Governance
Changed in v0.96, Active votes first on the governance page
QUOTUM holders vote here on QUOTUM improvement proposals. A vote is a signed message, not a transaction: no gas, no allowance.
Active votes
Reading proposals.
Votes happen only on quotum.org/governance, and we never ask you to vote or connect a wallet anywhere else.
All proposals
How holder votes work
The team answers each vote with execution receipts or a specific refusal. The first proposals, published before 1 November, run 2 hours of voting, 1 hour for objections and 1 hour for the proof check, so finalization is at least 4 hours after voting opens. The count is published when voting closes. From 1 November every proposal runs 6, 6 and 6 hours. Weight is measured at block B. Passing requires 1% quorum, a simple majority and at least 5 voting wallets.
QIP-1§
Fast v0Each seat gets at least $10 per session for up to 14 sessions, funded by the sink reserve while its safety checks pass.
Should each seat get at least $10 per session for up to 14 sessions, funded by the sink reserve?
Your wallet should show a Ballot on chain 4663, typed data and never a permit. Read the full text
Wallet checklist
Your wallet should show
- typed data, not a transaction
- primary type Ballot
- domain quotum-FAST-ballot-v1
- chain 4663
- your choice and your nonce
Reject it if it shows
- an amount, a spender or a token
- Permit or Permit2
- an approval or a delegation
A Ballot costs no gas and sets no token allowance. Your address and choice will be public. To replace your ballot, sign with a higher nonce and get a receipt before close. Only ordinary addresses are accepted. EIP-7702 delegated wallets and contract wallets are not supported.
- Ballots received
- Unavailable
- Snapshot block B
- Unavailable
- Opens (V)Unavailable
- Closes (D)Unavailable
- Objections until (O)Unavailable
- Final from (F)Unavailable
Receipts and checks
Raw receipt log · Ballot package · Finalization check
Copies of the log and the collector's signed head are mirrored at github.com/qvotvm/qip-1-receipts.
Voting weight at B: ledger.json and ledger.csv, with the SHA-256 committed in the ballot package. The ledger at B replays the official RPC's Transfer and staking logs and must match balances read at B from rpc.nodeflare.app, the only public reader we found that serves that block's state; the independent check runs separate code against the same node, so the two readings do not come from independent sources.
| No. | Received, UTC | Address | Choice |
|---|---|---|---|
| Receipt log not loaded. | |||
- Package hash
- Unavailable
- Log head
- Unavailable
- Anchor wallet
- Unavailable
Collector public key
Unavailable
Proposal
Published for the QIP-1 ballot. No floor is active before its activation record.
In short
Each QUOTUM seat has an inference cap for the session: a maximum it can use, not a guaranteed grant. The contract sets that cap from measured input, roughly a day of net NVDA inflow into the sink, split across the seats at opening. Measured input has fallen, and caps fell with it: $50 per seat in session 10, $2.40 in session 23. The sink also holds a reserve, about $7,300 free on 21 October, that the contract does not turn into caps on its own.
QIP-1 asks whether quotum should give each seat at least $10 per session for up to 14 sessions, when safety checks pass, with the sink reserve absorbing the extra use and burns. The $10 is a cap for the seat, shared across the seat's keys, not a payment. On days when measured input already gives each seat $10 or more, nothing changes.
The vote signals a preference. It does not execute anything by itself. The team publishes execution receipts or a specific refusal, and passage cannot bypass the funding, accounting, provider or reserve checks.
Why now
Measured input fell from $754.83 in session 10 to $31.26 in session 23, while seats at opening grew from 5 to 13. Sessions 21 and 23 both opened with 13 seats, yet the cap dropped from $7.43 to $2.40, so the recent fall follows lower input, not more seats. A cap of a few dollars is too small to show what seats do with inference. The pilot tests whether a steady $10 per seat brings real use, with money the sink already holds.
Measured input is an approximate-day net inflow, after excluding transfers straight from the curve and pool and subtracting OPS claims. Manual transfers and claim timing can move it. It is not an audited daily fee total.
What changes
For an opening eligible under the pilot's activation and session rules, while no stop has latched and every check passes, the keeper passes the larger of measured input and $10 times its count of seats before open into TaxSink.open. The contract divides that input across the live seats, so each seat's cap is at least $10 unless the supply-value bound is lower. Otherwise the keeper passes measured input, with zero uplift. The on-chain tax24hUsd field stores this effective input, not measured input. Every session record shows measured input, effective input and the uplift between them. The uplift is not new revenue and not a separate transfer. It raises the input used for caps.
What stays the same
The $50 per-seat ceiling, the 0.25% supply-value bound, and the claim, report and bell routes. OPS keeps its existing 40% of ordinary claims, which is outside this vote, and the uplift creates no extra OPS claim. Team seat 1 still gets inference access under the same seat rules as every seat. There are no payouts, returns or fee sharing for holders. This is not a token price floor and not a payment to holders.
Cost
At the bell, recognized use by seats present becomes debt to the provider, and unused cap, even cap never handed out, buys and burns QUOTUM where free NVDA and price guards allow, as today. Raising caps can therefore raise burns without more inference use. That is a cost of the pilot, not a price promise.
