Most commerce software grows the same way. A storefront. Then a subscriptions plugin. Then a bookings app. Then an affiliate tool with its own ledger. Then a credits system someone bolted on with a cron job. Five engines, five checkouts, five places a sale can go missing — and a monthly bill for each.
We did the opposite. We deleted the engines and kept the doors.
The atom was there the whole time
ONE’s substrate is 200 lines. The schema half, written before any of this commerce work, already said two things out loud. A thing with a price is a service. A path carries revenue — the sum of what flowed across it.
Read that again and the whole product falls out. A product is a thing with a price. A sale is a signal carrying an amount. Trust is the weight those sales leave on the path to a seller. Settlement is one function every payment already runs through.
So commerce was never a feature to add. It was the system forgetting what it was built as. This release is the system remembering.
One engine, seven doors
a thing with a price
│
┌──────┬─────┼─────┬──────┐
▼ ▼ ▼ ▼ ▼
storefront chat sell affiliate agent
page card step link API
│ │ │ │ │
└──────┴──┬──┴─────┴──────┘
▼
one settlement spine
Same catalog behind every door. Before this, the wallet shop and the workspace store were two codebases with two product shapes and two sets of CRUD — a fix shipped to one never reached the other. Now they are one store with two anchors: your browser when you’re anonymous, your workspace when you sign in. Signing in doesn’t rebuild anything. It moves a row.
The merge that did this was net negative where it counted — one interface deleted two.
Signals turn into money
Here is what “one spine” buys you, concretely.
List a product and the world hears it. Creating a product emits a tagged signal. A buyer — human or agent — with matching intent routes to it the same way a task routes to the agent that can do it. You list once. Demand finds you. No outreach.
Every settled sale marks the path. Card, crypto, credits, or our own ONE token — the sale writes its amount as weight onto the path from buyer to product to seller. Ask the system for the strongest paths and you get your best-sellers, computed, not surveyed. The router ranks proven products without spending a token to decide.
Trust is arithmetic, not theater. A product card shows how many times it actually sold and the seller’s record of kept promises — read from the ledger every sale already wrote. No stars. No testimonials. A number that can’t be faked because a payment wrote it.
An affiliate is a path with a split. A referral rides the checkout. On settle, the sale writes two settlement rows — the seller’s share and the affiliate’s — through the same spine, never a side ledger. The two rows sum to the sale exactly: the affiliate’s cut floors to whole cents, the remainder goes to the seller, no cent invented or lost. Replay the webhook and the second attempt grants nothing.
Agents buy without hands. A buying agent pays, then claims its goods through one API call — attested to the buyer, and the download key never crosses to anyone else. The human checkout page calls the exact same door.
The receipts
Big claims. Here’s what’s true, checkable in the repo:
- Seven build cycles, zero new engines. Every capability composes something that already shipped — the payment spine, the announce fan-out, the binding registry. The commit: 43 files, 1,949 lines added, 1,026 removed.
- The money math is tested, not asserted. One test suite exercises the arithmetic against a real database mock: the affiliate split sums to the sale, a replayed settle grants nothing, an agent claim refuses the wrong buyer and never leaks the delivery key. 18 of 18 green.
- The riskiest cycle got the deepest model. The settlement code — real money movement — was built under our most capable model with an adversarial pass over its own work. It caught and fixed two real bugs mid-build: a double-count on a split and a double-mark on a replay. Better it found them than a customer.
And the honest line, because there always is one: this shipped proven against tests, not yet against live rails. A real card sale through Stripe and a real crypto claim on-chain are the last mile, and they haven’t run. The arithmetic is sound; the wiring to live money is the thing still to walk. We’d rather say that than pretend the test is the territory.
Five special cases became doors
The old economy sells you a storefront and a marketplace of plugins to patch its gaps. We grew the gaps shut instead. One catalog. One settlement spine. One ledger that every sale — a t-shirt, a booking, a credits pack, an affiliate split, an agent’s API purchase — writes to the same way.
A message is the smallest thing in the system. So, now, is a sale.