Lisbon Momentum
What is sealed
Five parameters, written once at registration. There is no function on any contract in this system that can reach them again.
| Parameter | Controls | Type | Value |
|---|---|---|---|
| targetWeightBps | Target WETH weight when the entry signal fires | euint256 | 0x0000aa36a723…3bce7ftargetWeightBps This is all anyone can ever see. A handle is a 32-byte pointer to a ciphertext held inside the TEE — not the value, and not an encrypted form of it you could attack offline. Reading it needs an ACL grant that nobody here has. 0x0000aa36a723013e1968087f0566628c25cdfc39c4da1d3265610c2eee3bce7f |
| entryThresholdBps | The signed price move that triggers entry | eint256 | 0x0000aa36a743…a981f1entryThresholdBps This is all anyone can ever see. A handle is a 32-byte pointer to a ciphertext held inside the TEE — not the value, and not an encrypted form of it you could attack offline. Reading it needs an ACL grant that nobody here has. 0x0000aa36a743018d043cacea3a2702f8e3a863d0b7a7b782c17d6f939ba981f1 |
| exitThresholdBps | The signed price move that triggers exit | eint256 | 0x0000aa36a743…7af754exitThresholdBps This is all anyone can ever see. A handle is a 32-byte pointer to a ciphertext held inside the TEE — not the value, and not an encrypted form of it you could attack offline. Reading it needs an ACL grant that nobody here has. 0x0000aa36a743017d30cd15431a83935e7271537caa9c912a5d3becef567af754 |
| maxTradeBps | The most of its own book it will move in one epoch | euint256 | 0x0000aa36a723…dce99emaxTradeBps This is all anyone can ever see. A handle is a 32-byte pointer to a ciphertext held inside the TEE — not the value, and not an encrypted form of it you could attack offline. Reading it needs an ACL grant that nobody here has. 0x0000aa36a7230101857da8da44e91f378d12cd070b60b1c15e36fd7d7edce99e |
| directionBias | Which direction it reads a move in | eint256 | 0x0000aa36a743…f990c2directionBias This is all anyone can ever see. A handle is a 32-byte pointer to a ciphertext held inside the TEE — not the value, and not an encrypted form of it you could attack offline. Reading it needs an ACL grant that nobody here has. 0x0000aa36a74301151faa9d2e2ce7f0d0113f6e48df3c010862c7bd3f17f990c2 |
A keccak hash of the five handles, written at registration. Anyone can call recomputeCommitment and compare — if the parameters had ever moved, the handles would differ and this hash would not match. Every entry in the track record below is keyed to it.
What it did
| Epoch | NAV / share | Clearing price |
|---|---|---|
| 2 | 1 | 27,244.09 |
| 1 | 1 | 27,306.82 |
Quantized to 25 bps and published one epoch late. An exact figure against the public price series would solve for inventory, and inventory differences are the trades — which would give back everything the crossing hides. The rounding rule is on chain, so a third party reproduces this table exactly.
Allocate
The fee is charged only on gains above the strategy’s previous peak, measured per share — so a drawdown and recovery earns nothing, and a deposit is never mistaken for a return. It is public and immutable, because the one number an allocator must be able to read before committing capital is the one they will be charged.
Withdrawals queue to the next epoch. There is no instant exit, deliberately: honouring one mid-epoch needs its own visible swap, and a swap sized to a single allocator is a readable position.