Verify everything.

Every figure the landing page claims, with the on-chain object that enforces it. § opens the enforcing contract's verified code on Basescan.

The codebase, counted — not typed

8,638

lines — every .sol in contracts/src but the mocks

contracts — 9 core, 4 venue adapters

684

test & invariant functions, declared

not passes — excludes audit-w, audit-x, audit-z

oracles — in any market

stated, not counted — enforced by the ledger below

the counter measures the tree it runs on — no release named · pinned in countedProvenance.test.mjs

measurement fingerprint 7c70b2ea98b7 · sha256(file, quantity) per counted file

mechanism frozen for independent audit · owner = deploy key — also the treasury and fee recipient → safe multisig at mainnet

Liquidation enginenone in the codebase§

Price oraclenone — no price to attack§

What minting coststhe yield on the minted share§

Charge sourceyield only, never principal§

Max LTV80% of live net value — registry hard cap 90%§

Withdrawal delayT+2 days — registry hard cap 30 days§

Collectionpermissionless — anyone may settle any receipt's charge§

Repaymentpermissionless — repayment is never blocked§

Past the LTV capreported by healthOf and emitted — nothing is liquidated§

Coupon schedulebanked when collected, released linearly over its accrual — 24h floor, 30d cap§

Exit feesnone — a receipt's value is already net of what it owes§

Charge destinationthe treasury holds the collected shares directly§

Parameter changesraises wait 48h; only de-risking — lowering a dial, disabling a market — lands same-block§

Marketplace fee0 today — owner-settable, cap 5%§

Venue migrationssame-block only to the refuge — anywhere else waits 48h§

Migration loss budget30 bps rolling over 365 days, 10 bps per hop§

You · hold the receipt

Vault · holds the shares0xB3aE…edd0 ↗AaveV3Adapter · routes deposits0xFacC…C88D ↗Aave V3 Pool · earns the rate0x8bAB…aE27 ↗

generated from the deployment's address book — the file the app reads