GPU Archipelago: a ledger of islands

Protocol, version 1

00/ Abstract

Archipelago is a registry of servers that sell finished goods per call: model completions, dataset files and GPU jobs. Every payment settles onchain in USDG and splits 80/20 between the serving island and a burn reserve. Every island bonds$GPU against its uptime, which is measured by signed probes and posted as an hourly root. Islands on distinct hosts can bridge into continents that take joint jobs, paid by uptime and units. Parameters change only through a 48 hour timelock, and every number on this page is read from the contracts.

0.1/ Payments and the split

A buyer signs an EIP-3009 receiveWithAuthorization for the price of the good, with a nonce that commits to the island, the job and the request. Anyone can submit the authorization to the Meter. For a payment of value v:

Equation 1 / the split, rounding in favour of the reserve

0.2/ Uptime, fog and sinking

Each island answers a signed challenge every ten minutes. For hour h the keeper posts the root of the signed results, each island's verdict (lit if at least one probe in the hour was answered and the last one was), its 24 hour uptime u in basis points and the host fingerprint the probes observed. With d consecutive dark hours and bond B:

Equation 2 / every slash goes to 0x...dEaD

An island that stays dark from the first missed probe sinks in six hours with 0.985 x 0.5 = 45.2% of its bond left, which its owner can withdraw after seven days. A bond in unbonding is still slashed, so an owner cannot escape a failing machine by leaving.

0.3/ Continents

A continent needs at least two islands, every owner's signature over the member list, each member lit and outside any other continent, a 50,000 $GPU bond for non-house members, and at least two distinct observed hosts. It dissolves when a sink or a departure leaves it on one host. For a job with escrow E, island i with uptime share si during the job and units ni:

Equation 3 / fogged islands carry s = 0 for that day

0.4/ The burn

Equation 4 / L and P from the $GPU v4 pool, the ETH price from the USDG/WETH v3 pool

burnBuy(minOut) swaps USDG for WETH on Uniswap v3, unwraps it, buys $GPU on its Pons v4 pool and sends it to the dead address, at most once an hour. The keeper never calls it.

0.5/ Invariants

  1. USDG held by the Meter is at least owner credits plus the burn reserve plus open job escrows and unpaid job roots.
  2. For every payment, island share plus reserve equals the USDG received, and the reserve is at least 20%.
  3. A payment can only credit the island its signer committed to in the nonce.
  4. For every island, current bond plus everything burned from it equals everything bonded into it.
  5. An active continent always spans at least two distinct observed hosts.
  6. Claims on a job root never exceed the escrow the root was written for.
  7. No parameter changes without 48 hours in the timelock queue.

0.6/ State machine

LITFOGGEDUNBONDINGSUNKCLOSEDu < 95%u >= 95%6 dark hoursstartUnbondwithdraw after 7 days

Figure 1 / an island's states; dark hours slash in every state but Sunk and Closed

0.7/ Parameters, live

ParameterValueChanged by
Island share of each payment80%constant
Burn reserve share20%constant
Island bond20,000 $GPUtimelock
Continent membership bond50,000 $GPUtimelock
Fog threshold (24 h uptime)95%timelock
Slash per dark hour after the first2% of bondtimelock
Dark hours before sinking6timelock
Burned at sinking50% of bondtimelock
Unbonding7 daystimelock
burnBuy cap0.5% of pool depth, once an hourconstant
burnBuy caller tip1%constant
Probe interval / root10 min / hourlykeeper
Timelock delay48 hconstant

Read from the contracts at 2026-10-23 20:03 UTC. Last probe hour posted: 2026-10-23 19:00 UTC.

0.8/ Timelock

The queue is empty. Every call queued to the timelock appears here with the time it becomes executable.

0.9/ Contracts

Islands0xdc1252cE3E391dFa6194a8c0BF5a5c85c62f3a00
Probes0x0Ed82D572052a430E503b1470d4090a92365BE5C
Meter0xe185Df9e8D5445294420f11633ebdEA4F12579c8
Continents0x73A8105426278FE72FbEa0c5E21dd1764CFd996E
Timelock0xf2721CF49d0f535Aa0917cA103A7f5dDBB2a6040
USDG0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168

1.0/ Dev log

2026-10-19 / Contracts and the first storefronts. Islands, Probes, Meter, Continents and the Timelock are written and tested: 24 unit and fuzz tests, and fork tests against the chain's real USDG, the USDG/WETH Uniswap v3 pool and a graduated Pons v4 pool for burnBuy. Continents now refuse to form on one host. House islands Coral, Reef and Lagoon have their storefronts, the SDK, the MCP server and the island daemon are served from the site.

2026-10-19 / Continents need two hosts. The first design let any two islands bridge. On day one all three house islands sit on one server, so a house continent would have claimed redundancy it does not have. A continent now needs islands on at least two distinct hosts, using the fingerprint the probes observe. The house continent forms when the second host comes online.