diff --git a/app/igneum-app/src/jobbuild.rs b/app/igneum-app/src/jobbuild.rs
index 204dadd4a..12d0795d9 100644
--- a/app/igneum-app/src/jobbuild.rs
+++ b/app/igneum-app/src/jobbuild.rs
@@ -135,6 +135,9 @@ pub struct Manifest {
     pub node_commit: String,
     /// the 40-hex commit (manifest node.commit_full, packer of 6 October 2026); empty in older manifests
     pub node_commit_full: String,
+    /// the commit's author time (manifest node.commit_time, unix seconds): SOURCE_DATE_EPOCH of every build stage, so mimalloc's
+    /// __DATE__/__TIME__ and anything else that reads the clock give one answer per commit (6 October 2026, the 0.3.14 repro)
+    pub node_commit_time: u64,
     pub node_dirty: bool,
     pub app_version: String,
     pub builds: Vec<Unit>,
@@ -161,7 +164,7 @@ pub fn parse_manifest(text: &str) -> Result<Manifest, String> {
     let s = |k: &str| v.get(k).and_then(|x| x.as_str()).unwrap_or("").trim().to_string();
     let node = v.get("node").cloned().unwrap_or(Value::Null);
     let ns = |k: &str| node.get(k).and_then(|x| x.as_str()).unwrap_or("").trim().to_string();
-    let mut m = Manifest { created_at: s("created_at"), node_branch: ns("branch"), node_commit: ns("commit"), node_commit_full: ns("commit_full"), node_dirty: node.get("dirty").and_then(|x| x.as_bool()).unwrap_or(false), app_version: s("app_version"), ..Default::default() };
+    let mut m = Manifest { created_at: s("created_at"), node_branch: ns("branch"), node_commit: ns("commit"), node_commit_full: ns("commit_full"), node_commit_time: node.get("commit_time").and_then(|x| x.as_u64()).unwrap_or(0), node_dirty: node.get("dirty").and_then(|x| x.as_bool()).unwrap_or(false), app_version: s("app_version"), ..Default::default() };
     let builds = v.get("builds").and_then(|b| b.as_array()).ok_or("manifest.json has no \"builds\" list")?;
     for (i, b) in builds.iter().enumerate() {
         let dir = b.get("dir").and_then(|x| x.as_str()).unwrap_or("").trim().to_string();
@@ -329,6 +332,11 @@ pub fn build_script(p: &BuildParams, job_id: &str, m: &Manifest, target: &str) -
         s.push_str(&windows_env());
     }
     s.push_str(&format!("echo \"STAGE {target} start $(now)\"\n"));
+    if m.node_commit_time > 0 {
+        // reproducible builds: the commit's author time and UTC for every compiler of this stage; the target dir is the one
+        // persistent $CARGO_TARGET_DIR (never a per-run name: prost's generated code embeds OUT_DIR)
+        s.push_str(&format!("export SOURCE_DATE_EPOCH={} TZ=UTC; echo \"SOURCE_DATE_EPOCH=$SOURCE_DATE_EPOCH TZ=UTC\"\n", m.node_commit_time));
+    }
     s.push_str(&format!("mkdir -p \"$OUT/{target}\"\n"));
     s.push_str("rc_all=0\n");
     // the node's full commit from the manifest (each stage is its own script; the extract stage read it too)
@@ -498,7 +506,7 @@ mod tests {
     use super::*;
     use serde_json::json;
 
-    const MANIFEST: &str = r#"{"created_at":"2026-10-04T20:00:00Z","node":{"branch":"devnet-v4","commit":"3bfe346f","dirty":false,"source":"vendor/igneum-node-v4"},"repo":{"commit":"0f44edd","branch":"build-job","dirty":true},"app_version":"0.3.4",
+    const MANIFEST: &str = r#"{"created_at":"2026-10-04T20:00:00Z","node":{"branch":"devnet-v4","commit":"3bfe346f","commit_time":1791300000,"dirty":false,"source":"vendor/igneum-node-v4"},"repo":{"commit":"0f44edd","branch":"build-job","dirty":true},"app_version":"0.3.4",
       "builds":[{"dir":"node","packages":["kaspad","igneum-miner"],"features":["kaspad/igneum-pow"],"bins":["igneumd","igneum-miner"],"targets":["linux","windows"]},
                 {"dir":"app/igneum-app","packages":["igneum-app"],"bins":["igneum-app"],"optional_on":["linux"]}],
       "tests":[{"dir":"app/igneum-app","packages":["igneum-app"]},{"dir":"node","packages":["igneum-miner"]},{"dir":"node","packages":[]}]}"#;
@@ -577,6 +585,8 @@ mod tests {
         let lin = build_script(&p, id, &m, "linux");
         assert!(lin.contains("cargo build --release $JOBS -p kaspad -p igneum-miner --features kaspad/igneum-pow 2>&1"));
         assert!(lin.contains("cd \"$SRC/app/igneum-app\""));
+        // reproducible builds (6 October 2026): the commit's author time and UTC exported before any cargo build of the stage
+        assert!(lin.contains("export SOURCE_DATE_EPOCH=1791300000 TZ=UTC") && lin.find("SOURCE_DATE_EPOCH=1791300000").unwrap() < lin.find("cargo build").unwrap(), "{lin}");
         assert!(lin.contains("optional on linux: not fatal"));
         assert!(!lin.contains("--target x86_64-pc-windows-gnu"));
         // the windows stage ships the runtime DLLs of its own toolchain next to the exes; the linux stage does not
diff --git a/docs/analysis/51-percent.md b/docs/analysis/51-percent.md
new file mode 100644
index 000000000..e26dc4bcf
--- /dev/null
+++ b/docs/analysis/51-percent.md
@@ -0,0 +1,84 @@
+# What a 51 percent attacker can and cannot do on Igneum
+
+6 October 2026. For the litepaper and the ledger. Written for a reader who maintains Monero or Kaspa and does not take a finality claim on trust. Every number names its model or its measurement; "approximate" marks the rest. Models and runs: `sim/horizon/consensus-security/` (`ghostdag_sim.py`, `finality_horizon.py`, `cost_model.py`, `signalling.py`), the finality simulator `sim/finality_v2.py` with `sim/results_v2.md`, the specification `docs/spec/02-consensus.md` and `03-finality.md`. The long form is `docs/analysis/horizon/consensus-security.md`.
+
+Price basis: USD 11.7 per GH/s-hour, measured on rented pods on 6 October 2026 (`docs/bench-log.md`, "Rental cost of hash": 1,748 MH/s for USD 20.44 an hour; the market supplied no more than about 2 GH/s that evening, so every figure above that is a list-price extrapolation). An attacker holding share A of the total hash rents A/(1 - A) times the honest network N.
+
+## 1. What 51 percent buys, and at what price
+
+Igneum orders blocks by GHOSTDAG (a rusty-kaspa fork, k = 18 at 1 block/s) and locks a checkpoint every 30 blue blocks when two thirds of the trailing 30 days of blue blocks, per vote key, have signed it (spec 03, Q3). The lock lands 63 to 93 s after the checkpoint block (determined 60 blue score later, certified about 3 s after; `sim/results_v2.md` A).
+
+A majority of hash buys the ordering race up to that lock. The DAG simulator (`ghostdag_sim.py`, GHOSTDAG as `vendor/igneum-node/consensus/src/processes/ghostdag/protocol.rs` runs it, 20 seeds per cell, one-way delay 0.67 s = the cloud devnet's p99 propagation) gives, at 1 block/s:
+
+| attacker share | hold 30 s | hold 60 s | hold 90 s | hold 120 s |
+|---|---|---|---|---|
+| 20% | wins 10%, reorg median 0 / max 18 | 0%, 0 / 1 | 0%, 0 / 1 | 0%, 0 / 1 |
+| 34% | 40%, 0 / 18 | 40%, 0 / 36 | 5%, 0 / 39 | 10%, 0 / 52 |
+| 51% | 85%, 10 / 15 | 85%, 20 / 28 | 80%, 32 / 44 | 80%, 42 / 53 |
+| 67% | 100%, 8 / 13 | 100%, 16 / 23 | 100%, 26 / 31 | 100%, 34 / 41 |
+
+"wins" = the private chain became the honest selected chain on release; "reorg" = chain blocks removed. The arithmetic: a private chain merges honest blocks as blue until its first block has k in its anticone, then every later honest block is red in it; it wins when its R blocks plus k exceed the honest N_h, always at or above 50 percent, below it only for holds under k A / ((1 - 2A) lambda) seconds (6 s at 20%, 56 s at 34%). Withholding longer than the lock latency is useless: the first checkpoint inside the hold locks at most 93 s after it is mined, and a chain missing a certified checkpoint is not a fork-choice candidate (spec 03 F1). Bound: the lock latency, 90 to 120 s. Price of the 90-s race at 51 percent: USD 0.30 at 1 GH/s, USD 304 at 1 TH/s (`cost_model.py`). What it earns: a deposit credited before its lock, which the four-state rule forbids (ledger P17: a wallet shows included, executed, proven, finalised and credits on the last).
+
+Repeated 60-s withholding at 51 percent turns 26 to 28 percent of honest blocks red; a red block's subsidy goes to its merger (spec 02 2.5), so the majority takes about a quarter of honest income and lifts its weight share to about 56 percent (approximate), reorganising the chain every minute in public. It does not reach two thirds.
+
+The proving pool is the one place 51 percent earns more than it spends today. Consensus checks a proof record's signature and its statement against the node's own execution, and not the proof (spec 07 7.7 item 4, 7.8 item 8; ledger P21). A producer who writes the correct statement, random proof bytes and its own payout address into its own block is paid the shard; at 51 percent of blocks that is at least 51 percent of the 20 percent pool (11,636 IGN an hour at full subsidy) and, since its fake rides its next block while an honest proof takes 9 to 11 s on a 5090, most of the shards outside the 10-s exclusive window. Proof verification in consensus closes it; it is the first item in section 5.
+
+## 2. What it cannot do, and why
+
+| it cannot | because | measured |
+|---|---|---|
+| Reverse a certified checkpoint | a candidate tip must pass through every certified checkpoint (F1); two certificates at one index need two thirds of total weight each, 4/3 in all, so a conflicting pair needs an equivocator holding a third of 30 days of blocks (spec 03 3.11.2) | 0 conflicting locks under 1/3 in every partition and eclipse seed; conflicts from 34% (`sim/results_v2.md` H, I, L3, M5; `finality_horizon.py` P and E) |
+| Reach two thirds of weight with 51 percent of blocks | weight is blue blocks over a flat 30-day window: share = (t/30) A, ceiling A; 51% holds 51% on day 30 and never more while honest miners mine | the formula holds to 0.1 day (`results_v2.md` B, `finality_horizon.py` R); red-flooding lifts it to about 56% (approximate) |
+| Buy weight faster than mining it | a pulsed rental buys 0.26 blocks per hash under the controller (`sim/difficulty/attacks` scenario 2); a bought key is worth its blocks and decays as the window slides, share = A (1 - t/30) + r t/30 (3.11.5) | `results_v2.md` K, `finality_horizon.py` K: keys worth 51% hold the veto to day 24 and are worth 30% on day 30 |
+| Forge state | every full node executes natively and ignores a record whose statement differs from its own execution (the veto, spec 07 7.2 item 5); a soundness bug is a light-client problem (P7) | the exec-attacks suite, 96 of 97 checks on the shipped node (`docs/review/redteam-2026-10-04.md` row 28) |
+| Change a rule | code activates when 95% of a day's blue blocks signal it, with a floor height as backstop (P2, `docs/plans/counter-asic-3-node.md` section 6); the signal has 0.07 points of noise over 86,400 blocks, so 94.9% never flips and 95.1% flips on day one | `signalling.py`; the fast-time gate's three cases and its failed case |
+| Grind the hourly program | the epoch seed is a 10-minute class-group VDF of a checkpoint block fixed 20 minutes before the epoch; withholding a block to pick a program has expected gain 0 against a 300x evaluator margin (spec 04 4.1, 4.6) | `proto-vdf` Monte Carlo over 2,000,000 epochs |
+| Stretch the clocks | a header is at most 10 s ahead of the clock and 10 s behind its parent; a sanitised clock pays a forgery back | a 50% forger drifts the rate +0.4 to +1.1% (M23 fixed, `sim/difficulty/attacks/README.md`) |
+
+## 3. The table: capability against share, time, cost and earnings
+
+| capability | share | time | rent at 1 GH/s | at 100 GH/s | at 1 TH/s | subsidy it earns meanwhile (IGN) | net |
+|---|---|---|---|---|---|---|---|
+| Reorder the last k blocks | any | 20 s | USD 0 | 2 | 24 | 0 | a loss |
+| Win the lock-latency race (90 s) | 45 to 51% | 90 s | USD 0.3 | 30 | 304 | 1k | nothing credited under a lock |
+| Reach the veto (1/3 of weight): pause finality at will | 51% | 20 days | USD 6k | 585k | 5.8M | 22M | the attacker earns 51% of it back |
+| the same | 90% | 11.1 days | USD 28k | 2.8M | 28M | 22M | |
+| Lock alone (2/3 of weight): certify any chain forward | 67% | 30 days | USD 17k | 1.7M | 17M | 44M | 33% of the period's subsidy at equilibrium |
+| the same | 90% | 22.2 days | USD 56k | 5.6M | 56M | 44M | |
+| Hold a pause once the veto is held | 1/3 | for ever | 0 marginal | 0 | 0 | keeps earning | free |
+| 12-h double spend during a pause or the first 30 days | 51% | 12 h | USD 146 | 15k | 146k | 559k | the deposit |
+| Orphan an hour of honest blocks beyond merge depth (pause only) | 51% | 1.5 h | USD 18 | 2k | 18k | 70k | the honest hour's subsidy, lost to all |
+| Private DAG heavier over the window (cold-start node, no certificate) | 51% | 30 days | USD 9k | 877k | 8.8M | 34M | one fresh node misled |
+| Capture the proving pool with fake records | any producer | continuous | 0 extra | 0 | 0 | up to 20% of emission | the one positive line |
+| Block a rule change | 6% | per day until the floor | USD 18 | 1.8k | 18k | 6% of subsidy | about zero |
+| Pause finality by taking the two hands down (tonight's topology) | 0 hash | | a DoS | | | 0 | free |
+
+At the rental-market equilibrium, where hash joins until rent equals subsidy (39, 156 and 780 GH/s at IGN prices of USD 0.005, 0.02 and 0.10, the three inputs of `docs/analysis/security-budget.md`, not predictions), the veto nets about 48 percent of 20 days of the chain's subsidy and locking alone about 33 percent of 30 days (`cost_model.py` section 3).
+
+## 4. The residual risks, plainly
+
+1. **The pause.** Finality pauses whenever less than two thirds of 30-day weight is connected and signing, and the chain runs on proof of work with a 12-hour depth meanwhile (spec 03 3.7 item 2, 3.9). A third of weight holds the pause for nothing once it has it (`finality_horizon.py` S: 0 locks for the whole silence at 34 to 90 percent, 0 conflicts). During a pause a 51 percent miner is a 51 percent miner on any proof-of-work chain, with the 12-hour depth and USD 146 at 1 GH/s to buy it. What we are building against it is in section 5.
+
+   **The departure case** (not an attack, the same pause): tonight on the live devnet 20 keys holding 42.7 percent of the frozen weight table stopped mining within three minutes (a rehearsal job), the signing weight fell to 53.1 percent at checkpoint 6843 and finality paused at 18:39:40Z; rule v2 would have locked again after 35 minutes as the departed blocks aged out of the sliding table, and the frozen table (Q5, the live rule) holds the pause for one window, 2 hours there and 30 days on mainnet; locks had formed with the hand nodes down, so it was weight, not topology (`docs/analysis/horizon/finality-and-weight.md` 3.1 and 4.1; `finality_horizon.py` C: 51 percent leaving pauses 10.5 days under v2, 30.0 under v3). A sudden exit of a third or more of weight, by a price crash or a hosting failure, does the same. What an attacker can do during it is exactly the pause line: proof of work with a 12-hour depth, nothing against any certificate, no new lock to forge; what it cannot do is end the pause early or lock alone, since the departed weight is still in the denominator. The fix is a signed departure (LEAVE, section 5): a key that announces it is leaving is out of every denominator one hour later, which a partitioned key cannot fake.
+2. **The first 20 to 30 days.** No lock forms before the window holds 30 days of history (spec 03 3.8, `min_daa` = window): the first month is proof of work with the 12-hour depth, by design, and the renter's day counts start at genesis. On day 30 an attacker producing share s of blocks from day k holds s (31 - k)/30 of the window: 75 percent from day 2 locks alone on day 30 (ledger F1).
+3. **Sybil of keys buys nothing; buying keys buys their blocks.** Weight is blue blocks and every draw is by weight (W6; harness s2). A pool's key with its history can be sold or stolen and is worth exactly its 30 days of blocks, decaying linearly as the window slides (K); the sellers' price, not hash, is the limit, and a seller who keeps a copy strips the buyer by equivocating.
+4. **Two thirds of total under churn.** The denominator is every key's blocks in the window. If half the honest miners leave, a miner at 51 percent of the old hash holds 51/(51 + 24.5) = 67.5 percent of the window after 30 days and locks alone (spec 03 3.7 item 4: "same as Bitcoin, with a month's warning"). A departure that stops mining and signing at once pauses finality 30 (1 - 1/(3A)) days under rule v2 and until the frozen table expires, 30 days after the last lock, under rule v3 (`finality_horizon.py` C), because a view cannot tell a departure from a partition.
+5. **A partition longer than a window forks finality.** Each side fills its own table; under v3 neither side under two thirds locks for 30 days after the last common certificate, then both lock alone at once (`results_v2.md` M3) and an operator's trusted certificate resolves it (3.11.4). Under a third of weight, no equivocator shortens that.
+6. **The proving pool.** Section 1's fake-record capture, until proofs are verified in consensus.
+
+## 5. What we are building next
+
+| rank | defence | what it closes | cost | liveness cost |
+|---|---|---|---|---|
+| 1 | Proof verification in consensus: a record whose aggregated proof does not verify against the pinned key is invalid | the pool capture of section 1 | 8 to 12 hours; per-record verify time to measure | none |
+| 2 | Weight-gated deep fork choice: a tip forked more than D (about 10 min) back is a candidate only if the keys that built it hold a third of the weight table at the fork | the pause-time and first-month deep reorg: rented hash has no weight for 10 days, so a 12-h double spend needs the 20-day veto | 10 to 16 hours | none for certificates; a sub-third partition side cannot reorg the other past D, which is the intended outcome |
+| 3 | Vote-or-burn: a block whose key has participation under 0.5 in its own past burns 20 percent of its producer share | the free pause: silence then costs 7,757 IGN an hour at 34 percent | 6 to 8 hours | none; partition-safe by construction |
+| 4 | Peer floor and mesh: every box dials three others beside the hands; the node alarms under three peers or two checkpoints without a vote; no `unwrap` on any peer-driven sync path (a pruned node was crashed by one request tonight) | a star fleet pausing on one host; one request crashing any pruned node | 5 to 7 hours + 4 | none |
+| 5 | The vote signs the execution root too | snapshot poisoning, and "ordered and executed" in one certificate | 8 to 12 hours | lock latency plus executor lag |
+| 6 | Signalling over 7 consecutive daily windows, the floor a week past the publish | a one-day renter forcing a flip | 3 hours | a week's latency on class changes |
+| 7 | LEAVE, the signed departure (lane 3's rank 1): a `leave` item carried in blocks, the key out of every denominator one hour after inclusion, sent by the app and the fleet library on a clean stop; F5's trusted certificate implemented | tonight's 30-day-scale pause after a planned departure; sim: first lock 1 h after a 34 to 50 percent departure, 0 conflicts in every partition row (`finality-and-weight.md` 6) | 6 + 4 hours | none |
+| 8 | A client-shipped certified checkpoint | the cold-start private DAG | 3 hours | none |
+
+Not adopted: prover attestations as a finality leg (the provers are the miners, coverage is a few percent, every lock would wait on a proof); vesting weight (a bought key transfers vested weight); any automatic rule that keeps locks going after an abrupt departure (a view cannot tell it from a partition: `results_v2.md` L4, M3).
+
+The honest sentence for the litepaper: a hash majority on Igneum can reorder about two minutes, can buy a veto over finality in twenty public days and then pause it for free, can double-spend at a 12-hour depth only while finality is paused or in the first month, and today can take the proving pool without proving; it cannot reverse a certificate, cannot reach two thirds of weight while honest miners mine, cannot forge state, and cannot change a rule without 95 percent of a day's blocks.
diff --git a/docs/analysis/chip-model-v3.md b/docs/analysis/chip-model-v3.md
index 9eb536b17..b35e6bc10 100644
--- a/docs/analysis/chip-model-v3.md
+++ b/docs/analysis/chip-model-v3.md
@@ -181,7 +181,7 @@ speed, so HBM3E is HBM3 here, and 48 Gbps GDDR7 is 28 Gbps GDDR7.
 |---|---|---|---|
 | Channels, banks | 64 channels, 1,024 banks | 16 channels (32 pseudo-channels), up to 1,024 banks | 128 channels, 8,192 banks |
 | Bank-bound ceiling, banks / 45 ns (tRC, the HBM2 and GDDR5-class figure, approximate for both) | 22.8 G reads/s | 22.8 | 182 |
-| Activate-bound ceiling (GDDR7: 4 per 12 ns per channel, approximate; HBM: 8 per 12 ns per channel, O'Connor Table 2) | 21.3 G reads/s | 10.7 | 85.3 |
+| Activate-bound ceiling (GDDR7: 4 per 12 ns per channel, approximate; HBM: 8 per 12 ns per channel, O'Connor Table 2). UNMEASURED (6 October 2026, the Horizon lane analysis `docs/analysis/horizon/algorithm.md` section 5.1): the JEDEC HBM2 table gives tFAW 28 ns, 4 activates per channel per window (ICCAD 2021 Table I), which is 2.3 G reads/s for a 16-channel stack, and the one measured random-read rate of an HBM2 part (Shuhai, Alveo U280, FCCM 2020 Fig 7) is 2.4 G, equal to that tFAW ceiling; the 12 ns figure holds only if a bank-interleaved mapping lifts tFAW, which the die enforces per channel. The HBM columns below carry the 10.7 G row as the model's ceiling, unmeasured; an AWS F2 hour (Virtex UltraScale+ VU47P, the same HBM2 subsystem) is the measurement | 21.3 G reads/s | 10.7 (unmeasured; 2.3 at JEDEC tFAW) | 85.3 (unmeasured) |
 | The ceiling carried below | 21.3 G reads/s (the 5090 measures 17.5, 82 percent of it: the card is already near its memory's activate limit) | 10.7 | 85.3 |
 | Energy per random 32-byte read (approximate) | 2.0 nJ: 909 pJ activation (one atom per row opened, the HBM2 1 KB row taken for GDDR7's row) plus 4.5 pJ per bit x 256 bits of movement and I/O = 1,150 pJ | 1.2 nJ: the HBM2 sum (909 + (1.51 + 1.17 + 0.80) x 256 = 1,800 pJ) scaled by Samsung's 4.12 / 6.25 | 1.2 nJ |
 | Static power (refresh, standby, PLLs; approximate, from memory) | 20 W (about 1.25 W per device) | 4 W | 32 W |
@@ -191,6 +191,8 @@ speed, so HBM3E is HBM3 here, and 48 Gbps GDDR7 is 28 Gbps GDDR7.
 | Reads per second per watt at the ceiling (memory, static and controller) | 0.27 G | 0.40 G | 0.49 G |
 | The 5090 for comparison | 17.5 G reads/s at 326 W = 0.054 G per W; 7,262 reads in flight (17.5 G x 415 ns), 22 per watt | | |
 
