PRODUCTS
The coverage surface of the three primitives. Every L1, L2, CCIP lane, and CCTP route currently tracked is listed below. Each direction is treated as a distinct signal because source-chain finality drives bridge latency, and CCIP / CCTP topologies are physically asymmetric per direction.
Invarians certifies what the infrastructure is at the moment of query. It does not prescribe execution decisions, recommend strategies, or encode risk tolerance. The three primitives below (Attestation, Regime, Delta) are factual outputs grounded in measurement. The agent owns the execution policy.
Primitive 1 (Attestation) envelopes the entire panel via HMAC-SHA256, regardless of underlying signal type. Applies universally.
Primitive 2 (Regime) classifies state. For L1 and L2 substrates, 12 signed codes (S1+, S2-, D1+, D2+, etc.) capture both structural cadence and demand dimensions. For bridges, a binary state (BS1 nominal, BS2 degraded) reflects pipeline health.
Primitive 3 (Delta) tracks deviation from a 30-day baseline using exponential moving averages. It is a substrate-physics concept: chains evolve under agentic load on the scale of weeks. Bridges are operational pipelines, not substrates; their fitness-for-action is captured directly by current latency P90/P99, success rate, and crypto anchor verifiability, without a Delta.
Per-chain structural regime (12 signed S/D codes) computed on a rolling 30-day baseline. Each L1 has independent observables (rhythm, beacon participation where applicable, structural cadence) and an independent Delta.
| Chain | Calibration | Regime signal | Delta |
|---|---|---|---|
| Ethereum | Calibrated 2026-04 | Active | Active |
| Polygon | Calibrated 2026-04 | Active | Active |
| Avalanche | Calibrated 2026-04 | Active | Active |
| Solana | Calibration scheduled 2026-Q3 | Planned 2026-Q3 | Planned 2026-Q3 |
Solana sits on a different substrate physics family from EVM chains (slot-based 400ms cadence, leader rotation, vote economics). Calibration on Solana requires its own observable set distinct from EVM chains, programmed for 2026-Q3.
Per-rollup regime tracking sequencer publish latency P97, batch posting cadence, and inclusion behavior. Anchored to Ethereum L1 finality for parent-chain context.
| Chain | Type | Calibration | Signal status |
|---|---|---|---|
| Arbitrum | Optimistic rollup | Calibrated 2026-04 | Active |
| Base | Optimistic rollup | Calibrated 2026-04 | Active |
| Optimism | Optimistic rollup | Calibrated 2026-04 | Active |
Each CCIP lane has its own OnRamp / OffRamp / RMN configuration. ETH → ARB and ARB → ETH are two physically distinct lanes with separate contracts and potentially different DON commit cadences. Each direction is processed as an independent signal.
Four lanes operate on Chainlink CCIP V1.6 chain-based architecture (ETH ↔ ARB and ETH ↔ BASE). The six remaining lanes operate on CCIP V1.5 lane-based architecture. The two protocol versions emit different events at the source (CCIPSendRequested V1.5 vs CCIPMessageSent V1.6) and the destination (ExecutionStateChanged with different ABIs and indexed fields); both versions are decoded by the same collector and surfaced uniformly in the panel.
| Lane | Version | Source events (OnRamp) | Destination events (OffRamp) | RMN check | Status |
|---|---|---|---|---|---|
| ETH → ARB | V1.6 | Captured · CCIPMessageSent | Captured · ExecutionStateChanged | Both sides | Active |
| ARB → ETH | V1.6 | Captured · CCIPMessageSent | Captured · ExecutionStateChanged | Both sides | Active |
| ETH → BASE | V1.6 | Captured · CCIPMessageSent | Captured · ExecutionStateChanged | Both sides | Active |
| BASE → ETH | V1.6 | Captured · CCIPMessageSent | Captured · ExecutionStateChanged | Both sides | Active |
| ETH → OP | V1.5 | Captured · CCIPSendRequested | Captured · ExecutionStateChanged | Both sides | Active |
| OP → ETH | V1.5 | Captured · CCIPSendRequested | Captured · ExecutionStateChanged | Both sides | Active |
| ETH → POL | V1.5 | Captured · CCIPSendRequested | Captured · ExecutionStateChanged | Both sides | Active |
| POL → ETH | V1.5 | Captured · CCIPSendRequested | Captured · ExecutionStateChanged | Both sides | Active |
| ETH → AVAX | V1.5 | Captured · CCIPSendRequested | Captured · ExecutionStateChanged | Both sides | Active |
| AVAX → ETH | V1.5 | Captured · CCIPSendRequested | Captured · ExecutionStateChanged | Both sides | Active |
| ETH → SOL | V1.6 | Pending | Pending | Pending | Planned 2026-Q3 |
| SOL → ETH | V1.6 | Pending | Pending | Pending | Planned 2026-Q3 |
ETH ↔ SOL CCIP is the only lane in the matrix that crosses substrate physics families (EVM blocks vs Solana slots). Solana support is native to CCIP V1.6. Treated as a primary observability target once the Solana side of the CCIP infrastructure (dual-RPC capture, program log parsing) is integrated.
