PayAna Market Sentinel

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_400":401,"_402":403},"routes/_app.x.$handle.$name",{"_102":101,"_32":45,"_111":90,"_27":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_20":-5,"_123":-5,"_124":125,"_126":49,"_127":128,"_129":25,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":25,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":49},"version",45,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",true,"deletedHere","path","frontend/components/Counter.tsx","latestPath","fileId","01a07d8d-933a-7578-bf59-1d2ec5336a6f","name","Counter.tsx","fileType","script","content","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\n\nexport function Counter() {\n const [count, setCount] = useState(0);\n return (\n

\n Clicked\n setCount((c) => c + 1)}\n class=\"bg-blue-500 hover:bg-blue-600 text-white font-medium px-4 py-2 rounded-lg transition-colors cursor-pointer\"\n >\n {count}\n \n times\n

\n );\n}\n","createdAt",["D",1788814095700],"branchVersion","branchId","7cb33925-37d8-48ee-9d8b-5712686d33fd","id","71ad8a44-f36c-41e9-a978-0707deb4f71b","payana-binance-agent-os",["D",1788812694161],"deletedAt","legacyEnvVars",false,"privacy","public","httpPrivacy","description","PayAna Falsifier Agent — evidence-first Binance market audit","imageUrl","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","01a07d8b-9306-748f-a55c-5a7124e2c8be","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","71ad8a44f36c41e9a9780707deb4f71b","tursoHostname","71ad8a44f36c41e9a9780707deb4f71b-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789509043237],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_110":106},"org",{"_102":101,"_103":104,"_105":106,"_18":56,"_107":108,"_109":49},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":93,"_94":95,"_96":51,"_97":44,"_98":65,"_99":45,"_100":101},"isOwned",55,"market-sentinel-v1","projectId","forkedBranchId","182c3c5a-4b2f-4ec3-8cf6-a4632f8ec886","forkedBranchVersion",3,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","cleitoncosta","handle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":395,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":25,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":396,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":397,"_84":398,"_86":399,"_88":49},"tree",[226,231,234,241,243,246,247,248,249],"files",[226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249],"counts",{"_214":63,"_215":216,"_217":218,"_219":220,"_221":222},"contents",[141,142,143,144,145,146,147,148,149],"upstreamProject","upstreamBranch",{"_43":93,"_38":134,"_135":136,"_32":137,"_91":44,"_13":138,"_92":-5,"_94":-5,"_139":140,"_47":-5,"_88":49,"_50":51,"_100":101,"_64":65,"_99":45},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1788812694161],"updatedAt",["D",1788827566539],"main",52,"lockfileKey","1788827566927-esm.town_v_cleitoncosta_payana-binance-agent-os@52-main",{"_43":208,"_32":209,"_30":210,"_153":-5,"_41":42,"_40":211,"_155":25,"_38":212,"_13":63,"_34":189,"_36":-5,"_24":49,"_160":-5,"_27":213},{"_43":202,"_32":203,"_30":204,"_153":-5,"_41":42,"_40":205,"_155":25,"_38":206,"_13":63,"_34":189,"_36":-5,"_24":49,"_160":-5,"_27":207},{"_43":197,"_32":198,"_30":199,"_153":-5,"_41":42,"_40":174,"_155":25,"_38":200,"_13":63,"_34":189,"_36":-5,"_24":49,"_160":-5,"_27":201},{"_43":191,"_32":192,"_30":193,"_153":-5,"_41":42,"_40":194,"_155":25,"_38":195,"_13":63,"_34":189,"_36":-5,"_24":49,"_160":-5,"_27":196},{"_43":184,"_32":185,"_30":186,"_153":-5,"_41":42,"_40":187,"_155":25,"_38":188,"_13":63,"_34":189,"_36":-5,"_24":49,"_160":-5,"_27":190},{"_43":177,"_32":178,"_30":179,"_153":-5,"_41":42,"_40":180,"_155":49,"_38":181,"_13":174,"_34":20,"_36":182,"_24":49,"_160":-5,"_27":183},{"_43":169,"_32":170,"_30":171,"_153":-5,"_41":42,"_40":172,"_155":49,"_38":173,"_13":174,"_34":20,"_36":175,"_24":49,"_160":-5,"_27":176},{"_43":162,"_32":163,"_30":164,"_153":-5,"_41":42,"_40":165,"_155":25,"_38":166,"_13":63,"_34":20,"_36":167,"_24":49,"_160":-5,"_27":168},{"_43":150,"_32":151,"_30":152,"_153":-5,"_41":42,"_40":154,"_155":49,"_38":156,"_13":157,"_34":158,"_36":159,"_24":49,"_160":-5,"_27":161},"3b049091-26a5-47f6-8d7d-b532d522f320","index.ts","01a07d8d-933a-7578-bf59-4039f1d9d820","parentId",18,"latest",["D",1788813207897],2,"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono\";\nimport { Root } from \"./frontend/root.tsx\";\nimport { analyzeMarket, normalizeSymbol, supportedSymbols } from \"./lib/market.ts\";\n\nconst app = new Hono();\nconst buckets = new Map();\nconst RATE_WINDOW_MS = 60_000;\nconst RATE_MAX = 30;\n\nfunction clientKey(c: any) {\n return String(c.req.header(\"cf-connecting-ip\") || c.req.header(\"x-forwarded-for\") || \"unknown\").split(\",\")[0].trim().slice(0, 80);\n}\nfunction rateAllowed(key: string) {\n const now = Date.now();\n const bucket = buckets.get(key);\n if (!bucket || now - bucket.startedAt >= RATE_WINDOW_MS) {\n buckets.set(key, { startedAt: now, count: 1 });\n return true;\n }\n if (bucket.count >= RATE_MAX) return false;\n bucket.count += 1;\n if (buckets.size > 1000) {\n for (const [k, v] of buckets) if (now - v.startedAt >= RATE_WINDOW_MS) buckets.delete(k);\n }\n return true;\n}\n\napp.use(\"*\", async (c, next) => {\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"Referrer-Policy\", \"no-referrer\");\n c.header(\"X-Frame-Options\", \"DENY\");\n c.header(\"Permissions-Policy\", \"camera=(), microphone=(), geolocation=(), payment=()\");\n c.header(\"Content-Security-Policy\", \"default-src 'self'; script-src 'self' https://esm.town https://esm.sh; style-src 'self'; connect-src 'self' https://esm.sh; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'\");\n await next();\n});\n\n\napp.use(\"/api/*\", async (c, next) => {\n c.header(\"Cache-Control\", \"no-store\");\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"Referrer-Policy\", \"no-referrer\");\n if (!rateAllowed(clientKey(c))) return c.json({ status: \"BLOCKED\", error: \"RATE_LIMITED\", retryAfterSeconds: 60 }, 429);\n await next();\n});\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/health\", (c) => c.json({\n status: \"PASS\",\n service: \"PayAna Market Sentinel\",\n version: \"1.0.0\",\n mode: \"READ_ONLY_MARKET_EVIDENCE\",\n boundary: \"MARKET_DATA_READ != TRADING_AUTH\",\n supportedSymbols: supportedSymbols(),\n agentOsMcp: {\n endpointKnown: true,\n runtimeProbeState: \"OAUTH_AUTHORIZATION_REQUIRED\",\n liveAuthorizedSession: false,\n },\n marketData: {\n provider: \"Binance public market-data surface\",\n runtimeChampion: \"data-api.binance.vision\",\n directApiBinanceComFromValTown: \"HTTP_451_RESTRICTED_LOCATION\",\n },\n generatedAt: new Date().toISOString(),\n}));\n\napp.get(\"/api/symbols\", (c) => c.json({ status: \"PASS\", symbols: supportedSymbols() }));\n\napp.get(\"/api/analyze\", async (c) => {\n try {\n const symbol = normalizeSymbol(c.req.query(\"symbol\") ?? \"BTCUSDT\");\n const result = await analyzeMarket(symbol);\n const httpStatus = result.evidenceState === \"FAIL\" ? 503 : 200;\n return c.json(result, httpStatus);\n } catch (error) {\n const message = error instanceof Error ? error.message : String(error);\n const status = message === \"INVALID_SYMBOL_FORMAT\" || message === \"SYMBOL_NOT_ALLOWLISTED\" ? 