Skip to content

precept v0.1.0 (Guardian-audited)

Choose a tag to compare

@carrion256 carrion256 released this 22 Oct 10:27
· 52 commits to main since this release
v0.1.0

First Templar release of the Blend v2 fork, at the commit covered by the Guardian audit.

What's in it

  • Source: tag v0.1.0 → b72a1d1. That is the Guardian remediation-review commit b385dfb (#11) plus one commit adding pool-oracle-adapter/. The pool, backstop and pool-factory sources are identical to b385dfb.
  • Guardian review (report, final 2026-10-22; main review at 7a09b0e3d228, remediation review at b385dfb5cf18): 5 Low and 10 Informational findings, confidence ranking 5/5. L-01..L-04 and I-01..I-10 are resolved, in #13/#15 plus the L-02 follow-up in #16. L-05 (adapter timestamp flooring defeats the pool's future-dated price check) is acknowledged, not resolved.
  • Oracle adapter: the SEP-40 pool oracle adapter as reviewed in the remediation round, imported unchanged from precept-internal@324fc5b. That commit makes lastprice refuse a parent price ahead of ledger time. Guardian's recommended root-cause fix is in the parent proxy oracle and is not part of this release. The adapter source is MIT-licensed; the Blend-derived contracts remain AGPL-3.0.

Artifacts

File Bytes SHA-256
pool.wasm 55057 042d41030d396f3607b8750f3cb0c2225a503a6775636d046ca9b4abaa4daab2
backstop.wasm 22701 6bd13007c020b617c43c718c2ad3d2d13605d4d42fa8f739da2293f8a4e293a0
pool_factory.wasm 3135 d1cc41cd4903ceb17a0729565f541bdb784bfd637f9aac3177e2ede805c2c25b
pool_oracle_adapter.wasm 13620 575e8d7c7c248b630169a5078c39e83b324baf97c15d009e2e5aa4b49616504b

Reproduce

  • pool, backstop, pool_factory: make build at the tag with Rust 1.81.0 (rust-toolchain.toml) and Stellar CLI 22.6.0 → target/wasm32-unknown-unknown/optimized/.
  • pool_oracle_adapter: cd pool-oracle-adapter && just optimize with Rust 1.89.0 + wasm32v1-none and Stellar CLI 26.0.0 → target/wasm32v1-none/release-soroban-checked/pool_oracle_adapter.optimized.wasm. The adapter CI gate pins this hash.

Two independent local builds (a worktree build and a clean git archive v0.1.0 export) produced byte-identical artifacts.