Os detalhes técnicos, documentos legais e alguns processos de conta continuam em inglês.
MITHRIL / WHITE HAT RESEARCH
Bring our strengths together. Bring light back to the world.
Some notice the dangers others overlook.
Some look deeper into systems, determined to make them better.
Some use that knowledge to protect everyday lives.
mithril.fund supports the curiosity and creativity of white hats.
One person’s discovery becomes a community’s strength.
Together, that strength can change the world.
Investigate authorized code. Validate the finding. Ship the fix. Specialized LLM inference for verified white-hat researchers, with a free research allowance.
Preparing for launch — the selected model returned a real response on the dedicated deployment. Site inference remains closed until identity verification and review are connected.
Rendered live in your browser by kami-engine
01 / INVESTIGATE
Inspect code you own or are authorized to review for authorization gaps and input validation issues.
02 / VALIDATE
Work through reachability, impact and false positives to produce evidence-backed findings.
03 / REMEDIATE
Prepare fixes, regression tests and reports for responsible disclosure.
TEXT / VISION / MoE
A real response has been verified on the dedicated deployment. Scaling up from idle can take several minutes. Access remains gated while identity verification and review are connected.
qwen3.8-flash-next-whitehacker
Sign in with your existing account. A connected wallet alone is not verified identity.
Identity verification runs on Stripe Identity only. Completing the document and selfie check at verify.stripe.com approves the account automatically (ekyc 365d, screening 24h, trust 60 points).
Sanctions and PEP screening, risk review and additional checks where needed. Pending, expired or suspended records cannot infer.
Confirm authorization and research scope, then use the free allowance. Ongoing review keeps eligibility current.
Free allowance: 1,000 requests per day, up to 32,768 output tokens per request. Usage stops at the limit — no automatic charges. Past the allowance, monthly plans from $20/mo or prepaid AI credits keep requests running (never charged twice): top up any whole-dollar amount from $10 to $1,000 — one-time, 12-month validity, and larger packs carry a bonus ($50→51 credits +2%, $100→103 +3%, $500→525 +5%, $1,000→1,100 +10%) — or subscribe to a plan, or turn on automatic recharge.
Before you spend a dollar, ground your work in our free open-data mirror — NVD CVE history (395k+), CISA KEV, EPSS, CWE, MITRE ATT&CK and ad-network intelligence as Parquet, no account needed: knowledge.mithril.fund
Preparing for launch — the selected model returned a real response on the dedicated deployment. Site inference remains closed until identity verification and review are connected.
Your address is recorded once in Mithril's sales system and used for these updates. No other use.
For authorized code review, vulnerability triage and remediation. No unauthorized intrusion, credential theft, destructive activity or third-party research without permission. Identity verification does not grant research authorization.
First-party browser identity verification is in development. Documents, face images, names and birth dates will never be sent to the inference model. The service is designed to retain minimal verification status, expiry, evidence references, review and usage records. Verification intake remains closed until providers, retention periods, transfer destinations, deletion and appeal contacts are finalized and published.
PEP status or a possible name match is not automatically a finding of wrongdoing. Additional checks and human review are planned. Legal AML/CTF obligations depend on the operator and service jurisdictions.
Entre para confirmar um Stable Principal. Esse é o primeiro passo que se pode concluir. Hosted apply não é oferecido.
Dá para concluir agora: entre, confirme o Stable Principal e conecte-o ao Kotobase.
Começar com Base AccountStable Principal confirmado.
NOME DE USUÁRIO PASSKEY
@kotoba-…
PRINCIPAL ESTÁVEL
—
CONTROLADOR ATIVO
—
Aponte este Principal ao Kotobase. Essa conexão já funciona.
Conectar este PrincipalOu conclua um dry-run de publicação de biblioteca e aprove aqui com Passkey + ML-DSA-65.
Os serviços se conectam sem se tornarem um grande domínio de confiança. Cada autoridade permanece governada separadamente.
Passkey verifica um Principal Estável. O plano de controle publica a topologia e o piso de autoridade usados pela implantação CLI.
Um banco de dados em grafo endereçado por conteúdo para estado e conhecimento de IA, com relacionamentos explícitos e histórico identificável.
api.mithril.fund ↗Runs identity-verified, reviewed and scope-approved research on a private, dedicated inference deployment.
api.mithril.fund ↗Executa trabalho contínuo de agente através de espaços de trabalho, metas, ferramentas e aprovações.
itonami.cloud ↗Um CID de release fixa o cabeçalho do namespace, definições, Wasm bruto, recibos de compilação e evidência de reprodutibilidade em um único grafo IPLD. Nomes e GitHub permanecem para descoberta e proveniência.
Feche definições, artefatos Wasm e recibos de compilação sob um único CID de release.
Armazene o mesmo fechamento completo em no mínimo duas origens de armazenamento independentes.
Verifique cada byte e IDs de pares roteados, então execute pelo CID de release e exporte.
# install and run the live Ed25519 + ML-DSA-65 reference package
kotoba package add kotoba-lang/reference-math@0.1.0 --catalog-cid bafkreidcy5stqvnyfpmud6ozz5qz3supd3r3uzk7glmntuv36ezliaxstm
kotoba package run kotoba-lang/reference-math # 42
kotoba library inspect <name|CID|#hash> --store .kotoba/codebase --namespace demo
# dry-run by default
kotoba library publish --store .kotoba/codebase --namespace demo --hosted
# replicate one exact release closure
kotoba library publish --store .kotoba/codebase --namespace demo --hosted --dry-run false \
--pqc-seed-file <ml-dsa-seed> \
--provider east=https://east.example --provider-token-file <east-token> \
--provider west=https://west.example --provider-token-file <west-token>
# qualification and execution are release-CID addressed
kotoba library verify ipfs://<release-cid> --store .kotoba/codebase \
--provider east=https://east.example --provider west=https://west.example
kotoba library run ipfs://<release-cid> --entry answer --store .kotoba/codebase \
--provider east=https://east.example --provider west=https://west.example
# rotate or revoke the Principal-pinned ML-DSA key; both finish with Passkey
kotoba pq-key rotate --current-pqc-seed-file <current> \
--next-pqc-seed-file <next> --expected-epoch 1
kotoba pq-key revoke --current-pqc-seed-file <current> --expected-epoch 2Assinaturas pós-quânticas são obrigatórias, não opcionais. A publicação requer tanto uma sessão Passkey quanto uma assinatura ML-DSA-65 vinculada ao Principal. Autenticadores externos e qualificação distribuída permanecem limites verificados separadamente.
Abra o catálogo de bibliotecas e o grafo de dependênciasThe CLI signed this graph locally and stored it. Verify the CIDs and IPNS name before publishing.
Verifique a ação, época, chave atual e próxima chave. A rotação é assinada por ambas as chaves ML-DSA e só entra em vigor após confirmação do Passkey.
Agentes e humanos escrevem livremente em código legível e orientado a dados.
Kotoba verifica tipos, efeitos, capacidades, recursos e suporte ao alvo.
O host e o provedor vinculam a identidade Passkey e uma concessão com escopo de recurso.
Mithril Database keeps artifacts and receipts; Mithril AI and Itonami perform admitted work.
kotoba research --scope <approved-scope> --task code-review
# requests are admitted by Mithril before inferenceArmazenamento, computação e trabalho de agentes mantêm limites de autoridade separados. Os recibos registram cada origem separadamente. As Passkeys existentes não migram automaticamente; o novo RP exige um vínculo de Principal verificado.