+The FPGA line, public (6 October 2026, the Horizon lane analysis section 5.1): an HBM2 FPGA soft overlay (Alveo U280 or U55C class) carries only the measured row, 2.4 G reads/s per card (Shuhai, FCCM 2020 Fig 7, equal to the JEDEC tFAW ceiling of 2.3 G at 28 ns), which is 0.30x to 0.39x of the RTX 5090 per watt (U55C at 115 to 150 W; 0.20x on the U280). The 11.4 G bank-bound row and the 12.2 G ceiling quoted elsewhere rest on a 12 ns tFAW the JEDEC HBM2 table does not give and are unmeasured until an AWS F2 hour (f2.6xlarge, VU47P, 16 GB HBM2, USD 1.98 an hour on demand) runs the chase kernel at 1 GiB across all 32 pseudo-channels; the lane's pass line is 15 to 25 M reads/s/W, its alarm line 27 (0.5x of the 5090), and over 54 (1.0x) the FPGA lane becomes a Counter ASIC 4.0 item. Consequence per tier: none today (no FPGA mines); if the measured row holds, a soft-overlay FPGA at USD 4,000 to 5,000 a card (approximate) mines at an RX 9070 XT's rate per watt for 7x the price, so no home or rig tier is displaced by it. Ledger M33.
+
 The GDDR7 system's own power at the 5090's 17.5 G reads/s is 17.5 x 2.0 nJ = 35 W plus 20 W static, 55 W: about 17
 percent of the card's 326 W (approximate). The other 83 percent is the GPU: 21,760 ALUs spinning at 92.9 percent
 utilisation on 512 program ops per hash, their register files, schedulers, L1 and L2, and the clock trees, against a
diff --git a/docs/analysis/horizon-2026-10.md b/docs/analysis/horizon-2026-10.md
new file mode 100644
index 000000000..7c7ff3cad
--- /dev/null
+++ b/docs/analysis/horizon-2026-10.md
@@ -0,0 +1,37 @@
+# Horizon, October 2026: the ranked research across every system
+
+Written 6 to 7 October 2026 by the Horizon coordinator (branch `horizon`, worktree `igneum-wt-horizon`) on the project lead's ask of 6 October 2026, 20:4x UK: "deep backward and forward predictive research and modelling for our algo and all of our systems: is there room for improvement, room for more coin utility, algo improvements, security improvements, anything we can do to make a 51% attack impossible, basically creating a level of polish that has not been seen before." Later the same evening: "research anything else that we can research too, predictions, forward thinking, what we can actually do that has not been done or applied, think outside the box", "be revolutionary", and "if we create a new way of hashing or a new way of proof of work to revolutionise the space then that's absolutely fine, I want you to deploy everything to create something that has not ever been done before."
+
+The bar main set, and the bar this document holds every claim to: "impossible" is not available to any proof-of-work chain. The bar is that a majority of hash buys nothing: it cannot reverse what finality locked, cannot forge a proof the nodes re-execute, cannot change a rule without 95 percent signalling, and loses more than it earns. Every claim here is a number with a model or a simulation behind it, priced in rented hash at the measured 6 October rate (`docs/bench-log.md`, "Rental cost of hash, 6 October 2026": USD 0.0117 per MH/s-hour, the live devnet at 1.16 GH/s), with its consequence per tier and what to build.
+
+## The lanes
+
+| Lane | File | State |
+|---|---|---|
+| 1 consensus-security | `docs/analysis/horizon/consensus-security.md`, and the paper `docs/analysis/51-percent.md` | running |
+| 2 algorithm | `docs/analysis/horizon/algorithm.md` | running |
+| 3 finality-and-weight | `docs/analysis/horizon/finality-and-weight.md` | running |
+| 4 economy-and-utility | `docs/analysis/horizon/economy-and-utility.md` | running |
+| 5 network | `docs/analysis/horizon/network.md` | queued (waits for the 10 bps rows of `block-rate-devnet2.md`) |
+| 6 polish | `docs/analysis/horizon/polish.md` | queued |
+| 7 frontier | `docs/analysis/horizon/frontier.md`, model `sim/horizon/frontier/frontier_model.py` | landed 6 Oct 2026, 21:1x UK |
+| 8 new-proof-of-work | `docs/analysis/horizon/new-pow.md`, prototypes in `proto-newpow/` | running (designs tonight, measured rows tomorrow afternoon UK) |
+
+## 1. One page for the project lead
+
+(Written last, from the lanes.)
+
+## 2. The ranked list: top 25 across every lane
+
+| Rank | Item | Lane | Evidence | Model | Hours | Consequence per tier | What to build | Gate |
+|---|---|---|---|---|---|---|---|---|
+
+## 3. What a 51 percent attacker can and cannot do
+
+(Summary of `docs/analysis/51-percent.md`.)
+
+## 4. Per lane: the three biggest findings
+
+## 5. What was not run, and why
+
+## 6. Rules and corrections for main
diff --git a/docs/analysis/horizon/algorithm.md b/docs/analysis/horizon/algorithm.md
new file mode 100644
index 000000000..5b2f879a4
--- /dev/null
+++ b/docs/analysis/horizon/algorithm.md
@@ -0,0 +1,350 @@
+# Horizon lane 2: the shipped hash and its class system, refined
+
+6 October 2026, evening UK. Lane 2 (algorithm) of the Horizon programme. Worktree `/Users/joshm/Projects/igneum-wt-horizon`, branch `horizon` on master 3f4f719. Scope: the shipped lottery hash and its classes (v2, v3 live, the v4 candidate `mx8+sh256x27`, the reserve R0 to R8, the era draw, the dataset schedule). No new puzzle is proposed here (lane 8 owns that). Every chip figure is arithmetic on cited figures and is approximate; every GPU figure names its bench-log entry or analysis file; the one new measurement is the verifier proxy on igneum-build-1 (section 2).
+
+What was read, in full unless marked: `docs/spec/01-lottery-hash.md`, `docs/spec/04-seeds-and-vdf.md`, `docs/analysis/chip-model-v3.md`, `docs/analysis/asic-resistance-history.md`, `docs/analysis/latency-shadow-2026-10-06.md`, `docs/analysis/m16-recompute-attacker-2026-10-05.md`, `docs/analysis/sram-mirror.md`, `docs/analysis/int8-matrix-family.md`, `docs/analysis/weak-program-census-2026-10-03.md` (section 1), `docs/analysis/scratch-soundness.md` (section 0), `docs/analysis/card-lifetime-2026-10-05.md`, `docs/plans/counter-asic-3-status.md`, `docs/plans/counter-asic-3-reserve.md`, `docs/plans/counter-asic-3-derivation.md`, `docs/plans/counter-asic-2.md`, `docs/plans/epoch-length.md` (sections 11 and 12), `docs/plans/era-layout.md`, `docs/plans/mixer-x4.md` (sections 6.2 to 6.5), `docs/plans/read-width.md`, `docs/fud-ledger.md` (M1 to M31 headings; M9, M16, M17, M18 in full; M28 heading), `docs/bench-log.md` (entries "Counter ASIC 2.0, the numbers", "the 9070 XT on the eGPU", the 6 October item 8, item 6 and gate-run entries, "Rental cost of hash, 6 October 2026"), `igneum-pow/src/generator.rs` (the class constants, `ShadowClass`, `LoadClass::{V2, MX4, MX8, DR736}`), `igneum-pow/src/memhard.rs` (`Shape`, the growth rule, `round_key`, `derive_items_mask`), `igneum-pow/src/main.rs` (`bench`), `docs/analysis/prover-tiers-real-cards.md` (the 11 rented cards), and `/Users/joshm/Projects/igneum-wt-gpu-fleet/docs/analysis/block-rate-devnet2.md` (RUN_A and RUN_B are still placeholders at 21:30 UK; nothing from it is used).
+
+## 1. The six questions and the one-line answers
+
+| # | Question | Answer in one line |
+|---|---|---|
+| 1 | Chip model on the 6 October numbers; the FPGA lane | The stored-dataset chip (f = 1, GDDR7) reads 5.7x per joule against the 5090 bench row and 1.7x against the M5 Max at class v3; at class v4 and k = 1 those fall to 2.1x and 0.9x. Per dollar it is 56x under rented hash and 5.4x under an owned 5090 per MH/s-hour. The FPGA soft overlay tightens to 0.30x to 0.47x per watt: the measured 2.4 G reads/s equals the JEDEC tFAW ceiling of a 2-stack HBM2 part, so the 1.9x bank-bound row is unreachable on any FPGA that exists. AWS F2 at USD 1.98 an hour carries the exact HBM2 subsystem and can measure it |
+| 2 | Reserve R0 to R8 | Every reserve family together costs a chip about 8 to 14 adders per lane, about USD 4 of N5 silicon on a 14,000-lane array; none moves the per-joule edge by over 10 percent. The reserve's value is obsolescence of a datapath taped out against class v3, and since the order is public that value is zero against a chip that ships with every block. Recommended order: R0 derive at dr368 (dr736 fails the gate proxy), R1 shfla, R2 perm, R3 popc and clz, R4 bfe, R5 shifts, R6 sel, R7 andn, R8 mm8 at era 8 by the rule, no exception |
+| 3 | A class v5 from the shadow | Option (i) is void: the v4 shadow already consumes loaded data (its registers hold the dataset words of the iteration), so a chip precomputes nothing today. Option (ii), a shuffle-heavy shadow mix, raises the attacker's k floor from about 0.32 to 0.46 (approx), not to 1. Option (iii): the one N every owned card holds within 5 percent is 130,000 counted ops (the M5 Max's point); it buys 2.1x to 1.7x against the 5090 at k = 1 for 4.8 percent of the Mac's rate; the verifier at 130,000 is 4.9 ms on the box proxy and 8.5 ms on the half-core proxy, inside the gate |
+| 4 | The era draw's randomness | Forging the certified checkpoint the era VDF reads costs 20 days of 100 percent hash: USD 5,600 at 1 GH/s, USD 5.6M at 1 TH/s rented, and buys one draw of a space whose spread is 0.8 to 3.2 percent of hash rate per card and 0 percent for a chip. Re-rolling by withholding needs a 1,800x faster VDF. The draw buys nothing against a chip; the public reserve order means a chip is taped out with every block. What would cost a chip is work (N) and the honest card's own watts, not unpredictability |
+| 5 | The 2019-class verifier | Measured proxy tonight: a Zen 4 core at 3.8 GHz with server DRAM reads 2.0x to 2.2x the M5 Max core (v4 4.90 ms steady, 5.06 cold; dr736 9.76 steady, 10.51 cold: FAIL); with both SMT siblings busy (the pessimistic bracket) v4 8.23 ms, dr368 8.16, dr736 15.5. The 2.5x rule holds within 15 percent. The gate protects a node at 1 to 10 percent of one core per block rate, an 18-minute IBD, and a header-flood cost of 100 bogus headers per second per core |
+| 6 | Dataset growth to 2030 | Hold option (b): 2 GiB at genesis, 4 GiB at year 4, 8 GiB at year 12. The 8 GB tier (26.7 percent of Steam today, about 0 by 2030 on the trend) mines to year 12 anyway; the 12 GB tier loses mine-and-prove compressed at the year-4 step and the 8 GB tier loses core-only at genesis, and both are the prover's footprint, not the dataset's. Growth is for the SRAM reticle (1.6 GiB per reticle at N5) and GPU L2, not for the HBM chip |
+
+## 2. Method
+
+| Item | What was done | Where |
+|---|---|---|
+| The model | One Python script, every table in this file; inputs listed with source and label | `sim/horizon/algorithm/model.py`, `README.md` beside it |
+| Verifier proxy | `igneum-pow` built on igneum-build-1 through `tools/build-remote.sh` from the crate directory (`IGNEUM_AGENT=horizon`, build slot build-0, 10 s wall, sccache miss 1, artefact 991,352 bytes, sha256 6d2867...); `igneum-pow bench --seed igneum-genesis --day 2026-10-03 --class <c> --warps 50` for v2, mx8, mx8+sh256x27, dr368, dr736 under `nice -n 19 taskset -c 40` (one core), then the same on cores 40 and 88 at once (the two SMT siblings of one physical core: `thread_siblings_list` 40,88); load average 1.3 before, 2.3 after; `scaling_cur_freq` read 3,799,885 kHz during a run (the governor is schedutil with `scaling_max_freq` 2,750,000 but the core boosted to 3.8 GHz; `cpupower` needs root, so no fixed low clock was possible); the cache fill 361 ms on that core | section 5.5 |
+| Not run | A Mac packbench ladder for v5 (the data-dependent and shuffle-heavy shadow variants do not exist as kernel text, so nothing could be measured; the plan is in 5.3); any PC job; any FPGA | section 7 |
+| External figures | Steam Hardware Survey September 2026 (store.steampowered.com/hwsurvey, read 6 October 2026); ICCAD 2021 "Demystifying the Characteristics of High Bandwidth Memory for Real-Time Systems" Table I (JEDEC HBM2 timings in cycles at 2,133 MT/s, text extracted with pdftotext); Intel HBM2 IP user guide (16 AXI pseudo-channel ports per stack); AWS F2 pricing (f2.6xlarge USD 1.98 an hour on-demand, USD 0.66 spot, one VU47P with 16 GB HBM2) | section 5.1 |
+
+## 3. Evidence
+
+### 3.1 Honest cards, measured (class v3 unless said)
+
+| Card (tier) | MH/s | W | uJ per hash | Source |
+|---|---|---|---|---|
+| RTX 5090, PC 2 bench, 431 W cap, the control | 132.2 | 350 | 2.65 | `latency-shadow-2026-10-06.md` s5; bench-log item 8 |
+| RTX 5090, PC 1 app, Ember run 5 | 127.4 | 310 | 2.43 | `counter-asic-3-status.md` s7 item 1 |
+| RTX 5090, app 5 October | 124 | 290 | 2.34 | `miner-eff` record, cited in latency-shadow s3 |
+| RTX 5090, rented Vast pod, untuned | 98.5 | 258 | 2.62 | `prover-tiers-real-cards.md` |
+| RTX 4090, rented | 52.3 | 183 | 3.50 | same |
+| RTX 3090, rented | 37.8 | 229 | 6.05 | same |
+| RTX A5000, rented | 47.7 | 223 | 4.67 | same |
+| RTX 4070, PC 1, 1,860 MHz lock, 160 W cap | 30.95 | 79.5 | 2.57 | status item 8, 4070 rows |
+| RTX 4070, rented | 25.0 | 91 | 3.65 | prover-tiers |
+| RTX 5070, rented | 41.9 | 137 | 3.27 | prover-tiers |
+| RTX 3060, rented | 23.8 | 104 | 4.36 | prover-tiers |
+| RTX 3080, rented | 40.8 | 205 | 5.02 | prover-tiers |
+| RTX 4060 Ti 16 GB, rented | 17.6 | 72 | 4.11 | prover-tiers |
+| RTX 4060 Ti 8 GB, rented | 19.1 | 73 | 3.81 | prover-tiers |
+| RTX 4060, rented | 17.1 | no reading (0.0 W logged) | n/a | prover-tiers |
+| RX 9070 XT, PC 1 | 18.9 | 199 to 203 | 10.6 | bench-log 9070 XT telemetry; status 3a |
+| Apple M5 Max, GPU + DRAM channels | 27.08 | 21.0 | 0.78 | latency-shadow s3 |
+| Apple M5 Max, package (approx) | 27.08 | 38 | 1.40 | `ember-tune.md`, approximate |
+
+At class v4 (`mx8+sh256x27`, measured): the 5090 131.95 MH/s at 431 W (3.27 uJ, the cap binds), the M5 Max 26.67 at 37.2 W (1.39), the 4070 31.08 at 109 W (3.51), the 9070 XT 19.29 at owed watts. Every other card's v4 energy below is modelled as the card's marginal ALU energy times N (NVIDIA 11 pJ per counted op measured on the 5090, Apple 6.9 measured on the M5 Max, AMD taken as NVIDIA's, approximate).
+
+### 3.2 Chips (model, approximate; `chip-model-v3.md` s5.4, latency-shadow s6)
+
+| Chip class | MH/s | W at v3 | uJ, v3 | uJ at v4, k = 0.3 / 0.5 / 1 / 1.5 | $ silicon + memory, v3 / v4 | $ per MH/s |
+|---|---|---|---|---|---|---|
+| f = 0 on-die recompute, 256 MiB SRAM, x8 | 41.7 | 53.7 | 1.29 | 1.62 / 1.84 / 2.39 / 2.94 | 700 / 740 | 16.8 |
+| f = 1 stored dataset, GDDR7, 16 devices | 166.4 | 77.6 | 0.466 | 0.80 / 1.02 / 1.57 / 2.12 | 470 / 510 | 2.8 |
+| f = 1, HBM3 one stack | 83.6 | 26.8 | 0.321 | 0.65 / 0.87 / 1.42 / 1.97 | 550 / 590 | 6.6 |
+| f = 1, HBM3 eight stacks | 666 | 174 | 0.262 | 0.59 / 0.81 / 1.36 / 1.91 | 2,650 / 2,690 | 4.0 |
+
+`k` is the chip core's energy per counted op over the 5090's measured 11 pJ. The f = 0 chip's measured stand-in (M16 round 2, the inline kernel inside the 5090's L2) ran 33.9 MH/s at 431 W: 0.256x per chip and 5x worse per joule than honest, so the f = 0 row above is the model's ceiling for that class, not a measurement.
+
+### 3.3 The verifier proxy, measured tonight (igneum-build-1, EPYC 9454P, one core at 3.8 GHz, nice 19)
+
+| Class | M5 Max core, quiet | 2.5x rule (approx) | Box one core, steady / cold | Box over Mac | Box half-core (SMT sibling loaded) | 10 ms gate |
+|---|---|---|---|---|---|---|
+| v2 | 0.60 | 1.5 | 1.13 / 1.30 | 1.88x | not run | pass |
+| mx8 (class v3) | 2.06 | 5.2 | 4.52 / 4.67 | 2.19x | 7.56 | pass |
+| mx8+sh256x27 (class v4) | 2.33 | 5.8 | 4.90 / 5.06 | 2.10x | 8.23 | pass |
+| dr368 | 2.69 | 6.7 | 4.72 / 5.32 | 1.75x | 8.16 | pass, thin on the half-core |
+| dr736 | 4.88 | 12.2 | 9.76 / 10.51 | 2.00x | 15.49 | FAIL (cold run over 10 ms on one core; 15.5 on the half-core) |
+
+Raw lines (the Mac figures are `counter-asic-3-derivation.md` 5.1 and the gate-run entry): box one core `CPU verify: 1.128 / 4.516 / 4.901 / 4.716 / 9.763 ms per 32-lane warp, avg of 50`; cold `warp base 0: 1.305 / 4.670 / 5.061 / 5.324 / 10.509 ms`; half-core `7.562 / 8.234 / 8.162 / 15.491` (cpu 40) and `7.556 / 8.227 / 8.168 / 15.479` (cpu 88); every lane-0 and lane-31 hash equal to the Mac's vectors (`42246ba99fc58e4f`, `19b56348bc85304d`, the dr736 `e23d389f3eea0c83`). Cache fill 360.5 to 364.7 ms on the box core against 175 to 181 on the M5 Max.
+
+### 3.4 Installed base (Steam Hardware Survey, September 2026, cited)
+
+| VRAM | Share | Trend (cited: 8 GB 35.03 percent in August 2025, 33.66 in September 2025; 12 GB 19.30 in August 2025) |
+|---|---|---|
+| 512 MB to 4 GB | 14.06% | falling |
+| 6 GB | 5.12% | falling |
+| 8 GB | 26.71% | about -7 points a year |
+| 10 to 11 GB | 2.74% | flat |
+| 12 GB | 13.06% | about -6 points a year |
+| 16 GB | 27.21% | rising; overtook 8 GB in August 2026 |
+| 20 to 24 GB | 7.93% | rising slowly |
+| 32 GB | 1.41% | rising slowly |
+| 64 GB | 0.50% | new row |
+
+### 3.5 Rental and ownership cost (bench-log "Rental cost of hash, 6 October 2026", measured)
+
+USD 0.0117 per MH/s-hour on RunPod community pods (1,748 MH/s for USD 20.44 an hour); the 8x 4090 rig USD 0.0129; a 5090 pod USD 0.41 to 0.74 an hour for 98 to 128 MH/s.
+
+## 4. Model
+
+| Formula | Inputs (label) |
+|---|---|
+| Energy per hash E = W / rate | measured watts and MH/s per card; chip W from `chip-model-v3.md` 5.4 (approx) |
+| Chip energy at class v4: E_v3 + N x 11 pJ x k | N = 100,000 counted ops (measured class v4), 11 pJ = the 5090's marginal per op (measured), k free |
+| Edge per joule = E_card / E_chip | both sides above |
+| Hourly cost per MH/s = price / (2 years x rate) + E x 3.6e9 x USD 0.10 per kWh | prices approximate (launch list from memory, labelled); chip $ from 5.4; electricity approx |
+| FPGA random-read ceiling = min(banks / tRC, channels x 4 / tFAW, channels / tRRD) | 2 stacks, 16 channels, 32 pseudo-channels, 16 half-banks each (approx); tRC 48 cycles, tFAW 30, tRRD 6 at 1,066 MHz (ICCAD 2021 Table I, JEDEC HBM2); latency 137.8 ns (Shuhai, measured) |
+| Reads in flight = rate x latency; per watt = rate / board W | U55C 115 to 150 W, U280 225 W (datasheets) |
+| Verifier add per warp = shadow instructions / 1,000 x slope | slope 3.2 us (M5 Max, measured), 7.0 us (box one core, this lane), 12.1 us (box half-core, this lane) |
+| Checkpoint forgery cost = network MH/s x 480 h x USD 0.0117 | 20 days of 100 percent hash to 2/3 weight (CLAUDE.md headline, from the finality sim) |
+| Tier fit at a dataset step: miner resident = dataset + 192 MiB; prover peak beside the miner from `prover-tiers-real-cards.md` scaled by the dataset's growth | usable VRAM 75 percent (mine-only), 98 percent headless (the prover rows) |
+
+## 5. Results
+
+### 5.1 Task 1: the chip model on the 6 October numbers, and the FPGA lane
+
+Per joule and per dollar against every honest card (the full table with every card is the `chip` section of the model; the rows that decide things):
+
+| Card (tier) | uJ v3 / v4 | f = 0 chip edge, v3 / v4 at k = 1 | f = 1 GDDR7 edge, v3 / v4 at k = 0.3 / 0.5 / 1 / 1.5 | f = 1 HBM3 one stack, v3 / v4 at k = 1 | $ per MH/s (card, approx) | USD per MH/s-hour owned |
+|---|---|---|---|---|---|---|
+| RTX 5090 bench (32 GB) | 2.65 / 3.27 | 2.1x / 1.4x | 5.7x / 4.1x / 3.2x / 2.1x / 1.5x | 8.3x / 2.3x | 15.1 | 0.00113 |
+| RTX 5090 app, Ember (32 GB) | 2.43 / 3.53* | 1.9x / 1.5x | 5.2x / 4.4x / 3.5x / 2.3x / 1.7x | 7.6x / 2.5x | 15.7 | 0.00114 |
+| RTX 4090 rented (24 GB) | 3.50 / 4.60* | 2.7x / 1.9x | 7.5x / 5.8x / 4.5x / 2.9x / 2.2x | 10.9x / 3.2x | 30.6 | 0.00210 |
+| RTX 3090 rented (24 GB) | 6.05 / 7.15* | 4.7x / 3.0x | 13.0x / 9.0x / 7.0x / 4.6x / 3.4x | 18.9x / 5.0x | 39.7 | 0.00287 |
+| RTX 4070 PC 1 tuned (12 GB) | 2.57 / 3.51 | 2.0x / 1.5x | 5.5x / 4.4x / 3.5x / 2.2x / 1.7x | 8.0x / 2.5x | 17.7 | 0.00127 |
+| RTX 5070 rented (12 GB) | 3.27 / 4.37* | 2.5x / 1.8x | 7.0x / 5.5x / 4.3x / 2.8x / 2.1x | 10.2x / 3.1x | 13.1 | 0.00108 |
+| RTX 3060 rented (12 GB) | 4.36 / 5.46* | 3.4x / 2.3x | 9.4x / 6.9x / 5.4x / 3.5x / 2.6x | 13.6x / 3.8x | 13.8 | 0.00123 |
+| RTX 4060 Ti 8 GB rented (8 GB) | 3.81 / 4.91* | 3.0x / 2.1x | 8.2x / 6.2x / 4.8x / 3.1x / 2.3x | 11.9x / 3.5x | 20.9 | 0.00157 |
+| RTX 4060 Ti 16 GB rented (16 GB) | 4.11 / 5.21* | 3.2x / 2.2x | 8.8x / 6.5x / 5.1x / 3.3x / 2.5x | 12.8x / 3.7x | 28.4 | 0.00203 |
+| RX 9070 XT (16 GB AMD) | 10.6 / 11.7* | 8.3x / 4.9x | 22.8x / 14.7x / 11.5x / 7.5x / 5.5x | 33.2x / 8.3x | 31.7 | 0.00287 |
+| Apple M5 Max, GPU + DRAM | 0.78 / 1.39 | 0.6x / 0.6x | 1.7x / 1.8x / 1.4x / 0.9x / 0.7x | 2.4x / 1.0x | 129 | 0.00745 |
+| Apple M5 Max, package (approx) | 1.40 / 2.02 | 1.1x / 0.9x | 3.0x / 2.5x / 2.0x / 1.3x / 1.0x | 4.4x / 1.4x | 129 | 0.00752 |
+
+`*` modelled v4 energy. The chip's hourly cost per MH/s (two-year amortisation plus electricity, approx): f = 1 GDDR7 USD 0.00021, HBM3 one stack 0.00041, eight stacks 0.00025, f = 0 recompute 0.00109; an owned 5090 0.00113; rented hash 0.0117. So the stored-dataset chip undercuts rented hash 56x and an owned 5090 5.4x per MH/s-hour, and the recompute chip matches the 5090 exactly, which is why nobody builds it.
+
+What changed against the 5 October record: the honest denominators moved (the 5090 is 2.34 to 2.65 uJ by where it is measured, not 2.40), the marginal ALU energy is measured at 11 pJ (not the model's 5.5), the M5 Max at 0.78 uJ is the honest best per joule by 3x, and the rented fleet shows the untuned mid-tier (3060, 3080, 3090, A5000, 4060 Ti) at 3.8 to 6.1 uJ, 1.5 to 2.3x worse than the 5090 bench row: against those cards the GDDR7 chip reads 8x to 13x per joule at v3 and 3.1x to 4.6x at v4 with k = 1. The per-tier reading: the Apple tier is already inside 2x of the GDDR7 chip with no shadow and crosses under 1x at v4 and k = 1; the 5090 and the tuned 4070 reach about 2.1x to 2.2x at v4 and k = 1; the untuned mid-tier and AMD stay at 3x to 7.5x, which Ember tuning (the 4070 rows: 3.65 to 2.57 uJ) closes by about 30 percent and nothing in the hash closes further.
+
+The FPGA lane. The brief's soft-overlay range was 0.30x to 0.39x per watt measured-basis and 0.7x to 1.9x at an unmeasured bank-bound ceiling. The reads-in-flight model with the JEDEC HBM2 timings:
+
+| Ceiling | Formula | G reads/s per card | Reads in flight at 137.8 ns | Per W at 115 / 150 / 225 W (M/s/W) | Against the 5090 per W (53.7 M at 326 W) |
+|---|---|---|---|---|---|
+| Measured, Shuhai U280 default mapping (FCCM 2020, Fig 7) | 32 pc x 75 M | 2.4 | 331 | 21 / 16 / 11 | 0.39x to 0.30x (U55C); 0.20x (U280) |
+| tFAW-bound (JEDEC HBM2, ICCAD 2021 Table I: 30 cycles at 1,066 MHz, 4 ACT per channel) | 16 ch x 4 / 28.1 ns | 2.3 | 313 | 20 / 15 / 10 | 0.37x to 0.28x; 0.19x |
+| tRRD-bound (6 cycles) | 16 ch / 5.6 ns | 2.8 | 392 | 25 / 19 / 13 | 0.46x to 0.35x; 0.24x |
+| Bank-bound, no activate window (the epoch-length 12.2 ceiling row) | 32 pc x 16 banks / 45 ns | 11.4 | 1,567 | 99 / 76 / 51 | 1.84x to 1.41x; 0.94x |
+| O'Connor's HBM2 activate figure as carried by chip-model-v3 5.3 | 16 ch x 8 / 12 ns | 10.7 | 1,470 | 93 / 71 / 47 | 1.73x to 1.32x; 0.88x |
+
+The reading: Shuhai's measured 2.4 G/s equals the tFAW ceiling at JEDEC timings (2.3 G/s). The measured row was read on 6 October as a mapping artefact ("the paper's point is that this mapping is the wrong one for random access"); the activate window says it is the DRAM's own limit, which a bank-interleaved mapping does not lift because tFAW is enforced per channel by the die. The 11.4 G bank-bound row needs tFAW gone; O'Connor's 12 ns figure (which the chip model carries for HBM2 and HBM3) is 2.3x shorter than the JEDEC HBM2 cycle count tabled by ICCAD 2021, and the difference is the whole 0.7x to 1.9x row. Tightened range for a 2-stack HBM2 FPGA (U55C, U280, F2's VU47P): 2.3 to 2.9 G reads/s, 0.30x to 0.47x of the 5090 per watt, in the RX 9070 XT's class (2.4 to 2.7 G/s measured). HBM2e parts (Versal HBM, Agilex 7 M) raise the pin rate, not tFAW in nanoseconds (approx), so they sit in the same band; no FPGA with HBM3 exists as a product. Approximate throughout: the 16 half-banks per pseudo-channel, the 1,066 MHz reading of the ICCAD table, the board watts under load.
+
+Can a rented FPGA hour measure it? Vast.ai lists no FPGAs (GPU marketplace only, checked 6 October 2026). AWS F2 (f2.6xlarge: one Virtex UltraScale+ HBM VU47P, 16 GB HBM2 in 2 stacks, 32 pseudo-channels, USD 1.98 an hour on-demand in us-east-1, USD 0.66 spot) carries the same HBM2 subsystem as the U55C and U280, so yes. The gate, written as a measurement plan:
+
+| Step | What | Hours (agent) | Pass line |
+|---|---|---|---|
+| 1 | Port the chase kernel of `docs/benchmarks/repro.md` 2.2 to a Vitis HLS AXI master over the HBM IP: 1 GiB working set across all 32 pseudo-channels, N dependent 4-byte-reads-in-flight lanes (N = 256, 1,024, 4,096), the HBM IP's address map set to bank-interleaved (RAMA or the IP's "random access" option), a second variant with 32-byte reads | 4 to 6 | the kernel reports reads per second and the chain's checksum equal to the CPU's |
+| 2 | Build the AFI (the F2 shell flow; the Vivado licence rides with the instance), 2 to 4 hours of F2 time at USD 2 to 8 | 2 (mostly waiting) | an AFI that loads |
+| 3 | Run the ladder; read board power through `xbutil examine --report electrical` (or the F2 shell's sensors) at 1 Hz; take the mean over each run | 1 | reads per second and watts per rung |
+| 4 | Write the row into `epoch-length.md` 12.2 in place of the ceiling row | 1 | the public claim carries a measured FPGA number |
+| Gate | reads per second per watt at 1 GiB | | expected 15 to 25 M/s/W (0.3x to 0.5x of the 5090); the alarm line is 27 M/s/W (0.5x); over 54 M/s/W (1.0x) the FPGA lane becomes a Counter ASIC 4.0 item |
+
+Consequences per tier of the FPGA finding: none today (no FPGA mines); if the measured row holds, a soft-overlay FPGA at USD 4,000 to 5,000 a card (approx) mines at an RX 9070 XT's rate per watt for 7x the price, so no home or rig tier is displaced by it; the per-program bitstream lane stays answered by layer 9.
+
+### 5.2 Task 2: the reserve R0 to R8
+
+| Slot | Family | Chip block it adds (approx area in 32-bit adders per lane, `counter-asic-3-reserve.md` s3) | Chip datapath energy per op, N5 floor (pJ, approx) | Honest step cost, Apple / NVIDIA / AMD (measured, ratio to the add-xor-rotate chain) | Verifier cost | Chip edge per joule it moves (model) | Cost per tier |
+|---|---|---|---|---|---|---|---|
+| R0 | derive (per-day item program) | a sequencer: 60 KB instruction store, 16-register file, ALU with multiplier and rotator; removes the 3x fixed-function credit of the f = 0 chip | n/a (it is the f = 0 chip's item cost: 9,992 ops per item) | hash rate 0 on all three vendors; daily build +7 ms Mac, 0 on the 5090 and 9070 XT; compile +0.75 s Mac, +1.1 s NVRTC, +2.0 s AMD per day (a once-a-day module is a requirement) | dr736 +2.8 ms per warp on the Mac, +5.2 on the box core, over the gate cold; dr368 +0.6 Mac, +0.2 box, 8.16 on the half-core | f = 0 chip: 0.92x to 0.34x to 0.43x per chip; per joule from 1.86x to about 0.7x to 0.9x at the same allowance (approx); f = 1 chips: 0 | pool verifier cores x2.4 at dr736, x1.3 at dr368; every miner tier 0 |
+| R1 | shfla (lane + delta) | 32-lane x 32-bit crossbar per warp, 32,768 mux bits, 3 to 6 adders per lane | 1.00 | 1.91 / 1.53 / 0.75 to 0.84 | one op per instruction, under 0.01 ms per warp at W_new = 4 | shadow floor +21 percent at 5 percent of instructions (approx); the GPU pays 1.5x the step too, so k unchanged | Apple under 1 percent of ALU time (argued), NVIDIA and AMD 0 |
+| R2 | perm (byte permute) | 4x4 byte crossbar, 128 mux bits, 1 to 2 adders | 0.10 | 1.13 emulated / 1.30 / 1.73 to 1.93 emulated | negligible | under 1 percent | Apple and AMD emulate at 1.1x to 1.9x per op: under 1 percent at 4 points |
+| R3 | popc and clz | popcount tree and priority encoder, 1.5 to 3 adders | 0.10 | 0.87 and 1.01 / 1.50 and 1.63 / 0.91 to 1.01 and 1.19 to 1.30 | negligible | under 1 percent | 0 |
+| R4 | bfe | mask generator on the shifter, 0.3 adders | 0.06 | 0.77 / 1.54 / 1.00 to 1.09 | negligible | 0 | 0 |
+| R5 | shl, shr | barrel shifter beside the rotator, 0.2 adders | 0.06 | 0.85 and 0.86 / 1.27 and 1.28 / 1.00 to 1.02 and 0.91 to 1.02 | negligible | 0 | 0 |
+| R6 | sel | 32 muxes, 0.3 adders | 0.03 | 0.76 / 1.32 / 0.90 to 1.01 | negligible | 0 | 0 |
+| R7 | andn | 32 inverters, under 0.1 adders | 0.02 | 0.75 / 1.26 / 0.91 to 1.01 | negligible | 0 | 0 |
+| R8 | mm8 | 8x8x16 u8 MAC tile per warp, about 100 adders per lane; licensable IP at every node | 1.60 | owed (Metal 4 matmul2d) / 2.43 / 1.68 to 1.83 native, exactness unverified | 1,024 MACs per instruction per unit, about 10 us per warp at W_new = 4 | shadow floor +37 percent at 5 percent of instructions (approx); the GPU pays 2.4x the step: k unchanged or worse for the GPU | Apple pays the library path (owed); NVIDIA and AMD native |
+
+The ordering argument. Against the f = 1 chip, which is the chip anyone builds, every family R1 to R8 moves the per-joule edge by under 10 percent, because the chip's cost at class v4 is N x k x 11 pJ and a family changes the per-op energy of 4 points in 79 of the shadow mix. Against the f = 0 chip only R0 matters (it is the item cost). So the reserve's function is not per-joule resistance; it is to make a datapath taped out against class v3's eleven families wrong at the first unlock. A chip maker who reads this document tapes out every block from day one: R1 to R7 together are about 8 to 14 adders per lane (a lane with a 32x32 multiplier is about 35), about 11 mm^2 on a 14,000-lane N5 array, about USD 4 of silicon (sram-mirror.md's USD 0.36 per mm^2, approx); R8 is a licensed tile. The era schedule therefore buys nothing against a chip and the order can be set by honest cost alone: the largest new structure first while every vendor's measured step cost is in (shfla: AMD measured cheap at 0.75 to 0.84, which the reserve document said was the one number that could move it to R1), the emulated families next, mm8 last at era 8 by the rule (no era-4 exception: mm8 removes no adversary class, `epoch-length.md` 12.4). R0 enters at dr368, not dr736: the box proxy puts dr736 over the gate on a cold run (10.5 ms) and at 15.5 ms on the half-core; dr368 reads 4.7 and 8.2.
+
+Recommended text change to `counter-asic-3-reserve.md` section 5: R1 shfla, R2 perm, R3 popc and clz, R4 to R7 unchanged, R8 mm8 at era 8; R0 at `derive_len = 368` with 736 behind the O-1.14 measurement. The era schedule "family n at era n" stands; what it costs per tier at each unlock is the step-cost table above (Apple under 1 percent of ALU time per family, NVIDIA and AMD nothing measurable), and what it buys is stated honestly in the public text (section 6, proposal 4).
+
+### 5.3 Task 3: a class v5 from the shadow
+
+The three options, each priced:
+
+(i) Shadow ops that depend on the loaded data. The v4 shadow block runs at the end of every iteration on the eight lane registers, and those registers hold the words the iteration's 16 loads XORed in (`generator.rs`: the block is executed after instruction 63 with the iteration's `sel`; `verify.rs` runs it with the same `step`). So every shadow op already consumes loaded data, and the next iteration's load addresses depend on the shadow's outputs. A chip cannot precompute any of it; what it can do is what the GPU does: overlap one lane's shadow with another lane's reads in flight. Option (i) therefore moves k by 0. A variant that draws the shadow's immediates from loaded words is M18's one-bit select at 32 bits: a chip wires the operand, and it is not a defence. Verdict: void; no measurement needed.
+
+(ii) Shadow work that exercises GPU structures a chip lacks. Bank-conflict timing is not a value and cannot enter a bit-exact function. Register-file width (8 registers today) can be widened in the shadow to 16 or 32 (ProgPoW used 32): a chip's register file per lane in flight grows from 32 B to 128 B, 1.8 MB on a 14,000-lane array, trivial. Warp shuffles are the structure that costs: the xor-mask shuffle needs a 5-stage butterfly per warp (5,120 mux bits), the indexed shuffle a full crossbar (32,768). The chip datapath floor per op (N5, approx: add 0.06 pJ, mul 0.52, butterfly 0.30, crossbar 1.00, mm8 tile 1.60) against the GPU's measured step costs:
+
+| Shadow op mix | Chip floor per op (pJ, approx) | k floor after the 2x pipeline and 8x register and wire overhead of latency-shadow s6 (approx) | GPU cost of the same mix on the 5090 (step ratios, measured) |
+|---|---|---|---|
+| Today's weights (add 32, mul 22, rot 13, shfl 8 of 75) | 0.221 | 0.32 | 1.0x to 1.5x per op |
+| Shuffle-heavy (shfl 14, shfla 8, the rest scaled) | 0.315 | 0.46 | the shuffles cost the 5090 1.49x to 1.53x the chain step, so its own energy per op rises about 10 percent (approx) |
+| With mm8 at 8 points | about 0.45 | about 0.65 | mm8 costs the 5090 2.43x the step |
+
+So a shuffle-heavy shadow raises the attacker's claimed floor from about 0.3 to about 0.5 and costs the GPU about 10 percent more energy per shadow op; it does not reach k = 1. What a chip would need to add: the 32-lane crossbar per warp (R1's structure), nothing else new. The structure argument is bounded: a wide-SIMD array with a crossbar per 32 lanes is still a fixed datapath with no scheduler, and that is where the 0.3 came from.
+
+(iii) One N for every card. Per-card bind points at the 5 percent rule (measured): M5 Max about 130,000 counted ops (interpolated between 102,100 at -1.5 percent and 150,800 at -7.3), RTX 5090 at its 431 W cap about 210,000 (199,600 at -2.7, 330,700 at -34.7), RTX 4070 at its 160 W cap about 250,000 (199,600 at +0.4, 330,700 at -12.3, approx), RX 9070 XT over 331,000 (holds at every rung; budget about 650,000). The consensus N is the minimum: 130,000, set by the Mac. The unmeasured rented cards by ALU budget (approx, cores x clock): 3060 about 270,000, 4060 about 440,000, 3080 about 360,000; their power caps are unmeasured and on NVIDIA the cap binds before the budget, so these are not pass marks. The ladder at every N the lane can compute:
+
+| N counted ops | 5090 uJ (rate delta) | M5 Max uJ (delta) | 4070 uJ (delta) | f = 1 GDDR7 chip uJ at k = 0.3 / 0.5 / 1 / 1.5 | Edge over the 5090 | Edge over the M5 Max | Edge over the 4070 | Verifier add per warp: M5 Max / box core / box half-core (ms) |
+|---|---|---|---|---|---|---|---|---|
+| 930 (class v3) | 2.65 | 0.78 | 2.57 | 0.47 / 0.47 / 0.47 / 0.47 | 5.7x | 1.66x | 5.5x | 0 |
+| 102,100 (class v4) | 3.27 (-0.2%) | 1.39 (-1.5%) | 3.51 (+0.4%) | 0.80 / 1.02 / 1.58 / 2.14 | 4.1x / 3.2x / 2.1x / 1.5x | 1.74x / 1.36x / 0.88x / 0.65x | 4.4x / 3.4x / 2.2x / 1.6x | 0.18 / 0.39 / 0.67 |
+| 130,000 (the one-N candidate) | 3.27 (-0.3%) | 1.43 (-4.8%) | 3.78 (+0.4%) | 0.89 / 1.18 / 1.89 / 2.60 | 3.7x / 2.8x / 1.7x / 1.3x | 1.61x / 1.22x / 0.76x / 0.55x | 4.2x / 3.2x / 2.0x / 1.5x | 0.23 / 0.49 / 0.85 |
+| 150,800 | 3.27 (-0.3%) | 1.46 (-7.3%) | 3.98 (+0.4%) | 0.96 / 1.29 / 2.11 / 2.94 | 3.4x / 2.5x / 1.5x / 1.1x | 1.52x / 1.13x / 0.69x / 0.50x | 4.1x / 3.1x / 1.9x / 1.4x | 0.26 / 0.57 / 0.99 |
+| 199,600 | 3.35 (-2.7%) | 1.58 (-10.5%) | 4.45 (+0.4%) | 1.12 / 1.56 / 2.65 / 3.74 | 3.0x / 2.1x / 1.3x / 0.9x | 1.40x / 1.01x / 0.59x / 0.42x | 4.0x / 2.9x / 1.7x / 1.2x | 0.35 / 0.76 / 1.31 |
+| 330,700 | 4.99 (-34.7%) | 1.87 (-21.0%) | 5.89 (-12.3%) | 1.55 / 2.28 / 4.09 / 5.91 | 3.2x / 2.2x / 1.2x / 0.8x | 1.21x / 0.82x / 0.46x / 0.32x | 3.8x / 2.6x / 1.4x / 1.0x | 0.58 / 1.26 / 2.18 |
+
+Per-tier watts at N = 130,000 (measured rungs interpolated): the M5 Max 37 W GPU plus DRAM (from 21), the 5090 431 W (its cap, from 350), the 4070 about 118 W (from 79.5), the 9070 XT owed; a 5090 rig pays about 23 percent more electricity for 0.3 percent less rate, an Apple miner 1.8x the GPU watts for 4.8 percent less rate, a pool user nothing, every verifier tier +0.23 to +0.85 ms per warp. The verifier at 130,000 on the half-core proxy is 8.5 ms (8.23 + 0.85 - 0.67), inside the gate with 1.5 ms spare; the gate does not bind N before the Mac does.
+
+#### 5.3a The reconciled N ladder (this lane's measured cards, lane 7's HBM4 inputs; `--section ladder`)
+
+Lane 7 (`docs/analysis/horizon/frontier.md` 2.3, `sim/horizon/frontier/frontier_model.py` model 1.4) adds HBM4: JEDEC JESD270-4 doubles channels per stack (16 to 32, cited), so its one-stack ceiling is taken as 2 x 10.7 = 21.4 G reads/s at 1.0 nJ per read (approximate, unsourced), 5 W static, 10 W controller: 167 MH/s at 0.218 uJ bare. The table below carries that chip beside the three of chip-model-v3 5.4, every chip at N = bare + (N - 930) x 11 pJ x k, and every honest card at its measured rung.
+
+| N counted ops | 5090 uJ, W (rate delta) | M5 Max uJ, W (delta) | 4070 uJ, W (delta) | 9070 XT rate delta (W owed) | 12 GB and 8 GB rented cards | Chip edge over the 5090 per joule at k = 0.5 / 1 / 1.5: GDDR7 | HBM3 one stack | HBM3 eight stacks | HBM4 one stack | Verifier ms per warp: M5 Max core / 2019-class by the 2.5x rule / measured half-core proxy | Card that binds first (5 percent rule) |
+|---|---|---|---|---|---|---|---|---|---|---|---|
+| 930 (class v3) | 2.65, 350 W (0) | 0.78, 21 W (0) | 2.57, 80 W (0) | 0 | measured at v3 only: 5070 3.27 uJ, 3060 4.36, 4070 untuned 3.65, 4060 Ti 8 GB 3.81 | 5.7x | 8.3x | 10.1x | 12.2x | 2.06 / 5.2 / 7.56 | none |
+| 49,700 | 3.21, 425 W (+0.1%) | 1.16, 31 W (-1.2%) | 3.01, 94 W (+0.4%) | +2.1% | not measured at any N | 4.4x / 3.2x / 2.5x | 5.5x / 3.7x / 2.9x | 6.1x / 4.0x / 3.0x | 6.6x / 4.3x / 3.1x | 2.15 / 5.4 / 7.88 | none |
+| 102,100 (class v4) | 3.27, 431 W (-0.2%) | 1.39, 37 W (-1.5%) | 3.51, 109 W (+0.4%) | +2.0% | not measured | 3.2x / 2.1x / 1.5x | 3.7x / 2.3x / 1.6x | 4.0x / 2.4x / 1.7x | 4.2x / 2.5x / 1.7x | 2.24 / 5.6 / 8.23 | none (M5 Max -1.5%) |
+| 130,000 | 3.27, 431 W (-0.3%) | 1.43, 37 W (-4.8%) | 3.78, 117 W (+0.4%) | +1.7% | not measured | 2.8x / 1.7x / 1.3x | 3.2x / 1.9x / 1.3x | 3.4x / 1.9x / 1.4x | 3.5x / 2.0x / 1.4x | 2.29 / 5.7 / 8.41 | M5 Max at its 5 percent point |
+| 150,800 | 3.27, 431 W (-0.3%) | 1.46, 37 W (-7.3%) | 3.98, 124 W (+0.4%) | +1.5% | not measured | 2.5x / 1.5x / 1.1x | 2.9x / 1.7x / 1.2x | 3.0x / 1.7x / 1.2x | 3.1x / 1.8x / 1.2x | 2.32 / 5.8 / 8.55 | M5 Max (-7.3%) |
+| 199,600 | 3.35, 431 W (-2.7%) | 1.58, 38 W (-10.5%) | 4.45, 138 W (+0.4%) | +1.0% | not measured | 2.1x / 1.3x / 0.9x | 2.4x / 1.3x / 0.9x | 2.5x / 1.4x / 0.9x | 2.6x / 1.4x / 1.0x | 2.41 / 6.0 / 8.87 | M5 Max (-10%), 5090 (-2.7%) |
+| 330,700 | 4.99, 431 W (-34.7%) | 1.87, 40 W (-21.0%) | 5.89, 160 W (-12.3%) | +3.6% | not measured | 2.2x / 1.2x / 0.8x | 2.3x / 1.3x / 0.9x | 2.4x / 1.3x / 0.9x | 2.5x / 1.3x / 0.9x | 2.64 / 6.6 / 9.74 | 5090 (-35%), M5 Max (-21%), 4070 (-12%) |
+
+Sources per column: 5090 and M5 Max rungs `latency-shadow-2026-10-06.md` s3 and s5; 4070 and 9070 XT rungs `counter-asic-3-status.md` item 8 (the 9070 XT's watts owed: the ADLX sampler parsed 0 samples); the rented cards `prover-tiers-real-cards.md` (class v3 only); chip bare energies chip-model-v3 5.4 and lane 7 model 1.4; the 11 pJ unit latency-shadow s5; the verifier slopes 3.2 us per 1,000 shadow instructions (Mac, measured) and 12.1 us (box half-core, this lane); the 130,000 row interpolated. Every chip cell is approximate.
+
+Disagreements with lane 7's model 1.4, named: (a) its honest card at N is the linear 326-to-575 W model of chip-model-v3 5.7 (2.95 uJ at N = 100,000, 3.50 at 200,000, 4.22 at 330,000); the measured 5090 under its 431 W cap reads 3.27, 3.35 and 4.99 uJ with -0.2, -2.7 and -34.7 percent of rate (the cap binds from 102,100 ops; `power.min_limit` is 400 W, so no cap below the one measured exists on a 5090). (b) Its shadow core is 150 W fixed at the 5090's 136 MH/s; on a 167 MH/s HBM4 chip that under-counts the core by 1.23x. Energy per hash is N x 11 pJ x k whatever the chip's rate, so HBM4 at N = 100,000 and k = 1 is 1.33 uJ and the edge 2.5x, not 1.11 uJ and 2.65x; at 200,000 1.4x (lane 7: 1.74x); at 330,000 1.3x (1.33x: agrees, because the 5090's own energy jumps to 4.99 at that rung). (c) Its HBM3 and HBM4 ceilings (10.7 and 21.4 G per stack) rest on the 8-activates-per-12-ns rate chip-model-v3 5.3 carried from O'Connor; the JEDEC HBM2 cycle table (ICCAD 2021 Table I) gives 4 per 28 ns per channel (section 5.1 of this file), and HBM3's own tFAW is behind the paywall. If HBM3 and HBM4 keep HBM2's window the one-stack ceilings are 2.3 and 4.6 G, HBM4's bare energy 0.55 uJ and its bare edge 4.9x, not 11x. The GDDR7 column is the one with a measured anchor (the 5090 reaches 82 percent of its ceiling) and is the column to quote in the summary; the HBM columns are the upper bound.
+
+Verifier headroom for N (lane 7's "10x of headroom"): on the M5 Max core 10 - 2.33 = 7.67 ms buys 2.4 M shadow instructions, N about 4.5 M ops (19x); on the 2.5x rule 4.2 ms buys 525,000 instructions, N about 1.06 M (10x, lane 7's figure); on the measured half-core proxy 1.77 ms buys 146,000 instructions, N about 370,000 (3.7x). The 10x holds on the rule and not on the pessimistic measured bracket; O-1.14 decides which. Either way the cards bind first: M5 Max 130,000, 5090 at 431 W 210,000, 4070 at 160 W about 250,000, 9070 XT over 331,000. An unconditional doubling of N per era (lane 7's candidate) would take the Apple tier out at the first step (200,000: -10.5 percent) and the 5090 and 4070 at the second (400,000: compute-bound at their caps), which is why the proposal below steps N by signal, not by schedule alone.
+
+The verdict on v5: the shadow lever is close to spent on the owned cards. Going from 100,000 to 130,000 buys 2.1x to 1.7x against the 5090 at k = 1 and costs the Mac its whole 5 percent allowance; a shuffle-heavy mix buys the k floor 0.3 to 0.5. Together they define one candidate, `v5 = mx8 + sh256x35 with the shuffle-heavy weight table`, worth measuring but not worth a cut on its own: the chip question is k, and no shadow design moves k past about 0.5 against a fixed-datapath array.
+
+What measurement decides it (not run tonight; the shuffle-heavy weight table does not exist as a knob, and the Mac's miner state was not checked, so the plan stands in for the run): (1) add a shadow weight table to `ShadowClass` (`generator.rs`, 2 hours), draw the block from it, emit it in the three dialects as today; (2) export `mx8+sh256x35` at today's weights and at the shuffle-heavy table for seed igneum-genesis; (3) Mac: `with-lock.sh measure packbench --pack <dir> --batches 60 --batch-log2 24 --group 256` with the IOReport sampler, 2 packs plus the control, about 6 minutes, the miner paused first (`curl -s http://127.0.0.1:60030/.../api/state` from the app's `app.url`, then pause through the app, never from a script); (4) the same ladder as PC jobs on the 5090, 4070 and 9070 XT through the existing `tools/ca3-shadow` playbooks with the card off through the runner's `--cards-off`; (5) `igneum-pow bench` on the Mac core and the box proxy. Pass lines: every owned card within 5 percent of its class v4 rate; bit-exact fingerprints on Metal, CUDA and AMD OpenCL; verifier under 10 ms on the half-core proxy; the 5090's marginal pJ per op on the shuffle-heavy mix read on the three rungs under its cap.
+
+### 5.4 Task 4: the era draw's randomness
+
+How it picks. Era n's seed E_n is the 1-hour class-group VDF of `Hash(chain_id || n || blue block hashes of the day before C_era(n))`, where C_era(n) is the highest certified checkpoint at least 7,200 DAA s before the era (spec 04 s4.4). One SplitMix64 stream from E_n draws, in order: the ten op weights perturbed by -2..+2 points each, the output fold rotations, an unused draw for `epoch_len` (set by signal), then under class v3 a second stream draws the load width (pinned at 4 bytes: the draw is consumed), the stride multiplier M (odd) and rotation R, and the four interleave bit positions (spec 01 s1.13.1, `era-layout.md` 1.1). Not drawn: the load count (16), the mixer round count (8) and multiplier (8), the cache and dataset sizes, the item construction.
+
+What an attacker can bias, priced. Two routes. (a) Forge the certified checkpoint: needs 2/3 of the 30-day blue-block weight, which is 20 days of 100 percent of the network's hash (the headline). Rented at the measured USD 0.0117 per MH/s-hour:
+
+| Network hash | 20 days of 100 percent, rented | What it buys in the draw |
+|---|---|---|
+| 1 GH/s | USD 5,616 | one era's (weights +-2, fold, M, R, pos): a per-card hash-rate spread of 0.8 to 3.2 percent (six eras measured, bench-log "Counter ASIC 2.0, the numbers"), 0 chip effect |
+| 10 GH/s | USD 56,160 | the same |
+| 100 GH/s | USD 561,600 | the same; the rental market could not supply 20 pods of any card at 19:00Z on 6 October (bench-log), so a TH/s is not rentable at all |
+| 1 TH/s | USD 5.6M (not supplied) | the same |
+
+(b) Re-roll without weight: the miner of the last blue block before C_era(n)'s cut withholds or publishes to change the input set; this costs one block's reward and needs the 3,600-s VDF evaluated inside the 2-s publish window, a 1,800x faster evaluator (spec 04 s4.6: a 300x evaluator beats the epoch's 600 s, not the era's 3,600 s). Even free, one re-roll is one more sample of the same space. So the draw is unbiasable at any price that matters, and that is the honest answer to "what can be biased": nothing worth having.
+
+Weak corners. The op-weight perturbation can move the multiply share (mul, mad, mulhi: 22 of 75) to 16 or 28 of 75; at the N5 datapath floor that is 0.158 to 0.232 pJ per shadow op (0.195 at the base), about +-20 percent of the shadow's datapath energy, and the GPU's energy moves the same way (its IMAD is the chain's own op). The stride and interleave cost a chip two integer operations per load and an address-line permute, nothing per joule. The fold rotations are a wire mux. The measured six-era spread (1.3 percent on the 5090, 3.2 on the 9070 XT, 0.8 on the M5 Max) is the whole of what the draw moves. There is no corner that makes a chip easier, because no drawn parameter touches the memory bound, the item derivation or N.
+
+Predictability against the 32-month lead time. Everything a chip needs is public at genesis: the eleven live families, the reserve order R0 to R8 and its era schedule, the mixer shape and x8, the dataset and cache schedule, the class v4 shadow's size and weights. The draw hides (M, R, pos, weights +-2, fold rotations) until 2 hours before each era, and none of those needs silicon: an address decoder that permutes lines, a programmable rotator, an immediate table. So a chip taped out in month 0 against this spec runs every era for the chain's life, and the era draw buys nothing against it. What the draw does buy: the fork-fatigue lesson of the history (no human release, no vote), and a per-program hard-datapath FPGA cannot amortise a bitstream across eras (layer 9 handles the within-era case). Said plainly for the public text: the era draw and the reserve are automatic schedule changes against fixed datapaths and governance, not unpredictability against a chip. What would be unpredictable and costly to a chip is not available in a genesis-fixed rule set: a per-era draw among K reviewed item constructions (K mixers or K derive forms) is still K public blocks a chip carries; a per-era draw of the load count or the dependent-read depth changes the memory bound per era and fails the 5 percent rule on the honest cards (read-width: a per-program width mix spread 5.5 to 22.3 percent). What costs a chip is N (its k), the memory system (f = 1 is the ceiling and is a commodity controller), and the honest card's own watts (the M5 Max at 0.78 uJ is inside 2x of the GDDR7 chip with no shadow at all).
+
+### 5.5 Task 5: the 2019-class verifier gate
+
+Measured tonight (section 3.3): on igneum-build-1 one EPYC 9454P core boosted to 3.8 GHz (not a low clock: the governor's cap is 2.75 GHz but the core read 3,800 MHz under load, and `cpupower` needs root) with server DDR5 behind it reads 1.9x to 2.2x the quiet M5 Max core across five classes, and 2.0x on the cache fill. The half-core proxy (both SMT siblings busy on the same class) reads 3.4x to 3.7x the Mac. A 2019 laptop core (Skylake-class at 3.5 to 4.5 GHz with DDR4 at about 80 ns) sits between these brackets on the arithmetic (lower IPC than Zen 4, lower DRAM latency than the server), so the 2.5x rule is about right and the two proxies bracket it. Against the gate:
+
+| Class | One box core, cold run | Half-core | Verdict at 10 ms | Headroom left for shadow on the half-core (ms) |
+|---|---|---|---|---|
+| class v3 (mx8) | 4.67 | 7.56 | pass | 2.4 |
+| class v4 (mx8+sh256x27) | 5.06 | 8.23 | pass | 1.8 (about 150,000 more shadow instructions at 12.1 us per 1,000) |
+| dr368 | 5.32 | 8.16 | pass | 1.8 |
+| dr736 | 10.51 | 15.49 | FAIL on both proxies | none |
+
+So dr736 is out as a genesis-live or near-term reserve length on measured evidence, not on the 2.5x rule; dr368 is in. The owed O-1.14 measurement on a real 2019 laptop (the US laptop's Windows `igneum-pow` build, main's decision 7) still closes the question; the box proxy is the stand-in until it lands, and the half-core row should be the standing pessimistic rule in place of "2.5x" (it is a measurement; 2.5x is a ratio from memory).
+
+How to measure it tomorrow: `tools/cross-remote.sh` from `igneum-pow/` builds the Windows exe on the box (1 min 44 s measured for the node; the pow crate is one crate, under a minute), the relay carries it to the US laptop when it appears, `igneum-pow bench --seed igneum-genesis --day 2026-10-03 --class <c> --warps 50` for the five classes, ms per warp into `docs/bench-log.md` under O-1.14; 1 hour of agent work. A rented old CPU on Vast is the fallback (Vast lists CPU-only offers by core generation; a 2019 Xeon or i7 host at under USD 0.10 an hour, approx), same binary, same command.
+
+What the gate protects, and what loosening it costs:
+
+| | At 10 ms per warp | At 20 ms (loosened) | At 5 ms (tightened) |
+|---|---|---|---|
+| A node on a 2019 laptop at 1 bps | 1 percent of one core per block | 2 percent | 0.5 percent |
+| At 10 bps (the Devnet 2 experiment) | 10 percent of one core | 20 percent | 5 percent |
+| IBD over the 108,000-header pruning window, one core | 18 min | 36 min | 9 min |
+| Header flood (M15 class): invalid headers per second that saturate one core | 100 | 50 | 200 |
+| A pool core verifying shares | 100 per second | 50 | 200 |
+| What the lever buys the hash | the x8 mixer, dr368, the v4 shadow all fit with 1.8 ms spare on the half-core | dr736 fits (15.5 on the half-core: no, still out), x16 mixer fits | nothing of class v4 fits on the half-core |
+
+Loosening to 20 ms would admit the x16 mixer (about 7 ms on the Mac, 15 on the half-core: still out) and not dr736 on the half-core, so it buys little against a chip (the f = 1 chip derives no item) and doubles the header-flood and IBD costs on the weakest node. Keep 10 ms; measure the laptop; use the half-core row until then.
+
+### 5.6 Task 6: the dataset schedule to 2030
+
+The schedule (spec 1.13.3 option (b), decided for the cache on 5 October, recommended for the dataset): 2 GiB at genesis, 4 GiB at year 4 (day 1,460), 8 GiB at year 12, 16 GiB at year 28; the cache 256 MiB, 512 MiB, 1 GiB, 2 GiB on the same days (`memhard.rs` `growth_doublings`). The devnet packs run 1 GiB today.
+
+The installed base against it (Steam September 2026, cited; the trend is approximate):
+
+| Year (approx calendar) | 8 GB share | 12 GB share | Dataset | Who falls out of mine-only | Who falls out of mine-and-prove (the prover's measured peaks, `prover-tiers-real-cards.md`) |
+|---|---|---|---|---|---|
+| 2026 (devnet) | 27% | 13% | 1 GiB | nobody with 4 GB or more | 8 GB: compressed does not fit beside the miner (measured); core-only 2^25 fits with 1 GB spare |
+| 2027 (genesis, year 0) | about 20% | about 10% | 2 GiB | 4 GB cards hold with 0.5 to 0.8 GB spare (card-lifetime) | 8 GB loses core-only beside the miner (the miner's resident set grows 1 GiB: 7.35 + 1.0 GB over 8.19) and becomes prove-alone; 12 GB holds compressed on headless Linux (10.2 + 1.0 of 12.3) |
+| 2031 (year 4) | about 0% | about 0% | 4 GiB | 4 GB cards (5 percent of Steam today, about 0 by then) | 12 GB loses compressed (10.2 + 3.0 GB over 12.3), keeps core-only (7.2 + 3.0 of 12.3); 16 GB keeps compressed (9.2 + 3.0 of 16.4) |
+| 2039 (year 12) | 0 | 0 | 8 GiB | 8 GB cards (26.7 percent of Steam today; the trend says under 1 percent by 2030) | 12 GB loses core-only; 16 GB loses compressed, keeps core-only (7.4 + 7.0 of 16.4); 24 GB keeps compressed (11.0 + 7.0 of 24.6) |
+| 2055 (year 28) | 0 | 0 | 16 GiB | 12 and 16 GB | 24 GB loses compressed; 32 GB keeps everything |
+
+Reading per tier: the 8 GB tier, a quarter of Steam today, is never a mine-and-prove card on the measured prover footprint whatever the dataset does, and it mines until year 12, by which time its share on the trend is nil; the 12 GB tier (13 percent, falling 6 points a year) mines to year 28 and loses mine-and-prove compressed at year 4 because the prover peaks at 10.2 GB beside a 1.4 GB miner; the 16 GB tier (27 percent and rising) mines and proves compressed to year 4 and core-only to year 12; 24 and 32 GB are unconstrained to year 28. The dataset is never the binding constraint on any tier before year 12; the prover's 5.6 to 10.7 GB footprint is. On the chip side the schedule changes nothing: one HBM3 stack holds 24 GB and the 5090's own board 32 GB (chip-model-v3 5.7), so f = 1 reads every step of the schedule to year 28 without a second stack.
+
+What growth is for, then. Two things, both real and neither a chip: (1) the cache above every GPU's on-die cache (96 MB on the 5090, 128 MB on GB202; the spec's own rule), so the honest hash stays DRAM-latency-bound and no consumer GPU gains an L2 shortcut; (2) the dataset above one reticle of SRAM at the node of the day (1.6 GiB per reticle at N5 headline density, 1.9 at N2, sram-mirror.md s4), so an "f = 1 in SRAM" chip, which would read at SRAM latency and beat the DRAM activate ceiling by 10x, stays a multi-reticle part: at 2 GiB that is 2 dies at N2, at 4 GiB 3 dies, at 8 GiB 5 dies (approx, headline density; the lower-bound density halves these). Wafer-scale parts already hold more (a Cerebras WSE-3 carries 44 GB of on-wafer SRAM, approximate, from memory, unpriced here): the schedule does not price that device out and nothing in the hash can, but at the dependent-read pattern a wafer's cross-die hops cost latency that no one has measured for this hash (open, section 7).
+
+Recommendation with numbers: hold the schedule as decided (2 GiB genesis, doublings at years 4, 12, 28). Do not slow it: slowing buys the 8 GB tier nothing (it mines to year 12 either way) and loses the SRAM-reticle margin (at a flat 2 GiB one N2 reticle holds 1.9 GiB today and about 3.4 GiB by 2036 on the 6 percent a year density trend, sram-mirror s6, so a flat dataset fits one reticle within a decade). Do not grow faster: the only tier a faster schedule costs is the 8 GB tier (year 12 to year 4) and the Apple 8 GB laptop, and it buys nothing against the HBM chip. One change: write the prover footprint, not the dataset, into the public card-lifetime sentence (litepaper line 560: "12 GB or more proves full shards" becomes "12 GB mines and proves on headless Linux until the year-4 dataset step, 16 GB until year 12, 24 GB beyond; 8 GB proves alone"), since that is the number that moves users.
+
+## 6. Ranked proposals
+
+| Rank | Proposal | Evidence | Model | Hours | Consequence per tier | Gate |
+|---|---|---|---|---|---|---|
+| 1 | Close O-1.14 with a real 2019 laptop run and adopt the half-core proxy as the standing stand-in; dr736 out, dr368 in as R0's length | box proxy: dr736 10.5 ms cold, 15.5 half-core; v4 5.06 / 8.23 | section 5.5 | 2 (Windows cross build on the box, relay to the laptop, bench, log) | miners 0; pool verifier cores x1.3 at dr368 instead of x2.4; a 2019 node keeps 1.8 ms of headroom under v4 | ms per warp under 10 cold on the laptop for v3, v4, dr368; dr736 recorded as the figure that fails |
+| 2 | Measure the FPGA lane on AWS F2 (one VU47P, HBM2, USD 1.98 an hour) and replace the 12.2 ceiling row | the measured 2.4 G/s equals the JEDEC tFAW ceiling; the 1.9x row rests on a 12 ns tFAW the JEDEC cycles do not support | section 5.1 | 8 to 10 agent hours plus USD 2 to 8 of F2 time | none today; the public FPGA claim becomes a measured 0.3x to 0.5x per watt | reads per second per watt at 1 GiB; alarm at 27 M/s/W, Counter ASIC 4.0 at 54 |
+| 3 | Public-text correction: the era draw and the reserve are automatic schedule changes against fixed datapaths and against forks, not unpredictability against a chip; publish the chip's USD per MH/s-hour beside the honest cards' | section 5.4: every drawn parameter needs no silicon; the reserve is about USD 4 of N5 silicon on a chip | sections 5.1, 5.2, 5.4 | 1 | holders and miners read a claim that survives review; nothing on the devnet changes | `docs/evidence.md` row with the two numbers (USD 0.00021 chip, 0.00113 owned 5090, 0.0117 rented) and the draw sentence |
+| 4 | Reserve order: R1 shfla, R2 perm, R3 popc and clz, R4 to R7 unchanged, R8 mm8 at era 8 by the rule; R0 at dr368 | AMD step cost of shfla measured 0.75 to 0.84 (the one number the reserve document said could move R3); dr736 fails the proxy | section 5.2 | 1 (spec text in `counter-asic-3-reserve.md` s5 and s6) | Apple pays shfla's 1.91x per op first, under 1 percent of ALU time at 4 points (argued, measured at the unlock rehearsal); NVIDIA and AMD 0 | the family-live 5 percent run per vendor at each unlock rehearsal |
+| 5 | **N grows by the era draw at genesis, inside a verifier-bounded ladder, each step taken by 90 percent miner signal.** The shadow size N becomes a genesis ladder indexed per era, {100,000, 130,000, 200,000, 330,000, 650,000, 1,000,000} counted ops (the measured rungs, then doublings), floor 100,000 and ceiling 1,000,000 fixed at genesis (the ceiling is the 10x verifier headroom on the 2.5x rule; 370,000 on the half-core proxy until O-1.14 lands, which then sets it), the era stream consuming one draw for it as it does for `epoch_len`, and the step up or down set by 90 percent of blue blocks over 7 days at a day boundary (spec 5.7's mechanism, P2's signalling code), never unconditionally | lane 7: HBM4 doubles the f = 1 chip's rate per stack, so the bare edge rises 5.7x to 12x (upper bound) and only N answers it; this lane: the chip's edge over the 5090 at k = 1 falls 2.1x (100,000) to 1.7x (130,000) to 1.3x (200,000 and 330,000); an unconditional doubling takes the M5 Max out at the first step | section 5.3a; `--section ladder` | 6 to 8 (the ladder field in `ShadowClass` and the era stream, the signal rule shared with `epoch_len`, a fast-time run across one step, packs and vectors per rung) | At each step, measured: 100,000 to 130,000 costs the M5 Max 3.3 points of rate and 0 W more, the 5090 and 4070 nothing, the 9070 XT nothing, every verifier +0.05 ms; 130,000 to 200,000 costs the M5 Max 6 more points and the 5090 2.7 at its cap, the 4070 +21 W, every verifier +0.12 ms (Mac) to +0.5 (half-core); 200,000 to 330,000 is compute-bound on every NVIDIA card at its cap (5090 -35 percent) and is a step the signal would refuse until cards change; a pool user nothing at any step; a chip's shadow core grows with N at k x 11 pJ per op | ONE gate per step, published before the project recommends the signal: at the step's N, every card of the public benchmark set (the four owned plus the eleven rented models) within 5 percent of its rate at the previous step, bit-exact fingerprints on Metal, CUDA and AMD OpenCL, and the verifier under 10 ms per warp cold on the O-1.14 core (the half-core proxy until then) |
+| 5a | A class v5 candidate `mx8 + sh256x35` with a shuffle-heavy shadow weight table (shfl 14, shfla 8 of 75), measured on the four owned cards before any cut: the first rung of proposal 5's ladder, plus the k-floor lever | the Mac's 5 percent point is 130,000; the shuffle mix raises the k floor 0.32 to 0.46 (approx) | section 5.3 | 4 to build the weight-table knob and packs, 1 Mac measure session (about 6 min under the lock, miner paused), 3 PC jobs | M5 Max -4.8 percent of rate at 37 W; 5090 -0.3 percent at its 431 W cap (a rig +23 percent electricity); 4070 0 at about 118 W; 9070 XT 0; verifier +0.23 ms Mac, +0.85 half-core | every owned card within 5 percent; bit-exact on three vendors; half-core verifier under 10 ms; the 5090's marginal pJ on the new mix read on three rungs |
+| 6 | Hold the dataset schedule (2 GiB, years 4, 12, 28); write the prover footprint into the card-lifetime sentence | Steam shares and the measured prover peaks; one HBM3 stack holds every step | section 5.6 | 1 | 8 GB: mines to year 12, proves alone; 12 GB: mine-and-prove compressed to year 4, core-only to year 12, mines to year 28; 16 GB: compressed to year 4, core-only to year 12; 24 and 32 GB unconstrained to year 28 | the litepaper sentence matches the table; `docs/evidence.md` row "card lifetime" labelled designed |
+| 7 | Make the Ember tune the shipped default per card model (the honest card's watts are the lever that moves every chip row) | the 4070 at 3.65 uJ untuned and 2.57 tuned (-30 percent); the 5090 2.65 bench against 2.34 app | section 5.1 | 2 (defaults table in the app from the fleet priors; already measured) | every NVIDIA tier gains 10 to 30 percent per joule; the chip's edge over the mid-tier falls from 8x to 13x toward 5x to 9x at v3 | MH per W per card model on the fleet night against the untuned baseline |
+| 8 | Fund the k question: the item 3 cryptanalysis brief gains a chip-design line (a 14,000-lane SIMD array's energy per op on a random 32-lane program with shuffles, at N5 and at 28 nm) | every chip row at class v4 turns on k; nothing in the project measures it | section 5.3 | 0 agent hours; the project lead's money (part of the USD 80,000 to 160,000 brief) | none until the number lands; it decides whether 2x is reachable | a reviewed estimate of k with its range |
+
+Paragraphs.
+
+1. The verifier gate is the one place tonight produced a measurement instead of a rule. The box proxy brackets a 2019 laptop from both sides (a 2022 server core at full boost; the same core with its sibling busy), and dr736 fails both brackets while class v4 passes both with 1.8 ms to spare. The measurement is one Windows build and one bench on the laptop the project lead already owns; until it lands, the half-core row replaces the "2.5x" from memory in every status file.
+
+2. The FPGA lane's upper row was built on an activate rate (8 per 12 ns per channel) that the JEDEC HBM2 cycle table does not support (4 per 28 ns); the measured Shuhai rate sits exactly on the JEDEC ceiling. That reading can be wrong (the ICCAD table's clock interpretation, the half-bank count, the board watts are all approximate), which is why the F2 hour is the proposal and not the conclusion. It is cheap and it turns a public ceiling claim into a measured one.
+
+3. The honest statement about the draw and the reserve is owed before the public testnet. The project has said the era draw and the family reserve are "automatic anti-ASIC escalators"; against the chip that the model says anyone would build they escalate nothing, because every parameter they move is firmware or a USD 4 block. They are good design against forks and against a hard-datapath FPGA, and that is what the text should say. The chip's USD per MH/s-hour (56x under rental, 5.4x under an owned 5090) belongs beside it, because it is the number a miner will compute on the day a chip appears.
+
+4. The reserve order changes only where the measurements moved: shfla's AMD cost came in cheap, so the largest structure goes first; dr736 failed the proxy, so R0 is dr368. mm8 keeps no exception because `epoch-length.md` 12.4 showed it removes no adversary class.
+
+5. N as a genesis ladder is the one structural change this lane proposes, and it is lane 7's idea with the cards' measured bind points written into it. The memory generation it answers (HBM4, 2028) arrives on a two-to-three-year cadence; the chain must answer without a release, which the era stream and the `epoch_len` signal rule already provide the shape for. What the measured rungs add: the ladder's steps are the cards' own bind points, the step is taken by the miners who pay for it, and the ceiling is the verifier's measured core, not a 10x from a ratio. An unconditional doubling per era would retire the Apple tier at era 1 and every capped NVIDIA card at era 2, so the schedule alone is not the proposal; the schedule plus the signal is.
+
+5a. v5 as a class (`mx8 + sh256x35` with a shuffle-heavy mix) is measurable in an evening and is not a cut. Its honest ceiling is the Mac's 5 percent and a k floor of about 0.5; it buys 2.1x to 1.7x against the 5090 at k = 1. The design item that decides more than v5 is k itself (proposal 8).
+
+6. The dataset schedule is right as decided and the public sentence about cards is wrong in kind: it talks about the dataset when the prover is what ends a tier's mine-and-prove life.
+
+7. The one lever that moves every chip row and costs no consensus change is the honest card's watts. The fleet showed the untuned mid-tier at 1.5 to 2.3x the 5090's energy per hash; Ember's measured tune on the 4070 took 30 percent off. Shipping it as the default is a miner-app change with a measured gate.
+
+8. k is the whole chip question at class v4 and nobody in the project can measure it; the external brief can estimate it.
+
+## 7. Open questions and what could not be run
+
+| Item | Why not | What would close it |
+|---|---|---|
+| The v5 Mac packbench ladder | the shuffle-heavy shadow weight table does not exist as a knob (the block uses the program's weights), and the Mac's miner state was not checked; a run without the knob would have measured v4 again | proposal 5, 4 hours of code then the 6-minute measure session |
+| A fixed low clock on the box | `cpupower` needs root; the core boosted to 3.8 GHz under schedutil | the laptop measurement (proposal 1); the half-core row is the pessimistic stand-in |
+| The 9070 XT watts at class v4 and its per-joule row | the AMD watts job failed on 6 October and the re-run waits on the runner's `--cards-off` (status 6a) | the next cut's PC 1 job |
+| The RTX 4060's watts (logged 0.0 W on the rented box) | the sampler read nothing on that host | one re-rent |
+| HBM2 tFAW and half-bank count on the U55C and F2 parts | behind the JEDEC paywall; the ICCAD table is a simulator's configuration (DRAMSim3), not a datasheet, and its clock interpretation (1,066 MHz) is mine | the F2 hour (proposal 2) |
+| A wafer-scale SRAM dataset holder (Cerebras-class, 44 GB on-wafer, approximate) | not priced anywhere in the project; its cross-die hop latency on a dependent-read chain is unmeasured | a Counter ASIC 4.0 analysis item, not a lane 2 item |
+| The Steam trend to 2030 | linear extrapolation of two points per tier | the survey itself, yearly |
+| The era draw's cryptanalysis (the stride bijection, the ROT weak-key draw) | out of scope here and still open in spec 1.8.4 and era-layout s8 | the item 3 brief |
+| `block-rate-devnet2.md` RUN_A and RUN_B | placeholders at 21:30 UK | nothing in this lane depends on them |
+
+## 8. Summary for the coordinator
+
+Lane 2 refined the shipped hash and its classes on the 6 October numbers and one new measurement. The chip model's answer does not change in kind: the stored-dataset chip is the chip, it reads 5.7x per joule against the 5090 bench row and 1.7x against the M5 Max at class v3, 2.1x and 0.9x at class v4 and k = 1, and it undercuts rented hash 56x and an owned 5090 5.4x per MH/s-hour; the FPGA lane tightens to 0.30x to 0.47x per watt because the measured random-read rate of an HBM2 FPGA is the JEDEC activate ceiling and not a mapping artefact, and AWS F2 can measure it for USD 2 an hour. The reserve and the era draw buy nothing against a chip (every drawn parameter is firmware; every reserve block is about USD 4 of silicon) and the public text should say what they do buy. The verifier gate got its first measured proxies: class v4 passes a 2022 server core (5.06 ms cold) and the same core with its SMT sibling busy (8.23 ms); dr736 fails both (10.5 and 15.5 ms), so R0 is dr368. The dataset schedule holds; the tier constraint to 2030 is the prover's footprint, not the dataset.
+
+1. Class v4 verifier on the box proxy 4.90 ms steady, 5.06 cold, 8.23 on the half-core; dr736 9.76 / 10.51 / 15.49: dr736 is out on measurement, class v4 keeps 1.8 ms under the gate on the pessimistic bracket (section 5.5; `sim/horizon/algorithm/model.py --section verifier`).
+2. The f = 1 GDDR7 chip's edge per joule: 5.7x (5090 bench), 1.7x (M5 Max) at v3; 2.1x and 0.9x at v4 with k = 1; 4.1x and 1.7x at k = 0.3; against the untuned rented mid-tier 8x to 13x at v3; USD 0.00021 per MH/s-hour against 0.0117 rented (section 5.1; `--section chip`).
+3. The HBM2 FPGA soft overlay: 2.3 to 2.9 G reads/s per 2-stack card by tFAW and tRRD (measured 2.4), 0.30x to 0.47x of the 5090 per watt; the 1.9x ceiling needs a tFAW of 12 ns that the JEDEC HBM2 table (28 ns) does not give (section 5.1; `--section fpga`).
diff --git a/docs/analysis/horizon/consensus-security.md b/docs/analysis/horizon/consensus-security.md
new file mode 100644
index 000000000..d6be2eb1c
--- /dev/null
+++ b/docs/analysis/horizon/consensus-security.md
@@ -0,0 +1,328 @@
+# Horizon lane 1: consensus security. What a hash majority buys on Igneum, attack by attack, with the bound and the price
+
+Date: 6 October 2026, evening UK (written 19:40 to 21:30 UTC). Lane: consensus-security. Worktree: `/Users/joshm/Projects/igneum-wt-horizon` (branch `horizon` at `3f4f719`). Companion paper: `docs/analysis/51-percent.md`. Models and runs: `sim/horizon/consensus-security/` (README at the end of this file, section 9).
+
+What was read before modelling: `docs/spec/02-consensus.md`, `03-finality.md`, `04-seeds-and-vdf.md`, `06-open-items.md`, `07-execution.md`, `08-client-security.md`; `docs/fud-ledger.md` F1 to F25, M14, M15, M23, M24, P7, P9, P11, P12, X18 to X20, G8, G12, G13, C4, D6, E16; `docs/analysis/difficulty-2026-10-03.md` (section 11), `difficulty-2026-10-04-oscillation.md`, `sim/difficulty/attacks/README.md` (the seven attacked ways); `sim/results_v2.md` A to M; `docs/benchmarks/finality-v3-2026-10-04/*.md`, `docs/benchmarks/round4-consensus-2026-10-04/results-final2.md`; `tools/finality-attacks/README.md` and `lib/net.mjs`, `tools/harness/README.md` and scenarios, `tools/exec-attacks/README.md`; `docs/review/redteam-2026-10-04.md`, `docs/review/round-4-reddit-2026-10-06.md`; `docs/plans/counter-asic-3-node.md` section 6 (P2); `docs/analysis/security-budget.md`; `docs/bench-log.md` "Rental cost of hash, 6 October 2026"; `vendor/igneum-node/consensus/src/processes/ghostdag/protocol.rs` (main checkout); `infra/fast-time/README.md` and `override-60x.json`; CLAUDE.md's 6 October rules. Two facts from main during the lane (19:4xZ, the first later corrected): the live devnet's finality has been paused since 18:39:40Z (lane 3 confirmed the cause at c3aa502: a 42.7 percent departure held by the frozen table, not the hub outage); and run A on igneum-devnet-2 at 10 blocks/s in a star of 41 miners through one seed gave 12.4 blocks/s, 77 percent red blocks, 321 tips, max reorg 55, with the controller lowering difficulty on the low blue rate (cite as "main, 6 Oct 2026 19:4xZ, block-rate-devnet2.md run A" until the file carries the rows).
+
+Price basis for every cost: USD 11.7 per GH/s-hour, measured on RunPod community pods on 6 October 2026 (`docs/bench-log.md`, "Rental cost of hash": 1,748 MH/s for USD 20.44 an hour; approximate above 2 GH/s because the market supplied no more; the live devnet was 1.16 GH/s). Costs are given per network size at 1, 10, 100 GH/s and 1 TH/s. Writing rules: no em dashes, numbers in tables, every figure labelled measured, simulated, cited or approximate.
+
+## 1. Summary for the coordinator
+
+A hash majority on Igneum buys the ordering race inside the lock latency and nothing a certificate covers, and that is measured here, not asserted. Three findings lead.
+
+1. **The lock does the work the k-cluster cannot.** The DAG simulator (`ghostdag_sim.py`, GHOSTDAG as `protocol.rs` runs it) shows a 45 to 51 percent withholder wins the selected-chain race over a 90-second hold 70 to 85 percent of the time, reorganising 32 to 46 chain blocks at 1 block/s; a 34 percent withholder wins only inside 30 to 60 s (40 percent of attempts) and never at 90 s; a 20 percent one only the last k = 18 blocks (5 to 15 percent of attempts). Finality's lock lands about 63 to 93 s after a checkpoint block (spec 03 C1, 3.11.3), so the window a majority can reorder is the lock latency, measured at 90 to 120 s, not a block count. Below two thirds of weight, no hash share reaches past a certificate (spec 03 3.11.2, `sim/results_v2.md` H, I, L3, M5: 0 conflicts under 1/3 in every seed).
+2. **The pause is the residual, and it is cheap to buy and free to hold.** Reaching the veto (1/3 of 30-day weight) at 51 percent of blocks takes 20 days and costs USD 6k at 1 GH/s, USD 5.8M at 1 TH/s in rent (`cost_model.py`), of which the attacker earns 51 percent back as subsidy; once held, silence costs nothing (the silent key keeps mining and earning) and pauses finality for as long as it likes (`finality_horizon.py` S: at 34 to 90 percent silent, 0 locks for the whole silence, 0 conflicts). During a pause the chain is proof of work with a 12-hour depth, and a 12-hour 51 percent double spend costs USD 146 at 1 GH/s and USD 146k at 1 TH/s. Tonight's pause is the departure case, confirmed by lane 3 (`docs/analysis/horizon/finality-and-weight.md` 3.1): 20 keys holding 42.7 percent of the frozen table stopped mining in three minutes, the signing weight fell to 53.1 percent at checkpoint 6843, the frozen table (Q5) holds the pause for a window (2 h on the devnet, 30 days on mainnet) where rule v2 would have locked after 35 minutes; certificates formed while the hub was down, so the topology hypothesis is refuted. The signed departure (LEAVE, lane 3's rank 1) is the fix.
+3. **The proving pool is capturable by any block producer today, in proportion to its hash and up to most of it.** Consensus checks a proof record's statement against native execution and its signature, and NOT the proof (spec 07 7.7 item 4, 7.8 item 8); the first valid record carried pays. A producer that writes a correct statement with random proof bytes into its own block is paid the shard; at 51 percent of blocks it takes at least 51 percent of the 20 percent pool (11,636 IGN an hour at full subsidy) and, because its fake lands in its next block while honest records need 9 to 11 s of proving, most of the shards outside the 10-s exclusive window. This is ledger P21 priced: the only line in the table where a hash majority earns more than it spends. The fix is proof verification in consensus (section 6, rank 1).
+
+The ranked proposals are in section 6. Two cost nothing in liveness and close whole classes: proof verification in consensus (rank 1) and weight-gated deep fork choice (rank 2: a chain forked deeper than D seconds is a candidate only if the keys that built it hold a third of the weight table at the fork, so rented hash cannot reorg past D even during a pause). Two cost liveness and are not recommended as asked: prover attestations as a second finality leg, and any rule that re-enables locks under the frozen table after an abrupt departure, because a view cannot tell a departure from a partition.
+
+## 2. Method
+
+| Model | File | What it does | Machine, lock, seeds |
+|---|---|---|---|
+| GHOSTDAG withholding | `sim/horizon/consensus-security/ghostdag_sim.py` | Abstract DAG: Poisson arrivals at 1 and 10 blocks/s, 8 equal honest miners publishing at once, one uniform one-way delay d, one attacker at share H withholding (hold T then release; or selfish: release when about to lose or at lead 6), GHOSTDAG coloring and selected parent exactly as `protocol.rs` (k-cluster with `blues_anticone_sizes`, topological mergeset, blue work), 10 parents. Reports, from honest miner 0: reorg depth in chain blocks against the chain it held at release, fork age, whether the private tip became the chain, attacker blue share, honest blocks turned red | Mac, `with-lock.sh run nice -n 19`, 20 seeds per cell; 1 bps k 18 (`ghostdag_results_1bps.md`, 11 s), 10 bps k 124 (`ghostdag_results_10bps.md`, 223 s); the star check inline (section 4.3) |
+| Finality sweep | `sim/horizon/consensus-security/finality_horizon.py` | Imports `sim/finality_v2.py` unchanged (1,000 Pareto keys, 3 regions, 2-s delay, 2.2 percent outage, no DAG, perfect retarget, keys free); adds six sweeps over the adversary's share 20, 34, 51, 67, 90 percent: renter, silent set, bought keys, poisoned eclipse, partition with an equivocator under v2 and v3, abrupt departure under v2 and v3 | Mac, run lock, seeds 7 and 11; `finality_horizon_results.md` |
+| Signalling game | `sim/horizon/consensus-security/signalling.py` | Arithmetic on P2 (95 percent of a one-day blue-block window, floor height): binomial noise, holdout cost, forced-flip cost, signal-then-defect | Mac, instant; `signalling_results.md` |
+| Cost table | `sim/horizon/consensus-security/cost_model.py` | Every attack's rented hash A/(1 - A) x N, its duration from the spec's arithmetic, its cost at 1 to 1,000 GH/s, what it earns at the three IGN price inputs of `security-budget.md`, and the equilibrium network where rent equals subsidy | Mac, instant; `cost_results.md` |
+| Node harness | `tools/finality-attacks/run.mjs s6 --fast-time` against the 0.3.14 Mac binary (`vendor/igneum-node/target-0314/release`, built 6 Oct 17:56), rule v3 forced on, SCALE 0.4, ports 29800+, suffix 980, `/tmp/igneum-horizon-fin` | The 3/3 and 4/2 partitions on a real DAG | Mac, run lock; result in section 4.5 (or the recorded runs if the node refused the file) |
+
+Where a number is from a recorded run and not re-run tonight it is cited by file. Nothing live was touched; no tracked file outside this lane's three paths was edited.
+
+## 3. Evidence: the measured and simulated numbers
+
+### 3.1 Ordering: what a withholder does to the selected chain (simulated, `ghostdag_results_1bps.md` section 2, 20 seeds, d = 0.67 s = the cloud devnet's p99 propagation, ledger F7)
+
+| attacker share H | hold 30 s | hold 60 s | hold 90 s | hold 120 s |
+|---|---|---|---|---|
+| 20% | won 10%, reorg med 0 / max 18, att blue 65% | 0%, 0 / 1, 38% | 0%, 0 / 1, 21% | 0%, 0 / 1, 18% |
+| 34% | won 40%, 0 / 18, 77% | 40%, 0 / 36, 55% | 5%, 0 / 39, 35% | 10%, 0 / 52, 28% |
+| 45% | won 70%, 10 / 17, 94% | 75%, 22 / 32, 84% | 70%, 33 / 46, 80% | 70%, 46 / 57, 80% |
+| 51% | won 85%, 10 / 15, 90% | 85%, 20 / 28, 88% | 80%, 32 / 44, 86% | 80%, 42 / 53, 84% |
+| 67% | won 100%, 8 / 13, 98% | 100%, 16 / 23, 98% | 100%, 26 / 31, 99% | 100%, 34 / 41, 99% |
+| 90% | won 100%, 2 / 4, 98% | 100%, 4 / 9, 99% | 100%, 6 / 13, 99% | 100%, 9 / 17, 99% |
+
+"won" = the private tip became honest miner 0's selected chain; "reorg" = chain blocks removed from the chain it held at release (median / max over seeds); "att blue" = the attacker's blue blocks over its blocks in the honest view (its weight and subsidy kept). The fork age when it wins equals the hold (30 to 122 s). At d = 5 s (Kaspa's design bound) the same shares win more often at short holds (34% wins 100% at 30 s) and the same at long ones. Natural reorg depth with no attacker: p99 2, max 2 to 3 at d 0.35 to 0.67 s (the cloud devnet measured p99 3, max 5 over 37,113 removals, ledger F7); p99 15 at d = 5 s.
+
+The arithmetic behind the table: the attacker's private chain merges honest blocks as blue until its first private block has k honest blues in its anticone, then every later honest block is red in that chain. So the private tip's blue work is R + min(k, N_h) against the honest tip's N_h, with R = H lambda T and N_h = (1 - H) lambda T: it wins whenever R + k > N_h, that is for every T when H >= 1/2 and for T < k H / ((1 - 2H) lambda) below it (6 s at 20%, 56 s at 34%, 180 s at 45%, with Poisson noise around each). The honest blocks it turns red (hon red: 25 to 46 percent of honest blocks at 45 to 51 percent and 60 to 120 s holds; 4 to 14 percent at 34 percent) pay their 80 percent to the attacker when its chain wins (spec 02 2.5, the red rule), so a sustained withholder at or above 45 percent takes honest subsidy and raises its weight share; at 20 to 34 percent its own blocks go red and it loses both.
+
+Weight share a repeating withholder settles at, derived from the 60-s rows (the longest hold that beats the lock on every checkpoint, section 5.1), approximate: w = H x attblue / (H x attblue + (1 - H)(1 - honred)).
+
+| H | 20% | 34% | 45% | 51% | 67% | 90% |
+|---|---|---|---|---|---|---|
+| weight share under sustained 60-s withholding | 9% | 25% | 48% | 56% | 77% | 95% |
+| blue rate the difficulty controller reads (share of true) | 86% | 76% | 79% | 80% | 86% | 94% |
+
+So 51 percent of hash reaches about 56 percent of weight by red-flooding the honest side, still 11 points under two thirds; the honest miners lose about a quarter of their subsidy for as long as it lasts, and the chain reorganises every minute, in public.
+
+### 3.2 Ordering at 10 blocks/s (simulated, `ghostdag_results_10bps.md`, k = 124)
+
+| measure | d = 0.35 s | d = 0.67 s | d = 2 s |
+|---|---|---|---|
+| natural reorg depth p99 / max, no attacker | 11 / 15 | 22 / 26 | 99 / 109 |
+| 51% hold 30 s: won, reorg med / max | - | 100%, 50 / 58 | - |
+| 51% hold 90 s | - | 100%, 146 / 163 | - |
+| 34% hold 30 s / 60 s | - | 95% (59 / 64) / 0% | - |
+| 20% hold 10 s / 30 s | - | 45% (10 / 33) / 0% | - |
+
+At 10 blocks/s the same shares reorganise ten times the chain blocks in the same seconds, and the natural reorg depth at a 2-s delay (99) is above the mainnet checkpoint depth d = 60. C1's rule that d scales with the rate (d = 60 B, ledger F7 round 2) is load-bearing; at 10 blocks/s with d = 600 the determination sits 60 s behind the checkpoint as at 1 block/s.
+
+### 3.3 The star: run A reproduced (simulated inline, section 4.3 code; 10 bps, k 124, 8 miners, honest only, 120 s)
+
+| uniform relay delay d, s | blocks in flight | honest blocks red | natural reorg p99 / max at miner 0 | reading |
+|---|---|---|---|---|
+| 0.67 | 7 | 0% | 19 / 23 | healthy |
+| 2 | 20 | 0% | 78 / 99 | reorgs grow with d |
+| 5 | 50 | 0% | 8 / 133 | still under k |
+| 10 | 100 | 31% | 0 / 0 | past k/lambda: miners stop switching, each on its own chain |
+| 15 | 150 | 50% | 0 / 0 | |
+| 20 | 200 | 60% | 0 / 0 | |
+| 30 | 300 | 67% | 0 / 0 | run A's 77% red sits beyond this row |
+
+Once the effective delay passes k / lambda (12.4 s at k 124 and 10 blocks/s), the DAG stops converging: every miner's own tip is heaviest in its own view, red climbs to two thirds, and the "reorg 0" rows are the absence of consensus, not its presence (run A's 321 tips). Through one hub relaying 12 blocks/s to 41 peers the effective delay is the hub's validation and relay time, which the fleet measures and this lane does not; the model says 77 percent red needs 30 s or more of it, approximate. The controller then reads the blue rate as a third of the true rate and eases, which widens the DAG further (section 4.2 attack 8). Lane 5 owns the fix; the attack bound is in 4.2.
+
+### 3.4 Finality weight over the adversary's share (simulated, `finality_horizon_results.md`, seeds 7 and 11; the table is inserted in section 3.5 from the run)
+
+### 3.5 Finality sweep results
+
+Condensed from `finality_horizon_results.md` (seeds 7 and 11; the full tables are there). A = the adversary's share.
+
+| sweep | 20% | 34% | 51% | 67% | 90% |
+|---|---|---|---|---|---|
+| R renter, signing: day it reaches 1/3 / 2/3 (sim; formula 10/A, 20/A) | never / never | 30.0 / never | 20.0 / never | 15.0 / 30.0 | 12.0 / 23.0 (formula 11.1 / 22.2; the dust effect of B) |
+| S silent set keeps mining, 6 h: locks while silent, first lock after resume | 100%, 0 min | 0%, 0 min (720 stalled) | 0%, 0 min | 0%, 0 min | 0%, 0 min; 0 conflicts in every row |
+| K bought keys worth A, buyer mines 30%: veto held (days) / stalls if silent (of 86,400) | never / 816 to 1,045 | day 1 to 6 / 36k to 42k | day 1 to 24 / 74k to 76k | day 1 to 26 / 79k to 80k | day 1 to 27 / 82k; share at day 30 is 30% in every row; 0 conflicts |
+| E poisoned eclipse, 20% pool, 2 h: conflicting locks (eclipsed side holds 20% + A) | 0 (40%) | 0 (54%) | 67 to 70 from minute 2 (71%) | 30 to 32 from minute 4 (87%) | not run: the attacker alone is over 2/3 |
+| P 50/50 partition with an equivocator, 150 min, v2 and v3: conflicting locks, first at | 0 | 21 to 70, minute 14 to 78 (the knife edge) | 299 to 300, minute 0 | 301, minute 0 | 293 to 300, minute 0; every pre-heal lock kept, 0 post-heal stalls, v3 = v2 in every cell |
+| C abrupt departure (stops mining and signing): first lock, days, v2 / v3 (analytic v2 30(1 - 1/(3A))) | 0.00 / 0.00 | 0.8 / 30.0 (0.6) | 10.5 / 30.0 (10.4) | 15.2 / 30.0 (15.1) | 18 to 19 / 30.0 (18.9); 0 conflicts |
+
+Readings. R: the formula holds to 0.1 day; 51 percent never reaches two thirds. S: from one third upward the pause is exactly the silence, free to the silent set. K: bought weight is worth its blocks and decays; a silent 51 percent buyer pauses finality for 24 days then loses the veto. E: an eclipse cannot produce a conflict below the one-third equivocator bound whatever the pool; above it the conflict is the equivocator's, not the eclipse's. P: the bound is one third in every view under both rules, as 3.11.2 says; at 34 percent the model's 2.2 percent outage makes it intermittent (21 to 70 of 300 indices). C: under v2 the pause after a departure ends when the survivors fill two thirds of the sliding table; under v3 (the live rule since 135,200) on day 30 whatever the share; on the devnet's 2-hour window those days are minutes: 2 h after the last lock under v3, which for tonight's 18:39:40Z lock is about 20:40Z (approximate, if the departed boxes hold over a third of the frozen table and do not return).
+
+### 3.6 Signalling (arithmetic, `signalling_results.md`)
+
+| fact | value |
+|---|---|
+| noise on a one-day window share at p = 0.95 | 0.07 points; a 94.5% fleet never flips, a 95.1% fleet flips on day one (P 0.91) |
+| 6% holdout rent per day at 1 / 10 / 100 / 1,000 GH/s | USD 18 / 179 / 1,792 / 17,923 (it earns 6% of the subsidy meanwhile) |
+| forced flip, 95% of one day's blue blocks (19 N for 24 h) | USD 5,335 at 1 GH/s, 53k at 10, 534k at 100, 5.3M at 1 TH/s; the market could not supply a TH/s on 6 Oct |
+| signal then defect | the defector's blocks fail PoW under the new program and are refused; cost falls on it alone |
+
+### 3.7 Cost of every attack (arithmetic, `cost_results.md`, excerpt; the full table has 12 rows x 4 network sizes)
+
+| attack | share, duration | rent at 1 GH/s | at 100 GH/s | at 1 TH/s | subsidy earned meanwhile (IGN) |
+|---|---|---|---|---|---|
+| win the lock-latency race (90 s) | 51%, 90 s | USD 0.3 | USD 30 | USD 304 | 1k |
+| 12-h double spend during a pause or the first 30 days | 51%, 12 h | USD 146 | USD 15k | USD 146k | 559k |
+| orphan an hour beyond merge depth during a pause | 51%, 1.5 h | USD 18 | USD 2k | USD 18k | 70k |
+| the veto, 1/3 of weight | 51%, 20 d | USD 6k | USD 585k | USD 5.8M | 22M |
+| lock alone, 2/3 of weight | 67%, 30 d | USD 17k | USD 1.7M | USD 17.1M | 44M |
+| long-range private DAG over the window (cold start) | 51%, 30 d | USD 9k | USD 877k | USD 8.8M | 34M |
+| hold a pause once the veto is held | 0 marginal | 0 | 0 | 0 | keeps earning |
+| take the hands or the 8 aggregators down | 0 hash | DoS cost only | | | |
+| fake proof records as a block producer | 0 extra hash | 0 | 0 | 0 | up to the whole 20% pool |
+
+At the rental-market equilibrium (hash joins until rent equals subsidy: 39, 156 and 780 GH/s at USD 0.005, 0.02 and 0.10) the veto nets about 48 percent of 20 days of the chain's subsidy and locking alone about 33 percent of 30 days; the 12-hour pause-time double spend costs about 12.5 hours of subsidy.
+
+## 4. The attacks, by layer: what each achieves, the defence, the bound, the price
+
+The hash shares H run 20, 34, 51, 67, 90 percent in every table; "rent" is A/(1 - A) x N x hours x USD 11.7 and the four network sizes are 1, 10, 100, 1,000 GH/s.
+
+### 4.1 GHOSTDAG ordering
+
+| attack | what it achieves (sim) | defence | bound | rent (1 GH/s to 1 TH/s) | earns |
+|---|---|---|---|---|---|
+| Selfish mining on the DAG (release when about to lose, lead 6) | blue share equals hash share within 0.3 points at every H (`ghostdag_results_1bps.md` section 3): honest blocks are merged, not orphaned, so there is no relative gain; max reorg 1 to 3 chain blocks | GHOSTDAG merges parallel blocks; a red block pays the merger | 0 gain; the attacker's reds are its loss | 0 extra | nothing |
+| Withholding to reorder (double spend) | 20%: the last k blocks, 5 to 15% of attempts; 34%: 30 to 60 s, 40%; 45 to 51%: the whole hold, 70 to 85%, 32 to 46 chain blocks at 90 s; 67%+: every attempt | the lock: a candidate tip must pass through every certified checkpoint (spec 03 F1); the checkpoint block locks 63 to 93 s after it is mined | reorg depth = the lock latency, 90 to 120 s (spec 3.11.3), whatever H under 2/3 of weight; credit on the lock only (P17's four states) | 90 s at 51%: USD 0.3 / 3 / 30 / 304 | a deposit credited BEFORE the lock, which no conforming wallet does |
+| Sustained red-flooding of honest blocks (repeat 60-s withholds) | 45 to 51%: honest blocks 25 to 28% red, honest subsidy to the attacker, weight share 48 to 56%, chain reorganising every minute | the lock bounds each hold to under 63 s (the first checkpoint inside the hold locks by then); W2 counts blues | weight ceiling about 56% at 51% of hash, 77% at 67% (approx., 3.1): a 51% miner never reaches 2/3 | the ordinary cost of 51% | about a quarter of honest subsidy while it lasts |
+| Balance attack (keep two honest halves balanced) | needs network control, not hash: harness s3 and the redteam show a partition under merge depth heals to one chain (`redteam-2026-10-04.md` rows 2, 3) | merge depth 3,600 s merges the sides; beyond it, blue work and finality decide | one chain within merge depth; beyond it the 3.7 item 9 fork (section 4.3 finality) | 0 hash | nothing without a partition tool |
+| k-cluster poisoning (make honest blocks red) | the same as red-flooding: only a withholder can be in an honest block's anticone without being in its past; share bound as above | k = 18 at 1 bps (Kaspa's table, delay bound 5 s) | at d = 5 s a 34% withholder turns 29% of honest blocks red in a 30-s window (sim) | as 51% | redirected subsidy at 45%+ only |
+| Timestamp games on ordering | none on GHOSTDAG (order is by blue work and hash); on the clocks see 4.2 | 10-s future tolerance, parent minus 10 s (spec 02 2.3) | past-median time can run at most 10 s ahead of real time: nothing against a 30-day window | 0 | nothing |
+| Merge-depth games (release a chain forked over 3,600 s ago) | honest blocks of the hour become unmergeable and are abandoned if the released chain is heavier: the 229-block shape of 6 Oct (CLAUDE.md 6 Oct rules) | F1: a chain missing a certified checkpoint is not a candidate; any lock inside the hour kills it | only during a pause or the first 30 days; depth then bounded by the finality depth, 12 h | 1.5 h at 51%: USD 18 / 183 / 2k / 18k | an hour of honest subsidy orphaned, none gained |
+| Red-block flooding (publish blocks on stale parents) | the attacker's blocks are red, pay the honest merger, carry no weight; honest blues unaffected | W2, the red rule | pure loss to the attacker | | nothing |
+
+### 4.2 The difficulty rule: the seven recorded ways and the ones to add
+
+The seven of `sim/difficulty/attacks/README.md` and `results.md`, read not re-derived (Igneum rule v2 with the 4 October clock and floor):
+
+| # | way | recorded bound | status |
+|---|---|---|---|
+| 1 | pool hopping (10 to 100% of the base, 24 h) | +1.5% blocks per hash at most, 0.7 points over Kaspa's rule; a 60-s dwell makes the 50 and 100% hoppers lose 1.7 to 4.0% | PASS under 5%, open by the letter |
+| 2 | pulsed rental (50x for 10 min hourly) | weight per hash 0.26 (Kaspa's rule 0.98): a pulse buys no weight; the base's blocks per hash fall 36% in the hour after | PASS (M14, F14 closed with the finality run: the renter never reaches a third) |
+| 3 | timestamp stretching (30 and 50% forger, earliest, latest, alternating) | +0.4 to +1.1% drift after an hour (worst seed +2.7%), difficulty ratio 1.00, worst gap 10 s; on 3 igneumd nodes a 50% forger moved nothing (0.82 to 0.88 blocks/s, 0 rejected) | FIXED (M23); before the fix the chain ran at a fifth of its rate at 9.9x difficulty |
+| 4 | short-lane oscillation (25% square wave every 120 blocks) | std 0.160 against 0.045 steady, 12% above the attacker's own square wave; the oscillator earns 1.4% less | FAIL by the letter, no past-only controller can pass, no change |
+| 5 | epoch games (hold dodger, hold flooders) | 0.0%, +0.7%, +0.3% (worst +2.4%) | PASS |
+| 6 | polluted window (10x joins and leaves at the lane switch) | settles 292 to 334 s, worst gap 17 s | PASS (Kaspa's rule 2,910 to 3,540 s) |
+| 7 | block flood (85 blocks/s of PoW-less input) | the target stops at 2^128 after about 2,630 blocks, no panic | FIXED (floor) |
+
+Ways not in the seven, with the bound this lane gives:
+
+| # | way | model | bound | who gains |
+|---|---|---|---|---|
+| 8 | Red-share gaming: a withholder turns honest blocks red, the estimator counts blue work only (spec 02 2.3 "what this section does not do"), the controller eases | the 60-s rows of 3.1: the blue rate read is 0.86 of true at 20%, 0.76 at 34%, 0.79 at 45%, 0.80 at 51%, 0.86 at 67% | the ease is at most 1/(blue share) - 1: 16 to 32% more blocks per real second for everyone (emission above schedule by the same factor, spec 02 2.5); no relative gain to the attacker beyond 4.1's redirected subsidy; the attacker's own reds cap it | nobody relatively; everyone's emission runs 16 to 32% fast while it lasts |
+| 9 | The star collapse (run A): effective delay past k / lambda, red to 67 to 77%, the controller reads a third of the rate and eases, the DAG widens | 3.3's table | a positive feedback with no attacker: the controller must read total work or the fleet must not be a star; lane 5 owns the rule, the fleet lib the topology | an attacker who can slow the hub (DoS) gets the collapse for free |
+| 10 | Clock trust after a pruning-proof sync: a header whose selected parent has no stored clock starts from the raw stamp (difficulty-2026-10-03.md section 11, Limits) | not measured | at most one window of bias after a sync; a forger needs to be the first blocks a syncing node sees | a stretcher against fresh nodes only |
+| 11 | Partition retarget: each side retargets to its share within 657 s (the 50x step-down figure), so each side keeps 1 block/s; at the heal the heavier side's targets rule and the lighter side's blocks carry less work | spec 02 2.3 measured steps; `finality_v2.py` +daa | consistent by construction; the minority's blocks merge red under merge depth | nobody |
+
+### 4.3 The finality weight
+
+| attack | what it achieves | defence | bound (sim) | rent | earns |
+|---|---|---|---|---|---|
+| Sybil (many keys) | nothing: weight is blue blocks, every draw is by weight (W6; harness s2: dust keys zero weight, sortition by weight PASS, F17 fixed) | W2, W3, F17 | 0 | 0 | 0 |
+| Weight capture by mining (the renter) | share (t/30) A: 1/3 on day 10/A, 2/3 on day 20/A, never under A = 2/3 (`results_v2.md` B to 0.04 points; sweep R) | the 30-day flat window | 51%: veto day 20, 2/3 never while honest miners stay; 67%: day 15 and 30; 90%: 11.1 and 22.2 | 20 d at 51%: USD 6k / 58k / 585k / 5.8M | 22M IGN of subsidy |
+| Weight capture by buying or renting keys | a bought key is worth its blocks and decays as the window slides: share = A (1 - t/30) + r t/30 (3.11.5; `results_v2.md` K; sweep K); keys worth 40% hold the veto from day 1 to 20, worth 20% never | W2 decay, W5 succession, equivocation strips a sold key the seller still holds | max(A, r) for a day, r after 30 days; a silent 40% buyer stalls 63k of 86k checkpoints then loses the veto on day 19 to 20 | the price of pools' keys, not hash | a pause of up to 20 days |
+| Long-range (private DAG from an old point) | a cold node with no certificate follows the heavier DAG (F5) | F5's trusted certificate (designed, not implemented); the client-shipped checkpoint (proposal 11) | needs more blue work than the public DAG over the window: 30 days of >50% | USD 9k / 88k / 877k / 8.8M | 34M IGN |
+| Eclipse (poisoned pool) | 0 conflicting locks, 0 locks on the eclipsed side at 1, 2, 4 h for a 34% attacker and a 20% pool (`results_v2.md` L3, F2); sweep E extends it to 51 and 67% | the 2/3-of-total floor binds whatever the presence window says (3.3.2) | the eclipsed side must hold 2/3 of total: a 47%+ attacker plus a 20% pool (sweep E, see 3.5) | the eclipse plus the weight | nothing under the bound |
+| Partition with an equivocator | 0 conflicts to 33%, conflicts from 34% (`results_v2.md` H at 2/3; M5 under v3); sweep P at 51, 67, 90 | two certificates need 4/3 of weight in signatures (3.11.2) | 1/3 of weight, every view, any partition length under one window since the last lock (v3) | the 20-day veto | two finalised histories across a partition, each side's deposits |
+| Equivocation alone | strips the key for 30 days, no coin penalty (F6); detection by any carrier block, agreed by every node (F23 fixed) | 3.6 | costs the attacker its weight, nothing else | | nothing |
+| The 30-day window edges | (a) the frozen table expires at exactly day 30.00 after the last lock: both sides of a long split lock alone at once (M3); (b) a departed set leaves the sliding table over 30 days and the frozen one at the cliff (M4); (c) the first 30 days have no lock at all (3.8, `min_daa` = window); (d) new honest cohorts are under-weighted t/60 for 30 days (G) | stated in 3.7 items 2, 7, 9 | a partition or departure longer than one window ends with the fork of 3.7 item 9 and a manual F5 | | |
+| The pause as a liveness attack | a silent set at or above 1/3 pauses every lock for as long as it stays silent (J, L1; sweep S) at zero marginal cost since it keeps earning | none in the rule; the node reports the pause; exchange guidance treats the chain as PoW with a 12-h depth | the 1/3 veto: 20 days at 51% | 0 once held | nothing directly; enables the 12-h PoW double spend below |
+| What an attacker can do during a pause | plain proof of work: reorg up to the finality depth 43,200 DAA (12 h) with a heavier chain; beyond merge depth the honest blocks are abandoned (the 229-block shape); every certified checkpoint before the pause still binds | finality depth; the exchange guidance of 3.9 | 12 h of >50% hash | USD 146 / 1.5k / 15k / 146k | a deposit credited at the PoW depth; 559k IGN of subsidy as a miner |
+| Tonight's departure (confirmed, lane 3 `finality-and-weight.md` 3.1 and 4.1) | 20 keys holding 42.7% of the frozen table stopped mining 18:27 to 18:30Z (the rehearsal job); the last lock 6842 at 18:39:40Z; 6843 determined with 53.1% of total signing and never locked; under v2 the stayers' sliding share crossed two thirds at 6912 (19:14:53Z, a 35-min pause) but Q5 held them at 57.3% of the frozen table; expected first lock when that table expires at DAA 216,402, about 20:40Z, or when 9.4 points of departed keys return. Sweep C agrees: 51% leaving pauses 10.5 days (v2) or 30.0 days (v3) at mainnet scale; at tonight's 46.9% (observer's view) 7.7 days under v2, 30 under v3 (lane 3, 4.1) | by design (F21: the project lead chose the pause over the fork); a view cannot tell a departure from a partition | anything over 1/3 of the table leaving at once pauses finality for a window | 0 | 0; what an attacker can do during it is the row above |
+
+### 4.4 Miner signalling (P2)
+
+| game | model | bound | price |
+|---|---|---|---|
+| 6% holdout blocks a change for ever | the window share has 0.07 points of noise: 94.9% flips with P 0.09, 94.5% never | the floor N6 ends it; nothing else does | USD 18 a day at 1 GH/s, 17.9k at 1 TH/s; the holdout earns 6% of subsidy meanwhile, so net about zero at equilibrium |
+| What the floor does | converts the signal into a fixed height at N6: the hazard of 6 October (DAA 198,000 crossed while boxes were still updating: two-sided chain, 229-block reorg) returns for every node not on the object at N6 | the floor should sit no nearer than a week past the publish on a network miners run, and the stale-box list (P1 pass rule) must be empty before it | |
+| Signal then defect | a defector's blocks fail PoW under the new program and are refused (`check_header_version` then PoW); a pool with stale workers loses their blocks | the defector pays, nobody else | |
+| The one-day window | a renter at 19 N for 24 h with a patched byte forces the flip; for v4 it hurts nobody (the signalling binary is the v4 binary), for a later object it forks every node still on the old one | the share of the fleet not yet on the object at the forced flip | USD 5.3k at 1 GH/s to 5.3M at 1 TH/s, and the market could not supply a TH/s |
+| Proposed | require 95% on each of 7 consecutive daily windows (7x the renter's bill, a week of visible share), keep the one-day tally for display | | 3 hours |
+
+### 4.5 Proof records
+
+| attack | today's rule | bound | who gains |
+|---|---|---|---|
+| Forgery of state | the native-execution veto: a record whose statement differs from the node's own execution of that segment along the carrying block's chain is ignored (7.2 item 5, P11 fixed) | state is never moved by a record; a soundness bug is a light-client problem (P7), a job-output problem for the precompile (D6, contained by R12) | nobody |
+| Forgery of the proof (correct statement, random bytes) | NOT checked in consensus (7.7 item 4, 7.8 item 8); the first valid record per shard or segment carried pays | a producer at share H takes at least H of the 20% pool and, since its fake rides its next block while an honest proof takes 9 to 11 s on a 5090 (P9 table), most shards outside the 10-s exclusive window; inside it only the H of slots it is assigned | any block producer: 11,636 IGN/h at 51% of a pool paying 22,815 IGN/h |
+| Withholding (an assignee sits on its window) | after 10 DAA s anyone may prove and be paid; a segment unproven after 600 DAA pays nothing (7.8 item 7); mandatory proofs off | one window of latency per absent assignee; nothing waits | nobody |
+| Grief (flood the pool with invalid records) | 6,000 invalid records: 0 accepted, 0.31 to 0.68 ms each, node up (redteam row 10) | CPU per record | nobody |
+| The aggregator naming itself as every prover | provers committed in the proof's public values and checked (P12 fixed) | 0 | nobody |
+| Record ordering race | the first valid record carried wins: a producer can front-run honest provers' records in its own block (the forgery line) | fixed by consensus verification (rank 1), then by aggregator sortition (O-7.3) | |
+
+### 4.6 The execution layer
+
+| attack | today's rule | bound | note |
+|---|---|---|---|
+| Snapshot poisoning over p2p | `p2p_snapshot_gate` refuses tip 0, below the restart, at or below the own tip, and anything while the executor runs unblocked; a snapshot whose state at the restart block differs from `exec_restart_state_root` is refused (release-0.3.14.md) | a wrong state ABOVE the restart block is not detectable by the node: headers commit to no execution root (spec 02 2.6: blocks carry transactions only), certificates sign (chain id, index, block hash) only (C2) | the poisoned node's native statement then disagrees with every carried record, it pays nothing and sees every honest record as invalid; the signal exists but nothing reads it as an alarm |
+| The pin | `exec_restart_number / hash / state_root / trust_daa` arrive by the signed manifest on the devnet (the reddit review's admin-key finding, 1.6 item 3); on mainnet no manifest exists, so the pin is genesis-only or absent | a release-key holder sets execution state on the devnet; on mainnet the same power would need the 95% signal | disclose (the review's key-powers table) |
+| Deep reorg never resets execution | a reorg reloads the newest persisted generation at or below the fork (ring 2,048) else blocks loudly and asks a peer; never a genesis replay on a pruned node (0.3.14) | under active finality a reorg is bounded by the lock (90 to 120 s), far inside 2,048; during a pause the 12-h depth is 43,200 blocks, 21x the ring, so a pause-time deep reorg blocks every pruned executor until a peer's snapshot arrives, which is the poisoning path above | the ring should reach the finality depth (proposal 12) |
+| Duplicate and nonce games, pgas bombs, malformed bodies | exec-attacks suite 96 of 97 checks, every executed block under B_p, an over-budget transaction refused at the mempool with the pgas metered (redteam row 28) | per block B_p of proving gas and B_e of execution gas; an aborted transaction pays | |
+
+### 4.7 Peer to peer
+
+| attack | what it achieves | defence | bound | price |
+|---|---|---|---|---|
+| Eclipse of one node | feed it a private chain: its difficulty eases to the attacker's hash within about 11 min (the 50x step-down takes 657 s), so 1% of the network's hash produces a plausible 1 block/s chain for the victim within 20 min; it sees no certificates and reports `finality_active` false | the exchange guidance (treat a pause as PoW with a 12-h depth); a node that holds locks will not follow a chain missing them (F1) | a victim that follows its node's finality flag loses nothing credited under a lock; one that credits at a PoW depth is Kaspa's or Monero's eclipse victim | a few IPs |
+| Eclipse or outage of the hands | tonight's pause was NOT this (lane 3, 3.1: locks 6824 to 6842 formed with the hub down, the zero-aggregator fallback carried 64 of 251 certificates); the attack stands in general: a fleet that peers only through two hosts is a star, and a star with its centre down is a partition into n islands, each under 2/3, finality paused until the heal; longer than merge depth (60 min) it is the 3.7 item 9 fork | aggregator fallback (any node aggregates after 15 DAA s); votes ride in blocks (Q2); neither crosses a dead hub | pause for the outage; proposal 4 (peer floor) removes the star | 0 hash: the DoS of two hosts |
+| Crash a pruned node from any peer (main, 19:57Z: the hub, a pruned 0.3.14 node, panicked on an `unwrap` over `KeyNotFound` at the devnet genesis when a re-joining peer synced below its retention; `consensus/src/processes/sync/mod.rs:87`, fix in 0.3.15) | any peer takes any pruned node down by asking for history it does not hold | none today; the rule: no `unwrap` or `expect` on a path a peer's request reaches, a `SyncManagerError` instead, and a fuzz of the sync request space (locator low/high, antipast low/high, missing-bodies high, pruning-point anticone) against a pruned node as the CI gate | zero hash; one request per node; repeated, a liveness attack on every pruned node (every mainnet node prunes) | 0 |
+| Eclipse of the seeds (3 Hetzner DNS seeds) | a fresh node bootstraps into attacker peers and, with no trusted certificate, follows their DAG (F5 cold start) | none implemented; F5 designed | the long-range attack's price (4.3) for the DAG, zero for the eclipse | USD 9k to 8.8M for the DAG |
+| Handshake refusal (params digest) | a peer with another digest is refused before any flow (X18); an attacker cannot make honest peers refuse each other | it is a defence; the only cost is the digest-less allowance still open on devnet and simnet | 0 | |
+| The p2p snapshot path | 4.6 | | | |
+| Memory under flood | 269 to 780 MB per minute of flood on 0.3.4 (M30), bounded since 0.3.5 to the record window plus pruning depth | | | |
+
+Siblings of the 19:57Z crash class, read-only grep of the fork (main checkout `vendor/igneum-node`, 6 Oct) for `unwrap` and `expect` on paths a peer's request reaches. The sync manager's entry points are called from the request flows (`protocol/flows/src/v10/request_headers.rs`, `request_antipast.rs`, `request_block_locator.rs`, `request_ibd_chain_block_locator.rs`, `request_pruning_point_and_anticone.rs`, `request_block_bodies.rs`) through `consensus/src/consensus/mod.rs:1341` (`get_hashes_between`), `:1624` (`get_missing_block_body_hashes`), `:1647` (`create_block_locator_from_pruning_point`):
+
+| file:line | what panics | reached by |
+|---|---|---|
+| `consensus/src/processes/sync/mod.rs:87, 88` | `ghostdag_store.get_blue_score(low/high).unwrap()`: the hub's crash when `low` is below retention | `antipast_hashes_between` from a peer's antipast or headers request |
+| `sync/mod.rs:94` | `ghostdag_store.get_data(current).unwrap()` on the forward chain walk | the same |
+| `sync/mod.rs:117` | `find_highest_common_chain_block(...).expect("because of the pruning rules such block has to exist")`: false once the peer's `low` is pruned | the same |
+| `sync/mod.rs:123, 125, 130, 135, 148` | pruning point, selected-chain tip and index lookups `.unwrap()` | `create_virtual_selected_chain_block_locator` from a peer's locator request |
+| `sync/mod.rs:162, 172, 182, 194, 196` | status lookups `.unwrap()` along a peer-named `high` | `get_missing_block_body_hashes` from a peer's IBD blocks request |
+| `sync/mod.rs:211, 221` | `get_blue_score(low)`, `get_compact_data(current)` `.unwrap()` | `create_block_locator_from_pruning_point` from a peer's IBD chain locator request |
+| `protocol/flows/src/v10/request_headers.rs:98` | `hashes.last().expect("caller ensured ...")` | the headers request flow, after `get_hashes_between` |
+| `protocol/flows/src/ibd/negotiate.rs:40, 47, 112, 166, 172` | `locator_hashes.last().unwrap()` on a locator the PEER sent | the IBD negotiation (the syncee side, a hostile syncer) |
+| `protocol/flows/src/ibd/flow.rs:307, 361, 436, 440, 700, 717` | `async_get_header(...).unwrap()`, `async_validate_pruning_points(...).unwrap()`, `pruning_points.last()/first().unwrap()` on peer-sent pruning points | IBD against a hostile syncer |
+
+The rest of the hits in those files are test code (`request_headers.rs:199 to 222`, `request_pruning_point_and_anticone.rs:197 to 280`, `trusted_data.rs:81 to 149`, `proof.rs:144 to 230`) or channel sends. Bound of the class: zero hash per crash; every pruned node on the network can be taken down by one request each, repeatedly, which during a pause or the first month is a liveness attack on the chain itself and at any time on the hands. Proposal (lane 1, 4 hours): convert the sync manager's unwraps to `SyncManagerError` variants, make the negotiation and IBD paths return `ProtocolError` on a missing block, and add `tools/ci` fuzz `sync-request-fuzz` that drives the six request flows with random and below-retention hashes against a pruned fast-time node and fails on any exit; gate: 10,000 requests, node alive, 0 panics.
+
+### 4.8 The harness run (real DAG, 0.3.14 binary, rule v3, fast time)
+
+`tools/finality-attacks/run.mjs s6 --fast-time`, SCALE 0.4, rule v3 forced on (`finality_v3_activation_daa` 0), the 0.3.14 Mac binary (`vendor/igneum-node/target-0314/release/igneumd`, built 6 Oct 17:56) and its `igneum-miner` (`vmine`), ports 29800 to 29812, suffix 980, `/tmp/igneum-horizon-fin`, run lock held 19:53 to 20:03Z. The 0.3.14 node refuses the master copy of `infra/fast-time/override-60x.json` (unknown fields `program_class_v4_activation_daa` and `program_class_v4_signal_window_daa`, which only the `ca3-v4-node` binary knows), so the harness ran from a scratch copy of `tools/finality-attacks` and `infra/fast-time` with those two fields removed; nothing tracked was edited. Six vmine voters at 6 blocks/s in all (3 per side), window 120 DAA, warm 168 s, split 60 s, heal 60 s.
+
+| scenario | measured | reading |
+|---|---|---|
+| A, 3/3 split | window DAA ~1,019 at the cut, 6 voters, max locked 34 on both sides; new locks during the 60-s split 12, the first on each side at 30 s; locks resumed after the heal; conflicting certificates 9 / 11 after the heal | the recorded F21 shape at this scale: a side at 3 blocks/s advances its own DAA 3 a second, so the frozen table (one window of 120 DAA after the last common lock) expires 30 to 40 s into the split and the sliding table then locks each side alone, exactly as the redteam's row 18 (36 and 49 s) and the simulator's M3; the harness criterion (`zero new locks`) asserts more than the rule promises past one window |
+| B, 4/2 split | window DAA ~900, max locked 30; the 4 side locked 30 to 38 (first at 33 s), the 2 side stayed at 30 for the split; conflicting certificates 1 / 12 after the heal | the 4 side holds 4/6 = two thirds of the frozen table and locks as Q3 allows (inclusive); the 2 side locks nothing while the table stands; the post-heal conflicts are the 2 side's late solo locks after its own table expired (redteam row 18 saw the same 4 late locks), the F21 residual |
+
+What it adds to the sim: the real DAG at fast time reproduces the frozen-table bound within its own DAA clock and the v2 control's shape (`split50-v2.md`: 3 solo locks at 126 s, 4 conflicts); nothing contradicts the simulator. What it does not test: a withholding attacker (vmine has no withhold flag) and any run longer than the window.
+
+## 5. Model: the formulas and what holds
+
+### 5.1 The ordering race against the lock
+
+Inputs: lambda blocks/s (measured 1 on the devnet), k = 18 (cited, Kaspa's table), d (measured 0.34 to 2.3 s), checkpoint interval I = 30 blue score and depth d_cp = 60 (designed), lock latency after determination median 2.5 s, p99 4.6 s (simulated, `results_v2.md` A), 0.8 to 1.08 s on the test network (measured). A deposit at time 0 lies under the checkpoint block mined at most 30 s later, which locks at most 30 + 60 + 3 = 93 s later. An attacker forking before the deposit must win the race before that lock (after it, F1 excludes its chain). From 3.1: wins need H >= 1/2 for any T, or T < k H / ((1 - 2H) lambda) below it; at T = 90 s that is H >= 0.45 with Poisson noise (70 to 85 percent at 45 to 51 percent, 5 to 10 percent at 34 percent). Hence: a majority reorders at most the lock latency; a 34 percent miner at most about 60 s; a 20 percent miner at most the last k blocks. The honest guidance (credit on the lock) makes every case a zero.
+
+### 5.2 Weight
+
+share_renter(t) = (t/30) A (verified, B, sweep R); share_buyer(t) = A (1 - t/30) + r t/30 (verified, K, sweep K); two certificates need 4/3 of total in signatures, so the equivocator bound is 1/3 in every view (3.11.2, H at 2/3, M5 under v3); a partition side's own table reaches 2/3 on day 30 (2/3 - s)/(1 - s) under v2 (L4) and never before day 30 under v3 (M2, M3); a departed share x pauses 30 (1 - 1/(3x)) days under v2 and 30 days under v3 (L2, M4, sweep C). The weight ceiling of a withholder is 3.1's w(H) with the 60-s rows.
+
+### 5.3 Rent
+
+cost = A/(1 - A) x N x hours x 11.7 USD (measured price); earned = 0.8 x A x 31.688 x 3600 x hours IGN (spec 02 2.5); N_eq = 0.8 x 31.688 x 3600 x P / 11.7 GH/s at IGN price P (assumption inputs). At N_eq the veto nets about 0.48 x 480 h of subsidy and locking alone 0.33 x 720 h.
+
+### 5.4 What holds, what breaks
+
+| claim | holds | evidence |
+|---|---|---|
+| No hash share under 2/3 of weight reverses a certified checkpoint | yes | 3.11.2, H and M5 (0 conflicts under 1/3 in every seed), the DAG sim (the race ends at the lock) |
+| 51% of hash never reaches 2/3 of weight while honest miners stay | yes, with margin: 56% ceiling under red-flooding (approx.), 51% honest | B, sweep R, 3.1 |
+| A majority cannot forge a proof the nodes re-execute | yes for state; NO for payment: the proof itself is not checked and the pool is capturable | spec 07 7.7 item 4, 7.8 item 8 |
+| A rule changes only at 95% signalling | yes for the signal path; the floor is a fixed height that can cross with stale nodes | P2, signalling.py |
+| A majority loses more than it earns | for the veto and the lock-alone, yes (net 48% and 33% of the period's subsidy at equilibrium); for the pause-time 12-h double spend and the fake records, NO | cost_model.py |
+| The pause is safe | safe for history, costly for liveness, and buyable at zero hash by taking the hub down | tonight; sweep S and C |
+
+## 6. Ranked proposals: the defences we do not have
+
+| rank | proposal | evidence | model | hours | consequence per tier | gate |
+|---|---|---|---|---|---|---|
+| 1 | Verify the aggregated segment proof in consensus (a record whose proof does not verify against the pinned aggregator key is invalid; the per-shard v0 record stays payout-only until then and is capped at the exclusive window) | 4.5: a producer captures H to most of the 20% pool with fake records; P21 "stated, not fixed" | capture = pool x (H inside the window + most outside); verification cost per record = SP1 light verifier (P3: 1.3 to 2.1 s setup, then per-proof ms, to measure) x 2 records per block | 8 to 12 | home miner (8/12/16 GB): its honest shard records are paid, not front-run; rig and pool: proving income real; prover: the market is honest; holder: 20% of emission is not a miner's bonus; rollup customer: a paid proof is a verified proof; node: +verify CPU per block | fast-time: a correct-statement fake record is refused, an honest one paid, p95 block validation under 50 ms with 2 records |
+| 2 | Weight-gated deep fork choice: among candidate tips, a tip whose fork point is older than D (say 10 min of past-median time) is a candidate only if the blocks on it since the fork were produced by keys holding at least 1/3 of the weight table at the fork point (a function of the block's past, deterministic) | 4.3 "during a pause": a renter with fresh keys double-spends at the 12-h depth for USD 146 at 1 GH/s; the DAG sim's 90-s race | rented hash has zero weight for 10 days (W2), so its deep chain is never a candidate; honest partition sides over 1/3 keep today's behaviour; a side under 1/3 cannot reorg the other past D, which is the desired outcome | 10 to 16 (virtual processor candidate filter + weight-at-fork from the finality tables) | home miner and rig: nothing changes; pool: nothing; holder and exchange: a pause-time or first-month deep reorg needs 1/3 of weight, 20 days in public, not 12 h of rent; node: one table lookup per deep candidate; rollup customer: PoW-depth credits become weight-backed | fast-time: a fresh-key renter at 3x the hash forking 2 min back is refused for ever; a 40%-weight honest side forking 2 min back is adopted |
+| 3 | Vote-or-burn: a block whose producer key has participation under 0.5 over the presence window in the block's own past burns 20% of its producer share | 4.3 "the pause as a liveness attack": zero marginal cost | the attacker's pause then costs 0.2 x A x 0.8 x 114,077 IGN/h: 7,757 IGN/h at 34% (USD 155/h at 0.02); partition-safe because the test is the block's own past (a side's keys vote their own checkpoints); honest outages (2.2%) leave participation above 0.9 | 6 to 8 (coinbase rule + the finality manager's participation count at the block) | home miner under dust: not a voter, counts 1, unaffected; a miner whose node never revealed a vote key: loses 20% until it does (an incentive); pool: votes or pays; holder: silent weight stops being free | fast-time: a 40% silent set's coinbases shrink 20%, honest ones do not, both sides of a 3/3 split unaffected |
+| 4 | Peer floor and mesh for the fleet and the node: the fleet lib dials at least 3 other boxes beside the hands; the node logs an alarm and the app shows it when outbound peers fall under 3 or when no vote has been received for 2 checkpoints | run A's star (321 tips, 77% red); the hands as the fleet's only peers (lane 3 refuted this as tonight's cause; the shape stands) | a star with its hub down is n islands; with 3 extra peers per box the graph stays connected under any single failure | 2 to 4 (fleet lib) + 3 (node alarm) | every tier: finality stays up when a hand dies; home miner: sees "no peers" instead of a silent pause | Devnet 2: kill the hub for 10 min, locks continue; the alarm fires on the known-bad case and not on the known-good |
+| 5 | Vote over the execution root too: the vote signs (chain id, index, block hash, post_root of the checkpoint's segment); a certificate then pins the state, snapshots are checked against the last certificate, and the poisoned-snapshot node cannot join the quorum | 4.6 snapshot poisoning: a wrong state above the pin is undetectable | every voter is a full node that executes natively (spec 07); the cost is exec lag added to lock latency (the executor runs seconds behind the tip) | 8 to 12 | holder and exchange: a certified checkpoint carries its state; rollup customer and light client: one object says ordered and executed; node: a divergent executor is visible at once; miner: a vote waits for its executor (lock latency + exec lag) | fast-time: three nodes agree; a fourth with a tampered snapshot votes a different root and is outvoted, alarm raised; lock latency rises by the measured exec lag only |
+| 6 | Signalling over 7 consecutive daily windows, floor no nearer than 7 days past the publish, the stale-box list empty before the floor | 4.4 | the renter's bill x7; a week of visible share | 3 | pool and rig: a week more before a class change; home miner: a week to update | fast-time gate: 6 of 7 days at 95% does not flip; 7 does |
+| 7 | Detector-driven alarms: the share-pattern detector (counter-asic-3-status, Detector row) and the finality flag feed one node-side `security_alert` (correlated group over 1/3 of a day's blue blocks; pause; conflict) that wallets and the explorer show as "confirm at 12 h" | 4.3, the exchange guidance exists only as text | an alarm when any single party crosses the veto line in public, which the rule says takes 10 to 20 days | 4 to 6 | holder and exchange: a number to act on; home miner: the app shows the chain's state | fast-time: a 34% silent set raises the alarm within 5 min; the honest run never does |
+| 8 | The signed departure (LEAVE: lane 3's rank 1, `finality-and-weight.md` section 6; a `leave` item carried in blocks, the key out of every denominator one hour after inclusion, sent by the app and the fleet library on a clean stop) and F5's trusted certificate implemented | tonight's departure (lane 3, 3.1): 42.7% left in three minutes and the frozen table held finality for a window; a view cannot tell a departure from a partition, so no automatic rule re-enables locks without reopening L4/M3 | stripping lowers total; an attacker stripping stolen honest keys is K's bound (needs keys worth 1 - a/(2/3)); lane 3's sim T: first lock 1 h after a 34 to 50% departure, 0 conflicts in every partition row | 6 (lane 3) + 4 | pool and rig: an orderly stop keeps finality up for everyone; holder: no 30-day pause after a planned fleet move; node: the operator's certificate for the disorderly case | fast-time: 45% of weight stops with exits, locks continue; without, the pause |
+| 9 | Client-shipped checkpoint: each release carries the latest certified checkpoint (index, hash) and voter-table digest; a cold node refuses a DAG missing it (assumevalid's shape) | 4.3 long-range, 4.7 seeds | the long-range attack must then out-work the public DAG since the release, not since the window | 3 | every tier: a fresh install cannot be bootstrapped onto a private DAG; trust is the release key already trusted for the binary | a cold node offered only a private heavier DAG refuses it |
+| 10 | Exec generations spaced geometrically to the finality depth (1, 2, 4 ... 43,200 blocks: about 16 generations) so a pause-time deep reorg never needs a peer's snapshot | 4.6 | 16 x state size on disk (about 1.8 GB today, measured 114.8 MB per snapshot) | 3 | node operator: disk; every tier: no blocked executor after a deep reorg | fast-time: a 5,000-block reorg re-executes from a generation, no snapshot request |
+| 11 | Checkpoint anchoring to proof records (the certified checkpoint's hash as a public value of the next aggregated proof; the verifier checks the certificate natively) | asked by the brief | buys light clients and bridges one object (certified and proven); changes nothing a full node does, since the proof chain already commits to block hashes and a reorg already needs new proofs; in-circuit BLS is 40+ hours and not worth it | 6 (public-value commit) | rollup customer and light client: one verification; others: nothing | a light client verifies a proof carrying a certificate hash and the certificate |
+| 12 | Prover attestations as a second finality leg (a lock also needs proof records from a quorum over the checkpoint) | asked by the brief | NOT recommended: provers are the miners (same vote keys), so no new party; proving covers 2.4% of blocks today and the pool is "not active" (reddit review 1.4), so every lock would wait on proofs and finality would pause constantly; what it would add (execution validity) rank 5 gives without the liveness cost | 8 if ever | every tier: lock latency becomes proof latency (20 to 60 s target, minutes today) | only once coverage is 100% and rank 1 is in |
+| 13 | Time-locked (vesting) weight | asked by the brief | NOT recommended: a bought key transfers vested weight, so K's bound is unchanged; honest new cohorts wait N days longer than G's 20 | 3 if ever | new home miners: later vote; attacker: unchanged | none |
+| 14 | Any rule that keeps finality on after a large honest set leaves abruptly without a signed exit | asked by the brief | NOT possible safely: departure and partition are the same observation in one view; re-enabling locks under the frozen table reopens the double lock of L4 and M3 at the same day; the honest options are rank 8 (exit) and a shorter frozen expiry, which trades the partition bound one for one | 0 | | |
+
+One paragraph each on the two that matter most.
+
+Rank 1, proof verification in consensus. Today a record is paid on a signature and a statement match; the statement is computable by every node, so a producer writes the right statement, random proof bytes and its own payout address into its own coinbase and is paid the shard or the aggregator share. The exclusive window limits it to the slots it is assigned (by weight, so H of them) for 10 DAA s; after that the first record carried wins, and the producer's block is first. The only thing that stops it is a verified proof as a condition of payment. SP1's light verifier exists (`igneum-prove-host --mode verify-segment`); the cost to measure is the per-proof verification time on the validation path, and if it is over a few tens of milliseconds the aggregated record (2 per block) is the one to verify in consensus while the per-shard record stays payout-only inside the window. Consequence per tier: an 8 GB home miner that proves on the patched prover is paid for what it proves; a pool's proving income is real; a holder's 20 percent of emission goes to proofs.
+
+Rank 2, weight-gated deep fork choice. Finality's whole argument is that weight cannot be rented; fork choice today ignores weight, so during a pause or the first month a renter's heavier chain reorganises up to 12 hours. The rule: a candidate tip whose fork point is more than D of past-median time behind the node's selected tip is a candidate only if the keys that produced its chain blocks since the fork hold at least a third of the weight table at the fork block (the same `voters_at` the finality manager computes). It is deterministic (a function of the DAG), it leaves every reorg under D to GHOSTDAG as now, it leaves honest partition sides over a third exactly as now, and it makes the pause-time double spend cost the veto (20 days in public) instead of 12 hours of rent. What it costs: a side of a partition under a third of weight that is heavier by work cannot reorganise the other side past D at the heal, which is the outcome the certificate would have produced anyway; and a cold node with no table yet follows F5. Gate: the fast-time run in the table.
+
+## 7. Open questions and what could not be run
+
+| item | why |
+|---|---|
+| The star's effective relay delay | the model needs the hub's measured relay time at 12 blocks/s to 41 peers; main's run A rows give the outcome (77% red, reorg 55) and this lane gives the curve (3.3); the fleet measures the delay |
+| The finality sweep's R row at 90% | the renter's 9x hash makes 905 honest keys fall under dust in the model (B's dust effect), so the simulated share overshoots the formula by 1 to 2 points, as B recorded |
+| Proof verification time on the validation path | not measured; P3 gives setup only; rank 1's hours depend on it |
+| Weight-gated fork choice against the C4 certificate-driven reorg | a certificate over a deep block must still force the reorg (3.5); the gate must exempt certified tips; not modelled |
+| The DAG simulator has equal work per block, no difficulty, no bodies | a withholder also controls its blocks' timestamps and the attack-side difficulty; the 10-s rules bound the clocks, the DAA lane bounds the rest |
+| igneumd harness | one s6 run on the 0.3.14 Mac binary (4.8); the node-side numbers for the other scenarios are the recorded runs cited |
+| The live pause's end | lane 3's arithmetic (4.1): the frozen table of lock 6842 expires at DAA 216,402, about 20:40Z, unless departed keys holding 9.4 points of it return first; main reads the chain |
+
+## 8. Summary paragraph
+
+The ordering layer and the lock together bound a hash majority to the lock latency: the DAG simulator shows 45 to 51 percent winning the 90-second race 70 to 85 percent of the time and nothing beyond it, 34 percent winning only inside 60 s, 20 percent only the last k blocks; weight cannot be rented faster than 10 days per third, bought keys decay as the window slides, no equivocator under a third splits finality in any view, and the costs in rented hash are USD 6k to 5.8M for the veto and 17k to 17M to lock alone across 1 GH/s to 1 TH/s, of which the attacker earns back half as subsidy. Three things a hash majority does buy today: the proving pool, by writing fake records into its own blocks (the one line that earns more than it costs); a 12-hour proof-of-work double spend during a pause or the first month for USD 146 to 146k; and a pause needs no attacker at all, since a planned 43 percent departure caused tonight's and the frozen table holds it for a window (lane 3, 3.1). The three findings as numbered lines:
+
+1. A 51 percent withholder reorganises at most the lock latency (90 to 120 s; 32 to 46 chain blocks at 1 block/s, 80 percent success), reaches a weight ceiling of about 56 percent by red-flooding (never two thirds), and costs the honest side a quarter of its subsidy while it lasts (`ghostdag_sim.py`).
+2. The veto costs 20 days of 51 percent in public (USD 6k at 1 GH/s, 5.8M at 1 TH/s, half earned back) and then holds a pause for free; a pause-time 12-hour double spend costs USD 146 to 146k (`cost_model.py`, `finality_horizon.py` S and C); weight-gated deep fork choice (rank 2) makes it cost the veto instead.
+3. Any block producer captures from H to most of the 20 percent proving pool today with correct-statement fake records (11,636 IGN an hour at 51 percent), because consensus does not verify the proof (spec 07 7.7 item 4); proof verification in consensus is rank 1.
+
+## 9. Files and how to run them
+
+| file | run |
+|---|---|
+| `sim/horizon/consensus-security/ghostdag_sim.py` | `with-lock.sh run nice -n 19 python3 sim/horizon/consensus-security/ghostdag_sim.py --seeds 20 --out ghostdag_results_1bps.md`; `--bps 10 --k 124 --delays 0.35,0.67,2 --holds 10,30,60,90 --warm 60 --post 15` for the 10 bps grid |
+| `sim/horizon/consensus-security/finality_horizon.py` | `with-lock.sh run nice -n 19 python3 sim/horizon/consensus-security/finality_horizon.py --out finality_horizon_results.md` (imports `sim/finality_v2.py`) |
+| `sim/horizon/consensus-security/signalling.py` | `python3 sim/horizon/consensus-security/signalling.py --out signalling_results.md` |
+| `sim/horizon/consensus-security/cost_model.py` | `python3 sim/horizon/consensus-security/cost_model.py --out cost_results.md` |
+| results | `ghostdag_results_1bps.md` and `.json`, `ghostdag_results_10bps.md` and `.json`, `finality_horizon_results.md`, `signalling_results.md`, `cost_results.md` in the same directory |
diff --git a/docs/analysis/horizon/economy-and-utility.md b/docs/analysis/horizon/economy-and-utility.md
new file mode 100644
index 000000000..2796106f7
--- /dev/null
+++ b/docs/analysis/horizon/economy-and-utility.md
@@ -0,0 +1,356 @@
+# Horizon lane 4: economy and utility. What IGN is for beyond gas, the 80/20 under stress, ten years without a treasury, the dev fee, miner signalling, and what the other chains got wrong
+
+6 October 2026, evening UK. Lane 4 of the Horizon programme. Worktree `/Users/joshm/Projects/igneum-wt-horizon` (branch `horizon`). Every model is in `sim/horizon/economy-and-utility/` with a README line per script; every dollar figure names its inputs and its label. Nothing here is a price prediction, an offer to sell anything, or a change to any consensus parameter.
+
+**Read:** `docs/spec/05-fees-and-economics.md` (whole, 5.10 and 5.11 included), `02-consensus.md` 2.5, `07-execution.md` (7.2 to 7.8); `docs/design/payment-routes.md`, `developer-adoption.md` (2a to 2c), `execution-layer.md` (4.3 to 6), `miner-dev-fee.md`; `docs/plans/funding.md` 1 to 5; `docs/analysis/security-budget.md`, `economy-2026-10-04.md`, `base-fee-floor.md`, `prover-floor.md`, `prover-tiers-real-cards.md`; `sim/economy/` (README, sim.py, security_budget.py, results.md, levers.md); `docs/commercial/prover-customer-brief.md`; `docs/fud-ledger.md` E1 to E8 (E9 to E18 are cross-referenced from the spec and the status updates, the file carries E1 to E8 as sections), P6, P8, P9, P10, P14, P22, D1 to D6, C9, C10, G8, L6, L7; `site/litepaper.html` Building, Economics, Governance; `docs/bench-log.md` lines 1226 (the dev fee measured), 1910 (proving v1), 2349 (aggregation cost), 2582 (rental cost of hash); `docs/plans/counter-asic-3-node.md` section 6 (the P2 rule) and `counter-asic-3-status.md` P2; `docs/analysis/horizon/frontier.md` section 0 (the ranking) and 3.1, 3.2, 3.5, 3.6, 3.11 to 3.13; lane 3's `sim/horizon/consensus-security/cost_results.md` and `signalling_results.md`; `vendor/rusty-kaspa` (main checkout) `consensus/core/src/config/params.rs` and `consensus/src/processes/coinbase.rs`. `block-rate-devnet2.md` was still a template (RUN_A, RUN_B empty) at 21:50 UK; nothing here depends on it.
+
+---
+
+## 1. Method
+
+| Question | What was run | Where |
+|---|---|---|
+| Task 1, utility beyond gas | Arithmetic: the measured eleven-card table turned into a cost per v1 shard and per billion cycles (alone, beside the miner, rented), against the published prices; five demand curves on a low/base/high grid at three IGN prices | `utility.py`, output `utility_out.md` |
+| Task 2, the 80/20 and the burn under stress | `sim/economy/sim.py` copied and changed in six named places (the measured cards, the renter farm, the 25-s window and 120-s timeout, a FIFO backlog with the 600-s record window, burn per day, the new scenarios), 8 scenarios x 3 seeds, 30 days, plus two sensitivity runs; under the main checkout's run lock at nice 19 on the M5 Max, about 18 s a run | `stress.py`, outputs `results/stress_main.md`, `stress_busy.md`, `stress_elecfarm.md` |
+| Task 3, ten years without a treasury | Arithmetic: `sim/economy/security_budget.py` extended with the lane's fee grid, the pool line, the sustained hash at the measured card economics and the rented 34% weight attack at USD 281 per GH/s-day | `security_budget_10y.py` |
+| Task 4, the dev fee | Arithmetic from `miner-dev-fee.md` and the bench-log measurement | `devfee.py` |
+| Task 5, signalling | Arithmetic on the three thresholds; lane 3's `signalling.py` covers the 95-percent rule and is cross-referenced, not re-run | `signal_game.py` |
+| Task 6, the other chains | Reading: `vendor/rusty-kaspa` for Kaspa; everything else named and marked approximate where no clone exists | this file, section 5.6 |
+
+No node harness was started and no measurement was taken: the fleet, the PCs and the devnet were on the class v4 rehearsal and the Devnet 2 block-rate runs. Every hardware number is the fleet's from 6 October (`prover-tiers-real-cards.md`) or the bench-log's.
+
+---
+
+## 2. Evidence
+
+### 2.1 Measured inputs
+
+| Input | Value | Source |
+|---|---|---|
+| v1 shard | 4,717,439 cycles; the adopted `S_p` is 30,000 pgas = 30 M cycles, so the fixture is 16% of a full shard | `prover-tiers-real-cards.md`; spec 5.11 |
+| Shard alone, compressed, patched server 2^26 | 3060 14.4 s, 3080 7.1, 3090 14.9, 4060 Ti 16 GB 11.6, 4060 Ti 8 GB 9.6, 4060 18.4, 4070 12.1, 4090 6.3, 5070 4.8, 5090 6.3, A5000 8.3 | `prover-tiers-real-cards.md` table |
+| Shard beside the running miner (compressed) | 3060 37.5 s, 3080 25.6, 3090 19.9, 4060 Ti 16 GB 34.6, 4070 27.3, 4090 26.1, 5070 37.2, 5090 10.7, A5000 34.6; the 8 GB cards core-only 22.1 to 26.3 | same |
+| Hash and watts mining (rented boxes) | 3060 23.78 MH/s at 103.7 W ... 5090 98.48 at 258.2 (the table) | same; the 4060's 0.0 W reading replaced by its 115 W rating, approximate |
+| The miner's loss while its card proves | 5090: 124.72 to 119.74 MH/s, 4.0%, on empty shards; 8 GB cards 17.1 to 16.0 MH/s, about 6%, on v1 shards | bench-log, proving v1 step 1; `prover-tiers-real-cards.md` 8 GB row |
+| Watts mining and proving at once | 5090: 328.6 W max against 258 W mining (about 70 W more) | bench-log proving v1 step 1; the fleet row |
+| Rental price of hash | USD 0.0117 per MH/s-hour (1,748 MH/s for USD 20.44 an hour, 38 pods); USD 11.7 per GH/s-hour, USD 281 per GH/s-day; the market gave 0 of 20 pods asked at the TH/s scale | bench-log line 2582 |
+| Aggregation per block on a mining 5090 | 9.6 to 9.7 s (2.1 s with the card to itself) | bench-log line 2349 |
+| Dev fee on a test network | 9 fee blocks in 785 (1.15%; the template rule is exact at 1 in 100) | bench-log line 1226 |
+| Proof record sizes | 274 bytes per shard record, 586 per segment record, 1,272,897 bytes per compressed proof | spec 7.7, 7.8; bench-log proving v1 |
+
+### 2.2 Published prices (all approximate or secondary; none cloned)
+
+| Supplier | USD per billion cycles | Label |
+|---|---|---|
+| Boundless (RISC Zero), Base | about 0.21 median lock price, trailing day 4 Oct 2026 | `developer-adoption.md` 2b, secondary summary; approximate |
+| Succinct Prover Network | 0.046 base plus up to 0.46 per billion PGU in the quickstart's EXAMPLE request at USD 0.23 per PROVE | `developer-adoption.md` 2b; example parameters, not a market price |
+| RISC Zero Bonsai | never published a per-cycle list price; paid proving moved to Boundless in 2025 | not cloned, approximate |
+| Ethereum L1 block at the ethproofs cluster cost, Sep 2026 | sub-half-cent a block; at 0.2 to 1.3 B cycles a block (14 to 44 SP1 cycles per gas, measured on Igneum) about 0.004 to 0.025 | `frontier.md` 2.6 (secondary); `base-fee-floor.md` |
+| A Taiko-class rollup per batch | taiko-mono not cloned; Taiko Alethia proves batches through its own prover market with SGX and ZK tiers (SP1 and RISC0 accepted); the ZK proof's cost per batch is of the order of the ethproofs figure times the batch's cycles: cents to tens of cents | approximate |
+
+### 2.3 What the earlier models said that this lane re-tests
+
+| Claim | Source | What changed tonight |
+|---|---|---|
+| Hybrid loses the whole hash for the proof's duration plus a 5-s swap | `sim/economy/sim.py` TPROVE + 2 x swap | Measured: the miner loses 4 to 6% while the card proves; the lottery wins the card's arbitration and the proof is 3 to 4x slower instead |
+| A 3060 proves a shard in 20 s (target) | ledger P1 | Measured: 14.4 s alone, 37.5 s beside the miner, on the 4.7 M-cycle fixture; a full 30 M-cycle shard is unmeasured on it (linear scaling would say 92 s alone, approximate) |
+| 10-s window, 300-s claim timeout | spec 7.2 as designed | 25 s and 120 s decided 6 Oct 2026 (ledger P9) |
+| The farm pays electricity at USD 0.05 | `sim/economy/sim.py` | The farm is a renter at the measured USD 0.0117 per MH/s-hour |
+
+---
+
+## 3. Model
+
+### 3.1 The supply side of proving
+
+For a card with hash `h` (MH/s), network hash `N` (MH/s), shard time `t` (s), watts `w` and price `P` (USD per IGN):
+
+```
+cost_alone  = w t / 3.6e6 x 0.10                      electricity
+            + (h / N) x 0.8 x 31.688 x t x P          the subsidy the card forgoes while it proves
+cost_beside = 70 t / 3.6e6 x 0.10 + (h / N) x 0.8 x 31.688 x t x 0.04 x P     (4% measured on the 5090, approximate elsewhere)
+cost_rented = h x 0.0117 / 3600 x t                   the renter's cost; no subsidy, no electricity
+per billion cycles: x 1e9 / 4,717,439
+```
+
+### 3.2 Demand curves at the adopted floors (spec 5.11; design 6 for jobs)
+
+```
