# IAT Z4 launch specification

Draft 0.6 · 2026-10-03. Confirmed owner choices below supersede recovered V2/B3 rules and the earlier 12-IAT daily campaign. Technical implementation/release details are identified separately. [The full feature catalog](FEATURE_CATALOG.md) retains 156 records; [the source crosswalk](SOURCE_ANALYSIS.md) retains all 53 old parity rows.

## Supply, vesting and funding

Issue **1,000,000,000 IAT**, with no later issuance and no planned burn. Immediately revoke both Mainnet mint and freeze authorities after initial issuance and publish finalized receipts and decoded authority/supply state. Original SPL with nine decimals remains the implementation baseline awaiting compatibility verification. Program upgrade authority is a different power from token mint/freeze authorities.

| Allocation | Total IAT | Genesis unlocked | Remaining linear stream |
| --- | ---: | ---: | --- |
| Community | 500,000,000 | 500,000,000 | None |
| Treasury | 200,000,000 | 50,000,000 | Month 12 to month 48 |
| Ecosystem | 150,000,000 | 37,500,000 | Month 6 to month 30 |
| Core | 100,000,000 | 0 | Month 6 to month 24 |
| Liquidity | 50,000,000 | 12,500,000 | Month 6 to month 24 |

Use the website's calendar-month schedules. The ecosystem's public end at month 30 supersedes old machine week 104. UTC anniversaries are measured from Genesis, clamping missing month days; remaining principal accrues linearly between cliff and end, with integer rounding down and no cliff lump. Genesis is not scheduled yet.

There is **600M initially unlocked non-core capacity**, before spending and commitments. Keep four separate source vaults, drawing **treasury → ecosystem → liquidity → community**. All unlocked non-core sources may exhaust. Locked tokens, core principal and amounts committed to live claims are unavailable for new funding. Reserve distribution does not reduce total supply.

Reserve **up to 100,000 IAT on each of the first 100 UTC X campaign days before weekly staking**: up to **10M IAT in fresh reservations**. Unassigned daily funds carry forward, retaining original-source attribution, and remain reserved for daily rewards. After day 100, add no fresh daily funding; keep rewarding from the carried-forward balance until it is exhausted. Live funded claims are protected commitments, not unassigned rollover. Genesis Gift keeps its launch prefund. Weekly remaining-shared-reserve priority is **core staking → competitive Agents → Agency followers → regular holders → faction prizes**. Rank each staking class by exact completed-week balance-time. Pay in full until the final recipient consumes the remaining funds partially; skip their unpaid remainder and all lower recipients. Skipped/unfunded amounts create no debt. ZD-66/67 supersede the earlier daily budget and fixed recipient cap.

## Wallet staking, clock and claims

Eligible tokens remain in their owners' wallets. No deposit, principal lock, yearly renewal or X-follow requirement is introduced for ordinary staking. System/reserve/distribution wallets earn nothing. Core alone includes its remaining vested principal plus eligible wallet balance, without double counting; its rewards are unlocked while principal stays vested.

| Frozen weekly tier | Target APY |
| --- | ---: |
| Core, including its fixed Internal Agency position | 17% |
| Other competitive CCC Agent | 28% |
| Other qualifying Agency follower | 20% |
| Other eligible holder | 10% |

One tier per wallet and one Agency follower affiliation. Weeks end **Monday 00:00 UTC**. Country ownership and affiliations at that boundary set the following week's tier; submitted changes do not rewrite the completed week. Staking integrates actual eligible holdings over time; CCC separately uses cutoff balances. A fixed **365-day year** gives full-week factor **(1 + target APY)^(7/365) − 1**. Actual yield falls with partial/skipped payouts or rewards left unclaimed. Only rewards actually delivered to wallets enter future wallet balances.

Holders claim funded rewards themselves. Staking, X and faction funded claims expire **30 days after on-chain activation**; unused tokens return to original source vaults with auditable attribution. Genesis begins its claim clock at accepted-binding/entitlement activation. No claim exists until funding is durably committed. Delayed publication preserves frozen earning records without back-paying skipped amounts. Prorate the initial partial staking week, counting no eligible balance-time before Genesis.

## CCC country competition

Launch **195 countries: 193 UN member states plus Holy See and Palestine**. Each begins with one durable competitive Agency position; a separate fixed **Internal Agency** belongs to core forever, at 17%. Core and project system balances are excluded from competitive rankings.