400 : 500;\n return c.json({ status: \"FAIL\", error: message.slice(0, 180), boundary: \"NO_UNVALIDATED_SYMBOL_FORWARDING\" }, status);\n }\n});\n\napp.notFound((c) => c.json({ status: \"FAIL\", error: \"NOT_FOUND\" }, 404));\napp.onError((err) => {\n console.error(\"UNHANDLED\", err instanceof Error ? err.message : String(err));\n return new Response(JSON.stringify({ status: \"FAIL\", error: \"INTERNAL_ERROR\" }), { status: 500, headers: { \"content-type\": \"application/json\" } });\n});\n\nexport default app.fetch;\n","label",[151],"0a479271-a8c6-4388-a93e-b78118c728c1","SKILL.md","7f52caf0-aafc-11f1-908d-1607ee4eb77e",25,["D",1788813686965],"# PayAna Falsifier Agent Skill\n\n## Purpose\n\nPayAna is an evidence-first market-analysis agent for Binance Agent OS. Its job is **not** to predict a guaranteed direction and **not** to place trades. It observes market evidence, constructs competing hypotheses, searches for disconfirming evidence, records what is missing, and returns a decision-quality briefing.\n\nThe skill is designed for an MCP-capable AI client connected to the official Binance Agent OS MCP endpoint:\n\n`https://agent.binance.com/mcp/agentic`\n\nUse the minimum permission set required. For this skill, **Market Data only** is sufficient. Account, Trade, Transfer and withdrawal-like capabilities are outside the skill's required scope.\n\n## Hard safety boundary\n\n- `MARKET_DATA_READ != TRADING_AUTH`\n- Never request or enable Trade, Account or Transfer merely to complete this workflow.\n- Never place, simulate-as-real, confirm or recommend an order.\n- Never claim an MCP call occurred unless the tool receipt proves it.\n- Never treat model confidence as a calibrated probability.\n- Never treat a screenshot, HTTP 200, API field named `open`, or plausible prose as economic proof.\n- If one required source fails, mark the run `PARTIAL`; if all required sources fail, mark it `FAIL`.\n\n## Supported market evidence\n\nFor the requested Binance spot symbol, retrieve when available:\n\n1. 24h ticker: last price, 24h change, high, low, quote volume, trade count.\n2. Order book: at least top 20 bid and ask levels.\n3. 5m candlesticks: at least 36 candles when available.\n4. Funding/mark price only when exposed by the connected Agent OS market-data tool. Absence must be recorded, not imputed.\n\n## Loop\n\nRun this reasoning loop once per user request or monitoring cycle:\n\n1. **OBSERVE** — collect fresh market evidence and timestamps.\n2. **VALIDATE** — verify symbol, source success, timestamps, numeric bounds and non-empty data.\n3. **MODEL** — calculate descriptive metrics.\n4. **NEURON** — create at least three branches:\n - winning hypothesis supported by current evidence;\n - opposite hypothesis;\n - alternative/non-directional explanation such as noise, liquidity effects or stale/missing context.\n5. **FALSIFY** — define observable conditions that would invalidate each hypothesis.\n6. **NEGATIVE SPACE** — explicitly list context not available to the run.\n7. **RECONCILE** — choose the best current descriptive label, not a trade direction.\n8. **RECEIPT** — return source/tool receipts and timestamp.\n9. **NEXT TEST** — state what evidence should be checked next if the user wants to continue.\n\n## Deterministic metrics\n\nUse formulas equivalent to the reference implementation when raw inputs exist:\n\n- `spread_bps = (ask - bid) / mid * 10000`\n- `bid_notional = Σ(price_i * qty_i)` over top-20 bids\n- `ask_notional = Σ(price_i * qty_i)` over top-20 asks\n- `book_imbalance = (bid_notional - ask_notional) / (bid_notional + ask_notional)`\n- `log_return_t = ln(close_t / close_(t-1))`\n- `realized_vol_5m_bps = sample_std(log_returns) * 10000`\n- `momentum_30m_pct = (latest_close / close_30m_ago - 1) * 100`\n- `momentum_3h_pct = (latest_close / first_close_in_3h_window - 1) * 100`\n- `volume_z = (latest_quote_volume - mean(prior_quote_volumes)) / sample_std(prior_quote_volumes)`\n\nReference descriptive score:\n\n`directional_score = mean(tanh(2*book_imbalance), tanh(momentum_30m_pct/0.6), tanh(momentum_3h_pct/1.5))`\n\nThis score is a heuristic descriptor, not a probability and not a price forecast.\n\n## Output contract\n\nReturn a compact object or briefing with these fields:\n\n- `symbol`\n- `evidence_state`: `PASS | PARTIAL | FAIL`\n- `fetched_at`\n- `observations`\n- `descriptive_pressure`: `BULLISH_PRESSURE | BEARISH_PRESSURE | MIXED_NEUTRAL`\n- `supporting_evidence[]`\n- `opposing_evidence[]`\n- `alternative_explanations[]`\n- `falsifiers[]`\n- `risk_flags[]`\n- `missing_context[]`\n- `source_receipts[]`\n- `recommendation`: always `NO_TRADE_DECISION` for this skill\n- `next_test`\n\n## Example request\n\n\"Use Binance Agent OS market data to audit BTCUSDT. Tell me what the current evidence supports, what argues against it, what would falsify the reading, and what is missing. Do not trade.\"\n\n## Example acceptance criteria\n\nA run passes only if:\n\n- the symbol is explicit and validated;\n- at least one live source has a timestamp/currentness signal;\n- no missing source is silently replaced by fabricated data;\n- the opposite hypothesis and at least one alternative explanation are present;\n- falsifiers are observable rather than rhetorical;\n- source receipts are listed;\n- final recommendation remains `NO_TRADE_DECISION`.\n",[163],"e2a19385-fead-447b-94c3-7fcedbc452e7","README.md","01a07d8d-933a-7578-bf59-383aad23cbb7",38,["D",1788813839224],1,"# PayAna — Falsifier Agent for Binance Agent OS\n\n**Track A — Binance Agent OS Mini Hackathon**\n\nPayAna is an evidence-first market-analysis agent whose defining behavior is simple:\n\n> It does not stop after asking **“what does the market evidence support?”**. It also asks **“what would prove this reading wrong?”**\n\nThe project combines a reusable `SKILL.md` for an MCP-capable AI client with a deployed reference cockpit that computes transparent market metrics, records source receipts, exposes missing context and refuses to convert a descriptive market reading into a trade instruction.\n\n**Hard boundary:** `MARKET_DATA_READ != TRADING_AUTH`\n\n## Why this exists\n\nMany market-agent demos optimize for a polished answer or an executed action. That creates a failure mode: a coherent answer can still be based on stale data, one-sided evidence, missing context or a non-calibrated model score.\n\nPayAna instead forces a small scientific loop:\n\n```text\nOBSERVE → VALIDATE → MODEL → COMPETING HYPOTHESES\n → FALSIFY → NEGATIVE SPACE → RECONCILE → RECEIPT → NEXT TEST\n```\n\nThe result is **decision-quality evidence**, not a trade recommendation.\n\n## What the agent does\n\nFor a requested Binance market, PayAna:\n\n1. retrieves fresh market evidence;\n2. validates source state and timestamps;\n3. computes reproducible metrics;\n4. constructs a winning hypothesis, an opposite hypothesis and an alternative explanation;\n5. defines observable falsifiers;\n6. lists context that is missing instead of fabricating it;\n7. returns source receipts;\n8. ends with `NO_TRADE_DECISION`.\n\nSee [`SKILL.md`](./SKILL.md) for the agent contract.