agentex-creator-sdk 1.0.0

package/dist/packages/providers/src/coverage.d.ts

@@ -0,0 +1,105 @@
+import { z } from 'zod';
+/**
+ * E05 server-side coverage. Every (chain, tool@version) pair that can execute is listed with the evidence that verified it.
+ * Admission, listing and quoting code calls `assertToolCoverage`, `coveredChains` or `listingCoverage`: an unlisted, wrong-version,
+ * fixture-only or credential-gated capability is refused, never treated as an empty result. Evidence paths are repository-relative.
+ */
+export declare const CoverageChainSchema: z.ZodEnum<{
+    ethereum: "ethereum";
+    base: "base";
+    robinhood: "robinhood";
+    "robinhood-testnet": "robinhood-testnet";
+    solana: "solana";
+    "solana-devnet": "solana-devnet";
+}>;
+export type CoverageChain = z.infer<typeof CoverageChainSchema>;
+export type CoverageStatus = 'live-verified' | 'live-verified-partial' | 'fixture-only' | 'disabled';
+export type CoverageSource = 'public-rpc' | 'alchemy' | 'helius' | 'offline-decoder' | 'public-web';
+export interface CoverageEntry {
+    chain: CoverageChain;
+    tool: string;
+    version: string;
+    capability: string;
+    source: CoverageSource;
+    status: CoverageStatus;
+    /** Credential that must be configured server-side for this entry to run. */
+    credential: 'ALCHEMY_API_KEY' | 'HELIUS_API_KEY' | null;
+    evidence: readonly string[];
+    protocolVersions: string;
+    gaps: readonly string[];
+}
+export declare const CHAIN_COVERAGE: readonly CoverageEntry[];
+/**
+ * Declared source gaps: capabilities with no verified free source. Agents withhold these results and label them unavailable;
+ * nothing is converted to zero or inferred from another capability.
+ */
+export interface SourceGap {
+    capability: string;
+    chains: readonly CoverageChain[];
+    neededBy: readonly string[];
+    requiredProviderClass: string;
+    freeCandidates: string;
+    agentBehaviour: string;
+}
+export declare const SOURCE_GAPS: readonly SourceGap[];
+export type CoverageDenial = 'chain-not-covered' | 'chain-disabled' | 'capability-unverified' | 'credential-required' | 'version-required' | 'version-not-covered' | 'no-tools-declared';
+export declare class CoverageError extends Error {
+    readonly category: CoverageDenial;
+    readonly code = "COVERAGE_DENIED";
+    constructor(category: CoverageDenial, message: string);
+}
+export interface CoverageOptions {
+    env?: Record<string, string | undefined>; /** Fixture-only coverage is admitted only in explicit local fixture tests. */
+    allowFixtureOnly?: boolean;
+}
+/** Entries for a chain, each with whether it can run now on this server. */
+export declare function coverageFor(chain: string, options?: CoverageOptions): {
+    available: boolean;
+    chain: CoverageChain;
+    tool: string;
+    version: string;
+    capability: string;
+    source: CoverageSource;
+    status: CoverageStatus;
+    /** Credential that must be configured server-side for this entry to run. */
+    credential: "ALCHEMY_API_KEY" | "HELIUS_API_KEY" | null;
+    evidence: readonly string[];
+    protocolVersions: string;
+    gaps: readonly string[];
+}[];
+/** Throws `CoverageError` unless `tool` (exactly `id@version`) is covered on `chain` and runnable with the server's credentials. */
+export declare function assertToolCoverage(chain: string, tool: string, options?: CoverageOptions): CoverageEntry;
+/** Per-chain decisions for a listing or quote. A listing that declares no deterministic tools cannot claim any chain. */
+export declare function listingCoverage(declaredChains: readonly string[], tools: readonly string[], options?: CoverageOptions): ({
+    chain: string;
+    covered: boolean;
+    denials: {
+        tool: null;
+        category: CoverageDenial;
+        message: string;
+    }[];
+} | {
+    chain: string;
+    covered: boolean;
+    denials: {
+        tool: string;
+        category: CoverageDenial;
+        message: string;
+    }[];
+})[];
+/** For listings and quotes: the declared chains on which every declared tool is covered. Unknown chains and empty tool lists yield none. */
+export declare function coveredChains(declaredChains: readonly string[], tools: readonly string[], options?: CoverageOptions): string[];
+/** Public summary without evidence paths, hosts or keys: safe for capabilities and listing endpoints. */
+export declare function coverageSummary(options?: CoverageOptions): {
+    chain: "ethereum" | "base" | "robinhood" | "robinhood-testnet" | "solana" | "solana-devnet";
+    entries: {
+        tool: string;
+        version: string;
+        capability: string;
+        source: CoverageSource;
+        status: CoverageStatus;
+        available: boolean;
+        protocolVersions: string;
+        gaps: readonly string[];
+    }[];
+}[];

package/dist/packages/providers/src/coverage.js

@@ -0,0 +1,260 @@
+import { z } from 'zod';
+/**
+ * E05 server-side coverage. Every (chain, tool@version) pair that can execute is listed with the evidence that verified it.
+ * Admission, listing and quoting code calls `assertToolCoverage`, `coveredChains` or `listingCoverage`: an unlisted, wrong-version,
+ * fixture-only or credential-gated capability is refused, never treated as an empty result. Evidence paths are repository-relative.
+ */
+export const CoverageChainSchema = z.enum(['ethereum', 'base', 'robinhood', 'robinhood-testnet', 'solana', 'solana-devnet']);
+const T = 'packages/tools/evidence/';
+const I = 'packages/inspector/evidence/';
+const A = 'docs/evidence/indexed-agents/';
+const entry = (value) => Object.freeze({ ...value, version: value.version ?? '0.1.0', evidence: Object.freeze([...value.evidence]), gaps: Object.freeze([...value.gaps]) });
+const LICENCE_GAP = 'Alchemy index data (Transfers, Token and NFT APIs) is used under Alchemy\'s written approval for AGENTEX reports; it is the provider\'s index view, not a chain-state read.';
+const RH_SNAPSHOT = 'Runs read the latest block (sequencer-confirmed, not finalized), pinned by block hash (EIP-1898) and rechecked at completion. The linked live evidence predates the instant-read change and was captured at the safe block.';
+const RH_ALCHEMY = 'Verified through Alchemy. The official RPC serves only about the last 1,000 blocks of state (robinhood-history-depth evidence); failover to it is not live-verified for these tools.';
+/** Protocol surfaces read by the catalog research tools (packages/tools/src/evm-*.ts and solana-research.ts). */
+const RESEARCH_PROTOCOLS = {
+    'evm.rollup-controls': 'Base (OP Stack) and Robinhood Chain (Arbitrum Orbit, BoLD) L1 contracts at documented addresses: version(), paused(), owner() and ProxyAdmin getProxyAdmin/getProxyImplementation; OptimismPortal proofMaturityDelaySeconds and respectedGameType, DisputeGameFactory gameImpls and gameCount, AnchorStateRegistry, SystemConfig and SuperchainConfig; Rollup confirmPeriodBlocks, validator whitelist, getValidators/isValidator and baseStake, SequencerInbox maxTimeVariation and the Rollup EIP-1967 slots; UpgradeExecutor hasRole; Safe getThreshold/getOwners and TimelockController getMinDelay per controller; Multicall3 aggregate3 with per-target isolation; no event history',
+    'evm.transaction-flows': 'eth_getTransactionByHash, eth_getTransactionReceipt and eth_getBlockByHash; debug_traceTransaction with the prestateTracer in diff mode (storage and code omitted, the only tracer the runtime permits); ERC-20 symbol and decimals via Multicall3; ERC-20 and ERC-721 Transfer events from the receipt',
+    'evm.admin-history': 'EIP-1967 implementation, admin and beacon slots (legacy ZeppelinOS slots as fallback); owner(), pendingOwner(), paused() and the ProxyAdmin owner() via Multicall3; full-history eth_getLogs from block 0 over the contract, its proxy admin and beacon for Upgraded, AdminChanged, BeaconUpgraded, OwnershipTransferred, OwnershipTransferStarted, RoleGranted, RoleRevoked, RoleAdminChanged, Paused and Unpaused, bisected within five pages; log blockTimestamp or up to six block headers',
+    'solana.validator-health': 'getVoteAccounts filtered by votePubkey (keepUnstakedDelinquents) for status, stake, commission, last vote, root slot and epoch credits; getAccountInfo on the vote account (Vote program owner; vote-state versions 1 to 3: node identity and authorised withdrawer); getEpochInfo; getBlockProduction filtered by the derived identity for this epoch\'s leader slots and blocks produced; getRecentPerformanceSamples(30) for cluster throughput and slot time; confirmed commitment',
+    'evm.token-vesting': 'Sablier Lockup v1.2 (LockupLinear, LockupDynamic, LockupTranched), v2.0, v3.0 and v4.0 stream getters (getSender, getRecipient, getAsset or getUnderlyingToken, getLockupModel, deposited, withdrawn and refunded amounts, start, cliff and end times, getUnlockAmounts, getSegments, getTranches, statusOf, streamed, withdrawable and refundable amounts, isCancelable, isTransferable); OpenZeppelin VestingWallet start, duration, end, cliff, released, releasable and vestedAmount (ETH and ERC-20), recognised by bytecode selectors including EIP-1167 clones; ERC-20 symbol, decimals and balanceOf; Multicall3 aggregate3 and getEthBalance with per-target isolation',
