01 / THE SAFETY DESK
Read. Decide. Verify.
Sign in with an Ethereum-compatible wallet. Read native ETH balance and transaction count from Base Mainnet. Recent history and repeated counterparties require an indexed activity provider and are labeled as sampled, not lifetime totals.
In Safety Desk, enter a standard ERC-20 token contract and a spender address to read the current allowance(owner, spender) directly from Base Mainnet. The optional discovery tool searches only a limited recent block window; absence of findings does not establish a safe wallet.
Revoke: VERRIFT prepares approve(spender, 0) for the exact token pair you selected. Your wallet must approve the actual Base Mainnet transaction and pays any required gas. This can interrupt dapp functionality. Only a confirmed successful receipt together with a fresh zero allowance can produce a verified revoke record.
02 / COMMUNITY UTILITY
A real $VIBES balance. A daily habit.
The Profile page reads a wallet's current $VIBES balance using the configured onchain Base Mainnet token contract. Holding tokens is not required to use VERRIFT. A holder can earn an additional five VERRIFT Points on a daily check-in after a successful live token-balance read.
Daily check-in awards ten base VERRIFT Points, at most once per UTC calendar day. Streaks continue only with a check-in on the next UTC date. These points are nontransferable, offchain engagement indicators: they are not $VIBES tokens, a financial reward, or an official Vibestarter partnership benefit. No token transfer or staking is necessary.
03 / PUBLIC PROOF
Anyone can inspect a verified action.
Open the independent proof verifier. Supply a Base Mainnet transaction hash, wallet owner, ERC-20 token contract and spender address, or open a shared VERRIFT proof link. VERRIFT checks the transaction sender, target contract, exact revoke calldata, successful confirmed receipt and the current allowance again. No wallet connection is required.
These checks verify only the specified token/spender pair at the time checked. A permission could be granted again later. The system does not audit every authorization in a wallet and cannot certify the wallet as risk-free.
04 / PROTOCOL
The proof-of-fix sequence.
Create: Register a case with a fixed path, expected HTTP response and optional required text. Criteria cannot be silently edited between checks.
Capture: Run the check. Each observation includes the actual HTTP status or sample-service state, pass/fail assertions and timestamp.
Repair: Change the website or, for the built-in sample target, restore its actual service state.
Verify: Run again. A case is marked “verified” only after at least one recorded failed check and a later passing check against unchanged criteria.
Reward: Configure a developer's wallet, initiate a Base Sepolia test ETH payment, and verify the confirmed receipt using an independent RPC request.
05 / TARGET SAFETY
Only what you own.
Before external checks, prove domain control by publishing a TXT record at _verrift-challenge.yourdomain.com with a generated token or a token file at the website's HTTPS well-known path.
All external checks are read-only HTTPS GET requests. VERRIFT rejects IP-address targets, private network resolutions, local names, custom ports and redirects; checks are pinned to publicly resolved DNS addresses and have byte/time ceilings. It does not attack, discover vulnerabilities, or execute arbitrary scripts.
The built-in sample target is a deterministic API contract. Authenticated users can change its persisted state and record actual passing or failing checks.
06 / ASSISTED REASONING
Claude interprets. Tests decide.
The server can send bounded recent repair-case observations or a freshly read token-allowance pair to Anthropic's Messages API using a private ANTHROPIC_API_KEY. The key is never sent to the browser. Claude can outline likely causes, repair hypotheses and verification steps, but cannot mark a case fixed.
Without a configured API key, the application remains operational and the analysis action reports a clear configuration error. Live Anthropic calls incur provider charges.
07 / ONCHAIN SETTLEMENT
Base is the receipt.
Connect your wallet and authenticate with an EIP-4361 signature, switch to Base Sepolia (chain ID 84532), and send a specified quantity of test ETH directly to the developer. The server verifies the confirmed transaction's status, sender, recipient and exact value against the case reward before recording it.
Important: Test ETH has no intended monetary value. These transfers are non-custodial, direct and irreversible; there is no smart-contract escrow, jury dispute system, mainnet funding, audit certification or token sale in this MVP. VERRIFT never requests a private key.
Base network reference ↗
08 / UNDER THE HOOD
Minimal dependencies. Real operations.
A Node.js 22 HTTP service powers Supabase Web3 wallet authentication, domain proof, pinned HTTPS checks, event history, Anthropic analysis and RPC verification. The interface uses accessible HTML/CSS and small browser modules. Data persists to an atomic local JSON file for development or Supabase Postgres in production, using a server-only state record. A Vercel serverless entry is included.
Run locally:
npm run setup
npm run dev
# open http://localhost:3000
See the repository README for full deployment instructions and required secrets.
09 / REALITY CHECK
What it doesn't do.
VERRIFT does not currently perform full visual browser journeys on arbitrary websites, execute GitHub patches, provide audited escrow contracts, or autonomously diagnose every class of bug. Wallet authentication is handled through Supabase Web3 authentication. External cases check HTTP status/text only. The controlled test target is available only to authenticated wallet accounts.
Production deployment requires Supabase Auth and Postgres, a session-signing secret, and the bundled SQL schema. Visitors can read the landing page without connecting. Creating cases, changing the test target and viewing private workspace data require a verified wallet session. Live Anthropic and Base RPC calls require internet access and account/wallet setup.
10 / PROJECT THESIS
From shipping faster to fixing better.
AI-assisted development accelerates launch velocity, but the work of fixing regressions remains poorly evidenced. VERRIFT focuses on verifiable wallet actions today, and retains an evidence-driven repair workflow for site owners as an optional advanced experience.
Created for Vibeathon 02 by Jayking (paulos-ui). X: @__official__1. Built with AI development assistance; Anthropic is used for optional evidence interpretation.