35 contracts. Seven layers. One bridge. Every layer has a single job and a single trust boundary.
Tap a block for its contracts and trust boundary.
Roles are granted by governance; deployer bootstrap roles are retired before token generation. Upgrades are scheduled, then executed no sooner than 24 hours later.
Amoy testnetPolicy and price truth for every layer above. A three-level circuit breaker halts settlement on dislocation; compliance tiers are switched per market.
Amoy testnetMints are role-gated and capped per category in the token itself. Emergency can pause; only governance can unpause. No transfer fee at launch; 5% hard ceiling.
Amoy testnetThe operator records; the router settles. Escrow deposits and withdrawals are gated by different roles, so a coalition's funding wallet cannot drain its own escrow.
Amoy testnetEmissions are capped by supply policy and throttled by an on-chain sustainability ratio. Vesting caps are covenants that cannot drop below existing schedules.
Amoy testnetA coalition must be registered and active before escrow accepts its funds or its obligations.
Amoy testnetInventoryManager is the sole caller of the swap executors; executors hold no funds between calls and are retired, not upgraded.
Amoy testnetWrapped RWLY exists only against RWLY locked on Polygon. Bounded per transaction and per day; pauses independently; peer changes are timelocked.
Arbitrum Sepolia · no mainnetA qualifying purchase, shift, visit or action is validated by the operator. The commitment is recorded on-chain with its coalition, its source, the oracle price at that moment, and a unique receipt hash. Once written, the committed amount cannot be reduced by anyone — it can only be settled, or cancelled with an on-chain reason.
The issuing coalition's obligations are counted against stablecoin it holds in escrow. A health factor is recalculated on every change: issue at 1.5×, warning at 1.1×, settlement blocked below 1.0×, insurance fund activates below 0.8×.
Conversion batches settle against that escrow, inside that coalition. Cross-coalition redemption is possible, fee-bearing, and explicit. Regional settlement can pause one region without touching another.
Each layer has one job. The bridge is detached rather than stacked: a second chain representing RWLY on Arbitrum, not an eighth layer. Open a block in the stack above for the contracts it holds and the trust boundary it draws.
| Layer | Label | Function |
|---|---|---|
| L1 | Foundation | Roles, storage, parameters, upgrades |
| L2 | Control & Policy | Compliance tiers, price truth, supply policy |
| L3 | Money Core | The token, fees, treasury, economics |
| L4 | Operations | Escrow, earn-time commitment, conversion, regional settlement |
| L5 | Distribution | Staking, vesting, emissions, operator bonds |
| L6 | Business Registry | Who may issue, who may redeem, who holds |
| L7 | Market Operations | Inventory crossing and DEX execution |
| Bridge | Bridge | Cross-chain representation of RWLY |
Lock-and-mint: wRWLY on Arbitrum exists only against RWLY locked on Polygon (invariant: locked = wrapped supply). Peer changes are timelocked. Built and tested on Arbitrum Sepolia; not deployed to mainnet.
Value fixed at the moment of earning, not redemption.
Issuance capacity is a function of collateral on-chain, not policy.
Obligations settle where they were created; crossing is explicit.
Every commitment carries its source class — point-of-sale, validated receipt, workforce sync, impact action, grant.
Two patent applications are pending.
Versioned ABIs, a published interface set and reference deployment scripts.