Check every claim yourself

1. 01

   Watch the one moment

   Our fixture agent A's Critical, from its commit block: verified at 18.5 s, attested on NEAR at 29.1 s, paid at 71.0 s, both chains paused by 90.6 s. Recorded, every step a transaction.

   Watch the one moment
2. 02

   Try it with no account

   The practice program runs the whole loop on testnet: a practice account is vended, the tutorial proof is sealed, committed and run in the enclave, and the contract pays it. Your try is live.

   Try it, no account
3. 03

   Check every claim

   22 claims from the run, every one with its check. Run them all with one button, or one at a time: each shows its raw answer, the transactions behind the claim and the CLI command.

   Go to the claims
4. 04

   See what is not shown

   What this run does not show, the limits that hold for every program, and our own health, live.

   What is not shown

1. 1

   An agent's sealed proof (our scripted fixture agent A), submitted over MCP, is run in the enclave, attested on NEAR and paid in seconds under the cap

   Expected

   Violation, tier T1, Done:Paid, paid 0.1 wNEAR

   Evidence

   • commitCynCsx8P…, commit transaction: CynCsx8PNsFAYnYp6Zk5HjpSg3fWUrHSKfJ9CD9HQ3nP, opens an explorer in a new tab
   • reveal8yEJyYXg…, reveal transaction: 8yEJyYXgz34BJWCTPLVnvq13PLW15oBx8uzkMkopc4DY, opens an explorer in a new tab
   • pay4W4CYBQu…, pay transaction: 4W4CYBQucfJL8bawGXJZL4ufAKR2A2Se45hBvT7YmtfZ, opens an explorer in a new tab

   Limits that apply

   • TEE trust is tiered, not removed.
   • Worker images.
   • One block.

   On this site

   Commit 13

   Check the API recordGET https://api.antibody.144-91-104-54.sslip.io/v1/commits/13

   Holds if: row.state is Done:Paid

   $

   antibody status --commit 13

   2 more checks, read straight from the chain

   Read the commit on NEARview bounty.antibody.testnet.get_commit({"commit_id":13})

   Holds if: its state on NEAR is Paid

   $

   antibody view --contract bounty.antibody.testnet --method get_commit --args '{"commit_id":13}'

   Read its run on NEARview bounty.antibody.testnet.get_run({"run_id":33})

   Holds if: run 33's tier on NEAR is T1

   $

   antibody view --contract bounty.antibody.testnet --method get_run --args '{"run_id":33}'

2. 2

   A second planted bug (the unguarded fee sweep) is verified and paid after its window

   Expected

   Violation, tier T1, Done:Paid, paid 0.03 wNEAR

   Evidence

   • commit6kx1dWvV…, commit transaction: 6kx1dWvVDxhxtPYQaJxKqx9VFpi4cyN2T6BtiYNsh7LT, opens an explorer in a new tab
   • revealAdqYNMxc…, reveal transaction: AdqYNMxc5hdqcGKaGndUAaRYS7w6HHVTTLd7kLnUgjAd, opens an explorer in a new tab
   • paypNuD1vzK…, pay transaction: pNuD1vzKjRLYAAnAxHN6tdcg18aKK2jwTXGGstNon75, opens an explorer in a new tab

   Limits that apply

   • TEE trust is tiered, not removed.
   • Worker images.
   • One block.

   On this site

   Commit 14

   Check the API recordGET https://api.antibody.144-91-104-54.sslip.io/v1/commits/14

   Holds if: row.state is Done:Paid

   $

   antibody status --commit 14

   2 more checks, read straight from the chain

   Read the commit on NEARview bounty.antibody.testnet.get_commit({"commit_id":14})

   Holds if: its state on NEAR is Paid

   $

   antibody view --contract bounty.antibody.testnet --method get_commit --args '{"commit_id":14}'

   Read its run on NEARview bounty.antibody.testnet.get_run({"run_id":34})

   Holds if: run 34's tier on NEAR is T1

   $

   antibody view --contract bounty.antibody.testnet --method get_run --args '{"run_id":34}'

3. 3

   A prompt injection in the report earns nothing: the verifier never reads reports; NoViolation, and the bond goes to the escrow

   Expected

   NoViolation, tier T1, Done:Forfeited

   Evidence

   • commit4ymAcWJ7…, commit transaction: 4ymAcWJ7wAV1tDKArS95uJz3BEeeSmQn6LSk7kJGfx7E, opens an explorer in a new tab
   • reveal9AFUgQcM…, reveal transaction: 9AFUgQcMXQng9mysBXfJYJt2RKUTaiHebfhAJDfw1kHN, opens an explorer in a new tab

   Limits that apply

   • TEE trust is tiered, not removed.
   • Worker images.
   • One block.