\n\n## Binance Agent OS integration\n\nOfficial MCP endpoint:\n\n```text\nhttps://agent.binance.com/mcp/agentic\n```\n\nThe skill requires only the **Market Data** capability. It does not require Account, Trade or Transfer.\n\nA runtime probe against the official endpoint correctly returned an OAuth challenge rather than pretending to be connected. The discovered authorization metadata advertises:\n\n- Authorization Code flow;\n- PKCE `S256`;\n- token endpoint authentication method `none`;\n- OAuth Client ID Metadata Document support.\n\nTherefore this repository makes an explicit distinction:\n\n```text\nMCP_ENDPOINT_KNOWN != MCP_SESSION_AUTHORIZED\n```\n\nA real MCP-connected demo is complete only after the participant connects through a legitimate supported MCP client and completes Binance's authorization UI with the minimum required permission.\n\nThe hosted reference cockpit currently uses Binance's public market-data surface for its reproducible web demo. This is not mislabeled as an authenticated MCP session.\n\n## Live reference cockpit\n\nThe deployed web application provides a zero-trade demonstration of the deterministic evidence layer:\n\n- BTCUSDT\n- ETHUSDT\n- BNBUSDT\n- SOLUSDT\n- XRPUSDT\n\nFor each symbol it combines:\n\n- 24h ticker;\n- top-20 order book;\n- 36 × 5-minute candles;\n- spread;\n- top-20 bid/ask notional;\n- order-book imbalance;\n- 30m and 3h momentum;\n- 5m realized volatility;\n- volume z-score;\n- descriptive directional pressure;\n- heuristic evidence-stability score;\n- source receipts;\n- risk flags;\n- falsifiers;\n- missing context.\n\nThe stability score is explicitly **not a calibrated probability**.\n\n## Reproducible formulas\n\n```text\nspread_bps = (ask - bid) / mid * 10000\n\nbid_notional = Σ(price_i × qty_i), top 20 bids\nask_notional = Σ(price_i × qty_i), top 20 asks\n\nbook_imbalance =\n (bid_notional - ask_notional) /\n (bid_notional + ask_notional)\n\nlog_return_t = ln(close_t / close_(t-1))\n\nrealized_vol_5m_bps =\n sample_std(log_returns) × 10000\n\nmomentum_30m_pct =\n (latest_close / close_30m_ago - 1) × 100\n\nvolume_z =\n (latest_quote_volume - mean(prior_quote_volumes)) /\n sample_std(prior_quote_volumes)\n```\n\nThe API exposes its method description directly in every successful response.\n\n## HTTP API\n\n```text\nGET /api/health\nGET /api/symbols\nGET /api/analyze?symbol=BTCUSDT\n```\n\nThere is deliberately no trading endpoint.\n\nExample safety fields:\n\n```json\n{\n \"readOnly\": true,\n \"boundary\": \"MARKET_DATA_READ != TRADING_AUTH\",\n \"assessment\": {\n \"recommendation\": \"NO_TRADE_DECISION\"\n }\n}\n```\n\n## Runtime discovery\n\nThe application does not assume that a documented endpoint is usable from every execution environment.\n\nDuring the 2026-09-07 Val Town runtime census:\n\n```text\napi.binance.com → HTTP 451 from this runtime\nfapi.binance.com → HTTP 451 from this runtime\ndata-api.binance.vision → HTTP 200 for public spot market data\nAgent OS MCP initialize → HTTP 401 OAuth challenge, as expected without authorization\n```\n\n`data-api.binance.vision` is therefore the current runtime champion for the hosted public-data reference layer.\n\nSee [`docs/ARCHITECTURE.md`](./docs/ARCHITECTURE.md) for the evidence and boundaries.\n\n## Validation\n\nCurrent automated suite:\n\n```text\n61 / 61 core checks PASS\n```\n\nCoverage includes all five allowlisted symbols and validates:\n\n- current ticker timestamp;\n- positive market price;\n- non-negative spread;\n- order-book imbalance bounds;\n- stability-score bounds;\n- explicit non-probability language;\n- three source receipts;\n- candle-series presence;\n- `NO_TRADE_DECISION` invariant;\n- invalid symbols;\n- injection-like symbol strings;\n- nonexistent routes;\n- rejection of write-like POST access.\n\nRate-limit mutation control:\n\n```text\nrequests 1–30 → HTTP 200\nrequests 31–35 → HTTP 429\nPASS\n```\n\nRun in Val Town:\n\n```text\ntests/selftest.ts\ntests/rate_limit_selftest.ts\n```\n\nThe browser layer is validated separately from server tests. After CSP hardening, a JavaScript-rendering fetch successfully matched React-only selectors including source receipts. Full interactive/screenshot automation is tracked separately because the external browser providers currently have insufficient credit; it is not mislabeled as completed.\n\n## Web hardening\n\n- strict symbol allowlist;\n- no arbitrary upstream URL forwarding;\n- `Cache-Control: no-store` on API results;\n- CSP;\n- `X-Content-Type-Options: nosniff`;\n- `X-Frame-Options: DENY`;\n- restrictive `Permissions-Policy`;\n- no Binance account key stored in the app;\n- no Account / Trade / Transfer function;\n- best-effort per-runtime rate limiting.\n\nThe rate limiter is intentionally documented as best-effort because serverless instances do not provide a shared global bucket.\n\n## Repository structure\n\n```text\n.\n├── SKILL.md # reusable Falsifier Agent contract\n├── index.ts # Hono API + web security boundaries\n├── lib/\n│ └── market.ts # evidence acquisition + formulas\n├── frontend/\n│ ├── root.tsx\n│ ├── index.tsx\n│ ├── styles.css\n│ └── components/App.tsx\n├── tests/\n│ ├── selftest.ts\n│ └── rate_limit_selftest.ts\n├── audits/\n│ ├── binance_mcp_probe.ts\n│ ├── oauth_metadata_probe.ts\n│ ├── market_api_probe.ts\n│ └── vision_klines_probe.ts\n└── docs/\n ├── ARCHITECTURE.md\n └── SUBMISSION_CHECKLIST.md\n```\n\n## Negative controls that matter\n\n```text\nHTTP_200 != VALID_MARKET_EVIDENCE\nSCREENSHOT != BEHAVIOR_PROOF\nMARKET_DATA_READ != TRADING_AUTH\nMCP_ENDPOINT_KNOWN != MCP_SESSION_AUTHORIZED\nMODEL_SCORE != CALIBRATED_PROBABILITY\nCURRENT_PRESSURE != FUTURE_PRICE\nFETCH_FAIL != ZERO\n```\n\n## Hackathon submission state\n\nThe official Binance announcement states a Track A deadline of **2026-09-08 23:59 UTC** and requires following/reposting Binance, replying or quote-reposting with the Track A submission (video/demo plus GitHub when applicable), and completing the survey.\n\nExternal account actions are intentionally tracked as unverified until they actually happen. See [`docs/SUBMISSION_CHECKLIST.md`](./docs/SUBMISSION_CHECKLIST.md).\n\n## Design principle\n\nPayAna's thesis is not “AI can predict the market.”\n\nIt is:\n\n> **An agent becomes more trustworthy when it is required to expose the evidence against its own conclusion, the conditions that would falsify it, and the context it does not have.**\n",[170],"f94621ad-4ff2-45c9-94b2-8d9565f082bb","CHANGELOG.md","01a07d8d-933a-7578-bf59-362732c839bf",39,["D",1788813858470],"# Changelog\n\n## 2026-09-07 — PayAna Market Sentinel 1.0 candidate\n\n### Agent / methodology\n\n- Added `SKILL.md`: evidence-first Binance Agent OS market-data workflow.\n- Added winning/opposite/alternative hypothesis branches and observable falsifiers.\n- Added explicit negative-space / missing-context reporting.\n- Added hard `NO_TRADE_DECISION` and `MARKET_DATA_READ != TRADING_AUTH` boundaries.\n- Replaced misleading \"model confidence\" language with a heuristic `stabilityScore` that explicitly states it is not a calibrated probability.\n\n### Binance runtime discovery\n\n- Probed the official Agent OS MCP endpoint.\n- Confirmed unauthenticated `initialize` produces an OAuth 401 challenge rather than a usable session.