01WALLS is a 1,500-piece ERC-721 workforce. Every pixel employee has a deterministic rank, role, department, office, outfit, equipment and stat line. Each NFT controls an ERC-6551 briefcase that can hold ETH, canonical Robinhood Stock Tokens, equipment and other NFTs.
02Headcount is capped at 1,500 employees priced at 0.0025 ETH each, max 5 per wallet. A confirmed hire atomically creates the ERC-721 and its briefcase, then books 80% to holderPot and 20% to operationsBalance. A confirmed mint has no buyer cancellation or refund path.
03The contract model defines cumulative $WALLS burn bands at 25K, 75K, 150K, 300K and 500K. They increase an employee's recorded desk weight. Training remains unavailable until a separate utility-token address is permanently linked to the new Fee Desk. Every burn is permanent.
04Each employee can run one shift per UTC day at client difficulty 1, 2 or 3. The public score combines merger power, level, a saved three-item ERC-1155 loadout and a deterministic daily game modifier. Balanced, aggressive and defensive stances change both target and points. A successful shift records clients closed, sales points, reputation and XP. Pitch rounds remain a separate Chainlink-resolved Bull/Bear game with no user funds wagered.
05A claimed pitch reward mints one ERC-1155 item shard to the other desk and two to the winning desk. Paid loot pulls are excluded. Crate opening, random loot tables, quests and season points are not live unless separate audited contracts are deployed.
06The Core accepts primary recruitment ETH and exposes a three-asset client-book allocation for trained employees. The disclosed treasury can immediately execute a one-way terminal sweep to any nonzero recipient, including the deployer address. Assets already delivered to employee briefcases remain outside that action.
07Two revealed employees can merge: one ID survives and the other burns. Their recorded XP and desk power combine while every absorbed briefcase remains reachable through the public ownership link. The contract rejects a merger before a chain could exceed the tested 32-hop ownership bound. A merger is irreversible.
08Firm ledger and final switch
At full 1,500-employee recruitment, gross primary input is 3.75 ETH: 3.00 ETH recorded in the holder ledger and 0.75 ETH in operations. The treasury can withdraw operations. It can also call withdrawAllProtocolAssets immediately to move every remaining Core asset to any address; that terminal state cannot be reversed.
09The WALLS contract source is prepared for a separate deployment with a 1,500 hard cap. Metadata roles use the same tokenId-modulo-five rule as the game contract. The reproducible 3,000-file release manifest currently resolves to provenance 0xc81955d5c0ede34d676650072e2a42f6bc5234cb55e711bc30cc01ab23bc0996 and must be frozen before recruitment opens.
10The default release check is intentionally compact: one production build, Solidity compilation with bytecode limits and one source-level security-invariant suite. Collection generation and provenance are checked only when those assets change. This remains an internal engineering review, not an independent audit.
11External indexes and resale royalty
The ERC-721 implements ERC-2981 and reports a 2% secondary-sale royalty to the treasury address. OpenSea and other marketplaces may index the verified collection after the first mint, but marketplace availability and actual royalty payment are external policies; the NFT contract reports the fee and does not force arbitrary marketplaces to collect it.
12Privacy and legal readiness
Public pages require no account and read only public chain state. Wallet routes may use Privy email, Google or wallet authentication; those providers process login data under their own policies. A project-specific privacy policy, terms and qualified review of the tokenized-asset mechanics remain release blockers and are not represented as complete.