Each weekly reassignment ranks positive eligible wallet balances within each wallet's chosen country. Top N wallets fill that country's N positions. No additional minimum; unfilled positions remain vacant. Country can change freely until cutoff. Every week one randomly selected existing competitive country gains one extra position, including countries already holding several. Internal Agency is excluded from random growth.

Followers affiliate with a durable Agency position in the app. A replacement Agent inherits its followers; followers are not redirected to the departing wallet. An occupied position at cutoff qualifies its followers for 20%, including Internal Agency; a vacant position gives regular 10% until occupied. Core and Agent tiers override follower status.

Growth and exact ties use **drand quicknet**, deterministically fixed future rounds after candidate commitment deadlines, frozen sets, published proofs and no rerolls. Pin chain hash `52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971` from [the official developer documentation](https://docs.drand.love/developer/); verify the BLS proof off-chain. The Solana program trusts authorized manifests. Missing proof/history leaves the affected result pending; retry the same round, with no fabricated evidence or reroll. Already-funded claims remain usable. Exact commitment offsets and finalized-slot mapping will be published with the implementation policy. Auditability does not remove publisher trust.

## X campaigns

Authenticate X's numeric account ID and wallet ownership. One wallet per X ID and one X ID per wallet; accounts must be at least **40 full days old**. Eligible earning-time Premium/PremiumPlus evidence must be no older than **24 hours**.

**50%** for non-Premium/unverified/Basic/None; **100%** for eligible Premium/PremiumPlus. Fractions are frozen at earning. Later upgrades affect future rewards only, including when older rewards are claimed after an upgrade. No deferred half or back-pay. This rule applies only to X campaigns, never staking rates, faction points or faction prizes.

| Campaign | Capacity | Nominal reward | Actual lower/full reward |
| --- | --- | ---: | ---: |
| Genesis Gift | 10,000 slots; expired unclaimed slots reopen for new users | 100 IAT | 50 / 100 IAT |
| Daily repost participation | One reward per wallet/X pair per UTC day; recipient count limited by actual funding | 40 IAT | 20 / 40 IAT |

Prefund **up to 1M IAT** for Genesis at launch. Its first accepted registrations may claim without waiting behind a recurring staking week. For daily X, require **following @dogramaci and a genuine daily repost of any tweet published by that account after launch**. Pin the official account's authenticated numeric ID at launch; a handle or arbitrary browser-selected target is insufficient. There is no per-post reward and no second wallet-day reward. Original posts, replies, quotes, likes and follows alone do not qualify for daily payment. The old six-action inventory remains in the source analysis as a superseded daily rule. Genesis amounts and ordinary staking are unchanged.

Use **serial successful-verification order, while actual funding remains**. A fresh full 100,000-IAT budget funds **2,500 full-tier or 5,000 lower-tier rewards**, with mixed tiers between those counts and more recipients possible from rollover. Remove the fixed 1,000-recipient ceiling and 365-day campaign end. Fully funded entitlements may be claimed immediately by paying transaction fees; no wait for a weekly batch or beacon selection. Extra reposts/transactions do not buy extra rewards. Claimed IAT enters actual wallet balances and can change the next CCC cutoff ranking. Validated faction participation remains independent of daily funding.

Allow **72 hours after a day closes** for genuine evidence verification during API outages, while shared daily funding remains. Preserve the original earning day and wallet-day uniqueness; retries do not rewind verification priority. Following is authenticated at verification, not invented as a historical event. Establish the earning-time subscription tier from historical evidence; if it cannot be established, pay the 50% fraction. A current upgrade cannot prove an earlier tier. Use authenticated IDs, domain-bound wallet challenges, age/uniqueness checks, evidence deduplication and rate limits; no paid identity/KYC or assertion of one-human identity. CCC growth and ties retain their fixed beacon.

Link X through **X login with read-only OAuth 2.0 PKCE**, then sign the verified numeric account ID and wallet together. During detected API outages, rate limits or credit shortages, offer a **$IAT proof post queued for human review** instead. Human approval still requires final wallet confirmation and establishes no Premium history or campaign reward. Delete a fallback post only after accepted binding. See ZD-64/65. **Bindings are permanent**: neither the wallet nor numeric X ID can join another pairing. Handle changes, reward expiry and IAT transfers never reset it. A fresh pair needs a new wallet and never-bound X ID; ordinary staking needs no X binding. See [X_LINKING](X_LINKING.md).

