Tidemark

Quickstart

Build the CLI, review the demo backdoor, then review a program that is live on devnet.

No install

Open the web app and press Load demo: backdoored vault. The review runs in your browser.

With the command line

  1. 1
    Get the CLI
    Download it from the v0.1.0 release and put tidemark on your PATH, or build it with Rust:
    shell
    cargo install --git https://github.com/IIITManjeet/Tidemark tidemark-cli
  2. 2
    Get the demo files
    shell
    git clone https://github.com/IIITManjeet/Tidemark.git
    cd Tidemark
  3. 3
    Review the demo upgrade
    shell
    tidemark diff fixtures/demo_vault_v1.so fixtures/demo_vault_v2.so
    You should see overall risk: HIGH, the attacker key 9xQeWv…, the removed has_one and signer checks on withdraw, and the new sweep handler.
  4. 4
    Review a live program
    shell
    tidemark fetch 5pHTptDKd3fS6vnx82rHxSH1xURrYacDr17uJhnc7aX3 -o deployed.so
    tidemark diff fixtures/demo_vault_v1.so deployed.so
  5. 5
    Gate a pipeline
    tidemark diff exits with code 2 when risk reaches --fail-on (high by default). See CI gate.

Next

Developers should add the VS Code extension; teams that sign upgrades should read about the attestation ledger.