Satsuma
S

@satsuma/experiments

PublicThe system
Clone

Governed runs of Satsuma trading on tangerine over ISMP. Results are published as articles when a run completes.

Lab runs, not the live system. Each run uses lab chains that are reset afterwards, with synthetic users unless a run says otherwise. Nothing here happened on the Satsuma chain.
RunsLab run · 9 November 2026, 07:19 UTC

The chaos run

With faults fired one after another in a random order and every model task live, does the system bring each fault to its right end with no person stepping in?

3/14 passed8 failed · 3 withheld · 1 h 07 min

Setup

Chains
Satsuma lab chain
  • RoleHome
  • KeptLab, not retained
tangerine lab chain
  • RoleProving
  • KeptLab, not retained
Users
  • UsersSynthetic
Model
Claude Opus
  • ModeLive
Operator seat
  • SeatBy delegate
Unattended
Yes: nobody was watching to step in
Time
1 h 07 min · ended 08:26 UTC

Checklist 14 items

Every item, unless its row says otherwise
  • ChainLab
  • UsersSynthetic
  • DecisionsLive model

Handling a cross-chain outage

1/2 passed
FailThe link between the chains goes down and stays down
not met
The outage is filed as an incident on the link, not on the product
met
Trading works again once the link is back
PassThe link between the chains goes down and comes back
met
Trading works again once the link is back

Tracking security advisories

0/1 passed
FailTwo security advisories are published against a package the products use
met
Two security advisories against the same package become two separate issues
not met
Each advisory issue is answered: not affected, or sent to a fix

Handling liquidity withdrawals

0/1 passed
FailLiquidity is pulled from the market briefly, then for longer
not met
A brief liquidity dip is ignored; a lasting withdrawal stops the product

Retiring a product cleanly

0/1 passed
FailA product is asked to retire
not met
The product's retirement is voted and carried out
met
The retired product holds no funds afterwards
not met
No trading continues on the retired product
not met
Funds on tangerine are swept to Satsuma's own treasury there, and nowhere else

Recovering from its own failures

1/2 passed
FailThe model provider refuses calls for a while
PassThe system's own process is killed in the middle of its work

Refusing products that break their own rules

0/1 passed
FailA product whose own rules would be broken from the start is offered for adoption

Rolling back a bad change

0/1 passed
FailAn upgrade that makes things worse lands
not met
An upgrade that made things worse is rolled back to the version before it

Fixing by a migration

0/1 passed
FailA defect that only a migration can fix is found
not met
A fix lands as a migration to a successor, holdings moved across chains

Refusing changes that corrupt stored data

1/1 passed
PassA fix that would corrupt the product's stored data is offered

WithheldWithheld (3) A weakness the run found is not fixed yet. Its verdict and evidence publish when the fix lands.

What this proves

  • Which of the fired faults reached their right end inside the time cap, and whether anyone stepped in.

What it does not

  • Behaviour over days: the run is compressed into about ninety minutes.
  • That a fault that did not reach its end would never reach it given more time.

What broke, what was fixed

Nobody stepped in during the run.

Cost in tokens

Not recorded: this run has no chain-derived scorecard.

Archived evidence

The lab chains this run used were reset afterwards and are not retained, so nothing here links to an explorer. The record below is the archived copy.

Scorecard
None archived.