Testnet demo. Test banks and test money only.

Contents and search

KredoFi docs

Verify it yourself

Check the pinned scorer, the published WASM and a real on-chain score.

Everything below uses public data only. No account or key needed.

#1. Which scorer does mainnet trust?

curl -s https://rpc.mainnet.near.org -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"query","params":{"request_type":"call_function","finality":"final","account_id":"kredofi.near","method_name":"get_config","args_base64":""}}' | python3 -c "import json,sys;c=json.loads(bytes(json.load(sys.stdin)['result']['result']));print(c['scorer_mode'],c['scorer_version'])"

Expected: OutLayer 7048cc92a708564df3acdececd9a9880c3054f6d9ff0b4cebedd51ac268dc978

#2. Is the published WASM that file?

curl -sL https://raw.githubusercontent.com/kenil1710/kredofi-scorer-wasm/f174d555cc79f009d4275b32ad9f4e533c823531/kredofi_scorer.wasm | shasum -a 256

Expected: 7048cc92a708564df3acdececd9a9880c3054f6d9ff0b4cebedd51ac268dc978. OutLayer downloads the scorer from this commit-pinned address and checks the same hash.

#3. Did a real score come from the enclave?

Open the scoring transaction (mainnet, 2 November 2026, with the current scorer; the first, on 1 November with the earlier build, is here). Its receipts show request_score, the request to outlayer.near with the pinned version, the private callback on_score, the event score_issued (band A, 1,000) and the unused fee refunded to the borrower.

#4. Can anyone else write a score?

No. On mainnet the contract is in OutLayer mode, so dev_submit_score is refused, and on_score is a private callback only the contract's own request can reach. Fake scores, wrong callers, wrong versions and reused fingerprints are all tested.

#5. Does the WASM come from this source?

The source is in the repository (scorer/). The pinned build is made on x86_64 Linux in a pinned Rust image: ./scorer/build-docker.sh gives 7048cc92a708564df3acdececd9a9880c3054f6d9ff0b4cebedd51ac268dc978 on any x86_64 machine with Docker, and the repository's GitHub workflow prints the same hash (two separate runs matched). Builds on macOS or ARM Linux give other hashes for the same source, which is why one platform is canonical.

#6. The testnet demo

curl -s https://kredofi.xyz/api/ledger | python3 -c "import json,sys;print(json.load(sys.stdin)['config']['scorer_version'])"

Expected: ac8e2a9c732db84ccaee2854ed4f0b8394443b47e51dc7fcf8499005051ec0e9. The server refuses to score if its WASM's hash differs from the pinned one. Every event on the public ledger links to its transaction on testnet.nearblocks.io.

#7. Contract deployments