Architecture
System Overview
Three layers, one directed chain: evidence → authority → credit. Each layer has a hard trust boundary.
Layer map
Industrial production
│
▼
Fulfillment Oracle (evidence — what is true)
│ attested score
▼
Agency for Smart Contracts (governance — what may be done)
│ allowlisted calldata
▼
SPOOL Protocol (credit — what settles)
│
▼
On-chain credit & settlement (Arbitrum → Ethereum L1)Responsibilities
| Layer | Owns | Must never |
|---|---|---|
| Oracle | Ingestion, scoring, attestation, publication | Move funds or execute credit actions |
| Agency | Allowlists, simulation gate, escalation | Hold capital or invent evidence |
| SPOOL | Order NFTs, spools, advances, repayment | Decide its own unbounded policy |
Trust domains
| Domain | Components | Failure impact |
|---|---|---|
| Industrial | ERP, vision, logistics | Corrupted evidence upstream |
| Oracle | Agents, attestation signers | Stale / missing score → fail closed |
| Execution | Agent runtime, policy engine | Bounded erroneous action |
| L2 | Arbitrum contracts / sequencer | Downtime, delayed hard finality |
| L1 | Ethereum settlement root | Final settlement risk |
Invariant
A compromised oracle cannot move funds. A compromised agent cannot exceed its allowlist. A compromised credit contract cannot rewrite attestation history.
Next
Dive into Oracle Architecture,Data Flow, andBlockchain Integration.