poq.attestation/v1
Proof Report

VireoSwap v2 audit for Ashlar Security

PR-2026-0612-ASHLAR-0098
Issued2026-06-12T14:03:00Z
IssuerSapien
Schemapoq.attestation/v1
01Scope
Project
VireoSwap v2 audit for Ashlar Security
Datapoints covered
14
Reviewed
14 / 14 · full review
Manifest
sha256:3abda28d07b8d7ee3abda28d07b8d7ee3abda28d07b8d7ee3abda28d07b8d7ee
02Result
Quality Rating
78/ 100

On the customer's rubric, evm-audit-v3.

Aggregate over 14 datapoints.

Consensus Strength
90%

How strongly the quorums agreed.

Confidence in the rating, not a property of
the work.

LABELVerified · customer band
03Scorecard
DimensionWeightQualityConsensus
Validity2.08694%
Severity1.57290%
Exploitability1.07082%
Reproducibilityadvisory6471%
04Distribution

Quality Rating · count of datapoints

90-100
4
80-89
3
70-79
4
60-69
1
50-59
1
40-49
1

Consensus Strength · count of datapoints

90-100
10
80-89
3
60-69
1
PoQ Record sha256:5e7a498a241cd04c5e7a498a241cd04c5e7a498a241cd04c5e7a498a241cd04c · datapoint-level detail via Portal
Delivered with this reportPoQ Record · machine readable · excerpt
schema: poq.record/v1
report_id: PR-2026-0612-ASHLAR-0098
results_hash: sha256:5e7a498a…241cd04c
project: VireoSwap v2 audit for Ashlar Security · rubric: evm-audit-v3
datapoints: 14 · shown: 1 of 14

- id: F-11
  canonical_hash: sha256:b3f1e6a9…2c045d7e
  quality_rating: 46
  consensus_strength: 68
  routing: {settled: round_2, escalated: true}
  quorum:
    round_1:
      - {id: v-ag-01, type: agentic, model: claude-opus-4-8, weight: 1}
      - {id: v-hu-07, type: human, credential: Certified Smart Contract Auditor, weight: 1}
    round_2:
      - {id: v-hu-12, type: human, credential: Senior Security Auditor, weight: 2}
      - {id: v-hu-15, type: human, credential: Senior Security Auditor, weight: 2}
      - {id: v-hu-18, type: human, credential: Senior Security Auditor, weight: 2}
  dimensions:
    validity: {quality: 52, strength: 75, weight: 2.0}
    severity: {quality: 41, strength: 63, weight: 1.5}
    exploitability: {quality: 40, strength: 61, weight: 1.0}
    reproducibility: {quality: 55, strength: 70, weight: advisory}
05Quorum Routing
ROUND 1 · QUORUM 2 · ESCALATION TARGET 70%
1 AGENTIC · WEIGHT 1claude-opus-4-8prompt sha256:4c1060768bf96d4b4c1060768bf96d4b4c1060768bf96d4b4c1060768bf96d4b
1 HUMAN · WEIGHT 1Certified Smart Contract Auditorinstructions sha256:037a9bccc248dcbc037a9bccc248dcbc037a9bccc248dcbc037a9bccc248dcbc
where agreement < 70%
ROUND 2 · ESCALATION
3 HUMAN · WEIGHT 2Senior Security Auditorinstructions sha256:5c14b887215515a75c14b887215515a75c14b887215515a75c14b887215515a7
Settled
12 / 14 at round 1 · 2 escalated
06Configuration
Rubric
evm-audit-v3
Config
poq.toml sha256:41f9185be86f5bd141f9185be86f5bd141f9185be86f5bd141f9185be86f5bd1
07Pool & Provenance
Validator Pool
40 · start 34, +8 / −2
Participated
18 human + 1 agentic
Credentials
authority-signed
Independence
blind review · 0 COI declared
08Chain of Custody
Config locked
2026-06-12
09:02:00Z
Manifest confirmed
2026-06-12
09:05:00Z
Review window
09:05:00Z →
13:55:00Z
Issued
2026-06-12
14:03:00Z
09Attestation
Root
sha256:785e226d8dc36bc7369fed7f7de61ba7a01663beb2e13301e2c7558b2875c37b · over config, manifest, results
Score leaves
merkle sha256:572419963bef2bbe572419963bef2bbe572419963bef2bbe572419963bef2bbe · validator signed
Signing key
poq-signing-key · Ed25519, published
Registry
validator keys + credentials · onchain
Verify
poq verify proof-report.html · offline, or via Portal
10What This Asserts

