{
  "projectId": "valuecell",
  "title": "ValueCell · 发布产物与执行边界",
  "summary": "发布包实际包含 Python 后端，并将 virtual 与 live 分流到不同执行器。默认交易模式是 virtual；切换到 live 后需要账户凭证，且 testnet 独立配置默认 false。",
  "scope": "官方 v0.1.20 macOS arm64 .app 发布包的 REA 清单，以及包内实际分发的 Python 交易代码。未安装、启动或配置账户。",
  "status": "partial",
  "analyzedAt": "2026-10-13",
  "tool": {
    "name": "REA",
    "version": "6.4.0"
  },
  "findings": [
    {
      "title": "REA 已检查真实桌面发行包清单",
      "detail": "inspect_artifact 返回 322 个内容节点、349 个文件/目录出现项。这个结果证明本次检查输入的身份和结构，不证明 Python、Go 或 Rust 代码运行行为，也不等同于完成产品逆向。",
      "evidenceType": "observed",
      "evidenceIds": [
        "ev_55c41380c84ee455c4a2bfe6dd4de9b6e0530e4f31b6641e4033ae9849e4c082"
      ],
      "sourceUrls": [
        "https://github.com/ValueCell-ai/valuecell/releases/tag/v0.1.20"
      ]
    },
    {
      "title": "实际发布包内含 Python 交易后端",
      "detail": "本次 .app 的 Contents/Resources/backend 包含交易模型、执行器工厂和 CCXT 执行器。三份检查文件的 SHA-256 均与引用的固定 GitHub commit 完全一致，因此以下源码推断可以定位到本次发布包内的同一份代码。",
      "evidenceType": "code_inference",
      "evidenceIds": [],
      "sourceUrls": [
        "https://github.com/ValueCell-ai/valuecell/blob/9793e9c0563fbf56fc096757d8bb80e209ac7aab/python/valuecell/agents/common/trading/models.py#L158",
        "https://github.com/ValueCell-ai/valuecell/blob/9793e9c0563fbf56fc096757d8bb80e209ac7aab/python/valuecell/agents/common/trading/execution/factory.py#L29",
        "https://github.com/ValueCell-ai/valuecell/blob/9793e9c0563fbf56fc096757d8bb80e209ac7aab/python/valuecell/agents/common/trading/execution/ccxt_trading.py#L1124"
      ]
    },
    {
      "title": "virtual 默认值与 testnet 开关相互独立",
      "detail": "ExchangeConfig 的 trading_mode 默认 VIRTUAL，testnet 默认 false。执行器工厂在 virtual 模式返回 PaperExecutionGateway；在 live 模式创建 CCXTExecutionGateway 并传递 testnet 配置。切换 live 不能理解为自动进入交易所测试网。",
      "evidenceType": "code_inference",
      "evidenceIds": [],
      "sourceUrls": [
        "https://github.com/ValueCell-ai/valuecell/blob/9793e9c0563fbf56fc096757d8bb80e209ac7aab/python/valuecell/agents/common/trading/models.py#L158",
        "https://github.com/ValueCell-ai/valuecell/blob/9793e9c0563fbf56fc096757d8bb80e209ac7aab/python/valuecell/agents/common/trading/models.py#L179",
        "https://github.com/ValueCell-ai/valuecell/blob/9793e9c0563fbf56fc096757d8bb80e209ac7aab/python/valuecell/agents/common/trading/execution/factory.py#L29"
      ]
    },
    {
      "title": "实盘凭证要求因接入场所而不同",
      "detail": "live 工厂对常规交易所要求 api_key 与 secret_key；对 Hyperliquid 要求 wallet_address 与 private_key。CCXT 执行器包含 exchange.create_order 调用。这说明产品可具备执行权限，但本次没有验证密钥保存、网络行为或订单结果。",
      "evidenceType": "code_inference",
      "evidenceIds": [],
      "sourceUrls": [
        "https://github.com/ValueCell-ai/valuecell/blob/9793e9c0563fbf56fc096757d8bb80e209ac7aab/python/valuecell/agents/common/trading/execution/factory.py#L41",
