{
  "generatedAt": "2026-06-07T08:22:46Z",
  "scope": [
    "DRK ERC-20 contract identity and role controls",
    "DRK/WETH LP timelock contract",
    "LP custody evidence",
    "Operator-funded pool support evidence",
    "Public site claims and valuation boundaries",
    "Atomic Chain DRK.e bridge route and public-deposit boundary"
  ],
  "completedEvidence": [
    "DRK source verified on Etherscan.",
    "DRKLiquidityTimelock source verified on Etherscan.",
    "99.9911% of LP supply timelocked until 2026-12-03T19:41:39Z.",
    "0.010 ETH operator-funded Uniswap V2 support buy published.",
    "Live role-control proof published.",
    "Atomic Chain bridge go/no-go gate published with public canonical deposits closed.",
    "External audit request packet published."
  ],
  "openFindings": [
    {
      "severity": "high",
      "title": "Privileged roles remain with deployer EOA",
      "detail": "DEFAULT_ADMIN_ROLE, CONTRACT_ADMIN_ROLE, MINTER_ROLE, and BURNER_ROLE are live on the deployer wallet according to drk-role-control-proof.json.",
      "requiredFix": "Move roles to a Safe/multisig or publish and execute a fixed-supply role-renounce plan. Current execution plan is published at drk-role-custody-action-plan.json."
    },
    {
      "severity": "medium",
      "title": "No external audit report",
      "detail": "Verified source and self-review evidence exist, but no independent audit report has been submitted.",
      "requiredFix": "Commission and publish an external audit covering DRK roles, timelock, custody, and public claims."
    },
    {
      "severity": "medium",
      "title": "Liquidity remains thin",
      "detail": "LP custody and support proof improved trust, but pool depth remains too thin for reliable public valuation.",
      "requiredFix": "Add deeper liquidity only after verified router/pool route and role-control posture are resolved."
    },
    {
      "severity": "high",
      "title": "Canonical DRK bridge is not production-active",
      "detail": "Atomic Chain read-only RPC and test-token round-trip evidence are published, but public canonical DRK deposits, withdrawals, DRK.e production minting, and customer-fund settlement remain closed.",
      "requiredFix": "Publish bridge owner Safe, pause controls, production escrow or canonical mapping transaction evidence, reconciliation process, and tiny canonical DRK round-trip evidence before any live bridge claim."
    }
  ],
  "evidenceLinks": {
    "roleControlProof": "https://darkcoin.uk/drk-role-control-proof.json",
    "roleCustodyActionPlan": "https://darkcoin.uk/drk-role-custody-action-plan.json",
    "roleCustodyPage": "https://darkcoin.uk/role-custody/",
    "timelockProof": "https://darkcoin.uk/drk-lp-timelock-proof.json",
    "timelockVerification": "https://darkcoin.uk/drk-lp-timelock-verification.json",
    "poolSupportProof": "https://darkcoin.uk/drk-pool-support-proof.json",
    "marketDataPacket": "https://darkcoin.uk/market-data-submission-packet.json",
    "atomicBridgeGoNoGo": "https://atomic-a-i.cloud/atomic-chain/bridge/bridge-go-no-go.json",
    "externalAuditRequestPacket": "https://darkcoin.uk/external-audit-request-packet.json",
    "externalListingLiveCheck": "https://darkcoin.uk/external-listing-live-check.json",
    "liquidityActionPlan": "https://darkcoin.uk/drk-liquidity-action-plan.json"
  },
  "boundary": "This is an internal readiness report, not an independent third-party audit."
}