Web app

Review two builds or verify a ledger in the browser. It is a static site with no server.

Review

On Try it, drop the current and the new .so, or load the demo vault. You get the overall risk, each finding with its evidence, the code hunks and the verdict hash.

Ledger

Enter an RPC, the ledger program and a registry. The page then:

reads every account at finalized commitment,
checks links, addresses, reviewers and quorum with the same code as the CLI,
with a second RPC, shows VERIFIED only if both agree on the head and every entry.

Who can upgrade?

Enter an RPC, one or more program ids and, optionally, Squads multisig addresses. For each program the page reads the loader accounts at finalized commitment and shows:

who controls upgrades: immutable, single key, multisig, governance or program-controlled,
the upgrade authority and the slot of the last deploy,
for a listed Squads v4 multisig whose vault is the authority, the threshold, voters and timelock.

A program that cannot be read shows its error in its own row and the others still load.

Host your own

shell

bash scripts/build-web.sh          # writes web/out/
python -m http.server -d web/out
BASE_PATH=/Tidemark bash scripts/build-web.sh   # for a sub-path such as GitHub Pages

Built with Next.js, TypeScript and Tailwind. Colours, radii and breakpoints are theme tokens in web/app/globals.css.

npm package

CI gate