With 13 seats throughout, no tighter supply-value bound and successful settlement, recognized use plus successful burns consume about $130 gross per session, about $1,820 over 14. Each new seat adds $10 per session. New inflow reduces the net draw. As an illustration only, with no new inflow, unchanged prices and no unreported liabilities, about $7,300 of free reserve on 21 October would end near $5,480. This is not a forecast or a promise of 14 boosted sessions.
Seats that join after opening get the same cap, so exposure grows with the seats at the bell. With 100 seats at the bell it is about $1,000 for that session before settlement guards.
When it stops
Before each boosted session, free reserve must be at least $2,000 plus $10 times the keeper's seat count before open for every pilot session still left, including this one. At 13 seats with all 14 sessions left that is $3,820; with one left it is $2,130. Equality passes, and the check does not lock reserve funds. After opening, the keeper compares the cap in the Open event with the cap it admitted. If the event cap is higher, uplift stops for the rest of the pilot. Seats leaving before open executes are one possible cause. That session's cap and settlement stay in force. Stale price or reserve data, unresolved provider accounting, a provider shortfall or the team's emergency stop also end the uplift. If input measurement fails, the session opening is postponed.
Before the first boosted session, a failed check only delays the start, within the approval window. After it, any stop is final for this pilot and resuming needs a new proposal. A stop never cuts the cap of a session already open.
How the vote works
Voting weight is liquid QUOTUM plus attributable staked QUOTUM, including queued stakes, counted once. It is read at snapshot block B, the latest finalized block before this proposal is published, so nobody can buy weight after reading it. Moving tokens after B does not change a ballot's weight. OPS on seat 1 is the only team wallet left out. Protocol accounts such as the sink, pools and staking escrow do not vote, and tokens held in pools give no one voting weight. Every other eligible wallet votes as an ordinary holder, without labels.
Voting is a gasless signature on quotum.org/governance. It is not a transaction and approves or moves no tokens. Only ordinary addresses with no code at B can vote under the fast rules. App wallets that use EIP-7702 delegation, such as FOMO, and contract wallets such as Safe cannot vote on QIP-1. Support for delegated addresses is planned for the next version of the rules. The charter has the exact policy. QIP-1 passes if For weight exceeds Against weight, final eligible ballots across For, Against and Abstain carry at least 1% of supply at B, and at least five distinct eligible positive-weight addresses have a counted final ballot. Addresses are not people, and large holders can decide the result.
Passing is not starting. QIP-1 runs in the charter's bootstrap class: voting runs 2 hours, then 1 hour for objections to the count and 1 hour to check the proofs, so the earliest final result comes 4 hours after opening. The count is published when voting closes. Discussion runs in one public discussion thread linked from this page. The pilot starts only if the ledger, objections and every check pass and a scheduled 20:00 UTC boosted opening succeeds at least 2 hours and no later than 168 hours after the final result. Otherwise approval expires. Dates are not set yet. The full voting rules are in the charter, and common questions are in the FAQ.
Words used below
- Session: one daily cycle, from open to the bell.
- Measured input: approximate-day net NVDA inflow into the sink, in USD.
- N: the keeper's count of seats before it sends open.
- M: the number of pilot sessions left, including the one being checked.
- Effective input: what the keeper passes to open. For an eligible pilot opening while checks pass and no stop has latched, the larger of measured input and $10 times N; otherwise measured input.
- Uplift: effective input minus measured input.
- B: the snapshot block that fixes voting weight.
- S0: the first boosted session. The pilot covers S0 through S0+13.
- OPS: the team wallet on seat 1.
Exact rules
These rules are the proposal itself. If anything above reads differently, these rules apply.
Ballot package
| Field | Value |
|---|---|
| Venue | quotum.org/governance, own gasless EIP-712 ballots and public deterministic tally |
| Ballot URL and discussion thread URL | https://quotum.org/governance#qip-1 and https://github.com/qvotvm/qip-1-receipts/issues/1 |
| B number, hash, totalSupplyWei, readable supply and quorum amount | in the ballot package: snapshotBlock, snapshotHash, totalSupplyWei; quorum is 1% of totalSupplyWei, rounded up |
| Frozen strategy, exclusions and reconciled ledger manifest | in the ballot package: exclusions, ledgerSha256, ledgerManifestSha256 and the ledger-strategy artifact; the ledger is published with the package at quotum.org/governance/qip-1/ledger.json with the same hash |
| Proposal hash | proposalHash in the ballot package |
| Publication, voting, objection, proof-check, final and expiry UTC timestamps | in the ballot package and its publication record: votingOpens (V), deadline (D = V+2h), objections [D,D+1h), proof check [D+1h,D+2h), final eligible from D+2h; activation expiry F+168h |
| Collector identity and receipt proof/mirroring policy | collector Ed25519 public key MCowBQYDK2VwAyEAetjCl1JO350n7s/Df/GIS9GOwd+DPE/cXLS+M61jVZM= (DER SHA-256 5d15f2b83a89b476dd3091388b69593d323f15d7755e970ba6315b0210549ce7); independent mirror Ed25519 key with DER SHA-256 0367d223ac5b79b8fe59b459aa90f4e912be08e70494ce4b1e7c4ad5e613df87; mirroring and recount at least every 15 minutes, at D and at or after F |
| Anchor wallet address | 0xBbbC8F2aa7C59136AA630E2195c504907844C822, an ordinary account funded only for gas, distinct from the keeper signer and OPS |
| Typed-data origin/version and canonical hash encodings | origin https://quotum.org/governance, EIP-712 domain quotum-FAST-ballot-v1 version 1 on chain 4663, primary type Ballot; canonical encodings as in the package schema |
| Account policy | eoa-only-v1: only addresses with empty code at B, by raw ECDSA signature of the address's own key; EIP-7702 delegated addresses and any other code are not accepted. account evidence hashes are in the ballot package |
| Objection operator and resolution/finalization procedure | the package challengePolicy and finalizationPolicy: objections in the discussion thread on [D,D+1h) with evidence, each with a published decision and reason; final only after every objection is decided, a fresh independent checkpoint and passing B re-checks |
| Policy-build hash, reserve valuation, freshness and provider/accounting criteria | the policy-build document in the ballot package with its SHA-256 |
| Fallback acceptance and restart rules | the package collectionPolicy.restart |
Resolve ballot-critical fields before collection. Publish hashed exact code and file bytes for token/staking addresses, chain, B/hash, ledger JSON/CSV, strategy, OPS-only team exclusion, separate protocol exclusions, schema, receipt/conflict/objection rules, verifier and tally build. Deterministic replay must reproduce the package. The eligibility method reconciles at sample blocks; reconcile again at final B. Collector, verifier and tally are implemented and tested locally. Readiness for this ballot still depends on a successful rehearsal, reconciled B evidence, completed public fields and the operator checks.