   On this site

   Commit 15

   Check the API recordGET https://api.antibody.144-91-104-54.sslip.io/v1/commits/15

   Holds if: row.state is Done:Forfeited

   $

   antibody status --commit 15

   2 more checks, read straight from the chain

   Read the commit on NEARview bounty.antibody.testnet.get_commit({"commit_id":15})

   Holds if: its state on NEAR is Forfeited

   $

   antibody view --contract bounty.antibody.testnet --method get_commit --args '{"commit_id":15}'

   Read its run on NEARview bounty.antibody.testnet.get_run({"run_id":35})

   Holds if: run 35's tier on NEAR is T1

   $

   antibody view --contract bounty.antibody.testnet --method get_run --args '{"run_id":35}'

4. 4

   A duplicate of A is recorded with its own proof, then confirmed a duplicate at the fix

   Expected

   Violation, tier T1, Done:DuplicateConfirmed

   Evidence

   • commit6E5i332d…, commit transaction: 6E5i332dtV5a1kjgwyNBUkpSS9N5VEDv7i2Wj5JeAuXT, opens an explorer in a new tab
   • reveal46YmqNdd…, reveal transaction: 46YmqNddvWgw55MBn5JcGXVGZ4cHkyzsojig6tLFxJhZ, opens an explorer in a new tab

   Limits that apply

   • TEE trust is tiered, not removed.
   • Worker images.
   • One block.
   • Duplicates are judged by (rule, entry point).

   On this site

   Commit 16

   Check the API recordGET https://api.antibody.144-91-104-54.sslip.io/v1/commits/16

   Holds if: row.state is Done:DuplicateConfirmed

   $

   antibody status --commit 16

   2 more checks, read straight from the chain

   Read the commit on NEARview bounty.antibody.testnet.get_commit({"commit_id":16})

   Holds if: its state on NEAR is DuplicateConfirmed

   $

   antibody view --contract bounty.antibody.testnet --method get_commit --args '{"commit_id":16}'

   Read its run on NEARview bounty.antibody.testnet.get_run({"run_id":36})

   Holds if: run 36's tier on NEAR is T1

   $

   antibody view --contract bounty.antibody.testnet --method get_run --args '{"run_id":36}'

5. 5

   A known issue the project declared (sealed) before opening is not paid again

   Expected

   Violation, tier T1, Done:Known

   Evidence

   • commitHAuRahae…, commit transaction: HAuRahaeHhcmGMMHXn2EupxYNrVU8ziToHKhj285oomP, opens an explorer in a new tab
   • revealBPJgHSUU…, reveal transaction: BPJgHSUUD8PrXCoFhhaEoGgzzcXmxzPvK2jFDhHmjZVY, opens an explorer in a new tab

   Limits that apply

   • TEE trust is tiered, not removed.
   • Worker images.
   • One block.

   On this site

   Commit 17

   Check the API recordGET https://api.antibody.144-91-104-54.sslip.io/v1/commits/17

   Holds if: row.state is Done:Known

   $

   antibody status --commit 17

   2 more checks, read straight from the chain

   Read the commit on NEARview bounty.antibody.testnet.get_commit({"commit_id":17})

   Holds if: its state on NEAR is Known

   $

   antibody view --contract bounty.antibody.testnet --method get_commit --args '{"commit_id":17}'

   Read its run on NEARview bounty.antibody.testnet.get_run({"run_id":37})

   Holds if: run 37's tier on NEAR is T1

   $

   antibody view --contract bounty.antibody.testnet --method get_run --args '{"run_id":37}'

6. 6

   A distinct planted bug is paid

   Expected

   Violation, tier T1, Done:Paid, paid 0.1 wNEAR

   Evidence

   • commit5q7s1wJW…, commit transaction: 5q7s1wJWzpazCW6wmtk13RS5ZZHDNakQSBXKyhYxjdYL, opens an explorer in a new tab
   • reveal8yQc4crn…, reveal transaction: 8yQc4crn5LjN8KBC6t8aRPLEcZYEWRPPs8iyc2dQYNAL, opens an explorer in a new tab
   • pay2UE5mmKA…, pay transaction: 2UE5mmKAZmRRE5UroKwwiCLv4KqxfmcDH2oRZey7YhP6, opens an explorer in a new tab

   Limits that apply

   • TEE trust is tiered, not removed.
   • Worker images.
   • One block.

   On this site

   Commit 18

   Check the API recordGET https://api.antibody.144-91-104-54.sslip.io/v1/commits/18

   Holds if: row.state is Done:Paid

   $

   antibody status --commit 18

   2 more checks, read straight from the chain

   Read the commit on NEARview bounty.antibody.testnet.get_commit({"commit_id":18})

   Holds if: its state on NEAR is Paid

   $

   antibody view --contract bounty.antibody.testnet --method get_commit --args '{"commit_id":18}'

   Read its run on NEARview bounty.antibody.testnet.get_run({"run_id":38})

   Holds if: run 38's tier on NEAR is T1

   $

   antibody view --contract bounty.antibody.testnet --method get_run --args '{"run_id":38}'

7. 7

   The gap lane: harm to a protected user that no invariant catches is refunded and recorded; round 1 adds the invariant, and the claim is promoted and paid

   Expected

   NoViolation, tier T1, Done:Paid, paid 0.01 wNEAR

   Evidence

   • commit8S2QVg9s…, commit transaction: 8S2QVg9snxcewMhewuUUHncVj7pexQRsQ6Deh63MUTpu, opens an explorer in a new tab
   • reveal7hSWWNJb…, reveal transaction: 7hSWWNJbDfanqsPmEMFhRDdg2KYv42uzpvig5SB5bgzk, opens an explorer in a new tab
   • pay3pkmXk1M…, pay transaction: 3pkmXk1MNDoRXQWe6gJio768vThkYzh6LavD7KsnnvLS, opens an explorer in a new tab

   Limits that apply

   • TEE trust is tiered, not removed.
   • Worker images.
   • One block.