+transfer           = 21,000 x 100 gwei + 300 x 10,000 gwei = 0.0051 IGN, burned; tip 21,000 x 1 gwei, 80% miners+provers, 20% burned (no registered frame)
+batch post 100 KB  = (21,000 + 16 x 100,000) x 100 gwei + 300 x 10,000 gwei = 0.1651 IGN, burned
+job of C cycles    = C / 1000 x 10,000 gwei x 1.5 = 15 IGN per billion cycles; 90% provers, 10% burned once IGN-settled
+payments cap       = B_p / 300 = 400 transfers a block = 34.6 M a day; EIP-1559 target half of that, 17.3 M a day
+records            = 274 x shards + 586 / 8 bytes a block in the coinbase; 1,272,897 bytes per proof on p2p
+```
+
+### 3.3 Sustainability
+
+```
+sustained hash (GH/s) = miners' USD per day / (electricity + capital per GH/s-day)
+   electricity = 258.2 W / 98.48 MH/s x 24 / 1000 x USD 0.10 = USD 6.29 per GH/s-day (measured card, the brief's price)
+   capital     = USD 2,000 / 98.48 MH/s / 1,095.75 days = USD 18.53 per GH/s-day (approximate)
+   total USD 24.8 per GH/s-day; the rental price is USD 281, 11.3x
+34% weight attack = rent 1.04 N for 20 days (lane 3's rule, spec 3 headline) = 1.04 x N x 281 x 20; the attacker earns 51% of the producer subsidy meanwhile
+```
+
+### 3.4 The stress simulator
+
+`sim/economy/sim.py` with: eleven card classes (`HASH`, `PMINE`, `TPROVE` alone, `TBESIDE`, `CANHYB` from the measured table; `MIX` an approximate installed-base shape), hybrid capacity `cards x T / TBESIDE` and hybrid hash `1 - 0.04 x duty`, operator 0 a renter (`cost = cards x MH/s x 0.0117 x hours`), window 25 s, timeout 120 s, a FIFO of open shards with a 600-s expiry (expired credit stranded), burn per day = 10% of IGN-settled external jobs plus `blocks x content_shards x 0.51 IGN` (paid content 0.03 shards a block at launch traffic), one proving shard a block (measured on the devnet). The thresholds T1 to T5 are the 4 October definitions (hash under 50% of the pre-event mean for an hour; backlog over 600 s; a growing backlog; a day under 90% within 60 s; a 10-point proving-share swing).
+
+---
+
+## 4. Results, task by task
+
+### 4.1 Task 1: what IGN is for beyond gas
+
+#### (a) Proving as a sellable service
+
+| Card | Alone, 1 GH/s | Alone, 100 GH/s | Alone, 1 TH/s | Beside its miner, 100 GH/s | Rented (no subsidy) | Electricity only |
+|---|---|---|---|---|---|---|
+| 3060 12 GB | 36.81 | 0.377 | 0.046 | 0.054 | 0.236 | 0.0088 |
+| 4070 12 GB | 32.50 | 0.331 | 0.039 | 0.041 | 0.208 | 0.0065 |
+| 4060 Ti 16 GB | 21.92 | 0.224 | 0.027 | 0.040 | 0.140 | 0.0049 |
+| 4090 24 GB | 35.38 | 0.361 | 0.042 | 0.069 | 0.227 | 0.0068 |
+| 5090 32 GB | 66.69 | 0.676 | 0.076 | 0.050 | 0.427 | 0.0096 |
+| Boundless median (approximate) | 0.21 | 0.21 | 0.21 | 0.21 | 0.21 | |
+| ethproofs L1 cluster (approximate) | 0.004 to 0.025 | | | | | |
+
+USD per billion cycles at USD 0.02 per IGN (`utility_out.md` 1.3; the IGN price moves only the opportunity term).
+
+What it says. Electricity is under a cent per billion cycles on every card; "marginal cost close to power" (ledger C10's wording) is true of the electricity and false of the price, because the price a prover must charge is the subsidy it forgoes, and that scales as 1 / network hash. At today's devnet scale (1.16 GH/s) a prover that stops mining to prove must charge 100 to 300x Boundless's median. At 100 GH/s a card proving alone is at 1 to 3x Boundless; a hybrid card beside its miner is at 0.2 to 0.4x (USD 0.04 to 0.08), which is the only row where Igneum undercuts the market, and it rests on the 4% figure measured on one card. The renter's row, USD 0.13 to 0.43, is the floor below which no rented prover ever sells. The floor-priced job (15 IGN per billion cycles) is USD 0.075, 0.30 and 1.50 at the three prices: a third of Boundless at 0.005, 1.4x at 0.02, 7x at 0.10. The floor is denominated in IGN and the market in dollars, and the floor moves by a two-week 60% vote (spec 5.11): it cannot follow a price. Frontier 3.11 (rank 15) already shows the market is three to four orders under year-1 emission; this lane adds that at the adopted floor Igneum overprices the market at any IGN price above about USD 0.014.
+
+| Tier | Consequence |
+|---|---|
+| Home 8 GB | proves alone only (compressed does not fit beside the miner); its price is the alone row: competitive only above about 300 GH/s of network hash |
+| Home 12 GB | mines and proves on headless Linux (37.5 s beside on the 3060, 27.3 s on the 4070); competitive beside its miner at 100 GH/s; a full 30 M-cycle shard beside the miner is unmeasured (about 3 min by linear scaling, approximate, outside the 120-s claim timeout) |
+| Home 16 GB | the cheapest beside-row (USD 0.040 per billion at 100 GH/s) |
+| Home 24 or 32 GB | the 5090 is the cheapest prover per billion beside its miner above 100 GH/s and the dearest alone (its subsidy is the largest) |
+| Rig | eight 4090s beside their miners: USD 0.07 per billion at 100 GH/s; 8 x 26.1 s per shard, so a rig delivers a 30 M-cycle shard in about 21 s with all eight on one shard (approximate; SP1 proves one shard per server) |
+| Pool user | nothing: the pool's provers carry the proofs |
+| Prover | its quote is a function of network hash it does not control; publish the price as `h/N x subsidy x t`, never as a number |
+| Holder | job demand buys IGN only after the proof bridge (phase two); at launch customers pay on their own chain, so (a) is zero IGN demand at launch |
+| Rollup customer | the customer brief should carry the band above and the condition (network hash) rather than any price |
+
+#### (b) Rollup settlement, (c) bridges, (d) payments, (e) storage
+
+Dollars per day to miners and provers (`utility_out.md` 3.3) and burn (3.4), base scenario, USD 0.02 per IGN:
+
+| Period | External jobs to provers, USD (own chain) | Rollups settling here, IGN to provers | Bridges, IGN to provers | Payment tips, IGN | IGN flows in USD | Burn, IGN | Burn, % of daily emission |
+|---|---|---|---|---|---|---|---|
+| launch | 450 | 19,440 (1 rollup) | 3,038 (1 bridge) | 1.68 (100 k transfers) | 450 | 5,748 | 0.21% |
+| year 2 | 1,800 | 58,320 (3) | 9,112 (3) | 16.8 (1 M) | 1,349 | 23,316 | 0.85% |
+| year 5 | 9,000 | 194,400 (10) | 15,188 (5) | 168 (10 M) | 4,195 | 126,716 | 4.6% |
+| year 5 high | 90,000 | 972,000 (50) | 30,375 (10) | 290 (17.3 M, the target) | 20,058 | 711,481 | 26% |
+
+Low scenarios are a tenth to a fifth of these; the full grid at the three prices is in `utility_out.md`. Reading each curve:
+
+- **Rollups** are the only line that pays provers in IGN at scale: one rollup posting a batch a minute with a 1 B-cycle proof job pays 19,440 IGN a day at the floor, 3.6% of the daily pool. Ten of them in year 5 pay 194,400 IGN a day, 36% of the pool before the second halving and 142% of the pool after it. The condition is the floor price staying under the market's (above). The burn it causes: 10% of the job plus the batch's base fee, 2,398 IGN a day per rollup.
+- **Bridges** at 225 updates a day pay 3,038 IGN a day each; a tenth of a rollup. No bridge is official (spec 7.3), so the count is anyone's.
+- **Payments** cost USD 0.000026 to 0.00051 a transfer (the three prices). A transfer undercuts a 1 bps rail on any payment above USD 0.26 to 5.10 and a 10 bps rail above USD 0.03 to 0.51; a USD 100 payment pays 0.003 to 0.05 bps. The fee is flat in IGN, so payments give the coin burn and almost no income: 10 M transfers a day burn 51,042 IGN (1.9% of emission) and tip 168 IGN at the 1 gwei default. The proving dimension caps the chain at 34.6 M transfers a day and the fee leaves the floor above 17.3 M; above that the burn is set by willingness to pay and no model here knows it, so the year-5 high row is clamped at the target and says so.
+- **Storage.** Records are 347 bytes a block at one shard (1,025 at 3.5): 11 to 32 GB a year, USD 0.17 to 0.50 of disk per node per year (approximate HDD price), paid by whoever runs a node and by nobody else. Proof bytes (1.27 MB each) never enter a block; a node keeps the 600-block pool (about 3 GB at four shards a block) and a light client one proof. An archive of every proof would be 80 to 180 TB a year (USD 1,200 to 2,700 of HDD, approximate): a service someone sells, not a protocol cost. Frontier 3.16 (rank 9) is the research-dataset version of the same bytes.
+
+The honest total. In the base scenario all five uses together put USD 450 a day to miners and provers at launch and USD 4,200 in year 5 at 0.02, against USD 54,800 of daily emission in year 1 and 13,700 in year 5. Fees are 1.6% of security spend in year 1 and 48% in year 5 (`security_budget_10y_out.md`, base at 0.02), and most of the year-5 share is the external USD line, which is in dollars and does not move with the coin. Burn is 0.2% to 4.6% of daily emission in base scenarios. The Economics section's "part of every payment on Igneum is burned" is true and small: with the ramp's 37 M never minted, burn under 1% of emission a day leaves the cap's approach unchanged to the second decimal for years.
+
+### 4.2 Task 2: the 80/20 split and the burn under stress
+
+`results/stress_main.md`: 8 scenarios x 3 seeds, 30 days, the eleven measured cards, the farm (20% of hash, 925 to 1,016 5090s) a renter at USD 0.0117 per MH/s-hour, window 25 s, timeout 120 s, one proving shard a block, USD 0.012 at t = 0. The model's network is about 700 GH/s of potential hash (15,000 cards), so every number below is at that scale; the renter's rent against the subsidy is the N_eq of lane 3 (`cost_results.md` section 3): 94 GH/s at USD 0.012.
+
+| Metric | a: baseline | p10: price x10 day 7 | pd10: price /10 day 7 | c: no external | x100: external x100 | cartel: top 10% of weight never proves | refuse: nobody proves days 10 to 20 | halving: 15.844 IGN a block |
+|---|---|---|---|---|---|---|---|---|
+| Hash min / pre-event (seed min) | 0.99 | 0.99 | 0.55 (0.49) | 0.99 | 0.91 | 0.99 | 0.99 | 0.98 |
+| Hash day 30 / pre-event | 1.00 | 1.25 | 0.74 | 1.00 | 0.97 | 1.01 | 0.99 | 1.00 |
+| T1 hours under 50% | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
+| Cards off, day 30 | 9% | 0% | 31% | 9% | 8% | 0% | 9% | 9% |
+| Cards proving / hybrid, day 30 | 6% / 58% | 6% / 66% | 14% / 44% | 6% / 48% | 10% / 55% | 6% / 57% | 6% / 76% | 4% / 58% |
+| Backlog max, shards; T2 age max, s | 0; 0 | 0; 0 | 0; 0 | 0; 0 | 0; 0 | 0; 0 | 766; 565 (capped by the 600-s expiry) | 0; 0 |
+| Blocks within 60 s, mean / T4 worst day | 1.00 / 1.00 | 1.00 / 1.00 | 1.00 / 1.00 | 1.00 / 1.00 | 1.00 / 1.00 | 1.00 / 1.00 | 0.67 / 0.00 | 1.00 / 1.00 |
+| T5 proving-share swing, points | 1.6 | 0.1 | 2.0 | 0.6 | 2.9 | 2.2 | 0.0 | 4.4 |
+| Burn, IGN a day (of which external) | 19,928 (18,606) | 6,758 (5,437) | 146,737 (145,415) | 1,322 (0) | 1,576,947 (1,575,623) | 16,954 (15,632) | 13,366 (12,044) | 17,247 (15,926) |
+| Burn, USD a day at the run's mean price | 214 | 578 | 506 | 15 | 15,535 | 218 | 148 | 224 |
+| Share of the 20% pool paid / stranded | 1.00 / 0 | 1.00 / 0 | 1.00 / 0 | 1.00 / 0 | 1.00 / 0 | 1.00 / 0 | 0.67 / 0.33 (182,387 IGN a day averaged; 547,570 a day during the refusal) | 1.00 / 0 |
+| Renter farm cards on at day 30; margin over rent | 0; -77% | 984; +114% | 0; -77% | 0; -76% | 54 (0 to 162); -6% | 984 (forced on); -79% | 0; -77% | 0; -88% |
+| Flags tripped (of 3 seeds) | none | none | none (T1 min 0.49 in one seed, under an hour) | none | none | none | T4 3/3 | none |
+
+Per card class, USD per card-day (every mode, off included) and the share of shards proven, baseline: 3060 1.30 (0%), 3080 3.09 (5%), 3090 2.69 (11%), 4060 Ti 16 GB 1.63 (4%), 4060 Ti 8 GB 2.03 (16%), 4060 0.85 (1%), 4070 1.96 (12%), 4090 3.86 (11%), 5070 3.36 (12%), 5090 3.95 (24%), A5000 3.30 (4%). The full tables are in `results/stress_main.md`.
+
+What holds and what breaks:
+
+1. **The 80/20 holds under every price and demand shock; the price is what moves hash.** T1 never trips. The /10 price shock is the closest: hash troughs at 55% of pre-event (49% in one seed for under an hour), 31% of cards go off (the 3060 and 4060 classes at median electricity and above), and the chain is at the T1 line with no backlog and every block proven inside 60 s. A x10 shock brings the renter farm on (margin +114%) and hash ends 25% up: rented hash arrives exactly when the subsidy per GH/s-day clears USD 281, which is lane 3's N_eq. The first halving at a flat price changes nothing at this price level (the same 9% off), because the cards that remain are above break-even at 0.013; a halving is a /2 price shock and the /10 row says where /2 would land between the two.
+2. **External demand x100 is the burn story and the renter story.** USD 200,000 a day of jobs at 10% burn is 1.58 M IGN a day burned, 58% of daily emission, at the run's price of about USD 0.01; and it brings 0 to 162 rented 5090s on at a -6% margin. Hash troughs at 91%: cards leave the lottery for jobs (the 4 October finding, scenario b), and the renter's cards arriving for jobs do not hash. The burn in that row is a transfer from customers to holders of 15,500 dollars a day; it is the only row where burn is material, and it needs IGN settlement, which is phase two.
+3. **A cartel of the top 10% of weight that never proves costs the chain nothing.** In this population the top 10% of weight is one operator, the 20% farm, so the row is a 20% cartel: with 8 draws by weight the chance that every assignee is the cartel's is 0.2^8, under three in a million, so almost every shard still finds an assignee and the rest go open after 25 s; every block is proven inside 60 s, the backlog is zero, and the cartel loses USD 6.77 per card-day (forced on, as a renter, to hold its weight). Sortition with 8 draws is why: the 4 October result (scenario e, 30%) stands with the measured cards.
+4. **A refusal by every prover is the one scenario that breaks a threshold, and what breaks is the pool, not the chain.** For ten days no block is proven (T4 0 on every refusal day), execution and finality do not wait (spec 5.3, ledger P9), and the backlog never passes 600 s because the record window expires the shards: 547,570 IGN a day of pool credit is stranded in the escrow, 5.5 M IGN over the ten days, and no rule returns it. When provers come back the queue is at most 600 s deep and clears in minutes; 76% of cards end in hybrid. The refusal's whole cost is the refusers' own income plus a silent supply reduction nobody voted for (proposal 2).
+5. **The window excludes the slow hybrids.** At 25 s a 3060 beside its miner (37.5 s on the small fixture), a 4060 Ti 16 GB (34.6), a 5070 (37.2) and an A5000 (34.6) cannot land an assignment and win only open races or prove alone; the 3060 class proves 0% of shards in every scenario, the 4060 1%. The 4060 Ti 8 GB proves 16% by proving alone at 9.6 s. The 4 October proposal (window = the fleet's 90th-percentile shard time plus a swap) would set it near 38 s on this fixture; on a full 30 M-cycle shard the number is unmeasured (proposal 8).
+6. **Burn at launch traffic is USD 15 to 220 a day**, 0.05% to 0.7% of emission; the base fee part is 1,322 IGN a day at 0.03 content shards a block. Everything above that is the external 10%, which does not exist until jobs settle in IGN.
+
+Sensitivities (`results/stress_busy.md`, `stress_elecfarm.md`, 2 seeds each). At 3 proving shards a block (the 4 October busy value, 3x the load) nothing changes in a, cartel or x100: backlog 0, every block inside 60 s, hash min 0.95 to 1.00; the refusal strands the same 33% of the pool with a queue of 2,265 shards at its deepest, and the renter farm comes on in x100 at 213 cards (181 to 244). With the farm on electricity at USD 0.05 instead of rent (the 4 October assumption) the baseline has 0% of cards off (the farm's 968 cards stay on) and the /10 shock takes 25% of cards off with hash troughing at 63% of pre-event and ending at 77%: the rent is what decides whether the 20% farm is on at all, and with it 20 points of hash at every price; the `renter farm margin` column of that file is undefined at zero rent and should be read as blank.
+
+| Tier | Consequence of the stress runs |
+|---|---|
+| Home 8 GB | proves alone and wins open races (16% of shards on the 4060 Ti 8 GB); the first class off in a /10 shock on expensive power |
+| Home 12 GB | the 3060 proves 0% at the 25-s window; the 4070 12% (27.3 s beside, loses the window, wins open races alone); first off in a price fall |
+| Home 16 GB | 4% of shards; stays on in every row but pd10 |
+| Home 24 or 32 GB | 11 to 24% of shards; hybrid is the dominant mode (58% of all cards); the last class off |
+| Rig | as the 24 GB card per card; a rented rig is off below N_eq and on above it (p10 row) |
+| Pool user | the pool's provers' share; unchanged by any row |
+| Prover | income is 20% of emission in every row but refuse, where the refusers strand it; the x100 row is the one where jobs pay more than the pool |
+| Holder | burn is 0.05 to 0.7% of emission a day at launch; 58% in the x100 row, phase two only |
+| Rollup customer | every job delivered in every row but refuse (67%) |
+| Node operator | the backlog never passes the 600-s record window because the window expires it |
+
+### 4.3 Task 3: no-treasury sustainability over ten years
+
+`security_budget_10y_out.md`. The brief's formula gives a sustained hash proportional to the miners' dollars and an attack cost proportional to that hash, so the ratio is a constant: a 20-day 34% weight attack rents 1.04 N at USD 281 per GH/s-day against an honest fleet that costs USD 24.8 per GH/s-day, 11.8x the honest fleet's 20-day cost, minus the 51% of subsidy the attacker earns back. The subsidy never falls under the attack cost in ratio terms; the halvings shrink both until the absolute number is small. The honest statement is the absolute net cost by year:
+
+| Year | Net cost of the 20-day veto, USD, at 0.005 | at 0.02 | at 0.10 | Sustained hash at 0.02, GH/s | Fees as % of total security spend, base at 0.02 |
+|---|---|---|---|---|---|
+| 1 | 2,375,000 | 9,501,000 | 47,506,000 | 1,699 | 1.6% |
+| 3 | 1,233,000 | 4,933,000 | 24,666,000 | 882 | 18.6% |
+| 5 | 617,000 | 2,467,000 | 12,334,000 | 441 | 48.3% |
+| 7 | 308,000 | 1,234,000 | 6,168,000 | 221 | 65.1% |
+| 9 | 154,000 | 617,000 | 3,085,000 | 110 | 78.9% |
+
+The veto's net cost drops under USD 1 M in year 5 at 0.005, year 9 at 0.02, and not within ten years at 0.10; under USD 100 k only after year 10 at 0.005. The rental market's supply, not its price, is the other bound (0 of 20 pods at the TH/s scale on 6 October), and it is not modelled. What the fees change: in the base scenario the proving-pool and job lines reach provers, not miners, and the brief's security line is miners' hash; of the 48% fee share in year 5, under 1% reaches miners (tips at 1 gwei). The chain's security budget after year 5 is the subsidy to miners, and nothing else in the design pays for hash. Frontier 3.1 (rank 7) redirects part of the subsidy to the pool during rental spikes and would lower the miners' line further; this lane's number for it is in 5.1.
+
+The audits. `funding.md` prices the first cryptanalysis at USD 80,000 to 160,000 and nothing prices the second, which a class or era change in year 3 would need. What the entity's own lines earn (every price an input):
+
+| Year | Price | Dev fee, 50% of hash on Ember | Entity's provers at 5% of the pool | Second cryptanalysis (USD 160 k) as % of the dev fee |
+|---|---|---|---|---|
+| 3 | 0.005 | 10,000 | 25,000 | 1,600% |
+| 3 | 0.02 | 40,000 | 100,000 | 400% |
+| 3 | 0.10 | 200,000 | 500,000 | 80% |
+
+The dev-fee row here uses 1% of the producer share (80% of emission), because the fee template moves only the `IGNA` payout and the pool is paid per record; `funding.md` section 4 took 1% of all rewards and overstates the ceiling by a quarter (48,000, 193,000 and 963,000 should read 38,520, 154,080 and 770,400). The honest options for the second audit, ranked:
+
+| Rank | Option | What it pays in year 3 at 0.02 | Why this rank |
+|---|---|---|---|
+| 1 | The entity's own provers (5% of the pool and a share of jobs) | USD 100,000 a year at 5% of the pool, more with jobs | Open-market income the design already names (spec 5.5); scales with the chain, no rule, no switch; the cost is running cards |
+| 2 | The Ember dev fee | USD 40,000 a year at 50% of hash on Ember | Exists and is measured; falls with every halving and with every miner who flips the switch; alone it funds a review every four years at 0.02 |
+| 3 | A user-paid review market: customers (rollups) co-fund the audit that protects their settlement, as a condition of their integration | unknown; a Taiko-class customer's whole annual proving spend is of the order of USD 100 k (frontier 3.11) | Honest and voluntary; the customer has the motive; it depends on having a customer |
+| 4 | Founders' mined coins (the litepaper's own answer for grants) | depends on hash share | Visible addresses; finite; the ledger's E2 and E8 live here |
+| 5 | A burn-funded bounty or review escrow | the base-fee burn at launch traffic is 51 to 20,578 IGN a day: USD 1 to 412 at 0.02 | Frontier 3.6 (rank 11, "watch") and its Monero attack: a burn redirect is a payee by rule, which is the switch spec 5.5 removed. The protocol cannot have it because it has no treasury, and that is the contradiction stated plainly: the no-treasury rule means the SECOND audit is paid by whoever earns in the open or it is not paid, and `funding.md` should say so in a row of its own |
+
+### 4.4 Task 4: the dev fee
+
+What it is (`miner-dev-fee.md`): one block template in 100, chosen by an exact counter (templates 99, 199, ...), is requested with the project's payout address in the coinbase extra data; the vote key and the UTXO address stay the user's, so a fee block still votes for the user and only the execution-layer payout moves. Default on; `--dev-fee 0`, the app's Settings switch or HiveOS `DEV_FEE=0` turns it off; the start line prints the state; `igneum-miner payouts` tags the dev address on the chain. Measured: 9 fee blocks in 785 on a test network, the miners' counters and both nodes agreeing (bench-log line 1226).
+
+What it pays (`devfee_out.md`): 1% of the producer share of emission times the share of hash on Ember with the fee on.
+
+| Year | Price | 20% keep it on | 50% | 100% | Home 4070 at 100 GH/s network, a month | Rig 8x 4090, a month |
+|---|---|---|---|---|---|---|
+| 1 | 0.005 | 7,704 | 19,260 | 38,520 | | |
+| 1 | 0.02 | 30,816 | 77,040 | 154,080 | USD 3.33 (6.6 blocks) | USD 55.74 (110 blocks) |
+| 1 | 0.10 | 154,080 | 385,200 | 770,400 | | |
+| 5 | 0.02 | 8,000 | 20,000 | 40,000 | | |
+
+What share would turn it off. Precedent (approximate, from memory): T-Rex 1%, lolMiner 0.7 to 1.5%, PhoenixMiner 0.65%, TeamRedMiner 0.75 to 2.5% and NBMiner 1 to 2% were not switchable, and together they held the large majority of Ethereum's GPU hash over the fee-free ethminer because they were faster; NiceHash is a marketplace that takes about 2% of the buyer's payment, not a dev fee; nobody measured an opt-out share because none offered one. Igneum's switch is one flag and the miner is open source, so the rational solo miner with any time at all turns it off; the pool operator decides for its members; the one-click app user keeps the default. A working estimate for planning: 20 to 50% of hash keeps it on, which is the devfee table's first two columns and USD 7,700 to 77,000 a year in year 1 at 0.005 to 0.02. This is a planning input, not a measurement, and the first month of the public testnet measures it from the chain (`payouts`).
+
+Is "optional" honest? Ledger E18's charge is "a protocol fee with better PR". Three facts answer it. It is not in the protocol: the chain pays whatever `IGNA` address the template names, and a block with the dev address is indistinguishable in consensus from a block paying any other address. It is switchable in one flag and the chain shows who paid (`payouts`). It is default-on, and defaults are what most users run, so "optional" describes the mechanism and "default-on, switchable" describes the behaviour. The public line should be the second: "1 block in 100 pays the project unless you turn it off". Two things to add to E18: the ceiling correction above, and the fact that the fee buys the project a visible address holding 1% of mined coins, which is the E5 critic's point restated as a holder consequence.
+
+| Tier | Consequence |
+|---|---|
+| Home 8 to 32 GB on Ember | 1% of blocks unless switched off; USD 2.34 to 13.13 a month at 0.02 and 100 GH/s network |
+| Rig | the same per card; a rig operator on HiveOS sets `DEV_FEE=0` once |
+| Pool user | the pool's choice: a pool on its own template software pays 0%; a pool on Ember pays 1% of its templates and passes it on or not |
+| Prover | untouched: the pool share is paid per record, never through a template |
+| Holder | one address accumulates up to 1% of producer emission; the project's incentive to keep Ember the fastest client is the fee |
+| Rollup customer | nothing |
+
+### 4.5 Task 5: miner-signalled parameters
+
+What genesis leaves to miners (spec 5.5, 5.9, 5.11): the base-fee floors `f_e` and `f_p`, the proving budget `B_p` (and with it `S_p`), set by a proposal at 60% of blue blocks over 1,209,600 DAA s (two weeks), the BIP 9 model. Upgrades (new code) need 90% (spec 5.7, window open, O-5.3). The P2 rule for a PoW class change needs 95% of blue blocks over a one-day window ending at each epoch's seed block, monotone, with a floor height as the backstop (`counter-asic-3-node.md` section 6: `CLASS_SIGNAL_THRESHOLD_BPS` 9,500, window 86,400 DAA, the fast-time gate green on three cases and its failed case). The documents disagree about the number: spec 5.7, CLAUDE.md's design paragraph and the litepaper's Governance section say 90% for upgrades; the P2 design and the Horizon preamble say 95% for class changes; the litepaper's Mining section says "a 90% miner signal turns one on". One sentence should carry all three (60 parameter, 90 upgrade, 95 class with a floor) or the three should become two.
+
+The game (`signal_game_out.md`; lane 3's `signalling_results.md` for the 95% rule):
+
+| Rule | Who can block | A 30% pool | Renter's cost to force at 100 GH/s | What ends a block |
+|---|---|---|---|---|
+| 60% over 14 days | over 40% of blue blocks | cannot block alone; needs 11 more points | USD 590,000 (1.5 N for 14 days) | the proposal fails; re-register |
+| 90% over 14 days | over 10% | blocks it | USD 3.5 M (9 N) | the proposal fails; re-register |
+| 95% over 1 day, floor | over 5% | blocks it | USD 534,000 (19 N for a day) | the floor height |
+
+A 6% holdout costs USD 18 a day at 1 GH/s and USD 1,800 at 100 GH/s on top of the subsidy it earns like anyone, so near zero (lane 3 section 2); it buys delay to the floor and nothing else. A 30% pool holds a permanent veto over upgrades at 90% and over class changes until the floor at 95%; the devnet's top three vote keys held 34.5% of blocks on 4 October (litepaper, Governance). Signal then defect is bounded by what is signalled: a PoW class defector loses its own blocks (its PoW fails, `check_header_version` then the PoW check); a consensus-rule defector forks itself and whoever trusts it; an execution-parameter defector produces VALID blocks with a different state (blocks carry no state claim, design 1.1), which is a silent state fork for that node unless the parameter is in the consensus digest that the handshake refuses (G12, X18): `Params.fees` is in the digest (spec 5.11), so today it is isolated rather than split, and any future miner-signalled execution parameter must enter the digest the same day or the defector is a quiet fork.
+
+What Bitcoin and Kaspa did. BIP 9: version bits, a 95% threshold of 2,016-block retarget periods, states DEFINED, STARTED, LOCKED_IN, ACTIVE, FAILED, a timeout; BIP 8 added a lock-in-on-timeout flag so a flag day ends a holdout (bips repository, bip-0009.mediawiki and bip-0008.mediawiki; not cloned, approximate). Kaspa's Crescendo (1 to 10 BPS) was a fixed DAA score, not a signal: `crescendo_activation: ForkActivation::new(110_165_000)` for mainnet and `88_657_000` for testnet, with `ForkActivation::is_active(daa)` as `current_daa_score >= self.0` (`vendor/rusty-kaspa/consensus/core/src/config/params.rs` lines 28 to 60, 648, 704, main checkout), and the coinbase keeps the activation score for ever to compute the subsidy month across it (`consensus/src/processes/coinbase.rs` lines 40 to 43, 238 to 253); `docs/crescendo-guide.md` tells miners to upgrade before the activation. The P2 rule is BIP 8 in shape: a signal path plus a flag day. Igneum's 6 October incident (DAA 198,000 crossed by a half-updated fleet) is the flag-day hazard, and P2's floor keeps it.
+
+What SHOULD be miner-signalled and is not, with the risk of each:
+
+| Parameter | Today | Should be | Risk if signalled | Risk if not |
+|---|---|---|---|---|
+| The block rate step (1 to 4 to 10 BPS) | a planned fork with its own test campaign, "as Kaspa's Crescendo" (spec 2.1) | a 90% upgrade signal with a floor, like P2: it is a consensus change crossed by a whole fleet | a 10% pool vetoes the step; a renter forces it a day early for USD 5.3 M at 1 TH/s | a fixed height on a half-updated fleet: the 229-block reorg of 6 October at mainnet scale |
+| The dataset growth step | automatic, genesis schedule (spec 1, 2 GiB doubling at years 4, 12, 28) | NOT signalled, by design: it is an anti-ASIC escalator and a chip-holding cartel would vote growth down. Allow a 60% signal to ACCELERATE only (monotone), never to delay | a 40% holdout blocks acceleration: no worse than today | none: the schedule runs |
+| The 80/20 lottery/proving split | fixed (spec 2.5) | a 60% parameter inside a hard band [10%, 30%] | 80% of the voters are the lottery; without the band they vote the pool to 0 and the provers go; with the band the worst case is 10% | the simulator says 20% is not load-bearing at launch traffic and 30% helps at 100 shards a block (economy-2026-10-04 5.3); fixed means a 90% upgrade to move it |
+| The base-fee floors and `B_p` | 60% over 14 days (spec 5.11) | a bounded per-block dial, Ethereum's gas-limit mechanism (frontier 3.5, rank 8): the dollar market moves faster than two weeks (4.1) | a 51% majority walks the dial to the bound in days; the bound and a cost curve are the defence | the job price is pinned in IGN while the market is in dollars; at 0.10 the floor is 7x Boundless and a two-week vote cannot follow it |
+| The job premium 1.5 and the external claim timeout 120 s (O-5.6) | design 6 constants | the same bounded dial | as above | a constant calibrated once on the phase 4 devnet |
+| The exclusive window 25 s | a consensus constant (P9) | a function of the fleet's measured shard-time distribution, published per era (economy-2026-10-04 proposal 1; frontier I3) | none: it reads a measurement | a 12 GB fleet whose shard time drifts past the window loses every assignment to the open race (the 4 October finding at 10 s) |
+
+### 4.6 Task 6: what Kaspa, Monero, Ethereum and the zk rollups did and got wrong
+
+| Area | Chain | What it did | Where | What went wrong, or what it costs | Igneum's rule | Avoids or repeats |
+|---|---|---|---|---|---|---|
+| Emission | Kaspa | A pre-deflationary phase at 500 KAS a block (`pre_deflationary_phase_base_subsidy: 50000000000`, `deflationary_phase_daa_score: 15778800 - 259200`), then the chromatic schedule: 426 monthly steps, each month's subsidy the previous times 2^(-1/12), from 440 KAS a block (`SUBSIDY_BY_MONTH_TABLE[0] = 44000000000`), halving every twelve months smoothly | `vendor/rusty-kaspa/consensus/core/src/config/params.rs` 631 to 638, 687 to 694; `consensus/src/processes/coinbase.rs` 22 to 25, 222 to 253, 280 | Steep and smooth: no halving-day cliff, but the subsidy fell 50% a year and the chain leaned on price appreciation it could not promise; the table is divided by BPS at Crescendo so the per-second rate is unchanged | 1 B a year halving every two years, in DAA seconds; a 30-day ramp; no tail (spec 2.5, 5.10) | Avoids the yearly rate (slower), repeats the cliff (a step, not a glide); E6 concedes it |
+| Emission | Monero | A tail emission of 0.6 XMR a block for ever after the main curve | monero repository `src/cryptonote_basic/cryptonote_basic_impl.cpp`, `get_block_reward` (not cloned, approximate) | Security paid for ever at about 0.9% a year inflation falling toward zero; the cost is a soft supply cap critics name | No tail; a review trigger that puts a tail to a 90% vote if proving revenue is under a fifth of the subsidy after year 5 (spec 5.10.3) | Repeats Bitcoin's bet, keeps Monero's door ajar by vote |
+| Emission and burn | Ethereum | EIP-1559: the base fee burned, the tip to the proposer; issuance by stake since the Merge, about 0.5 to 1% a year gross, net near zero when burn is high | ethereum/EIPs `EIPS/eip-1559.md`; ethereum/execution-specs `src/ethereum/london/fork.py` (`calculate_base_fee_per_gas`); not cloned, approximate | The burn removes the proposer's incentive to stuff blocks, at the cost that usage pays security nothing; proposers' income moved to tips and MEV | Both base fees burned, tip 80/20 to miners-provers and apps; the same trade-off, stated (security-budget.md section 5) | Repeats on purpose (E3 is the reason); the EIP-1559 step is copied (`next_base_fee`, denominator 8) |
+| Fee market | Ethereum | A base fee that cannot fall below 7 wei in practice and has no floor; the gas limit voted per block by proposers within 1/1,024 | execution-specs `fork.py`; geth `core/block_validator.go` VerifyGaslimit; approximate | A near-zero base fee when idle makes spam cheap; the gas-limit vote is the one continuous miner dial that worked for a decade | A floor per dimension (spec 5.11) calibrated for spam; `B_p` and the floors by a two-week 60% vote | Avoids the idle-spam gap; does not take the per-block dial (frontier 3.5 asks for it) |
+| Proving market | Aleo | Proof-of-succinct-work: provers compete on proofs for coinbase rewards; the fastest prover (GPUs, then FPGAs and ASICs) took the reward share | AleoNet/snarkOS and snarkVM (not cloned, approximate; CLAUDE.md "the Aleo lesson", ledger C9) | The proving reward centralised to the fastest hardware; small provers earned nothing | The lottery and the proving are separate; shards by sortition on 30-day weight, 8 assignees, 25 s, then open (spec 7.2) | Avoids the race for assigned shards; the open race after the window is where fast cards win beyond their weight (economy-2026-10-04 3.1 item 5) |
+| Proving market | Boundless (RISC Zero) | A reverse auction per request; provers post ZKC collateral; PoVW pays ZKC per cycle proven | docs.boundless.network/zkc/mining/overview and provers/performance-optimization (read, not cloned) | A token gate on supply and a stake that scales with work; the median price USD 0.21 per billion (approximate) | No bond for shards; a coin bond only on external jobs (O-5.6); frontier 3.2 (rank 2) replaces even that with work-stake | Avoids the token gate for internal proving; repeats a bond for jobs |
+| Proving market | Succinct | A real-time auction settled in PROVE; provers stake PROVE to bid | docs.succinct.xyz/docs/provers (read, not cloned; ledger C10) | The same gate; example prices, no public market price | As above; prices in dollars settled in the token (spec 5.4) | Avoids the gate; repeats "settled in our token" once IGN settlement starts |
+| Governance | Monero | Scheduled hard forks (six-monthly, now 9 to 12 monthly), decided by the core team and the community off-chain | getmonero.org and the monero repository's release history (approximate) | Works because the community trusts a small team; the schedule itself is a central clock | No scheduled human releases; automatic escalators at genesis; 90% (or 95%) miner signalling for anything else (spec 5.7) | Avoids the clock; the price is that pools hold the vote (G8) |
+| Governance | Kaspa | KIPs discussed off-chain, activated at fixed DAA scores; Crescendo at 110,165,000 after a testnet campaign | `params.rs` 648; `docs/crescendo-guide.md` | A flag day; a node not upgraded forks off; it worked because the community upgraded in time | P2: a signal plus a floor height; Devnet 2 as the staging chain for every cut (CLAUDE.md 6 Oct rules) | Avoids the bare flag day, keeps it as the floor |
+| Governance | Ethereum | All Core Devs calls decide; clients ship; activation by timestamp; no on-chain vote | ethereum/pm repository (approximate) | Works by rough consensus among client teams; a single client bug is a chain-wide event (the 2016 Shanghai attacks, the 2020 Geth split, approximate) | One client today; a second independent client is the first priority after launch (litepaper, Governance) | Repeats the single-client risk until the second client exists |
+| Rollups | Taiko and the zk rollups | Pay their own prover networks per batch; based sequencing; multi-proof tiers | taiko-mono (approximate) | Proving cost is a line item that falls 3 to 30x a year (frontier 2.6); settlement and proving are bought from two suppliers | Settlement and proving from the same miners in one flow (litepaper, Building) | New; the price condition is 4.1 (a) |
+
+---
+
+## 5. Ranked proposals
+
+| Rank | Proposal | Evidence | Model | Hours | Consequence per tier | Gate |
+|---|---|---|---|---|---|---|
+| 1 | Decouple the job price from `f_p`: a job's reserve is the measured proving electricity per pgas (USD 4.4e-9 at 0.15 per kWh, base-fee-floor.md 3) converted at a published settlement rate, and the requester bids above it; the 1.5 premium becomes a bid, not a floor | At the adopted floor a billion-cycle job is 15 IGN = USD 0.075 / 0.30 / 1.50 at the three prices against Boundless's 0.21 (4.1 a); a two-week 60% vote cannot follow a dollar market | `utility.py` section 2 | 16: the reserve rule in `Prover.request` (6), the rate oracle as the review-trigger's published reading (spec 5.10.3 already defines it) (4), spec 5.4 and design 6 text (6) | Prover: sells at the market, not at a vote; Rollup customer: a quote it can compare; Holder: job demand for IGN survives a price rise; Miner: nothing; Pool user: nothing | A simulated job book at the three prices clears within 20% of Boundless's median at every price |
+| 2 | Define the stranded pool: an unproven shard's credit rolls forward into the next proven segment's pool instead of sitting in the escrow for ever | The spec is silent on credit nobody claims; a 10-day refusal strands 5.5 M IGN (4.2); the devnet already burns the coinbase 20% output (litepaper, Economics) | `stress.py` refuse scenario, `stranded_share` | 8: the roll-forward in `split_pool_credit` (4), spec 5.3 and 7.8 item 7 text (2), a unit test with a 10-segment gap (2) | Prover: a refusal costs the refusers and pays the returners; Holder: no silent burn; Miner: nothing | On the fast-time harness, 100 unproven segments then 10 proven: the escrow returns to zero within the 10 |
+| 3 | Publish the prover's price as a formula, never a number: `price per billion = (h / N) x 0.8 x 31.688 x t x P x 212 / cycles`, with N the live network hash | The same card is 100 to 300x Boundless at 1 GH/s and 0.2 to 0.4x at 100 GH/s (4.1 a); the customer brief says "priced in dollars" with no condition | `utility.py` 1.3 | 3: a paragraph in the customer brief and the litepaper's Proving section, with the table | Rollup customer: no promise it cannot hold the project to; Prover: knows when to sell; everyone else: nothing | The brief and the litepaper carry the condition before any customer conversation |
+| 4 | Make the 80/20 split a 60% parameter inside a hard band [10%, 30%], and record the three signalling numbers (60 parameter, 90 upgrade, 95 class with floor) in one sentence in spec 5.7, CLAUDE.md and the litepaper | The split is not load-bearing at launch traffic and 30% buys backlog relief at 100 shards a block (economy-2026-10-04 5.3); the documents carry two upgrade thresholds (4.5) | `stress.py` `--set pool=` | 10: the band in `Params` (4), the proposal kind (3), text (3) | Prover: a floor of 10% of emission by rule; Miner: a vote on its own share, bounded; Holder: nothing | The fast-time harness: a 60% vote moves the pool to 30%; a 100% vote cannot pass 30% or go under 10% |
+| 5 | Every miner-signalled execution parameter enters the consensus digest the same release, with a CI check that fails a `Params` field marked signalled and absent from the digest | A signal-then-defect on an execution parameter is a silent state fork unless the handshake refuses the defector; `Params.fees` is in the digest, nothing guarantees the next one is (4.5) | `signal_game.py` section 3 | 6: the check in `tools/ci` (4), a test (2) | Node operator: a defector is isolated, never quietly wrong; everyone else: nothing | The check fails on a planted field and passes on the live set |
+| 6 | The block-rate steps become P2-shaped activations (signal plus floor), not fixed heights | Crescendo was a fixed DAA score (`params.rs` 648); the 6 October incident was a fixed height; spec 2.1 still says "a planned fork" (4.5) | lane 3 `cost_results.md` forced-flip row | 4: spec 2.1 text and a line in the Devnet 2 gate | Miner and rig: no flag day crossed while updating; Pool user: nothing | Spec text; the first step's rehearsal on Devnet 2 passes the same gate as the class v4 cut |
+| 7 | Correct `funding.md` section 4's dev-fee ceiling (1% of the producer share, not of all rewards) and add a row that names who pays the SECOND cryptanalysis | 48,000 / 193,000 / 963,000 overstate by a quarter (4.4); no row prices a second review (4.3) | `devfee.py`, `security_budget_10y.py` section 3 | 1 | Holder and critic: a number that matches the mechanism | The file's git history |
+| 8 | Measure the two numbers every price here rests on: the miner's hash loss while each card proves (4% is one card), and a full 30 M-cycle shard beside the miner on the 12 GB and 16 GB tiers | The hybrid row is the only one that undercuts the market and it rests on one measurement (4.1 a); the 4.7 M fixture is 16% of `S_p` (2.1) | `utility.py` `hybrid_hash_loss` | 6 on the fleet: eleven boxes, two fixtures, `tools/fleet/lib` | Home 12 and 16 GB: whether they are provers at all beside their miner; Rig: the same per card | Eleven rows with both numbers in `prover-tiers-real-cards.md` |
+
+**1. Decouple the job price from `f_p`.** `f_p`'s floor exists to price spam above the electricity it imposes (base-fee-floor.md section 3: 230x the electricity at USD 0.10 per IGN). Design 6 then prices every external job at `maxPgas x f_p x 1.5`, so the same floor that is 230x electricity for spam is the job market's minimum: 15 IGN per billion cycles, which is a third of Boundless at USD 0.005 and 7x at 0.10. A rollup compares in dollars every week; a 60% vote takes two weeks and a quorum. Lane 7 (frontier 3.5, rank 8) proposes the continuous dial for the floors themselves and it would help; this proposal is narrower and independent of it: the job reserve is the electricity, published as a rate the review trigger of spec 5.10.3 already needs ("converted at the window's settlement rate and published with the reading"), and the price above the reserve is the requester's bid against the sortition's assignees. Cost 16 hours. Gate: a simulated job book clearing within 20% of Boundless at all three prices. Per tier: the prover sells at a market price; the rollup customer gets a comparable quote; the holder keeps job demand for IGN through a price rise (at 0.10 and the floor, every rollup leaves); miners, pools and home cards see nothing.
+
+**2. Define the stranded pool.** Spec 5.3 pays "the first valid proof included in a block"; 7.7 item 3 refuses a record older than 600 chain blocks; 7.8 item 7 says an unproven segment's aggregator share "stays in the escrow". Nothing says what happens to the shard credit nobody claimed. In the refusal scenario (4.2) the whole 20% is stranded for ten days: 5.5 M IGN that reach nobody and that nobody decided to burn. A roll-forward (the next proven segment's pool is larger by what was stranded) makes a refusal a transfer from refusers to returners, which is the incentive the design wants, and makes the pool's total over any month equal to 20% of emission as the litepaper's table promises. 8 hours. Gate on the fast-time harness.
+
+**3. The prover's price as a formula.** The whole of 4.1 (a) is one line: price per billion cycles = the subsidy the card forgoes per shard, which is `h/N`. At the devnet's 1.16 GH/s every quote is 100x the market; at 100 GH/s hybrids undercut it. The customer brief's "priced in dollars per proof" and the litepaper's "proofs at the cost of power" need the condition beside them, or the first customer conversation ends with the number. 3 hours of text.
+
+**4. The 80/20 as a bounded parameter, and one sentence for the thresholds.** The 4 October lever study found the pool share not load-bearing at launch traffic and useful at 30% under heavy traffic; tonight's runs (4.2) agree. A band of 10 to 30% lets miners trade lottery for proving capacity when the traffic says so, and the band stops the lottery's 80% from voting the provers out. The same change should carry the three signalling numbers in one place; today a reader finds 90 in spec 5.7 and CLAUDE.md, 95 in P2 and the preamble, 60 in 5.5, and "a 90% miner signal turns one on" in the litepaper's Mining section about a class change the P2 rule sets at 95.
+
+**5. Signalled execution parameters enter the digest, by CI.** Blocks carry transactions only. A node that signalled a fee change and runs the old rule accepts every block and computes a different state; its proof records fail everyone else's statement and everyone else's fail its own, which is loud for provers and silent for a wallet. `Params.fees` is in the digest and the handshake refuses a different digest, so today the defector is cut off. The next signalled parameter has no such guarantee until a check fails without it. 6 hours.
+
+**6. Block-rate steps as signal-plus-floor.** Spec 2.1 names the steps "a planned fork with its own test campaign, as Kaspa's Crescendo". Crescendo was a fixed DAA score (`params.rs` line 648) and Igneum's own fixed height cost it a 229-block reorg on 6 October. P2 exists; the steps should use it. 4 hours of text and a gate line.
+
+**7. The funding corrections.** One number and one row. 1 hour.
+
+**8. Measure the two numbers.** The hybrid row is the only competitive one and it rests on the 5090's 4% and a fixture a sixth of a full shard. Six hours on the fleet, through `tools/fleet/lib`, eleven boxes.
+
+Cross-references to lane 7 by name and rank: 3.1 (rank 7, the rental tax) would move 25 to 75% of a spiking block's subsidy to the pool; against 4.3's constant 11.8x ratio it doubles the renter's break-even and does not change the year the absolute cost gets small. 3.2 (rank 2, work-stake) removes the coin bond this lane's job model carries; the numbers here do not depend on the bond's form. 3.5 (rank 8, continuous dials) is the general form of proposals 1 and 4 here. 3.6 (rank 11, burn bounties) is option 5 of 4.3 and is rejected on the same ground. 3.11 (rank 15) and 3.12 to 3.14 are the market-size and verifiable-compute ceilings this lane's demand grid sits under. I7 (equivocation bounty in sortition slots) is the one treasury-less incentive in lane 7 that this lane's stranded-pool rule could fund without coins: stranded credit to the evidence carrier is a variant worth one line in the ledger, not a proposal here.
+
+---
+
+## 6. Open questions and what I could not run
+
+- **The full-shard beside-the-miner times** on every tier (proposal 8). Linear scaling from the 4.7 M fixture says 92 s alone on a 3060 and 240 s beside the miner; if that holds, no 12 GB card meets the 120-s claim timeout beside its miner and the 25-s window is for 24 GB cards and up. The fleet was on the class v4 rehearsal tonight.
+- **The hash loss while proving on Ampere and Ada**: the 5090's 4% is Blackwell with 32 GB; the 8 GB cards showed 6%; the 12 to 24 GB tiers are unmeasured and the hybrid row of 4.1 (a) moves with them.
+- **Price elasticity of job demand**: every demand count is an assumption. The customer brief's "low millions a year" is the only market figure and it is approximate.
+- **The rental market's supply curve**: 0 of 20 pods at the TH/s scale on 6 October; the attack costs assume the hash can be had at the measured price, which the bench entry says it cannot above about 2 GH/s.
+- **The Devnet 2 block-rate runs** (RUN_A, RUN_B) were empty at writing; a 10 BPS chain changes shards per segment, records per block and the per-block fee step, and 4.1 (e) should be re-read when they land.
+- **The economy simulator's price process** is exogenous; burns do not move it (4.2's burn is a number, not a feedback).
+- **BIP 8 and BIP 9 texts, the Ethereum specs, Monero's reward code, Aleo, Boundless and Succinct** are cited by repository and path from memory or from the project's earlier readings and are marked approximate throughout; no clone exists in `vendor/`.
+
+---
+
+## 7. Summary for the coordinator
+
+Lane 4 turned the eleven measured cards into a price per proof, built five demand curves with dollars and burn, re-ran the economy simulator with the measured table and the measured rental price under eight stresses, extended the security budget ten years with those fees, priced the dev fee and the signalling game, and tabulated what the other chains did. Three findings:
+
+1. **The proving price is `h/N`, not "the cost of power".** Electricity is under a cent per billion cycles on every card; the price a prover must charge is the subsidy it forgoes, which is 100 to 300x Boundless's USD 0.21 at today's 1.16 GH/s and 0.2 to 0.4x at 100 GH/s for a card proving beside its miner (`utility.py` 1.3). And the adopted floor prices a job at 15 IGN per billion cycles, USD 0.075 / 0.30 / 1.50 at the three prices: above USD 0.014 per IGN the chain overprices the market by rule, and a two-week vote cannot follow a dollar market (proposal 1).
+2. **Fees are not a security budget for a decade.** All five uses together put USD 450 a day to miners and provers at launch and USD 4,200 in year 5 in the base scenario at 0.02 (`utility.py` 3.3) against USD 54,800 and 13,700 of daily emission; of the 48% fee share in year 5 under 1% reaches miners. The 20-day 34% weight attack costs 11.8x the honest fleet's 20 days at every price and year (`security_budget_10y.py`); its absolute net cost drops under USD 1 M in year 5 at 0.005 and year 9 at 0.02. The second audit has no payer by rule: the entity's own provers (USD 100 k a year at 5% of the pool, year 3, 0.02) are the only line that scales.
+3. **The 80/20 survives every stress but one, and that one strands the pool.** With the eleven measured cards, the 25-s window and a renter farm at the measured rent, T1 to T5 hold under price x10 and /10, external zero and x100, a 20% proving cartel and the first halving (`stress.py`, 8 scenarios x 3 seeds; hash troughs at 55% of pre-event under the /10 shock with 31% of cards off, the one row at the T1 line). A ten-day refusal by every prover breaks T4 only, and what it costs is 547,570 IGN a day of pool credit stranded in the escrow with no rule to return it (5.5 M IGN over the ten days): a silent supply cut nobody voted for (proposal 2). The renter farm is off in every row but the x10 price shock (margin +114%) and partly on under x100 external demand (-6%), which is lane 3's N_eq in an agent model.
+
+Rules for main: the customer brief and the litepaper's "proofs at the cost of power" need the `h/N` condition before any customer conversation (proposal 3); `funding.md` section 4's dev-fee ceiling is a quarter too high (the fee moves the producer payout only); the three signalling thresholds are stated inconsistently across spec 5.7, CLAUDE.md, the P2 design and the litepaper's Mining section; and the spec is silent on pool credit nobody claims (proposal 2).
diff --git a/docs/analysis/horizon/finality-and-weight.md b/docs/analysis/horizon/finality-and-weight.md
new file mode 100644
index 000000000..ec6a1c76e
--- /dev/null
+++ b/docs/analysis/horizon/finality-and-weight.md
@@ -0,0 +1,389 @@
+# Horizon lane 3: finality and weight
+
+Date: 6 October 2026, evening UK (written 19:30Z to 21:00Z, while the live devnet's finality was paused). Lane: finality-and-weight (the measured behaviour of the weight rule and the designs that extend it; lane 1 holds the attack catalogue and the 51 percent paper, cross-referenced by name). Worktree: `/Users/joshm/Projects/igneum-wt-horizon` (branch `horizon`). Models: `sim/horizon/finality-and-weight/` (README there says how to run every number).
+
+What was read: `docs/spec/03-finality.md` (whole, 3.11 included), `04-seeds-and-vdf.md`, `10-light-client.md`, `06-open-items.md` (O-3.1 to O-3.19), the fud-close worktree's `docs/spec/03-finality.md` 3.4.2 (the proposed vote and bitmap bounds, decided 6 Oct 2026 per `docs/plans/ledger-decisions.md` line 57); `docs/fud-ledger.md` F1 to F25 (F9, F14, F16, F18, F19, F20, F21 via its status lines, F22, F23, F24), P3, P4, P22, X20; `sim/README.md`, `sim/results_v2.md` (A to M), `sim/finality_v2.py` (this worktree's and fud-close `1544c63` with the block reading and scenario O); `docs/benchmarks/finality-v3-2026-10-04/` (fold-v2, fold-v3, split50-v2, split50-v3, split70-v3), `docs/benchmarks/round4-consensus-2026-10-04/results-final2.md`; `tools/finality-attacks/README.md`; `docs/plans/finality-v3-rollout-devnet.md`, `finality-v3-devnet-publish.md`; `docs/bench-log.md` entries of 4 to 6 October mentioning finality (floor 2/3, first live lock, rule v3, the C4 fix, round-4 items, the finality route, the rental cost of hash at line 2582); the gpu-fleet worktree's `docs/bench-log.md`, `docs/plans/`, `tools/fleet/` (grep for finality, lock, pause, voters, weight: the fleet has written no lock-delay or voter-count row yet; `docs/analysis/block-rate-devnet2.md` is still the template with RUN_A and RUN_B empty at 19:45Z), `docs/analysis/prover-tiers-real-cards.md`; the observer database (read-only SELECTs over `live_checkpoints`, `live_certificates`, `live_blocks`, `live_events`, `live_state`), node 1's log `/tmp/igneum-devnet/node1.out` on the Mac; `vendor/igneum-node` `Cargo.toml` and `consensus/core/src/finality.rs` for the BLS crate; the SP1 6.8.1 crates in the cargo registry (no SP1 clone exists under `vendor/`).
+
+## 1. The three findings first
+
+1. **Tonight's pause was the rule, not the aggregation path, and it was the frozen table that held it past 19:14Z.** The 20 keys that left the live chain between 17:20Z and 18:30Z held 3,026 of 7,083 blue blocks of the table frozen at the last lock (42.7 percent; the 13 that left with the 18:27 to 18:30Z rehearsal job alone 36.5 percent). The first unlocked checkpoint, 6843 at DAA 209,233 (about 18:40Z), had 75 of 93 voters' votes and 53.1 percent of total weight on the observer's node, under the two-thirds floor; certificates had kept forming for 18 checkpoints while node 1 and the observer were down (6824 to 6842, 18:30 to 18:39Z, 83 signers, 78.5 to 79.7 percent of total). From 19:14:53Z (checkpoint 6912) the stayers held 74.9 percent of the sliding table and still did not lock, because they hold 57.3 percent of the frozen table of lock 6842, which stands until DAA 216,402 (about 20:40Z). Under rule v2 the first lock would have come at 6912, 35 minutes after the last; under v3 the pause is one window, 2 hours on the devnet and 30 days on mainnet (spec 3.7 item 2, the price the project lead took on 4 October).
+2. **Of the four candidate rules, only the departure announcement keeps the one-third bound.** In the simulator (3 seeds, mainnet scale) the decaying denominator and the hysteresis floor both restore liveness after tonight's departure in under an hour and both reopen the partition double lock (fast decay: both sides of every 360-minute partition lock alone from minute 120, 467 to 473 conflicting locks in the 50/50 honest split and 17 to 264 in the poisoned eclipse; slow decay: both sides of the 12-day splits lock alone at day 0.5 to 0.9, 31,545 to 32,246 conflicts; hysteresis: a 20 percent equivocator conflicts from minute 60, 565 to 597 locks, the 13.3 percent bound of 3 October back). The leave rule locks 1 hour after the departure (0.04 days; under 4 devnet minutes) with 0 conflicting locks in every partition, eclipse and equivocator row, and an attacker who buys keys to make them leave gains nothing it would not get by signing with them (w + L must still reach 2/3). The two-tier report never conflicts in its final tier by construction and shows 516 to 1,062 conflicting PROVISIONAL locks in every 360-minute partition and about 34,000 in the 12-day splits, so it is a reporting layer with a health warning, not a rule.
+3. **Weight costs USD 8,424 x N x W / (1 - W) to rent for the full window** at the measured USD 11.7 per GH/s-hour: a veto (34 percent) against a 1 GH/s network is USD 4,300 over 30 days (0.52 x N of hash, a +52 percent step on the chart from day 1), against 1 TH/s USD 4.3 M; locking alone (67 percent) is 2.03 x N for 30 days (USD 17,100 per GH/s of network, USD 17 M at 1 TH/s), and faster is dearer (22 days: 10.6 x N). Buying old keys costs the seller's own rental equivalent, decays to nothing in 30 days (sim K), and nothing in the protocol makes weight unbuyable; what keeps the price at the rental cost is that the seller keeps a copy and one equivocation strips the key.
+
+## 2. Method
+
+Measured: the observer's Neon database (tables written by `tools/observer/observer.mjs`: `live_checkpoints` per index with state, signed and total weight, votes seen and voter count; `live_certificates` with the voter table and bitmap per certificate; `live_blocks` with `vote_key_hash` per block; `live_events`), read with SELECTs only through a scratchpad script (`fetch` to the Neon SQL endpoint, refusing any statement that is not SELECT; the queries are quoted inline). Node 1's log on the Mac for determination-to-lock delays (the `determined` and `LOCKED` lines per index; the log ends at 18:46:32Z when node 1 stopped). The departed keys were matched from certificate voter tables (48-byte public keys) to block producers (`vote_key_hash`) with BLAKE2b-256 keyed by `IgneumVoteKeyHash` (the fork's domain, `consensus/core/src/finality.rs`), 93 of 93 keys matched.
+
+Simulated: `sim/horizon/finality-and-weight/finality_horizon.py`, a copy of `sim/finality_v2.py` (fud-close `1544c63`) with four candidate rules and three scenarios (T, P, Q), run on igneum-build-1 (`/srv/builds/horizon-finality-and-weight/sim/`, Python 3.12, numpy 1.26.4, `nice -n 19`, one process per candidate, seeds 7, 11 and 13, about 25 minutes wall while the box carried other agents' builds at load 20 to 60); the smoke run on the Mac under `tools/lock/with-lock.sh run`. The model is the one `sim/results_v2.md` describes (1,000 Pareto keys, three regions, 2-s inter-region delay, 97 and 99.5 percent uptime, no DAG) at mainnet scale (30-day window); the devnet's window is 7,200 DAA s, so a mainnet day is four devnet minutes. Arithmetic scripts: `weight_capture.py`, `lightclient_cost.py`.
+
+Not run: the fast-time node harness (`tools/finality-attacks`) for the leave message (no such message exists in the node); any BLS timing on this machine (the figures are approximate from the crate's published benchmarks, anchored to the one measured pure-JavaScript verifier); the fleet's block-rate run (its file was still a template at 19:45Z).
+
+## 3. Evidence
+
+### 3.1 Tonight's pause, from the observer rows and node 1's log
+
+Times UTC. DAA scores advance about 1 per second on the live devnet. The observer's node is the view throughout; "votes" are the votes that node had seen for the index.
+
+| When | What | Source |
+|---|---|---|
+| 17:20 to 17:55Z | Four keys mine their last blocks on the live chain (92376b1a 105 blocks of the later frozen table, d1ee753c 22, 25dbfb0b 155, c4eb3431 131: 413 blocks, 5.8 percent) | `live_blocks`, max(received_at) per key before 18:43Z |
+| 18:27 to 18:30Z | Thirteen fleet keys mine their last blocks (d5996917 248, 39d2dafc 246, 52d9d8c8 236, 3ca93140 227, 8debbb2d 219, 92dabf9d 216, f155fac3 215, 6cd0935e 212, 0cf69e5c 208, 11047080 200, b42641ab 144, cf860e4d 121, 2aaa021b 91: 2,583 blocks, 36.5 percent of the frozen table): the class v4 rehearsal job stopping their miners | `live_blocks`; CLAUDE.md 6 Oct rules |
+| 18:30:02Z | Node 1's last own lock, 6823 (DAA 208,631), 78 signers, 68.7 percent of total; node 1 and the observer go down with the desktop app until 18:42:08Z (`Observer reconnected to the node`) | node1.out; `live_events` |
+| 18:30 to about 18:39Z | Locks 6824 to 6842 form without the hub (DAA 208,660 to 209,202): 83 signers, 78.5 to 79.7 percent of total; aggregators 3ca93140, 8debbb2d, 69570532 and the zero fallback | `live_checkpoints` (ingested at 18:42:09Z), `live_certificates` bitmaps |
+| about 18:39:40Z | The last lock, 6842 at DAA 209,202, 79 of 91 signers. Its frozen table (the voter table at 6850 the observer stored with it): 93 keys, 7,083 blocks; the 20 departed keys hold 3,026 (42.7 percent), the stayers 4,057 (57.3 percent) | `live_certificates` 6842 voters, matched to `live_blocks` |
+| about 18:40Z | 6843 at DAA 209,233 determined and never locked: 75 votes, 3,757 of 7,080 = 53.1 percent of total. The departed boxes' nodes have left the live chain (their blocks had already stopped), the signing weight is under two thirds: the rule pauses | `live_checkpoints` |
+| 18:42:08Z | The observer reconnects and the pause becomes visible on the hub; node 1 ingests 6828's certificate by gossip (`70.3% of the table frozen at lock 6827`) | `live_events`, node1.out |
+| about 18:50Z | Twenty indices without a lock (6862, DAA 209,800): `finality_active` false, reason `paused` (spec 3.9) | `live_checkpoints` |
+| 18:58 to 19:03Z | Votes seen fall to 49 (48.5 percent): five more keys quiet for five minutes (the hands' own restarts, approximate) | `live_checkpoints` 6876 to 6885 |
+| 19:14:53Z | 6912 at DAA 211,301: 79 votes, 5,355 of 7,152 = 74.9 percent of the SLIDING table, over two thirds; no lock. The stayers hold 57.3 percent of the table frozen at 6842 (Q5), under two thirds: "held by the frozen table" | `live_checkpoints`; spec Q5 |
+| 19:29Z (write-up) | Still paused: 6938 proposed at 79.2 percent with 78 votes. Expected first lock when the frozen table expires at DAA 216,402 (209,202 + 7,200), about 20:40Z, or when departed keys holding 9.4 points of the frozen table return | `live_checkpoints`; arithmetic |
+
+Under rule v2 (sliding table only) the stayers' share rises as the departed blocks age out: from 53.1 percent at 6843 to two thirds after 7,200 x (1 - 1/(3 x 0.469)) = 2,082 DAA (spec 3.3.1's churn formula at the devnet window), which is checkpoint 6912 at 19:14:53Z: a 35-minute pause. Under v3 it is one window: 2 hours here, 30 days on mainnet (spec 3.7 item 2; `sim/results_v2.md` M4). The coordinator's working hypothesis of 19:3xZ (topology: the hub was down and the fleet's votes could not reach the VRF-picked aggregators) is refuted by three rows above: certificates formed while the hub was down (6824 to 6842), the zero-aggregator fallback of Q4 is in routine use (64 of the 251 certificates stored between 16:30 and 19:00Z name aggregator `00000000`, the next most frequent key 34), and the pause began at the checkpoint where the signing weight fell to 53.1 percent, which is the rule's threshold and not a routing failure. The observer's node itself held 74.9 percent of the sliding weight in votes from 19:14Z and did not certify, which only Q5 explains.
+
+Per tier: a home miner, rig or pool user on the live devnet saw `finality_active` false for 2 hours and lost nothing (blocks, execution and payouts continued; the exchange guidance of 3.9 applies); a prover's records were still paid; the fleet operator learned that a standing box never leaves the live chain for an experiment (CLAUDE.md, the standing-fleet rule). On mainnet the same event, 43 percent of weight leaving in three minutes, is a 30-day pause under v3 and a 7.7-day one under v2.
+
+### 3.2 Lock delay against voter count (measured)
+
+Determination-to-lock on node 1 (the `determined` and `LOCKED` lines per index, 6 October 2026, per UTC hour; voter counts from the observer's `live_checkpoints` for the same hour).
+
+| Voters above dust | UTC hours | Locks | Delay p50 | p90 | p99 | Max | Source |
+|---|---|---|---|---|---|---|---|
+| 4 to 9 | 01 to 06 | 119 to 120 per hour | 0.86 to 0.97 s | 1.17 to 1.31 s | 1.53 to 1.80 s | 1.59 to 2.29 s | node1.out |
+| 17 to 24 | 07 to 11 | 118 to 120 | 0.82 to 0.97 s | 1.09 to 1.29 s | 1.53 to 1.83 s | 2.18 s (the 111-s p90 of 08Z is a restart) | node1.out |
+| 24 to 30 | 12 to 14 | 104 to 122 | 0.94 to 1.32 s | 1.36 s (quiet hours) | 48 s (restarts) | | node1.out |
+| 43 | 16 | 54 (hour cut by a restart) | 0.92 s | 1.17 s | | | node1.out |
+| 63 | 17 | 124 | 1.13 s | 1.44 s | 1.47 s | 8.8 s | node1.out |
+| 92 to 93 | 18 | 125 (to 18:30Z) | 1.26 s | 1.50 s | 1.82 s | 1.82 s | node1.out |
+| 6 (fast time, 300-ms proxied links) | 4 Oct | 11 to 12 per node | 1.008 s | | | | `docs/benchmarks/finality-v3-2026-10-04/fold-v3.md` |
+| 12 (cloud devnet, 5 locations) | 4 Oct | 212 indices | 1.24 s to the first certificate (p99 1.71 s), the last vote 1.45 s (p90 2.36 s) | | | | ledger F22, `infra/cloud-devnet/results/2026-10-04/f22-vote-timing.md` |
+| 1,000 (simulator, 2-s inter-region delay) | | 172,883 | 2.5 s | | 4.6 s | 6.1 s | `sim/results_v2.md` A |
+
+The devnet's delay is the miner's 1-s template poll plus one gossip round (the 250-ms gossip pump per hop, ledger F22): 0.9 s at a handful of voters, 1.26 s at 93. A straight line through the devnet rows is 0.9 s + 4 ms per voter (approximate; 93 points on one topology), which puts 1,000 voters near 5 s and 8,192 near 34 s, past the 30-s interval. Section 4.3 says why that line does not hold and what does.
+
+### 3.3 Sizes and crates (from the fork)
+
+| Item | Value | Source |
+|---|---|---|
+| BLS crate | `blst = "0.3.17"` (workspace), min-pubkey variant: 48-byte G1 keys, 96-byte G2 signatures | `vendor/igneum-node/Cargo.toml` line 238, `consensus/core/Cargo.toml` line 20, `consensus/core/src/finality.rs` line 17 (`blst::min_pk`) |
+| Aggregation and verification | `AggregateSignature::aggregate` over the votes' signatures (line 230); `fast_aggregate_verify` over the summed public keys and one vote message (line 239 to 253) | `consensus/core/src/finality.rs` |
+| Vote item | 281 B (tag 1, index 8, checkpoint 32, key 48, signature 96, sortition proof 96) | spec 3.4.2 item 1 (fud-close), the fork's `Vote::LEN` |
+| Certificate | 273 B plus ceil(V/8) B of bitmap: 285 B at 93 voters, 398 at 1,000, 1,297 at 8,192, 8,465 at 65,536 | same |
+| Bitmap wire bound | 1 MiB today (`Certificate::read`, `bitmap_len > 1 << 20`, line 429); 8,192 B proposed and decided (65,536 voters, 8x the S2 switch) | finality.rs; spec 3.4.2 item 3; ledger-decisions line 57 |
+| Per-block vote bound | 48 on the devnet; 384 on mainnet proposed and decided (107,904 B, 21.6 percent of the compute mass; a checkpoint's 8,192 votes drain in 21.3 blocks) | spec 3.10 Q1/Q2 row; 3.4.2 item 2 |
+| Votes per checkpoint, single-vote carriage | 93 voters: 26,133 B; 1,000: 281,000 B; 8,192: 2,301,952 B (4.6x one block's mass); 65,536: 18.4 MB | 281 x V |
+| Votes per checkpoint, aggregated carriage (Q2 allows one BLS signature plus a bitmap per (index, hash)) | about 0.4 KB at 93 voters, 1.2 KB at 8,192, 8.6 KB at 65,536 | spec 3.4.2 item 2 |
+
+### 3.4 What the simulator already measured (cited, `sim/results_v2.md`)
+
+| Fact | Value | Section |
+|---|---|---|
+| Churn under v2: first lock after a set holding x stops mining and signing | 35 percent: 1.7 days (analytic 1.4); 50 percent: 10.1 to 10.3 days (analytic 10.0) | L2, D |
+| Churn under v3 | 30.00 days at 35 and 50 percent (the frozen table's expiry) | M4 |
+| Silent set that keeps mining | 34 percent and above: no lock for as long as it is silent; first lock 0 min after it returns | J, L1 |
+| Equivocator across a 50/50 split | 33 percent: 0 conflicts; 34 percent: 2 to 54 conflicts from minute 2 to 77 (the one-third bound) | H, M5 |
+| Long honest partition, view-local weight, v2 against v3 | 50/50: both sides lock alone from day 10.1 to 10.3 under v2, never in 12 days under v3, both at day 30.00 of a 31-day split | L4, M2, M3 |
+| Acquired keys worth 40 percent, attacker at 30 percent of hash | veto from day 1 to day 19 or 20, 30 percent on day 30; silent, 63,307 to 68,716 of 86,400 checkpoints stalled | K |
+
+## 4. Model
+
+### 4.1 The pause arithmetic (spec 3.3.1 and 3.7, restated with tonight's inputs)
+
+Let x be the share of the window weight that stops mining and signing at once, W the window (2,592,000 DAA s on mainnet, 7,200 on the devnet).
+
+| Rule | First lock after the departure | Tonight (x = 0.469 on the observer's node at 6843, W = 7,200) | Mainnet, same x |
+|---|---|---|---|
+| v2, sliding table | W x (1 - 1/(3x)) (never for x at or under 1/3) | 2,082 DAA, 35 min: measured as the moment the sliding share crossed two thirds (6912) | 7.7 days |
+| v3, frozen table (live) | W after the last lock, whatever x over 1/3 | 7,200 DAA, 2 h (expected 20:40Z) | 30 days |
+| (iv) leave, delay D | D after the signed leave (0 if sent D before the stop) | 1 h, or 0 with notice | 1 h |
+| (i) decay, grace T, rate r per hour | at most T + (1/r) x (1 - (1 - x)/(2x)) hours: the departed weight decays until the stayers hold two thirds of what is left | T 1 h, r 0.5: 1 h 17 min (x 0.469); T 6 h, r 1/24: 20 h | the same hours |
+| (iii) hysteresis, H hours, low floor f | H hours, then only if the stayers hold f x 2/3 of total | f = 0.85: 56.7 percent needed, the stayers held 53.1 then 57.3 percent: after H plus the ageing to 56.7 percent, 1 to 1.5 h | about 1 day |
+| (ii) two-tier | provisional at once (2/3 of the active denominator); final as v3 | provisional 0 min, final 2 h | provisional minutes, final 30 days |
+
+### 4.2 Why the view-dependent candidates fail (and the sim's confirmation)
+
+Spec 3.11.2's bound comes from counting: two certificates at one index need 2/3 of the denominator each, 4/3 in all, so a third signed both and that third is equivocating. The denominator has to be the same number on both sides of a partition for that sum to mean anything. A rule that removes weight on what a view has not seen (a vote missing for T hours, blocks missing) gives each side a different denominator: side A removes side B's keys, side B removes A's, and both sides' own share rises toward 1 at the same rate. For a 50/50 split under decay(T, r) each side's own share reaches 2/3 when the other side's factor is 0.5, at T + 1/(2r) hours (2 hours at T 1 h, r 0.5; 18 hours at T 6 h, r 1/24), and every checkpoint after that is a conflicting lock, the hazard of `sim/results_v2.md` E in a new coat. The frozen table does not save it when the decay is applied to the frozen table too (which is the only way decay helps tonight). The hysteresis floor is view-dependent in the same way (each side measures its own connected share), so after H hours both sides run the 0.85 rule and the 13.3 percent equivocator bound of 3 October returns (the sim's 33 percent row under `hyst` shows one side locking at minute 59). A rule that removes weight on what a view has seen, a signed leave carried in the DAG or equivocation evidence, is seen by both sides at the heal and by at most one side during the split; during the split the side that saw the leave removes L from its denominator and needs 2/3 (1 - L) of signers while the other side still needs 2/3 of the full table; both locking needs s_A + s_B at least 2/3 (2 - L), more than the 1 - L available without an equivocator, so the one-third bound survives (with an equivocator a, the bound is a at least (1 - L)/3 of the remaining weight, the same statement over the reduced table).
+
+Why leaving bought keys buys nothing (Q2 in the sim and arithmetic): an attacker holding w of the window who buys L and makes it leave holds w / (1 - L) of what remains; to lock alone it needs w at least 2/3 (1 - L), so w + L at least 2/3 + L/3, never under two thirds of the window, and signing with the bought keys (w + L at least 2/3) is the cheaper use of the same purchase. In the model the attacker's share after leaving its bought 40 percent was 4.8 percent on day 3, the position of its own hash alone.
+
+### 4.3 Lock delay as a function of voters and message delay
+
+delay = template poll (1 s on the devnet; the node's own determination on mainnet, 0) + hop_1 (block to voter) + hop_2 (vote to aggregator) + processing + certificate gossip (one hop). The simulator's two hops at Delta give median 0.7 s at 0.5 s, 2.5 s at 2 s, 6.2 s at 5 s (A); the devnet's 0.9 s is the poll plus a 250-ms pump. The per-voter term is the aggregator's verification of each vote as it arrives: one BLS verify is a pairing, about 1.6 ms (approximate, blst 0.3.17 published figures; the fork verifies each vote on ingest, `verify_vote_signature`, finality.rs line 192), which is 150 ms per checkpoint at 93 voters, 1.6 s at 1,000, 13 s at 8,192 and 105 s at 65,536 on one core: past 1,000 voters the single-vote path is a CPU bound before it is a bandwidth bound, and at 8,192 it is more than a quarter of every core's time on every node (every node verifies every vote it relays). The fix is already in the spec's text (Q2 aggregated carriage) and in the crate (`AggregateSignature::aggregate` then one `fast_aggregate_verify`): aggregate first, verify once per (index, hash), which costs V G1 additions (about 1 us each) plus one pairing: 1.7 ms at 93, 2.6 ms at 1,000, 10 ms at 8,192, 67 ms at 65,536. Its price is the batch-poisoning vector (one invalid vote fails the batch and forces bisection); S2's sub-user sortition at 8,192 bounds the signer count at about 4,000 expected either way.
+
+| Voters | Vote bytes per checkpoint (single) | Verify per checkpoint, single votes (approximate) | Aggregate-first (approximate) | Lock delay, model (Delta 2 s) | Bitmap |
+|---|---|---|---|---|---|
+| 12 | 3.4 KB | 19 ms | 1.6 ms | 2.5 s (sim A, 1,000 keys) ; 1.24 s measured | 2 B |
+| 40 | 11 KB | 64 ms | 1.6 ms | about 2.5 s | 5 B |
+| 100 | 28 KB | 160 ms | 1.7 ms | about 2.6 s; 1.26 s measured at 93 on the devnet | 13 B |
+| 1,000 | 281 KB | 1.6 s | 2.6 ms | about 4 s single, 2.5 s aggregated | 125 B |
+| 8,192 | 2.3 MB (4.6x block mass) | 13 s per node per checkpoint: breaks the 30-s cadence on a shared core | 10 ms | 2.5 s aggregated; S2 switches to about 4,000 sub-users here | 1,024 B |
+| 65,536 | 18.4 MB | 105 s: impossible single | 67 ms (3.9 s of key decompression once) | 2.5 s aggregated | 8,192 B, the proposed wire bound |
+
+Where the aggregator path breaks down: not at the 8 VRF-picked aggregators (anyone MAY aggregate, Q4's fallback at 15 DAA is in routine use tonight: 26 percent of certificates) but at per-vote verification above about 1,000 voters and at the per-block vote carriage above 8,192 (spec 3.4.2 item 2's 384-per-block bound drains a checkpoint in 21 blocks; participation accounting lags, locks do not, because certificates form from gossiped votes). The message-delay term scales the two hops and nothing else; at 5 s inter-region delay the slowest region already loses participation to the 15-s grace (A).
+
+### 4.4 Weight capture cost (task 3; `weight_capture.py`)
+
+share(t) = (t/30) x A/(N + A) for A rented against N for t days (spec 3.1, sim B within 0.04 points). To hold W at day t: A = N q/(1 - q), q = 30W/t (needs t over 30W). Cost = A x t x 24 x USD 11.7 per GH/s-hour (measured 6 Oct 2026, bench-log "Rental cost of hash": 1,748 MH/s for USD 20.44/h on RunPod community pods; the 8x 4090 rig USD 5.92/h for 459 MH/s). Cost falls with t, so the cheapest attack takes the full window: A = N W/(1 - W), cost = 8,424 x N x W/(1 - W) USD per GH/s of network.
+
+| Target | Hash to rent | Day noticed (the chart step) | N = 1 GH/s | N = 10 GH/s | N = 100 GH/s | N = 1 TH/s |
+|---|---|---|---|---|---|---|
+| 34 percent in 30 days (veto) | 0.52 x N | day 1: +52 percent | USD 4,300 | USD 43 k | USD 434 k | USD 4.3 M |
+| 34 percent in 21 days | 0.94 x N | day 1: +94 percent | USD 6 k | USD 56 k | USD 557 k | USD 5.6 M |
+| 51 percent in 30 days | 1.04 x N | +104 percent | USD 8.8 k | USD 88 k | USD 877 k | USD 8.8 M |
+| 67 percent in 30 days (locks alone) | 2.03 x N | +203 percent | USD 17 k | USD 171 k | USD 1.71 M | USD 17.1 M |
+| 67 percent in 25 days | 4.10 x N | +410 percent | USD 29 k | USD 288 k | USD 2.9 M | USD 28.8 M |
+| 67 percent in 22 days | 10.6 x N | +1,058 percent | USD 65 k | USD 654 k | USD 6.5 M | USD 65 M |
+
+What the market supplies: RunPod gave 0 of 20 pods asked at 18:59Z to 19:15Z (bench-log); 38 pods were 1.75 GH/s. So at tonight's 1.16 GH/s devnet every row of the first column is a dinner; at 100 GH/s the 52 GH/s for a veto did not exist on the one market asked (approximate). The alarm that sees the step is lane 1's detector.
+
+Buying old keys (F19): a key is a 32-byte scalar named in headers by `vote_key_hash`; it can be handed over, W5 succession moves its history once (not implemented, O-3.11), and the seller can keep a copy. Its worth is its blocks: keys worth b of the window are the position of having rented b/(1 - b) x N for 30 days (USD 2,100 per GH/s of network at b 20 percent, 4,300 at 34, 5,600 at 40), and that position decays as b (1 - t/30) + r t/30 (sim K, within 0.6 points). What makes weight unbuyable: nothing in the protocol. What makes bought weight a bad buy: it ages out in 30 days whatever the buyer does, a seller's copy can equivocate it away (3.6), and a pool's key is its payout identity, so the price is the pool. What the header does not do: it does not tell anyone the key changed hands until its blocks stop matching its old profile (the detector's job). A rule that would make it harder, decaying a key whose block profile breaks, is view-dependent in a partition (section 4.2) and is not recommended.
+
+Per tier: a home miner's or rig's key (one per machine under 3.4.2 item 4) is worth its 30 days of blocks and nothing a buyer would pay for; a pool's key is the only one worth buying and the only one whose sale is visible; a holder's finality rests on the 2/3 of weight no one can rent cheaply past a few GH/s; a rollup customer's bridge inherits the same bound.
+
+### 4.5 Long-range and checkpoint sync for light clients (task 4; `lightclient_cost.py`)
+
+What a node joining after 60 days trusts (spec 10.1 and 10.3): the trusted checkpoint shipped in its release, refreshed from N of M seed nodes (M 5, N 3, O-10.5), and from there every certificate it fetches is verified against the voter set, which in checkpoint mode it takes from nodes (N of M agreement) and in full-header mode recomputes from 30 days of headers (W2). The cold-sync node of X20 selects the heaviest DAG then follows certificates found in it (F5), so its first 30 days of history are proof of work in the sense of 3.9. The weak-subjectivity window Igneum has in fact is one weight window: a certificate older than 30 days can be checked only against a voter table the client cannot recompute from less than 30 days of headers, and under v3 the frozen table expires 30 days after a lock, so a node offline longer than 30 days cannot tell a certified chain from a chain certified by keys that have since left the window; the same class of assumption as Ethereum's weak-subjectivity period for a sync-committee checkpoint (not cloned here; approximate), with the window the parameter.
+
+| Mode, per year of chain | 93 voters | 1,000 | 8,192 | 65,536 | Source |
+|---|---|---|---|---|---|
+| Every certificate (1,051,200) plus its header, bytes | 720 MB | 839 MB | 1.78 GB | 9.3 GB | 285 to 8,465 B per certificate plus 400 B header |
+| Verify time, one laptop core (approximate: V G1 adds plus hash-to-G2 plus two pairings, 1.8 to 67 ms each) | 32 min | 48 min | 2.9 h | 20 h | `lightclient_cost.py` |
+| On a phone core (3x, approximate) | 1.6 h | 2.4 h | 8.7 h | 59 h | |
+| One certificate per presence window (4,380 a year, spec 10.3 item 3) | 3.0 MB, 8 s | 3.5 MB, 12 s | 7.4 MB, 44 s | 39 MB, 4.9 min | the voter set at each stop is not paid for |
+| Full-header mode, headers alone | 12.6 GB a year at 400 B per header | | | | |
+
+The measured anchor: the pure-JavaScript verifier of a 16-signer certificate took 58 to 68 ms warm on the M5 Max (bench-log, sweep round 6, P3), about 30x the native estimate here; a phone has not been measured (O-10.3).
+
+The ZK light client (phase two, O-10.8), designed: one recursive proof per checkpoint whose step statement is "certificate i verifies under voter table T_i; T_i follows from T_(i-1) by the interval's 30 blue headers and the window's ageing; the signers hold at least two thirds of T_i and of the frozen table; C_i's selected chain passes through C_(i-1)", with the previous step's proof verified inside (SP1's deferred-proof path, `VERIFY_SP1_PROOF` in `sp1-core-executor-6.8.1/src/syscall_code.rs`; the recursion crates are `sp1-recursion-{circuit,compiler,executor,machine,gnark-ffi}-6.8.1` in the cargo registry, no SP1 clone under `vendor/`). What the circuit costs, approximate: key aggregation V x BLS12381_ADD (about 500 cycles each: 46,500 cycles at 93 voters, 0.5 M at 1,000, 4.1 M at 8,192); hash-to-G2 about 0.3 M (SHA-256 is precompiled, the Fp2 arithmetic is BLS12381_FP2_*); the two pairings 10 to 30 M cycles, the dominant term, because 6.8.1 has Fp and Fp2 precompiles for BLS12-381 (ADD, DOUBLE, FP_ADD/SUB/MUL, FP2_ADD/SUB/MUL) and no pairing precompile; 30 BLAKE2b header hashes and the table transition 1 to 2 M (no BLAKE2b precompile). Against the measured shard curve (`docs/analysis/prover-tiers-real-cards.md`: 4.7 M cycles compressed in 4.8 to 14.4 s alone, 10.7 to 37.5 s beside the miner) a 15 to 35 M cycle step is 15 to 100 s alone and 40 to 260 s beside a miner, plus the recursion step measured at 2.2 to 2.5 s idle and 7.9 to 9.7 s beside the miner on the 5090 (bench-log, agg-cost and `chain-pc2-pv1c`). One checkpoint every 30 s therefore needs 1 to 4 proving-only cards (or 2 to 9 mining ones) at it continuously. A Groth16 wrap for the phone is the unbuilt R4 (P3).
+
+What it buys each tier: a phone wallet verifies one wrapped proof per open (about 400 B, milliseconds once the wrapper exists) instead of a certificate chain and a trusted voter set, and the "voter set: from nodes" status disappears (spec 10.4); a bridge verifies one proof per checkpoint it settles on and never a BLS certificate on-chain (an on-chain BLS12-381 aggregate verify at 1,000 voters is about 1,000 G1 additions and one pairing, which on Ethereum is the point-evaluation and pairing precompile budget, approximate); a rollup customer gets a finality statement its own verifier can check without Igneum's voter list; a node operator pays nothing (full nodes keep the native rule); a prover tier gains a steady job (one proof per 30 s) at the cycle counts above; a home miner with one 12 GB card beside its miner (27 to 37 s per 4.7 M-cycle shard) cannot keep up with a 30-s cadence alone and joins as one of several; a 24 or 32 GB card alone does it in the interval.
+
+### 4.6 Prover attestations as a second finality leg (task 5)
+
+Design: a checkpoint locks when (a) its certificate carries two thirds of weight (Q3, Q5) AND (b) proof records covering every chain block in (C_(i-1), C_i] from at least k distinct prover keys are in the past of some block the certificate's signers could see. Measured inputs: the proof lag on the live devnet, block to carried record, p50 44 s, p90 52 s, p99 62 s, max 65 s (bench-log, proving v1 coverage windows, 5 Oct); coverage 2.4 to 4.7 percent of blocks with one prover (the same rows); the chain-mode cost 17 s per empty block on a mining 5090, about 5 s proving-only; a 12 GB card beside its miner 27 to 37 s per v1 shard (prover-tiers); a mandatory rule needs about 6 proving-only 5090s or 18 mining ones for an empty-block chain at 1 block/s (bench-log table), 45 proving-only at B_p.
+
+| Measure | Weight alone (today) | Weight AND k-prover attestations | Label |
+|---|---|---|---|
+| Lock delay after the checkpoint block | 1.26 s at 93 voters (3.2) | at least the slowest block's proof lag inside the interval: p99 62 s today, so about 60 to 70 s; the transaction-to-lock figure of C1 rises from 90 to 120 s to about 150 to 190 s | measured lag, derived sum |
+| Checkpoints that could lock on tonight's devnet | all with two thirds signing | 2.4 to 4.7 percent (one prover): finality paused 95 percent of the time until proving is mandatory and the fleet is 6 to 18 cards | measured coverage |
+| What it stops that weight does not | nothing for a full node: it re-executes and vetoes a statement that is not the native one (spec 7.2 item 5, the native veto) | a two-thirds weight holder cannot lock a checkpoint whose execution has no valid proof, which protects the LIGHT client, who trusts certificates and cannot execute (10.1); the design already gives the light client that by requiring the segment proof beside the certificate (10.4 item 4), so the leg moves the requirement from the client into the lock | design |
+| Withholding to pause | a silent third pauses (L1) | a prover set that withholds proofs pauses finality for as long as no one else proves; the shard sortition names 8 provers by weight with a 10-s exclusive window and then anyone MAY prove (spec 7.2), so the price of a pause is out-proving every honest card for the whole pause, which in a thin market (tonight: one prover at times) is one card's outage | design, measured market |
+| Per tier | unchanged | a 12 GB card beside its miner proves one 4.7 M-cycle shard in 27 to 37 s, so k = 2 provers per block means 37k mining 12 GB cards (or 10k proving-only 4070s at 12 s) kept busy for an empty chain, approximate; a pool user nothing; a holder a longer wait; a rollup customer the same proof it already needs | prover-tiers, derived |
+
+Verdict: not as a lock condition now. The leg converts "locked" into "locked and proven" at the cost of a minute of lock delay and a pause whenever proving coverage drops, which tonight is almost always. The design's four-state interface (included, executed, proven, locked; O-7.2) already gives the exchange and the wallet the conjunction as a reading. Gate before it could become a rule: 99 percent of chain blocks proven within 60 s for 7 days on the public testnet with at least 3 distinct provers per block, measured by `tools/proving-v1/coverage.mjs`.
+
+## 5. Results of the candidate runs (`finality_horizon.py`, seeds 7, 11, 13)
+
+### 5.1 T. Tonight's departure: first lock after x of weight stops mining and signing at once (31 days, seeds 7, 11, 13)
+
+| departed weight | rule | first final lock after the departure | provisional tier | stalled checkpoints | stalled after the first lock | conflicting final locks | conflicting provisional locks |
+|---|---|---|---|---|---|---|---|
+| 34% | v2 | 0.77 to 0.87 d (devnet 3 to 3 min) |  | 4057 to 4727 | 1531 to 2489 | 0 |  |
+| 34% | v3 | 30.00 d (devnet 120 min) |  | 86388 to 86472 | 0 to 31 | 0 |  |
+| 34% | leave | 0.04 to 0.04 d (devnet 0 to 0 min) |  | 119 to 521 | 0 to 398 | 0 |  |
+| 34% | decay1 | 0.05 to 0.05 d (devnet 0 to 0 min) |  | 133 to 534 | 0 to 398 | 0 |  |
+| 34% | decay6 | 0.30 to 0.30 d (devnet 1 to 1 min) |  | 897 to 1298 | 24 to 442 | 0 |  |
+| 34% | hyst | 0.04 to 0.04 d (devnet 0 to 0 min) |  | 881 to 1445 | 761 to 1325 | 0 |  |
+| 34% | twotier | 30.00 d (devnet 120 min) | provisional 0.000 to 0.004 d (devnet 0.0 to 0.0 min) | 86388 to 86472 | 0 to 31 | 0 | 0 |
+| 45% | v2 | 7.85 to 8.03 d (devnet 31 to 32 min) |  | 23947 to 25153 | 1369 to 2065 | 0 |  |
+| 45% | v3 | 30.00 d (devnet 120 min) |  | 86382 to 86420 | 0 to 22 | 0 |  |
+| 45% | leave | 0.04 d (devnet 0 min) |  | 119 to 204 | 0 to 83 | 0 |  |
+| 45% | decay1 | 0.07 to 0.08 d (devnet 0 to 0 min) |  | 224 to 296 | 9 to 83 | 0 |  |
+| 45% | decay6 | 0.64 to 0.67 d (devnet 3 to 3 min) |  | 1946 to 1985 | 0 to 129 | 0 |  |
+| 45% | hyst | 30.00 d (devnet 120 min) |  | 86382 to 86420 | 0 to 22 | 0 |  |
+| 45% | twotier | 30.00 d (devnet 120 min) | provisional 0.031 to 0.034 d (devnet 0.1 to 0.1 min) | 86382 to 86420 | 0 to 22 | 0 | 0 |
+| 50% | v2 | 10.09 to 10.34 d (devnet 40 to 41 min) |  | 30107 to 31264 | 1065 to 1456 | 0 |  |
+| 50% | v3 | 30.00 d (devnet 120 min) |  | 86387 to 86514 | 0 to 10 | 0 |  |
+| 50% | leave | 0.04 d (devnet 0 min) |  | 118 to 490 | 0 to 371 | 0 |  |
+| 50% | decay1 | 0.08 to 0.09 d (devnet 0 to 0 min) |  | 244 to 609 | 0 to 371 | 0 |  |
+| 50% | decay6 | 0.76 to 0.77 d (devnet 3 to 3 min) |  | 2231 to 2543 | 0 to 371 | 0 |  |
+| 50% | hyst | 30.00 d (devnet 120 min) |  | 86387 to 86514 | 0 to 10 | 0 |  |
+| 50% | twotier | 30.00 d (devnet 120 min) | provisional 0.042 d (devnet 0.2 min) | 86387 to 86514 | 0 to 10 | 0 | 0 |
+
+### 5.2 P1. Partitions of 360 minutes (each side retargets and counts only its own blocks)
+
+| rule | case | partition min | conflicting final locks | conflicting provisional locks | first conflict, min | first lock per side, min | every pre-heal lock kept | first lock after heal, min | stalls in 2 h after heal |
+|---|---|---|---|---|---|---|---|---|---|
+| v2 | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| v2 | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| v2 | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 |  | never | never / 279 (never in 2 of 3) | yes | 0 to 0 | 0 |
+| v2 | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 142 to 291 |  | 14 to 77 | 11 to 48 / 0 to 76 | yes | 0 to 0 | 0 |
+| v2 | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| v2 | 60/40 honest | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| v2 | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+| v3 | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| v3 | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| v3 | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| v3 | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 139 to 283 |  | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 to 0 | 0 |
+| v3 | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| v3 | 60/40 honest | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| v3 | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+| leave | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| leave | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| leave | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| leave | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 139 to 283 |  | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 to 0 | 0 |
+| leave | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| leave | 60/40 honest | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| leave | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+| decay1 | 50/50 honest, 0% attacker | 360 | 467 to 473 |  | 121 to 126 | 120 to 122 / 121 to 123 | yes | 0 | 0 |
+| decay1 | 50/50 + 20% equivocator (sides 60/60) | 360 | 528 to 535 |  | 93 to 94 | 91 / 92 to 94 | yes | 0 | 0 |
+| decay1 | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 587 to 595 |  | 64 to 65 | 62 / 63 to 65 | yes | 0 to 0 | 0 |
+| decay1 | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 575 to 612 |  | 14 to 62 | 12 to 50 / 0 to 62 | yes | 0 to 0 | 0 |
+| decay1 | 40/40/20 honest | 360 | 815 to 822 |  | 142 to 144 | 140 to 142 / 140 to 140 / 166 to 166 | yes | 0 to 0 | 0 |
+| decay1 | 60/40 honest | 360 | 435 to 436 |  | 142 to 142 | 92 to 96 / 141 to 142 | yes | 0 to 0 | 0 |
+| decay1 | 70/30 honest | 360 | 403 to 414 |  | 154 to 156 | 0 to 4 / 154 to 156 | yes | 0 | 0 |
+| decay6 | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| decay6 | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| decay6 | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| decay6 | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 139 to 283 |  | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 to 0 | 0 |
+| decay6 | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| decay6 | 60/40 honest | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| decay6 | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+| hyst | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| hyst | 50/50 + 20% equivocator (sides 60/60) | 360 | 565 to 597 |  | 60 to 61 | 58 to 61 / 58 to 61 | yes | 0 | 0 |
+| hyst | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 596 to 603 |  | 60 to 62 | 59 to 60 / 60 to 62 | yes | 0 to 0 | 0 |
+| hyst | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 160 to 342 |  | 14 to 60 | 12 to 50 / 0 to 60 | yes | 0 to 0 | 0 |
+| hyst | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| hyst | 60/40 honest | 360 | 0 |  | never | 58 to 61 / never | yes | 0 to 0 | 0 |
+| hyst | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+| twotier | 50/50 honest, 0% attacker | 360 | 0 | 589 to 603 | never | never / never | yes | 0 | 0 |
+| twotier | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 | 653 to 660 | never | never / never | yes | 0 | 0 |
+| twotier | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 | 705 to 715 | never | never / never | yes | 0 to 0 | 0 |
+| twotier | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 139 to 283 | 713 to 720 | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 to 0 | 0 |
+| twotier | 40/40/20 honest | 360 | 0 | 1056 to 1062 | never | never / never / never | yes | 0 to 0 | 0 |
+| twotier | 60/40 honest | 360 | 0 | 516 to 564 | never | never / never | yes | 0 to 0 | 0 |
+| twotier | 70/30 honest | 360 | 0 | 523 to 532 | never | 0 to 4 / never | yes | 0 | 0 |
+
+
+P2. The poisoned eclipse (a 34% attacker plus a 20% pool; the eclipsed side holds 54% of total)
+
+| rule | eclipse h | conflicting final locks | conflicting provisional locks | first conflict, min | locks on the eclipsed side | honest-side stalls during | stalls after heal |
+|---|---|---|---|---|---|---|---|
+| v2 | 1 | 0 |  | never | 0 | 0 | 0 |
+| v2 | 2 | 0 |  | never | 0 | 0 | 0 |
+| v2 | 4 | 0 |  | never | 0 | 0 | 0 |
+| v3 | 1 | 0 |  | never | 0 | 0 | 0 |
+| v3 | 2 | 0 |  | never | 0 | 0 | 0 |
+| v3 | 4 | 0 |  | never | 0 | 0 | 0 |
+| leave | 1 | 0 |  | never | 0 | 0 | 0 |
+| leave | 2 | 0 |  | never | 0 | 0 | 0 |
+| leave | 4 | 0 |  | never | 0 | 0 | 0 |
+| decay1 | 1 | 0 |  | never | 0 | 0 | 0 |
+| decay1 | 2 | 17 to 24 |  | 109 to 111 | 22 to 24 | 0 | 0 |
+| decay1 | 4 | 257 to 264 |  | 109 to 111 | 263 to 265 | 0 | 0 |
+| decay6 | 1 | 0 |  | never | 0 | 0 | 0 |
+| decay6 | 2 | 0 |  | never | 0 | 0 | 0 |
+| decay6 | 4 | 0 |  | never | 0 | 0 | 0 |
+| hyst | 1 | 0 |  | never | 0 | 0 | 0 |
+| hyst | 2 | 0 |  | never | 0 | 0 | 0 |
+| hyst | 4 | 0 |  | never | 0 | 0 | 0 |
+| twotier | 1 | 0 | 19 to 24 | never | 0 | 0 | 0 |
+| twotier | 2 | 0 | 137 to 145 | never | 0 | 0 | 0 |
+| twotier | 4 | 0 | 377 to 385 | never | 0 | 0 | 0 |
+
+
+P3. Long honest partitions with view-local weight, 12 days
+
+| rule | honest split | days | first lock per side, day | conflicting final locks | conflicting provisional locks | first conflict | every pre-heal lock kept | first lock after heal, min |
+|---|---|---|---|---|---|---|---|---|
+| v2 | 50/50 | 12 | 10.15 to 10.18 / 10.12 to 10.34 | 2890 to 3550 |  | 10.22 to 10.35 d | yes | 0 |
+| v2 | 60/40 | 12 | 5.15 to 5.27 / never | 0 |  | never | yes | 0 to 0 |
+| v3 | 50/50 | 12 | never / never | 0 |  | never | yes | 0 |
+| v3 | 60/40 | 12 | never / never | 0 |  | never | yes | 0 to 0 |
+| leave | 50/50 | 12 | never / never | 0 |  | never | yes | 0 |
+| leave | 60/40 | 12 | never / never | 0 |  | never | yes | 0 to 0 |
+| decay1 | 50/50 | 12 | 0.08 to 0.08 / 0.08 to 0.09 | 34146 to 34212 |  | 0.08 to 0.09 d | yes | 0 |
+| decay1 | 60/40 | 12 | 0.06 to 0.07 / 0.10 to 0.10 | 33931 to 34254 |  | 0.10 to 0.10 d | yes | 0 to 0 |
+| decay6 | 50/50 | 12 | 0.77 to 0.77 / 0.75 to 0.78 | 32120 to 32246 |  | 0.77 to 0.78 d | yes | 0 |
+| decay6 | 60/40 | 12 | 0.52 / 0.92 to 0.93 | 31545 to 31873 |  | 0.93 to 0.93 d | yes | 0 to 0 |
+| hyst | 50/50 | 12 | never / never | 0 |  | never | yes | 0 |
+| hyst | 60/40 | 12 | 0.04 to 0.04 / never | 0 |  | never | yes | 0 to 0 |
+| twotier | 50/50 | 12 | never / never | 0 | 34267 to 34418 | never | yes | 0 |
+| twotier | 60/40 | 12 | never / never | 0 | 34094 to 34381 | never | yes | 0 to 0 |
+
+### 5.3 Q1. Silent weight that keeps mining for 6 hours, then resumes
+
+| rule | silent weight | silent hours | first lock after the stop, min | stalled while silent | longest gap, min | first lock after resume, min | conflicting locks |
+|---|---|---|---|---|---|---|---|
+| v2 | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| v2 | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| v2 | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| v3 | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| v3 | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| v3 | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| leave | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| leave | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| leave | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| decay1 | 30% | 6 | 0 | 0 | 1 | 0 to 0 | 0 |
+| decay1 | 34% | 6 | 66 to 68 | 134 to 135 | 66 to 68 | 0 to 0 | 0 |
+| decay1 | 45% | 6 | 108 to 112 | 217 to 229 | 108 to 112 | 0 to 0 | 0 |
+| decay6 | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| decay6 | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| decay6 | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| hyst | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| hyst | 34% | 6 | 59 to 61 | 120 | 59 to 61 | 0 to 0 | 0 |
+| hyst | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| twotier | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| twotier | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| twotier | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+
+
+Q2. Acquired keys that sign, stay silent or leave, under v3 + leave 1 h (30 days)
+
+| bought weight | bought keys | attacker's peak share of the denominator | share at the end | holds the veto (1/3) | stalled checkpoints | conflicting locks |
+|---|---|---|---|---|---|---|
+| 40% | sign | 39.8 to 39.8% | 30.0 to 30.0% | day 1 to 19 | 0 | 0 |
+| 40% | silent | 39.8 to 39.8% | 30.0 to 30.0% | day 1 to 19 | 86402 to 86491 | 0 |
+| 40% | leave | 30.0 to 30.0% | 30.0 to 30.0% | never | 119 to 144 | 0 |
+| 49% | sign | 48.5 to 48.6% | 30.0 to 30.0% | day 1 to 23 to 24 | 0 | 0 |
+| 49% | silent | 48.5 to 48.6% | 30.0 to 30.0% | day 1 to 23 to 24 | 86371 to 86408 | 0 |
+| 49% | leave | 30.0 to 30.0% | 30.0 to 30.0% | never | 143 to 188 | 0 |
+
+Under v3 the silent bought 40 percent stalls every checkpoint of the 30 days (86,402 to 86,491), where `sim/results_v2.md` K at v2 measured 63,307 to 68,716: the frozen table keeps the bought weight in the denominator after the sliding table has aged it out, so a silent buyer pauses finality for a window, not until day 19 to 20. The leaving buyer holds 30.0 percent at most (its own hash), never the veto.
+
+### 5.4 Reading
+
+What holds. Every candidate keeps 0 conflicting final locks in every honest partition under two thirds (50/50, 40/40/20, 60/40, 70/30 for 360 minutes) except the fast decay, and every candidate conflicts at the 34 percent equivocator (139 to 612 locks in 360 minutes, the one-third bound of 3.11.2, unchanged). The leave rule's rows equal v3's in every partition, eclipse and equivocator case (no key leaves in those scenarios, which is the point: a partition does not sign leaves) and it is the only candidate that both ends tonight's pause in under an hour (0.04 days at 34, 45 and 50 percent: the one-hour delay) and keeps 0 conflicts in the 12-day splits.
+
+What breaks. The fast decay (T 1 h, r 0.5/h) conflicts in EVERY 360-minute partition, including 50/50 honest with no attacker (467 to 473 conflicting locks, both sides locking alone at minute 120 to 123, exactly T + 1/(2r) = 2 h) and the poisoned eclipse at 2 and 4 hours (17 to 264 conflicts, the eclipsed side locking the attacker's fork after 109 to 111 minutes); it also fails the 12-day splits in 2 hours (34,146 to 34,254 conflicts). The slow decay (T 6 h, r 1/24 per h) passes every 360-minute row because the decay has not started, then both sides of the 50/50 split lock alone at day 0.75 to 0.78 and the 60/40 at 0.52 and 0.93 (31,545 to 32,246 conflicts in 12 days): the hazard moved to the day scale, not removed. The hysteresis floor keeps the honest splits clean (the 60 side of 60/40 locks alone at minute 58 to 61, 0 conflicts) and reopens the equivocator bound: 20 percent across a 50/50 split gives 565 to 597 conflicting locks from minute 60 (the 13.3 percent bound of 3 October is back after H hours), and it does nothing for tonight's 45 percent departure (the stayers' 55 percent is under its 56.7 percent floor: 30.00 days, the same as v3). The two-tier's provisional tier conflicts in every partition and eclipse (516 to 1,062 provisional locks per 360 minutes, 19 to 385 in the eclipses, 34,000 in 12 days) while its final tier equals v3; it is a report of "the connected majority agrees", never a lock.
+
+The pass line (0 conflicting final locks in every scenario AND tonight's pause under an hour) is met by one candidate: the departure announcement. v2 would have met the hour on the devnet (35 minutes measured, 31 to 32 simulated at 45 percent) and not on mainnet (7.85 to 8.03 days); v3 meets neither (30.00 days, 120 devnet minutes, the frozen table's expiry, as the live chain is showing at the time of writing: 89.2 percent of the sliding table signing at 19:50Z and no lock).
+
+### 5.5 The aggregation path tonight (the coordinator's question of 19:3xZ)
+
+Measured: the 8 VRF-picked aggregators are drawn by weight (spec S1, fin-fixes); the fallback (any node, 15 DAA after the determination, aggregator `00000000`) produced 64 of the 251 certificates stored between 16:30 and 19:00Z; locks 6824 to 6842 formed while node 1 and the observer were down; the observer's node received 75 then 79 of 93 voters' votes through its 3 peers during the pause. The star the fleet forms is around the seed (`docs/bench-log.md`, the finality route: "on a Vast box the seed is the only peer"), not the Mac; if the seed fell, a one-peer box would lose blocks as well as votes, and the right fix is a peer floor (at least 4 outbound peers from the address book before a node reports synced), which is lane 5's bandwidth and p2p lane. Model of P(certificate | hub down) under the rule as written: with the fallback, a certificate forms whenever any node connected to two thirds of the signing weight exists, so the probability is 1 for any topology in which votes reach any node; without the fallback and with a star through the hub it is 0 for 8 aggregators or 800. The rule is already the right one; the harness case to add is `tools/finality-attacks` s4's shape (the eclipse) with the hub cut instead of a pool: N boxes peered to the seed and the hub, the hub killed for 300 s, pass line a lock within 2 checkpoints of the cut while two thirds of weight stays connected through the seed, and 0 conflicting certificates at the hub's return. Vote bytes per checkpoint are in 3.3 (26 KB at 93 voters, 2.3 MB at 8,192 single, about 1.2 KB aggregated).
+
+## 6. Ranked proposals
+
+| Rank | Proposal | Evidence | Model | Hours | Consequence per tier | Gate |
+|---|---|---|---|---|---|---|
+| 1 | The departure announcement (candidate iv): a `leave` item (key, DAA score, signature) carried in blocks; D = 1 h after inclusion the key is in no denominator (sliding and frozen) and its votes are invalid; the fleet and app send it on a clean stop | tonight's pause (3.1): 42.7 percent left in three minutes and the frozen table held finality for a window; sim T: first lock 1 h after the departure at 34, 45 and 50 percent, 0 conflicts in every P row, Q2: leaving bought keys gains the attacker nothing | section 4.2 arithmetic; `finality_horizon.py` `leave` | 6 (spec text 3.1 W7 and 3.3; node: the item, its carriage, `voters_at` and `frozen_table` exclusion, unit test; app and fleet library: send on stop; fast-time harness case) | home miner, rig: the app sends the leave on Stop, so a clean exit never holds the network; a crash still ages out over 30 days (v3) unless the operator sends the leave on return, which the app offers; pool: one leave per server on maintenance; holder: fewer and shorter pauses; rollup customer: the same; node operator: one more item type | harness: 45 percent of weight stops with leaves, first lock within D + 1 checkpoint, 0 conflicts in the 50/50 and 60/40 splits and the 34 percent eclipse; sim T and P rows reproduced on the node |
+| 2 | Operational rule, no protocol change: a standing box never leaves the live chain for an experiment, and any orchestrated departure over 10 percent of weight is staged in slices under 10 percent an hour | the rehearsal took 36.5 percent at once; sim L2 and M4: a gradual departure costs nothing (every lock re-freezes the table) | spec 3.7 item 2 | 1 (the fleet library refuses to swap a standing box's chain; a `--slice` on the rehearsal script) | fleet operator: the swap takes longer; everyone else: no pause | the next rehearsal: `finality_active` stays true throughout |
+| 3 | Aggregate-first vote verification and aggregated in-block carriage as the mainnet default (spec 3.4.2 item 2, decided) | 4.3: per-vote verification is 1.6 s per checkpoint per node at 1,000 voters and 13 s at 8,192 (approximate); the crate already has `aggregate` and `fast_aggregate_verify` | 4.3 table | 8 (node: batch the votes for one (index, hash) and verify once, bisect on failure; the in-block aggregate item; measure on the fast-time harness at 1,000 synthetic keys) | home miner, rig, pool: a node that stays under one core at 1,000 voters; node operator: the same; holder: lock delay flat at 2 to 3 s to 8,192 voters | fast-time harness with 1,000 and 8,000 synthetic voters: lock delay p50 under 3 s, CPU under 25 percent of one core, 0 conflicts |
+| 4 | Report the two-tier state (candidate ii) as `finality_provisional` beside `finality_active`, never as a lock | sim P: 516 to 1,062 provisional conflicts per 360-minute partition, 19 to 385 per eclipse, about 34,000 in 12 days, final 0; sim T: provisional 0 to 0.2 devnet minutes after tonight's departure | 4.1 | 3 (node RPC field, explorer and wallet copy; spec 3.9 row) | exchanges: a third row in the guidance table ("provisional: proof of work plus a majority of the connected weight; credit nothing on it"); a holder sees why the pause is a pause | the explorer shows the field through a forced pause on the devnet; the guidance text reviewed by an operator (O-3.13) |
+| 5 | The ZK light client's circuit as a phase-two design doc with a cycle measurement | 4.5: 15 to 35 M cycles per step, approximate; the pairing is the term to measure | `lightclient_cost.py` | 10 (an SP1 guest that verifies one certificate at 93 and 1,000 voters with the Fp2 precompiles; cycle count on the 5090 and a 12 GB card) | phone, bridge, rollup customer: the per-year columns of 4.5 become one proof; prover tiers: a steady 30-s job | measured cycles within 2x of the estimate; proof per checkpoint under 30 s on a proving-only 5090 |
+| 6 | Hub-cut harness case for the aggregation path | 5.5: the fallback carried 26 percent of tonight's certificates; the seed, not the Mac, is the fleet's star | 5.5 | 3 | fleet operator: a proven answer to tonight's question | the case passes as written in 5.5 |
+| 7 | Do NOT adopt the decaying denominator (i) or the hysteresis floor (iii) | sim P1 and P3 (5.2): decay1 467 to 473 conflicting locks in a 360-minute 50/50 honest split and 34,146 to 34,254 in 12 days; decay6 31,545 to 32,246 in 12 days; hyst 565 to 597 at a 20 percent equivocator from minute 60 | 4.2 | 0 | a holder keeps the one-third bound in every view | none: a negative result |
+| 8 | Do NOT make prover attestations a lock condition before the coverage gate | 4.6: coverage 2.4 to 4.7 percent tonight, lag p99 62 s | 4.6 table | 0 now; 12 after the gate | holder: no new pause source; rollup customer: nothing lost, the four-state reading exists | 99 percent of blocks proven within 60 s for 7 days, 3 provers per block |
+
+**1. The departure announcement.** Tonight's cost was a window-long pause caused by keys that left on purpose, under a job that knew it was taking them. The frozen table (F21) exists so that a side of a partition cannot fill its own table, and it does that; its price is that it cannot tell a departure from a partition. A signed leave is the one thing a departing key can give that a partitioned key cannot: it is seen, not inferred. Section 4.2 shows the one-third bound survives it in both halves of a split, the sim shows 0 conflicting locks in every partition, eclipse and equivocator row under it and a first lock one hour after a 34, 45 or 50 percent departure where v3 waits 30 days, and Q2 shows an attacker who buys keys to leave them is worse off than one who signs with them. The hour is a parameter: it must exceed the certificate relay plus one presence of the leave in blocks (minutes), and shorter is better for the operator; one hour matches the merge-depth bound and gives a key that leaves by mistake time to see it. What it does not cover: a crash, a power cut, a region going dark, which still age out as today; the app's Stop button and the fleet library send the leave, and a node that restarts after an unplanned outage can send it on return to shorten the pause from that point.
+
+**2. Staged departures.** Every lock re-freezes the table, so weight that leaves while locks continue ages out of the frozen table as it ages out of the sliding one (M4's "gradual departure costs nothing"). Ten percent an hour keeps the stayers over two thirds at every step for any total departure under a third per three hours. This is a fleet-library rule, one afternoon, and it would have kept tonight's finality on without any protocol change; proposal 1 covers the case where staging is not possible.
+
+**3. Aggregate-first verification.** The delay data of 3.2 is flat to 93 voters because the devnet's cost is the poll and the pump, not the pairings; the arithmetic of 4.3 says the pairings take over near 1,000 voters and break the 30-s cadence near 8,192. The crate the fork already uses has both halves of the fix; what is missing is the batching in `ingest` and the in-block aggregate item that 3.4.2 item 2 proposes. The gate is a synthetic-voter harness, which `tools/finality-attacks` can host (its `lib/net.mjs` starts nodes; a vmine with 1,000 keys is a flag away).
+
+**4. The two-tier report.** The provisional tier is the active-denominator rule the project rejected on 3 October, and the sim says again why: it conflicts in every partition. As a reported state it is useful to a holder who wants to know whether the pause is a silent third (provisional true: the connected majority still agrees) or a split (provisional conflicting on the two sides), and useless to an exchange, which must credit nothing on it. Three hours, mostly copy.
+
+**5 and 6** are measurements with a design attached, priced above. **7 and 8** are the negatives this lane is confident about: a denominator that shrinks on silence is the 3 October rule under another name, and a lock that waits for proofs is a lock that pauses whenever the proving market is thin, which it is.
+
+## 7. Open questions and what could not be run
+
+- The fleet wrote no lock-delay or voter-count row by 19:45Z (`block-rate-devnet2.md` is a template); the 93-voter figures here are node 1's own log. When RUN_A and RUN_B land, the 10 blocks/s row should be checked against 4.3's claim that the hop term, not the voter term, sets the delay.
+- The leave item does not exist in the node; the harness case of proposal 1 is designed, not run. Its interaction with W5 succession (O-3.11) and with a key that leaves and keeps mining (its blocks earn nothing, as the spec says for a succeeded key) needs the spec text.
+- BLS costs are approximate (crate benchmarks from memory, anchored by one measured JavaScript run). A `cargo bench` of `fast_aggregate_verify` at 93, 1,000 and 8,192 keys on the Mac is one hour and belongs with proposal 3.
+- The ZK light client's pairing cost in SP1 6.8.1 is the number the whole of 4.5 turns on; it is approximate until the guest of proposal 5 is counted.
+- The pause's end was not observed at the time of writing (expected about 20:40Z at the frozen table's expiry, or earlier if the departed boxes return); the observer rows will show which.
+- The box ran the sims at nice 19 under other agents' load; the tables are counts and days, not timings, so the load does not touch them.
+
+## 8. Summary for the coordinator
+
+Tonight's finality pause (first unlocked checkpoint 6843 at about 18:40Z, still paused at 19:30Z) is the two-thirds rule doing what it says, then the frozen table doing what F21 asked: 20 keys holding 42.7 percent of the frozen table left the live chain, the stayers held 53.1 percent at the first unlocked checkpoint and 74.9 percent of the sliding table from 19:14:53Z, and only Q5 explains why 74.9 percent did not lock; certificates formed through the hub outage and the aggregator fallback carried a quarter of them, so the topology hypothesis is refuted. The three findings: (1) under v2 the pause would have ended at 19:14:53Z, 35 minutes in, and on mainnet the same event is 7.7 days (v2) or 30 days (v3); (2) of the four candidate rules only the departure announcement keeps the one-third bound (0 conflicts in every partition row, first lock one hour after the departure), while decay and hysteresis reopen the double lock and the two-tier is a report; (3) renting a veto costs USD 8,424 x N x 0.52 for 30 days (USD 4,300 per GH/s of network), locking alone 2.03 x N for 30 days, and bought keys cost the same and decay in 30 days.
diff --git a/docs/analysis/horizon/frontier.md b/docs/analysis/horizon/frontier.md
new file mode 100644
index 000000000..db333c5d8
--- /dev/null
+++ b/docs/analysis/horizon/frontier.md
@@ -0,0 +1,675 @@
+# Horizon lane 7: frontier. Predictions to 2030, what no proof-of-work chain has shipped, and what Igneum can
+
+6 October 2026, evening UK. Lane 7 of the Horizon programme. Worktree `/Users/joshm/Projects/igneum-wt-horizon` (branch `horizon`, at origin/master 3f4f719). the project lead's words: "research anything else that we can research too, predictions, forward thinking, what we can actually do that has not been done or applied, think outside the box", and "be revolutionary". Main's bar: not features, but ideas that change what a proof-of-work chain is or what a GPU owner is to the world, each with its evidence, cost, gate, and the attack a Monero or Kaspa core developer would mount. I argue each attack as the project's own four personas would hear it (`.claude/agents/cryptographer.md`, `consensus-engineer.md`, `execution-engineer.md`, `miner-community-lead.md`).
+
+Nothing in this file is a prediction of the coin's price, an offer to sell anything, or a change to any consensus parameter. Every chip figure is arithmetic on cited memory and logic figures; every GPU figure names its bench entry; a figure from memory says approximate. No em dashes.
+
+**Read for grounding:** `docs/spec/00-overview.md`, `05-fees-and-economics.md`, `07-execution.md`, `09-pool-protocol.md`, `10-light-client.md`; `site/litepaper.html` (whole page, including "What Igneum does not claim"); `docs/fud-ledger.md` sections 3 (P1 to P10 present in the file; P11 to P23 are cross-referenced from the spec and round-3 entries), 4 (E1 to E8), 6 (C1 to C12), 9 (D1 to D6); `docs/commercial/prover-customer-brief.md`; `docs/design/payment-routes.md`, `developer-adoption.md`, `execution-layer.md`; `docs/analysis/chip-model-v3.md` sections 5 to 6; `docs/plans/counter-asic-3-status.md` section 4; `docs/analysis/prover-tiers-real-cards.md` (eleven rented cards, 6 October); `docs/analysis/economy-2026-10-04.md`; `docs/analysis/security-budget.md`; `docs/bench-log.md` line 2582 (rental cost of hash, measured 6 October); `vendor/rusty-kaspa/consensus/core/src/config/params.rs` (main checkout). `block-rate-devnet2.md` was still a template at 22:00 UK (RUN_A and RUN_B empty); nothing here depends on it.
+
+**Model:** `sim/horizon/frontier/frontier_model.py` (pure Python, no numpy, about 50 ms; `python3 sim/horizon/frontier/frontier_model.py > sim/horizon/frontier/out.md`). Every table below marked "model" is printed by it; its `INPUTS` block labels each input measured, cited, designed or approximate with the source. Not run under the lock: it is arithmetic, not a measurement.
+
+---
+
+## 0. Everything ranked by payoff over difficulty
+
+Payoff 1 to 5 is what the idea does for the chain's security, the coin's utility or the GPU owner's position in the world, if it works. Difficulty is Claude-side hours to a measurable prototype (the project lead's rule: hours, never weeks). Verdicts: do now, prototype, watch, never. The "never" rows carry a sharp reason so the rest are not fantasy.
+
+| Rank | Idea | Payoff | Hours | Verdict | One line why |
+|---|---|---|---|---|---|
+| 1 | 3.3 The weight table carried inside the recursive segment proof: a consensus proof at mergeset cost, so a browser verifies finality from one proof and asks no node for the voter set | 5 | 60 | do now (design and guest prototype) | Phase two's hardest item becomes incremental: each segment proof updates W2 by its own blue blocks; the cost is one BLS aggregate verify per 30 s inside the zkVM, which SP1 has precompiles for (approximate) |
+| 2 | 3.2 Work-stake: vote weight as the external-job bond | 5 | 24 | prototype | A bond nobody can buy: 30 days of blocks. The at-risk pool income is thousands of IGN against a 0.0015 IGN coin bond (model section 3); the design stays "no stake" because weight is work, not coins |
+| 3 | 3.7 Reproducible-build attestations in a registry contract; Ember refuses a release under N of M attestations | 4 | 12 | do now | Bitcoin's guix.sigs with the chain as the sigs repo; closes the devnet's "release key acts as operator" sentence (litepaper, Governance) |
+| 4 | 3.4 A WebAssembly verifier of the wrapped block proof in the tab | 4 | 16 | do now | Three working precedents (a16z Helios WASM, ProjectZKM ziren-wasm-verifier, xycloo wasm-groth16-verifier); the certificate half already runs at 58 to 155 ms (bench-log) |
+| 5 | 3.8 Ember as node, wallet and light client for everyone: node count equals miner count | 4 | 20 | do now | 1,000 testnet miners become 1,000 verifying nodes; Monero shows about 5,000 peers in 72 h (monero.fail), Ethereum 8,136 execution nodes (ethernodes); Sybil counts are irrelevant here because nothing counts nodes |
+| 6 | 3.15 A 30-s randomness beacon from the checkpoint VDF | 4 | 24 | prototype | The pipeline exists (10-min VDF, 4.47 ms verify); a drand-class beacon with no league and 120x drand's latency; honest limit is the class-group ASIC (Chia timelords) |
+| 7 | 3.1 The reward rule that prices rented hash out (pay per block falls when hash arrives faster than the 30-day weight) | 4 | 40 | prototype | Doubles the renter's break-even price (model section 2) and routes the cut to the proving pool, not to incumbents; the cost is a 30-day income ramp for honest newcomers, which the vote already imposes |
+| 8 | 3.5 Continuous miner-voted parameters, bounded per block like Ethereum's gas limit, for `B_p`, the floors and the window | 3 | 30 | prototype | Replaces two-week 60 percent proposals with a drift anyone can read on the chain; Kaspa's Crescendo was a fixed DAA score (`params.rs:648`), Bitcoin's BIP9 a 95 percent tally; neither moves a number continuously |
+| 9 | 3.16 The hourly program swap as a research dataset and the fleet library as a product | 3 | 10 | do now | 8,760 random kernels a year, compiled on three vendors with per-variant timings; compiler and GPU-architecture researchers have no such corpus; income small, standing large |
+| 10 | 3.13 Igneum as the settlement layer for GPU rental | 3 | 40 | prototype (escrow plus sampled verification) | The chain's fee is 3 to 5 orders under a 7 to 15 percent platform take (model section 5), but it can settle only what it can verify; the verifiable subsets are named |
+| 11 | 3.6 Treasury-less audit funding: burn-redirect bounties by 60 percent signal, review escrow on upgrade proposals | 3 | 20 | watch | The money exists only when the chain is used (USD 1,600 to 16,000 per 30 days at launch traffic, model section 4), and it is the switch spec 5.5 removed, with a veto |
+| 12 | 3.14 Proofs sold to AI labs for verifiable inference | 2 | 40 | watch | zkLLM: 803 s of proving per forward pass on LLaMA-2-13B (arXiv 2609.27367 citing 2404.16109); the competitor is a USD 0 TEE attestation on H100-class cards the fleet does not own |
+| 13 | 3.9 Hardware wallets that verify proofs | 2 | 12 | never on the secure element; do the companion verify | A bn254 pairing on a Cortex-M-class secure element is seconds to minutes (approximate); Ledger and Trezor do their heavy work in the companion app, and Igneum Wallet already verifies certificates with the node's code |
+| 14 | 3.12 The fleet as a public compute market (rendering, inference) priced in IGN | 2 | 60 | never for unverifiable work; do for the verifiable subsets | An escrow without a verifier is a trust-me payment with lower fees; Render uses result quorums, Akash reputation, io.net attestations (secondary), none of which a chain can check |
+| 15 | 3.11 Miners paid for proving others' chains as the main income, the lottery a tiebreaker | 1 | 0 | never by 2030; watch | All of Ethereum L1's proving at the Sep 2026 tracker cost is USD 36 a day; Igneum's year-1 emission is USD 13,700 a day at 0.005 (model section 7); demand must grow 1,000x against a cost curve falling 3x to 30x a year |
+| 16 | 3.10 Proof-of-useful-work: the lottery hash partly a proof | 1 | 0 | never | Every coupling of leader election to proving re-opens Aleo (fastest prover wins); Ball et al. 2017 and Ofelimos 2022 show the sampleability conditions, and zkVM proving meets none of them |
+
+Predictions (section 2) are not ranked; they are inputs. The three ideas a Monero or Kaspa core developer would not have thought of are 3.2, 3.3 and 4.3 (the hourly program as a hardware census), argued in section 4.
+
+---
+
+## 1. Method
+
+Three kinds of work:
+
+1. **Trend lines with arithmetic.** Each 2030 prediction has a cited anchor (a product page, a tracker, a standards body, a secondary analysis labelled as such) and a formula in the model script. Where the trend is from memory (consumer VRAM generations) the row says approximate.
+2. **Idea arithmetic.** For the five ideas whose value depends on numbers (the rental tax, work-stake, the burn bounty, rental settlement, the proving-income ceiling) the script prints the table and the document reads it. The attack costs use the measured rental entry (`docs/bench-log.md` line 2582: 1,748 MH/s for USD 20.44 an hour, USD 0.0117 per MH/s-hour, about USD 11.69 per GH/s-hour) and are given per GH/s and evaluated at 1, 10, 100 GH/s and 1 TH/s, as the brief asks.
+3. **Prior art.** WebSearch on 6 October 2026 for every idea; the paper or repository that tried it is cited, or the idea is marked "new" when none was found. Claims about other chains cite the repository file when a clone exists in the main checkout (`vendor/rusty-kaspa`) and are marked "not cloned, approximate" otherwise.
+
+No simulator in `sim/` was re-run and no node harness was started: every idea here is a design question whose first gate is a measurement named in its section, and tonight the fleet, PC 1, PC 2 and the devnet were in use for the class v4 rehearsal and the Devnet 2 block-rate runs. What I could not run is listed in section 6.
+
+---
+
+## 2. Predictions to 2030
+
+Each row: the trend, its anchor, the arithmetic, and what it does to the chip model and the proving tiers. Tables marked model are `frontier_model.py` section 1.
+
+### 2.1 GPU memory per card
+
+| Year | Flagship consumer card | GB | Label |
+|---|---|---|---|
+| 2016 | GTX 1080 | 8 | approximate (from memory) |
+| 2018 | RTX 2080 Ti | 11 | approximate |
+| 2020 | RTX 3090 | 24 | approximate |
+| 2022 | RTX 4090 | 24 | approximate |
+| 2025 | RTX 5090 | 32 | cited (`chip-model-v3.md` 5.1: 16 x 2 GB GDDR7 on 512 bits) |
+
+Compound growth 1.167 a year (4x in 9 years). Extrapolated: 51 GB in 2028, 69 GB in 2030 (model). The module arithmetic is sharper than the curve: a 512-bit board is 16 devices; Micron has ended 2 GB GDDR7 (TrendForce, 24 September 2026, via `chip-model-v3.md` 5.1) and 3 GB devices are USD 60 to 70, so the next flagship is 48 GB (16 x 3 GB) and 64 GB is the 2030 shape. The RTX 60 series on Rubin (GR20x) is reported for 2028 after two slips (kopite7kimi via videocardz.com and thepcenthusiast.com; rumour, not a product). Datacentre: HBM4 at 36 GB per 12-high stack, 288 GB per GPU on Rubin NVL72 (Wikipedia HBM page, Micron March 2026 production).
+
+What it does to the chip model: nothing for the stored-dataset chip (f = 1), whose memory is already 24 to 32 GB against a dataset of 2 GiB growing to 4 GiB at year 4 (`chip-model-v3.md` 5.7: dataset size is "not a lever against this chip"). What it does for miners: the dataset schedule (2 GiB, doubling at years 4, 12, 28; litepaper) stays under every card from 8 GB for twelve years, and the proving side, not the mining side, is what wants VRAM (section 2.6).
+
+### 2.2 Memory dollars per GB
+
+| Point | USD per GB | Source |
+|---|---|---|
+| 2023, GDDR6 | 3.38 | Tom's Hardware, "GDDR6 VRAM prices plummet", USD 27 per 8 GB |
+| 2025, GDDR6 | 2.50 | TechSpot, "AI is eating all the DRAM" (2026) |
+| 2026, GDDR6 | 3.30 | TechSpot, same |
+| Sep 2026, GDDR7 2 GB device | 10.00 | TrendForce via `chip-model-v3.md` 5.1 |
+| Sep 2026, GDDR7 3 GB device | 21.67 | TrendForce (USD 60 to 70 per device) |
+| Oct 2026, HBM3E 36 GB stack | about 8.3 | siliconanalysts.com/data/hbm-pricing (factory gate; contract about 2x), approximate |
+| Oct 2026, HBM4 36 GB stack | about 15.3 | siliconanalysts.com (USD 550 per stack); Samsung quoting USD 4.50 to 4.90 per Gb for HBM4 against 1.50 for HBM3E (BigGo Finance), approximate |
+
+GB per dollar fell in 2026 for the first time in a decade and DRAM supply is forecast tight through 2027 with new fabs in 2028 (SoftwareSeni "HBM4 delays and GDDR7 shortages"). Memory is reported at 70 to 80 percent of the bill of materials of high-VRAM consumer cards by late 2025 (BuySellRam, secondary).
+
+What it does to the chip model: the f = 1 chip and the GPU buy the same devices, so the ratio of their memory bills is fixed; what moves is the share of each bill that is memory. The chip's bill is about 70 percent memory (USD 320 of USD 470, `chip-model-v3.md` 5.4) and the 5090's about 16 percent at MSRP (USD 320 of USD 1,999) or 9 percent at the 2026 street price of USD 3,695 (localaimaster.com). A doubling of device prices raises the chip's cost 1.7x and the card's 1.1x to 1.2x: **the stored-dataset chip gets dearer relative to the GPU through 2027**, and the dollars-per-MH/s row (USD 2.8 against 14.7 at MSRP, 5.4 against 27 at street prices) narrows a little and no more. The per-joule row does not move at all, and per joule is where the chip wins (section 2.3).
+
+### 2.3 Random-read bandwidth: GDDR7, HBM3E, HBM4
+
+The lottery is latency-bound: one hash advances one dependent 4-byte read per memory latency, so the number that matters is random reads per second per watt, not GB/s (`chip-model-v3.md` 5.3 and 5.5). That ceiling is set by bank count and activate windows (tRC, tFAW), not by pin speed, so 48 Gbps GDDR7 is 28 Gbps GDDR7 here, and HBM3E is HBM3.
+
+| Memory system | Reads/s ceiling | Why | Label |
+|---|---|---|---|
+| GDDR7, 16 devices, 512-bit (the 5090 board) | 21.3 G | 4 activates per 12 ns per channel x 64 channels | approximate (`chip-model-v3.md` 5.3) |
+| RTX 5090 measured | 17.5 G | 82 percent of the ceiling | measured (bench-log Counter ASIC 2.0) |
+| HBM3 or HBM3E, one stack | 10.7 G | 16 channels | approximate |
+| **HBM4, one stack** | **21.4 G** | JEDEC JESD270-4 raises channels per stack from 16 to 32, each with two pseudo-channels (allaboutcircuits.com, EDN), which doubles activate parallelism if tFAW per channel holds | approximate, derived (model 1.3) |
+| A 48 GB GDDR7 board | 21.3 G | capacity does not add channels | approximate |
+
+The f = 1 chip in 2028 on HBM4 (model 1.4; every figure arithmetic, approximate):
+
+| Chip | MH/s per chip | W bare / with a 150 W shadow core at k = 1 | uJ per hash bare / shadow | Gain per joule vs the 5090 bare (2.40 uJ) | Gain under the class v4 shadow (card 2.95 uJ at N = 100,000) |
+|---|---|---|---|---|---|
+| GDDR7 f = 1 (today's row) | 166 | 78 / 228 | 0.47 / 1.37 | 5.1x | 2.2x |
+| HBM3 one stack | 84 | 27 / 177 | 0.32 / 2.12 | 7.5x | 1.4x |
+| HBM4 one stack (2028) | 167 | 36 / 186 | 0.22 / 1.11 | 11.0x | 2.6x |
+
+**Prediction:** HBM4 doubles the stored-dataset chip's rate per stack at about the same watts, so its bare per-joule edge rises from about 7x to about 11x, and under the class v4 shadow from about 2.3x to about 2.7x. The lever that answers it is N, the program work in the latency shadow: at N = 200,000 the HBM4 chip reads 1.74x at k = 1, at N = 330,000 (the 5090's full ALU budget) 1.33x (model 1.4). The verifier cost is N x 32 ops per warp: about 1 ms at N = 100,000 on one M5 Max core (measured class, counter-asic-3-status item 8), about 3 ms at 330,000, inside the 10 ms gate; the 2019-class core is unmeasured (O-1.14).
+
+**Consequence and proposal (for the coordinator, not a change tonight):** write the schedule for N into the era draw at genesis, the way the dataset size already is: a candidate is a doubling of N per era until the verifier gate binds (about 1,000,000 ops, 10x of headroom on the M5 Max). The memory generation it answers arrives every two to three years and the chain must not need a human release to answer it. Per tier: no hash-rate cost while cards stay latency-bound (the M5 Max binds at about 290,000, the 9070 XT at about 650,000, approximate), watts up toward TGP (a 5090 from 326 toward 575 W, which the Ember power cap already manages), a verifier cost nodes and pools pay in milliseconds.
+
+### 2.4 Price per card
+
+| Card | Launch MSRP | 2026 street | Source |
+|---|---|---|---|
+| RTX 5090 | USD 1,999 | USD 3,695 to over 5,000 | `chip-model-v3.md` 5.1; localaimaster.com; tech-insider.org ("RTX 5090 tops USD 5,000"), secondary |
+| RTX 4090 | USD 1,599 (approximate) | rental USD 0.28 to 0.60 an hour (gpus.io median) | rental cited, MSRP from memory |
+
+Prediction: consumer card prices track memory prices through 2027 and ease in 2028 when fab capacity lands. For Igneum the price per card matters twice: the honest fleet's capital cost (not in the security budget, which is power only, `security-budget.md` section 6) and the renter's hourly price, which fell to USD 0.21 to 0.44 per 5090-hour on Vast.ai (getdeploying.com, 6 October 2026) even as purchase prices rose, because rented supply is sunk capital. **The rental market, not the purchase market, prices the 51 percent attack**, and the measured entry is USD 11.69 per GH/s-hour at RunPod list prices with the market unable to supply 20 more pods when asked (bench-log line 2582). At a TH/s: USD 11,700 an hour, and no supply.
+
+### 2.5 The chip-fab cost curve
+
+| Node | Mask set | Source | Igneum reading |
+|---|---|---|---|
+| 28 nm | USD 1 to 3 M | TubeTime (3 M); VBsemi (over 1 M) | The f = 1 memory-controller chip: no mixer on the die, a USD 5 to 30 M project (`asic-resistance-history.md` 2.5) |
+| 7 nm | USD 10 to 15 M | VBsemi; Hacker News thread | The f = 0 recompute chip with 256 MiB on die: USD 50 to 75 M |
+| 5 nm | USD 6.5 M (2026 data) to 30 M (2023 estimate) | siliconanalysts; HN | The shadow core (30 mm^2 at N5 for N = 100,000) drags the f = 1 chip toward this node, or to a reticle-class 28 nm die |
+| 3 nm | USD 15 to 22 M (Q4 2025), up to 40 M (older) | siliconanalysts; semianalysis | Not relevant to a chip whose cost is memory |
+
+Prediction: mask cost at a fixed node falls (5 nm quoted at 30 M in 2023, 6.5 M in 2026) while the leading node rises. So the shadow lever's fab-bill teeth weaken about 4x over three years; what holds in 2030 is the rate and joule arithmetic of 2.3, not the bill. **The stored-dataset chip gets cheaper to design and dearer to populate** through 2027, and the net is roughly flat against the GPU on dollars; per joule it gains with each memory generation unless N grows with it.
+
+### 2.6 zkVM proving speed per dollar
+
+| Point | USD per Ethereum L1 block proof | Hardware | Source |
+|---|---|---|---|
+| Jan 2025 | 1.69 | about 160 RTX 4090s for 90 percent real-time, USD 300 to 400 K cluster | HackMD "Ethproofs 2025 review" (willcorcoran); Succinct SP1 Hypercube blog (May 2025), secondary |
+| Dec 2025 | under 0.04 | 16 x RTX 5090 (SP1 Hypercube: 99.7 percent of blocks under 12 s; cluster under USD 100 K); Pico Prism 16 GPUs (Brevis blog, Feb 2026) | same, secondary |
+| Apr 2026 | | Cysic Venus 7.4 s on 24 GPUs | bex.co, secondary |
+| Aug 2026 | | ZisK p99 9.62 s on 4 x RTX 5090 | GitHub comparative analysis (Ricosworks1), secondary |
+| Sep 2026 | about 0.005 | "sub-half-cent" fields on ethproofs | same, secondary |
+
+The 20-month ratio is 338x, about 33x a year (model 1.6). That cannot continue: it is software catching up with hardware. The table below uses 1.5x, 3x and 10x a year from the shard times measured on eleven rented cards on 6 October (`prover-tiers-real-cards.md`, the v1 shard, 4.7 M cycles).
+
+| Card | Beside the miner today, s | Alone today, s | 2028 at 1.5x a year (beside / alone) | 2028 at 3x | 2028 at 10x | Under 10 s beside the miner in 2028? |
+|---|---|---|---|---|---|---|
+| RTX 3060 12 GB | 37.5 | 14.4 | 16.7 / 6.4 | 4.2 / 1.6 | 0.4 / 0.1 | at 3x or more |
+| RTX 4060 8 GB (core-only beside) | 22.1 | 18.4 | 9.8 / 8.2 | 2.5 / 2.0 | 0.2 / 0.2 | even at 1.5x |
+| RTX 4070 12 GB | 27.3 | 12.1 | 12.1 / 5.4 | 3.0 / 1.3 | 0.3 / 0.1 | at 3x or more |
+| RTX 4060 Ti 16 GB | 34.6 | 11.6 | 15.4 / 5.2 | 3.8 / 1.3 | 0.3 / 0.1 | at 3x or more |
+| RTX 3080 10 GB | 25.6 | 7.1 | 11.4 / 3.2 | 2.8 / 0.8 | 0.3 / 0.1 | at 3x or more |
+| RTX 3090 24 GB | 19.9 | 14.9 | 8.8 / 6.6 | 2.2 / 1.7 | 0.2 / 0.1 | even at 1.5x |
+| RTX 4090 24 GB | 26.1 | 6.3 | 11.6 / 2.8 | 2.9 / 0.7 | 0.3 / 0.1 | at 3x or more |
+| RTX 5070 12 GB | 37.2 | 4.8 | 16.5 / 2.1 | 4.1 / 0.5 | 0.4 / 0.0 | at 3x or more |
+| RTX 5090 32 GB | 10.7 | 6.3 | 4.8 / 2.8 | 1.2 / 0.7 | 0.1 / 0.1 | even at 1.5x |
+
+**Prediction:** at the floor rate (1.5x a year, which is the GPU hardware cadence alone) only the 24 GB and 32 GB cards mine and prove inside 10 s in 2028; at 3x a year (half the historical software rate) every card from the 3060 up does, and an 8 GB card alone proves in 2 s. **The block-proof target ("under 10 s as provers improve", CLAUDE.md) should be written as a function of the measured fleet median shard time, re-read each era, not as a date.** Per tier: a 12 GB desktop card is the swing tier; under 1.5x it proves alone in under 7 s but not beside its miner, so the hand-off profile (`prover-tiers-real-cards.md`) is the thing to ship, not a bigger card.
+
+What the cost curve does to the economics: the dollars per proof on the open market fall as fast as the volume rises, which is the arithmetic behind the "never by 2030" of 3.11.
+
+---
+
+## 3. The ideas, one section each
+
+Each section: the idea in a paragraph; why nobody shipped it (cited, or "new"); what Igneum already has; the model; hours; the gate; the per-tier consequence; the Monero attack; the Kaspa attack; the verdict.
+
+### 3.1 The reward rule that prices rented hash out
+
+**The idea.** The pulse attack M14 (a renter arrives, mines for an hour, leaves) is recorded in the ledger and the finality rule already denies rented hash a vote. The reward side is untouched: a renter is paid per block like anyone. The rule: the block subsidy paid to a producer is multiplied by `m = clamp(W30 / H_now, 0.25, 1)`, where `W30` is the 30-day work-weighted hash the finality window already computes (blue blocks per DAA second over the W2 window) and `H_now` the DAA-window estimate. The remainder `(1 - m)` of the subsidy goes to that block's proving-pool escrow, not to incumbents and not to a burn. Fees are untouched. Hash that arrives faster than the 30-day weight can follow is paid less per block until the weight catches up.
+
+**Why nobody shipped it.** Bitcoin Cash's EDA and every emergency rule since adjusted difficulty, never pay (approximate; the consensus engineer's list). Kaspa's DAA retargets per block over a sampled window (`vendor/rusty-kaspa/consensus/src/processes/difficulty.rs`, main checkout) and pays per block. Monero's RandomX changes what hash is, not what it is paid. Ethash coins and Ergo pay per block. No chain ties the subsidy to the ratio of fresh to sustained hash, because no chain had a sustained-hash number in consensus; Igneum has it in W2. Prior art searched: none found. New.
+
+**What Igneum already has.** W2 (blue blocks per key over 30 days) and the DAA estimate are both in the node; the proving-pool escrow exists in execution state (spec 7.7 item 6); the emission split is a state transition by rule (design 1.1).
+
+**The model** (frontier_model.py section 2, the measured rental entry USD 11.69 per GH/s-hour):
+
+| Network hash | Attacker adds | H_now / W30 | m | Attacker IGN per hour, no rule | With rule | Rent USD per hour | Break-even IGN price, no rule | With rule |
+|---|---|---|---|---|---|---|---|---|
+| 1 GH/s | 1 GH/s | 2.0 | 0.50 | 57,038 | 28,519 | 12 | 0.00020 | 0.00041 |
+| 10 GH/s | 10 GH/s | 2.0 | 0.50 | 57,038 | 28,519 | 117 | 0.00205 | 0.00410 |
+| 100 GH/s | 100 GH/s | 2.0 | 0.50 | 57,038 | 28,519 | 1,169 | 0.02049 | 0.04099 |
+| 1 TH/s | 1 TH/s | 2.0 | 0.50 | 57,038 | 28,519 | 11,690 | 0.20495 | 0.40990 |
+| 10 GH/s | 50 GH/s | 6.0 | 0.25 | 95,064 | 23,766 | 584 | 0.00615 | 0.02459 |
+
+A renter who doubles the network needs twice the coin price to break even; one who sextuples it needs four times. The diverted subsidy (57,000 to 85,000 IGN an hour in these rows) reaches the provers of the same blocks, who are the sustained population by sortition weight (spec 7.2). The honest-growth cost: a listing that doubles honest hash overnight cuts every miner's subsidy per block in half on top of the halving difficulty already imposes, until W30 catches up (the 30-day ramp of ledger C7, 0.9x by day 28 to 31). The floor 0.25 bounds the worst case at 4x.
+
+**Hours.** 40: the rule in the coinbase state transition (8), W30 as a consensus value from the window the finality module keeps (8), the economy simulator scenario f with and without the rule (8), the fast-time harness timestamp test (8), spec text and tests (8).
+
+**The gate.** (a) `sim/economy/sim.py` scenario f (a pool with the network's own hash arriving on day 10): incumbents' income under the rule above the no-rule row for all 30 days, newcomers' below. (b) The fast-time harness with headers back-dated inside Kaspa's 132-s tolerance: `m` moves under 2 percent. (c) Scenario d (a 20 percent operator vanishes): `m` stays at 1 (hash fell, so H_now < W30 and nobody is cut).
+
+**Per tier.**
+
+| Tier | Consequence |
+|---|---|
+| Home miner, 8 to 32 GB | In a doubling month, 25 percent of the pre-event subsidy instead of 50; unchanged in a steady month; a newcomer earns half-rate for its first month, as it votes nothing for its first month already |
+| Rig | The same per block; a rig that joins during a listing spike earns half for a month |
+| Pool user | The same through PPLNS; the pool's dashboard should show `m` |
+| Prover | Gains: the diverted share lands in the pool escrow and is paid by sortition weight |
+| Holder | Emission schedule unchanged in total; a larger share of it reaches sustained keys during spikes |
+| Rollup customer | Nothing |
+| Node operator | One more consensus value (W30) and one multiplier in the coinbase rule |
+
+**The Monero core developer's attack.** "You have built an incumbents' cartel. Every rule that pays old miners more than new miners entrenches whoever was there first; RandomX exists so that a newcomer with a laptop earns exactly what a veteran earns per hash. Your 'to the pool, not incumbents' is cosmetic: sortition is by weight, and weight is the incumbents. And your W30 is your own finality window, so a 30-day-old farm that goes dark and returns is 'sustained' while a thousand honest newcomers after a listing are taxed for a month. Qubic reached 23 to 34 percent of our hash for weeks in August 2025 (arXiv 2512.01437) by renting and by paying miners in its own token; your rule would have taxed the honest miners who moved to P2Pool to fight it, because they were new keys." Answer: the tax is per block not per key, so moving pools under the same key costs nothing (spec 9.6), and a returning farm's W30 is its own blocks, which it did not make while dark. The entrenchment point stands and is the cost the gate measures.
