Product / Engine· target design · sandbox

Bids that stop when authority stops.

A Rust bidding edge and OpenRTB router consume signed snapshots, enforce budgets atomically, and fail closed when state is uncertain.

01 / EDGE

Built for the 10-millisecond decision.

The edge holds no writable configuration. It holds a signed snapshot, public verification keys, and counters with explicit leases.

Concern	Approach
Protocol	OpenRTB 2.6 with dated maintenance revisions; AdCOM objects where applicable
Units	Micro-dollars with exact decimal parsing and explicit rounding
Supply	Permitted inventory, floors, deal terms, brand and category policy
Budget	Atomic reservations, lease acquisition, local counters, replenishment
Fallback	Conservative deterministic strategy when a model is unavailable
Freshness	Stale snapshot or unknown lease stops new bids

02 / CONTRACT

One decision, fully attributed.

Each decision record carries the input snapshot, policy revision, model hash, warrant digest, and trace correlation.

jsondecision record (excerpt)

{
  "decision_id": "dec_01JEX",
  "bid_micros": 1860,
  "floor_micros": 1200,
  "policy_revision": 14,
  "snapshot_id": "snap_01JEX",
  "warrant_digest": "sha256:…",
  "outcome": "no_bid",
  "reason": "consent_missing"
}

No-bid reasons are typed, counted, and visible in the cockpit. “No bid” is an accountable outcome, not an absence of data.

Rollback switches snapshots without reversing settled spend or resetting monotonic counters.

Test it in the sandbox.

Every surface is exercised against fixtures before a production credential is involved.

Start sandbox Documentation