Documentation

Contracts

Robinhood Chain (4663). One contract at launch, and it is deliberately the most boring contract we could write.

The launch contract in full

This is all of it. There is no owner, no mint function, no pause, no blacklist, and no upgrade path. Supply is created once in the constructor and can never change.

contract Metron is ERC20 {
    uint256 public constant MAX_SUPPLY = 1_000_000_000 * 1e6;

    constructor(address launchRecipient) ERC20("Metronium", "METRON") {
        if (launchRecipient == address(0)) revert ZeroAddress();
        _mint(launchRecipient, MAX_SUPPLY);
    }

    function decimals() public pure override returns (uint8) {
        return 6;
    }
}

Why so little

Paying for inference needs no custom logic on the token. You transfer METRON to the published treasury address, our indexer sees the standard Transfer event, and your balance is credited at the prevailing rate. A plain ERC-20 is enough.

Everything that could hold, redirect or freeze somebody's funds lives in separate contracts that ship later, after review. That way the contract going out on launch day carries nothing that can be got wrong, and nothing that requires you to trust us with a privileged key.

What comes after

Treasury

Receives METRON paid for inference. Withdrawals are queued three days ahead with a reason recorded on chain, so any sale is visible before it happens.

Grants

The delegation layer: lock METRON for a recipient with a model allowlist, an expiry, an hourly dollar cap, and a revoke switch. See Grants for the design. It holds user funds, so it ships when it has been reviewed and not before.