        "https://github.com/ValueCell-ai/valuecell/blob/9793e9c0563fbf56fc096757d8bb80e209ac7aab/python/valuecell/agents/common/trading/execution/ccxt_trading.py#L1124"
      ]
    }
  ],
  "limitations": [
    "REA 完成应用文件清单，而非运行时、完整反编译或交易后端审计；Python 行为是发布包内代码的静态推断。",
    "GitHub 资产摘要已匹配，未验证 Apple 签名公证、自动更新或安装体验。",
    "没有运行应用、读取个人配置、输入 API Key、创建钱包或提交订单。"
  ],
  "artifacts": [
    {
      "label": "官方源码归档 · 9793e9c0563f",
      "url": "https://codeload.github.com/ValueCell-ai/valuecell/tar.gz/9793e9c0563fbf56fc096757d8bb80e209ac7aab",
      "sha256": "4b66748dc3e3adc02ff231f0f4337e5e0d9f5df64075181f1777fd68fc501b62",
      "bytes": 7317872
    },
    {
      "label": "ValueCell 官方发布档案",
      "url": "https://github.com/ValueCell-ai/valuecell/releases/download/v0.1.20/ValueCell-0.1.20-beta-darwin-aarch64.app.tar.gz",
      "sha256": "ad47a1016755af45929bc4525ae1c553b401f2e0d12d83224013e66dbd908033",
      "bytes": 28887953
    }
  ],
  "evidenceIds": [
    "ev_55c41380c84ee455c4a2bfe6dd4de9b6e0530e4f31b6641e4033ae9849e4c082"
  ],
  "reportUrl": "/research/rea/valuecell.json",
  "methodology": "REA 原始输出负责产物身份、文件结构或原生元数据；code_inference 结论来自带固定版本引用的源码阅读。未完成动态运行、实盘测试、完整安全审计或收益验证。",
  "sourceCommit": "9793e9c0563fbf56fc096757d8bb80e209ac7aab",
  "releasedArtifactAvailable": true,
  "analysisInput": {
    "sha256": "7ef426c5aa8ca71ef734d565a40aaabac391c7063819cd224f9c5198562fd5ba",
    "format": "directory",
    "evidenceId": "ev_55c41380c84ee455c4a2bfe6dd4de9b6e0530e4f31b6641e4033ae9849e4c082",
    "operation": "inspect_artifact",
    "publicSourceUrls": [
      "https://github.com/ValueCell-ai/valuecell/releases/tag/v0.1.20"
    ]
  },
  "analysisAttempts": [
    {
      "command": "rea inspect-artifact ValueCell.app --format json",
      "result": "completed",
      "evidenceIds": [
        "ev_55c41380c84ee455c4a2bfe6dd4de9b6e0530e4f31b6641e4033ae9849e4c082"
      ],
      "coverage": "published_artifact_inventory"
    }
  ],
  "fileIdentityChecks": [
    {
      "publishedPath": "Contents/Resources/backend/valuecell/agents/common/trading/models.py",
      "sha256": "8a9dbfb2b48ee6d6a63094b14e4869703e6cc378e2c0dd91412420ad965e1b90",
      "sourceCommit": "9793e9c0563fbf56fc096757d8bb80e209ac7aab",
      "sourceMatches": true
    },
    {
      "publishedPath": "Contents/Resources/backend/valuecell/agents/common/trading/execution/factory.py",
      "sha256": "21d6478e2a0951c200204e7f7a6144ff8d6a04154deb6d0b2c638886a9bcf1d2",
      "sourceCommit": "9793e9c0563fbf56fc096757d8bb80e209ac7aab",
      "sourceMatches": true
    },
    {
      "publishedPath": "Contents/Resources/backend/valuecell/agents/common/trading/execution/ccxt_trading.py",
      "sha256": "a8b8b5cf880159e5cc02b6b14fc12e36471c1d50721345feb5a5a16c7c50e9ae",
      "sourceCommit": "9793e9c0563fbf56fc096757d8bb80e209ac7aab",
      "sourceMatches": true
    }
  ]
}