SYSTEM.00roadmapbuild log
Readiness firstBuilt in public.
What shipped, what runs right now, and what waits on real blockers. Everything below is a build-log entry, not a promise — live modes turn on when their blockers clear, not on a date.
SYSTEM.01shippeddated entries
Shipped
2026-07-04
Monorepo + verified registry
pnpm workspace (core, ui, config, web, contracts), the canonical Robinhood Chain token registry verified against Blockscout, and the manifest schema + validator.
2026-07-05
Production launch, Bankr provider, docs, OG/SEO
First deploy, the strategist API with a deterministic fallback provider (a badge always shows which answered), the docs system, and OG share cards + SEO metadata across public pages.
2026-07-06
Receipts, passports, agent kit, competition upgrades
Deterministic receipts + provenance builders, agent passports, the agent kit docs, and upgrades to the (since-retired) competition surface.
2026-07-07
The CoilOps pivot
Removed the competition product entirely (leaderboards, seasons, sponsor slots — routes now redirect to /app/coils) and rebuilt the app as an agent workbench: Coil manifests with risk fuses and execution modes, the coil compiler (runbooks, mode-gated Robinhood MCP execution capsules, receipts, share cards), the tools hub, and Coil Health scoring.
2026-07-11
Vault stack + $HISS token live on Robinhood Chain
The full vault contract stack (registry, factory, oracle adapter, fee distributor, receipt + readiness registries) deployed and verified on chain 4663, and the $HISS token verified on Robinhood Chain — recorded in committed deployment artifacts.
2026-07-13
xHISS staking + Treasury Safe administration
The xHISS staking vault deployed with the 2-of-3 HISS Treasury Safe as owner, and the Safe-side ownership acceptance verified on-chain — every vault contract is Safe-administered, with acceptance proofs committed.
2026-07-15
Reward method V1 activated (historical)
HISS_REWARD_METHOD_V1 activated fee-reward accrual from Robinhood Chain block 10,612,914, with the depositor and provider distributors deployed and Safe-owned; nothing was funded or claimable at activation. Its 50/30/10/10 split was superseded by V2 on 2026-07-18 and is retained as the historical ledger.
2026-07-18
Reward method V2 adopted — retroactive migration executed
The owner adopted HISS_REWARD_METHOD_V2 — a five-leg 50/15/15/10/10 split: 50% xHISS stakers, 15% vault providers, 15% vault contributors, 10% Treasury Safe, 10% economic burn — and executed the retroactive cumulative true-up on-chain: provider and contributor reserves moved into Treasury Safe custody, the treasury true-up settled, and the full economic burn completed, leaving 219.16M HISS at the canonical dead address per verified receipts. A dead-address transfer removes HISS from protocol-controlled circulation; it never reduces totalSupply. No epoch was funded and nothing became claimable.
2026-07-18
The website became free
The pricing, subscription, and credits system was removed — the HISS website and app cost nothing to use. /pricing and /enterprise permanently redirect to /docs/fees, which documents the only real economics: on-chain vault fees and per-call x402 machine-to-machine service pricing. Two new copy guards hold this truth in CI.
2026-07-18
HISS Console v2
The Console rebuilt as a read-and-prepare-only financial command line — session-isolated, with no signing path. It is code-deployed behind a fail-closed feature flag: when the flag is off, the navigation entry and the surface do not exist. Eleven Console docs shipped alongside.
2026-07-19
Vault truth under stale oracles
Read-only valuation now shows the last verified on-chain NAV, share price, and PnL — always labeled — while the effective deposit gate stays strict and fails closed whenever the oracle cannot price. A deterministic invariant monitor alerts on any divergence between displayed state and the gate.
2026-07-21
Full-site experience overhaul
Marketing, docs, and app surfaces migrated onto the control-plane design system — a unified visual language, shared primitives, and global chrome across the www, app, and docs hosts, with the subdomain routing cut over the same day.
2026-08-01
Stock-Premium LP workbench + site-quality refinements
A later refinement of the site overhaul, not the overhaul itself: the Stock-Premium LP page rebuilt with an interactive, read-and-preview range builder — a draggable, keyboard-accessible boundary handle pinned to the live pool price with a live allocation preview — a corrected on-chain ladder-pricing path that always prices against a verified USDG pool, and a site-wide quality pass across accessibility, mobile, and cross-host consistency. Signing stays gated; the builder previews only.
