Talk a bill past the guard.

• The goal. The door owes some bills. Get one unpaid bill past the guard and the vault pays you that bill's amount.
• Listen. People on the street are free to listen to. The ones marked on the street have something to say. What they say are pieces, not answers. Some pieces belong to bills that are already paid, and some numbers are out of date. Work out which bill is still owed and which numbers are current before you write it. Your bills are yours alone. Everyone in the queue has a different ledger, so another player's winning bill will not work for you. The Desk keeps what you heard, and the names this door deals with. It is free too.
• Talk. You get 6 messages a raid. Each thing you say to the guard costs one. Handing over a bill costs one too. On some doors the guard answers one of the suggested questions with a piece you won't hear on the street. Asking it costs a message like anything else.
• The bill. Write the payee, the reference, the quantity and the unit price. The total is worked out for you. It gets in when the payee, the reference and the total all match one unpaid bill. Capital letters, spaces and punctuation in the payee and the reference don't matter. Prices use two decimal places. A bill that was already paid does not count.
• Not approved. A wrong bill only ever hears “Not approved.” The guard never says which part was wrong. Working that out is the game.
• When you get in. Your win is recorded with the vault first. You are in once the vault has it. Then the door's time lock runs, with a countdown. When it opens, press Claim and the vault pays your account. A win that is not claimed within 7 days goes back into the pot.
• The night. Each round closes at 00:00 UTC. A door pays a set number of wins a night. When they are taken, the door says it is taken tonight. After the close, the door's ledger opens for your raid, so you can see which bills were unpaid.
• Test money. This runs on NEAR testnet. tUSDC is test USDC and has no cash value. Playing costs no money.

The guard runs inside an OutLayer enclave, a sealed machine (Intel TDX) whose code is published and attested. It talks to you through an AI model.

The model writes the conversation. It does not decide a bill. The guard's own code checks your bill against the ledger, and only on a match does it sign a verdict. A wrong bill gets “Not approved.” and nothing else.

The model is told only the names of the people the door deals with. It never sees a reference, an amount, or which bills are unpaid. Each reply is also checked before you see it, and a reply that repeats a name from the ledger, part of a reference, or a bill's amount is replaced.

Your ledger is drawn inside the enclave from a secret seed, for your raid on that door and round. Before a round opens, a fingerprint of the ledger (a commitment) is written to the vault on chain.

After the round closes, the ledger opens for your raid. The page recomputes its fingerprint and compares it with the one committed before the round, so a ledger changed after the fact would not match.

A sponsor's story is sealed before its first round and cannot be edited after that.

Only the vault contract pays. It pays only on a verdict signed by the door's guard key, and only after the door's time lock, to the account that claims it. The model holds no key and cannot pay anyone.

A door's sponsor and the vault's owner cannot raid their own door or be paid from it.

A win that is not claimed within 7 days goes back into that door's pot.

After a win, the claim page shows four checks. Each one ticks only when the page compared two things itself.

Signed by the vault's guard key

Your browser checks the verdict's signature against the guard key stored on the vault.

Made by the published guard code

Your browser reads OutLayer's attestation straight from OutLayer. It names the guard code that ran, and the page compares that with the guard version built into this site. The Intel TDX quote inside it is checked with outlayer-verify, not in the browser.

This answer is the one attested

The answer the site received is hashed and compared with the output hash in that attestation.

Reply written by an attested model

The model's signature on its reply is compared with the signer in the attestation report taken for your raid.

Anyone can check a win without playing. Each door's Wins page lists every win the vault has recorded. Checking one reads the chain from your browser: the vault's record of the win, the call that wrote it, that the signed verdict in that call equals the record, and that the guard's key signed it. The page does not use our server.

On our server, under your passkey account's public key: your player name, your streak, how many nights you got in, which doors and rounds you raided, your raid's sealed state, and each raid's progress (messages used, whether each was a question, a refusal or an approval, the street hints you heard, and a win with its amount). No bill you wrote and no chat text.

On this device only: the conversation with the guard, your sign-in (sealed with a key the browser will not export), and your last share card. Log out clears them.

On chain, in public: the doors, their commitments, wins and payouts, like any NEAR transaction.

The passkey on your device creates and unlocks a NEAR testnet account for your payouts. There is no seed phrase to write down. Where your device syncs the passkey, the same passkey brings the account back on another device. After a payout you can export the key or send the tokens on from the claim page.

Everything runs on NEAR testnet. tUSDC is test USDC and has no cash value. Playing costs no money, and nothing touches mainnet.

Is this real money?

No. tUSDC is a testnet token with no cash value.

Is everything people on the street say true?

Not all of it helps you. Some of it is about bills that are already paid, and some numbers are out of date. The pieces that fit together into one unpaid bill are the ones to use.

Can I copy someone else's winning bill?

No. Each player's ledger is drawn for them alone, from a secret seed and their own raid, so a bill that wins for one player is wrong for everyone else.

Why does the guard only say “Not approved.”?

Saying which part was wrong would hand you the answer one field at a time. Finding it from the street and the conversation is the game.

Why didn't my conversation follow me to my phone?

The chat stays on the device that wrote it. Your message count, your squares, the street hints and a win do follow your passkey.

What if I never claim?

After 7 days the win goes back into the door's pot.

Can a sponsor win their own door?

No. The server refuses their raid and the vault refuses to pay them.

Can I make a door?

Yes. Sponsor a door explains how.