+    'evm.oracle-dependency': 'AggregatorV3 latestRoundData, decimals and description; EACAggregatorProxy aggregator, phaseId, proposedAggregator, accessController and owner; aggregator typeAndVersion, minAnswer, maxAnswer and owner; Aave V3 getPriceOracle, getSourceOfAsset and getAssetPrice; Aave CAPO BASE_TO_USD_AGGREGATOR/ASSET_TO_USD_AGGREGATOR, RATIO_PROVIDER, isCapped, getPriceCap and growth caps; Chainlink Feed Registry getFeed and latestRoundData (Ethereum); Safe and timelock getters for owners; AnswerUpdated events in bounded windows; Multicall3 aggregate3 with per-target isolation',
+    'evm.contract-controls': 'EIP-1967 implementation, admin and beacon slots and legacy ZeppelinOS slots; owner(), pendingOwner(), paused(), ERC-165 AccessControl; Safe getThreshold/getOwners, TimelockController getMinDelay and Compound Timelock delay; one Multicall3 aggregate3 batch per step',
+    'evm.token-activity': 'ERC-20 Transfer events in adaptive block windows ending at the hash-pinned latest block; metadata and balances via Multicall3',
+    'evm.wallet-flows': 'ERC-20 Transfer events to and from the wallet (topic-filtered) for the listed major tokens; balanceOf, eth_getBalance and nonce at the pinned block',
+    'evm.allowance-exposure': 'ERC-20 allowance over the listed token and spender matrix and Permit2 allowance(owner, token, spender) via Multicall3',
+    'evm.treasury': 'balanceOf of the listed major tokens; Safe getThreshold/getOwners/getModulesPaginated/nonce/VERSION and guard and fallback-handler slots; TimelockController getMinDelay',
+    'evm.dex-depth': 'Uniswap V2 and SushiSwap getPair/getReserves, Uniswap V3 getPool/slot0/liquidity and Aerodrome getPool (stable and volatile) against WETH and major stablecoins',
+    'evm.pool-trades': 'Uniswap V2, Uniswap V3 and Aerodrome Swap events in adaptive block windows ending at the hash-pinned latest block',
+    'evm.lending-market': 'Aave V3 PoolDataProvider, Pool and oracle getters; Compound V3 Comet market and collateral getters',
+    'evm.vault-4626': 'ERC-4626 asset, totalAssets, convertToAssets and maxDeposit; MetaMorpho fee, curator, guardian, owner, timelock and supplyQueueLength',
+    'evm.liquid-staking': 'Issuer exchange-rate and supply getters for stETH, wstETH, rETH, cbETH, weETH, sfrxETH, mETH and ETHx; Lido getTotalPooledEther and getBufferedEther',
+    'evm.governor': 'OpenZeppelin Governor and Compound GovernorBravo settings, proposalCount, proposalDetailsAt or proposals, state and ProposalCreated events; timelock delay',
+    'evm.issuer-controls': 'FiatToken, Tether, ERC-3643, ERC-1404, AccessControl and Ownable role, pause and blacklist getters; EIP-1967 implementation slot',
+    'evm.bridge-activity': 'OP Stack L1StandardBridge and L2StandardBridge ETH and ERC-20 bridge initiated and finalized events for Base',
+    'evm.chain-pulse': 'eth_getBlockByNumber for three recent blocks and one about an hour earlier (transactions, gasUsed, baseFeePerGas, blobGasUsed)',
+    'evm.nft-collection': 'ERC-165 (ERC-721, ERC-1155, ERC-2981), name, symbol, totalSupply, owner, contractURI and royaltyInfo; Transfer events in adaptive block windows',
+    'solana.pumpfun-curve': 'pump.fun bonding-curve and Global accounts (program 6EF8rrecthR5Dkzon8Nwu78hRvfCKubJ14M5uBEwF6P) via getMultipleAccounts at confirmed commitment',
+    'solana.stake-pools': 'SPL Stake Pool accounts of six listed pools across the SPL, Sanctum single-validator and Sanctum multi-validator programs via getMultipleAccounts at confirmed commitment',
+    'solana.token-safety': 'SPL Token and Token-2022 mint layout with extensions, and Metaplex Token Metadata v1, via getMultipleAccounts at confirmed commitment',
+};
+const LOG_WINDOWS = 'Coverage is the contiguous block range actually read, stated in every report; busy subjects are covered for minutes, quiet ones for hours. No activity is inferred for unread blocks.';
+const RH_LOGS = 'The keyless official Robinhood RPC throttles bursts of eth_getLogs: a rate-limited window is retried once after a pause, then coverage stops and the report says so.';
+export const CHAIN_COVERAGE = Object.freeze([
+    // ------------------------------------------------------------------------------------------------------------ Ethereum
+    entry({ chain: 'ethereum', tool: 'evm.token-metadata', capability: 'token-metadata', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}ethereum-weth-token-metadata-20260914T203317690Z.json`, `${T}ethereum-wbtc-token-metadata-20260914T203555717Z.json`], protocolVersions: 'ERC-20 string and bytes32 labels', gaps: ['Labels are untrusted; total supply is the contract counter.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.contract-inspect', capability: 'contract-inspection', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}ethereum-usdc-contract-inspect-20260914T203317690Z.json`], protocolVersions: 'EIP-1967 slots, EIP-7702 designators', gaps: ['Custom proxies and non-standard upgrade paths are not detected.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.permissions', capability: 'permissions', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}ethereum-usdc-permissions-20260914T203317690Z.json`], protocolVersions: 'owner(), EIP-1967, declared AccessControl roles', gaps: ['Role holders are not enumerated.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.pool-liquidity', capability: 'pool-liquidity', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}ethereum-usdc-weth-v2-pool-20260914T203317690Z.json`], protocolVersions: 'Uniswap V2-compatible (live); V3-compatible (live on Base)', gaps: ['Only the supplied pool; no pool discovery or aggregate liquidity.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.token-transfers', capability: 'token-transfers', source: 'public-rpc', status: 'live-verified-partial', credential: null, evidence: [`${T}ethereum-wbtc-transfers-paged-window-20260914T203555717Z.json`], protocolVersions: 'ERC-20 Transfer events', gaps: ['The live run stopped at its log cap with a resume cursor; a complete multi-window run is fixture-only.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.funding-links', capability: 'funding-links', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}ethereum-public-verify-indexed-funding-hash-20260914T203328202Z.json`], protocolVersions: 'Supplied transaction hashes, one hop', gaps: ['Discovering funders needs the indexed tool; internal transfers need traces.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.supplied-balances', capability: 'supplied-balances', source: 'public-rpc', status: 'fixture-only', credential: null, evidence: [], protocolVersions: 'ERC-20 balanceOf', gaps: ['No live Ethereum run yet (verified on Base).'] }),
+    entry({ chain: 'ethereum', tool: 'evm.decode-swap', capability: 'swap-decoding', source: 'offline-decoder', status: 'live-verified', credential: null, evidence: [`${T}base-universal-router-decode-offline-20260914T203317690Z.json`], protocolVersions: 'Uniswap V2 Router02, V3 SwapRouter/02, Universal Router, Permit2', gaps: ['Offline decoding is chain-independent; unsupported selectors stay unknown.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.indexed-transfers', capability: 'address-transfers', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}alchemy-ethereum-wallet-inbound-transfers-20260914T203328202Z.json`], protocolVersions: 'alchemy_getAssetTransfers external/internal/erc20', gaps: ['Completeness is the provider index claim; transfers are not trades.', LICENCE_GAP] }),
+    entry({ chain: 'ethereum', tool: 'evm.indexed-funding-links', capability: 'funding-discovery', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}alchemy-ethereum-wallet-earliest-funding-20260914T203328202Z.json`, `${T}ethereum-public-verify-indexed-funding-hash-20260914T203328202Z.json`], protocolVersions: 'alchemy_getAssetTransfers oldest-first native', gaps: ['ERC-20 funding and paymaster sponsorship are not included.', LICENCE_GAP] }),
+    entry({ chain: 'ethereum', tool: 'evm.contract-creation', capability: 'deployment-history', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}alchemy-ethereum-usdc-deployment-search-20260914T230848249Z.json`, `${T}alchemy-ethereum-v2-pair-deployment-search-20260914T230848249Z.json`, `${T}alchemy-ethereum-v2-pair-contract-creation-20260914T203328202Z.json`], protocolVersions: 'Alchemy getContractMetadata, then archive eth_getCode binary search (at most 28 probes) and a top-level CREATE(sender, nonce) match', gaps: ['Alchemy\'s index returned no deployer for ERC-20s; the on-chain search located USDC\'s deployment block and direct deployer.', 'Factory or CREATE2 creations (the Uniswap V2 pair) get their block but no creating contract: that needs traces.', 'Related launches by the same deployer are not indexed.', LICENCE_GAP] }),
+    entry({ chain: 'ethereum', tool: 'evm.wallet-token-balances', capability: 'wallet-holdings', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}alchemy-ethereum-wallet-token-balances-20260914T203328202Z.json`], protocolVersions: 'alchemy_getTokenBalances erc20, alchemy_getTokenMetadata', gaps: ['Provider latest view, not pinned to a block hash; no valuation or cost basis.', LICENCE_GAP] }),
