Argus 1.0.0-alpha.38

Installs over alpha.11–alpha.37 — same signing key, wallet data preserved.

The biggest build so far: eighteen pull requests, each reviewed by CodeRabbit and several by an independent reviewer, with every finding fixed before merge. Almost none of it has been run on a phone yet; see the warning at the end.

Duckpools, the rest of the protocol

• Borrow and repay: borrow against ERG from the token pools, repay in full or in part, and see your loans with what they owe (interest compounded the way the contract does), what the collateral counts for, health against the pool's liquidation line and the forced-liquidation height.
• Borrow ERG from the ERG pool against SigUSD, SigRSV, RSN or rsADA, priced through the same Spectrum pools the contract reads. The quote keeps half a percent back from the liquidation line so a price tick before the fill cannot reject the order.
• Collateral top-up and withdrawal on a live loan, a direct spend you sign yourself.
• Health alerts: loans are re-read every half hour with the app open and hourly in the background; a notification arrives once per level (below 130% of the line, below 115%, liquidatable) and once when the forced liquidation is within three days.

New protocols

• Token issuance and burning from a Tokens tool apart from Send: EIP-4 tokens and NFTs, and burning kept deliberately separate from ordinary sends.
• Babel fees (EIP-31): pay the miner fee in a token when a babel box for it is on chain.
• Rosen bridge, natively: send ERG and bridged tokens to Cardano, Bitcoin, Ethereum and the other chains Rosen serves, with fees read from the bridge's own boxes and destination addresses checked per chain.
• Spectrum liquidity: add and remove liquidity without a bot, and create a new pool in two transactions.
• SigmaFi bonds: lend against open requests, post a request of your own with ERG or token collateral, repay before maturity, and take the collateral of a matured bond you lent against.
• dApp browser: open any Ergo dApp with Argus standing in for Nautilus through the EIP-12 connector. A site sees nothing until you connect it, https only, and every signature goes through the same confirm sheet as an ErgoPay request, with the page broadcasting.

Mixer, after the red-team review

Every finding of the mixer review is addressed except the exported key living as a Dart string (low priority) and encrypting the mix records on the phone (stated in the dialog for now). Among the fixes: a lock no longer cancels background mixing; a joined round is adopted only when the wallet proves it owns the box; a move whose transaction never confirms is rolled back after thirty minutes and rebuilt; a pending mix's funding box is set aside from every other spend; the fee and token boxes are chosen so a hostile box on the operator's scripts cannot stall a remix or price an entry absurdly; notifications name no amounts.

From your feedback

Contacts work as send targets again, your own wallets (stealth included) are offered as destinations, ERG and several tokens go in one send, biometrics are offered right after the PIN, a new wallet shows at once, wallets can be reordered, and the asset tiles hold still.

⚠️ Nothing above is device-tested

Every new flow has unit tests on the arithmetic and the transactions it builds, and two review passes, but none of the loans, bridge transfers, bonds, liquidity moves or dApp signatures has been run on a phone yet, and no mix has completed a withdrawal on one. Try each with an amount you can afford to lose, and report what you see: the cheapest real checks are a small SigUSD-backed loan, a tiny SigmaFi request you then withdraw, a deposit into an existing Spectrum pool, and a signature from sigmafi.app through the browser.