Aivy Quorum · Earthquake cover

Choose a place. Commit the payout. Verify every step.

After an earthquake, a small business may need cash before it can finish a claim. Quorum explores a simpler promise: agree on a measurable trigger and payout in advance, then let verified signatures release that exact transfer on Hedera.

Try Quorum → · Monthly cover agent · Bridge & swap · Demo film and script

Judge shortcuts: Contributions · Hedera · Uniswap · Evidence · Security · New vs. reused · Setup

Real testnet transactions, funded demo accounts, no wallet extension. Demo tokens have no cash value. The mainnet payout is a labeled historical experiment.

Ecosystem contributions

Reusable plugins, developer skills and upstream proposals by Juan Gomez. Quorum connects these contributions in a working product other builders can inspect.

Contribution	Value for other builders	Quorum / event status
HAK scheduled settlement	Reuse a committer + oracle-quorum settlement pattern.	New this event · key builders consumed here
HAK Uniswap plugin	Give Hedera agents access to Uniswap's EVM liquidity.	npm swap tool: prior work · quote-only tool added this event
HAK Axelar plugin	Add token transfers and cross-chain messages to HAK agents.	Published on npm · ITS transfer builder used here
Hedera developer skills	Teach reliable Mirror Node reads and account/key handling.	Mirror Node skill applied · Accounts & Keys skill credited separately
HAK core proposal #1088	Add flat threshold/key-list account creation to shared tooling.	New this event · PR open, not merged
Aivy Labs integration	Connect approved monthly rules, guarded purchases and readable receipts.	New this event on the existing Aivy app

Full contribution map, code, skills and PR status → Includes earlier SaucerSwap, Pyth, Stader and other HAK plugins as background work.

Try the business model

Try	Where	What actually happens
Buy cover	Search “Medellin” → choose budget → create cover	Premium transfer, published terms, cover NFT and pre-signed payout schedule on Hedera testnet.
Check an event	Policy → Check for earthquakes	Three catalogue requests paid through Blocky402; matching evidence may authorize oracle signatures.
Set monthly rules	Aivy Labs canvas → review → activate	A deterministic worker buys within an approved budget, for up to three periods.
Reach Uniswap	Swap → Bridge / Swap	Actual Hedera → Axelar → Sepolia transfer and Trading API swap. Starter tokens also allow an immediate swap.
Provide liquidity	Swap → Provide swap liquidity	Real Uniswap V3 NFT, add liquidity, collect fees and withdraw.
Fund or refer	Fund the pool / Refer & earn	Shared-pool ARPS deposit or a referral link paying 15% of a referred premium.

Ask the companion about a policy or network. AI interprets the question; trusted code reads the facts. Chat cannot buy, sign or move funds. Business flows · Current review.

Why Hedera

The promise is a native Scheduled Transaction. Its fixed asset, amount and beneficiary are committed at issuance. The pool's key requires agent AND two of three oracle keys; Hedera executes when those signatures are present.

flowchart LR
  P["Place + premium"] --> T["HCS terms<br/>HTS cover NFT"]
  T --> S["Fixed payout schedule<br/>agent pre-signs"]
  T --> O["Oracles verify terms<br/>and earthquake evidence"]
  O -->|"2 of 3 signatures"| S
  S --> H["Hedera executes<br/>exact transfer"]

Component	Why it belongs here	Inspect
Scheduled Transactions + nested keys	Encode the fixed-transfer authorization without our own settlement contract or a final keeper transaction.	Payout · Reusable HAK plugin
HCS	Publish terms and hash-bind them to the transfer each oracle verifies.	Terms · Binding
HTS	Cover receipt NFT, demo settlement asset, atomic premium/broker split and ARPS shares.	NFT · Premium
Mirror Node	Read actual signatures, NFT ownership, balances and receipts for the UI and companion.	Reader · Verification
Blocky402 + x402	Pay per policy-bound oracle request, without an oracle subscription or API key.	Payment flow · Consumer

sequenceDiagram
  participant A as Quorum agent
  participant O as Oracle service
  participant B as Blocky402
  participant H as Hedera testnet
  A->>O: Request published policy check
  O-->>A: 402 payment requirements
  A->>O: Validated, signed exact payment
  O->>O: Verify payer, terms and catalogue availability
  O->>B: Verify and settle once
  B->>H: Co-sign payment and sponsor network fee
  H-->>B: Consensus receipt
  B-->>O: Matching settlement receipt
  O-->>A: Evidence result and receipt

0.001 aUSDd per source; up to 0.003 per check. Three confirmed Blocky402 payments returned no match, so they produced no oracle signature or payout. Payment buys an evidence check, not claim approval. Live services, setup and receipts.