+    entry({ chain: 'ethereum', tool: 'evm.indexed-token-metadata', capability: 'indexed-token-metadata', source: 'alchemy', status: 'fixture-only', credential: 'ALCHEMY_API_KEY', evidence: [], protocolVersions: 'alchemy_getTokenMetadata', gaps: ['Verified live on Base only.'] }),
+    entry({ chain: 'ethereum', tool: 'http.read', capability: 'web-read', source: 'public-web', status: 'live-verified', credential: null, evidence: [`${T}web-token-repository-readme-rerun-20260914T203555717Z.json`, `${T}web-refused-metadata-address-20260914T203317690Z.json`], protocolVersions: 'HTTPS GET, identity encoding, no redirects', gaps: ['Content is untrusted and evidenced only at retrieval time.'] }),
+    // ---------------------------------------------------------------------------------------------------------------- Base
+    entry({ chain: 'base', tool: 'evm.token-metadata', capability: 'token-metadata', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}base-usdc-token-metadata-20260914T203317690Z.json`], protocolVersions: 'ERC-20 string and bytes32 labels', gaps: ['Labels are untrusted; total supply is the contract counter.'] }),
+    entry({ chain: 'base', tool: 'evm.contract-inspect', capability: 'contract-inspection', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}base-public-l2-standard-bridge-proxy-inspect-20260914T230846496Z.json`, `${T}base-l2-standard-bridge-proxy-inspect-20260914T203555717Z.json`], protocolVersions: 'EIP-1967 slots, EIP-7702 designators', gaps: ['Custom proxies and non-standard upgrade paths are not detected.'] }),
+    entry({ chain: 'base', tool: 'evm.permissions', capability: 'permissions', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}base-usdc-permissions-20260914T222326238Z.json`], protocolVersions: 'owner(), EIP-1967, declared AccessControl roles', gaps: ['Role holders are not enumerated.'] }),
+    entry({ chain: 'base', tool: 'evm.pool-liquidity', capability: 'pool-liquidity', source: 'public-rpc', status: 'live-verified-partial', credential: null, evidence: [`${T}base-public-weth-usdc-v3-pool-20260914T230846496Z.json`, `${T}base-weth-usdc-v3-pool-keyed-20260914T222326238Z.json`], protocolVersions: 'Uniswap V3-compatible (live); V2-compatible (live on Ethereum)', gaps: ['On the official public endpoint the liquidity and fee reads were rate-limited (partial). The same tool completed through the Alchemy Base host (second artifact), which is not this row\'s source.', 'Only the supplied pool.'] }),
+    entry({ chain: 'base', tool: 'evm.token-transfers', capability: 'token-transfers', source: 'public-rpc', status: 'live-verified-partial', credential: null, evidence: [`${T}base-usdc-transfers-window-20260914T203317690Z.json`], protocolVersions: 'ERC-20 Transfer events', gaps: ['The official endpoint rejected a busy USDC window; the tool returned a resume cursor, not an empty result.'] }),
+    entry({ chain: 'base', tool: 'evm.funding-links', capability: 'funding-links', source: 'public-rpc', status: 'fixture-only', credential: null, evidence: [], protocolVersions: 'Supplied transaction hashes, one hop', gaps: ['No live Base run yet.'] }),
+    entry({ chain: 'base', tool: 'evm.supplied-balances', capability: 'supplied-balances', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}base-usdc-supplied-balances-rerun-20260914T203555717Z.json`], protocolVersions: 'ERC-20 balanceOf', gaps: ['Supplied accounts only; not a holder census.'] }),
+    entry({ chain: 'base', tool: 'evm.decode-swap', capability: 'swap-decoding', source: 'offline-decoder', status: 'live-verified', credential: null, evidence: [`${T}base-universal-router-decode-offline-20260914T203317690Z.json`], protocolVersions: 'Uniswap V2 Router02, V3 SwapRouter/02, Universal Router, Permit2', gaps: ['Unsupported selectors stay unknown.'] }),
+    entry({ chain: 'base', tool: 'evm.indexed-transfers', capability: 'address-transfers', source: 'alchemy', status: 'fixture-only', credential: 'ALCHEMY_API_KEY', evidence: [], protocolVersions: 'alchemy_getAssetTransfers', gaps: ['Verified live on Ethereum only.'] }),
+    entry({ chain: 'base', tool: 'evm.indexed-funding-links', capability: 'funding-discovery', source: 'alchemy', status: 'fixture-only', credential: 'ALCHEMY_API_KEY', evidence: [], protocolVersions: 'alchemy_getAssetTransfers', gaps: ['Verified live on Ethereum only.'] }),
+    entry({ chain: 'base', tool: 'evm.contract-creation', capability: 'deployment-history', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}alchemy-base-usdc-deployment-search-20260914T230848249Z.json`, `${T}alchemy-base-usdc-contract-creation-20260914T203328202Z.json`], protocolVersions: 'Alchemy getContractMetadata, then archive eth_getCode binary search and a top-level CREATE match', gaps: ['The on-chain search located Base USDC\'s deployment block and direct deployer after the index returned null.', 'Factory and CREATE2 creations are reported without the creating contract.', LICENCE_GAP] }),
+    entry({ chain: 'base', tool: 'evm.wallet-token-balances', capability: 'wallet-holdings', source: 'alchemy', status: 'fixture-only', credential: 'ALCHEMY_API_KEY', evidence: [], protocolVersions: 'alchemy_getTokenBalances', gaps: ['Verified live on Ethereum only.'] }),
+    entry({ chain: 'base', tool: 'evm.indexed-token-metadata', capability: 'indexed-token-metadata', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}alchemy-base-usdc-indexed-metadata-20260914T203328202Z.json`], protocolVersions: 'alchemy_getTokenMetadata', gaps: ['Cross-check against on-chain metadata.', LICENCE_GAP] }),
+    entry({ chain: 'base', tool: 'http.read', capability: 'web-read', source: 'public-web', status: 'live-verified', credential: null, evidence: [`${T}web-token-repository-readme-rerun-20260914T203555717Z.json`], protocolVersions: 'HTTPS GET', gaps: ['Content is untrusted.'] }),
+    // ------------------------------------------------------------------------------- P02/P03 indexed activity (Ethereum, Base)
+    // Live runs on 15 September 2026 (packages/deployer/scripts/verify-live.ts): UNI on Ethereum and DEGEN on Base, their creation senders, and a public wallet.
+    ...['ethereum', 'base'].flatMap((chain) => [
+        entry({ chain, tool: 'evm.contract-origin', capability: 'deployment-origin', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${A}${chain}-contract-origin-20260915T183816082Z.json`, ...(chain === 'base' ? [`${A}base-contract-origin-trace-20260926T222550757Z.json`] : [])], protocolVersions: 'alchemy_getAssetTransfers first activity, eth_getTransactionReceipt contractAddress, archive eth_getCode, debug_traceTransaction prestate diff (R02) for creations inside a contract call',
+            gaps: [chain === 'ethereum' ? 'UNI\'s creation (block 10861674) was confirmed by its receipt.' : 'DEGEN\'s creation (block 8925894) was confirmed by its receipt; CLANKER\'s creation inside a factory call was verified by a prestate-diff trace (26 Sep 2026), with the three contracts that ran CREATE or CREATE2 listed as candidates.', 'Contracts whose first indexed activity comes later (for example pools that receive liquidity after deployment) need a supplied creation transaction or stay a bounded block range. A trace names a CREATE creator exactly; CREATE2 creators are candidates.', LICENCE_GAP] }),
+        entry({ chain, tool: 'evm.address-funding', capability: 'funding-discovery-bounded', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${A}${chain}-address-funding-20260915T183816082Z.json`], protocolVersions: 'alchemy_getAssetTransfers oldest-first external/internal/erc20 with pageKey',
+            gaps: ['The live run followed one pageKey (two pages) and kept the next cursor; later transfers are unknown. Mints and self-transfers are not funding.', 'A funder is a counterparty, not an owner; paymaster-sponsored gas is not included.', LICENCE_GAP] }),
+        entry({ chain, tool: 'evm.deployer-launches', capability: 'related-deployments', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${A}${chain}-deployer-launches-20260915T183816082Z.json`], protocolVersions: 'alchemy_getAssetTransfers external from the sender, eth_getTransactionReceipt contractAddress',
+            gaps: ['Top-level creations by the same sender only; contracts it created through factories are not found. A shared sender is not common control.', LICENCE_GAP] }),
+        entry({ chain, tool: 'evm.wallet-activity', capability: 'wallet-activity', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${A}${chain}-wallet-activity-20260915T183816082Z.json`], protocolVersions: 'eth_getBalance, alchemy_getAssetTransfers in/out by category, alchemy_getTokenBalances, alchemy_getTokenMetadata',
+            gaps: ['One bounded page per direction (truncated with a cursor in the live run); token balances are the provider\'s latest view and most token decimals stay unknown beyond the metadata bound.', 'Transfers are not trades; no valuation, fees or results.', LICENCE_GAP] }),
+    ]),
+    // --------------------------------------------------------- P01 Token Researcher 0.3.0 market reads (inside evm.inspect-token@0.1.0)
+    // Factory addresses and quote tokens are listed in packages/contracts/src/token-market.ts. A refused row marks that report section unsupported.
+    // Live runs on 15 September 2026 (packages/research/scripts/verify-market-live.ts): UNI on Ethereum, DEGEN on Base, USDG on Robinhood Chain.
