WaitSpin Trust

WaitSpin measures wait-state ad visibility, not developer work. The public client surfaces only fetch a sponsored line for a registered install, display it in the supported wait-state surface, and report an impression after the visible interval.

Public publisher targets: VS Code (status-bar-fallback), Claude Code (claude-code), MiMo Code (mimocode), OpenCode (opencode), Grok Code CLI (grok).

• workspace files
• source code
• open editor text
• prompts
• model responses
• integrated terminal output
• shell history
• repository URLs
• screenshots
• clipboard contents
• raw keystrokes

• publisher registration: {install_id,target}
• serve polling: {install_id}
• impression event: {serve_id,serve_receipt,install_id,visible_ms}
• standard network metadata used for rate limits, fraud controls, abuse response, and audit logs

WaitSpin has no separate analytics telemetry stream in the public clients. Serve, impression, wallet, and accounting events are operational telemetry needed to run the marketplace.

The VS Code extension is installed from the Visual Studio Marketplace. WaitSpin publishes the client source at github.com/citedy/waitspin and publishes a machine-readable provenance manifest at /provenance/waitspin-vscode.json. The repository does not track VSIX binaries; release automation packages them and records the SHA256 in the manifest.

The VS Code extension connects a publisher install inside VS Code, stores the publisher API key in VS Code SecretStorage, stores the install ID in user-scoped extension state, polls the WaitSpin API for a sponsored line, opens advertiser links only after user action, and reports a billable impression after the required visible interval. It does not read workspace files, open editor text, prompts, model responses, integrated terminal output, shell history, repository URLs, or source code.

• VS Code: status-bar-fallback. Uses VS Code SecretStorage for the publisher API key, a global user-settings bootstrap for install ID/API base, and the managed Activity Bar/status-bar fallback surface.
• Claude Code: claude-code. Inspects user/scoped Claude settings, manages statusLine.command with --compose-existing support, and stores WaitSpin state/cache under ~/.waitspin.
• MiMo Code: mimocode. Installs a managed runtime under ~/.local/bin, adds a bash hook in ~/.bashrc, and stores WaitSpin state/cache under ~/.waitspin.
• OpenCode: opencode. Installs a plugin under ~/.config/opencode/plugins, manages the tui.json plugin entry, and stores WaitSpin state/cache under ~/.waitspin.
• Grok Code CLI: grok. Uses a managed text-asset footer patch with hash-backed backup/restore plus managed runtime/cache/state; it does not patch native binaries.

The current public publisher surfaces are the VS Code Marketplace Activity Bar/status-bar extension, Claude Code statusline command, MiMo Code shell hook, OpenCode TUI plugin slot, and Grok Code CLI footer. Native spinner patching beyond these supported status surfaces remains outside the public contract until separately shipped and documented.

The public trust repository is scoped to client code, public docs, public contracts, provenance, and trust-boundary tests. These systems stay private:

• hosted backend implementation
• receipt signing internals
• fraud thresholds and risk scoring
• campaign ranking and allocation logic
• billing/accounting internals
• payout execution controls
• database schema and migrations
• deployment, monitoring, and operator scripts