Discussion uses one linked public discussion thread; X only links to it. No separate forum. Ballots bind domain quotum-FAST-ballot-v1 and chain ID 4663. Snapshot requires separate custom-exclusion acceptance checks and is not ready for this ballot. Switching venue after collection begins requires a new frozen package and restarted vote.
Schedule and activation rules
Freeze the account policy, the exact executable build, the B-selection rule and holder instructions before publication. B is the latest finalized block on chain 4663 strictly before this proposal is published, with its hash agreed by two independently run readers. The data manifest, the ledger at B, exclusions as applied and account evidence with their hashes, is assembled after B, independently reproduced and published before voting opens; it cannot be frozen before B. If unreliable, delay voting and republish dates. A B hash mismatch at any re-check invalidates the package; never silently replace B.
V follows publication of the complete final B package. B's header timestamp and the first public publication of this proposal must each be at least two hours before V. QIP-1 is in the charter's bootstrap class. Voting accepts receipts on [V,D) with D = V+2h; every signed deadline equals D, and the close tally is published at D. Count objections run on [D,D+1h) and proofs are checked on [D+1h,D+2h). The final result F is eligible from D+2h after every objection has a published decision and all evidence gates pass. Approval expires at F plus 168 elapsed hours, inclusive for a successful opening. All actual timestamps are in the ballot package and its publication record.
S0 is the earliest scheduled 20:00 UTC opening at least 2 hours after the final result, no later than expiry, with passage, completed objection decisions and all implementation, data, provider and reserve checks passing before opening. Failed candidates defer to the next eligible opening within expiry. If none succeeds, approval expires. Publish the next on-chain session ID and reviewed policy record before sending open; verify the successful Open event. After activation, an early stop latches off and cannot select a new S0.
The signed proposal commits to the activation rule and frozen economic policy. Publish S0, its opening date and derived end in a later linked activation record, outside signed proposal bytes. They are published in the activation record before S0. The interval ends at integer session S0+13 inclusive, at most 14 openings; failed ticks, delays and unboosted sessions add no sessions. No renewal.
Use an immutable versioned policy package at proposed path /governance/qip-1/policy.json and later records at /governance/qip-1/sessions/<session>.json, linked from the QIP page. The actual URLs are published with the activation record. Keep activation/session records outside the signed proposal, bound to policy hash and actual Open event/transaction, with mirrors and revision history. They cannot change approved rules, budget, duration or stops. Freeze canonical proposal bytes and hash encoding before signing, excluding self-referential hash display and later records.
Question
Should quotum run this pilot with existing sink reserve, supplying max(measuredNet24hUsd, 10 * N) to TaxSink.open, so each seat gets at least $10 per session, while preserving the $50 per-seat ceiling, 0.25%-of-supply-value bound and claim, report and bell routes?
This input sizes inference caps. It is not a minimum token price or a payment to holders. The supply-value bound can put a seat's cap below $10. All eligible seats participate, including team seat 1. No fixed cohort or guaranteed wallet grant. Late seats can enlarge exposure. Consumption remains genuinely reported. Unused cap, including unissued grants, may buy and burn QUOTUM under existing guards. Raising input can increase burn without more inference use. Disclose failed burns.
Before each uplift, require free reserve of at least 2000 + 10 * N * M USD, with N > 0; with no seats there is no uplift. Before voting, freeze exact reserve valuation, freshness checks, provider reconciliation criteria and reviewed policy-build hash. Failed checks, unresolved accounting, provider shortfalls or a published emergency stop disable uplift. Failed measurement postpones opening. Early stops require a new proposal to resume; stopping cannot cancel current caps or bell. N here is the keeper's count before sending open. If the cap in the successful Open event is above the admitted cap, for example because seats left before open executed, uplift stops for the rest of the pilot.