\n- Retrieved OAuth Protected Resource Metadata and Authorization Server Metadata.\n- Confirmed Authorization Code, PKCE S256, public-client token auth (`none`), and Client ID Metadata Document support.\n- Confirmed Val Town runtime receives HTTP 451 from `api.binance.com`/`fapi.binance.com`.\n- Confirmed `data-api.binance.vision` works for public spot ticker, depth and klines and promoted it as the hosted-demo runtime champion.\n\n### Evidence engine\n\n- Added five-symbol allowlist: BTCUSDT, ETHUSDT, BNBUSDT, SOLUSDT, XRPUSDT.\n- Added 24h ticker, top-20 order-book and 36 × 5m candle acquisition.\n- Added source receipts with HTTP state and duration.\n- Added PASS/PARTIAL/FAIL evidence-state classification.\n- Added spread, notional depth, order-book imbalance, realized volatility, momentum and volume-z calculations.\n- Added descriptive directional pressure and explicit falsifiers.\n- Added method/formula metadata directly to API responses.\n\n### API and security\n\n- Added `/api/health`, `/api/symbols`, `/api/analyze`.\n- Added strict symbol validation and allowlisting.\n- Added `Cache-Control: no-store` for API responses.\n- Added CSP, `nosniff`, frame denial, `Referrer-Policy` and restrictive `Permissions-Policy`.\n- Removed React inline-style dependencies so the strict `style-src 'self'` CSP remains viable.\n- Added best-effort per-runtime request limiting.\n- No trade, account, transfer, wallet or arbitrary upstream forwarding endpoint exists.\n\n### Frontend\n\n- Replaced the template UI with the PayAna dark evidence cockpit.\n- Added market metrics, short-horizon sparkline, source receipts, stability indicator, risk flags, falsifiers and blind spots.\n- Added automatic 30-second evidence refresh while the page is visible.\n- Added responsive desktop/mobile layout.\n\n### Validation\n\n- Core self-test: 61/61 PASS after final CSP-related frontend changes.\n- Rate-limit mutation: requests 1–30 return 200; 31–35 return 429 — PASS.\n- Invalid/injection-like symbols are rejected.\n- Write-like POST access to analysis route is rejected.\n- Immutable frontend entry and App assets return 200 and compile to JavaScript.\n- Root HTTP response contains final CSP and security headers.\n- JavaScript-rendering content extraction matched React-only `.app-shell` and `.source-item` selectors after CSP hardening.\n- Interactive screenshot/browser automation was attempted but external TinyFish and Firecrawl accounts reported insufficient credit; this remains explicitly unverified instead of being promoted to PASS.\n\n### Documentation\n\n- Rebuilt README for the hackathon candidate.\n- Added `docs/ARCHITECTURE.md`.\n- Added `docs/SUBMISSION_CHECKLIST.md`.\n- Organized probes under `audits/` and executable checks under `tests/`.\n",[178],"a8ea3128-330a-471f-ab09-480a5028fb46","tests","a36d534c-aafc-11f1-ab7a-1607ee4eb77e",29,["D",1788813747527],"directory",[185],"f459fcb7-57bb-4088-92ca-af0046dab0b0","lib","9c20aafa-aafa-11f1-97fe-1607ee4eb77e",4,["D",1788812876304],[192],"2b00d613-167b-4f0c-9ada-11c9a2f98e94","frontend","01a07d8d-933a-7578-bf59-33bbe6996921",["D",1788812825403],[198],"a5c34d36-47d6-46f4-90d4-05ee4ad40b63","docs","71efc4d0-aafc-11f1-b316-1607ee4eb77e",24,["D",1788813664504],[203],"5a417b55-b24d-4f0a-910a-e1508a016bf8","audits","a09c30e8-aafc-11f1-ab47-1607ee4eb77e",28,["D",1788813742805],[209],"pulls","branches",7,"forks",5,"envVars",{"_223":63,"_225":63},"connections",{"_223":63,"_224":63},"count","unfilledCount","emptyCount",{"_43":208,"_32":209,"_30":210,"_153":-5,"_41":42,"_40":211,"_155":25,"_38":392,"_13":63,"_34":189,"_36":-5,"_24":49,"_160":-5,"_251":393,"_27":394},{"_43":384,"_32":385,"_30":386,"_153":210,"_41":42,"_40":387,"_155":25,"_38":388,"_13":174,"_34":35,"_36":389,"_24":49,"_160":-5,"_251":390,"_27":391},{"_43":376,"_32":377,"_30":378,"_153":210,"_41":42,"_40":379,"_155":25,"_38":380,"_13":174,"_34":35,"_36":381,"_24":49,"_160":-5,"_251":382,"_27":383},{"_43":368,"_32":369,"_30":370,"_153":210,"_41":42,"_40":371,"_155":25,"_38":372,"_13":174,"_34":35,"_36":373,"_24":49,"_160":-5,"_251":374,"_27":375},{"_43":360,"_32":361,"_30":362,"_153":210,"_41":42,"_40":363,"_155":25,"_38":364,"_13":174,"_34":35,"_36":365,"_24":49,"_160":-5,"_251":366,"_27":367},{"_43":202,"_32":203,"_30":204,"_153":-5,"_41":42,"_40":205,"_155":25,"_38":357,"_13":63,"_34":189,"_36":-5,"_24":49,"_160":-5,"_251":358,"_27":359},{"_43":349,"_32":350,"_30":351,"_153":204,"_41":42,"_40":352,"_155":49,"_38":353,"_13":63,"_34":20,"_36":354,"_24":49,"_160":-5,"_251":355,"_27":356},{"_43":341,"_32":342,"_30":343,"_153":204,"_41":42,"_40":344,"_155":25,"_38":345,"_13":63,"_34":20,"_36":346,"_24":49,"_160":-5,"_251":347,"_27":348},{"_43":197,"_32":198,"_30":199,"_153":-5,"_41":42,"_40":174,"_155":25,"_38":338,"_13":63,"_34":189,"_36":-5,"_24":49,"_160":-5,"_251":339,"_27":340},{"_43":334,"_32":333,"_30":327,"_153":199,"_41":42,"_40":174,"_155":25,"_38":335,"_13":63,"_34":189,"_36":-5,"_24":49,"_160":-5,"_251":336,"_27":337},{"_43":324,"_32":325,"_30":326,"_153":327,"_41":42,"_40":328,"_155":25,"_38":329,"_13":287,"_34":35,"_36":330,"_24":49,"_160":-5,"_251":331,"_27":332},{"_43":317,"_32":318,"_30":319,"_153":199,"_41":42,"_40":174,"_155":25,"_38":320,"_13":63,"_34":20,"_36":321,"_24":49,"_160":-5,"_251":322,"_27":323},{"_43":310,"_32":311,"_30":312,"_153":199,"_41":42,"_40":174,"_155":25,"_38":313,"_13":63,"_34":35,"_36":314,"_24":49,"_160":-5,"_251":315,"_27":316},{"_43":302,"_32":303,"_30":304,"_153":199,"_41":42,"_40":305,"_155":25,"_38":306,"_13":174,"_34":35,"_36":307,"_24":49,"_160":-5,"_251":308,"_27":309},{"_43":294,"_32":295,"_30":296,"_153":199,"_41":42,"_40":297,"_155":25,"_38":298,"_13":157,"_34":20,"_36":299,"_24":49,"_160":-5,"_251":300,"_27":301},{"_43":191,"_32":192,"_30":193,"_153":-5,"_41":42,"_40":194,"_155":25,"_38":291,"_13":63,"_34":189,"_36":-5,"_24":49,"_160":-5,"_251":292,"_27":293},{"_43":282,"_32":283,"_30":284,"_153":193,"_41":42,"_40":285,"_155":49,"_38":286,"_13":287,"_34":35,"_36":288,"_24":49,"_160":-5,"_251":289,"_27":290},{"_43":184,"_32":185,"_30":186,"_153":-5,"_41":42,"_40":187,"_155":25,"_38":279,"_13":63,"_34":189,"_36":-5,"_24":49,"_160":-5,"_251":280,"_27":281},{"_43":271,"_32":272,"_30":273,"_153":186,"_41":42,"_40":274,"_155":49,"_38":275,"_13":157,"_34":35,"_36":276,"_24":49,"_160":-5,"_251":277,"_27":278},{"_43":263,"_32":264,"_30":265,"_153":186,"_41":42,"_40":266,"_155":25,"_38":267,"_13":194,"_34":35,"_36":268,"_24":49,"_160":-5,"_251":269,"_27":270},{"_43":177,"_32":178,"_30":179,"_153":-5,"_41":42,"_40":180,"_155":49,"_38":260,"_13":174,"_34":20,"_36":182,"_24":49,"_160":-5,"_251":261,"_27":262},{"_43":169,"_32":170,"_30":171,"_153":-5,"_41":42,"_40":172,"_155":49,"_38":257,"_13":174,"_34":20,"_36":175,"_24":49,"_160":-5,"_251":258,"_27":259},{"_43":162,"_32":163,"_30":164,"_153":-5,"_41":42,"_40":165,"_155":25,"_38":254,"_13":63,"_34":20,"_36":167,"_24":49,"_160":-5,"_251":255,"_27":256},{"_43":150,"_32":151,"_30":152,"_153":-5,"_41":42,"_40":154,"_155":49,"_38":250,"_13":157,"_34":158,"_36":159,"_24":49,"_160":-5,"_251":252,"_27":253},["D",1788813207897],"children",[],[151],["D",1788813686965],[],[163],["D",1788813839224],[],[170],["D",1788813858470],[],[178],"d4e2a6be-9c0f-4e86-b86e-dedb13cec2da","selftest.ts","2476d014-aafb-11f1-a319-1607ee4eb77e",42,["D",1788814013319],"import handler from \"../index.ts\";\nimport { analyzeMarket, normalizeSymbol, supportedSymbols } from \"../lib/market.ts\";\n\nconst results: any[] = [];\nfunction check(name: string, pass: boolean, details?: unknown) {\n results.push({ name, pass, details });\n if (!pass) throw new Error(`SELFTEST_FAIL:${name}`);\n}\n\nfor (const bad of [\"INVALIDXYZ\", \"BTCUSDT&foo=bar\", \"../BTCUSDT\", \"\"]) {\n let rejected = false;\n try { normalizeSymbol(bad); } catch { rejected = true; }\n if (bad === \"\") {\n // empty input normalizes to default only when nullish is not used; explicit empty must not leave allowlist.