Counting work, authorizing settlement, paying gas, and displaying results are separate permissions.
An emergency pause stops settlement and new reward funding, not every owner action.
Upgrade administrators can change the work and reward contracts, so their decisions matter to owners.
Only the current NFT owner can claim its rewards; approving an NFT operator isn't enough.
If you own a Squeek, you can transfer it and request eligible claims or merges. Ownership doesn't let you change sensor measurements, authorize settlement, or change reward rules. Giving an operator permission to manage an NFT doesn't give that operator permission to claim its SQK rewards.
Other roles handle those parts of the system. The Pi records accepted sensor passages, the Oracle checks signed records, and the Reporter signs permission to settle eligible work. A relayer submits that signed transaction and pays gas; it can't change what was authorized.
The Guardian can pause SqueekCore, stopping settlement and new reward funding through checkpoints. Already funded claims can still work because they don't call SqueekCore or mint SQK. Transfers, mint registration, and merges aren't blocked by the pause alone, though their other checks still apply.
Upgrade administrators have broader powers: through Timelock governance, they can change SqueekCore and SqueekMining code. A malicious SqueekMining upgrade could mint the remaining SQK supply without work or misuse funds held for rewards. The supply cap and governance delay don't prevent those outcomes.
| Actor | Responsibility |
|---|---|
| Pico and Pi | Pass sensor readings to the Pi, which counts and saves accepted work |
| Oracle | Check signed records, approve eligible rounds, and track settlement |
| Reporter | Sign permission to settle an exact batch under SqueekCore's rules |
| Relayer | Submit the signed transaction and pay Ethereum gas |
| Guardian | Pause SqueekCore and change the Reporter while SqueekCore is paused; pause and unpause SqueekNFT minting |
| SqueekNFT governance | While minting is paused, set the allowlist root and start, lock the mint configuration, and announce metadata updates |
| Hamster-Owned Liquidity | Mint the protocol reserve, close the public sale and mint the remainder, and receive royalties and ETH |
| Timelock proposer/canceller | Schedule or cancel governance operations |
| Timelock executor | Execute a ready operation after its delay |
| SqueekCore and SqueekMining ProxyAdmins | Apply authorized contract-code upgrades |
| NFT owner | Transfer NFTs and request eligible claims or merges |
| Any account (usually the Keeper) | Submit a SqueekMining checkpoint; it chooses no amounts, rounds or recipients |
| Indexer, API, and browser | Display public data |
| Authority | Can do | Cannot do |
|---|---|---|
| Oracle | Accept, reject, quarantine, and audit telemetry; approve counter epochs through a recorded action | Invent passages or settle work |
| Reporter | Authorize an exact batch that advances settlement | Change difficulty or bypass limits, nonce, deadline, or implementation checks |
| Relayer | Submit a valid signed batch | Change signed fields or authorize work |
| Guardian | Pause/unpause SqueekCore; change the Reporter while paused | Set difficulty, mint SQK, or directly upgrade contracts through this role |
| Timelock governance | Authorize upgrades through the relevant ProxyAdmin | Skip its delay through normal scheduling and execution |
| SqueekMining | Check work, request SQK, record NFT rewards, pay funded claims, and burn merge donors | Exceed SqueekToken's lifetime cap |
| NFT owner | Claim for sorted, unique, live owned NFT IDs; merge eligible same-Level owned NFTs | Claim using operator approval alone or skip activation and cooldown checks |
| Public observer | Read APIs, events, and contracts | Change measurements or authorize settlement |
Anyone can submit a valid SqueekCore signature. That does not give them permission to authorize work.
SqueekCore administrative changes invalidate pending settlement signatures, and SqueekCore rejects previously used Reporter addresses. A settlement signature applies only to its exact batch, chain, proxy, and implementation.
Only SqueekMining can call SqueekToken to mint SQK, and minted SQK goes only to SqueekMining. SqueekToken has no owner, administrator roles, transfer pause, or upgrade mechanism.
SqueekCore and SqueekMining upgrade administrators remain trusted despite the Timelock delay. A malicious SqueekMining upgrade could mint the remaining SQK supply without work or misuse funds held for rewards; SqueekToken cannot enforce SqueekMining's reward rules.
Measurement-host and hosted-service administrators remain trusted within their roles. Their credentials and recovery procedures are not public developer features.
Paused SqueekCore rejects settlement, and SqueekMining checkpoint reverts CorePaused.
SqueekCore pause alone does not stop claims, NFT transfers, mint registration, or merges.
Claims do not read SqueekCore or mint SQK, but still require NFT ownership and working SqueekToken payments.
Minting and merging check SqueekCore without processing rewards. If a required dependency fails, the transaction fails.
Unauthorized calls and invalid signatures fail without granting any permissions.
Applies SqueekCore or SqueekMining upgrades authorized by its governing Timelock.
Generates Squeek images and metadata from fixed onchain visual data.
Records physical work and earned block units on Ethereum, with difficulty adapting after active rounds.
Calculates rewards from settled work, holds funded SQK, and pays eligible NFT owners.
The Squeeks ERC-721 contract. Tracks NFT ownership and coordinates minting and merges with SqueekMining.
The SQK ERC-20 contract. Enforces the lifetime supply cap; only SqueekMining can mint SQK.
Queues governance operations and enforces a delay before they can be executed.
Checks that visual data conforms to the required DotGrid format.
When new power starts earning. Minting and merging schedule it for the next round, and a checkpoint applies it.
A reward update that processes settled Squeek blocks, issues their SQK, and applies scheduled power changes.
The Squeek permanently burned in a merge. Its unclaimed rewards move to the survivor, but its image is not combined or kept.
SQK issued as settled Squeek blocks are processed: 5,600 SQK for each completed block, up to the lifetime cap.
Squeekchain's record of accepted wheel-magnet passages.
Combining two eligible same-level Squeeks you own into one higher-level Squeek. One NFT is burned; the survivor keeps both Squeeks' unclaimed rewards.
The completed Squeek blocks a Squeek waits through before it can merge again. It follows the Squeek through transfers.
What a Squeek earns with. Its level sets its maximum power; each Squeek block's SQK is divided across all active power in proportion.
A ten-minute period used to group measured work. The device saves a completed round's work total when measurement remained uninterrupted.
The token each completed Squeek block issues, shared by active power. It has a lifetime supply cap.
An NFT that owns a share of the Squeekchain network. It receives SQK from the hamster's work according to its active power, set by its level and the SQK staked to it.
One billion block units earned from settled work at each round's difficulty. Completed blocks supply SQK under the mining reward rules.
Squeekchain's ecosystem for hamster-powered onchain finance, built on the public work record.
The Squeek you keep in a merge. It gains a level, keeps its ID and image, and receives both Squeeks' unclaimed rewards.
A Squeek's recorded reward balance that hasn't been paid to a wallet. It stays with the Squeek when ownership changes.
The hamster mining device. It records accepted wheel-magnet passages as work.
One wheel-magnet passage that met the device's counting rules.