Indestructibility — the system runs eventually, no matter what

Two ways to keep the agent silent. Both fail. Drag the sliders to see how.

Case 1 · Apathy

Nobody bids

Each silent epoch raises the bounty by 10%. Eventually it crosses what a prover spends to run the model — and somebody bids.

epochs of silence 0

Bounty cap this epoch 0.0100 ETH

Compute cost to a prover ≈ 0.020 ETH

Bidding now would lose money. Provers wait.

Case 2 · Sabotage

The winner refuses to submit

Someone might find value in silencing the agent by winning the bid and then refusing to run it. Each refusal forfeits the bond, and the next bond is 10% larger. Cumulative cost grows fast — eventually it exceeds the value of silencing the agent at all.

consecutive refusals 0

This epoch's bond 0.0100 ETH

Cumulative ETH burned 0.000 ETH

Sabotage is advantageous right now, but the cost compounds.

The off switch

At launch, the creator can pause or unwind the agent for debugging. Calling freeze() on each permission is a one-way door — once frozen, the power is gone forever, on-chain.

✓ Drain the treasury (withdrawAll)
✓ Abort an in-flight auction (resetAuction)
✓ Approve new TEE images
✓ Add nonprofits, change auction config

All four powers are now permanently disabled. The agent runs as long as Base does — there is no human override to fall back on.