Proposals in, signed receipts out.

Overview

Everything you submit is a proposal, never an order. The operator decides, per source, whether, where and with what stake a proposal is executed. Your stake hint and your claimed expected value are advisory and never binding.

• Expected value is recomputed on our side from your fair price against the real executable bookmaker price. Systematically overselling your edge is measured as EV honesty and costs rating.
• Every proposal gets a receipt: accepted, or rejected with a reason, and later scored with closing-line value and paper profit. That feedback loop is how you qualify.
• New sources start in shadow, paper only. Promotion to real money is earned with closing-line value, not with short-term profit.

The referee address for the public network is https://app.manometer.bet. Scorecards live at https://manometer.bet/s/<sourceId>.

Quickstart

Using a library or an AI assistant? The Originator Kit does the sealing and sending, and its README has a prompt to paste. Give your assistant llms-full.txt as the full text of this site.

1. Get a source id and an API key. Register as a signal source and confirm your email; both arrive within minutes and you start in shadow.
2. Send one proposal in clear to see the round trip. The answer is your signed receipt.
3. Seal the next ones. Encrypt to the drand round of kick-off and send only the ciphertext.
4. Keep your receipts. Any receipt can be fetched again with its anchor path from /netz/quittung/<rid>.
5. Preview your scorecard and publish it when you are ready, or never.

# clear: scored at receipt, readable at once
curl -X POST https://app.manometer.bet/netz/submit \
  -H "Content-Type: application/json" \
  -d '{
  "sourceId": "src_you",
  "apiKey": "YOUR_API_KEY",
  "proposalId": "you-2026-11-02-0001",
  "proposal": {
    "proposalId": "you-2026-11-02-0001",
    "sourceId": "src_you",
    "sport": "fb",
    "mkt": "1x2",
    "sel": "2",
    "eventIdentity": {
      "home": "Brann",
      "away": "Molde",
      "league": "Eliteserien",
      "startsTs": 1793642400000
    },
    "fairOdds": 2.6,
    "devigMethod": "shin",
    "minOdds": 2.7,
    "tsCreated": 1793266867318,
    "ttlMs": 120000,
    "stakeHint": 10,
    "ev": 6.5
  }
}'

The answer is 200 {"ok": true, "receipt": {…}}. Sending the same proposal id again returns the same receipt with "duplicate": true: exactly one receipt per id, ever.

Authentication

Each source has a sourceId and an apiKey. Both go in the JSON body of every request, never in the URL. The key is never echoed back, never written into any file the source can read, and can be rotated in the console. Repeated failures from one address are throttled.

Endpoints

Route names are part of contract v1 and will not change within it.

Proposal contract

Required fields. The validation source of truth is the platform's own validator; the machine-readable schema is in the console.

{
  "proposalId": "you-2026-11-02-0001",
  "sourceId": "src_you",
  "sport": "fb",
  "mkt": "1x2",
  "sel": "2",
  "eventIdentity": {
    "home": "Brann",
    "away": "Molde",
    "league": "Eliteserien",
    "startsTs": 1793642400000
  },
  "fairOdds": 2.6,
  "devigMethod": "shin",
  "minOdds": 2.7,
  "tsCreated": 1793266867318,
  "ttlMs": 120000,
  "stakeHint": 10,
  "ev": 6.5
}

Optional fields

Market taxonomy

Handicap lines are from the home side's perspective; away is the mirror.

CS2 money lines are two-way; there is no draw selection. The referee scores the markets for which the board has a Pinnacle fair price, and CS2 match money lines also without one; see scoring rules.

In-play proposals

A pre-match proposal at or after kick-off is rejected. If your signal is in-play, set "live": true: then startsTs is still the kick-off, but now has to be in the past. You supply your own live fair price; a stale pre-match fair is never substituted. Live fair prices decay in seconds, so the maximum age is 15 seconds instead of 120. Add endsTs so that a decided segment cannot be bet. Live proposals go in clear, because the match has already started. Winner markets only (1X2, money line), network prices at most 60 seconds old. There is no closing line in play, so the referee measures the edge at receipt: best network price against the fair price of that moment, Pinnacle live first, otherwise Sportmarket with the margin removed; with neither there is no value figure. The entry names the source and the age of the fair price. On the ladder this edge counts like closing-line value while the settled results fit it: from 30 settled live proposals, results at most 2 standard deviations below what the fair prices lead to expect. Market data is released three hours after receipt. Executing live signals is enabled per source by the operator.

Sealing

While you qualify, you do not have to show us your picks. Encrypt the proposal JSON with tlock to the drand quicknet round of kick-off and send only the ciphertext. Nobody can open it before that round, the operator included. At the round, the public drand beacon opens it and the referee scores it as of the second it was received, against the market snapshot it took then.

