The problem Aureo solves

What Aureo is

Open-source middleware for Ethereum apps: observability, risk signals and auditable evidence. AureoCore registry + recoverable Node.js backend + reusable @aureo/sdk + CLI/API/WebSocket.

Use cases

• Register corporate transfers (initiator, beneficiary, amount, reference) on-chain.
• Watch CorporateTransferRecorded in real time; deterministic velocity/volume rules before any LLM call.
• Verdicts alto/medio/bajo, bloquear_contrato, requiere_mfa via /stream, /reports, CLI.
• Integrate via createAureoClient({rpcUrl, wsRpcUrl, contractAddress, abi}) + subscribe + evaluatePolicy.
• Deploy on Hardhat local and HSK Chain testnet 133 / mainnet 177.

Examples

• examples/cases: normal (treasury ok), speed (4 ops in 5 blocks => alto), volume (AlertStarted + explicit pause). Run npm run demo:case -- speed.
• examples/demo-dapp: 4 local ops, speedRuleTriggered:true, WebSocket events + policy.
• examples/realtime-metrics and examples/hashkey-integration for live metrics and HSK read-only.

Docs: README.md, md/ARQUITECTURA.md, md/PRESENTACION.md, packages/sdk/README.md.

Challenges I ran into

Hardest parts

• Exact arithmetic: BigInt/string end-to-end; velocity >3 ops in 5 blocks => alto, volume >3x avg or >OPERATIONAL_RESERVE => medio + MFA.
• Recoverable ingestion: cursor in backend-state.json, RPC replay after restart, dedupe by txHash/logIndex.
• LLM only as enrichment: Groq/xAI timeout/retries/backoff, fallback determinista_degradado.
• Wallet safety: ETH_PUBLIC_ADDRESS validated vs ETH_PRIVATE_KEY; read-only without key; /wallet never exposes secret.
• Repro demos: Docker Compose + demo:case + SDK metrics.snapshot() independent of backend.

Fix

Cursor persistence, degraded verdicts, startup key validation, scripted cases in md/Ejemplos_Casos.md and examples/cases/README.md.