On-Chain Verification & Threat Model Proof
Every assertion below runs live against public NEAR Testnet RPC and NEAR Intents 1Click with zero private keys or paid APIs.
Executed NEAR Testnet Proof Ledger (Happy Path + Blocked Attacks)
Contract: v1-mw8z34zu.showup-org-0jal170157.testnet (code_hash: DhTxaggoGMjpTHjQrELewDANNkfM8WZkjSJMTRn7SP2J)
| Step | Actor | Outcome | Explorer Proof |
|---|---|---|---|
| deploy_contract | v1-mw8z34zu.showup-org-0jal170157.testnet | SUCCESS | 9hyzi2XE1ZHL... |
| init_contract | v1-mw8z34zu.showup-org-0jal170157.testnet | SUCCESS | 6SnR2pCiapLk... |
| create_event_1 | showup-org-0jal170157.testnet | SUCCESS | 8RfmfdYhaYqf... |
| rsvp_alice_event_1 | showup-al-0lcn573990.testnet | SUCCESS | 6mDjsZR9TpxD... |
| rsvp_bob_event_1 | showup-bob-0n0s404348.testnet | SUCCESS | 8N4ByLrYa3m4... |
| check_in_alice_event_1 | showup-org-0jal170157.testnet | SUCCESS | HqM9Lncxuy9U... |
| adversarial_unauthorized_checkin_blocked | showup-bob-0n0s404348.testnet | REJECTED_AS_EXPECTED (ERR_UNAUTHORIZED) | Blocked at RPC |
| adversarial_double_rsvp_blocked | showup-al-0lcn573990.testnet | REJECTED_AS_EXPECTED (ERR_ALREADY_RSVPED) | Blocked at RPC |
| settle_event_1 | showup-org-0jal170157.testnet | SUCCESS | 12TgXXqhxoJo... |
| create_event_2_active | showup-org-0jal170157.testnet | SUCCESS | Cejwnn3mdHPL... |
| rsvp_alice_event_2 | showup-al-0lcn573990.testnet | SUCCESS | BhfPjCAzZ2aF... |
| create_event_3_active | showup-org-0jal170157.testnet | SUCCESS | 3CNttGnYb2tB... |
9 On-Chain Security & Accounting Invariants
sum(attendee_payouts) + dao_payout == total_pool_yocto (rounding dust goes to DAO)
rsvp() rejects attached_deposit != event.stake_yocto (ERR_INVALID_STAKE)
attendees map prevents double RSVP; rsvp_count < max_capacity enforced
Only organizer or designated checkin_operator can mark check_in before deadline
Event status transitions to Settled/Cancelled BEFORE issuing Promise::transfer calls
If 0 attendees check in after deadline, 100% of escrowed pool routes to Sputnik DAO
No RSVP or check-in allowed after checkin_deadline_ns; no settlement before deadline
dao_bps capped at 10,000 bps (100%); checked-in attendees always recover >= principal
1Click Intents requires explicit refundTo on origin chain & zero private keys in production