Documentation

For auditors

Drydock turns your existing engagement model into pre-funded, recurring deal flow with zero change to how you audit. Integration is three artifacts, agreed once.

1 · The trailer

Embed one machine-readable JSON block verbatim in the final report:{ engagementId, reportHash, hSFinal, counts }. The engagement id is provided at intake; hSFinal is the keccak of the exact post-remediation bundle you signed off on.

2 · The signature

Sign the trailer via EIP-712 (domain DrydockEscrow, version 1, chain id, escrow address) with the key you published at engagement start. A one-command signing tool ships in the SDK. The signature is you stating your own artifact; it grants no power over funds beyond what the report's contents already determine through launch conditions fixed before your engagement began.

3 · The rate card

A public pure function from nSLOC to fee and minimum review window, committed on-chain, mirroring published contest-market pricing. Your fee and timeline become deterministic at campaign creation: no quotes, no negotiation, no discretion.

Payment: findings-independent by design

An intake tranche pays at finalize; the remainder pays on delivery, favorable or not. You are never a guarantor, never hold contributor funds, never approve or veto anything. The protocol pays for the report's existence and stakes nothing on its verdict — the independence norm your profession already requires, made contractual. What it cannot buy is diligence; that stays in your reputation, which is why your identity, domain, and the exact reviewed bundle are permanently attributable in every certificate.

Partnership inquiries: contact@drydockprotocol.org.