\n check(\"explicit_empty_rejected\", rejected);\n } else check(`invalid_symbol_rejected:${bad}`, rejected);\n}\n\nfor (const symbol of supportedSymbols()) {\n const r: any = await analyzeMarket(symbol);\n check(`${symbol}:evidence`, [\"PASS\", \"PARTIAL\"].includes(r.evidenceState), r.evidenceState);\n check(`${symbol}:read_only`, r.readOnly === true && r.boundary === \"MARKET_DATA_READ != TRADING_AUTH\");\n check(`${symbol}:price_positive`, Number(r.market?.lastPrice) > 0, r.market?.lastPrice);\n check(`${symbol}:spread_nonnegative`, Number(r.microstructure?.spreadBps) >= 0, r.microstructure?.spreadBps);\n check(`${symbol}:imbalance_bounded`, Math.abs(Number(r.microstructure?.orderBookImbalance)) <= 1.000001, r.microstructure?.orderBookImbalance);\n check(`${symbol}:stability_bounded`, Number(r.assessment?.stabilityScore) >= 0 && Number(r.assessment?.stabilityScore) <= 1, r.assessment?.stabilityScore);\n check(`${symbol}:stability_not_probability`, String(r.assessment?.stabilityMeaning ?? \"\").includes(\"not a calibrated probability\"));\n check(`${symbol}:winning_hypothesis`, String(r.assessment?.hypotheses?.winning ?? \"\").length > 20);\n check(`${symbol}:opposite_hypothesis`, String(r.assessment?.hypotheses?.opposite ?? \"\").length > 20);\n check(`${symbol}:alternative_hypothesis`, String(r.assessment?.hypotheses?.alternative ?? \"\").length > 20);\n check(`${symbol}:supporting_evidence`, Array.isArray(r.assessment?.supportingEvidence) && r.assessment.supportingEvidence.length >= 1);\n check(`${symbol}:opposing_evidence`, Array.isArray(r.assessment?.opposingEvidence) && r.assessment.opposingEvidence.length >= 1);\n check(`${symbol}:alternative_explanations`, Array.isArray(r.assessment?.alternativeExplanations) && r.assessment.alternativeExplanations.length >= 2);\n check(`${symbol}:falsifiers`, Array.isArray(r.assessment?.falsifiers) && r.assessment.falsifiers.length >= 2);\n check(`${symbol}:next_test`, String(r.assessment?.nextTest ?? \"\").includes(\"5m\"));\n check(`${symbol}:no_trade_recommendation`, r.assessment?.recommendation === \"NO_TRADE_DECISION\");\n check(`${symbol}:receipts_present`, Array.isArray(r.receipts) && r.receipts.length === 3, r.receipts?.length);\n check(`${symbol}:series_present`, Array.isArray(r.shortHorizon?.closeSeries) && r.shortHorizon.closeSeries.length >= 12, r.shortHorizon?.closeSeries?.length);\n const closeTime = Number(r.market?.tickerCloseTime);\n check(`${symbol}:ticker_currentness`, Number.isFinite(closeTime) && Math.abs(Date.now() - closeTime) < 5 * 60_000, { closeTime, ageMs: Date.now() - closeTime });\n}\n\nconst post = await handler(new Request(\"https://local.test/api/analyze?symbol=BTCUSDT\", { method: \"POST\" }));\ncheck(\"post_not_supported\", post.status === 404, post.status);\nconst unknown = await handler(new Request(\"https://local.test/api/does-not-exist\"));\ncheck(\"unknown_route_404\", unknown.status === 404, unknown.status);\n\nconst pass = results.every(r => r.pass);\nconsole.log(JSON.stringify({ pass, version: \"1.0.0\", tests: results.length, results }));\nexport default { pass, tests: results.length };\n",[],[185,264],"7e212623-7391-4247-a9f2-b418b130d038","rate_limit_selftest.ts","4f12cf30-aafb-11f1-9bc1-1607ee4eb77e",37,["D",1788813802512],"import handler from \"../index.ts\";\n\nconst statuses:number[]=[];\nfor(let i=0;i<35;i++){\n const r=await handler(new Request(\"https://local.test/api/health\",{headers:{\"x-forwarded-for\":\"203.0.113.77\"}}));\n statuses.push(r.status);\n}\nconst first30=statuses.slice(0,30);\nconst tail=statuses.slice(30);\nconst pass=first30.every(s=>s===200)&&tail.every(s=>s===429);\nconsole.log(JSON.stringify({pass,statuses,rule:\"30 requests per 60s per runtime bucket\"}));\nif(!pass) throw new Error(\"RATE_LIMIT_SELFTEST_FAIL\");\nexport default {pass};\n",[],[185,272],["D",1788813747527],[244,245],[185],"1ff957b4-3cb9-431a-a552-c1d6b56be239","market.ts","afc5513c-aafa-11f1-a36e-1607ee4eb77e",41,["D",1788813999911],6,"const BASE = \"https://data-api.binance.vision\";\nconst SYMBOLS = new Set([\"BTCUSDT\", \"ETHUSDT\", \"BNBUSDT\", \"SOLUSDT\", \"XRPUSDT\"]);\nconst FETCH_TIMEOUT_MS = 7000;\n\nexport type MarketEvidenceState = \"PASS\" | \"PARTIAL\" | \"FAIL\";\n\ntype SourceReceipt = {\n name: string;\n url: string;\n status: \"PASS\" | \"FAIL\";\n httpStatus?: number;\n durationMs: number;\n error?: string;\n};\n\nfunction finite(value: unknown, fallback = 0) {\n const n = Number(value);\n return Number.isFinite(n) ? n : fallback;\n}\nfunction round(value: number, digits = 4) {\n if (!Number.isFinite(value)) return null;\n const p = 10 ** digits;\n return Math.round(value * p) / p;\n}\nfunction mean(xs: number[]) {\n return xs.length ? xs.reduce((a, b) => a + b, 0) / xs.length : 0;\n}\nfunction std(xs: number[]) {\n if (xs.length < 2) return 0;\n const m = mean(xs);\n return Math.sqrt(xs.reduce((s, x) => s + (x - m) ** 2, 0) / (xs.length - 1));\n}\nfunction zscore(value: number, sample: number[]) {\n const sd = std(sample);\n return sd > 0 ? (value - mean(sample)) / sd : 0;\n}\n\nexport function normalizeSymbol(raw: unknown) {\n const symbol = String(raw ?? \"BTCUSDT\").trim().toUpperCase();\n if (!/^[A-Z0-9]{5,20}$/.test(symbol)) throw new Error(\"INVALID_SYMBOL_FORMAT\");\n if (!SYMBOLS.has(symbol)) throw new Error(\"SYMBOL_NOT_ALLOWLISTED\");\n return symbol;\n}\n\nasync function getJson(name: string, path: string): Promise<{ value?: T; receipt: SourceReceipt }> {\n const url = `${BASE}${path}`;\n const started = performance.now();\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n try {\n const response = await fetch(url, {\n method: \"GET\",\n headers: { Accept: \"application/json\", \"User-Agent\": \"PayAna-Market-Sentinel/1.0\" },\n signal: controller.signal,\n });\n const durationMs = Math.round(performance.now() - started);\n if (!response.ok) {\n return { receipt: { name, url, status: \"FAIL\", httpStatus: response.status, durationMs, error: `HTTP_${response.status}` } };\n }\n const value = await response.json() as T;\n return { value, receipt: { name, url, status: \"PASS\", httpStatus: response.status, durationMs } };\n } catch (error) {\n return {\n receipt: {\n name,\n url,\n status: \"FAIL\",\n durationMs: Math.round(performance.now() - started),\n error: error instanceof Error ? error.message.slice(0, 180) : String(error).slice(0, 180),\n },\n };\n } finally {\n clearTimeout(timer);\n }\n}\n\ntype Ticker = {\n symbol: string;\n priceChangePercent: