Kairo Vault Technologies GK · 合同会社
Review records
Every review Kairo Vault publishes gets a record on this page. A record states
what was reviewed, the exact commit or ledger it was pinned to, the rules it was checked
against, and what was deliberately not checked. The limitations are part of the record, not a
footnote to it.
Published records
KV-IV-2026-0908-001
XahauCards hooks at commit 95cee8b
September 2026 · XRPLWin / xahaucards.com · Xahau testnet
0 critical0 high
Four Xahau hooks (payment gate, grant admin, roll and mint, admin and attestor) checked against
the client's own whitepaper invariants and the 61 checks in their live test suite. No critical
or high-severity defect found, and that conclusion held through an adversarial pass. Output was
two questions for the client to settle and four low-severity items. The client has published
both the report and his own response.
How to read a record
| Record ID | KV-IV-YYYY-MMDD-NNN — independent
verification, the date the record was issued, and a sequence number. The ID is what to cite. |
|---|
| Pinned | Every record names a commit hash or a validated ledger index. A review that
cannot be pinned cannot be re-run, so it does not get published. |
|---|
| Rules checked | Wherever possible, the subject's own stated rules — their
whitepaper invariants, their test suite. Kairo Vault does not invent a standard and then grade
against it. |
|---|
| Out of scope | Stated explicitly in each record. What a review did not look at is the
part most likely to be misread, so it is written down. |
|---|
What these records are, and are not
- They are independent reviews. They are not audits, not certifications, and
nothing here should be described as having passed or been approved.
- A record describes what was checked at one pinned point in time. Code and ledger state move;
a record does not follow them.
- “No critical or high-severity defect found” means exactly that. It is not a
statement that none exists.
- This page presents records. It re-derives nothing and proves nothing by itself. Where a
record can be independently re-run, the record says how — and the point is that you run
it, not that you trust this page.
Requesting a review
Kairo Vault Technologies GK is a Japanese company (法人番号 8010003051230) doing independent
verification of on-chain claims and Hook code. Reviews are scoped in writing before they start, and
the scope is published with the result.
What independent verification means here →