Security review

SEAL is available for demonstration only. Ethereum and Base production deposits are not approved. The account checkpoint protocol requires independent review of the exact circuits, prover, verification keys, contracts and frontend before production use. Automated tests are evidence for specific behavior, not an independent audit.

The production-readiness review records the current internal audit plan, remediations, validation results and remaining release blockers.

Release requirements

• Qualify and approve all four proof artifacts together. The current development artifacts have zero production pins; production deployment remains blocked.
• Review checkpoint initialization, owner binding, replay rejection, atomic financial transitions, durable account recovery and reorganization handling.
• Review public and private margin execution against the supported Aave and swap deployments, including solvency, liquidation, fees and callbacks.
• Verify production authority addresses, signer independence, registered assets, immutable verifier/runtime identities and service configuration.
• Complete browser, fork, real-proof and security tests against the exact release build. Sepolia mock markets do not establish live-market economic safety.

The checkpoint proves continuity of covered private actions. It does not prove discovery of every incoming note, current valuations, or post-quantum security. BN254 PLONK, ECDSA and X25519 remain quantum-vulnerable. No encrypted account state is stored onchain. See account state and recovery and security and privacy.