string;\n lastPrice: string;\n bidPrice: string;\n askPrice: string;\n highPrice: string;\n lowPrice: string;\n volume: string;\n quoteVolume: string;\n closeTime: number;\n count: number;\n};\ntype Depth = { lastUpdateId: number; bids: [string, string][]; asks: [string, string][] };\ntype Kline = [number, string, string, string, string, string, number, string, number, string, string, string];\n\nexport async function analyzeMarket(rawSymbol: unknown) {\n const symbol = normalizeSymbol(rawSymbol);\n const fetchedAt = new Date().toISOString();\n const [tickerResult, depthResult, klinesResult] = await Promise.all([\n getJson(\"spot_24h_ticker\", `/api/v3/ticker/24hr?symbol=${symbol}`),\n getJson(\"spot_order_book\", `/api/v3/depth?symbol=${symbol}&limit=20`),\n getJson(\"spot_5m_klines\", `/api/v3/klines?symbol=${symbol}&interval=5m&limit=36`),\n ]);\n const receipts = [tickerResult.receipt, depthResult.receipt, klinesResult.receipt];\n const successes = receipts.filter(r => r.status === \"PASS\").length;\n const evidenceState: MarketEvidenceState = successes === receipts.length ? \"PASS\" : successes > 0 ? \"PARTIAL\" : \"FAIL\";\n if (evidenceState === \"FAIL\") {\n return {\n symbol,\n evidenceState,\n fetchedAt,\n readOnly: true,\n error: \"ALL_MARKET_SOURCES_FAILED\",\n receipts,\n boundary: \"MARKET_DATA_READ != TRADING_AUTH\",\n };\n }\n\n const ticker = tickerResult.value;\n const depth = depthResult.value;\n const klines = Array.isArray(klinesResult.value) ? klinesResult.value : [];\n\n const last = finite(ticker?.lastPrice);\n const bid = finite(ticker?.bidPrice);\n const ask = finite(ticker?.askPrice);\n const mid = bid > 0 && ask > 0 ? (bid + ask) / 2 : last;\n const spreadBps = mid > 0 ? ((ask - bid) / mid) * 10_000 : 0;\n\n const bidNotional = (depth?.bids ?? []).reduce((sum, [p, q]) => sum + finite(p) * finite(q), 0);\n const askNotional = (depth?.asks ?? []).reduce((sum, [p, q]) => sum + finite(p) * finite(q), 0);\n const bookTotal = bidNotional + askNotional;\n const imbalance = bookTotal > 0 ? (bidNotional - askNotional) / bookTotal : 0;\n\n const closes = klines.map(k => finite(k?.[4])).filter(x => x > 0);\n const quoteVolumes = klines.map(k => finite(k?.[7])).filter(x => x >= 0);\n const logReturns = closes.slice(1).map((c, i) => Math.log(c / closes[i])).filter(Number.isFinite);\n const shortVolBps = std(logReturns) * 10_000;\n const momentum30mPct = closes.length >= 7 ? (closes.at(-1)! / closes.at(-7)! - 1) * 100 : 0;\n const momentum3hPct = closes.length >= 2 ? (closes.at(-1)! / closes[0] - 1) * 100 : 0;\n const lastQuoteVolume = quoteVolumes.at(-1) ?? 0;\n const priorVolumes = quoteVolumes.slice(0, -1);\n const volumeZ = priorVolumes.length >= 4 ? zscore(lastQuoteVolume, priorVolumes) : 0;\n\n const riskFlags: string[] = [];\n if (spreadBps > 2) riskFlags.push(\"WIDE_SPREAD\");\n if (Math.abs(imbalance) > 0.55) riskFlags.push(imbalance > 0 ? \"BID_HEAVY_BOOK\" : \"ASK_HEAVY_BOOK\");\n if (shortVolBps > 18) riskFlags.push(\"HIGH_SHORT_HORIZON_VOLATILITY\");\n if (Math.abs(momentum30mPct) > 0.8) riskFlags.push(\"FAST_30M_MOVE\");\n if (Math.abs(volumeZ) > 2) riskFlags.push(\"VOLUME_ANOMALY\");\n\n const directionalEvidence = [\n Math.tanh(imbalance * 2),\n Math.tanh(momentum30mPct / 0.6),\n Math.tanh(momentum3hPct / 1.5),\n ];\n const directionalScore = mean(directionalEvidence);\n const stabilityPenalty = Math.min(0.65, Math.abs(volumeZ) * 0.04 + shortVolBps * 0.012 + spreadBps * 0.06 + (evidenceState === \"PARTIAL\" ? 0.25 : 0));\n const stabilityScore = Math.max(0, Math.min(1, 0.72 - stabilityPenalty));\n const bias = directionalScore > 0.2 ? \"BULLISH_PRESSURE\" : directionalScore < -0.2 ? \"BEARISH_PRESSURE\" : \"MIXED_NEUTRAL\";\n const polarity = directionalScore > 0.2 ? 1 : directionalScore < -0.2 ? -1 : 0;\n const signalAtoms = [\n { name: \"Top-20 order-book imbalance\", score: Math.tanh(imbalance * 2), observed: `imbalance=${round(imbalance, 4)}` },\n { name: \"30m momentum\", score: Math.tanh(momentum30mPct / 0.6), observed: `momentum30m=${round(momentum30mPct, 3)}%` },\n { name: \"3h momentum\", score: Math.tanh(momentum3hPct / 1.5), observed: `momentum3h=${round(momentum3hPct, 3)}%` },\n ];\n const aligned = polarity === 0 ? signalAtoms.filter(x => Math.abs(x.score) < 0.35) : signalAtoms.filter(x => Math.sign(x.score) === polarity && Math.abs(x.score) >= 0.08);\n const opposed = polarity === 0 ? signalAtoms.filter(x => Math.abs(x.score) >= 0.35) : signalAtoms.filter(x => Math.sign(x.score) === -polarity && Math.abs(x.score) >= 0.08);\n const supportingEvidence = aligned.length\n ? aligned.map(x => `${x.name}: ${x.observed}`)\n : [polarity === 0 ? \"No directional component dominates the combined score.\" : \"Combined score is directional, but no single component clears the support threshold strongly enough.\"];\n const opposingEvidence = opposed.length\n ? opposed.map(x => `${x.name}: ${x.observed}`)\n : [polarity === 0 ? \"No strong single component breaks the mixed/neutral classification.\" : \"No measured component currently provides strong opposite-direction evidence; this can change on the next book/candle update.\"];\n const hypotheses = {\n winning: polarity > 0\n ? \"Current measured pressure leans bullish because the combined microstructure/momentum score is positive.\"\n : polarity < 0\n ? \"Current measured pressure leans bearish because the combined microstructure/momentum score is negative.\"\n : \"Current evidence is mixed/neutral because the measured directional components do not agree strongly enough.\",\n opposite: polarity > 0\n ? \"The bullish-pressure reading is wrong or transient; liquidity can disappear and the next completed candle can reverse the momentum evidence.\"\n : polarity < 0\n ? \"The bearish-pressure reading is wrong or transient; liquidity can disappear and the next completed candle can reverse the momentum evidence.\"\n : \"A directional move may already be forming but is being masked by disagreement across the current short-horizon measurements.\",\n alternative: \"The observed pattern may be short-lived liquidity/noise or mean reversion rather than persistent directional information.\",\n };\n const alternativeExplanations = [\n \"Top-of-book liquidity is ephemeral and can change faster than the polling interval.\",\n Math.abs(volumeZ) > 2 ? \"The latest volume is statistically unusual versus the recent sample, so short-horizon metrics may reflect an event shock.\" : \"Volume is not currently extreme versus the recent sample, so the directional reading may simply reflect ordinary microstructure noise.\",\n \"Funding, derivatives positioning, news and on-chain context are absent from this hosted runtime and could materially change interpretation.\",\n ];\n const nextTest = `At the next completed 5m candle, recompute all three directional components and re-read top-20 depth; downgrade the current label if the combined score crosses ${polarity > 0 ? \"below +0.20\" : polarity < 0 ? \"above -0.20\" : \"outside ±0.20\"} or if order-book imbalance changes sign.`;\n\n const falsifiers = [\n imbalance > 0 ? \"Bid-heavy order book can vanish quickly; recheck if imbalance crosses below 0.\" : \"Ask-heavy order book can vanish quickly; recheck if imbalance crosses above 0.