Is this deployed?

No canonical vault is deployed. Deploying one costs gas from a wallet and this repository holds no key — so /app deploys one from yours, and discovers existing vaults from the event each one emits in its own constructor rather than from a registry somebody has to maintain.

Is it audited?

No. It is an adversarial self-review with 28 properties executed on Robinhood Chain and 13 sabotages confirmed to behave as expected. That is a test suite. The site never calls it an audit.

Why can anybody harvest my vault?

Because the alternative is that somebody in particular has to, and then your yield depends on their diligence. Making it open costs you the bounty — 200 basis points of the harvest — and buys you the guarantee that anyone with gas can bring your accounting current, including you.

Can a gleaner drain the vault by calling it constantly?

No, and this is the one thing the design is really about. The bounty is a proportion of the harvest, so twenty calls split the same total twenty ways rather than charging twenty fees. Property 11 executes exactly that comparison, and the fixed-reimbursement version of the contract — the obvious design — is compiled and run against the same suite, where property 11 catches it.

What happens to a vault too small to be worth gleaning?

Its fees accumulate in the contract, visible through pendingFees(), and are booked the moment anybody calls. Nothing is lost. What is true is that nobody has a reason to call, so the share price goes stale, and a depositor who redeems in the meantime leaves their share behind. That is the number on /ripeness, and it is on the front page because it is the honest half of this design.

Why is my redemption worse just before a harvest?

Because totalAssets() counts booked assets only. Pending fees are not in the price until they are gleaned. You can fix it yourself: glean() is permissionless, so call it first and be paid for doing so.

Does the site use an API key, a proxy or a backend?

None. rpc.mainnet.chain.robinhood.com answers the browser preflight, so /hive and /ripeness read the chain directly from your browser. There is no server here.

Where did the photographs come from?

Wikimedia Commons, under Creative Commons licences, credited in full on /state.