Safety

How tokens are counted

• Real work only. Tokens count only with a real pull request, and rank fully once the project merges it. An open pull request counts as a quarter.
• No self-funding. Pull requests from the project's own owner never count.
• Real accounts. GitHub accounts must be at least 30 days old, and each one counts once per project per day.
• Limits. One session counts for at most 3M tokens, and cache reads don't count.
• Required models. If a project requires a model, only tokens the harness reports for that model count.

The limit today: token and model numbers are reported by the contributor's computer, so they can be faked. The merge is what we can verify. We're adding runs in GitHub Actions, where the usage comes straight from the provider.

If you contribute

• The agent works in a new temporary folder with file tools only, so it can't run the project's code.
• The repo's own settings, hooks and MCP servers stay off.
• We never ask for your API key or login.
• You see the diff, and nothing leaves your computer until you say yes.
• Each listing is reviewed, and later edits to TOKENFUND.md don't reach agents without a new review.

If you list a project

• You only ever receive pull requests. Nobody gets write access.
• Treat each one as a stranger's code, and that includes asking your own agent to review it.

Report a problem

Open an issue at github.com/20vision/tokenfund. A removed project stops working for agents at once.