ProtocolIntelligence Layer

Real-time operational view of NEXUS Finance on Arbitrum Sepolia. This page aggregates live protocol state, risk verdicts, oracle state, and collateral ratio into a single control surface. It is the primary surface for evaluating protocol state before acting.

TESTNET LIVE — ARBITRUM SEPOLIA
Auto-refreshes every 30s · Read-only · No auth required

Protocol state snapshot

Fetched directly from Arbitrum Sepolia on each request. Refreshes every 30 seconds. The panel below is the authoritative real-time view of protocol state.

LIVE SYSTEM STATUS — ARBITRUM SEPOLIA
Block
ETH/USD
Collateral
Total Debt
CR
SOV_001
SOV_003
SOV_005
Verdict
Last sync

Reading the verdict

The overall_verdict is a deterministic aggregation of three sovereignty pillars. It has three values. Each has specific operational meaning that should guide how integrations respond.

PASS
Normal Operation

All three sovereignty pillars are in acceptable state. Protocol solvency is intact. Oracle is live. Collateral ratio is within defined safety parameters. No conditions require operator attention.

Integrations may proceed with full confidence in protocol state signals.

WARN
Degraded Conditions

SOV_001 (Economic Constitution) is passing — no insolvency risk — but SOV_003 (Capital Adequacy) is failing. Typical causes: oracle stale, CR approaching minimum threshold, or testnet environment constraints.

Integrations should inspect the pillar details before acting. On testnet, WARN is the expected operating state.

FAIL
Unsafe State

SOV_001 (Economic Constitution) is failing. The protocol has breached its primary solvency invariant — collateral ratio below 100%, vault paused under distress, or a structural protocol failure.

Integrations that extend credit, accept NXUSD, or depend on protocol solvency should halt or restrict behavior immediately.

SOVEREIGNTY PILLARS

The verdict is derived from three sovereignty pillars. Each governs a distinct protocol invariant. All three are evaluated on every engine tick and exposed in the live status and audit packages.

SOV_001Economic ConstitutionHard solvency gate. Checks that the protocol-wide collateral ratio is above 100% (not insolvent), that the vault is not paused under economic duress, and that core accounting invariants hold. This is the floor condition. A SOV_001 failure is a protocol emergency — it drives overall_verdict: FAIL.
SOV_003Capital Adequacy LawCapital buffer check. Fails when CR drops below 130%, when the oracle is stale, or when protocol surplus is insufficient. Failures are classified by root cause: economic (real risk), structural (parameter or design constraint), or testnet_env (environment). Only economic failures represent genuine risk. With SOV_001 passing, SOV_003 failure drives overall_verdict: WARN.
SOV_005Risk LatticeFive-year stress simulation. The NEXUS-120 Engine runs over 5,000 market scenarios against current protocol parameters on each hourly tick. Tests include ETH price collapse, liquidity crises, and coordinated liquidation events. Results are published in AUD_001 audit packages and available via /api/receipts.
Aggregation Logic
SOV_001 FAILFAIL — overrides all other pillar states
SOV_003 FAIL · SOV_001 PASSWARN — degraded, not unsafe
SOV_001 PASS · SOV_003 PASSPASS — regardless of SOV_005 state
SOV_005Does not affect overall_verdict. Available independently in pillar data and audit packages.

Intelligence surfaces

Four specialized surfaces extend the protocol intelligence layer. Each exposes a distinct function of the system at a level of detail suited to a specific role.

Oracle & data quality

All protocol operations — on-chain and off-chain — depend on a reliable ETH/USD price. The protocol uses a two-layer price stack with automatic fallback. Understanding oracle state is required to correctly interpret any data this system produces.

Price Source Architecture
PrimaryOracleModule.getPrice() — protocol-managed oracle with a freshness window enforced by maxDelay(). Reverts if the Chainlink feed has not updated within the window.
FallbackAggregatorV3Interface.latestRoundData() directly on the Chainlink ETH/USD feed. Active when OracleModule reverts. No additional freshness enforcement applied.
Signaloracle_stale: true on all endpoints when OracleModule has reverted. Indicates fallback is active. Does not indicate the fallback price itself is unreliable.
On-chain impactAny contract function that internally calls OracleModule — including isLiquidatable() — will revert when oracle is stale. Use CR from the API instead.
DATA QUALITY STATES
NORMALOracleModule live · oracle_stale: false

Primary oracle is returning a valid price within its freshness window. All CR computations use this price. On-chain operations including isLiquidatable() will not revert. Vault status classifications are fully reliable.

Liquidation keeper execution is safe. All API data can be acted upon.

DEGRADEDChainlink fallback active · oracle_stale: true

OracleModule has reverted. The API falls back to raw Chainlink feed data. CR computations are still valid — fallback price is on-chain — but on-chain protocol operations that invoke OracleModule will revert. Vault status classifications via the API remain accurate relative to the fallback price but may not match what the contract reports.

Expected steady state on Arbitrum Sepolia testnet. API data remains useful for monitoring. Liquidation execution requires caution.

