跳转到正文

技术详情、法律文件和部分账户流程仍使用英语。

MITHRIL / WHITE HAT RESEARCH

Empower those who protect.

Bring our strengths together. Bring light back to the world.

Some notice the dangers others overlook.

Some look deeper into systems, determined to make them better.

Some use that knowledge to protect everyday lives.

mithril.fund supports the curiosity and creativity of white hats.

One person’s discovery becomes a community’s strength.

Together, that strength can change the world.

Investigate authorized code. Validate the finding. Ship the fix. Specialized LLM inference for verified white-hat researchers, with a free research allowance.

Researcher onboarding Pricing & credits (from $10) Explore the model

Preparing for launch — the selected model returned a real response on the dedicated deployment. Site inference remains closed until identity verification and review are connected.

Rendered live in your browser by kami-engine

01 / INVESTIGATE

Review the code

Inspect code you own or are authorized to review for authorization gaps and input validation issues.

02 / VALIDATE

Ground the finding

Work through reachability, impact and false positives to produce evidence-backed findings.

03 / REMEDIATE

Close the loop

Prepare fixes, regression tests and reports for responsible disclosure.

A model built for investigation

TEXT / VISION / MoE

Qwen3.8 Flash Next

A real response has been verified on the dedicated deployment. Scaling up from idle can take several minutes. Access remains gated while identity verification and review are connected.

qwen3.8-flash-next-whitehacker

Model card ↗

One verified identity. A free research workspace.

  1. Account

    Sign in with your existing account. A connected wallet alone is not verified identity.

  2. eKYC

    Identity verification runs on Stripe Identity only. Completing the document and selfie check at verify.stripe.com approves the account automatically (ekyc 365d, screening 24h, trust 60 points).

  3. AML / CTF

    Sanctions and PEP screening, risk review and additional checks where needed. Pending, expired or suspended records cannot infer.

  4. Free research

    Confirm authorization and research scope, then use the free allowance. Ongoing review keeps eligibility current.

$0 for verified researchers

Free allowance: 1,000 requests per day, up to 32,768 output tokens per request. Usage stops at the limit — no automatic charges. Past the allowance, monthly plans from $20/mo or prepaid AI credits keep requests running (never charged twice): top up any whole-dollar amount from $10 to $1,000 — one-time, 12-month validity, and larger packs carry a bonus ($50→51 credits +2%, $100→103 +3%, $500→525 +5%, $1,000→1,100 +10%) — or subscribe to a plan, or turn on automatic recharge.

Top up AI credits from $10 →

Before you spend a dollar, ground your work in our free open-data mirror — NVD CVE history (395k+), CISA KEV, EPSS, CWE, MITRE ATT&CK and ad-network intelligence as Parquet, no account needed: knowledge.mithril.fund

Sign in first Research registration (Stripe Identity)

Preparing for launch — the selected model returned a real response on the dedicated deployment. Site inference remains closed until identity verification and review are connected.

Research terms & data notice

Do not enter identity documents, face images, private keys or API keys here. Before provider setup, application data is not sent or saved.

Research workspace

New models, pricing and free-allowance changes, by email

Your address is recorded once in Mithril's sales system and used for these updates. No other use.

Research terms & data notice

For authorized code review, vulnerability triage and remediation. No unauthorized intrusion, credential theft, destructive activity or third-party research without permission. Identity verification does not grant research authorization.

First-party browser identity verification is in development. Documents, face images, names and birth dates will never be sent to the inference model. The service is designed to retain minimal verification status, expiry, evidence references, review and usage records. Verification intake remains closed until providers, retention periods, transfer destinations, deletion and appeal contacts are finalized and published.

PEP status or a possible name match is not automatically a finding of wrongdoing. Additional checks and human review are planned. Legal AML/CTF obligations depend on the operator and service jurisdictions.

确认 Stable Principal

登录以确认 Stable Principal。这是第一个可完成的步骤。尚不提供 Hosted apply。

现在可以完成：登录，确认 Stable Principal，然后将其连接到 Kotobase。

使用 Base Account 开始

三个执行平面。边界完整。

这些服务相互连接，但不会成为一个巨大的信任域。每个权限实体都保持独立治理。

控制 + 身份

Mithril

Passkey 验证稳定 Principal。控制平面发布 CLI 部署所使用的拓扑结构和权限下限。

auth.mithril.fund · api.mithril.fund

一个发布 CID，可从多个提供商执行

发布 CID 在一个 IPLD 图中固定了命名空间头、定义、原始 Wasm、编译收据以及可复现性证据。名称和 GitHub 仅用于发现和溯源。

捆绑

在一个发布 CID 下封闭定义、Wasm 工件和编译收据。

复制

在至少两个独立的存储源中存储相同的完整闭包。

验证 + 运行

验证每个字节和路由对等 ID，然后通过发布 CID 执行并导出。

Shell 
# install and run the live Ed25519 + ML-DSA-65 reference package
kotoba package add kotoba-lang/reference-math@0.1.0 --catalog-cid bafkreidcy5stqvnyfpmud6ozz5qz3supd3r3uzk7glmntuv36ezliaxstm
kotoba package run kotoba-lang/reference-math  # 42

kotoba library inspect <name|CID|#hash> --store .kotoba/codebase --namespace demo

# dry-run by default
kotoba library publish --store .kotoba/codebase --namespace demo --hosted

# replicate one exact release closure
kotoba library publish --store .kotoba/codebase --namespace demo --hosted --dry-run false \
  --pqc-seed-file <ml-dsa-seed> \
  --provider east=https://east.example --provider-token-file <east-token> \
  --provider west=https://west.example --provider-token-file <west-token>

# qualification and execution are release-CID addressed
kotoba library verify ipfs://<release-cid> --store .kotoba/codebase \
  --provider east=https://east.example --provider west=https://west.example
kotoba library run ipfs://<release-cid> --entry answer --store .kotoba/codebase \
  --provider east=https://east.example --provider west=https://west.example

# rotate or revoke the Principal-pinned ML-DSA key; both finish with Passkey
kotoba pq-key rotate --current-pqc-seed-file <current> \
  --next-pqc-seed-file <next> --expected-epoch 1
kotoba pq-key revoke --current-pqc-seed-file <current> --expected-epoch 2

后量子签名是强制性的，而非可选的。发布需要 Passkey 会话以及固定到 Principal 的 ML-DSA-65 签名。外部身份验证器和分布式资格认证仍然是独立验证的边界。

打开库目录和依赖图

从 AI 编写的代码到被接纳的计算

编写

代理和人类可以自由地编写可读的、面向数据的代码。

接纳

Kotoba 检查类型、效果、能力、资源和目标支持。

绑定

主机和提供商绑定 Passkey 身份和资源范围的授权。

运行

Mithril Database keeps artifacts and receipts; Mithril AI and Itonami perform admitted work.

Shell 
kotoba research --scope <approved-scope> --task code-review
# requests are admitted by Mithril before inference

边界使连接成为可能。

服务发现不等于权限委托

存储、计算和智能体工作保持独立的权限边界。每个来源分别记录在回执中。现有 Passkey 不会自动迁移；新的 RP 需要经过验证的 Principal 关联。

机器可读配置文件 阅读语言规范