THRESHOLD AUCTIONS, MADE LEGIBLE

Know where every fake sat stands.

Follow Nostr-signed auctions through a bidder-owned Coco wallet, threshold-funded bids, certified outbid returns, deterministic close, and seller payout.

Browse committed auctions
Spendable now—fake sats
Reserved / locked—fake sats
Pending / unresolved—not spendable
Test wallet fundingConnect a signer. The reviewed runtime policy sets the maximum.

R20 WORKFLOW

From browser-owned funds to a terminal branch

  1. 1
    Fund a Coco walletThe entered amount is checked against runtime policy; the resulting-balance limit is a browser-wallet advisory, not a public mint identity control.
  2. 2
    Create or chooseA Nostr event becomes UI state only after consensus commits it.
  3. 3
    Authorize a funded bidBidder and 3-of-4 committee authorize one exact NUT-11 proof pool.
  4. 4
    Outbid return or winThe browser automatically imports certified terminal returns when available.
  5. 5
    Seller payoutThe seller services its actor-scoped plan and imports the winning amount into its browser-owned Coco key.

COMMITTED MARKET

Auctions

Loading consensus state…

Loading auctionsReading committed state from the application API.

SELL

Create an auction

The seller signs a Nostr event and commits its browser-owned Coco payout key.

BROWSER-OWNED COCO WALLET

Payments & returns

Connect an identity to read its threshold wallet state. Bearer proofs and private keys never enter the DOM.

New auctions register one bounded payout authorization when created, so bidders do not need later seller approval. Reconnect after a sale to import certified payouts.

Connect an identityWallet operations are scoped to the exact Nostr actor and deployment.

VALIDATOR EVIDENCE

Canonical commit observations

Loading validator evidence…

Loading validatorsReading canonical commit observations.

A commit signature proves that validator signed that CometBFT commit. It does not reveal bearer proofs or imply production readiness.

TRUST MODEL

What this prototype proves—and what it does not

R20 path

Real Nostr actors, browser-owned Coco keys, 3-of-4 FROST admission, FIPS transport evidence, deterministic consensus close, outbid return, and seller payout imports.

Boundaries

Fake sats only. One operator controls four machines. Browser funding limits are advisory; mint-wide and ingress limits are separate runtime controls. No federal FIPS or production claim.