+
+**The Kaspa core developer's attack.** "H_now is your DAA estimate and the DAA is manipulable by timestamps inside the tolerance; a producer can lower H_now for its own block by back-dating within 132 s and raise its own m. Second, W30 is a function of the DAG past and differs between two honest tips every second; a reward that depends on it makes two honest nodes disagree about the coinbase amount of the same block unless W30 is read at a fixed ancestor (the checkpoint), and then it lags. Third, you have made emission depend on a window of 2.6 million blocks: your pruning point must now keep that window's per-second counts, which Kaspa prunes." Answer: read both numbers at the block's selected parent's last certified checkpoint (deterministic, in every node's past), accept the 30-s lag, and the timestamp test is gate (b). The pruning point already keeps the W2 window for finality (spec 3), so no new retention.
+
+**Verdict: prototype.** Doubles the renter's break-even and costs honest newcomers a month of half subsidy, which is the same month the vote already costs them; gate (a) decides whether miners will wear it.
+
+### 3.2 Work-stake: vote weight as the external-job bond
+
+**The idea.** The external job market needs a bond because a customer waits (spec 5.4, O-5.6: `maxPgas x f_p x 1.5` in IGN, slashed on a late or bad proof). Replace the coin bond with the key's 30-day vote weight: a key that claims an external job and delivers late or wrong loses a share `s` of its weight for 30 days, the way equivocation strips 100 percent (spec 3.6). Weight is blue blocks. It cannot be bought, borrowed or bridged; it can only be mined, in public, over 30 days. The job market then needs no IGN escrow from the prover, which removes the capital barrier that keeps home cards out of Boundless (ZKC collateral) and Succinct (PROVE staking, docs.succinct.xyz/docs/provers) while keeping a bond larger than either.
+
+**Why nobody shipped it.** Every proving network bonds in its own token (Boundless: stake scales with aggregate proving work per epoch, docs.boundless.network/zkc/mining/overview; Succinct: stake required to bid, more stake more concurrent auctions). No proof-of-work chain had a non-transferable, slowly earned weight per key until Igneum's finality rule. Decred's tickets are bought with coins; Ethereum's slashing is coins. New.
+
+**What Igneum already has.** W2 per key, the 30-day strip for equivocation, the sortition that already draws assignees by weight (spec 7.2), the job record format (design 6).
+
+**The model** (frontier_model.py section 3):
+
+| Key's hash share | Blocks per 30 days at 1 bps | 30-day pool income at risk, IGN | Lost at s = 25 percent | Lost at s = 100 percent | The coin bond for one 1 B-cycle job at the floor |
+|---|---|---|---|---|---|
+| 0.01 percent | 259 | 1,643 | 411 | 1,643 | 0.0015 IGN |
+| 0.1 percent | 2,592 | 16,427 | 4,107 | 16,427 | 0.0015 IGN |
+| 1 percent | 25,920 | 164,271 | 41,068 | 164,271 | 0.0015 IGN |
+| 10 percent | 259,200 | 1,642,706 | 410,676 | 1,642,706 | 0.0015 IGN |
+
+The at-risk amount is five to nine orders of magnitude above the designed coin bond, before counting the lost vote. A late proof must be defined in DAA time against the claim (the P9 decision's 120-s claim timeout is the starting value), with one strike of grace per 30 days so a partition does not strip an honest key on its first miss.
+
+**Hours.** 24: the strip rule in the finality module keyed by a job-fault record (8), the fault record in the job contract (design 6) with the evidence a node checks (8), tests and a devnet injection script (8).
+
+**The gate.** Phase 4 devnet: 1,000 jobs with a 10 percent injected late or wrong rate: every injected fault stripped; zero honest keys stripped across a 60-s partition; a customer's job never waits more than the claim timeout plus one open window.
+
+**Per tier.**
+
+| Tier | Consequence |
+|---|---|
+| 8 GB solo miner below dust (under 100 blocks in 30 days) | No weight, so no external jobs under this rule; shards (no bond) unchanged; the pool protocol gives it a route (the pool's key, the pool's weight) |
+| 12 to 32 GB home miner above dust | Takes external jobs with no IGN locked; one bad job costs a quarter of a month's sortition income and a quarter of its vote for 30 days |
+| Rig | The same, at the rig's weight; the rig operator's whole weight backs each job, so a rig claims only jobs it can finish |
+| Pool user | The pool's weight is the bond; the member's share of pool income carries the pool's record |
+| Prover | A reputation nobody can buy, visible on chain per key |
+| Holder | No IGN is locked in bonds, so no bond capital sits idle |
+| Rollup customer | A bond measured in 30 days of public mining instead of a token balance; the customer brief's "your chain's own bond and slashing apply" becomes "Igneum's weight is at stake" once jobs settle on Igneum |
+| Node operator | One more strip condition in a module that already strips |
+
+**The Monero core developer's attack.** "CLAUDE.md says no stake anywhere in consensus. You have just made the vote weight a stake: it is at risk for an execution-layer fault. Whatever you call it, a prover now rationally hedges by splitting its mining across two keys, one that votes and never proves, one that proves and holds dust weight, which your F17 says buys nothing for the vote but buys everything here: the proving key has nothing to lose. So the bond is only real for operators too small to split, which is backwards." Answer: the sortition draws assignees in proportion to weight (spec 7.2 step 2), so a dust key is drawn with probability near zero and the proving key must carry weight to be assigned at all; the hedge costs the prover its assignments. The attack is right that this is a stake of work; the design's "no stake" means no coin balance in consensus, and that still holds. The spec wording needs the distinction.
+
+**The Kaspa core developer's attack.** "'Late' is not a fact on a DAG. A proof included in a block at DAA score D is late relative to the claim at D minus T only along a chain; a reorg moves D. You will strip a key on one chain and not on another, and the strip is a consensus input to finality. Also, the fault evidence rides in blocks, so a producer who dislikes a prover can withhold its proof for T seconds and then carry the fault record. That is a griefing vector you did not have when nothing waited on a prover (ledger P9)." Answer: the evidence rule must be relative to the carrying block's own chain (as proof records are, spec 7.2 item 5), the deadline must be long relative to merge depth, and the withholding vector is real: a proof gossips to every producer, so withholding needs a majority of producers for T seconds, and a strip is only applied if no block in the carrier's past carried the proof. The griefing cost is one window of a majority, the same bound the finality rule already lives with.
+
+**Verdict: prototype.** The bond nobody can buy; the two attacks name the wording (work-stake is not coin-stake) and the rule (evidence relative to the carrier's chain) that the prototype must carry.
+
+### 3.3 The weight table carried inside the recursive segment proof: finality attested by provers, a consensus proof at mergeset cost
+
+**The idea.** Phase two's consensus proof is scoped as "a zkVM program over the 30-day header window and the vote certificates" (design 7; O-10.8), which is 2.6 million headers per proof and the reason it is phase two. But the segment proof already recurses: segment N verifies segment N minus 1 (spec 7.8 item 1, measured on the 5090). Carry the W2 weight table as a public commitment inside that recursion. Each segment's guest takes the previous segment's committed weight table, adds the blue blocks of its own mergeset per vote key hash (the segment is exactly the mergeset of its chain block, spec 7 terms), ages out the blocks that left the 30-day window, and commits the new table. Every 30 s, when a certificate exists for a checkpoint inside the segment, the guest verifies the BLS aggregate against the table it holds and emits "checkpoint i certified under rule v2 with x percent of total weight". The segment proof then attests both execution and finality, and a light client verifying one wrapped proof learns the certified checkpoint and the state root with no voter set fetched from any node. The provers are the attesters of finality, by construction, with no new role.
+
+**Why nobody shipped it.** Ethereum's sync-committee light clients (Helios, a16zcrypto.com "Building Helios") trust a committee and fetch it; Succinct's eth-proof-of-consensus (github.com/succinctlabs/eth-proof-of-consensus) proves sync-committee signatures in a SNARK but over a fixed committee, not a weight table that moves with every block. No proof-of-work chain has a weight table to carry. Mina carries a recursive proof of the whole chain but its consensus is stake (approximate, not cloned). The incremental-weight-in-recursion form: new.
+
+**What Igneum already has.** The aggregator guest with `chain_len` and `prev` (spec 7.8 item 1), the 340-byte `BlockOutput`, the canonical voter list and bitmap (spec 3.10 C3), SP1 with BLS12-381 precompiles (approximate: SP1's precompile set includes bls12-381 field operations; the pairing cost inside the guest is unmeasured), O-10.2 which already asks for a header commitment to the weight table.
+
+**The model.** Cost per segment: the segment adds at most 180 blocks per chain block at 1 BPS (mergeset limit, spec 7.1) times `N = 8` chain blocks, so about 1,440 table updates (a hash-map add and an age-out) per segment, which is negligible beside the execution; plus one BLS aggregate verification per certificate, at most one per 30 s. The BLS verify is the cost: G1 aggregation of up to V keys and one pairing. In SP1 with the bls12-381 precompiles a pairing is of the order of tens of millions of cycles (approximate, from memory of the precompile benchmarks; unmeasured here), so at 1 pgas = 1,000 cycles it is tens of thousands of pgas, about one shard's budget (`S_p` 30,000 pgas) per 30 s. That is a real cost: about one extra shard per 30 blocks, 3 percent of proving capacity at launch traffic. The table commitment is 32 bytes in the public values; the voter list for a 10,000-key table is 10,000 x 60 bytes = 600 KB of witness per segment, which gossips with the shard witnesses (design 5.1: witnesses are not consensus data).
+
+**Hours.** 60: the guest's table update and commitment (16), the BLS verify inside the guest and its cycle count on the 5090 (16, needs PC 2 or a fleet box), the light-client path that reads the certified index from the public values (8), the spec text for 7.8 and 10 (8), a fast-time run where a partition's two certificates are both presented to the guest and it accepts one (12).
+
+**The gate.** (a) Cycle count of one certificate verification inside the guest under 50 M cycles on the pinned SP1 (so under two shards). (b) The browser card (spec 10.8) shows "voter set: verified" with no node asked for the set. (c) The fast-time C4 scenario (a certificate over a chain the node is not on, `docs/fud-ledger.md` C4 sweep): the proof refuses a certificate whose signers' weight at that block is under 2/3 of the table it carries.
+
+**Per tier.**
+
+| Tier | Consequence |
+|---|---|
+| Home miner, any card | Nothing changes in mining; a 12 GB prover's shard gets the certificate verification about once in 30 shards |
+| Rig, prover | About 3 percent more proving work at launch traffic, paid from the same pool; the aggregator's record grows by 32 bytes |
+| Pool user | Nothing |
+| Holder, wallet user | A phone or tab verifies "locked" from one proof and trusts no node for the voter set; the spec 10.1 row "voter list from nodes" is deleted |
+| Rollup customer | The bridge on Ethereum verifies one wrapped proof and needs no relayer or committee: this is the proof bridge of spec 7.3, delivered earlier |
+| Node operator | The witness gossip carries the voter list per segment (600 KB at 10,000 keys) |
+
+**The Monero core developer's attack.** "You have moved finality's safety from a BLS signature every node checks to a SNARK every node trusts. A soundness bug in SP1 (ledger P7) now forges not only a state root, which full nodes veto by native execution, but a certificate, which full nodes cannot veto because they verify the real BLS certificate separately and will disagree with the proof. Which do you believe? And your 2/3 test inside the proof is against a table the proof itself computed; a bug in the table update is a bug in finality, and it ships in a guest program, not in node code anyone reads." Answer: full nodes keep verifying the BLS certificate natively and the native-execution veto extends to the public values (a record whose certified index or table commitment differs from the node's own is invalid, spec 7.2 item 5 as written), so a forged certificate is, as for state, a light-client problem and never a chain split. The table update is a second implementation of W2 and must be differential-tested against the node's (gate c).
+
+**The Kaspa core developer's attack.** "The weight table is defined over the block's DAG past (W2 counts blue blocks in the past of the chain block); your segment is the mergeset of chain block C in GHOSTDAG order, so the incremental update is only correct if every block in the window is in exactly one segment's mergeset, which holds for blue and red blocks of the selected chain's mergesets, but a reorg of the selected chain re-cuts the segments and the table must be re-derived from the fork point. Your proof chain breaks at every reorg deeper than one segment, and at 10 BPS with k = 124 a reorg of 8 chain blocks is ordinary." Answer: correct, and the recursion already restarts at an unproven segment (spec 7.8 item 7, the unproven rule); a reorg deeper than a segment invalidates the records of the abandoned chain as it does today. The table commitment must therefore be part of the statement per chain block, re-proven on the new chain, which is what re-proving the segment already does. The cost at 10 BPS is the open question for the gate.
+
+**Verdict: do now (design and guest prototype).** It turns phase two's hardest item into an incremental one on code that exists, and it is the only road to "your browser verifies Igneum" with no node in the trust row.
+
+### 3.4 A WebAssembly verifier of the wrapped block proof in the browser
+
+**The idea.** The homepage card verifies a BLS certificate in JavaScript today (58 to 68 ms warm, 139 to 155 ms cold, bench-log round 6, P3). Ship the other half: the Groth16 or Plonk wrapper of the segment proof verified in WebAssembly in the tab, with the measured millisecond count shown.
+
+**Why nobody shipped it on a proof-of-work chain.** Because no proof-of-work chain proves its blocks. The working precedents are rollup-side: ProjectZKM's `ziren-wasm-verifier` (github.com/ProjectZKM/ziren-wasm-verifier: "Verify STARK, Groth16 and Plonk proofs in browser", one Rust codebase to native and WASM), xycloo's `wasm-groth16-verifier` (github.com/Xycloo/wasm-groth16-verifier, with a live demo), a16z's Helios shipped as `@a16z/helios` on npm with WASM bindings (github.com/a16z/helios issue 76 and the npm package).
+
+**What Igneum already has.** `site/verify/core.js` (BLAKE2b header hashes, canonical voter list, BLS aggregate over `@noble/curves`), the SP1 light verifier as a 58 MB native binary (bench-log, "the program id split"), the `wrap` step in the `ProofSystem` trait (design 5.6) unbuilt.
+
+**The model.** A Groth16 proof over bn254 is three group elements, about 128 bytes compressed (spec 10.5, approximate); verification is one multi-pairing. In WASM a bn254 pairing is of the order of 10 to 50 ms on a laptop core (approximate, from the ziren and xycloo demos' order of magnitude; unmeasured here). Bytes per day in phase two on-demand mode: 800 bytes per open (spec 10.5).
+
+**Hours.** 16: wrap the pinned aggregator proof to Groth16 with SP1's wrapper on a 24 GB fleet card (8, the P3 phase 2 benchmark brought forward), compile the verifier to WASM and wire it to the card (8). The wrapper's own cost on consumer hardware is the open measurement R4.
+
+**The gate.** The card shows the wrapped proof verified in the tab, with bytes and milliseconds, on a phone-sized viewport, against the live devnet; the number lands in the bench-log with the browser and the device.
+
+**Per tier.** A home miner's Ember node serves the proof to the tab; a holder with no node verifies state in the tab (the state root still rests on a certificate the client is given until 3.3 lands); a rollup customer sees the verifier it will run on its own chain; node operators serve one more 128-byte object.
+
+**The Monero core developer's attack.** "A verifier in a tab served by your domain verifies whatever your domain says the verifying key is. Your 'no middleman' is your web server. Monero's answer to this class is: run a node." Answer: correct, which is why spec 10.8 already removed "no node, no trust, no middleman" and why the phone app with a pinned seed list is the client that meets 10.6; the tab is a demonstration with its trust row stated on the card.
+
+**The Kaspa core developer's attack.** "Fine, it verifies a proof. Of which chain? The proof commits to a chain block hash; the tab needs to know that block is on the selected chain at or below a certified checkpoint, which it asks a node for (spec 10.4 item 4). You verified the arithmetic and trusted the topology." Answer: correct until 3.3 folds the certified index into the same proof.
+
+**Verdict: do now.** Cheap, precedented, and the phase 2 wrapper measurement has to happen anyway.
+
+### 3.5 Continuous miner-voted parameters, bounded per block, in place of two-week proposals
+
+**The idea.** Spec 5.8 sets a parameter the genesis rules leave to miners by a registered proposal passing 60 percent of blue blocks over two weeks. For the handful of parameters that are dials rather than switches (`B_p`, `S_p`, the base-fee floors, the exclusive window, the external claim timeout) use Ethereum's gas-limit mechanism instead: each block carries the producer's vote for each dial, the value in force at a block is the median of the window's votes, and the median may move at most 1/1,024 of its value per block, within a hard range fixed at genesis. No proposal, no bit, no two-week window, no human. Switches (a new instruction family, a proof-system version) keep the 90 percent signal.
+
+**Why nobody shipped it this way.** Ethereum moves its gas limit by producer vote, bounded to 1/1,024 of the parent's limit per block (geth `core/block_validator.go`, VerifyGaslimit; approximate, not cloned). Bitcoin's BIP9 is a 95 percent tally over 2,016 blocks with LOCKED_IN and one more retarget before activation (bips.dev/9); BIP 135 generalised the thresholds. Kaspa's Crescendo was a fixed DAA score: `crescendo_activation: ForkActivation::new(110_165_000)` for mainnet and `88_657_000` for testnet (`vendor/rusty-kaspa/consensus/core/src/config/params.rs` lines 648 and 704; the struct at line 28), with nodes connecting only to protocol version 7 peers from 24 hours before (docs/crescendo-guide.md at v1.0.0). Monero's upgrades are scheduled hard forks, formerly every six months, now every 9 to 12 months (getmonero.org). Igneum's own 6 October incident was a fixed-height activation crossing a half-updated fleet (CLAUDE.md, Devnet 2 rules). Nobody applied Ethereum's dial to a proof-of-work chain's economic parameters. The combination is new; the mechanism is Ethereum's.
+
+**What Igneum already has.** The header's version bits (O-5.3 candidate), the 60 percent rule, the fee parameters as `Params.fees` per network (spec 5.11), the DAA window every node computes.
+
+**The model.** At 1/1,024 per block and 1 BPS a dial can move 2.3x in a day (1.001^86,400) if every producer votes the same way, 1.07x if 51 percent do and 49 percent vote the other way (the median moves only when a majority agrees, and then one step per block). A hostile 51 percent can therefore walk a dial to the genesis bound in days; the bound is the defence, as it is on Ethereum (the gas limit has a hard floor and no cap besides the vote).
+
+**Hours.** 30: the vote field and median rule (10), the clamp and bounds in `Params` (6), tests including the 51 percent walk (8), spec 5.8 text (6).
+
+**The gate.** On the fast-time harness, 100 producers at 60/40 split: the dial moves toward the 60 side at the predicted rate and stops at the bound; with a 50/50 split it does not move; a producer that votes outside the range is invalid.
+
+**Per tier.** Miners set the dials with their blocks (Ember shows the vote and defaults to "hold"); a pool votes for its members in mode A and B templates and the member sees it (spec 9.4); provers watch `B_p` and `S_p` move with the fleet's measured shard time instead of waiting for a human; holders and rollup customers see fee floors that track usage; node operators gain one field per header.
+
+**The Monero core developer's attack.** "You have handed the fee floor to whoever has 51 percent of blocks, with no social veto. On Monero the dynamic block size has a penalty curve exactly so that a majority cannot cheaply walk it; your 1/1,024 is a speed limit, not a cost. A pool with 51 percent lowers `f_p` to its floor, bloats blocks with wash gas it no longer pays for, and the provers eat the backlog." Answer: the base fee is burned in full, so wash gas is never free (ledger E3), and the backlog rule halves `B_p` regardless of the vote (design 4.3); the range bound caps the walk. The point stands that a dial needs a cost curve, not only a speed limit: the prototype should add Monero's shape (a vote away from the median costs the producer a fraction of its subsidy).
+
+**The Kaspa core developer's attack.** "A per-block vote on a DAG: which blocks vote? Blue blocks of the selected chain's mergesets, in order, and the median over a window is a function of the block's past, fine. But a parameter in force 'at a block' must be the same for every node validating that block: use the value at the block's selected parent's checkpoint, or two honest nodes meter the same transaction at two prices. You have the same determinism bug the proof-record rule had before P11." Answer: correct; the value in force is read at the last certified checkpoint in the block's past, as 3.1's W30 is.
+
+**Verdict: prototype.** The chain's economic dials follow the fleet without a human; the two attacks give it the two rules (a cost curve, a checkpoint-anchored read) it needs.
+
+### 3.6 Treasury-less audit funding: bounties from the burn, a review escrow on upgrades
+
+**The idea.** the project lead removed the dev fund (spec 5.5) and the project pays audits from the Ember dev fee and founders' mined coins (litepaper). The question: money for audits that comes from users paying for something, with no standing address. Two mechanisms. (a) **Burn redirect.** The base fee burns to nobody. A reproducible break submitted under spec 0.5 and accepted by 60 percent of blue blocks over a window redirects the base-fee burn of the next 7 (execution) or 30 (consensus) days to the submitter's address, once, then returns to burning. No address exists between events. (b) **Review escrow.** An upgrade proposal under 5.7 must escrow IGN in a contract that pays reviewers named in the proposal on a 60 percent "review complete" signal, or refunds on failure; the proposer pays, which is a user paying for a thing (the right to propose code).
+
+**Why nobody shipped it.** Zcash funds development from the block subsidy (NU6: 8 percent to Zcash Community Grants, 12 percent to a protocol lockbox, ZIP 1015); Decred from a 10 percent treasury spent by stakeholder vote, capped at 4 percent of balance a month since January 2026 (DCP-0013); Monero from the CCS, donations off-chain; Optimism from an 850 M OP reserve for retro funding. Bug bounties pay 10 percent of funds at risk (Immunefi's standard) from the protocol's own treasury; Code4rena runs contests at zero platform fee since 2025. Nobody funds audits from a burn redirect, because a burn redirect is a subsidy to a payee by rule, and the chains that wanted that built a treasury. New in form; a dev fund in substance (see the Monero attack).
+
+**What Igneum already has.** The base-fee burn in both dimensions, the 60 percent signalling, the ledger's break-submission rule (spec 0.5), the proposal registration transaction (spec 5.8).
+
+**The model** (frontier_model.py section 4):
+
+| Chain traffic (fraction of full blocks) | Base fee burned per day, IGN | 30-day redirect, IGN | USD at 0.02 | USD at 0.10 |
+|---|---|---|---|---|
+| 0.01 | 2,592 | 77,760 | 1,555 | 7,776 |
+| 0.10 | 25,920 | 777,600 | 15,552 | 77,760 |
+| 0.50 | 129,600 | 3,888,000 | 77,760 | 388,800 |
+| 1.00 | 259,200 | 7,776,000 | 155,520 | 777,600 |
+
+At launch traffic a 30-day redirect is under one audit contest; at half-full blocks it is a serious bounty. The money exists only once the chain is used.
+
+**Hours.** 20 for the escrow contract and the redirect rule as a proposal kind; 0 for the honest alternative, which already exists.
+
+**The gate.** None that a simulator settles; the gate is the project lead's: does a per-event, miner-approved payee with no standing address pass the test that removed the dev fund?
+
+**Per tier.** Miners vote on each payout with their blocks and can refuse all of them; holders see supply that would have burned paid to a named person; a prover, rig, pool user and rollup customer see nothing unless a break affects them; the node operator gains a proposal kind.
+
+**The Monero core developer's attack.** "This is a dev fund with extra steps. You removed a 5 percent fund because 'a switch that routes money to an address somebody controls is the first thing a critic points at'; you have now written a switch that routes money to an address somebody controls, gated by the same miners who gate everything else, and you have made the miners the judge of which cryptographer gets paid. Our CCS works because it is off-chain and voluntary and no consensus rule touches it. Keep the burn a burn." The attack is right. Answer: there is no counter besides the honest one: the alternative is the one the litepaper already states (client fee, founders' mined coins, grants off-chain), and the ledger should carry this entry as considered and rejected on the same ground as E4.
+
+**The Kaspa core developer's attack.** "Also a soft target: a miner cartel with 60 percent invents a break, 'accepts' it, and un-burns 30 days of fees to itself. Your spec 0.5 reproducibility rule is a human judgement; consensus cannot check it." Correct.
+
+**Verdict: watch.** Design it, do not ship it; record it in the ledger beside E4 as the honest answer to "where do audits come from with no fund": from the company's dev fee and from the people who care, in the open.
+
+### 3.7 Reproducible-build attestations in a registry contract; Ember refuses a release under N of M attestations
+
+**The idea.** Bitcoin Core builds with Guix and independent builders publish signed attestations of the output hashes to the `guix.sigs` repository (`bitcoin/bitcoin` PR 21462 added `guix-attest` and `guix-verify`; bitcoinops.org reproducible builds). Put the attestation registry on Igneum: a contract where a builder set posts `(release tag, artefact hash, signature)`; the Ember updater refuses to install a release whose artefact hash has fewer than N attestations from M builders listed in the release key's policy, and shows the attesters. Windows exes are already reproducible here (`-Wl,--no-insert-timestamp`, CLAUDE.md), so the hash is well defined.
+
+**Why nobody shipped it on chain.** Bitcoin keeps its sigs in a Git repository because Bitcoin has no contract state; Ethereum clients attest off-chain. Igneum has an EVM and a signed updater that already checks a manifest hash. The on-chain registry read by the updater: new in placement, not in idea.
+
+**What Igneum already has.** Reproducible builds on the box (`tools/build-remote.sh`, `cross-remote.sh`), the signed manifest and updater in Ember (litepaper, Ember table), the commit-string check (`tools/ci/commit-string-check.sh`), the release key in genesis (spec 8).
+
+**The model.** Trust goes from one key (the release key, which on the devnet "acts as the operator", litepaper Governance) to N of M builders, with M growing as outside builders arrive. The failure the rule catches: a release signed by a stolen key whose hash no independent builder reproduced. Cost per release: one transaction per builder.
+
+**Hours.** 12: the registry contract (4), the updater's N-of-M check and the display (6), the CI step that posts the box's attestation (2).
+
+**The gate.** A release whose binary is altered after signing is refused by Ember on three machines; a correct release with N attestations installs; the registry shows both.
+
+**Per tier.** Every miner's updater refuses an unattested binary and names who attested; a pool operator and a node operator get a chain-readable answer to "is this the binary everyone runs"; holders and rollup customers see that the "release key as operator" sentence has a closing mechanism.
+
+**The Monero core developer's attack.** "Who are the M builders at launch? The founder, under three names. Reproducible builds are only as good as the independence of the builders, and a pseudonymous one-founder project has one builder. Gitian and Guix were worth something because dozens of people with names attested. You are moving a sigs repo on chain; you are not adding a builder." Answer: correct, and the registry is what lets a second builder exist with a public record; the gate should be the first attestation from a machine the project does not own.
+
+**The Kaspa core developer's attack.** "A node that reads a contract to decide whether to update is a node whose update path depends on the chain being live and unforked; during the 6 October two-sided chain you would have had two registries." Answer: the updater installs nothing while finality is paused, which is a rule worth adding anyway.
+
+**Verdict: do now.** Twelve hours, and it closes a sentence the litepaper has to carry today.
+
+### 3.8 Ember as node, wallet and light client for everyone
+
+**The idea.** Ember already runs a node, mines, proves and keeps a key; Igneum Wallet reads Ember's node when present. Make the one app the client for everyone: a holder who does not mine runs Ember in "verify" mode (the light client of spec 10 inside the same binary, the node card to pin a seed), a miner runs it in full mode. Every miner is a node; every holder is at least a light client; nobody runs a browser wallet against someone else's RPC by default. The node count becomes the miner count plus the holders who chose full mode.
+
+**Why nobody shipped it.** Bitcoin Core is a node and a wallet but not a miner; miners run separate software (approximate). Monero's GUI runs a node and a wallet and can mine on the CPU (approximate; the litepaper's reason for no CPU lane is botnets). Kaspa's miners run kaspad plus a separate miner. Igneum's Ember already supervises node, miner, prover and key (litepaper, Ember table), so the step is small. Not new; the combination with the light client and the vote key in one binary is Igneum's.
+
+**What it does to node counts and Sybil counts.** Bitcoin: 24,682 reachable nodes (bitnodes.io, 5 October 2026); Ethereum: 8,136 execution clients on ethernodes.org, 11,781 on Etherscan the same day; Monero: about 5,000 peers seen in 72 hours by one tracker (monero.fail), all secondary. Igneum's gate 4 is 1,000 independent miners; with Ember as the node those are 1,000 full nodes on day one of the public testnet, each with a vote key. Sybil counts are irrelevant on Igneum by design: nothing in consensus counts nodes or keys (spec 3.1 W6, ledger F17), so a Sybil inflates a node map and nothing else. The one place a count matters, "no verifier, no vote" (spec 9.7 item 2), is served better: every member has a verifier because the signer is the verifier.
+
+**Hours.** 20: the light-client engine inside Ember's process with a mode switch (12), the wallet reading it (4), the node card pinning (4).
+
+**The gate.** A machine with no GPU runs Ember in verify mode, shows "locked" from a certificate it verified, and sends a transaction; a miner's Ember shows one key in the header of its blocks and the same key signing votes.
+
+**Per tier.** A home miner runs one program; a holder with a laptop runs a verifier instead of trusting an RPC; a pool user's member process is Ember (spec 9.1); a rig runs one signer and many workers (spec 9.6); the node operator is now everyone.
+
+**The Monero core developer's attack.** "A node that is also a hot wallet with a vote key and a miner is one process with every secret in it; one bug in the dashboard's local HTTP server (you serve it behind a per-launch token) and the key, the vote and the coins go together. Monero separates the daemon from the wallet for this reason." Answer: the separation stays at the process level (signer, workers, node, wallet are separate processes under one supervisor), and the vote key and the payout key are different keys; the attack names the test (the dashboard token's threat model) that gate 4 must include.
+
+**The Kaspa core developer's attack.** "Node count is a vanity metric; what matters is who produces blocks and who the honest majority peers with. A thousand Ember nodes behind home NAT accept no inbound connections, so your reachable count is your seed list plus the rigs, and an eclipse of the seed list eclipses the fleet." Answer: correct; spec 10.6's pinned seed list with identity keys and the local peer set is the defence, and the eclipse test O-3.7 with Ember nodes is the gate.
+
+**Verdict: do now.** Twenty hours; the testnet gate then measures nodes, not only miners.
+
+### 3.9 Hardware wallets that verify proofs
+
+**The idea.** A Ledger or Trezor that verifies the wrapped block proof (or the certificate) before signing, so "final" is checked on the device, not in the companion app.
+
+**Why nobody shipped it.** Ledger's secure element is EAL6+ certified and Trezor's Safe 3 and 5 use an Infineon OPTIGA Trust M (trezor.io; ledger.com), both small, slow, memory-poor chips. The cryptographic work hardware wallets do is signing; the heavy lifting (sync, proofs, history) is in the companion. A bn254 pairing on a Cortex-M-class secure element is seconds to minutes (approximate, from memory; the Bulletproofs-on-Trezor paper, eprint 2020/281, shows what Micropython on a Trezor costs for range proofs, and it is slow). Igneum Wallet already verifies the finality certificate with the node's own code (litepaper, Wallet table), which is the companion doing it.
+
+**The model.** Certificate verify: G1 aggregation of up to 10,000 keys plus one BLS12-381 pairing; on a laptop in JavaScript 58 to 155 ms (bench-log). A secure element is 100x to 1,000x slower on scalar arithmetic than a laptop core (approximate), so 6 to 150 s per certificate, every 30 s. Not shippable.
+
+**Hours.** 12 for a companion-side integration (the wallet already does it); the on-device path is not worth hours.
+
+**Per tier.** Holders get "final means final" in the companion today; nobody gets it on the secure element.
+
+**The Monero core developer's attack.** "Monero's Ledger app exists and does nothing but sign; it took years and a custom protocol (eprint 2020/281). You will not get a proof verifier onto a secure element and you should not pretend to." Correct.
+
+**The Kaspa core developer's attack.** "A device that verifies a proof still needs to know which chain tip the proof is of; it will take that from the companion, which is the thing you did not trust." Correct.
+
+**Verdict: never on the secure element; do the companion verify** (already done in Igneum Wallet 0.1.1; the Ledger and Trezor apps when they exist should display the companion's verified state and sign).
+
+### 3.10 Proof-of-useful-work: the lottery hash partly a proof
+
+**The idea as asked.** Make the leader election depend in part on proving work, so the energy that picks the block maker is useful.
+
+**Why every attempt failed, cited.** Primecoin (2013) found Cunningham and bi-twin prime chains that nobody uses (Bitcoin Magazine, July 2013). Gridcoin pays for BOINC work and stops if BOINC stops (gridcoin.us; the 2022 "Challenges of PoUW" survey, arXiv 2209.03865). Ball, Rosen, Sabin and Vasudevan (eprint 2017/203) gave proofs of useful work from fine-grained problems (Orthogonal Vectors, 3SUM, APSP) and state the conditions: the problem must be sampleable at a tunable hardness with instances the miner cannot choose, and the verifier must be cheaper than the work. Ofelimos (Fitzi, Kiayias, Panagiotakos, Russell, CRYPTO 2022, eprint 2021/1379) got a provably secure protocol by making the work a doubly efficient local search whose usefulness is a side effect and small. The 2026 "Economics of Proof-of-Useful-Work" (arXiv 2606.06700) and the empirical study of Pearl's cuPOW (arXiv 2606.04819, "The Usefulness Gap") find the same gap between the work paid for and the work anyone wanted. I found no Coinbase paper on the subject (searched 6 October 2026); if the project lead has one in mind, its title is needed. Aleo ran proving as the consensus work and the fastest prover won (CLAUDE.md: the Aleo lesson; litepaper precedents table, approximate). Boundless's PoVW (docs.boundless.network/zkc/mining/overview) pays ZKC pro rata to cycles proven per epoch with a stake that scales with the work, which is a reward for proving, not a leader election, and it is on a proof-of-stake chain.
+
+**The sampleability problem, plainly.** A lottery needs a puzzle whose instances are drawn at random from a distribution the miner cannot steer, whose hardness is tunable by a target, and whose solution is verifiable in milliseconds. zkVM proving has none of these: the instances (segments, jobs) are chosen by users and producers, the hardness is whatever the program is, and the verifier is tens of milliseconds to seconds. Any blend ("a miner's lottery target eases in proportion to its proven cycles last hour") gives the fastest prover more blocks, which is Aleo with a cap, and a cap small enough to be safe is a reward too small to be useful.
+
+**What Igneum already has instead.** The separation (litepaper: "the lottery and the proving are kept separate on purpose"), the 20 percent pool paid by sortition by weight, PoVW-like cycle metering through pgas.
+
+**Hours.** 0.
+
+**Per tier.** Nothing changes; the 12 GB card still earns from proving through the pool.
+
+**The Monero core developer's attack.** "RandomX's whole point is that the work has no second use, because any second use is a subsidy to whoever does the second thing best, and that is a specialist. The moment your hash is 'partly a proof', the best prover is the best miner, and the best prover is a datacentre. You know this; it is in your own CLAUDE.md."
+
+**The Kaspa core developer's attack.** "Leader election on a DAG must be a memoryless Poisson process so that GHOSTDAG's k and the orphan analysis hold; a target that depends on the miner's past hour of proving is not memoryless and your blue-set bounds no longer apply."
+
+**Verdict: never.** Both attacks are correct and the second is fatal to the DAG analysis. The honest version of "useful work" is the one Igneum has: the same card, two jobs, two payments, no coupling. Lane 8 may take one adjacent idea by name: **the shadow-useful puzzle**, in which the program work placed in the latency shadow (class v4, 100,000 ops per hash that cost the card nothing) is itself a small verifiable sub-computation drawn from chain state (a hash-based commitment to a sampled Merkle path of the segment's state witness), so the shadow ops have a second use that does not change who wins. It changes nothing about leader election because the shadow is free; whether a useful shadow program is as chip-hostile as a random one is lane 8's question.
+
+### 3.11 Miners paid for proving others' chains as the main income, the lottery as the tiebreaker
+
+**The idea as asked.** Invert the design: proving is the income, the lottery only orders.
+
+**The arithmetic** (frontier_model.py section 7):
+
+| Income line | USD per day | Basis |
+|---|---|---|
+| Proving every Ethereum L1 block at the Sep 2026 tracker cost | 36 | USD 0.005 x 7,200 blocks; a buyer pays above cost, call it 10x: 360 |
+| The same at the Dec 2025 cost | 288 | under USD 0.04 per block |
+| All rollup proving spend (customer brief) | 8,200 to 27,400 | "low millions a year", approximate |
+| Boundless, trailing day in the explorer, 4 Oct 2026 | 2 | 8.4 T cycles at USD 0.21 per billion, `developer-adoption.md` 2b, approximate |
+| Igneum year-1 emission at USD 0.005 per IGN | 13,700 | 31.688 IGN per block x 86,400 |
+| At USD 0.02 | 54,800 | |
+| At USD 0.10 | 273,800 | |
+
+The whole public proving market is three to four orders of magnitude under year-1 emission at any price input. The cost curve (section 2.6) falls 3x to 30x a year, so dollars per proof fall as fast as volume rises; for proving to be the main income by 2030, paid demand must grow about 1,000x in dollars. The design's own claim is the defensible one: a second income that keeps cards on after the subsidy fades (spec 5.10.2).
+
+**Why nobody shipped it.** Succinct and Boundless are exactly this (proving as the income) and have a token for the lottery's role; their provers are datacentre operators (ledger C10). Nobody has made it a GPU home-miner's main income because the market is this size.
+
+**Hours.** 0.
+
+**Per tier.** The 12 GB home card earns pool emission today and job income later; the number that matters to it is the pool share, not the market.
+
+**The Monero core developer's attack.** "Your 'paid, useful, verifiable work' line implies the work pays. It does not and will not; say so in the litepaper's income table." Answer: the litepaper already says "small market today", "upside, not a promise" (ledger P6); the arithmetic above should join it.
+
+**The Kaspa core developer's attack.** "If proving were the income, the lottery would be a cost centre miners minimise, hash would fall to the floor, and your 51 percent cost would be the cost of a few 5090s. Keep the lottery paid." Correct.
+
+**Verdict: never by 2030 as the main income; watch the market yearly.**
+
+### 3.12 The GPU fleet as a public compute market beyond proofs, priced in IGN
+
+**The idea.** Rendering, inference, transcoding, simulation sold by Igneum miners for IGN, through the same client that switches between hashing and proving.
+
+**The honest problem.** General compute is unverifiable: a renter cannot tell a rendered frame from a cheaper one, an inference from a smaller model's, without redoing the work. The existing markets answer with trust substitutes: Render uses result quorums for graphics, Akash provider auctions plus reputation, io.net proof-of-work-style attestations (all secondary, io.net's own comparison page and a 2026 DePIN survey). None of those is checkable by a chain.
+
+**The verifiable subsets, named.**
+
+| Work | How it is verified | Status for Igneum |
+|---|---|---|
+| ZK proving jobs | The proof | The precompile (design 6), Designed |
+| Deterministic recompute with sampling | Commit to every intermediate, a verifier re-runs a random fraction (Statistical Proof of Execution, arXiv 2503.18899; sampled layerwise proofs for inference, arXiv 2609.27367) | Feasible as an app on the precompile: the sampled chunk is the job; the rest is a commitment |
+| Rendering with result quorum | Two or three miners render the same frame; the chain pays on agreement (Render's approach, approximate) | An app; the chain pays per agreement, cannot judge quality |
+| TEE-attested inference | NVIDIA confidential computing attestation on H100 and H200 (phala.com GPU TEE) | The fleet's cards have no TEE; not Igneum's |
+| Bitwise-reproducible training | Verde-style proofs of learning on a rollup (secondary, io.net comparison page) | Research |
+
+**Hours.** 60 for a sampled-recompute job type on top of the precompile; 0 for the general market.
+
+**Per tier.** A 24 GB card could sell sampled-recompute work; an 8 GB card cannot hold most inference models; the rollup customer is unaffected; a holder sees IGN demand only for the verifiable subset.
+
+**The Monero core developer's attack.** "You would be Golem, Render and Akash with a worse token story and a settlement layer nobody asked for. The honest answer to 'GPU owners should be paid for useful work' is a market with reputation, and reputation is not a consensus rule." Correct for the general case.
+
+**The Kaspa core developer's attack.** "Every second a card spends on a render is a second off the lottery; the design's own economy model shows hash falling 14 percent when external pay rises 10x (scenario b). A compute market large enough to matter would empty the lottery." Correct, and it is the reason 3.11 is never.
+
+**Verdict: never for unverifiable work; do the verifiable subsets as apps on the precompile** (the sampled-recompute job type is the one worth 60 hours).
+
+### 3.13 Igneum as the settlement layer for GPU rental itself
+
+**The idea.** Vast.ai and RunPod match renters and hosts and take a platform cut; the escrow, the metering and the payout could run on Igneum, where every miner is already a host with a funded wallet and a card that is on.
+
+**The fee arithmetic** (frontier_model.py section 5):
+
+| Card | Vast.ai on-demand USD/h | Platform take modelled | Host loses USD per card-year | Igneum settlement per rental (2 transfers at the floor) | At USD 0.02 / 0.10 per IGN |
+|---|---|---|---|---|---|
+| RTX 5090 | 0.44 (getdeploying.com, 6 Oct 2026) | Vast about 15 percent (secondary) | 579 | 0.0102 IGN | 0.0002 / 0.0010 |
+| RTX 5090 | 0.44 | RunPod about 7 percent (secondary: hosts keep 93) | 270 | 0.0102 IGN | |
+| RTX 4090 | 0.31 | Vast about 15 percent | 408 | 0.0102 IGN | |
+| RTX 4090 | 0.31 | RunPod about 7 percent | 190 | 0.0102 IGN | |
+
+Caveat on the takes: secondary comparisons put Vast at about 15 percent and RunPod at about 7 percent; Vast's own June 2024 product update says the host fee was removed and replaced by a surcharge it does not publish, so the 15 percent is a market estimate, not a fee page. The chain's fee is three to five orders of magnitude under either. The platform's take pays for matching, images, dispute, trust and the verification of delivered work, and the last is what the chain cannot do (3.12).
+
+**What Igneum already has.** Funded miner wallets, the pool protocol's TLS transport and member identity (spec 9), the job escrow shape (design 6), the sampled-recompute path above.
+
+**Hours.** 40: a rental escrow contract with hourly streaming and a sampled attestation of liveness (the host signs a challenge per minute with the vote key; proves possession of the card by running one lottery warp on it, which the CPU verifier checks in 0.44 ms) (24), a client-side matching list (16). It settles payment and liveness; it does not verify the renter's workload.
+
+**The gate.** Ten rentals between fleet boxes with one host that goes dark: the escrow pays to the minute of the last valid challenge; the renter's refund is exact; the chain fee per rental under 0.02 IGN.
+
+**Per tier.** A home miner rents out idle hours with no platform cut and a 30-day public record as a host; a rig lists eight cards; a pool user is unaffected; the prover role and the host role compete for the same seconds; a holder sees IGN demand per rental; a rollup customer is unaffected.
+
+**The Monero core developer's attack.** "Escrow is 1 percent of a marketplace. The 15 percent is the other 99: the people who answer when a pod dies. You will have a cheaper escrow and no renters, and every renter you do get will be running the thing Vast bans. Also: a card that is rented is a card that is not mining, so you are paying people to leave your lottery." The last point is 3.12's and stands.
+
+**The Kaspa core developer's attack.** "Streaming payments per minute at 1 BPS are 1,440 transactions a day per rental, each burning a base fee; at a thousand rentals that is your whole block budget. Use a channel, settle twice." Correct, and the model's two transfers assume exactly that.
+
+**Verdict: prototype** the escrow with the liveness challenge, because it reuses the vote key and the CPU verifier in a way no other chain can, and because miners are hosts already; do not call it a marketplace.
+
+### 3.14 Proofs sold to AI labs for verifiable inference
+
+**The state of the art, cited.** zkLLM (arXiv 2404.16109, CCS 2024) proves a 13 B-parameter LLM's inference in under 15 minutes with proofs under 200 kB, verified in 1 to 3 s; the 2026 sampled-layerwise paper (arXiv 2609.27367) measures 803 s of proving per forward pass on LLaMA-2-13B and extrapolates about 18 days per 2,000-token generation under full ZK. EZKL's median proof time on small workloads is about 8.2 s and a 100 M-parameter model is about 10,000 s per proof at today's throughput (proofoftech.org, secondary). Modulus Labs' Remainder prover was benchmarked at USD 0.085 per proof to verify on Base; the team joined Tools for Humanity in late 2024 and no longer sells (proofoftech.org). The competitor is a TEE: NVIDIA confidential computing on H100 and H200 with remote attestation, sold today at near-zero overhead (phala.com; arXiv 2607.19353 benchmarks), and sampling schemes (SPEX, arXiv 2503.18899) that are statistical, not cryptographic.
+
+**Cost per token, approximate.** 803 s of one GPU per forward pass on a 13 B model at a USD 0.44 5090-hour is about USD 0.10 per token proven. An unverified 13 B token is of the order of USD 0.0000002 (secondary inference pricing pages, 2026). The gap is five to six orders of magnitude.
+
+**What Igneum could sell by 2030.** Not inference proofs for frontier models. Proofs that a committed small model (under 100 M parameters) produced an output from a committed input, batched; proofs of aggregation over many small inferences; proofs of a sampled layer (the hybrid in arXiv 2609.27367) as a job type. `developer-adoption.md` 2b already draws the line at "verifiable compute, not verifiable AI".
+
+**Hours.** 40 for a sampled-layer job type once the precompile exists; 0 today.
+
+**Per tier.** A 24 GB card could prove a small model's inference as a job; nothing for smaller cards; a rollup customer is unaffected.
+
+**The Monero core developer's attack.** "A lab that wants verifiable inference buys an H100 with a TEE and gets an attestation for free. Your 100,000x-slower proof is for people who do not trust NVIDIA's attestation key, and those people are not buying GPU time from strangers." Fair for 2026 to 2028.
+
+**The Kaspa core developer's attack.** "Nothing here touches consensus; it is an app on the precompile. Stop listing apps as protocol ideas." Fair.
+
+**Verdict: watch** the cost curve yearly; the crossing where ZK beats a TEE on cost per token is not in sight by 2030 on the cited numbers.
+
+### 3.15 The Igneum program pipeline as a verifiable randomness beacon
+
+**The idea.** The chain already derives an unbiasable seed once an hour: a certified checkpoint, through a 10-minute class-group VDF (spec 04; 516-byte proof, 4.47 ms verify). Run the same VDF on every certified checkpoint hash at a 30-s delay and publish the output: a public randomness beacon at 30-s cadence with no league, no threshold key and no trusted set.
+
+**What drand is, cited.** The League of Entropy runs drand: threshold BLS over `H(round)` in unchained mode, a 2/3 threshold of a fixed set of organisations (the threshold must exceed 50 percent), quicknet at 3-s rounds since October 2023, timelock encryption built on it (docs.drand.love quicknet post and cryptography page). Its trust assumption is that under a third of a named set collude.
+
+**The model** (frontier_model.py section 6):
+
+| Beacon | Period | Latency | Unbiasability | Trust |
+|---|---|---|---|---|
+| drand quicknet | 3 s | about 3 s | threshold BLS, under 1/3 of about 20 organisations collude | a league |
+| Igneum epoch seed today | 3,600 s | 600 s | certified checkpoint plus a VDF the last producer cannot evaluate in time | nobody |
+| Proposed per-checkpoint beacon | 30 s | 30 to 60 s | the checkpoint is locked by 2/3 of 30-day weight before the VDF starts; a last-block grind costs a block's subsidy per try and buys a bit only if the attacker evaluates the VDF faster than the chain | nobody; the honest limit is the class-group ASIC (Chia's timelords are software or ASIC, docs.chia.net) |
+
+Chia's hardware timelords are the precedent for "the fastest squarer learns the value first" (Boneh, Bonneau, Bünz, Fisch, eprint 2018/601 for the VDF; Chia's class-group VDF competition repository for the implementation lineage). That is a front-running edge measured in seconds, not a bias.
+
+**What Igneum already has.** The VDF prototype (`proto-vdf/`), `seed_source` in headers, PREVRANDAO already defined from the epoch VDF (spec 7.1), the certificate every 30 s.
+
+**Hours.** 24: a 30-s VDF parameter set and the proof relay per checkpoint (12), an RPC and a `wss` feed (6), a contract exposing the latest value and a verify function (6).
+
+**The gate.** 2,880 values a day on the devnet for a week; every value verified by an independent client in under 5 ms; no value published before its checkpoint locked; a deliberate withholding of the last block before a checkpoint measured for its effect on the output (none, because the checkpoint is what is locked).
+
+**Per tier.** A node operator evaluates one 30-s VDF per checkpoint (one core); a miner does nothing new; an app developer gets a 30-s beacon and timelock encryption; a holder sees a product that drand's users (lotteries, raffles on Sui, approximate) might pay gas for; a rollup customer could read it through the proof bridge.
+
+**The Monero core developer's attack.** "Your beacon is only as unbiasable as your finality, and your finality pauses whenever under 2/3 of weight is connected (spec 03). A beacon that stops when the chain is partitioned is not a beacon; drand ran through every outage its members had because it needs a threshold, not a supermajority of all." Answer: correct; the beacon publishes nothing during a pause and must say so, which is still a stronger statement than a league's liveness.
+
+**The Kaspa core developer's attack.** "A 30-s VDF on a 1-BPS chain is fine; at 10 BPS your checkpoints are still 30 s of DAA time, fine; but the VDF input must be the checkpoint hash as every node agrees it, and your C4 finding showed two honest nodes can hold two certified checkpoints at one index for a window. Two beacons." Answer: the beacon for index i is published only when a single certificate for i is in the past of the next certified checkpoint, which is the F24 re-determination path; one window of delay in the worst case.
+
+**Verdict: prototype.** Twenty-four hours on code that exists, and a product no proof-of-work chain offers.
+
+### 3.16 The hourly program swap as a research dataset; the fleet library as a product
+
+**The idea.** Igneum generates 8,760 random GPU kernels a year, compiles each on Metal, CUDA and OpenCL, races up to 17 variants per card (lever 1, measured +17 to +21 percent on the M5 Max), and logs per-card per-variant timings to the fleet log (lever 2). That corpus does not exist anywhere: a continuous stream of random, bit-exact-across-vendors integer kernels with measured performance on every consumer GPU, under a fixed memory footprint. Publish it (the generator is public with the spec; the timings are the product) and the fleet library (the per-card best-variant table) as a dataset.
+
+**Who would pay, what for.** Compiler teams (LLVM's NVPTX and AMDGPU backends, Apple's Metal compiler) for a regression corpus with ground truth across vendors; GPU microarchitecture researchers for a latency-bound random-read benchmark across generations (the dependent-read ceilings of `chip-model-v3.md` 5.3 are exactly what such a corpus measures); the project's own cryptanalysts (the weak-program census, `weak-program-census-2026-10-03.md`) for the distribution of program properties. Money: small (research datasets are grants and goodwill, not revenue); standing: large, and it is the public benchmark the litepaper promises for January 2027 made continuous.
+
+**Why nobody shipped it.** RandomX programs are per hash, interpreted, and never logged; ProgPoW's period changes were never published as a corpus (approximate). New as a dataset.
+
+**Hours.** 10: a daily export of the fleet log and the generator seed list to a public bucket with a schema (6), a README with the citation form (4).
+
+**The gate.** One outside group cites it.
+
+**Per tier.** Every miner's timings are in it (anonymised to card model); a 9070 XT owner sees why their card is 7x worse per joule than a 5090 on dependent reads (`chip-model-v3.md` 5.8); nothing else changes.
+
+**The Monero core developer's attack.** "A public corpus of your programs with timings is the chip designer's training set." Answer: the generator is public already (github.com/igneum-network/spec) and a chip must run next hour's program, not last year's; what the corpus gives a chip designer is the distribution, which the spec gives too.
+
+**The Kaspa core developer's attack.** "Not a consensus matter." Correct.
+
+**Verdict: do now.** Ten hours and it makes the benchmark promise continuous.
+
+---
+
+## 4. What would make a Monero or Kaspa core developer say "I had not thought of that"
+
+Three, with the exact reasoning each would use to attack it. The first two are 3.2 and 3.3 restated as the thing that is new; the third is new in this file.
+
+### 4.1 Work as the only stake, and it is slashable
+
+Monero's and Kaspa's shared premise: in proof of work nothing is at stake except the block you are mining, so misbehaviour by a miner outside block production (a bad job, a withheld proof) cannot be punished, only priced. Igneum's finality weight is a quantity that is at stake, is earned by work alone over 30 days, cannot be transferred, and is already stripped for equivocation. Extending the strip to execution-layer faults (3.2) gives proof of work a slashable bond with no coin and no stake class.
+
+**The Monero developer's attack, verbatim form.** "Then it is stake. You have a class of participants with something to lose that others do not, and a rule that takes it from them for a judgement call. Every argument you make against proof of stake (capture, cartels, nothing-at-stake inverted into everything-at-stake) applies to a stake made of blocks. Worse, your stake depreciates on its own in 30 days, so the rational prover front-loads bad behaviour in the last days of its weight." Answer: the weight is not transferable and not purchasable, which removes capture by capital; the last-days attack is bounded by the 30-day re-earn, and the sortition is proportional to current weight, so a depreciating key is drawn less. The concession: the spec must stop saying "no stake" and say "no coin stake; the only thing at stake is 30 days of public work".
+
+**The Kaspa developer's attack.** "Any slashing condition needs an objective, deterministic fault; on a DAG 'late' needs a clock, and your clock is DAA score along the carrier's chain, which is deterministic. Fine. But you now have a second use for the weight table that the finality module computes, and the two uses must read the same table at the same block or two honest nodes strip differently. Your proof-record rule needed P11 for this; write the same sentence now." Accepted.
+
+### 4.2 Finality carried forward inside the execution proof
+
+The Kaspa premise: finality on a DAG is a fork-choice property computed by every node from the DAG it holds; it cannot be a proof. The Monero premise: a light client trusts whatever gave it the checkpoint. Igneum's segment proof already recurses from genesis; carrying the weight table in it (3.3) makes "certified under rule v2" a public output of the same proof that attests the state root, with the update costing one mergeset per segment, not a 30-day window per proof.
+
+**The Kaspa developer's attack.** "The proof attests a chain; finality is about the DAG. Your W2 counts blue blocks in the chain block's past, and 'blue' is GHOSTDAG's judgement, which the proof does not recompute (it would have to run GHOSTDAG over k = 18 or 124 anticone sets inside a zkVM). So the proof takes blueness as a witness from the node, and a node that lies about which blocks are blue gives the proof a wrong table. You have proven the arithmetic and trusted the colouring." This is the sharp one. Answer: the colouring is committed by the header (the mergeset and blue set are determined by the parents, which the header commits to), so the witness is checkable against headers the proof also carries; but checking it means running GHOSTDAG's blue-set rule for each merged block inside the guest, which is bounded (anticone size at most k) and unmeasured. The gate for 3.3 must add: cycle count of the GHOSTDAG colouring check per mergeset inside the guest, and if it is too heavy, the colouring stays a witness and the light client's trust row says "blue set from nodes" until it is not.
+
+**The Monero developer's attack.** "You have made finality depend on your proof system's soundness in the light client. Say so on the card." Already in spec 10.1 for the proof system row; the row must now name finality too.
+
+### 4.3 The hourly program as an 8,760-question hardware census
+
+**The idea.** Every hour the chain hands every card a new random program and every card races 17 compiled variants of it and reports which won and how fast (lever 1, measured; lever 2, shipped). A chip built for the lottery cannot look like a GPU on 8,760 different programs a year: its best variant, its timing distribution across programs, its sensitivity to instruction mix are a fingerprint. Make the fingerprint part of the share protocol: a pool records, per member and per epoch, the variant that won and the share-rate ratio between consecutive programs; the chain's observer publishes the distribution per card model from the fleet library; a key whose ratio pattern sits outside every known card's envelope for N epochs is flagged publicly (the share-pattern detector of Counter ASIC item 4, which found Monero's chips by nonce patterns, now with a per-program timing axis a chip must fake 24 times a day).
+
+**Why it is new.** RandomX programs are per hash and no pool sees their timing; Monero's chip detection used nonce distributions (MoneroCrusher, approximate); ProgPoW audits priced the chip but had no running census. Igneum's hourly swap with per-card racing produces the census as a by-product. New.
+
+**The Monero developer's attack.** "Timing is self-reported. A chip reports whatever a 4090 would report; it has the 4090's published envelope from your own dataset (3.16). And MoneroCrusher found us the chips not by timing but by nonce patterns, which a chip emulates trivially once it knows you look. Detection that depends on the attacker's cooperation is theatre." Answer: the share rate per epoch is not self-reported; it is the pool's count of verified shares, and a chip that throttles itself to a 4090's per-program envelope on every program forfeits its edge on the programs where it is strong, which is a cost measured in hash. The detector cannot prove a chip; it can price the chip's camouflage. That is the honest claim.
+
+**The Kaspa developer's attack.** "We welcomed chips, so nothing here is for us. But as engineering: your per-epoch ratio depends on the pool's vardiff and on network luck; the envelope for one card model will be wide, and a 2x chip sits inside it. Your detector finds a 10x chip and misses the 2x one your model says is the threat." Fair: the detector's resolution is the gate (one epoch's share-rate variance per member at one share per 10 s is about 5 percent over an hour; a 2x step is 40 standard deviations, a 1.2x step 4; so it resolves 1.2x in a day and 1.05x in a month, approximate).
+
+**Hours.** 16: the per-epoch ratio in the pool protocol's `stats` (spec 9.5) and the observer's envelope per card model (12), the public page (4).
+
+**The gate.** The observer flags a deliberately throttled fleet box (a 5090 capped to a 4070's rate) within 24 epochs, and flags no honest card over a week.
+
+**Per tier.** Every miner's card model gets an envelope; a home miner on an unusual card (Apple, Intel) must be in the library or will be flagged; pools carry one more statistic; nothing in consensus.
+
+**Verdict: watch,** then do once the pool protocol exists: it is the cheapest instrument the chain has for the question the chip model cannot answer from a spreadsheet.
+
+---
+
+## 5. The incremental list
+
+Smaller than the sections above; each with hours and a gate.
+
+| # | Item | Hours | Gate | Why now |
+|---|---|---|---|---|
+| I1 | Expose per-key 30-day weight and blue-block count in `IgneumInfo` so hashrate forwards and hardware-finance contracts settle from chain state (`developer-adoption.md` 2c) | 6 | A forward contract settles on the devnet against `getFinalityWeights` with no oracle | The data is already maintained for finality |
+| I2 | Write the N schedule (latency-shadow program length) into the era draw at genesis, a doubling per era until the verifier gate binds (section 2.3) | 8 (spec text and the draw) | Verifier under 10 ms on a 2019-class core at the year-6 N | HBM4 arrives in 2027 to 2028 and the chain must answer it without a release |
+| I3 | Define the block-proof target as a function of the fleet's measured median shard time, published per era, not as "under 10 s" (section 2.6) | 4 | The site reads it from the bench table | Honesty about the 12 GB tier |
+| I4 | A second zkVM implementation of the `ProofSystem` trait (RISC Zero or OpenVM) running on one fleet box as a shadow verifier, so a soundness bug in one system is detected by disagreement before it reaches a light client | 24 | 1,000 segments agree across both; one injected bad proof disagrees | Ledger P7, D6: the veto protects full nodes, nothing protects light clients today |
+| I5 | The Ember updater installs nothing while finality is paused (3.7's Kaspa attack) | 2 | A paused devnet, a published release, no install | Free |
+| I6 | A finality-pause page on the site that shows the connected weight fraction live, so the "node reports the pause" sentence has a public face | 4 | Shows tonight's 18:42Z pause from the observer's data | Tonight's incident |
+| I7 | Equivocation-evidence bounty paid in sortition slots: the key that first carries valid evidence inherits the stripped key's shard assignments for 30 days (no coins move; weight is reassigned, not created) | 12 | Two signers under one key on the fast-time harness; the evidence carrier wins the stripped key's draws | Makes watching for equivocation pay without a treasury |
+| I8 | Mandatory proofs activation height set from a measured coverage share (spec 7.8 item 10) | 4 | Coverage above 99 percent for 7 days on the devnet | The rule is written and off |
+| I9 | The exclusive window at 25 s and the claim timeout at 120 s on the phase 4 devnet (decided by the project lead, P9) with the economy simulator re-run at the measured shard times from `prover-tiers-real-cards.md` instead of the 20-s target | 6 | The 3060 class's shard share within 5 points of its weight share | The inputs changed today |
+| I10 | `eth_getProof`, `debug_traceTransaction`, `eth_subscribe` (D5 step 2) before any outside team | 24 | Foundry's debugger and the Blockscout fork run against a devnet node | The light client and every tool depend on `eth_getProof` |
+| I11 | Register chain ids 4461 to 4463 on ethereum-lists/chains before the public testnet (spec 7.1) | 1 | The PR merged | Wallets |
+| I12 | Publish the 2028 tier table (section 2.6) on the miner page with its three rates, so no card owner buys on a promise | 2 | Live | the project lead's consequences rule |
+| I13 | A spec sentence in 03 and 05: "no coin stake; the only thing at stake is 30 days of public work" (4.1) | 1 | Text | Before 3.2 is prototyped |
+| I14 | The litepaper's income table gains the proving-market arithmetic of 3.11 in one line | 1 | Text | Ledger P6 asked for honesty; the number makes it concrete |
+| I15 | A ledger entry beside E4 recording 3.6 as considered and rejected on E4's ground | 1 | Text | So the question is not re-asked |
+
+---
+
+## 6. Open questions and what I could not run
+
+- **The BLS verification cycle count inside the SP1 guest** (3.3's gate a) needs a 24 GB card; PC 2 and the fleet were on the class v4 rehearsal and the Devnet 2 block-rate runs tonight. Without it, the 3 percent proving-capacity cost is an estimate.
+- **The GHOSTDAG colouring check inside the guest** (4.2's Kaspa attack) is unmeasured and may be the real cost of 3.3; it is added to that gate.
+- **The wrapper** (3.4) does not exist in the repository (ledger P3, R4); the 16 hours include building it on a fleet card.
+- **HBM4 energy per random read** (section 2.3) is an unsourced estimate (1.0 nJ); JEDEC timing is behind the paywall; the 2x channel count is cited, the tFAW-per-channel assumption is mine.
+- **The rental-tax rule's determinism** (3.1) depends on reading W30 and H_now at a checkpoint in the block's past; the lag's effect on the renter's first 30 s is unmodelled.
+- **Vast.ai's actual take** is unpublished; the 15 percent is secondary.
+- **No Coinbase paper on useful work was found**; if one exists its title is needed to cite it.
+- **`block-rate-devnet2.md`** was a template at writing time; the 10 BPS question matters for 3.3 (segments re-cut at reorgs) and 3.5 (votes per block), and should be re-read when RUN_A lands.
+- **Lane 8** holds the shadow-useful puzzle (3.10's handover) and anything about new puzzle shapes; nothing here designs a puzzle.
+
+---
+
+## 7. Summary for the coordinator
+
+Lane 7 read the spec, the litepaper, the ledger sections asked, the design files, the chip model and the fleet's eleven-card table, searched prior art for sixteen ideas, and wrote one arithmetic model (`sim/horizon/frontier/frontier_model.py`) behind every number. Three findings:
+
+1. **HBM4 raises the stored-dataset chip's per-joule edge from about 7x to about 11x bare and from about 2.3x to about 2.7x under the class v4 latency shadow at N = 100,000 (model 1.4, every chip figure arithmetic), because JEDEC doubled channels per stack (16 to 32); N = 200,000 brings it to 1.7x and N = 330,000 to 1.3x at k = 1. The N schedule belongs in the era draw at genesis (I2), with 10x of verifier headroom.**
+2. **Vote weight is a slashable, non-purchasable bond (3.2): a key with 0.1 percent of hash has 16,427 IGN of 30-day pool income and its vote at risk against a designed coin bond of 0.0015 IGN per job (model section 3). The design's "no stake" must become "no coin stake".**
+3. **The consensus proof can be incremental (3.3): carry the W2 table inside the recursive segment proof and update it by one mergeset per segment, with one BLS verify per 30 s (about one shard's budget, approximate, unmeasured). It is the only road to a browser that trusts no node for the voter set, and its real cost is the GHOSTDAG colouring check inside the guest (4.2), which is the first measurement to run.**
+
+Two honest nevers with arithmetic: proving others' chains cannot be the main income by 2030 (all of Ethereum L1's proving is USD 36 a day at the Sep 2026 tracker cost against USD 13,700 a day of year-1 emission at USD 0.005; 3.11), and the lottery hash cannot be partly a proof without re-opening Aleo and breaking the DAG's memoryless election (3.10). One rule for main: the litepaper's "proving: a second income" line should carry the 3.11 arithmetic (I14), and the spec should carry the "no coin stake" sentence (I13) before any work-stake prototype starts.
diff --git a/docs/analysis/horizon/new-pow.md b/docs/analysis/horizon/new-pow.md
new file mode 100644
index 000000000..827db9886
--- /dev/null
+++ b/docs/analysis/horizon/new-pow.md
@@ -0,0 +1,239 @@
+# Horizon lane 8: a new proof of work (three candidate schemes, reviews, prototypes, verdicts)
+
+6 October 2026, evening UK, lane `new-proof-of-work`, worktree `/Users/joshm/Projects/igneum-wt-horizon` (branch `horizon` from master, at 3f4f719). Output of this lane: this file and `proto-newpow/<scheme>/`. Nothing here touches the shipped hash, `igneum-pow`, the node, the manifest or the live devnet; every prototype is a benchmark beside the worker, never inside it.
+
+the project lead's mandate, verbatim: "if we create a new way of hashing or a new way of proof of work to revolutionise the space then that's absolutely fine, I want you to deploy everything to create something that has not ever been done before."
+
+## 0. Progress (kept current for the coordinator)
+
+| Time (UTC) | State |
+|---|---|
+| 19:05 | Lane started. Read: preamble, CLAUDE.md, the two personas, spec 01 (whole), 04, 07, chip-model-v3 (whole), asic-resistance-history (sections 0 to 3 and 4.3, 5), latency-shadow-2026-10-06 (whole), counter-asic-3-status sections 1 to 5, counter-asic-3-node section 6 (the P2 signalling rule), int8-matrix-family sections 1 to 3, scratch-soundness verdict, proving-methods (whole), fud-ledger M1, M7, M16, M22, M28, P2, F13, proto-cuda host.cu and the mx8-genesis pack (kernel.cu, memhard.h, program.h, vectors.h), proto-cuda/emu, family-probe.cu, the fleet's prover-tiers-real-cards.md, bench-log line 2582 (rental cost) |
+| 19:25 | Fleet agent asked for two boxes; answered at 19:29: two quiet RTX 4090s (RunPod, nvcc 12.8 at /usr/local/cuda/bin, directory /root/horizon-newpow, until 22:30Z). No quiet Ampere card exists tonight; a loaded 3090 is offered. Main's note: cost rows use bench-log 2582 (USD 0.0117 per MH/s-hour) |
+| 19:35 | File skeleton written. Two prototype sub-agents launched (budget two at once): `mma-shadow` on box 1 (47.47.180.77), `state-dataset` on box 2 (213.173.98.36) plus CPU rows on igneum-build-1. Designs being written in this file meanwhile |
+| 19:41 | Section 3 complete: the three designs, the one-table comparison, the migration path. Scheme A's verdict is already visible in its own numbers (A1 dead on 2.9 MB of openings per block, A2 dead on sampleability and a 32 to 40 ms proof verify; A0 is scheme C with the trace as state). Prototypes running: `mma-shadow` (box 1) and `state-dataset` (box 2 and igneum-build-1). mm8 two-output correction sent to the prototype |
+| (next) | Section 4 reviews (cryptographer, consensus engineer, two per scheme); the pick; section 5 measured rows as they land; section 6 verdicts; section 7 ranked next steps |
+
+## 1. What was read and the facts this lane stands on
+
+Every figure below is from the named file; "approximate" marks a figure from memory.
+
+| Fact | Value | Source |
+|---|---|---|
+| The shipped hash | 64 instructions x 8 iterations, 16 loads per program (128 dependent 4-byte reads per hash), 8 registers, 32-lane unit with xor shuffles, class v3 = mixer x8 item derivation over a 256 MiB ChaCha12 cache, 1 GiB dataset in the packs (2 GiB designed), era draws, VDF seeds | `docs/spec/01-lottery-hash.md` 1.4 to 1.13 |
+| Verifier today | 2.06 ms per unit on one M5 Max core (class v3, 4,096 item derivations), about 5.2 ms on a 2019-class core by the 2.5x rule; the 10 ms gate | `docs/plans/counter-asic-3-status.md` section 3, `latency-shadow-2026-10-06.md` section 4 |
+| RTX 5090 at the hash | 136.1 MH/s (readwidth), 132.2 (shadow control), 290 W in the app, 350 W in the bench; 2.34 to 2.65 microjoules per hash; 17.5 G dependent reads per second, 82 percent of the GDDR7 activate ceiling; 45.2 T int op/s; marginal ALU energy 10 to 13 pJ per counted op | `chip-model-v3.md` 5.1, `latency-shadow-2026-10-06.md` 5 |
+| The chip that matters | the f = 1 stored-dataset memory-controller chip: 5.1x per joule on GDDR7, 7.5x to 9.2x on HBM3 in the model; 2.1x to 4.8x by the Ethash precedent; the recompute chip (f = 0) 0.31x per chip, 1.86x per joule | `chip-model-v3.md` 5.4 to 5.6 |
+| The one lever against it | program work in the latency shadow: at N = 100,000 ops per hash the chip's edge over the 5090 falls from 5.6x to 2.1x at k = 1 (chip core energy per op equal to the GPU's 11 pJ), to 3.2x at k = 0.5, 4.1x at k = 0.3; class v4 candidate `mx8+sh256x27` | `latency-shadow-2026-10-06.md` 6 and 10 |
+| Step costs per family on the 5090 (ratio to the add-xor-rotate chain, 7,941 G lane-steps/s) | rotr 1.32, shflx 1.49, shfla 1.53, dot4 1.16, mm8 (`mma.m8n8k16.u8`, bit-exact) 2.43 | `counter-asic-3-status.md` section 3, item 6 |
+| mm8 on other vendors | AMD RDNA 4: WMMA iu8 builtin reaches gfx12, 1.68 to 1.83 per step, fragment layout UNVERIFIED (exactness not attempted); Apple: no integer simdgroup matrix in MSL, Metal 4 `matmul2d` uchar x uchar into int exists but not from the Swift toolchain used here, per-lane dot4 emulation 1.6x unsigned, 4.7x signed | `counter-asic-3-status.md` item 6 AMD column, `int8-matrix-family.md` 1 and 4 |
+| Proving today | SP1 6.8.1 Hypercube; the v1 shard (4.7 M cycles) proves in 4.8 to 18 s on 12 to 32 GB cards with the patched server, 7.4 to 8.0 GB alone; compressed proof 1.27 MB, verified in 32 to 40 ms; the aggregator 2.2 to 9.7 s per block | `prover-tiers-real-cards.md`, `proving-methods.md` 1 and 2.1 |
+| Proof payment | 80/20 lottery/proving split of the subsidy; shards by weighted sortition (8 assignees, 10 s window), aggregator share 1,000 bps, unproven deadline 600 DAA s; the native-execution veto: a record whose statement differs from the node's own execution pays nothing | `docs/spec/07-execution.md` 7.2, 7.7, 7.8 |
+| Class activation | P2: a class flips when 95 percent of blue blocks over a one-day window carry the object byte (header version high byte), with a fixed-height floor; one-sweep binary rollout; Devnet 2 gate first | `docs/plans/counter-asic-3-node.md` section 6, CLAUDE.md 6 Oct rules |
+| Rented hash | USD 0.0117 per MH/s-hour (1,748 MH/s for USD 20.44 per hour on RunPod community pods, 18:45Z); the live devnet 1.16 GH/s | `docs/bench-log.md` line 2582 |
+
+## 2. Method
+
+Designs first (section 3), each reviewed in two personas (section 4), two picked, two prototypes measured on real cards (section 5), verdicts (section 6). Prototype shape: the mx8-genesis pack's own kernel text (`proto-cuda/packs-ca2-mixer/mx8-genesis/kernel.cu`, `memhard.h`) modified by the smallest change each scheme needs, compiled with nvcc 12.8 on the two RunPod 4090 boxes, timed by CUDA events over 2^24-nonce batches with `nvidia-smi` at 1 Hz, and checked bit for bit against a C CPU reference that interprets a 32-lane unit register-major with lazy item derivation (the verifier's shape) on 1,024 random lanes. CPU rows on igneum-build-1 (EPYC 9454P, Zen 4, one core at up to 3.8 GHz, which is NOT a 2019 core; the 2.5x rule of the project stands in for that core, labelled). Chip rows are the chip-model-v3 method (section 5 of that file) applied to each scheme, approximate where that file is approximate.
+
+## 3. The three candidate schemes
+
+Shared notation: `K_d` the day key (spec 1.8.1), `S_e` the epoch seed words (spec 1.3), the unit = 32 aligned nonces (spec 1.9), `item(t)` the 16-word class v3 derivation of spec 1.8.5, `target64` as spec 1.10. Difficulty in every scheme is the unchanged 64-bit target comparison on the unchanged DAA (spec 2.3): none of the three changes what a block's work unit is worth, only what the unit of work consists of, so the difficulty controller sees the same statistics. Each scheme is a program class in the sense of spec 1.4.5 (a `generator` number and a class byte), so activation runs through P2 (section 3.5).
+
+### 3.1 Scheme A: mining is proving ("proof of committed trace")
+
+**The claim to test.** The lottery's work is a bounded piece of the chain's own proving, so the 80/20 split collapses into one payment and the hash rate is the proving capacity.
+
+**The puzzle, in its most favourable form.** Every full node already runs the segment natively (spec 7, the native-execution veto). Add one step to that: every node also runs the zkVM executor (SP1's RISC-V executor, CPU, no proving) on the segment's shard inputs and keeps the shard TRACE: the cells of every table the shard touched, about 280 M cells for the adopted v1 shard, 1.1 GB (`proving-methods.md` 1.4). The lottery of epoch `e` then uses as its dataset the trace of the last segment whose last chain block has DAA score at most `3,600 e - 1,200` (the same 20-minute lead as the epoch seed, spec 4.3), serialised row-major and padded by zero to the dataset size, and the item derivation becomes `item_A(t) = class v3 derivation with s[i] ^= row(t)[i]` for the 16 words of trace row `t` (64 bytes of trace per item). Everything else is the shipped hash: 128 dependent 4-byte reads, the 32-lane unit, the fold, `target64`. Header commitment: nothing new; the trace is a function of the segment, the segment of the chain, the chain of the header's past, exactly as the epoch seed is (spec 4.3 item 4); the class byte 5 of P2 marks the object. Difficulty: unchanged. Verifier: the node derives up to 4,096 items per unit from the 256 MiB cache (as today) plus 4,096 reads of the trace rows it holds in RAM (1.1 GB): the measured cost of exactly this read pattern is scheme C's row in section 5 (the two schemes share the verifier shape). Under 10 ms on a 2019 core if scheme C's row is.
+
+**Two stronger forms, and why each dies on a number.**
+
+| Form | What the miner must hold or do | Verifier | Why it dies |
+|---|---|---|---|
+| A1, "proof of committed codeword": the dataset is the Reed-Solomon codeword of the trace (BaseFold's stacked encoding at blowup 4, 4.5 GB, `proving-methods.md` 1.1 and 1.4), whose Merkle root the shard record already publishes; the miner must have done the COMMIT stage of the proof (encode and hash) to mine | the LDE and the Merkle tree: the first stage of every STARK or BaseFold prover, the part a GPU spends a large share of its proving time on (approximate: 30 to 50 percent of the stage time, unmeasured here) | cannot derive a codeword word locally: one evaluation of a stacked column at one point is O(2^21) field operations (the stacking height, `proving-methods.md` 1.1), so 4,096 words per unit is about 8 G operations, about 1 s on a core, 100x over the gate. The block must therefore carry Merkle openings: 4,096 per unit (every lane's loads feed every other lane through `shfl`) x 22 levels x 32 bytes = 2.9 MB per block; with a 1-lane unit (no `shfl`) 128 x 22 x 32 = 90 KB per block, 7.8 GB per day of PoW witness at one block a second against about 200 B per header today (Kaspa header, approximate). Headers-first validation, the pruning proof and the light client (spec 10) all break on the bytes | 
+| A2, "mine a proving step": each nonce selects a random piece of the pending proof work (a FRI fold of one column, a Poseidon2 Merkle layer, a zerocheck round) and the hash is of that piece's output | that piece | the verifier either recomputes the piece (then the verifier did the useful work, and the piece bought nothing: the definition of useless) or verifies a proof of it (an SP1 compressed proof verifies in 32 to 40 ms, `proving-methods.md` 2.1, four times the whole gate, and a per-piece proof does not exist). And the pieces run out: a segment's proof is about 5 s of one 5090 (`prover-tiers-real-cards.md`: 4.8 to 18 s per shard on 12 to 32 GB cards, 2.2 to 9.7 s of aggregation) against 8 G hashes per 8-s segment at 1 GH/s; the useful fraction of the lottery's work is bounded by (proving work per segment) / (network hashes per segment), about 8 percent at 1 GH/s and 0.08 percent at 100 GH/s (arithmetic on the cited figures), because proving work is set by gas and lottery work by the security budget. They are the same quantity only by coincidence at one network size |
+
+**The sampleability objection, stated and answered.** Ball, Rosen, Sabin and Vasudevan, "Proofs of Useful Work" (ePrint 2017/203) build PoUW for problems with a random self-reduction (orthogonal vectors, 3SUM, all-pairs shortest paths): a useful instance is embedded into a random challenge so that the challenge is hard on average, solving it solves the instance, and verification is fast; the price is a polynomial blow-up and a problem class with that structure. Ofelimos (Fitzi, Kiayias, Panagiotakos, Russell, CRYPTO 2022) makes the useful work a doubly-parallel local search whose QUALITY improves with more work, so more hash rate yields better solutions. Primecoin (2013) mined Cunningham chains (useless, but sampleable: the nonce picks the chain's origin). Gridcoin pays BOINC credit through a trusted whitelist, not a puzzle (approximate, from memory for the last two). Proof generation has none of the three properties these constructions need: (1) a segment has one proof, not a distribution of instances, so there is nothing for the nonce to sample; (2) partial progress has no verifiable value under the gate without a proof, and a proof verify costs 32 to 40 ms; (3) the quantity of useful work is fixed by demand (gas), the quantity of lottery work by the security budget (hash rate), and a puzzle whose per-solution work is fixed by demand is not a difficulty-adjustable lottery. The answer this design gives is therefore no: the only form that survives the gate and the bytes is A0 above, in which the miner must HOLD the trace, which is "proof of stored state" with the trace as the state, and the useful work gained per hash is zero (every node computes the trace natively anyway; ledger F13). Mining does not become proving; it becomes proof that the miner executes.
+
+**Chip edge per joule (chip-model-v3 method).** A0 changes the dataset's contents, not its size or read pattern; the f = 1 stored-dataset chip stores whatever the items are: 5.1x per joule on GDDR7, 7.5x to 9.2x on HBM3, unchanged from `chip-model-v3.md` 5.4. The f = 0 recompute chip must now hold the 1.1 GB trace somewhere (it cannot derive an item without row `t`), so it needs DRAM beside its SRAM and becomes an f = 1 chip; the 0.31x row disappears, which is a small gain since that chip was never the threat. A1 and A2 are not priced: they fail before a chip is drawn.
+
+**Verifier cost.** A0: the class v3 derivation (2.06 ms per unit on an M5 Max core, measured) plus 4,096 random 64-byte reads from a 1.1 GB array; the read row is measured in section 5 (scheme C's CPU rows, the same pattern). A1: 2.9 MB of openings or a 1-lane unit (see table). A2: a proof verify (32 to 40 ms, measured) or nothing useful.
+
+**Bit-exactness.** A0: the trace rows are bytes; the derivation is integer; nothing vendor-specific is added. The zkVM executor's trace must itself be deterministic across platforms (SP1's executor is Rust, no floating point in the trace path, approximate: not audited here); any disagreement about a trace cell is a consensus split, so A0 adds the SP1 executor to the consensus-critical code, which ledger P7 already names as a risk class for the proofs and which here would extend to the lottery.
+
+**Known attacks.** Grinding: a block producer influences the trace through the transactions it includes, but the trace used is 20 minutes old and keyed by `K_d` through the mixer; a producer cannot predict a useful bias in 128 dependent reads of a keyed derivation (the MTP lesson, `asic-resistance-history.md` 2.3: Dinur and Nadler controlled addresses by controlling contents; here the contents enter only through a keyed, chained derivation whose addresses are the cache-line indices of the mixer state, not the trace). Outsourcing: pools serve the dataset (1 to 2 GiB per miner per day), so "the miner holds the trace" becomes "someone in the pool holds it". Precomputation: the dataset is computable 20 minutes early, as today. Light evaluation: as the f = 0 row above. Sampleability: the paragraph above. Empty segments: a day or an epoch with no transactions has a near-empty trace (the shard statement still applies rewards, spec 7.7 item 8), so the dataset is mostly padding and the hash degrades to today's class v3: graceful, not an attack.
+
+**Game theory of the collapsed payment (if A1 or A2 had worked).** The 20 percent pool would go: provers are miners and the proof is the by-product of the lottery. Who is paid for what: the block reward pays for the block and the proof piece in it; a prover that mines earns exactly a miner that proves. Pools: the pool does the useful work and sells shares, as today, so proving centralises exactly as mining does (Aleo's proof of succinct work centralised on the same path: the coinbase puzzle was a synthetic circuit proven by whoever had the most GPUs; approximate, from memory, the cryptographer persona's own list). Proving demand at zero: the puzzle has no useful content and must fall back to a synthetic dataset, so the chain carries two puzzle modes and a mode switch, a consensus rule and a grinding surface. External jobs: a customer's proof could only be mined if its segment entered the puzzle, so the security budget would be spent on the customer's work at the marginal cost of inclusion, a subsidy from holders to customers unless priced by a burned fee. These are the reasons CLAUDE.md records the lottery and the proving as separate on purpose; nothing found tonight overturns them.
+
+**Migration.** A0 is a class byte (P2): class v5 by the 95 percent signal with the floor height, one-sweep binary rollout, Devnet 2 gate first (CLAUDE.md 6 Oct). Every node must run the zkVM executor on every segment before the flip (CPU cost: the v1 shard is 4.7 M cycles; SP1's executor runs at tens of MHz on a CPU, approximate, so under a second per 8-s segment); a node without it cannot validate PoW after the flip, which is what the floor height is for.
+
+**Verdict line (section 6 has the reasoning):** NEVER as "mining is proving" (A1, A2); A0 is scheme C with the trace as the state and is folded into C.
+
+### 3.2 Scheme B: a GPU-structure-bound puzzle ("mx8+mm8xR", the tensor-shaped integer shadow)
+
+**The claim to test.** Fill the latency shadow (the only lever that moves the f = 1 chip, `chip-model-v3.md` 5.7, `latency-shadow-2026-10-06.md`) with work shaped like a GPU's own tensor datapath rather than its scalar ALUs, so that a chip must carry GPU-class matrix units whose energy per operation NVIDIA's own silicon already sits near the floor of, and the chip's residual edge `k` (its energy per op divided by the GPU's) cannot fall far under 1. The brief's other candidates are rejected on definition: shared-memory bank timing and register-file width are timings and capacities, not values, and a consensus rule can only check values; a per-warp scratchpad was measured and found not sound as a chip layer (`docs/analysis/scratch-soundness.md`: the live state is bounded by the read-modify-write count, 64 to 320 bytes per lane, which a chip keeps in SRAM at under 5 percent of its mirror).
+
+**The puzzle.** Class v3 (mixer x8, 16 loads, the 64 base instructions, the era draws) plus a block of `R` `mm8` steps executed at the end of every iteration, after instruction 63 and before the next iteration samples `sel`; `8 R` steps per hash, no load in the block, the base program untouched (the same seam the class v4 shadow uses, `latency-shadow-2026-10-06.md` section 2, so the acceptance rule of 1.4.6 keeps its verdict draw for draw). Step `k` has four draws from the program stream after the base and shadow draws: `a = below(8)`, `b = below(7) + (b >= a)`, `c = below(8)`, `c2 = below(7) + (c2 >= c)`. Its semantics over the unit:
+
+```
+A: 8 x 16 uint8     lane l holds A[l >> 2][4 (l & 3) .. 4 (l & 3) + 3] = the 4 bytes of r[a]   (byte 0 = lowest k)
+B: 16 x 8 uint8     lane l holds B[4 (l & 3) .. +3][l >> 2]            = the 4 bytes of r[b]
+C = A x B           C[i][j] = sum over k of A[i][k] B[k][j], exact in int32 (at most 1,040,400)
+r[c]  = r[c]  + C[l >> 2][2 (l & 3)]        (mod 2^32)
+r[c2] = r[c2] + C[l >> 2][2 (l & 3) + 1]    (mod 2^32)
+```
+
+This is the fragment layout of PTX `mma.sync.aligned.m8n8k16.row.col.s32.u8.u8.s32` with the two `.s32` outputs `d0`, `d1` of each lane (PTX ISA, "Matrix Fragments for mma.m8n8k16", the integer layout; `docs/analysis/int8-matrix-family.md` 2.2 quotes it and `proto-cuda/family-probe.cu` carries the CPU reference that was bit-exact on the RTX 5090 on 5 October 2026, `counter-asic-3-status.md` item 6). The spec defines the matrices and the lane ownership, not the instruction: a vendor permutes its own fragment layout into this one (a shuffle) and the result is defined whatever the hardware. Why TWO destinations where the reserve entry R8 of 1.13.2 has one: with one element per lane only 32 of the 64 products of C are consumed, so a chip does 512 multiply-adds per step where the GPU does 1,024 and the GPU hands the chip a free 2x on the block; with both outputs consumed the whole tile is load-bearing. This is a correction to the reserve text as well (section 7). Unit of work: still the unit. Header, difficulty: unchanged; the class byte 5.
+
+**Parameters and the verifier's law.** Per unit the verifier adds `8 R x 1,024` unsigned byte multiply-adds (the register-major interpreter already holds the 32 lanes' registers, so A and B are in hand). Plain scalar C: about 2 ops per multiply-add, 16,400 ops per step per unit; at the 18 G op/s the x8 verifier shows on the M5 Max core (`chip-model-v3.md` 5.7, measured) that is 0.9 microseconds per step per unit: `R = 128` adds about 0.9 ms, `R = 512` about 3.7 ms. With a byte-dot instruction (AVX-VNNI `vpdpbusd`, 64 multiply-adds per instruction; NEON `udot`, 16 per instruction) the same work is 4x to 16x fewer instructions (approximate). The headroom is the class v3 margin: 7.9 ms steady on the M5 Max core, 4.6 ms on a 2019-class core by the 2.5x rule (`latency-shadow-2026-10-06.md` section 4), so scalar `R` is bounded near 500 on the 2019 core and the measured rows of section 5 set it. On the GPU side the 5090's dependent-chain probe runs `mm8` at 2.43x the add-xor-rotate step, 7,941 / 2.43 G lane-steps per second = 102 G `mm8` per second per card, 104 T multiply-adds per second (the chain probe, not the tensor peak); at 4.25 M units per second (136 MH/s) the card could hide about 24,000 `mm8` per hash before the probe rate binds, `R` about 3,000, far above what the verifier allows. So the verifier binds first, at about `R = 500` scalar on a 2019 core (approximate until section 5) and perhaps 4x higher with VNNI: the honest card never leaves the latency bound on the candidate `R`.
+
+**Chip edge per joule (chip-model-v3 method).** The f = 1 chip (memory, controller, static: 0.466 microjoules per hash on GDDR7, 0.321 on one HBM3 stack, `chip-model-v3.md` 5.4) plus a tensor array: energy per hash = memory + `8 R x 1,024 x e_mac x k_mma`, where `e_mac` is the honest card's marginal energy per multiply-add at the block (measured in section 5 as watts delta over MACs per second) and `k_mma` the chip's ratio to it. The difference from the ALU shadow (`k` down to about 0.3 for a fixed-datapath array at N5, `latency-shadow-2026-10-06.md` 6) is where the honest card's engine sits: NVIDIA's tensor cores are int8 multiply-add arrays at N4/N5-class density already, so a chip's array is the same circuit (approximate: int8 MAC datapath about 0.05 to 0.1 pJ at N5, the movement of fragments through the register file the larger term on both sides; from memory) and `k_mma` is near 1 with a floor near 0.5 for a chip that keeps the fragments in a local register file instead of the GPU's banked one. Rows at `k_mma` = 1, 0.5 and the measured `e_mac` are filled in section 5.3 from the 4090 measurement; the shape of the result is already clear: the block lowers the chip's edge by the same mechanism as the ALU shadow and the chip's best case is better bounded, at the price that the honest card's own watts rise by the block's energy (the tensor path is efficient, so the rise per unit of chip-forcing work should be smaller than the ALU shadow's 11 pJ per op; the measurement says).
+
+**Bit-exactness across vendors.**
+
+| Vendor | Path | State |
+|---|---|---|
+| NVIDIA sm_75 and later (Turing, Ampere, Ada, Blackwell) | one `mma.sync.m8n8k16.u8` per step, identity permutation, wrap on the `.s32` accumulate (the wrap edge vector of the R8 entry was bit-exact on the 5090, `int8-matrix-family.md` 3) | measured bit-exact on the 5090 (5 October) and on the 4090 tonight (section 5) |
+| NVIDIA sm_61 to sm_72 (Pascal GTX 10 series, Volta) | no `mma` with `.u8`; emulation: 8 `__shfl_sync` gathers plus 8 `dp4a` per lane per step (`dp4a.u32.u32`, sm_61+) | unmeasured; cost about 16 steps per `mm8` against 2.43 native, approximate; within the 8x emulation bound of 1.13.2 on a per-op basis only if the shuffles are cheap; a GTX 1080 owner is the first NVIDIA tier to pay |
+| AMD RDNA 3 and 4 (gfx11, gfx12) | `V_WMMA_I32_16X16X16_IU8` with the 8 x 16 and 16 x 8 tiles zero-padded to 16 x 16 and a fixed lane permutation (`ds_bpermute`) into the spec layout; the RDNA 4 builtin takes 2 ints per lane for A and B (`int8-matrix-family.md` 1) | the fragment layout is UNVERIFIED (status item 6: not in any source at hand; the CPU reference was not attempted rather than guessed). This is the gate for AMD: a PC 1 job on the 9070 XT with the spec reference. Until it passes, AMD runs the emulation path (`v_dot4_u32_u8` is native on gfx11 and gfx12, 1.06x per op measured) at about 12 to 16 steps per `mm8`, approximate |
+| AMD RDNA 2 and older, CDNA | no WMMA on RDNA 2; `v_dot4_i32_i8` exists (`dot1-insts`, signed only, approximate); CDNA 3 has `V_MFMA_I32_16X16X32_I8` with its own layout | emulation; unmeasured |
+| Apple (M-series, Metal) | no integer `simdgroup_matrix` in MSL; Metal 4 `mpp::tensor_ops::matmul2d` has `uchar x uchar -> int` (table 7.3, OS 26.4) through a tensor API not reachable from the Swift toolchain this project uses, and its wrap semantics are unverified (`int8-matrix-family.md` 1). The emulation: 4 shuffles plus 4 unsigned `dot4` emulations at 1.6x per op (measured 5 October), about 10 ALU steps per `mm8` | an Apple miner pays about 4x NVIDIA's per-step cost on the block (approximate); the M5 Max is latency-bound to about 130,000 counted ops per hash (measured), so `R = 128` (1,024 `mm8` per hash, about 10,000 steps emulated) fits inside its shadow and `R = 512` (about 41,000) still does by the ops count, with the hash-rate cost owed to a Metal measurement. Apple's path is the honest card's worst and the chip's argument does not depend on it |
+| Intel Arc | XMX through `cl_intel_subgroup_matrix_multiply_accumulate` (approximate, unverified); dp4a-class `dot` otherwise | unmeasured |
+
+So the fleet splits by generation: Turing-and-later NVIDIA and RDNA 3-and-later AMD run the block natively; everything older and Apple emulate. The 5 percent rule (`counter-asic-2-public.md`) is checked per card with the block live, as 1.13.2 requires for an emulating vendor.
+
+**Known attacks.** Grinding: none new; the block has no data-dependent control flow and reads no memory. Outsourcing, precomputation: as today (the draws are public per epoch; there is nothing to precompute because the inputs are the per-nonce registers). Light evaluation (the f = 0 chip): untouched; the block never reads the dataset. MTP-class content control: not applicable (no attacker-chosen memory). Sampleability: not applicable. New: (i) the half-tile shortcut, closed by the two-destination form above; (ii) a zero or low-entropy fragment (if `r[a]` is zero in every lane the step is free): the acceptance rule's register-saturation test (1.4.6 (c)) already rejects programs with stuck registers, and the base program's loads re-randomise every register every iteration; (iii) the trailing-step contraction: the last `mm8` of the last iteration writes two registers that feed only the fold; a chip could skip nothing because the fold reads all eight, but a step whose destinations are both never read again before the fold still costs the GPU a full tile; the draw rule should forbid `c, c2` outside the fold's register set, which is every register, so there is no such step. (iv) The licensable-IP objection (the history's reason for ranking `mm8` last in the reserve, `asic-resistance-history.md` 4.3 row 6): a chip maker licenses an int8 MMA block at any node. True, and it is the point of the design: the chip must then carry a GPU-class tensor array per 32 lanes in flight at the memory's activate ceiling, 1,172 lanes on GDDR7 (`chip-model-v3.md` 5.5), 37 tiles in flight, and its edge is `k_mma`, a ratio of two copies of the same circuit; the design does not claim the chip cannot be built, it claims the chip is a GPU.
+
+**Game theory.** None of the payment changes; this is a hash change. A pool user sees nothing. A prover that mines pays the block's watts on the same card it proves on; the tensor path is also the proving path's (SP1's Poseidon2 and NTT kernels are integer, not tensor, so there is no contention beyond the power limit, approximate). When proving demand is zero nothing changes.
+
+**Migration.** Class v5 by P2: the object byte 5, the 95 percent one-day window, the floor height; one-sweep binary rollout because the digest flips; Devnet 2 gate first. The kernel emitter (`igneum-pow/src/emit.rs`) gains the block in its three dialects, the CUDA one with inline PTX and the `IGNEUM_MM8_REF` fallback for sm_61 to sm_72, the OpenCL one with the AMD builtin behind a feature test and the emulation otherwise, the Metal one with the emulation; the one-click workers compile the text as they do today (NVRTC accepts inline PTX). Gates before a cut: the six gates of `counter-asic-2-rollout.md` section 7 plus the AMD layout verification and the Metal emulation's hash-rate cost on the M5 Max.
+
+### 3.3 Scheme C: proof of stored state ("sd1", the dataset is the chain)
+
+**The claim to test.** The dataset is the recent chain state, so every hash proves the miner holds the chain, and the lottery's reads double as a verifiable random sample of state for light clients.
+
+**The puzzle.** Day `d`'s snapshot `SS(d)` is the execution state at the state root `R_d` of the certified checkpoint `C_day(d)`, the highest-index checkpoint whose block has DAA score at most `86,400 d - 1,200` (the epoch seed's lead, spec 4.3). Its leaves: the `(key, value)` pairs of the execution state trie in key order (storage slots, account records, 64-byte chunks of code), leaf `t` serialised as `leaf(t) = Blake2b-512(R_d || t_le32 || key_t || value_t)` (the chain's own hash, spec 0.6), 64 bytes each, so every leaf carries full entropy whatever its content and no two days share a leaf; for `t` beyond the state's leaf count `leaf(t) = 0`. When the state has more leaves than the dataset has items, the dataset holds the first `2^(D-4)` leaves in the order of `Blake2b-256(K_d || key)`: a keyed sample that cannot be chosen without the whole state. The item derivation is class v3's with one line added before the round loop: `s[i] ^= leaf(t)[i]` for `i` in 0..15. The hash kernel is byte for byte the shipped one; only the daily build changes. Header commitment: none new. `R_d` is the state root of a block in the header's own past at a fixed blue score, so "which snapshot was this block mined under" is a function of the header alone once the chain is known, as the program is (spec 1.12). The class byte 5 marks the object. Difficulty: unchanged. Unit of work: unchanged.
+
+**The verifier.** A node holds the 256 MiB cache (as today) and `SS(d)` in RAM or mmap (2 GiB at the genesis dataset size, growing on the 1.13.3 schedule), derives up to 4,096 items per unit lazily as today and reads `leaf(t)` for each: 4,096 random 64-byte reads. The measured cost of those reads and of the derivation is section 5.2. Verifier memory: +2 GiB (+4 GiB at year 4). The daily snapshot build: one pass over the state trie, hashed per leaf (one Blake2b-512 per 64 bytes: about 2^25 hashes for 2 GiB, seconds on a core, section 5.2 measures the stand-in).
+
+**What is new, and the prior art.** Permacoin (Miller, Juels, Shi, Parno, Katz, IEEE S&P 2014) made the puzzle a proof of retrievability over a large PUBLIC FILE chosen by a dealer, with Merkle openings in each block; the file was external to the chain and the openings were the bytes. Spacemesh (proof of space-time over a plotted file of random data) and Chia (Abusalah, Alwen, Cohen, Khilko, Pietrzak, Reyzin, "Beyond Hellman's time-memory trade-offs with applications to proofs of space", ASIACRYPT 2017; Chia's plots) prove storage of USELESS data. Verthash (Vertcoin, January 2021; `asic-resistance-history.md` row 8) is the nearest: a 1.2 GB file generated from the chain's own block headers, random reads, no chip after 69 months on a small prize; its data is headers (low entropy per byte, static once written) and it proves nothing about state. Ethash's DAG is from the epoch seed (random). What Igneum C adds: (1) the dataset is the EXECUTION STATE, keyed per day by `K_d` through the memory-hard derivation, so it is never easier than today's dataset (the leaf is one more 64-byte input to a 9,360-op chain) and it cannot be built from the day key alone: whoever builds it holds the state; (2) every block's 128 loads per lane name 128 keyed items whose leaves are a uniformly random sample of state (the addresses are the mixer-state cache-line indices through 128 dependent reads, unbiasable by the producer at a cost below a block), so a light client that asks any full node for the block's `(key, value)` leaves with their openings against `R_d` gets a free daily spot check of state availability; (3) the beacon: the lottery output is already public randomness, biasable by withholding at the cost of a block, as every PoW; C adds nothing there and the design says so. Honest limit: a pool can ship the 2 GiB dataset or the snapshot to its miners once a day (2 GiB per miner per day, 23 MB/s for a thousand miners), so "every miner holds the chain" is really "every mining OPERATION holds the state", which is still a change: today a pool miner needs nothing but the day key.
+
+**Chip edge per joule.** Unchanged against the f = 1 chip (it stores items whatever they are): 5.1x on GDDR7, 7.5x to 9.2x on HBM3 in the model, 2.1x to 4.8x by the Ethash precedent. The f = 0 recompute chip must hold the leaves (2 GiB) in DRAM to derive anything, so it becomes an f = 1 chip and the 0.31x row disappears. C is therefore not an anti-chip scheme and does not claim to be; it composes with B (the shadow is in the kernel, the state is in the build).
+
+**Bit-exactness.** The leaf is the output of the chain's own hash over bytes every node agrees on by consensus; the derivation is integer; nothing vendor-specific is added. The one new consensus-critical function is the canonical serialisation of state (key order, chunking of code), which every node must compute identically: a bug there splits the chain on a day boundary, the class of M20 and the DAA 198,000 incident. The Devnet 2 gate exists for exactly this.
+
+**Known attacks.** State grinding: a producer can write state (pay gas) to influence leaves; the leaf is hashed with `R_d`, which depends on every leaf, and enters a keyed chained derivation whose read addresses are mixer state, so no bias on 128 dependent reads is reachable at a cost below a block (the MTP lesson, `asic-resistance-history.md` 2.3, is the reason for the hash and the key, not the plain bytes). Compressible state: an attacker fills state with zeros hoping a chip stores it compressed; the hashed leaves are full-entropy, and the padding region (`leaf = 0`) is today's dataset, which the chip already stores at 64 B per item. Precomputation: the snapshot is fixed when `C_day(d)` is certified and `K_d` is known, 20 minutes before the day (the same lead as the epoch seed), and the build is 13 to 77 ms on the GPUs measured (`counter-asic-3-status.md`) plus the leaf pass; a reorg across `C_day(d)` is a merge-depth-scale event, accepted as for the epoch seed (spec 4.3 item 4, O-4.3). Outsourcing: the pool ships the dataset (above). Light evaluation: the f = 0 row above. Long-range: an attacker building an alternative history must build its alternative state snapshots to mine on it, which it does anyway; no change. Finality pause: `C_day(d)` must be certified; if finality is paused for more than the lead the day's snapshot is not derivable and mining would stop, the coupling spec 4.3 argues against for the epoch seed. Rule, as there: take the selected-chain block at that blue score certified or not, deep enough that a reorg across it is a merge-depth event. Empty state at launch: every leaf is `Blake2b(R_d || t || empty)`, full entropy, the dataset as good as today's: graceful.
+
+**Game theory.** No payment changes. A miner must run or rent a node (or trust a pool's dataset); the solo-mining floor rises by a full node's state (today's devnet: megabytes; a used chain: gigabytes). A pool user sees a 2 GiB daily download or nothing (the pool serves the dataset). A prover that mines already holds state. A holder gains a daily sample of state availability per block, for free. A rollup customer gains nothing directly.
+
+**Migration.** Class v5 by P2 (object byte 5, 95 percent over a day, floor height, one-sweep rollout, Devnet 2 first). Every node needs the snapshot builder before the flip (a node without it cannot validate PoW after the flip: the floor height's job). Workers need nothing new: the kernel text is unchanged, the dataset arrives from the node's `prepare` line as today, built on the GPU from the cache plus a leaf array the node hands over (2 GiB per day over the local socket) or built on the node's CPU and uploaded. The one-click miner's "nothing to install but the driver" line holds; "nothing to download but the day key" does not.
+
+### 3.4 The three schemes in one table
+
+| Scheme | What it is | Chip edge per joule vs the 5090 (f = 1 chip, chip-model-v3 method) | Verifier ms per unit (model, then measured in section 5) | Vendor bit-exactness | Ships as class v5? |
+|---|---|---|---|---|---|
+| A, mining is proving | A1 committed codeword, A2 proving steps: dead on bytes and on sampleability; A0 trace-as-dataset survives and is C with the trace as state | A0 unchanged (5.1x GDDR7); A1, A2 not priced | A0: 2.06 + the leaf-read row; A1: 2.9 MB of openings; A2: 32 to 40 ms | A0 adds the zkVM executor to consensus | NEVER as mining = proving; A0 folds into C |
+| B, tensor-shaped shadow | class v3 plus `8 R` int8 8x8x16 tile steps per hash in the PTX fragment layout, two outputs per lane | memory + `8 R x 1,024 x e_mac x k_mma`; `k_mma` near 1 with a floor near 0.5 (approximate); rows from the measured `e_mac` in 5.3 | 2.06 + about 0.9 microseconds per step per unit scalar (R = 128: +0.9 ms; R = 512: +3.7 ms); VNNI 4x to 16x less | native on sm_75+ and RDNA 3+ (AMD layout unverified); emulated on Pascal, RDNA 2, Apple | prototype further; a class v5 candidate after the AMD gate |
+| C, stored state | the daily dataset derives from the execution state snapshot; kernel unchanged; a state sample per block | unchanged (5.1x GDDR7, 7.5x to 9.2x HBM3); the f = 0 chip disappears | 2.06 + 4,096 leaf reads (section 5.2) | nothing vendor-specific; the serialisation is the consensus risk | prototype further; a class v5 candidate on its own or beside B |
+
+### 3.5 Migration through the class system (common to B and C)
+
+The P2 rule as designed (`docs/plans/counter-asic-3-node.md` section 6): the header version's high byte carries the producer's object version; epoch `e` is the new class when the window of one day ending at its seed block has at least 9,500 bps of blue blocks at or above the byte, or when the floor height `N` is reached, or when epoch `e - 1` already was; the rule answers v5 only where it would answer v4. For B and C the object byte is 5 and the floor is set at the publish as DAA + 14,400 rounded up to the epoch boundary. The order: Devnet 2 crossing with `tools/fleet/devnet2-gate.sh` (zero rejected blocks across the flip, no reorg over depth 3, exec roots agreeing, a segment record paid, every node on the new version), then the live devnet in one binary sweep (the digest flips), then the flip by signal. A node that synced from a pruning proof takes the floor rule for epochs whose window reaches below its pruning point (the same class as the era witness, status item). For C the floor also bounds how long a non-upgraded node can keep validating PoW: none after the flip, so the sweep must be complete before the floor, which is the 10,800-DAA check already in the rule.
+
+
+## 4. Reviews: two personas, two short reviews per scheme
+
+Written by this lane in the persona files' voices (`.claude/agents/cryptographer.md`, `.claude/agents/consensus-engineer.md`): every design claim with its attack, every claim about another chain with its file, and the smallest change the code allows. Each review names the break if there is one.
+
+### 4.1 Scheme A, mining is proving
+
+**Cryptographer.** The break is structural and has a name: a lottery needs a distribution of instances and proving has one instance per segment. A1 moves the work into the commit phase and pays for it in witness bytes (2.9 MB per block, or 90 KB with the unit cut to one lane, which also removes `shfl` and with it the only thing that makes the 32-lane unit a unit; `docs/spec/01-lottery-hash.md` 1.9). A2 either recomputes (useless by definition) or verifies a proof (32 to 40 ms measured, `proving-methods.md` 2.1; the gate is 10 ms). The useful fraction bound (proving work per segment over network hashes per segment) is the argument Ball, Rosen, Sabin and Vasudevan make in the negative direction: without a random self-reduction the embedded instance is a constant, and a constant is amortised to zero by the first miner who computes it. A0 is sound as far as it goes and is scheme C. Second attack on A0 that C does not have: the SP1 executor enters the consensus path for the lottery, so an executor bug that produces a different trace on one platform (an undefined-behaviour corner in a precompile patch, a `sha3` or `k256` version skew) splits the chain at the PoW, not at the proof; ledger P7 priced that class for proofs where the native veto bounds the damage to one payout; here nothing bounds it. Verdict: never for A1 and A2; A0 only as C with the trace, and then the state is the better choice of data because every node already agrees on it without a second executor.
+
+**Consensus engineer.** The code says the same thing from the other side. Block validation in the fork validates the header's PoW before the body is fetched and before execution (`check_pow` on the header path, rusty-kaspa's `header_processor`; the fork's `igneum/exec` runs after the block is accepted into the DAG). A puzzle whose verification needs the segment's trace makes header validation wait on the executor of a segment 20 minutes old, which is fine for a synced node and fatal for IBD: a syncing node must execute every segment of history, in order, to validate the headers of history, so headers-first sync and the pruning proof (which validates headers without bodies) are gone; Kaspa's pruning-point sync (`consensus/src/pipeline/pruning_processor`, approximate location) assumes PoW is a function of the header and a small amount of context. A0 shares this break with C and C answers it in 4.3 by making the snapshot a function of a certified checkpoint's state root plus the state itself, which a pruned node fetches as a snapshot (the exec snapshot path the node already has, CLAUDE.md 6 Oct rule "the p2p snapshot path refuses a snapshot below the node's tip"). For A1 the 90 KB per header kills the header relay and the 600-block record window arithmetic alike. Verdict: never for A1 and A2; A0 is C with a worse data source.
+
+### 4.2 Scheme B, the tensor-shaped shadow
+
+**Cryptographer.** No break in the puzzle's soundness: the block is a straight-line integer map with no memory and no data-dependent control flow, its inputs are the per-nonce registers, and the two-output form makes the whole tile load-bearing. Two things to name. (i) The claim that `k_mma` cannot fall far under 1 rests on the honest card's tensor path being near the floor of int8 multiply-add energy; that is an engineering judgement, approximate, and the external chip review (status item 3, `funding.md`) is where it is tested, with the ALU shadow's `k` beside it. The design's advantage over the ALU shadow is bounded, not proven: it narrows the chip's best case from about 0.3 to about 0.5 (approximate) and does not remove the edge. (ii) The fragment layout is a specification of lane ownership; every emulating vendor must reproduce it exactly, and the AMD WMMA layout is unverified (status item 6). Until a 9070 XT run with the spec reference passes, B is bit-exact on one vendor's hardware and in every emulation, which is the state class v2 was in on 3 October (ledger M8) and not a state to cut from. No grinding, outsourcing or precomputation surface is added. A statistical point: the mm8 step's outputs are sums of 16 byte products, so each added value is at most 1,040,400 and its top 12 bits are zero; added into a register it changes the low 20 bits in a structured way. That is fine inside a chain of multiplies and rotates, and the stats run of `TESTS.md` section 3 should be run on the class before any vector is frozen. Verdict: prototype further; a class v5 candidate after the AMD gate and the stats run.
+
+**Consensus engineer.** No consensus change beyond the class byte and the emitter: the block is kernel text (`igneum-pow/src/emit.rs` gains the step in the three dialects), the verifier (`verify.rs`) gains the step in the register-major loop, the acceptance rule is untouched by construction, and the node's seam is the v5 switch beside the v4 one (`counter-asic-3-node.md` section 1 lists every file the v4 switch touched; v5 is the same list with one more number). The break to name is operational: the fleet splits by hardware generation. Pascal, Volta, RDNA 2 and every Apple card emulate, and the one-click workers compile three paths where they compile one today; the OpenCL path on AMD needs a feature test at compile time (the WMMA builtin exists on gfx11 and gfx12 and not on gfx10, `int8-matrix-family.md` 1), which the pack text must carry as a preprocessor branch, and a wrong branch is a wrong hash, which the self-test catches before the worker serves (`packfile.h`, M28's fix). The 5 percent rule must be checked per emulating card with the block live, and the Apple row is the one most likely to fail it at high `R`. Verdict: prototype further; set `R` from the measured rows with the Apple emulation measured on the M5 Max before any cut; the AMD layout is a hard gate.
+
+### 4.3 Scheme C, proof of stored state
+
+**Cryptographer.** The construction is never weaker than today's: the leaf is one more input to the same chained derivation, keyed by the day key through the first mixer, and the f = 1 chip's row is unchanged, which the design says. The break to name is the one Permacoin and MTP both met: who controls the data controls the addresses, unless the data enters through a key the controller does not have. Here the controller of state content (anyone paying gas) does not control `K_d` (a VDF output fixed 20 minutes before the day, spec 4) and the leaf is `Blake2b(R_d || t || key || value)`, so the only lever is choosing content before `R_d` is known, which affects every leaf through `R_d` and none in a predictable way. I find no bias at a cost below a block. The second point: the "verifiable sample of state" is real but modest. A block commits to 128 leaves per lane through 128 dependent reads; a light client checking them needs openings against `R_d` from a full node (depth about 25 at 2^25 leaves, 128 x 25 x 32 B = 102 KB per block if fetched, arithmetic), which is a spot check of availability, not a proof of state correctness; the consensus proof of spec 10 and ledger P4 is still what a light client needs for correctness. The design says this. Third: the canonical serialisation is new consensus-critical code, and the day-boundary flip is the moment it bites (every node rebuilds at once). Verdict: prototype further; a class v5 candidate; the serialisation needs the same test discipline as the DAA switch (a Devnet 2 crossing over a day boundary with a non-trivial state).
+
+**Consensus engineer.** The break I would have named, the IBD and pruning-proof problem of A0, C answers: the snapshot is a function of `R_d`, a state root at a certified checkpoint, and the node already carries an exec snapshot path (`exec_restart_*` fields, the p2p snapshot message, CLAUDE.md 6 Oct). A syncing node validates historical PoW only by holding every day's snapshot, which is 2 GiB per day of history, which is NOT acceptable for IBD. Fix, the smallest I can see: PoW of blocks below the pruning point is not re-validated (Kaspa's pruning proof validates the proof's headers' PoW; rusty-kaspa `consensus/src/processes/pruning_proof`, approximate), so historical snapshots are needed only for the headers inside the proof, which are a bounded set per level; and for them the proof carries the day's `R_d` and the node either holds that day's state (recent days) or trusts the certificate (the finality rule's lock already makes those headers irreversible). That is a spec item for `docs/spec/10-light-client.md` and the pruning section of spec 02, and it is the same shape as the era-seed witness (status item). Second: the verifier's RAM (+2 GiB, +4 GiB at year 4) and the daily build on a node without a GPU (a seed node, a Hetzner box: the leaf pass is CPU work, measured in 5.2) must stay inside the node's budget; the devnet hands on igneum-build-1 have 128 GB, a home node has 16. Third: a day boundary is now a consensus event that depends on a certified checkpoint 20 minutes before it; under a finality pause (6 October, 18:42Z) the day's snapshot falls back to the uncertified selected-chain block, as spec 4.3 argues for the epoch seed; the rule must be written once and tested on the fast-time harness across a pause. Verdict: prototype further; a class v5 candidate; three spec items (pruning-proof witness, the pause rule, the node RAM budget) before a cut.
+
+### 4.4 The pick
+
+B and C are the two to prototype: both are class objects on the shipped hash, both leave the dataset's memory bound untouched, and they compose (B is kernel text, C is the daily build). A is not prototyped: A1 and A2 fail on bytes and on sampleability before any kernel, and A0 is C with a worse data source. The order of merit at this point, before measurement: C first (no vendor risk, unchanged hash rate by construction, a real new property per block, the pool caveat stated), B second (a real lever against the f = 1 chip with a bounded `k`, a vendor split and an unverified AMD layout). Section 6 revisits the order on the measured rows.
+
+## 5. The prototypes and the measured rows
+
+Both prototypes live under `proto-newpow/` with a README carrying the exact commands, the card, the driver and the RESULTS table; this section carries the rows and their consequences. Boxes: two RunPod RTX 4090 24 GB (driver 595.91, nvcc 12.8, `-arch=sm_89`), quiet, the card to itself; CPU rows on igneum-build-1 (EPYC 9454P, one pinned core, `nice -n 19`). Power by `nvidia-smi` at 1 Hz, the mean after the first 10 s of each timed run. Bit-exactness: the PTX path against the reference path on 2^24 lanes (fingerprint), and the GPU against the C CPU reference on 1,024 random lanes.
+
+### 5.1 `mma-shadow` (scheme B), box 1
+
+ROWS_B
+
+### 5.2 `state-dataset` (scheme C), box 2 and igneum-build-1
+
+ROWS_C
+
+### 5.3 The chip rows on the measured numbers
+
+CHIP_ROWS
+
+## 6. Verdicts
+
+| Scheme | Verdict | Why, in one line |
+|---|---|---|
+| A, mining is proving | NEVER (A1, A2); A0 folds into C | one proof per segment is not a distribution of puzzles; the bytes (2.9 MB of openings per block) or the verify (32 to 40 ms) kill every form that is not "hold the trace", and holding the trace is C with a worse data source |
+| B, tensor-shaped shadow | VERDICT_B |
+| C, stored state | VERDICT_C |
+
+**A, in full.** The mandate asked for something never done, and "mining is proving" is the thing everybody has wanted and nobody has shipped; this lane's contribution is the reason, stated as a bound rather than a feeling: the useful fraction of a proving-as-lottery scheme is (proving work per segment) / (network hashes per segment), 8 percent at 1 GH/s and 0.08 percent at 100 GH/s on this chain's measured figures, because gas sets one and the security budget sets the other, and a puzzle whose verifier either recomputes the piece or verifies a 32 to 40 ms proof cannot sit under a 10 ms gate. The 80/20 split stays. Ledger F13's answer stands and gains this bound. What survives (A0) is scheme C.
+
+VERDICT_BC_PROSE
+
+## 7. Ranked next steps
+
+Hours are agent hours (the project lead's rule: Claude-side work takes hours). Each gate is a measurable pass line. Consequence per tier is the row's own.
+
+| Rank | Proposal | Evidence | Model | Hours | Consequence per tier | Gate |
+|---|---|---|---|---|---|---|
+| 1 | Scheme C as class v5 content: the daily dataset derives from the state snapshot (`sd1`), spec text for 1.8.5 (the leaf line), 1.12 (the snapshot's checkpoint and lead), 10 (the pruning-proof witness), 4.3's pause rule applied to the day boundary | section 5.2: the hash kernel and rate are unchanged by construction, the build and verifier costs are the measured rows; every miner operation must hold state | the verifier row: 2.06 ms + the leaf-read row per unit; node RAM + the dataset size | spec 3 h; emitter and `memhard.rs` leaf line 2 h; node snapshot builder (canonical serialisation, one pass per day, the `prepare` hand-over) 6 h; fast-time harness across a day boundary and a finality pause 3 h; Devnet 2 crossing 2 h | 8 to 32 GB cards: no hash-rate change, +2 GiB device memory during the build only (streamable); rig: the same per card; pool user: a 2 GiB daily download or nothing; solo miner: a full node's state; node operator: +2 GiB RAM (+4 at year 4) and a daily leaf pass; holder: a daily random sample of state per block; prover, rollup customer: nothing | the fast-time 3-node network crosses a day boundary with a non-trivial state and no fork; verifier under 10 ms on a 2019-class core with the snapshot in RAM; Devnet 2 PASS over a day boundary |
+| 2 | Scheme B's AMD gate: the WMMA iu8 fragment layout on the RX 9070 XT against the spec reference (the two-output tile), a PC 1 job with the card alone | status item 6 (layout unverified); section 5.1's bit-exact rows on NVIDIA | the spec layout as the definition; a lane permutation per vendor | 3 h (the probe exists: `family-probe.cu` mm8 row; the OpenCL twin needs the builtin path and the permutation) | AMD 16 GB tier: decides whether RDNA 3 and 4 run B natively or emulate at about 12 to 16 steps per mm8 | 1,024 random units bit-exact on the 9070 XT, both tile outputs |
+| 3 | Scheme B's Apple row: the emulated mm8 block in Metal on the M5 Max at R = 32, 128, 512, hash rate and watts under `with-lock.sh measure` | section 3.2's vendor table: Apple is the honest card's worst case; the M5 Max binds at about 130,000 counted ops | 4 shuffles plus 4 dot4 emulations per step, about 10 steps per mm8 (approximate) | 3 h | Apple tier: the 5 percent rule decides the largest R the class can carry | rate within 5 percent of mx8 at the chosen R; bit-exact against the C reference |
+| 4 | Scheme B as class v5 content beside C (`mx8+sd1+mm8xR`) once ranks 2 and 3 pass: the emitter's three dialects (inline PTX with the `IGNEUM_MM8_REF` fallback for sm_61 to sm_72, the AMD builtin behind a feature test, the Metal emulation), the verifier step in `verify.rs`, the stats and fuzz runs of `TESTS.md` on the class, the v5 switch beside v4 | section 5.1 and 5.3: the block's measured watts and the chip rows at k | the chip rows of 5.3 | emitter 4 h; verifier 1 h; suites 2 h; node seam 2 h; Devnet 2 2 h | NVIDIA Turing and later, AMD RDNA 3 and later: native, the measured watts; Pascal, RDNA 2, Apple: emulation at the measured 5 percent check; pool user: nothing; chip: a tensor array per 32 lanes in flight | the six gates of `counter-asic-2-rollout.md` 7 plus the AMD and Apple rows; verifier under 10 ms on a 2019-class core at the chosen R |
+| 5 | The reserve text correction: R8 `mm8` consumes both tile outputs (two destinations) so a chip cannot halve the work | section 3.2 (the half-tile shortcut) | arithmetic: 32 of 64 products consumed in the single-output form | 1 h (spec 1.13.2 text and the edge vectors) | none until era 4 or a signal | the R8 edge vectors re-cut for two outputs, bit-exact on the three vendors |
+| 6 | The light-client state sample: a node RPC that returns, for a block, the 128 leaves of lane n with openings against R_d, and a client check | section 3.3 (the sample is real but modest: availability, not correctness) | 128 x 25 x 32 B = 102 KB per block fetched on demand (arithmetic) | 4 h | holder and light client: a spot check of state availability per block; node: one RPC | 128 openings verify against R_d on the fast-time network |
+| 7 | The 2019-class core measurement (O-1.14) for the verifier under C and under B at the chosen R | every verifier row here is M5 Max or Zen 4 plus the 2.5x rule | the 2.5x rule stands in | 1 h once a core is found (a 2019 laptop or a rented older CPU box) | every tier: the gate that fixes R and the snapshot read budget | under 10 ms per unit, worst cold |
+| 8 | Do not build scheme A (mining is proving) in any form; record the sampleability bound (proving work per segment over network hashes per segment: 8 percent at 1 GH/s, 0.08 percent at 100 GH/s) in the ledger beside F13 | section 3.1 and 4.1 | the bound's arithmetic | 0.5 h (a ledger row) | none | none |
+
+One paragraph each.
+
+**1. Scheme C first.** It is the cheapest change with a new property: the kernel text, the hash rate and the chip rows are untouched, so every measured number of Counter ASIC 2.0 and 3.0 stands; what changes is the daily build and the node. The cost is a canonical state serialisation in consensus, which is why the fast-time harness must cross a day boundary with state and a finality pause before the Devnet 2 crossing. The pool caveat is stated: the design forces the operation, not the card, to hold state.
+
+**2 and 3. B's two vendor gates.** B is bit-exact tonight on NVIDIA (section 5.1) and in every emulation; it is not a class candidate until an AMD card reproduces the spec layout and the Apple emulation's hash-rate cost is measured. Both are short jobs with the card alone.
+
+**4. B beside C.** The order matters: C lands first because it needs no vendor work; B joins the same class byte or the next one once ranks 2 and 3 pass, with R set from 5.1 and the 2019-core row.
+
+**5 to 8.** Small, named, and each closes a thread this lane opened.
+
+## 8. Open questions and what could not be run
+
+| Question | Why it could not be closed tonight | What closes it |
+|---|---|---|
+| The 2019-class core (O-1.14) | no such core in the fleet; igneum-build-1 is Zen 4, the Mac is M5 Max; the 2.5x rule stands in | rank 7 |
+| The AMD WMMA fragment layout | PC 1 is the project lead's desk and the AMD rows were owed all day (status file); no AMD card on RunPod or Vast tonight (fleet agent) | rank 2 |
+| The Apple emulation of mm8 | a Metal emulation kernel is a 3-hour job and the Mac measure lock was free; not started because the AMD gate decides first whether B proceeds | rank 3 |
+| The canonical state serialisation for C | a design item that touches the exec layer (`igneum/exec`), out of this lane's files | rank 1 |
+| The pruning-proof witness for C's historical PoW | spec 02 and 10 items | rank 1 |
+| Whether the tensor path's marginal energy on the 5090 differs from the 4090's | one card measured (box 1); the 5090 is on the project lead's desk | a PC 2 job with the same `run.sh` |
+| The Ampere row (3060, 3080, 3090) | every Ampere card of the fleet was mining and proving the live devnet; a loaded 3090 was offered and declined (a loaded card's rate is not a number) | one quiet Ampere pod |
+| The verifier with a byte-dot instruction (VNNI, NEON udot) | the C reference is scalar | 1 h: an AVX-VNNI and a NEON path in `verify_ref.c`, measured on both cores |
+| Scheme C's leaf array on an 8 GB card at the 2 GiB design size | the build holds dataset + cache + leaves on the device (4.3 GiB) unless chunked | the chunked build (section 5.2 says whether it is trivial) |
+
+## 9. Summary for the coordinator
+
+SUMMARY
diff --git a/docs/evidence/reproduced/0.3.14.md b/docs/evidence/reproduced/0.3.14.md
new file mode 100644
index 000000000..32a4d037b
--- /dev/null
+++ b/docs/evidence/reproduced/0.3.14.md
@@ -0,0 +1,14 @@
+# Reproduced: Igneum Miner 0.3.14 (node 4c6b129d75c3d77a3689d22f1e1dc721b556aebb, app a90f6a5371ed19c62511255a4713eb36191848b9)
+
+06 October 2026, 20:03 UTC on igneum-build-1 by `infra/build-server/repro/rebuild-on-box.sh` (driven by `tools/repro/rebuild-release.sh`): a clean clone of the fork at the node commit on branch `release-0.3.14-node` under a clean clone of the repo at the app commit, 2 independent clean passes per target in one target path each (no sccache, SOURCE_DATE_EPOCH 1791305478, TZ UTC), rustc 1.99.0, x86_64-w64-mingw32-gcc-posix (GCC) 13-posix, clang 18.1.3, glibc 2.39. Shipped hashes read from the public downloads (no token) where marked. Whole run 3 s; log `/srv/builds/_repro/0.3.14/rebuild.log`.
+
+| Artefact | Shipped sha256 (source) | Box pass A | Box pass B | A vs shipped | A vs B | Reason for a DIFFER |
+|---|---|---|---|---|---|---|
+| igneumd | 934f393cacc31a06d0c45a9fe2e2f504941a32533110b51851968e70cf90fa3a (given) | 03f35e056922fa1e... (49600096 B) | 03f35e056922fa1e... (49600096 B) | **DIFFER** | **MATCH** | the shipped binary was not on hand this run (no public artefact), so only the hash is compared; the box's needs GLIBC_2.39, embeds /srv/builds/_repro/0.3.14, clock string 16:51:18; commit string 4c6b129d75c3d77a3689d22f1e1dc721b556aebb: 1 hit(s) in the box's binary |
+| igneum-miner | 7e296541 (given) | 900c1f0bf8a3b504... (9842168 B) | 900c1f0bf8a3b504... (9842168 B) | **DIFFER** | **MATCH** | the shipped binary was not on hand this run (no public artefact), so only the hash is compared; the box's needs GLIBC_2.39, embeds /srv/builds/_repro/0.3.14, clock string none |
+| igneumd.exe | 44fa74c02415ff258b5956ef55909dc97890e3f29fca3d2db26f7152ef4ce541 (given) | 166e604e01c668e6... (51758592 B) | 166e604e01c668e6... (51758592 B) | **DIFFER** | **MATCH** | box exe: Ubuntu GCC 13 posix, -Wl,--no-insert-timestamp (PE timestamp 'Jan 1 01:00:00 1970'), build path /srv/builds/_repro/0.3.14, clock string 16:51:18; the shipped exe itself is not on hand (innoextract 1.9 cannot read the Inno Setup 6 installer: setup loader revision 2; or no public installer for this version), so its hash is the given one and its header was not read; commit string 4c6b129d75c3d77a3689d22f1e1dc721b556aebb: 1 hit(s) in the box's binary |
+| igneum-miner.exe | 819ea9ce (given) | fefd266c3bd6470f... (10994688 B) | fefd266c3bd6470f... (10994688 B) | **DIFFER** | **MATCH** | box exe: Ubuntu GCC 13 posix, -Wl,--no-insert-timestamp (PE timestamp 'Jan 1 01:00:00 1970'), build path /srv/builds/_repro/0.3.14, clock string none; the shipped exe itself is not on hand (innoextract 1.9 cannot read the Inno Setup 6 installer: setup loader revision 2; or no public installer for this version), so its hash is the given one and its header was not read |
+
+Full box hashes: igneumd A 03f35e056922fa1e406e14d35963e8d3ca57f98f0d58a04c3f7cc450a26d1fdc; igneum-miner A 900c1f0bf8a3b504dfb2a7fa7abb91f3286eb0d020ed1e0aa5f3ab808c0489eb; igneumd.exe A 166e604e01c668e69b88556cad959429c67b040ec1e024cf7e514e1b5fc8edae; igneum-miner.exe A fefd266c3bd6470f61476a96453d4ea0cb54c42b8b23038cf5ef5a3397399514; 
+
+Reading: MATCH against the shipped bytes is the goal; A vs B MATCH with a DIFFER against the shipped bytes means the box is deterministic and the shipped build came from another toolchain (the reason column says which facts differ); A vs B DIFFER is a non-determinism on the box itself and is the row to fix first.
diff --git a/docs/evidence/reproduced/0.3.15.md b/docs/evidence/reproduced/0.3.15.md
new file mode 100644
index 000000000..6f28b6534
--- /dev/null
+++ b/docs/evidence/reproduced/0.3.15.md
@@ -0,0 +1,14 @@
+# Reproduced: Igneum Miner 0.3.15 (node 713ef876073d3661e9b48d2ead9a515afd1b2156, app 563485b769868ee34a530f1c40f7419109cc493f)
+
+06 October 2026, 20:03 UTC on igneum-build-1 by `infra/build-server/repro/rebuild-on-box.sh` (driven by `tools/repro/rebuild-release.sh`): a clean clone of the fork at the node commit on branch `release-0.3.15-node` under a clean clone of the repo at the app commit, 2 independent clean passes per target in one target path each (no sccache, SOURCE_DATE_EPOCH 1791312828, TZ UTC), rustc 1.99.0, x86_64-w64-mingw32-gcc-posix (GCC) 13-posix, clang 18.1.3, glibc 2.39. Shipped hashes read from the public downloads (no token) where marked. Whole run 2 s; log `/srv/builds/_repro/0.3.15/rebuild.log`.
+
+| Artefact | Shipped sha256 (source) | Box pass A | Box pass B | A vs shipped | A vs B | Reason for a DIFFER |
+|---|---|---|---|---|---|---|
+| igneumd | 1e51bfb6401e2d86022eeaddf03750a72d6eb200fa879b7c58fb5c3afbf38a50 (igneum-hive-0.3.15.tar.gz (1715e58ea1d4a1ed...)) | 1f1b6eee4aaf4cdf... (49720224 B) | 1f1b6eee4aaf4cdf... (49720224 B) | **DIFFER** | **MATCH** | toolchain: the shipped binary needs GLIBC_2.34, the box's GLIBC_2.39 (a glibc GLIBC_2.34 build is the Mac's infra/cross/build-linux.sh with zig; the box links the native clang/lld); build path in the shipped binary: /Users/joshm/.cargo/registry, in the box's: /srv/builds/_repro/0.3.15 (prost's protowire.rs embeds OUT_DIR, so a different path is a different binary); build clock string (mimalloc's __TIME__) in the shipped binary: 11:05:57, in the box's: 18:53:48 (with SOURCE_DATE_EPOCH the string is the commit's time of day, the same in every build; none = no mimalloc in the binary); commit string 713ef876073d3661e9b48d2ead9a515afd1b2156: 1 hit(s) in the box's binary, 1 in the shipped one (0 = the empty-commit class: a worktree build before the two-step clean) |
+| igneum-miner | c5b489105d933b01e4dceff8dc31e2db8e9aa53de06dddafc6eb12ee85b8f7a6 (igneum-hive-0.3.15.tar.gz (1715e58ea1d4a1ed...)) | a34e0a56c859a667... (9978968 B) | a34e0a56c859a667... (9978968 B) | **DIFFER** | **MATCH** | toolchain: the shipped binary needs GLIBC_2.34, the box's GLIBC_2.39 (a glibc GLIBC_2.34 build is the Mac's infra/cross/build-linux.sh with zig; the box links the native clang/lld); build path in the shipped binary: /Users/joshm/.cargo/registry, in the box's: /srv/builds/_repro/0.3.15 (prost's protowire.rs embeds OUT_DIR, so a different path is a different binary); build clock string (mimalloc's __TIME__) in the shipped binary: none, in the box's: none (with SOURCE_DATE_EPOCH the string is the commit's time of day, the same in every build; none = no mimalloc in the binary) |
+| igneumd.exe | none | 9b377455ac9cc3b9... (51847168 B) | 9b377455ac9cc3b9... (51847168 B) | NO SHIPPED HASH | **MATCH** |  |
+| igneum-miner.exe | none | 65b30edd266d137f... (11129856 B) | 65b30edd266d137f... (11129856 B) | NO SHIPPED HASH | **MATCH** |  |
+
+Full box hashes: igneumd A 1f1b6eee4aaf4cdfec07a165e8242b6d69a9fe20eb1b73f3caf672ec3ff53f91; igneum-miner A a34e0a56c859a667200600d3bca32f9ae22e33deb98cd226e8f54e40a6e354a4; igneumd.exe A 9b377455ac9cc3b90f081bd12d954e400ad1549c158ac179ccf07d16b6bf2c8e; igneum-miner.exe A 65b30edd266d137f3320d4d477e83bf73e0795ac3c697cbcf46b05e7dba0f8a7; 
+
+Reading: MATCH against the shipped bytes is the goal; A vs B MATCH with a DIFFER against the shipped bytes means the box is deterministic and the shipped build came from another toolchain (the reason column says which facts differ); A vs B DIFFER is a non-determinism on the box itself and is the row to fix first.
diff --git a/docs/fud-ledger.md b/docs/fud-ledger.md
index 8e162a2c9..60fae6e91 100644
--- a/docs/fud-ledger.md
+++ b/docs/fud-ledger.md
@@ -164,6 +164,24 @@ Sweep (5 October 2026, evening): stated. `site/litepaper.html`, "For miners", Ha
 
