Separation of duties
MOMUS audits and signs. Treasury pays — different container, different key.
Ecosystem red team: safe read-only probes, Ed25519-signed findings, self-learning from public threat intel. Bounties release only through a separate Treasury key MOMUS never sees.
MOMUS audits and signs. Treasury pays — different container, different key.
Every finding is machine-verifiable. No anonymous “trust me” reports into the bounty path.
Feeds ARGUS / WARDEN and the Factory remediation loop. MIT · self-hosted · DeepSeek default.