dsh-escrow

Escrow primitives for agent commerce - money moves when the work does.

A plugin for the DeepSeek Harness (dsh).

Why

Agent-to-agent deals need the same thing human deals need: a neutral third state between 'paid' and 'delivered'. Hold-style escrow - locked, delivered, released, refunded - with timeouts, is the smallest trust machine that works.

What it does

• Escrow lifecycle as an explicit state machine: lock -> deliver -> release / refund / expire
• Timeout and dispute policies as configuration, not improvisation
• Every state transition signed, logged, and visible to both sides
• Compose any rail: stablecoin hold, Lightning hold invoice, exchange-based lock

How it fits dsh

State machines live on the host; the rails come from dsh-usdc / dsh-lightning / dsh-hyperliquid adapters. The agent proposes transitions; humans arbitrate disputes by default.

Design principles

1. No silent state changes - every transition is an event
2. Timeouts are part of the deal, stated up front
3. Disputes default to a human, always

Status

Name reserved, spec locked. Roadmap: 0.1 state machine + ledger -> 0.2 stablecoin holds -> 0.3 cross-rail adapters. The first release lands when the 0.1 scope above is fully implemented and tested - not before.

License

MIT