PGPriceGuard
METHODOLOGY AND LIMITATIONS

What “verified” means here

PriceGuard uses deterministic fixed-point arithmetic and independent validator web requests. It does not ask a model to guess whether a price looks plausible.

Leader algorithm

  1. Fetch fixed endpoints for Coinbase Exchange BTC-USD, Bitstamp BTC/USD, and Gemini BTC/USD.
  2. Parse each response with source-specific code; users cannot supply URLs or prompts.
  3. Reject malformed, non-positive, future-dated, or older-than-120-second observations.
  4. Convert decimal strings to integer cents without binary floating-point.
  5. Exclude a source more than 100 bps from the preliminary three-source median and require at least 2 accepted venues for a market refresh.
  6. Return canonical JSON containing the accepted observations and every derived field.

Validator algorithm

  1. Require the exact leader schema, symbol BTC/USD, and policy BTCUSD-1.
  2. Recompute every leader-derived field from the raw source records.
  3. Independently fetch and normalize the same fixed venues.
  4. Reject if the leader and validator medians differ by more than 50 bps.
  5. For covenant evaluation, require all 3 sources, HIGH confidence, no circuit breaker, and the covenant’s own spread cap.

What an attestation does

A satisfied evaluation records an immutable evidence certificate and moves the covenant to TRIGGERED. PriceGuard does not hold money, send funds, enforce a legal agreement, or execute an external business action. Integrators decide how to use the evidence.

Bradbury deployment status

PriceGuard V2 is active at 0x7B939483E69ada6d2ca37acd3684182Ed141F35F on Bradbury chain 4221. Deployment transaction: 0x0bec3ce3653dab8e1135bf2a2b547816905c132d78dabfc1f998f898c3f6bf69. The deployed source SHA-256 is bdd0fac72f9659d76e03c04c60d55f1be4a46127da691fa9265cc77bd10b125a from commit 645e49a73e32cc0fdb12fda459d0fc7fa3b4d8f9. The supplied first-market-refresh reference is 0x7516d2370b7067d1cfbde1ee8ec21ca0294e85f3902ac2c0b9c702f5aba6b313; its identifier type, finality, execution result, resulting market sequence, and matching state read are not preserved in repository evidence. The production frontend is price-oracle-delta.vercel.app.

Trust assumptions

The exchanges may correlate, share infrastructure, become unavailable, or publish abnormal last trades. Validators can time out or reach no majority. Bradbury is a test network. PriceGuard is non-custodial, but its full covenant create/evaluate/expire/acknowledge lifecycle remains unverified.