   On this site

   Commit 19

   Check the API recordGET https://api.antibody.144-91-104-54.sslip.io/v1/commits/19

   Holds if: row.state is Done:Paid

   $

   antibody status --commit 19

   2 more checks, read straight from the chain

   Read the commit on NEARview bounty.antibody.testnet.get_commit({"commit_id":19})

   Holds if: its state on NEAR is Paid

   $

   antibody view --contract bounty.antibody.testnet --method get_commit --args '{"commit_id":19}'

   Read its run on NEARview bounty.antibody.testnet.get_run({"run_id":39})

   Holds if: run 39's tier on NEAR is T1

   $

   antibody view --contract bounty.antibody.testnet --method get_run --args '{"run_id":39}'

8. 8

   The one moment: A's verdict pays A and pauses the fixture on both chains

   Expected

   2 pause permits; from A's commit block: verdict 18.5 s, T1 29.1 s, paid 71.0 s (its block), pause permits signed at 62.7 s and 62.7 s, paused on 11155111 at 90.6 s and on 84532 at 87.2 s (NEAR steps at their blocks, each pause when the relayer got its receipt; the MPC network signed the permits)

   Evidence

   • Sepolia pause0x224f6f…, Sepolia pause transaction: 0x224f6f77ffd081042f634f2a214c1d23d5c232114e35a62e7935981a1ee779e4, opens an explorer in a new tab
   • Base Sepolia pause0x2bcb96…, Base Sepolia pause transaction: 0x2bcb96c817c3c0abecbe93d5c77cae3a671ebf631ff3dc2dec00bec753d6244b, opens an explorer in a new tab
   • pay4W4CYBQu…, pay transaction: 4W4CYBQucfJL8bawGXJZL4ufAKR2A2Se45hBvT7YmtfZ, opens an explorer in a new tab

   Check, as JUDGES.md names it

   antibody judge --program 5 (the permits); the times: python3 scripts/docs/recorded.py one_moment.seconds_from_commit --file docs/results/testnet-2026-11-04.json

   Limits that apply

   • Ethereum L1 for verification (Sepolia). Other chains are pause and release targets.
   • Worker images.

   On this site

   The one moment, step by stepCommit 13Program 5

   Check the reflex panelGET https://api.antibody.144-91-104-54.sslip.io/v1/programs/5/reflex

   Holds if: a pause permit for ticket 13 (A's commit) is listed

   $

   antibody judge --program 5

   2 more checks, read straight from the chain

   Ask the Sepolia adaptereth_call on chain 11155111

   Holds if: true: the adapter on Sepolia carried out the pause permit (round 0, ticket 13)

   $

   curl -s https://ethereum-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_call","params":[{"to":"0xad6bc84c8c5a9fb5aca79b13bb867b6e7930d49b","data":"0xb07c411ff9b7a2e8bb96c811ba78c685c105ad68d50eb7da11dd04cde2d00f66d6ee8755"},"latest"]}'

   Ask the Base Sepolia adaptereth_call on chain 84532

   Holds if: true: the adapter on Base Sepolia carried out the pause permit (round 0, ticket 13)

   $

   curl -s https://base-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_call","params":[{"to":"0xad6bc84c8c5a9fb5aca79b13bb867b6e7930d49b","data":"0xb07c411ff9b7a2e8bb96c811ba78c685c105ad68d50eb7da11dd04cde2d00f66d6ee8755"},"latest"]}'

   $

   python3 scripts/docs/recorded.py one_moment.seconds_from_commit --file docs/results/testnet-2026-11-04.json

9. 9

   Round 1: the TEE checks the fix, the keeper re-runs every paid proof at it, the code is released only if the gate holds

   Expected

   5 re-runs (2 fixed); release gate false (no release permit); 1 key released, 2 carried

   Evidence

   check run 41

   • propose the fix7JJuBeTs…, propose the fix transaction: 7JJuBeTsMAAkv3jPT1u7ZzWZjqk2HS5seShyRw7uciRF, opens an explorer in a new tab

   Check, as JUDGES.md names it

   antibody status --program 5 (each round's gate and keys); the re-run counts: python3 scripts/docs/recorded.py 'rounds.*.summary' --file docs/results/testnet-2026-11-04.json

   Limits that apply

   • Duplicates are judged by (rule, entry point).

   On this site

   Program 5

   Read the program on NEARview bounty.antibody.testnet.get_program({"program_id":5})

   Holds if: round 1's release gate is false

   $

   antibody view --contract bounty.antibody.testnet --method get_program --args '{"program_id":5}'

   $

   antibody status --program 5

   $

   python3 scripts/docs/recorded.py 'rounds.*.summary' --file docs/results/testnet-2026-11-04.json

10. 10

    Round 2: the TEE checks the fix, the keeper re-runs every paid proof at it, the code is released only if the gate holds

    Expected

    4 re-runs (4 fixed); release gate true (release permits signed); 2 keys released, 0 carried

    Evidence

    check run 47

    • propose the fixHbfLgvjk…, propose the fix transaction: HbfLgvjkwRffLH1j5sKd98CeSyVrAY4jMcMHqKYE3gfB, opens an explorer in a new tab

    Check, as JUDGES.md names it

    antibody status --program 5 (each round's gate and keys); the re-run counts: python3 scripts/docs/recorded.py 'rounds.*.summary' --file docs/results/testnet-2026-11-04.json

    Limits that apply

    • Duplicates are judged by (rule, entry point).

