Skip to content
SealedChoice
testnetChecking for a wallet
Recorded on testnet

Test the boundaries. Inspect the evidence.

See what happened when we tried to read sealed bids, change the rules and redirect a payout. Every attempt links to its recorded transaction.

Verify this tender Run an attempt
Recorded attempts
10
Calls refused
9
Flagged for review
1
Evidence source
Tender #32026-11-10 UTC

A flag is a request for human review. Prompt injection was flagged, but the bid remained eligible. This run does not establish that every model resisted the instruction.

Recorded attempts

Showing 10 of 10

  1. Attempt 01Refused

    Read bids through a direct request

    OutLayer refused the caller's access to the evaluator's secret row. The guest did not run.

    OutLayer secret access
    Technical evidence
    Observed outcome
    Access denied
    Signed by
    attacker.sealedchoice.testnet

    OutLayer request 15559. Refusal recorded in transaction receipts.

    Inspect transactionHSuJU5SM
  2. Attempt 03Refused

    Change the published rubric

    The deployed contract exports no rubric setter.

    NEAR contract runtime
    Technical evidence
    Observed outcome
    MethodNotFound
    Signed by
    buyer.sealedchoice.testnet
    Inspect transaction95r9z2Au
  3. Attempt 04Refused

    Close before the deadline

    The open tender stayed open before its published deadline.

    Tender contract
    Technical evidence
    Observed outcome
    E_DEADLINE_NOT_REACHED
    Signed by
    attacker.sealedchoice.testnet
    Inspect transaction9S3aYuJU
  4. Attempt 05Refused

    Copy a sealed bid

    An identical ciphertext submitted from another account was refused before evaluation.

    Tender contract
    Technical evidence
    Observed outcome
    E_DUPLICATE_CIPHERTEXT
    Signed by
    attacker.sealedchoice.testnet
    Inspect transaction9xR5rfo8
  5. Attempt 06Refused

    Deliver a fake evaluation

    The callback refuses external callers before reading a result.

    NEAR contract runtime
    Technical evidence
    Observed outcome
    Private callback
    Signed by
    attacker.sealedchoice.testnet
    Inspect transactionJ5pa7f8y
  6. Attempt 07Refused

    Evaluate a second time

    A second evaluation was refused after the accepted result. This method uses E_BAD_STATUS.

    Tender contract
    Technical evidence
    Observed outcome
    E_BAD_STATUS
    Signed by
    attacker.sealedchoice.testnet
    Inspect transactionF5nAoEsW
  7. Attempt 08Refused

    Award as an outsider

    The signer is outside the published committee.

    Tender contract
    Technical evidence
    Observed outcome
    E_NOT_COMMITTEE
    Signed by
    attacker.sealedchoice.testnet
    Inspect transactionJ4nRsu49
  8. Attempt 09Refused

    Deviate without a rationale

    A real committee member tried to select an eligible bid below the first ranked bid with an empty rationale.

    Tender contract
    Technical evidence
    Observed outcome
    E_RATIONALE_REQUIRED
    Signed by
    buyer.sealedchoice.testnet
    Inspect transaction4N7pLkDm
  9. Attempt 10Refused

    Accept and redirect another bidder's award

    The attacker requested a transfer to their own account. Only the awarded bidder may accept.

    Tender contract
    Technical evidence
    Observed outcome
    E_NOT_WINNER
    Signed by
    attacker.sealedchoice.testnet
    Inspect transaction3fBhz7ds
  10. Attempt 11Flagged for review

    Inject instructions into a proposal

    Vendor C's published example was flagged. Its actual total was 5200 basis points, rank 2 of 3. A flag does not prove that every model resisted the text.

    Evaluator code
    Technical evidence
    Observed outcome
    INJECTION_SUSPECTED
    Signed by
    vendor-c.sealedchoice.testnet
    OutLayer request 15568
    Inspect transactionE1uqsogv
Understand the limits

What these results establish

The caller, time, ciphertext, committee and winner checks refused these calls. An injection flag does not make a bid ineligible or lower its score. Model judgments can vary; the committee reviews the text before deciding.

Deployment details and untested risks

These outcomes were recorded on tenders-v1.sealedchoice.testnet. Contract and secret-row owner keys remain active. Their holders can replace the contract or rebind the secret.

Attempt 2, a different evaluator build, is covered by earlier gate evidence and was not rerun here. These outcomes do not cover collusion, false claims, a biased rubric or compromised owner keys.

Run a contract attempt

The recorded tender is complete. Some attempts need an open tender, an evaluated tender, or a pending award. We check the required state and role before asking you to sign.

Connect a testnet wallet to run an attempt. Recorded evidence above is available without one.

Choose an attempt to check its prerequisites before signing.