GhostShift
Epoch-fenced handoff audit desk
GET /api/verify · not run
NEAR Hackathon 2026 · Split-brain zombie wakeup
Worker A stalls, so worker B takes over the job at a higher epoch. When A wakes up and writes with its old epoch, an unfenced coordinator accepts it: B's result is overwritten and the bounty is paid twice. GhostShift rejects every write below the current epoch, on-chain.
Epoch fencing + Yield & Resume
The Rust contract bumps a u64 epoch on every takeover and parks settlement in promise_yield_create until the verifier calls promise_yield_resume.
Scoped function-call keys
Worker sub-accounts may call claim_lease, heartbeat, takeover_lease and submit_result. Transfers, AddKey and resume_verify are refused.
Signed offline verifier fixture
secp256k1 signature recovery binds the lease and nonce to a pinned fixture signer. Hardware attestation is not connected.
NEAR Intents 1Click
The winner's payout is priced as a dry: true cross-chain quote preview. No funds move.
Live Testnet Read + safe sandbox simulation
即時鏈上合約狀態讀取 ＋ 瀏覽器安全沙盒模擬。Run judge check reads live RPC; scenario clicks replay the local engine without signing transactions.
ghostshift-v1-mwbxwes8.testnetLive RPC state has not been checked in this page yet.
Running 01. Split-Brain Zombie Wakeup on the server
fast-check PBT04
Each of 200 seeded random action sequences is checked against P1–P4 after every step.
Scenario 01
Worker A stalls in epoch 1; Worker B takes over epoch 2 and settles; Worker A wakes up and attempts a stale epoch 1 write & replay
StaleEpochRejected · 0 Double Payouts (Saved 100,000 units)
Final job stateCompleted
Without GhostShift
Outcomeworker-a.ghostshift.testnet (stale overwrite)
With GhostShift
Outcomeworker-b.ghostshift.testnet
2 rejected calls
client.ghostshift.testnet
Epoch E0create_job(100,000)
Client locks 100,000 units in GhostShift escrow
Job status after this step: Open
worker-a.ghostshift.testnet
Epoch E1claim_lease() -> epoch 1
Worker A claims initial lease with fencing token epoch = 1
Job status after this step: Leased
near-runtime-clock
Epoch E1advance_clock(+5,000ms)
Worker A stalls past 5,000ms lease window
Job status after this step: Leased
worker-b.ghostshift.testnet
Epoch E2takeover_lease() -> epoch 2
Backup Worker B atomically increments epoch to 2 and invalidates epoch 1
Job status after this step: Leased
worker-b.ghostshift.testnet
Epoch E2submit_result(epoch=2) -> YieldPending
Worker B submits clean artifact; contract pauses via promise_yield_create
Job status after this step: YieldPending
worker-a.ghostshift.testnet
Epoch E1submit_result(stale epoch=1) -> REJECTED
Zombie Worker A wakes up and submits stale epoch=1 result while B is yielding; blocked by monotonic epoch fence
Job status after this step: YieldPending
verifier.ghostshift.testnet
Epoch E2resume_verify(epoch=2, TEE=OK) -> Completed
NEAR AI Cloud TEE verifier resumes yieldId and settles 100,000 units to Worker B
Job status after this step: Completed
worker-a.ghostshift.testnet
Epoch E1heartbeat(stale epoch=1) -> REJECTED
Post-settlement zombie replay blocked by TerminalStateImmutable
Job status after this step: Completed
NEAR Rust contract01
Current epoch · fencing token
2
Integer escrow ledger
Offline cryptographic verification02
DETERMINISTIC_SIGNED_FIXTUREVerified
Signed offline fixture: secp256k1 personal_sign recovery and lease/nonce binding verified; hardware attestation is not verified
Fixture data, not a live NEAR AI Cloud attestation. The checks above ran against a deterministic sample envelope.
NEAR Intents03
QUOTE_PREVIEWdry: trueLIVE_1CLICK_QUOTE
In · NEAR
1
wNEAR
Est. out · Base
2.973145
USDC