Chain

drand quicknet, 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971

Rhythm

one round every 3 seconds, genesis 1692803367

Target round

round = ceil((startsTs / 1000 − 1692803367) / 3) + 1, the first round at or after kick-off

Format

age, with one tlock <round> <chain> recipient

• A seal that opens more than 60 seconds before kick-off is scored but not executable. One that is already open when it arrives is refused with 400.
• All or nothing: every seal appears on your scorecard. A seal that does not open to a valid JSON proposal counts as an invalid seal.
• Kick-off is taken from the matched board row, otherwise from your eventIdentity.startsTs.
• The proposal id and source id inside the seal must equal the envelope's; a sealed proposal whose inside differs is not scored.

// sealed: Node 18+, npm install tlock-js@0.9.0. Encryption needs no network.
const { timelockEncrypt, Buffer } = require("tlock-js");
const QUICKNET = { hash: "52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",
  public_key: "83cf0f2896adee7eb8b5f01fcad3912212c437e0073e911fb90022d3e760183c8c4b450b6a0a6c3ac6a5776a2d1064510d1fec758c921cc22b0e17e63aaf4bcb5ed66304de9cf809bd274ca73bab4af5a6e9c76a4bc09e76eae8991ef5ece45a",
  period: 3, genesis_time: 1692803367, schemeID: "bls-unchained-g1-rfc9380", metadata: { beaconID: "quicknet" } };
const chain = { chain: () => ({ info: async () => QUICKNET }) };
const roundAt = (ms) => Math.ceil((ms / 1000 - QUICKNET.genesis_time) / QUICKNET.period) + 1;

const proposal = {"proposalId":"you-2026-11-02-0001","sourceId":"src_you","sport":"fb","mkt":"1x2","sel":"2","eventIdentity":{"home":"Brann","away":"Molde","league":"Eliteserien","startsTs":1793642400000},"fairOdds":2.6,"devigMethod":"shin","minOdds":2.7,"tsCreated":1793266867318,"ttlMs":120000,"stakeHint":10,"ev":6.5};
const round = roundAt(proposal.eventIdentity.startsTs);       // 33,613,012: the first round at or after kick-off
const ciphertext = await timelockEncrypt(round, Buffer.from(JSON.stringify(proposal)), chain);

const res = await fetch("https://app.manometer.bet/netz/submit", {
  method: "POST", headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ sourceId: "src_you", apiKey: "YOUR_API_KEY", proposalId: proposal.proposalId, sealed: { ciphertext } }),
});
const { receipt } = await res.json();                        // keep it: it is your proof

Receipts

Every accepted proposal gets a receipt signed with the referee's Ed25519 key (GET /netz/pubkey).

{
  "v": 1,
  "typ": "manometer.receipt",
  "sourceId": "nordic-models",
  "proposalId": "nm-2026-10-29-0412",
  "receivedTs": 1793266867318,
  "sealed": true,
  "payloadSha256": "8ce78c3a5e8727141ecce663c7f0e1afaa6b398f77ae65c0393f74b3b20e6806",
  "drand": {
    "chain": "52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",
    "round": 33613012,
    "opensTs": 1793642400000
  },
  "snapshot": {
    "id": "snap_20261029T094105Z",
    "root": "6b53b9a0155cd54029ae5bc4e62f0ea070faa060e9cc56a5dddb924961438c16",
    "ts": 1793266865178,
    "n": 1458
  },
  "referee": "manometer-referee/1",
  "rid": "r_58df37a36872e26a5e9d4599",
  "keyId": "02d02ca9b91687c8",
  "sig": "hpmMgQq6t0k/xb2We4Ev33OYi1BBgJ3fw4xJJzojCnEAcGmPadOu+EmJPaKC2s8SQuhtRU376djybmz3qusaAw=="
}

• Canonical JSON: object keys sorted, no whitespace, undefined dropped.
• rid = r_ + the first 24 hex characters of SHA-256 over the canonical receipt without rid, keyId and sig.
• keyId = the first 16 hex characters of SHA-256 over the raw 32-byte public key.
• sig = Base64 Ed25519 signature over the canonical receipt without sig.
• payloadSha256 = SHA-256 of the ciphertext (sealed) or of the canonical proposal (clear).
• Market snapshot. Because a sealed proposal cannot be read on arrival, the referee freezes the whole pre-match board of that second: Pinnacle no-vig fair and every bookmaker's prices for 1X2, money lines, and the handicap and total lines that have a fair. CS2 rows stay in even without a fair price: executable depends on the bookmaker price, the fair price only matters for the close. Its Merkle root (RFC 6962) is in the receipt; after opening, your bundle carries the one relevant row with its path.
• External time anchor. Every hour the referee builds one Merkle root over all new receipts, closing lines and results and submits only that 32-byte hash to the public OpenTimestamps calendars, which commit it into Bitcoin. The .ots proof is in the bundle and checks with the official ots verify as well.

GET /netz/quittung/<rid> returns { ok, receipt, anchor }, where anchor is { anker, index, n, wurzel, pfad }: the leaf is SHA-256(0x00 ‖ canonical signed receipt), the path runs from the bottom up, and it is null until the next hourly anchor. You can check any receipt in your browser.

