Protocol Specifications

spec/api.md

Sections: The Ordex gateway API, Reads, Paging is keyset, never offset, Filters, Writes, The protocol contract is checkable, Fees are proved, not trusted, Lost replies are recovered, never repeated, `POST /orders/:id/quote`, `POST /orders/:id/preflight`

spec/batch-purchase.md

Sections: Buying several asks in one transaction, The arrangement, What Ordex refuses before composing, What Ordex refuses before handing the result over, No partial result

spec/cold-signing.md

Sections: Cold signing and watch-only mode v1, The SignerAdapter contract, The expected transaction manifest, The nine refusals, The stepper, Watch-only profiles, Blind signing is prohibited

spec/collection-manifest.md

Sections: Collection provenance registry v1, The manifest, Membership proofs, Publication, versioning, revocation, Verification states, Compatibility, Gates

spec/counterparty-utxo-asset.md

Sections: Counterparty heritage assets v1, Identity, The authority, The attachment record, Attachment follows the spend, Attach and detach, Protection everywhere, Trading path, Readiness gates

spec/events.md

Sections: Realtime events and signed webhooks v1, The envelope, Event families, Streaming, Signed webhooks, Historical APIs

spec/interoperability.md

Sections: Portable orders: import, export, and OpenOrdex, Identity is the artifact, not the venue, Import: `POST /api/ordex/orders/import`, OpenOrdex events: `POST /api/ordex/orders/openordex-event`, Export: the envelope and the artifact, What a source may never do

spec/lifecycle.md

Sections: Order lifecycle, States, Actionability, Withdrawal is discovery, not cancellation, The activity log

spec/offers.md

Sections: Offers v1, The three offer kinds, Offer terms, The funded offer output, Acceptance leaf, Recovery leaf, The policy signers, Acceptance, Recovery, Offer lifecycle, What Ordex never does

spec/purchase.md

Sections: Completing a public ask, The seller half, Rule one: the indexes must match, Rule two: that index cannot be zero, The arrangement Ordex builds, What Ordex refuses, What Ordex never does, A public ask can be raced

spec/runes.md

Sections: Not burning the runes a purchase spends, Where a rune balance lives, The cenotaph, Reading the runestone, What makes it a cenotaph, The rule a client must apply, Conformance

spec/safeops.md

Sections: SafeOps v1, Who does what, Inventory resolution, The plan, Asset safety rules, Partitioning at scale, The execution shield, Signed results, RBF and CPFP, Monitoring

spec/swaps.md

Sections: Atomic swap links and the OTC desk v1, The two stage model, The intent, Private encrypted links, The acceptance plan, Lifecycle, Settlement cohort, Adversarial coverage