import Link from "next/link"; export default function MarketTrustPage() { return (

Layer 3 · settlement

Trust, escrow & keys

Buyers should never wonder which “plugin” holds their funds. CyberLux treats trust as a layered contract: cryptographic identity first, timed release second, human arbitration last. Everything below is diegetic documentation for the storefront — it aligns with how sessions, carts, and signed mirror lists behave in code.

Four trust layers

{[ { n: "L1", t: "Vendor bond", d: "New stalls post collateral denominated in XMR/BTC fiction. Bond size gates category access (e.g. hardware vs digital).", }, { n: "L2", t: "PGP continuity", d: "Every listing shows a vendor fingerprint; checkout warns on mismatch. Rotations require signed announcements chained to the prior key.", }, { n: "L3", t: "Timed escrow", d: "Funds sit in a cooling state until ship proof + buyer silence or explicit release. Timeout paths are deterministic per SKU class.", }, { n: "L4", t: "Council multisig", d: "Escalations bind three moderators from disjoint rings; two-of-three releases or refunds with on-ledger rationale stubs.", }, ].map((x) => (
{x.n}

{x.t}

{x.d}

))}

Lexicon · settlement vocabulary

Watch-only wallet fiction for buyers who monitor UTXO flows without signing.{" "} Replace-by-fee mentioned only as a cautionary tale in checkout copy.{" "} Ring signatures referenced when explaining why Monero lanes default for privacy-marked SKUs.{" "} Airgapped signing for high-bond vendors rotating keys.{" "} Descriptor rotation ties vendor announcements to prior fingerprints so phishing clones stand out on any onion mirror.

Key hygiene checklist

Related:{" "} Buyer intel ·{" "} Support ladder

); }