Shared liquidity, scheduled.
Aqua makes liquidity shareable. AquaQoS makes shared liquidity schedulable.
Virtual balances are independent.
Real inventory is shared.
Aqua lets one maker back several strategies with the same tokens. Each strategy's virtual balance is funded independently, so together they can commit more than the real ERC-20 inventory can settle.
CAPACITY_GUARD admits a fill only when the vault's transferable inventory covers that fill and every strategy's remaining entitlement. Inventory above those entitlements is available to whichever strategy is filling.
CAPACITY_GUARD · SwapVM opcode 0x05
Guarantees protect siblings.
Unused capacity can burst.
Up to 8 strategies share one real inventory. The guard decides each fill before any token moves.
- > Independent Aqua strategiesEach strategy keeps its own virtual balance in Aqua.
- > One shared real inventoryEvery strategy settles against the same vault's ERC-20 balance.
- > CAPACITY_GUARD schedules accessA custom SwapVM instruction admits or rejects each fill before settlement.
- > Guaranteed capacity + controlled burstSibling entitlements stay covered; inventory above them can burst.
- > Actual transfer receiptThe receipt shows which real balances changed.
- 2,500 guaranteed to this strategy
- 2,500 reserved for its sibling
- 5,000 available to burst
Worked example of the admission invariant, not measured data.
Measured · retained benchmark receipts · 8 strategies. Guard rejection can cost more than failed settlement.
| Step | Raw Aqua | AquaQoS · 50% protected |
|---|---|---|
| 3 | 1,000Fill settled | 4,000Capacity protected |
| 4 | 1,000Settlement failed | 1,000Fill settled |
Pick how far you want to check.
Every surface states which kind of truth it shows, and what it does not.
/workspace/
RecordedStep through retained transactions from the checked benchmark.
- 72 recorded fixtures
- 616 swaps and 12 pushes
- Transfer logs and revert traces
- Wallet transaction
- Live chain state
/onchain/
Public testnetInspect deployed contracts and the transactions that exercise the guard.
- 22 public transactions
- Protected rejections and settled fills
- Exact-match custom contracts
- Production deployment
- Tokens with market value
/proof/
RecordedRead the specification, the review and the public deployment.
- Specification and security review
- Benchmark methodology
- Sourcify exact-match contracts
- 22 public Sepolia transactions
- External audit
- Mainnet deployment
Recorded evidence is replayable, and every public-chain claim links to its Sepolia transaction or verified contract.
Where the prototype stops.
Smaller guarantees leave more inventory for burst. Higher fill volume at 50% protection is not an equal-protection efficiency claim.
At eight strategies, low-contention guarded swaps measured 210,099 median gas versus 113,715 raw. Guard rejection can cost more than failed settlement.
Transaction-scoped reservations can reject otherwise safe sequential fills in the same outer transaction.
Fee-on-transfer, rebasing and malicious tokens are outside the supported domain. These tests do not establish general solvency or financial safety.
Pinned sources
- 1inch Aqua
- SwapVM
- CAPACITY_GUARD 0x05
- Solidity 0.8.30
- Hardhat 3.8.0
- Ethereum Sepolia
- Sourcify exact match
- Next.js 16
Report source b0d1d3e7bcb17dd551e458d1998dc84238db860c · versions pinned in package.json and hardhat.config.ts