Security and trustLink to this section

TL;DRLink to this section

The records show accepted sensor readings and authorized settlement, not which animal moved the wheel or what caused it to move.
Operators and contract upgrade administrators remain trusted; signatures don't remove that trust.
The SQK supply cap doesn't by itself ensure rewards are issued or paid correctly.
Counting, delivery, settlement, video, and public displays can fail independently.

What are you relying on?Link to this section

The system saves accepted wheel-magnet passages, checks the signed records, and records authorized work on Ethereum. Each step adds a different kind of evidence. None can prove animal identity or the physical cause of a sensor reading.

If you own a Miner NFT, you also rely on the contracts that calculate and hold rewards. Token limits total SQK issuance, but it doesn't check whether a mint request is backed by work. The Mining implementation and the administrators who can upgrade it remain part of the trust model.

In this sectionLink to this section

What the system proves explains what sensor records, signatures, and Ethereum establish.
Roles and permissions explains who can change each part of the system.
Governance and upgrades describes upgrade powers and the limits a supply cap doesn't cover.
Pauses and unavailable services explains what stops or continues during a failure.
Privacy explains public video, wallet visibility, and private service boundaries.

Technical detail: trust boundariesLink to this section

Who supplies the records?Link to this section

The device measures work, hosted services check and submit it, and Ethereum contracts record it. NFT owners use the reward system; they don't control measurement.

Who can change them?Link to this section

Public interfaces, indexers, cameras, and NFT owners cannot create accepted passages or approve a new counter history. Administrators have separate pause, signing, and upgrade powers; see Roles and permissions.

What does the system enforce?Link to this section

The system preserves saved work during network outages and keeps pending work separate from settlement. Token enforces a fixed cap but doesn't check whether mint requests are backed by work.

What still requires trust?Link to this section

The sensor rules and measurement host must be trustworthy, and Ethereum must execute the intended contracts. Core and Mining upgrade administrators can change contract behavior.

What happens when something fails?Link to this section

The Pi stops counting uncertain measurements rather than guessing, and saves records during delivery outages. Stale or unavailable displays don't change saved work or settled chain records.

Records verified work and tracks settled rounds and Squeek blocks on Ethereum. Calculates rewards from settled work, holds funded SQK, and pays eligible NFT owners. The Miner ERC-721 contract. Tracks NFT ownership and coordinates minting and merges with Mining. Applies Core or Mining upgrades authorized by its governing Timelock. Generates Miner NFT artwork from fixed onchain visual data. Queues governance operations and enforces a delay before they can be executed. The SQK ERC-20 contract. Enforces the lifetime supply cap; only Mining can mint SQK. Checks that visual data conforms to the required DotGrid format. When new mining power starts earning. Minting and merging schedule it for a later round, and a checkpoint must process the change. A reward update that processes settled work and scheduled mining-power changes. It can make rewards available but doesn't pay them to an owner's wallet. The Miner NFT permanently burned in a merge. Its unclaimed rewards move to the survivor, but its image is not combined or kept. SQK issued under the mining reward rules. You can direct a share of your Miner's rewards to fund SqueekFi projects. The physical mining device that records accepted wheel-magnet passages as work. It is separate from the virtual Miner NFTs. Squeekchain's record of accepted wheel-magnet passages. It doesn't prove animal identity and isn't how Ethereum reaches consensus. Combining two eligible same-level Miners you own into one higher-level Miner. One NFT is permanently burned; the survivor keeps both Miners' unclaimed rewards. The completed Squeek blocks a Miner must wait through before merging. It measures completed work, not elapsed time or Ethereum blocks; transfers don't reset it. The power used to calculate a Miner's share of rewards when eligible and active. A larger share of total power can mean a larger share of rewards. A ten-minute period used to group measured work. The device saves a completed round's work total when measurement remained uninterrupted. The transferable token used for mining rewards. It has a lifetime supply cap and is separate from the Miner NFT and the device's work count. A completed amount of settled work. Enough recorded work completes one Squeek block; it is not an Ethereum block. Squeek Miner NFTs earn SQK linked to recorded wheel activity. Owners can direct a share of those rewards to fund SqueekFi projects. Squeekchain's ecosystem for hamster-powered onchain finance. Miner owners can choose to fund projects with a share of their SQK rewards. The Miner NFT you keep in a merge. It gains a level, keeps its ID and image, and receives both Miners' unclaimed rewards. A Miner's recorded reward balance that hasn't been paid to a wallet. It stays with the NFT when ownership changes. One wheel-magnet passage that met the device's counting rules and was saved. It records work, not an amount of SQK.