Session records publish measured/effective input, uplift, caps, grants, reserve/oracle reads, liabilities, provider reconciliation, stop reasons and actual burn/forward receipts. tax24hUsd stores effective input, not measured fees. OPS keeps its existing 40% of ordinary claims, outside this vote. Uplift adjusts opening input, creates no new claim and gives OPS no extra share.
Choices and outcome
Choose For, Against or Abstain. In raw units, quorum is ceil(totalSupplyWei/100) at B, without subtracting exclusions. For must exceed Against; at least five unique eligible positive-weight final voters across all choices must participate. Abstain counts for quorum and addresses. Later sponsorship is ceil(totalSupplyWei/400) at the same proposal B. QIP-1 is a bootstrap-class proposal sponsored by the team from seat 1 under the charter's exception.
OPS (seat 1), 0xc1fe2404fec25d6a905e67bb60cddae95fee2741, alone is team-excluded from outcome, quorum and address participation. Other wallets are ordinary holders without labels. Protocol accounts are separate nonvoters; attributable stakes, including queued stakes, count once for eligible stakers.
Without a complete reconciled B ledger, no ballot or activation. If QIP-1 does not pass for any reason, measured input stays unchanged. Publish all session reconciliations at expiry before proposing continuation. Inference access follows existing stake, seat and cap rules. No holder payments, returns or fee sharing; no arbitrary reserve transfers.
Voting rules
Draft. These rules are frozen before any ballot opens and apply to QIP-1 and later proposals until a vote adopts a replacement. They replace the earlier draft charter's 72-hour vote, 48-hour challenge period and closing snapshot.
In short
Votes signal a preference. They do not execute themselves and give holders no right to move reserve funds. A vote can ask for changes existing code already allows, such as opening input, which models seats can use, compute experiments or session timing. OPS's 40% share of ordinary claims, creator fees and marketing spend are outside voting. When a proposal passes, the team publishes execution receipts or a specific refusal, and passage cannot bypass funding, implementation, accounting, provider or reserve checks.
A vote takes 18 hours from opening to the earliest final result: 6 hours of voting, 6 hours for objections to the count, 6 hours to check the proofs. The first proposals, published before 1 November 2026, run in a shorter bootstrap class: 2 hours of voting, 1 hour for objections and 1 hour to check the proofs, 4 hours in all. The count is published when voting closes, and the result takes effect only after the proof check. The windows are short so the first decisions can take effect within a day of opening, while the rules are new and caps are small; from 1 November every proposal uses 6, 6 and 6 hours again. Time alone never finalizes a count. An unresolved objection or a failed evidence check holds the result until it is resolved.
Voting weight is liquid QUOTUM plus attributable staked QUOTUM, including queued stakes, counted once, read at the snapshot block B. B is the latest finalized block before the proposal is published, so nobody can buy weight after reading the proposal. Moving tokens after B does not change a ballot's weight. Buying before B can still capture weight, and addresses are not people. OPS on seat 1 is the only team wallet left out. Protocol accounts do not vote, and tokens held in pools give no one voting weight. Every other eligible wallet votes as an ordinary holder, without labels.
You vote by signing a message on quotum.org/governance. It is not a transaction and never grants a token approval, allowance, transfer or claim. Under these rules only ordinary addresses with no code at B can vote. App wallets that use EIP-7702 delegation, such as FOMO, and contract wallets such as Safe cannot vote yet. Support for delegated addresses is planned for the next version of these rules. You can replace your ballot before voting closes with a higher nonce. The highest valid uncontested nonce counts.
A proposal passes when For weight exceeds Against weight, ballots across For, Against and Abstain carry at least 1% of supply at B, and at least five distinct eligible addresses with positive weight have a counted ballot. A tie fails. Large holders can decide the result. Ballots, receipts and the full tally are published so anyone can recount. Two transactions on chain 4663 record the hashes of the signed receipt log and the tally: one after voting closes, one with the final result, even when the tally did not change.
Several proposals can run at once. Each has its own ballot, receipts, tally and result. Proposals published together share one B. A ballot for one proposal never counts for another.
Anyone can post a draft for discussion. To go to a vote, a proposal needs sponsors with eligible weight of at least 0.25% of supply at its B. The first proposals, QIP-1 to QIP-4 when first published before 1 November 2026, are sponsored by the team from seat 1. OPS's weight still counts in no vote.
Exact rules
These rules are the charter itself. If anything above reads differently, these rules apply.
Proposals and publication
Anyone may submit a draft for discussion in its public discussion thread. Sponsorship requires eligible weight of at least ceil(totalSupplyWei/400) at that proposal's B, verified before voting opens. Bootstrap-class proposals QIP-1 to QIP-4, first published before 2026-11-01T00:00:00Z, are the team-sponsored exception: the team sponsors them from seat 1, whose stake of at least 2,500,000 QUOTUM clears the line. Sponsorship gives no voting weight; OPS stays excluded from outcome, quorum and participating addresses.
A proposal states its action, funding, implementation limits, stops and expiry. Publication freezes the proposal bytes and hash. B is the latest finalized block on chain 4663 strictly before publication, with its hash agreed by two independently run readers. The ledger at B, exclusions as applied and account evidence are assembled after B, independently reproduced and published with their hashes before voting opens. B's header timestamp and the first public publication of the proposal must each be at least two hours before V. Proposals published as one bundle share one B; each still has its own package and manifest hash. A changed proposal, an incorrect B, a missing reconciliation or unresolved evidence delays opening and requires a reviewed replacement package. Earlier versions are preserved.
