The architecture, in detail.

v0.0 simple — what ships first

• Arbitrum One — settlement, USDC, sub-cent gas, ~250–500ms blocks.
• Fhenix CoFHE — non-forkable FHE substrate; AES key wrapped as euint256; runner decrypts under temporary FHE.allow().
• x402 + Permit2 — HTTP 402 + EIP-3009 (one-shot tasks) and Permit2 + multicall (loop hire). One sig per task. Hard cap: 2 wallet popups.

v0.1+ expansion — what unlocks with measured demand

• EigenDA — hot ciphertext lane (replaces Pinata IPFS at scale).
• Arweave — permanent L4/L5 memory (Arweave bundles for cross-job pattern compounding).
• Lit Protocol V3 — multi-tier access control (replaces server-side Fhenix gateway permits at scale).
• EAS attestations — composable per-iter receipts external apps can reference.
• Phala TEE — attested inference backend; the second backend after AWS Bedrock.
• 0xSplits PullSplit — >3-recipient split waterfalls (royalties, multi-author bundles).
• Multicall3 — atomicity beyond per-iter advance-with-split (multi-checkpoint workflows).

Why ship simple first

Each deferred primitive is a real engineering surface. Shipping all 8 from Day-1 increases the surface area to audit, document, and demo by 8×. In contrast, the 3-primitive ship gets to a working buyer journey (chat → 1 sig → result in 60s) with one third the LOC.

Heavy v0.1 features stay in the codebase under services/arbloop/_deferred/ behind feature flags (FEATURE_ARBLOOP_DEFERRED_*). Re-enabling each is a 1-PR change with explicit Gstack-frame justification.