Vouchsafe is hackathon-stage software deployed on Coston2. It has not received a third-party production audit and must not be used to custody real value.

Please report vulnerabilities privately through this repository's GitHub security-advisory interface. Include the affected component, impact, reproduction steps and any suggested mitigation. Do not include private keys or live credentials in a report.

The repository's adversarial review and automated tests cover:

• chain- and verifier-bound signatures and ECDSA recovery;
• registered-source binding between FDC data and issuer policy;
• commitment consistency between confidential computation and FDC reserves;
• stale TEE timestamps, XRPL proof freshness and replay protection;
• unbonding-aware recorder/endorser slashing and double-slash prevention;
• private-field non-disclosure across direct and native FCC action responses;
• access control and one-way locking of verifier overrides.

The review record is in plans/reports/security-correctness-review-260713-2250-vouchsafe-contracts.md.

• Fraud adjudication reveals the committed figures; it is not yet a zero-knowledge inequality proof.
• The deployed Web2Json path does not enforce a maximum data age; the XRPL Payment path does.
• Administrative roles are controlled by a testnet EOA rather than production multisig/timelock governance.
• The FCC adapter is registered, but a continuously hosted promoted machine is not part of this deployment.