본문으로 건너뛰기

기술 세부 정보, 법률 문서 및 일부 계정 절차는 아직 영어로 제공됩니다.

MITHRIL / WHITE HAT RESEARCH

Empower those who protect.

Bring our strengths together. Bring light back to the world.

Some notice the dangers others overlook.

Some look deeper into systems, determined to make them better.

Some use that knowledge to protect everyday lives.

mithril.fund supports the curiosity and creativity of white hats.

One person’s discovery becomes a community’s strength.

Together, that strength can change the world.

Investigate authorized code. Validate the finding. Ship the fix. Specialized LLM inference for verified white-hat researchers, with a free research allowance.

Researcher onboarding Pricing & credits (from $10) Explore the model

Preparing for launch — the selected model returned a real response on the dedicated deployment. Site inference remains closed until identity verification and review are connected.

Rendered live in your browser by kami-engine

01 / INVESTIGATE

Review the code

Inspect code you own or are authorized to review for authorization gaps and input validation issues.

02 / VALIDATE

Ground the finding

Work through reachability, impact and false positives to produce evidence-backed findings.

03 / REMEDIATE

Close the loop

Prepare fixes, regression tests and reports for responsible disclosure.

A model built for investigation

TEXT / VISION / MoE

Qwen3.8 Flash Next

A real response has been verified on the dedicated deployment. Scaling up from idle can take several minutes. Access remains gated while identity verification and review are connected.

qwen3.8-flash-next-whitehacker

Model card ↗

One verified identity. A free research workspace.

  1. Account

    Sign in with your existing account. A connected wallet alone is not verified identity.

  2. eKYC

    Identity verification runs on Stripe Identity only. Completing the document and selfie check at verify.stripe.com approves the account automatically (ekyc 365d, screening 24h, trust 60 points).

  3. AML / CTF

    Sanctions and PEP screening, risk review and additional checks where needed. Pending, expired or suspended records cannot infer.

  4. Free research

    Confirm authorization and research scope, then use the free allowance. Ongoing review keeps eligibility current.

$0 for verified researchers

Free allowance: 1,000 requests per day, up to 32,768 output tokens per request. Usage stops at the limit — no automatic charges. Past the allowance, monthly plans from $20/mo or prepaid AI credits keep requests running (never charged twice): top up any whole-dollar amount from $10 to $1,000 — one-time, 12-month validity, and larger packs carry a bonus ($50→51 credits +2%, $100→103 +3%, $500→525 +5%, $1,000→1,100 +10%) — or subscribe to a plan, or turn on automatic recharge.

Top up AI credits from $10 →

Before you spend a dollar, ground your work in our free open-data mirror — NVD CVE history (395k+), CISA KEV, EPSS, CWE, MITRE ATT&CK and ad-network intelligence as Parquet, no account needed: knowledge.mithril.fund

Sign in first Research registration (Stripe Identity)

Preparing for launch — the selected model returned a real response on the dedicated deployment. Site inference remains closed until identity verification and review are connected.

Research terms & data notice

Do not enter identity documents, face images, private keys or API keys here. Before provider setup, application data is not sent or saved.

Research workspace

New models, pricing and free-allowance changes, by email

Your address is recorded once in Mithril's sales system and used for these updates. No other use.

Research terms & data notice

For authorized code review, vulnerability triage and remediation. No unauthorized intrusion, credential theft, destructive activity or third-party research without permission. Identity verification does not grant research authorization.

First-party browser identity verification is in development. Documents, face images, names and birth dates will never be sent to the inference model. The service is designed to retain minimal verification status, expiry, evidence references, review and usage records. Verification intake remains closed until providers, retention periods, transfer destinations, deletion and appeal contacts are finalized and published.

PEP status or a possible name match is not automatically a finding of wrongdoing. Additional checks and human review are planned. Legal AML/CTF obligations depend on the operator and service jurisdictions.

Stable Principal 확인

Stable Principal을 확인하려면 로그인하세요. 이것이 첫 번째 완료 가능한 단계입니다. Hosted apply는 제공하지 않습니다.