This Proof Report certifies that a Validator Pool was assembled in accordance with the customer's Assurance Policy, and that a quorum drawn from it, one per datapoint, evaluated the referenced datapoints (in whole or by sample, as stated) against the customer's rubric, reaching the Quality Rating and Consensus Strength shown. It covers only the datapoints enumerated here; datapoints added after issuance are not covered. It is a record of how the work was validated: by whom, over what, against what criteria, and with what level of agreement.

It is not an assertion that the work is objectively correct, safe, complete, or fit for any particular purpose. The Quality Rating is relative to the rubric the customer authored. Sapien sources, manages, prices, and invoices none of the underlying labour and makes no representation as to it.

11Signed Payload · JWS · Ed25519
-----BEGIN POQ SIGNED PAYLOAD-----
eyJhbGciOiJFZERTQSIsImN0eSI6ImFwcGxpY2F0aW9uL3BvcS1hdHRlc3RhdGlvbitqc29uIiwia2lkIjoicG9xLXNpZ25pbmcta2V5In0.eyJhc3NlcnRpb24iOiJUaGlzIFByb29mIFJlcG9ydCBjZXJ0aWZpZXMgdGhhdCBhIFZhbGlkYXRvciBQb29sIHdhcyBhc3NlbWJsZWQgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBjdXN0b21lcidzIEFzc3VyYW5jZSBQb2xpY3ksIGFuZCB0aGF0IGEgcXVvcnVtIGRyYXduIGZyb20gaXQsIG9uZSBwZXIgZGF0YXBvaW50LCBldmFsdWF0ZWQgdGhlIHJlZmVyZW5jZWQgZGF0YXBvaW50cyAoaW4gd2hvbGUgb3IgYnkgc2FtcGxlLCBhcyBzdGF0ZWQpIGFnYWluc3QgdGhlIGN1c3RvbWVyJ3MgcnVicmljLCByZWFjaGluZyB0aGUgUXVhbGl0eSBSYXRpbmcgYW5kIENvbnNlbnN1cyBTdHJlbmd0aCBzaG93bi4gSXQgY292ZXJzIG9ubHkgdGhlIGRhdGFwb2ludHMgZW51bWVyYXRlZCBoZXJlOyBkYXRhcG9pbnRzIGFkZGVkIGFmdGVyIGlzc3VhbmNlIGFyZSBub3QgY292ZXJlZC4gSXQgaXMgYSByZWNvcmQgb2YgaG93IHRoZSB3b3JrIHdhcyB2YWxpZGF0ZWQ6IGJ5IHdob20sIG92ZXIgd2hhdCwgYWdhaW5zdCB3aGF0IGNyaXRlcmlhLCBhbmQgd2l0