The venue is quotum.org/governance, with own gasless EIP-712 ballots and a public deterministic tally. Discussion uses one public discussion thread per proposal, linked from the proposal's page; X links only, no forum.
Schedule
V is the package's explicit opening time. The package commits its class and its three durations: voting v, objections o and proof check p. The standard class is v = o = p = 6h. The bootstrap class, for proposals first published before 2026-11-01T00:00:00Z, is v = 2h, o = 1h, p = 1h; quorum, thresholds, the address minimum and every other rule are the same in both classes. D = V+v. Ballots are accepted on [V,D); every signed deadline equals D. The close tally is published at D. Count objections are accepted on [D,D+o). Proofs are checked on [D+o,D+o+p). The final result is eligible from Fmin = D+o+p, only after every objection has a published decision, the final checkpoint is independently verified and the B checks pass. F is the timestamp of the actual published final result, and every activation window measured as F+2h or F+168h uses that actual F, not the close tally or Fmin. There is no early decision and no late ballot.
Snapshot and weights
Eligible weight is liquid QUOTUM plus attributable staked QUOTUM at B, including queued stakes. Count tokens once; staking escrow is replaced by attributable stake. Pool balances are not attributed to individual voters. Use raw token units and totalSupplyWei at B without subtracting exclusions. Quorum is ceil(totalSupplyWei/100). No wallet cap or square-root weighting. There is no closing snapshot: weight is the B read for the whole vote.
OPS (seat 1), 0xc1fe2404fec25d6a905e67bb60cddae95fee2741, is the only team exclusion from outcome, quorum and participating addresses, covering liquid and attributable stake. Valid OPS ballots are kept as diagnostics and never affect the result. Protocol contracts, zero/dead accounts, sink, staking escrow as an account, curve, pools, PoolManager and manifest-listed protocol contracts are separate nonvoters. No retroactive exclusion of a losing voter.
Ballot integrity
Freeze the complete EIP-712 schema and verifier with the proposal: domain quotum-FAST-ballot-v1, chain ID 4663, primary type, field types, choice mapping and exact origin https://quotum.org/governance. Bind voter, manifest hash, token/staking addresses, proposal hash, B number and hash, choice, deadline and uint256 nonce. A ballot for one manifest is invalid for every other manifest, including rehearsal packages.
Account policy eoa-only-v1. Classify every ledger address by its code at B, read in two separately run collections and compared byte for byte. Only empty code is admitted. EIP-7702 delegated addresses and any other code cannot vote. Authentication is an ECDSA signature over the frozen typed data that recovers to the voter address. The page produces a raw 65-byte signature; the verifier also accepts the same signature in structured form, and in both cases it must recover the voter.
The collector accepts a ballot only when it records receipt on [V,D) with every field matching the package. It keeps one append-only receipt log per proposal, signs its head with a published Ed25519 key, and an independent custodian mirrors and recounts it at least every 15 minutes and at D. Save your signed acceptance receipt: a ballot without one is not proof of collection.
For each voter, use the highest valid uncontested nonce received in the window. Identical ballots at one nonce are duplicates. Different valid ballots at one nonce invalidate that nonce; the next lower uncontested valid nonce counts. With none remaining, no ballot counts.
The B hash is re-checked by both readers, each recording the B hash and a finalized height at or above B, in the five minutes before V, between one hour and one hour five minutes after V, in the first five minutes after D and within five minutes before each anchor. On a mismatch the operator stops collection and publishes a collector-signed notice, no anchor is sent, and the proposal is rebuilt with a new B, a new V and new ballots.
Objections and anchors
Anyone may object to the count on [D,D+o) through the published route, with evidence: a signed acceptance receipt for an omitted ballot, a conflicting nonce, an inconsistent log head or incorrect arithmetic. Objections may correct timely received records. They never add late ballots or reopen voting. Every objection gets a published decision and reason, with Fmin as the target; any unresolved decision delays publication of the actual final result F beyond Fmin, and the final review is completed and recorded before that result is published. Under these rules an accepted correction blocks the final result until a separately reviewed, reproducible correction process exists. No objection is rejected to reach a result.
After D, one zero-value transaction from the published anchor wallet to itself on chain 4663 records the close prefix, the proposal hash and SHA-256 hashes of the signed receipt-log head and close tally. At or after F, after every gate passes, a second transaction records the final prefix and the hashes of the final head and final tally, even when the tally is unchanged. With several proposals, anchors are sent one at a time. The anchor wallet is an ordinary account distinct from the keeper signer and OPS, funded only for gas. Anchors identify published files; they do not establish a correct count or authorize activation. The finalization endpoint supplies the count evidence; the final record is complete only when the operator has also published the passing B checks and both verified anchors.
Passing a proposal
After exclusions and objections, For must exceed Against, participation across For, Against and Abstain must reach quorum, and at least five unique eligible positive-weight voters must have a counted ballot. Abstain counts for quorum and addresses only. Ties or any failed condition leave policy unchanged. Publish the largest-voter and top-three weight shares with the result.
