Detail teknis, dokumen hukum, dan sebagian proses akun masih dalam bahasa Inggris.
MITHRIL / WHITE HAT RESEARCH
Empower those who protect.
Bring our strengths together. Bring light back to the world.
Some notice the dangers others overlook.
Some look deeper into systems, determined to make them better.
Some use that knowledge to protect everyday lives.
mithril.fund supports the curiosity and creativity of white hats.
One person’s discovery becomes a community’s strength.
Together, that strength can change the world.
Investigate authorized code. Validate the finding. Ship the fix. Specialized LLM inference for verified white-hat researchers, with a free research allowance.
Preparing for launch — the selected model returned a real response on the dedicated deployment. Site inference remains closed until identity verification and review are connected.
Rendered live in your browser by kami-engine
01 / INVESTIGATE
Review the code
Inspect code you own or are authorized to review for authorization gaps and input validation issues.
02 / VALIDATE
Ground the finding
Work through reachability, impact and false positives to produce evidence-backed findings.
03 / REMEDIATE
Close the loop
Prepare fixes, regression tests and reports for responsible disclosure.
A model built for investigation
TEXT / VISION / MoE
Qwen3.8 Flash Next
A real response has been verified on the dedicated deployment. Scaling up from idle can take several minutes. Access remains gated while identity verification and review are connected.
Sign in with your existing account. A connected wallet alone is not verified identity.
eKYC
Identity verification runs on Stripe Identity only. Completing the document and selfie check at verify.stripe.com approves the account automatically (ekyc 365d, screening 24h, trust 60 points).
AML / CTF
Sanctions and PEP screening, risk review and additional checks where needed. Pending, expired or suspended records cannot infer.
Free research
Confirm authorization and research scope, then use the free allowance. Ongoing review keeps eligibility current.
$0 for verified researchers
Free allowance: 1,000 requests per day, up to 32,768 output tokens per request. Usage stops at the limit — no automatic charges. Past the allowance, monthly plans from $20/mo or prepaid AI credits keep requests running (never charged twice): top up any whole-dollar amount from $10 to $1,000 — one-time, 12-month validity, and larger packs carry a bonus ($50→51 credits +2%, $100→103 +3%, $500→525 +5%, $1,000→1,100 +10%) — or subscribe to a plan, or turn on automatic recharge.
Before you spend a dollar, ground your work in our free open-data mirror — NVD CVE history (395k+), CISA KEV, EPSS, CWE, MITRE ATT&CK and ad-network intelligence as Parquet, no account needed:knowledge.mithril.fund
Preparing for launch — the selected model returned a real response on the dedicated deployment. Site inference remains closed until identity verification and review are connected.
Research workspace
New models, pricing and free-allowance changes, by email
Your address is recorded once in Mithril's sales system and used for these updates. No other use.
Research terms & data notice
For authorized code review, vulnerability triage and remediation. No unauthorized intrusion, credential theft, destructive activity or third-party research without permission. Identity verification does not grant research authorization.
First-party browser identity verification is in development. Documents, face images, names and birth dates will never be sent to the inference model. The service is designed to retain minimal verification status, expiry, evidence references, review and usage records. Verification intake remains closed until providers, retention periods, transfer destinations, deletion and appeal contacts are finalized and published.
PEP status or a possible name match is not automatically a finding of wrongdoing. Additional checks and human review are planned. Legal AML/CTF obligations depend on the operator and service jurisdictions.
Konfirmasi Stable Principal
Masuk untuk mengonfirmasi Stable Principal. Itu langkah pertama yang bisa diselesaikan. Hosted apply tidak ditawarkan.
Bisa diselesaikan sekarang: masuk, konfirmasi Stable Principal, lalu hubungkan ke Kotobase.
Satu CID rilis, dapat dieksekusi dari beberapa penyedia
CID rilis memperbaiki kepala namespace, definisi, Wasm mentah, tanda terima kompilasi, dan bukti reproduktibilitas dalam satu grafik IPLD. Nama dan GitHub tetap menjadi penemuan dan asal-usul.
Bundel
Tutup definisi, artefak Wasm, dan tanda terima kompilasi di bawah satu CID rilis.
Replikasi
Simpan penutupan lengkap yang sama di tidak kurang dari dua asal penyimpanan independen.
Verifikasi + Jalankan
Verifikasi setiap byte dan ID peer yang diarahkan, lalu eksekusi berdasarkan CID rilis dan ekspor.
Shell
# install and run the live Ed25519 + ML-DSA-65 reference packagekotoba package add kotoba-lang/reference-math@0.1.0--catalog-cid bafkreidcy5stqvnyfpmud6ozz5qz3supd3r3uzk7glmntuv36ezliaxstm
kotoba package run kotoba-lang/reference-math # 42kotoba library inspect <name|CID|#hash> --store .kotoba/codebase --namespace demo# dry-run by defaultkotoba library publish --store .kotoba/codebase --namespace demo --hosted# replicate one exact release closurekotoba library publish --store .kotoba/codebase --namespace demo --hosted--dry-run false \
--pqc-seed-file<ml-dsa-seed>\
--provider east=https://east.example--provider-token-file<east-token>\
--provider west=https://west.example--provider-token-file<west-token># qualification and execution are release-CID addressedkotoba library verify ipfs://<release-cid>--store .kotoba/codebase \
--provider east=https://east.example--provider west=https://west.examplekotoba library run ipfs://<release-cid>--entry answer --store .kotoba/codebase \
--provider east=https://east.example--provider west=https://west.example# rotate or revoke the Principal-pinned ML-DSA key; both finish with Passkeykotoba pq-key rotate --current-pqc-seed-file<current>\
--next-pqc-seed-file<next>--expected-epoch1kotoba pq-key revoke --current-pqc-seed-file<current>--expected-epoch2
Tanda tangan pasca-kuantum wajib, bukan opsional. Publikasi memerlukan sesi Passkey dan tanda tangan ML-DSA-65 yang dipasang pada Principal. Autentikator eksternal dan kualifikasi terdistribusi tetap menjadi batas yang diverifikasi secara terpisah.
The CLI signed this graph locally and stored it. Verify the CIDs and IPNS name before publishing.
Namespace
—
CID Rilis
—
CID catatan kepala
—
Nama IPNS
—
Setujui transisi kunci pasca-kuantum
Verifikasi tindakan, epoch, kunci saat ini, dan kunci berikutnya. Rotasi ditandatangani oleh kedua kunci ML-DSA dan berlaku hanya setelah konfirmasi Passkey.
Tindakan
—
Epoch yang diharapkan
—
Kunci saat ini
—
Kunci berikutnya
—
Dari kode yang ditulis AI ke komputasi yang diakui
Tulis
Agen dan manusia menulis secara bebas dalam kode yang dapat dibaca dan berorientasi data.
Akui
Kotoba memeriksa tipe, efek, kapabilitas, sumber daya, dan dukungan target.
Ikat
Host dan penyedia mengikat identitas Passkey dan pemberian sumber daya yang dibatasi.
Jalankan
Mithril Database keeps artifacts and receipts; Mithril AI and Itonami perform admitted work.
Shell
kotoba research --scope<approved-scope>--task code-review
# requests are admitted by Mithril before inference
Batas memungkinkan koneksi.
Penemuan bukan pelimpahan wewenang
Penyimpanan, komputasi, dan pekerjaan agen mempertahankan batas wewenang terpisah. Tanda terima mencatat setiap asal secara terpisah. Passkey yang sudah ada tidak bermigrasi otomatis; RP baru memerlukan tautan Principal yang terverifikasi.