Sandbox runs on XRPL testnet; no real money.

Preclinical operations

Agents propose.
Humans approve.

CROX is the operations desk for preclinical biotechs. Agents draft the study, compare CRO quotes, and check milestone evidence. A person approves — on a policy, with a second approver, a release delay, and a passkey — before XRPL escrow moves. CROX never holds the funds.

Try the sandboxSee how it works
  • Sponsor and CRO, in one study
  • Every action in the audit log
  • XRPL testnet sandbox

CroxBot follows the pointer. The loops are its eyes.

How it works

One study, from RFQ to a testnet release.

Scroll the steps or pick one. The human approval is a button you have to press. The agent does not get to skip it.

Sandbox illustration using the Halcyon Bio demo. HX-109 is still an open RFQ in the app. The figures below are that study’s quotes and the Halcyon release policy. HX-114 is the finished loop in the same fictional dataset. Nothing on this page submits a transaction.

Illustration ready. Nothing here moves funds.

The agent drafts. A person opens the RFQ.

Scoping Agent proposes a spec for HX-109 DMPK: in vitro ADME panel and rat PK. In the sandbox that draft is still a stub. Maya Okafor approves it before the RFQ opens. The audit action is spec.approved with approved_by: human.

Three quotes, scored from the rows.

Comparison Agent lines up the Halcyon demo quotes for HX-109. It does not call a model. Totals are recomputed from line items. Pick a row to read the flags. You award on the next step.

A human awards the study.

A sponsor approver or admin awards. The agent’s score is advice. Choose a quote first on the previous step.

Approve the spec before awarding.

Evidence in. A proposal out.

Kickoff criteria on the HX-109 spec. Tomas Berg would upload these for Northbridge. The Verification Agent then proposes a release. In the sandbox that proposal is still a fixed pass. It does not yet read the acceptance criteria. A person still has to approve it.

  • Signed protocol and assay plan receivedWaiting
  • Test article receipt documentedWaiting

Award the study before recording evidence.

Two people, then a delay.

Halcyon Bio escrow release policy v4. A release above 50,000 XRP needs a second, distinct approver. Final approval starts a 1-hour delay. In the app, each approval confirms with a passkey, or a password only when the account has none.

Human approval

No proposal yet

At or under the threshold this illustration would ask for one approver. These demo kickoffs sit above it.

Escrow finishes on testnet.

Assemble and sign EscrowFinish only after two human approvals, after the delay, and after another passkey step-up. The sandbox server holds a testnet seed. Mainnet is refused. CROX does not hold the funds.

Who it’s for

Sponsors run the study. CROs do the work.

CROX is for preclinical biotech sponsors and the CROs they hire. The names below are the fictional demo, so you can see the shape of a study without mistaking it for a customer list.

Sponsors

Preclinical biotechs

The sandbox sponsor is Halcyon Bio, a fictional organization. Scientist, approver, and admin roles share one study and one audit log.

  • Scope an RFQ and approve the spec before it opens.
  • Read quote flags, then award yourself.
  • Set the policy: a threshold, a second approver, a delay.
  • Release only after evidence, approval, and that delay.

CROs

Labs on the study

Northbridge Preclinical, Kestrel Labs, and Arden Toxicology are fictional CROs in that same demo. A CRO sees its invites, quotes, evidence, and payments.

  • See an invited RFQ once the spec is approved.
  • Draft a quote. A person can edit the agent’s lines.
  • Upload milestone evidence for the sponsor to review.
  • Follow a payment through the delay window.

Trust

The release waits for a person.

Policies, passkeys, and an audit log sit between a proposal and a payment. CROX never holds the funds.

CROX never holds the funds

Milestone payments sit in XRPL escrow between the sponsor and the CRO. The sandbox can use a testnet seed. Mainnet is refused. Live rails stay off until counsel has signed off.

A policy, not a vibe

The Halcyon demo policy asks for a second approver above 50,000 XRP and a 1-hour delay after the final approval. Cancel during that window does not move funds.

Passkey step-up

Approve, fund, release, policy save, and team role changes confirm with a passkey. A password is the fallback only when the account has no passkey. Once a passkey exists, the password is refused for those steps.

An audit row for every action

New rows are chained with SHA-256. The screen reads the signed-in organization. Seeded demo rows keep their original chain. This is the record, not a certification.

From the Halcyon demo audit log

HX-109 is the open comparison. HX-114 is the finished loop in the same fictional dataset. These are action names from that demo, not a live feed.

  1. study.scopedHX-109 DMPKScoping Agent
  2. quotes.scoredHX-109 DMPK (3 quotes)Comparison Agent
  3. approval.approvedHX-114 kickoff release (2 of 2)Daniel Reyes
  4. escrow.finishedHX-114 kickoff, XRPL testnetSystem

IND tracker

A lean tox checklist, with the gaps marked.

First-in-human pharmacology and toxicology, flagged where the package is thin. Decision support, not a regulatory opinion.

Preview · not in the sandbox yet

The lean tracker is a first-in-human tox checklist with gap flags. It is decision support, not a regulatory opinion. The template is not signed off by a named reviewer, and the sandbox has no IND tables yet. Toggles stay in this browser. 5 of 5 lines are flagged as gaps.

  • Repeat-dose toxicology

    Duration and species set against the planned clinical trial.

    ICH M3(R2)

  • Safety pharmacology core battery

    Central nervous system, respiratory, and cardiovascular.

    ICH S7A

  • Cardiovascular follow-up

    Including hERG where the program needs it.

    ICH S7B

  • Genotoxicity

    The standard battery for a small molecule.

    ICH S2(R1)

  • GLP compliance statement

    Pharmacology and toxicology section of the IND.

    21 CFR 312.23(a)(8)

New approach methods

A spec can name organ-on-chip, organoid, and in silico work beside animal studies. Recording a NAM asks for a flag to discuss it with the review division. It does not replace a required study, and matching NAM-capable CROs is still a proposal.

FAQ

Plain answers.

No. Milestone payments sit in XRPL escrow between the sponsor and the CRO. CROX never holds the funds. The sandbox can lock a scaled amount on XRPL testnet. Mainnet is refused.

Early testers

Join the early tester list.

A short note is enough. The sandbox is the product you can open today.

Tell us who you are.

This opens your email app and addresses hello@crox.co. The site stores nothing and has no mailing backend.

Or write directly: hello@crox.co