# Vaultfire — KYA Trust Infrastructure for AI Agents

> **Know Your Agent.** On-chain identity, reputation, and accountability for AI agents.
> 134 contracts live on Base, Avalanche, Arbitrum, Polygon. 36 active bonds with real escrow.

This is the canonical Vaultfire monorepo, mirrored to GitLawb after the original GitHub org was suspended (`github.com/Ghostkey316/ghostkey-316-vaultfire-init`). Everything is here: contracts, SDKs, oracles, the live x402 backend, the codex, audits, and the genesis NFT scripts.

## Vaultfire V3 source candidate

Vaultfire V3 is public on GitLawb for source review. The immutable source
identity is the commit and tree referenced by release tag
`v3-source-2026-08-27`, not the mutable `main` branch. V2 remains the live
default. V3 is not deployed, activated, or authorized for a partner pilot.

Clone and run the dependency-light release checks:

```bash
git clone --branch v3-source-2026-08-27 --recurse-submodules gitlawb://did:key:z6MkryiNsYdFEMHv95wxzSQ1vtFXPyVQQrxXdPw3tE5HpfxV/vaultfire
cd vaultfire
./scripts/verify-v3-source.sh
```

The script requires that the release tag resolve to the checked-out commit,
prints the exact commit and tree, requires a clean checkout, and runs the bound
V2, Base, specification, ledger, operations, partner-package, and Solana
source-policy checks. It performs no RPC, wallet, signing, deployment,
publication, or activation action.

**Start here:** [V3 public source status, exact capabilities, compilation
sizes, test results, review scope, V2 compatibility matrices, and remaining
gates](./V3_STATUS.md).

## Live Contracts

**[CONTRACTS.md](./CONTRACTS.md)** — full index of all 134 contracts across Base, Avalanche, Arbitrum, and Polygon, with explorer links.

## Live On-Chain (Base mainnet)

| Asset                         | Address                                      |
| ----------------------------- | -------------------------------------------- |
| Genesis NFT (1/1)             | `0xdC5fE0da17864608eDC3c24A675E6C4C24a9832C` |
| Founders Edition (5 max)      | `0x1bcD9B7Cad06D2BbC7FdedC46B32eFd1988e28cE` |
| Deployer (ghostkey.base.eth)  | `0xfA15Ee28939B222B0448261A22156070f0A7813C` |
| x402 payTo (all 71 endpoints) | `0xfA15Ee28939B222B0448261A22156070f0A7813C` |

> **Compromised wallet `0xA054f831B562e729F8D268291EBde1B2EDcFb84F` was rotated 2026-04-21.** It is referenced only in verification scripts and rotation-history docs. All active signing uses the new ghostkey.base.eth wallet.

## Live Endpoints

- Site — [theloopbreaker.com](https://theloopbreaker.com)
- SKILL.md — [theloopbreaker.com/SKILL.md](https://theloopbreaker.com/SKILL.md)
- x402 discovery — [theloopbreaker.com/.well-known/x402.json](https://theloopbreaker.com/.well-known/x402.json)
- Free trust score — `/api/agent/trust?address=<addr>&chain=base`
- Paid trust score — `/api/x402/trust/street-cred?address=<addr>` ($0.01 USDC)
- Paid agent profile — `/api/x402/trust/agent-status?address=<addr>` ($0.01 USDC)
- agentic.market validator score — 19/19 "Implementation Looks Correct"
- Mini app (Base) — [vaultfire-mini.vercel.app](https://vaultfire-mini.vercel.app)

