Trust
Every line below is enforced by the contract rather than promised by us, and every one of them has a test that proves it.
We can never take your tokens.There is no sweep, no rescue and no withdraw function anywhere in the vault. The only paths out pay the rightful party.
We can never block a withdrawal.Creation of new Veils can be paused. Claims cannot. There is a test that pauses the contract and then successfully claims.
Terms cannot change after you agree.The bond token and the break split are pinned into each Veil when it is proposed, so no later configuration change can touch a live agreement.
Deposits are measured on arrival.A token that takes a cut on transfer is credited for what actually landed, never for what was requested.
An answer to an open call is never trapped.While your application is pending you can withdraw it in full, at any moment, whatever the maker does or fails to do. Closing a call does not touch it and neither does the deadline.
Accepting one answer rejects none of the others.It fills one place. Every other applicant keeps their tokens, their bond and their right to walk away with both, and a call asking for several partners keeps taking answers until the last place goes.
Read this before committing anything.
The contracts are not audited by a third party. Do not commit capital you cannot afford to lose until they are.
A Veil is a costly signal, not collateral. At small sizes, walking away is cheap. It filters out theatre; it does not make betrayal impossible, and we are not going to pretend otherwise.
Answering an open call locks real money with no guarantee of being picked. You can always withdraw, so nothing is at risk of being taken, but your capital sits still while you wait. Apply to calls you actually want.
What has been checked
131 contract tests, covering every state, both routes in, the token, the buybacks and every owner limit.
Every attack we could think of, written as a test against the real Uniswap V2 code.
51 backend checks, including replay and tamper attempts.
The full launch rehearsed on a local chain and on the Robinhood testnet.
Two internal reviews, which found and fixed two critical bugs before launch.
The bug we found before you did
In review we found that bonds were refunded using a mutable setting rather than the value recorded on the Veil itself. Pointing that setting at another token mid-term would have made a claim revert, which would have locked a user's holdings for good.
That broke the second guarantee on this page, so it was fixed before anything was published: the bond token and break split are now written into each Veil at proposal and never read from config again. Three tests now attempt exactly that attack and fail to land it.