No theatre. Just the build.
Most protocols market the destination and hide the odometer. This page is the odometer. It states what is green, what is interface-only, and what has not been written yet — and it stays in sync with the code.
Last verified 2026-06-11 against sui 1.73.0. The attack suite includes the cascade you can run on the Contagion Simulator.
We deploy straight to mainnet — there is no testnet rehearsal — so the review is audit-grade and front-loaded: full suite, attack sims, line-by-line review, then an independent audit that is the only safety net before real capital. The "AI-first" pitch is architectural intent today, not a running system. We would rather you read that here than discover it later.
- Capability gates. Privileged actions require an unforgeable capability object, not an address check. You cannot call what you do not hold.
- Hot-potato atomicity. Flash loans return a value that has no
dropability — the transaction cannot end until it is repaid. Under-repayment aborts the whole block. - Single-use attestation. A Sentinel attestation is consumed on use. A replay of a consumed proof aborts — the first test in the board above.
- Conservative LTVs. Loan-to-value ceilings, oracle staleness windows and deviation bounds are set tight, with abort-on-violation rather than best-effort.
Continuous AI audit.
The auditor and sentinel design the on-chain gate plugs into — and why periodic audits belong to a slower era.
read 04 · SiloSiloed architecture.
The wall that turns a protocol failure into a single-silo loss instead of a $13B cascade.
read SEC · PostureSecurity posture.
Disclosure, edge hardening, and the multisig-plus-attestation Guardian model.
read