{
  "project": "ElyStocks",
  "title": "NVDA procurement research — public verification summary",
  "date": "2026-11-09",
  "status": "RESEARCH_ONLY_NOT_PRODUCTION",
  "scope": "Local EVM mainnet fork with explicit modeled HyperCore state; no real funds used.",
  "personal_data": "No private wallet addresses, account details, transaction logs or local filesystem paths included.",
  "prototype": {
    "file": "CoreOwnedNvdaExecutor.sol",
    "sha256": "953fcf6cd7de4c5c961c1887da1561fa9b683db9298a2fef242ce633cc8f7970",
    "warning": "Includes LocalCoreReadModel, a test-only substitute for HyperCore state. Do not deploy this prototype to accept funds."
  },
  "scenario": {
    "budgetUSDC": "8000",
    "quantity": "45.15",
    "limitPrice": "177.16",
    "maxNotionalUSDC": "7998.774",
    "expectedCostUSDC": "7996.196",
    "feeBpsAssumption": 7,
    "stockFeeAssumption": "0.031605",
    "netStockAssumption": "45.118395"
  },
  "scenario_note": "Historical orderbook scenario. Fees and Core fills are assumptions, not live execution, a future quote or an account-specific fee guarantee.",
  "checks": {
    "guardChecksPassed": 15,
    "guardChecksTotal": 15,
    "guards": [
      {
        "check": "constructor rejects order exceeding worst-price budget",
        "passed": true,
        "expectedRevert": "WORST_PRICE_EXCEEDS_BUDGET"
      },
      {
        "check": "inactive Core account cannot queue buy",
        "passed": true,
        "expectedRevert": "CORE_ACCOUNT_INACTIVE"
      },
      {
        "check": "Core HYPE gas reserve required",
        "passed": true,
        "expectedRevert": "KEEP_CORE_HYPE_FOR_EXIT"
      },
      {
        "check": "unfunded Core USDC cannot queue buy",
        "passed": true,
        "expectedRevert": "CORE_USDC_INSUFFICIENT"
      },
      {
        "check": "withdrawal before fill rejected",
        "passed": true,
        "expectedRevert": "FILL_NOT_CONFIRMED_OR_EXIT_ALREADY_SENT"
      },
      {
        "check": "duplicate buy cannot be submitted",
        "passed": true,
        "expectedRevert": "ORDER_ALREADY_SUBMITTED"
      },
      {
        "check": "same Core block cannot confirm fill",
        "passed": true,
        "expectedRevert": "WAIT_FOR_LATER_CORE_BLOCK"
      },
      {
        "check": "zero fill does not satisfy completion",
        "passed": true,
        "expectedRevert": "FILL_BELOW_MINIMUM_OR_INVALID"
      },
      {
        "check": "below-minimum partial fill does not satisfy completion",
        "passed": true,
        "expectedRevert": "FILL_BELOW_MINIMUM_OR_INVALID"
      },
      {
        "check": "held Core stock cannot complete fill",
        "passed": true,
        "expectedRevert": "CORE_FUNDS_STILL_HELD"
      },
      {
        "check": "duplicate withdrawal cannot be queued",
        "passed": true,
        "expectedRevert": "FILL_NOT_CONFIRMED_OR_EXIT_ALREADY_SENT"
      },
      {
        "check": "queued withdrawal is not EVM delivery",
        "passed": true,
        "expectedRevert": "EVM_STOCK_NOT_RECEIVED_EXACTLY"
      },
      {
        "check": "Core debit alone is not EVM stock arrival",
        "passed": true,
        "expectedRevert": "EVM_STOCK_NOT_RECEIVED_EXACTLY"
      },
      {
        "check": "EVM delivery without modeled Core debit cannot complete",
        "passed": true,
        "expectedRevert": "CORE_EXIT_NOT_OBSERVED"
      },
      {
        "check": "completed job cannot withdraw again",
        "passed": true,
        "expectedRevert": "FILL_NOT_CONFIRMED_OR_EXIT_ALREADY_SENT"
      }
    ]
  },
  "verified_locally": [
    "The procurement contract called unchanged CoreWriter bytecode; the emitted action identified the contract as the user.",
    "Buy action 1 and sendAsset action 13 encoded the intended stock, size, price and destination.",
    "State transitions distinguished an order queued from an observed modeled fill and a withdrawal queued from token arrival.",
    "The actual stock ERC-20 contract transferred stock from its system escrow on the local fork. This replay was not an automatic HyperCore withdrawal.",
    "Separate local bridge and pool research checked gateway message handling, token delivery, pool creation, swaps and LP removal. Cross-chain transport was simulated, and LP was not locked."
  ],
  "modeled_not_executed": [
    "HyperCore account activation",
    "Core funding and balances",
    "Order acceptance and matching",
    "Trading fees and Core debit",
    "Automatic system delivery after sendAsset",
    "Cross-chain message transport"
  ],
  "not_verified_or_implemented": [
    "Real end-to-end Core purchase and withdrawal",
    "Production Relay order validation and recovery",
    "Partial-fill, timeout and refund handling",
    "Production fundraising and graduation contracts",
    "Final LP lock and administrator restrictions",
    "Independent security audit"
  ],
  "sources": [
    "https://hyperliquid.gitbook.io/hyperliquid-docs/for-developers/hyperevm/interacting-with-hypercore",
    "https://hyperliquid.gitbook.io/hyperliquid-docs/for-developers/hyperevm/interaction-timings",
    "https://elysium.kinetiq.xyz/docs/bridging-hyperevm-tokens-to-elysium"
  ]
}