A refusal that survived its own transaction
The whole argument, on chain and readable by anyone. A credentialed holder tries to send to an address with no A-Pass. The transfer does not happen. The record of the refusal does — and the transaction succeeds, which is the only reason the record still exists.

Record 5 · selector 0x52464e01 = RFN + reason 1, "no A-Pass credential at all" — and the failing party is the recipient, not the sender. The transaction that wrote it returned status 0x1.
A refusal is not one thing, and the ledger says which
Compliance refusals, mechanical failures and unobservable gates are three different facts. Collapsing them is how a system claims a gate fired when it never ran. Wallets B and C hold no tokens, so their attempts are recorded as mechanical — they would have failed whatever their credential said, and counting them as gate refusals would manufacture a false claim.

A question we could not answer never looks like an answer
Point the reader at a ledger that is not there and the table says so. The counters stay blank and the status line names a connection problem. This is the failure mode the whole project exists to attack, so the product must not commit it.


Every permissioned token Cleanverse lists, measured
317 tokens across six chains, 283 of them permissioned, run against one versioned 27-vector ERC-3643 suite at one block. 22 reach Stage 0. 261 reach no stage at all, and each says which of four reasons applies — three of them are limits on our reach, not statements about the token.




Every row opens onto its own evidence
A grade nobody can re-run is an opinion. Each token has a page carrying the ladder walked step by step, the implementation it shares code with, and the exact command that reproduces the row — against the real RPC, not a placeholder. Behind 283 permissioned tokens there are only 70 distinct implementations, so a passing row is a contract observed repeatedly.

CVA: we issued a real Cleanverse A-Token, and minted it
Track 1 asks for CVA in the core flow from issuance. Plumb applied through Cleanverse's own encrypted cooperate API, the application reached ISSUED, and the token now holds real supply — 1.000000 PVRWB against a live tier-20 A-Pass. Its compliance rule reads back from Cleanverse's side as min_tier: 10, the substance requirement their own deployed gate does not make.
0xf885f753175D1f9C6e7A7e1C39336A80D4dbE29B
PVRWB · Plumb Verified Receivable · 6 decimals · Base Sepolia
totalSupply 1000000, all of it held by a credentialed address. Admin holds DEFAULT_ADMIN_ROLE; MINTER_ROLE granted and used.
CVI: identity read straight off the chain
Eligibility.sol calls getAPassData on Cleanverse's live registry at 0xbA82D189…58B9, so a refusal names the credential that was missing instead of denying generically. 25 Foundry tests run forked against that registry with real credentials — and they found a live A-Pass being edited underneath us, which is exactly what a test against live state is for.

The ruler was graded before anything else
Every vector is scored on whether it has ever been observed producing both a pass and a fail. On live data most cannot be, so a fixture is deployed and deliberately broken: 22 of 27 proven, 5 labelled not inducible and never hidden. A test that cannot fail protects nothing.

The part that cannot be recomputed
Everything else here is reproducible, which means today's table is worth nothing a competitor could not rebuild tomorrow. What cannot be rebuilt is yesterday. Each run appends one immutable, content-addressed snapshot anchored to the head block of every chain measured.

On-chain transaction index
Every transaction this page depends on, re-read from chain at build
time. The refusals are the interesting rows: they returned status 0x1,
which is the only reason their records still exist.
| Chain | What | Transaction | Status | Block |
|---|---|---|---|---|
| Monad | issue 1,000,000 to a tier-20 credentialed holder | 0x0e3dfbd0ece3…bd7298b8 | 0x1 | 52,088,835 |
| Monad | attest a PERMITTED pair (positive control) | 0x91f7eb8952f2…78e72ba3 | 0x1 | 52,088,840 |
| Monad | attest credentialed -> uncredentialed: REFUSED, recorded | 0x10bd1f68842f…4c8f80a9 | 0x1 | 52,088,846 |
| Monad | wallet B send() through the desk | 0xcead2c62e35c…0e91949d | 0x1 | 52,088,852 |
| Monad | wallet C send() through the desk | 0xe7fc30191b47…96aaf8b1 | 0x1 | 52,088,855 |
| Base | A-Token PVRWB issued by Cleanverse | 0xc2b45fa94712…c5cc21bd | 0x1 | 45,215,705 |
| Base | grantRole(MINTER_ROLE, admin) | 0x0098b1cb01ba…140cb9d8 | 0x1 | 45,240,179 |
| Base | mint 1.000000 PVRWB to a credentialed holder | 0x78254411879c…f93d5138 | 0x1 | 45,240,184 |
Contracts —
RefusalLedger 0x85D4fb97f61756c1934Ce7C0d2A26B51fA7813A2 ·
TransferDesk 0x57fcf5CCFbE85846D74dDdD7B4d84A07a2F359A7 ·
CompliantAsset 0x88Cc48FD13cDd707CBed8c5d77C4ee2ea61340E5 on Monad;
A-Token 0xf885f753175D1f9C6e7A7e1C39336A80D4dbE29B on Base Sepolia.