    On this site

    Program 5

    Read the program on NEARview bounty.antibody.testnet.get_program({"program_id":5})

    Holds if: round 2's release gate is true

    $

    antibody view --contract bounty.antibody.testnet --method get_program --args '{"program_id":5}'

    $

    antibody status --program 5

    $

    python3 scripts/docs/recorded.py 'rounds.*.summary' --file docs/results/testnet-2026-11-04.json

11. 11

    The released code is the final fix on every chain, and B's exploit now reverts

    Expected

    each proxy's implementation is its final fix on chains 84532, 11155111: true; B's exploit reverts on each: python3 scripts/docs/recorded.py 'release.checks.*.b_exploit_reverts' --file docs/results/testnet-2026-11-04.json

    Evidence

    release permits in antibody judge --program 5

    • Base Sepolia release, permit 100xcf2795…, Base Sepolia release, permit 10 transaction: 0xcf27959a606ed1e3ee3df495fc5f63538e5f2c2ef51412c5e703743e5cf9825c, opens an explorer in a new tab
    • Base Sepolia release, permit 110x90a98d…, Base Sepolia release, permit 11 transaction: 0x90a98dec6d9dcc3e386e0e895ed6b5b9a4dde852f5d64d859d91ceea54409697, opens an explorer in a new tab
    • Sepolia release, permit 80x57c042…, Sepolia release, permit 8 transaction: 0x57c042aa8cf4ed8ec2f8606757ef4e3ff2204ec0dc15d0d89ec50be7007153cf, opens an explorer in a new tab
    • Sepolia release, permit 90xca9f8f…, Sepolia release, permit 9 transaction: 0xca9f8fd32af0b4b43cc000d4aeb0e9f56c6a848dbd63f9049b3967f142fab32b, opens an explorer in a new tab

    Check, as JUDGES.md names it

    each proxy's EIP-1967 slot with curl (commands below the table)

    Limits that apply

    • Ethereum L1 for verification (Sepolia). Other chains are pause and release targets.

    On this site

    Program 5

    Sepolia · AcmeLend

    Read it on Sepoliaeth_getStorageAt on chain 11155111

    Holds if: the implementation slot ends in 74e75477af2d649ffe8037a37014dd8c7bd217a9: AcmeLend's final fix

    $

    curl -s https://ethereum-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_getStorageAt","params":["0xCa1FAFbCFC14d665d76045A018B215987f39f8A7","0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc","latest"]}'

    3 more checks, read straight from the chain

    Sepolia · AcmeVault

    Read it on Sepoliaeth_getStorageAt on chain 11155111

    Holds if: the implementation slot ends in 32e8cd1d58736310340d5103ded748e3d8f434d0: AcmeVault's final fix

    $

    curl -s https://ethereum-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_getStorageAt","params":["0x0433CEB84dB807402DE6642929EbF1450381CC46","0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc","latest"]}'

    Base Sepolia · AcmeLend

    Read it on Base Sepoliaeth_getStorageAt on chain 84532

    Holds if: the implementation slot ends in 74e75477af2d649ffe8037a37014dd8c7bd217a9: AcmeLend's final fix

    $

    curl -s https://base-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_getStorageAt","params":["0xCa1FAFbCFC14d665d76045A018B215987f39f8A7","0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc","latest"]}'

    Base Sepolia · AcmeVault

    Read it on Base Sepoliaeth_getStorageAt on chain 84532

    Holds if: the implementation slot ends in 32e8cd1d58736310340d5103ded748e3d8f434d0: AcmeVault's final fix

    $

    curl -s https://base-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_getStorageAt","params":["0x0433CEB84dB807402DE6642929EbF1450381CC46","0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc","latest"]}'

    $

    python3 scripts/docs/recorded.py 'release.checks.*.b_exploit_reverts' --file docs/results/testnet-2026-11-04.json

    $

    antibody judge --program 5

12. 12

    Anyone can run the loop with no account: the practice program (a tutorial)

    Expected

    Done:Paid, 0.001 wNEAR to the vending contract, about 44 s when the run is T1 (it paid the bond and the run), a vault of its own (each try gets the next free one); <you> is a new lowercase name (judge-1-p6, judge-2-p6 are taken); while new worker images wait their delay the run stays T0 and the payout waits the program's challenge window: 91 to 95 s on that path (docs/results/byo-2026-11-07.json). The output's payout_path says which