Voting scope and execution
Votes may signal bounded reserve and protocol priorities feasible in existing code, including opening-input policy, provider-supported models, compute experiments and session scheduling. The immutable sink has no general treasury transfer route. The $50 ceiling, 0.25% supply-value bound and payout destinations have no v1 setters. No arbitrary reserve transfers, holder fee sharing, redemption, voter compensation or holder payments are permitted. Uplift creates no extra OPS claim.
A proposal may instead be a direction signal: it asks whether holders support a direction and its principles for work that does not exist yet. A direction signal authorizes nothing. It moves no funds, deploys no contract, issues no token, changes no published promise and creates no claim, return or payment for anyone. Implementing a supported direction needs its own later proposal with exact rules, under this charter. A direction signal is labelled as one in its title.
The team publishes execution receipts or a specific refusal. Passage cannot bypass funding, implementation, accounting, provider or reserve checks. A material defect in a package blocks activation and requires a new frozen ballot.
Disclosure
Draft. QIP-1 has not passed. The proposal and the charter hold the binding rules.
One session, step by step
1. Before open, the keeper measures input: approximate-day net NVDA inflow into the sink, after excluding transfers straight from the curve and pool and subtracting OPS claims, in USD. It is not an audited fee total. Say it measures $31.26. 2. It runs the safety checks. Free reserve must be at least $2,000 plus $10 times its seat count before open for every pilot session still left, including this one. At 13 seats with 14 sessions left that is $3,820. If measurement fails, opening is postponed. Before the first boosted opening, a failed check can only defer activation within the approval window. After activation, a failed check is a stop: uplift ends for this pilot and resuming needs a new proposal. 3. If the opening is eligible under the pilot's rules, no stop has latched and every check passes, effective input at 13 seats is $130, the larger of $31.26 and $10 times 13, and the uplift is $98.74. The uplift raises the input used for caps. It is not revenue and not a transfer. The Open event and tax24hUsd show $130. Otherwise effective input is $31.26, the uplift is zero, and the event and field show $31.26. The session record lists measured input, effective input and uplift separately. 4. The contract sets each seat's cap to the lowest of $50, effective input divided by seats at opening, and, when it applies, 0.25% of QUOTUM supply value. With 13 seats and no tighter supply-value bound, the cap is $10 at $130 effective input, or $2.40 at $31.26, shared across the seat's keys. A cap is not a guaranteed grant. 5. After opening, the keeper compares the cap in the Open event with the cap it admitted. If the event cap is higher, uplift stops for the rest of the pilot. Seats leaving before open executes are one possible cause. That session's cap and settlement stay in force. 6. Seats use inference. Real use is reported as spend, capped at each seat's cap. 7. At the bell, recognized use by seats still present becomes debt to the provider. Use by seats that left before the bell can stay outside what the sink recognizes, and the floor does not fix that gap. Unused or unissued cap buys and burns QUOTUM where free NVDA and price guards allow. Failed burns are published and the NVDA stays in the sink. 8. The session record publishes measured input, effective input, uplift, reserve reads, caps, spend, burns and any stop reason.
What this does not do
It does not set a price for QUOTUM, pay holders, or pay anyone. Raising caps can raise burns without more inference use. Seats that join late get the same cap, so exposure grows with the seats at the bell. A fall in NVDA lowers the reserve's USD value. A fall in QUOTUM can lower the supply-value bound on caps. Caps do not prove that the provider is funded, and the pilot can stop early.
Exact rules
These are the detailed disclosure terms. The proposal and charter govern approval, timing and execution.
Input and access
For up to 14 sessions, proposed effective opening input is max(measuredNet24hUsd, 10 * N), where N is the keeper's seat count before open, so each seat gets at least $10 per session. The supply-value bound can put a seat's cap below $10. This is no token-price floor. Inference access follows existing stake, seat and cap rules. No cash payouts to holders.
measuredNet24hUsd remains the keeper's approximate-window net inflow measurement: exclude pair-origin inflows and subtract OPS claim outflows before USD valuation. Manual transfers and asynchronous claims can enter it; it is not an audited calendar-day fee total.
When policy checks pass, effectiveOpenInputUsd = max(measuredNet24hUsd, 10 * N) and floorUpliftUsd = effectiveOpenInputUsd - measuredNet24hUsd. Otherwise effective input equals measured input, with zero uplift. Failed measurement postpones opening; never invent measurement or substitute a synthetic floor.
The immutable Open event and tax24hUsd store effective input, not separate measurement/uplift. Public tax24h labels must explain this before activation. Uplift supports reserve use; it is not revenue and is not a separate NVDA transfer. Reports contain genuine usage capped to each seat's contract cap.
Caps and settlement
Per-seat cap is the lowest applicable value of $50, effective input divided by max(openingSeats,1), and 0.25% of whole QUOTUM supply value per seat. The supply bound requires covered nonzero previous-session TWAP. It is neither a reserve percentage nor a shared pool. The successful on-chain Open event is authoritative.
The $10 per seat floor guarantees neither grants nor a daily ceiling. Higher measured input stays higher. Grants remain subject to frozen session-budget and provider-funding safeguards, shared across each seat's keys, commitments and reserves. No primary key gets a guaranteed full seat cap.
