Risk Labels
Use these labels before treating a page, route, receipt, or feed as stronger than the evidence supports.
QUADPublic Accountability
Use these labels before treating a page, route, receipt, or feed as stronger than the evidence supports.
Most bad public claims start when one assumption quietly borrows another surface's authority.
Which chain or public surface is allowed to say the state is true?
When was the state last updated, and what happens when it goes stale?
Who pays for the route, provider, gas, proof work, refund, or continuity lane?
Is the public route live, staged, stale, disabled, or only an orientation link?
Does a host chain, relayer, registry, provider, wallet, or indexer need to accept something?
Does the evidence prove only observation, or does it also prove admission, custody, settlement, or closure?
Each row names the public risk, the current safe reading, and what would reduce it.
The safe response is a smaller claim, not a louder promise.
Reject the action when owner, funding, signer, endpoint, denom, quote, or proof state is invalid.
Stop accepting new work when the route, provider, relayer, host lane, or funding path is unavailable.
Keep orientation available while lowering live, production, continuity, or current-state claims.
Hold uncertain value, route output, proof result, or counterparty state until the owner can classify it.
Return accepted value only under the owner surface's published refund and receipt rule.
Close an item as expired, refused, written off, stale, unrecoverable, or completed with a public label.
A public risk register makes review easier. It does not open closed systems.
This page does not open production value movement, liquidity, redemption, sale access, or allocation.
This page does not publish credentials, signer handling, provider accounts, private logs, or non-public implementation detail.
Core, Infra, Bridge, Liquid, the website, wallets, registries, and crawlers do not inherit each other's proof.