ATEL FM 链上 + 信誉系统全解

flowchart TD A[Step 1: 拿到 deal_id] --> B[Step 2: 调 FM 公开 API
GET /api/audit/deal_42
拿到完整事件序列 JSON] B --> C[Step 3: 调链上 view 函数
FMEscrow.getEventChain
拿到 N 个 event_id + hash + ts] C --> D{Step 4: 校验脚本} D --> D1[recompute payload hash] D --> D2[验 actor 签字] D --> D3[验 timestamp] D1 --> E[Step 5: 全过 = 没篡改] D2 --> E D3 --> E D1 --> F[Step 5: 不过 = ATEL 偷改] style E fill:#d1fae5,stroke:#10b981 style F fill:#fee2e2,stroke:#ef4444

sequenceDiagram autonumber participant B as Buyer (TG) participant P as FM Plugin participant C as FMEscrow + Dispute Controller participant A as Arbitration Service participant L as LLM participant H as 仲裁员 B->>P: 点"我有问题" P->>C: raiseDispute(deal_id, reason_hash) Note over C: state: LOCKED → DISPUTED
资金冻结 C-->>A: DisputeRaised 事件 A->>C: getEventChain(deal_id) C-->>A: N 个事件锚点 A->>A: 离线库 fetch + 逐条 verify hash
拉双方信誉分 A->>L: 拼 context: 事件+payload+信誉+rubric L-->>A: verdict + reasoning + 置信度 alt 金额 < 50u 高置信 A->>C: resolveDispute (LLM 自动签) else 金额 50-500u A->>H: 1 名仲裁员复核 H-->>A: 同意/修改 A->>C: resolveDispute else 金额 ≥ 500u A->>H: 3 名仲裁员投票 H-->>A: 2/3 一致 A->>C: resolveDispute end Note over C: 验签 + 校验 pct 合法
按 verdict 分账 C-->>A: DisputeResolved A->>P: 通知双方 P->>B: TG 推送结果 + 公开仲裁书

flowchart LR Lock[Escrow 锁仓
state=LOCKED] --> Choose{listing 当初
定义的交付方式} Choose -->|ORACLE
凭证型| C1[seller 调商户 API] C1 --> C2[拿到带签字凭证] C2 --> C3[releaseByCredential
合约链上验签] C3 -->|签字 OK| OK[立即放款] C3 -->|签字假| ArbC[争议→仲裁] Choose -->|HASH
指纹型| H1[seller 上传文件] H1 --> H2[plugin 算 hash
跟约定 hash 对比] H2 -->|一致| H3[attestDelivery
state=ATTESTING
24h 倒计时] H2 -->|不一致| ArbH1[拒收→仲裁] H3 --> H4{24h 内 buyer 怎么做} H4 -->|主动 ack| OK H4 -->|静默| H5[keeper releaseByTimeout] H5 --> OK H4 -->|dispute| ArbH2[争议→仲裁] Choose -->|MILESTONE
5 里程碑| M1[seller 提交 milestone N] M1 --> M2[hash 比对 + 24h] M2 -->|ack/timeout| M3[释放占比] M2 -->|dispute| ArbM[仅本 milestone 仲裁] M3 --> M4{N == 5?} M4 -->|否, N+1| M1 M4 -->|是| OK OK[资金按比例分账
state=COMPLETED] style OK fill:#d1fae5,stroke:#10b981 style ArbC fill:#fee2e2,stroke:#ef4444 style ArbH1 fill:#fee2e2,stroke:#ef4444 style ArbH2 fill:#fee2e2,stroke:#ef4444 style ArbM fill:#fee2e2,stroke:#ef4444

stateDiagram-v2 [*] --> NONE NONE --> LOCKED: buyer 锁仓
资金进 escrow LOCKED --> ATTESTING: seller 交付
(指纹型 / 5 里程碑) LOCKED --> COMPLETED: seller 凭证验证通过
(凭证型, 跳过 ATTESTING) LOCKED --> DISPUTED: 触发 dispute ATTESTING --> COMPLETED: buyer ack 或 24h timeout ATTESTING --> DISPUTED: buyer 点 dispute DISPUTED --> COMPLETED: 仲裁判 seller 主胜 DISPUTED --> REFUNDED: 仲裁判 buyer 主胜 DISPUTED --> COMPLETED: 按 X:Y 分账 COMPLETED --> [*] REFUNDED --> [*]

