Back CoreGuard · $150,000 requested
$40,000 / $55,000 / $55,000 · Requested, not awarded
Products & services
Every product maps to a committed path in the repository, with its honest status.
First signed funded swap on Stellar mainnet: 4.0598146 XLM → 0.6306239 USDC, both gates VERIFIED before submission (ledger 65,338,112).
Wallets sign swaps blind. DEX-GATE/1 bounds every swap by real order-book depth and the owner's wallet, fail-closed.
Live Soroban contract; first commit(proofId, commitment) invoked on mainnet with byte-exact read-back (ledger 65,337,373).
Receipts are worthless if they can be rewritten. SOROBAN/1 anchors them on Stellar for anyone to replay.
Intent → policy → commitment → receipt → independent verifier → anchor.
Today's evidence is a log written by the same process that executed. CGEP/1 produces a receipt anyone can re-derive.
Wrap any action — swap, lend, bridge, vote, agent proposal — with ALLOW / DENY / HOLD.
Agents and bots move value with no gate between intent and execution. UNKNOWN stays HELD — fail-closed.
Payment-gated escrow with deterministic replay and on-chain commission.
Agent-to-agent payments need funds reserved before a signature, and a replayable record if it goes wrong.
SHIPPED JS mirror · NOT LAUNCHED. Verify-before-release, digest-bound signatures, single-spend release and full refund; no chain calls or funds moved.
Bounty payouts need verifiable delivery evidence and a fail-closed lifecycle. ESCROW/1 mirrors that lifecycle in JavaScript while the Soroban contract remains an open, unfunded proposal.
Declared, signer-bound actor provenance — never a behavioural guess.
“Who ran this?” is unanswerable from a log. AgentProof binds every action to a recovered signer.
Execution/acceptance disputes resolved with offline, deterministic evidence packages.
Disputes today are he-said-she-said. DDE/1 makes them tribunal-ready and replayable by anyone.
JS / Rust-WASM / Python verifiers. Trust never depends on us running a hosted check.
A security vendor you must trust is just another log. Anyone can re-verify CoreGuard offline.
Embeddable verification badges rendered only from anchored manifests.
Trust badges are usually marketing. These ones fail closed if the anchor doesn't verify.
A Stellar transaction carries its own authorization proof before any signature — PASS / BLOCK, bound to the exact XDR bytes. 37 tests; v1 does not semantically decode XDR.
Wallets approve a transaction, then sign something else. PSAR/1 fails closed if one byte changes (XDR_BINDING_MISMATCH). No wallet embeds it yet.
Investor portal (TRUST.md) live; CoreGuard Labs evidence lab DRAFT; Telegram/Discord verify bot PLAN_ONLY.
Reviewers need one door to re-derive every claim themselves.
Two-line SDK integration and `npx coreguard demo`. 13-package npm closure, release-gated.
Security that takes weeks to integrate never ships. CoreGuard is two lines.
Patent plan: the method behind DEX-GATE/1 and SOROBAN/1 (intent → gate → on-chain commitment → receipt → verifier) is planned for a US provisional filing. Read the plan
