Sources and licenses
Pinned upstream code, license terms and source material behind these docs.
These docs are a curated explanation. The repository retains the raw reports, receipts and source material behind them.
Pinned upstream
Source-pinned Nothing is resolved by a semver label alone.
| Component | Pin |
|---|---|
| Aqua | v1.0.0 · 81c26e4 |
| SwapVM | main · f09a41e |
@1inch/solidity-utils | 6.9.10 |
| OpenZeppelin Contracts | 5.4.0 |
| forge-std | v1.11.0 |
| Toolchain | solc 0.8.30, Hardhat 3.8.0, Node 22.16.0, pnpm 11.10.0 |
| Compiler settings | viaIR, optimizer 700 runs, Cancun |
No upstream implementation file was copied. The router subclasses the pinned SwapVM router
and the vault uses official instruction builders. The one retained third-party source is the
unmodified compiler input of the historical Ethereum AquaRouter, kept only to reproduce its
deployed bytecode.
Licenses
Aqua and SwapVM use custom Degensoft source licenses. They are not blanket MIT or Apache
grants, and they set terms for modifications, corresponding source, dated changes,
attribution and reproducible builds. New AquaQoS Solidity files carry the SwapVM license
identifier; Aqua remains an unmodified dependency under its own license. Full texts are in
LICENSES/. This mapping is a record, not a legal opinion.
Powered by Aqua — © Degensoft Ltd 2025. Powered by SwapVM — © Degensoft Ltd 2025.
Repository source material
Protocol
- CAPACITY_GUARD specificationView source on GitHub · docs/CAPACITY_GUARD_SPEC.md
- Source-level protocol baselineView source on GitHub · docs/PROTOCOL_BASELINE.md
- Shared-inventory reproductionView source on GitHub · docs/PROBLEM_REPRODUCTION.md
- Architecture decisionsView source on GitHub · docs/DECISIONS.md
Evidence
- Benchmark methodologyView source on GitHub · docs/BENCHMARK_METHODOLOGY.md
- Benchmark resultsView source on GitHub · docs/BENCHMARK_RESULTS.md
- Guard-rejection replayView source on GitHub · docs/REJECTION_REPLAY.md
- Transaction validationView source on GitHub · docs/TRANSACTION_VALIDATION.md
- Lifecycle gasView source on GitHub · docs/LIFECYCLE_GAS.md
- Release verificationView source on GitHub · docs/RELEASE_VERIFICATION.md
Reviews and records
- v0 implementation reviewView source on GitHub · docs/SECURITY_REVIEW_V0.md
- Primary-source registerView source on GitHub · docs/RESEARCH_SOURCES.md
- Third-party noticesView source on GitHub · docs/THIRD_PARTY.md
Official 1inch references
- 1inch AquaOpen reference · 1inch.com
- Aqua documentationOpen reference · business.1inch.com
- Aqua whitepaper 1.0 (pinned)Open reference · github.com
- SwapVM whitepaper 1.0 (pinned)Open reference · github.com