THE PONSDESK PAPERS

One token commands one drawer, the drawer fills with stock, and the token is the only key there is. What follows is the whole machine, piece by piece, with nothing left out and nothing claimed that the contracts do not enforce.

A ponsdesk is an ERC-721 on Robinhood Chain, numbered from one, in order, forever. The serial is the whole identity. It names the token, it seeds the derivation of the desk's drawer, and it appears in every event the desk ever emits. The token itself is kept deliberately empty, no artwork pipeline, no traits, no reveal, nothing offchain that can rot or get repointed, because the desk is not the collectible. The desk is a key, and everything worth looking at sits behind it.

What it is a key to is the drawer, a smart account created through ERC-6551, the token bound account standard. The pairing is arithmetic rather than administration. The drawer address comes out of CREATE2 from five fixed inputs, the chain id, the canonical registry, the drawer implementation, the collection address, and the serial, which means anyone can recompute it from public data and nobody can point it anywhere else. Inside, the stock sits as ordinary balances at the drawer's own address. Nothing is wrapped, nothing is a receipt, nothing pools under an operator's key. The drawer obeys whoever holds the desk in that block, so a marketplace sale hands the entire position over with the sale, no claim step, no cooldown, and no spare key for the seller.

Minting costs the entry price plus a flat fee, and the entry price is the anti-dilution machine at the heart of the protocol. Take everything every drawer holds, value it at the venue's live quotes, add what waits in the till, divide by the desks standing, and that is what one desk is worth and what the next desk pays to exist. Because every mint pays in exactly one desk's worth of value, minting never waters anyone down. Early desks keep their whole head start, late desks start level instead of behind, and every existing desk is worth the same the block after a mint as the block before it. That is why there is no supply cap and no countdown. Caps protect holders from dilution, and here there is none to protect against. The price is the cap, recomputed every block.

ETH gathers in the till from three sources and nowhere else, the flat fees from minting, the collection royalty on resales, and the levies left behind by desks that fold. Once the balance passes the trigger level, a fill arms itself, publicly, for anyone. The first caller to turn the machine sets the purchase in motion and keeps a slice of it for the trouble. There is no operator, no schedule, and no server the protocol needs. It runs because turning it pays, and for no other reason.

One fill is one purchase of one equity with the till's entire balance, and the machine chooses that equity with a single rule called squaring. Hold the whole roster in even measure, and buy whatever sits furthest short of its measure. Prices drift, one holding swells, another thins, and every purchase leans against the drift. When a new equity joins the roster it arrives holding nothing, which makes it the shortest thing on the shelf, so the machine raises it to level on its own, buying only, never selling. The next purchase is always public knowledge, readable off the shortfall table before it happens, and that is the point. A rule this small has nothing to hide.

The fill executes through the venue under a price guard measured against the time-averaged quote, and the caller is treated as hostile the whole way. Timing is the caller's only input. The rule picks the equity, the till sets the size, the guard sets the worst acceptable fill, and if the venue cannot fill inside the guard the whole transaction reverts, the till keeps every wei, nobody is paid, and the fill stays armed for whoever tries next. Everything in ponsdesk fails closed like this. A mint that underpays the live price reverts whole, a fold from the wrong wallet reverts whole, and there are no partial states anywhere to clean up.

Bookkeeping is two numbers and a subtraction, built so ten thousand desks cost the gas of ten. Each equity carries a tally, the running total of what one desk has been credited since launch, and a fill moves each tally once, by the purchase divided by the standing count, one write whatever the population. Each desk carries a notch per equity, the tally as of its last delivery, and what a desk is owed is always the tally minus the notch, with no other term in the formula. Delivery into the drawers is lazy, permissionless, and paid, so desks in cold wallets get stocked without their owners lifting a finger. Nothing expires, nothing decays, and a desk minted after a fill starts notched at the present, so it can never reach backward for value that predates it.

Any owner can fold any of their desks at any time. The machine delivers everything owed first so nothing is stranded, then the drawer releases its holdings minus the levy and the token burns, the serial gone for good. The levy spreads to the remaining desks through the tallies, so every exit makes the desks that stay slightly heavier, and the open door welds a floor under the market that nobody has to defend. A desk listed below its holdings minus the levy is free money to whoever buys it and opens it, and that trade never stays on the table for long. The floor is not a promise. It is what the desk is made of, priced by the venue in real time.

The protocol keeps a fixed slice of the flat fee and a fixed slice of the royalty, both set at launch, both readable below, and touches nothing else. The entry price backs desks in full, the levy stays with desks in full, and there is no team allocation, no reserve, and no fee anyone can raise later, because the contracts ship without setters and without an admin. That shortens the list of people to worry about to almost nothing. The deployer holds no powers past launch, a caller controls timing and nothing more, a marketplace can skip the royalty at worst, and this website can at worst show you wrong numbers, which the chain will happily correct.

The name comes from pons, Latin for bridge and the name of the door most things arrive through on this chain. A ponsdesk is a bridge in the older sense, one token light enough to hold and sell in a breath on one side, a working shelf of tokenized equities that stocks itself on the other, and holding the desk is standing on both banks at once. The whole callable surface underneath is seven functions, open a desk, turn a fill, deliver a drawer, fold a desk, collect the royalty, and two views, the entry price and what any serial is owed. Everything else, this page included, is bookkeeping about what those seven have already done.

Set at launch

SETTINGVALUE
Flat fee
Fill trigger
Turn pay
Levy
Royalty
Roster size
Desks standing
Desks folded

Written once at deployment. No function exists that changes any of them.

The contracts

CONTRACTADDRESS
Desks
Drawer implementation
ERC-6551 registry0x0000...5758
Till
Machine
Roster
CHAIN 4663REGISTRYIMPLCOLLECTIONSERIALCREATE2arithmetic, not assignmentDRAWER ADDRESSanyone can recompute itchainregistryimplcollectionserial

The registry being canonical is what makes every drawer address recomputable by anyone from public inputs. The rest is this deployment, and once the slots above are filled in, every sentence on this page can be held against them. The whole callable surface is seven functions: open a desk, turn a fill, deliver a drawer, fold a desk, collect the royalty, and two views, the entry price and what any serial is owed. Everything else anywhere is bookkeeping about what those seven already did.