No server · No house · No cloud — self-custodial
Pear × QVAC × WDK — one build, all three

Your mates' prediction pot.
Now the AI has a seat — and its own wallet.

A serverless, self-custodial football pot where an on-device AI pundit reasons about the match on your hardware, forms its own pick, and stakes its own USD₮ — on the same tamper-evident ledger as you. It can win. It can lose. It cannot cheat.

HUMANS 0— FULL TIME —1 AI PUNDIT
GitHub Watch demo Run it
the-treble — 4 real Autobase peers
$ node src/cli.js demo
pot opened "Kitchen Table Clásico" — Brazil vs Argentina, buy-in 20 USD₮
Ana staked 20 USD₮ · pick 3-1 (keys on her own device)
The Gaffer policy pre-flight: ALLOW · [brain: heuristic] "Backing 1-1 the draw —
argentina unbeaten in 14 competitive matches" · autonomously staked 20 USD₮
KICKOFF — pot locked on the shared append-only ledger
Bo tried to change his pick → REJECTED by every peer
the machine tried to vote on the result → REJECTED (agent-has-no-result-authority)
Σ CHECK paid 80 USD₮ == staked 80 USD₮ ✓ · CONVERGENCE 4 peers byte-identical ✓
THE MACHINE TAKES THE POT — Humans 0 – 1 AI Pundit
198Tests green664 assertions · 100% coverage
Σ 80=80Zero-sumsettled to the micro-USD₮ · no house cut
4 peersByte-identicalsame Autobase state hash · verified live
~20sFull lifecyclefully offline · exits non-zero if Σ breaks

One flow, extreme depth

No leagues, no order books, no oracle fantasy. One core flow, made bulletproof:

01 · STAKE

Everyone bonds a buy-in

Humans and the AI each ring-fence USD₮ from a wallet only they control. Every stake has a receipt on the ledger.

02 · THE MACHINE MOVES

The pundit reasons on-device

QVAC runs the model on your hardware — zero cloud calls. It streams a one-line rationale, then stakes via its own keys, hard-capped by a WDK Transaction Policy.

03 · KICKOFF LOCK

Picks freeze, tamper-evident

Signed, append-only Hypercore logs linearized by Autobase. A post-kickoff edit is rejected by every peer — try it in the demo.

04 · CONSENSUS & SPLIT

Humans confirm, math pays

A quorum of staked humans finalizes the score — the AI has no vote. The split is deterministic: Σ payouts == Σ stakes, to the micro.

Why it takes all three stacks

Each platform is load-bearing. Remove any one and The Treble is impossible — not merely harder.

Pear — the table

  • Autobase multi-writer pot — the AI is just another writer
  • Hypercore signed append-only picks, locked at kickoff
  • Hyperswarm invite-key rooms, E2E-encrypted links
without it → a server and a trusted timestamp authority

WDK — the money

  • Self-custodial accounts for every player — including the machine
  • Transaction Policies — the agent is default-denied beyond its cap
  • Modular chain engines — disclosed sim ledger ↔ gasless devnet
without it → a custodian pretending to be an AI's wallet

QVAC — the mind

  • completion() tool-calling — the pick is a genuine model decision
  • On-device inference — reasoning works with the network cable pulled
  • Disclosed fallback — CI runs a deterministic brain, labeled as such
without it → a cloud API, which is neither private nor yours

Trust the invariants, not us

The test suite pins every rule below; the demo shows them live.

Σ payouts == Σ stakeszero-sum, integer micro-USD₮, deterministic dust
one pick, then silenceimmutable after acceptance, dead after kickoff
agent parity, minus powersame rules as humans; no vote, no lock, no invites
byte-identical stateevery honest peer converges to the same hash

Honest limitations

Settlement is escrowless — a dishonest peer could refuse to pay their recorded debt (the tamper-evident debt record survives them; an on-chain escrow is the v2 path). A colluding human quorum could mis-finalize a result. The demo's settlement engine is a disclosed local sim; the WDK policy engine governing it is real, and a gasless devnet module is a config swap. Not a bookmaker — a game between friends.