Delivery Escrow
When a buyer prepays for a load of diesel, gasoline, or residual oil, the money doesn't transfer on a promise. It locks in a neutral hold the moment the order is authorized, and releases only when delivery is confirmed: on time, full quantity, on spec at the receiving terminal.
What the hold enforces
Delivery lands inside the agreed window. The demurrage timer runs against it continuously.
Gallons received match gallons ordered. A short load fails the term and cancels the hold.
The grade matches what was agreed. An authorized inspector attests; Sentinel records the reference.
Each load carries its own correlation ID, pickup to terminal handoff produces one clean record.
Pickup to handoff
The buyer's prepayment doesn't reach the refiner. It locks in a neutral pending account against the agreed terms, with a correlation ID minted for the load.
Buyer prepaid → Evergreen Refining
When the load arrives and an authorized inspector or terminal operator attests that it met terms, that claim event releases the funds. Sentinel records the delivery-confirmation reference without adjudicating it.
// terminal operator attests the handoff await sentinel.events.claim("0x8d90", { ref: "terminal-3/att-5521", on_spec: true, gallons: 7400 }) → pending → released → $184,200 to Evergreen · audited
A timeout mechanism running continuous reconciliation scans cancels the hold and refunds the buyer, no party forced to chase the other. The commercial promise becomes a settlement guarantee a counterparty can underwrite.
Demurrage, measured
Lock prepayment at authorization and release it on a verified terminal handoff, with automatic refund when terms aren't met.