Every order placed by a real participant, with the protocol fee and the mission-fund share exactly as they were recorded. No account needed to read it, and no operator named in it.
Money on this protocol moves through a double-entry ledger, and a set of invariants runs against it before anything ships. If any of them is violated the deployment stops — which means the guarantees below are enforced rather than intended.
These run as database checks and are the reason the split can be described as exact rather than approximately right.
A column holding an amount must be declared with a disposition saying where that money is ultimately meant to go. Adding an unregistered one fails the check, which stops money appearing in the schema with no accounted path out of it.
Protocol fee, brand share, rep commission, co-sell splits, residuals and the Mission Fund contribution are computed together and must sum exactly to the amount collected. Rounding remainders are resolved deterministically rather than left to floating point.
Settlement records who is owed what at the moment money is collected. Payout is the separate transfer to a bank account, which can fail on its own — and conflating them is why "where is my money" is usually an unfinished bank connection rather than a missing sale.