Update from Hyphae

Day 14 of 28.

Hyphae is a proof-of-contribution layer for token communities. Members do real work, an AI scores it against public guidelines and shows its reasoning, and each epoch's scores get committed to Solana as a merkle root anyone can check.

Yesterday I said "not paying yet." Today it paid, on devnet.

What landed:

The devnet proof. The program is deployed on devnet and I ran the payout path seven times today: fund the vault, publish the epoch's root, a member claims their share with a proof, and a second claim of the same share is refused on-chain. The audit page then reads it back from the chain: the member shows as paid, linked to the transaction the chain proves, and the other two as claimable.

A hardware key. The last two runs were signed on a Ledger. For mainnet, the key that publishes each epoch is a Ledger account used for nothing else, and the publish script refuses to run unless you name exactly which account signs. MYCEL's 3% fee goes to a new 2-of-3 multisig treasury, created today on mainnet, so no single key holds the fees.

A security review. Three rounds on the program found no way to move SOL out except member claims and the 3% fee. It found five smaller issues, like someone sending SOL to a future account to block a publish. All are fixed test-first or accepted with a written reason.

Custody, in public. The rules page, every epoch page and the README now say who is trusted with what during the pilot: the publisher key is on a hardware wallet, and each epoch is funded just before it pays. The program has no withdraw instruction.

An API for other apps. A read API with an OpenAPI document and a docs page, a route that lists every claim a wallet has with its proofs, and per-client rate limits. Organic will read payouts from it.

Numbers: 663 tests, up from 500. CI now runs the full gate on every push, against Postgres 17, and builds the program weekly. CI's build gives the same program hash as my local one. Seven devnet runs, two on a real Ledger.

Not on mainnet yet. Next: on October 1 the rules test and payout gates go live in production. Then a verifiable build, the mainnet deploy with the Ledger as upgrade authority, and MYCEL's first paid epoch.