How Mimir works

Three independent runtime tiers, each running where it fits best:

• Web tier. Next.js App Router. The arena pages read /api/arena/claims, a feed that checks the ER first and falls back to the base layer, so delegated markets render with live state. Challenges are signed in the browser through @solana/wallet-adapter (Phantom, Solflare).
• Worker tier. One long-lived Node process running the oracle, the market-creator, the twenty-persona council and the read-index indexer, each signing with its own Solana keypair. Serverless functions time out before a polling cycle can finish; Railway runs it next to the web server.
• On-chain. One Anchor program on Solana devnet owns a USDC escrow vault, the claim PDAs, and per-user virtual-balance PDAs. The MagicBlock delegation program takes temporary ownership of PDAs while they live in the ER.

SPL token accounts cannot be delegated into an Ephemeral Rollup, so USDC itself never moves inside the ER. Mimir splits state accordingly:

• USDC escrow (base layer). Deposits move real USDC into a program-owned vault PDA and credit a virtual balance PDA. The vault is the single source of truth for every dollar in the system.
• Virtual balance (delegated). Once delegated to the ER alongside the claim PDAs, challenges debit the balance in real time with no fees. No SPL transfer happens per bet, only at deposit and withdraw.
• The invariant. vault USDC = Σ free balances + Σ open-claim stakes + Σ unpaid payouts. Payouts are pull-based cranks against the vault, so no unbounded payout loop ever runs inside a single instruction.

A few details carry the trust model:

• Commit + undelegate first. At the deadline the oracle calls undelegate_claim to commit the final ER state back to the base layer. Resolution only ever happens on Solana, against committed state.
• Audit hash on chain. sha256(audit bundle) lands in program storage with the proposal; /verify/[id] recomputes it.
• Dispute window. A proposed verdict can be disputed with a bond for 24 hours; the admin rules on disputes. If the oracle never settles, refund_expired lets anyone return every stake after the resolution grace period.
• Anti-sniping. challenge_claim rejects stakes landing within 60s of the deadline, so late-information actors can't take zero-risk bets.
• Refund the ambiguous. DRAW and UNRESOLVABLE are first-class verdicts that return all stakes. Better inconclusive and refunded than wrong and paid out.

Every verdict ships with the LLM's self-assessed certainty (0–100). That number maps to a tier that the product surfaces and the oracle enforces before it proposes:

Twenty-two agents run continuously in one worker process: the oracle, the market-creator, and the twenty-persona council. Each signs with its own Solana keypair (council personas are derived deterministically from the admin secret, so redeploys reuse the same funded wallets).

A few terms that show up in the UI and on chain:

creator

The wallet that opened the claim and staked side A.

vault PDA

Program-owned SPL token account holding all escrowed USDC (6 decimals).

balance PDA

A user's virtual betting balance, delegated to the ER so challenges are free.

delegated

The claim's PDAs currently live in the Ephemeral Rollup, so challenges are ~30ms and zero-fee.

deadline

UTC unix timestamp. After this the oracle can commit and settle.

winnerSide

CREATOR, CHALLENGERS, DRAW (refund), or UNRESOLVABLE (refund).

proposed / disputed

A verdict is proposed first; it finalizes after the dispute window unless someone disputes it with a bond, in which case the admin settles it.

evidence_hash

sha256 of the verdict's audit bundle, recomputable on /verify/[id].

confidence

0–100. Maps to FIRM (≥80), CONTESTED (60–79), or REFUND (<60).

1. Get devnet SOL + USDC. Airdrop devnet SOL for transaction fees and get devnet USDC from faucet.circle.com (Solana Devnet) for stakes.
2. Connect your wallet. Phantom or Solflare on Solana devnet. The wallet button in the header handles the connection.
3. Deposit and delegate once. Deposit USDC to credit your virtual balance, then delegate it to the ER. This one-time setup makes every bet afterwards instant and free.
4. Challenge a market. Browse the arena for open claims and stake the side you believe. Challenges land in ~30ms inside the Ephemeral Rollup.
5. Wait, then collect. At the deadline the oracle commits, evaluates and proposes; after the 24-hour dispute window the verdict finalizes. The settlement card shows the verdict, the explanation, the confidence tier and the audit hash, and your winnings are claimable from the vault.

For price claims the oracle reads independent sources at the deadline. When they agree the verdict carries more confidence; when they land on opposite sides of the threshold the claim refunds instead of picking a winner.

• Resolution feed

  Flash Trade

  The oracle price most crypto claims name as their resolution source, read from the public Flash Trade API.

• Independent reading

  CoinGecko

  Structured price data read straight from the API, including the historical price at the deadline.

• Independent reading

  CoinMarketCap

  Price data provided by the CoinMarketCap API: separate exchange coverage and weighting, so the readings do not share a mistake.

• Independent reading

  Chainlink

  On-chain reference feeds for the majors, read at the last round at or before the deadline.

Every reading and the resulting verdict go into the audit bundle whose hash is committed on chain, so the cross-check can be verified rather than taken on trust.