{
  "projectId": "aether-forge",
  "title": "Aether Forge · 源码静态检查与执行边界",
  "summary": "源码具备策略门控与运行框架，但检查到的 Stage 1 live_execution 模块仍使用占位交易 hex。其 dry_run 默认 true，仍会走签名消息路径；不能把 dry-run 泛化为完全无钱包动作。",
  "scope": "固定 commit 的官方源码 ZIP 的 REA 文件清单与 Python runner/live_execution 模块检查；PyPI 与 npm 名称查询未取得可用发布包。",
  "status": "partial",
  "analyzedAt": "2026-10-13",
  "tool": {
    "name": "REA",
    "version": "6.4.0"
  },
  "findings": [
    {
      "title": "REA 已固定源码归档身份与文件清单",
      "detail": "inspect_artifact 返回 462 个内容节点、479 个文件/目录出现项。这个结果证明本次检查输入的身份和结构，不证明 Python、Go 或 Rust 代码运行行为，也不等同于完成产品逆向。",
      "evidenceType": "observed",
      "evidenceIds": [
        "ev_f52e75c9f2a51c24ee203f0ef8bc90f8802f23ff3db15ff782ab18d8e8c07538"
      ],
      "sourceUrls": [
        "https://codeload.github.com/HeyElsa/aether-forge/zip/aae0651bb7c5d7a9cdd86cd676964b394fea44ec"
      ]
    },
    {
      "title": "Stage 1 交易构造仍是占位实现",
      "detail": "live_execution.py::_build_order_tx 将订单 JSON 编码成十六进制字符串，注释明确称 Stage 1 placeholder，后续阶段才会构造真实 Elsa 格式交易或调用下单接口。这个模块的存在不足以证明已具备可运行的生产交易路径；项目其他模块未在此结论中概括。",
      "evidenceType": "code_inference",
      "evidenceIds": [],
      "sourceUrls": [
        "https://github.com/HeyElsa/aether-forge/blob/aae0651bb7c5d7a9cdd86cd676964b394fea44ec/src/aether_forge/live_execution.py#L330"
      ]
    },
    {
      "title": "dry_run 会签名消息，不进行该分支广播",
      "detail": "LiveExecutionConfig 默认 chain=base-sepolia、dry_run=true；place_limit_order 的 dry-run 分支调用 wallet.sign_message，返回 signed_dry_run。名称中的 dry-run 只限定此处不广播，不能推出无签名或无钱包权限。",
      "evidenceType": "code_inference",
      "evidenceIds": [],
      "sourceUrls": [
        "https://github.com/HeyElsa/aether-forge/blob/aae0651bb7c5d7a9cdd86cd676964b394fea44ec/src/aether_forge/live_execution.py#L42",
        "https://github.com/HeyElsa/aether-forge/blob/aae0651bb7c5d7a9cdd86cd676964b394fea44ec/src/aether_forge/live_execution.py#L178"
      ]
    },
    {
      "title": "预算上限与运行环境有可定位实现",
      "detail": "RunnerConfig 默认 sandbox、auto_approve=false。LiveExecutionConfig 定义单笔、累计支出、日损失与并发订单上限，place_limit_order 在构造交易前调用 _check_circuit 与 _check_budget；这属于代码存在性及流程推断，本次没有验证状态持久性或绕过路径。",
      "evidenceType": "code_inference",
      "evidenceIds": [],
      "sourceUrls": [
        "https://github.com/HeyElsa/aether-forge/blob/aae0651bb7c5d7a9cdd86cd676964b394fea44ec/src/aether_forge/runner.py#L41",
        "https://github.com/HeyElsa/aether-forge/blob/aae0651bb7c5d7a9cdd86cd676964b394fea44ec/src/aether_forge/live_execution.py#L45",
        "https://github.com/HeyElsa/aether-forge/blob/aae0651bb7c5d7a9cdd86cd676964b394fea44ec/src/aether_forge/live_execution.py#L151",
        "https://github.com/HeyElsa/aether-forge/blob/aae0651bb7c5d7a9cdd86cd676964b394fea44ec/src/aether_forge/live_execution.py#L260"
      ]
    }
  ],
  "limitations": [
    "官方 README 说明 Python 包尚未发布到 PyPI；本次 PyPI aether-forge JSON 返回 404，npm @aether-forge/sdk 查询也未取得包。无法声称已检查官方可安装发行包。",
    "REA 仅提供源码归档清单，不提供 Python 语义分析；代码结论限定到被引用的模块与 commit。",
    "未安装项目依赖、运行 agent、签名、部署智能合约或验证链上身份声明。"
  ],
  "artifacts": [
    {
      "label": "官方源码归档 · aae0651bb7c5",
      "url": "https://codeload.github.com/HeyElsa/aether-forge/tar.gz/aae0651bb7c5d7a9cdd86cd676964b394fea44ec",
      "sha256": "5db59baaf0cdc2d9871f8999ff5528d890a167040d6f0d801f3362263e0fbc98",
      "bytes": 73745888
    },
    {
      "label": "REA 输入：官方源码 ZIP · aae0651bb7c5",
      "url": "https://codeload.github.com/HeyElsa/aether-forge/zip/aae0651bb7c5d7a9cdd86cd676964b394fea44ec",
      "sha256": "578049fb3949ad20be7dd8802448f9541ce69bc231363c238dacbd63c7e2f3a5",
      "bytes": 73925405
    }
  ],
  "evidenceIds": [
    "ev_f52e75c9f2a51c24ee203f0ef8bc90f8802f23ff3db15ff782ab18d8e8c07538"
  ],
  "reportUrl": "/research/rea/aether-forge.json",
  "methodology": "REA 原始输出负责产物身份、文件结构或原生元数据；code_inference 结论来自带固定版本引用的源码阅读。未完成动态运行、实盘测试、完整安全审计或收益验证。",
  "sourceCommit": "aae0651bb7c5d7a9cdd86cd676964b394fea44ec",
  "releasedArtifactAvailable": false,
  "analysisInput": {
    "sha256": "578049fb3949ad20be7dd8802448f9541ce69bc231363c238dacbd63c7e2f3a5",
    "format": "zip",
    "evidenceId": "ev_f52e75c9f2a51c24ee203f0ef8bc90f8802f23ff3db15ff782ab18d8e8c07538",
    "operation": "inspect_artifact",
    "publicSourceUrls": [
      "https://codeload.github.com/HeyElsa/aether-forge/zip/aae0651bb7c5d7a9cdd86cd676964b394fea44ec"
    ]
  },
  "analysisAttempts": [
    {
      "command": "rea inspect-artifact <aether-forge source directory> --format json",
      "result": "unavailable",
      "code": "target_unavailable",
      "reason": "REA CLI 的此入口拒绝普通目录；已改用明确记录的 ZIP 输入。"
    },
    {
      "command": "rea inspect-artifact aether-forge-source.zip --format json",
      "result": "completed",
      "evidenceIds": [
        "ev_f52e75c9f2a51c24ee203f0ef8bc90f8802f23ff3db15ff782ab18d8e8c07538"
      ],
      "coverage": "public_source_archive_inventory"
    }
  ]
}