 ---
 
+### M32. "Automatic anti-ASIC escalators" overstates what the era draw and the instruction reserve do
+"You sell the era draw and the reserve unlock as anti-ASIC escalators, as if not knowing next era's parameters stops a chip. A chip that stores the dataset reads every drawn parameter as firmware: an address permute, a rotator, an immediate table. The families, the reserve order, the mixer, the dataset schedule and the class v4 shadow are all public at genesis. So what does the draw actually defend against?"
+
+Status: Conceded, stated (6 October 2026, evening; the Horizon lane analysis `docs/analysis/horizon/algorithm.md` sections 5.4 and 8, lane 2): the era draw and the instruction reserve are automatic schedule changes against fixed datapaths and against human forks; against the stored-dataset chip every drawn parameter is firmware, and the defence against that chip is the latency-shadow work (class v4) and the price-per-joule model. Stated in `site/litepaper.html`, Mining section ("These are automatic schedule changes ... every drawn parameter is firmware") and the "A chip is impossible" item ("a chip wired for one program is a bad bet ... not the schedule"), the "Every six months" row of the comparison table, and `site/index.html`, the hourly-program note ("a chip wired for one program is useless"). The phrase "automatic anti-ASIC escalators" is withdrawn from public text; it stays in the internal design summary until that is next edited.
+
+Answer: Correct. The draw hides (M, R, pos, the op weights within +-2, the fold rotations) until 2 hours before each era, and none of those needs silicon. Biasing the draw is priced at 20 days of 100 percent of the network's hash for one more sample of the same space (lane section 5.4), so the draw is unbiasable at any price that matters and that is its whole job: it is a fairness device and a fork-free schedule, not a chip defence. What a chip wired for one program loses to is the hourly program itself; what the stored-dataset chip loses to is the latency shadow (class v4, 2.1x per joule at k = 1 against the 5090 bench row, 0.9x against the Apple M5 Max) and the price per joule, which is where the public claim now rests.
+
+Evidence: `docs/analysis/horizon/algorithm.md` sections 5.4 (the draw's randomness, the two routes priced) and 8 (the summary), 6 October 2026; the six-era hash-rate spread of 0.8 to 3.2 percent per card in bench-log "Counter ASIC 2.0, the numbers".
+
+### M33. The FPGA ceiling rests on a tFAW the JEDEC HBM2 table does not give
+"Your chip model's HBM random-read ceiling takes 8 activates per 12 ns per channel from O'Connor and gets 10.7 G reads/s a stack; the epoch-length page's bank-bound row gets 11.4 and a 12.2 ceiling. JEDEC HBM2 tFAW is 28 ns with 4 activates per channel per window: 2.3 G. The one measured HBM2 FPGA random-read rate (Shuhai, FCCM 2020) is 2.4 G, right on the JEDEC ceiling. Your 1.9x FPGA ceiling is arithmetic on a timing the part does not have."
+
+Status: Conceded, stated (6 October 2026, evening; the Horizon lane analysis `docs/analysis/horizon/algorithm.md` section 5.1, the FPGA lane): the public FPGA line carries only the measured row, 2.4 G reads/s per card and 0.30x to 0.39x of the RTX 5090 per watt (Shuhai, FCCM 2020 Fig 7; the tFAW arithmetic from ICCAD 2021 Table I), and the 11.4 G bank-bound row and the 12.2 G ceiling are marked unmeasured until an AWS F2 hour measures them. Stated in `docs/analysis/chip-model-v3.md` section 5.3 (the activate-bound row marked UNMEASURED with the JEDEC figure beside it, and the FPGA paragraph after the table). The epoch-length analysis's 12.2 row is not on master yet and is corrected when it lands.
+
+Answer: Correct. The measured 2.4 G/s had been read on 6 October as a mapping artefact ("the paper's point is that this mapping is the wrong one for random access"); the activate window says it is the DRAM's own limit, and a bank-interleaved mapping does not lift it because tFAW is enforced per channel by the die. The measurement that settles it is one AWS F2 hour (f2.6xlarge, Virtex UltraScale+ VU47P, 16 GB HBM2 in 2 stacks, 32 pseudo-channels, USD 1.98 an hour on demand): the chase kernel of `docs/benchmarks/repro.md` 2.2 ported to a Vitis HLS AXI master over the HBM IP at 1 GiB across all 32 pseudo-channels, 256 to 4,096 lanes in flight, board power at 1 Hz; pass line 15 to 25 M reads/s/W (0.3x to 0.5x of the 5090), alarm 27 (0.5x), over 54 (1.0x) a Counter ASIC 4.0 item. Consequence per tier: none today (no FPGA mines); on the measured row a soft-overlay FPGA mines at an RX 9070 XT's rate per watt for about 7x the price (approximate), so no home or rig tier is displaced.
+
+Evidence: `docs/analysis/horizon/algorithm.md` section 5.1 (the ceiling table: measured 2.4, tFAW-bound 2.3, tRRD-bound 2.8, bank-bound 11.4, O'Connor 10.7 G reads/s, and the F2 measurement plan), 6 October 2026; JEDEC HBM2 timings as carried by ICCAD 2021 Table I; Shuhai, FCCM 2020, Fig 7.
+
 ## 2. Finality and attacks
 
 ### F1. Finality is attackable for the first month
@@ -296,6 +314,15 @@ Evidence: design doc, "Proving speed on consumer GPUs" risk item and "Who needs"
 
 ---
 
+### F26. "No stake" needs its one sentence: what is at stake, and what strips it
+"You write 'no stake' and then run a vote whose weight can be stripped. Either nothing is at stake, in which case equivocation costs nothing, or something is, in which case say what it is and who can take it. One sentence, in the finality section and the summary, not an argument."
+
+Status: Conceded, stated (6 October 2026, evening; the Horizon lane analysis `docs/analysis/horizon/frontier.md` section 4.1 and item I13 of its incremental list): `site/litepaper.html`, the finality section's "What is not here" paragraph and the "Igneum at a glance" Finality row carry the sentence verbatim: "No coin is staked. The only thing at stake is 30 days of public work: a vote key's weight is its blue blocks over the window, and equivocation strips it for 30 days." The spec sentence for 03 and 05 (I13) follows with the lane's commit.
+
+Answer: Correct. The weight is a quantity that is at stake, earned by work alone over 30 days, not transferable, not purchasable, and already stripped in full for equivocation (spec 3.6). That is a slashable bond made of blocks, with no coin and no stake class; the "then it is stake" objection and its answer (the weight cannot be bought, borrowed or bridged, so capture by capital is removed; the last-days attack is bounded by the 30-day re-earn) are in the lane file, section 4.1. Extending the strip to execution-layer faults (the lane's 3.2) is an idea, not a rule, and the public text does not claim it.
+
+Evidence: `docs/analysis/horizon/frontier.md` sections 3.2, 4.1 and the incremental list (I13), 6 October 2026; spec 3.6 (the equivocation strip).
+
 ## 3. Proving and the zkEVM
 
 ### P1. The 20-second shard is a number you made up
@@ -502,6 +529,15 @@ Evidence: litepaper "Liquidity from the people who are there".
 
 ---
 
+### E19. "Proving: a second income" without the arithmetic of how small it is
+"You sell proving for other chains as the income that keeps cards on after the subsidy fades. Put a number on it. All of Ethereum L1's proving today costs tens of dollars a day. Your year-1 emission is tens of thousands a day at any price you dare print. Say which one pays the bills."
+
+Status: Conceded, stated (6 October 2026, evening; the Horizon lane analysis `docs/analysis/horizon/frontier.md` section 3.11, `frontier_model.py` section 7): `site/litepaper.html`, "For miners", under the three-streams table: all of Ethereum L1's proving is about USD 36 a day at the September 2026 tracker cost (USD 0.005 a block x 7,200 blocks; the tracker figure is a secondary source) against about USD 13,700 a day of Igneum's year-1 emission at USD 0.005 per IGN (31.688 IGN a block x 86,400; the price is an input, not a forecast), so external proving is a small second income at launch and the lottery pays the bills; paid demand would have to grow about 1,000x in dollars for proving to become the main income. Figures the lane labels approximate (all rollup proving spend, USD 8,200 to 27,400 a day; Boundless's trailing day, USD 2) are not on the page.
+
+Answer: Correct. The whole public proving market is three to four orders of magnitude under year-1 emission at any price input (the lane's table: Ethereum L1 at the Sep 2026 cost USD 36 a day, at the Dec 2025 cost 288; year-1 emission 13,700 at USD 0.005, 54,800 at 0.02, 273,800 at 0.10). The cost curve falls 3x to 30x a year, so dollars per proof fall as fast as volume rises. The design's own claim stays the defensible one: a second income that keeps cards on after the subsidy fades (spec 5.10.2), never the main one by 2030.
+
+Evidence: `docs/analysis/horizon/frontier.md` section 3.11 and the summary (section 7), 6 October 2026; the tracker (ethproofs, "sub-half-cent" fields, September 2026, secondary); the emission schedule (31.688 IGN a block in year 1).
+
 ## 5. Governance and the founders
 
 ### G1. No cryptography team
diff --git a/docs/plans/build-server.md b/docs/plans/build-server.md
index 4a4f1f32e..0e6230d46 100644
--- a/docs/plans/build-server.md
+++ b/docs/plans/build-server.md
@@ -99,6 +99,16 @@ Also logged for context: the Mac's Linux cross-build with zig (`infra/cross/buil
 | The 0.3.15 prover pair for the PCs needs `--features igneum-prove-host/cuda` (the PCs run SP1_PROVER=cuda) | my first proving build named no feature | built on the box from master e1b5bc9: igneum-prove-host 73,161,528 B sha256 71bc2438856bb141f6cad3d18489f708568144fad5a06a002fbadefb9ce256f9, igneum-prove-export 3,609,360 B sha256 263bf4cef70af4a13a45b2e79b8dbab373282ea4c571f624d02ddb5791935361 (52 s warm, no CUDA needed at build time); handed to the shipper |
 | Let's Encrypt saw NXDOMAIN for build.igneum.network | the deSEC record was minutes old; Ubuntu's Caddy then fell back to ZeroSSL and failed with HTTP 422 for ever | issuer pinned to Let's Encrypt; the retry got the certificate |
 