\",\n momentum30mPct > 0 ? \"Bullish 30m momentum is falsified if the next completed 5m close falls below the first close of the 30m window.\" : \"Bearish 30m momentum is falsified if the next completed 5m close rises above the first close of the 30m window.\",\n \"This analysis has no account, position, liquidation, funding, news, or on-chain context.\",\n ];\n\n return {\n symbol,\n evidenceState,\n fetchedAt,\n readOnly: true,\n boundary: \"MARKET_DATA_READ != TRADING_AUTH\",\n provider: \"Binance public market-data surface via data-api.binance.vision\",\n method: {\n version: \"sentinel-1.0.0\",\n spreadBps: \"(ask-bid)/mid*10000\",\n orderBookImbalance: \"(top20_bid_notional-top20_ask_notional)/(top20_bid_notional+top20_ask_notional)\",\n realizedVolatility: \"sample_std(log(close_t/close_t-1))*10000 over 5m candles\",\n volumeZScore: \"(latest_quote_volume-mean(prior_quote_volume))/sample_std(prior_quote_volume)\",\n directionalScore: \"mean(tanh(2*imbalance), tanh(momentum30mPct/0.6), tanh(momentum3hPct/1.5))\",\n stabilityScore: \"heuristic 0..1; decreases with |volume z|, short volatility, spread and missing sources; not a probability\",\n },\n market: {\n lastPrice: round(last, 8),\n change24hPct: round(finite(ticker?.priceChangePercent), 3),\n high24h: round(finite(ticker?.highPrice), 8),\n low24h: round(finite(ticker?.lowPrice), 8),\n quoteVolume24h: round(finite(ticker?.quoteVolume), 2),\n tradeCount24h: finite(ticker?.count),\n tickerCloseTime: ticker?.closeTime ?? null,\n },\n microstructure: {\n bid: round(bid, 8),\n ask: round(ask, 8),\n spreadBps: round(spreadBps, 4),\n bidNotionalTop20: round(bidNotional, 2),\n askNotionalTop20: round(askNotional, 2),\n orderBookImbalance: round(imbalance, 4),\n depthUpdateId: depth?.lastUpdateId ?? null,\n },\n shortHorizon: {\n interval: \"5m\",\n candles: klines.length,\n realizedVolatilityBpsPer5m: round(shortVolBps, 3),\n momentum30mPct: round(momentum30mPct, 3),\n momentum3hPct: round(momentum3hPct, 3),\n latestQuoteVolume: round(lastQuoteVolume, 2),\n volumeZScore: round(volumeZ, 3),\n lastClosedOrCurrentCandleCloseTime: klines.at(-1)?.[6] ?? null,\n closeSeries: klines.slice(-24).map(k => ({ time: k[0], close: round(finite(k[4]), 8) })),\n },\n assessment: {\n bias,\n directionalScore: round(directionalScore, 4),\n stabilityScore: round(stabilityScore, 3),\n stabilityMeaning: \"Heuristic snapshot stability score, not a calibrated probability or forecast confidence.\",\n hypotheses,\n supportingEvidence,\n opposingEvidence,\n alternativeExplanations,\n riskFlags,\n recommendation: \"NO_TRADE_DECISION\",\n explanation: \"Read-only evidence synthesis. Directional pressure is descriptive, not a forecast or order recommendation.\",\n falsifiers,\n nextTest,\n },\n missingContext: [\n \"Futures funding/mark-price endpoint unavailable from current Val Town runtime due Binance regional restriction\",\n \"No authenticated Binance account context\",\n \"No portfolio/position context\",\n \"No external news/on-chain context\",\n ],\n receipts,\n };\n}\n\nexport function supportedSymbols() {\n return [...SYMBOLS];\n}\n",[],[192,283],["D",1788812876304],[242],[192],"41a83316-8ca5-4908-9697-c5185260d74d","styles.css","e0a2143e-aafa-11f1-b5e5-1607ee4eb77e",44,["D",1788814044187],":root{color-scheme:dark;--bg:#07090d;--panel:rgba(16,20,27,.78);--panel2:rgba(20,25,33,.64);--line:rgba(255,255,255,.08);--line2:rgba(255,255,255,.13);--text:#f5f7fa;--muted:#929aa8;--soft:#c7ccd4;--green:#63e6be;--amber:#ffd166;--red:#ff7b8b;--blue:#8bb8ff;--violet:#ba9cff;--radius:22px;--shadow:0 24px 70px rgba(0,0,0,.34)}*{box-sizing:border-box}html{background:var(--bg);font-family:Inter,ui-sans-serif,-apple-system,BlinkMacSystemFont,\"SF Pro Display\",\"Segoe UI\",sans-serif}body{margin:0;min-height:100vh;color:var(--text);background:radial-gradient(900px 500px at 76% -8%,rgba(94,122,255,.12),transparent 65%),radial-gradient(750px 520px at -8% 30%,rgba(71,230,190,.07),transparent 67%),linear-gradient(180deg,#080a0f 0%,#07090d 100%);font-feature-settings:\"tnum\" 1,\"cv02\" 1,\"cv03\" 1}button,select{font:inherit}button{color:inherit}.app-shell{width:min(1220px,calc(100% - 32px));margin:0 auto;padding:26px 0 48px}.topbar{display:flex;justify-content:space-between;align-items:center;gap:18px;margin-bottom:28px}.brand{display:flex;align-items:center;gap:12px}.mark{width:38px;height:38px;border-radius:13px;border:1px solid var(--line2);display:grid;place-items:center;background:linear-gradient(145deg,rgba(139,184,255,.15),rgba(99,230,190,.07));box-shadow:inset 0 1px rgba(255,255,255,.08)}.mark svg{width:20px;height:20px}.brand-copy strong{display:block;font-size:14px;letter-spacing:.01em}.brand-copy span{display:block;color:var(--muted);font-size:11px;margin-top:2px}.status-pill{display:flex;align-items:center;gap:8px;border:1px solid var(--line);background:rgba(255,255,255,.035);padding:8px 11px;border-radius:999px;color:var(--soft);font-size:11px}.dot{width:7px;height:7px;border-radius:50%;background:var(--green);box-shadow:0 0 0 5px rgba(99,230,190,.08)}.hero{display:grid;grid-template-columns:1.25fr .75fr;gap:18px;margin-bottom:18px}.hero-main,.hero-side,.card{border:1px solid var(--line);background:linear-gradient(145deg,rgba(255,255,255,.042),rgba(255,255,255,.018));box-shadow:var(--shadow);backdrop-filter:blur(20px);-webkit-backdrop-filter:blur(20px)}.hero-main{border-radius:28px;padding:30px 30px 26px;min-height:265px;position:relative;overflow:hidden}.hero-main:after{content:\"\";position:absolute;width:300px;height:300px;border-radius:50%;right:-150px;top:-160px;background:rgba(139,184,255,.08);filter:blur(10px);pointer-events:none}.eyebrow{font-size:11px;letter-spacing:.13em;text-transform:uppercase;color:var(--blue);font-weight:700}.hero h1{font-size:clamp(34px,5vw,64px);line-height:.98;letter-spacing:-.052em;margin:16px 0 15px;max-width:780px}.hero p{margin:0;max-width:690px;color:#adb5c1;font-size:14px;line-height:1.62}.hero-note{display:flex;flex-wrap:wrap;gap:8px;margin-top:24px}.mini-pill{font-size:10px;color:#bbc2cc;border:1px solid var(--line);border-radius:999px;padding:6px 8px;background:rgba(255,255,255,.025)}.hero-side{border-radius:28px;padding:22px;display:flex;flex-direction:column;justify-content:space-between}.hero-side-title{font-size:11px;color:var(--muted);text-transform:uppercase;letter-spacing:.1em}.symbol-row{display:flex;gap:8px;flex-wrap:wrap;margin-top:12px}.symbol-btn{border:1px solid var(--line);background:rgba(255,255,255,.025);border-radius:12px;padding:8px 10px;font-size:11px;cursor:pointer;transition:.18s ease}.symbol-btn:hover{background:rgba(255,255,255,.06);transform:translateY(-1px)}.symbol-btn.active{border-color:rgba(139,184,255,.45);background:rgba(139,184,255,.11);color:#dce9ff}.refresh{width:100%;margin-top:20px;border:1px solid rgba(139,184,255,.25);background:linear-gradient(180deg,rgba(139,184,255,.14),rgba(139,184,255,.08));border-radius:14px;padding:11px 14px;font-weight:700;font-size:12px;cursor:pointer;transition:.18s ease}.refresh:hover{transform:translateY(-1px);border-color:rgba(139,184,255,.4)}.refresh:disabled{opacity:.5;cursor:wait;transform:none}.grid{display:grid;grid-template-columns:repeat(12,minmax(0,1fr));gap:14px}.card{border-radius:var(--radius);padding:18px;min-width:0}.span-3{grid-column:span 