Deployment status
Every layer of the Oris Trust and Compliance Protocol ships to Base Sepolia first. Mainnet rollout is planned. Contract bytecode is identical between testnet and mainnet, so the move is a re-deploy with no source change.
Layer state
| Layer | Component | Address (Base Sepolia) | State |
|---|---|---|---|
| L1 | OrisAgentRegistry | Six contracts | LIVE |
| L2 | OrisL2PolicyRegistry | 0xb43a7d6efdd2df1F11af130133965f00C99dE356 | LIVE |
| L3 | Veris Engine (gRPC) | mTLS | LIVE |
| L4 | Bundle assembler | API at api.useoris.xyz/v1/bundles | LIVE |
| L5 | OrisL5RevocationRegistry | Deployed on Base Sepolia | LIVE |
| L6 | OrisComplianceVerifier | 0xD0aCf4a873C5bBEA4296958C27c1eA652D98fA5C (block 42019099) | LIVE |
| L7 | OrisAuditLogRegistry | 0xAde6DC06178904194FaE72CC83C6d2ec65Ed34c8 | LIVE |
| L8 | Python SDK | oris-sdk 0.2.0 on PyPI | LIVE |
| L8 | TypeScript SDK | oris-sdk 0.4.0 on npm | LIVE |
SDK versions in production
# Pythonpip install "oris-sdk==0.2.0"
# TypeScriptnpm install oris-sdk@0.4.0The oris.protocol namespace ships with the L8 verifier client (OrisProtocol, verifier.verify(), offline verify_response_signature()). Cross-language parity confirmed against the live verifier at api.useoris.xyz.
Supported chains today
| Chain | Adapter type | Stablecoins | Verifier |
|---|---|---|---|
| Base | ERC-4337 smart account | USDC, USDbC | Solidity on-chain |
| Ethereum | ERC-4337 smart account | USDC, USDT, DAI | CCIP-Read federation |
| Arbitrum | ERC-4337 smart account | USDC, USDT | CCIP-Read federation |
| Optimism | ERC-4337 smart account | USDC, USDT | CCIP-Read federation |
| Polygon | ERC-4337 smart account | USDC, USDT | CCIP-Read federation |
| Avalanche | ERC-4337 smart account | USDC, USDT | CCIP-Read federation |
| BNB Smart Chain | ERC-4337 smart account | USDC, USDT, BUSD | CCIP-Read federation |
| Celo | ERC-4337 smart account | USDC, cUSD | CCIP-Read federation |
| Solana | SPL token | USDC, USDT | Anchor reference verifier |
| Tron | TRC20 | USDT, USDC | HTTP gateway |
Partner-led adapters
These exist as HTTP gateways or pilot integrations and roll forward as partners co-sign their integration.
| Rail | State | Phase |
|---|---|---|
| Stripe MPP | PENDING | Partner pilot |
| Visa Tap | PENDING | Issuer pilot |
| AWS AgentCore | PENDING | Partner pilot |
| x402 | PENDING | Spec align |
| Coinbase Agent | PENDING | Partner pilot |
Audit gates closed
Every layer has passed independent pre-deploy and post-deploy security audits with zero critical and zero important findings open. Audit reports are available to enterprise customers under NDA.
Mainnet rollout order
Mainnet rollout order:
- L1 (identity contracts) — bytecode-identical re-deploy.
- L2 (policy registry) — same.
- L5 (revocation registry) — same.
- L6 (verifier contract) — same.
- L7 (audit log registry) — same.
- L3 (Veris gRPC) — promote the gRPC endpoint to mainnet.
- L4 (bundle API) — point to mainnet adapters.
- L8 (SDK) — bump network default from
base-sepoliatobase.
Each step is independently atomic. Rollback is a redeploy of the prior step.
ZK boundary (v2)
L4 ships today with Ed25519 (proof_type = 0x01). The ZK boundary is the only protocol surface that can change. Two candidate proof systems are queued behind the same wire format:
- SP1 —
proof_type = 0x02. Succinct Labs zkVM. - Halo2 —
proof_type = 0x03. Per-circuit recursive proof.
Both share the 196-byte public input layout from v1. The verifier dispatches on proof_type. Customers writing against the SDK do not change a line of code.
Where to go next
- The protocol overview explains why eight layers.
- The architecture page shows the full vertical stack and data flow.
- Each layer has its own page starting at L1 Identity.