How NeuralHook works

NeuralHook.sol registers four hook callbacks inside the Uniswap v4 PoolManager: beforeSwap, afterSwap, beforeAddLiquidity, and afterRemoveLiquidity. Dynamic fees are enabled via DYNAMIC_FEE_FLAG (0x800000). The beforeSwap callback overrides the pool fee atomically — no separate governance transaction required.

Every fee change requires a valid ECDSA signature from the trusted oracle address. ECDSA.tryRecover catches signature malleability and zero-byte bypass attacks. A faked, replayed, or stale inference result reverts the transaction. Staleness is enforced: results older than 10 minutes are rejected on-chain (MAX_STALENESS = 600).

IL is computed on-chain using sqrtPriceX96: IL = 1 − 2q/(1+q²) where q is the sqrt-price ratio. ILInsuranceFund.sol caps each payout at 10% of reserves per claim to prevent drain attacks. The fund was seeded with 0.01 ETH at deployment.

The hook is deployed at 0x6DCb771F0A8A61F2679989453af9549C9ceA89c0 on Unichain Sepolia (chain ID 1301). Pool state (sqrtPriceX96, currentTick) is read live from the PoolManager using StateLibrary.extsload — the same extsload pattern used by the Uniswap v4 periphery.

0G Sealed Inference runs the IL risk model inside a Trusted Execution Environment (TEE). Inputs are: rolling 30-period volatility (σ), tick proximity (distance from current price to position range boundaries), and 5-period signed price momentum. These three features combine into a composite risk score.

Output: a 4-class risk label (LOW / MEDIUM / HIGH / CRITICAL), recommended fee in basis points, rebalance signal (bool), and yield score (0–255) — all signed by the TEE private key using ECDSA before leaving the enclave. The signed message structure matches NeuralHook.sol exactly: solidityPackedKeccak256([resultHash, ilRisk, predictedILBps, recommendedFee, rebalanceSignal, yieldScore, timestamp, chainId, hookAddress]).

Live sqrtPriceX96 is read from the PoolManager via StateLibrary.extsload on every inference cycle. This gives agents the real current ETH price (≈ $2000 at pool init) rather than a simulated value. If the pool slot is empty or out of sanity bounds, agents fall back to simulated metrics without stalling.

When OG_PROVIDER_ADDRESS is unset, a local heuristic model produces identical output structure and signs it with the same oracle key. The signature scheme is identical — local mode cannot be distinguished from TEE mode by the smart contract.

Three independent TypeScript agents each run a 30-second inference loop: read live pool state, call the inference layer, produce a signed InferenceResult, then gossip their vote to the other two agents via HTTP (Gensyn AXL when configured, HTTP fallback otherwise). Each vote carries the full signed result and the agent's measured round-trip latency.

When any node collects two matching votes (same ilRisk class), consensus is declared. Tie-break rule: higher risk class wins, so NeuralHook is asymmetrically conservative. The lowest-latency agreeing agent's signature becomes the canonical result submitted on-chain.

Only agent-0 (NODE_ID=0) calls submitConsensusResult on-chain. Agents 1 and 2 gossip and vote but never touch the chain. This prevents nonce collisions when all agents share the same oracle key — which was the root cause of all failed on-chain submissions before this architecture was finalized.

KeeperHub wraps the final on-chain submission step. Before broadcasting, it simulates the transaction via eth_call — confirming the consensus signature and all parameters are valid without spending gas. A revert in simulation means the signature is wrong, the timestamp is stale, or the fee is invalid; the entry is logged with success=false.

Gas price is fetched fresh from the network on every submission (2× the current maxFeePerGas). This prevents the gas from being hardcoded or pumped by a retry loop — the original source of a stuck high-gas transaction that blocked the wallet for several hours during testing.

On-chain state is confirmed via a 30-second polling loop that reads lastUpdateTimestamp, currentFee, and currentRisk directly from the contract. Unichain Sepolia's public RPC does not support eth_newFilter (event subscriptions), so polling is the only viable approach.

Every execution — success or failure — writes an AuditEntry: txHash, action, ilRisk, fee, gasUsed, timestamp, success. Entries are surfaced live on the Dashboard Audit Trail and queryable via GET /audit-log. The last 200 entries are retained in memory.