Read, compose, verify.
Official-reference market data, mainnet wallet reads, private strategy drafts, health checks, release-gate checks, and transparent product status.
BUILD NOTES / REV. 01MAINNET TARGET · CHAIN 4663
Verify the system.
Then trust it.
This page separates the live interface from the infrastructure that still requires audit, operator decisions, legal review, and an authorized deployment.
Deposit, route, rebalance.
The transaction planner is implemented but fail-closed. No approval, deposit, withdrawal, or rebalance is exposed until audited deployments and release gates are configured.
01 / CONTROL PATHOne owner.
One owner.
Seven enforced layers.
The prepared system starts paused, keeps withdrawals under owner authority, and requires the Risk Guard for every rebalance.
01USER AUTHORITY
Owner wallet
Changes strategy, pauses automation, and controls withdrawals.
02ACCOUNT REGISTRY
Strategy Factory
Creates deterministic user-owned accounts without a platform custody key.
03STRATEGY STATE
Strategy Account
Holds an allocation commitment and enforces token, router, and selector permissions.
04EXECUTION FILTER
Risk Guard
Required for every rebalance and rejects stale, restricted, oversized, or excessive-slippage execution.
05PRICE CONTEXT
Oracle adapter
Normalizes explicitly configured onchain feeds without assuming an address.
06SESSION CONTEXT
Market state
Expiring reporter state blocks missing, guarded, halted, or stale markets.
07APPROVED VENUE
Router + selector
Both the contract address and exact function selector must be allowlisted.
02 / FAIL-CLOSED RULESMissing proof
Missing proof
means no route.
The source narrows execution through explicit configuration. Production oracle and session logic still belongs in an independently reviewed Risk Guard.
Tokens, routers, and risk guards cannot be allowlisted as bare externally owned accounts.
An approved router cannot receive arbitrary calls; the exact function selector must also be approved.
Every route carries a deadline of at most one hour and a non-zero minimum output.
Automation cannot execute without a configured Risk Guard returning approval for that route.
Manual owner rebalances pass through the same Risk Guard; owner authority cannot bypass price and market-state checks.
Missing, guarded, restricted, or expired market status fails closed before a route is called.
Router allowance is cleared before and after the approved call.
Pause and withdrawal stay under owner authority, protected by a reentrancy lock.
03 / LAUNCH GATESMainnet is a gate.
Mainnet is a gate.
Not a slogan.
“Built” means present in this project. It does not mean audited, legally available, or safe for user funds.
01 / Interface and market deskBUILT
02 / Read-only mainnet wallet and RPC healthBUILT
03 / Strategy Account, factory, Risk Guard, oracle adapter, and market-state sourceBUILT
04 / Execution readiness, transaction planning, and recent-log indexing APIsBUILT
05 / Compiler, ABI, fail-closed, backend, and database checksBUILT
06 / Independent smart-contract auditREQUIRED
07 / Verified router, selector, oracle, and risk-guard inputsREQUIRED
08 / Legal entity, eligibility policy, and restricted-jurisdiction reviewREQUIRED
09 / Wallet-authorized simulation, deployment, and explorer verificationREQUIRED
04 / OPERATOR RUNBOOKNo private key
No private key
inside the project.
pnpm run contracts:testCompile and inspect the ABI, safety errors, event surface, and bytecode size.
pnpm run contracts:mainnet-checkValidate chain 4663 and confirm bytecode exists at every configured dependency.
GET /api/protocolRead the configured deployment and owner controls. With no address configured, it reports inactive.