Every step, evidenced

A state machine records that something happened. A checkpoint records how anyone knows. Without one, a dispute is two accounts and no facts — which is exactly the case a jury cannot decide fairly.

The handover is the moment liability moves. Before it, the risk is the sender's; after it, the driver's. The guarantee fund only covers loss inside a validly opened custody window — a policy the trail can actually prove.

Who carries the risk now

The Befer

60%

✓
Posted
timestamp
8/10/2026, 9:12:00 AM · 9f2a1c7e04
✓
Bid accepted
timestamp
8/11/2026, 6:40:00 PM · 3b81de55c9
✓
Handed to the driver
custody opens
photolocationthe other party's code
8/14/2026, 7:55:00 AM · 51.2194, 4.4025 · c704ab9218
✓
On the road
optional
location
8/14/2026, 7:20:00 PM · 45.7640, 4.8357 · 5d6e17f0aa
●
Delivered
photolocationthe other party's code
○
Confirmed by the client
releases the money
timestamp

Your handover code

048 216

Read it out to the driver as you hand the item over. Only give it once the item is physically in their hands — it is what starts their responsibility for it.

Shown once. We keep only its hash, never the digits.

Enter the sender's code

Ask for it as you take the item. Entering it is what proves the two of you were in the same place — a photo and a GPS pin can both be produced alone.

Five attempts, then the sender must issue a new code.

Anyone can check this

Each checkpoint hashes the one before it, so the sequence cannot be reordered, back-dated or quietly pruned. Only the final head is anchored on chain, and that single hash pins the whole trail.

posted     → 9f2a1c7e…   prev: —
awarded    → 3b81de55…   prev: 9f2a1c7e…
handover   → c704ab92…   prev: 3b81de55…   ⌗ code · ▢ photo · ◎ 51.2194, 4.4025
in_transit → 5d6e17f0…   prev: c704ab92…   ◎ 45.7640, 4.8357