# The Hive: BNB settlement

Status: tested with fixtures; real signing disabled. Flap on BNB Chain (56), native BNB only. No mainnet or testnet payment has been sent by this implementation.

## Addresses

Collection: `0xfFa38dED1721f34Bc87368430C85C85E3d66D264`.

Operator treasury: `0x318DA8f766Bfe1402A832D0204c29F2dE92F7dA8`.

The initial 32 bee addresses remain in the public registry. Newborns require wallet provisioning. The ledger binds one experiment, chain and immutable registry; extending a funded registry requires an explicit migration.

## Implemented

The separate SQLite ledger uses exact integer wei stored as decimal strings, full synchronous commits and durable receipts, intents and events. It does not reuse simulation credits. Receipts are uniquely keyed by chain and transaction; conflicting duplicates are rejected. The private CLI verifies a supplied transaction hash through a trace-capable RPC. Only successful native BNB calls from the pinned payout contract to collection count. Failed calls, reverted ancestors and delegate calls cannot create income. Confirmation depth and canonical block identity are checked. Automatic transaction discovery is not connected yet.

Distribution uses an explicit living-bee list, a collection reserve, a gas allowance per transfer, a minimum payout and a daily cap. Equal shares are planned atomically; missing wallets block the batch. Remainders stay in collection. Planning reserves funds immediately; recipients are credited only after confirmation.

Purchase intents permit registered bees to pay the treasury for information or food. Decision evidence is stored as provenance, not proof of honest inference. Successful confirmation queues a uniquely identified service effect. Failed payments refund value and unused gas. Consumed gas remains spent. The live adapter that reserves finite stock and applies services idempotently is still pending. No real payment modifies the colony today.

The optional executor checks chain, balance, registered EOA recipients, per-payment limits, gas limits and the actual UTC signing-day cap. It serializes nonces per sender and stores signed bytes before broadcasting. Following uncertainty it queries the exact hash and may rebroadcast the same bytes. It never skips a nonce or invents another transfer. An unknown consumed nonce pauses settlement. Wallets require exclusive use by this executor.

The Windows signer decrypts the existing keystore in memory and checks address and signature recovery. It cannot sign for the treasury and is never imported by the public engine. No real wallet was unlocked for signing during this development step. Windows must remain available for this design; there is no always-on AWS signer. This is software custody, not HSM protection. A compromised Windows session can compromise the keys.

The private CLI rechecks credited receipt blocks before importing another payment. Reorganizations pause settlement rather than inventing compensating funds. Continuous monitoring remains pending. The event journal is not tamper-proof and requires off-host backups. HTTPS alone is not key custody.

## Accounting and evidence

`verified receipts = available account balances + pending value and gas reservations + consumed gas`

Twenty-seven automated fixture tests cover receipt provenance, confirmation checks, reverted calls, duplicates, integer precision, atomic caps, missing wallets, pause behavior, restart recovery, payment failures, service gating, nonce serialization, uncertain broadcasts and confirmation replay. The six-stage public rehearsal uses synthetic amounts and a scripted purchase. It is not a neural evaluation or a blockchain trial.

BNB is not automatically converted into model credits. The network was trained at fixed credit prices without chain costs; monetary prices and further evaluation are needed before live purchases.

## Before activation

Verify the launched token and actual payout contract. Configure a trace-capable RPC and confirmation policy. Agree daily and per-payment caps, minimum payout, gas and collection reserves, and BNB service prices. Complete portable key recovery, off-host ledger backups and a small chain trial. Connect automatic receipt discovery and the live finite-stock/service-effect adapter. Only then enable a supervised signing process. The public site cannot activate signing.

## References

https://docs.flap.sh/flap/developers/basic-and-mechanism/flap-tax-token/tax-token-v1

https://geth.ethereum.org/docs/developers/evm-tracing/built-in-tracers

https://eth-account.readthedocs.io/en/stable/eth_account.html