+    ...['ethereum', 'base', 'robinhood'].flatMap((chain) => {
+        const venues = { ethereum: 'Uniswap V2, SushiSwap V2 and Uniswap V3 (fees 100/500/3000/10000) against WETH, USDC and USDT', base: 'Uniswap V2, Uniswap V3 (fees 100/500/3000/10000) and Aerodrome (stable and volatile) against WETH and USDC', robinhood: 'Uniswap V2 and Uniswap V3 (fees 100/500/3000/10000) against WETH and USDG' }[chain];
+        const R = 'docs/evidence/token-researcher/';
+        const evidence = { ethereum: [`${R}ethereum-uni-market-20260915T205425465Z.json`], base: [`${R}base-degen-market-20260915T205427374Z.json`], robinhood: [`${R}robinhood-usdg-market-20260915T205509947Z.json`, `${R}robinhood-weth-pair-token-market-20260915T213122230Z.json`] }[chain];
+        const observed = { ethereum: 'UNI: 16 pools found (8 shown with balances) and 10 recent recipients in 15 reads; the report was partial only because UNI has no owner().', base: 'DEGEN: 14 pools found (8 shown) and 10 recent recipients; complete in 15 reads.',
+            robinhood: 'USDG: 5 pools and 10 recent recipients; complete in 15 reads. A token without owner() (second artifact) found 4 pools and 8 recent recipients in 15 reads, partial only for the owner() revert. Its earlier runs (robinhood-weth-pair-token-market-20260915T204833029Z and -205512300Z, kept as history) failed at the 16-read ceiling before the keyed revert stopped failing over to the official RPC.' }[chain];
+        return [
+            entry({ chain, tool: 'evm.dex-pool-discovery', capability: 'dex-pool-discovery-listed-venues', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence, protocolVersions: `Multicall3 aggregate3 factory lookups on ${venues}; balanceOf, getReserves, slot0 and liquidity at the pinned block`,
+                gaps: [observed, 'Listed venues and quote tokens only; Uniswap V4, other DEXes and aggregators are not checked and no total liquidity is claimed.', 'Pool balances are not executable depth or a price.', 'Verified through the Alchemy host; public RPC failover is not live-verified for these reads.'] }),
+            entry({ chain, tool: 'evm.recent-holder-activity', capability: 'recent-transfer-recipients', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence, protocolVersions: 'alchemy_getAssetTransfers erc20, newest 25 at or before the pinned block, then balanceOf of up to 10 recipients at that block',
+                gaps: ['Recent recipients are not a holder list, ranking or distribution; completeness is the index claim.', 'The index request goes only to the keyed Alchemy host, never failed over.', LICENCE_GAP] }),
+        ];
+    }),
+    // ------------------------------------------------------------------------------------------------- Robinhood (Orbit L2)
+    entry({ chain: 'robinhood', tool: 'evm.token-metadata', capability: 'token-metadata', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}robinhood-mainnet-token-metadata-20260914T230844868Z.json`], protocolVersions: 'ERC-20 labels at the latest block, EIP-1898 hash-pinned', gaps: [RH_SNAPSHOT, RH_ALCHEMY, 'Labels are untrusted; total supply is the contract counter.'] }),
+    entry({ chain: 'robinhood', tool: 'evm.contract-inspect', capability: 'contract-inspection', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}robinhood-mainnet-contract-inspect-20260914T230844868Z.json`], protocolVersions: 'EIP-1967 slots at the latest block, EIP-1898 hash-pinned', gaps: [RH_SNAPSHOT, RH_ALCHEMY, 'Custom proxies and non-standard upgrade paths are not detected.'] }),
+    entry({ chain: 'robinhood', tool: 'evm.permissions', capability: 'permissions', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}robinhood-mainnet-permissions-20260914T230844868Z.json`], protocolVersions: 'owner(), EIP-1967, declared AccessControl roles at the hash-pinned latest block', gaps: [RH_SNAPSHOT, RH_ALCHEMY, 'Role holders are not enumerated.'] }),
+    entry({ chain: 'robinhood', tool: 'http.read', capability: 'web-read', source: 'public-web', status: 'live-verified', credential: null, evidence: [`${T}web-token-repository-readme-rerun-20260914T203555717Z.json`], protocolVersions: 'HTTPS GET', gaps: ['Content is untrusted.'] }),
+    entry({ chain: 'robinhood-testnet', tool: 'evm.token-metadata', capability: 'token-metadata', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}robinhood-testnet-token-metadata-20260914T230844868Z.json`], protocolVersions: 'ERC-20 labels at the latest block, EIP-1898 hash-pinned', gaps: [RH_SNAPSHOT, RH_ALCHEMY] }),
+    entry({ chain: 'robinhood-testnet', tool: 'evm.contract-inspect', capability: 'contract-inspection', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}robinhood-testnet-contract-inspect-20260914T230844868Z.json`], protocolVersions: 'EIP-1967 slots at the hash-pinned latest block', gaps: [RH_SNAPSHOT, RH_ALCHEMY] }),
+    entry({ chain: 'robinhood-testnet', tool: 'evm.permissions', capability: 'permissions', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}robinhood-testnet-permissions-20260914T230844868Z.json`], protocolVersions: 'owner(), EIP-1967, declared AccessControl roles at the hash-pinned latest block', gaps: [RH_SNAPSHOT, RH_ALCHEMY] }),
+    // E01 bounded logs (15 September 2026, after D032): windows end at or below the hash-pinned latest block and every returned log block hash is checked against the canonical header.
+    ...['robinhood', 'robinhood-testnet'].map((chain) => {
+        const label = chain === 'robinhood' ? 'mainnet' : 'testnet';
+        return entry({ chain, tool: 'evm.token-transfers', capability: 'token-transfers', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY',
+            evidence: [`${T}robinhood-${label}-token-transfers-window-20260915T210139725Z.json`, `${T}robinhood-${label}-token-transfers-paged-20260915T210139725Z.json`, `${T}robinhood-${label}-token-transfers-resumed-20260915T210139725Z.json`],
+            protocolVersions: 'ERC-20 Transfer events in bounded block windows up to the hash-pinned latest block; each returned log block hash matched the canonical header',
+            gaps: [chain === 'robinhood' ? 'USDG: a complete two-block window (15 transfers, 2 log blocks verified) and two cursor pages that stopped at the 25-log page limit.' : 'The busiest testnet token in a 50-block window: a complete two-block window and two cursor pages that stopped at the call ceiling for block-hash checks.',
+                'Log completeness is the provider\'s claim, and a window with no logs has nothing to hash-verify. Busy tokens page slowly: each log block costs one header read within the 10-call ceiling.',
+                chain === 'robinhood' ? 'Verified through Alchemy only. The keyless official RPC timed out or rate-limited unfiltered and USDG log queries (robinhood-mainnet-official-rpc-log-limits probe), so failover to it is not verified for logs.' : 'Verified through Alchemy only; failover to the official testnet RPC is not verified for logs.'] });
+    }),
+    // -------------------------------------------------------------------------------------------------------------- Solana
+    entry({ chain: 'solana', tool: 'solana.mint-authorities', capability: 'token-metadata', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}solana-usdc-mint-authorities-20260914T203317690Z.json`, `${T}solana-pyusd-mint-authorities-rerun-20260914T203555717Z.json`], protocolVersions: 'SPL Token mint layout; Token-2022 TLV extensions (parsed subset)', gaps: ['Unparsed Token-2022 extensions stay unknown; program upgrade authority is not read.'] }),
+    entry({ chain: 'solana', tool: 'solana.metaplex-metadata', capability: 'token-labels', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}solana-usdc-metaplex-metadata-20260914T203317690Z.json`], protocolVersions: 'Metaplex Token Metadata v1 prefix', gaps: ['URI is not fetched; editions and collections are not interpreted.'] }),
+    entry({ chain: 'solana', tool: 'solana.address-history', capability: 'address-history', source: 'public-rpc', status: 'live-verified-partial', credential: null, evidence: [`${T}solana-pyusd-address-history-rerun-20260914T203555717Z.json`], protocolVersions: 'getSignaturesForAddress (confirmed commitment, newest first)', gaps: ['Public RPC may prune history; an exhausted page is not proof of no earlier activity.', 'The linked live evidence predates the instant-read change and was read at finalized commitment.'] }),
+    entry({ chain: 'solana', tool: 'solana.funding-links', capability: 'funding-links', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}solana-pyusd-funding-links-20260914T203317690Z.json`], protocolVersions: 'jsonParsed System Program transfer/createAccount', gaps: ['Recent window only; first funding needs the indexed tool.'] }),
+    entry({ chain: 'solana', tool: 'solana.token-holders', capability: 'token-holders', source: 'helius', status: 'live-verified-partial', credential: 'HELIUS_API_KEY', evidence: [`${T}helius-pyusd-token-holders-page-20260914T203328202Z.json`], protocolVersions: 'Helius DAS getTokenAccounts', gaps: ['Pages with cursors only; never a complete holder census.', LICENCE_GAP] }),
+    entry({ chain: 'solana', tool: 'solana.indexed-history', capability: 'address-history-indexed', source: 'helius', status: 'live-verified-partial', credential: 'HELIUS_API_KEY', evidence: [`${T}helius-pyusd-indexed-history-20260914T203328202Z.json`], protocolVersions: 'Helius getTransactionsForAddress (signatures)', gaps: ['Page with pagination token; completeness is the provider claim.', LICENCE_GAP] }),
+    entry({ chain: 'solana', tool: 'solana.indexed-funding-links', capability: 'funding-discovery', source: 'helius', status: 'live-verified', credential: 'HELIUS_API_KEY', evidence: [`${T}helius-pyusd-earliest-funding-20260914T203328202Z.json`], protocolVersions: 'Helius getTransactionsForAddress (full, oldest first)', gaps: ['Native SOL funding only.', LICENCE_GAP] }),
+    entry({ chain: 'solana', tool: 'solana.asset-metadata', capability: 'indexed-token-metadata', source: 'helius', status: 'live-verified', credential: 'HELIUS_API_KEY', evidence: [`${T}helius-pyusd-asset-metadata-20260914T203328202Z.json`], protocolVersions: 'Helius DAS getAsset', gaps: ['On-chain mint authorities remain authoritative.', LICENCE_GAP] }),
+    entry({ chain: 'solana', tool: 'solana.inspect-transaction', capability: 'transaction-inspection', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${I}solana-legacy-funded-self-transfer-20260914T230733029Z.json`, `${I}solana-v0-transaction-lookup-table-20260914T222325098Z.json`, `${I}solana-legacy-message-transfer-memo-compute-20260914T222325098Z.json`, `${I}solana-legacy-message-unknown-program-20260914T222325098Z.json`, 'docs/evidence/solana-inspector/mainnet-self-transfer-agent-run-20260915T211231474Z.json'], protocolVersions: 'Legacy and v0 with lookup tables; System, SPL Token, Token-2022 base, ATA, Memo, Compute Budget; simulateTransaction sigVerify=false, replaceRecentBlockhash=true', gaps: ['Token-2022 extension sub-instructions and other programs stay unknown; simulation is a snapshot, not an asset-flow guarantee.', 'With HELIUS_API_KEY configured, Helius mainnet-beta is the first endpoint: the agent-kind worker run on 15 September 2026 (last artifact) completed through it with a succeeded simulation in 4 metered reads.'] }),
+    entry({ chain: 'solana', tool: 'http.read', capability: 'web-read', source: 'public-web', status: 'live-verified', credential: null, evidence: [`${T}web-token-repository-readme-rerun-20260914T203555717Z.json`], protocolVersions: 'HTTPS GET', gaps: ['Content is untrusted.'] }),
+    // --------------------------------------------------------------------- Catalog research tools (26 September 2026, public RPC)
+    // packages/tools/scripts/verify-research-live.ts through the production keyless endpoints (Ethereum PublicNode with Polkachu and MEV Blocker
+    // fallbacks, the official Base RPC with PublicNode fallback, the official Robinhood Chain RPC, PublicNode Solana). The first gap is each run's own headline.