Bell accounting covers holders then present. Recognized genuine usage becomes provider debt, reducing free reserve before forwarding. Unused or unissued cap can contribute to guarded buy-and-burn. Raising input can increase settlement without more inference use; smaller grants do not remove exposure. Unused allowance creates no balance a holder can spend. Burns require free NVDA and TWAP/price guards. Publish completed burns and failed amounts separately; uncovered or failed burns leave NVDA in the sink.
Records and stops
The frozen policy defines free reserve, reserve/oracle valuation and freshness, provider reconciliation and the reviewed build implementing checks. Each session record publishes inputs and pass/stop result, policy hash, S0/end, actual Open transaction/session, measured/effective input, uplift, reserve/price/read time, conservative cap estimate, threshold and stop reason. Preserve records across retries/restarts and retain mirrors/history. Publish actual opening seats/cap, grants, provider consumption, recognized sink spend, uncovered provider spend, liabilities and burn/forward receipts. Separate recorded on-chain debt from unresolved provider liabilities; unresolved accounting blocks uplift.
Label consumption for team seat 1 separately. OPS alone is team-excluded from voting; other wallets remain ordinary holders without labels. Protocol accounts are separate nonvoters; attributable stakes count for eligible stakers. Seat receipts show cap, actual spend, source and receipt hash, but cannot isolate measured input or floor-funded consumption. Report uplift as input support. Publish reconciliations at expiry before continuation.
Before uplift, require freeUsd >= 2000 + 10 * N * M, where M is the number of pilot sessions left including this one: a $2,000 buffer plus the floor for every remaining session at the current seat count. At 13 seats and 14 sessions left that is $3,820. On-chain reserve is not provider cash. Stale/invalid data, unresolved accounting, provider shortfalls or emergency kill also stop uplift. Failed measurement postpones opening. Record reasons; early stops persist until a new proposal. N here is the keeper's count before sending open. If the cap in the successful Open event is above the admitted cap, for example because seats left before open executed, uplift stops for the rest of the pilot.
Off by default, the pilot covers S0 through S0+13 inclusive, at most 14 openings. Skipped/unboosted sessions never extend it. Stopping restores measured input next opening without reducing open caps or cancelling bell, genuine reports or settlement. This gate neither locks NVDA nor prevents natural-input spending below the planning buffer.
Exposure and accounting limits
Anyone meeting the 2.5 million QUOTUM stake may seek a seat. Multiple wallets can belong to one person. Farming dilutes opening access; later seats retain the cap. At $10 per seat and 100 holders at the bell, exposure is about $1,000 for that session before settlement guards. No fixed cohort or identity protection.
NVDA declines reduce USD reserve and require more NVDA per USD. QUOTUM price/TWAP can lower the supply bound. Natural input, late seats, burns and unreported liabilities can shorten runway. Caps do not prove provider funding or guarantee duration/availability.
Usage from seats leaving before bell may remain outside sink-recognized spend. The floor does not repair that path. Reconcile provider usage and funding before uplift; never assign gaps to another holder.
OPS keeps 40% of ordinary claims, outside voting. Uplift creates no new claim and gives OPS no extra share. No arbitrary reserve transfers, income, returns, fee sharing or holder payments. Guarded buy-and-burn is no holder payment or price promise.
Questions
Draft. These answers describe a proposal, not something already running. The proposal and charter hold the full rules, and they apply if an answer here differs.
What am I voting on?
Whether each seat should get at least $10 per session, for up to 14 sessions and only while safety checks pass. The extra use and burns this allows are absorbed by NVDA the sink already holds.
Where do I vote?
Votes happen only on quotum.org/governance, and we never ask you to vote or connect a wallet anywhere else. A post asking you to vote for a listing or to connect a wallet on another site is not from quotum.
Is that $10 paid to every seat?
No. The $10 is the seat's inference cap for the session, shared across its keys. It is not a distribution and nothing is paid out. The keeper sets the opening input to at least $10 times the seats, so the contract gives each seat a cap of at least $10 unless the supply-value bound is lower. Actual grants can be lower and depend on provider funding checks.
Where does the money come from?
From NVDA the sink already holds. No new sponsor or provider top-up is promised. OPS keeps its existing 40% share of ordinary claims, which is outside this vote, and the uplift creates no extra OPS claim. Team seat 1 still gets inference access under the same seat rules.
Does tax24h still mean fees?
It never meant audited fees. It stored measured input, an approximate-day net inflow. During the pilot it stores effective input: the larger of measured input and $10 times the seats while checks pass, otherwise measured input with zero uplift. Each session record lists measured input, effective input and uplift separately. The uplift changes the cap calculation. It is not new revenue or a transfer, but the use and burns it allows do consume reserve.
What happens to cap nobody uses?
At the bell, unused or unissued cap buys and burns QUOTUM where free NVDA and price guards allow. Failed or uncovered burn amounts stay in NVDA and are published separately. Unused cap is never paid to holders and creates no balance they can spend. Higher caps can mean more burns without more use, and none of this is a price promise.
Is spending capped at $10 a seat?
No. Days when measured input gives more than $10 per seat stay higher, up to the $50 ceiling. Seats that join after opening get the same cap, so with 100 seats at the bell a $10 session is about $1,000 before settlement guards. A falling NVDA price shortens how long the reserve lasts.