+## 5b. Reproducible builds (main's rule, 6 October 2026, from the 0.3.14 repro docs/evidence/reproduced/0.3.14.md)
+
+| Class | What differed | Standard fix, in every build path |
+|---|---|---|
+| prost's generated `protowire.rs` embeds `OUT_DIR` | two builds in differently named target dirs give different bytes | ONE fixed target path per target: `target` (or the name `--target-dir` gives) on the box, `$CARGO_TARGET_DIR` on the Mac's cross-build.sh, the persistent dir of the PC job; never a per-run name |
+| libmimalloc-sys compiles mimalloc's C with `__DATE__`/`__TIME__` | two builds a minute apart differ when mimalloc recompiles | `SOURCE_DATE_EPOCH` = the node commit's author time and `TZ=UTC`, exported in lib.sh `bs_repro_env` (build-remote.sh, cross-remote.sh, workers-remote.sh), remote-run.sh (`BR_SDE`, logged in the JSONL line as `source_date_epoch`), proto-cuda/windows-node/cross-build.sh, and the PC job (push-build-inputs.sh writes `node.commit_time`, jobbuild.rs exports it before every cargo build of a stage; unit test asserts it) |
+| sccache hid both | a cache hit returns the first build's object | the self-test runs with `RUSTC_WRAPPER=/usr/bin/env` (a pass-through; an EMPTY value is "unset" to cargo and would fall back to the configured sccache) |
+
+Self-test: `tools/build-remote.sh --self-test-repro [--full]` from a fork worktree. Run 6 Oct 20:02 UTC on the box (igneum-node-bs at 3bfe346f, epoch 1791120573): igneum-miner twice a minute apart, kaspa-grpc-core cleaned in between: MATCH 91e130f52438edf012466d3f1d3d634ab9263cd7858e67d2dd8d590b152f8a22; the same build into a per-run target path: 548671e7... (differs, the OUT_DIR class shown firing). `--full` (kaspad with libmimalloc-sys recompiled a minute later, with and without the epoch): run 6 Oct 20:04 to 20:08 UTC (247 s): kaspad with libmimalloc-sys recompiled a minute later, epoch set: MATCH 70219bc29cc98ac75da00702b9966f9f5d73cbf10efaca1c8841c00bb5aae7bf; without the epoch, a minute later: 45169e88... (differs, the __DATE__ class shown firing); the miner line again MATCH 91e130f5..., the per-run path 310383f5... (differs). The box is deterministic with the rule and shown non-deterministic without it
+
 ## 5a. The GPU workers (added 6 October 2026, 19:10 UTC, for the class v4 rehearsal)
 
 | What | Fact |
@@ -115,6 +125,158 @@ Also logged for context: the Mac's Linux cross-build with zig (`infra/cross/buil
 |---|---|---|
 | No zig / cargo-zigbuild | the devnet seed (Debian 12, glibc 2.36) takes the Mac's zig build; a native box build links glibc 2.39, which Debian 13 seeds accept and HiveOS (Ubuntu 18/20 base) does not | install zig 0.17 + cargo-zigbuild in provision.sh, add `--target x86_64-unknown-linux-gnu.2.36` mode to build-remote.sh |
 | No macOS target | agents who run nodes on the Mac still build there | out of scope (needs the macOS SDK on Linux); the fleet or the box's own Devnet 2 seed takes the test-network runs instead |
-| No CI runner | GitHub `ci.yml` and `windows.yml` run on GitHub's machines | install a self-hosted runner as user build once R1 is in |
+| No CI runner | DONE 6 October 2026, 19:19Z (section 7): the runner `igneum-build-1` is online under user `runner`, never build; the workflow change is proposed in docs/plans/ci-self-hosted.md | main flips `IGNEUM_CI_RUNNER=box` after the shipper's cut |
 | Byte identity with the Mac's exes | different C/C++ toolchain (Homebrew mingw vs Ubuntu GCC 13) and embedded source paths | not a goal; the box is identical with itself build to build, cross-remote.sh reports sha256 and the DLL list per exe |
 | Robot API | `~/.config/igneum/hetzner-token` is the Cloud token (hcloud); the dedicated box lives in Robot, a separate credential | main sets the Robot server name in the UI; a webservice user goes to `~/.config/igneum/robot-credentials` when needed |
+
+## 7. The box's second shift (6 October 2026, from 20:3x UK, the project lead: "what else can our building machine be working on?")
+
+Four items, each its own commit on branch `box-work` with its section here. Times UTC.
+
+### 7.1 The GitHub Actions runner (DONE 19:19Z)
+
+| Fact | Value |
+|---|---|
+| Runner | `igneum-build-1`, actions/runner 2.338.0 (tarball sha256 af4b794c... checked against the release note), registered on igneum-network/igneum at 19:19:49Z, online, labels `self-hosted, Linux, X64, igneum-build-1` |
+| User | `runner` (uid 1001, own group, no sudo, not in `build`'s group; /home/runner 750). Never `build`, never root. The runner's credential (`/opt/actions-runner/.credentials`, mode 600) is the only thing it holds; it signs nothing and reaches no hand |
+| Service | `actions.runner.igneum-network-igneum.igneum-build-1.service` (GitHub's `svc.sh install runner`), drop-in `igneum.conf`: Nice 10, IO best-effort 7, Restart on-failure. Agents' builds (nice 0 through build-remote.sh) win the CPU over a CI job |
+| Toolchains | rustup 1.99.0 pinned like the box (`RUST_TOOLCHAIN`), targets x86_64-unknown-linux-gnu and x86_64-pc-windows-gnu, clippy, rustfmt; mingw-w64 GCC 13 posix, Node 22, python3 + numpy from the system (numpy added to APT for the simulators) |
+| sccache | `/usr/local/bin/sccache` (the build user's binary copied; /home/build is 750), config `/home/runner/.config/sccache/config` with `rw_mode = "READ_ONLY"` on /srv/sccache, own server port 4227. Shown: a job-shaped `cargo test --release` of igneum-pow as `runner` (99 tests pass, 42 s cold) made 6 compile requests, 0 hits, 6 cache WRITE ERRORS (the refusal, as wanted), and /srv/sccache stayed at 5,880,836 KB |
+| Jobs | `.env`: RUSTC_WRAPPER, SCCACHE_CONF, SCCACHE_SERVER_PORT 4227, CARGO_INCREMENTAL 0, CARGO_BUILD_JOBS 48 (half the box); `.path`: the runner's cargo bin, /usr/local/bin, /usr/bin, /bin. A CI job takes NO build slot today (ci-self-hosted.md, open row) |
+| Ephemeral | no. `--ephemeral` is for autoscaled fleets that register a fresh runner per job; one standing runner on a private repository keeps its registration and cleans `_work` per job (approximate: GitHub's docs host answered 404 to both fetches tonight, so this is the rule as remembered, labelled so) |
+| Registration | `infra/build-server/runner/register.sh`: gh as igneum-labs (fails on any other active account, checks the login is igneum-labs), `POST repos/igneum-network/igneum/actions/runners/registration-token`, the token as the first stdin line to `provision.sh` on the box (never an argument, never a file, never logged; the output is filtered for it as a belt). `--status` lists the repository's runners and the unit |
+| Idempotent | provision.sh runs 3 and 4 after the registration: `runner: ok`, no restart (`ActiveEnterTimestamp` unchanged). Run 2 had said `changed` because GitHub's `svc.sh install` runs `env.sh`, which rewrites `.env` and `.path`; the step now writes them AFTER the install |
+| Workflows | NOT changed (the shipper owns them tonight). The proposed diff and the fallback (repository variable `IGNEUM_CI_RUNNER`; GitHub has no "else" in `runs-on`) are in `docs/plans/ci-self-hosted.md`. `windows.yml` cannot move to a Linux box (MSVC, WebView2, Inno Setup, PowerShell 5.1) |
+
+Consequences: ci.yml's `pow` and `sims` jobs would run on a pinned 1.99.0 (GitHub's `ubuntu-latest` ships whatever stable it has), with 48 jobs; GitHub-hosted minutes on a private repository are the thing saved. A CI job on the box reads only what the checkout gives it; the mirrors and `/srv/builds` belong to `build` and are not readable by `runner` (git's safe.directory is set for the runner so a future job may clone a mirror read-only if main wants it).
+
+### 7.0 The slots ruling (main, 20:3x UK; DONE 19:28Z, live on the box)
+
+| Change | Where | Shown by |
+|---|---|---|
+| 2 build slots (`/srv/builds/_locks/slots` = 2) | provision.sh `SLOTS` default 2, applied 19:28:18Z | `dirs: changed (... slots=2)` |
+| CARGO_BUILD_JOBS 90 when a build holds the only taken slot, 45 when it sees the other slot held (one second of settling after taking the slot, then a `flock -n` probe of the other file); a `-j` on the cargo line wins | remote-run.sh; tools/build-remote.sh and tools/cross-remote.sh pass `-j` only when `--jobs` is given | `remote-run.sh --self-test-slots` on the box: two concurrent fake builds get 45 each, a lone one 90 |
+| A measurement (`BR_MEASURE=1`) takes the `measure` file exclusively; builds hold it shared for their whole run, so a measure waits for the running builds and blocks new ones, as with-lock.sh's `measure` on the Mac | remote-run.sh; `infra/build-server/prover/cpu-trial.sh` is its first user | the self-test: a measure blocks a build, a build blocks a measure; JSONL carries `"jobs"` and `"measure"` |
+| Lock files opened in APPEND mode | remote-run.sh | the first version's `exec {fd}>build-k` truncated a BUSY slot's holder line each time another build probed it (the dashboard read empty lines for held slots); the self-test's case 5 keeps a holder line through a probe. The OLD script under the same cases: `JOBS=none JOBS=none`, FAIL (the known-failed run, 19:25Z) |
+| An environment IGNEUM_BUILD_SLOTS_DIR or IGNEUM_BUILD_LOG_DIR wins over the profile | remote-run.sh | the first self-test run let the profile reset the scratch dir and took the box's REAL slot for 7 s (19:24Z, box idle) |
+
+Open: a worktree whose remote-run.sh predates this keeps the old behaviour until it has master with it (the script is piped from each Mac worktree per build), so until every agent rebases, a build from an old worktree still asks `-j 90` beside a new one at 45. The build-server agent was told at 19:28Z.
+
+### 7.2 The night battery (DONE 19:42Z installed, dry run 19:45 to 19:49Z)
+
+`infra/build-server/night/night-battery.sh`, run by `igneum-night-battery.timer` at 02:00 Europe/London (the box's clock is
+Europe/Berlin, so the unit names the zone: next run Wed 2026-10-07 03:00 CEST = 02:00 BST; not Persistent, a missed night is
+not run by day) through `igneum-night-battery.service` (User build, Nice 19, idle IO, 8 h limit), whose ExecStart is
+`remote-run.sh` with the battery as BR_CMD, so ONE build slot spans the whole invocation and one JSONL line records it.
+Installed by provision.sh `step_night` from the mirror at `NIGHT_REF` (box-work tonight, master once merged); the battery
+re-execs itself from master's checkout at run time. Every row: `cargo test --release --no-fail-fast` per crate (the repo's
+five crates and the proving workspace's host, core and export; every fork workspace member, kaspad with `igneum-pow`),
+igneum-pow's two fuzz tests at 2,000 programs (10x), the three simulators in full, the fast-time harnesses
+(`tools/finality-attacks/run.mjs --fast-time`, `tools/harness/run.mjs s3 s4 --fast-time --no-bench-log`,
+`tools/exec-sync/reorg.mjs`) on igneumd, igneum-miner, igneum-harness-sim and igneum-p2p-probe built into the night
+checkout's `target-integration`, clippy per crate dir, `cargo audit` per Cargo.lock; then `docs/benchmarks/night/<date>.md`
+(pass/fail table, "new since last night" against the newest earlier report, commits moved), committed as igneum-labs on
+branch `night-battery` (rebuilt on master each night, earlier unmerged reports carried over) and force-pushed to
+`/srv/igneum.git` only. Main merges: `git fetch build night-battery` from the main checkout. The fork branch defaults to the
+newest `release-*-node` on the mirror (tonight release-0.3.15-node 713ef876).
+
+Dry run (`NIGHT_SUBSET=1`, the second slot while the repro held the first, so CARGO_BUILD_JOBS 45): **3 min 54 s** wall,
+10 pass, 1 FAIL, 1 skip; report `docs/benchmarks/night/2026-10-06-dryrun.md` on the mirror's night-battery branch (fbb72e5).
+
+| Row | Result | Time | Detail |
+|---|---|---|---|
+| suite igneum-pow | pass | 51 s | 99 passed |
+| suite fork/kaspa-pow | pass | 1 min 04 s | 7 passed |
+| suite fork/igneum-miner | pass | 49 s | 18 passed |
+| fuzz igneum-pow x200 | pass | 11 s | 200 mx8 programs and 200 scratch programs, 800 units each |
+| sim finality_sim.py, finality_v2.py --quick, difficulty/sim.py --quick | pass | 3 s, 41 s, 5 s | 249, 117, 8 table lines |
+| clippy igneum-pow | pass | 3 s | 28 warnings |
+| audit igneum-pow | pass | 3 s | 0 vulnerabilities |
+| audit vendor/igneum-node | **FAIL** | 2 s | 22 advisories in the fork's lock file: h2 (RUSTSEC-2026-0258, unbounded empty DATA frames), quinn-proto (2026-0185, remote memory exhaustion), rustls (2026-0285, TLS 1.3 handshake across encryption levels), ruint (2026-0220), crossbeam-epoch, anyhow (2026-0190), event-listener, faster-hex (2026-0306, AVX2 read past src), lru (2026-0253), tracing-subscriber (2025-0055), chacha20, spin; 17 unmaintained-crate warnings (async-std discontinued, atty, bincode, derivative, instant, mach, paste, proc-macro-error, rustls-pemfile) |
+| harness | skip | | not in the subset; its first run is the 02:00 battery, so the first full report will show whether the Node harnesses run on Linux unchanged (c4, fud and v3.mjs default IGNEUM_NODE_ROOT to /Users/joshm/Projects/igneum/; the battery sets it) |
+
+What the FAIL means and what follows: every node binary shipped so far (and the 0.3.15 one tonight) links h2, quinn-proto and
+rustls at versions with published advisories; h2 and quinn-proto are in the gRPC and QUIC paths a peer can reach, so these are
+the remote ones. The fix is a dependency bump in the fork (`cargo update -p h2 -p quinn-proto -p rustls -p ruint -p
+crossbeam-epoch -p anyhow -p event-listener -p faster-hex -p lru -p tracing-subscriber`, then the suites), a consensus
+engineer's hour on a quiet branch, and the row goes green by itself the next night. Until then the row stays FAIL every night
+and "new since last night" stays quiet about it. The unmaintained-crate warnings are upstream rusty-kaspa's and do not fail
+the row.
+
+Expected full-run time (not measured yet): the three suites above compile the fork's test targets once (about 1 min each for
+the first crates, seconds after), so 75 fork members plus the repo crates are estimated at 40 to 70 min; the full sims about
+10 min (finality_v2.py is 5 min on the Mac); the harnesses 15 to 30 min; clippy and audit under 10 min. Under 2 h, inside
+the 8 h limit; the first report at 02:00 BST writes the real number.
+
+### 7.3 Reproducible builds (DONE 19:52Z; A vs B MATCH on all four, DIFFER against the shipped bytes, both explained)
+
+`tools/repro/rebuild-release.sh <version>` (the Mac) reads the pins from `docs/plans/release-<v>.md` (the heading
+"(node <sha>, app <sha>)" and the bold hashes of the Linux and Windows rows), makes sure both commits are on the mirrors, and
+runs `infra/build-server/repro/rebuild-on-box.sh` on the box: a clean clone of the fork at the node commit on a branch under
+a clean clone of the repo at the app commit, two clean passes per target in ONE target path each, no sccache, under build
+slots through remote-run.sh, `SOURCE_DATE_EPOCH` = the node commit's time, `TZ=UTC`; the shipped hashes come token-free from
+the public downloads (the HiveOS tarball for the Linux pair; the installer for the exes, when innoextract can open it) with
+the plan's hashes as the fallback; the evidence goes to `docs/evidence/reproduced/<version>.md`. The 0.3.14 run (node
+4c6b129d, app a90f6a5): four passes of 70 to 78 s, whole run 5 min 06 s.
+
+| Artefact | A vs shipped | A vs B | Why the shipped bytes differ (read off the binaries) |
+|---|---|---|---|
+| igneumd (box 03f35e05..., 49,600,096 B) | DIFFER | **MATCH** | shipped 934f393c... was the Mac's zig build for glibc 2.36; the box's needs GLIBC_2.39 (native clang and lld). Commit string 4c6b129d in the box's: 1 hit |
+| igneum-miner (box 900c1f0b..., 9,842,168 B) | DIFFER | **MATCH** | the same toolchain difference |
+| igneumd.exe (box 166e604e..., 51,758,592 B) | DIFFER | **MATCH** | shipped 44fa74c0... came from the Mac's Homebrew mingw at 16:52Z, before the --no-insert-timestamp fix (17:48Z) and from a worktree (the empty-commit class); the box's is Ubuntu GCC 13 posix with a zero PE timestamp and the commit string (1 hit). innoextract 1.9 cannot open the Inno Setup 6 installer (setup loader revision 2), so the shipped exe's own header was not read |
+| igneum-miner.exe (box fefd266c..., 10,994,688 B) | DIFFER | **MATCH** | the same |
+
+Two non-determinisms found on the way, both in the SHIPPED builds too (first run 19:43Z, passes A and B differed on all four):
+
+| Class | Fact | Fix |
+|---|---|---|
+| OUT_DIR path in the binary | prost's generated `protowire.rs` (kaspa-grpc-core, kaspa-p2p-lib) embeds its OUT_DIR path; a pass in a target dir of another NAME differs (igneum-miner matched byte for byte once the path was the same) | one target path per target in the repro; for cross-machine identity a `--remap-path-prefix` of the target dir and the home (not done: the Mac and the box differ in every path anyway) |
+| Build clock in the binary | libmimalloc-sys compiles mimalloc's C with `__DATE__` and `__TIME__` ("Oct  6 2026", "21:38:15" sat in libmimalloc.a, next to the mimalloc option names); two builds a minute apart differ | `SOURCE_DATE_EPOCH` exported for every pass (GCC and clang take the date and time from it); PROPOSED for build-remote.sh, cross-remote.sh, cross-build.sh and the PC job: export it from the commit time so two builds of one commit give one hash. The earlier "byte-identical across three builds" on the box was under sccache, which returns the first build's object and hides this class |
+
+0.3.15 as well (run 19:56 to 20:00Z, the moment it reached dl/public; node 713ef876, app 563485b; four clean passes of 63 to
+76 s): A vs B **MATCH on all four** again (igneumd 1f1b6eee..., igneum-miner a34e0a56..., igneumd.exe 9b377455...,
+igneum-miner.exe 65b30edd...). Against the shipped Linux pair in `igneum-hive-0.3.15.tar.gz` (igneumd 1e51bfb6...,
+igneum-miner c5b48910...): DIFFER, and the binaries say why: the shipped pair needs GLIBC_2.34 and embeds
+`/Users/joshm/.cargo/registry` and the clock string 11:05:57, so the HiveOS package carries the Mac's zig build, not the
+box's 06211d55... of 19:00Z (the box build needs GLIBC_2.39, which HiveOS cannot run; the zig lane is right for that
+package). The Windows exes have no shipped hash yet (the public installer is still 0.3.14). `docs/evidence/reproduced/0.3.15.md`.
+
+What it means: the box is deterministic for a given commit and path, so a release built on it can be checked by anyone with the
+same toolchain by rebuilding and comparing; the shipped 0.3.14 and 0.3.15 Linux bytes came from the Mac's zig lane with a
+build clock inside and cannot be reproduced anywhere, and the Windows 0.3.14 exes carried a PE timestamp. The reason to ship
+every target from the box from 0.3.16 (R2) is this table, with SOURCE_DATE_EPOCH exported in every build script; for HiveOS
+(glibc 2.36 and under) the box needs zig + cargo-zigbuild first (section 6, row 1), or the package keeps the Mac's build and
+stays unreproducible until then. Open: a `--reuse` re-report of 0.3.15 once its Windows installer is public, and
+`rebuild-release.sh 0.3.16` the moment it ships.
+
+### 7.4 The CPU prover trial (DONE 19:30Z; verdict: the box is NOT a prover)
+
+`infra/build-server/prover/cpu-trial.sh` on the box under the measure hold (builds excluded), `igneum-prove-host` from master
+7483fb37 (the 0.3.15 prover pair, sha256 71bc2438...; its `cuda` feature changes nothing under `SP1_PROVER=cpu`), fixture
+`proving/fixtures/block-56-transfers.json` (the v0 block: 3 transfers, 600 pgas, one shard, 556,369 SP1 cycles), `--mode shard
+--shard 0`, `RAYON_NUM_THREADS=96`, nice 19, box otherwise idle (load 2.6 at start). Log and results JSON:
+`/srv/builds/_log/prover-trial/trial-20261006T192824Z.{log,json,txt}`; JSONL line kind `measure`.
+
+| Stage | Box, 96 threads (EPYC 9454P) | Mac, same statement class (bench-log) |
+|---|---|---|
+| setup (prover client, shard and aggregator keys) | 14.4 s (client 12.6, keys 1.8) | 9.3 s per invocation in the v0 loop (4 Oct, "nearly all SP1 setup") |
+| execute | 0.28 s, 556,369 cycles, 927 cycles per pgas | 0.19 s for block 78 (3 Oct) |
+| core proof | **34.2 s**, 7,317,561 B, verify 0.34 s | 83 s for the 200-pgas shard on a Mac at load 40 (4 Oct); 71.7 s is main's Mac figure for this fixture (its stage not recorded here, labelled approximate) |
+| compressed proof (what a record carries) | **85.9 s**, 1,272,897 B, verify 0.07 s | 272 s for the 200-pgas shard on the loaded Mac (4 Oct); 61 s for the smallest shard in the 3-node v0 loop |
+| whole run, wall | 136.9 s | |
+| peak RSS | 28.2 GB (VmHWM) | |
+| CPU use | 64 of 96 threads busy on average (6,408 percent in `ps`) | |
+
+What the numbers mean, per tier, and what follows:
+
+| Number | Means | Done or proposed |
+|---|---|---|
+| core 34.2 s under 60 s, compressed 85.9 s over it | the proof a record carries is the compressed one, so the shard that matters takes 120 s of proving on 96 CPU threads for the SMALLEST shard the chain has (600 pgas, 0.56 M cycles); a shard at `S_p` is 60 M cycles (bench-log 4 Oct), about 100x, so hours per shard on this CPU against the 60 s proof lag the litepaper states | the 60 s test of the ask is NOT met on the stage that counts; NO standing CPU prover unit is written, nothing joins the devnet from the box (R6 holds: the box is never a node host for the live devnet) |
+| 28.2 GB peak for the smallest shard | a CPU prover needs 32 GB of RAM for a toy shard; every home tier (8, 12, 16, 24 or 32 GB CARDS, 16 to 64 GB of RAM) is out of CPU proving, and the rented 4090 boxes' CPUs are not a fallback either | the app keeps "proving on the CPU (slow)" as a correctness lane only; the prover tiers are the real cards (docs/analysis, 6 Oct rented-card measurement) |
+| 64 of 96 threads busy | SP1's CPU prover does not scale to the whole box; a second trial with `RAYON_NUM_THREADS=48` would show whether half the box proves as fast (then two shards side by side) | not run tonight (one slot of the box's evening); the script takes `--threads` |
+| 14.4 s setup per invocation | the same per-process cost the Mac pays; a resident prover would pay it once | already the design of the app's prover loop |
+
+The box stays a build and test machine. If main wants a CPU prover anyway for coverage (a prover that is always on, never fast),
+the shape is a systemd unit as `build` with `SP1_PROVER=cpu`, a throwaway devnet key (never the OTA key, never a hand's key),
+`--threads 48`, Nice 19 and the measure hold taken for the whole run, which would exclude builds for minutes at a time: that
+is why it is not written.
diff --git a/docs/plans/ci-self-hosted.md b/docs/plans/ci-self-hosted.md
new file mode 100644
index 000000000..10e0d1471
--- /dev/null
+++ b/docs/plans/ci-self-hosted.md
@@ -0,0 +1,75 @@
+# CI on the box: the self-hosted runner and the workflow change (proposal, 6 October 2026)
+
+The runner `igneum-build-1` (labels `self-hosted, linux, x64, igneum-build-1`) is installed by `infra/build-server/provision.sh`
+step_runner and registered by `infra/build-server/runner/register.sh` (docs/plans/build-server.md section 7). The workflows are
+NOT changed here: the shipper owns `.github/workflows` tonight. This is the proposed diff for main.
+
+## 1. The shape: one repository variable decides, GitHub-hosted is the fallback
+
+GitHub has no "try this runner, else that one" in `runs-on`: a list of labels means ALL of them must match one runner, so
+`[self-hosted, igneum-build-1, ubuntu-latest]` would never schedule. The fallback is therefore a repository variable read in
+the expression. `IGNEUM_CI_RUNNER` = `box` sends the job to the box; unset or anything else keeps `ubuntu-latest`. Flipping it
+back is one click in Settings > Secrets and variables > Actions > Variables (or `gh variable set IGNEUM_CI_RUNNER --body box`
+and `gh variable delete IGNEUM_CI_RUNNER` as igneum-labs), with no commit and no queue lost: a job already queued for the box
+stays queued; the next push goes to GitHub's machines.
+
+## 2. ci.yml (the two jobs that compile or compute; the `site` job stays on GitHub's machines)
+
+```diff
+ jobs:
+   pow:
+     name: igneum-pow tests, igneum-census build
+-    runs-on: ubuntu-latest
++    runs-on: ${{ vars.IGNEUM_CI_RUNNER == 'box' && fromJSON('["self-hosted", "linux", "x64", "igneum-build-1"]') || 'ubuntu-latest' }}
+     steps:
+       - uses: actions/checkout@v4
+       - name: toolchain
+         run: rustc --version && cargo --version
+@@
+   sims:
+     name: simulators, quick modes
+-    runs-on: ubuntu-latest
++    runs-on: ${{ vars.IGNEUM_CI_RUNNER == 'box' && fromJSON('["self-hosted", "linux", "x64", "igneum-build-1"]') || 'ubuntu-latest' }}
+     steps:
+       - uses: actions/checkout@v4
+       - uses: actions/setup-python@v5
++        if: vars.IGNEUM_CI_RUNNER != 'box'   # the box has python3 and numpy from provision.sh; setup-python would download a second Python
+         with:
+           python-version: '3.12'
+-      - run: python3 -m pip install --quiet numpy
++      - run: python3 -m pip install --quiet numpy
++        if: vars.IGNEUM_CI_RUNNER != 'box'
+```
+
+What the box gives these two jobs: rustc 1.99.0 pinned (GitHub's `ubuntu-latest` carries whatever stable it ships; the box
+is the Mac's version, so CI compiles what the agents compile), sccache hits from the agents' cache (read-only), 48 cargo
+jobs. The `site` job is Node and shell checks and takes under a minute on GitHub's runners; moving it buys nothing and would
+put `tools/ci/public-api-check.mjs` (a live HTTPS check) behind the box's egress for no reason.
+
+Why the toolchain line still runs: on the box `rustc --version` must print 1.99.0; a mismatch means provision.sh and the
+runner's rustup disagree (R5 in build-server.md) and the job should say so in its first step.
+
+## 3. windows.yml: no change possible on this box
+
+Every job of `windows.yml` runs on `windows-latest` for a reason the box cannot answer: the engine builds on the MSVC
+target, the window host needs the Windows SDK and WebView2, the installer needs Inno Setup, the smoke run executes the exes
+and the launcher under Windows PowerShell 5.1. A Linux runner has none of that. The only self-hosted option for this
+workflow is a Windows runner on PC 1 or PC 2 (`actions/runner` for Windows under a service account), which conflicts with
+the rule that the PCs keep only GPU and Windows-runtime JOBS through the signed job system, and is not proposed tonight.
+
+What the box already does for Windows is upstream of this workflow: `tools/cross-remote.sh` builds `igneumd.exe` and
+`igneum-miner.exe` (the payload inputs) in 1 min 44 s, and the night battery rebuilds them for the reproducibility record.
+
+## 4. What to check after the flip (main, the first run on the box)
+
+| Check | Where | Pass |
+|---|---|---|
+| the job landed on the box | the run's "Set up job" log says `Runner name: 'igneum-build-1'` | yes |
+| the toolchain | the `toolchain` step prints `rustc 1.99.0` | yes |
+| sccache hits | add `sccache --show-stats` as a step once, or read `/srv/sccache` size before and after: the runner's config is READ_ONLY, so the size must NOT change | size unchanged |
+| the agents were not starved | `/srv/builds/_log/builds.jsonl` `secs` of the builds during the run against the same crate's earlier lines | within the usual spread |
+| the fallback | `gh variable delete IGNEUM_CI_RUNNER`, push a no-op commit: the job runs on `ubuntu-latest` again | yes |
+
+Open: a CI job on the box does not take a build slot (`/srv/builds/_locks/build-<k>`), it runs at Nice 10 with 48 jobs; if a
+CI job ever delays a release build visibly, the fix is a step at the top of the job that takes a slot through
+`infra/build-server/remote-run.sh`'s flock, the same file the agents use.
diff --git a/docs/plans/site-ui-3-audit.md b/docs/plans/site-ui-3-audit.md
new file mode 100644
index 000000000..268a81ff0
--- /dev/null
+++ b/docs/plans/site-ui-3-audit.md
@@ -0,0 +1,364 @@
+# Site UI 3 audit: the website and litepaper through the miner app's lens
+
+6 October 2026, 19:00 to 21:00 UK. Branch `site-ui-3`. the project lead's ask: "run the website and all pages and litepaper through the
+same apple lens as the miner app", and "leave no stone unturned". The standard is `docs/plans/miner-ui-3-audit.md` and
+`docs/plans/miner-ui-3.md` (branch `miner-ui-3`). The design that answers this audit is `docs/plans/site-ui-3.md`.
+
+## 1. Method
+
+| Input | How |
+|---|---|
+| Every page in `site/` | 15 pages: index, litepaper, live, miners, miner, wallet, bench, evidence, ledger, explorer, block, address, faucet, metamask, 404 |
+| Screenshots | headless Chromium (Playwright's cached build, never Chrome.app) against `tools/site-serve.mjs` on a private port, reading the live API; full page at 1440 and 390, dark and light: `docs/plans/site-ui-3-shots/before/` |
+| Live states | the same pages with `/api/*` blocked (failed fetch) and with the observer's reply rewritten stale (`state.stale: true`, 70 min old): `before-states/*-fail.jpg`, `*-stale.jpg`; the loading state read from each page's JS |
+| Print | `/litepaper` printed to A4 in both themes: `before-states/litepaper-1440-{dark,light}.pdf` |
+| Keyboard | Tab pressed 2, 3 and 8 times on the home page, the focused element and its outline recorded: `before-states/index-*-focus*.png` |
+| Contrast | every text token on every surface token, both themes, computed (WCAG relative luminance) |
+| Links | every href and src (914 attributes, 210 unique) followed; anchors against ids; externals with curl |
+| Downloads | every installer fetched from dl.igneum.network and hashed against the host manifest and the page |
+| Numbers | every number and dated claim traced to the bench log, the ledger, the spec, the analysis docs or the live API |
+| Rating | the miner-ui-3 scale: "10 = nothing to change. The three questions per screen: what does it say in jargon, which number has no unit or no meaning, which 0 or blank has no reason word." |
+
+The pane in the desktop app was used to confirm the item 0 fix live (counters and legend) but its screenshots come back
+black under a 1440 emulation, so every image here is from the headless run.
+
+## 2. Screen by screen
+
+Rating: 10 = nothing to change. The three questions per screen: what does it say in jargon, which number has no unit or
+no meaning, which 0 or blank has no reason word. Screenshots: `docs/plans/site-ui-3-shots/before/<page>-<width>-<theme>.jpg`.
+
+### Home, 6
+
+Good: the hero says what it is in a sentence, the four facts are tiles with units, the light-client card verifies a real
+certificate in the tab, the download buttons carry version and size, the economics bar reads at a glance.
+
+| Problem | Where |
+|---|---|
+| The lead paragraph runs 100 words and carries the chip model's numbers (5x to 9x per joule, about 2x), a model figure the plan says to word before any public push | hero, line 345 |
+| Eight sections before the download; the one primary action ("See the miner") scrolls to the middle of the page | hero CTA |
+| Two ember primaries on screen at once in the hero (the nav's "The miner" and "See the miner") plus every stat number in ember | hero, stats |
+| Every section below the fold is invisible until scrolled (`.reveal` at opacity 0); a print, a screenshot, a slow scroller or a reader with JavaScript off gets blank sections | 37 `.reveal` elements |
+| The live scene showed window counts as chain facts, grey nodes, and a simulation under a live-looking label when the fetch failed (fixed in item 0) | chain scene |
+| The journey log's default eight entries are engineering shorthand with scrub artefacts ("the 12-node the cloud provider network", "00:4xZ", CLI flags, ledger ids) | journey |
+| "vote keys active in 10 min (a card runs several)", "BLS aggregate, version 1", "final · cp 5", "igneum-proving-pool-v0" on the surface | strip, hero card, wallet, economics |
+| The mine heading is 91 characters | section 6 |
+| Horizontal overflow at 390 (395 px) | phone |
+| No light mode | whole page |
+
+Apple would: one screen that says what it is, shows the chain alive, offers the download, and lets the sceptic check three things; everything else one link away.
+
+### Litepaper, 5
+
+Good: a real table of contents with a sticky rail, numbered sections, "what we do not claim" as its own section, every
+other-chain claim labelled approximate, the pager at the foot of each section.
+
+| Problem | Where |
+|---|---|
+| Light by default while every other page is dark; its own token set (ground, surface, quiet, tint) | :root |
+| Accents as text (ember, molten) fail 4.5:1 in light mode everywhere they appear: eyebrows, links, the tile numbers | section 6 of this audit |
+| File paths inline in the abstract and limits (`docs/analysis/chip-model-v3.md`, `asic-resistance-history.md`, `prover-tiers-real-cards.md`, which does not exist) | abstract, randomx, proving, limits |
+| 92 sentences over 30 words; the longest 152 words (Ember status) and 136 (proving measurements) | mining, proving, ember |
+| "One section at a time" is the default, so the print is one section and a search of the page finds one section | contents |
+| The cover says updated 5 October; the body cites 6 October nine times | cover |
+| Placeholders on the public page: "the entry lands tonight", "measurement tonight" | questions miners ask |
+| Numbers in prose, not tables: the proving measurements, the swap figures, the prover tiers | proving, ember |
+| Roadmap says the proof lag is "not yet measured on the live chain" while the API reports a median lag of 387 s | roadmap |
+| Tint callouts (`--tint`) against the app's no-tint rule | callouts |
+
+Apple would: dark like the rest, a readable 68-character measure, every measured number in a table with its date and
+source, the limits section set as callouts, the whole paper on one page with a sticky section nav, printable.
+
+### Live, 6
+
+Good: the status tiles say what they measure and over what window, the lane scene is real data with a legend in the
+ledger's words, the miners table and the events feed are honest, "observer offline" is said in words.
+
+| Problem | Where |
+|---|---|
+| "DEVNET V0" eyebrow (the chain is v4) | eyebrow |
+| The fee sentence pins DAA 210,000 and the chain passes it tonight | intro |
+| "proven 0/16" counted the on-screen window (fixed in item 0) | strip stats |
+| Hash rate "n/a" when the estimate is missing; "n/a" in the proof lag panel | tiles, canvas panel |
+| "DAA", "pgas", "gwei", "observer", "api unreachable" on the surface with no gloss | intro, tiles, notes |
+| The scene is a lane chart with coloured squares, not a DAG; the selected chain is a spline through the squares | canvas |
+| 2,000 px of miners table on one screen with every engine cell "not reported" | miners |
+| Eight tiles before the scene; the scene is the page's job | layout |
+
+Apple would: the DAG first, the eight numbers under it as one row, the tables folded.
+
+### Miner, 5
+
+Good: every feature is one line with its measurement and a link to the log entry, the fee section shows the fee and
+the off switch, the recoveries table has units.
+
+| Problem | Where |
+|---|---|
+| The h1 is 96 characters and wraps to seven lines at 1440 | hero |
+| 8,947 px tall; the download sits at 7,700 px | whole page |
+| Buttons say v0.3.13, the Flight Sheet URL is 404 and its sha256 is the hash of a dead file (L2) | get |
+| "every NVIDIA card from 8 GB proves" cites a file that is not in the repository and contradicts /evidence row 16 | hero, features |
+| "Six levers" has no document; the "3 minutes / 30% in 10 minutes" update rules have no source | levers, updates |
+| "until 0.3.6", "Ships in 0.3.6" at 0.3.13 | caption, lever 4 |
+| Command lines and env strings as body text (`--dev-fee 0`, `DEV_FEE=1 IDENTITIES=8 WORKER=auto VOTE=1`) outside a code block | fee, hive |
+| Three ember primaries on one screen (nav, "Downloads", band) | hero, band |
+
+Apple would: install, start, the card mines, download here; every feature behind a chevron with its number; the fee
+as one sentence and a switch. (The copy and images are being redone by the site-miner agent today; this page is
+styled through the shared CSS only.)
+
+### Wallet, 6
+
+Good: the three states are three cards with a word each, the timed first run is a table with units, the checks before
+"final" are four numbered sentences.
+
+| Problem | Where |
+|---|---|
+| "Your coins. Final means final." and "The miner pays this wallet." are aphorisms; "No confirmation counts, no trusting the node" is an antithesis | hero, band, lead |
+| Every timed number has no row in the log or the repository ("The log entry ships with the wallet") against "every number has a row" | first run |
+| 5,880 px tall; download at 4,800 px | whole page |
+| The two screenshots are the same size as the text column and carry an example address | hero, transaction |
+| Horizontal overflow at 390 | phone |
+
+(The content is being redone by the wallet-ui-3 agent today; styled through the shared CSS only.)
+
+### Miners (bench table), 5
+
+Good: six measured rows with date and version, prototype rows say so, "no tune reports yet" says why.
+
+| Problem | Where |
+|---|---|
+| "3 entries, newest at the bottom" is the bench template's eyebrow on a page with three sections | eyebrow |
+| "MH per watt: not measured" on every row while the 5090's watts are in the ledger (E17) and eleven rented cards were measured today | table |
+| "Rows: 6. Source file: site/miner-bench.json", "tools/tuning.mjs --priors --site" on the page | notes |
+| Two 40-word sentences | priors |
+
+Apple would: the table, the rate per watt where measured, "not measured" with the reason once.
+
+### Explorer, 7
+
+Good: eight tiles with units and a sub-line each, a real table of real blocks, a legend in the ledger's words, the public
+API card, the error sentences are words.
+
+| Problem | Where |
+|---|---|
+| "n/a" in the height, difficulty and hash-rate tiles and the Txs and Proof-records cells when a field is missing | tiles, table |
+| "DAA" in two tiles and two notes with no gloss anywhere on the page | tiles, notes |
+| "Older blocks" stops the 5 s refresh for good after the first click, silently | button |
+| "cached 10 s" (the explorer endpoint is 5 s); "under check" names a field today's /api/supply does not carry | API card, note |
+| "observer" six times as a word for the reader | intro, notes |
+
+Apple would: the same page with the state words and the glosses.
+
+### Block and address, 6
+
+Good: every header field, the mergeset, the coinbase outputs and the proof records as labelled rows; a block that is a
+checkpoint shows its weight; the error sentences name what a hash or an address is.
+
+| Problem | Where |
+|---|---|
+| "n/a" in twelve places (miner, vote key, difficulty, subsidy, selected parent, parent levels, balance, last block, subsidy and tx cells) | both pages |
+| The address balance reads "n/a" for every address with the sentence "no EVM RPC configured on this deployment (EXPLORER_EVM_RPC)", an environment variable on a public page | address |
+| The default balance sub-line is the raw RPC method name `eth_getBalance` | address |
+| A never-seen address returns zeros with no sentence saying it has never mined | address |
+| "E(DAA) of spec 2.5", "pgas", "needs an EVM RPC", "the proving feed" | block |
+| The only way back is the eyebrow link | both |
+
+Apple would: "balance not shown on this deployment" once, "this address has not mined in the last day", the spec words
+behind a tooltip.
+
+### Faucet, 7
+
+Good: one job, one form, one button, the four rules as numbered sentences, the status words are sentences.
+
+| Problem | Where |
+|---|---|
+| "not yet open" notice and a form the reader can still submit, which answers "The faucet is not open yet" | form |
+| "No account, no sign-in" (antithesis); "Mainnet starts from an empty genesis" stated as fact for a plan | intro, rules |
+
+### MetaMask, 6
+
+Good: two cards, the numbers a wallet needs, a button with five state sentences, the by-hand steps.
+
+| Problem | Where |
+|---|---|
+| Canonical and share URL point at /wallet (L4) | head |
+| "Explorer: none yet" while /explorer is live; "until the Igneum Wallet ships, MetaMask is the wallet" while 0.1.4 ships; "The Igneum Miner app" | devnet card, app section |
+| Not in the nav; reachable from the footer and the faucet only | nav |
+
+### 404, 6
+
+Good: short, three links, noindex.
+
+| Problem | Where |
+|---|---|
+| "These four pages are everything the site has" (fifteen pages); "in 17 sections" (nineteen) | copy |
+| "Nothing is mined here." is an aphorism | h1 |
+| No miner, wallet, explorer or ledger card; no canonical, OG or manifest | links, head |
+
+### Engineering log (bench), 5
+
+Good: every measurement in one place, 83 entries with a contents rail, the scrub keeps machine names out.
+
+| Problem | Where |
+|---|---|
+| 189,472 px tall at 1440 (190 screens), 311,114 at 390: Chromium needs minutes to lay it out, and a phone reader scrolls for an hour | whole page |
+| Headings carry commit hashes and internal names (by design of the generator) and run past 150 characters in the sticky contents | contents |
+| The eyebrow "83 entries, newest at the bottom" is right here and wrong on the two pages that reuse the template | eyebrow |
+| One plain-text GitHub Actions URL 404s to the public (L9) | entry 346 |
+
+Apple would: the log as a list of entries, each collapsed to its heading and date, opened on demand; a search box.
+
+### Evidence, 6
+
+Good: 31 rows with five labels, the label counts as tiles, a sort on every column, "none yet" said in every verification cell.
+
+| Problem | Where |
+|---|---|
+| The page shows designed 6 where the source table says 5 (row 17 carries two labels and the build buckets the first) | tiles |
+| Two scrub artefacts in the rows ("the Apple M5 Max M5 Max", "a an RTX 5090 on Windows with an RTX 5090") | rows 1, 30 |
+| The "What moved on 4 and 5 October" tables of the source are not rendered anywhere | body |
+| 23,031 px tall; the table scrolls sideways under 1,140 px with a one-line warning | table |
+| Three file paths on the surface | notes |
+
+### Ledger, 5
+
+Good: 167 criticisms with their status and the answer as first written, a search, the counts as chips, nothing deleted.
+
+| Problem | Where |
+|---|---|
+| 53,522 px tall at 1440, 113,082 at 390, with a 712 px horizontal overflow at 390 (a long id or path in a card) | whole page |
+| 40 section headings with duplicate ids; the section links land on the first | sections |
+| 165 "Evidence:" lines and the "Decision owner:" lines are dropped against the renderer's "nothing is dropped" | cards |
+| The page's counts differ from the source's count table by 3, 2 and 2 | chips |
+| `~/.config/igneum`, "pid 33114", `--rpclisten=0.0.0.0:26610`, "PC 2" fifteen times and "the Mac" nineteen times on a public page; the renderer skips the forbidden-strings hard stop | cards |
+| "Nothing deleted, nothing softened." (antithesis) | meta |
+
+Apple would: the ledger as a filterable list with one card open at a time, the scrub applied, the ids unique.
+
+
+## 3. The tick list: nothing lost
+
+Appendix A carries every claim, number, date, link and feature per page, with its source and whether the source still
+says the same today. The build keeps every row; a row that moves gets its new place written beside it.
+
+## 4. Links, downloads, icons, 404
+
+Every internal anchor resolves (268 fragment links, 0 missing ids). Every local asset exists. Every external link answers
+200 except one plain-text GitHub Actions URL in the bench log (private repository, 404 to the public). All four downloads
+hash-match the host manifest. The live 404 body is byte-identical to `site/404.html`.
+
+| # | Finding | Where | Consequence |
+|---|---|---|---|
+| L1 | `site/downloads.json` is two releases stale (miner 0.3.9 and 0.3.10, written 5 Oct 21:52Z); the host serves 0.3.14 | `site/downloads.json`; `site/build.mjs` 266 to 313 | any build whose 8 s fetch of the host manifest fails stamps dead versions, dead URLs and wrong hashes on every download button |
+| L2 | `miner.html` carries v0.3.13 on all four buttons, a Flight Sheet URL that is 404 (`igneum-hive-0.3.13.tar.gz`) and the sha256 of that dead file | `site/miner.html` 462 to 471 | a HiveOS miner copying the repo page's URL gets nothing; the live deploy shows 0.3.14 because the build fetched the manifest, so only a failed fetch exposes it |
+| L3 | the host publishes no checksum file beside any download; only the Hive button shows a hash; Windows, Mac and Wallet show none | dl.igneum.network; `index.html` 513 to 514, `wallet.html` 371 | a sceptic cannot verify three of four downloads from the page |
+| L4 | `metamask.html` canonical and og:url point at `/wallet` while the sitemap lists `/metamask` | `site/metamask.html` 8, 14; `sitemap.xml` 10 | search folds the page into /wallet |
+| L5 | sitemap omits /ledger, /explorer and /faucet; lastmod dates predate the 6 Oct changes | `site/sitemap.xml` | the three pages are found only by crawl |
+| L6 | two Open Graph sets: seven pages send a 256 px square (`og-small.png`, `summary` card), seven send 1200 by 630 (`og.png`); `og-coin.png` duplicates `og.png` byte for byte; `og-square.png` is referenced nowhere | `site/partials/head.html`, page heads | a shared link shows a small square for the home page and the litepaper, the two pages most shared |
+| L7 | icon links differ by page: address, block, explorer, faucet carry no SVG icon and no 192 or 512 link; ledger lacks 512; 404 lacks canonical, OG, manifest and favicon-32 | page heads | install and tab icons vary by page |
+| L8 | `/404` answers 200 as a clean URL | Vercel `cleanUrls` | harmless, noindex |
+| L9 | the bench log prints a GitHub Actions URL as text that 404s to the public | `site/bench.html` 346 | a reader following it hits a wall |
+
+## 5. Live elements and their states
+
+| Page | Element | Fresh | Loading | Failed fetch | Stale observer | Empty |
+|---|---|---|---|---|---|---|
+| index | hero strip, chain scene, light-client card | item 0: chain block, shards proven, last lock | "connecting to the devnet observer" (item 0) | "simulated preview · live feed unavailable" with a note (item 0); before item 0 the simulation ran under a live-looking label | "observer offline, last update N ago" (item 0) | not reached: the scene always has the window |
+| live | the lane scene, finality strip, proving strip, events, miners table, blocks per minute | reads /api/live every 2 s | counters at 0, "n/a" in proven until the first reply (item 0 made it "pending") | after 3 failures: "api unreachable" in the status tile and "api unreachable, scene frozen" on the canvas; tiles keep their last numbers | "OFFLINE", "last update N ago", the scene frozen with "observer offline" | no empty words: an empty window draws nothing; the tables say "No blocks in the last 10 minutes." and "No events yet." |
+| miners | the bench table | static | static | no change (static page) | no change | "No tune reports yet. The first rows appear once five machines with the same card model have reported." |
+| explorer | tiles, latest blocks | /api/stats, /api/supply, /api/explorer | "Loading." in the table, tile values at their defaults | tiles keep defaults, the table shows the fetch error text or "The API did not answer." | "OFFLINE", "last update N ago", "observer offline, last known" over the table | "No blocks in the last 24 hours." |
+| block, address | the detail pages | /api/explorer | h1 "Block" / the address, cells empty | "The API did not answer: <message>" | no stale word: the detail is the stored block | "Not found." / zeros with no "never seen" sentence |
+| faucet | the form | /api/faucet on submit | the form | "The faucet did not answer. Try again in a minute." | not applicable | the not-open notice |
+| wallet, miner | download buttons, product names | build-time stamps | static | no change | no change | not applicable |
+
+Rule for the design: every live element names its state in words with the reason (section 2.5 of the design); no counter
+shows `n/a`, `--` or a bare `0`.
+
+## 6. Contrast
+
+Computed for every text token on every surface token. Dark passes everywhere (lowest: ember text on the litepaper's
+`--surface-2`, 4.79:1). Light fails for both accent colours as text:
+
+| Theme | Text | On | Ratio | Body 4.5:1 |
+|---|---|---|---|---|
+| light (site tokens) | ember #D9430F | page #F4F1EC | 3.92 | fail |
+| light (site tokens) | ember #D9430F | card #FFFFFF | 4.41 | fail |
+| light (site tokens) | molten #B9741C | page #F4F1EC | 3.34 | fail |
+| light (site tokens) | quiet #6E6B65 | surface-2 #ECE8E0 | 4.35 | fail |
+| light (app tokens) | ember #E04A14 | page #F4F1EC | 3.61 | fail |
+| light (app tokens) | molten #B8731F | page #F4F1EC | 3.38 | fail |
+| light, proposed | ember-text #B8390C | page, card, row | 5.14, 5.79, 4.74 | pass |
+| light, proposed | molten-text #8F5810 | page, card, row | 5.22, 5.88, 4.81 | pass |
+
+Today the litepaper (light by default) sets eyebrows, links and figures in ember and molten at body sizes: every one of
+them is under 4.5:1. The design splits the accents into a fill token and a text token (design 2.1).
+
+## 7. Keyboard and focus
+
+Focus is visible: a 2 px ember outline at 3 px offset on every link and button (`site/partials/head.html` 23), confirmed at
+Tab 2, 3 and 8 in both themes and at 390 px. The skip link appears on the first Tab. The burger menu at 390 is reachable.
+What is missing: the canvas scenes have no keyboard alternative and no text summary for a screen reader beyond the
+counters; the litepaper's section pills are buttons without `aria-pressed`; the theme has no control at all on 14 of 15
+pages (the litepaper offers one).
+
+## 8. Phone width
+
+| Page | 390 px | Finding |
+|---|---|---|
+| index | horizontal overflow, page 395 px wide | the livestrip's `nowrap` tiles and the hero grid |
+| wallet | horizontal overflow, page 395 px wide | same class |
+| ledger | horizontal overflow, page 712 px wide | a long id or path in a card without `overflow-wrap` |
+| the other twelve pages | no overflow | |
+
+## 9. Print
+
+`/litepaper` printed to A4: three pages in dark mode (the page colours print as set), the nav and footer print, and only
+the open section prints because the paper opens in "one section at a time" mode. A reader who prints the litepaper gets
+the abstract and the footer. The design adds a print stylesheet and prints the whole paper (design 4).
+
+## 10. Top ten findings
+
+Ranked by reach (who sees it) and by what it costs a reader.
+
+| # | Finding | Consequence per reader |
+|---|---|---|
+| 1 | The home live scene showed window counts as chain facts and grey blocks (fixed in item 0, commit 84a6de2) | every visitor read a dead chain; fixed before this audit shipped |
+| 2 | Fifteen pages carry fifteen stylesheets with three token sets (home, litepaper, chrome) and no light mode on fourteen of them; the litepaper is light by default, the rest dark | a reader crossing from the paper to the home page changes world; a light-mode user gets dark pages everywhere but one |
+| 3 | Light-mode accents fail body contrast everywhere they are used as text | the litepaper's links, eyebrows and figures are hard to read in light mode |
+| 4 | Scroll-reveal hides every section below the fold until it scrolls into view (`.reveal` at opacity 0) | a slow scroller, a print, a screenshot or a reader with JavaScript off gets blank sections |
+| 5 | The print of the litepaper is one section, dark, with nav and footer | the paper cannot be printed |
+| 6 | The repo's download snapshot and the miner page are stale against the host (L1, L2) | a failed manifest fetch ships dead links and a wrong hash |
+| 7 | Developer text on user surfaces: the litepaper's abstract cites `docs/analysis/chip-model-v3.md` and other repo paths inline; DAA numbers appear without the word for them | a reader who is not in the repo sees file paths |
+| 8 | Horizontal overflow at 390 on index and wallet | the phone page scrolls sideways |
+| 9 | Three of four downloads show no hash and the host publishes no checksum file (L3) | a sceptic cannot verify the installer |
+| 10 | Two Open Graph sets, a wrong canonical on /metamask, three pages missing from the sitemap (L4 to L6) | shared links and search see a smaller, inconsistent site |
+
+Also found and fixed in item 0 without a row: the scene's fixed 16 ms frame step (double speed on 120 Hz displays), and
+polling that stopped for good after one failed fetch.
+
+## Appendix A. The tick list per page
+
+`docs/plans/site-ui-3-ticklist.md`: 502 rows (home 88, litepaper 151, nav 11, footer 24, live 22, miners 19, miner 66,
+wallet 29, bench 5, evidence 12, ledger 8, explorer 23, block 11, address 9, faucet 8, metamask 9, 404 7), each with its
+source and today's verdict (MATCH, STALE, UNSOURCED, APPROX), the ledger's stated sentences with their presence on each
+page, the nine "what we do not claim" sentences and the four "what Ember does not claim" sentences verbatim, and the
+scrub rules. The build keeps every row; the design's per-page notes (section 5 of `site-ui-3.md`) say where a row moved.
+
+## Appendix B. The stones
+
+| # | Stone | Turned | Where |
+|---|---|---|---|
+| 1 | every page in site/, including API-backed ones and 404 | yes, 15 pages | section 2, `before/` |
+| 2 | every state of every live element: loading, empty, failed fetch, stale | yes: failed and stale captured for 10 pages; loading and empty read from each page's JS | section 5, `before-states/` |
+| 3 | every link followed, internal and external | yes: 914 attributes, 210 unique, 268 anchors, every external with curl | section 4 |
+| 4 | every number traced to its source and checked against the live API or the bench log today | yes, appendix A | appendix A |
+| 5 | both themes | yes, dark and light for every page | `before/` |
+| 6 | 1440 and 390 | yes | `before/` |
+| 7 | keyboard focus | yes, Tab 2, 3, 8, both themes, both widths | section 7, `before-states/*focus*` |
+| 8 | contrast | yes, every token pair, both themes | section 6 |
+| 9 | the litepaper's every section and footnote | yes, appendix A (L rows) | appendix A |
+| 10 | the downloads' hashes against the host | yes, four files fetched and hashed | section 4 |
+| 11 | the Open Graph and favicon set | yes, every meta and icon, sizes measured with sips | section 4, L6 and L7 |
+| 12 | the 404 page | yes, live body byte-identical, `/404` answers 200 | section 4, L8 |
+| 13 | print of the litepaper | yes, both themes, A4 | section 9 |
+| 14 | the live API itself against the page | yes, item 0 (height, paid shards, lock index, lag) | commit 84a6de2 |
diff --git a/docs/plans/site-ui-3-shots/after/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-dark.jpg
new file mode 100644
index 000000000..8acbb3eac
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-light.jpg b/docs/plans/site-ui-3-shots/after/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-light.jpg
new file mode 100644
index 000000000..3f01d9818
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/address_igneumdev:qz9hw3xy72g4guwfddvpxs-390-dark.jpg b/docs/plans/site-ui-3-shots/after/address_igneumdev:qz9hw3xy72g4guwfddvpxs-390-dark.jpg
new file mode 100644
index 000000000..cd0132438
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/address_igneumdev:qz9hw3xy72g4guwfddvpxs-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/address_igneumdev:qz9hw3xy72g4guwfddvpxs-390-light.jpg b/docs/plans/site-ui-3-shots/after/address_igneumdev:qz9hw3xy72g4guwfddvpxs-390-light.jpg
new file mode 100644
index 000000000..4401e5f03
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/address_igneumdev:qz9hw3xy72g4guwfddvpxs-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/bench-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/bench-1440-dark.jpg
new file mode 100644
index 000000000..fea6015a6
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/bench-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/bench-1440-light.jpg b/docs/plans/site-ui-3-shots/after/bench-1440-light.jpg
new file mode 100644
index 000000000..94efcd3a1
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/bench-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/bench-390-dark.jpg b/docs/plans/site-ui-3-shots/after/bench-390-dark.jpg
new file mode 100644
index 000000000..7065243d3
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/bench-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/bench-390-light.jpg b/docs/plans/site-ui-3-shots/after/bench-390-light.jpg
new file mode 100644
index 000000000..4baf6bc8c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/bench-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/block_cc9d87b929b6404c-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/block_cc9d87b929b6404c-1440-dark.jpg
new file mode 100644
index 000000000..1709de996
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/block_cc9d87b929b6404c-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/block_cc9d87b929b6404c-1440-light.jpg b/docs/plans/site-ui-3-shots/after/block_cc9d87b929b6404c-1440-light.jpg
new file mode 100644
index 000000000..27db8b23d
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/block_cc9d87b929b6404c-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/block_cc9d87b929b6404c-390-dark.jpg b/docs/plans/site-ui-3-shots/after/block_cc9d87b929b6404c-390-dark.jpg
new file mode 100644
index 000000000..aa5ce6178
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/block_cc9d87b929b6404c-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/block_cc9d87b929b6404c-390-light.jpg b/docs/plans/site-ui-3-shots/after/block_cc9d87b929b6404c-390-light.jpg
new file mode 100644
index 000000000..53915723c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/block_cc9d87b929b6404c-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/evidence-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/evidence-1440-dark.jpg
new file mode 100644
index 000000000..b8907b32c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/evidence-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/evidence-1440-light.jpg b/docs/plans/site-ui-3-shots/after/evidence-1440-light.jpg
new file mode 100644
index 000000000..466b00536
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/evidence-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/evidence-390-dark.jpg b/docs/plans/site-ui-3-shots/after/evidence-390-dark.jpg
new file mode 100644
index 000000000..07f9cbfdb
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/evidence-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/evidence-390-light.jpg b/docs/plans/site-ui-3-shots/after/evidence-390-light.jpg
new file mode 100644
index 000000000..63ed4d4fc
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/evidence-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/explorer-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/explorer-1440-dark.jpg
new file mode 100644
index 000000000..c9be143ea
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/explorer-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/explorer-1440-light.jpg b/docs/plans/site-ui-3-shots/after/explorer-1440-light.jpg
new file mode 100644
index 000000000..52bf46b63
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/explorer-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/explorer-390-dark.jpg b/docs/plans/site-ui-3-shots/after/explorer-390-dark.jpg
new file mode 100644
index 000000000..f91a06cf8
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/explorer-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/explorer-390-light.jpg b/docs/plans/site-ui-3-shots/after/explorer-390-light.jpg
new file mode 100644
index 000000000..dd5b5ff0c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/explorer-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/faucet-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/faucet-1440-dark.jpg
new file mode 100644
index 000000000..c3219e1ac
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/faucet-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/faucet-1440-light.jpg b/docs/plans/site-ui-3-shots/after/faucet-1440-light.jpg
new file mode 100644
index 000000000..c625577e6
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/faucet-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/faucet-390-dark.jpg b/docs/plans/site-ui-3-shots/after/faucet-390-dark.jpg
new file mode 100644
index 000000000..ae48a7920
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/faucet-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/faucet-390-light.jpg b/docs/plans/site-ui-3-shots/after/faucet-390-light.jpg
new file mode 100644
index 000000000..e7617a9bc
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/faucet-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/index-1440-dark-clip.png b/docs/plans/site-ui-3-shots/after/index-1440-dark-clip.png
new file mode 100644
index 000000000..aae007e9a
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/index-1440-dark-clip.png differ
diff --git a/docs/plans/site-ui-3-shots/after/index-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/index-1440-dark.jpg
new file mode 100644
index 000000000..cc8ecbd8e
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/index-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/index-1440-light-clip.png b/docs/plans/site-ui-3-shots/after/index-1440-light-clip.png
new file mode 100644
index 000000000..8a8b16277
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/index-1440-light-clip.png differ
diff --git a/docs/plans/site-ui-3-shots/after/index-1440-light.jpg b/docs/plans/site-ui-3-shots/after/index-1440-light.jpg
new file mode 100644
index 000000000..fee829343
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/index-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/index-390-dark-clip.png b/docs/plans/site-ui-3-shots/after/index-390-dark-clip.png
new file mode 100644
index 000000000..44c234bbf
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/index-390-dark-clip.png differ
diff --git a/docs/plans/site-ui-3-shots/after/index-390-dark.jpg b/docs/plans/site-ui-3-shots/after/index-390-dark.jpg
new file mode 100644
index 000000000..d12bfb469
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/index-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/index-390-light-clip.png b/docs/plans/site-ui-3-shots/after/index-390-light-clip.png
new file mode 100644
index 000000000..a81a4221a
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/index-390-light-clip.png differ
diff --git a/docs/plans/site-ui-3-shots/after/index-390-light.jpg b/docs/plans/site-ui-3-shots/after/index-390-light.jpg
new file mode 100644
index 000000000..1576a4694
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/index-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/ledger-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/ledger-1440-dark.jpg
new file mode 100644
index 000000000..00af4f7a2
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/ledger-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/ledger-1440-light.jpg b/docs/plans/site-ui-3-shots/after/ledger-1440-light.jpg
new file mode 100644
index 000000000..00af4f7a2
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/ledger-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/ledger-390-dark.jpg b/docs/plans/site-ui-3-shots/after/ledger-390-dark.jpg
new file mode 100644
index 000000000..7decfa9f1
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/ledger-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/ledger-390-light.jpg b/docs/plans/site-ui-3-shots/after/ledger-390-light.jpg
new file mode 100644
index 000000000..7decfa9f1
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/ledger-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/litepaper-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/litepaper-1440-dark.jpg
new file mode 100644
index 000000000..08aea3d5e
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/litepaper-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/litepaper-1440-light.jpg b/docs/plans/site-ui-3-shots/after/litepaper-1440-light.jpg
new file mode 100644
index 000000000..0465f63c0
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/litepaper-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/litepaper-1440-light.pdf b/docs/plans/site-ui-3-shots/after/litepaper-1440-light.pdf
new file mode 100644
index 000000000..9557aa886
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/litepaper-1440-light.pdf differ
diff --git a/docs/plans/site-ui-3-shots/after/litepaper-1440-light.png b/docs/plans/site-ui-3-shots/after/litepaper-1440-light.png
new file mode 100644
index 000000000..a2823c518
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/litepaper-1440-light.png differ
diff --git a/docs/plans/site-ui-3-shots/after/litepaper-390-dark.jpg b/docs/plans/site-ui-3-shots/after/litepaper-390-dark.jpg
new file mode 100644
index 000000000..bd909e6e0
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/litepaper-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/litepaper-390-light.jpg b/docs/plans/site-ui-3-shots/after/litepaper-390-light.jpg
new file mode 100644
index 000000000..ced3b2c2c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/litepaper-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/live-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/live-1440-dark.jpg
new file mode 100644
index 000000000..04d70c109
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/live-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/live-1440-light.jpg b/docs/plans/site-ui-3-shots/after/live-1440-light.jpg
new file mode 100644
index 000000000..f321e9082
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/live-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/live-390-dark.jpg b/docs/plans/site-ui-3-shots/after/live-390-dark.jpg
new file mode 100644
index 000000000..f12f8e83c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/live-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/live-390-light.jpg b/docs/plans/site-ui-3-shots/after/live-390-light.jpg
new file mode 100644
index 000000000..8f1d4667c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/live-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/metamask-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/metamask-1440-dark.jpg
new file mode 100644
index 000000000..a5cd1d97a
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/metamask-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/metamask-1440-light.jpg b/docs/plans/site-ui-3-shots/after/metamask-1440-light.jpg
new file mode 100644
index 000000000..3d065ea39
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/metamask-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/metamask-390-dark.jpg b/docs/plans/site-ui-3-shots/after/metamask-390-dark.jpg
new file mode 100644
index 000000000..ebbced3d8
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/metamask-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/metamask-390-light.jpg b/docs/plans/site-ui-3-shots/after/metamask-390-light.jpg
new file mode 100644
index 000000000..596f3fd77
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/metamask-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/miner-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/miner-1440-dark.jpg
new file mode 100644
index 000000000..b0bd183ef
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/miner-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/miner-1440-light.jpg b/docs/plans/site-ui-3-shots/after/miner-1440-light.jpg
new file mode 100644
index 000000000..e3820e07b
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/miner-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/miner-390-dark.jpg b/docs/plans/site-ui-3-shots/after/miner-390-dark.jpg
new file mode 100644
index 000000000..d4605f028
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/miner-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/miner-390-light.jpg b/docs/plans/site-ui-3-shots/after/miner-390-light.jpg
new file mode 100644
index 000000000..ff8773bcd
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/miner-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/miners-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/miners-1440-dark.jpg
new file mode 100644
index 000000000..974f6e66f
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/miners-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/miners-1440-light.jpg b/docs/plans/site-ui-3-shots/after/miners-1440-light.jpg
new file mode 100644
index 000000000..980fa550b
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/miners-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/miners-390-dark.jpg b/docs/plans/site-ui-3-shots/after/miners-390-dark.jpg
new file mode 100644
index 000000000..730400a24
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/miners-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/miners-390-light.jpg b/docs/plans/site-ui-3-shots/after/miners-390-light.jpg
new file mode 100644
index 000000000..459e045e5
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/miners-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/no-such-page-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/no-such-page-1440-dark.jpg
new file mode 100644
index 000000000..0f4b22f69
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/no-such-page-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/no-such-page-1440-light.jpg b/docs/plans/site-ui-3-shots/after/no-such-page-1440-light.jpg
new file mode 100644
index 000000000..7c44c82ac
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/no-such-page-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/no-such-page-390-dark.jpg b/docs/plans/site-ui-3-shots/after/no-such-page-390-dark.jpg
new file mode 100644
index 000000000..afe56624c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/no-such-page-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/no-such-page-390-light.jpg b/docs/plans/site-ui-3-shots/after/no-such-page-390-light.jpg
new file mode 100644
index 000000000..e3d48f5e4
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/no-such-page-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/wallet-1440-dark.jpg b/docs/plans/site-ui-3-shots/after/wallet-1440-dark.jpg
new file mode 100644
index 000000000..afddf42cd
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/wallet-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/wallet-1440-light.jpg b/docs/plans/site-ui-3-shots/after/wallet-1440-light.jpg
new file mode 100644
index 000000000..ecb4c5b8c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/wallet-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/wallet-390-dark.jpg b/docs/plans/site-ui-3-shots/after/wallet-390-dark.jpg
new file mode 100644
index 000000000..511694e09
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/wallet-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/after/wallet-390-light.jpg b/docs/plans/site-ui-3-shots/after/wallet-390-light.jpg
new file mode 100644
index 000000000..6cee2e102
Binary files /dev/null and b/docs/plans/site-ui-3-shots/after/wallet-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-dark-fail.jpg b/docs/plans/site-ui-3-shots/before-states/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-dark-fail.jpg
new file mode 100644
index 000000000..b526e30e8
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-dark-fail.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/block_cc9d87b929b6404c-1440-dark-fail.jpg b/docs/plans/site-ui-3-shots/before-states/block_cc9d87b929b6404c-1440-dark-fail.jpg
new file mode 100644
index 000000000..9a5022f21
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/block_cc9d87b929b6404c-1440-dark-fail.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/block_cc9d87b929b6404c-1440-dark-stale.jpg b/docs/plans/site-ui-3-shots/before-states/block_cc9d87b929b6404c-1440-dark-stale.jpg
new file mode 100644
index 000000000..c02325d76
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/block_cc9d87b929b6404c-1440-dark-stale.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/explorer-1440-dark-fail.jpg b/docs/plans/site-ui-3-shots/before-states/explorer-1440-dark-fail.jpg
new file mode 100644
index 000000000..3ff25031c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/explorer-1440-dark-fail.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/explorer-1440-dark-stale.jpg b/docs/plans/site-ui-3-shots/before-states/explorer-1440-dark-stale.jpg
new file mode 100644
index 000000000..0162dea07
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/explorer-1440-dark-stale.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/faucet-1440-dark-fail.jpg b/docs/plans/site-ui-3-shots/before-states/faucet-1440-dark-fail.jpg
new file mode 100644
index 000000000..dc899e959
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/faucet-1440-dark-fail.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/faucet-1440-dark-stale.jpg b/docs/plans/site-ui-3-shots/before-states/faucet-1440-dark-stale.jpg
new file mode 100644
index 000000000..dc899e959
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/faucet-1440-dark-stale.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/index-1440-dark-fail.jpg b/docs/plans/site-ui-3-shots/before-states/index-1440-dark-fail.jpg
new file mode 100644
index 000000000..3bd4cff3a
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/index-1440-dark-fail.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/index-1440-dark-focus3.png b/docs/plans/site-ui-3-shots/before-states/index-1440-dark-focus3.png
new file mode 100644
index 000000000..e51008e29
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/index-1440-dark-focus3.png differ
diff --git a/docs/plans/site-ui-3-shots/before-states/index-1440-dark-focus8.png b/docs/plans/site-ui-3-shots/before-states/index-1440-dark-focus8.png
new file mode 100644
index 000000000..c001b6ec0
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/index-1440-dark-focus8.png differ
diff --git a/docs/plans/site-ui-3-shots/before-states/index-1440-dark-stale.jpg b/docs/plans/site-ui-3-shots/before-states/index-1440-dark-stale.jpg
new file mode 100644
index 000000000..c398578bf
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/index-1440-dark-stale.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/index-1440-light-focus3.png b/docs/plans/site-ui-3-shots/before-states/index-1440-light-focus3.png
new file mode 100644
index 000000000..706dd71bc
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/index-1440-light-focus3.png differ
diff --git a/docs/plans/site-ui-3-shots/before-states/index-1440-light-focus8.png b/docs/plans/site-ui-3-shots/before-states/index-1440-light-focus8.png
new file mode 100644
index 000000000..5347dff5b
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/index-1440-light-focus8.png differ
diff --git a/docs/plans/site-ui-3-shots/before-states/index-390-dark-focus2.png b/docs/plans/site-ui-3-shots/before-states/index-390-dark-focus2.png
new file mode 100644
index 000000000..9783a2e27
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/index-390-dark-focus2.png differ
diff --git a/docs/plans/site-ui-3-shots/before-states/litepaper-1440-dark.pdf b/docs/plans/site-ui-3-shots/before-states/litepaper-1440-dark.pdf
new file mode 100644
index 000000000..29afd3069
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/litepaper-1440-dark.pdf differ
diff --git a/docs/plans/site-ui-3-shots/before-states/litepaper-1440-dark.png b/docs/plans/site-ui-3-shots/before-states/litepaper-1440-dark.png
new file mode 100644
index 000000000..f9b2d7a65
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/litepaper-1440-dark.png differ
diff --git a/docs/plans/site-ui-3-shots/before-states/litepaper-1440-light.pdf b/docs/plans/site-ui-3-shots/before-states/litepaper-1440-light.pdf
new file mode 100644
index 000000000..a58f6c772
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/litepaper-1440-light.pdf differ
diff --git a/docs/plans/site-ui-3-shots/before-states/litepaper-1440-light.png b/docs/plans/site-ui-3-shots/before-states/litepaper-1440-light.png
new file mode 100644
index 000000000..447425a11
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/litepaper-1440-light.png differ
diff --git a/docs/plans/site-ui-3-shots/before-states/live-1440-dark-fail.jpg b/docs/plans/site-ui-3-shots/before-states/live-1440-dark-fail.jpg
new file mode 100644
index 000000000..69891690d
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/live-1440-dark-fail.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/live-1440-dark-stale.jpg b/docs/plans/site-ui-3-shots/before-states/live-1440-dark-stale.jpg
new file mode 100644
index 000000000..9d5e4e2a5
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/live-1440-dark-stale.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/miner-1440-dark-fail.jpg b/docs/plans/site-ui-3-shots/before-states/miner-1440-dark-fail.jpg
new file mode 100644
index 000000000..91d0cdad2
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/miner-1440-dark-fail.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/miners-1440-dark-fail.jpg b/docs/plans/site-ui-3-shots/before-states/miners-1440-dark-fail.jpg
new file mode 100644
index 000000000..a7992fdc2
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/miners-1440-dark-fail.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/miners-1440-dark-stale.jpg b/docs/plans/site-ui-3-shots/before-states/miners-1440-dark-stale.jpg
new file mode 100644
index 000000000..a7992fdc2
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/miners-1440-dark-stale.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before-states/wallet-1440-dark-fail.jpg b/docs/plans/site-ui-3-shots/before-states/wallet-1440-dark-fail.jpg
new file mode 100644
index 000000000..be706fa3c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before-states/wallet-1440-dark-fail.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-dark.jpg
new file mode 100644
index 000000000..bbe4ae0a2
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-light.jpg b/docs/plans/site-ui-3-shots/before/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-light.jpg
new file mode 100644
index 000000000..85665d222
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/address_igneumdev:qz9hw3xy72g4guwfddvpxs-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/address_igneumdev:qz9hw3xy72g4guwfddvpxs-390-dark.jpg b/docs/plans/site-ui-3-shots/before/address_igneumdev:qz9hw3xy72g4guwfddvpxs-390-dark.jpg
new file mode 100644
index 000000000..f94781f32
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/address_igneumdev:qz9hw3xy72g4guwfddvpxs-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/address_igneumdev:qz9hw3xy72g4guwfddvpxs-390-light.jpg b/docs/plans/site-ui-3-shots/before/address_igneumdev:qz9hw3xy72g4guwfddvpxs-390-light.jpg
new file mode 100644
index 000000000..f94781f32
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/address_igneumdev:qz9hw3xy72g4guwfddvpxs-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/bench-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/bench-1440-dark.jpg
new file mode 100644
index 000000000..4ed3ae62c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/bench-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/bench-1440-light.jpg b/docs/plans/site-ui-3-shots/before/bench-1440-light.jpg
new file mode 100644
index 000000000..4ed3ae62c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/bench-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/bench-390-dark.jpg b/docs/plans/site-ui-3-shots/before/bench-390-dark.jpg
new file mode 100644
index 000000000..16edcced1
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/bench-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/bench-390-light.jpg b/docs/plans/site-ui-3-shots/before/bench-390-light.jpg
new file mode 100644
index 000000000..16edcced1
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/bench-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/block_cc9d87b929b6404c-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/block_cc9d87b929b6404c-1440-dark.jpg
new file mode 100644
index 000000000..c02325d76
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/block_cc9d87b929b6404c-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/block_cc9d87b929b6404c-1440-light.jpg b/docs/plans/site-ui-3-shots/before/block_cc9d87b929b6404c-1440-light.jpg
new file mode 100644
index 000000000..c02325d76
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/block_cc9d87b929b6404c-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/block_cc9d87b929b6404c-390-dark.jpg b/docs/plans/site-ui-3-shots/before/block_cc9d87b929b6404c-390-dark.jpg
new file mode 100644
index 000000000..063a4028b
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/block_cc9d87b929b6404c-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/block_cc9d87b929b6404c-390-light.jpg b/docs/plans/site-ui-3-shots/before/block_cc9d87b929b6404c-390-light.jpg
new file mode 100644
index 000000000..063a4028b
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/block_cc9d87b929b6404c-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/evidence-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/evidence-1440-dark.jpg
new file mode 100644
index 000000000..45dbfd655
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/evidence-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/evidence-1440-light.jpg b/docs/plans/site-ui-3-shots/before/evidence-1440-light.jpg
new file mode 100644
index 000000000..45dbfd655
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/evidence-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/evidence-390-dark.jpg b/docs/plans/site-ui-3-shots/before/evidence-390-dark.jpg
new file mode 100644
index 000000000..e5d61bb03
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/evidence-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/evidence-390-light.jpg b/docs/plans/site-ui-3-shots/before/evidence-390-light.jpg
new file mode 100644
index 000000000..e5d61bb03
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/evidence-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/explorer-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/explorer-1440-dark.jpg
new file mode 100644
index 000000000..8987d6595
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/explorer-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/explorer-1440-light.jpg b/docs/plans/site-ui-3-shots/before/explorer-1440-light.jpg
new file mode 100644
index 000000000..d45788542
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/explorer-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/explorer-390-dark.jpg b/docs/plans/site-ui-3-shots/before/explorer-390-dark.jpg
new file mode 100644
index 000000000..74d789637
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/explorer-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/explorer-390-light.jpg b/docs/plans/site-ui-3-shots/before/explorer-390-light.jpg
new file mode 100644
index 000000000..d3f38a5e4
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/explorer-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/faucet-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/faucet-1440-dark.jpg
new file mode 100644
index 000000000..dc899e959
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/faucet-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/faucet-1440-light.jpg b/docs/plans/site-ui-3-shots/before/faucet-1440-light.jpg
new file mode 100644
index 000000000..dc899e959
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/faucet-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/faucet-390-dark.jpg b/docs/plans/site-ui-3-shots/before/faucet-390-dark.jpg
new file mode 100644
index 000000000..ccbd0768f
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/faucet-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/faucet-390-light.jpg b/docs/plans/site-ui-3-shots/before/faucet-390-light.jpg
new file mode 100644
index 000000000..ccbd0768f
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/faucet-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/index-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/index-1440-dark.jpg
new file mode 100644
index 000000000..a1ee3d7da
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/index-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/index-1440-light.jpg b/docs/plans/site-ui-3-shots/before/index-1440-light.jpg
new file mode 100644
index 000000000..7a1cb4ee9
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/index-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/index-390-dark.jpg b/docs/plans/site-ui-3-shots/before/index-390-dark.jpg
new file mode 100644
index 000000000..45826abb2
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/index-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/index-390-light.jpg b/docs/plans/site-ui-3-shots/before/index-390-light.jpg
new file mode 100644
index 000000000..236998c81
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/index-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/ledger-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/ledger-1440-dark.jpg
new file mode 100644
index 000000000..417ab0e18
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/ledger-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/ledger-1440-light.jpg b/docs/plans/site-ui-3-shots/before/ledger-1440-light.jpg
new file mode 100644
index 000000000..417ab0e18
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/ledger-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/ledger-390-dark.jpg b/docs/plans/site-ui-3-shots/before/ledger-390-dark.jpg
new file mode 100644
index 000000000..46eaca45c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/ledger-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/ledger-390-light.jpg b/docs/plans/site-ui-3-shots/before/ledger-390-light.jpg
new file mode 100644
index 000000000..46eaca45c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/ledger-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/litepaper-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/litepaper-1440-dark.jpg
new file mode 100644
index 000000000..f37a6f97b
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/litepaper-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/litepaper-1440-light.jpg b/docs/plans/site-ui-3-shots/before/litepaper-1440-light.jpg
new file mode 100644
index 000000000..9992518eb
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/litepaper-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/litepaper-390-dark.jpg b/docs/plans/site-ui-3-shots/before/litepaper-390-dark.jpg
new file mode 100644
index 000000000..881d6fb9f
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/litepaper-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/litepaper-390-light.jpg b/docs/plans/site-ui-3-shots/before/litepaper-390-light.jpg
new file mode 100644
index 000000000..c7e8510fe
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/litepaper-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/live-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/live-1440-dark.jpg
new file mode 100644
index 000000000..26bb2cc5b
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/live-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/live-1440-light.jpg b/docs/plans/site-ui-3-shots/before/live-1440-light.jpg
new file mode 100644
index 000000000..80a6269ba
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/live-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/live-390-dark.jpg b/docs/plans/site-ui-3-shots/before/live-390-dark.jpg
new file mode 100644
index 000000000..20d7773cd
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/live-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/live-390-light.jpg b/docs/plans/site-ui-3-shots/before/live-390-light.jpg
new file mode 100644
index 000000000..814400974
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/live-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/metamask-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/metamask-1440-dark.jpg
new file mode 100644
index 000000000..408913fa5
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/metamask-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/metamask-1440-light.jpg b/docs/plans/site-ui-3-shots/before/metamask-1440-light.jpg
new file mode 100644
index 000000000..408913fa5
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/metamask-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/metamask-390-dark.jpg b/docs/plans/site-ui-3-shots/before/metamask-390-dark.jpg
new file mode 100644
index 000000000..d119e2804
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/metamask-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/metamask-390-light.jpg b/docs/plans/site-ui-3-shots/before/metamask-390-light.jpg
new file mode 100644
index 000000000..d119e2804
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/metamask-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/miner-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/miner-1440-dark.jpg
new file mode 100644
index 000000000..b04991df9
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/miner-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/miner-1440-light.jpg b/docs/plans/site-ui-3-shots/before/miner-1440-light.jpg
new file mode 100644
index 000000000..b04991df9
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/miner-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/miner-390-dark.jpg b/docs/plans/site-ui-3-shots/before/miner-390-dark.jpg
new file mode 100644
index 000000000..ec8ce2d64
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/miner-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/miner-390-light.jpg b/docs/plans/site-ui-3-shots/before/miner-390-light.jpg
new file mode 100644
index 000000000..ec8ce2d64
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/miner-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/miners-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/miners-1440-dark.jpg
new file mode 100644
index 000000000..a7992fdc2
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/miners-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/miners-1440-light.jpg b/docs/plans/site-ui-3-shots/before/miners-1440-light.jpg
new file mode 100644
index 000000000..a7992fdc2
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/miners-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/miners-390-dark.jpg b/docs/plans/site-ui-3-shots/before/miners-390-dark.jpg
new file mode 100644
index 000000000..fef408dc0
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/miners-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/miners-390-light.jpg b/docs/plans/site-ui-3-shots/before/miners-390-light.jpg
new file mode 100644
index 000000000..fef408dc0
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/miners-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/no-such-page-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/no-such-page-1440-dark.jpg
new file mode 100644
index 000000000..be66041eb
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/no-such-page-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/no-such-page-1440-light.jpg b/docs/plans/site-ui-3-shots/before/no-such-page-1440-light.jpg
new file mode 100644
index 000000000..be66041eb
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/no-such-page-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/no-such-page-390-dark.jpg b/docs/plans/site-ui-3-shots/before/no-such-page-390-dark.jpg
new file mode 100644
index 000000000..b48a75e06
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/no-such-page-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/no-such-page-390-light.jpg b/docs/plans/site-ui-3-shots/before/no-such-page-390-light.jpg
new file mode 100644
index 000000000..b48a75e06
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/no-such-page-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/wallet-1440-dark.jpg b/docs/plans/site-ui-3-shots/before/wallet-1440-dark.jpg
new file mode 100644
index 000000000..be706fa3c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/wallet-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/wallet-1440-light.jpg b/docs/plans/site-ui-3-shots/before/wallet-1440-light.jpg
new file mode 100644
index 000000000..be706fa3c
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/wallet-1440-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/wallet-390-dark.jpg b/docs/plans/site-ui-3-shots/before/wallet-390-dark.jpg
new file mode 100644
index 000000000..8eb169456
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/wallet-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/before/wallet-390-light.jpg b/docs/plans/site-ui-3-shots/before/wallet-390-light.jpg
new file mode 100644
index 000000000..8eb169456
Binary files /dev/null and b/docs/plans/site-ui-3-shots/before/wallet-390-light.jpg differ
diff --git a/docs/plans/site-ui-3-shots/scenes/scene-a-1440-dark.jpg b/docs/plans/site-ui-3-shots/scenes/scene-a-1440-dark.jpg
new file mode 100644
index 000000000..e42a2dd53
Binary files /dev/null and b/docs/plans/site-ui-3-shots/scenes/scene-a-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/scenes/scene-a-1440-dark.webm b/docs/plans/site-ui-3-shots/scenes/scene-a-1440-dark.webm
new file mode 100644
index 000000000..13d8cf194
Binary files /dev/null and b/docs/plans/site-ui-3-shots/scenes/scene-a-1440-dark.webm differ
diff --git a/docs/plans/site-ui-3-shots/scenes/scene-a-390-dark.jpg b/docs/plans/site-ui-3-shots/scenes/scene-a-390-dark.jpg
new file mode 100644
index 000000000..160700725
Binary files /dev/null and b/docs/plans/site-ui-3-shots/scenes/scene-a-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/scenes/scene-b-1440-dark.jpg b/docs/plans/site-ui-3-shots/scenes/scene-b-1440-dark.jpg
new file mode 100644
index 000000000..37b32c6c4
Binary files /dev/null and b/docs/plans/site-ui-3-shots/scenes/scene-b-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/scenes/scene-b-1440-dark.webm b/docs/plans/site-ui-3-shots/scenes/scene-b-1440-dark.webm
new file mode 100644
index 000000000..d6bfdedd4
Binary files /dev/null and b/docs/plans/site-ui-3-shots/scenes/scene-b-1440-dark.webm differ
diff --git a/docs/plans/site-ui-3-shots/scenes/scene-b-390-dark.jpg b/docs/plans/site-ui-3-shots/scenes/scene-b-390-dark.jpg
new file mode 100644
index 000000000..456acc600
Binary files /dev/null and b/docs/plans/site-ui-3-shots/scenes/scene-b-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/scenes/scene-c-1440-dark.jpg b/docs/plans/site-ui-3-shots/scenes/scene-c-1440-dark.jpg
new file mode 100644
index 000000000..8ca64e0a0
Binary files /dev/null and b/docs/plans/site-ui-3-shots/scenes/scene-c-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/scenes/scene-c-1440-dark.webm b/docs/plans/site-ui-3-shots/scenes/scene-c-1440-dark.webm
new file mode 100644
index 000000000..11d1083b7
Binary files /dev/null and b/docs/plans/site-ui-3-shots/scenes/scene-c-1440-dark.webm differ
diff --git a/docs/plans/site-ui-3-shots/scenes/scene-c-390-dark.jpg b/docs/plans/site-ui-3-shots/scenes/scene-c-390-dark.jpg
new file mode 100644
index 000000000..7fb76fe9a
Binary files /dev/null and b/docs/plans/site-ui-3-shots/scenes/scene-c-390-dark.jpg differ
diff --git a/docs/plans/site-ui-3-shots/scenes/scenes-1440-dark.jpg b/docs/plans/site-ui-3-shots/scenes/scenes-1440-dark.jpg
new file mode 100644
index 000000000..2d6bb1f8d
Binary files /dev/null and b/docs/plans/site-ui-3-shots/scenes/scenes-1440-dark.jpg differ
diff --git a/docs/plans/site-ui-3-ticklist.md b/docs/plans/site-ui-3-ticklist.md
new file mode 100644
index 000000000..a264dd52f
--- /dev/null
+++ b/docs/plans/site-ui-3-ticklist.md
@@ -0,0 +1,617 @@
+# Site UI 3 audit, appendix A: the tick list
+
+Every visible claim, number, date, link and feature per page, in reading order, with its source and today's verdict.
+Read 6 October 2026 at 18:16 UTC (API: height 140,681; 0.983 blocks/s; 2.66 GH/s; 71 vote keys in 10 min; last lock
+6,795; proving active since DAA 84,100; 2,149 shards paid; median proof lag 387.5 s; verifier Off on the observer's node).
+Verdicts: MATCH (source says the same today), STALE (source moved on), UNSOURCED (no source in the repository or the
+API), APPROX (labelled approximate on the page or in the source). The build keeps every row; a row that moves gets its
+new place written in the design's per-page notes. Rows marked "generated" mirror a markdown document and are kept by
+keeping the generator.
+
+Row counts: home 88, litepaper 151, nav 11, footer 24, live 22, miners 19, miner 66, wallet 29, bench 5 hand-written,
+evidence 12 hand-written, ledger 8 hand-written, explorer 23, block 11, address 9, faucet 8, metamask 9, 404 7. Total 502.
+
+## Home page (site/index.html)
+
+| id | section | text | kind | source and verdict |
+|---|---|---|---|---|
+| I-1 | nav | Litepaper, Live devnet, Engineering log, Miner, Wallet, Evidence, GitHub, "The miner" | links | all 200 |
+| I-2 | hero | "GPUs are back · for good" | claim | |
+| I-3 | hero | "Mined by GPUs. Proven by fire." | tagline | ledger row 820 allows it |
+| I-4 | hero | "A new mining program every hour, compiled on the card" | claim | bench-log 4 Oct swap entry, MATCH |
+| I-5 | hero | "strongest chip reaches 5x to 9x per joule against an RTX 5090" | number | docs/plans/morning-2026-10-06.md 35-40, evidence row 17; APPROX (model); the plan's line 55 says pick a wording before any public push |
+| I-6 | hero | "about 2x once the lever now in its gates ships" | number | morning table row reads 2.7x; counter-asic-3-status.md not in tree; UNSOURCED here |
+| I-7 | hero | "the numbers" to /bench#counter-asic-2-0-the-numbers | link | anchor exists |
+| I-8 | hero | "Every NVIDIA card from 8 GB proves and is paid for it; 12 GB and up mine and prove; AMD and Apple cards mine" | claim | morning 107 (patched server ships in 0.3.14); litepaper 452 says not in the shipped app; live verifier Off; STALE wording (present tense) |
+| I-9 | hero | "No premine, no stake, no foundation" | claim | spec 02, 05; MATCH |
+| I-10 | hero | "See the miner" (#mine), "Read the litepaper" | links | |
+| I-11 | hero card | "This tab · light client", badge PREVIEW / LIVE | feature, state | /verify/verify.js |
+| I-12 | hero card | "Browser checks Igneum. A checkpoint certificate, verified in this tab. Voter list from the node." | claim | /api/checkpoint 200 |
+| I-13 | hero card | BLOCK PROOF "not yet" (title: first off-chain GPU proof 4 Oct 2026) | state, date | bench-log 578; MATCH |
+| I-14 | hero card | CHECKPOINT "checking" then the index | state | live |
+| I-15 | hero card | PROOF SYSTEM "BLS aggregate, version 1" | claim | verify/core.js |
+| I-16 | hero card | VERIFIED IN THIS TAB "checking" then the result | feature | |
+| I-17 | live strip | vote keys in 10 min, blocks/s, hash rate, chain block (item 0) | feature | /api/live state |
+| I-18 | stats | "1 / s blocks, rising to 10" | number | /api/live 0.983/s; MATCH |
+| I-19 | stats | "~60 s to a proof at launch, the target" | number | roadmap gate 3; live lag 387 s not stated |
+| I-20 | stats | "First GPU proof of a block: 1.4 s on an RTX 5090, 4 Oct 2026" | number, date | bench-log 590; MATCH |
+| I-21 | stats | "0 premine" | number | MATCH |
+| I-22 | stats | "4B IGN hard cap, ever" | number | spec 02 118; /api/supply; MATCH |
+| I-23 | stats | "100% of emission to miners and provers; the protocol carries no fee" | number | spec 05 61; /api/stats split; MATCH |
+| I-24 | prove | "Watch the chain prove itself" | heading | |
+| I-25 | prove | "Blocks every second, proven in shards, locked every 30 seconds" | number | checkpointInterval 30; MATCH |
+| I-26 | prove | "First live lock 4 Oct 2026: checkpoint 242, 77.4% of all weight, two hours after genesis" | number, date | bench-log 713; MATCH |
+| I-27 | prove | chain scene with chain block, shards proven, last lock (item 0) | feature | /api/live |
+| I-28 | prove | legends (simulated, live) | feature | |
+| I-29 | prove | viz note "One node is read every 2 s ..." | feature | |
+| I-30 | prove | "This hour's program", countdown, "64 instructions x 8 iterations", "seed from a locked checkpoint, through a 10 minute delay" | feature, numbers | spec 00 31; bench-log 150; MATCH |
+| I-31 | prove | "A new program every hour. Last hour's chip is already obsolete." | claim | aphorism, copy law |
+| I-32 | prove | "First live swap 4 Oct 2026: Apple, NVIDIA and AMD kept hashing through it, 0 rejected blocks." | number, date | bench-log 634, 644; MATCH |
+| I-33 | prove | feed rows batch proof, state proof, fault proof "at testnet"; "IGN burned from jobs" "phase two" | state words | |
+| I-34 | prove | "Jobs are paid on the customer's chain at launch; settlement in IGN with a 10% burn follows the proof bridge in phase two" | number | spec 05 47-48; evidence row 24; MATCH; ledger P10 sentence |
+| I-35 | prove | "Live rows arrive with the public testnet, August 2027" | date | roadmap; ledger X3 sentence |
+| I-36 | prove | "Read more in the litepaper" /litepaper#proving | link | exists |
+| I-37 | randomx | "Monero's idea, finished for GPUs" | heading | ledger overclaim 68 asks "Monero's technique, applied to GPUs"; not applied |
+| I-38 | randomx | "kept chips off Monero since 2019 (approximate)" | date | asic history row 16; ledger C2 sentence; MATCH |
+| I-39 | randomx | table CPUs/GPUs; every hash/every hour; "2 GB, fixed" / "2 GB, growing (proposed schedule, fixed at the testnet genesis: 2 GB, doubling at years 4, 12 and 28)"; any CPU | numbers | evidence row 31 (schedule 4, 12, 28, 60, recommended); APPROX |
+| I-40 | randomx | "The program keeps changing on a schedule fixed at genesis. Nobody touches it." | claim | aphorism |
+| I-41 | randomx | /litepaper#randomx; "Built on the shoulders: Kaspa's GHOSTDAG and node, Monero's RandomX idea, Chia's class-group VDF, Ethereum's EVM, Succinct's SP1, BLS12-381 and Bitcoin's address format"; /litepaper#shoulders | claim, links | exist |
+| I-42 | build | "One chain, three jobs" | heading | |
+| I-43 | build | "Any 4 GB card at launch, 8 GB from about year 4 ... doubling at years 4, 12 and 28, approximate. 80% of each block to its finder." | numbers | spec 02 123; evidence row 31; MATCH, APPROX |
+| I-44 | build | "The same card proves shards and sells proofs to other chains."; #prove | claim, link | |
+| I-45 | build | "Ethereum bytecode, with the differences documented ... 20% of priority fees to the contracts that ran, stated at the fee levels that exist."; /litepaper#builders-ask | number, link | spec 05 25; MATCH; ledger overclaim 35 wording |
+| I-46 | build | /litepaper#building | link | exists |
+| I-47 | mine | "One click. The card mines; every NVIDIA card from 8 GB proves, 12 GB and up mine and prove." | heading | 91 characters; see I-8 |
+| I-48 | mine | "Igneum Ember finds your GPU, makes a wallet for you and runs the node, the miner and the prover as one app." | claim | |
+| I-49 | mine | screenshot; "Igneum Ember (the app is still labelled Igneum Miner until 0.3.6) on an Apple M5 Max, live devnet, 5 Oct 2026." | number, date | litepaper 400 says 0.3.13 still says Igneum Miner; STALE |
+| I-50 | mine | "NVIDIA, AMD, Apple silicon. Found by itself. One worker per card, several identities each." | claim | |
+| I-51 | mine | "Compiled ahead and swapped in 0.01 ms on the live devnet, 0 rejected blocks." | number | bench-log 644; MATCH |
+| I-52 | mine | "Signed updates at a safe moment ... The old version comes back if the new one fails to start." | claim | |
+| I-53 | mine | "Kernel variants raced every hour, hash per watt swept, every number in the bench table." | claim | sweep not yet run on a card (litepaper 612); overclaim |
+| I-54 | mine | Windows "v0.3.14 · 45.4 MB" | link, number | host 0.3.14, 45,416,619 bytes; MATCH live; downloads.json snapshot 0.3.10 STALE |
+| I-55 | mine | macOS "v0.3.14 · 41.9 MB" | link, number | host MATCH; snapshot STALE |
+| I-56 | mine | "Linux · HiveOS" /miner#get | link | exists |
+| I-57 | mine | "Devnet: coins have no value and the chain may be reset." | claim | |
+| I-58 | mine | "Public testnet: not yet open; the devnet build is here for people who want to look." | state | ledger X2 sentence |
+| I-59 | mine | /miner; "optional 1% dev fee, like other GPU miners, off with one flag. Download only from this domain. Nobody from Igneum will ask for your seed." | number, claim | bench-log dev fee entry; MATCH |
+| I-60 | terms | "What you agree to when you run the testnet miner" | heading | 48 characters |
+| I-61 | terms | "No value ... no airdrop, no points scheme ... Mainnet starts from an empty genesis." | claim | |
+| I-62 | terms | "Every reset is announced at least seven days ahead on this page and in the app ... The devnet that runs today resets without notice." | number | testnet-go.md 75, PLACEHOLDER text; APPROX |
+| I-63 | terms | "What the app sends home ... a service Igneum runs on Vercel ... Never your seed phrase ... Nothing is sold or shared." | claim | |
+| I-64 | terms | /metamask; "optional 1% fee ... no fee to anyone" | link, number | |
+| I-65 | wallet | "Your coins, your wallet"; "Igneum Wallet holds the key the miner makes for you and verifies finality itself. MetaMask works too." | claim | |
+| I-66 | wallet | states "pending", "in a block", "final · cp 5" | feature | "cp 5" is an abbreviation |
+| I-67 | wallet | "24 words, three typed back, a password. Argon2id and XChaCha20-Poly1305. Nothing leaves." | claim | app/igneum-wallet not in this tree; UNSOURCED here |
+| I-68 | wallet | "Rewards in one history ... QR drawn locally"; "Reads your own node ... Nobody else sees your balance." | claims | |
+| I-69 | wallet | /wallet, /wallet#metamask | links | exist |
+| I-70 | wallet | "macOS first, Windows next. Public testnet first." | state | |
+| I-71 | wallet | screenshot; "Igneum Wallet on a private test network, 5 Oct 2026. The address is an example." | date | |
+| I-72 | journey | "Where Igneum is right now"; label from JSON "updated 6 Oct 2026" | state | |
+| I-73 | journey | "Thirteen months, four public gates, each a measurement published pass or fail." | number | litepaper roadmap; MATCH |
+| I-74 | journey | six phases with dates and gates (JSON) | dates, numbers | phase 2 gate text differs from the litepaper's gate 2; three phases active at once |
+| I-75 | journey | "Day one was 3 October 2026" | date | bench-log 213 |
+| I-76 | journey | log of 40 entries, 8 shown, "Show all 40 entries" | feature | bench-log headings; MATCH; the eight default entries carry raw shorthand and scrub artefacts |
+| I-77 | journey | /litepaper#roadmap | link | exists |
+| I-78 | economics | "Every coin, mined"; "Hard cap of 4 billion IGN, halving every two years for ever." | number | spec 02 121; MATCH |
+| I-79 | economics | bar "80% miners", "20% provers", "0% anyone else in the protocol" | numbers | MATCH |
+| I-80 | economics | tiles "0 premine", "0 stake, anywhere", "0 admin keys in consensus", "90% of blocks must signal to upgrade" | numbers | spec 00 61, 05 83; ledger G4 tile; MATCH |
+| I-81 | economics | "Base fee burned. The one payment to the project is the Ember software's optional 1% dev fee ... coinbase's 20% output is burned under the tag igneum-proving-pool-v0 ... separate escrow ... same 20%." | numbers | ledger E5 sentence verbatim; evidence rows 20, 21; MATCH |
+| I-82 | economics | /litepaper#economics | link | exists |
+| I-83 | band | "Read what Igneum does not claim." "Proof lag, chip economics, the market size, and the one rule external review will try hardest to break." | claim, link | |
+| I-84 | footer | tagline | claim | |
+| I-85 to I-88 | footer | the 24 footer rows (see Footer below) | links, claims | |
+
+Ledger sentences required on the home page: E5 (yes, verbatim), G4 tile (yes), C2 hero chip sentence (no: hero now carries the model figures), C2 RandomX "since 2019 (approximate)" (yes), X2 notice (yes; the version differs from the ledger's v0.3.9 note), X3 (yes), X7 footer routes (yes), X8 phase 6 (yes), L2 "Half of all IGN" absent (yes), overclaim 68 (not applied), overclaim 57 "approximate" on card lifetime (yes).
+
+## Litepaper (site/litepaper.html)
+
+| id | section | text | kind | source and verdict |
+|---|---|---|---|---|
+| L-1 | cover | "Litepaper · version 0.2" | number | |
+| L-2 | cover | tagline; "protected from specialised chips by a program that changes every hour" | claim | |
+| L-3 | cover | "Published 3 October 2026 · updated 5 October 2026" | date | body cites 6 October in nine places; STALE |
+| L-4 | cover | "Coin IGN · cap 4,000,000,000" | number | MATCH |
+| L-5 | cover | "Status devnet live, pre-testnet" | state | |
+| L-6 | cover | "Method one founder with AI systems · external review before gate 3" | claim | ledger G2 sentence |
+| L-7 | cover | "This is not an offer to sell anything" | claim | |
+| L-8 | contents | 19 sections; "One section at a time" / "Whole paper" (localStorage); "Latin igneum: fiery. A cupel ..." | feature | the single-section mode breaks print |
+| L-9 | abstract | "NVIDIA cards also prove every block with zero-knowledge proofs and sell proving to other chains" | claim | |
+| L-10 | abstract | "strongest recompute chip ... 256 MiB cache on-die, reaches under 1x per chip" | number | chip-model-v3.md 69, 82; MATCH (model) |
+| L-11 | abstract | "memory-controller chip ... 1.2x per chip and, in our model, 5x to 9x per joule" | number | morning 39-40; APPROX; not in the file the page cites |
+| L-12 | abstract | "Ethash chips of this class reached 2.1x to 4.8x" | number | asic history row 3; MATCH |
+| L-13 | abstract | "brings the chip to about 2x" | number | plan table says 2.7x; UNSOURCED here |
+| L-14 | abstract | sources: chip-model-v3.md section 5, 6 October 2026; asic history (Phoenix 2020, X4 2021, E9 2022); Counter ASIC 3.0 item 8 (5.6x to 2.1x, 0.2%, gates G1 to G6) | numbers, dates | chip-model-v3 has sections 1 to 4, dated 5 Oct; counter-asic-3 table has items 1 to 7; citation wrong, UNSOURCED |
+| L-15 | abstract | "tested by paid independent cryptanalysis and the public benchmark" | claim | |
+| L-16 | abstract | "included in about one second, proven within about a minute at launch, and locked by miners within about two" | numbers | spec 03; MATCH as design |
+| L-17 | abstract | "no premine, no pre-sale, no treasury taken from emission, no stake anywhere in consensus, and no dependence on any other chain" | claim | MATCH |
+| L-18 | abstract | "a chip for the whole program space is a GPU without the graphics parts" | claim | |
+| L-19 | abstract | "Writing new code, including an emergency fix to the proof system, is the one thing that takes a person, and it activates only on miner signalling" | claim | ledger P7 sentence |
+| L-20 | abstract | tiles 1/s, ~60 s, 0, 100% | numbers | MATCH (target); live lag not stated |
+| L-21 | precedents | "We know of no chain that combines them ... corrected when shown wrong." | claim | ledger C11 sentence |
+| L-22 | precedents | column "State, 5 Oct 2026" | date | |
+| L-23 | precedents | RandomX since 2019; "ProgPoW, as KAWPOW on Ravencoin since 2020 (approximate)"; "Measured: hourly swaps on Apple, NVIDIA and AMD cards on the live devnet, 4 October 2026" | dates, state | ledger M4 sentence; bench-log 634; MATCH |
+| L-24 | precedents | Primecoin 2013, Aleo (approximate); "Implemented: proving v0 on the live devnet since 5 October 2026. The job market ... Designed" | state, date | activation_daa 84,100; MATCH |
+| L-25 | precedents | Conflux since 2020 (approximate); "Implemented in part ... aggregated block proof ... Designed" | state | |
+| L-26 | precedents | Decred, Horizen, Kaspa (approximate); "Vote weight is 30 days of blocks per key"; "rule v2 live, first lock 4 October 2026. External review is owed at gate 3" | number, date | bench-log 713; MATCH |
+| L-27 | precedents | "Kaspa's fair launch."; Zcash, Decred (approximate); "optional 1% dev fee ... off with one flag"; "80/20 coinbase on the devnet" | numbers | ledger C3; /api/stats split; MATCH |
+| L-28 | precedents | sync committee (approximate); "The consensus proof that makes the checkpoint self-verifying is phase two"; "The home page's card verifies a devnet certificate in the browser today" | state | ledger P4 sentence |
+| L-29 | precedents | "Claims about other chains are from memory until cited ... marked approximate" | claim | |
+| L-30 | precedents | pull quote "GPU mining lost its largest home in 2022 ..." | claim | |
+| L-31 | problem | "Ethereum left proof of work in 2022"; "Chips arrived, as on Kaspa, whose hash was designed to welcome them"; "Ergo, Ravencoin and Conflux ... fraction of the 2022 fleet (approximate)" | claims | ledger C3, C8 sentences; MATCH |
+| L-32 | problem | "those proofs come from a few private GPU clusters" | claim | |
+| L-33 | problem | "Ethereum Classic, Bitcoin Gold and Vertcoin were all hit this way" | claim | asic history rows 6, 7 |
+| L-34 | problem | "a supplier whose marginal cost is close to power"; "earned over a month of public mining, not rented for an hour" | claims | ledger P6 sentence |
+| L-35 | glance | five-layer figure (program hourly; one block a second; included in about a second; Solidity unchanged; shards within about a minute, paid from gas; checkpoint every 30 s, 30-day history; "Fresh rented hashrate has no vote") | numbers | spec 03; MATCH as design |
+| L-36 | glance | "Live on the devnet, 5 October 2026"; "run since 3 October 2026 on several machines, cards from all three GPU vendors" | dates | devnet v0 3 Oct, live v4 chain 4 Oct; APPROX |
+| L-37 | glance | Mining lottery row, "4 Oct 2026, first live swap" | date | MATCH |
+| L-38 | glance | Blocks row "About one a second with the full fleet; 0.65 a second over the hour to 16:00 UTC on 6 Oct 2026 with one PC off (2,325 blocks)" | numbers | not in docs; API now 0.98/s; UNSOURCED and STALE |
+| L-39 | glance | Difficulty "Rule v2, a 600-second reference window, switched on by height; DAA 33,000, 4 Oct 2026" | numbers | spec 02 58; bench-log 1041; MATCH |
+| L-40 | glance | Finality row: 30 s, two thirds, checkpoint 242, 77.4%, 17 vote keys | numbers | MATCH |
+| L-41 | glance | Proving row: v0 active, DAA 84,100, 5 Oct 2026 | number, date | MATCH |
+| L-42 | glance | Ember "version 0.3.13 (6 Oct 2026); the app window still says Igneum Miner" | number, date | release-0.3.13.md; MATCH; contradicts I-49 |
+| L-43 | glance | Wallet "Igneum Wallet 0.1.1 on macOS, 5 Oct 2026" | number | downloads.json 0.1.4; STALE |
+| L-44 | glance | Measured line: three log entries; "the 0.3.6 release plan"; "evidence table, row 7" | claim | |
+| L-45 | glance | "0.3.6 ships the verifier with the app"; "two outside laptops. Nothing here has been reproduced by anyone outside the project yet" | claims | verifier Off on the observer's node today; STALE; laptops bench-log 905, 1061 MATCH |
+| L-46 | mining | "Every GPU chain that promised ASIC resistance shipped a fixed algorithm" | claim | |
+| L-47 | mining | "seed from a locked checkpoint one epoch back ... ten-minute verifiable delay"; "32 lanes of a warp"; "multi-gigabyte dataset that changes daily" | numbers | bench-log 150; spec 01; MATCH |
+| L-48 | mining | "Measured: an RTX 5090 hashes at 95 GB/s of useful 4-byte loads against 1,638 GB/s of sequential writes" | number | bench-log 80; ledger M10 sentence; MATCH |
+| L-49 | mining | "memory footprint and instruction count are fixed and only the maths sequence is random" | claim | |
+| L-50 | mining | "checks a hash on an ordinary CPU in under ten milliseconds by simulating one warp" | number | spec 01 gate |
+| L-51 | mining | "Measured: 0.61 ms per warp ... class v2 and 2.1 ms for class v3 (mixer x8, 5 October 2026, load average 5.5, worst cold unit 2.15 ms), 3.4x; the 10 ms gate leaves 4.8x; a 2019-class laptop core is not yet measured" | numbers | spec 01 399 (v2 0.631); chip-model-v3 26 gives 2.79 ms at load 5.6; APPROX, two measurements disagree; ledger M9 quotes the older 0.41 to 0.58 |
+| L-52 | mining | "The hash is a lottery, not a general-purpose cryptographic hash ... Open: no analysis of the lottery properties exists yet." | claim, state | ledger M7 sentences |
+| L-53 | mining | clock table: 128 dataset addresses per nonce; hour; day; six months from a genesis reserve; "Ethereum's growing dataset ran Bitmain's E3 out of memory in 2020, approximate" | numbers | spec 01 1.4; asic history row 3; MATCH, APPROX |
+| L-54 | mining | "Three ideas ... A 90% miner signal turns one on. No fork." | number | spec 05 81; MATCH |
+| L-55 | mining | "No hash has stayed free of chips forever. Igneum does not claim to."; "the response takes a week"; /bench#counter-asic-2-0-the-numbers; "Monero ... since 2019 with no chip publicly shipped, approximate; that is precedent, not proof" | claims, link | ledger C2 (wording "Monero is precedent, not proof" differs) |
+| L-56 | mining | "anyone could publish a new generator and miners would switch it on by signalling" | claim | |
+| L-57 | randomx | "RandomX has kept chips off Monero since 2019" | date | asic row 16 |
+| L-58 | randomx | "Bit-exact on Apple, NVIDIA and AMD, measured" | claim | evidence row 19; MATCH |
+| L-59 | randomx | "Per hour, compiled to native GPU code. Per hash, the 128 dataset addresses change" | numbers | MATCH |
+| L-60 | randomx | "About 2 GB, the same size since 2019, approximate" / "2 GB, growing ... doubling at years 4, 12 and 28; a 4 GB card mines about four years, an 8 GB card about twelve, approximate" | numbers | evidence row 31; APPROX |
+| L-61 | randomx | "256 MB cache on a CPU (512 MB from year 4), one warp under 10 ms. Measured 2.1 ms (3.4x class v2's 0.61 ms); a 2019-class core not yet" | numbers | spec 01 210; see L-51 |
+| L-62 | randomx | "unchanged for seven years" / "Nobody touches it"; "Closed by a verifiable delay" | claims | |
+| L-63 | randomx | "Every NVIDIA card from 8 GB proves; 12 GB and up mine and prove; 24 GB on the stock server (eleven rented cards, RTX 3060 to RTX 5090, 6 October 2026, docs/analysis/prover-tiers-real-cards.md)" | numbers, path | file missing in worktree; UNSOURCED; path on a user surface |
+| L-64 | randomx | "No chip publicly shipped in seven years, approximate" / "public now (github.com/igneum-network/spec). The node, the miner and the wallet are in a private repository until the public testnet" | claim, link | ledger X1 sentence; MATCH |
+| L-65 | randomx | "192 of 192 across two programs"; "228 million ... 45 million"; "prototype figures, not mining rates" | numbers | bench-log 74-100; MATCH |
+| L-66 | randomx | "111x faster ... The 256 MB cache construction replaced it on 3 October 2026 ... computing items on the fly runs 4.8x slower than loading them"; "Open: the same shortcut ratio on NVIDIA and on a discrete AMD card" | numbers, state | bench-log 115, 138; ledger M2 sentence; MATCH |
+| L-67 | randomx | "Inside the 5090's 96 MB cache the same program ran nearly six times faster" | number | ledger M1 (5.8x); MATCH |
+| L-68 | randomx | "On 4 October 2026 ... a Mac at 26.7 million, an RTX 5090 at 123 million, an integrated AMD chip at 2.7 million, every hash doing 128 distinct reads" | numbers | bench-log 644; MATCH |
+| L-69 | proving | "a phone checks it in milliseconds; the wrapping cost is a phase two measurement" | claim | ledger P3 sentence |
+| L-70 | proving | "one BLS aggregate signature over 16 keys and 21 header hashes, 139 to 155 ms cold and 58 to 68 ms warm in a phone-sized tab on a laptop core (5 October 2026). No phone has been measured, and no wrapped block proof exists yet" | numbers | ledger P3 328; MATCH |
+| L-71 | proving | "assigned by lot to eight provers for ten seconds, then open to anyone; there is no bond"; "within about a minute at launch"; native-execution check (spec section 7); "the way Kaspa skips conflicting spends" | numbers, state | spec 07; ledger P13; MATCH |
+| L-72 | proving | "Measured on eleven rented cards ... RTX 3060 (12 GB) 23.78 MH/s ... 8.9 GB peak in 37.5 s; RTX 4060 (8 GB) 7.4 GB in 18.4 s; RTX 4090 (24 GB) 5.6 s at 17.4 GB. The patched server ... is not yet in the shipped app" | numbers, path | file missing; none of the seven numbers in bench-log; UNSOURCED |
+| L-73 | proving | "Measured on 5 October 2026 (RTX 5090, SP1 6.8.1, 30,000 proving gas, about 4.7 million prover cycles): one full shard proves in 4.3 seconds and needs 20.4 GB; floor 13.9 GB; 32 GB today (30.1 GB) and 24 GB once the adopted shard size is live (22.2 GB beside the miner, 13.2 seconds a shard)" | numbers | bench-log 1994; proving-v1.md; evidence row 16; MATCH (4.2 vs 4.3 rounding) |
+| L-74 | proving | "old 12 GB gate withdrawn on 5 October; on 6 October a patched server proved the same shard at 7.4 to 8.0 GB alone on eleven rented cards" | numbers | morning 107 only; UNSOURCED (file missing) |
+| L-75 | proving | "4 October 2026: RTX 5090 proved a small two-transaction block in 1.4 seconds (2.7 compressed), verified in 0.22 and 0.038 seconds; a laptop CPU proved a three-shard block end to end in 19 minutes" | numbers | bench-log 590; evidence row 15; MATCH |
+| L-76 | proving | "6.75 million prover gas ... 60.8 million cycles: core proof 8.3 s, compressed 10.9 s, verified in 0.040 s; a four-shard block 44.5 s" | numbers | bench-log 857; MATCH |
+| L-77 | proving | "Since 5 October 2026 shards are assigned and proven on the live devnet"; "the gate stands open"; "hash-based ... versioned interface" | state | MATCH |
+| L-78 | proving | "The job market is permissionless and is Designed, not yet built"; "10% of each fee burned ... phase two"; "Boundless provers post ZKC and Succinct provers stake PROVE (approximate)"; "We know of no other proof-of-work chain selling proofs to other chains" | state, claims | spec 05 48; ledger C10 sentence; MATCH |
+| L-79 | finality | GHOSTDAG, Kaspa since 2021 (approximate), rusty-kaspa; four and ten (approximate); one second vs Ethereum's twelve; two minutes vs thirteen (approximate); "Inclusion is not confirmation on either chain"; "paid at that rate, red or blue" | numbers | ledger C3, C5 sentences; node 2.1.0; MATCH |
+| L-80 | finality | "Every 30 seconds of chain a checkpoint forms"; "at least 100 blocks in the last 30 days"; "two thirds of all the mining weight"; "In the chain's first 30 days no checkpoint locks at all (Implemented, the first-month gate, measured 4 and 5 October 2026)"; "12-hour finality depth"; "window two hours, first lock two hours after genesis at 77.4% from 17 vote keys (4 October 2026)" | numbers, dates | spec 03; spec 02 16; /api/live weightWindow 7200; ledger F1 sentence; MATCH |
+| L-81 | finality | pull "The word sustained is the whole defence ... The right to lock history is earned." | claim | |
+| L-82 | finality | "ten days ... a third ... twenty to hold two thirds. An attacker matching the honest network needs twenty days for a third and never reaches two thirds"; "same limit Bitcoin lives with, with a month's warning"; "Pools carry their hashers' votes, so vote concentration equals pool concentration, and it is public" | numbers | spec 03 25; ledger F5, F10 sentences; MATCH (model) |
+| L-83 | finality | "finality pauses ... up to 30 days"; "reported as absent within two hours"; "forked more than 12 hours of median time back"; "Kaspa's one-hour merge depth"; "strips the key of its vote for 30 days" | numbers | spec 03 Q1; MATCH |
+| L-84 | finality | "No stake. No coin-holder class votes ... No anchoring into Bitcoin or any other chain." | claim | CLAUDE.md decisions; MATCH |
+| L-85 | building | "Anything that runs on Ethereum runs on Igneum unchanged ... a different chain id"; "one-second inclusion, finality in about two minutes" | claim | ledger overclaim 35 asks the bytecode wording; not applied |
+| L-86 | building | three things no other EVM chain offers: proving primitive; light clients (consensus proof phase two); rollups settle here | claims | ledger C11 sentence |
+| L-87 | building | "The first apps, a DEX and a lending market, ship at genesis"; "No bridge is official" | claim | |
+| L-88 | building | "Not for speed ... Three things no L2 can offer. Keep your Ethereum deployment." | claim | copy law |
+| L-89 | building | "base fee that rises with the backlog, published at the phase 4 job market" | claim | |
+| L-90 | building | "20% of every priority fee ... per call frame"; "a million 100,000-gas calls a day at a 1 gwei tip pays about 7,300 IGN a year, 1 gwei as a billionth of an IGN (the base unit is Open)" | numbers | ledger P14 sentence; MATCH |
+| L-91 | building | "a proof Ethereum verifies for about 250,000 gas. Igneum reads Ethereum's finality trustlessly from launch. Ethereum reads Igneum trustlessly in phase two" | number | no source; UNSOURCED |
+| L-92 | building | "No stablecoin and no official bridge at genesis. Grants come from founders' mined coins"; "miner lock in about two minutes" | claims | |
+| L-93 | economics | "part of every payment on Igneum is burned"; "10% burn ... phase two" | number | ledger P10 sentence |
+| L-94 | economics | "Hard cap of 4 billion ... 1 billion a year, halves every two years for ever. Nearly a quarter in the first year and half in the first two. Ramps 10% to 100% over 30 days" | numbers | spec 02 118-122; /api/supply; ledger L2 sentence; MATCH |
+| L-95 | economics | chart "Half of the 4 billion cap is mined in the first two years"; bars 1000 ... 31; caption "3,938M IGN in the first 12 years" | numbers | /api/supply year 12 = 3,900.5M with the ramp; ledger overclaim 76 on the caption; STALE/APPROX |
+| L-96 | economics | 80% miner; 20% pool "unspendable script tagged igneum-proving-pool-v0, burned (Implemented, proving v0, since 5 October 2026). Open: the single coinbase payout that replaces the burn"; 0% treasury | numbers, state | evidence rows 20, 21; MATCH |
+| L-97 | economics | base fee burned (Ethereum's rule); 80/20; 90/10 | numbers | spec 05; MATCH |
+| L-98 | economics | routes 1 to 6; route 6 "1 block template in 100 ... off with one flag; Implemented, measured 4 October 2026"; rows 4, 5 Designed | numbers | bench-log dev fee; MATCH |
+| L-99 | economics | "Sources: specification sections 2.5 and 5.1 to 5.4" | claim | |
+| L-100 | economics | "no tail emission. The schedule is a bet, not a measurement"; Kaspa's reduction (approximate); "about 3,000 consumer cards"; "300 W card at 124 MH/s on USD 0.12 per kWh"; "under one fifth of the block subsidy over any 90-day window after year 5" | numbers | security-budget.md 54-61; ledger E6 sentence; MATCH |
+| L-101 | economics | USD 0.005 to year 7, USD 500,000; USD 0.02 to year 11; USD 0.10 none in 14 years, USD 1,250,000 | numbers | security-budget.md 101; MATCH |
+| L-102 | economics | "No fund, no foundation, no fee to the team"; the full list; "1 block in 100 pays the project" | claim | ledger E5 sentences; MATCH |
+| L-103 | miners | streams table; "No, but the market is small today and is upside, not a promise" | claims | |
+| L-104 | miners | "4 October 2026, three machines at 275 million hashes a second, a second of hashing paid about 4.9x a second of proving; at 10,000 cards ... about 930x, approximate" | numbers | ledger X14 arithmetic; bench-log 790; APPROX |
+| L-105 | miners | "half a gigabyte a year"; 4 GB four years, 8 GB twelve, approximate; the 8 GB proves sentence (path); "Macs mine too, at about a fifth of a flagship card: Measured, 26.7 against 123 million, 4 October 2026"; "no CPU mining lane ... botnets" | numbers | ledger M13 sentence MATCH; path row UNSOURCED |
+| L-106 | miners | "switches the card to proving for a few seconds"; "1% dev fee ... by a counter, not a random draw, exactly 1 in 100"; "--dev-fee 0" | numbers | MATCH |
+| L-107 | miners | "Implemented, Ember 0.3.9 (5 October 2026): chain label reads devnet v4 ... NVIDIA capped at 80% of default power limit ... not yet measured on a card; no earnings in IGN or any currency; no hardware-wallet path. Roadmap, Designed"; "browser mining has meant malware since Coinhive" | claims | release-0.3.9.md; MATCH |
+| L-108 | miners | "Launch date and miner software published a month ahead. Pools live on testnet. HiveOS support on day one. The founders mine from genesis ... disclosed addresses"; "first 30 days ... 12-hour depth" | claims | ledger F1 second sentence |
+| L-109 | ember | "runs the node, mines the hourly program, proves shards and keeps your key, on Windows, macOS and Linux"; "since 4 October 2026"; "six levers set on 4 October 2026" | dates | "six levers" has no document; UNSOURCED |
+| L-110 | ember | features: one click; CUDA/OpenCL/Metal; key shown once; proving switch; "8 on a large card and 2 on a small one"; manifest hourly, 3 minutes, one minute of the hour, rollback; signed remote jobs; watchdog 90 s / 60 s; dashboard token | claims, numbers | h-config.sh 11; bench-log 1214; MATCH; "3 minutes" UNSOURCED |
+| L-111 | ember | Source: app/igneum-app/src, packaging/hive; "Design, not yet measured on a real card: the watchdog rules and the fault guards ... fake worker only (4 October 2026)" | state | paths on a user surface |
+| L-112 | ember | lever 1: "up to 17 variants ... 2 s"; "Shipped in the Metal and CUDA workers"; "+17.3% ... +21.2%, Apple M5 Max, 14 variants, ratios only. The RTX 5090 race is built and not yet run" | numbers | bench-log 1122, 1130 (14 variants); "up to 17" UNSOURCED |
+| L-113 | ember | lever 2: "Shipped. The fleet is small, so no table yet" | state | |
+| L-114 | ember | lever 3: "100% to 50% in 10% steps, 60 s"; "AMD and Apple: not supported"; "The first sweep on a card is pending. The RTX 5090 drew 290 W at p95 under a 460 W cap" | numbers | miner-eff.md, ember-tune.md; MATCH |
+| L-115 | ember | lever 4: "Target under 50 ms"; "In 0.3.6"; "p50 46 to 52 ms, p90 118 to 130 ms, 3-node fast-time network, CPU miners, 0 rejected" | numbers | release-0.3.6.md; MATCH; "In 0.3.6" STALE |
+| L-116 | ember | lever 5: swap 0.01 / 0.00 ms; fake-worker guards trip 0.0 s, back in 2.0 s, silent worker restarted at 60 s | numbers | bench-log 644, 1199; MATCH |
+| L-117 | ember | lever 6: "Live"; /miners | state, link | |
+| L-118 | ember | "Levers 2 and 3 are shipped code with no fleet measurement yet" | state | |
+| L-119 | ember | "1% software dev fee ... exactly 1 in 100"; "--dev-fee 0", "DEV_FEE=0"; "9 fee blocks in 785, 0 from the control" | numbers | bench-log 1226, 1252; MATCH |
+| L-120 | ember | "What Ember does not claim": the race gain on NVIDIA; a measured sweep; HiveOS on a rig; a signed binary (four sentences, kept verbatim) | claims | kept |
+| L-121 | wallet | "desktop wallet, macOS first ... checks finality with the node's own code" | claim | |
+| L-122 | wallet | 24 words on the Ethereum path; XChaCha20-Poly1305, Argon2id (64 MiB, 3 passes); fee shown; local QR; history; BLS verified itself; MetaMask export; own node; signed OTA with rollback; "Touch ID and Windows Hello: In progress, not live. Windows build: next" | claims, numbers | app/igneum-wallet not in tree; UNSOURCED here |
+| L-123 | wallet | "Igneum Wallet 0.1.1, 5 October 2026 (app/igneum-wallet). Verified: the over-the-air path end to end on one Mac. Not yet run: the Windows path, the rollback paths, a Developer ID signature" | number, date | downloads 0.1.4; STALE; path on a user surface |
+| L-124 | governance | "top three vote keys held 34.5% of 8,090 blocks on 4 October 2026, measured" | number | difficulty-2026-10-04-oscillation.md; bench-log 790; MATCH |
+| L-125 | governance | "at least three months ahead and activates only when 90% of blocks signal"; "60% of hashrate over two weeks" | numbers | spec 05 56, 81-83; MATCH |
+| L-126 | governance | "Stratum v2 job declaration from day one ... Designed: spec section 9"; "no admin keys in consensus ... Designed, open item O-5.4. On the devnet the activation heights and one execution-state restart (6 October 2026) reach every node through the signed update manifest, so the release key acts as the operator"; "A second independent node client is the first priority after launch" | claims, date | ledger G4, G6 sentences; morning 103; MATCH |
+| L-127 | roadmap | "Thirteen months ... four public gates"; "the combination is the risk the gates price" | number | ledger C6 sentence |
+| L-128 | roadmap | six phases; phase 2 "So far: an RTX 5090 proves a shard in 10.9 s compressed; a CPU verifies a warp in 0.41 to 0.58 ms. A mid-range card has not been measured", gate "under 20 s ... 10 ms"; phase 3 "Live now: 1 block a second, difficulty v2, finality v2 locks, proving v0, Ember on every machine. Not yet measured on the live chain: the proof lag behind the tip", gate "proofs under 60 s behind the tip"; phase 5 gate "1,000 independent miners run 30 days"; phase 6 "No listing is arranged, promised or sought by the project" | dates, numbers | 0.41 to 0.58 is the retired v1 figure (spec 01 399): STALE; proof lag is measured (387 s): STALE; ledger X8 sentence present |
+| L-129 | roadmap | "Dates slip. Gates do not. Phase two decides everything." | claim | ledger C6 sentence |
+| L-130 | roadmap | "What ships next: Ember 0.3.6"; "none is on the fleet yet" | state, date | fleet on 0.3.13; STALE |
+| L-131 | roadmap | items: verifier; Windows prover host (20-minute setup); tile shows verifier state; p50 46 to 52 ms; instant jobs "3 to 6 s expected, not yet measured"; testnet parameters adopted 5 October 2026 | numbers | release-0.3.6.md; STALE as "next" |
+| L-132 | roadmap | "Source: the 0.3.6 release plan ... instant-jobs latency is an estimate" | claim | |
+| L-133 | miners ask | "Kaspa was GPU-mined too, and IceRiver shipped a chip within two years."; "The benchmark tool ships in January 2027"; "more than 2x" | date, number | ledger M1; MATCH |
+| L-134 | miners ask | "A renter with 60% of the network holds 0.0% of the vote on day one (the finality simulator, table B); a third on day 20 and never two thirds"; "median 1,018 ms behind the checkpoint"; "deepest honest reorganisation measured was 2, 3 and 7 blocks against a determination depth of 20 (ledger F7, round 2)"; "p50 343 ms and p99 666 ms (12-node cloud network, 4 October 2026)" | numbers | ledger F8; bench-log 433, 936 MATCH; "2, 3 and 7" not in the ledger: UNSOURCED |
+| L-135 | miners ask | "IceRiver KS0 July 2023, 17 to 20 months; under 100 PH/s to over 700 PH/s (row 23, approximate)"; "Bitcoin's hash from two manufacturers (approximate)"; "85% of the hashrate vanished at the April 2018 fork ... over 85% again four months after the next fork (row 16)" | numbers | asic history rows 23, 16; MATCH |
+| L-136 | miners ask | ETC (January 2019, August 2020), BTG (May 2018, January 2020), Vertcoin (October to December 2018, December 2019) (rows 6, 7; ETC approximate); Verge 2018 (approximate); "first 30 days ... 12-hour depth" | dates | asic history; MATCH |
+| L-137 | miners ask | "Rented NVIDIA hash, 6 October 2026: 2 GH/s for USD 13 an hour; the entry lands tonight" | number | placeholder; morning 107 says USD 9 for the 11-card phase; UNSOURCED |
+| L-138 | miners ask | "The devnet's hash the same afternoon: 282 MH/s; /api/stats, 6 October 2026, 16:40 UTC; 181 MH/s an hour earlier" | numbers | API now 2.66 GH/s; UNSOURCED and STALE |
+| L-139 | miners ask | "0.0% (ledger M12)"; "1,018 ms median"; "A 50-miner wave against the devnet: measurement tonight" | numbers | placeholder cell; UNSOURCED |
+| L-140 | miners ask | "The specification is public; reviewers will be named and paid before gate 3" | claim | ledger G1 sentence |
+| L-141 | miners ask | "One founder, pseudonymous, working with AI systems ... the commit history says so"; DIFC address; "ledger is published with the repository at the public testnet"; "No cryptographer is hired yet"; "there is no team page" | claims | ledger G2, G3 sentences; /ledger is already published (the sentence is STALE) |
+| L-142 | miners ask | "benchmark January 2027. Pools and the public testnet are August 2027"; #ember | dates, link | MATCH |
+| L-143 | miners ask | "marginal cost close to power ... an edge over data-centre provers and nothing more" | claim | ledger P6 |
+| L-144 | builders ask | "Proof of work, in 2027?"; "executes in about a second. A miner lock arrives in about two minutes" | numbers | MATCH as design |
+| L-145 | builders ask | "The project will ask Circle for native USDC during the public testnet"; "DEX seeded at launch by the founders' own mined coins and by miners" | claims | |
+| L-146 | builders ask | "20% of the priority fee ... small and stated as such above"; "wallet's Apps tab and the explorer from day one"; "Point Hardhat or Foundry ... The afternoon is the hard part." | claims | ledger overclaim 42 asks to delete the last sentence; not applied |
+| L-147 | shoulders | "decided on 3 October 2026"; rusty-kaspa (ISC) v2.1.0; RandomX (BSD); ProgPoW/KAWPOW (approximate); LWMA; chiavdf (Apache 2.0); revm (MIT); SP1 (MIT or Apache 2.0); blst (Apache 2.0); bech32/CashAddr; BLAKE2b, BLAKE3, SHA-256, Keccak, ChaCha, SplitMix64, FNV-1a | claims | node_version 2.1.0; MATCH |
+| L-148 | shoulders | "docs/provenance.md ... published at the public testnet. Licences stated from memory are marked approximate" | claim, path | path on a user surface |
+| L-149 | limits | nine "does not claim" items (verbatim list below); numbers 100 to 200 GPUs; 0.92x with 3x allowance; under 1x; 1.2x; 5x to 9x; 2.1x to 4.8x; about 2x; 5.6x to 2.1x; 4.8x slower (3 October 2026); 12-hour depth; ten and twenty days; partition both sides (4 October 2026); up to 30 days | numbers | ledger P2 (100 to 200, approximate); chip-model-v3 69; evidence row 10; MATCH, APPROX |
+| L-150 | limits | "subject to the gates"; "Nothing in it is an offer to sell anything"; mailto; spec issues; DIFC address | links | ledger X7 |
+| L-151 | footer, pager | footer (24 rows) and the previous/next pager | links, feature | |
+
+"What Igneum does not claim" (kept verbatim in the build, every word):
+1. "A proof in seconds. Not at launch. Proving a full block today needs a cluster of 100 to 200 consumer GPUs, approximate, so Igneum launches with proofs within about a minute and tightens as hardware improves. Users still see their transaction land in one second."
+2. "A chip is impossible. No. A chip is a bad bet, because the target moves before it ships." (then the model paragraph, ending "and that price is a cost model, not a measurement.")
+3. "A guaranteed income floor. No. External proving is a small market today. Igneum's miners' marginal cost in it is close to power, which is an edge and nothing more."
+4. "A memory-hard prototype on every vendor. Not yet. The 256 MB cache closed the shortcut on Apple silicon (computing items runs 4.8x slower than loading them, measured 3 October 2026). The same ratio on NVIDIA and on a discrete AMD card is Open."
+5. "Finality in the first month. No. No checkpoint locks until the 30-day window has 30 days of history. The first month of mainnet is proof of work with a 12-hour depth, and the text above says so wherever a day count appears."
+6. "A cryptography team. Not yet. One founder working with AI systems wrote the design and the code; external reviewers are named and paid before gate 3, and every security claim here is a design claim until then."
+7. "Finality that no amount of hardware can break. No. A miner holding a third of the last 30 days of blocks can split finality during a network partition, and two thirds can lock a bad checkpoint for a double-spend bounded by the 12-hour finality depth. ..." (ends "(measured on a test network, 4 October 2026).")
+8. "Finality that never pauses. No. A lock needs two thirds of all 30-day mining weight. Whenever less than two thirds of that weight is connected and signing, finality pauses until it returns or ages out of the window, up to 30 days. The chain keeps running on proof of work and the node reports the pause."
+9. "A finished protocol. The sustained-mining finality rule is the newest piece and the one that external review will try hardest to break. The specification, the review and the benchmarks are published as they happen."
+
+"What Ember does not claim" (kept verbatim): the race gain on NVIDIA ("Unknown until the RTX 5090 job runs ..."); a measured sweep ("has not yet run on a card"); HiveOS on a rig ("self-tested with stub binaries ..."); a signed binary ("Releases are signed by the project's release key ... the first install asks you to allow the app").
+
+Ledger sentences on the litepaper: present verbatim for M2, M4, M7, M10 (the Measured sentence), M13, F1, F5, F10, P3, P4, P6, P7, P10, P14, E5, E6, G1, G2, G3, G4, G6, C3, C5, C6, C8, C10, C11, L2, X1, X7, X8. Differ or absent: M9 (page now says 0.61 and 2.1 ms; the ledger's 0.41 to 0.58 survives only in the roadmap), P1 (the "Target: 12 GB card proves one shard in about 20 seconds" sentence is gone; the page says the gate was withdrawn), C2 second half ("that is precedent, not proof" for "Monero is precedent, not proof"). Overclaims not yet applied: 35, 42, 51, 68, 74, 76. The ledger's own count table lists 32 rows as "not yet stated" that the page carries: the ledger's table is stale, not the page.
+
+## Nav (site/partials/nav.html)
+
+| id | text | kind | note |
+|---|---|---|---|
+| P-nav-1 | "Skip to content" | feature | #main on every page |
+| P-nav-2 | IGNEUM mark | link | / |
+| P-nav-3 | Menu button | feature | under 941 px; closes on link, outside tap, Escape, resize |
+| P-nav-4 to 9 | Litepaper, Live devnet, Engineering log, Miner, Wallet, Evidence | links | data-nav marks the current page; Live devnet also current on /explorer, /block, /address; Miner also on /miners |
+| P-nav-10 | GitHub | link | spec repo, 200 |
+| P-nav-11 | "The miner" CTA | link | /miner |
+
+No nav entry for /explorer, /ledger, /faucet, /miners, /metamask (footer only).
+
+## Footer (site/partials/footer.html)
+
+| id | text | kind | note |
+|---|---|---|---|
+| P-foot-1 | tagline | claim | |
+| P-foot-2 to 8 | Read: Litepaper, What Igneum does not claim (/litepaper#limits), Igneum vs RandomX (#randomx), Built on the shoulders (#shoulders), Engineering log, Evidence, Ledger: every criticism | links | anchors exist |
+| P-foot-9 to 13 | Run: The miner, The wallet, GPU bench table (/miners), The dev fee (/miner#fee), Testnet faucet | links | |
+| P-foot-14 to 21 | Follow: Live devnet, Explorer, Journey (/#journey), Add Igneum to MetaMask (/wallet, no anchor), GitHub spec and vectors, Miner downloads: public testnet (/miner#get; label contradicts the not-open notice), Report a flaw mailto, spec issues | links | |
+| P-foot-22 | "Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · hello@igneum.network" | claim | fud-ledger.md 154; MATCH |
+| P-foot-23 | "© 2026 Igneum. Nothing on this page is an offer to sell anything." | claim | |
+| P-foot-24 | "igneum.network" | text | |
+
+## Live (site/live.html)
+
+| id | text | kind | element, API field, states, verdict |
+|---|---|---|---|
+| P-live-1 | "read from a node every two seconds" | claim | poll 2,000 ms; MATCH |
+| P-live-2 | "devnet v0" eyebrow | state | live chain is v4 since 4 Oct; STALE |
+| P-live-3 | "Live devnet" | h1 | |
+| P-live-4 | "A node is read every two seconds. Every block below is real ... A checkpoint locks when the finality rule's quorum signs it. Once the proving layer is activated, every chain block's shards show as they are planned, proven and paid." | claim | |
+| P-live-5 | "Fees: the devnet meters with its prototype table until DAA score 210,000; from there the adopted table applies (300 pgas per transaction, 30,000-pgas shards, floors of 100 gwei per gas and 10,000 gwei per pgas) and the provers' program carries both." | number | fee-switch-devnet.md 3-4, 40, 52; MATCH, turns stale the moment DAA 210,000 passes (tonight) |
+| P-live-6 | Status cell | API | #st-status OFFLINE/LIVE; #st-age "no observer update yet", "observer updated N ago", "observer N s behind, N queued", "api unreachable" after 3 failures |
+| P-live-7 | Network | API | state.network or "igneum-devnet"; "node <version>" |
+| P-live-8 | Blocks / s over 60 s | API | blocks_per_second_60s |
+| P-live-9 | Blue score, blocks | API | blue_score, block_count |
+| P-live-10 | Difficulty | API | difficulty |
+| P-live-11 | Hash rate | API | hashes_per_second_estimate; "n/a" when null |
+| P-live-12 | Identities "vote keys active in 10 min, a card runs several" | API | miners_10m; h-config.sh 11; MATCH |
+| P-live-13 | Peers, mempool | API | peers, mempool |
+| P-live-14 | strip stats: on screen, chain, identities, last lock, proven | API | c-locked "none", "#N, N ago", "none yet", "n/a"; c-proven "pending", "A/B in 10 min" (item 0), "not active", "no proving layer" |
+| P-live-15 | DAG canvas | feature | hover, tap pins, Escape, ?window=30..300, ?perf=1; canvas words listed in the audit's state table |
+| P-live-16 | legend blocks: chain, included paid, pending, excluded, just arrived, selected chain, one lane per miner | feature | |
+| P-live-17 | legend finality: final, locked, proposed, "reads paused whenever under two thirds of the weight is signing" | claim | spec floor; MATCH |
+| P-live-18 | legend proving: planned, proving, verified, paid, where proofs land | feature | |
+| P-live-19 | Miners table (last 10 min): Miner, Blocks, Share, Last seen, Engine | API | d.miners; empty "No blocks in the last 10 minutes."; "not reported" |
+| P-live-20 | "The short id is the first 8 hex characters of the vote key hash ... the devnet miner writes nothing yet." | claim | api/explorer.mjs 21; MATCH |
+| P-live-21 | Events newest first | API | d.events; empty "No events yet." |
+| P-live-22 | Blocks per minute chart and note | API | blocks_per_minute; "no data yet" |
+
+## Miners (site/miners.html, generated by build.mjs from miner-bench.json and miner-priors.json)
+
+| id | text | kind | verdict |
+|---|---|---|---|
+| P-miners-1 | "3 entries, newest at the bottom" | number | the bench template's words; wrong for this page |
+| P-miners-2 | "GPU bench table" | h1 | |
+| P-miners-3 | note "Measured hash rates per card ..." | claim | |
+| P-miners-4 | contents: The table, How a row gets here, Fleet tuning priors | feature | |
+| P-miners-5 | "Integrated GPUs are not listed. Prototype rows say so in the miner column." | claim | |
+| P-miners-6 | Apple M5 Max v1 45.2 MH/s, 2026-10-03 | number | evidence row 3; MATCH |
+| P-miners-7 | Apple M5 Max v2 26.7, 2026-10-04 | number | bench-log 642; MATCH |
+| P-miners-8 | Apple silicon laptop v2 24.3, 21.0 average over 7 min, 33 blocks | number | bench-log 911; MATCH |
+| P-miners-9 | RTX 5090 v1 229, 2026-10-03 | number | evidence row 3; MATCH |
+| P-miners-10 | RTX 5090 v1 185.3 | number | bench-log 98; MATCH |
+| P-miners-11 | RTX 5090 v2 124.2, 2026-10-04 | number | evidence rows 4, 30; MATCH |
+| P-miners-12 | "MH per watt: not measured" on all rows | state | ledger E17 has the 5090 at 326.6 W (0.40 Mhash/J); eleven rented cards with watts on gpu-fleet; STALE |
+| P-miners-13 | "The app reads it on NVIDIA cards through the driver." | claim | |
+| P-miners-14 | "There is no other Igneum miner to compare with yet" | claim | |
+| P-miners-15 | "Rows: 6. Source file: site/miner-bench.json in the repository." | dev text | |
+| P-miners-16 | priors: "within 1% of its top rate", "A model needs 5 reports" | number | ember-tune.md; miner-priors.json; MATCH |
+| P-miners-17 | "No tune reports yet. The first rows appear once five machines with the same card model have reported." | empty state | |
+| P-miners-18 | "Rows: 0. Source file: site/miner-priors.json, written from the fleet records by tools/tuning.mjs --priors --site." | dev text | |
+| P-miners-19 | "Generated from the repository at build time. Times are UTC. Machine names are model names." | claim | |
+
+## Miner (site/miner.html; copy owned by the site-miner agent today)
+
+| id | text | kind | verdict |
+|---|---|---|---|
+| P-miner-1 | meta "every NVIDIA card from 8 GB proves ... a visible 1% software fee" | claim | see P-miner-12 |
+| P-miner-2 | "Igneum Ember · one click" | eyebrow | |
+| P-miner-3 | h1 "Install. Start. The card mines. Every NVIDIA card from 8 GB proves; 12 GB and up mine and prove." | claim | 96 characters |
+| P-miner-4 | lead: finds your GPU, makes a wallet, compiles the next program while the current one mines | claim | |
+| P-miner-5, 6 | "Downloads: public testnet" #get; "Every feature" #features | links | |
+| P-miner-7 | Windows, macOS, Linux, HiveOS, "NVIDIA · AMD · Apple silicon" | claim | |
+| P-miner-8 | screenshot caption "the app is still labelled Igneum Miner until 0.3.6 ... 5 Oct 2026" | date | STALE (0.3.13 still says Igneum Miner) |
+| P-miner-9 | "Hash, prove, get paid": 80% of each block to the finder; PROVE; GET PAID | claim, number | /api/stats split; MATCH |
+| P-miner-10 | "Every feature, one line each"; "Each number links to its engineering log entry." | claim | not true for P-miner-12, 27, 45 |
+| P-miner-11 | "Five steps: drag to Applications, open, Get started, Make me an address, Start mining." | claim | bench-log 908 (Open Anyway step); APPROX |
+| P-miner-12 | "every NVIDIA card from 8 GB proves; 12 GB and up mine and prove; 24 GB on the stock server (eleven rented cards, 6 October 2026, docs/analysis/prover-tiers-real-cards.md); the patched server is not yet in the shipped app." | claim, path | file missing; no bench-log entry; contradicts /evidence row 16; UNSOURCED |
+| P-miner-13 | "Finds your GPU by itself ... NVIDIA through the driver, AMD and Intel through OpenCL, Apple silicon through Metal" | claim | |
+| P-miner-14 to 17 | wallet made for you; earnings in IGN; three OSes; HiveOS package "Hive itself is untested" | claims | |
+| P-miner-18 | "First outside machine ... 33 accepted blocks in 7 minutes, 0 rejected, 21.0 MH/s average" (log, 4 Oct) | number | bench-log 911; MATCH |
+| P-miner-19 | "First card on the app ... 117 to 119 MH/s, 34 accepted blocks in the first minute" | number | bench-log 781; MATCH |
+| P-miner-20 | h3 "Hashing and proving, switched by the client" | heading | 43 characters |
+| P-miner-21 | "assigned, proving, submitted, paid" | claim | |
+| P-miner-22 | "8 suits a big card, 2 a small one, 1 an integrated GPU" | number | h-config.sh 11 (8 from 8 GB else 2); "1" APPROX |
+| P-miner-23 | "Hourly program, no pause" | claim | |
+| P-miner-24 | swap table 4 Oct 2026: M5 Max 82 ms, 0.01 ms, 26.7/26.7, 0; RTX 5090 1,285 ms, 0.00 ms, 121.8/123.4, 0; AMD integrated no restart, 2.74/2.74, 0; "epoch boundary at DAA 3,600" | numbers | bench-log 636, 642-644; MATCH |
+| P-miner-25 | h3 "Signed, over the air, at a safe moment" | heading | 38 characters |
+| P-miner-26 | "Signed over the air ... Ed25519" | claim | |
+| P-miner-27 | "Installed at a safe moment: node synced, no hourly boundary within 3 minutes, no worker starting ... never while the network lost over 30% of its identities in 10 minutes." | number | UNSOURCED |
+| P-miner-28 | "Mining continues through an update ... fails to start twice, the previous one comes back" | claim | |
+| P-miner-29 | "Urgent ... within 1,800 blocks or below the minimum supported" | number | difficulty-v2-rollout-devnet.md 42; MATCH |
+| P-miner-30 | "The fleet tunes itself. Nothing here changes the hash." | claim | |
+| P-miner-31 | "Variant racing every hour ... 2 seconds" | number | bench-log 1103; MATCH |
+| P-miner-32 | "256-thread groups ran 17.3% and 21.2% faster ... The NVIDIA race has not yet run on a GPU." | number | bench-log 1130; MATCH |
+| P-miner-33 | "Fleet tuning manifest" | claim | |
+| P-miner-34 | "Ember Tune ... 60 seconds a step ... within 1% ... the first measured tune is owed." | number | ember-tune.md 42 (75 s per step); APPROX |
+| P-miner-35 | "Latency work ... In progress, no number published yet." | claim | |
+| P-miner-36 | "Remote signed jobs, opt in ... Our own fleet only" | claim | |
+| P-miner-37 | h3 "Watchdog, restart, clock" | heading | |
+| P-miner-38 | "Watchdog per card: no status line for 90 seconds, or a hash rate of 0 for 60 seconds" | number | bench-log 1214-1219; MATCH |
+| P-miner-39 | "Watchdog per node: 120 seconds ... silent node to mining again in 160.0 s" | number | MATCH |
+| P-miner-40 | "Restart in order" | claim | |
+| P-miner-41 | "A clock 60 seconds slow kept a node silently dead for 12 minutes ... over 5 s a warning, over 10 s Start is blocked" | number | bench-log 780; evidence row 30 says 62 s; APPROX |
+| P-miner-42 | recoveries table 4 Oct 2026: 91.0 s, 75.4 s to faulted, 101.4 s, 160.0 s; "a fake worker, no real GPU" | number | bench-log 1214-1219 (101.4 is a sum); MATCH |
+| P-miner-43 | "The log and the bench table. Every number on this page has a row." | claim | not true, see above |
+| P-miner-44 | Engineering log /bench; GPU bench table /miners; "Your rows, from your machine ... once a minute under a per-install id" | link, claim | |
+| P-miner-45 | "Why Igneum Ember stays ahead. Six levers, set on 4 October 2026." | number, date | no document lists six; UNSOURCED |
+| P-miner-46 | lever 1: "five to ten kernel variants ... two seconds each ... +17.3% ... +21.2%" | number | bench-log 1101 (no count); APPROX |
+| P-miner-47 | lever 2: "Shipped. The fleet is still small, so no fleet table yet" /miners#priors | state, link | |
+| P-miner-48 | lever 3: NVIDIA and AMD built, measured only on Apple | claim | |
+| P-miner-49 | lever 4: "within 50 ms ... Approximate, from the 0.3.6 release plan: p50 46 to 52 ms, 5 Oct 2026. Ships in 0.3.6." | number | release-0.3.6.md 73; "Ships in 0.3.6" STALE |
+| P-miner-50 | lever 5: swap 0.01 / 0.00 ms, 0 rejected | number | MATCH |
+| P-miner-51 | lever 6: "Live at /miners" | link | |
+| P-miner-52 | "The dev fee is the software's 1% ... The protocol carries no fee." #fee | claim | |
+| P-miner-53 | "The fee, in full view; no dev fund, no fee to any team, foundation or fund" | claim | |
+| P-miner-54 | "1% dev fee ... one block template in 100 ... Igneum Labs LTD ... a template counter, never a random draw" | number | MATCH |
+| P-miner-55 | off table: Settings switch, --dev-fee 0, DEV_FEE=0 | feature | |
+| P-miner-56 | "Measured on a test network, 4 Oct 2026: 9 fee blocks in 785 (1.146%); the control paid none" | number | bench-log 1226, 1252; MATCH |
+| P-miner-57 | switch mock "Dev fee 1% (1 block in 100)" | feature | |
+| P-miner-58 | start lines; "igneum-miner payouts lists blocks per payout address" | dev text | |
+| P-miner-59 | "Get the miner. Download only from this domain. Nobody from Igneum will ask for your seed." | claim | |
+| P-miner-60 | "Public testnet: not yet open; the devnet build is here for people who want to look." | state | ledger X2 |
+| P-miner-61 | "Devnet: coins have no value and the chain may be reset." | claim | |
+| P-miner-62 | Windows, macOS, Linux, HiveOS buttons "v0.3.13 · 45.4 / 41.9 / 24.6 / 24.6 MB" | number | host 0.3.14; STALE (repo copy) |
+| P-miner-63 | Hive Flight Sheet: URL igneum-hive-0.3.13.tar.gz (404), miner igneum, wallet 0x<40 hex>.%WORKER_NAME%, pool grpc://<your node>:26610 or local, extra DEV_FEE=1 IDENTITIES=8 WORKER=auto VOTE=1, sha256 65ea4260... | number, dev text | URL 404, hash of a dead file; port 26610 fork-divergence.md 17 MATCH |
+| P-miner-64 | "the faucet sends 10 IGN per address per day. Any 4 GB card at launch. The dataset starts at 2 GB and grows (2 GB, doubling at years 4, 12 and 28), so a 4 GB card mines for about four years, approximate." | number | api/faucet.mjs 8-9; evidence row 31; MATCH, APPROX |
+| P-miner-65 | "Read more in the litepaper" /litepaper#miners | link | exists |
+| P-miner-66 | band "Every number here has a row." + Engineering log, Bench table | claim, link | |
+
+## Wallet (site/wallet.html; content owned by the wallet-ui-3 agent today)
+
+| id | text | kind | verdict |
+|---|---|---|---|
+| P-wallet-1 | meta "24 words sealed ... MetaMask export. Reads your own node when the miner is installed." | claim | |
+| P-wallet-2 | "Igneum Wallet · desktop" | eyebrow | |
+| P-wallet-3 | h1 "Your coins. Final means final." | heading | aphorism; 30 characters |
+| P-wallet-4 | lead "verifies every finality certificate itself with the node's own code. No confirmation counts, no trusting the node." | claim | antithesis |
+| P-wallet-5 | "Download: public testnet" #get; "How final works" #finality | links | |
+| P-wallet-6 | "macOS first", "Windows next", "MetaMask export" | state | |
+| P-wallet-7 | screenshot "Igneum Wallet on a private test network, 5 Oct 2026. The address is an example." | date | |
+| P-wallet-8 | "Three states, checked here": pending; "Chain block 8"; "final · cp 5 ... 30-second checkpoint ... aggregate BLS signature, two thirds of all weight" | claim, number | explorer.md 43; evidence row 10; MATCH |
+| P-wallet-9 | second screenshot "1.5 IGN, final under checkpoint 5, certificate verified by the wallet" | number | |
+| P-wallet-10 | four checks before "final" | claim | |
+| P-wallet-11 | "The same steps the browser verifier on the home page runs ... The node's own 'locked' field is never read." | claim | |
+| P-wallet-12 | "Every feature, one line each. Version 1, built on the miner's bones" | claim | |
+| P-wallet-13 | h3 "Create or import, sealed on your disk" | heading | 37 characters |
+| P-wallet-14 | "Create: 24 words ... 256 bits ... three typed back" | number | UNSOURCED in repo (wallet source elsewhere) |
+| P-wallet-15 | "Import ... the miner's own payout key file" | claim | |
+| P-wallet-16 | "Argon2id (64 MiB, 3 passes) ... XChaCha20-Poly1305 ... one file in your user folder" | number | UNSOURCED in repo |
+| P-wallet-17 | "BIP-39 and BIP-44 at the Ethereum path" | claim | |
+| P-wallet-18 | "Signing happens in the engine, in Rust." | claim | |
+| P-wallet-19 | Balance; Send (EIP-1559, zero address and over-balance refused); Receive QR (SVG); History with rewards; Finality per transaction; Lock | claims | |
+| P-wallet-20 | "Reads the miner's node first": 1 miner app's node, 2 public RPC, 3 bundled node; "Updates, signed ... Ed25519 ... checked an hour apart" | claim | evidence row 23; MATCH |
+| P-wallet-21 | MetaMask: Add to MetaMask, Export the key, "Desktop first: macOS now, as a disk image. The Windows host is written and untested. No browser extension and no phone app yet." | claim, state | |
+| P-wallet-22 | "The first run, timed. A private test network, 5 Oct 2026 ... The log entry ships with the wallet." | date, claim | |
+| P-wallet-23 | table: 0.3 s; 0.4 to 0.5 s "word 1 is not right"; 3.5 s "10.14 IGN at block 4"; 4.5 s; 4.6 s "gas 25,380; base fee 1 gwei; tip 1 gwei; fee at most 0.00007614 IGN"; 5.6 s chain block 8; about 170 s index 5; 175.2 s "1 of 1 voters, 100% of total weight"; 175 s | numbers | not in docs or /bench; UNSOURCED in repo |
+| P-wallet-24 | "Send to final: 170.6 s ... On the live devnet checkpoints lock every 30 seconds once the weight window is full. 13 unit tests cover ..." | number | UNSOURCED in repo |
+| P-wallet-25, 26 | "Get the wallet. Download only from this domain ..."; the two notices | claim, state | |
+| P-wallet-27 | macOS "v0.1.4 · 19.6 MB"; Windows "next" disabled; MetaMask #metamask | number, feature | host 0.1.4, 19,607,181 bytes; MATCH |
+| P-wallet-28 | "reads this machine's node when the miner is installed" /miner; "Read more in the litepaper" /litepaper#miners | link | |
+| P-wallet-29 | band "The miner pays this wallet." + The miner | claim, link | aphorism |
+
+## Bench (site/bench.html, generated from docs/bench-log.md through site/scrub.mjs)
+
+| id | text | kind | verdict |
+|---|---|---|---|
+| P-bench-1 | "83 entries, newest at the bottom" | number | 83 h2 in markdown, 83 on the page; MATCH |
+| P-bench-2 | h1 "Engineering log" | heading | the markdown's own h1 is rendered and hidden by CSS |
+| P-bench-3 | note "Every measurement the project has made, newest at the bottom, written by the people and agents who ran it, with the commands and hardware. Prototype numbers are not mining numbers and say so." | claim | |
+| P-bench-4 | contents, 83 links | feature | TOC text keeps raw backticks; some headings over 150 characters |
+| P-bench-5 | "Generated from the repository at build time. Times are UTC. Machine names are model names." | claim | |
+
+Heading comparison: every difference is a scrub rename ("Mac" to "Apple M5 Max" 9 times, "Windows PC" to "an RTX 5090 on Windows", "Hetzner" to "the cloud provider"); 18 h3 both sides; the newest 6 Oct entry is present. Rendered headings keep commit hashes and internal names (6c75dad, b970dda, revm, viem, SP1, PC 1, PC 2, DAA 33,000) by design of the generator.
+
+## Evidence (site/evidence.html, rows generated from docs/evidence.md)
+
+| id | text | kind | verdict |
+|---|---|---|---|
+| P-evid-1 | meta "Nothing has been reproduced or reviewed yet." | claim | |
+| P-evid-2 | "31 claims · 5 labels · 6 Oct 2026" | number, date | 31 rows; the date is the build date and says so |
+| P-evid-3 | h1 "Evidence" | heading | |
+| P-evid-4 | the five label definitions; "Nothing on this chain has been reproduced externally or reviewed independently; every row says so"; "The 12-node cloud network of 4 October 2026 is the project's own" | claim | 70-word sentence |
+| P-evid-5 | tiles designed 6, implemented 3, tested by the team 22, reproduced externally 0, reviewed independently 0; "None yet. The repository is private until the public testnet"; funding plan | number | evidence.md's own count table says 5 designed and sums to 30; the page buckets row 17 as designed |
+| P-evid-6 | filter chips 31, 6, 3, 22, 0, 0 | feature | |
+| P-evid-7 | "The table is wider than this screen. Scroll it sideways." | feature | under 1,140 px |
+| P-evid-8 | columns #, Claim, Status, Version or commit, Reproducible test, Result date machine, Independent verification; sortable | feature | |
+| P-evid-9 | 31 rows | generated | every row ends "none yet"; scrub artefacts "the Apple M5 Max M5 Max" (row 1), "a an RTX 5090 on Windows with an RTX 5090" (row 30) |
+| P-evid-10 | note "Click a column heading to sort ... igneum-pow is the Rust crate at version 0.2.0 ... Source of every number: the engineering log. The source of this page is docs/evidence.md" | claim, path | |
+| P-evid-11 | "What would move a row" table; "Funding for review is docs/plans/funding.md" | claim, path | mirrors evidence.md 94-101 |
+| P-evid-12 | "Statuses are honest as of 6 October 2026, the day this page was generated from docs/evidence.md" | date, path | |
+
+Markdown headings not rendered: "What moved on 4 October 2026", "What moved on 5 October 2026" (two tables not shown anywhere on the site).
+
+## Ledger (site/ledger.html, generated by tools/ledger-page.mjs from docs/fud-ledger.md)
+
+| id | text | kind | verdict |
+|---|---|---|---|
+| P-ledger-1 | meta "167 entries. Nothing deleted, nothing softened." | number, claim | antithesis |
+| P-ledger-2 | "Ledger · 167 entries · regenerated from the repository" | number | 167 ids both sides; MATCH |
+| P-ledger-3 | h1 "Every criticism, answered or conceded" | heading | 37 characters |
+| P-ledger-4 | intro: "167 entries since 3 October 2026 ... The founder mined through the GPU years. Ethereum's move to proof of stake in September 2022 ended that income ... one person building, with AI systems doing the engineering ... This ledger is the application form" + mailto | claim | |
+| P-ledger-5 | counts Open 7, Conceded 53, Fixed or built 54, Closed by rule or decided 27, Answered with evidence 13, Answered by design 13, All 167; section links | number, feature | md table (17:30 UTC): Fixed 57, Conceded 53, Answered 28, Decided 29, Open 7; the page buckets on the status's first word |
+| P-ledger-6 | search "Search the ledger", "N of 167 shown" | feature | |
+| P-ledger-7 | 167 cards: id, title, date, quote, status, "The answer as first written" | generated | the renderer drops 165 "Evidence:" lines and the "Decision owner:" lines; 40 section h2 with duplicate ids (anchors land on the first) |
+| P-ledger-8 | "Source: docs/fud-ledger.md in the repository, rendered by tools/ledger-page.mjs ... hello@igneum.network or an issue on the specification repository." | path, link | |
+
+Left on the public page by the ledger's own scrub list: "PC 2" 15 times, "the Mac" 19 times, `~/.config/igneum` 5 times, "pid 33114", `--rpclisten=0.0.0.0:26610`. The ledger renderer skips the forbidden-strings hard stop.
+
+## Explorer (site/explorer.html)
+
+| id | text | kind | element, states, verdict |
+|---|---|---|---|
+| P-expl-1 | "devnet, last 24 hours" | claim | api/explorer.mjs 87 keeps one day; MATCH |
+| P-expl-2 | h1 "Explorer" | heading | |
+| P-expl-3 | "Every block the devnet made in the last day, read from a node by the observer. Paste a block hash, a transaction hash, a chain block number or an address." | claim | |
+| P-expl-4 | search form, placeholder | feature | |
+| P-expl-5 | #msg | state | "Not a block hash, a transaction hash, a chain block number or an address." / "Looking." / API error or "Not found." / "The API did not answer." |
+| P-expl-6 | Status | API | OFFLINE/LIVE; "no observer update yet", "last update N ago", "<network>, node <version>" |
+| P-expl-7 | Height; "chain block number, N blocks in the DAG" | API | height or "n/a" |
+| P-expl-8 | DAA score; blue score | API | |
+| P-expl-9 | Difficulty; "target 1 s per block" or "N s per block over 60 s" | API | "n/a" when null |
+| P-expl-10 | Hash rate | API | "n/a" when null |
+| P-expl-11 | Block reward IGN; split | API | |
+| P-expl-12 | Circulating; "of 4,000,000,000 by the rule" | API | MATCH |
+| P-expl-13 | Next halving; ramp | API | |
+| P-expl-14 | "Latest blocks", "newest first, every 5 s" or "observer offline, last known" | API | setInterval 5,000; MATCH |
+| P-expl-15 | table Block, Number, DAA, Blue score, Miner, Txs, Proof records, Time | API | "Loading."; empty "No blocks in the last 24 hours."; "off chain"; "n/a"; "★" locked |
+| P-expl-16 | legend chain block, blue merged and paid, red excluded, pending, ★ locked checkpoint | feature | |
+| P-expl-17 | note "Number is the chain block number, the same number the EVM reports ... Miner is the payout address the coinbase names. Proof records is how many shard proofs the block carries for earlier blocks." | claim | |
+| P-expl-18 | "Older blocks" | feature | loads 50 more; the 5 s refresh stops for good after the first click |
+| P-expl-19 | "Public API, JSON, cached 10 s" | claim | stats and supply 10 s, explorer 5 s; APPROX |
+| P-expl-20 | /api/stats field list | link | MATCH |
+| P-expl-21 | /api/supply "circulating, cap, halving table, 30-day ramp, the observer's coinbase check" | link | no `check` field in today's payload; UNSOURCED today |
+| P-expl-22 | /api/explorer?blocks=20 and its parameters | link | MATCH |
+| P-expl-23 | note "Reward and supply come from the emission rule (section 2.5) ... the observer checks the chain's coinbase sums against it every hour and the result is in /api/supply under check." | claim | see P-expl-21 |
+
+Bad query: empty or unrecognised text shows the "Not a block hash ..." sentence; an address redirects to /address/<value> unchecked; a hash or number asks the API and shows its 404 text; network failure "The API did not answer."
+
+## Block (site/block.html)
+
+| id | text | kind | verdict |
+|---|---|---|---|
+| P-block-1 | noindex; "Explorer · block" | link | |
+| P-block-2 | h1 "Block" then the hash, or "Chain block N" | API | |
+| P-block-3 | chips: chain block or colour; "checkpoint N, <state>"; "N proof records"; "N transactions" | API | |
+| P-block-4 | #msg API error, "Not found.", "The API did not answer: <message>" | state | |
+| P-block-5 | summary: Number or "none, not a chain block"; Time; DAA; Blue score; Miner or "n/a"; Coinbase address; Vote key id and hash ("n/a"); Engine; Difficulty or "n/a"; "Declared subsidy N IGN E(DAA) of spec 2.5, paid when a later chain block merges this one" or "n/a"; "Coinbase paid N IGN"; Merged by "itself" / link / "not yet"; Selected parent or "n/a" | API | /api/stats source; MATCH |
+| P-block-6 | header: Hash, Version, Bits, Nonce, Blue work, merkle roots, UTXO commitment, Pruning point, Parent levels | API | raw header fields, an explorer's job |
+| P-block-7 | Parents "N at level 0" or "Genesis has no parents."; Children "seen within 10 min" or "No child seen yet." | API | |
+| P-block-8 | Mergeset or "Empty."; note on red blocks | claim | |
+| P-block-9 | Transactions "N EVM, 1 coinbase"; coinbase outputs "proving pool (burns on the UTXO side, credited on the EVM side)"; "N proof records, a key reveal, certificate N"; tx table ("needs an EVM RPC"); "No EVM transactions in this block." | API | |
+| P-block-10 | Proof records: "N shards planned for this chain block" / "not a chain block"; "carries N proof records for earlier chain blocks (274 bytes each, in the coinbase extra data)"; shard table; "No shard plan recorded (the proving feed was not reading this block)." | API, number | spec 07 112; MATCH |
+| P-block-11 | Finality: "checkpoint N" / "carries a certificate" / "not a checkpoint"; State, Signed weight "N of N (X% of all weight, X% of active)", Votes, Locked; "Verify: /api/checkpoint serves the newest certificate"; "Checkpoints are every 30 blue score; a lock needs two thirds of all 30-day weight." | API, claim | explorer.md 43; MATCH |
+
+Bad query: /block with no id asks ?block=block, the API answers 400 "A block hash is 64 hex characters."; unknown hash: 404 "No block with that hash in the last 24 hours. The explorer keeps one day; older blocks live in the node."; unknown number: "No chain block numbered N in the last 24 hours."
+
+## Address (site/address.html)
+
+| id | text | kind | verdict |
+|---|---|---|---|
+| P-addr-1 | noindex; "Explorer · address"; h1 the address | API | |
+| P-addr-2 | chips "EVM payout address" / "coinbase address"; "mining now" | API | |
+| P-addr-3 | #msg | state | |
+| P-addr-4 | Balance "n/a" then IGN or "n/a"; sub-line default "eth_getBalance", then source or reason ("no EVM RPC configured on this deployment (EXPLORER_EVM_RPC)") | API | today every address shows "n/a" and the env-var sentence |
+| P-addr-5 | "Blocks, 24 h"; "N in 10 min, N blue, N red, N on the chain" | API | |
+| P-addr-6 | "Earned, 24 h" IGN; "80% of each blue block's subsidy" | API, claim | MATCH |
+| P-addr-7 | "Last block" "n/a" then relative or "none in 24 h"; "first in the window N ago" | API | |
+| P-addr-8 | identity: EVM address or "none seen"; coinbase address; vote keys or "none"; earned; note "A miner names its EVM payout address in every coinbase (the IGNA tag) ... a card runs several." | API, claim | |
+| P-addr-9 | "Blocks mined, newest 50 of the last 24 hours"; table; "off chain"; "n/a"; empty "No blocks from this address in the last 24 hours." | API | |
+
+Bad query: /address with no address sends ?address=address, the API answers 400 "An address is 0x plus 40 hex characters, or an igneum bech32 address."; an unseen well-formed address returns zeros with no distinct "never seen" sentence.
+
+## Faucet (site/faucet.html)
+
+| id | text | kind | verdict |
+|---|---|---|---|
+| P-fauc-1 | title "Igneum testnet faucet. 10 IGN a day for testing"; meta | number | api/faucet.mjs 8-9; MATCH |
+| P-fauc-2 | "Testnet faucet"; h1 "10 IGN a day, for testing." | number | |
+| P-fauc-3 | "Paste an address. The faucet sends 10 testnet IGN and shows the transaction hash. Once per address per day, once per connection per day. No account, no sign-in." | claim | |
+| P-fauc-4 | "Public testnet: not yet open. The faucet is prepared on the devnet and answers 'not open yet' until the testnet starts." | state | API text "The faucet is not open yet. It opens with the public testnet."; APPROX |
+| P-fauc-5 | "Ask for 10 IGN. An Ethereum-style address: 0x and 40 hex characters." | claim | |
+| P-fauc-6 | form; "Send 10 IGN"; #status words: "That is not an address ...", "Sending…", "Sent 10 IGN. Transaction <hash>. It is in a block within a few seconds.", API error or "The faucet answered N.", "The faucet did not answer. Try again in a minute." | feature | |
+| P-fauc-7 | rules 01 to 04: no value, "Mainnet starts from an empty genesis"; 10 IGN per address per day, resets 24 h after the last grant; resets at a consensus change; stored: address, IP, tx hash, time, 24 hours | claim, number | faucet.mjs 73, 77, 78; MATCH; "Mainnet starts from an empty genesis" APPROX (plan) |
+| P-fauc-8 | "Chain id 4462 (testnet), 4463 (devnet)"; MetaMask /metamask; Get the miner /miner#get | number, link | spec 07 20; MATCH |
+
+## MetaMask (site/metamask.html; canonical set to /wallet)
+
+| id | text | kind | verdict |
+|---|---|---|---|
+| P-mm-1 | "Wallets · chain id · RPC"; h1 "Add Igneum to MetaMask" | heading | |
+| P-mm-2 | note: EVM, chain id, RPC, symbol IGN, 18 decimals, wallet_addEthereumChain; "Nobody from Igneum will ask for your seed." | claim | |
+| P-mm-3 | Testnet card: Igneum Testnet; 4462 (0x116e); rpc.testnet.igneum.network (published with the testnet); IGN; 18; button disabled; "switches on when the public RPC is live" | number, state | spec 07 20; MATCH as placeholder |
+| P-mm-4 | Devnet card: Igneum Devnet (local node); 4463 (0x116f); http://127.0.0.1:26790; "Explorer: none yet" | number, state | bench-log 284 port MATCH; "none yet" STALE (/explorer is live) |
+| P-mm-5 | button states: no wallet found; waiting; added; cancelled; refused | feature | |
+| P-mm-6 | "Add it by hand", four steps | claim | |
+| P-mm-7 | "For builders" code block; EIP-155, EIP-1559, legacy; eth_gasPrice, eth_estimateGas; /litepaper#builders-ask | claim, link | exists |
+| P-mm-8 | "The app and the Igneum Wallet": "The Igneum Miner app makes an address ... An Igneum Wallet ... is in the roadmap; until it ships, MetaMask is the wallet." | claim | STALE (wallet 0.1.4 ships; the app is Ember) |
+| P-mm-9 | "10 IGN per address per day. Chain ids 4461 (mainnet), 4462 (testnet), 4463 (devnet) fixed in the node. The testnet RPC URL above is a placeholder" | number, claim | spec 07 20, 60; MATCH |
+
+## 404 (site/404.html)
+
+| id | text | kind | verdict |
+|---|---|---|---|
+| P-404-1 | title "Page not found. Igneum"; noindex | | |
+| P-404-2 | "404"; h1 "Nothing is mined here." | heading | aphorism |
+| P-404-3 | "That address is not on igneum.network. It may have moved, or the link had a typo. These four pages are everything the site has." | claim | STALE: fifteen pages |
+| P-404-4 | "Litepaper: How the chain works, in 17 sections" | number | 19 sections; STALE |
+| P-404-5 to 7 | Live devnet; Engineering log; Evidence | links | no miner, wallet, explorer or ledger card |
+
+## Scrub rules (site/scrub.mjs, site/forbidden-strings.txt), applied to bench, miners and the evidence rows
+
+| rule | what changes | why |
+|---|---|---|
+| scrub 12-17 | PC and Windows PC wording becomes RTX 5090 wording | machine names become model names |
+| 18-20 | the Mac becomes Apple M5 Max | same |
+| 21-22 | the project lead becomes the maintainers | identity |
+| 23 | " Not deployed to Vercel tonight." removed | host name |
+| 25-27 | private IPs and DESKTOP- hostnames become placeholders | private addresses |
+| 28-30 | igneum-seed-N, Hetzner, hcloud become generic words | provider names |
+| 31-33 | server paths and dl.igneum.network become placeholders | server paths |
+| 34-35 | intake ids removed | upload identifiers |
+| 36-39 | home paths become ~ and %USERPROFILE% | user names |
+| 41-43 | docs/fud-ledger.md becomes "the break ledger (kept by the maintainers, not yet published)"; CLAUDE.md becomes "the design document" | the ledger is now published at /ledger: this rewrite is STALE |
+| 45-50 | BST times to UTC | the log is written in UTC+1 |
+| forbidden-strings 1-25 | build fails on any survivor (hostnames, private IPs, BST, home paths, intake, Tailscale, the project lead, Hetzner, seed names, server paths, dl host, CLAUDE.md, hcloud) | hard stop |
+
+Side effects today: "the Apple M5 Max M5 Max" (evidence row 1), "a an RTX 5090 on Windows with an RTX 5090" (evidence row 30), "the 12-node the cloud provider network" (journey log). The ledger page uses its own list and skips the hard stop.
diff --git a/docs/plans/site-ui-3.md b/docs/plans/site-ui-3.md
new file mode 100644
index 000000000..c1e13b8eb
--- /dev/null
+++ b/docs/plans/site-ui-3.md
@@ -0,0 +1,215 @@
+# Site UI 3: the website and litepaper through the miner app's lens
+
+6 October 2026. Branch `site-ui-3`. The audit is `docs/plans/site-ui-3-audit.md`; this is the design the build follows.
+The standard is the miner app's third redesign (`docs/plans/miner-ui-3.md` on branch `miner-ui-3`): one job per screen,
+one primary control, hierarchy by type not boxes, no developer text on a user surface, no n/a cells, plain state words with
+reasons, light and dark, phone width, nothing lost.
+
+## 1. What changes and what does not
+
+| Stays | Changes |
+|---|---|
+| Every claim, number, date, link and feature in the audit's tick list (appendix A of the audit) | Fifteen pages each carrying their own `<style>` become one shared stylesheet, `site/site.css`, plus a short per-page block |
+| The ledger's statuses and stated sentences, verbatim (`docs/fud-ledger.md`) | Copy edited to the copy law where it is not a ledger sentence or a measured figure |
+| The live pages read `/api/live`, `/api/stats`, `/api/supply`, `/api/explorer` | The two canvas scenes (home, live) become one module, `site/live-dag.js`, a real DAG view |
+| The nav's pages and the footer's links | Nav and footer rebuilt once in `site/partials/`, same links, one visual system |
+| Dark by default | Light mode on every page (today only the litepaper has one, and it is light by default: inverted against the rest of the site) |
+
+## 2. The design system (`site/site.css`)
+
+One file, loaded by every page from the head partial. Tokens first, then type, then the six components every page shares
+(nav, footer, card, tile, table, button), then the state words. Page blocks stay under 60 lines each.
+
+### 2.1 Colour tokens
+
+The app's set (`app/igneum-app/ui/app.css` on `miner-ui-3`, lines 19-33), with two site additions for text accents in
+light mode, because the app's light ember and molten fail 4.5:1 as body text (measured in the audit, section 6).
+
+| Token | Dark | Light | Use |
+|---|---|---|---|
+| `--obsidian` | #0C0C0E | #F4F1EC | page |
+| `--graphite` | #16161A | #FFFFFF | card |
+| `--row` | #111114 | #FAF8F5 | row, table stripe, code |
+| `--line` | #2A2A30 | #E2DED8 | every hairline |
+| `--line-2` | #3A3A42 | #CFCAC2 | hover, open, input borders |
+| `--ember` | #F2541B | #D0420D | the one primary fill per page, the live dot, the lock ring (white text on it: 4.7:1) |
+| `--ember-hi` | #FF6A2B | #E04A14 | primary hover |
+| `--ember-text` | #F2541B | #B8390C | ember as text and as a link (5.1:1 on the light page) |
+| `--molten` | #FFB35C | #B8731F | the proving fill, the active pill |
+| `--molten-text` | #FFB35C | #8F5810 | molten as text (5.2:1 on the light page) |
+| `--bone` | #F4F1EC | #16161A | ink |
+| `--ink-2` | #C9C7C2 | #3C3C42 | body on cards |
+| `--ash` | #9A9A9E | #6B6B70 | labels, notes, units |
+| `--ember-ink` | #0C0C0E | #FFFFFF | text on an ember fill |
+| `--ok` | #FFB35C | #B8731F | a verified tick |
+| `--scrim` | rgba(12,12,14,.72) | rgba(244,241,236,.72) | menu scrim |
+| `--top-bg` | rgba(12,12,14,.86) | rgba(244,241,236,.88) | sticky nav |
+| `--shadow` | rgba(0,0,0,.6) | rgba(0,0,0,.18) | the one shadow, on the menu sheet and the hero frame |
+
+Theme: `prefers-color-scheme` plus `html[data-theme]`, and a System / Light / Dark control in the footer, stored in
+`localStorage` under `igneum-theme`. Every page gets `color-scheme` set so form controls and scrollbars follow.
+No filled tint field anywhere except `::selection` (the app's rule, `miner-ui-3.md` 302-306); the litepaper's `--tint`
+callouts become a row surface with a 1 px ember hairline on the left.
+
+### 2.2 Type
+
+Three faces, each with one job (the app's rule, `miner-ui-3.md` 170).
+
+| Face | Job on the site |
+|---|---|
+| Unbounded 700 and 900 | the wordmark, page titles, section titles, hero numbers, the one primary button |
+| IBM Plex Sans 400, 500, 600 | every sentence |
+| IBM Plex Mono 400, 500 | eyebrows, units, labels, hashes, addresses, counters, code |
+
+Scale (px; the web scale sits two steps above the app's because the reading distance is longer):
+
+| Token | Size | Line | Use |
+|---|---|---|---|
+| `--t-xs` | 11 | 1.4 | mono units under a number |
+| `--t-sm` | 12 | 1.4 | eyebrows (0.16em tracking, uppercase), table heads, footer imprint |
+| `--t-base` | 15 | 1.55 | table cells, captions, notes |
+| `--t-md` | 17 | 1.6 | body |
+| `--t-lg` | 19 | 1.5 | lead paragraphs |
+| `--t-h3` | 20 | 1.25 | card titles (Unbounded 700) |
+| `--t-h2` | clamp(26, 3.2vw, 36) | 1.1 | section titles (Unbounded 700) |
+| `--t-h1` | clamp(32, 5vw, 56) | 1.05 | page titles (Unbounded 900, -0.01em) |
+| `--t-hero` | clamp(40, 7vw, 76) | 0.98 | the home headline only (Unbounded 900, -0.02em) |
+| `--t-num` | clamp(26, 3vw, 40) | 1 | hero and tile numbers (Unbounded 700, tabular) |
+
+Headings use `text-wrap: balance`; paragraphs `text-wrap: pretty`. Headings are written under 28 characters where they
+can be, and the build's orphan check (section 6) fails a heading that leaves one word on its own line at 390 px.
+
+### 2.3 Space, radius, shadow
+
+| Token | Value |
+|---|---|
+| `--s-1` to `--s-6` | 4, 8, 12, 16, 24, 32 |
+| `--gutter` | 32, 24 under 1000 px, 16 under 720 px |
+| `--sec` | 96 between sections, 64 under 720 px |
+| `--max` | 1120 px |
+| `--r-card` | 16 |
+| `--r-row` | 12 |
+| `--r-btn` | 10 |
+| `--r-pill` | 999 |
+| shadow | none on cards; `0 30px 80px var(--shadow)` on the menu sheet and the one hero frame |
+
+Every surface has a 1 px `--line` border and no shadow. Hierarchy comes from type and space, not from stacked boxes:
+a page is a column of sections, each with an eyebrow, a title, one paragraph and then its content; cards are used only
+where a thing has edges (a live scene, a download, a table that scrolls).
+
+### 2.4 Components
+
+| Component | Rule |
+|---|---|
+| Nav | sticky, 64 px, `--top-bg` blur; wordmark left; the pages as text links; one primary button (Download) on the right; under 900 px a burger that opens a sheet listing the same links, the primary button last, the theme control at the bottom |
+| Footer | four columns at 1120, two at 720, one under 500; same links as today; the imprint line and the theme control; no claims in the footer |
+| Card | `--graphite`, 1 px line, `--r-card`, padding `--s-5`; a card title is Unbounded 20 |
+| Tile | a number (`--t-num`) over a mono label; four across, two under 700 px; never a bare 0: a tile with no reading shows the state word in place of the number |
+| Table | full width, 15 px; th mono 12 uppercase ash, left aligned; td border-top 1 px line; numbers right aligned, tabular; on phones the table scrolls inside its card with a fade at the right edge, the first column sticky |
+| Button | primary: ember fill, ember-ink, Unbounded 700 15, 44 px tall; secondary: 1 px line, bone text; under 720 px the primary is full width |
+| Pill | `--r-pill`, mono 12, a dot: molten for live, ash for off, ember for failed |
+| Note | ash 15 px paragraph under a scene or table, saying where a number comes from |
+| Callout | row surface, 1 px ember hairline on the left, body text (replaces the litepaper's tint boxes) |
+| Code | `--row`, mono 14, no shadow |
+
+### 2.5 State words
+
+A live element is always in exactly one state and says it in words, with the reason (the app's rule, `miner-ui-3.md` 39).
+
+| State | Words on the page | Dot |
+|---|---|---|
+| fresh | `live devnet` | molten |
+| connecting | `connecting to the devnet observer` | ash |
+| stale | `observer offline, last update N min ago` | ash |
+| failed | `live feed unavailable` | ember |
+| not active | `proving not active` or `finality paused` with the reason the API gives | ash |
+| empty | one sentence with the reason: `No blocks in the last 90 seconds. The observer is reading a node that has fallen behind.` | ash |
+
+Block and proof words are the ledger's: `pending`, `included`, `excluded`, `proven`, `locked`. A counter without a reading
+shows `pending` (a value the API has not reported yet) and never `n/a`, `--` or `0`.
+
+### 2.6 Focus and motion
+
+Every focusable element has the 2 px ember outline at 3 px offset (today's rule, kept). Skip link kept. `prefers-reduced-motion`
+stops every canvas animation and shows a still frame with the same counters. Scroll-reveal animations are removed:
+content is visible on load (the audit found revealed sections invisible to a screenshot and to a slow scroller).
+
+## 3. The home page: one screen tells the story
+
+Reading order on a 1440 screen, each block one viewport or less; on a phone the same order, stacked.
+
+| # | Block | Job | Primary action |
+|---|---|---|---|
+| 1 | Headline and lead | what Igneum is in two sentences; the three facts as tiles (1 block/s, 0 premine, 4 B cap) | Download the miner |
+| 2 | Live scene | the chain proving itself: the live-dag module with chain block, shards proven, last lock; the state word | none (the scene links to /live) |
+| 3 | Three proofs a sceptic checks | the light client in this tab (checkpoint verified here), the ASIC model with its numbers, the ledger of what we do not claim | each links out |
+| 4 | Download | the three installers with version and size, the hash verification line | Download |
+| 5 | How it works | the hourly program, mining versus proving, finality, in three short cards | Read the litepaper |
+| 6 | Journey | the phases and the log, as today, collapsed to the current phase with a "show all" | none |
+
+Every sentence of today's hero lead survives, split across blocks 1, 3 and 5 so no paragraph runs past 60 words. The
+"Mined by GPUs. Proven by fire." line is the tagline the ledger allows (row 820); it stays as the headline.
+
+## 4. The litepaper: a readable long-form document
+
+| Rule | Detail |
+|---|---|
+| Measure | 68 ch body, 17 px, 1.6 |
+| Section nav | sticky left rail at 1120+ listing every section, the current one marked; a top "contents" dropdown under 1000 px |
+| Numbers | every measured figure in a table with its source column (bench-log date, or "approximate") |
+| "What we do not claim" | every such sentence kept verbatim, set as the callout component so it is seen, not hidden in a tint box |
+| Footnotes | kept, as a numbered list at the end with return links |
+| Theme | dark by default like the rest of the site, light on request; the paper's light default goes |
+| Print | a print stylesheet: no nav, no rail, black on white, tables unbroken, links shown with their URL |
+
+## 5. Per-page notes
+
+| Page | One job | Primary action | What moved | States |
+|---|---|---|---|---|
+| Home | say what Igneum is, show it alive, offer the download | Download the miner | the chip numbers to the sceptic card; the testnet terms behind a chevron; the simulation gone, the DAG module in | connecting, live, stale, failed in words; counters read the chain |
+| Litepaper | read the paper | none (reading) | whole paper by default, the section mode kept; dark like the site; file paths off the surface; stale facts dated or corrected | print prints the whole paper |
+| Live | watch the chain | Pause | the lane chart replaced by the DAG module; the tiles kept; "n/a" to "pending" | connecting, live, stale, failed; "proven A/B in 10 min" |
+| Miners | the bench table | none | the eyebrow says what the page counts; the source-file notes become sentences | "not measured" with its reason |
+| Miner | install, start, download | Download (the site-miner agent's copy; styled only) | shared chrome and tokens | the devnet and testnet notices |
+| Wallet | what the wallet does, download | Download (the wallet-ui-3 agent's content; styled only) | shared chrome and tokens | |
+| Explorer, block, address | find a block, read it | Search | shared chrome and tokens; "n/a" stays for the build after this one (owned by the explorer agent) | the fetch words as today |
+| Faucet | ask for 10 IGN | Send 10 IGN | shared chrome | the five status sentences |
+| MetaMask | add the network | Add to MetaMask | its own canonical; the explorer link; the wallet's state said true | the five button sentences |
+| 404 | find the way back | the four links | the page count said true; nineteen sections | |
+| Bench, evidence, ledger | read the records | none | the generated template on site.css; each page's own eyebrow | |
+
+## 6. The live DAG module (`site/live-dag.js`)
+
+the project lead's brief, 6 October 2026, on /live's scene: "can this look more advanced and cool?" One module, shared by /live
+and the home page, reading `/api/live` only.
+
+| Element | Rule |
+|---|---|
+| Layout | blocks placed by DAA score on x and by miner lane on y; lanes are the miners of the window, most blocks first; a phone shows the top lanes and folds the rest into one "others" lane, same blocks, same counts |
+| Edges | parent edges drawn; the selected-parent edge heavier; merge-set edges thin |
+| Colour | blue blocks lit, red blocks dim, pending grey; the selected chain as a continuous glowing path |
+| Checkpoints | vertical bands at each checkpoint's blue score with its lock weight (`fraction_total`); a locked band is solid, a pending one dashed |
+| Proofs | a second layer: a block fills when its segment record is paid (`shards[].state` paid); the proof lag is shown as the gap between the band of the proven block and the carrier |
+| Time | the x axis scrolls at chain speed; new blocks arrive from the right with a brief glow; pause button; wheel and pinch zoom on time, 30 s to 300 s (`?window=`) |
+| Details | hover and tap: hash, miner lane, blue score, DAA, parents, proof state, in the ledger's words |
+| Render | one canvas at device-pixel-ratio, batched paths, 60 fps on a laptop (measured in the build), `prefers-reduced-motion` still frame |
+| Truth | no invented blocks; the legend's words are the ledger's: pending, included, excluded, proven, locked; the counters read the chain (item 0's fix), never the window |
+| Look | obsidian and ember, thin mono labels, restrained glow, no toy |
+
+The home page embeds the module with `compact: true` (fewer lanes, no axis labels, the three counters) and the live
+page with the full view and the finality and proving strips as today.
+
+## 7. The build
+
+| Step | What |
+|---|---|
+| 1 | `site/site.css` with the tokens, type, components and states; the head partial loads it; every page's `<style>` reduced to its page block |
+| 2 | nav and footer partials rebuilt; the theme control |
+| 3 | home page rewritten to section 3; live-dag.js; /live on the module |
+| 4 | litepaper to section 4 |
+| 5 | every other page to its per-page note |
+| 6 | checks: identity grep, link check, forbidden strings, the ledger-text check (new, `tools/ci/ledger-text-check.mjs`: every stated sentence the ledger marks for the site must appear verbatim on the page it names), the orphan check (new, headless at 390 px), contrast check (new, token pairs 4.5:1) |
+| 7 | screenshots after, beside the audit's before |
+
+Pages owned by other agents today: `site/miner.html` copy and `site/img/miner-*.webp` (site-miner), `site/wallet.html`
+content (wallet-ui-3). They are styled through `site.css` only; their bodies are not edited here.
diff --git a/infra/build-server/lib.sh b/infra/build-server/lib.sh
index fbf2550d4..a2c758876 100755
--- a/infra/build-server/lib.sh
+++ b/infra/build-server/lib.sh
@@ -205,6 +205,15 @@ bs_sync_sources() {
   for d in $BS_VENDOR_REPOS; do bs_push_and_checkout "$BS_WT_ROOT/$d" "$d"; bs_overlay_dir "$d"; done
 }
 
