Three keys control every locked position. Buyer holds one key. Vendor holds one key. The marketplace operator holds the third key. Any combination of two signatures unlocks funds. The third signature acts as a tie breaker or emergency release lever.
During normal operation, buyer and vendor sign together to authorize payment transfer. Their combined signatures satisfy the requirement without needing operator input. This keeps daily transactions fast and autonomous. Disputes change the dynamic significantly.
A dispute locks funds completely until resolved. Neither buyer nor vendor can move coins unilaterally. The operator intervenes after reviewing evidence submitted by both sides. Decision authority rests with the third key holder during contested periods.
Physical goods release ten days after a valid tracking number shows delivered status. Digital items release seventy two hours after download confirmation or file access validation. These timers start automatically once sellers upload proof of dispatch or hosting links.
A twenty four hour cancellation window exists before any binding occurs. Buyers can abort an order within that timeframe without penalty. After the window closes, escrow engages fully. Cancellation requests later become subject to dispute rules.
The operator key represents a necessary trust component. You accept that human judgment influences outcomes when automated paths fail. No purely mathematical solution covers every edge case involving communication breakdowns or complex contractual interpretations.
Multisig signing uses standardized formats compatible with major wallet software. TOTP integration secures login sessions alongside the escrow logic. PGP options provide an alternative verification channel for users who prefer end to end encryption.
Dispute initiation happens through a button adjacent to the order details. Both parties submit statements simultaneously. Evidence uploads attach to the ticket. Status indicators update when rulings finalize or settlements execute.
Timeout extensions apply only with mutual consent from both disputing parties. Unilateral delays risk default judgments against the passive participant. Active participation defines procedural fairness in this framework.
Security protocols rotate signing keys periodically for high value positions. Standard accounts maintain static keys unless compromise suspicion arises. Rotation processes notify affected users ahead of implementation dates.
Who signs for small purchases
Buyer and vendor signatures suffice for most routine orders. Above a certain threshold, additional review steps may engage operator oversight temporarily until pattern recognition confirms the transaction is legitimate.
Can vendors refuse to sign
Yes, though refusal triggers automatic timeout counters. Persistent non response leads to administrative intervention. Default penalties apply after specified grace periods expire without cooperative action from the silent party.
What if I lose my device
Recovery procedures involve PGP signed requests or TOTP backup codes previously generated. Account restoration preserves escrow positions intact during the transition. Support guides users through stepwise credential replacement workflows.
Does escrow cover shipping losses
Carrier claims remain external to escrow mechanics. Insurance policies purchased separately determine compensation eligibility. Marketplace involvement stops at verifying delivery proof accuracy against the service levels agreed at the start.
FAQ
Who holds the third key?
The marketplace operator. That is the trust point. In clean cases the buyer and vendor signatures release funds without it, but in a dispute the operator makes the final call.
Can I get my money back if a vendor never ships?
Yes, through a dispute. If the vendor cannot prove dispatch, the funds return to you. The operator decides based on the evidence.
How long are funds locked?
Until you confirm receipt, the vendor proves delivery, or the automatic timer fires. Physical goods release ten days after delivery tracking. Digital goods release after seventy two hours.
What happens if I confirm too early?
The funds release to the vendor and the window to dispute closes. Inspect the package before you confirm. That is the one irreversible step in the whole flow.