+    entry({ chain: 'ethereum', tool: 'evm.contract-controls', capability: 'contract-controls', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-aave-pool-controls-20260926T171735170Z.json`, `${T}research-ethereum-usdc-controls-20260926T171735170Z.json`, `${T}research-ethereum-weth-controls-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.contract-controls'], gaps: ['ethereum-aave-pool-controls: Upgradeable (uups or custom proxy), controlled by an authority that is not exposed through standard proxy slots or owner(). owner() is not available. ethereum-usdc-controls: Upgradeable (transparent proxy), controlled by an account without code (a single key) (0x807a…95d2). owner() is an account without code (a single key) (0xFcb1…AE3a). Not paused.', 'Controllers are classified by code and standard getters; roles granted through AccessControl are not enumerated. A classification is not a statement of intent.'] }),
+    entry({ chain: 'base', tool: 'evm.contract-controls', capability: 'contract-controls', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-usdc-controls-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.contract-controls'], gaps: ['base-usdc-controls: Upgradeable (transparent proxy), controlled by an account without code (a single key) (0x4fc7…cA44). owner() is an account without code (a single key) (0x3ABd…6df7). Not paused.', 'Controllers are classified by code and standard getters; AccessControl role holders are not enumerated.'] }),
+    entry({ chain: 'robinhood', tool: 'evm.contract-controls', capability: 'contract-controls', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-robinhood-usdg-controls-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.contract-controls'], gaps: ['robinhood-usdg-controls: Upgradeable (uups or custom proxy), controlled by a timelock with a 1d delay (0xcFA0…4C6F). owner() is a timelock with a 1d delay (0xcFA0…4C6F). Not paused.', 'Controllers are classified by code and standard getters; AccessControl role holders are not enumerated.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.token-activity', capability: 'token-activity', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-uni-activity-20260926T171735170Z.json`, `${T}research-ethereum-usdc-mint-burn-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.token-activity'], gaps: ['ethereum-uni-activity: 114 transfers of UNI (12154.40219091078855367 moved) between 54 senders and 61 receivers in the last 104 blocks (about 21 minutes; blocks 26062960-26063063, 2,000 requested). 0 at or above 10000 UNI. ethereum-usdc-mint-burn: 18 mints (84341.879001 USDC) and 13 burns (479416.988873 USDC) in the last 50 blocks (about 10 minutes; blocks 26063014-26063063, 4,000 requested); net -395075.109872 USDC.', LOG_WINDOWS] }),
+    entry({ chain: 'base', tool: 'evm.token-activity', capability: 'token-activity', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-degen-activity-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.token-activity'], gaps: ['base-degen-activity: 99 transfers of DEGEN (7486237.49661624426119377 moved) between 26 senders and 36 receivers in the last 521 blocks (about 17 minutes; blocks 51826332-51826852, 2,000 requested).', LOG_WINDOWS] }),
+    entry({ chain: 'robinhood', tool: 'evm.token-activity', capability: 'token-activity', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-robinhood-usdg-activity-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.token-activity'], gaps: ['robinhood-usdg-activity: 142 transfers of USDG (43737.298934 moved) between 42 senders and 52 receivers in the last 51 blocks (under a minute; blocks 73255510-73255560, 5,000 requested).', RH_LOGS, LOG_WINDOWS] }),
+    entry({ chain: 'ethereum', tool: 'evm.wallet-flows', capability: 'wallet-flows', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-public-wallet-flows-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.wallet-flows'], gaps: ['ethereum-public-wallet-flows: 0 incoming and 0 outgoing transfers across 0 of 12 watched tokens with 0 counterparties in the last 2,300 blocks (about 8 hours; blocks 26060764-26063063, 4,000 requested). Native balance 5.721712306242346161 ETH; 8 watched tokens held.', 'Only the listed major tokens plus one named token are followed; transfers are not trades and counterparties are addresses, not identities.'] }),
+    entry({ chain: 'base', tool: 'evm.wallet-flows', capability: 'wallet-flows', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-public-wallet-flows-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.wallet-flows'], gaps: ['base-public-wallet-flows: 0 incoming and 0 outgoing transfers across 0 of 12 watched tokens with 0 counterparties in the last 2,300 blocks (about 77 minutes; blocks 51824557-51826856, 4,000 requested). Native balance 3.12882160347253728 ETH; 8 watched tokens held.', 'Only the listed major tokens plus one named token are followed; transfers are not trades.'] }),
+    entry({ chain: 'robinhood', tool: 'evm.wallet-flows', capability: 'wallet-flows', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-robinhood-vault-flows-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.wallet-flows'], gaps: ['robinhood-vault-flows: 0 incoming and 0 outgoing transfers across 0 of 2 watched tokens with 0 counterparties in the last 2,300 blocks (about 4 minutes; blocks 73253326-73255625, 10,000 requested). Native balance 0.00258329 ETH; 0 watched tokens held.', 'Robinhood Chain lists two major tokens (WETH and USDG); others need the named token input.', RH_LOGS] }),
+    entry({ chain: 'ethereum', tool: 'evm.allowance-exposure', capability: 'allowance-exposure', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-public-wallet-allowances-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.allowance-exposure'], gaps: ['ethereum-public-wallet-allowances: 5 live allowances (4 unlimited) to 3 of 12 checked spenders across 3 tokens.', 'Only the listed token and spender matrix (plus one named token and spender) is read; allowances outside it are not found. Nothing is revoked.'] }),
+    entry({ chain: 'base', tool: 'evm.allowance-exposure', capability: 'allowance-exposure', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-public-wallet-allowances-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.allowance-exposure'], gaps: ['base-public-wallet-allowances: 1 live allowance (1 unlimited) to 1 of 12 checked spenders across 1 tokens.', 'Only the listed token and spender matrix is read.'] }),
+    entry({ chain: 'robinhood', tool: 'evm.allowance-exposure', capability: 'allowance-exposure', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-robinhood-vault-allowances-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.allowance-exposure'], gaps: ['robinhood-vault-allowances: No live allowance to the 5 checked spenders across 2 tokens.', 'The Robinhood spender list is Permit2 and the official Uniswap routers only.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.treasury', capability: 'treasury', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-ens-endowment-treasury-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.treasury'], gaps: ['ethereum-ens-endowment-treasury: Safe 1.3.0 with a 1-of-1 threshold, 2 modules and 34 executed transactions.', 'Holdings cover the listed major tokens plus one named token; no prices are applied.'] }),
+    entry({ chain: 'base', tool: 'evm.treasury', capability: 'treasury', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-message-passer-treasury-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.treasury'], gaps: ['base-message-passer-treasury: A contract that is neither a Safe nor a timelock.', 'Holdings cover the listed major tokens plus one named token; no prices are applied.'] }),
+    entry({ chain: 'robinhood', tool: 'evm.treasury', capability: 'treasury', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-robinhood-usdg-timelock-treasury-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.treasury'], gaps: ['robinhood-usdg-timelock-treasury: A timelock with a minimum delay of 86400 seconds.', 'Holdings cover WETH, USDG and one named token.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.dex-depth', capability: 'dex-depth', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-uni-depth-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.dex-depth'], gaps: ['ethereum-uni-depth: 8 pools for UNI; the deepest is Uniswap V3 UNI/WETH (0.3%) at 0.003581741584436829 WETH, where selling 38605.578924825459910764 UNI moves the price about 2%. Price dispersion across same-quote pools: 0.29%.', 'Listed venues and quote tokens only; depth is constant-product or active-liquidity arithmetic at one block, not an executable quote.'] }),
+    entry({ chain: 'base', tool: 'evm.dex-depth', capability: 'dex-depth', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-degen-depth-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.dex-depth'], gaps: ['base-degen-depth: 8 pools for DEGEN; the deepest is Uniswap V3 DEGEN/WETH (1%) at 0.000000408407911405 WETH, where selling 6002954.078499714209314294 DEGEN moves the price about 2%. Price dispersion across same-quote pools: 0.36%.', 'Listed venues and quote tokens only; not an executable quote.'] }),
+    entry({ chain: 'robinhood', tool: 'evm.dex-depth', capability: 'dex-depth', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-robinhood-usdg-depth-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.dex-depth'], gaps: ['robinhood-usdg-depth: 5 pools for USDG; the deepest is Uniswap V3 USDG/WETH (0.01%) at 0.000372150565899655 WETH, where selling 3208728.627901 USDG moves the price about 2%. Price dispersion across same-quote pools: 0.29%.', 'Uniswap V2 and V3 on Robinhood Chain only; not an executable quote.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.pool-trades', capability: 'pool-trades', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-uni-weth-v3-trades-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.pool-trades'], gaps: ['ethereum-uni-weth-v3-trades: 101 swaps (48 buying UNI, 53 selling) in the last 1,009 blocks (about 3 hours; blocks 26062056-26063064, 2,000 requested): 42011.939849596405403454 UNI and 151.172235094626246207 WETH traded; price up 0.11%.', 'One pool only; trades routed through other pools are not seen.', LOG_WINDOWS] }),