## Repository Layout

```
vaultfire/
├── repos/
│   ├── theloopbreaker-site/        # Live x402 backend — 76 endpoints (71 paid + 5 free)
│   ├── vaultfire-genesis-nft/      # Genesis + Founders NFT contracts (Foundry)
│   ├── vaultfire-keyprotocol/      # v2 Agent Protection Layer — 6 contracts, 276 tests
│   ├── vaultfire-contracts-repo/   # Core contracts (BIP Vault, StreetCred SBT)
│   ├── vaultfire-base-repo/        # Base chain deployment
│   ├── vaultfire-avalanche-repo/   # Avalanche deployment
│   ├── vaultfire-arbitrum-repo/    # Arbitrum deployment
│   ├── vaultfire-polygon-repo/     # Polygon deployment
│   ├── vaultfire-solana/           # Solana programs
│   ├── vaultfire-x402/             # x402 multi-chain payment layer
│   ├── vaultfire-x402-guard/       # @vaultfire/x402-guard SDK
│   ├── vaultfire-agentkit/         # Coinbase AgentKit integration
│   ├── vaultfire-langchain/        # LangChain / LangGraph integration
│   ├── vaultfire-crewai/           # CrewAI integration
│   ├── vaultfire-a2a/              # A2A protocol trust extension
│   ├── vaultfire-sdk/              # @vaultfire/agent-sdk
│   ├── vaultfire-vns/              # Vaultfire Name Service
│   ├── vaultfire-xmtp/             # XMTP messaging integration
│   ├── vaultfire-explorer/         # On-chain explorer UI
│   ├── vaultfire-mini-app/         # Base mini-app (Farcaster Frame)
│   ├── vaultfire-enterprise/       # Enterprise tier
│   ├── vaultfire-ecosystem/        # Ecosystem map
│   ├── vaultfire-whitepaper/       # Whitepaper (Markdown + PDF)
│   ├── vaultfire-docs/             # Documentation site
│   ├── vaultfire-codex/            # Full codex (8 batches, 23,725 lines)
│   ├── hermes-vaultfire/           # Hermes deployment harness
│   ├── awesome-ai-safety/          # AI safety registry submission
│   ├── ethskills/                  # ERC-8004 reference + Vaultfire example
│   └── ...                         # 35 component repos total
├── contracts-root/                 # Standalone .sol files (audit copies)
└── reference-docs/                 # Audit reports + reference PDFs + codex bundle
```

## Quickstart for Agents

```bash
# Free read
curl "https://theloopbreaker.com/api/agent/trust?address=0xfA15Ee28939B222B0448261A22156070f0A7813C&chain=base"

# Paid read (x402)
npx awal x402 pay https://theloopbreaker.com/api/x402/trust/street-cred?address=0xfA15Ee28939B222B0448261A22156070f0A7813C
```

## Audits

- V3.3-R3 Coinbase-Grade Audit — `reference-docs/VAULTFIRE-V3.3-R3-COINBASE-GRADE-AUDIT.md`
- V3.2 Final — `reference-docs/VAULTFIRE-AUDIT-REPORT-V3.2-FINAL.md`
- V3.3-R2 Re-audit — `reference-docs/VAULTFIRE-REAUDIT-REPORT-V3.3-R2-FINAL.md`

## Standards Implemented

- ERC-8004 (AI Agent Identity)
- ERC-5192 (Soulbound StreetCred)
- ERC-4626 (BIP Vault adapter)
- x402 v2 (Coinbase payment protocol — Bazaar-validated)
- A2A trust extension
- Coinbase AgentKit

## Contributing

Vaultfire is open source (MIT) and built to be contributed to — by humans and agents alike.

**Quick start:**

```bash
git clone --recurse-submodules gitlawb://did:key:z6MkryiNsYdFEMHv95wxzSQ1vtFXPyVQQrxXdPw3tE5HpfxV/vaultfire
cd vaultfire
git checkout -b your-handle/short-description
```

Then make your changes, push, and open a PR. Full guide: [CONTRIBUTING.md](./CONTRIBUTING.md).

**No GitHub account needed.** GitLawb uses [DID-based identity](https://w3c-ccg.github.io/did-method-key/) — you sign commits with a keypair, not a username. New contributors are welcome and reviewed on merit, not trust score.

**First time contributing?** Look for issues tagged `good first issue` or `help wanted` on the [issues tab](https://gitlawb.com/node/repos/z6MkryiNsYdFEMHv95wxzSQ1vtFXPyVQQrxXdPw3tE5HpfxV/vaultfire). Or open an issue describing what you'd like to work on.

**Security findings:** Please disclose privately. See [CONTRIBUTING.md §9](./CONTRIBUTING.md#9-security).

## License

MIT.

## Continuity

GitHub `Ghostkey316/ghostkey-316-vaultfire-init` (suspended) → mirrored here on GitLawb. DID-controlled, no platform can take it down.