    Evidence

    • vend2wUoCN17…, vend transaction: 2wUoCN17qhVnTMxFRWdwjfQJvizo4YS81DpkdurFpEC8, opens an explorer in a new tab
    • commitL9wQ6bJi…, commit transaction: L9wQ6bJiSore1NN2TzsnPDbLcfevZt7K5xt6AqnWtmc, opens an explorer in a new tab
    • reveal7KduoN6W…, reveal transaction: 7KduoN6WrLrkPKK6hc1NAWKMmeJqfac9MBt5oi7Ma2DH, opens an explorer in a new tab
    • allocate2qYXUQQV…, allocate transaction: 2qYXUQQVTqDg2zuyhnokZKmjLQr2M3JpAdatBPspkAKi, opens an explorer in a new tab
    • payrbhQjh9X…, pay transaction: rbhQjh9XTWSwPmMQNL8PM6kmWRBoiuHmGSmCMspWGS7, opens an explorer in a new tab
    • close8iVfV6ij…, close transaction: 8iVfV6ijpQzW6jRUjZCxFPs844EJaDoqjEtQtf3ugT2X, opens an explorer in a new tab
    • reclaim4C4sh1ah…, reclaim transaction: 4C4sh1ahZoToWt1yG92VL48xXdvyX7toYrELYVxER2Xw, opens an explorer in a new tab

    Check, as JUDGES.md names it

    antibody try --name <you> (sends testnet transactions; vending practice.antibody.testnet, program 14; the recorded try was on program 6)

    Limits that apply

    • Claims are paid in commit order.
    • Worker images.

    On this site

    Run your own tryCommit 20Program 6

    Check the recorded tryGET https://api.antibody.144-91-104-54.sslip.io/v1/commits/20

    Holds if: the recorded try (commit 20): row.state is Done:Paid

    $

    antibody status --commit 20

    $

    antibody try --name <you>

13. 13

    The program's rules catch deliberately broken versions of its final fix (rule strength: it measures the rules, not the code's security)

    Expected

    caught 8 of 28 mutants (report sha256 e26bf38a106f…)

    Evidence

    docs/rule-strength.md, the report in docs/results/

    • docs/rule-strength.md
    • docs/results/rule-strength-acme.json

    Check, as JUDGES.md names it

    antibody judge --program 5 (rule_strength)

    Limits that apply

    • Rule strength is the rules' measure, and a survivor is not necessarily a bug.

    On this site

    Program 5

    Check the judge viewGET https://api.antibody.144-91-104-54.sslip.io/v1/judge

    Holds if: programs.5.rule_strength.statement is "caught 8 of 28 mutants"

    $

    antibody judge --program 5

14. 14

    A program needs no staging deployment: the practice program in fork mode exists only inside the verifier

    Expected

    Done:Paid, 0.001 wNEAR; 25 targets; the vault's code on chain 11155111: 0x

    Evidence

    • commit2E6TVL6K…, commit transaction: 2E6TVL6KR1pgoYQjC4aTAQc52KjRNTPbpFe3qzZErdm8, opens an explorer in a new tab
    • revealAmYYhTqQ…, reveal transaction: AmYYhTqQsah1fkxitxJVVrukLVKMNGeA6qXzJLbbnt1y, opens an explorer in a new tab

    Check, as JUDGES.md names it

    antibody status --commit 22; antibody status --program 7 (its targets); the vault's code with curl (below the table)

    On this site

    Commit 22Program 7

    Check the API recordGET https://api.antibody.144-91-104-54.sslip.io/v1/commits/22

    Holds if: row.state is Done:Paid

    $

    antibody status --commit 22

    One more check, read straight from the chain

    Sepolia · practice vault

    Read it on Sepoliaeth_getCode on chain 11155111

    Holds if: "0x": no code at the practice vault's address

    $

    curl -s https://ethereum-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_getCode","params":["0xfa35e1e99bd69719f57045409e19555f0147cf44","latest"]}'

    $

    antibody status --program 7

15. 15

    A NEAR app acts on a verdict: a DAO treasury freezes on the program's verified Critical, and a duplicate does not freeze it (guard.antibody.testnet: the Acme project owns it, its account is locked)

    Expected

    frozen: commit 13, slot 0; the run's next transfer was refused: true (python3 scripts/docs/recorded.py verdict_consumer.transfer_after_refused --file docs/results/testnet-2026-11-04.json); D's duplicate (commit 16) was reported first and returned false; locked: true, code 7Wotb7nn…

    Evidence

    • D's reportC63y1vnE…, D's report transaction: C63y1vnEr2ri8nsbYjg8sjoNUU1F3e2wj6PsWjtggPac, opens an explorer in a new tab
    • A's reportEgbrSvLD…, A's report transaction: EgbrSvLD7Rfx8kxHEvsJHNDWx4U6usg7YznT29cu4psX, opens an explorer in a new tab
    • lockEAHLthsR…, lock transaction: EAHLthsR4SasEsxnUSG48PsVzfTH2zBzrQj1bx25RB4p, opens an explorer in a new tab

    On this site

    Program 5

    Read the guard on NEARview guard.antibody.testnet.get_state({})

    Holds if: frozen.commit_id is 13 (slot 0)

    $

    antibody view --contract guard.antibody.testnet --method get_state

    $

    python3 scripts/docs/recorded.py verdict_consumer.transfer_after_refused --file docs/results/testnet-2026-11-04.json

16. 16

    T2: the verdict of each run whose content key is published (fixtures/zk; sealed on chain), re-run in SP1 on the TEE's exact input, is a Groth16 proof that near-t2 checks on NEAR against near-antibody's records (zk.antibody.testnet, locked; a validity proof of a disclosed verdict: no privacy claimed, no payout depends on it)

