Technical Explainer · Reading time: 6 min

How EqubFlow works.

A rotating savings group on Arc that verifies every contribution independently, explains its choices in plain words, and cannot pay the wrong person.

1. The rotating savings circle

In an Equb (rotating savings group), six to twelve people take turns receiving a pooled pot. In each round, every member pays an agreed amount into a safety lock. When all contributions are confirmed, the entire pot is paid out to one member according to a fixed or randomly assigned schedule.

Deterministic Principle:

Every amount is tracked in 6-decimal USDC base units. There is zero rounding anywhere. Differences are recorded exactly as observed minus expected.

2. One round in detail

Stage 1: Collect

The round opens with a block deadline. Members send test USDC to the group pot address on Arc Testnet.

Stage 2: Match

The on-chain watcher verifies incoming transfers against registered wallet addresses and expects exact base unit amounts.

Stage 3: Decide

If an exception occurs (such as a late payment or unknown sender), the assistant generates an explainable proposal. Members vote by consensus.

Stage 4: Release

The payout authorizer ensures all contributions are matched or covered. Funds move only to the assigned recipient.

Stage 5: Record

A cryptographic decision record is appended to the SHA-256 hash chain, providing permanent tamper evidence.

3. Architecture and trust separation

EqubFlow enforces a strict separation between the AI assistant and fund execution. Model outputs are untrusted recommendations; deterministic gate rules and database transactions determine whether funds may move.

Model output is an input, never the release condition.
Assistant
LLM analyzes
→
Validator
Schema check
→
Authorizer
Rules gate
→
Executor
Wallet keys

4. Non-negotiable safety rules

Our core contracts and domain models implement these three fundamental rules without exception:

Zero Rounding Policy

No floating point numbers. Differences are recorded to the integer base unit (1 USDC = 1,000,000 base units). Discrepancies are never absorbed into fees.

Append-Only Hash Chain

Decision records cannot be updated or deleted. Every row embeds the SHA-256 digest of the previous row.

Fail-Closed Execution

Any timeout, unhandled error, or rule violation pauses the group safety lock and alerts the human organizer. Funds never move in ambiguous states.