Ward Protocol

ward_signed = False — always. Ward constructs unsigned transactions. Institutions sign. The chain settles. Ward is never a counterparty, never a custodian, never a signatory.

Overview

Ward Protocol defines deterministic default resolution for institutional lending vaults on the XRP Ledger (XLS-66 amendment in validator voting). The validator specifies nine checks sourced from authoritative ledger state — no discretionary Ward approval and no Ward signature. The hosted Altnet surface currently proves policy checks F01-F03. Full XLS-66 lifecycle validation is the next XRPL Devnet integration milestone.

wardprotocol.org | wardprotocol.org/assurance | wardprotocol.org/demo

Live Status

The Nine Checks

Install

pip install ward-protocol          # Python SDK
npm install @wardprotocol/sdk      # TypeScript SDK

Hosted API: https://api.wardprotocol.org

Quick Start

import asyncio
from ward import WardClient, ClaimValidator

# Validate against the configured XRPL endpoint
validator = ClaimValidator(url="https://s.altnet.rippletest.net:51234/")
claim = await validator.validate_claim(
    claimant_address="rClaimantXXX...",
    nft_token_id="A" * 64,
    defaulted_vault="rVaultXXX...",
    loan_id="B" * 64,
    pool_address="rPoolXXX...",
)
print(claim.approved)           # True
print(claim.steps_passed)       # 9
print(claim.ward_signed)        # False — always

Integration Status

Ward's resolution model is intended to be rail-agnostic, but no non-XRPL module is presented as a deployable integration. See docs/multichain-gaps.md.

Running Tests

# Python
pip install -r requirements.txt
python3 -m pytest tests/ -v

# Rust
cd ward && cargo test

# TypeScript
cd sdk/typescript && npm install && npm test

Assurance

Internal pre-mainnet security report, TLA+ models, and continuous scanning results: wardprotocol.org/assurance

• Automated test and coverage totals are maintained in src/lib/wardMetrics.ts
• 32 invariants are documented in INVARIANTS.md
• TLA+ CI model checks cover INV-007 and INV-016; this is not a proof of all 32 invariants
• Dependency audit, secret scanning, and signer-boundary checks run in CI
• Git history scrubbed and verified clean
• ward_signed = False enforced at 4 independent layers

Community

• Discord: discord.gg/j45hnRP3HW
• XRPLF Discussion #474: github.com/XRPLF/XRPL-Standards/discussions/474
• Website: wardprotocol.org
• X: x.com/wardprotocol

Commercial

Published SDK packages and included specifications are MIT licensed. Mainnet API, Ward-conformant certification, and enterprise support require a commercial license. See COMMERCIAL.md.

Contact: team@wardprotocol.org

License

MIT — see LICENSE file.

ward_signed = False — always.