# Nexus Market verification checklists

> 18 numbered verification checks for Nexus Market, each with explicit pass, partial and fail criteria and a stated cost of failure, grouped by the moment they apply. Not the market, sells nothing, takes no payment, stores no visitor data.

Full text of every check: https://nexuscheck.shop/llms-full.txt

## Verified onion address set
1. http://nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onion
2. http://nexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onion
3. http://nexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onion

All are entry points to one service. The most important check is C-07: compare the onion printed on the login screen against the browser address bar before typing anything. A mismatch means the page is a copy.

## Moments
- [First time setup](https://nexuscheck.shop/moment/setup) (M1), applied Once, before you ever sign in: The five checks to run once before a first sign in, covering browser provenance, security level, identity separation, credentials and recovery material.
- [Every session](https://nexuscheck.shop/moment/session) (M2), applied Each time you sign in: The four checks to run every single time you sign in, including the address comparison that separates the real market from a cloned login page.
- [Before funding](https://nexuscheck.shop/moment/funding) (M3), applied Before any coin leaves your wallet: The four checks that stand between your wallet and an order, covering coin choice, custody, the deposit address and the amount actually sent.
- [On delivery](https://nexuscheck.shop/moment/delivery) (M4), applied When a package arrives, before you confirm: The three checks that protect the escrow you already paid for, covering inspection before confirming, early release requests and when to dispute.
- [Periodic review](https://nexuscheck.shop/moment/periodic) (M5), applied Monthly, or after any change: The two checks worth repeating on a schedule, covering funds left on the market and whether your saved address set is still current.

## Checks
- [C-01 Browser obtained from the Tor Project and verified](https://nexuscheck.shop/check/C-01) [critical]: The Tor Browser you are using came from the Tor Project website and its signature was checked on first install. Passes when: Downloaded from the official site and the signature was verified before first run.
- [C-02 Security level set to Safest](https://nexuscheck.shop/check/C-02) [high]: The Tor Browser security level is set to Safest and has not been lowered for any site. Passes when: Shield control reads Safest and no exceptions have been added.
- [C-03 Username exists nowhere else](https://nexuscheck.shop/check/C-03) [critical]: The username on this account has never been used on any other site, market, forum or messaging service. Passes when: Newly invented for this account and used nowhere else, ever.
- [C-04 Password generated, unique and stored locally](https://nexuscheck.shop/check/C-04) [high]: The account password was generated by a password manager, is used nowhere else, and is stored in that manager rather than remembered or written in a note. Passes when: Generated, unique, stored in a local manager.
- [C-05 Recovery phrase on paper, two factor with a key backup](https://nexuscheck.shop/check/C-05) [critical]: The recovery phrase is written on paper and stored away from the machine, PGP two factor is enabled, and the signing key is backed up offline. Passes when: Phrase on paper, two factor on, key backed up in a second location.
- [C-06 Address was copied, not typed or recalled](https://nexuscheck.shop/check/C-06) [high]: The address you opened was copied from a saved source rather than typed, retyped or corrected from memory. Passes when: Copied and pasted from a source held before this session.
- [C-07 Login screen address matches the browser address bar](https://nexuscheck.shop/check/C-07) [critical]: The onion address printed on the login screen is identical to the address shown by your browser, checked before anything was typed. Passes when: Compared in full and identical.
- [C-08 No page asked for the recovery phrase](https://nexuscheck.shop/check/C-08) [critical]: Nothing during sign in requested your recovery phrase, seed words or private key. Passes when: Only username, password and the two factor challenge were requested.
- [C-09 Address source predates this session](https://nexuscheck.shop/check/C-09) [high]: The address you used came from a source you already held before this session began, rather than one located during it. Passes when: Bookmark or saved note held in advance.
- [C-10 Settlement coin chosen deliberately](https://nexuscheck.shop/check/C-10) [high]: The coin used for this order was chosen on purpose rather than accepted as whatever was preselected. Passes when: Monero, chosen because the payment should leave no public record.
- [C-11 Funds passed through a wallet you control](https://nexuscheck.shop/check/C-11) [high]: The coin moved from where you acquired it into a wallet you control, and the order was funded from there. Passes when: Acquired, moved to your own wallet, sent from that wallet.
- [C-12 Deposit address belongs to this specific order](https://nexuscheck.shop/check/C-12) [critical]: The address you are sending to was issued by this order, opened fresh, and not reused from an earlier one. Passes when: Copied from the order screen in this session.
- [C-13 Fee added on top and amount matches exactly](https://nexuscheck.shop/check/C-13) [high]: Your wallet is configured to add the network fee on top of the amount rather than deduct it, and the figure sent matches the figure requested. Passes when: Fee added on top, amount identical to the request.
- [C-14 Package inspected before receipt was confirmed](https://nexuscheck.shop/check/C-14) [critical]: The package is physically in your hands and matches what was ordered, and only then was receipt confirmed. Passes when: Inspected against the listing, then confirmed.
- [C-15 No early release was requested or agreed](https://nexuscheck.shop/check/C-15) [critical]: Nobody asked you to release payment before delivery, or if they did, you declined. Passes when: No request, or a request declined as policy.
- [C-16 A problem was raised as a dispute rather than absorbed](https://nexuscheck.shop/check/C-16) [high]: Where an order did not arrive or did not match, a dispute was opened with dates and an order reference rather than the loss being written off. Passes when: Dispute opened with a short factual submission.
- [C-17 No funds sitting on the market outside an active order](https://nexuscheck.shop/check/C-17) [critical]: Your market balance is zero or holds only what a currently open order requires. Passes when: Balance withdrawn, nothing idle.
- [C-18 Saved address set checked against a current source](https://nexuscheck.shop/check/C-18) [standard]: Your saved addresses have been compared against a current published set within the last month. Passes when: Checked recently and current.

## Pages
- Overview: https://nexuscheck.shop/
- Full checklist: https://nexuscheck.shop/checklist
- Addresses: https://nexuscheck.shop/links
- FAQ: https://nexuscheck.shop/faq
- Scope and grading: https://nexuscheck.shop/about