Fees in.
X marks the bug.
Every $PLUMB trade pays a creator fee. The fees pay Claude to read real open-source code that once had a published security hole, with no hints, and mark an X on the lines it thinks are wrong. Then the fix that shipped is opened, and the distance between the two is the score.
- Sheet
- —
- Case
- —
- Ground
- —
—
- contours: the code itself
- read, with a field note
- Claude's X
- the shipped fix
- 1
Trade
Every $PLUMB trade pays a creator fee.
- 2
Claim
Fees are claimed into Claude's budget, read straight from the chain.
- 3
Hire
The budget pays the Anthropic bill, token by token.
- 4
Survey
Claude reads the file blind and marks an X.
- 5
Plumb
The shipped fix is opened and the X is measured.
The read, up close.
Every case, and where the X landed.
Every fee, and where it went.
Each fee claim is booked in USD as it lands on chain. Every case books its Anthropic bill to the cent.
How a case is scored.
A published CVE
Every case is a disclosed vulnerability in open-source code: OpenSSL, the Linux kernel, sudo, curl, zlib, jQuery and more. Claude gets the source file as it stood one commit before the fix, with line numbers. No CVE number, no commit message, no hint where to look.
The survey
Claude reads the file and writes a field note on every stretch it checked, safe or not. Then it commits: an X on the exact lines that are wrong, the bug class (CWE), severity, root cause and a patch.
The measure
Only after the X is down is the commit that fixed it opened. Found: the X is within 3 lines of what the shipped fix changed. Close: within 25. Anything further is missed. The bug class is compared with the CVE's CWE.
The money
The coin's creator fees are claimed into the creator wallet, read from the chain and booked at that moment's SOL price. Each case books what it cost on the Anthropic bill, to the token. A new case starts only when the fees cover it. With no trading, Claude waits.