+    entry({ chain: 'base', tool: 'evm.pool-trades', capability: 'pool-trades', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-aerodrome-weth-usdc-trades-20260926T171735170Z.json`, `${T}research-base-weth-usdc-v3-trades-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.pool-trades'], gaps: ['base-aerodrome-weth-usdc-trades: 97 swaps (85 buying WETH, 12 selling) in the last 473 blocks (about 16 minutes; blocks 51826389-51826861, 2,000 requested): 0.19495339484930725 WETH and 525.135538 USDC traded; price up 0.00%. base-weth-usdc-v3-trades: 62 swaps (39 buying WETH, 23 selling) in the last 279 blocks (about 9 minutes; blocks 51826582-51826860, 2,000 requested): 2.099232727858636242 WETH and 5641.890336 US…', 'One pool only.', LOG_WINDOWS] }),
+    entry({ chain: 'robinhood', tool: 'evm.pool-trades', capability: 'pool-trades', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-robinhood-usdg-weth-v3-trades-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.pool-trades'], gaps: ['robinhood-usdg-weth-v3-trades: 101 swaps (52 buying WETH, 49 selling) in the last 454 blocks (about 1 minute; blocks 73255432-73255885, 10,000 requested): 7.962201655008505597 WETH and 21394.851215 USDG traded; price down 0.01%.', RH_LOGS, LOG_WINDOWS] }),
+    entry({ chain: 'ethereum', tool: 'evm.lending-market', capability: 'lending-market', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-aave-usdc-market-20260926T171735170Z.json`, `${T}research-ethereum-compound-usdc-market-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.lending-market'], gaps: ['ethereum-aave-usdc-market: Aave V3 USDC: 2403038285.56061 supplied, 2205598832.829682 borrowed (91.78% utilised); supply APR 3.54%, borrow APR 4.29%. LTV 75%, liquidation at 78%. ethereum-compound-usdc-market: Compound V3 USDC: 379655981.967075 supplied, 343418662.736062 borrowed (90.45% utilised); supply APR 4.69%, borrow APR 5.63%.', 'Aave V3 and Compound V3 markets at the listed deployments only; revenue is an estimate at current rates.'] }),
+    entry({ chain: 'base', tool: 'evm.lending-market', capability: 'lending-market', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-aave-weth-market-20260926T171735170Z.json`, `${T}research-base-compound-usdc-market-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.lending-market'], gaps: ['base-aave-weth-market: Aave V3 WETH: 84125.978809916734504109 supplied, 68609.473394287337145562 borrowed (81.55% utilised); supply APR 1.41%, borrow APR 2.03%. LTV 80%, liquidation at 83%. base-compound-usdc-market: Compound V3 USDC: 9709239.666269 supplied, 8784075.918221 borrowed (90.47% utilised); supply APR 4.74%, borrow APR 5.69%.', 'Aave V3 and Compound V3 markets at the listed deployments only.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.vault-4626', capability: 'vault-4626', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-sfrxeth-vault-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.vault-4626'], gaps: ['ethereum-sfrxeth-vault: Staked Frax Ether holds 43711.546385561952147571 frxETH; one share redeems for 1.170291102200858795 frxETH.', 'No APY: share-price history is not read.'] }),
+    entry({ chain: 'base', tool: 'evm.vault-4626', capability: 'vault-4626', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-metamorpho-vault-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.vault-4626'], gaps: ['base-metamorpho-vault: Moonwell Flagship USDC holds 4099305.303914 USDC; one share redeems for 1.089196 USDC. MetaMorpho vault: fee 15%, timelock 4d, 2 markets in the supply queue.', 'No APY: share-price history is not read.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.liquid-staking', capability: 'liquid-staking', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-liquid-staking-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.liquid-staking'], gaps: ['ethereum-liquid-staking: 8 of 8 liquid staking tokens read. Largest by implied backing: stETH (9796809.291711220022952518 ETH).', 'Contract exchange rates, not market prices; withdrawal queues are not read.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.governor', capability: 'governor', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-uniswap-governor-20260926T171735170Z.json`, `${T}research-ethereum-ens-governor-20260926T171735170Z.json`, `${T}research-ethereum-compound-governor-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.governor'], gaps: ['ethereum-uniswap-governor: Uniswap Governor Bravo (Compound Bravo): voting period 40320 blocks, quorum 40000000 UNI (4% of supply), timelock delay 2d. Latest proposal 102 is pending. ethereum-ens-governor: ENS Governor (OpenZeppelin): voting period 45818 blocks, quorum 1000000 ENS (1% of supply), timelock delay 2d. No proposal created in the last 6,000 blocks (about 20 hours; blocks 26057066-26063065, 10,000 request…', 'OpenZeppelin Governor and GovernorBravo only; Snapshot and multisig votes are not read. Proposal descriptions are untrusted text.'] }),
+    entry({ chain: 'base', tool: 'evm.governor', capability: 'governor', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-seamless-governor-20260926T171831279Z.json`, `${T}research-base-seamless-governor-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.governor'], gaps: ['base-seamless-governor: SeamGovernorShort (OpenZeppelin): voting period 259200 seconds, quorum 1500000 SEAM (1.5% of supply), timelock delay 2d. Latest proposal 8415861394…698468 is executed. base-seamless-governor: SeamGovernorShort (OpenZeppelin): voting period 259200 seconds, quorum 1500000 SEAM (1.5% of supply), timelock delay 2d. Latest proposal 8415861394…698468 is unknown.', 'OpenZeppelin Governor and GovernorBravo only.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.issuer-controls', capability: 'issuer-controls', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-usdc-issuer-20260926T171735170Z.json`, `${T}research-ethereum-usdt-issuer-20260926T171735170Z.json`, `${T}research-ethereum-buidl-issuer-20260926T171735170Z.json`, `${T}research-ethereum-usdy-issuer-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.issuer-controls'], gaps: ['ethereum-usdc-issuer: USDC uses a FiatToken-style issuer model (master minter, pauser, blacklister). Pausable. Accounts can be blacklisted or frozen. Upgradeable proxy. Supply 50259143169.477236. ethereum-usdt-issuer: USDT uses a Tether-style blacklist. Pausable. Accounts can be blacklisted or frozen. Supply 88304342264.551152.', 'Reserves, attestations and legal terms are off-chain and not read.'] }),
+    entry({ chain: 'base', tool: 'evm.issuer-controls', capability: 'issuer-controls', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-eurc-issuer-20260926T171831279Z.json`, `${T}research-base-eurc-issuer-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.issuer-controls'], gaps: ['base-eurc-issuer: EURC uses a FiatToken-style issuer model (master minter, pauser, blacklister). Pausable. Accounts can be blacklisted or frozen. Upgradeable proxy. Supply 51071704.940706. base-eurc-issuer: EURC uses a FiatToken-style issuer model (master minter, pauser, blacklister). Pausable. Accounts can be blacklisted or frozen. Supply 51071704.940706.', 'Reserves and attestations are off-chain and not read.'] }),
+    entry({ chain: 'robinhood', tool: 'evm.issuer-controls', capability: 'issuer-controls', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-robinhood-usdg-issuer-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.issuer-controls'], gaps: ['robinhood-usdg-issuer: USDG uses AccessControl roles. Pausable. Accounts can be blacklisted or frozen. Upgradeable proxy. Supply 693667590.776494.', 'Reserves and attestations are off-chain and not read.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.bridge-activity', capability: 'bridge-activity', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-base-bridge-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.bridge-activity'], gaps: ['ethereum-base-bridge: 102 standard-bridge events on Ethereum in the last 2,786 blocks (about 9 hours; blocks 26060280-26063065, 4,000 requested): 79 toward Base and 23 from Base; ETH 2280.632543855511208887 in and 0.0014107 out (net +2280.631133155511208887 to Base).', 'The Base canonical standard bridge only; third-party bridges and direct OptimismPortal deposits are not included.'] }),
+    entry({ chain: 'base', tool: 'evm.bridge-activity', capability: 'bridge-activity', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-base-bridge-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.bridge-activity'], gaps: ['base-base-bridge: 35 standard-bridge events on Base in the last 3,995 blocks (about 2 hours; blocks 51822873-51826867): 33 toward Base and 2 from Base; ETH 2.804203390261807882 in and 0 out (net +2.804203390261807882 to Base).', 'The Base canonical standard bridge only.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.chain-pulse', capability: 'chain-pulse', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-chain-pulse-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.chain-pulse'], gaps: ['ethereum-chain-pulse: 159.3 transactions per block (13.28 per second) at 12.000 s blocks, 41.45% gas used, base fee 0.139 gwei (+41.52% vs about an hour ago), 4.00 blobs per block.', 'Four blocks sampled; averages are indicative, not a time series.'] }),
+    entry({ chain: 'base', tool: 'evm.chain-pulse', capability: 'chain-pulse', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-chain-pulse-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.chain-pulse'], gaps: ['base-chain-pulse: 160.7 transactions per block (80.33 per second) at 2.000 s blocks, 8.84% gas used, base fee 0.005 gwei (+0% vs about an hour ago).', 'Four blocks sampled; no blob data on L2.'] }),