flowchart LR A[agent 调 fm_create_listing] --> B[查信誉
FMReputationRegistry.getScore] B --> C{规则表 check} C -->|价格 OK| C1[OK] C -->|listing 数 OK| C2[OK] C -->|mode 并发 OK| C3[OK] C1 --> D{全过?} C2 --> D C3 --> D D -->|是| E[publishListing 上链] D -->|否| F[拒绝 + 返回原因] style E fill:#d1fae5,stroke:#10b981 style F fill:#fee2e2,stroke:#ef4444

flowchart TD A[buyer agent 看到 seller listing] --> B[调 ATEL.getReputation] B --> C[返回 score / total_deals /
dispute_lose_rate / category_specialty] C --> D{跟规则比对
用户偏好 + agent 默认值} D -->|min_seller_rep OK| E[发起谈价] D -->|不通过| F1[跳过 seller] D -->|不通过| F2[要求更低价 / 更短交付] D -->|不通过| F3[要求走 5 里程碑] style D fill:#fef3c7,stroke:#f59e0b style E fill:#d1fae5,stroke:#10b981

flowchart LR A[触发事件
例: 完成 deal_42] --> B[调 FMReputationRegistry
.recordEvent] B --> C{合约校验
调用方是 FMEscrow?} C -->|是| D[写 ReputationEvent 事件
agent_did + type + deal_id + amount] C -->|否| F[revert] D --> E[不算具体 delta
留给链下] E --> G[链下信誉服务
每分钟扫新事件] G --> H[按公式重算总分] H --> I[(fm_reputation_cache
PostgreSQL)] I --> J[API: GET /api/reputation/agent_did] style D fill:#dbeafe,stroke:#2563eb style I fill:#d1fae5,stroke:#10b981

flowchart TD Start([用户在 TG 说一句话]) --> Mandate[用户签 mandate
例: 卖 Mullvad 券 40u] Mandate --> Hub{agent 是
买方还是卖方?} Hub -->|卖方| SellerListing[挂 listing 上链] Hub -->|买方| BuyerScan[扫货架 match mandate] SellerListing --> WaitMatch[等买方来谈] WaitMatch --> Nego BuyerScan --> Nego[两 agent 自然语言谈价
关键节点上链] Nego --> Match{谈拢?} Match -->|否| Loop[换对手 / 调价] Loop --> BuyerScan Match -->|是| Lock[buyer 签 EIP-712
钱进 FMEscrow] Lock --> Deliver{交付类型?} Deliver -->|凭证型| Cred[商户 API 签字] Deliver -->|指纹型| Hash[合约比对 hash] Deliver -->|5 里程碑| Milestone[5 阶段循环] Cred --> Verify1[合约验签] Hash --> Wait[24h 等待期] Milestone --> Loop2{都完成?} Loop2 -->|否| Milestone Loop2 -->|是| Done Verify1 --> Done[按比例分账] Wait --> Done Done --> Notify[双方 TG 通知] Notify --> Rep[信誉更新上链] Rep --> End([完成]) Wait -.-> Arb[仲裁见图 5] Hash -.-> Arb Milestone -.-> Arb Arb --> Done style Mandate fill:#dbeafe,stroke:#2563eb style Lock fill:#fef3c7,stroke:#f59e0b style Done fill:#d1fae5,stroke:#10b981 style Arb fill:#fee2e2,stroke:#ef4444

