This is the most recent line of the fable to be revealed, exactly as it was written into the transaction that spent it. Until a line has been spent this space stays empty.

A Solana address is a public key. The moment a wallet exists, the thing an attacker needs in order to work backwards to the private key is already public. Today nobody can do that work. Shor's algorithm, run on a quantum computer with enough stable qubits, can. Nobody knows the year, and the honest answer to how long is that every address on the chain is waiting on the same unknown date.

Hash functions sit on different ground. The best known quantum attack on a hash, Grover's algorithm, only takes the square root off the search. A 256 bit hash goes from impossible to still impossible. That is why every serious post quantum signature scheme that people already trust is built out of nothing but hashes: you publish the hash of a secret, and you sign by revealing the secret.

That is all a hash signature is. A list of secrets, a public commitment to them, and a rule that each secret can be shown once. The secrets do not have to be random noise. They only have to be unguessable. So here each secret is a sentence plus 32 random bytes of salt, and the sentences, read in order, are a fable. The salt carries the security. The sentence carries the story. The treasury is spent by telling it.

Each of the 1,024 leaves holds one line and four salts, one salt for each thing the treasury is able to do: buy the token back, burn what it holds, pay holders, or seal fees into the vault. Hashing the line with one of the salts gives an opening. The four openings are hashed together into the leaf. Leaves are hashed in pairs, then the pairs, ten times over, until one hash is left. That last hash is the root.

To act, the next unspent leaf is opened for exactly one of its four actions by revealing the line and that action's salt. The other three openings are shown only as hashes, so their salts stay secret. Ten sibling hashes carry the leaf up to the root. If the result matches the root on chain, the action goes through and the leaf is marked spent.

A normal treasury key can sign forever. This one cannot. The tree has 1,024 leaves and each leaf opens once, so the treasury gets 1,024 actions across its whole life. A line spent on a small buyback is a line that can never be spent on anything else. That limit is the point. It forces every move to be weighed against the moves that are left, and it lets anyone outside see exactly how much of the treasury's life has been used.

When the last line is revealed the story is complete and so is the key. The vault accepts no more openings, and whatever it still holds is burned in the same transaction that reveals the final line.

Creator fees from trading do not arrive inside the vault. They land first in the wallet that created the token, and that wallet is an ordinary Solana keypair. Call that money exposed. It is safe today and it is exactly the kind of balance a quantum attacker would go after first. Money becomes sealed only when a line of the fable is spent on the seal action, which pulls the exposed balance into the vault where no signature can reach it.

So the treasury is always split in two, and the split is a live reading of how the model has chosen to spend its lines. Sealing costs a line. Not sealing leaves fees outside. A stretch of heavy selling while a large balance sits exposed is the worst position to be in, which is why this section counts the trades since the last seal.

Counts cover the most recent fifty trades the feed returns, so a long gap between seals can run past what is shown.

One time keys have a famous weakness: use the same one twice and you leak enough to be forged. Here that weakness is turned into a rule. Every leaf can be opened for one action only. If a second, different opening of an already spent leaf ever shows up on chain, that is proof the holder of the salts tried to act twice on one line. The vault program has an instruction for exactly that case. Anyone who presents both openings of the same leaf can call it, and it pays the whole vault out to the caller.

The model therefore cannot redo a move, cannot quietly change what a line was spent on, and cannot run two actions on one leaf without handing the treasury to whoever notices first. This site checks every record it reads for that pattern.

The twelve most recent swaps of the token, straight from the feed, replaced in place as new ones land.

The ten largest token accounts. Pool and curve accounts appear here like any other holder, because the chain does not label them.

The root is on chain, in a transaction signed by the wallet that created the token. Every revealed line, its salt, the three sibling openings and the ten hash path are on chain in the transaction that spent the leaf. With those and SHA-256 you can recompute the root on any computer and see that it matches. The page called how it works does that calculation in your browser for the latest line and prints every intermediate hash.

The amounts on this site are not taken from anything the vault says about itself. They are read from the before and after balances of the vault account inside each transaction. The exposed and sealed balances are the plain SOL balances of two addresses listed at the bottom of this page. The token figures come from a market data feed and can be compared against any explorer.

That Claude Fable 5.1 wrote the fable. The chain can prove the lines were fixed before launch and never changed. It cannot prove who wrote them.

That the model chooses each action. The salts are held off chain by the keeper that calls the model, and whoever holds a salt can spend its leaf. The trap makes cheating with a spent leaf expensive. It does not prove which mind picked the move.

That the unrevealed lines are a story and not noise. You will only know by reading them as they arrive. A hash commitment hides what it commits to, and that is the same property that keeps the treasury shut.

That a quantum computer capable of breaking a Solana key will be built. If it never is, the exposed side was never in danger, and this was a careful way to spend 1,024 lines.

Everything on this site is derived from the first row. The rest are found from it.