Event checks are requested from the policy page; no background earthquake monitor is deployed. The ledger enforces signatures, not earthquake truth.

Why Uniswap

Bring Hedera agents to Uniswap. Let other developers do the same. Quorum's creator, Juan Gomez, built hak-uniswap-plugin, an open-source Hedera Agent Kit (HAK) plugin published on npm. HAK developers can add Uniswap swaps to their agents: a reusable route from the Hedera developer ecosystem to EVM liquidity.

Reuse it: npm i hak-uniswap-plugin · npm package · 233 downloads through September 9.

Quorum puts that access into a cover journey. It uses the plugin for live Base/Unichain quotes and adds guarded Sepolia swap and LP adapters. Axelar transports the demo asset; Uniswap routes its swap and manages trading positions. Quorum validates the prepared transactions before its scoped demo signer executes them. No custom Solidity swap contract was added.

flowchart LR
  H["Your Hedera aUSDd"] --> A["HAK Axelar plugin<br/>ITS bridge"]
  A --> E["Your Sepolia demo wallet"]
  E --> U["Uniswap Trading API<br/>quote + swap"]
  U --> C["Test USDC + receipt"]
  E <--> L["Uniswap LP API<br/>V3 position NFT"]

Integration	Exact implementation / contract
Our HAK Uniswap plugin · reusable agent tools	Source and npm release · Quorum's uniswap_quote call
Trading API /quote + /swap	API calls · calldata and Permit2 checks
LP API: create, increase, collect, remove	API adapter · validation
Sepolia aUSDd / test USDC · 0.3% pool	Pool contract · position manager
Execution and allowances	Universal Router · Permit2 · scoped signer

Verified: bridged-token swap · V3 NFT mint · fee collection · full lifecycle.

Starter tokens come from previously bridged sponsor inventory. They do not prove that the visitor's new bridge has completed. Mainnet Base/Unichain prices are quote-only; execution here is Sepolia. Networks, assets and limits.

Built with our HAK Axelar plugin

Our pre-existing hak-axelar-plugin 1.0.1 builds each new Hedera ITS transfer with axelar_send_token. Quorum adds exact contract/token/recipient checks, a tested native-gas unit correction and a durable transaction journal before signing. The guarded integration is event work; the plugin itself is prior work. Adapter · Package-level tests · Delivered transfer.

Uniswap developer feedback · Prize requirements and remaining steps.

Two pools, two purposes

	Fund cover	Provide swap liquidity
Network	Hedera testnet	Ethereum Sepolia
Receipt	Fungible ARPS shares	Uniswap V3 position NFT
Capital supports	Conditional earthquake payouts	aUSDd ↔ test USDC trades
Earnings / exit today	Not implemented for ARPS	Swap-fee collection and liquidity withdrawal

Policy funding cards are economic previews, not individual vaults or issued LP NFTs. ARPS deposits back the shared pool and cannot select a policy. A percentage of shares is not an APY. Test liquidity is not a USD peg or redemption promise. Worked economics and risks.

Commercial direction · proposed: provide issuance and verifiable settlement to insurers and brokers, funded by partner subscriptions and per-policy service fees. Today, no platform fee is collected. Next: validate one regional partner pilot, risk calibration, customer demand and operating costs. Business hypothesis.

Connected to Aivy Labs

“Cover Medellín every month, within my budget.” The dedicated Aivy canvas turns explicit spending rules into a persistent Quorum purchase mandate. Up to three periods; pause at any time.

Real example: policy #34, 10 aUSDd premium → 1,398.89 aUSDd conditional payout. Its first purchase is verified; later renewals are planned attempts, not completed transactions. Both companions answer from scoped records and receipt links. Neither chat can change a mandate.

Worker and custody · Companion guardrails · Aivy source · Verified interaction.

Verify in one minute

Evidence	Open	What it proves
Testnet cover	Policy #34 · HCS, NFT and premium checks	Terms, beneficiary, NFT pointer and exact committed payout match.
Testnet paid data	Blocky402 receipts	Three paid catalogue requests; no-match outcomes did not authorize payout.
Testnet bridge and swaps	Cross-chain receipts · managed-wallet lifecycle	Actual transfers, approvals, swap and position operations.
Recorded mainnet release	4 HBAR transfer	Controlled signatures caused the scheduled transfer to execute.
Recorded blocked control	Oracle-only schedule	Oracle keys without the agent signature could not release that transfer.

