Los detalles técnicos, los documentos legales y algunos procesos de cuenta siguen en inglés.
MITHRIL / WHITE HAT RESEARCH
Empower those who protect.
Bring our strengths together. Bring light back to the world.
Some notice the dangers others overlook.
Some look deeper into systems, determined to make them better.
Some use that knowledge to protect everyday lives.
mithril.fund supports the curiosity and creativity of white hats.
One person’s discovery becomes a community’s strength.
Together, that strength can change the world.
Investigate authorized code. Validate the finding. Ship the fix. Specialized LLM inference for verified white-hat researchers, with a free research allowance.
Preparing for launch — the selected model returned a real response on the dedicated deployment. Site inference remains closed until identity verification and review are connected.
Rendered live in your browser by kami-engine
01 / INVESTIGATE
Review the code
Inspect code you own or are authorized to review for authorization gaps and input validation issues.
02 / VALIDATE
Ground the finding
Work through reachability, impact and false positives to produce evidence-backed findings.
03 / REMEDIATE
Close the loop
Prepare fixes, regression tests and reports for responsible disclosure.
A model built for investigation
TEXT / VISION / MoE
Qwen3.8 Flash Next
A real response has been verified on the dedicated deployment. Scaling up from idle can take several minutes. Access remains gated while identity verification and review are connected.
Sign in with your existing account. A connected wallet alone is not verified identity.
eKYC
Identity verification runs on Stripe Identity only. Completing the document and selfie check at verify.stripe.com approves the account automatically (ekyc 365d, screening 24h, trust 60 points).
AML / CTF
Sanctions and PEP screening, risk review and additional checks where needed. Pending, expired or suspended records cannot infer.
Free research
Confirm authorization and research scope, then use the free allowance. Ongoing review keeps eligibility current.
$0 for verified researchers
Free allowance: 1,000 requests per day, up to 32,768 output tokens per request. Usage stops at the limit — no automatic charges. Past the allowance, monthly plans from $20/mo or prepaid AI credits keep requests running (never charged twice): top up any whole-dollar amount from $10 to $1,000 — one-time, 12-month validity, and larger packs carry a bonus ($50→51 credits +2%, $100→103 +3%, $500→525 +5%, $1,000→1,100 +10%) — or subscribe to a plan, or turn on automatic recharge.
Before you spend a dollar, ground your work in our free open-data mirror — NVD CVE history (395k+), CISA KEV, EPSS, CWE, MITRE ATT&CK and ad-network intelligence as Parquet, no account needed:knowledge.mithril.fund
Preparing for launch — the selected model returned a real response on the dedicated deployment. Site inference remains closed until identity verification and review are connected.
Research workspace
New models, pricing and free-allowance changes, by email
Your address is recorded once in Mithril's sales system and used for these updates. No other use.
Research terms & data notice
For authorized code review, vulnerability triage and remediation. No unauthorized intrusion, credential theft, destructive activity or third-party research without permission. Identity verification does not grant research authorization.
First-party browser identity verification is in development. Documents, face images, names and birth dates will never be sent to the inference model. The service is designed to retain minimal verification status, expiry, evidence references, review and usage records. Verification intake remains closed until providers, retention periods, transfer destinations, deletion and appeal contacts are finalized and published.
PEP status or a possible name match is not automatically a finding of wrongdoing. Additional checks and human review are planned. Legal AML/CTF obligations depend on the operator and service jurisdictions.
Confirmar un Stable Principal
Inicia sesión para confirmar un Stable Principal. Ese es el primer paso que se puede terminar. Hosted apply no se ofrece.
Se puede terminar ahora: inicia sesión, confirma el Stable Principal y conéctalo a Kotobase.
Un CID de lanzamiento, ejecutable desde múltiples proveedores
Un CID de lanzamiento fija la cabeza del espacio de nombres, definiciones, Wasm en bruto, recibos de compilación y evidencia de reproducibilidad en un grafo IPLD. Los nombres y GitHub permanecen para descubrimiento y procedencia.
Paquete
Cerrar definiciones, artefactos Wasm y recibos de compilación bajo un CID de lanzamiento.
Replicar
Almacenar el mismo cierre completo en no menos de dos orígenes de almacenamiento independientes.
Verificar + Ejecutar
Verificar cada byte e IDs de pares enrutados, luego ejecutar por CID de lanzamiento y exportar.
Shell
# install and run the live Ed25519 + ML-DSA-65 reference packagekotoba package add kotoba-lang/reference-math@0.1.0--catalog-cid bafkreidcy5stqvnyfpmud6ozz5qz3supd3r3uzk7glmntuv36ezliaxstm
kotoba package run kotoba-lang/reference-math # 42kotoba library inspect <name|CID|#hash> --store .kotoba/codebase --namespace demo# dry-run by defaultkotoba library publish --store .kotoba/codebase --namespace demo --hosted# replicate one exact release closurekotoba library publish --store .kotoba/codebase --namespace demo --hosted--dry-run false \
--pqc-seed-file<ml-dsa-seed>\
--provider east=https://east.example--provider-token-file<east-token>\
--provider west=https://west.example--provider-token-file<west-token># qualification and execution are release-CID addressedkotoba library verify ipfs://<release-cid>--store .kotoba/codebase \
--provider east=https://east.example--provider west=https://west.examplekotoba library run ipfs://<release-cid>--entry answer --store .kotoba/codebase \
--provider east=https://east.example--provider west=https://west.example# rotate or revoke the Principal-pinned ML-DSA key; both finish with Passkeykotoba pq-key rotate --current-pqc-seed-file<current>\
--next-pqc-seed-file<next>--expected-epoch1kotoba pq-key revoke --current-pqc-seed-file<current>--expected-epoch2
Las firmas post-cuánticas son obligatorias, no opcionales. La publicación requiere tanto una sesión Passkey como una firma ML-DSA-65 anclada al Principal. Autenticadores externos y calificación distribuida permanecen como límites verificados por separado.
The CLI signed this graph locally and stored it. Verify the CIDs and IPNS name before publishing.
Espacio de nombres
—
CID de lanzamiento
—
CID de registro principal
—
Nombre IPNS
—
Aprobar transición de clave post-cuántica
Verifique la acción, época, clave actual y clave siguiente. La rotación está firmada por ambas claves ML-DSA y entra en vigor solo después de la confirmación con Passkey.
Acción
—
Época esperada
—
Clave actual
—
Clave siguiente
—
Del código escrito por IA a la computación admitida
Escribir
Agentes y humanos escriben libremente en código legible y orientado a datos.
Admitir
Kotoba verifica tipos, efectos, capacidades, recursos y soporte objetivo.
Vincular
El host y el proveedor vinculan la identidad Passkey y una concesión con alcance de recurso.
Ejecutar
Mithril Database keeps artifacts and receipts; Mithril AI and Itonami perform admitted work.
Shell
kotoba research --scope<approved-scope>--task code-review
# requests are admitted by Mithril before inference
Los límites hacen posible la conexión.
Descubrir no es delegar
El almacenamiento, el cómputo y el trabajo de agentes conservan límites de autoridad separados. Los recibos registran cada origen por separado. Las Passkeys existentes no migran automáticamente; el nuevo RP requiere un vínculo de Principal verificado.