Judge door

Open the verifier and press Try the published test receipt. Your browser checks the payer's P-256 signature, the merchant's acknowledgement and the settlement server's confirmation on the page, with nothing sent anywhere. That receipt is a labelled test vector made from public test keys, not a real payment.

The loka_vault program verifies the phone's signature on chain and holds the sandbox tokens. These facts come from a devnet read; the line under them says when it was read and how old it was when this page loaded.

Every transaction that touches the program, newest first, then each new one as it lands. Your browser reads devnet directly, so the feed keeps working even if our server is down.

Or have your own phone ring when a payment settles: /call.

Or fund a payer phone with sandbox money, when the server runs it: /send.

Each claim marked Live links to its evidence and says when that evidence was read; the verifier is Available to run yourself, and the rest say Not checked or Building. Then the vault's tokens against everything it owes, read at one slot, and what this team committed since hacking started.

What the program checks before it moves money, what the protocol does not promise, and who holds which key.

TestFlight build 1 has been in Apple beta review since Sat Oct 10 12:05 AM ET, and the public link appears here once Apple approves. The team runs build 5, with the scanner fix, through internal TestFlight.

Status as of 2026-10-10.

The repository is public. Each line below is the result GitHub reports for that workflow's job on main's latest commit, read by this site's server, so your browser loads nothing from GitHub. Select one to open it on GitHub.