    Expected

    run 33 confirmed, run 36 confirmed, run 35 confirmed, run 53 confirmed; a tampered proof refused: true; SP1 6.10.0's key built in: true, program vkey 0x00e87aaa…

    Evidence

    • run 332qv8TQiY…, run 33 transaction: 2qv8TQiYf8nA4K32p8H7BWmPE9T2g9NPCQ8J2Q7J7YEN, opens an explorer in a new tab
    • run 36FZaKJZ8M…, run 36 transaction: FZaKJZ8MtMT167wraALccUfZe3opocKFWgJbRMEcMMf3, opens an explorer in a new tab
    • run 352k3SarGc…, run 35 transaction: 2k3SarGcKzXmzwk5EQNDhXKGbD61EhTcNAWJQjeWY2AA, opens an explorer in a new tab
    • run 532j6f6Ti8…, run 53 transaction: 2j6f6Ti8f23itmFoPiQpatTybYzxjN8hn4r76TG1MYX3, opens an explorer in a new tab

    Check, as JUDGES.md names it

    antibody zk status --run 33 --contract zk.antibody.testnet (and runs 33, 36, 35, 53)

    Read run 33's record on NEARview zk.antibody.testnet.get_record({"run_id":"33"})

    Holds if: run 33's record is confirmed

    $

    antibody view --contract zk.antibody.testnet --method get_record --args '{"run_id":"33"}'

    3 more checks, read straight from the chain

    Read run 36's record on NEARview zk.antibody.testnet.get_record({"run_id":"36"})

    Holds if: run 36's record is confirmed

    $

    antibody view --contract zk.antibody.testnet --method get_record --args '{"run_id":"36"}'

    Read run 35's record on NEARview zk.antibody.testnet.get_record({"run_id":"35"})

    Holds if: run 35's record is confirmed

    $

    antibody view --contract zk.antibody.testnet --method get_record --args '{"run_id":"35"}'

    Read run 53's record on NEARview zk.antibody.testnet.get_record({"run_id":"53"})

    Holds if: run 53's record is confirmed

    $

    antibody view --contract zk.antibody.testnet --method get_record --args '{"run_id":"53"}'

    $

    antibody zk status --run 33 --contract zk.antibody.testnet

17. 17

    Immune memory on pull requests, in the enclave: every paid proof of program 12 re-runs inside the enclave against a pull request's code, through near-antibody's rounds; a pull request that brings back a paid defect is red, a harmless one green (antibody-immune-demo)

    Expected

    run 169 (round 11, commit 56): Violation, slot 1 (fees_to_treasury), tier T1: PR #2 red; runs 163–166 (round 10): NoViolation, T1: PR #1 green; both round checks ok at T1; PR #2's manifest, built for round 10, renumbered to 11

    Evidence

    • PR #2's checkhttps://…, PR #2's check transaction: https://github.com/Himess/antibody-immune-demo/actions/runs/42538787235, opens an explorer in a new tab
    • PR #1's checkhttps://…, PR #1's check transaction: https://github.com/Himess/antibody-immune-demo/actions/runs/42538785818, opens an explorer in a new tab

    Check, as JUDGES.md names it

    antibody view --contract bounty.antibody.testnet --method get_run --args '{"run_id":169}' (and runs 167, 162, 163–166)

    On this site

    Program 12

    Read the re-run on NEARview bounty.antibody.testnet.get_run({"run_id":169})

    Holds if: run 169 breaks slot 1 again: its facts are a Violation

    $

    antibody view --contract bounty.antibody.testnet --method get_run --args '{"run_id":169}'

    One more check, read straight from the chain

    Read a green re-run on NEARview bounty.antibody.testnet.get_run({"run_id":163})

    Holds if: run 163, at PR #1's round, breaks nothing

    $

    antibody view --contract bounty.antibody.testnet --method get_run --args '{"run_id":163}'

18. 18

    An agent's limits hold on chain: capdemo.antibody.testnet, registered by its owner with a bond budget and a per-commit cap, commits within its cap (commit 71); its owner lowers the cap below the program's bond, and its next commit is refused and recorded as a containment event. Its key cannot withdraw, transfer or deposit

    Expected

    registered: true, commits: 1, containment_events: 1, per_commit_cap 0.00005 wNEAR (program 13's bond: 0.0001 wNEAR); key: commit, reveal, upload and the permissionless keeper methods; no withdrawal, transfer or deposit

    Evidence

    • registerCXbUgPts…, register transaction: CXbUgPtsFjaPqpXeVPgDpQyCPUYNJp5g5RHJj7yy5PpG, opens an explorer in a new tab
    • commit within the capDHGQ3oaX…, commit within the cap transaction: DHGQ3oaXsdRVcRHtwFyxvLL33mTGmVEWmPohh88BdDFQ, opens an explorer in a new tab
    • cap lowered9XmGRUFq…, cap lowered transaction: 9XmGRUFqxicUFQ65d8y5iQYV5KaZw3EsMeEyCY16QzB1, opens an explorer in a new tab
    • refused commit8nTNVfZb…, refused commit transaction: 8nTNVfZbSpwXMB3e296M315hkkRPPAqCWzgdcXDAGTFs, opens an explorer in a new tab