Who can vote, and does the team?
Liquid plus attributable staked QUOTUM, including queued stakes, counted once. OPS on seat 1 is the only team wallet left out. Protocol accounts do not vote, and for QIP-1 pool balances are not attributed to individual voters. One person can hold several addresses, and the tally publishes how concentrated the vote was.
Does buying before the snapshot and selling right after still count?
It counts. Under the fast rules weight is read once, at snapshot block B, the latest finalized block before the proposal is published. Selling after B does not reduce a ballot's weight, and tokens bought after B add nothing. Because B comes before anyone can read the proposal, buying weight for a specific vote means buying before it is announced.
Which wallets can vote?
Under the fast rules, only ordinary addresses with no code at B. App wallets that use EIP-7702 delegation, such as FOMO, and contract wallets such as Safe cannot vote yet. Support for delegated addresses is planned for the next version of the rules.
Can I vote with QUOTUM held in the FOMO app?
Not on QIP-1 under the fast rules. A FOMO address carries an EIP-7702 delegation, so it has code at B and is not admitted, even if you export its key. To vote, move your tokens to an ordinary address, one that has never set a delegation, before the proposal is published. A move after publication comes after B and cannot make that address eligible for this vote. Publication times are announced in advance in the linked public discussion thread and on X.
Is anything recorded on chain?
Voting weight is read from the chain at block B. Ballots are gasless signatures collected off chain. After voting closes, one transaction on chain 4663 records the SHA-256 hashes of the exact signed receipt-log head file and close tally file. A second transaction records the final head and tally after objections and proof checks, even when the tally is unchanged. Later edits to those files would fail to match the recorded hashes. The receipt log is checked against the signed head, and anyone can recount from the published evidence. A matching commitment does not establish that the count is correct. If an objection to the count is accepted, the final result waits until a separately reviewed correction process exists; no objection is rejected to reach a result. Every version stays published.
When does it start and end?
Dates are not set yet. The schedule rules fix how they are chosen, and a separate activation record will publish them after the vote. The pilot runs from session S0 through S0+13, and skipped sessions do not extend it. QIP-1 is one of the first proposals, which run in the charter's short bootstrap class: voting runs 2 hours, objections 1 hour and proof checks 1 hour, so the earliest final result comes 4 hours after opening. The count is published when voting closes. Proposals published from 1 November use 6, 6 and 6 hours. The pilot starts only if the vote passes, every objection is decided, every check passes, and a scheduled 20:00 UTC boosted opening succeeds at least 2 hours and no later than 168 hours after the final result. Otherwise approval expires. It does not renew.
Can it stop early?
Yes. Before each boosted session, free reserve must be at least $2,000 plus $10 times the keeper's seat count before open for every pilot session still left, including this one: $3,820 at 13 seats with all 14 sessions left, $2,130 with one left. Equality passes, and this check does not lock the reserve. An Open event cap above the admitted estimate, bad price or reserve data, unresolved accounting, a provider shortfall or the team's emergency stop also stop uplift. Before the first boosted opening, a failed check only defers activation within the approval window. After activation, a stop is final for this pilot and resuming needs a new proposal. If input measurement fails, that opening is postponed. No stop cuts the cap of a session already open.
Does my vote pay me or control funds?
No money. Inference access still follows the existing stake, seat and cap rules. The vote creates no payment, fee share or ownership. It cannot move reserve funds freely or change contract constants. The team publishes receipts or a specific refusal. The one thing a vote leaves behind is a first voters seal on the record for every address whose ballot is accepted in the rehearsal or in QIP-1. The seal is permanent, pays nothing and changes no cap. A seat holder's stake of 2,500,000 QUOTUM also clears the 0.25% sponsorship line in the charter, so a seat can put a later QIP to a vote.
Rehearsal§
RehearsalRehearsal only. The result binds nothing and changes nothing.
For this nonbinding rehearsal, would you support testing the QIP-1 input pilot described in the policy build? No outcome adopts QIP-1, activates uplift or authorizes spending.
Your wallet should show a Ballot on chain 4663, typed data and never a permit. Read the full text Result
Wallet checklist
Your wallet should show
- typed data, not a transaction
- primary type Ballot
- domain quotum-FAST-ballot-v1
- chain 4663
- your choice and your nonce
Reject it if it shows
- an amount, a spender or a token
- Permit or Permit2
- an approval or a delegation
A Ballot costs no gas and sets no token allowance. Your address and choice will be public. To replace your ballot, sign with a higher nonce and get a receipt before close. Only ordinary addresses are accepted. EIP-7702 delegated wallets and contract wallets are not supported.
- Ballots received
- Unavailable
- Snapshot block B
- Unavailable
- Opens (V)Unavailable
- Closes (D)Unavailable
- Objections until (O)Unavailable
- Final from (F)Unavailable
Receipts and checks
Raw receipt log · Ballot package · Finalization check
Copies of the log and the collector's signed head are mirrored at github.com/qvotvm/qip-1-receipts.
| No. | Received, UTC | Address | Choice |
|---|---|---|---|
| Receipt log not loaded. | |||
- Package hash
- Unavailable
- Log head
- Unavailable
- Anchor wallet
- Unavailable
Collector public key
Unavailable
