Roadmap · July 2026 to July 2027

Twelve months from prototype to paying winners.

The mechanism is built and tested. The year ahead is about earning the right to hold real money: verifiable draws, licensed custody, audited reserves, and a first market served well.

Now

FoundationShipped

What already exists, as of July 2026.

  • Core protocol prototype with 27 passing tests: principal-safe vault over tokenized T-bill funds, time-weighted tickets, Premium-Bonds-style tiered draws, lock boosts, group pools, and cross-chain deposit routing (Solana rails via CCTP).
  • Prize-schedule simulation: retention modeling that selected the published tier design and sized the reserve buffer.
  • windfalling.xyz live: product site, safety documentation, waitlist.
Q3 ’26

Harden the machineAug to Oct

Close the gap between prototype and production protocol.

  • Production randomness: Chainlink VRF v2.5 adapter, plus a keeper service that closes and finalizes every draw and refreshes lapsed lock boosts automatically.
  • Deterministic single-winner jackpot draw and a reserve policy sized by the published simulation.
  • Deposit caps, emergency pause, and the transparent AUM fee module.
  • Fuzz and invariant testing, internal security review, first external audit scoped and scheduled.
  • Regulatory memos for all five wedge markets; local counsel engaged in the first two (Argentina and Turkey leading).
Q4 ’26

Earn the right to hold moneyNov to Jan

Trust infrastructure: custody, audits, transparency, and a closed beta.

  • External audit #1 completed and published.
  • Licensed custody partner selected; pilot-market legal structure in place.
  • Protocol chain finalized (Base or Arbitrum) and live integration with a real tokenized T-bill fund, first on testnet, then mainnet with capped deposits.
  • Solana deposit rails through CCTP in production.
  • Custodial wallet backend: phone-number accounts, card and bank deposits through a local payment partner.
  • Reserve transparency dashboard v1: live assets versus balances, updated continuously, auditable by anyone.
  • Closed beta from the waitlist: hundreds of savers, small caps, real monthly draws.
Q1 ’27

First marketFeb to Apr

Public pilot in market #1, with the caps on and the receipts public.

  • Public launch in the first market (leading candidate: Argentina), deposit caps in force.
  • First public monthly draws, with a step-by-step guide for verifying any draw end to end.
  • Group pools live: savings circles with combined tickets and pro-rata payouts.
  • Jackpot sponsorship program: partner-funded prize top-ups.
  • Retention instrumentation: real cohort data flowing back into the prize schedule model.
Q2 ’27

Prove it scalesMay to Jul

Lift the caps, calibrate on live data, prepare market #2.

  • Deposit caps raised behind audit #2 and reserve growth.
  • Market #2 preparation (Turkey or Nigeria): counsel, localization, payment rails.
  • Lock boosts live: 6-month and 12-month commitments with boosted tickets.
  • Prize schedule v2, calibrated on real cohort behavior instead of assumptions.
  • Fundraise on traction: pool growth, retention against the simulation, and a public draw track record.
Later

Beyond the first year

  • Multi-market rollout across the remaining wedge countries.
  • Consumer launch brand decision, tested with real savers in each market (the working name stays for the company and protocol).
  • Hub-and-spoke deposits revisited only if the documented triggers fire; the prize pool never fragments.
Hard gates, in plain terms: no public launch in any market without local counsel sign-off, licensed custody, a published external audit, and the reserve dashboard running. Dates are targets, not promises; regulatory timelines in the wedge markets can move any of this. This page is a plan for a concept-stage product, not an offer or a solicitation.