Indexing and reconciliation

Event pipeline

The API Worker queries finalized Vault and BondMarket receipts from Envio HyperFuel every minute. Every page containing LogData is archived immutably in compressed R2, including unknown logs. Known events are decoded and reduced idempotently into D1.

Empty receipt ranges advance cursor metadata only. They do not create empty R2 objects or run projection writes.

Read authority

• Contracts are authoritative for custody, liabilities, permissions, and settlement.
• Wallet NFT UTXOs are authoritative for positions currently held by a connected user.
• D1 serves global discovery, escrowed listings, history, statistics, cursors, and audit metadata.
• R2 preserves historical source evidence.

Immediate listings

The seller receives session-local optimistic visibility immediately after confirmation. It is restricted to that seller, expires after ten minutes, and is replaced by canonical indexed data. API errors never clear it.

Reconciliation status

indexed_unreconciled means events were indexed but an independent exact contract-state reconciliation has not yet certified the snapshot. It must not be presented as contract reconciled. Exact-block checks never silently fall back to latest state.