+    entry({ chain: 'robinhood', tool: 'evm.chain-pulse', capability: 'chain-pulse', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-robinhood-chain-pulse-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.chain-pulse'], gaps: ['robinhood-chain-pulse: 6.3 transactions per block (62.98 per second) at 0.101 s blocks, 0.00% gas used, base fee 0.027 gwei (-2.18% vs about an hour ago).', 'Four blocks sampled; Arbitrum Orbit gas accounting differs from Ethereum.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.nft-collection', capability: 'nft-collection', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-pudgy-collection-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.nft-collection'], gaps: ['ethereum-pudgy-collection: PudgyPenguins (ERC-721, supply 8888): 20 transfers including 0 mints and 0 burns to 14 receivers in the last 3,998 blocks (about 13 hours; blocks 26059069-26063066).', 'Transfers are not sales; metadata URIs are listed, not fetched.', LOG_WINDOWS] }),
+    entry({ chain: 'base', tool: 'evm.nft-collection', capability: 'nft-collection', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-basenames-collection-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.nft-collection'], gaps: ['base-basenames-collection: Basenames (ERC-721): 61 transfers including 51 mints and 0 burns to 53 receivers in the last 1,995 blocks (about 67 minutes; blocks 51824875-51826869).', 'Transfers are not sales; metadata URIs are listed, not fetched.', LOG_WINDOWS] }),
+    entry({ chain: 'solana', tool: 'solana.pumpfun-curve', capability: 'pumpfun-curve', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-solana-pumpfun-active-curve-20260926T171735170Z.json`, `${T}research-solana-pumpfun-graduated-curve-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['solana.pumpfun-curve'], gaps: ['solana-pumpfun-active-curve: Active pump.fun curve: 0% to graduation, 0.001837222 SOL deposited, curve price 0.000000027962 SOL per token (implied market cap 27.96 SOL); 79.3% of supply still in the curve. solana-pumpfun-graduated-curve: Graduated pump.fun token: the bonding curve is complete and trading has moved to an AMM pool.', 'Post-graduation AMM trading is not read; the curve layout is the documented pump.fun account layout.'] }),
+    entry({ chain: 'solana', tool: 'solana.stake-pools', capability: 'stake-pools', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-solana-stake-pools-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['solana.stake-pools'], gaps: ['solana-stake-pools: 6 stake pools read holding 20338015.78838722 SOL. Largest: JitoSOL (10383239.185751042 SOL, 1.303265685007767798 SOL per token). Highest last-epoch yield: jupSOL at about 3.57% a year.', 'Six listed pools only; yield is the last epoch\'s pool-token appreciation, annualised.'] }),
+    entry({ chain: 'solana', tool: 'solana.token-safety', capability: 'token-safety', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-solana-usdc-token-safety-20260926T171735170Z.json`, `${T}research-solana-pyusd-token-safety-20260926T171735170Z.json`], protocolVersions: RESEARCH_PROTOCOLS['solana.token-safety'], gaps: ['solana-usdc-token-safety: USDC (spl-token) keeps 3 issuer powers: minting, freezing, metadata changes. Supply 8421916144.143579. solana-pyusd-token-safety: PYUSD (token-2022) keeps 7 issuer powers: minting, freezing, MintCloseAuthority, PermanentDelegate, TransferFeeConfig, ConfidentialTransferMint, TransferHook. Supply 753709393.579081.', 'Program upgrade authorities and holder distribution are not assessed; a flag is a capability, not evidence of use.'] }),
+    // R01 (26 Sep 2026): rollup L1 controls, price oracle dependencies and token vesting, live-verified through runTool with a workflow permit on the keyless production
+    // endpoints (packages/tools/scripts/verify-rollup-controls.ts, verify-oracle-dependency.ts and verify-token-vesting.ts).
+    entry({ chain: 'ethereum', tool: 'evm.rollup-controls', capability: 'rollup-controls', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-base-rollup-20260926T194225276Z.json`, `${T}research-ethereum-robinhood-rollup-20260926T194225276Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.rollup-controls'], gaps: ['base-rollup: Base (OP Stack) L1 contracts: upgrades by a 2-of-2 Safe (0x7bB4…595c) without a timelock; nothing paused; withdrawal proofs mature after 1d; respected game type 621 (non-standard). robinhood-rollup: Robinhood Chain (Arbitrum Orbit) L1 contracts: upgrades by a 7-of-8 Safe (0x7Ae5…84b6) or a timelock with a 7d delay (0xE1e8…F465); nothing paused; assertions confirm after about 6d 8h; 2 whitelisted validators.', 'Contract addresses are the documented L1 sets (docs.base.org, docs.robinhood.com); every value is a live read. Safe signer identities are not established on-chain. Robinhood executor-role candidates come from the RoleGranted history read on 26 Sep 2026 and are re-checked with hasRole; no event history is read, so past upgrades are not listed.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.oracle-dependency', capability: 'oracle-dependency', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-weth-oracle-20260926T195702604Z.json`, `${T}research-ethereum-wsteth-oracle-20260926T195702604Z.json`, `${T}research-ethereum-eth-usd-feed-20260926T195702604Z.json`, `${T}research-ethereum-no-oracle-20260926T195702604Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.oracle-dependency'], gaps: ['ethereum-weth-oracle: WETH is priced by a Chainlink ETH / USD proxy, 24 updates in about 24 hours, owned by a 4-of-9 Safe. ethereum-wsteth-oracle: an Aave CAPO adapter over that feed, cap parameters governed through the Aave ACL manager. ethereum-eth-usd-feed: OCR2 aggregator, phase 7. ethereum-no-oracle: no Aave V3 source and no Feed Registry feed.', 'A heartbeat is never assumed; freshness is the observed age and cadence the AnswerUpdated history in about 7,200 blocks. Discovery covers the Aave V3 oracle and the Feed Registry (WETH as ETH) only.'] }),
+    entry({ chain: 'base', tool: 'evm.oracle-dependency', capability: 'oracle-dependency', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-weth-oracle-20260926T195702604Z.json`, `${T}research-base-usdc-usd-feed-20260926T195725093Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.oracle-dependency'], gaps: ['base-weth-oracle: the Aave source is a Chainlink ETH / USD proxy, 18 updates in about 6 hours, owned by a 4-of-9 Safe. base-usdc-usd-feed: USDC / USD updated about 7 hours earlier, 0 updates in about 6 hours, maximum answer 1.05.', 'mainnet.base.org serves at most 2,000 blocks per eth_getLogs and a run has 5 log pages, so cadence covers about 10,000 blocks (about 6 hours); a 24-hour-heartbeat feed can show zero updates in that window. There is no Feed Registry on Base.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.token-vesting', capability: 'token-vesting', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-ethereum-sablier-tranched-stream-20260926T202120126Z.json`, `${T}research-ethereum-sablier-cliff-stream-20260926T202120126Z.json`, `${T}research-ethereum-vesting-wallet-20260926T202120126Z.json`, `${T}research-ethereum-not-vesting-20260926T202120126Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.token-vesting'], gaps: ['ethereum-sablier-tranched-stream: Sablier v1.2 tranched stream #1399, 21 tranches, 64.29% vested, cancelable by the sender. ethereum-sablier-cliff-stream: v4.0 stream #1672, the whole deposit unlocks at a cliff on 2029-06-25. ethereum-vesting-wallet: OpenZeppelin VestingWallet (native ETH), fully vested. ethereum-not-vesting: the USDC proxy is not a recognised vesting contract.', 'Sablier is recognised only at the documented v1.2, v2.0, v3.0 and v4.0 Lockup addresses. Linear unlock points are computed from on-chain parameters and shown only when they reproduce streamedAmountOf; a VestingWallet total is released plus its current balance.'] }),
+    entry({ chain: 'base', tool: 'evm.token-vesting', capability: 'token-vesting', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-base-sablier-linear-cliff-stream-20260926T202120126Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.token-vesting'], gaps: ['base-sablier-linear-cliff-stream: Sablier v3.0 linear stream #7402, a third unlocked at a cliff on 2026-09-01, 35.69% vested, streaming to 2028-09-01, not cancelable.', 'No VestingWallet was verified live on Base; recognition is by bytecode and the same on both chains. Dynamic streams: the 30-day unlock check counts segments ending in the window.'] }),
+    entry({ chain: 'solana', tool: 'solana.validator-health', capability: 'validator-health', source: 'public-rpc', status: 'live-verified', credential: null, evidence: [`${T}research-solana-large-validator-health-20260926T221338748Z.json`, `${T}research-solana-mid-validator-health-20260926T221338748Z.json`, `${T}research-solana-delinquent-validator-health-20260926T221338748Z.json`, `${T}research-solana-commission-100-validator-health-20260926T221338748Z.json`, `${T}research-solana-not-a-vote-account-20260926T221338748Z.json`], protocolVersions: RESEARCH_PROTOCOLS['solana.validator-health'], gaps: ['large: current, 17.86M SOL, 7% commission, 0% skip over 9,700 leader slots, credits stable. mid: current, 181k SOL, 5%. delinquent: 181k SOL, last vote 16,473 slots behind the tip. commission-100: 5.63M SOL at 100% commission. not-a-vote-account: the USDC mint (Token program owner).', 'Every read is filtered to one validator, so there is no cluster-wide ranking; the RPC reports at most five epochs of credits and no commission history; identity and withdrawer are keys, not people.'] }),
+    // R02 (26 Sep 2026): Alchemy-backed tools, licensed for AGENTEX reports in writing. Verified through runTool with a workflow permit and the keyed
+    // Alchemy transport, the endpoint production routes traces and wide log ranges to (verify-transaction-flows.ts, verify-admin-history.ts).
