How this works, and where it can hurt you

§1   The word

Until 1921, securities the New York Stock Exchange would not list were traded on the kerb of Broad Street — outdoors, in the weather, by men using hand signals to clerks leaning out of windows. It was a real market with real prices and no building. It became the American Stock Exchange.

On the London Metal Exchange the word survives carrying the other half of the meaning: the kerb is the session that runs after the official rings have closed.

Both senses are the product. A desk here quotes tokenized equity while the exchange that issues the underlying is shut — which it is for most of every week — and it does so with no building around it. That is not a metaphor we chose; it is what the machine is.

§2   No total without its parts

Sites like this one print a headline figure — paid out, burned, volume — as a bare numeral. It is usually true. It is never checkable: there is nothing to click, no transaction behind it, and no way to tell a figure that was summed from one that was typed. The reader can believe it or leave, which is the same position as being told nothing.

So in this codebase a total is not a value anyone can hold. It is a function of the receipts behind it, and a receipt cannot exist without the signature that produced it:

type Receipt = {
  readonly signature: string;   // look it up, or it did not happen
  readonly amount: bigint;      // integer minor units, never a float
  readonly at: Slot;
};

type Sum = { readonly parts: readonly Receipt[] };   // and nothing else

function total(s: Sum): bigint   // computed, never stored, so never stale

There is no Sum.of(129048), no total field to assign, and no estimated or cached. Those are the doors a figure with nothing behind it walks through wearing the same font as a real one.

scripts/check-sum.mjs writes each of those cheats out as real TypeScript, runs the compiler over it, and fails the build if the compiler accepts any of them. Five cases, and one of them must compile — a checker that only proves failures passes for the wrong reason the moment something unrelated breaks. That control case has already earned its place once: it caught a broken compiler flag that had all four cheats “correctly rejected” while testing nothing at all.

§3   Where a desk’s picture comes from

Desk #1795 looks the way it does because it is 1795. The drawing is a function of the number — there is no image file, no metadata server and no CDN, so there is no host anybody can repoint later. Compare that with the twelve assets in the table below, every one of which has a live metadata authority.

Four traits, chosen for what survives at 64px in a list on a phone. A fifth (bezel width) was built and dropped: it was invisible at that size, and rarity a holder cannot perceive is a number in a table pretending to be a trait.

Those percentages were counted by walking all 5,000 desks on this page load, not derived from the number of options. The generator was designed to be even; whether it is even is a different question, and this table answers the second one.

§4   What you are paid in, and who has power over it

Read from the mints at slot 443,211,072 on this page load — not from a list we typed.

Somebody who is not us can freeze that equity after we have paid it to you, and can create more of it. We did not find this hidden — it is on the mint, and the table above is what reading it looks like.

https://api.mainnet-beta.solana.com

§5   Where this can hurt you

§6   And our own token, read the same way

§4 reads the assets a payout would use. This is the same reader pointed at $CURB, at slot 443,211,073. There is deliberately no second reader — a page that reads our mint more gently than everyone else’s is a brochure with a table in it.

6B97oZNn9QeQYCCqquyaRFoLvnVvTtbUNNCQ4VCipump

A token is not the collection. $CURB exists; the 5,000 desks do not. There is still no NFT collection, no desk mint, no pot and no keeper — see §5 and the mint page.