# quotum > a hundred seats of private inference on Robinhood Chain. the cap per seat comes from the coin's own tax. what the seats do not spend by the 20:00 utc bell buys $QUOTUM on the pair and burns it. the seat keeps the key and nothing else. ## what it is - $QUOTUM is a Pons v2 token on Robinhood Chain (chain id 4663), paired with tokenized NVDA, 1% creator tax paid in NVDA. nothing minted, no second token; the supply only goes down, by the token's own burn(). - a seat: one wallet holding 0.01% of the supply in the staking contract. a hundred seats, one per wallet. the next wallet waits in a queue read from the chain. two sessions in a row with zero spend and, if someone waits, the seat goes to the queue; the stake is never touched by anyone but its owner. - a session: the NYSE open session, 13:30 to 20:00 utc on trading days. the cap per seat is set at the open and cut at the bell. after the bell the cap is half, at the weekend a quarter. the key never turns off. - cap per seat = min($50, last 24h of tax in usd / seats taken (at least one), 0.01% of the supply in usd at the last session's average price). - the bell: the keeper first writes every seat's spend on chain (spent, not spent), then rings the bell. the part of the cap the seats did not spend, as far as the NVDA tax in the contract pays for it, buys $QUOTUM on the pair in one trade and burns it. the buy refuses a price more than 10% plus the pair's fees over the higher of the session and last-hour TWAP. a leftover under one dollar, one without NVDA behind it, or a refused buy dies, with the reason in the event. no seat receives a token. - the key: made only after the seat's lock is an event on chain, private-only mode, limit = the seat's cap; deleted when the seat is freed. - private models only: every key runs in the provider's private mode, zero data retention, contract enforced. the receipt is tokens in and dollars out, no prompt is stored. - custodial bridge, receipts posted: the tax lands in a contract with no withdraw path, which forwards what is owed to one published payment address; that address converts and pays the provider. every payment is posted with its tx. a trustless payment to the provider does not exist yet. ## what is on the chain and what is not - on chain: stakes, seats, queue, the session cap, the reported spend per seat with a receipt hash, the bell's buy and burn (Burned, and a Transfer to the zero address on $QUOTUM), the forwards, the price samples. - keeper-reported: the spend per seat comes from the provider's usage api and is written by the keeper with `Reported(session, seat, usd, receiptHash)`. the receipt file at /api/receipts?session=N holds the rows; hash the row without its hash field (keccak256 of the json string) and compare. - the keeper is one process with its own key; it can only open, report, ring the bell, forward and release idle seats. it cannot move the stake or send NVDA anywhere but the payment address and the pair. ## contracts (Robinhood Chain, 4663) - QuotumStaking, PriceObserver, TaxSink: addresses posted at launch, sources verified on Sourcify. - Pons factory 0x7eD598BcEf8bd9Edd8C97A195C6d13f40801EC7e, Pons escrow 0xd3AFEB2a57f70eF218Aa82451c51B2fb0416Ac9e, NVDA 0xd0601CE157Db5bdC3162BbaC2a2C8aF5320D9EEC, Chainlink RHNVDA/USD 0x379EC4f7C378F34a1B47E4F3cbeBCbAC3E8E9F15. ## words seat, cap, bell, burn, receipt, queue. not: yield, earn, dividend, credit, reward, apy. ## links - site: https://quotum.org - docs: https://quotum.org/docs - receipts: https://quotum.org/api/receipts?session=N - keeper state: https://quotum.org/api/receipts?state=1