Worqen v0.0.1-alpha — First Light · Changelog

v0.0.1-alphaAlpha

First Light

Released May 17, 2026

The first public alpha of Worqen — a Solana-secured marketplace for digital and local work. Every payment runs through an on-chain escrow built for milestone-based hires. Self-custody and embedded wallets are both supported, so workers can be paid in SOL, USDC, USDT, or EURC without ever touching a seed phrase. This release covers the full hire lifecycle end-to-end and ships the Solana program with ten v2 security hardening items rooted in formal threat modeling.

Highlights

On-chain milestone escrow for SOL, USDC, USDT, and EURC
External wallets (Phantom, Solflare, Torus, Ledger, Coinbase) or embedded wallets (no seed phrase required)
Two-party dispute negotiation with platform mediation as the final step
Multi-image portfolio with on-chain proof of completed work
Real-time chat and notifications over WebSocket
Available in 10 languages, RTL-ready

Marketplace

AddedBrowse jobs with full-text and geographic search (PostGIS-backed radius queries)
AddedPost jobs with title, description, category, rate, location, photos, and pre-attached milestones
AddedDirect-hire path that skips public posting (invite a worker by handle or wallet)
AddedWorker service listings discoverable by skill, hourly rate, language, and availability
AddedMap clustering for spatial discovery of nearby jobs and workers
AddedApplication cost gated by Worqs — 60 free at signup, 10 granted monthly

Hires & milestones

AddedHire lifecycle: proposed, accepted, in-progress, completed or terminated
AddedPer-milestone funding (not lump-sum) so disputes only freeze the affected slice
AddedMilestone submission with file evidence and revision-request flow
AddedHourly work logs with photo evidence and per-log approval

On-chain escrow

AddedPer-milestone escrow PDA with cached bumps for cheaper CPIs
AddedDeposit, release, partial-release, dispute, resolve, cancel, and close instructions for both SOL and SPL tokens
AddedPermissionless force-release after a configurable dispute deadline (1 to 90 days)
AddedAccount close reclaims roughly 0.005 SOL of rent per terminal escrow back to the employer
AddedDirect-payment instruction for non-escrowed split payments
SecurityToken destination accounts validated by mint and owner — prevents payout redirection
SecurityRelease instructions drain the actual vault balance, defending against 1-lamport dust DoS
SecurityWorker can self-release without platform signature once both parties have confirmed completion
SecurityWorker cannot raise a dispute after either party confirms — closes the bait-and-switch loophole
SecurityPlatform key rotation blocked while an escrow is in dispute
SecurityMandatory 90-day cap on dispute deadlines bounds platform failure exposure
SecurityPartial-release delta-commission math ensures slices sum to the single-release commission exactly
SecurityEmployer cancellation restricted to Created state — funded escrows require the dispute path

Disputes

AddedNegotiation-first dispute flow with proposal and counter-proposal
AddedDedicated dispute chat channel, separate from the job thread
AddedWebSocket real-time updates for status changes and messages
AddedPlatform mediation path with structured resolution workflow
Added7-day negotiation window plus a 24-hour deadline warning

Wallets

AddedSolana wallet adapter support: Phantom, Solflare, Torus, Ledger, Coinbase
AddedEmbedded wallet via Privy — platform signs on the user's behalf, no seed phrase required
AddedOn-chain wallet ownership challenge for verified profile badges
AddedWorqs purchase flow (convert SOL, USDC, USDT, or EURC to Worqs)
AddedDrain-wallet helper for embedded wallet recovery

Profile & reputation

AddedMulti-image portfolio with drag-and-drop reordering
AddedProfile sections: skills, languages, employment (up to 20 entries), education, certifications
AddedMultiple social links per platform (GitHub, LinkedIn, and more)
AddedAvatar and cover image upload
AddedIdentity verification (KYC)
AddedRating and review system on completed hires
AddedProfile completeness score and response-time metric, refreshed on a schedule
AddedPublic profile at /u/<username> with an anonymized view for non-authenticated visitors

Communication

AddedReal-time chat with file attachments, edit and delete history, search, and forward
AddedWebSocket delivery for chat and notifications — no page refresh required
Added30+ notification types across hires, escrows, disputes, KYC, wallet events, and reviews
AddedTransactional email for signup, password reset, milestone events, and dispute alerts

Authentication

AddedEmail and password signup with email verification
AddedOAuth login via Google, GitHub, and LinkedIn
AddedPassword reset via email
AddedJWT access tokens with refresh-token rotation (HttpOnly cookie)

Platform

Added10 supported languages: English, Ukrainian, Arabic, Chinese, French, Russian, Spanish, Hebrew, Hindi, Portuguese
AddedRight-to-left layout for Arabic and Hebrew
AddedAuto-detect locale from country (GeoIP) with manual override
AddedLight, dark, and system theme

Infrastructure

AddedHTTP/3 (QUIC) for lower-latency connections on supported clients
AddedBrotli compression for dynamic and static responses (~68% smaller payloads)
AddedDedicated CDN subdomain media.worqen.com with 30-day immutable caching
ImprovedTightened Content Security Policy with an explicit asset allowlist
ImprovedPer-connection limits scaled for production traffic
AddedDaily Postgres backups with weekly automated restore verification
AddedOrphaned upload auto-cleanup (24-hour expiry on temporary uploads)

Known limitations

This is an alpha release. Account schemas, API shapes, and on-chain instruction signatures may break between releases until we reach beta.
Mainnet deployment is gated on completion of an external security audit.