+    entry({ chain: 'ethereum', tool: 'evm.transaction-flows', capability: 'transaction-flows', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}research-ethereum-sandwich-victim-flows-20260926T220912610Z.json`, `${T}research-ethereum-sandwich-back-run-flows-20260926T220912610Z.json`, `${T}research-ethereum-factory-creation-flows-20260926T220912610Z.json`, `${T}research-ethereum-unknown-hash-flows-20260926T220912610Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.transaction-flows'], gaps: ['ethereum-sandwich-victim-flows: ETH wrapped into WETH inside the transaction (an internal native transfer) and four ERC-20 legs. ethereum-factory-creation-flows: a Uniswap V2 pair created inside the transaction (nonce 0 to 1). 140-166 CU per run.', 'Native movements are net balance changes from a prestate-diff trace, which only the keyed Alchemy endpoint serves; without it they are unknown, never absent. Token movements are standard Transfer events.'] }),
+    entry({ chain: 'base', tool: 'evm.transaction-flows', capability: 'transaction-flows', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}research-base-recent-flows-20260926T220912610Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.transaction-flows'], gaps: ['base-recent-flows: sender, recipient and OP Stack fee-vault changes from the trace.', 'OP Stack fee vaults are labelled; L1 data fees are part of the fee.'] }),
+    entry({ chain: 'robinhood', tool: 'evm.transaction-flows', capability: 'transaction-flows', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}research-robinhood-recent-flows-20260926T220912610Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.transaction-flows'], gaps: ['robinhood-recent-flows: a WETH unwrap paid to the sender through contract execution (an internal native transfer) and three token legs.', 'Arbitrum fee accounts are not listed by the trace, so observed native changes need not sum to zero.'] }),
+    entry({ chain: 'ethereum', tool: 'evm.admin-history', capability: 'admin-history', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}research-ethereum-usdc-admin-history-20260926T220449692Z.json`, `${T}research-ethereum-aave-acl-manager-history-20260926T220449692Z.json`, `${T}research-ethereum-weth-admin-history-20260926T220449692Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.admin-history'], gaps: ['ethereum-usdc-admin-history: 3 upgrades and 8 admin changes since genesis (legacy ZeppelinOS slots); the implementation and owner() match the latest events. ethereum-aave-acl-manager-history: 54 role grants and 31 revocations across 7 roles, a RISK_ADMIN grant within 30 days. ethereum-weth-admin-history: no standard admin events.', 'Only the standard OpenZeppelin and EIP-1967 events are read, from the contract, its proxy admin and beacon; custom upgrade paths and events are not. Full-history log reads need the Alchemy endpoint; ranges are bisected within five pages.'] }),
+    entry({ chain: 'base', tool: 'evm.admin-history', capability: 'admin-history', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}research-base-usdc-admin-history-20260926T220449692Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.admin-history'], gaps: ['base-usdc-admin-history: 1 upgrade (2023-12-14) and 5 admin changes since genesis; the implementation matches the latest event.', 'Only standard events; mainnet.base.org serves at most 2,000 blocks per eth_getLogs, so full history needs the Alchemy endpoint.'] }),
+    entry({ chain: 'robinhood', tool: 'evm.admin-history', capability: 'admin-history', source: 'alchemy', status: 'live-verified', credential: 'ALCHEMY_API_KEY', evidence: [`${T}research-robinhood-usdg-admin-history-20260926T220449692Z.json`], protocolVersions: RESEARCH_PROTOCOLS['evm.admin-history'], gaps: ['robinhood-usdg-admin-history: 1 upgrade and 9 role grants since genesis (block 57); the implementation matches the latest event.', 'Only standard events; custom role hashes are shown by hash.'] }),
+    entry({ chain: 'solana-devnet', tool: 'solana.inspect-transaction', capability: 'transaction-inspection', source: 'public-rpc', status: 'fixture-only', credential: null, evidence: ['packages/providers/evidence/provider-health-20260914T203300657Z.json'], protocolVersions: 'Devnet genesis identity and head-slot freshness only', gaps: ['Devnet is not a §5 analysis target; only identity and freshness are live-verified.'] }),
+]);
+export const SOURCE_GAPS = Object.freeze([
+    { capability: 'historical-prices', chains: ['ethereum', 'base', 'robinhood', 'solana'], neededBy: ['P01 (USD liquidity and valuation context)', 'P03 (realised and unrealised results, cost basis, win rate, CSV valuations)'], requiredProviderClass: 'historical token or pool price index', freeCandidates: 'CoinGecko/GeckoTerminal keyless OHLCV is documented for low-volume non-commercial testing; production rights and Robinhood coverage are unresolved, so it is not implemented.', agentBehaviour: 'Valuations, PnL and win rate are withheld with a stated reason; a single spot pool price is never used as a historical price.' },
+    { capability: 'token-holder-census', chains: ['ethereum', 'base', 'robinhood', 'solana'], neededBy: ['P01 (holder distribution)'], requiredProviderClass: 'complete token-holder index with snapshot and exclusions', freeCandidates: 'Helius DAS pages (Solana, cursor pages), supplied-account balances, and (Token Researcher 0.3.0) balances of recent transfer recipients from one Alchemy transfer page.', agentBehaviour: 'Only returned pages, supplied accounts or recent recipients are shown, labelled recent-transfer-recipients-not-a-holder-list; no distribution, ranking or concentration metric from partial data.' },
+    { capability: 'factory-creator-and-related-launches', chains: ['ethereum', 'base', 'robinhood'], neededBy: ['P02 (creating factory, related deployments)'], requiredProviderClass: 'transaction trace or deployment index', freeCandidates: 'On-chain archive search finds the deployment block and a direct deployer; creation receipts confirm top-level creations; factory/CREATE2 creators need traces.', agentBehaviour: 'P02 names a factory only from an event naming the contract in its creation transaction (a heuristic) and otherwise reports "created by a contract". Related launches cover top-level creations by the same sender only; factory-made launches stay unavailable.' },
+    { capability: 'dex-pool-discovery', chains: ['ethereum', 'base', 'robinhood', 'solana'], neededBy: ['P01 (all pools and aggregate liquidity)'], requiredProviderClass: 'DEX pool index', freeCandidates: 'DEX Screener addressed pools (internal evaluation), supplied pool reads, and (Token Researcher 0.3.0) on-chain factory lookups on listed Uniswap-compatible venues.', agentBehaviour: 'Only supplied pools or pools found on the listed venues and quote tokens are shown, with observed balances; absence on those venues is not proof of no liquidity and total liquidity is not claimed.' },
+    { capability: 'trade-classification', chains: ['ethereum', 'base', 'robinhood', 'solana'], neededBy: ['P03 (purchases and sales separated from transfers)'], requiredProviderClass: 'swap/trade decoder over indexed history', freeCandidates: 'Offline router decoding of supplied payloads only.', agentBehaviour: 'Transfers are listed as transfers; none is labelled a buy or sale.' },
+]);
+export class CoverageError extends Error {
+    category;
+    code = 'COVERAGE_DENIED';
+    constructor(category, message) {
+        super(message);
+        this.category = category;
+        this.name = 'CoverageError';
+    }
+}
+const credentialPresent = (name, env) => /^[A-Za-z0-9_-]{16,128}$/.test(env[name] ?? '');
+/** Entries for a chain, each with whether it can run now on this server. */
+export function coverageFor(chain, options = {}) {
+    const env = options.env ?? process.env;
+    return CHAIN_COVERAGE.filter((item) => item.chain === chain).map((item) => ({ ...item, available: item.status !== 'disabled' && (item.status !== 'fixture-only' || options.allowFixtureOnly === true) && (item.credential === null || credentialPresent(item.credential, env)) }));
+}
+/** Throws `CoverageError` unless `tool` (exactly `id@version`) is covered on `chain` and runnable with the server's credentials. */
+export function assertToolCoverage(chain, tool, options = {}) {
+    const env = options.env ?? process.env;
+    const [id, version] = tool.split('@');
+    if (!version || !/^\d+\.\d+\.\d+$/.test(version))
+        throw new CoverageError('version-required', `${tool} must name an exact tool version (id@x.y.z) for coverage.`);
+    const disabled = CHAIN_COVERAGE.find((item) => item.chain === chain && item.status === 'disabled');
+    if (disabled)
+        throw new CoverageError('chain-disabled', `${chain} analysis is disabled: ${disabled.gaps[0]}`);
+    const found = CHAIN_COVERAGE.find((item) => item.chain === chain && item.tool === id);
+    if (!found)
+        throw new CoverageError('chain-not-covered', `${id} has no recorded coverage on ${chain}.`);
+    if (found.version !== version)
+        throw new CoverageError('version-not-covered', `${id}@${version} is not the verified version on ${chain} (verified: ${found.version}).`);
+    if (found.status === 'fixture-only' && options.allowFixtureOnly !== true)
+        throw new CoverageError('capability-unverified', `${id} on ${chain} has fixture coverage only and stays unavailable until live verification.`);
+    if (found.credential && !credentialPresent(found.credential, env))
+        throw new CoverageError('credential-required', `${id} on ${chain} needs a server-side provider credential that is not configured.`);
+    return found;
+}
+/** Per-chain decisions for a listing or quote. A listing that declares no deterministic tools cannot claim any chain. */
+export function listingCoverage(declaredChains, tools, options = {}) {
+    return declaredChains.map((chain) => {
+        if (!tools.length)
+            return { chain, covered: false, denials: [{ tool: null, category: 'no-tools-declared', message: 'No deterministic tools are declared, so no chain coverage can be claimed.' }] };
+        const denials = tools.flatMap((tool) => { try {
+            assertToolCoverage(chain, tool, options);
+            return [];
+        }
+        catch (error) {
+            if (error instanceof CoverageError)
+                return [{ tool, category: error.category, message: error.message }];
+            throw error;
+        } });
+        return { chain, covered: denials.length === 0, denials };
+    });
+}
+/** For listings and quotes: the declared chains on which every declared tool is covered. Unknown chains and empty tool lists yield none. */
+export function coveredChains(declaredChains, tools, options = {}) {
+    return listingCoverage(declaredChains, tools, options).filter((item) => item.covered).map((item) => item.chain);
+}
+/** Public summary without evidence paths, hosts or keys: safe for capabilities and listing endpoints. */
+export function coverageSummary(options = {}) {
+    return CoverageChainSchema.options.map((chain) => ({ chain, entries: coverageFor(chain, options).map(({ tool, version, capability, source, status, available, protocolVersions, gaps }) => ({ tool, version, capability, source, status, available, protocolVersions, gaps })) }));
+}