Chaos log

Public evidence that the listed adversarial suites passed at the linked code revision. This is not stretched into a general uptime or security guarantee.

Completed adversarial runs

19 July 2026 · commit 6d4ed77

Money-path adversarial audit

Exercised: Malformed and replayed payments, amount and asset substitution, expired intents, concurrent spend caps, and 64 random grant-token guesses.

Result: Zero open first-party security warnings after bounded mirror requests, TLS sidecar support, and narrowed error handling shipped.

bin/rails test test/controllers test/services

19 July 2026 · commit c4f111a

Payment decoder fuzz + purchase state properties

Exercised: A committed malformed corpus, 2,000 seeded structured payment mutations, every declared state/target pair, and 80 seeded 12-step transition sequences.

Result: Zero unexpected exceptions; money-moved purchases never re-entered a pre-money state. Two decoder crash classes found by the corpus were fixed before this run passed.

bin/rails test test/fuzz

Only runs that exist in the public repository and completed are listed. A planned drill or an unavailable external check does not become a green row.