AMPHIRA
01 / 08 · MANIFEST SOL · DEVNET UTC --:--:--
AMPHIRA$AMP · amphira.xyz
SOLANA DEVNET · CLUSTER UTC --:--:--

INDEX BASKET PROTOCOL·SOLANA DEVNET

Stack an index.
Hold one token.

LIVE NAV / SHARE · $MIX2X — next oracle beat — · one stale leg halts all 02 · BASKETS ON FLOOR — program-numbered vaults, created in order 03 · BACKSTOP POOL — WSOL first-loss capital underwriting every leg 04 · ORACLE FEEDS 12 × 300 s beat BTC → SOL · drift readable any time 05 · POOL COVERAGE — × notional underwritten vs pool collateral 06 · START HERE Open the Dock wrap SOL · mint · redeem at NAV

Amphira packs weighted, leveraged baskets of stocks, ETFs and crypto into numbered SPL containers — measured in 5% cells, stacked leg on leg, sealed at mint. Every container clears the same gate: NAV.

Open the Dock Watch the Hold Read the Ledger

READS VIA PUBLIC RPC · NO WALLET NEEDED · every number on the Hold ↗

Four moves.
No discretion.

the whole operation set · every rule enforced by the factory

01

Pack

2–8 legs, Σ|w| = 100%, leverage 1.0×–3.0× — the factory refuses anything outside the bands.

$ amphira pack --cells 5%
02

Mint

Wrap SOL, deposit WSOL, shares strike at NAV — no lockup, no whitelist, entry 10 bps.

$ amphira mint --at NAV
03

Trim

A 0.25× drift from target lets anyone rebalance for a bounty; one stale oracle leg halts the whole system.

$ amphira trim --band ±0.25×
04

Redeem

Burn any amount at NAV, any time — exit terms declared at mint, only ever improving.

$ amphira redeem --at NAV

The container is the token.

SPL vault shares · sealed at mint

Pick two to eight legs — stocks, ETFs, crypto — set the weights in 5% cells, choose a target from 1.0× to 3.0×. The factory packs them into one numbered SPL container: mint it, hold it, transfer it, redeem it. There is no separate claim to sign — the exposure you see is the exposure you hold.

SPL VAULT SHARES· 2–8 LEGS· Σ|w| = 100%· SINGLE LEG ≤ 50%

Straight off the hold.

first five containers · live read

—Reading chain…

every container, every feed, every drift bar lives on the Hold ↗ — same calls your wallet would make

Leverage is a band,
not a guess.

synthetic exposure · hard-coded bounds

Exposure is synthetic — underwritten by a counterparty pool and measured from NAV and margin on every health check. The bands are hard-coded: drift calls a trim, the ceiling calls anyone.

TARGET ZONE 1.0×–3.0× ACTUAL · MEASURED EVERY CHECK
REBALANCE TRIGGER ± 0.25× drift from target — permissionless, keeper-bountied
EMERGENCY DELEVERAGE ≥ 3.25× anyone may call it and take the bounty
ORACLE HEARTBEAT 300 s one stale leg halts mints, redeems, trims
SOFT LIQUIDATION ≤ 15% NAV at or under this share of entry reads Settled-bound
ENTRY / EXIT FEE 10 / 10 bps each hard-capped at 50 bps on-chain
SINGLE LEG CAP ≤ 50% no leg can dominate a container

The voyage, in three legs.

v0.3 · testnet MVP

LIVELEG 01 · TESTNET MVP

First crossing

One non-upgradeable Anchor program on Solana Devnet, eight demo containers, twelve mock feeds on a 300 s heartbeat, permissionless trims with bounties.

LEG 02 · DEEPER WATER

Heavier cargo

Short weights, liquidation incentives, fuzz and simulation reports published with the ledger, Chainlink stock and ETF feeds mapped to the registry.

LEG 03 · MAINNET REVIEW

Home port

Compliance assessment, audited contracts, position limits ramp — and the $AMP utility evaluated against the checklist before anything ships.

Straight answers.

the rest live on the Ledger

Q·01What exactly do I hold?
An ordinary SPL token — the share token of one basket vault. Minting strikes it at NAV, redeeming burns it at NAV, and in between it is transferable, listable and composable like any token. The weighted, leveraged strategy is the token.
Q·02Where does the leverage come from?
From a counterparty pool, not from borrowed assets. Exposure is synthetic: the pool underwrites it against margin, and actual leverage is measured from NAV and margin on every health check. A 0.25× drift triggers a permissionless trim; 3.25× triggers emergency deleverage — anyone may call either, for a bounty.
Q·03What if an oracle goes stale?
Every feed must beat a 300-second heartbeat (testnet value). The moment any leg goes stale, the whole system halts — mints, redeems and trims included — until freshness returns. Failure is designed to be loud and total, never partial or quiet.
Q·04Can the terms change after I mint?
Weights, bands and exit terms are declared at minting and immutable afterwards. Governance can only narrow parameters within hard caps — it can never widen fees, raise leverage past the ceiling, or touch your redemption at NAV.

Clear the gate.

operate · watch · verify

Connect a wallet, wrap SOL, mint a container — or watch every number verify itself first. The system runs either way.

Open the Dock Read the Ledger
01

The Dock

operate · amphira.xyz/app Connect a wallet on Solana Devnet: wrap SOL, mint a basket, redeem at NAV, underwrite the pool. The page holds no keys. 02

The Hold

watch · amphira.xyz/floor Every basket with leverage bars, the full feed registry with drift scales, and the deployment ledger — live reads, no wallet. 03

The Ledger

verify · amphira.xyz/docs Verified addresses, the five-fact primer, the worked example, the parameter sheet, FAQ and voyage plan — the whole trail, searchable. 04

X

follow · @amphira_xyz Build notes, feed health, deployment changes — the record as it happens.

Amphira is experimental software on a public testnet. Contracts are unaudited. Leveraged baskets can lose all deposited capital. Nothing here is investment advice.