Full claim ledger
All 34 claims with every limitation.
Proof
What Signet has actually proven.
34 claims, 28 verified and 6 unavailable. Every one states what it does not prove.
Verify it yourself
No wallet, no funds, no Docker, no GCP, no secrets.
git clone https://github.com/winsznx/signet
make judge
- Pass
- 13
- Fail
- 0
- Unverifiable
- 2
What UNVERIFIABLE means, and why it is not a failure
It means the check could not be performed from where it ran, and it is never folded into a pass. Today there are two.
One XRPL testnet node has pruned the ledger holding the payment, so a single endpoint cannot testify to it. And whether
FdcVerification accepted the proof is reported by the receipt rather than re-checked by make judge; the
receipt verifier re-encodes the Merkle proof and does check it.
Claims by area
Collapsed by default. The full ledger with every limitation is on the claims page.
Execution 6
reference model frozen verified Signet's authorization decision is specified by a network-free executable model whose canonical commitment encoding and decision fixtures are frozen and machine-checked on every bu…
contracts cannot authorize arbitrary fields verified Signet's contracts expose no path by which a caller supplies a payment field, the instruction sender is pinned so a binding cannot be detached from the FAssets adapter, and the on-…
go matches reference model verified The Go extension policy produces byte-identical decisions to the TypeScript reference model on all 62 frozen fixtures, including the authorization commitment and the transaction te…
composed lifecycle verified xrpl-testnetcoston2-fork One command runs a Signet redemption end to end: real FAssets code on a Coston2 fork produces the obligation, the run asserts field by field that every obligation value reaching th…
execution layer verified coston2xrpl-testnet Given a valid FAssets redemption obligation, Signet derives the exact required XRP payment through its FCC policy path and will authorize no altered, expired, replayed, stale, alre…
Caller supplies only a request id verified coston2 The only payment-bearing entry point on Signet's deployed FCC instruction sender is authorizeRedemption(uint256 requestId, uint32 generation). It exposes no parameter through which…
Protocol 6
source lock verified Every external protocol dependency Signet uses is pinned to a specific upstream commit and verified by content hash on every build.
coston2 addresses verified verified coston2 Every Coston2 address Signet depends on was resolved from an authoritative source and proven by RPC, cross-checked against a second independent endpoint, to hold code that exposes …
fassets fxrp live verified coston2 The Coston2 FXRP AssetManager is live, exposes both memo-mode and destination-tag redemption entry points, and has agents with free collateral.
fassets seam proven verified coston2 Signet reads a real Coston2 FAssets redemption in both memo and destination-tag mode and reproduces its payment reference independently in TypeScript and Solidity, matching what th…
upstream reproducible verified Every pinned upstream source reproduces byte-identically from an empty checkout, verified by content hash on every build.
coston2 deployment verified coston2 The Signet registry and instruction sender are deployed on Flare Coston2 at 0x381bdE5961695914B28B16f405d51E8acB877f6e and 0xd6cF30B6411DB8465147FfDcF0e0418030B4b9CA, with the inst…
XRPL 5
The exact XRP payment executed verified testXRP A transaction template produced by the Signet reference model was signed by a rotatable RegularKey and reached validated success on XRPL Testnet, unmodified, carrying the FAssets p…
xrpl reliable submission verified testXRP Signet persists a signed XRPL transaction before first submission, never treats a provisional response as final, and reports a transaction definitively absent only when an endpoint…
xrpl key lifecycle verified testXRP The agent's XRPL account is controlled by a rotatable RegularKey while the master key stays offline as the recovery path.
A live duplicate payment, found and corrected verified coston2xrpl-testnet A FAssets redemption status of ACTIVE does not mean the obligation is unpaid; it means the underlying payment has not yet been confirmed on Flare. Signet paid a live Coston2 obliga…
Observe the ledger before signing verified xrpl-testnet Signet's decision schema V2 refuses to authorize a redemption payment unless the signing boundary has itself observed the XRP ledger across at least two separately hosted public XR…
FDC 2
fdc request and response proven verified testXRPcoston2 The FDC verifier confirms Signet's XRPL Testnet payment and reports source, destination, amount and memo that satisfy every rule FAssets applies when confirming a redemption.
FDC proof accepted on chain verified coston2xrpl-testnet An XRPL Testnet payment made by Signet was attested by the Flare Data Connector end to end: the request was paid for and submitted to FdcHub, the voting round finalized, the Merkle…
FCC 6
Hardware attestation unavailable Signet's signing key was protected from the host by hardware attestation.
FCC extension registered verified coston2 Signet's FCC extension is registered on the live Coston2 FlareTeeManager as extension 66248, and the registry routes that extension to Signet's own instruction sender.
FCC machine unavailable A TEE machine is registered for Signet's FCC extension.
fcc machine production unavailable Signet's TEE machine has reached PRODUCTION status on Flare's FCC.
Derived inside the FCC extension verified coston2 Signet's decision has been executed through the FCC extension contract, as a local process in simulated mode, and the composed lifecycle takes the payment it signs from the FCC Act…
Machine rotation model verified Signet specifies an explicit machine-rotation state machine in which no payment may be signed during an ambiguous binding transition, and holds it to property tests covering an old…
Security 5
core lifecycle unavailable coston2testXRP One Coston2 FAssets redemption was paid on XRPL Testnet and completed with FDC evidence.
unauthorized refused unavailable coston2testXRP An arbitrary XRP payment request received no signature.
Anyone can re-check a receipt verified xrpl-testnetcoston2 An independent verifier runs from a fresh clone with no credentials and checks a Signet receipt against sources this repository does not control: it asks every XRPL endpoint and re…
hardening verified coston2 The dependency scan is clean, the decision boundary survives 6,271,288 fuzz executions across two targets (1,690,429 on the wire decoder and 4,580,859 on the policy) without a pani…
v1 preserved verified The 62 V1 decision fixtures are preserved byte-for-byte with the hash the phase 01 gate froze, and a test holds them to it, so every authorization commitment Signet published under…
Reproducibility 4
coordinator durability verified Signet's coordinator state schema makes duplicate authority impossible by database constraint: a duplicate event, a concurrent worker, a stale fencing token and a restart between s…
proof surface verified A static proof page and operator view are generated from the repository's own evidence, with no server to trust. Build-failing checks assert that every claim and every limitation i…
target chain lifecycle verified coston2xrpl-testnet Against a genuine Coston2 redemption that anyone can read, Signet opened an action on its deployed instruction sender, produced a decision whose obligation hash matches the deploye…
production exclusive authority unavailable When Signet is installed as the exclusive legitimate signing authority for an agent-controlled underlying account, the same mechanism can enforce the agent-side payment boundary.
Go deeper
Transactions
10 receipts, their role and their evidence class.
Incident 44928272
The duplicate payment, and the protocol change it forced.