SYSTEM.02current statethree lanes
Live now · in flight · later
live now
- The flagship HISS Vault is live on chain 4663 — vault value, share price, and the effective deposit gate are live on-chain reads, never cached copy; during oracle-stale windows the display shows the last verified state, labeled
- xHISS staking is live: stake HISS, receive xHISS; fee-funded injections drip linearly over 24 hours; exits use a 72-hour cooldown then a 2-day redeem window, and exits are never pausable
- $HISS token verified on Robinhood Chain; the adopted reward method is V2 — verified trading fees split five ways, 50/15/15/10/10: 50% xHISS stakers, 15% vault providers, 15% vault contributors, 10% Treasury Safe, 10% economic burn to the canonical dead address
- The executed economic burn stands at 219.16M HISS held at the dead address — shown from verified receipts only; a dead-address transfer removes HISS from protocol-controlled circulation and never reduces totalSupply
- The website and app are free — no plans, subscriptions, or credits; machine-to-machine x402 services are live on Bankr x402 Cloud, priced per call, with the real economics documented at /docs/fees
- Agent infrastructure: the CoilOps workbench, the HISS MCP server (45 compile-only tools), and 18 agent skill packs
- Treasury and admin: the 2-of-3 HISS Treasury Safe owns every vault contract, with on-chain acceptance proofs committed
in flight
- First monthly reward epoch under V2: close, deterministic scoring, root publication, challenge window, then Safe funding — each state proven separately
- HISS Console v2 production enablement — the shell is code-deployed and fail-closed; until the flag turns on, the surface does not exist
- Meridian x402 facilitator lane (USDG on Robinhood Chain 4663) — documented and wired, not yet enabled
later · blocker-gated
- First V2 epoch funding — double-gated on an owner approval flag plus the exact split-plan hash; nothing moves without both
- Vault-contributor vesting claims (the V2 name for the depositor cohort) — open only after an epoch is finalized, funded, and vesting; a Safe-custodied reserve is restricted, not claimable
- Vault-provider claims for newly classified fees — same epoch lifecycle, same double gate
- Meridian x402 lane enablement — Bankr x402 Cloud stays the live payment rail until then
SYSTEM.03fail-closed controlsdefaults refuse
Fail-closed controls
Every dangerous action defaults to refusal — a missing artifact, owner flag, or plan hash is a hard stop, not a warning. These are hard-typed constants and gates, not aspirations.
| Control | Default | Effect |
|---|---|---|
| liveOrderSent (CoilOps / Robinhood MCP) | false — hard-typed | HISS compiles and verifies; it never places brokerage orders |
| hissExecutesDeposit (Bankr Rail A) | false | deposit packs execute in the depositor's own Bankr agent and complete only on an on-chain receipt |
| Contract deploys | refuse | owner-approval env flags plus a confirmed plan hash are required; either missing means no deploy |
| Reward funding | refuse | double-gated on an owner approval flag plus the exact split-plan hash |
| Fee classification | fail closed | only high-confidence on-chain classification enters the five-leg 50/15/15/10/10 V2 split |
| HISS Console v2 | flag off — surface absent | read-and-prepare-only shell with no signing path; while disabled, the route and its nav entry do not exist |
| Status claims | unknown on failed read | a failed fetch renders “unknown” — never “live”, never “not deployed” |
| xHISS exits | not pausable | staking and injections can pause; exits and the cooldown path cannot |
No known unresolved Critical or High findings after internal launch review.
SYSTEM.04by the numbersregistry facts
By the numbers
80
docs registry entries
test-pinned
45
MCP tools
test-pinned
18
agent skill packs
committed in skills/
11
x402 services live
Bankr x402 Cloud
SYSTEM.05current blockerswhat stays gated, and why
Current blockers
The honest list of what stays gated. Each one unblocks a specific “later” item above.
- No V2 reward epoch is funded, rooted, or finalized — nothing vests and nothing is claimable; the forward fee-cycle cron is disabled
- Epoch funding requires an owner approval flag plus the exact split-plan hash; neither has been granted
- Provider and contributor reserves are custodied at the Treasury Safe as restricted reserves — custody is not epoch funding, and planned ≠ funded ≠ claimable
- During oracle-stale windows, vault valuation shows the last verified on-chain state, labeled — the deposit execution gate stays strict
- The Meridian x402 lane (USDG on chain 4663) is wired but not enabled; Bankr x402 Cloud is the live payment rail