Genesis claimed slots stay consumed. An unclaimed expired grant is terminal for its original wallet/X identity, but frees its slot for a **new** eligible identity. At all times, claimed nominal capacity plus active nominal reservations cannot exceed 1M; a lower-tier claimed reward consumes the full 100-IAT nominal slot. Expiry releases its 100-IAT nominal reservation and refunds the actual funded amount. Unused lower-tier halves are available to shared reserves, never an upgrade top-up or extra slot. Preserve permanent binding/grant history through recovery to prevent repeat gifts. A reopened slot is capacity, not an unfunded reward: activate its replacement entitlement only when its actual 50/100 amount is fully funded.

## Factions

Preserve **Radiance, Ellie, Alia, Ece and theboss**, separately from CCC country affiliations. One faction pledge; first pledge is immediate, switching has a **24-hour cooldown**. Same-faction selections do not reset it.

Score **one point per wallet per validated UTC participation day**, up to seven each week. No balance or Premium weighting. A genuine eligible action can score even when its X reward is unfunded or not selected within the daily cap. Credit the point to the faction active at that action; if multiple valid actions occur in a day, use the first qualifying action deterministically.

After X, fund **up to 10,000 IAT per week** from the same reserve sources. Half rewards participants proportionally to their total points across factions; half rewards eligible members of the winning faction equally. Winner bonus requires at least one point with that faction and current membership at cutoff. Partial capacity reduces both halves proportionally; no unfunded debt. Round down in base units, retaining unallocated dust/empty shares in reserves. Freeze prize terms before the period; externally resolved exact-score ties cannot be chosen by an operator.

Launch IAT prizes. NFT prizes remain a later release with their collection, metadata and funding rules still to be specified.

## Authorities, proofs and release status

An automated publisher approves weekly funded staking/faction manifests. Trezor controls its authorized key and limits. A restricted X verifier supplies capped registrations/social attestations. On-chain checks must enforce funding, allowed campaigns, expiry, recipient proofs and replay protection; they cannot prove external X events or the truth of balance histories themselves.

Trezor retains **immediate** Mainnet program upgrade authority with public changes; no upgrade timelock. Routine admin controls may rotate keys and pause **new** campaigns/manifests, but may not early-unlock principal or cancel funded claims. Existing claims remain claimable until expiry; public SPL transfers stay unrestricted. Upgrade authority can change program restrictions and is disclosed as such. Neither custom-program upgrades nor automated publishers can restore the revoked authorities of the canonical Original SPL mint.

Publish canonical Mainnet mint, program and authority addresses, initial allocation receipts, mint/freeze revocation signatures, decoded state, build hashes and policy/manifests. Verify finalized chain state before labeling any of these complete. The installed Model T's ability to sign the exact custom program/deployment transaction types still requires rehearsal.

Final removals: **Privacy Vault, Daily Law, negative weekly Wildcard/Agency pause, core live-supply cap/burn, old deployment scaffolding**. Later Promotions, prediction markets and the ten-game casino keep their full feature inventory; inherited +8-hour/+15-day/+30-day targets do not activate them.

Current local economics pass **34 tests**, including 100-day fresh funding, source-attributed rollover and 20/40-IAT admission. The website passes **23 identity/API/OAuth/review/daily-evidence tests** and TypeScript checks. Public forms are labeled **Testing**; registrations and claims remain closed. A local-only human review panel demonstrates approval, rejection and required holder confirmation using synthetic identities, with zero IAT issued.

The updated rollover binary compiles and passes 3 Rust tests plus compiled local-VM checks for the new 20/40-IAT, funding-limited policy: 10,000 Genesis slots, 2,500 Premium/5,000 regular daily admissions, 100 fresh reserves, post-day-100 carry, permanent identity, frozen fractions, source-attributed refunds and holder-paid claims through a pause. A missed reservation day creates no retrospective funding; only the current day can receive its up-to-100k fresh draw within the first 100 UTC days.

The owner resumed Devnet work on October 3. The original revoked-authority mint and Trezor admin are preserved; five empty allocation vaults finalized. The historical deployed binary remains the prior policy until its pending upload/hardware upgrade. Genesis is inactive and network claims remain pending. Keep immutable historical receipt specifications unchanged; see [current rehearsal records](DEVNET_REHEARSAL.md). GitHub publication remains deferred. Real hosted X configuration, account-ID pinning, funded grants, chain replay/CCC, browser claims and security review remain release work. Mainnet is inactive. The current read-only [Mainnet cost snapshot](evidence/mainnet-readiness-cost.json) measures deposits and fee estimates, including holder account creation costs.