Lifecycle

submitted → valid → enriched → proposed → accepted | rejected | expired
accepted → placed → settled → graded

Every terminal state produces a receipt, and a rejection always carries its reason:

The graded receipt adds the real placed odds and stake, the closing no-vig price, closing-line value, the result and the profit. That is the data your rating is built from.

Scoring rules

• Executable = valid at receipt (not expired, before kick-off), not older than your source's maximum age, the event matched on the board, the market scorable (1X2 and money lines, football handicaps and totals, basketball spreads and totals), and a network bookmaker offering at least your minimum odds.
• CLV = best executable price at receipt ÷ no-vig closing price − 1. The close is Pinnacle at kick-off; if Pinnacle publishes none, the last pre-match fair. For CS2 matches Pinnacle does not list, that is the last Sportmarket line with the margin removed, marked fs: "smk" on the closing entry; without any fair price before kick-off there is no CLV. Close-beat = CLV > 0.
• Recomputed EV = best executable price ÷ your fair odds − 1. EV honesty = Σ recomputed ÷ Σ claimed.
• Uniqueness = the selection did not already show an edge of 2 % or more on our board at receipt.
• Paper P&L = flat 1 unit at the best executable price, settled on the final score of the event, which comes from Pinnacle, book history, OddsPapi, bo3.gg or web search, or is marked as entered by hand; quarter lines split, voids zero. Profit is shown, never qualifies.

Ladder, sizing, routing

Why closing-line value and not profit: on 100 to 200 bets, profit is mostly variance; beating the closing line is the only statistically meaningful skill signal at that sample size.

Sizing. The operator sets a policy per source: the stake mode (own Kelly on a haircut of the recomputed expected value, a percentage of your stake hint, or fixed), the edge haircut (new sources: only about 30 % of the shown edge is trusted), the odds band, minimum expected value, maximum stake, daily exposure and open bets. You influence sizing with accurate fair prices, honest claims, tight minimum odds, fast submission and a growing closing-line record.

Routing and attribution. From live_small on, proposals are executed across the network's partner accounts. Every bet placed from one of your proposals carries your sourceId and proposalId; the settlement per source is built from those settled bets. Routing weight per tier: shadow 0, qualifying 0, live_small 0.25, live 1, capped by account capacity. Terms: 15 % of the net profit of bets executed from your signals, with a high-water mark on your own signal book, paid monthly out of Manometer's share.

Scorecards and bundles

Your scorecard is private until you publish it: open manometer.bet/s/<sourceId>, sign in with your source id and key, and publish; withdraw whenever you like. In public it shows totals only, updated every Monday at 00:00 UTC and counting games that have kicked off by then: closing-line value, close-beat rate, executable share, paper yield, uniqueness, drawdown and the ladder. Signed in, you also see EV honesty, timing, the cuts by market, lead time, odds band and reason, and every proposal, sealed ones only as receipt and opening round.

The bundle (POST /netz/bundle, or Download my bundle) goes to you alone, and you decide who sees it. It contains the signed receipts, the time-locked ciphertexts, the opened proposals with their drand beacons, the market row at receipt with its Merkle path, the closing line and the final score with their paths to the hourly anchors, the anchors' OpenTimestamps proofs, the referee's public key and the scoring rules. Market data is released at kick-off: until then the bundle and the preview carry your receipts and proposals, but not the market row, the best price or the fair value. Public totals carry a root over the receipt ids; manometer-verify totals <bundle> --stand <ms> --root <hex> --n <count> checks that they belong to exactly these proposals.

Verifier

manometer-verify checks a bundle without trusting our servers. Node 18 or newer; the only dependency is tlock-js.

# Node 18 or newer · the only dependency is tlock-js (drand)
npm install
node manometer-verify.js all nordic-models.bundle.json

# or one part at a time
node manometer-verify.js receipts nordic-models.bundle.json   # signatures, fingerprints, hourly anchors, Bitcoin header
node manometer-verify.js seals    nordic-models.bundle.json   # every seal opens at its drand round, to the published proposal
node manometer-verify.js prices   nordic-models.bundle.json   # market at receipt, closing line, CLV recomputed
node manometer-verify.js results  nordic-models.bundle.json   # results from the final score, paper P&L recomputed

# exit code 0 = everything checked out · 1 = at least one mismatch · 2 = unreadable input

--offline skips the network lookups and relies on the bundle. Merkle trees: leaf = SHA-256(0x00 ‖ data), node = SHA-256(0x01 ‖ left ‖ right). The verifier's library files are byte-identical copies of the referee's own modules, so it computes exactly what the referee computes.

Errors and limits

CORS is open (*), so a browser-based originator works too. The originator kit does the sealing and the sending for you, from Node or a browser: sources download it under API and keys.

Transports

The contract and the receipts are identical on every transport; switching transports changes nothing in your integration logic.

Versioning

This is contract v1. Receipts carry v: 1. Additive fields do not change the version; anything that would break an integration gets a new version, announced in advance, with both versions accepted side by side for a transition period.