the charter
/ what $MOSS will never do. mosswane is a free game first. the token, if it ever ships, sits on the far side of the firewall.
free forever · solo-pve · the token is cosmetic and identity only · never buys power.
$MOSS is not minted. this charter binds it the day it is - and binds us if it never is. each line below is plain, and falsifiable: if any ever breaks, the proof breaks with it and you can see it.
the promises
- never earned by playing. you cannot grind, farm, or extract your way to the token. no points program, no play-to-earn, no emission. salvage and gold are the game's, and they stay the game's.
- never gates play. the whole game is free and fully playable without a wallet, a token, or a single on-chain step. the token is never a key to the door.
- never grants run-power. nothing you hold, buy, or earn makes a descent easier - faster, safer, richer, longer. the run is the run. the firewall is proven in code (see below).
- no randomized pulls, no lootboxes. no gacha, no chance-to-win, no paid spin. cosmetics are bought directly for what they are, at a price you can read.
- the in-run economy stays off-chain and non-convertible, forever. salvage, gold, heir progress - none of it is a token, none of it converts to a token or to money, ever. there is no exit ramp from the game's currency to a market.
- cosmetics buyable without ever holding the token. holding $MOSS is never a requirement to dress your husk, your refuge, or your line. the cosmetic catalog is reachable on its own.
- the game stays free and fully playable if the token never ships or fails. the run is byte-identical whether a token is live, dead, or has never existed. it was good first. it stays good if the token never comes. nothing about play depends on it.
what this is, what this is not
what this is
- the front door. the firewall is the marketing, not the disclaimer.
- a product and identity roadmap only - founding, cosmetic packs, hub presence, season-journal cosmetics.
- falsifiable. each line breaks visibly if we ever break it.
what this is not
- not a price promise.
- not a roadmap of price milestones. zero price targets, ever.
- not the fine print.
the firewall, proven in code
most onchain games ask you to take "it's not pay-to-win" on faith. mosswane proves it, in code, on every build. the run - the actual descent you play - never reads a single cosmetic, economy value, token, wallet, or flag.
the run simulation takes exactly four inputs: a seed, which zone variant, your in-game run-power upgrades, and an optional relic. there is no field on it for a skin, a token balance, a refuge tier, a wallet, a holder badge, a season, or a founding rank. those live in entirely separate stores, behind a wall the run has no door through.
a test builds a save with the entire cosmetic and meta layer maxed at once - every skin, a forged tale, gold pledged, a wallet linked at a holder tier, the bloodline aged to its last descents, a founding rank claimed - then runs the exact same scripted descent on a fresh, empty save. across five seeds, both produce an identical result and an identical fingerprint of the run's entire state. maxed or empty - the same run, to the bit.
this is not a screenshot or a promise in a deck. it is tests/firewall-proof.test.ts, and it runs on every build. if anyone ever wires a cosmetic, a token, or a wallet into the run, the fingerprints stop matching and the build goes red. you can clone the repo and run it yourself.
- salvage never converts to money.
- the rot is the only stakes.
- nothing here expires.
- nothing you buy, earn, or hold makes your run easier.
- free, forever.
the honest caveat: "no emission death-spiral" is a structural property - the game cannot be drained by a play-to-earn loop because there is no play-to-earn loop. it is NOT "cannot lose value". a thin-demand cosmetic token can still bleed. we will not claim otherwise.
the plain-language walkthrough lives in TRUST.md; the code-level proof, layer by layer, in FIREWALL-PROOF.md; every flagged-off launch seam and the exact edit to flip it in FLIP-READINESS.md - all in the open repo.
how to hold us to it
the run-neutrality of the whole cosmetic and meta layer is proven by the automated test above, which runs on every build. flipping any flagged-off seam is a deliberate, reviewed move - never autonomous, never silent.
if a mint ever ships, the trust stack published with it: revoked mint and freeze authority · burned liquidity · a standard pump.fun contract (no custom token code to audit - the game client is the code, and its firewall is test-proven on every build) · a disclosed, time-locked dev buy with the lock tx posted · a persistent public builder identity (@mosswane - pseudonymous, everything verifiable on-chain) · this charter · the code-backed firewall proof.
free, forever. a creature, a frontier, and the rot. the token, if it comes, only ever on top.