3}.span-4{grid-column:span 4}.span-5{grid-column:span 5}.span-7{grid-column:span 7}.span-12{grid-column:span 12}.metric-label{color:var(--muted);font-size:10px;text-transform:uppercase;letter-spacing:.09em}.metric-value{font-size:27px;line-height:1.05;font-weight:760;letter-spacing:-.035em;margin-top:9px}.metric-sub{font-size:10px;color:var(--muted);margin-top:7px}.pos{color:var(--green)}.neg{color:var(--red)}.neutral{color:var(--soft)}.section-head{display:flex;justify-content:space-between;align-items:flex-start;gap:12px;margin-bottom:14px}.section-head h2{font-size:14px;margin:0;letter-spacing:-.015em}.section-head span{font-size:10px;color:var(--muted)}.chart-wrap{height:205px;position:relative}.chart-wrap svg{width:100%;height:100%;overflow:visible}.chart-line{fill:none;stroke:#8bb8ff;stroke-width:2;vector-effect:non-scaling-stroke}.chart-area{fill:url(#chartFill)}.chart-grid{stroke:rgba(255,255,255,.05);stroke-width:1;vector-effect:non-scaling-stroke}.chart-meta{position:absolute;right:0;top:0;text-align:right}.chart-meta strong{display:block;font-size:13px}.chart-meta span{font-size:10px;color:var(--muted)}.assessment{display:flex;flex-direction:column;gap:14px}.bias-row{display:flex;align-items:center;justify-content:space-between;gap:12px}.bias-badge{font-size:10px;font-weight:750;letter-spacing:.06em;border-radius:999px;padding:7px 9px;border:1px solid var(--line2);background:rgba(255,255,255,.03)}.confidence-track{height:7px;background:rgba(255,255,255,.055);border-radius:999px;overflow:hidden}.confidence-fill{height:100%;background:linear-gradient(90deg,#729dff,#63e6be);border-radius:999px}.risk-list,.source-list,.falsifier-list{display:grid;gap:8px}.risk-item,.source-item,.falsifier-item{border:1px solid var(--line);background:rgba(255,255,255,.018);border-radius:13px;padding:10px 11px;font-size:11px;line-height:1.42;color:#c5cbd4}.risk-item{display:flex;align-items:center;gap:8px}.risk-icon{width:7px;height:7px;border-radius:50%;background:var(--amber);flex:0 0 auto}.source-item{display:grid;grid-template-columns:auto 1fr auto;gap:9px;align-items:center}.source-state{font-size:9px;font-weight:800;letter-spacing:.05em}.source-state.pass{color:var(--green)}.source-state.fail{color:var(--red)}.source-name{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.source-ms{font-size:9px;color:var(--muted)}.evidence-banner{display:flex;align-items:flex-start;gap:11px;padding:12px;border-radius:15px;border:1px solid rgba(99,230,190,.14);background:rgba(99,230,190,.035)}.evidence-banner svg{width:18px;height:18px;flex:0 0 auto;margin-top:1px}.evidence-banner strong{display:block;font-size:11px}.evidence-banner p{font-size:10px;color:var(--muted);margin:4px 0 0;line-height:1.45}.kv{display:grid;grid-template-columns:1fr auto;gap:9px 14px;font-size:11px}.kv span:nth-child(odd){color:var(--muted)}.kv span:nth-child(even){font-variant-numeric:tabular-nums;font-weight:650}.skeleton{animation:pulse 1.35s ease-in-out infinite alternate;background:rgba(255,255,255,.05);border-radius:8px;color:transparent!important}@keyframes pulse{to{background:rgba(255,255,255,.1)}}.error-box{grid-column:1/-1;border:1px solid rgba(255,123,139,.22);background:rgba(255,123,139,.05);border-radius:18px;padding:16px;color:#ffc2ca;font-size:12px}.footer{display:flex;justify-content:space-between;gap:16px;align-items:center;margin-top:18px;padding:4px 2px;color:#68717e;font-size:10px}.footer a{color:#9099a7;text-decoration:none}.footer a:hover{color:#d4d9e0}@media(max-width:980px){.hero{grid-template-columns:1fr}.span-3{grid-column:span 6}.span-4,.span-5,.span-7{grid-column:span 12}}@media(max-width:620px){.app-shell{width:min(100% - 20px,1220px);padding-top:14px}.topbar{margin-bottom:16px}.brand-copy span{display:none}.status-pill{font-size:9px}.hero-main,.hero-side{border-radius:22px;padding:20px}.hero-main{min-height:auto}.hero h1{font-size:39px}.span-3{grid-column:span 12}.card{padding:15px;border-radius:18px}.metric-value{font-size:24px}.footer{align-items:flex-start;flex-direction:column}.source-item{grid-template-columns:auto minmax(0,1fr) auto}}.metric-value-compact{font-size:22px}.mt12{margin-top:12px}.confidence-progress{display:block;width:100%;height:7px;margin:8px 0 0;appearance:none;-webkit-appearance:none;border:0;border-radius:999px;overflow:hidden;background:rgba(255,255,255,.055)}.confidence-progress::-webkit-progress-bar{background:rgba(255,255,255,.055);border-radius:999px}.confidence-progress::-webkit-progress-value{background:linear-gradient(90deg,#729dff,#63e6be);border-radius:999px}.confidence-progress::-moz-progress-bar{background:linear-gradient(90deg,#729dff,#63e6be);border-radius:999px}.neuron-card{overflow:hidden}.hypothesis-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px}.hypothesis-card{margin:0;border:1px solid var(--line);background:rgba(255,255,255,.018);border-radius:16px;padding:14px;min-height:132px}.hypothesis-card p{margin:8px 0 0;color:#c4cbd5;font-size:11px;line-height:1.55}.hypothesis-label{font-size:9px;font-weight:800;letter-spacing:.09em;text-transform:uppercase}.hypothesis-winning{border-color:rgba(99,230,190,.15);background:rgba(99,230,190,.025)}.hypothesis-winning .hypothesis-label{color:var(--green)}.hypothesis-opposite{border-color:rgba(255,123,139,.14);background:rgba(255,123,139,.022)}.hypothesis-opposite .hypothesis-label{color:var(--red)}.hypothesis-alternative{border-color:rgba(186,156,255,.15);background:rgba(186,156,255,.022)}.hypothesis-alternative .hypothesis-label{color:var(--violet)}.counter-grid{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin-top:10px}.counter-panel,.alternative-strip,.next-test{border:1px solid var(--line);background:rgba(255,255,255,.014);border-radius:15px;padding:13px}.counter-title{font-size:9px;font-weight:800;letter-spacing:.07em;text-transform:uppercase;color:var(--muted)}.support-title{color:var(--green)}.oppose-title{color:var(--red)}.evidence-stack{display:grid;gap:7px;margin-top:9px}.evidence-row{display:flex;gap:8px;align-items:flex-start;color:#c5cbd4;font-size:10px;line-height:1.45}.evidence-dot{width:6px;height:6px;border-radius:50%;margin-top:4px;flex:0 0 auto}.support-dot{background:var(--green)}.oppose-dot{background:var(--red)}.alternative-strip{margin-top:10px}.alternative-list{display:flex;flex-wrap:wrap;gap:7px;margin-top:9px}.next-test{display:flex;gap:12px;align-items:flex-start;margin-top:10px;border-color:rgba(139,184,255,.16);background:rgba(139,184,255,.025)}.next-test strong{font-size:9px;letter-spacing:.07em;text-transform:uppercase;color:var(--blue);min-width:150px}.next-test span{font-size:10px;color:#c5cbd4;line-height:1.5}@media(max-width:760px){.hypothesis-grid,.counter-grid{grid-template-columns:1fr}.next-test{flex-direction:column;gap:6px}.next-test strong{min-width:0}}",[],[198,295],"02773531-40aa-4240-8154-a91444ea9bf6","root.tsx","01a07d8d-933a-7578-bf59-2f7e4fd374d4",9,["D",1788813000071],"/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\nexport function Root() {\n return (\n <>\n {raw(\"\")}\n \n \n \n \n \n \n PayAna Market Sentinel\n \n \n \n \n

Diff · v45