Commit timezone consistent with stated geography
Midas's assessment for RD-F-119 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Main repo RedDuck-Software/midas-contracts is private — commit timestamp distribution not enumerable. RedDuck Software GitHub org lists Ukraine as location (UTC+2/+3); Midas Software GmbH is Berlin/Germany (UTC+1/+2). These timezones are geographically consistent with stated geography and inconsistent with DPRK UTC+9 pattern. However, formal commit-hour analysis cannot be performed on private repo. Sherlock audit repos (public read-only forks) contain insufficient commit metadata for timezone distribution analysis.
Sources #
- GitHubRedDuck-Software GitHub OrganizationRedDuck Software GitHub org — location listed as Ukraine; no public midas-contracts reporetrieved 2026-05-16
Methodology #
Determine whether the distribution of commit hours in the repo is consistent with the team's publicly stated geography (anomaly flag for DPRK-precursor pattern).
See the full factor methodology and distribution across all protocols →