CCIP capability level: per_message_attested on both V1.5 and V1.6 lanes. Source send and destination execute are matched per message via the bytes32 messageId (same canonical join key on both versions). Latency P90 is computed on captured messages. crypto.anchor is null today; DON multi-sig CommitReport capture is the next step toward per_message_crypto_anchored.
CCTP attestation latency is dominated by source-chain finality: the Circle Iris V2 service waits for source confirmation before issuing the attestation. ETH→X and X→ETH therefore have fundamentally different latency distributions because L1 finality (~13 min) is much slower than L2 soft confirmations. Scope migrated to V2 on 2026-05-27 (Circle V1 sunset 2026-07-31): 10 ETH-paired bidirectional routes (ETH ↔ ARB / BASE / OP / AVAX / POL). L2-to-L2 routes are dropped from V2 scope.
Each attested message is captured with its Circle ECDSA signature (65-byte secp256k1). This signature is independently verifiable against Circle's published attester public key, anchoring CCTP route signals in a cryptographic chain of trust distinct from the Invarians HMAC envelope. Per-message attestations are retrievable via /v2/cctp/attestation/{nonce} — V2 keys retrieval by the Circle-attributed nonce (bytes32), since the V2 protocol no longer carries a deterministic at-burn message hash.
Standard / Fast asymmetry-by-design. Each CCTP V2 route carries two execution modes. Invarians treats them asymmetrically because we serve agents whose temporality is slow and finality-bound — a one-hour aggregation window does not represent Fast (whose nominal latency lives in seconds), and Fast is contraindicated for the RWA execution context anyway (finality risk a settlement agent cannot take). The panel exposes Standard at the top of each bridge entry (metrics) as the canonical mode for the audience, and Fast in a subordinated observed_fast_mode object documented as "observed but outside the RWA calibration frame".
Classification under BRIDGE_STATE_STRUCTURAL_v1.2. The corridor flips to BS2 when the Fast-mode window invariant breaches its calibrated envelope (success rate, fallback rate over the 1 h window), or when invariant I5 detects a Standard-mode message older than 48 h without an Iris attestation. The 48 h cap is mechanically derived (Polygon-Heimdall pathological reorg 4 h + Ethereum non-finalization upper bound 24 h + Iris attestation envelope 1 h, times 1.5 safety margin) and immutable unless Circle publishes a Standard-mode SLA that supersedes it.
| Route | DepositForBurn V2 (source) | Iris V2 attestation (signature + nonce) | Status |
|---|---|---|---|
| ETH → ARB | Captured | Captured · ECDSA | Active |
| ETH → BASE | Captured | Captured · ECDSA | Active |
| ETH → OP | Captured | Captured · ECDSA | Active |
| ETH → AVAX | Captured | Captured · ECDSA | Active |
| ARB → ETH | Captured | Captured · ECDSA | Active |
| ARB → BASE | — | — | Dropped (V2 scope: ETH-paired only) |
| BASE → ETH | Captured | Captured · ECDSA | Active |
| BASE → ARB | — | — | Dropped (V2 scope: ETH-paired only) |
| OP → ETH | Captured | Captured · ECDSA | Active |
| AVAX → ETH | Captured | Captured · ECDSA | Active |
| ETH → POL | Captured | Captured · ECDSA | Active (V2, since 2026-05-27) |
| POL → ETH | Captured | Captured · ECDSA | Active (V2, since 2026-05-27) |
| ETH → SOL | Pending | Pending | Planned 2026-Q3 |
| SOL → ETH | Pending | Pending | Planned 2026-Q3 |
ETH ↔ SOL CCTP is the only route where the source event lives in EVM logs on one side and in a Solana program log on the other. The Iris V2 attestation client is chain-agnostic (keyed by (source_domain, source_tx_hash), both delivered by Circle regardless of source substrate), so the integration cost sits in the source / destination capture path, not in attestation handling. Targeted for 2026-Q3.
/v2/panel. For CCTP routes, this includes per-message ECDSA attestation capture (capability level: per_message_attested). Calibration validated against historical baselines.
Every entry in the four matrices above feeds the same panel response. L1 / L2 entries populate panel.l1[] and panel.l2[] with their structural regime (12 signed S/D codes) and Delta (Primitive 3, substrate-physics). Each CCIP lane and CCTP V2 route appears as one bridge entry in panel.bridges[] with its unified state (BS1 nominal, BS2 degraded), capability_level: per_message_attested for both protocols, with per-message metrics. crypto.anchor differs by protocol: circle_ecdsa for CCTP, null for CCIP (no per-message cryptographic anchor captured yet). For CCTP V2, metrics reflects the Standard mode (RWA-canonical) and observed_fast_mode exposes Fast as observed data only; a confounded_by_iris_downtime flag marks rows the calibration must exclude. Bridges do not carry a Delta: as operational pipelines rather than substrates, their fitness-for-action is captured directly by current latency P90/P99, success rate, and crypto anchor verifiability. The signed execution context wraps the full panel; integrity is verifiable via POST /v2/verify.