Payment demo

Attack lab · Evidence first

Which component stops the attack?

Inspect recorded evidence and reproducible test coverage. This page never broadcasts transactions or fabricates a fresh PASS result.

NOT LIVE VERIFIED

Protected ENS policy edit

Enforcement: ENSv2 resolver

Scoped permission tests require approved operator execution. No rejection transaction is claimed.

NOT LIVE VERIFIED

ENS privilege escalation

Enforcement: ENSv2 access control

A setter grant must not be treated as authority to grant broader roles.

LOCAL TESTED

Impersonated agent

Enforcement: Mandate signature verification

BadIntentSig is exercised by contract tests; not a new live experiment.

RECORDED ONCHAIN REVERT

Changed payout

Enforcement: Mandate registry binding

RegistryMismatch. Inspect the recorded receipt independently.

Inspect recorded transaction
RECORDED ONCHAIN REVERT

Changed amount

Enforcement: Mandate EIP-712 signature

BadIntentSig. This is historical evidence, not a run triggered here.

Inspect recorded transaction
RECORDED API REJECTION

Old epoch replay

Enforcement: API preflight and Mandate epoch

The two live replay attempts stopped at API StaleEpoch. Local contract tests cover onchain rejection.

RECORDED SANDBOX REJECTION

Stale authentication

Enforcement: World approval service

A stale authentication attempt sent no extra payment. Sandbox identities are test identities.

READ-ONLY CHECK

ENS policy drift

Enforcement: Read-only passport

Open the passport to inspect current disagreement. This page does not establish a relayer ENS enforcement gate.

Inspect current ENS policy · Contract test source