名 · evidence/file № 異-010/status board

No theatre. Just the build.

Most protocols market the destination and hide the odometer. This page is the odometer. It states what is green, what is interface-only, and what has not been written yet — and it stays in sync with the code.

№ 01

Sui contracts.

contracts/sui · move
16Move modules
76of 76 tests pass
10attack simulations
0compiler warnings
contracts/sui — sui move test
$ sui move test INCLUDING DEPENDENCIES Bridge, MoveStdlib, Sui BUILDING imyo Running Move unit tests [ PASS ] imyo::attack_tests::attestation_consumed_cannot_be_used_twice [ PASS ] imyo::attack_tests::inflation_attack_blocked_by_virtual_shares_and_encapsulation [ PASS ] imyo::attack_tests::flash_drain_under_repay_aborts [ PASS ] imyo::attack_tests::over_ltv_attack_blocked [ PASS ] imyo::attack_tests::oracle_deviation_attack_blocked [ PASS ] imyo::attack_tests::stale_oracle_blocks_consumers [ PASS ] imyo::attack_tests::borrow_while_paused_blocked [ PASS ] imyo::attack_tests::withdraw_without_shares_aborts … 68 more across pool, oracle, liquidation, intents, guardian, rwa, credit_silo, timelock, flash_loan, interest_model, math, sentinel … Test result: OK. Total tests: 76; passed: 76; failed: 0 toolchain: sui 1.73.0 · 0 warnings

Last verified 2026-06-11 against sui 1.73.0. The attack suite includes the cascade you can run on the Contagion Simulator.

№ 02

What is — and isn't — live.

the honest column
Sui Move contracts · 16 modules, 76/76 greenbuilt
Adversarial attack simulations · replay, inflation, flash-drain, over-LTV, oraclegreen
AI Sentinel · on-chain attestation gate (capability + single-use)interface only
Sentinel swarm / TEE / model · the off-chain attesternot running yet
EVM contracts · Solidity parity for the Ethereum silonot built
dapp · wallet-connect on both rails, no contract calls yethello-world
Mainnet deployment · gated on independent third-party auditpending audit

We deploy straight to mainnet — there is no testnet rehearsal — so the review is audit-grade and front-loaded: full suite, attack sims, line-by-line review, then an independent audit that is the only safety net before real capital. The "AI-first" pitch is architectural intent today, not a running system. We would rather you read that here than discover it later.

№ 03

How the gate works.

capability · hot-potato · single-use
  • Capability gates. Privileged actions require an unforgeable capability object, not an address check. You cannot call what you do not hold.
  • Hot-potato atomicity. Flash loans return a value that has no drop ability — the transaction cannot end until it is repaid. Under-repayment aborts the whole block.
  • Single-use attestation. A Sentinel attestation is consumed on use. A replay of a consumed proof aborts — the first test in the board above.
  • Conservative LTVs. Loan-to-value ceilings, oracle staleness windows and deviation bounds are set tight, with abort-on-violation rather than best-effort.
№ 04

Read on.

architecture · ai-audit