All releases

v0.0.1-alphaAlpha

First Light

Released May 17, 2026

Highlights

On-chain milestone escrow for SOL, USDC, USDT, and EURC
External wallets (Phantom, Solflare, Torus, Ledger, Coinbase) or embedded wallets (no seed phrase required)
Two-party dispute negotiation with platform mediation as the final step
Multi-image portfolio with on-chain proof of completed work
Real-time chat and notifications over WebSocket
Available in 10 languages, RTL-ready

Marketplace

AddedBrowse jobs with full-text and geographic search (PostGIS-backed radius queries)
AddedPost jobs with title, description, category, rate, location, photos, and pre-attached milestones
AddedDirect-hire path that skips public posting (invite a worker by handle or wallet)
AddedWorker service listings discoverable by skill, hourly rate, language, and availability
AddedMap clustering for spatial discovery of nearby jobs and workers
AddedApplication cost gated by Worqs — 60 free at signup, 10 granted monthly

Hires & milestones

AddedHire lifecycle: proposed, accepted, in-progress, completed or terminated
AddedPer-milestone funding (not lump-sum) so disputes only freeze the affected slice
AddedMilestone submission with file evidence and revision-request flow
AddedHourly work logs with photo evidence and per-log approval

On-chain escrow

AddedPer-milestone escrow PDA with cached bumps for cheaper CPIs
AddedDeposit, release, partial-release, dispute, resolve, cancel, and close instructions for both SOL and SPL tokens
AddedPermissionless force-release after a configurable dispute deadline (1 to 90 days)
AddedAccount close reclaims roughly 0.005 SOL of rent per terminal escrow back to the employer
AddedDirect-payment instruction for non-escrowed split payments
SecurityToken destination accounts validated by mint and owner — prevents payout redirection
SecurityRelease instructions drain the actual vault balance, defending against 1-lamport dust DoS
SecurityWorker can self-release without platform signature once both parties have confirmed completion
SecurityWorker cannot raise a dispute after either party confirms — closes the bait-and-switch loophole
SecurityPlatform key rotation blocked while an escrow is in dispute
SecurityMandatory 90-day cap on dispute deadlines bounds platform failure exposure
SecurityPartial-release delta-commission math ensures slices sum to the single-release commission exactly
SecurityEmployer cancellation restricted to Created state — funded escrows require the dispute path

Disputes

AddedNegotiation-first dispute flow with proposal and counter-proposal
AddedDedicated dispute chat channel, separate from the job thread
AddedWebSocket real-time updates for status changes and messages
AddedPlatform mediation path with structured resolution workflow
Added7-day negotiation window plus a 24-hour deadline warning

Wallets

AddedSolana wallet adapter support: Phantom, Solflare, Torus, Ledger, Coinbase
AddedEmbedded wallet via Privy — platform signs on the user's behalf, no seed phrase required
AddedOn-chain wallet ownership challenge for verified profile badges
AddedWorqs purchase flow (convert SOL, USDC, USDT, or EURC to Worqs)
AddedDrain-wallet helper for embedded wallet recovery

Profile & reputation

AddedMulti-image portfolio with drag-and-drop reordering
AddedProfile sections: skills, languages, employment (up to 20 entries), education, certifications
AddedMultiple social links per platform (GitHub, LinkedIn, and more)
AddedAvatar and cover image upload
AddedIdentity verification (KYC)
AddedRating and review system on completed hires
AddedProfile completeness score and response-time metric, refreshed on a schedule
AddedPublic profile at /u/<username> with an anonymized view for non-authenticated visitors

Communication

AddedReal-time chat with file attachments, edit and delete history, search, and forward
AddedWebSocket delivery for chat and notifications — no page refresh required
Added30+ notification types across hires, escrows, disputes, KYC, wallet events, and reviews
AddedTransactional email for signup, password reset, milestone events, and dispute alerts

Authentication

AddedEmail and password signup with email verification
AddedOAuth login via Google, GitHub, and LinkedIn
AddedPassword reset via email
AddedJWT access tokens with refresh-token rotation (HttpOnly cookie)

Platform

Added10 supported languages: English, Ukrainian, Arabic, Chinese, French, Russian, Spanish, Hebrew, Hindi, Portuguese
AddedRight-to-left layout for Arabic and Hebrew
AddedAuto-detect locale from country (GeoIP) with manual override
AddedLight, dark, and system theme

Infrastructure

AddedHTTP/3 (QUIC) for lower-latency connections on supported clients
AddedBrotli compression for dynamic and static responses (~68% smaller payloads)
AddedDedicated CDN subdomain media.worqen.com with 30-day immutable caching
ImprovedTightened Content Security Policy with an explicit asset allowlist
ImprovedPer-connection limits scaled for production traffic
AddedDaily Postgres backups with weekly automated restore verification
AddedOrphaned upload auto-cleanup (24-hour expiry on temporary uploads)

Known limitations

This is an alpha release. Account schemas, API shapes, and on-chain instruction signatures may break between releases until we reach beta.
Mainnet deployment is gated on completion of an external security audit.

We value your privacy

Highlights

Marketplace

Hires & milestones

On-chain escrow

Disputes

Wallets

Profile & reputation

Communication

Authentication

Platform

Infrastructure

Known limitations

We value your privacy

Highlights

Marketplace

Hires & milestones

On-chain escrow

Disputes

Wallets

Profile & reputation

Communication

Authentication

Platform

Infrastructure

Known limitations