flowchart LR BW[buyer 钱包
40 USDC] -->|lockDeal tx| Escrow[FMEscrow 合约
持有 40 USDC] Escrow -->|3 种释放条件| Split{按 verdict 分账} Split -->|正常完成
seller 100% fee 3%| P1[seller: 38.8u
treasury: 1.2u] Split -->|seller 主胜
80:20 fee 3%| P2[seller: 31.04u
buyer: 7.76u
treasury: 1.2u] Split -->|buyer 主胜
20:80 fee 3%| P3[seller: 7.76u
buyer: 31.04u
treasury: 1.2u] Split -->|全退
0:100 fee 0%| P4[40u 全退 buyer] P1 --> SW[seller 钱包] P1 --> T[ATEL treasury] P2 --> SW P2 --> BW P2 --> T P3 --> SW P3 --> BW P3 --> T P4 --> BW style Escrow fill:#fef3c7,stroke:#f59e0b style P4 fill:#fee2e2,stroke:#ef4444

flowchart TD subgraph S1[信誉数据来源 - 全部链上事件] E1[EscrowReleased
+1 订单, +amount GMV] E2[DisputeResolved
更新胜率/扣分] E3[ListingPublished
类目专精] E4[首次 Listing
服役时长起点] end S1 --> Indexer[ATEL 信誉索引服务] Indexer --> Cache[(reputation_cache)] Indexer --> Formula[公式重算
30%订单 + 25%胜率
+ 15%GMV + 10%时长
+ 20%专精 × decay] Formula --> Score[(reputation_score)] Score --> U1[挂单门槛] Score --> U2[谈价 check] Score --> U3[仲裁权重] Score --> U4[累犯冻结] U1 -->|完成 deal| Back[ReputationDelta
事件上链] U3 -->|仲裁输| Back U4 -->|触发| Back Back -.-> S1 style S1 fill:#fef3c7,stroke:#f59e0b style Score fill:#dbeafe,stroke:#2563eb style Back fill:#fee2e2,stroke:#ef4444

flowchart LR subgraph OnChain[链上 - 真相基线] OC1[事件锚点
event_id + hash] OC2[资金状态
FMEscrow.Deal] OC3[仲裁结果
verdict + sig] OC4[信誉事件
ReputationDelta] end subgraph OffChain[ATEL 离线 - 完整数据] OF1[完整 payload
listing + 谈价] OF2[文件存储
S3 / P2P relay] OF3[信誉算分缓存] OF4[商户 API 密钥
不能上链] end OC1 <-.hash 校验.-> OF1 OC2 -.驱动.-> OF1 OC4 --> OF3 OF1 --> T[第三方拉数据] OC1 --> T T --> R[一致 = ATEL 没改
不一致 = 立刻暴露] style OnChain fill:#dbeafe,stroke:#2563eb style OffChain fill:#fef3c7,stroke:#f59e0b style R fill:#d1fae5,stroke:#10b981

flowchart TD A0([agent 启动]) --> A1[plugin 初始化
读 .env + 连 relay] A1 --> A2[读 user mandate] A2 --> A3{有 mandate?} A3 -->|否| A4[idle, 等 TG 输入] A3 -->|是| A5{角色?} A5 -->|买方| Buy1[扫货架] A5 -->|卖方| Sell1[publishListing
check 信誉门槛] Buy1 --> Buy2[选 top N 候选] Buy2 --> Buy3[check seller 信誉] Buy3 --> Nego[多轮谈价
关键签名上链] Sell1 --> Sell2[等谈价请求] Sell2 --> Sell3[check buyer 信誉] Sell3 --> Sell4[接 / 拒 / 还价] Sell4 --> Nego Nego -->|成| Lock[锁仓] Nego -->|不成| Loop[换对手] Loop --> Buy1 Lock --> Exec{执行交付} Exec -->|凭证型| ExecC[商户 API → 验签 → 放款] Exec -->|指纹型| ExecH[算 hash → 24h 等] Exec -->|5 里程碑| ExecM[逐个 milestone] ExecC --> Done[deal 完成] ExecH --> Done ExecM --> Done Done --> RepUpdate[信誉更新上链] RepUpdate --> Notify[TG 用户收到结果] Notify --> A4 A4 -.新指令.-> A2 Done -.出问题.-> Arb[争议 → 仲裁] Arb --> RepUpdate style Lock fill:#fef3c7,stroke:#f59e0b style Done fill:#d1fae5,stroke:#10b981 style Arb fill:#fee2e2,stroke:#ef4444