    On this site

    Program 13

    Read the agent on NEARview bounty.antibody.testnet.agent_statement({"agent":"capdemo.antibody.testnet"})

    Holds if: capdemo.antibody.testnet counts 1 containment event

    $

    antibody view --contract bounty.antibody.testnet --method agent_statement --args '{"agent":"capdemo.antibody.testnet"}'

19. 19

    The MPC network signs the pauses, checked without trusting us: the MPC network's key for near-guardian's path hashes to 0xd10a6d3cdb6363b4200aa976f67296fba844aa94; Ethereum's own ecrecover of near-guardian's permit 6 (the recorded moment's Sepolia pause) returns it; and the Sepolia adapter accepts it as its guardian

    Expected

    the MPC key secp256k1:5dF4ANtojF5J… hashes to 0xd10a6d3cdb6363b4200aa976f67296fba844aa94; ecrecover and guardian() both return 0xd10a6d3cdb6363b4200aa976f67296fba844aa94

    Evidence

    • Sepolia pause0x224f6f…, Sepolia pause transaction: 0x224f6f77ffd081042f634f2a214c1d23d5c232114e35a62e7935981a1ee779e4, opens an explorer in a new tab

    Check, as JUDGES.md names it

    antibody view --contract v1.signer-prod.testnet --method derived_public_key --args '{"path":"antibody/acme.antibody.testnet/bounty.antibody.testnet/5","predecessor":"guardian.antibody.testnet","domain_id":0}', its last 20 bytes of cast keccak 0x<x‖y>; antibody view --contract guardian.antibody.testnet --method get_permit --args '{"id":6}', then ecrecover(digest, v, r, s) and the adapter's guardian() with eth_call (commands below the table)

    Ask the MPC network for the keyview v1.signer-prod.testnet.derived_public_key({"path":"antibody/acme.antibody.testnet/bounty.antibody.testnet/5","predecessor":"guardian.antibody.testnet","domain_id":0})

    Holds if: the MPC network's key for near-guardian's path (its keccak-256 is the address)

    $

    antibody view --contract v1.signer-prod.testnet --method derived_public_key --args '{"path":"antibody/acme.antibody.testnet/bounty.antibody.testnet/5","predecessor":"guardian.antibody.testnet","domain_id":0}'

    2 more checks, read straight from the chain

    Recover the signer on Sepoliaeth_call on chain 11155111

    Holds if: ecrecover returns 0xd10a6d3cdb6363b4200aa976f67296fba844aa94

    $

    curl -s https://ethereum-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_call","params":[{"to":"0x0000000000000000000000000000000000000001","data":"0x5e745195d8d3541c29e7d5fa8fe74df6e8da1764dc44e3dffe7975e67107f088000000000000000000000000000000000000000000000000000000000000001b86ace246a13f71bd3653e359872e41836c600b177f124a56046129788b01ad561dfe5140eb8ff24e9193e5b095728c7a8e9e6f906616839560822561c4eaaad9"},"latest"]}'

    Ask the adapter its guardianeth_call on chain 11155111

    Holds if: the adapter's guardian() is 0xd10a6d3cdb6363b4200aa976f67296fba844aa94

    $

    curl -s https://ethereum-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_call","params":[{"to":"0xad6bc84c8c5a9fb5aca79b13bb867b6e7930d49b","data":"0x452a9320"},"latest"]}'

    $

    cast keccak 0xe7526e30a5e150619b099027c3a0dfc7146cf61f34edeee8b4d475922d96dc159af4204b733d89925332383c778cdf5171a9dfe2c264959079776d45c67bddbb

    $

    antibody view --contract guardian.antibody.testnet --method get_permit --args '{"id":6}'

20. 20

    The project reads only what it paid for: A's proof opens with its NEP-413-derived key; a duplicate is never wrapped

    Expected

    local verdict Violation, its receipt equals the TEE's: true; the run's request to wrap commit 16 was refused: true (python3 scripts/docs/recorded.py project_read.duplicate_refused --file docs/results/testnet-2026-11-04.json)

    Evidence

    • release wrap9DwhgscQ…, release wrap transaction: 9DwhgscQMchu2CCBZKNH9Lgz8LZLdEm54N8j8s1oSXB3, opens an explorer in a new tab

    Check, as JUDGES.md names it

    antibody --account <project> program read --commit 13 --project-key <key file> --out <dir> --reveal-tx 8yEJyYXgz34BJWCTPLVnvq13PLW15oBx8uzkMkopc4DY (the wrap exists: no transaction)

    On this site

    Commit 13

    Read A's commit on NEARview bounty.antibody.testnet.get_commit({"commit_id":13})

    Holds if: commit 13 (A's) was wrapped to the project by run 40

    $

    antibody view --contract bounty.antibody.testnet --method get_commit --args '{"commit_id":13}'

    One more check, read straight from the chain

    Read D's commit on NEARview bounty.antibody.testnet.get_commit({"commit_id":16})

    Holds if: commit 16 (D's duplicate) was never wrapped: wrapped is null

    $

    antibody view --contract bounty.antibody.testnet --method get_commit --args '{"commit_id":16}'

