From wallet signature to real settlement

Hunch runs inside two real environments: the Mini App SDK inside Nimiq Pay, and Nimiq Hub in a normal browser. Which one answered is picked automatically, the rest of the app never knows or cares. Neither is a fallback for the other, and there is no third, simulated mode.

Before you commit, your wallet is asked to sign a message. That message is plain, readable copy, the same sentences you saw on screen, describing exactly what you decided, never a JSON blob or an opaque payload. What you sign is what you read.

The server rebuilds that exact message from the fields it receives and rejects the request outright if it doesn’t match, word for word. It also verifies the signature actually corresponds to the public key claiming to have signed it. Together, those two checks mean a tampered client can’t show you one thing and record another, and nobody can attach a decision to a key that never actually signed it.

Self-funded Split. The amount you pass on is a real transaction sent from your own wallet. Hunch validates the round before that transaction is sent, so a stale or already-claimed gift is rejected before you pay, not after.

House-funded rounds. Trust, Ultimatum, and house-funded Split never ask you to send anything. Before a round can even open, Hunch checks whether its own funding wallet can cover the worst-case payout: for Trust that’s the tripled pot, for Ultimatum it’s one stake. If it can’t, the round is refused outright rather than opened and left unable to pay.

Calculating that you’re owed NIM and actually paying it are two different moments, and Hunch treats them as such. A payout record moves through real states: queued, sending, sent, or failed. A transaction hash only exists once a transaction has actually been sent, a queued or failed record is never shown as if it were a settlement.

Depending on the network and Hunch’s current funding setup, a payout may be sent automatically or settled by hand. Either way, the same rule applies: no hash, no claim of settlement.

Every settled transaction is a real, public entry on the Nimiq blockchain. Once a payout shows a hash, anyone can look it up on a Nimiq block explorer and see the sending address, receiving address, amount, and timestamp for themselves, Hunch doesn’t control that visibility, the blockchain does.