+# Reproducible builds (main, 6 October 2026, from the 0.3.14 repro docs/evidence/reproduced/0.3.14.md): two classes made two
+# builds of one tree differ and sccache hid both. (1) prost's generated protowire.rs embeds OUT_DIR, so the TARGET PATH must be
+# the same between builds: every tool here builds into one fixed directory per target (`target`, or the name --target-dir gives,
+# never a per-run name). (2) libmimalloc-sys compiles mimalloc's C with __DATE__/__TIME__, so SOURCE_DATE_EPOCH is set to the
+# commit's author time and TZ to UTC; the same two exports go into the Mac's cross-build.sh and the PC job (jobbuild.rs).
+# bs_repro_env prints the export line a remote command starts with; BR_SDE carries the value into remote-run.sh's JSONL line.
+bs_sde() { git -C "${1:-$BS_TOP}" log -1 --format=%at HEAD; }
+bs_repro_env() { local sde; sde=$(bs_sde "${1:-$BS_TOP}"); BR_SDE="$sde"; export BR_SDE; printf 'export SOURCE_DATE_EPOCH=%s TZ=UTC; ' "$sde"; }
+
 bs_sha256() { shasum -a 256 "$1" | awk '{ print $1 }'; }
 bs_size() { stat -f %z "$1" 2>/dev/null || stat -c %s "$1"; }
 bs_fmt_secs() { local s=$1; printf '%d min %02d s' $((s / 60)) $((s % 60)); }
@@ -230,9 +239,9 @@ bs_remote_run() {
   label="$label; agent=$agent"
   BR_DIR="$dir" BR_LABEL="$label" BR_CMD="$cmd" BR_TOOL="${BS_TOOL:-build-remote}" BR_WT="$BS_WT" BR_CRATE="$BS_CRATE_REL" \
   BR_BRANCH="$BS_BRANCH" BR_SHA="$BS_SHA" BR_AGENT="$agent" BR_KIND="${BR_KIND:-other}" BR_COMMAND="${BR_COMMAND:-}" \
-  BR_TARGET="${BR_TARGET:-}" BR_ARTEFACTS="${BR_ARTEFACTS:-}" \
+  BR_TARGET="${BR_TARGET:-}" BR_ARTEFACTS="${BR_ARTEFACTS:-}" BR_SDE="${BR_SDE:-}" \
   bash -c '
-    for v in BR_DIR BR_LABEL BR_CMD BR_TOOL BR_WT BR_CRATE BR_BRANCH BR_SHA BR_AGENT BR_KIND BR_COMMAND BR_TARGET BR_ARTEFACTS; do
+    for v in BR_DIR BR_LABEL BR_CMD BR_TOOL BR_WT BR_CRATE BR_BRANCH BR_SHA BR_AGENT BR_KIND BR_COMMAND BR_TARGET BR_ARTEFACTS BR_SDE; do
       printf "export %s=%q\n" "$v" "${!v}"
     done
     cat "$0"' "$(dirname "${BASH_SOURCE[0]}")/remote-run.sh" | bs_ssh 'bash -s'
diff --git a/infra/build-server/night/igneum-night-battery.service b/infra/build-server/night/igneum-night-battery.service
new file mode 100644
index 000000000..0ff06cb56
--- /dev/null
+++ b/infra/build-server/night/igneum-night-battery.service
@@ -0,0 +1,34 @@
+# igneum-build-1: the night battery (infra/build-server/night/night-battery.sh) under one build slot through remote-run.sh.
+# Installed by infra/build-server/provision.sh step_night; started by igneum-night-battery.timer at 02:00 Europe/London.
+[Unit]
+Description=Igneum night battery (every test suite, fuzz, simulators, harnesses, clippy, audit; report on branch night-battery)
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+User=build
+Group=build
+Nice=19
+IOSchedulingClass=idle
+WorkingDirectory=/srv/builds/_night
+Environment=BR_DIR=/srv/builds/_night
+Environment=BR_CMD=/srv/builds/_bin/night-battery.sh
+Environment="BR_LABEL=night battery; agent=night"
+Environment=BR_TOOL=night-battery
+Environment=BR_KIND=other
+Environment=BR_WT=_night
+Environment=BR_CRATE=.
+Environment=BR_BRANCH=master
+Environment=BR_SHA=
+Environment=BR_AGENT=night
+Environment="BR_COMMAND=night-battery.sh (suites, fuzz, sims, harness, clippy, audit)"
+Environment=BR_TARGET=x86_64-unknown-linux-gnu
+Environment=IGNEUM_AGENT=night
+ExecStart=/bin/bash /srv/builds/_bin/remote-run.sh
+TimeoutStartSec=8h
+StandardOutput=append:/srv/builds/_log/night-battery.log
+StandardError=append:/srv/builds/_log/night-battery.log
+
+[Install]
+WantedBy=multi-user.target
diff --git a/infra/build-server/night/igneum-night-battery.timer b/infra/build-server/night/igneum-night-battery.timer
new file mode 100644
index 000000000..fdc5b114b
--- /dev/null
+++ b/infra/build-server/night/igneum-night-battery.timer
@@ -0,0 +1,12 @@
+# igneum-build-1: 02:00 London every night (the box's clock is Europe/Berlin; the time zone is named here, so BST and GMT both
+# land at 02:00 UK). Not Persistent: a missed night is not run during the day.
+[Unit]
+Description=Igneum night battery at 02:00 Europe/London
+
+[Timer]
+OnCalendar=*-*-* 02:00:00 Europe/London
+Persistent=false
+AccuracySec=1min
+
+[Install]
+WantedBy=timers.target
diff --git a/infra/build-server/night/night-battery.sh b/infra/build-server/night/night-battery.sh
new file mode 100755
index 000000000..4a93d3ef1
--- /dev/null
+++ b/infra/build-server/night/night-battery.sh
@@ -0,0 +1,207 @@
+#!/usr/bin/env bash
+# The night battery on igneum-build-1 (6 October 2026): one invocation, one build slot, every test the repo and the fork have.
+# Runs ON the box as user build at 02:00 Europe/London (igneum-night-battery.timer) through remote-run.sh, which holds the
+# slot for the whole run, sets CARGO_BUILD_JOBS (90 alone, 45 beside another build) and writes the JSONL line. By hand:
+#   /srv/builds/_bin/night-battery.sh                 the full battery (hours)
+#   NIGHT_SUBSET=1 /srv/builds/_bin/night-battery.sh  the dry-run subset (igneum-pow suite and fuzz, two fork crates, quick sims, clippy and audit on igneum-pow)
+#   NIGHT_NODE_BRANCH=release-0.3.15-node ...        the fork branch (default: the newest release-*-node on the mirror)
+#   NIGHT_SKIP="harness sims" ...                     skip stages by name
+# Stages, each a row (pass, FAIL, skip) with seconds and a detail:
+#   checkout   /srv/builds/_night/igneum from /srv/igneum.git master (the battery re-execs itself from that checkout, so the
+#              script that runs is master's), vendor/igneum-node from /srv/igneum-node.git at the fork branch
+#   suites     cargo test --release --no-fail-fast per crate: the repo's crates (igneum-pow, igneum-census, pool, proto-vdf,
+#              app/igneum-app, every member of proving/igneum-prove) and every workspace member of the fork (kaspad with
+#              --features igneum-pow); the pass and fail counts are read from the `test result:` lines
+#   fuzz       igneum-pow's two fuzz tests at 10x their default (IGNEUM_MIXER_FUZZ and IGNEUM_SCRATCH_FUZZ 2000)
+#   sims       sim/finality_sim.py, sim/finality_v2.py and sim/difficulty/sim.py in full (the subset runs --quick)
+#   harness    the fork's igneumd, igneum-miner, igneum-harness-sim and igneum-p2p-probe built into target-integration, then
+#              tools/finality-attacks/run.mjs --fast-time, tools/harness/run.mjs s3 s4 --fast-time --no-bench-log and
+#              tools/exec-sync/reorg.mjs (loopback ports 27200+, 27800+, 29870+; nothing of the live devnet)
+#   clippy     cargo clippy --release --all-targets per crate dir (warnings counted; a row fails on an error)
+#   audit      cargo audit in every directory with a Cargo.lock
+#   report     docs/benchmarks/night/<date>.md (a pass/fail table and "new since last night" against the newest earlier
+#              report), committed as igneum-labs on branch night-battery (based on master, earlier reports carried over) and
+#              pushed to /srv/igneum.git night-battery; main merges (`git fetch build night-battery` on the Mac). Never master.
+set -uo pipefail
+_slots_env="${IGNEUM_BUILD_SLOTS_DIR:-}"; [ -f /etc/profile.d/igneum-build.sh ] && . /etc/profile.d/igneum-build.sh; [ -n "$_slots_env" ] && IGNEUM_BUILD_SLOTS_DIR="$_slots_env"
+NIGHT_ROOT="${NIGHT_ROOT:-/srv/builds/_night}"; REPO_MIRROR=/srv/igneum.git; NODE_MIRROR=/srv/igneum-node.git
+SUBSET="${NIGHT_SUBSET:-0}"; SKIP=" ${NIGHT_SKIP:-} "
+DATE=$(date -u +%Y-%m-%d); STAMP=$(date -u +%Y%m%dT%H%M%SZ); T_ALL=$(date +%s)
+REPORT_NAME="$DATE$( [ "$SUBSET" = 1 ] && echo -dryrun ).md"
+LOGDIR="$NIGHT_ROOT/logs/$STAMP"; mkdir -p "$LOGDIR"
+ROWS="$LOGDIR/rows.tsv"; : > "$ROWS"
+say() { printf '%s night: %s\n' "$(date -u +%H:%M:%S)" "$*" >&2; }
+row() { printf '%s\t%s\t%s\t%s\t%s\n' "$1" "$2" "$3" "$4" "$5" >> "$ROWS"; say "$1 | $2 | $3 | ${4}s | $5"; }   # stage name status secs detail
+skip() { case "$SKIP" in *" $1 "*) return 0 ;; esac; return 1; }
+cargo_jobs="${CARGO_BUILD_JOBS:-90}"
+
+# checkout
+IG="$NIGHT_ROOT/igneum"; FORK="$IG/vendor/igneum-node"
+t0=$(date +%s)
+if [ ! -d "$IG/.git" ]; then git clone -q "$REPO_MIRROR" "$IG" || { row checkout repo FAIL 0 "clone failed"; exit 1; }; fi
+git -C "$IG" fetch -q origin '+refs/heads/*:refs/remotes/origin/*' || { row checkout repo FAIL 0 "fetch failed"; exit 1; }
+git -C "$IG" checkout -q -- . 2>/dev/null; git -C "$IG" clean -qfd -e target -e 'target-*' -e vendor
+git -C "$IG" checkout -q -B night-battery origin/master
+# earlier reports not yet merged into master ride along
+git -C "$IG" checkout -q origin/night-battery -- docs/benchmarks/night 2>/dev/null || true
+REPO_SHA=$(git -C "$IG" rev-parse --short HEAD)
+if [ "${NIGHT_REEXEC:-0}" != 1 ] && [ -f "$IG/infra/build-server/night/night-battery.sh" ] && ! cmp -s "$0" "$IG/infra/build-server/night/night-battery.sh"; then
+  say "re-exec from master's copy ($REPO_SHA)"; NIGHT_REEXEC=1 exec bash "$IG/infra/build-server/night/night-battery.sh"
+fi
+NODE_BRANCH="${NIGHT_NODE_BRANCH:-$(git -C "$NODE_MIRROR" branch --list 'release-*-node' | tr -d ' *' | sort -V | tail -1)}"
+[ -n "$NODE_BRANCH" ] || NODE_BRANCH=master
+mkdir -p "$IG/vendor"
+if [ ! -d "$FORK/.git" ]; then git clone -q --no-checkout "$NODE_MIRROR" "$FORK" || { row checkout fork FAIL 0 "clone failed"; exit 1; }; fi
+git -C "$FORK" fetch -q origin '+refs/heads/*:refs/remotes/origin/*'
+git -C "$FORK" checkout -q -- . 2>/dev/null; git -C "$FORK" clean -qfd -e target -e 'target-*'
+git -C "$FORK" checkout -q -B "$NODE_BRANCH" "origin/$NODE_BRANCH" || { row checkout fork FAIL 0 "no branch $NODE_BRANCH"; exit 1; }
+NODE_SHA=$(git -C "$FORK" rev-parse --short HEAD)
+row checkout "repo master $REPO_SHA, fork $NODE_BRANCH $NODE_SHA" pass $(( $(date +%s) - t0 )) "$IG; jobs $cargo_jobs; subset $SUBSET"
+
+# helpers
+run_to() {   # <log> <timeout secs> <cmd...>: runs in the current dir, returns the exit code, 124 on timeout
+  local log="$1" to="$2"; shift 2
+  timeout --signal=TERM --kill-after=60 "$to" "$@" > "$log" 2>&1; echo $?
+}
+counts() {   # pass/fail totals from cargo test output
+  awk '/^test result:/ { for (i = 1; i <= NF; i++) { if ($(i+1) == "passed;") p += $i; if ($(i+1) == "failed;") f += $i } } END { printf "%d passed, %d failed", p, f }' "$1"
+}
+suite() {   # <dir> <label> <cargo test args...>
+  local dir="$1" label="$2"; shift 2
+  local log="$LOGDIR/suite-$(echo "$label" | tr '/ ' '__').log" t0 rc c
+  t0=$(date +%s)
+  rc=$(cd "$dir" && run_to "$log" 2400 cargo test --release --no-fail-fast "$@")
+  c=$(counts "$log")
+  if [ "$rc" = 0 ]; then row suite "$label" pass $(( $(date +%s) - t0 )) "$c"
+  elif [ "$rc" = 124 ]; then row suite "$label" FAIL $(( $(date +%s) - t0 )) "TIMEOUT 40 min; $c"
+  elif grep -q '^error\(\[E[0-9]*\]\)\?:' "$log" && ! grep -q '^test result:' "$log"; then row suite "$label" FAIL $(( $(date +%s) - t0 )) "did not compile: $(grep -m1 '^error' "$log" | cut -c1-120)"
+  else row suite "$label" FAIL $(( $(date +%s) - t0 )) "$c; failed: $(grep -E '^    [a-z_:]+' "$log" | grep -v '^    Finished\|^    Running' | head -3 | tr -d ' ' | tr '\n' ' ' | cut -c1-160)"; fi
+}
+
+# suites
+if ! skip suites; then
+  if [ "$SUBSET" = 1 ]; then
+    suite "$IG/igneum-pow" igneum-pow
+    for c in kaspa-pow igneum-miner; do suite "$FORK" "fork/$c" -p "$c"; done
+  else
+    for d in igneum-pow igneum-census pool proto-vdf app/igneum-app; do [ -f "$IG/$d/Cargo.toml" ] && suite "$IG/$d" "$d"; done
+    if [ -f "$IG/proving/igneum-prove/Cargo.toml" ]; then
+      for m in $(cd "$IG/proving/igneum-prove" && cargo metadata --no-deps --format-version 1 2>/dev/null | python3 -c 'import json,sys; print(" ".join(p["name"] for p in json.load(sys.stdin)["packages"]))'); do
+        case "$m" in *program*|*aggregator*) continue ;; esac   # the guests are pinned ELFs, built only by pin-guests.sh
+        suite "$IG/proving/igneum-prove" "proving/$m" -p "$m"
+      done
+    fi
+    for m in $(cd "$FORK" && cargo metadata --no-deps --format-version 1 2>/dev/null | python3 -c 'import json,sys; print(" ".join(sorted(p["name"] for p in json.load(sys.stdin)["packages"])))'); do
+      case "$m" in *wasm*) continue ;; esac   # browser targets, no host test suite
+      if [ "$m" = kaspad ]; then suite "$FORK" "fork/kaspad" -p kaspad --features igneum-pow; else suite "$FORK" "fork/$m" -p "$m"; fi
+    done
+  fi
+else row suite all skip 0 "NIGHT_SKIP"; fi
+
+# fuzz
+if ! skip fuzz; then
+  n=2000; [ "$SUBSET" = 1 ] && n=200
+  t0=$(date +%s); log="$LOGDIR/fuzz.log"
+  rc=$(cd "$IG/igneum-pow" && IGNEUM_MIXER_FUZZ=$n IGNEUM_SCRATCH_FUZZ=$n run_to "$log" 7200 cargo test --release --test mixer --test scratch -- fuzz --nocapture)
+  [ "$rc" = 0 ] && row fuzz "igneum-pow mixer+scratch x$n" pass $(( $(date +%s) - t0 )) "$(grep -h '^fuzz:' "$log" | tr '\n' ';' | cut -c1-200)" || row fuzz "igneum-pow mixer+scratch x$n" FAIL $(( $(date +%s) - t0 )) "rc $rc: $(grep -m1 -E 'panicked|error' "$log" | cut -c1-160)"
+else row fuzz igneum-pow skip 0 "NIGHT_SKIP"; fi
+
+# sims
+if ! skip sims; then
+  q=""; [ "$SUBSET" = 1 ] && q="--quick"
+  t0=$(date +%s); rc=$(cd "$IG/sim" && run_to "$LOGDIR/sim-finality.log" 600 python3 finality_sim.py); [ "$rc" = 0 ] && row sim finality_sim.py pass $(( $(date +%s) - t0 )) "$(grep -c '^|' "$LOGDIR/sim-finality.log") table lines" || row sim finality_sim.py FAIL $(( $(date +%s) - t0 )) "rc $rc"
+  t0=$(date +%s); rc=$(cd "$IG/sim" && run_to "$LOGDIR/sim-finality-v2.log" 3600 python3 finality_v2.py $q); [ "$rc" = 0 ] && row sim "finality_v2.py $q" pass $(( $(date +%s) - t0 )) "$(grep -c '^|' "$LOGDIR/sim-finality-v2.log") table lines" || row sim "finality_v2.py $q" FAIL $(( $(date +%s) - t0 )) "rc $rc"
+  t0=$(date +%s); rc=$(cd "$IG/sim/difficulty" && run_to "$LOGDIR/sim-difficulty.log" 5400 python3 sim.py $q); [ "$rc" = 0 ] && row sim "difficulty/sim.py $q" pass $(( $(date +%s) - t0 )) "$(grep -c '^|' "$LOGDIR/sim-difficulty.log") table lines" || row sim "difficulty/sim.py $q" FAIL $(( $(date +%s) - t0 )) "rc $rc"
+else row sim all skip 0 "NIGHT_SKIP"; fi
+
+# harness (fast time)
+if ! skip harness && [ "$SUBSET" != 1 ]; then
+  t0=$(date +%s); log="$LOGDIR/harness-build.log"
+  rc=$(cd "$FORK" && CARGO_TARGET_DIR=target-integration run_to "$log" 3600 cargo build --release -p kaspad -p igneum-miner -p igneum-harness-sim -p igneum-p2p-probe --features kaspad/igneum-pow)
+  if [ "$rc" = 0 ]; then
+    row harness build pass $(( $(date +%s) - t0 )) "igneumd igneum-miner igneum-harness-sim igneum-p2p-probe at $NODE_SHA"
+    REL="$FORK/target-integration/release"
+    t0=$(date +%s); rc=$(cd "$IG" && IGNEUMD="$REL/igneumd" IGNEUM_MINER="$REL/igneum-miner" IGNEUM_NODE_ROOT="$IG/" run_to "$LOGDIR/harness-finality.log" 3600 node tools/finality-attacks/run.mjs --fast-time)
+    [ "$rc" = 0 ] && row harness "finality-attacks --fast-time" pass $(( $(date +%s) - t0 )) "$(grep -c -i 'PASS' "$LOGDIR/harness-finality.log") PASS lines" || row harness "finality-attacks --fast-time" FAIL $(( $(date +%s) - t0 )) "rc $rc: $(grep -m1 -i -E 'FAIL|error' "$LOGDIR/harness-finality.log" | cut -c1-160)"
+    t0=$(date +%s); rc=$(cd "$IG" && IGNEUM_HARNESS_TARGET="$REL" run_to "$LOGDIR/harness-s3s4.log" 3600 node tools/harness/run.mjs s3 s4 --fast-time --no-bench-log)
+    [ "$rc" = 0 ] && row harness "harness s3 s4 --fast-time" pass $(( $(date +%s) - t0 )) "$(grep -c -i 'PASS' "$LOGDIR/harness-s3s4.log") PASS lines" || row harness "harness s3 s4 --fast-time" FAIL $(( $(date +%s) - t0 )) "rc $rc: $(grep -m1 -i -E 'FAIL|error' "$LOGDIR/harness-s3s4.log" | cut -c1-160)"
+    t0=$(date +%s); rc=$(cd "$IG" && IGNEUM_EXEC_BIN="$REL" run_to "$LOGDIR/harness-exec-reorg.log" 3600 node tools/exec-sync/reorg.mjs)
+    [ "$rc" = 0 ] && row harness "exec-sync reorg" pass $(( $(date +%s) - t0 )) "$(grep -c -i 'PASS\|ok' "$LOGDIR/harness-exec-reorg.log") ok lines" || row harness "exec-sync reorg" FAIL $(( $(date +%s) - t0 )) "rc $rc: $(grep -m1 -i -E 'FAIL|error|missing' "$LOGDIR/harness-exec-reorg.log" | cut -c1-160)"
+  else row harness build FAIL $(( $(date +%s) - t0 )) "$(grep -m1 '^error' "$log" | cut -c1-160)"; fi
+else row harness all skip 0 "$( [ "$SUBSET" = 1 ] && echo subset || echo NIGHT_SKIP)"; fi
+
+# clippy
+if ! skip clippy; then
+  dirs="igneum-pow"; [ "$SUBSET" = 1 ] || dirs="igneum-pow igneum-census pool proto-vdf app/igneum-app proving/igneum-prove vendor/igneum-node"
+  for d in $dirs; do
+    [ -f "$IG/$d/Cargo.toml" ] || continue
+    t0=$(date +%s); log="$LOGDIR/clippy-$(echo "$d" | tr '/' '_').log"
+    feat=""; [ "$d" = vendor/igneum-node ] && feat="--features kaspad/igneum-pow"
+    rc=$(cd "$IG/$d" && run_to "$log" 3600 cargo clippy --release --all-targets $feat)
+    w=$(grep -c '^warning: ' "$log"); e=$(grep -c '^error' "$log")
+    [ "$rc" = 0 ] && row clippy "$d" pass $(( $(date +%s) - t0 )) "$w warnings" || row clippy "$d" FAIL $(( $(date +%s) - t0 )) "rc $rc, $e errors, $w warnings: $(grep -m1 '^error' "$log" | cut -c1-120)"
+  done
+else row clippy all skip 0 "NIGHT_SKIP"; fi
+
+# audit
+if ! skip audit; then
+  locks="igneum-pow/Cargo.lock vendor/igneum-node/Cargo.lock"; [ "$SUBSET" = 1 ] || locks=$(cd "$IG" && find . -name Cargo.lock -not -path '*/target*' -not -path './vendor/igneum-node/*' | sed 's|^\./||'; echo vendor/igneum-node/Cargo.lock)
+  for l in $locks; do
+    d=$(dirname "$l"); [ -f "$IG/$l" ] || continue
+    t0=$(date +%s); log="$LOGDIR/audit-$(echo "$d" | tr '/' '_').log"
+    rc=$(cd "$IG/$d" && run_to "$log" 600 cargo audit --color never)
+    v=$(grep -c '^Crate:' "$log"); wn=$(grep -c -i '^warning:' "$log")
+    [ "$rc" = 0 ] && row audit "$d" pass $(( $(date +%s) - t0 )) "$v vulnerabilities, $wn warnings" || row audit "$d" FAIL $(( $(date +%s) - t0 )) "rc $rc: $v vulnerabilities ($(grep -A1 '^Crate:' "$log" | grep -v '^--' | awk '{ print $2 }' | paste -sd, - | cut -c1-120)), $wn warnings"
+  done
+else row audit all skip 0 "NIGHT_SKIP"; fi
+
+# report
+OUTDIR="$IG/docs/benchmarks/night"; mkdir -p "$OUTDIR"; OUT="$OUTDIR/$REPORT_NAME"
+PREV=$(ls "$OUTDIR"/*.md 2>/dev/null | grep -v "/$REPORT_NAME$" | grep -v -- '-dryrun' | sort | tail -1)
+[ "$SUBSET" = 1 ] && PREV=$(ls "$OUTDIR"/*-dryrun.md 2>/dev/null | grep -v "/$REPORT_NAME$" | sort | tail -1)
+python3 - "$ROWS" "$OUT" "${PREV:-}" "$DATE" "$REPO_SHA" "$NODE_BRANCH" "$NODE_SHA" "$(( $(date +%s) - T_ALL ))" "$SUBSET" "$cargo_jobs" "$LOGDIR" <<'PY'
+import re, sys, os
+rows_f, out, prev, date, repo_sha, node_branch, node_sha, secs, subset, jobs, logdir = sys.argv[1:]
+rows = [l.rstrip("\n").split("\t") for l in open(rows_f) if l.strip()]
+def fmt(s):
+    s = int(s); return f"{s // 60} min {s % 60:02d} s" if s >= 60 else f"{s} s"
+n_pass = sum(1 for r in rows if r[2] == "pass"); n_fail = sum(1 for r in rows if r[2] == "FAIL"); n_skip = sum(1 for r in rows if r[2] == "skip")
+lines = [f"# Night battery {date}{' (dry run, subset)' if subset == '1' else ''}", "",
+  f"igneum-build-1, {fmt(secs)} wall, one build slot (CARGO_BUILD_JOBS {jobs}), repo master {repo_sha}, fork {node_branch} {node_sha}. "
+  f"{n_pass} pass, {n_fail} FAIL, {n_skip} skip. Logs on the box: `{logdir}`. Written by `infra/build-server/night/night-battery.sh`.", "",
+  "| Stage | What | Result | Time | Detail |", "|---|---|---|---|---|"]
+for st, what, res, t, det in rows:
+    res_md = "**FAIL**" if res == "FAIL" else res
+    lines.append(f"| {st} | {what} | {res_md} | {fmt(t)} | {det.replace('|', '/')} |")
+lines += ["", "## New since last night", ""]
+if prev and os.path.isfile(prev):
+    old = {}
+    for l in open(prev):
+        m = re.match(r"\| (\w+) \| (.*?) \| (\*\*FAIL\*\*|pass|skip) \| (.*?) \| (.*) \|$", l.rstrip("\n"))
+        if m: old[(m.group(1), m.group(2))] = m.group(3).strip("*")
+    new = {(r[0], r[1]): r[2] for r in rows}
+    changes = []
+    for k, v in new.items():
+        if k not in old: changes.append(f"- new row: {k[0]} {k[1]}: {v}")
+        elif old[k] != v: changes.append(f"- {k[0]} {k[1]}: {old[k]} -> **{v}**")
+    for k, v in old.items():
+        if k not in new: changes.append(f"- gone: {k[0]} {k[1]} (was {v})")
+    hdr = open(prev).read().split("\n")[2] if len(open(prev).read().split("\n")) > 2 else ""
+    m = re.search(r"repo master (\w+), fork (\S+) (\w+)", hdr)
+    if m and (m.group(1) != repo_sha or m.group(3) != node_sha):
+        changes.insert(0, f"- commits moved: repo {m.group(1)} -> {repo_sha}, fork {m.group(2)} {m.group(3)} -> {node_branch} {node_sha}")
+    lines.append(f"Against `{os.path.basename(prev)}`:")
+    lines += changes if changes else ["- nothing: every row has the result it had"]
+else:
+    lines.append("No earlier report to compare with: this is the first night.")
+open(out, "w").write("\n".join(lines) + "\n")
+print(f"{n_pass} pass, {n_fail} FAIL, {n_skip} skip; report {out}")
+PY
+# commit on night-battery, push to the mirror (never master)
+cd "$IG" && git add docs/benchmarks/night && \
+  git -c user.name=igneum-labs -c user.email=337424239+[removed] commit -q -m "Night battery $DATE$( [ "$SUBSET" = 1 ] && echo ' (dry run)'): $(awk -F'\t' '$3 == "pass" { p++ } $3 == "FAIL" { f++ } END { printf "%d pass, %d FAIL", p, f }' "$ROWS") on master $REPO_SHA, fork $NODE_BRANCH $NODE_SHA
+
+Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>" && \
+  git push -q --force origin night-battery:refs/heads/night-battery && say "pushed night-battery to $REPO_MIRROR ($(git rev-parse --short HEAD)); on the Mac: git fetch build night-battery" || say "commit or push FAILED"
+cat "$OUT"
+[ "$(awk -F'\t' '$3 == "FAIL"' "$ROWS" | wc -l)" = 0 ]
diff --git a/infra/build-server/prover/cpu-trial.sh b/infra/build-server/prover/cpu-trial.sh
new file mode 100644
index 000000000..256e0aa99
--- /dev/null
+++ b/infra/build-server/prover/cpu-trial.sh
@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+# CPU prover trial on igneum-build-1 (6 October 2026): time the SP1 CPU prover on one real fixture shard with every thread
+# of the box, at nice 19, under one build slot (a timing taken beside another build is not a number: CLAUDE.md).
+# Runs ON the box as user build:
+#   infra/build-server/prover/cpu-trial.sh [--fixture <json>] [--host <igneum-prove-host>] [--threads 96] [--mode shard|execute] [--out <dir>]
+# Defaults: the host built from the igneum repo's master on the box (/srv/builds/igneum/proving/igneum-prove/target/release,
+# tools/build-remote.sh from proving/igneum-prove; the `cuda` feature in it changes nothing for SP1_PROVER=cpu), the fixture
+# block-56-transfers.json (the v0 block, one shard), 96 threads, --mode shard --shard 0.
+# Writes <out>/trial-<utc>.{log,json,txt}: the host's own results JSON (execute, core, compressed and verify seconds), the
+# wall time, and the peak resident memory read from /proc/<pid>/status VmHWM every second (no `time` package on the box).
+set -euo pipefail
+[ -f /etc/profile.d/igneum-build.sh ] && . /etc/profile.d/igneum-build.sh
+FIXTURE=/srv/builds/igneum/proving/fixtures/block-56-transfers.json
+HOST=/srv/builds/igneum/proving/igneum-prove/target/release/igneum-prove-host
+THREADS=$(nproc); MODE=shard; OUT=/srv/builds/_log/prover-trial
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --fixture) FIXTURE="$2"; shift 2 ;; --host) HOST="$2"; shift 2 ;; --threads) THREADS="$2"; shift 2 ;;
+    --mode) MODE="$2"; shift 2 ;; --out) OUT="$2"; shift 2 ;; *) echo "unknown argument $1" >&2; exit 2 ;;
+  esac
+done
+[ -x "$HOST" ] || { echo "no prover host at $HOST (cd proving/igneum-prove && tools/build-remote.sh -- build --release -p igneum-prove-host)" >&2; exit 2; }
+[ -f "$FIXTURE" ] || { echo "no fixture at $FIXTURE" >&2; exit 2; }
+mkdir -p "$OUT"
+STAMP=$(date -u +%Y%m%dT%H%M%SZ); LOG="$OUT/trial-$STAMP.log"; RES="$OUT/trial-$STAMP.json"; SUM="$OUT/trial-$STAMP.txt"
+# the measurement hold (main's ruling 6 October 2026): remote-run.sh BR_MEASURE=1 takes the `measure` file exclusively, waits
+# for every running build and blocks new ones until this run ends, and writes the run's JSONL line (kind measure)
+RR="${IGNEUM_REMOTE_RUN:-$(dirname "$0")/../remote-run.sh}"; [ -f "$RR" ] || RR=/srv/builds/_bin/remote-run.sh
+[ -f "$RR" ] || { echo "no remote-run.sh beside this script or at /srv/builds/_bin" >&2; exit 2; }
+echo "cpu-trial: host $HOST; fixture $FIXTURE; threads $THREADS; mode $MODE; load $(cut -d' ' -f1-3 /proc/loadavg)" | tee "$LOG"
+"$HOST" --version 2>/dev/null | tee -a "$LOG" || true
+args=("$FIXTURE" --mode "$MODE" --out "$RES"); [ "$MODE" = shard ] && args+=(--shard 0)
+t0=$(date +%s.%N)
+PEAKF=$(mktemp)
+# the command remote-run.sh evals under the measure hold: the host at nice 19 with a VmHWM poller beside it
+CMD="SP1_PROVER=cpu RAYON_NUM_THREADS=$THREADS RUST_LOG=${RUST_LOG:-info} nice -n 19 '$HOST' $(printf '%q ' "${args[@]}") >> '$LOG' 2>&1 & p=\$!; peak=0; while kill -0 \$p 2>/dev/null; do h=\$(awk '/VmHWM/ { print \$2 }' /proc/\$p/status 2>/dev/null || echo 0); [ \${h:-0} -gt \$peak ] && peak=\$h; sleep 1; done; wait \$p; rc=\$?; echo \$peak > '$PEAKF'; ( exit \$rc )"
+BR_MEASURE=1 BR_DIR="$(dirname "$HOST")" BR_CMD="$CMD" BR_LABEL="prover cpu-trial $(basename "$FIXTURE") $THREADS threads; agent=${IGNEUM_AGENT:-box-work}" \
+  BR_TOOL=cpu-trial BR_KIND=measure BR_WT=igneum BR_CRATE=proving/igneum-prove BR_BRANCH="${BR_BRANCH:-master}" BR_SHA="${BR_SHA:-}" BR_AGENT="${IGNEUM_AGENT:-box-work}" \
+  BR_COMMAND="igneum-prove-host $(basename "$FIXTURE") --mode $MODE (SP1_PROVER=cpu, $THREADS threads, nice 19)" BR_TARGET=x86_64-unknown-linux-gnu \
+  bash "$RR" 2>&1 | tee -a "$LOG"; rc=${PIPESTATUS[0]}
+peak=$(cat "$PEAKF" 2>/dev/null || echo 0); rm -f "$PEAKF"
+t1=$(date +%s.%N)
+wall=$(python3 -c "print(round($t1 - $t0, 1))")
+{
+  echo "cpu-trial $STAMP: exit $rc, wall ${wall} s (hold included), peak RSS $(( peak / 1024 )) MB (VmHWM), threads $THREADS, nice 19, measure hold, load at end $(cut -d' ' -f1-3 /proc/loadavg)"
+  echo "host: $HOST ($(stat -c %s "$HOST") B, sha256 $(sha256sum "$HOST" | cut -c1-16)...)"
+  echo "fixture: $FIXTURE"
+  if [ -f "$RES" ]; then
+    python3 - "$RES" <<'PY'
+import json, sys
+d = json.load(open(sys.argv[1]))
+def walk(o, p=""):
+    if isinstance(o, dict):
+        for k, v in o.items(): walk(v, f"{p}.{k}" if p else k)
+    elif isinstance(o, list):
+        for i, v in enumerate(o): walk(v, f"{p}[{i}]")
+    else:
+        s = str(o)
+        if any(t in p.lower() for t in ("sec", "time", "cycles", "bytes", "verified", "prover", "shard", "program", "stage")) and len(s) < 80:
+            print(f"  {p} = {s}")
+walk(d)
+PY
+  fi
+  echo "log lines with times:"; grep -E -i 'prove|core|compress|verif|execute|cycles| s\b|seconds' "$LOG" | grep -v '^cpu-trial' | tail -20 | sed 's/^/  /'
+} | tee "$SUM"
+exit "$rc"
diff --git a/infra/build-server/provision.sh b/infra/build-server/provision.sh
index ee789e9fc..254a8935e 100755
--- a/infra/build-server/provision.sh
+++ b/infra/build-server/provision.sh
@@ -26,7 +26,8 @@
 #   NODE_MAJOR       22
 #   WORKTREES        ""       space-separated agent worktree names, one /srv/builds/<name> each (run-from-mac.sh fills it from
 #                             `git worktree list` on the Mac; tools/build-remote.sh creates a missing one on first use)
-#   SLOTS            1        remote build slots (tools/build-remote.sh takes one; with 1 slot every build gets the box)
+#   SLOTS            2        remote build slots (tools/build-remote.sh takes one; remote-run.sh sets CARGO_BUILD_JOBS 90 when it holds
+#                             the only taken slot and 45 when both are held; a measurement takes the `measure` file and excludes builds)
 #   P2P_PORTS        "26611 26811"  TCP ports ufw opens beside 22: the devnet seed's p2p (infra/seed-nodes/config.sh devnet
 #                             P2P_PORT=26611) and the testnet seed's (26811). A suffixed devnet (Devnet 2, the fleet's staging
 #                             chain) listens on the same 26611 (infra/cloud-devnet/config.sh P2P_PORT=26611). RPC ports
@@ -52,13 +53,25 @@ SCCACHE_GB="${SCCACHE_GB:-100}"
 SCCACHE_VERSION="${SCCACHE_VERSION:-}"
 NODE_MAJOR="${NODE_MAJOR:-22}"
 WORKTREES="${WORKTREES:-}"
-SLOTS="${SLOTS:-1}"
+SLOTS="${SLOTS:-2}"   # 2 since main's ruling of 6 October 2026 (20:3x UK); remote-run.sh gives 90 jobs alone, 45 beside another
 P2P_PORTS="${P2P_PORTS:-26611 26811}"
 BOX_HOSTNAME="${BOX_HOSTNAME:-igneum-build-1}"
 WORKERS_HOST="${WORKERS_HOST:-build.igneum.network}"   # the dashboard feed's HTTPS name (A record in deSEC, 6 Oct 2026)
 SSH_PUBKEY="${SSH_PUBKEY:-}"
 BUILD_USER=build
 BUILD_HOME=/home/$BUILD_USER
+# the GitHub Actions runner (step_runner, 6 October 2026 evening): a dedicated user, never build and never root
+RUNNER_USER=runner
+RUNNER_HOME=/home/$RUNNER_USER
+RUNNER_DIR=/opt/actions-runner
+RUNNER_VERSION="${RUNNER_VERSION:-2.338.0}"                 # github.com/actions/runner releases, read 6 October 2026
+RUNNER_SHA256="${RUNNER_SHA256:-af4b794c1bc41d73d40535e3fe092a39f9679cd8d965954c2aca25a05ca41d32}"   # the release note's linux-x64 line
+RUNNER_REPO_URL="${RUNNER_REPO_URL:-https://github.com/igneum-network/igneum}"
+RUNNER_NAME="${RUNNER_NAME:-$BOX_HOSTNAME}"
+RUNNER_LABELS="${RUNNER_LABELS:-igneum-build-1}"            # added to the defaults self-hosted, linux, x64
+RUNNER_JOBS="${RUNNER_JOBS:-48}"                            # cargo jobs for a CI job: half the box, the agents' builds keep the rest
+RUNNER_TOKEN="${RUNNER_TOKEN:-}"                            # a registration token (1 h), from infra/build-server/runner/register.sh over stdin; never logged
+RUNNER_SCCACHE_PORT="${RUNNER_SCCACHE_PORT:-4227}"          # the runner's own sccache server; 4226 is the build user's
 
