The whole modelis 32 bytes.

Run the contract in your browser.

A line-for-line port of Werracle.previewDecision() and WerrMath.sol: the same Q16.16 integers, the same floor shifts, the same 16-point micro-grid and piecewise sigmoid. Click the map to move the seed, then push the risk until the contract says no.

It stops the attack inside the attack.

A flash loan borrows, manipulates and repays in one transaction. An oracle that answers next block is already too late. Werracle answers in the middle, and a revert undoes everything before it.

Gas for one inference.

Log scale. Every extra step to the right costs ten times more.

Add it to a contract.

One import, one call, one require. The guard runs before your sensitive logic, in the same transaction.

// SPDX-License-Identifier: BSL-1.1
pragma solidity ^0.8.20;

import "werracle/contracts/IWerracle.sol";

contract ProtectedVault {
    IWerracle public immutable werracle;

    constructor(address oracle) { werracle = IWerracle(oracle); }

    function withdraw(bytes32 state, int64 riskQ16) external payable {
        // same-transaction decision, ~19.4k gas
        (bool allowed, ) = werracle.decideNoul{value: msg.value}(state, riskQ16);
        require(allowed, "Werracle: hostile pattern");
        // ... protected logic
    }
}

Paper, data and code.