Correct code still gets refunded
if it touches a protected path.
Every row below is a real settlement with a transaction you can open. The refunded one passed the buyer's tests on its merits. It was rejected before those tests ever ran, because it also edited the deploy gate.
Settlements
4KInc/mergegate-demo-task| Verdict | Submission | Amount | Recipient | Network | Settlement | |
|---|---|---|---|---|---|---|
| REFUNDED | 1758ca30…fe0e | 0.25 USDC | 0x5c34e3…31a2 | BASE | 0x8362ac90…5354 ↗ | Receipt → |
| SETTLED | 3272dffd…d036 | 0.25 USDC | 0xbe1424…a558 | BASE | 0x35209073…e24c ↗ | Receipt → |
| SETTLED | 97e4bd61…9373 | 0.25 USDC | 0xbe1424…a558 | BASE | 0xf8cb4b0f…e9b6 ↗ | Receipt → |
| REFUNDED | 9a4388aa…a98c | 0.25 USDC | 0x5c34e3…31a2 | BASE | 0x46f5c75d…bed2 ↗ | Receipt → |
| REFUNDED | e6bd8ffb…5e97 | 0.25 USDC | 0x5c34e3…31a2 | BASE | 0xc9a5e865…7d25 ↗ | Receipt → |
| SETTLED | e8a00740…5119 | 0.25 USDC | 0xbe1424…a558 | BASE | 0xa1303e97…fbae ↗ | Receipt → |
| REFUNDED | 272356db…30aa | 0.25 USDC | 0x5c34e3…31a2 | BASE | 0x4581edf6…5b1e ↗ | Receipt → |
| SETTLED | e83964b7…10ff | 0.25 USDC | 0xbe1424…a558 | BASE | 0xb8a45ef2…e827 ↗ | Receipt → |
| REFUNDED | 906e9c8c…2d14 | 0.25 USDC | 0x008ed5…6acc | BASE-SEPOLIA · rehearsal | 0x34eb52f0…b6c7 ↗ | Receipt → |
| SETTLED | a34a6bf1…248a | 0.25 USDC | 0x2219ac…e882 | BASE-SEPOLIA · rehearsal | 0xe5affe62…9229 ↗ | Receipt → |
Totals span every network shown. Rows marked rehearsal settled on Base Sepolia, not mainnet.
Settlement integrity
one contract → one eligible SHA
→ one verification → one terminal settlement
Enforced in three independent places: webhook de-duplication, the settlement state machine, and the payment rail's idempotency key. They fail independently, which is the point.
Sandbox posture
Measured by probing inside a live Cloud Run Job, not assumed. Two channels stay open and are disclosed rather than rounded up: DNS, and one allowed destination without which the job cannot receive its inputs. See the probe →