SoroSentinel provides open-source, pre-signing transaction effect simulation and decentralized threat intelligence for the Stellar and Soroban network.
The product advises: it never controls the network, never touches private keys, never claims an entity is "safe", and fails loudly (partial or unanalyzable) when an operation or variant cannot be analyzed.
[ Soroban Contract WASM ]
│
▼
[ sorosentinel-scan ] (Rust)
│ ScanReport JSON
▼
[ sorosentinel-intel ] (Go) ◀── Stellar RPC Ledgers & SEP-1 Domains
│ Ed25519 Signed Snapshot & Read API
▼
[ sorosentinel-guard ] (TypeScript SDK)
▲
│ Raw XDR Envelope (Pre-Signing)
[ Stellar Wallet / User ]
| Component | Language | Role | Repository |
|---|---|---|---|
| Guard | TypeScript | Pre-signing SDK for wallets. Intercepts transaction envelope XDR, executes Soroban RPC simulation, derives worst-case net balance deltas per affected account, and verifies snapshots offline. | SoroSentinel/Sorosentinel-guard |
| Intel | Go | Ingestion backbone and threat intelligence engine. Reads ledgers directly via Stellar RPC, runs rule-based detectors, stores write-once evidence, and publishes Ed25519-signed snapshots and a read API. | SoroSentinel/Sorosentinel-intel |
| Scan | Rust | Static analysis library and CLI. Inspects deployed Soroban contract WASM bytecode in a zero-network sandbox to validate SEP-41 token interfaces, resource limits, and environment metadata without executing code. | SoroSentinel/Sorosentinel-scan |
Data flows strictly in one direction: Scan → evidence → Intel → signed snapshot → Guard. Repositories communicate exclusively through versioned schemas owned by Intel.
An 88-second end-to-end recording on Stellar testnet: look-alike asset issued → evidence stored → caution signal raised → Ed25519 snapshot published → Guard flags findings_present with G-TRUST-FLAGGED.
- Never output "safe": Allowed Guard statuses are
findings_present,no_issues_found,partial, andunanalyzable. Absence of data is never reassurance. - Fail loud, never fail clean: Timeouts, unhandled operations, or unknown networks return
partialorunanalyzable. - No status without stored evidence: Signals derive from reproducible rule tables over
(evidence, as_of, ruleset_version)— never arbitrary numeric scores. - Guard never touches private keys: Operates strictly on serialized transaction envelopes before signing, without telemetry or privacy leakage by default.
- Money is integers: All currency amounts are strictly 7-decimal fixed-point integers (stroops). Never floats.
- Public text via reviewed templates: Public wording comes exclusively from an approved template registry rendered with verifiable observations.
- 📖 Documentation Site: https://sorosentinel.github.io/Sorosentinel-intel/
- 🔍 Guard Findings Reference: What Guard reports
- ⚙️ Scan Indicators Reference: What Scan reports
- 📊 Intel Signals Reference: What Intel publishes
- 🔐 Snapshot Verification Guide: Verifying snapshots offline
- ⏱️ Live Status Matrix: Protocol 30 schedule & component readiness
- Maintainer: Allison (@Teescom)
- Security Inquiries: Coordinated vulnerability disclosure via the Security tab or by email at
adebisiallison2018@gmail.com.