BoAT MER open-source device runtime

Give a $2 chip its own key, and its own way to pay.

A tiny runtime that lets a machine prove what it measured and pay for what it uses — while the private key never leaves the chip.

$ $ $
Device identity
ESP32-S3 · buyer
DIDdid:mw:8b79…b7f4
address0x76eb…14b3
🔒 key on chip · never exported
Payment authorization
42 µUSDC
slice#01
schemeEIP-3009
statussigned on-chip ✓
$0.000042
per 10-second slice of solar power
24
payments in four minutes, no human approving
5 s
between payments as a drone charged at the Arc mainnet launch
0
private keys ever leave the chip
Why

Machines can work. They can't hold money.

Today a server signs for every device. To pay or be paid on its own, a machine needs a key of its own.

Today

The cloud speaks for the machine.

One account holds every key. Leak it and every device is impersonated; lose the network and nothing can pay.

With BoAT MER

Every machine holds its own key.

It signs within limits its owner set, keeps working offline, and leaves evidence anyone can check.

What

Three things a chip can now do.

Own an identity

A key made on the chip on first boot, never exported — and the address and DID that come from it.

Bitaxe minerESP32-S3 · BoAT MER v1.0.1
DIDdid:mw:8b798b7d…b7f4
EVM address0x76ebfd22…2e014b3
Ed25519attestations
secp256k1payments
private keyon chip · not exportable
● generated on first boot, persisted in NVS

Prove what it measured

Every reading hashed and signed at the source.

reading{"kwh":0.417,"t":1756713600}
sha-2560xd253d2df…58e24732
ed255190x568383f3…109aeb
checkthis device said this ✓

Pay as it goes

One signed stablecoin authorization per slice, within its owner's limits.

slice #0542 µUSDC
slice #0642 µUSDC
slice #07 · EIP-300942 µUSDC · signed ✓
session cap294 / 1,000 µUSDC
How

Pay for power ten seconds at a time.

The buyer signs for each slice before the next one arrives — so neither side ever trusts the other with more than a fraction of a cent.

Offer

The seller broadcasts its price over Bluetooth.

Check

The buyer checks rate, cap and window against its policy.

Sign

It signs one slice's payment, on the chip.

Deliver

The seller delivers the slice. Repeat; settle in batches.

session · Bitaxe ← eCandlelive
Slices
0/ 24
Energy
0.000Wh
Paid
0µUSDC
Illustration using the eCandle × Bitaxe run's parameters — 10 s slices at 15 W, about 42 µUSDC each.
In the field

Already signing for power on real hardware.

When the drone paid for power

Read →

The first autonomous solar nanopayment

Read →

M2M nanopayments on a $2 chip

Read →
Start

From clone to a verified signature in five minutes.

On your laptop, no hardware needed. Two boards come next.

~/boat-mer
$ git clone https://github.com/TLAY-IO/boat-mer.git && cd boat-mer
$ cmake -B build && cmake --build build
$ ./build/quickstart
…
recovered    0x76ebfd227d9fa763035fc31372f5923b52e014b3
result       OK — signature recovers to this device
cross-chain  correctly rejected
BoAT MER · Apache-2.0

Give your device a key of its own.