DamageBDD Whitepaper: Evidence-Native Digital Operations
Platform architecture, the evidence lifecycle, DAMAGE execution accounting and the roadmap for independently verifiable work.
Purpose
DamageBDD is an evidence-native platform for building, operating, verifying and exchanging software and digital services. It starts with an executable behaviour specification and aims to keep the resulting work, artifacts and acceptance decisions independently inspectable.
This whitepaper aligns the platform direction with the documented components. It supersedes the earlier narrative of variable-supply vulnerability rewards, premium-access token burns and an already complete Proof of Contribution network. Those mechanisms are not established by the evidence referenced here.
The problem
A requirement, a code change, a test report and a delivery invoice often live in different systems. Reviewers reconstruct their relationship by hand, and a persuasive explanation can be mistaken for evidence. Generated answers and patches add another layer of claims that needs an inspectable source.
The platform direction is to connect these records around a defined task: what was requested, what executed, what was observed, what was retained, who accepted it and how any payment relates to that acceptance.
Architecture
| Layer | Documented role | Reference |
|---|---|---|
| Execution | Gherkin scenarios, supported protocol steps, reports and accounting | DamageBDD |
| Knowledge | Managed indexing, source retrieval, private corpora, typed relations and LLM bridge | ECAI |
| Operations | Local voice, media and desktop interaction | erm |
| Identity and communication | Nostr event interfaces and policy-controlled NIP-46 signing | Nostr and nsecbunker |
| Artifact retention | Content-addressed reports/media and selected event storage | Blossom and Nosternity |
| Accounting and exchange | DAMAGE execution credits, Lightning top-ups and separately scoped payments | Payment flows |
Erlang/OTP supplies supervision and service composition. Storage, cryptographic backends, wallets, chains and models remain explicit deployment dependencies. A component map is not evidence that every connection has been exercised.
An evidence-bearing unit of work
A useful record identifies the specification, input scope, target environment, source/build revision, execution result, report/artifact references and the review decision. A paid workflow additionally needs its quote, payment request, confirmation and reconciliation state. These are design requirements for an integrated workflow; the current report schema must be checked in its release.
Hashes bind byte identities; signatures bind payloads to keys; execution reports contain observations. None independently proves semantic truth, complete test coverage, continued artifact availability or legal compliance.
DAMAGE utility and supply policy
DAMAGE meters and settles execution work in the documented Aeternity path. The supply policy is 42,000,000 DAMAGE with 8 decimals: 33,600,000 allocated to founder/custody and 8,400,000 to public/market use. These are policy allocations, not a statement of today's balances or liquid supply.
The described contract exposes owner minting, holder burning and swap marking.
Therefore the supply policy must not be described as an immutable hard cap.
The spend operation transfers execution payment to a node/operator; it is
not the burn operation. Token ownership does not establish a deployed voting
system, a redemption right, a liquidity guarantee or a return on investment.
Tokenomics is the detailed reference for units, operations and supply policy. Pricing explains how to obtain an execution estimate and a payment quote without treating a historic rate as current.
Payment and acceptance are separate states
A Lightning top-up exchanges a paid invoice for execution credits through the configured integration. A contractor payment follows the terms of a work item. A hold-invoice or swap-based job adds a conditional payment state machine that needs its own validation. Remote wallet authority is another separate permission boundary.
The existence of one path does not establish escrow, automatic refunds or automatic payouts in another. Preserve receipts and test duplicate callbacks, interruption, expiry and recovery for the flow being offered.
Validation and limits
The capability matrix is the status entry point. The 7 October integration review records its source snapshot and unresolved publication/recovery gaps. The nsecbunker report covers its named release and scenarios. The video reuse pilot has a separate local-test scope. No new runtime evidence is added by this editorial revision.
The documented index-job mint helper dry-runs; chunk-job payment is a local placeholder. The dated search review records exact-filter and snapshot-digest gaps. These limits must remain visible when discussing knowledge releases or marketplace applications.
Roadmap for independently verifiable work
The longer-term direction combines independent execution, agreement between verifiers, recoverable job allocation and settlement, and exchange of reusable features, knowledge and media. Reward policies and adversarial testing need explicit scope, authorisation, funding and dispute handling.
A Proof of Contribution design belongs on that roadmap until its protocol, implementation, threat model and reproducible results are published. Likewise, large-scale performance, automated feature sales and business-intelligence workflows need their own measured demonstrations.
Begin with one customer evaluation, retain its evidence, and expand the integration after the next boundary has been tested. Read the vision and platform map for the wider direction.