aCB3aGF0IGxldmVsIG9mIGFncmVlbWVudC5cblxuSXQgaXMgbm90IGFuIGFzc2VydGlvbiB0aGF0IHRoZSB3b3JrIGlzIG9iamVjdGl2ZWx5IGNvcnJlY3QsIHNhZmUsIGNvbXBsZXRlLCBvciBmaXQgZm9yIGFueSBwYXJ0aWN1bGFyIHB1cnBvc2UuIFRoZSBRdWFsaXR5IFJhdGluZyBpcyByZWxhdGl2ZSB0byB0aGUgcnVicmljIHRoZSBjdXN0b21lciBhdXRob3JlZC4gU2FwaWVuIHNvdXJjZXMsIG1hbmFnZXMsIHByaWNlcywgYW5kIGludm9pY2VzIG5vbmUgb2YgdGhlIHVuZGVybHlpbmcgbGFib3VyIGFuZCBtYWtlcyBubyByZXByZXNlbnRhdGlvbiBhcyB0byBpdC4iLCJhdHRlc3RhdGlvbiI6eyJyZWdpc3RyeSI6InZhbGlkYXRvciBrZXlzICsgY3JlZGVudGlhbHMgwrcgb25jaGFpbiIsInJvb3QiOiJzaGEyNTY6Nzg1ZTIyNmQ4ZGMzNmJjNzM2OWZlZDdmN2RlNjFiYTdhMDE2NjNiZWIyZTEzMzAxZTJjNzU1OGIyODc1YzM3YiIsInNjb3JlX3Jvb3QiOiJzaGEyNTY6NTcyNDE5OTYzYmVmMmJiZTU3MjQxOTk2M2JlZjJiYmU1NzI0MTk5NjNiZWYyYmJlNTcyNDE5OTYzYmVmMmJiZSIsInNpZ25pbmdfa2V5X2lkIjoicG9xLXNpZ25pbmcta2V5In0sImNvbmZpZ3VyYXRpb24iOnsiY29uZmlnX2hhc2giOiJzaGEyNTY6NDFmOTE4NWJlODZmNWJkMTQxZjkxODViZTg2ZjViZDE0MWY5MTg1YmU4NmY1YmQxNDFmOTE4NWJlODZmNWJkMSIsInJ1YnJpYyI6ImV2bS1hdWRpdC12MyJ9LCJjdXN0b2R5Ijp7ImNvbmZpZ19sb2NrZWQiOiIyMDI2LTA2LTEyVDA5OjAyOjAwWiIsImlzc3VlZCI6IjIwMjYtMDYtMTJUMTQ6MDM6MDBaIiwibWFuaWZlc3RfY29uZmlybWVkIjoiMjAyNi0wNi0xMlQwOTowNTowMFoiLCJyZXZpZXdfY2xvc2VkIjoiMjAyNi0wNi0xMlQxMzo1NTowMFoiLCJyZXZpZXdfb3BlbmVkIjoiMjAyNi0wNi0xMlQwOTowNTowMFoifSwiZGlzdHJpYnV0aW9uIjp7ImNvbnNlbnN1c19zdHJlbmd0aCI6eyI2MC02OSI6MSwiODAtODkiOjMsIjkwLTEwMCI6MTB9LCJxdWFsaXR5X3JhdGluZyI6eyI0MC00OSI6MSwiNTAtNTkiOjEsIjYwLTY5IjoxLCI3MC03OSI6NCwiODAtODkiOjMsIjkwLTEwMCI6NH19LCJpc3N1ZWRfYXQiOiIyMDI2LTA2LTEyVDE0OjAzOjAwWiIsImlzc3VlciI6IlNhcGllbiIsInBvb2wiOnsiYWRkZWQiOjgsImJsaW5kX3JldmlldyI6dHJ1ZSwiY29pX2RlY2xhcmVkIjowLCJjcmVkZW50aWFscyI6ImF1dGhvcml0eS1zaWduZWQiLCJwYXJ0aWNpcGF0ZWRfYWdlbnRpYyI6MSwicGFydGljaXBhdGVkX2h1bWFuIjoxOCwicmVtb3ZlZCI6Miwic2l6ZSI6NDAsInNpemVfYXRfc3RhcnQiOjM0fSwicG9xX3JlY29yZCI6eyJleGNlcnB0Ijp7ImRhdGFwb2ludCI6eyJjYW5vbmljYWxfaGFzaCI6InNoYTI1NjpiM2YxZTZhOTJjMDQ1ZDdlYjNmMWU2YTkyYzA0NWQ3ZWIzZjFlNmE5MmMwNDVkN2ViM2YxZTZhOTJjMDQ1ZDdlIiwiY29uc2Vuc3VzX3N0cmVuZ3RoIjo2OCwiZGltZW5zaW9ucyI6W3siZGltZW5zaW9uIjoidmFsaWRpdHkiLCJxdWFsaXR5Ijo1Miwic3RyZW5ndGgiOjc1LCJ3ZWlnaHQiOiIyLjAifSx7ImRpbWVuc2lvbiI6InNldmVyaXR5IiwicXVhbGl0eSI6NDEsInN0cmVuZ3RoIjo2Mywid2VpZ2h0IjoiMS41In0seyJkaW1lbnNpb24iOiJleHBsb2l0YWJpbGl0eSIsInF1YWxpdHkiOjQwLCJzdHJlbmd0aCI6NjEsIndlaWdodCI6IjEuMCJ9LHsiZGltZW5zaW9uIjoicmVwcm9kdWNpYmlsaXR5IiwicXVhbGl0eSI6NTUsInN0cmVuZ3RoIjo3MCwid2VpZ2h0IjoiYWR2aXNvcnkifV0sImVzY2FsYXRlZCI6dHJ1ZSwiaWQiOiJGLTExIiwicXVhbGl0eV9yYXRpbmciOjQ2LCJxdW9ydW0iOlt7InJvdW5kIjoxLCJ2b3RlcyI6W3siaWQiOiJ2LWFnLTAxIiwibW9kZWwiOiJjbGF1ZGUtb3B1cy00LTgiLCJ0eXBlIjoiYWdlbnRpYyIsIndlaWdodCI6IjEifSx7ImNyZWRlbnRpYWwiOiJDZXJ0aWZpZWQgU21hcnQgQ29udHJhY3QgQXVkaXRvciIsImlkIjoidi1odS0wNyIsInR5cGUiOiJodW1hbiIsIndlaWdodCI6IjEifV19LHsicm91bmQiOjIsInZvdGVzIjpbeyJjcmVkZW50aWFsIjoiU2VuaW9yIFNlY3VyaXR5IEF1ZGl0b3IiLCJpZCI6InYtaHUtMTIiLCJ0eXBlIjoiaHVtYW4iLCJ3ZWlnaHQiOiIyIn0seyJjcmVkZW50aWFsIjoiU2VuaW9yIFNlY3VyaXR5IEF1ZGl0b3IiLCJpZCI6InYtaHUtMTUiLCJ0eXBlIjoiaHVtYW4iLCJ3ZWlnaHQiOiIyIn0seyJjcmVkZW50aWFsIjoiU2VuaW9yIFNlY3VyaXR5IEF1ZGl0b3IiLCJpZCI6InYtaHUtMTgiLCJ0eXBlIjoiaHVtYW4iLCJ3ZWlnaHQiOiIyIn1dfV0sInNldHRsZWRfcm91bmQiOjJ9LCJzY2hlbWEiOiJwb3EucmVjb3JkL3YxIiwic2hvd24iOjF9LCJyZXN1bHRzX2hhc2giOiJzaGEyNTY6NWU3YTQ5OGEyNDFjZDA0YzVlN2E0OThhMjQxY2QwNGM1ZTdhNDk4YTI0MWNkMDRjNWU3YTQ5OGEyNDFjZDA0YyJ9LCJxdW9ydW1fcm91dGluZyI6eyJleGVjdXRpb24iOnsiZXNjYWxhdGVkIjoyLCJzZXR0bGVkX3JvdW5kXzEiOjEyfSwicm91bmRzIjpbeyJlc2NhbGF0aW9uX3RhcmdldCI6NzAsInF1b3J1bSI6Miwicm91bmQiOjEsInNsb3RzIjpbeyJjb3VudCI6MSwibW9kZWwiOiJjbGF1ZGUtb3B1cy00LTgiLCJwcm9tcHRfaGFzaCI6InNoYTI1Njo0YzEwNjA3NjhiZjk2ZDRiNGMxMDYwNzY4YmY5NmQ0YjRjMTA2MDc2OGJmOTZkNGI0YzEwNjA3NjhiZjk2ZDRiIiwidHlwZSI6ImFnZW50aWMiLCJ2b3RlX3dlaWdodCI6IjEifSx7ImNvdW50IjoxLCJjcmVkZW50aWFsIjoiQ2VydGlmaWVkIFNtYXJ0IENvbnRyYWN0IEF1ZGl0b3IiLCJpbnN0cnVjdGlvbnNfaGFzaCI6InNoYTI1NjowMzdhOWJjY2MyNDhkY2JjMDM3YTliY2NjMjQ4ZGNiYzAzN2E5YmNjYzI0OGRjYmMwMzdhOWJjY2MyNDhkY2JjIiwidHlwZSI6Imh1bWFuIiwidm90ZV93ZWlnaHQiOiIxIn1dfSx7InJvdW5kIjoyLCJzbG90cyI6W3siY291bnQiOjMsImNyZWRlbnRpYWwiOiJTZW5pb3IgU2VjdXJpdHkgQXVkaXRvciIsImluc3RydWN0aW9uc19oYXNoIjoic2hhMjU2OjVjMTRiODg3MjE1NTE1YTc1YzE0Yjg4NzIxNTUxNWE3NWMxNGI4ODcyMTU1MTVhNzVjMTRiODg3MjE1NTE1YTciLCJ0eXBlIjoiaHVtYW4iLCJ2b3RlX3dlaWdodCI6IjIifV19XX0sInJlcG9ydF9pZCI6IlBSLTIwMjYtMDYxMi1BU0hMQVItMDA5OCIsInJlc3VsdCI6eyJjb25zZW5zdXNfc3RyZW5ndGgiOjkwLCJsYWJlbCI6eyJzb3VyY2UiOiJjdXN0b21lci1iYW5kIiwidmFsdWUiOiJWZXJpZmllZCJ9LCJxdWFsaXR5X3JhdGluZyI6Nzh9LCJzY2hlbWEiOiJwb3EuYXR0ZXN0YXRpb24vdjEiLCJzY29wZSI6eyJkYXRhcG9pbnRzX2NvdmVyZWQiOjE0LCJtYW5pZmVzdF9oYXNoIjoic2hhMjU2OjNhYmRhMjhkMDdiOGQ3ZWUzYWJkYTI4ZDA3YjhkN2VlM2FiZGEyOGQwN2I4ZDdlZTNhYmRhMjhkMDdiOGQ3ZWUiLCJwcm9qZWN0IjoiVmlyZW9Td2FwIHYyIGF1ZGl0IGZvciBBc2hsYXIgU2VjdXJpdHkiLCJyZXZpZXdlZCI6MTR9LCJzY29yZWNhcmQiOlt7ImNvbnNlbnN1c19zdHJlbmd0aCI6OTQsImRpbWVuc2lvbiI6IlZhbGlkaXR5IiwicXVhbGl0eV9yYXRpbmciOjg2LCJ3ZWlnaHQiOiIyLjAifSx7ImNvbnNlbnN1c19zdHJlbmd0aCI6OTAsImRpbWVuc2lvbiI6IlNldmVyaXR5IiwicXVhbGl0eV9yYXRpbmciOjcyLCJ3ZWlnaHQiOiIxLjUifSx7ImNvbnNlbnN1c19zdHJlbmd0aCI6ODIsImRpbWVuc2lvbiI6IkV4cGxvaXRhYmlsaXR5IiwicXVhbGl0eV9yYXRpbmciOjcwLCJ3ZWlnaHQiOiIxLjAifSx7ImNvbnNlbnN1c19zdHJlbmd0aCI6NzEsImRpbWVuc2lvbiI6IlJlcHJvZHVjaWJpbGl0eSIsInF1YWxpdHlfcmF0aW5nIjo2NCwid2VpZ2h0IjoiYWR2aXNvcnkifV19.RKetDigsgl66VY2qBq4nxoP78GjknkcPo6YP7Icc353FmsJYPWXmJChnK7izXJWU85eirReLQKC7mSR7NtGTDw
-----END POQ SIGNED PAYLOAD-----