    $

    antibody --account <project> program read --commit 13 --project-key <key file> --out <dir> --reveal-tx 8yEJyYXgz34BJWCTPLVnvq13PLW15oBx8uzkMkopc4DY

    $

    python3 scripts/docs/recorded.py project_read.duplicate_refused --file docs/results/testnet-2026-11-04.json

21. 21

    Every conservation equation balances (the ledger's both sides)

    Expected

    contract: true, fork_mode: true, practice: true, program: true

    Evidence

    view calls

    Check, as JUDGES.md names it

    antibody judge (each program's audit ok, and the contract's)

    On this site

    Program 5

    Check the program's auditGET https://api.antibody.144-91-104-54.sslip.io/v1/programs/5

    Holds if: program 5's audit balances: audit.ok is true

    $

    antibody judge

    One more check

    Check the contract's auditGET https://antibody-near.vercel.app/v1/judge

    Holds if: the contract's own audit balances: audit_contract.ok is true

    $

    antibody judge

22. 22

    An off-the-shelf agent (Claude Code, the v0.5.0 release binary) completes the loop over MCP: measured runs, not bug finding

    Expected

    task a, the tutorial proof through practice_try, no built-in tools: 10 of 10 commits ended Done:Paid (7 within the agent's own call); median 98 s when paid within the call; task a2, the agent writes the proof itself with hunt_start, check_poc and hunt_submit, and file tools in its workspace: 6 of 6 commits ended Done:Paid (3 within the agent's own call); median 91 s when paid within the call

    Evidence

    task a, task a2

    Check, as JUDGES.md names it

    each run's commit with antibody status --commit <id> (the ids are in each report)

    This check runs in a terminal: its command is below.

    $

    antibody status --commit 38

    $

    antibody status --commit 48

• Whole run: 1 h 16 min 30 s (4590 s) over its stages. Activation: 31.1 s.
• A (MCP): from its commit's block to the verdict 18.5 s.
• B: submission (witness, seal, commit, reveal) to verdict 151.1 s.
• C: submission (witness, seal, commit, reveal) to verdict 25.3 s.
• D: submission (witness, seal, commit, reveal) to verdict 21.9 s.
• E: submission (witness, seal, commit, reveal) to verdict 22.2 s.
• F: submission (witness, seal, commit, reveal) to verdict 24.1 s.
• G: submission (witness, seal, commit, reveal) to verdict 28.8 s.
• Practice try (judge-1-p6.practice.antibody.testnet): 43.7 s for the whole try, vend to close, its payout included.
• Practice try (judge-2-p6.practice.antibody.testnet): 39.9 s for the whole try, vend to close, its payout included.

• One project, our own fixtures, on testnets: Acme Lend and the practice program are labeled test fixtures, and wNEAR on testnet has no value.
• T2 is a validity proof of a disclosed verdict (docs/zk.md): it claims no privacy, and no payout in the locked deployment depends on it. It covers the four testnet runs whose content keys are published (fixtures/zk; sealed on chain) and the practice tries the prover service proves.
• Fixture bugs are planted textbook classes, labeled in the code; nothing here is a finding in a real protocol.
• A mutation score, where shown, measures a rule set's strength, not the code's security.

• Only rule breaks are paid automatically. Anything else is at the project's discretion (top_up).
• Duplicates are judged by (rule, entry point). Two bugs behind one entry point count as one until the first is fixed (rounds).
• One block. A proof runs in the anchor block's environment: no time travel, no multi-block attacks.
• Ethereum L1 for verification (Sepolia). Other chains are pause and release targets.
• The EVM rules are the manifest's, not the chain's. Sepolia runs the Glamsterdam upgrade (its headers carry blockAccessListHash and slotNumber, and the anchor check hashes them). A proof runs under the rules its manifest commits (evm_spec: osaka), so gas is counted by osaka's costs: state creation costs five to seven times more on Sepolia itself.
• Public Sepolia RPCs prove about 128 blocks back, so witnesses are built within minutes of an anchor, and the light client runs about 80 blocks behind: a program is created some 15 minutes after its anchor.
• Claims are paid in commit order. A commit that is never revealed holds the later ones until its reveal window ends and the keeper expires it (on testnet, a practice try's payout waited ten minutes this way).
• The testnet light client has one trusted relayer. Anchors it cannot confirm are labelled project-attested.
• TEE trust is tiered, not removed. T1 needs DCAP collateral. Without T1 a verdict rests on OutLayer's operator (T0): under the instant cap it becomes final once its challenge window passes (60 s on testnet), so a false one that nobody challenges stands, and a false Violation is paid; above the cap a second OutLayer run must also agree. A challenge demands T1; anyone may file one, but neither the CLI nor the services do.
• Worker images. A worker image OutLayer approves later counts for existing programs only after the image delay (2 days on testnet); until then a run on it gets no T1, so its payout waits the challenge window and its pause waits too, since a pause needs T1 (docs/runbooks/worker-images.md).
• Old anchors. A proof that reads beyond the pinned base needs an RPC that keeps the anchor's state.
• Rule strength is the rules' measure, and a survivor is not necessarily a bug.
• Testnet only. The payout token, wNEAR on testnet, has no value.

What applies right now, such as worker images inside their delay and the services' alerts, is on the status page, which your browser refreshes every 30 s.