v0.1.0 — Cover that pays itself out

What's new

Parametric cover for Solana protocols, live on devnet — when a protocol's
privileged admin access is used in a way it never declared, the pool pays the
protocol's treasury automatically. No claim, no assessor, no human in the loop.

Measured on devnet

	Budget	Result
Compromise shapes recognised, of ten reproduced	≥ 9	10
False incidents, over 819 real historical privileged transactions	0	0
Offending transaction → money in the treasury	≤ 180s	~20s
Confirmation → payout initiated (p95)	≤ 30s	12s
Fees to carry one incident	≤ $1.00	$0.008

The control matters as much as the count: a maintenance operation the protocol
had declared in advance is left alone. Without that, "ten of ten" is equally the
score of a system that opens an incident on everything it sees.

Deployment

Program DsRdHv4QRYQ7teVhwuLVttktF792gvDFQdiuraQ4eF4P on Solana devnet.
Demo interface: https://mandate210.github.io/mandate/

What this release is not

• The web interface still runs on mock data.
• The capital in the pool and the policies are ours; outside underwriters cannot
  deposit yet.
• Every attestor is run by us, so quorum independence is arithmetic rather
  than factual.
• On devnet the declaration delay is 30s where the product parameter is 24h, and
  the settlement asset is our own mint. Both are fixed forever in that deployment
  and are properties of the demonstration.
• No mainnet and no external audit.