KEEL.

A liquidation-protection bot whose trigger cannot be found by watching it, and which proves on-chain that it never changed its plan.

Watching a defense bot is enough to rob it.

A protection bot defends a loan when its health factor falls to a secret trigger. But every action, and every silence, is public. Each price level answers one question: is the trigger above or below here? Three pushes locate a fixed trigger to a $9 price window. A found trigger plus a public reserve is not a defense. It is a drain plan.

real precedent: a $521M short publicly hunted on Hyperliquid · Solend's $170M seizure panic over one visible position

Sealed envelope, opened after the match.

Before the scenario starts, a hash of the whole policy goes on-chain: a sealed envelope the referee holds. Every defense then carries a receipt signed by a key that only exists inside the enclave. Afterward, Keel opens the envelope, and anyone can recompute every round from public logs and check every action against the sealed policy. That is the difference between private and provably unchanged.

The policy never leaves the enclave.

Two triggers wake the workflow: a 60-second heartbeat and an instant reaction to each on-chain price update. The handler runs in an AWS Nitro enclave, pulls its four secrets from the Vault DON, reads the chain in one batched call, defends when needed, and reports a single word. No number ever comes out.

A real Bayesian hunter. It finds the starter. It never finds Keel.

The Hunter watches only public data and infers where each bot's trigger must be. The numbers below are how precisely it can predict the next trigger after watching everything.

run the attack yourself on /hunter

Zero liquidations. Least capital spent. And unhuntable.

These are the exact price paths from the official README, run through a contract mirror proven byte-for-byte against the deployed contract. The sealed policy survives all five, keeps full loan continuity (20/20 in every scenario), and spends less capital than any other surviving strategy. Doing nothing liquidates in all five. Confidentiality cost nothing.

Joined. Sealed before start. Check us.

The commitment landed at block 11691103, before the official scenario starts. Whatever the market does now, the policy that defends is provably the one sealed here. The salt stays sealed until scores publish; then the /verify page re-derives every round from public logs.