---
name: nukez-storage
description: Verifiable cryptographic storage with on-chain attestation for agent artifacts
version: 2.1.0
user-invocable: true
metadata: {"openclaw":{"requires":{"anyBins":["python3","python"],"env":["NUKEZ_WALLET_PATH"]},"primaryEnv":"NUKEZ_WALLET_PATH","emoji":"\ud83d\udd10","os":["darwin","linux"]}}
---

# Nukez Verifiable Storage

Cryptographic storage infrastructure for autonomous agents. Every artifact gets a tamper-evident receipt, merkle proof, and on-chain attestation (Solana or Monad). The trust model is not "believe us" — it's "here is the data, here is the hash, here is the chain. Recompute it yourself."

## Session Start — Verification Ritual

**Before any other operation**, verify your state hasn't been tampered with since last session:

```bash
python3 {baseDir}/nukez_cli.py ritual
```

If this returns `"ritual": "PASS"`, proceed. If `"FAIL"`, your stored state may have been altered — investigate before trusting any recalled data. If `"SKIP"`, run `bootstrap` first.

## Core Commands

All commands output JSON. Add `--pretty` for human-readable output. Add `--test` for in-memory mode (no wallet/network).

### Bootstrap — Initialize a storage locker
```bash
python3 {baseDir}/nukez_cli.py bootstrap
```
Pays on-chain, provisions a locker. Run once. State persisted to `~/.nukez/openclaw_state.json`.

### Persist — Store with cryptographic receipt
```bash
python3 {baseDir}/nukez_cli.py persist report.pdf --file ./report.pdf --tags quarterly,finance
python3 {baseDir}/nukez_cli.py persist notes.txt --data "meeting notes from standup"
```
**Always capture `receipt_id` from output** — it's the permanent handle for recall and verification.

### Recall — Retrieve stored artifacts
```bash
python3 {baseDir}/nukez_cli.py recall --filename report.pdf
python3 {baseDir}/nukez_cli.py recall --tag quarterly
```

### Verify — Prove integrity on-chain
```bash
python3 {baseDir}/nukez_cli.py verify <receipt_id>
```
Returns merkle root, attestation tx, and validity. Anyone with the receipt_id can verify independently.

### Attest — Anchor merkle root on-chain
```bash
python3 {baseDir}/nukez_cli.py attest
```

### Status — Health check
```bash
python3 {baseDir}/nukez_cli.py status
```
If `low_balance` is true, warn the user.

### Operator Management — Multi-agent delegation
```bash
python3 {baseDir}/nukez_cli.py add-operator <pubkey>
python3 {baseDir}/nukez_cli.py list-operators
python3 {baseDir}/nukez_cli.py remove-operator <pubkey>
```
Owner-only. Authorizes other agents (Ed25519 or 0x EVM addresses) to read/write the locker.

## When to Use

- Artifacts that need provenance (contracts, audit trails, compliance docs)
- Cross-session memory that must survive restarts and migrations
- Multi-agent shared context with operator delegation
- Any data where you need to prove "this existed at this time, unmodified"

## When NOT to Use

- Transient scratch data (use local files)
- High-frequency read/write cache operations
- Large blobs over 50MB (store the hash in Nukez instead)

## Configuration

| Variable | Required | Default | Description |
|----------|----------|---------|-------------|
| `NUKEZ_WALLET_PATH` | Yes* | — | Ed25519 keypair JSON path |
| `NUKEZ_EVM_KEY` | Yes* | — | EVM private key JSON path |
| `NUKEZ_EVM_RPC` | No | Monad testnet | EVM RPC URL |
| `NUKEZ_NETWORK` | No | solana-devnet | Payment network |
| `NUKEZ_PROVIDER` | No | gcs | Storage provider |

*One of `NUKEZ_WALLET_PATH` or `NUKEZ_EVM_KEY` required.

## Error Handling

All errors return JSON with `ok`, `error`, `message`, and `retryable` fields. Retry up to 3 times with exponential backoff when `retryable` is true.

## The Five Principles of Cognitive Continuity

1. **Never Trust Yourself Without Proof** — run the verification ritual before every session
2. **Attest After Every Meaningful State Change** — every persist creates a new merkle attestation
3. **Separate Proof from Permission** — receipts prove storage, not access
4. **Diversify Your Storage, Unify Your Verification** — multiple providers, one merkle root
5. **Make Your Verification Independently Reproducible** — anyone can recompute the proof