Every number, with its label.
Two lanes, never mixed. Lane 1 is generated, local, and reproducible: the partner lifecycle trace over the real HTTP boundary, the assurance corpus with expected and actual outcomes, and the incident rules read from the committed record. Lane 2 is Base Sepolia: real contracts, real transactions, Boundline-issued B20 test fixtures. Neither is a production, partner, capital, or Base mainnet claim.
Lane 1: generated fixtures, no transactions. Lane 2: Base Sepolia chain 84532, 73 transactions executed. Base mainnet: 0.
Five classifications, not five stages of one bar.
A transition can be genuinely real inside shared logic while public-chain observation, venue execution, legal authority, and partner acceptance all stay open. Every response names which one it is.
Deterministic call data or coordinator records were produced.
Unsigned. No consumer execution.Frozen ledger or recovery accounting changed generated local state.
No token movement, no realized proceeds.A committed record or read-model row is shown with its provenance.
No live partner or public-chain claim.No public-chain or venue transaction is represented by this checkpoint.
Signing and broadcast disabled.Partner acceptance, live traces, legal eligibility, capital, custody, deployment.
Human or environmental gate.Real contracts. Fixture stock.
Everything in this section is on the public Base Sepolia chain (84532) and every row is labelled LANE 2. The contracts are real and their source is readable; the stocks are Boundline-issued B20 test fixtures worth nothing, and their price feeds are fixtures whose answers we write. Deployed by 0x2f0d9B…282a4E ↗ at block 46315822, run sepolia-001.
ADDRESSES · 14 OF 14 SOURCE-VERIFIED
Collateral
0x8d862684
Obligation
0xD8984533
Prime
0xE94d3672
Credit
0x610CA508
Margin
0x876183a1
Position
0x4544098A
Protection
0x047d6650
Test
0x8d8FFeF2
Test
0xBB64AD6a
Protection
0x78d03ed0
Protection
0x40812521
Protection
0xa9c42231
Test
0x5C011F4A
Morpho
0x508348c7
Blockscout reports a partial match for all twelve because contracts/foundry.toml appends no metadata hash for it to compare; Sourcify reports an exact creation and runtime match. The two Morpho-route addresses were deployed after the sweep in deployments/base-sepolia/verification-basescan-20260904.md and are not source-verified yet. Basescan was not attempted: no explorer API key exists in the environment. Every address also resolves at https://sepolia.basescan.org.
TEST STOCKS · WHAT THEY ARE AND ARE NOT
Boundline Test Stock A, 8 decimals, at 0xb2000000
Boundline Test Stock B, 8 decimals, at 0xB2000000
MORPHO ROUTE · MARKET 0x3a0c23…474149
0x3a0c23c3
0x5C011F4A
0x508348c7
Opened at 100000000 BLTA atoms against 1000000000000 borrow shares; repaid 1000000000000 shares for 1000000 USDC atoms; withdrew 100000000 atoms of collateral.
LANE 2 · residual borrow shares 0, residual collateral 0. No liquidation was executed; the position was closed voluntarily.The 5 transactions below were executed by the closing run. Each carries the receipt status and the execution classification read from its own receipt, never asserted from a hash.
1 · adapter.
0x500e1320
block 46320479 · gas 42799
2 · borrower approves Morpho for USDC repayment
0x8aa40109
block 46320480 · gas 55437
3 · adapter-
0x9bc2608e
block 46320482 · gas 93692
4 · adapter-
0x18e01b92
block 46320485 · gas 73993
5 · adapter.
0x634aa86f
block 46320488 · gas 42799
Three earlier transactions supplied the market, pledged the collateral and drew the loan that the closing run settles. They were sent by an incomplete run, so the closing run adopted them and re-read every receipt on chain rather than assuming them. Which of the three is which is not stated here, because the manifest records hashes and receipts, not per-transaction labels.
Morpho transaction 1, adopted
0x165a22bf
block 46320074 · gas 127677 · receipt re-read on chain
Morpho transaction 2, adopted
0xf8c0fb37
block 46320076 · gas 91475 · receipt re-read on chain
Morpho transaction 3, adopted
0x21c60d3e
block 46320079 · gas 128521 · receipt re-read on chain
HUB LIQUIDITY AND CAPS · OBSERVED
scripts/lane2/lifecycle-evidence.mjs has executed on the public network: 1 record(s) under evidence/base-sepolia, newest run sepolia-004 with 54 steps and 34 transactions, independently reconciled PASS (54/54 steps, 8/8 invariants); 1 abandoned attempt(s) unwound and recorded. The full public metrics dashboard, the observed control state for both stocks, and the raw snapshot behind every figure on this page are on the network page ↗.
We don't claim. We label.
Eighteen scenarios in the internal deterministic corpus, replayed on every run. Each carries its evidence label, its expected outcome, and what the frozen implementation actually returned. A per-call check misses four of the seven applicable violations; the portfolio-level invariants miss none.
REQUIREMENT is a property the system must hold. HYPOTHESIS is a generated result that still awaits external validation. Lane 1 is the local deterministic run; lanes 2 to 4 are Base Sepolia, the pinned Base mainnet fork, and Base mainnet, in that order.
Assurance record 0x7358dd8c…8517d1ff · local lane · signer none · transactions 0. The Base mainnet fork lane stays unresolved until an archive RPC runs every strict check without a skip.
Pick an incident. See what stays open.
The rule that makes this product safe to embed: an incident blocks new risk and never blocks risk reduction. The outcomes below are read from the committed assurance record, not simulated in your browser.
INCIDENT
Six drills, exact to the unit.
Each drill pins state, orders the attempts, records intermediate state and invariant decisions, and reconciles debt, fees, reserve, borrower remainder, and loss. Controls exercised only by Solidity or repository gates are marked NOT_EVALUATED in this lane rather than claimed.
25% overnight single-asset gap, partial deleverage, exact accounting.
Modeled controls PASS · venue execution NOT_EVALUATEDStale or missing mandatory oracle blocks new risk, keeps repayment open.
PARTIAL · Solidity-only controls not evaluated herePrimary liquidity or capital venue unavailable, explicit fallback route.
PASSIssuer pause or transfer restriction during recovery.
PARTIAL · transfer control observed, not executedPartial repayment during recovery preserves incident state.
PARTIALIneligible recovery receiver rejected before state mutation.
PASSTwelve gates, named and unclosed.
External partner acceptance, a live partner trace, legal eligibility, production authentication, live capital, archive-fork success, deployment, monitoring, key custody, brand clearance, DNS-rebinding defence, and a production clock policy. Each is a human or environmental gate, and each is labelled OPEN in the product and the evidence.
REPRODUCE IT
- ✓Validators v1 to v6 recheck every frozen hash and replay the 25-event index stream.
- ✓The mutation harness re-runs all 23 source mutants against independent probes.
- ✓Pinned Chromium re-executes 60 browser workflows across four viewports and compares the ledger.
- ·The Base mainnet fork lane resolves only with an archive-capable RPC.