What “verified” means here
PriceGuard uses deterministic fixed-point arithmetic and independent validator web requests. It does not ask a model to guess whether a price looks plausible.
Leader algorithm
- Fetch fixed endpoints for Coinbase Exchange BTC-USD, Bitstamp BTC/USD, and Gemini BTC/USD.
- Parse each response with source-specific code; users cannot supply URLs or prompts.
- Reject malformed, non-positive, future-dated, or older-than-120-second observations.
- Convert decimal strings to integer cents without binary floating-point.
- Exclude a source more than 100 bps from the preliminary three-source median and require at least 2 accepted venues for a market refresh.
- Return canonical JSON containing the accepted observations and every derived field.
Validator algorithm
- Require the exact leader schema, symbol
BTC/USD, and policyBTCUSD-1. - Recompute every leader-derived field from the raw source records.
- Independently fetch and normalize the same fixed venues.
- Reject if the leader and validator medians differ by more than 50 bps.
- For covenant evaluation, require all 3 sources, HIGH confidence, no circuit breaker, and the covenant’s own spread cap.
What an attestation does
A satisfied evaluation records an immutable evidence certificate and moves the covenant to TRIGGERED. PriceGuard does not hold money, send funds, enforce a legal agreement, or execute an external business action. Integrators decide how to use the evidence.
Bradbury deployment status
PriceGuard V2 is active at 0x7B939483E69ada6d2ca37acd3684182Ed141F35F on Bradbury chain 4221. Deployment transaction: 0x0bec3ce3653dab8e1135bf2a2b547816905c132d78dabfc1f998f898c3f6bf69. The deployed source SHA-256 is bdd0fac72f9659d76e03c04c60d55f1be4a46127da691fa9265cc77bd10b125a from commit 645e49a73e32cc0fdb12fda459d0fc7fa3b4d8f9. The supplied first-market-refresh reference is 0x7516d2370b7067d1cfbde1ee8ec21ca0294e85f3902ac2c0b9c702f5aba6b313; its identifier type, finality, execution result, resulting market sequence, and matching state read are not preserved in repository evidence. The production frontend is price-oracle-delta.vercel.app.
Trust assumptions
The exchanges may correlate, share infrastructure, become unavailable, or publish abnormal last trades. Validators can time out or reach no majority. Bradbury is a test network. PriceGuard is non-custodial, but its full covenant create/evaluate/expire/acknowledge lifecycle remains unverified.