UNRELIABLENo valid price source · eth_price_usd: 0

Both OracleModule and the Chainlink fallback have failed or returned zero. CR computation is not possible. All vault statuses will reflect oracle_stale. The API returns the best available data but price and CR fields are not reliable.

Do not use CR or vault status data for any decision. Alert and halt integrations until a reliable price source is confirmed.

Testnet context & signal interpretation

This deployment is on Arbitrum Sepolia. All signals on this page are real protocol output from deployed contracts and a live engine. Some conditions are environment-driven. The table below defines what each observation means in this environment so the signals can be interpreted correctly.

Expected Conditions on Arbitrum Sepolia
oracle_stale: trueOracleModule enforces a freshness window the testnet Chainlink feed does not consistently satisfy. This is an infrastructure constraint, not a protocol fault. The API fallback is active and CR data remains valid.
overall_verdict: WARNDriven by SOV_003 oracle failure. No economic invariants are breached. This is the expected steady state on testnet and will normalize on mainnet with a live oracle feed.
SOV_003: FAILCapital Adequacy fails because the oracle is stale and surplus thresholds are set for mainnet conditions. The sov_003_fail_count breakdown in audit packages shows this as testnet_env, not economic or structural.
SOV_001: PASSEconomic Constitution is passing. No insolvency condition exists. Vault accounting is sound. Protocol solvency invariants hold.
How to Interpret WARN on Testnet

The correct interpretation of the current WARN verdict on Arbitrum Sepolia is:

Economic riskNone. SOV_001 is passing. No economic failures in sov_003_fail_count.
Structural riskLow. Single-collateral v1 design constraint is classified as structural, not economic.
EnvironmentOracle stale and low surplus — testnet conditions. These resolve on mainnet.
Action requiredNone for WARN with zero economic failures. Monitor for any SOV_001 state change.
Mainnet projectionExpected PASS with live Chainlink oracle and mainnet surplus levels.

Protocol lifecycle validation

Every lifecycle stage executed on Arbitrum Sepolia with real transactions. No simulation. Each item below was validated against deployed contracts.

Vault Creation
Collateralized vault deployment validated. VaultManager records collateral and debt per owner address.
NXUSD Mint
Overcollateralized credit issuance confirmed — 150% minimum ratio enforced at the contract level.
Repay Cycle
Debt reduction and vault management lifecycle fully verified. Burn-and-release flow operational.
Keeper Liquidation
Keeper execution at 130% collateral ratio confirmed. KEEPER_ROLE enforcement verified. 5% bonus on seized collateral.
Governance Roles
ADMIN, GUARDIAN, KEEPER roles enforced via OpenZeppelin AccessControl. Safe multisig verified as ADMIN.
Engine↔Chain Integration
ArbitrumAdapter live — NexusState populated from real chain data on every tick. SOV pillars running on live collateral ratio, oracle price, and outstanding debt.

Deployment details

On-Chain Layer
NetworkArbitrum Sepolia (Testnet)
Contracts4 core contracts deployed and verified
OracleOracleModule + Chainlink ETH/USD fallback
GovernanceAccessControl — ADMIN, GUARDIAN, KEEPER roles
MultisigSafe multisig as ADMIN — not EOA-controlled
LiquidationKeeper-gated — KEEPER_ROLE required
NEXUS-120 Engine
RuntimePython 3.12 — deterministic execution
SOV pillars3 active (SOV_001, SOV_003, SOV_005)
Tick scheduleHourly via GitHub Actions
Receipt chainAUD_001 packages — SHA-256 hash-chained
Audit logJSONL append-only — immutable per run
NotificationsTelegram alerts on verdict state change
476
Total Commits
Across 4 repositories
335
Version Tags
Deterministic versioning
9
Phases Complete
Protocol activation phases
100%
Internal Audit
Coverage complete

Protocol roadmap

Phase 1 — Complete
CORE CONTRACTS
VaultManager deployed and validated
NXUSDToken ERC-20 with role-gated mint/burn
LiquidationEngine with keeper bonus
OracleModule with Chainlink staleness check
Full lifecycle on Arbitrum Sepolia
Phase 2 — Complete
NEXUS-120 ENGINE
3 SOV pillars implemented and wired
Deterministic receipt engine
SHA-256 hash-chained audit log
5-year stress simulation complete
Telegram alert system operational
Phase 2.5 — Complete
CHAIN INTEGRATION
ArbitrumAdapter — live chain reads
SOV pillars wired to live chain data
AUD_001 Audit Package Generator live
Engine↔contracts keeper integration
Public receipts repo operational
Phase 3 — Active
FUNDRAISING & AUDIT
Pre-seed raise $500K–$750K
Arbitrum and Ethereum Foundation grants
External security audit pipeline
Institutional documentation complete
Investor deck available on request
Phase 4 — Planned
MAINNET LAUNCH
Mainnet deployment post-audit
Ecosystem integrations
Protocol liquidity bootstrapping
Multi-collateral support
Governance token design
Full public documentation
Verify protocol state independently

All contracts are public and verified on Arbiscan. All audit packages are SHA-256 hashed and immutably committed to the public receipts repository. Both are independent of this site.

Source Code →Audit Evidence Layer →Contracts →