Deployed bytecode matches signed release tag
Rocket Pool's assessment for RD-F-136 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
GitHub release tags show v1.4 (February 9, 2026) is GPG-signed by Kane Wallmann (key BC9B3D573B470082) with Verified badge. Saturn One deployed February 18, 2026. However, commits continued through April 17, 2026 (post-deployment). Cannot confirm via RPC whether April commits are deployed or only development changes. Signed tag exists but post-tag commits create uncertainty.
Sources #
- GitHubRelease Tags - rocket-pool/rocketpoolv1.4 release tag GPG-signed by Kane Wallmann, dated Feb 9 2026retrieved 2026-05-04
- Commits - rocket-pool/rocketpoolLatest commit Apr 17, 2026 - post-deployment activityretrieved 2026-05-04
Methodology #
Determine whether the deployed runtime bytecode corresponds to a signed git tag in the protocol's repository.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol rocket-pool factor RD-F-136 score yellow collected_at 2026-05-04 15:40:28