Buy into escrow

Listings appear when they have a live version and are not paused or delisted. Holder-only listings require a Scout tier or higher. A holder-only early window blocks wallets with no tier until that window ends. You cannot buy your own listing, and a wallet that already holds a license for it is rejected.

Checkout creates a pending order and one transaction for your wallet to sign: compute budget limits, then the escrow program's initialize and fund, which create this order's escrow account and move the total into it, and a memo tm: plus the first eight characters of the order id. You are the only signer and pay the network fee. We simulate it on devnet before your wallet sees it. The order expires after 20 minutes. Before marking it paid, the API reads the escrow account on chain and checks the buyer, seller, amounts and fee fields.

A settled order is paid. Release waits until escrow_until, which the escrow account stores (set when you sign the checkout, so it ends at most 1 hour after your payment is confirmed); release runs within about five minutes after that. The program rejects an earlier release, and none happens while a dispute is open. Your purchases page reads escrow_until from the account. The seller receives the list price. The net fee is split across buyback, verification, ops, and safety.

While the order is paid and the window has not ended, you can open a dispute for Malicious or unsafe, Not as described, Broken or changed, Something else. A malicious dispute can also be opened up to 30 days after payment, including after release. Opening a dispute pauses release.

If the dispute is upheld, you are refunded the total you paid. When the order was still paid, that refund is debited from the vault ledger. When it was already released, the refund is taken from the creator bond and then from the safety bucket. An upheld malicious dispute delists the listing, delists its live and superseded versions, bans the creator, and slashes the bond. A rejected dispute returns the order to the status it had before the dispute.

New versions are free for 30 days after your purchase. After that, the seller's monthly update price (shown on the listing, 0 means free updates forever) plus the marketplace fee, less your tier rebate, renews updates for 30 days, counted from the later of now and your current expiry. Renewals are a vault transfer with memo upd:.

Download gives you the newest version you are entitled to. You can always download the exact version you bought, and every version that went live while your updates were active. Your Purchases page shows Update available with the changelog and, when your updates have ended, the renewal price. Each copy is watermarked to your order and wallet.

The download route accepts the order only when its payment is confirmed in escrow (paid) or released, no dispute is open, and a license exists for your wallet. The file is watermarked with the order id, your wallet, and the version sha256, then stored and handed out through a signed URL that lasts 300 seconds. The version hash is checked on upload, and the same bytes cannot be listed by a different creator. The verify page matches a file you already have against that hash: sign in with a wallet, and you get 1 free check per day (UTC) per wallet and network, then 0.01 SOL per check, paid on chain.