Mainnet footage is a September 4 controlled experiment, not a real earthquake claim or proof of independent operators. Each video action is mapped to its receipt and editing boundary.

Security by architecture

AI explains. Deterministic code authorizes. Ledger keys enforce signatures.

Boundary	Guardrails / source
User or model input	Typed allowlists, scoped topics and owner-bound account reads. HTTP · Companion
Issuance	Durable budgets, fresh capacity, reservations and a kernel lock. Same request ID cannot mint twice. Guards · Issuance
Oracle signing	Published HCS terms must match the exact schedule, asset, amount, beneficiary and conditions. Extra transfer legs and duplicate identities are rejected. Verifier
x402 / EVM	Exact payments and approvals, pinned networks/contracts, recipient and slippage checks; journal before broadcast. Uncertain operations retain their original transaction. Blocky402 · Managed wallets
Ledger reads	Filtered token balances, exact large integers, SDK entity normalization; missing/indexing data stays unverified. Reader and tests

Limits remain visible: runtime guards. The demo uses service-managed hot keys on one VPS. Separate keys are not independent operators. Capacity reservations are off-ledger; no independent audit or production readiness is claimed. Full security architecture and remaining work.

What is new

The contribution connects hazard pricing → a fixed obligation → paid, policy-bound verification → native scheduled execution, then exposes the result through geographic receipts, constrained agents and an EVM liquidity path.

Reused before this event	Built for this event
Earlier Aivy app, orchestration infrastructure and robot art	Dedicated monthly-cover canvas, persistent purchase worker and read-only companions
Earlier HTS pools and Scheduled Transaction experiments	Extracted conditional-settlement HAK plugin, policy-bound oracle signatures, issuance and recovery guards
Our published HAK Uniswap plugin and HAK Axelar plugin	Guarded cross-chain adapters, funded demo wallets, Trading API swaps and V3 liquidity lifecycle
Existing earthquake catalogues and geographic data	Hazard-price model, global search, geographic NFTs, interactive $800-payout premium history
Our pre-existing Mirror Node developer skill	September 10 read-path hardening and public verification

Prior work boundary (CONTINUITY track)

Full disclosure, repositories and event history → Quorum's history starts September 4, 2026. Earlier work is credited explicitly; we do not claim to invent parametric insurance or multisignatures.

Upstream: reusable settlement plugin · Agent Kit threshold-key PR #1088 · our Mirror Node skill PR #16, applied as development guidance. These PRs and our Accounts & Keys skill PR #29 were open at the September 10 review. Exact contributions and boundaries · AI assistance disclosure.

Design: understand first, inspect deeper

Maps show the protected area. The draggable history chart holds the modeled payout at $800 and reveals yearly premium changes. Network badges and receipt links make evidence available without crowding the main flow. Mobile layouts, keyboard focus and reduced motion are covered in the documented reviews. Full design improvements · Current screenshots and GIFs.

Run locally

Node 22+, Git, Python 3 and a C++ build toolchain (fs-ext uses native locking).

git clone https://github.com/jmgomezl/aivy-parametric-pool.git
cd aivy-parametric-pool
# Allow the lockfile's public GitHub dependencies without SSH authentication.
GIT_CONFIG_COUNT=1 GIT_CONFIG_KEY_0=url.https://github.com/.insteadOf \
  GIT_CONFIG_VALUE_0=ssh://[email protected]/ npm ci
npm --prefix ui ci
npm test
npm --prefix ui run build

These tests use fixtures and temporary journals; they submit no transactions. For a running local cover service, configure a funded Hedera testnet operator:

cp .env.example .env  # Fill in your own testnet operator ID, key and key type.
npm run provision    # Creates testnet assets and performs a demo pool deposit.
npm run serve        # API: http://localhost:8791
# In another terminal:
npm --prefix ui run dev  # UI: http://localhost:5173

A fresh cover deployment does not reproduce all hosted services automatically. Oracle setup, managed Sepolia wallets and cross-chain setup need their own configuration. UNISWAP_API_KEY enables API preparation; OPENAI_API_KEY enables AI topic interpretation. Keys stay server-side. Pricing, recovery and development.

Validation: current submission review · automated checks. MIT license.