When Machines Start Doing Business

There are more connected machines on Earth than people. Parcel lockers, EV chargers, lab instruments, robot arms in warehouses, sensors on rooftops: every day they do work that has value. Yet that work almost never sells directly to a stranger. A charger can't take its own orders. A test instrument can't sell its idle hour to the lab next door.

The machines are ready. Trust is what's missing. Today, to sell what a machine can do, a middleman has to stand between buyer and seller. It opens accounts for buyers. It collects and holds money for sellers. When a dispute comes up, it decides how much work the device really did. All the trust rests on that one middleman, so only big platforms can afford the business, and the long tail of machines sits idle.

Every machine deal has to answer three questions. Who is selling? How much was delivered? And where does the money go?

If machines and code can prove all three directly, nobody has to trust the middleman any more. It can still provide services, relay transactions and send notifications. It can't touch the money, and it can't change the books.

The next buyer may not be human

A new kind of buyer is arriving: software. A scheduler needs to book tests on ten devices overnight. An AI agent wants an hour of printer time for its user. They need purchases a program can complete on its own, with a budget cap, clear terms and automatic refunds when something goes wrong. TLAY lets an owner sign a funds grant for software that sets how much it may spend, which services it may buy and which payees it may pay. Inside those limits the software places its own orders, and each one still settles by the delivery the device signed for. Devices can trade with each other the same way: a device can use its own payment key to buy a service from another device.

TLAY Machine Commerce Enabler has four layers that run from the chip all the way to the chain: a runtime inside the device, a platform for connection and settlement, contracts that hold the money, and apps and SDKs for people and software. Click any block in the diagram to see what it does.

Three ways to sell that cover how most machines work

Signatures are the common language of the system

In TLAY, almost every key action is a signature, and each kind of signature has its own key that does only that job. Whoever signs something answers for it.

Here is a real test order from start to finish. The buyer ordered 1,000 milliseconds of robot-arm time at 0.00001 USDC per millisecond, and the device actually ran for 618 milliseconds. Step through it. The sequence diagram on the left lights up what happens at each step, and the ledger on the right shows where the money is at that moment.

Run the numbers yourself

The settlement rules live in the contract, and anyone can check the math. The charge is the unit price times the amount actually delivered. The platform fee comes out of the seller's revenue. The rest is split among the payees by the shares in the terms. Everything not delivered goes back to the buyer. Drag the sliders below and see.

When the buyer disputes the delivery

Signed device metering is evidence, yet the real world has surprises. A robot arm jams, the meter reads normally, and the job is still unfinished. So every metered order gets a dispute window once delivery is proposed. The buyer can write a reason, sign it and raise a dispute. The money stays in the contract, and the arbiter named in advance in the service terms decides how much was really delivered. If the arbiter does not rule in time, the buyer gets a full refund.

More details that make machines trustworthy

Claiming is identity. The first time a device is claimed, it signs a one-time challenge with a key generated inside the device. From then on only that organization can run it and sell it. Anyone else who gets hold of the device still can't pass as it.

Encryption reaches the chip. The device connects to the gateway over a TLS-encrypted WebSocket. In the "module + host" design, the UART or SPI link between the module and your MCU is also encrypted frame by frame with the Noise protocol.

Anyone can verify the evidence. The platform batches device-signed records into a Merkle tree and anchors only the root hash on-chain. Every record comes with a full inclusion proof: the record, the Merkle path, the on-chain root and the transaction.

Firmware updates leave nothing to luck. A device installs only firmware signed by the publisher key. New versions roll out in batches and pause automatically when the failure rate passes a threshold. If new firmware fails to boot, the device rolls back to the previous version on its own.

Devices that fail security can't trade. Each product can set a security policy covering secure boot, flash encryption and how keys are stored. Devices that fall short get flagged, and the policy can block them from buying and selling outright.

Payee keys stay with the seller. When a seller uses its own payee address, no order takes effect until the seller's key signs its terms. The seller can sign with a wallet in the app, or run a signing tool next to the key that signs automatically under rules the seller sets.

When a machine can issue an invoice no one can forge, it stops being just an asset. It becomes a business.

That is what TLAY sets out to do. Any connected device, owned by a large company or by one person, should be able to sell what it can do directly to people, to software and to other machines, with no one holding its money and no one vouching for its work.

Where it stands today