The whole modelis 32 bytes.

Run the contract in your browser.

This is WerracleTripodZMod9.previewDecision(), the v2.0 core, ported integer for integer. It probes 12 points around its seed, runs z → z² + c for up to 9 steps on each, and measures how long they stay inside |z| ≤ 2. That boundedness pushes back against the caller's risk score. Above the threshold the call goes through; below it, the whole transaction reverts.

It stops the attack inside the attack.

A flash loan borrows, manipulates and repays in one transaction. An oracle that answers next block is already too late. Werracle answers in the middle, and a revert undoes everything before it.

Gas for one inference.

Log scale. Every extra step to the right costs ten times more.

Add it to a contract.

One import, one call, one require. The guard runs before your sensitive logic, in the same transaction.

// SPDX-License-Identifier: BSL-1.1
pragma solidity ^0.8.20;

import "werracle/contracts/IWerracle.sol";

contract ProtectedVault {
    IWerracle public immutable werracle;

    constructor(address oracle) { werracle = IWerracle(oracle); }

    function withdraw(bytes32 state, int64 riskQ16) external payable {
        // same-transaction decision; v2.0 flagship: ~20.7k gas
        (bool allowed, ) = werracle.decideNoul{value: msg.value}(state, riskQ16);
        require(allowed, "Werracle: hostile pattern");
        // ... protected logic
    }
}

Paper, data and code.