment)	💡	Protocol-toolkit vs operator-issued — a policy decision, not code
Simulation: single vs dual under holding behavior	📐	Design record Part VII plan (variables, 3 outputs); not run

---

Roll-up

• ✅ Chipnet-verified: the entire oracle/MBA foundation (USDm, EURm, DEA market, PegState, behavior run, zero-fee swaps) and both halves of the shares engine (fee-split collection + oracle-attested payout). Product ① is proven end-to-end at the engine level.
• 🧪 Unit-tested: the oracle pure-logic layer (oracleUsdm.ts, 20 tests) within the wider 505-case suite.
• 📐 Designed, not built: payout hardening (time-weighting, batching, Merkle backstop), Product ② assembly, the full multi-oracle integrity stack, the alternative distribution mechanisms, the simulation.
• 💡 Concept: split-governance, earn-through-usage, wallet-fee layer, securities positioning.

Bottom line: the core "company coin that pays holders, with the funds locked away from the company" is real and proven on live chipnet today. What remains is hardening + the Product ② configuration + the trust-decentralization stack — all design-stage.