지금 완료할 수 있습니다: 로그인한 뒤 Stable Principal을 확인하고 Kotobase에 연결하세요.

Base Account로 시작

세 가지 실행 평면. 경계 유지.

서비스들은 하나의 거대한 신뢰 도메인이 되지 않고 연결됩니다. 각 권한은 별도로 관리됩니다.

제어 + 신원

Mithril

Passkey는 안정적인 Principal을 검증합니다. 제어 평면은 CLI 배포에 사용되는 토폴로지와 권한 층을 게시합니다.

auth.mithril.fund · api.mithril.fund

여러 공급자에서 실행 가능한 단일 릴리스 CID

릴리스 CID는 네임스페이스 헤드, 정의, 원시 Wasm, 컴파일 영수증 및 재현 가능성 증거를 하나의 IPLD 그래프에 고정합니다. 이름과 GitHub는 발견 및 출처로 남아 있습니다.

번들

정의, Wasm 아티팩트 및 컴파일 영수증을 하나의 릴리스 CID 아래에 묶습니다.

복제

동일한 완전한 클로저를 두 개 이상의 독립 저장소 출처에 저장합니다.

검증 + 실행

모든 바이트와 라우팅된 피어 ID를 검증한 후 릴리스 CID로 실행하고 내보냅니다.

Shell 
# install and run the live Ed25519 + ML-DSA-65 reference package
kotoba package add kotoba-lang/reference-math@0.1.0 --catalog-cid bafkreidcy5stqvnyfpmud6ozz5qz3supd3r3uzk7glmntuv36ezliaxstm
kotoba package run kotoba-lang/reference-math  # 42

kotoba library inspect <name|CID|#hash> --store .kotoba/codebase --namespace demo

# dry-run by default
kotoba library publish --store .kotoba/codebase --namespace demo --hosted

# replicate one exact release closure
kotoba library publish --store .kotoba/codebase --namespace demo --hosted --dry-run false \
  --pqc-seed-file <ml-dsa-seed> \
  --provider east=https://east.example --provider-token-file <east-token> \
  --provider west=https://west.example --provider-token-file <west-token>

# qualification and execution are release-CID addressed
kotoba library verify ipfs://<release-cid> --store .kotoba/codebase \
  --provider east=https://east.example --provider west=https://west.example
kotoba library run ipfs://<release-cid> --entry answer --store .kotoba/codebase \
  --provider east=https://east.example --provider west=https://west.example

# rotate or revoke the Principal-pinned ML-DSA key; both finish with Passkey
kotoba pq-key rotate --current-pqc-seed-file <current> \
  --next-pqc-seed-file <next> --expected-epoch 1
kotoba pq-key revoke --current-pqc-seed-file <current> --expected-epoch 2

포스트 양자 서명은 선택이 아닌 필수입니다. 게시에는 Passkey 세션과 Principal에 고정된 ML-DSA-65 서명이 모두 필요합니다. 외부 인증자 및 분산 자격 검증은 별도의 검증 경계로 유지됩니다.

라이브러리 카탈로그 및 의존성 그래프 열기

AI 작성 코드에서 승인된 계산으로

작성

에이전트와 사람이 읽기 쉽고 데이터 지향적인 코드로 자유롭게 작성합니다.

승인

Kotoba는 타입, 효과, 권한, 자원 및 대상 지원을 검사합니다.

바인딩

호스트와 제공자는 Passkey 신원과 자원 범위 부여를 바인딩합니다.

실행

Mithril Database keeps artifacts and receipts; Mithril AI and Itonami perform admitted work.

Shell 
kotoba research --scope <approved-scope> --task code-review
# requests are admitted by Mithril before inference

경계가 연결을 가능하게 합니다.

탐색은 권한 위임이 아닙니다

저장소, 컴퓨팅, 에이전트 작업은 별도의 권한 경계를 유지합니다. 영수증은 각 출처를 따로 기록합니다. 기존 Passkey는 자동으로 이전되지 않으며 새 RP에는 검증된 Principal 연결이 필요합니다.

기계 판독 프로필 언어 사양 읽기