verity is a Casper testnet project built for the Casper Agentic Buildathon 2026. It consists of Odra smart contracts (contracts/), TypeScript agents (oracle-agent/, defi-agent/, shared/), and a Next.js dashboard (web/). No mainnet funds are at risk, but we still take vulnerability reports seriously.

• Preferred: open a private report via GitHub Security Advisories.
• Alternatively, open a GitHub issue without exploit details and ask for a private channel.

Please include reproduction steps, affected component (contract, agent, web), and impact. Expect an acknowledgement within 72 hours.

Only the latest commit on main (the buildathon submission) is supported.

• Keys under keys/ are git-ignored; only a .gitkeep placeholder is tracked.
• Contracts hold testnet CSPR / test tokens only.