Only a phase whose check has passed is called live.
Every phase has a "done when". Phases 3 to 8 are roughly independent; order can shift.
- 0
Skeleton
DoneWeb on Vercel, API on the droplet, Postgres, deploy scripts.
Done when the production page shows "API connected · database up".
- 0.5
Determinism spike
Done (finding published)Pick an open-weights code model; test whether batch-invariant kernels give byte-identical output twice and on a second machine.
Done when byte-identical output both times and both machines, or a written finding of exactly what breaks it.
- 1
MVP, all free
In buildScanner, Shield, Audit v1, wallet accounts (Sign-In-With-Solana), public verify page, badges. Final third-party checks pending.
Done when a report and verdict come back correct for a known-bad and a known-good mint; a live delegation shows and revokes; a third party re-verifies a published receipt; a wallet signs in and sees only its own jobs.
- 2
Shield live, Audit depth, anchoring
PlannedWallet monitoring and alerts; deeper Audit (Token-2022, Anchor IDL aware); daily Merkle root anchored on Solana; receipt-backed badge.
Done when a new risky approval on a watched wallet alerts; a published audited badge verifies against the on-chain root.
- 3
Payments
PlannedUSDC via Solana Pay, then card; per-wallet quotas; token discounts only if the owner provides a token.
Done when a customer pays for an Audit in USDC and the job runs against that payment.
- 4
Deterministic inference node
PlannedSelf-hosted open-weights model with batch-invariant kernels; byte-identical replay; model weights hash in the receipt; multi-model deep audit tier.
Done when a third party re-runs a published Audit on a conforming node and gets the same bytes.
- 6
Gate
PlannedReproducible rebuilds of the top 500 PyPI packages, then npm; a pip/npm proxy that blocks mismatches; the diff-explainer agent.
Done when replaying LiteLLM 1.107.0 through the proxy is blocked, with a plain-words reason.
- 7
Leash
PlannedHosted agents (patching, deploy, treasury) whose actions are receipted and action-bound.
Done when every agent action on the public log has a receipt; a copied key cannot act.
- 8
Network
PlannedOutside GPUs do the Audit and agent jobs; shares commit to paid job ids; slashing for wrong results.
Done when shares on unpaid or random work earn nothing.
- 9
Private verify
Plannedzk proof of a single tile.
Done when a closed-source job verifies without revealing the code.
- —
EVM expansion
Planned (after Phase 2)Ethereum and BSC in Scanner, Shield and Audit.
Done when Scanner and Shield return the same quality of report for an EVM contract as for a Solana one.