Deployment status
What is currently running, what the hosted service does, and which operational safeguards still require independent review.
The hosted environment
Elpis runs a Cloudflare-hosted application with a D1 data store and an Arc mainnet execution integration.
| Part | Current approach |
|---|---|
| Website and APIs | Next.js on Cloudflare Workers. |
| Application records | Cloudflare D1; organization-scoped queries. |
| Network integration | Arc mainnet (chain 5042) for supported payment operations. |
| Custody | Hosted self-custody expects customer-controlled wallet authorization. |
| Verification | Deterministic conditions; signature/registry witness adapters where configured. |
| Public evaluation | Playground, without chain signing or funds. |
See Health for the current deployment's operational status. Health checks do not establish contract safety or the correctness of financial assumptions.
Running the service
Releases should pass typechecking, security regression tests, contract checks, and an isolated Cloudflare version preview. Production promotion should be explicit and reversible at the Worker-version level.
npm ci --include=dev
npm run icons:check
npm run typecheck
npm test
npm run contracts:compile
npx opennextjs-cloudflare buildProduction secrets, signing configuration and databases must not be copied into public build logs. The Worker rollback path does not reverse already executed chain transactions.
Independent assessment
Internal tests and an automated build are not an external smart-contract audit. No independent third-party smart-contract review has been completed, and financial functionality must not be described as audited.
A review should include the vault, evaluator, treasury authorization boundaries, webhook and signature handling, concurrency, ledger integrity, and incident recovery. See Security for public audit status and trust boundaries. Internal audit preparation documents are not a substitute for a published independent report.