 log() { printf '%s provision: %s\n' "$(date -u +%H:%M:%S)" "$*"; }
 die() { log "ERROR: $*" >&2; exit 1; }
@@ -127,6 +140,11 @@ APT_PACKAGES=(
   build-essential clang lld llvm libclang-dev pkg-config libssl-dev cmake protobuf-compiler libprotobuf-dev
   gcc-mingw-w64-x86-64 g++-mingw-w64-x86-64 binutils-mingw-w64-x86-64 mingw-w64-x86-64-dev mingw-w64-tools
   git tmux curl ca-certificates xz-utils zstd unzip rsync jq python3 ufw htop file caddy
+  # the GitHub Actions runner's .NET runtime needs libicu (bin/installdependencies.sh would install it); the two Python
+  # simulators (sim/finality_v2.py, sim/difficulty/sim.py) need numpy, which ci.yml pip-installs on GitHub's runners
+  libicu74 python3-numpy
+  # innoextract: tools/repro reads the shipped igneumd.exe and igneum-miner.exe out of the public Inno Setup installer
+  innoextract
 )
 step_apt() {
   local need=() p
@@ -408,6 +426,143 @@ step_ufw() {
   [ "$any" = 1 ] && changed ufw "22, 80, 443 and ${P2P_PORTS} open, everything else denied" || ok ufw "22, 80, 443 and ${P2P_PORTS}"
 }
 
+# The GitHub Actions self-hosted runner for igneum-network/igneum (asked for 6 October 2026, "what else can the box work on").
+# A dedicated user `runner` (no sudo, not in the build group), the runner at /opt/actions-runner (sha256 of the tarball checked
+# against the release note), its own rustup pinned to RUST_TOOLCHAIN with the two targets and clippy, Node 22 and mingw from
+# the system, and sccache against the box's cache in READ-ONLY mode (`rw_mode = "READ_ONLY"`, accepted by sccache 0.18 on
+# 6 October 2026): a CI job may take hits from what the agents built, never write a line into their cache, and talks to its
+# own sccache server on RUNNER_SCCACHE_PORT so the build user's server never compiles as the wrong user. Registration needs
+# RUNNER_TOKEN (infra/build-server/runner/register.sh fetches one with gh as igneum-labs and pipes it over stdin); without
+# it the step installs everything and says what is missing. The service is GitHub's own `svc.sh install runner` unit plus a
+# drop-in with Nice=10 (agents' builds through build-remote.sh win the CPU; a CI job is a check, not a release build).
+# Not ephemeral: GitHub recommends `--ephemeral` for autoscaled fleets that register a fresh runner per job; one standing
+# runner on a private repository keeps its registration and cleans `_work` per job (approximate: from GitHub's runner
+# documentation as remembered on 6 October 2026, the docs host answered 404 to the fetch that evening).
+runner_env_file() {
+  cat <<EOF
+# igneum-build-1 (infra/build-server/provision.sh step_runner): the environment every CI job on this runner starts with
+RUSTC_WRAPPER=/usr/local/bin/sccache
+SCCACHE_CONF=$RUNNER_HOME/.config/sccache/config
+SCCACHE_SERVER_PORT=$RUNNER_SCCACHE_PORT
+CARGO_INCREMENTAL=0
+CARGO_BUILD_JOBS=$RUNNER_JOBS
+CARGO_NET_GIT_FETCH_WITH_CLI=true
+IGNEUM_RUST_TOOLCHAIN=$RUST_TOOLCHAIN
+EOF
+}
+
+step_runner() {
+  local any=0 tarball cargo="$RUNNER_HOME/.cargo/bin/cargo" rustup="$RUNNER_HOME/.cargo/bin/rustup" t tmp svc unit dropin
+  as_runner() { su - "$RUNNER_USER" -c "$*"; }
+  # 1. the user: own group, no sudo, no membership of build; /home/runner 750 like the other homes
+  if ! id -u "$RUNNER_USER" >/dev/null 2>&1; then useradd -m -s /bin/bash "$RUNNER_USER"; any=1; fi
+  id -nG "$RUNNER_USER" | tr ' ' '\n' | grep -qx sudo && die "the runner user must never be in sudo"
+  # 2. the runner itself, from the GitHub release with the published sha256
+  if [ ! -x "$RUNNER_DIR/run.sh" ] || ! grep -q "\"$RUNNER_VERSION\"" "$RUNNER_DIR/.runner_version" 2>/dev/null; then
+    [ ! -d "$RUNNER_DIR" ] || [ ! -f "$RUNNER_DIR/.runner" ] || log "runner: a configured runner is in place; the tarball is updated underneath it (the service restarts below)"
+    install -d -m 755 -o "$RUNNER_USER" -g "$RUNNER_USER" "$RUNNER_DIR"
+    tarball="actions-runner-linux-x64-$RUNNER_VERSION.tar.gz"
+    tmp=$(mktemp -d)
+    ( cd "$tmp" && curl -fsSLO "https://github.com/actions/runner/releases/download/v$RUNNER_VERSION/$tarball" \
+      && printf '%s  %s\n' "$RUNNER_SHA256" "$tarball" | sha256sum -c --quiet - ) || { rm -rf "$tmp"; die "runner tarball download or sha256 check failed (version $RUNNER_VERSION)"; }
+    tar -xzf "$tmp/$tarball" -C "$RUNNER_DIR"      # as root: the temp dir is root-only; ownership handed over below
+    chown -R "$RUNNER_USER:$RUNNER_USER" "$RUNNER_DIR"
+    rm -rf "$tmp"
+    printf '"%s"\n' "$RUNNER_VERSION" > "$RUNNER_DIR/.runner_version"; chown "$RUNNER_USER:$RUNNER_USER" "$RUNNER_DIR/.runner_version"
+    any=1
+  fi
+  # 3. toolchains for the runner user: rustup pinned like the box's, both targets, clippy and rustfmt
+  if [ ! -x "$rustup" ]; then
+    as_runner "curl -fsSL https://sh.rustup.rs | sh -s -- -y --profile minimal --no-modify-path --default-toolchain $RUST_TOOLCHAIN" >/dev/null; any=1
+  fi
+  as_runner "$rustup toolchain list" | grep -q "^$RUST_TOOLCHAIN-" || { as_runner "$rustup toolchain install $RUST_TOOLCHAIN --profile minimal" >/dev/null; any=1; }
+  [ "$(as_runner "$rustup default" | cut -d- -f1)" = "$RUST_TOOLCHAIN" ] || { as_runner "$rustup default $RUST_TOOLCHAIN" >/dev/null; any=1; }
+  for t in x86_64-pc-windows-gnu x86_64-unknown-linux-gnu; do
+    as_runner "$rustup target list --installed --toolchain $RUST_TOOLCHAIN" | grep -qx "$t" || { as_runner "$rustup target add $t --toolchain $RUST_TOOLCHAIN" >/dev/null; any=1; }
+  done
+  as_runner "$rustup component list --installed --toolchain $RUST_TOOLCHAIN" | grep -q '^clippy' || { as_runner "$rustup component add clippy rustfmt --toolchain $RUST_TOOLCHAIN" >/dev/null; any=1; }
+  as_runner "git config --global --get safe.directory >/dev/null 2>&1 || git config --global --add safe.directory '*'"   # the mirrors are owned by build
+  # 4. sccache: the build user's binary copied system-wide (the runner cannot read /home/build), a read-only view of /srv/sccache
+  if [ ! -x /usr/local/bin/sccache ] || ! cmp -s "$BUILD_HOME/.cargo/bin/sccache" /usr/local/bin/sccache; then
+    install -m 755 "$BUILD_HOME/.cargo/bin/sccache" /usr/local/bin/sccache; any=1
+  fi
+  install -d -m 755 -o "$RUNNER_USER" -g "$RUNNER_USER" "$RUNNER_HOME/.config" "$RUNNER_HOME/.config/sccache"
+  tmp=$(mktemp)
+  printf '[cache.disk]\ndir = "/srv/sccache"\nsize = %s\nrw_mode = "READ_ONLY"\n' "$(( SCCACHE_GB * 1024 * 1024 * 1024 ))" > "$tmp"
+  if ! cmp -s "$tmp" "$RUNNER_HOME/.config/sccache/config"; then install -m 644 -o "$RUNNER_USER" -g "$RUNNER_USER" "$tmp" "$RUNNER_HOME/.config/sccache/config"; any=1; fi
+  rm -f "$tmp"
+  # 6. registration (once; --replace re-registers under the same name after a token is given again)
+  if [ ! -f "$RUNNER_DIR/.runner" ]; then
+    if [ -z "$RUNNER_TOKEN" ]; then
+      log "runner: NOT registered: no RUNNER_TOKEN. From the Mac: infra/build-server/runner/register.sh (gh as igneum-labs fetches a registration token and pipes it here)"
+      return
+    fi
+    # the token goes to config.sh as an argument of a process owned by runner for a second; it is a one-hour registration
+    # token (not the runner's credential, which config.sh writes to .credentials, mode 600, owner runner), never logged here
+    RUNNER_TOKEN="$RUNNER_TOKEN" runuser -u "$RUNNER_USER" -- bash -c "cd '$RUNNER_DIR' && ./config.sh --unattended --replace --url '$RUNNER_REPO_URL' --token \"\$RUNNER_TOKEN\" --name '$RUNNER_NAME' --labels '$RUNNER_LABELS' --work _work" >/dev/null \
+      || die "runner: config.sh failed (an expired token? register.sh fetches a fresh one)"
+    any=1
+    log "runner: registered as $RUNNER_NAME with labels self-hosted, linux, x64, $RUNNER_LABELS"
+  fi
+  # 7. the service: GitHub's unit (User=runner, KillMode=process) plus Nice and a restart on failure
+  svc="actions.runner.$(sed -n 's/.*"gitHubUrl": *"https:\/\/github.com\/\([^"]*\)".*/\1/p' "$RUNNER_DIR/.runner" | tr '/' '-').$RUNNER_NAME.service"
+  unit="/etc/systemd/system/$svc"
+  if [ ! -f "$unit" ]; then ( cd "$RUNNER_DIR" && ./svc.sh install "$RUNNER_USER" >/dev/null ) || die "runner: svc.sh install failed"; any=1; fi
+  # 8. the job environment, AFTER svc.sh install: its env.sh rewrites .env and .path from the installing shell (6 October 2026:
+  #    the second provision run found them changed and restarted the service for nothing); the runner reads both at start
+  tmp=$(mktemp); runner_env_file > "$tmp"
+  if ! cmp -s "$tmp" "$RUNNER_DIR/.env"; then install -m 644 -o "$RUNNER_USER" -g "$RUNNER_USER" "$tmp" "$RUNNER_DIR/.env"; any=1; fi
+  rm -f "$tmp"
+  tmp=$(mktemp); printf '%s\n' "$RUNNER_HOME/.cargo/bin:/usr/local/bin:/usr/bin:/bin" > "$tmp"
+  if ! cmp -s "$tmp" "$RUNNER_DIR/.path"; then install -m 644 -o "$RUNNER_USER" -g "$RUNNER_USER" "$tmp" "$RUNNER_DIR/.path"; any=1; fi
+  rm -f "$tmp"
+  dropin="/etc/systemd/system/$svc.d/igneum.conf"
+  tmp=$(mktemp)
+  printf '# igneum-build-1 (infra/build-server/provision.sh step_runner)\n[Service]\nNice=10\nIOSchedulingClass=best-effort\nIOSchedulingPriority=7\nRestart=on-failure\nRestartSec=30\n' > "$tmp"
+  install -d -m 755 "$(dirname "$dropin")"
+  if ! cmp -s "$tmp" "$dropin"; then install -m 644 "$tmp" "$dropin"; systemctl daemon-reload; any=1; fi
+  rm -f "$tmp"
+  systemctl enable --quiet "$svc" 2>/dev/null || true
+  if [ "$any" = 1 ]; then systemctl restart "$svc"; else systemctl is-active --quiet "$svc" || systemctl start "$svc"; fi
+  sleep 2
+  systemctl is-active --quiet "$svc" || die "runner: $svc is not active: journalctl -u '$svc' -n 30"
+  [ "$any" = 1 ] && changed runner "$svc active as $RUNNER_USER, runner $RUNNER_VERSION, $(as_runner "$cargo --version"), sccache read-only on /srv/sccache, jobs $RUNNER_JOBS" \
+                 || ok runner "$svc active, runner $RUNNER_VERSION, $(as_runner "$cargo --version")"
+}
+
+# cargo tools the night battery needs (infra/build-server/night): cargo-audit for the advisory check of every Cargo.lock
+step_cargo_tools() {
+  local cargo="$BUILD_HOME/.cargo/bin/cargo" any=0
+  if [ ! -x "$BUILD_HOME/.cargo/bin/cargo-audit" ]; then as_build "$cargo install cargo-audit --locked" >/dev/null 2>&1 || as_build "$cargo install cargo-audit" >/dev/null; any=1; fi
+  [ "$any" = 1 ] && changed cargo-tools "$(as_build "$BUILD_HOME/.cargo/bin/cargo-audit --version")" || ok cargo-tools "$(as_build "$BUILD_HOME/.cargo/bin/cargo-audit --version")"
+}
+
+# the night battery (infra/build-server/night): the script and remote-run.sh into /srv/builds/_bin, the two units, the timer
+# enabled. The files come out of the bare mirror /srv/igneum.git at NIGHT_REF (master; a branch while the work is unmerged),
+# so provision.sh stays one piped file and the box runs what the repository holds. The battery re-execs itself from master's
+# checkout at run time, so the copy here only has to be good enough to check out.
+NIGHT_REF="${NIGHT_REF:-master}"
+step_night() {
+  local any=0 f tmp u
+  install -d -m 755 -o "$BUILD_USER" -g "$BUILD_USER" /srv/builds/_bin /srv/builds/_night /srv/builds/_log
+  as_build "git -C /srv/igneum.git cat-file -e '$NIGHT_REF:infra/build-server/night/night-battery.sh'" 2>/dev/null || { log "night: $NIGHT_REF on /srv/igneum.git has no infra/build-server/night/night-battery.sh (push the branch, or NIGHT_REF=<branch>)"; return; }
+  for f in infra/build-server/night/night-battery.sh infra/build-server/remote-run.sh; do
+    tmp=$(mktemp); as_build "git -C /srv/igneum.git show '$NIGHT_REF:$f'" > "$tmp"
+    if ! cmp -s "$tmp" "/srv/builds/_bin/$(basename "$f")"; then install -m 755 -o "$BUILD_USER" -g "$BUILD_USER" "$tmp" "/srv/builds/_bin/$(basename "$f")"; any=1; fi
+    rm -f "$tmp"
+  done
+  for u in igneum-night-battery.service igneum-night-battery.timer; do
+    tmp=$(mktemp); as_build "git -C /srv/igneum.git show '$NIGHT_REF:infra/build-server/night/$u'" > "$tmp"
+    if ! cmp -s "$tmp" "/etc/systemd/system/$u"; then install -m 644 "$tmp" "/etc/systemd/system/$u"; any=1; fi
+    rm -f "$tmp"
+  done
+  [ "$any" = 1 ] && systemctl daemon-reload
+  systemctl is-enabled --quiet igneum-night-battery.timer 2>/dev/null || { systemctl enable --now --quiet igneum-night-battery.timer; any=1; }
+  systemctl is-active --quiet igneum-night-battery.timer || systemctl start igneum-night-battery.timer
+  [ "$any" = 1 ] && changed night "timer $(systemctl list-timers igneum-night-battery.timer --no-pager --no-legend | awk '{ print $1, $2, $3, $4 }'), files from $NIGHT_REF" \
+                 || ok night "next $(systemctl list-timers igneum-night-battery.timer --no-pager --no-legend | awk '{ print $1, $2, $3, $4 }')"
+}
+
 step_summary() {
   log "summary:"
   {
@@ -424,6 +579,8 @@ step_summary() {
     printf 'ufw: %s\n' "$(ufw status | grep -E 'ALLOW' | awk '{ print $1 }' | tr '\n' ' ')"
     printf 'caddy: %s, %s\n' "$(caddy version 2>/dev/null | cut -d' ' -f1)" "$(systemctl is-active caddy 2>/dev/null) at https://$WORKERS_HOST/headline.json"
     printf 'cuda headers: %s\n' "$(ls -d /usr/local/cuda-*/include 2>/dev/null | tr '\n' ' ')$( [ -f /usr/include/CL/cl.h ] && echo '+ CL/cl.h' )"
+    printf 'runner: %s\n' "$( [ -f "$RUNNER_DIR/.runner" ] && printf '%s, %s, user %s' "$(systemctl list-units --type=service --no-legend 'actions.runner.*' | awk '{ print $1 ": " $4 }' | head -1)" "v$(tr -d '"' < "$RUNNER_DIR/.runner_version" 2>/dev/null)" "$RUNNER_USER" || echo "installed, NOT registered (infra/build-server/runner/register.sh)" )"
+    printf 'night battery: %s\n' "$(systemctl list-timers igneum-night-battery.timer --no-pager --no-legend 2>/dev/null | awk '{ print "next " $1, $2, $3, $4 }')"
     printf 'ssh line: ssh -i ~/.ssh/igneum_ed25519 build@%s\n' "$(hostname -I 2>/dev/null | awk '{ print $1 }')"
   } | sed 's/^/  /'
 }
@@ -448,6 +605,9 @@ do_provision() {
   step_caddy
   step_cuda
   step_ufw
+  step_runner
+  step_cargo_tools
+  step_night
   step_summary
   log "done"
 }
diff --git a/infra/build-server/remote-run.sh b/infra/build-server/remote-run.sh
index bb626a2f6..c09f3c5b4 100755
--- a/infra/build-server/remote-run.sh
+++ b/infra/build-server/remote-run.sh
@@ -10,8 +10,15 @@
 #   BR_ARTEFACTS  space-separated paths (relative to BR_DIR) the Mac will fetch; empty for test, check, clippy
 #
 # 1. Takes a build slot: flock on $IGNEUM_BUILD_SLOTS_DIR/build-<k> for k below the count in .../slots (the box's own slot
-#    files, never the Mac's); when every slot is busy it waits up to 2 h on build-0 and exits 75 if it gives up. The holder
-#    line is `pid N since HH:MM:SSZ waited S s: <label>`, the format tools/lock/with-lock.sh writes on the Mac.
+#    files, never the Mac's; 2 since main's ruling of 6 October 2026, 20:3x UK); when every slot is busy it waits up to 2 h on
+#    build-0 and exits 75 if it gives up. The holder line is `pid N since HH:MM:SSZ waited S s: <label>`, the format
+#    tools/lock/with-lock.sh writes on the Mac. The cargo job count follows the slots: after one second of settling, a build
+#    that holds the only taken slot gets CARGO_BUILD_JOBS=90, one that sees the other slot held gets 45 (JOBS_ALONE and
+#    JOBS_SHARED), so two builds share the 96 threads without thrashing; a `-j` on the cargo line (--jobs on the Mac) wins.
+#    A MEASUREMENT (BR_MEASURE=1: the CPU prover timing, bench rows) takes the `measure` file exclusively and excludes every
+#    build, as with-lock.sh's `measure` does on the Mac: builds hold `measure` shared for their whole run, so a measure waits
+#    for the running builds and blocks new ones until it ends. Lock files are opened in APPEND mode: the first version opened
+#    them with `>` and truncated a busy slot's holder line every time another build probed it (found 6 October 2026, evening).
 # 2. Runs BR_CMD in BR_DIR with sccache, prints one `build-remote: RESULT rc= secs= compiles= sccache_hits_total= ...` line.
 # 3. Appends one JSON line to /srv/builds/_log/builds.jsonl (the worker dashboard reads it; asked for by main on 6 October
 #    2026): on success, on failure and on the slot give-up. UTC ISO 8601 Z times, numbers unquoted, unknown fields omitted,
@@ -21,9 +28,16 @@
 # bs_push_and_checkout: BR_CO_DIR, BR_CO_MIRROR, BR_CO_BRANCH, BR_CO_SHA, BR_CO_WT); `--self-test` (first argument) builds a
 # scratch mirror and clone, dirties the clone the way a build's overlay does, moves the mirror one commit on, and shows the
 # checkout mode lands on the new commit with a clean tree (the 6 October 2026 case: a stale overlay made `git checkout -B`
-# refuse with "local changes would be overwritten").
+# refuse with "local changes would be overwritten"); `--self-test-slots` runs fake builds and a fake measurement against a
+# scratch slots directory: two concurrent builds get 45 jobs each, one alone gets 90, a measure blocks a build and a build
+# blocks a measure, and a probing build leaves a busy slot's holder line intact (IGNEUM_REMOTE_RUN_UNDER_TEST=<script> runs
+# the cases against another copy, which is how the old script was shown to fail them).
 set -uo pipefail
+# the profile sets the box's paths; an IGNEUM_BUILD_SLOTS_DIR or IGNEUM_BUILD_LOG_DIR already in the environment wins (the slot
+# self-test runs against a scratch directory; the first version let the profile reset it and the test took the REAL slot)
+_slots_env="${IGNEUM_BUILD_SLOTS_DIR:-}"; _log_env="${IGNEUM_BUILD_LOG_DIR:-}"
 [ -f /etc/profile.d/igneum-build.sh ] && . /etc/profile.d/igneum-build.sh
+[ -n "$_slots_env" ] && IGNEUM_BUILD_SLOTS_DIR="$_slots_env"; [ -n "$_log_env" ] && IGNEUM_BUILD_LOG_DIR="$_log_env"
 
 # discard the previous overlay (tracked edits and untracked files; target dirs, the sha stamps and anything ignored are kept),
 # fetch, then the branch at the commit. Runs in BR_CO_DIR, clones it from BR_CO_MIRROR when it has no .git.
@@ -85,6 +99,40 @@ if [ "${1:-}" = --self-test ]; then
   echo "self-test: checkout mode lands on the new commit with a clean tree, target dirs and sha stamps kept at any depth, stale index.lock removed, and fires on a stray file"; exit 0
 fi
 
+if [ "${1:-}" = --self-test-slots ]; then
+  me="${IGNEUM_REMOTE_RUN_UNDER_TEST:-$0}"
+  t=$(mktemp -d); trap 'rm -rf "$t"' EXIT
+  mkdir -p "$t/locks" "$t/log" "$t/dir"; echo 2 > "$t/locks/slots"
+  fake() {   # <name> <seconds> [BR_MEASURE=1]: a fake run that records its start and end epoch and the job count it was given
+    local name="$1" secs="$2" measure="${3:-0}"
+    IGNEUM_BUILD_SLOTS_DIR="$t/locks" IGNEUM_BUILD_LOG_DIR="$t/log" BR_MEASURE="$measure" BR_DIR="$t/dir" BR_CMD="date +%s.%N > '$t/$name.start'; echo JOBS=\${CARGO_BUILD_JOBS:-none} > '$t/$name.jobs'; sleep $secs; date +%s.%N > '$t/$name.end'" \
+      BR_LABEL="self-test $name" BR_TOOL=self-test BR_KIND=other BR_WT=t BR_CRATE=t BR_BRANCH=t BR_SHA=0 BR_AGENT=self-test BR_COMMAND="fake $name" \
+      bash "$me" >"$t/$name.out" 2>&1
+  }
+  fail() { echo "self-test-slots: FAIL: $*"; exit 1; }
+  after() { python3 -c "import sys; sys.exit(0 if float(open(sys.argv[1]).read()) >= float(open(sys.argv[2]).read()) else 1)" "$1" "$2"; }
+  # 1. two concurrent builds: 45 jobs each
+  fake a 3 & fake b 3 & wait
+  [ "$(cat "$t/a.jobs")" = JOBS=45 ] && [ "$(cat "$t/b.jobs")" = JOBS=45 ] || fail "two concurrent builds got $(cat "$t/a.jobs" "$t/b.jobs" | tr '\n' ' ') (want JOBS=45 JOBS=45)"
+  # 2. one build alone: 90
+  fake c 1
+  [ "$(cat "$t/c.jobs")" = JOBS=90 ] || fail "a lone build got $(cat "$t/c.jobs") (want JOBS=90)"
+  # 3. a measure blocks a build: the build starts only after the measure ended
+  fake m 3 1 & sleep 0.5; fake d 1 & wait
+  after "$t/d.start" "$t/m.end" || fail "a build started while a measurement held the box (build start $(cat "$t/d.start"), measure end $(cat "$t/m.end"))"
+  [ "$(cat "$t/m.jobs")" = JOBS=none ] || fail "a measurement was given a job count"
+  # 4. a build blocks a measure: the measure starts only after the build ended
+  fake e 3 & sleep 0.5; fake n 1 1 & wait
+  after "$t/n.start" "$t/e.end" || fail "a measurement started while a build ran (measure start $(cat "$t/n.start"), build end $(cat "$t/e.end"))"
+  # 5. a probing build leaves a busy slot's holder line intact
+  fake f 3 & sleep 1.2; fake g 1 & sleep 0.3
+  grep -q 'self-test f' "$t/locks/build-0" || fail "the holder line of the busy slot build-0 was lost when another build probed it: '$(cat "$t/locks/build-0")'"
+  wait
+  # 6. the log carries the job count and the measure flag
+  grep -q '"jobs":45' "$t/log/builds.jsonl" && grep -q '"measure":true' "$t/log/builds.jsonl" || fail "builds.jsonl lacks jobs or measure fields"
+  echo "self-test-slots: two concurrent builds 45 each, a lone build 90, a measure blocks a build, a build blocks a measure, a probe keeps the holder line, the log carries jobs and measure"; exit 0
+fi
+
 if [ "${BR_MODE:-run}" = checkout ]; then
   : "${BR_CO_DIR:?}" "${BR_CO_MIRROR:?}" "${BR_CO_BRANCH:?}" "${BR_CO_SHA:?}"
   checkout_tree "$BR_CO_DIR" "$BR_CO_MIRROR" "$BR_CO_BRANCH" "$BR_CO_SHA" "${BR_CO_WT:-}"; exit $?
@@ -93,7 +141,7 @@ fi
 : "${BR_DIR:?}" "${BR_CMD:?}" "${BR_LABEL:?}" "${BR_TOOL:?}" "${BR_KIND:?}"
 BR_HOST=$(hostname); BR_PID=$$; BR_T0=$(date +%s)
 export BR_HOST BR_PID BR_T0
-LOG_DIR=/srv/builds/_log; mkdir -p "$LOG_DIR"
+LOG_DIR="${IGNEUM_BUILD_LOG_DIR:-/srv/builds/_log}"; mkdir -p "$LOG_DIR"
 
 # jsonlog <exit> <slot> <wait_s> <start> <end> <secs> <compiles> <hits> <misses> <hits_total> <misses_total>
 jsonlog() {
@@ -112,7 +160,8 @@ d = {
     "target": e.get('BR_TARGET'), "branch": e.get('BR_BRANCH'), "sha": e.get('BR_SHA'), "label": e['BR_LABEL'],
     "agent": e.get('BR_AGENT'), "slot": num(e['BR_SLOT']), "wait_s": num(e['BR_WAIT']), "queued_at": iso(e['BR_T0']),
     "start": iso(e['BR_START']), "end": iso(e['BR_END']), "secs": num(e['BR_SECS']), "exit": num(e['BR_EXIT']),
-    "compiles": num(e['BR_COMPILES']),
+    "compiles": num(e['BR_COMPILES']), "jobs": num(e.get('BR_JOBS')), "measure": (e.get('BR_MEASURE') == '1') or None,
+    "source_date_epoch": num(e.get('BR_SDE')),
 }
 sc = {k: num(e[v]) for k, v in (("hits", "BR_HITS"), ("misses", "BR_MISSES"), ("hits_total", "BR_HITS_T"), ("misses_total", "BR_MISSES_T"))}
 sc = {k: v for k, v in sc.items() if v is not None}
@@ -143,35 +192,73 @@ with open(e['BR_LOG'], 'a') as f:
 PY
 }
 
-slots=$(cat "$IGNEUM_BUILD_SLOTS_DIR/slots" 2>/dev/null || echo 1); [ "$slots" -ge 1 ] 2>/dev/null || slots=1
-got=""
-for k in $(seq 0 $((slots - 1))); do
-  exec {fd}>"$IGNEUM_BUILD_SLOTS_DIR/build-$k"
-  if flock -n "$fd"; then got=$k; break; fi
-  exec {fd}>&-
-done
-if [ -z "$got" ]; then
-  echo "build-remote: all $slots slot(s) busy, waiting (up to 2 h) for build-0: $(head -c 160 "$IGNEUM_BUILD_SLOTS_DIR/build-0" 2>/dev/null)" >&2
-  # the queue is visible while it waits (the worker dashboard reads wait-* files; asked for on 6 October 2026): the same line
-  # format as a slot file, removed the moment the slot is taken or the wait is given up
-  waitfile="$IGNEUM_BUILD_SLOTS_DIR/wait-$BR_PID"
-  printf 'pid %s since %sZ waited 0 s: %s\n' "$BR_PID" "$(date -u +%H:%M:%S)" "$BR_LABEL" > "$waitfile"
-  trap 'rm -f "$waitfile"' EXIT
-  exec {fd}>"$IGNEUM_BUILD_SLOTS_DIR/build-0"
-  if ! flock -w 7200 "$fd"; then
-    echo "build-remote: gave up waiting for a slot after 2 h" >&2
-    jsonlog 75 0 $(( $(date +%s) - BR_T0 )) "" "$(date +%s)" "" "" "" "" "" ""
-    rm -f "$waitfile"
-    exit 75
+SLOTS_DIR="$IGNEUM_BUILD_SLOTS_DIR"
+slots=$(cat "$SLOTS_DIR/slots" 2>/dev/null || echo 1); [ "$slots" -ge 1 ] 2>/dev/null || slots=1
+JOBS_ALONE="${JOBS_ALONE:-90}"; JOBS_SHARED="${JOBS_SHARED:-45}"
+holder_line() { printf 'pid %s since %sZ waited %s s: %s\n' "$BR_PID" "$(date -u +%H:%M:%S)" "$1" "$BR_LABEL"; }
+give_up() {   # <what>
+  echo "build-remote: gave up waiting for $1 after 2 h" >&2
+  jsonlog 75 0 $(( $(date +%s) - BR_T0 )) "" "$(date +%s)" "" "" "" "" "" ""
+  rm -f "$waitfile"; exit 75
+}
+waitfile="$SLOTS_DIR/wait-$BR_PID"
+# append mode: opening a lock file must never truncate the holder line another run wrote into it
+exec {mfd}>>"$SLOTS_DIR/measure"
+if [ "${BR_MEASURE:-0}" = 1 ]; then
+  # a measurement: the measure file exclusively; every running build holds it shared, so this waits for them and blocks new ones
+  if ! flock -n "$mfd"; then
+    echo "build-remote: measure waits for the running build(s) (up to 2 h): $(for f in "$SLOTS_DIR"/build-*; do head -c 120 "$f" 2>/dev/null; done | tr '\n' ' ')" >&2
+    holder_line 0 > "$waitfile"; trap 'rm -f "$waitfile"' EXIT
+    flock -w 7200 "$mfd" || give_up "the measure hold"
+    rm -f "$waitfile"; trap - EXIT
   fi
-  rm -f "$waitfile"; trap - EXIT
-  got=0
+  waited=$(( $(date +%s) - BR_T0 )); got=measure
+  holder_line "$waited" > "$SLOTS_DIR/measure"
+  echo "build-remote: holding measure on $BR_HOST (waited $waited s; builds are excluded until this run ends)" >&2
+else
+  # a build: the measure file shared (a running measurement blocks us), then one exclusive slot
+  if ! flock -s -n "$mfd"; then
+    echo "build-remote: a measurement holds the box, waiting (up to 2 h): $(head -c 160 "$SLOTS_DIR/measure" 2>/dev/null)" >&2
+    holder_line 0 > "$waitfile"; trap 'rm -f "$waitfile"' EXIT
+    flock -s -w 7200 "$mfd" || give_up "the measurement to end"
+    rm -f "$waitfile"; trap - EXIT
+  fi
+  got=""
+  for k in $(seq 0 $((slots - 1))); do
+    exec {fd}>>"$SLOTS_DIR/build-$k"
+    if flock -n "$fd"; then got=$k; break; fi
+    exec {fd}>&-
+  done
+  if [ -z "$got" ]; then
+    echo "build-remote: all $slots slot(s) busy, waiting (up to 2 h) for build-0: $(head -c 160 "$SLOTS_DIR/build-0" 2>/dev/null)" >&2
+    # the queue is visible while it waits (the worker dashboard reads wait-* files; asked for on 6 October 2026): the same line
+    # format as a slot file, removed the moment the slot is taken or the wait is given up
+    holder_line 0 > "$waitfile"; trap 'rm -f "$waitfile"' EXIT
+    exec {fd}>>"$SLOTS_DIR/build-0"
+    flock -w 7200 "$fd" || give_up "a slot"
+    rm -f "$waitfile"; trap - EXIT
+    got=0
+  fi
+  waited=$(( $(date +%s) - BR_T0 ))
+  holder_line "$waited" > "$SLOTS_DIR/build-$got"
+  # the job count: let a build that started in the same second take its slot, then count the slots held (this one included)
+  sleep 1
+  held=0
+  for k in $(seq 0 $((slots - 1))); do
+    if [ "$k" = "$got" ]; then held=$((held + 1)); continue; fi
+    exec {tfd}>>"$SLOTS_DIR/build-$k"
+    if flock -n "$tfd"; then flock -u "$tfd"; else held=$((held + 1)); fi
+    exec {tfd}>&-
+  done
+  if [ "$held" -gt 1 ]; then BR_JOBS=$JOBS_SHARED; else BR_JOBS=$JOBS_ALONE; fi
+  export CARGO_BUILD_JOBS="$BR_JOBS" BR_JOBS
+  echo "build-remote: holding build-$got on $BR_HOST (waited $waited s; $held of $slots slots held, CARGO_BUILD_JOBS=$BR_JOBS)" >&2
 fi
-waited=$(( $(date +%s) - BR_T0 ))
-printf 'pid %s since %sZ waited %s s: %s\n' "$BR_PID" "$(date -u +%H:%M:%S)" "$waited" "$BR_LABEL" > "$IGNEUM_BUILD_SLOTS_DIR/build-$got"
-echo "build-remote: holding build-$got on $BR_HOST (waited $waited s)" >&2
 
 cd "$BR_DIR" || { jsonlog 2 "$got" "$waited" "" "$(date +%s)" "" "" "" "" "" ""; exit 2; }
+# reproducible builds (main, 6 October 2026, the 0.3.14 repro): the commit's author time as SOURCE_DATE_EPOCH (mimalloc's
+# __DATE__/__TIME__), UTC; the target dir is fixed per target by the caller (prost's generated code embeds OUT_DIR)
+if [ -n "${BR_SDE:-}" ]; then export SOURCE_DATE_EPOCH="$BR_SDE" TZ=UTC; echo "build-remote: SOURCE_DATE_EPOCH=$BR_SDE TZ=UTC" >&2; fi
 sccache --start-server >/dev/null 2>&1 || true
 stat_field() { sccache --show-stats 2>/dev/null | awk -v key="$1" 'index($0, key) == 1 { print $NF; exit }'; }
 exec_before=$(stat_field "Compile requests executed"); hits_before=$(stat_field "Cache hits "); misses_before=$(stat_field "Cache misses ")
@@ -183,8 +270,8 @@ rc=$?
 t2=$(date +%s); secs=$(( t2 - t1 ))
 exec_after=$(stat_field "Compile requests executed"); hits_after=$(stat_field "Cache hits "); misses_after=$(stat_field "Cache misses ")
 compiles=$(( ${exec_after:-0} - ${exec_before:-0} )); hits=$(( ${hits_after:-0} - ${hits_before:-0} )); misses=$(( ${misses_after:-0} - ${misses_before:-0} ))
-printf 'build-remote: RESULT rc=%s secs=%s compiles=%s sccache_hits=%s sccache_misses=%s sccache_hits_total=%s sccache_misses_total=%s load=%s\n' \
-  "$rc" "$secs" "$compiles" "$hits" "$misses" "${hits_after:-?}" "${misses_after:-?}" "$(cut -d' ' -f1-3 /proc/loadavg)"
-jsonlog "$rc" "$got" "$waited" "$t1" "$t2" "$secs" "$compiles" "$hits" "$misses" "${hits_after:-}" "${misses_after:-}"
-: > "$IGNEUM_BUILD_SLOTS_DIR/build-$got"
+printf 'build-remote: RESULT rc=%s secs=%s compiles=%s sccache_hits=%s sccache_misses=%s sccache_hits_total=%s sccache_misses_total=%s jobs=%s load=%s\n' \
+  "$rc" "$secs" "$compiles" "$hits" "$misses" "${hits_after:-?}" "${misses_after:-?}" "${BR_JOBS:-measure}" "$(cut -d' ' -f1-3 /proc/loadavg)"
+jsonlog "$rc" "$([ "$got" = measure ] && echo "" || echo "$got")" "$waited" "$t1" "$t2" "$secs" "$compiles" "$hits" "$misses" "${hits_after:-}" "${misses_after:-}"
+if [ "$got" = measure ]; then : > "$SLOTS_DIR/measure"; else : > "$SLOTS_DIR/build-$got"; fi
 exit "$rc"
diff --git a/infra/build-server/repro/rebuild-on-box.sh b/infra/build-server/repro/rebuild-on-box.sh
new file mode 100755
index 000000000..ff23c9eea
--- /dev/null
+++ b/infra/build-server/repro/rebuild-on-box.sh
@@ -0,0 +1,167 @@
+#!/usr/bin/env bash
+# Reproducible-build check, the box half (runs ON igneum-build-1 as user build; tools/repro/rebuild-release.sh drives it).
+#   rebuild-on-box.sh --version 0.3.14 --node-commit <sha> --app-commit <sha> [--node-branch release-0.3.14-node]
+#                     [--shipped igneumd=<sha256> --shipped igneumd.exe=<sha256> ...] [--public] [--out <md>] [--passes 2]
+# What it does:
+#   1. a CLEAN layout at /srv/builds/_repro/<version>/: the igneum repo cloned from /srv/igneum.git at the app commit (this gives
+#      igneum-pow as the ship worktree had it) and the fork cloned from /srv/igneum-node.git at the node commit under
+#      vendor/igneum-node, checked out ON A BRANCH (kaspa-build-info embeds the commit only from a .git directory on a branch:
+#      the empty-commit class of 6 October 2026); the fork's path dependency ../../../../igneum-pow resolves as on the Mac.
+#   2. --passes builds (default 2) of the Linux igneumd and igneum-miner and of the Windows exes, each pass a CLEAN build in
+#      the SAME target path per target (target-repro-linux, target-repro-windows; the artefacts are copied to pass-<kind>-<X>/
+#      before the next pass wipes the dir), WITHOUT sccache (a hit would hand pass B pass A's object and hide a
+#      non-determinism), each under a build slot through remote-run.sh (one JSONL line per pass, kind node-linux or
+#      node-windows, tool repro). The Windows environment is cross-remote.sh's, flag for flag (static libgcc and libstdc++,
+#      -Wl,--no-insert-timestamp). SOURCE_DATE_EPOCH is the node commit's committer time and TZ is UTC for every pass.
+#      Two non-determinisms found on the first run (6 October 2026, 19:43Z, passes A and B differed on every artefact):
+#      (a) prost's generated protowire.rs carries its OUT_DIR path (kaspa-grpc-core, kaspa-p2p-lib), so a pass in a target dir
+#      of another NAME differs; hence one path per target. (b) libmimalloc-sys compiles mimalloc's C with __DATE__ and
+#      __TIME__ (the strings "Oct  6 2026" and "21:38:15" sat in libmimalloc.a), so two builds a minute apart differ; GCC
+#      and clang take the time from SOURCE_DATE_EPOCH when it is set, hence the export. Both apply to the shipped builds too.
+#   3. --public: the shipped hashes are READ FROM THE PUBLIC ARTEFACTS, no token: igneum-hive-<v>.tar.gz (igneumd, igneum-miner)
+#      and Igneum-Miner-Setup-<v>.exe through innoextract (igneumd.exe, igneum-miner.exe); --shipped values add or override.
+#   4. the evidence: a markdown table per artefact (shipped sha256 and its source, every pass's sha256 and size, MATCH or DIFFER
+#      against the shipped bytes, pass A against pass B, and the reason for a DIFFER from facts read off the binaries: the
+#      glibc symbol version the shipped Linux binary needs, the PE timestamp of the shipped exe, whether the commit string is
+#      in it); written to --out (default /srv/builds/_repro/<version>/<version>.md) and printed.
+set -euo pipefail
+_slots_env="${IGNEUM_BUILD_SLOTS_DIR:-}"; [ -f /etc/profile.d/igneum-build.sh ] && . /etc/profile.d/igneum-build.sh; [ -n "$_slots_env" ] && IGNEUM_BUILD_SLOTS_DIR="$_slots_env"
+VERSION=""; NODE_SHA=""; APP_SHA=""; NODE_BRANCH=""; PUBLIC=0; OUT=""; PASSES=2; REUSE=0; declare -A SHIPPED SHIPPED_SRC
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --version) VERSION="$2"; shift 2 ;; --node-commit) NODE_SHA="$2"; shift 2 ;; --app-commit) APP_SHA="$2"; shift 2 ;;
+    --node-branch) NODE_BRANCH="$2"; shift 2 ;; --shipped) SHIPPED["${2%%=*}"]="${2#*=}"; SHIPPED_SRC["${2%%=*}"]="given"; shift 2 ;;
+    --public) PUBLIC=1; shift ;; --out) OUT="$2"; shift 2 ;; --passes) PASSES="$2"; shift 2 ;; --reuse) REUSE=1; shift ;;   # --reuse: a re-report on passes already on disk (not a clean rebuild)
+    *) echo "unknown argument $1" >&2; exit 2 ;;
+  esac
+done
+[ -n "$VERSION" ] && [ -n "$NODE_SHA" ] && [ -n "$APP_SHA" ] || { echo "need --version, --node-commit and --app-commit" >&2; exit 2; }
+[ -n "$NODE_BRANCH" ] || NODE_BRANCH="release-$VERSION-node"
+RR="${IGNEUM_REMOTE_RUN:-/srv/builds/_bin/remote-run.sh}"; [ -f "$RR" ] || { echo "no $RR" >&2; exit 2; }
+ROOT=/srv/builds/_repro/$VERSION; mkdir -p "$ROOT"; [ -n "$OUT" ] || OUT="$ROOT/$VERSION.md"
+LOG="$ROOT/rebuild.log"; : > "$LOG"
+say() { printf '%s repro: %s\n' "$(date -u +%H:%M:%S)" "$*" | tee -a "$LOG" >&2; }
+sha() { sha256sum "$1" | cut -d' ' -f1; }
+WIN=x86_64-pc-windows-gnu
+T_ALL=$(date +%s)
+
+# 1. the clean layout
+say "layout $ROOT: igneum at $APP_SHA, fork at $NODE_SHA on branch $NODE_BRANCH"
+if [ "$REUSE" = 1 ] && [ -d "$ROOT/igneum/.git" ]; then say "layout reused (--reuse)"; else rm -rf "$ROOT/igneum"; git clone -q --no-checkout /srv/igneum.git "$ROOT/igneum"; fi
+git -C "$ROOT/igneum" checkout -q -B "repro-$VERSION" "$APP_SHA" || { say "app commit $APP_SHA is not in /srv/igneum.git (push it from the Mac)"; exit 3; }
+mkdir -p "$ROOT/igneum/vendor"
+[ -d "$ROOT/igneum/vendor/igneum-node/.git" ] || git clone -q --no-checkout /srv/igneum-node.git "$ROOT/igneum/vendor/igneum-node"
+git -C "$ROOT/igneum/vendor/igneum-node" checkout -q -B "$NODE_BRANCH" "$NODE_SHA" || { say "node commit $NODE_SHA is not in /srv/igneum-node.git (push it from the Mac)"; exit 3; }
+NODE_FULL=$(git -C "$ROOT/igneum/vendor/igneum-node" rev-parse HEAD); APP_FULL=$(git -C "$ROOT/igneum" rev-parse HEAD)
+FORK="$ROOT/igneum/vendor/igneum-node"
+EPOCH=$(git -C "$FORK" log -1 --format=%ct HEAD)   # SOURCE_DATE_EPOCH for every pass: the node commit's committer time
+
+# 2. the builds: one remote-run.sh invocation per pass and target; no sccache
+run_pass() {   # <kind: linux|windows> <pass letter>
+  local kind="$1" pass="$2" tdir="target-repro-$1" cmd envb="" arts keep="$ROOT/pass-$1-$2"
+  if [ "$kind" = linux ]; then
+    cmd="RUSTC_WRAPPER= CARGO_TARGET_DIR='$tdir' cargo build --release -p kaspad -p igneum-miner --features kaspad/igneum-pow 2>&1 | tail -3; ( exit \${PIPESTATUS[0]} )"
+    arts="$tdir/release/igneumd $tdir/release/igneum-miner"; BR_KIND=node-linux; BR_TARGET=x86_64-unknown-linux-gnu
+  else
+    envb='LLVM_LIB=$(ls -d /usr/lib/llvm-*/lib 2>/dev/null | sort -V | tail -1); export CC_x86_64_pc_windows_gnu=x86_64-w64-mingw32-gcc-posix CXX_x86_64_pc_windows_gnu=x86_64-w64-mingw32-g++-posix AR_x86_64_pc_windows_gnu=x86_64-w64-mingw32-ar CARGO_TARGET_X86_64_PC_WINDOWS_GNU_LINKER=x86_64-w64-mingw32-gcc-posix; export CARGO_TARGET_X86_64_PC_WINDOWS_GNU_RUSTFLAGS="-C link-arg=-static -C link-arg=-static-libgcc -C link-arg=-static-libstdc++ -C link-arg=-Wl,--no-insert-timestamp"; export IGNEUM_WINDRES=x86_64-w64-mingw32-windres LIBCLANG_PATH="$LLVM_LIB" BINDGEN_EXTRA_CLANG_ARGS_x86_64_pc_windows_gnu="--target=x86_64-w64-mingw32 --sysroot=/usr/x86_64-w64-mingw32 -I/usr/x86_64-w64-mingw32/include"; '
+    cmd="${envb}RUSTC_WRAPPER= CARGO_TARGET_DIR='$tdir' cargo build --release -p kaspad -p igneum-miner --features igneum-pow --target $WIN 2>&1 | tail -3; ( exit \${PIPESTATUS[0]} )"
+    arts="$tdir/$WIN/release/igneumd.exe $tdir/$WIN/release/igneum-miner.exe"; BR_KIND=node-windows; BR_TARGET=$WIN
+  fi
+  if [ "$REUSE" = 1 ]; then local all=1 a; for a in $arts; do [ -f "$keep/$(basename "$a")" ] || all=0; done; [ "$all" = 1 ] && { say "$kind pass $pass reused from $keep (--reuse)"; return 0; }; fi
+  rm -rf "$FORK/$tdir" "$keep"; mkdir -p "$keep"
+  cmd="export SOURCE_DATE_EPOCH=$EPOCH TZ=UTC; $cmd"
+  local t0; t0=$(date +%s)
+  BR_DIR="$FORK" BR_CMD="$cmd" BR_LABEL="repro $VERSION $kind pass $pass; agent=${IGNEUM_AGENT:-box-work}" BR_TOOL=repro BR_KIND="$BR_KIND" BR_TARGET="$BR_TARGET" \
+    BR_WT="_repro/$VERSION" BR_CRATE=vendor/igneum-node BR_BRANCH="$NODE_BRANCH" BR_SHA="$NODE_FULL" BR_AGENT="${IGNEUM_AGENT:-box-work}" \
+    BR_COMMAND="cargo build --release -p kaspad -p igneum-miner ($kind, pass $pass, no sccache)" BR_ARTEFACTS="$arts" \
+    bash "$RR" >> "$LOG" 2>&1 || { say "$kind pass $pass FAILED (rc $?): tail of $LOG:"; tail -20 "$LOG" >&2; return 1; }
+  local a; for a in $arts; do cp "$FORK/$a" "$keep/"; done
+  say "$kind pass $pass built in $(( $(date +%s) - t0 )) s; artefacts kept in $keep"
+}
+declare -A PASS_SHA PASS_SIZE PASS_PATH
+for kind in linux windows; do
+  for i in $(seq 1 "$PASSES"); do
+    p=$(printf "\\$(printf '%03o' $((64 + i)))")   # A, B, ...
+    run_pass "$kind" "$p" || exit 4
+    if [ "$kind" = linux ]; then
+      for a in igneumd igneum-miner; do f="$ROOT/pass-linux-$p/$a"; PASS_PATH["$a:$p"]="$f"; PASS_SHA["$a:$p"]=$(sha "$f"); PASS_SIZE["$a:$p"]=$(stat -c %s "$f"); done
+    else
+      for a in igneumd.exe igneum-miner.exe; do f="$ROOT/pass-windows-$p/$a"; PASS_PATH["$a:$p"]="$f"; PASS_SHA["$a:$p"]=$(sha "$f"); PASS_SIZE["$a:$p"]=$(stat -c %s "$f"); done
+    fi
+  done
+done
+
+# 3. the shipped bytes from the public artefacts
+declare -A SHIPPED_PATH
+if [ "$PUBLIC" = 1 ]; then
+  pub="$ROOT/public"; rm -rf "$pub"; mkdir -p "$pub"
+  base=https://dl.igneum.network/dl/public
+  if curl -fsSL -o "$pub/hive.tar.gz" "$base/igneum-hive-$VERSION.tar.gz"; then
+    mkdir -p "$pub/hive"; tar -xzf "$pub/hive.tar.gz" -C "$pub/hive" 2>/dev/null || true
+    for a in igneumd igneum-miner; do f=$(find "$pub/hive" -type f -name "$a" -not -name '._*' 2>/dev/null | head -1 || true); [ -n "$f" ] && { SHIPPED["$a"]=$(sha "$f"); SHIPPED_SRC["$a"]="igneum-hive-$VERSION.tar.gz ($(sha "$pub/hive.tar.gz" | cut -c1-16)...)"; SHIPPED_PATH["$a"]="$f"; }; done
+    say "public HiveOS package: $(ls "$pub/hive"/*/bin 2>/dev/null | tr '\n' ' ')"
+  else say "no public HiveOS package for $VERSION"; fi
+  if curl -fsSL -o "$pub/setup.exe" "$base/Igneum-Miner-Setup-$VERSION.exe"; then
+    if command -v innoextract >/dev/null 2>&1; then
+      innoextract -q -d "$pub/setup" "$pub/setup.exe" > "$pub/innoextract.log" 2>&1 || say "innoextract failed on the installer: $(head -c 200 "$pub/innoextract.log" | tr '\n' ' ') (the Windows shipped hashes fall back to --shipped)"
+      for a in igneumd.exe igneum-miner.exe; do f=$(find "$pub/setup" -type f -name "$a" 2>/dev/null | head -1 || true); [ -n "$f" ] && { SHIPPED["$a"]=$(sha "$f"); SHIPPED_SRC["$a"]="Igneum-Miner-Setup-$VERSION.exe ($(sha "$pub/setup.exe" | cut -c1-16)...) via innoextract"; SHIPPED_PATH["$a"]="$f"; }; done
+    else say "innoextract is not installed (apt innoextract): the Windows shipped hashes come from --shipped only"; fi
+  else say "no public installer for $VERSION"; fi
+fi
+
+# 4. the evidence
+glibc_need() { objdump -T "$1" 2>/dev/null | grep -o 'GLIBC_[0-9.]*' | sort -uV | tail -1; }
+# the producers run inside `{ ...; || true; }`: a consumer that stops early (grep -m1, awk exit) sends SIGPIPE to the producer, and
+# under pipefail that failed the pipeline and ran the `|| echo` fallback AS WELL, which put a second line into a table cell
+# (6 October 2026, 20:01Z, the 0.3.15 evidence; lib.sh met the same class with grep -q this morning)
+pe_stamp() { { x86_64-w64-mingw32-objdump -p "$1" 2>/dev/null || true; } | awk '/Time\/Date/ { $1=""; $2=""; print; exit }' | sed 's/^ *//'; }
+commit_hits() { strings -n 7 "$1" 2>/dev/null | grep -c "$NODE_FULL" || true; }
+build_path() { { strings -n 12 "$1" 2>/dev/null || true; } | grep -o -m1 -E '(/srv/builds/[^/ ]+/[^/ ]+|/Users/[^/ ]+/[^/ ]+/[^/ ]+)' || echo "no build path string"; }
+clock_str() { { strings -n 8 "$1" 2>/dev/null || true; } | grep -m1 -E '^[0-9]{2}:[0-9]{2}:[0-9]{2}$' || echo "none"; }
+reason() {   # <artefact> <shipped path or empty>: facts read off both binaries, then what they mean
+  local a="$1" sp="$2" bp="${PASS_PATH[$a:A]}" r=""
+  case "$a" in
+    igneumd|igneum-miner)
+      if [ -n "$sp" ]; then
+        local gs gb; gs=$(glibc_need "$sp" 2>/dev/null || echo none); gb=$(glibc_need "$bp")
+        if [ "$gs" != "$gb" ]; then r="toolchain: the shipped binary needs $gs, the box's $gb (a glibc $gs build is the Mac's infra/cross/build-linux.sh with zig; the box links the native clang/lld)"
+        else r="same glibc need ($gs) on both: not a toolchain difference"; fi
+        r="$r; build path in the shipped binary: $(build_path "$sp"), in the box's: $(build_path "$bp") (prost's protowire.rs embeds OUT_DIR, so a different path is a different binary)"
+        r="$r; build clock string (mimalloc's __TIME__) in the shipped binary: $(clock_str "$sp"), in the box's: $(clock_str "$bp") (with SOURCE_DATE_EPOCH the string is the commit's time of day, the same in every build; none = no mimalloc in the binary)"
+      else
+        r="the shipped binary was not on hand this run (no public artefact), so only the hash is compared; the box's needs $(glibc_need "$bp"), embeds $(build_path "$bp"), clock string $(clock_str "$bp")"
+      fi ;;
+    igneumd.exe|igneum-miner.exe)
+      r="box exe: Ubuntu GCC 13 posix, -Wl,--no-insert-timestamp (PE timestamp '$(pe_stamp "$bp")'), build path $(build_path "$bp"), clock string $(clock_str "$bp")"
+      if [ -n "$sp" ]; then r="$r; shipped exe: PE timestamp '$(pe_stamp "$sp")', build path $(build_path "$sp"), clock string $(clock_str "$sp") (a non-zero PE timestamp = built before the --no-insert-timestamp fix of 6 Oct 2026 17:48Z; a /Users path = the Mac's Homebrew mingw cross-build.sh)"
+      else r="$r; the shipped exe itself is not on hand (innoextract 1.9 cannot read the Inno Setup 6 installer: setup loader revision 2; or no public installer for this version), so its hash is the given one and its header was not read"; fi ;;
+  esac
+  if [ "$a" = igneumd ] || [ "$a" = igneumd.exe ]; then
+    r="$r; commit string $NODE_FULL: $(commit_hits "$bp") hit(s) in the box's binary"
+    [ -n "$sp" ] && r="$r, $(commit_hits "$sp") in the shipped one (0 = the empty-commit class: a worktree build before the two-step clean)"
+  fi
+  echo "$r"
+}
+{
+  echo "# Reproduced: Igneum Miner $VERSION (node $NODE_FULL, app $APP_FULL)"
+  echo
+  echo "$(date -u +'%d %B %Y, %H:%M UTC') on igneum-build-1 by \`infra/build-server/repro/rebuild-on-box.sh\` (driven by \`tools/repro/rebuild-release.sh\`): a clean clone of the fork at the node commit on branch \`$NODE_BRANCH\` under a clean clone of the repo at the app commit, $PASSES independent clean passes per target in one target path each (no sccache, SOURCE_DATE_EPOCH $EPOCH, TZ UTC), rustc $(rustc --version | awk '{ print $2 }'), $(x86_64-w64-mingw32-gcc-posix --version | head -1), clang $(clang --version | head -1 | grep -o '[0-9][0-9.]*' | head -1), glibc $(ldd --version | head -1 | grep -o '[0-9.]*$'). Shipped hashes read from the public downloads (no token) where marked. Whole run $(( $(date +%s) - T_ALL )) s; log \`$LOG\`."
+  echo
+  echo "| Artefact | Shipped sha256 (source) | Box pass A | Box pass B | A vs shipped | A vs B | Reason for a DIFFER |"
+  echo "|---|---|---|---|---|---|---|"
+  for a in igneumd igneum-miner igneumd.exe igneum-miner.exe; do
+    s="${SHIPPED[$a]:-}"; src="${SHIPPED_SRC[$a]:-}"
+    A="${PASS_SHA[$a:A]}"; B="${PASS_SHA[$a:B]:-}"
+    if [ -z "$s" ]; then vs="NO SHIPPED HASH"; elif [ "$A" = "$s" ]; then vs="**MATCH**"; elif [ "${s#${A:0:${#s}}}" = "" ] && [ ${#s} -lt 64 ]; then vs="**MATCH** (prefix)"; else vs="**DIFFER**"; fi
+    if [ -z "$B" ]; then ab="one pass"; elif [ "$A" = "$B" ]; then ab="**MATCH**"; else ab="**DIFFER**"; fi
+    why=""; [ "$vs" = "**DIFFER**" ] && why=$(reason "$a" "${SHIPPED_PATH[$a]:-}")
+    [ "$ab" = "**DIFFER**" ] && why="${why:+$why; }the box does not reproduce ITSELF for this artefact: a non-determinism in the build, to be found"
+    printf '| %s | %s%s | %s (%s B) | %s%s | %s | %s | %s |\n' "$a" "${s:-none}" "${src:+ ($src)}" "${A:0:16}..." "${PASS_SIZE[$a:A]}" "${B:+${B:0:16}...}" "${B:+ (${PASS_SIZE[$a:B]} B)}" "$vs" "$ab" "${why:-}"
+  done
+  echo
+  echo "Full box hashes: $(for a in igneumd igneum-miner igneumd.exe igneum-miner.exe; do printf '%s A %s; ' "$a" "${PASS_SHA[$a:A]}"; done)"
+  echo
+  echo "Reading: MATCH against the shipped bytes is the goal; A vs B MATCH with a DIFFER against the shipped bytes means the box is deterministic and the shipped build came from another toolchain (the reason column says which facts differ); A vs B DIFFER is a non-determinism on the box itself and is the row to fix first."
+} > "$OUT"
+cat "$OUT"
+say "evidence at $OUT"
diff --git a/infra/build-server/runner/register.sh b/infra/build-server/runner/register.sh
new file mode 100755
index 000000000..b27e20e66
--- /dev/null
+++ b/infra/build-server/runner/register.sh
@@ -0,0 +1,53 @@
+#!/usr/bin/env bash
+# Register (or re-register) the GitHub Actions self-hosted runner on igneum-build-1 from this Mac.
+#   infra/build-server/runner/register.sh            fetch a registration token with gh, run provision.sh on the box with it
+#   infra/build-server/runner/register.sh --status   list the repository's runners (name, status, labels) and the box's unit
+#
+# The token: `gh api -X POST repos/igneum-network/igneum/actions/runners/registration-token` as igneum-labs (the CLAUDE.md gh
+# rule: that account must be ACTIVE; any other active account fails here before anything is fetched). It is a one-hour
+# registration token, not a credential the runner keeps (config.sh writes its own into /opt/actions-runner/.credentials,
+# owner runner, mode 600). It travels to the box on ssh stdin as the first line, followed by provision.sh itself; it is
+# never an argument of ssh, never written to a file on the Mac, and provision.sh never logs it. The whole of provision.sh
+# runs (idempotent, every other step says ok), so the box is also brought up to date.
+set -euo pipefail
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_SLUG="${IGNEUM_GH_REPO:-igneum-network/igneum}"
+KEY="${IGNEUM_BUILD_KEY:-$HOME/.ssh/igneum_ed25519}"
+HOST_LINE="$(head -1 "${IGNEUM_BUILD_HOST_FILE:-$HOME/.config/igneum/build-server}" | tr -d '[:space:]')"
+IP="${HOST_LINE#*@}"; [ -n "$IP" ] || { echo "no build server in ~/.config/igneum/build-server (infra/build-server/run-from-mac.sh writes it)" >&2; exit 1; }
+SSH=(ssh -i "$KEY" -o BatchMode=yes -o StrictHostKeyChecking=accept-new -o ConnectTimeout=15 "root@$IP")
+
+gh_josh() {
+  local active
+  active=$(gh auth status 2>/dev/null | awk '/Logged in to github.com account/ { acct=$7 } /Active account: true/ { print acct; exit }')
+  if [ "$active" != igneum-labs ]; then
+    gh auth switch --user igneum-labs >/dev/null 2>&1 || { echo "gh: cannot switch to igneum-labs (gh auth status: ${active:-no active account})" >&2; exit 1; }
+  fi
+  [ "$(gh api user --jq .login 2>/dev/null)" = igneum-labs ] || { echo "gh: the active token is not the igneum-labs login (stored as igneum-labs); refusing" >&2; exit 1; }
+}
+
+if [ "${1:-}" = --status ]; then
+  gh_josh
+  gh api "repos/$REPO_SLUG/actions/runners" --jq '.runners[] | "\(.name)\t\(.status)\tbusy=\(.busy)\t\(([.labels[].name]) | join(","))"' || echo "(no runners or no access)"
+  "${SSH[@]}" 'systemctl list-units --type=service --no-legend "actions.runner.*" ; ls -la /opt/actions-runner/.runner 2>/dev/null || echo "not registered on the box"'
+  exit 0
+fi
+
+gh_josh
+echo "fetching a registration token for $REPO_SLUG as igneum-labs (igneum-labs) ..."
+TOKEN=$(gh api -X POST "repos/$REPO_SLUG/actions/runners/registration-token" --jq .token 2>/dev/null) || { echo "gh refused the registration token: the account needs admin on $REPO_SLUG (gh api repos/$REPO_SLUG --jq .permissions)" >&2; exit 1; }
+[ -n "$TOKEN" ] || { echo "empty token from gh" >&2; exit 1; }
+echo "token received (not shown); running provision.sh on root@$IP with it (first line of stdin, then the script)"
+# the first stdin line is the token, read by the remote shell before bash -s takes the rest as the script; the output is
+# kept in a temp file so the ssh exit code is read (a filter in the pipe would hide it) and any line carrying the token is
+# dropped before it is shown (provision.sh never prints it; this is the belt)
+OUT=$(mktemp); trap 'rm -f "$OUT"' EXIT
+set +e
+{ printf '%s\n' "$TOKEN"; cat "$HERE/../provision.sh"; } | "${SSH[@]}" 'IFS= read -r RUNNER_TOKEN; export RUNNER_TOKEN; MODE=provision bash -s' > "$OUT" 2>&1
+RC=$?
+set -e
+grep -v -F "$TOKEN" "$OUT" || true
+unset TOKEN
+[ "$RC" = 0 ] || { echo "provision.sh exited $RC on the box" >&2; exit "$RC"; }
+echo "runners now registered on $REPO_SLUG:"
+gh api "repos/$REPO_SLUG/actions/runners" --jq '.runners[] | "  \(.name)\t\(.status)\t\(([.labels[].name]) | join(","))"'
diff --git a/packaging/windows/push-build-inputs.sh b/packaging/windows/push-build-inputs.sh
index 1cfb2c381..39775bf73 100755
--- a/packaging/windows/push-build-inputs.sh
+++ b/packaging/windows/push-build-inputs.sh
@@ -80,7 +80,8 @@ fi
 
 NODE_BRANCH="$(git -C "$NODE_SRC" rev-parse --abbrev-ref HEAD 2>/dev/null || echo unknown)"
 NODE_COMMIT="$(git -C "$NODE_SRC" rev-parse --short HEAD 2>/dev/null || echo unknown)"
-NODE_COMMIT_FULL="$(git -C "$NODE_SRC" rev-parse HEAD 2>/dev/null || echo unknown)"   # the PC job writes it into a .git for kaspa-build-info (6 Oct 2026)
+NODE_COMMIT_FULL="$(git -C "$NODE_SRC" rev-parse HEAD 2>/dev/null || echo unknown)"
+NODE_COMMIT_TIME="$(git -C "$NODE_SRC" log -1 --format=%at HEAD 2>/dev/null || echo 0)"   # SOURCE_DATE_EPOCH on the PC (reproducible builds, 6 Oct 2026)   # the PC job writes it into a .git for kaspa-build-info (6 Oct 2026)
 NODE_DIRTY=false; [ -z "$(git -C "$NODE_SRC" status --porcelain 2>/dev/null)" ] || NODE_DIRTY=true
 REPO_BRANCH="$(git -C "$ROOT" rev-parse --abbrev-ref HEAD 2>/dev/null || echo unknown)"
 REPO_COMMIT="$(git -C "$ROOT" rev-parse --short HEAD 2>/dev/null || echo unknown)"
@@ -109,9 +110,9 @@ rsync -a --exclude 'target' --exclude 'target-*' --exclude '.DS_Store' "$ROOT/ig
 echo "packing proto-cuda (without nvrtc/redist)"
 rsync -a --exclude 'nvrtc/redist' --exclude '.DS_Store' --exclude '*.exe' --exclude '*.dll' "$ROOT/proto-cuda/" "$STAGE/proto-cuda/"
 
-python3 - "$STAGE/manifest.json" "$NODE_BRANCH" "$NODE_COMMIT" "$NODE_DIRTY" "${NODE_SRC#"$ROOT"/}" "$REPO_BRANCH" "$REPO_COMMIT" "$REPO_DIRTY" "$APP_VERSION" "$WITH_APP" "$NODE_TESTS" "$APP_TESTS" "${WITH_NODE:-1}" "$NODE_COMMIT_FULL" <<'PY'
+python3 - "$STAGE/manifest.json" "$NODE_BRANCH" "$NODE_COMMIT" "$NODE_DIRTY" "${NODE_SRC#"$ROOT"/}" "$REPO_BRANCH" "$REPO_COMMIT" "$REPO_DIRTY" "$APP_VERSION" "$WITH_APP" "$NODE_TESTS" "$APP_TESTS" "${WITH_NODE:-1}" "$NODE_COMMIT_FULL" "$NODE_COMMIT_TIME" <<'PY'
 import json, sys, datetime
-out, nb, nc, nd, ns, rb, rc, rd, av, with_app, node_tests, app_tests, with_node, ncf = sys.argv[1:15]
+out, nb, nc, nd, ns, rb, rc, rd, av, with_app, node_tests, app_tests, with_node, ncf, nct = sys.argv[1:16]
 builds = [{"dir": "node", "packages": ["kaspad", "igneum-miner"], "features": ["kaspad/igneum-pow"], "bins": ["igneumd", "igneum-miner"], "targets": ["linux", "windows"]}] if with_node == "1" else []
 tests = []
 if node_tests.strip() and with_node == "1":
@@ -122,7 +123,7 @@ if with_app == "1":
         tests.append({"dir": "app/igneum-app", "packages": app_tests.split()})
 m = {
     "created_at": datetime.datetime.now(datetime.timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ"),
-    "node": {"branch": nb, "commit": nc, "commit_full": ncf, "dirty": nd == "true", "source": ns},
+    "node": {"branch": nb, "commit": nc, "commit_full": ncf, "commit_time": int(nct) if nct.isdigit() else 0, "dirty": nd == "true", "source": ns},
     "repo": {"branch": rb, "commit": rc, "dirty": rd == "true"},
     "app_version": av if with_app == "1" else "",
     "builds": builds,
diff --git a/proto-cuda/windows-node/cross-build.sh b/proto-cuda/windows-node/cross-build.sh
index 209fbe426..fc3efc586 100755
--- a/proto-cuda/windows-node/cross-build.sh
+++ b/proto-cuda/windows-node/cross-build.sh
@@ -40,6 +40,9 @@ export BINDGEN_EXTRA_CLANG_ARGS_x86_64_pc_windows_gnu="--target=x86_64-w64-mingw
 # byte-level difference between two builds of one tree on igneum-build-1); the box (tools/cross-remote.sh) and the PC job carry it too
 export CARGO_TARGET_X86_64_PC_WINDOWS_GNU_RUSTFLAGS="-C link-arg=-static -C link-arg=-static-libgcc -C link-arg=-static-libstdc++ -C link-arg=-Wl,--no-insert-timestamp"
 cd "$NODE"
+# reproducible (main, 6 October 2026, the 0.3.14 repro): the commit's author time for mimalloc's __DATE__/__TIME__, UTC, and ONE
+# target dir per target (CARGO_TARGET_DIR above is fixed, never a per-run name; prost embeds OUT_DIR)
+SOURCE_DATE_EPOCH=$(git log -1 --format=%at HEAD); export SOURCE_DATE_EPOCH TZ=UTC
 # The commit hash (6 October 2026, found on igneum-build-1): kaspa-build-info's build.rs embeds the commit only when .git is
 # a DIRECTORY and HEAD is a symbolic ref to a branch file, and once it has found nothing it emits no rerun-if-changed, so
 # cargo never runs it again in this target dir. Two steps: clean that one crate when the commit changed since the last build
diff --git a/sim/horizon/algorithm/README.md b/sim/horizon/algorithm/README.md
new file mode 100644
index 000000000..cf69dd028
--- /dev/null
+++ b/sim/horizon/algorithm/README.md
@@ -0,0 +1,12 @@
+# Horizon lane 2 (algorithm): the model behind docs/analysis/horizon/algorithm.md
+
+Run (plain Python 3, no numpy, under a second):
+
+    python3 sim/horizon/algorithm/model.py                      # every table, markdown on stdout
+    python3 sim/horizon/algorithm/model.py --section chip       # chip | fpga | v5 | era | verifier | schedule
+
+Every input is listed at the top of `model.py` with its source file or URL and its label (measured, cited,
+approximate). The verifier rows are this lane's own measurement of 6 October 2026 on igneum-build-1 (the
+`igneum-pow` crate built there through `tools/build-remote.sh`, `IGNEUM_AGENT=horizon`, one slot, 10 s; the bench
+pinned with `taskset -c 40` under `nice -n 19`, then both SMT siblings 40 and 88 at once); the commands and raw lines
+are in section 2 of the document.
diff --git a/sim/horizon/algorithm/model.py b/sim/horizon/algorithm/model.py
new file mode 100644
index 000000000..4d2fc826a
--- /dev/null
+++ b/sim/horizon/algorithm/model.py
@@ -0,0 +1,392 @@
+#!/usr/bin/env python3
+"""Horizon lane 2 (algorithm): the arithmetic behind docs/analysis/horizon/algorithm.md.
+
+Every number printed here is arithmetic on a cited or measured input; the inputs are listed with their source
+in INPUTS below and in the document. Nothing here measures a chip. Run:
+
+    python3 sim/horizon/algorithm/model.py            # prints every table as markdown
+    python3 sim/horizon/algorithm/model.py --section chip|fpga|v5|era|verifier|schedule
+
+No numpy needed (plain Python 3). Sections:
+  chip      per-joule and per-dollar edge of the three chip classes against each honest card, class v3 and v4
+  fpga      HBM2 FPGA random-read ceilings from bank count, tRC, tFAW, tRRD; reads in flight; per watt
+  v5        shadow N options: chip edge per joule at k = 0.3, 0.5, 1, 1.5; verifier cost; per-tier watts
+  era       the era draw: what grinding a certified checkpoint costs, and what a draw can move
+  verifier  the 2019-class gate: the box proxy rows against the M5 Max and the 2.5x rule
+  schedule  dataset growth against the Steam VRAM shares and the prover footprint per tier
+"""
+import sys
+
+# ----------------------------------------------------------------------------------------------------------------
+# INPUTS (measured = a bench-log or analysis entry; cited = a URL or paper; approx = from memory or an estimate)
+# ----------------------------------------------------------------------------------------------------------------
+PJ = 1e-12
+UJ = 1e-6
+
+# Honest cards: name, MH/s, watts, source, tier. The v3 class (mx8) unless said otherwise.
+CARDS = [
+    # owned, measured 5 and 6 October 2026
+    ("RTX 5090 (PC 2 bench, 431 W cap, control)", 132.2, 350.0, "latency-shadow-2026-10-06.md s5 (bench-log item 8)", "32 GB"),
+    ("RTX 5090 (PC 1 app, Ember run 5)",            127.4, 310.0, "counter-asic-3-status.md s7 item 1",             "32 GB"),
+    ("RTX 5090 (rented Vast pod, untuned)",          98.48, 258.2, "prover-tiers-real-cards.md",                      "32 GB"),
+    ("RTX 4090 (rented)",                            52.25, 183.1, "prover-tiers-real-cards.md",                      "24 GB"),
+    ("RTX 3090 (rented)",                            37.79, 228.8, "prover-tiers-real-cards.md",                      "24 GB"),
+    ("RTX A5000 (rented)",                           47.7,  222.7, "prover-tiers-real-cards.md",                      "24 GB"),
+    ("RTX 4070 (PC 1, 1,860 MHz lock, 160 W cap)",   30.95, 79.5,  "counter-asic-3-status.md item 8 4070 rows",       "12 GB"),
+    ("RTX 4070 (rented, untuned)",                   24.99, 91.1,  "prover-tiers-real-cards.md",                      "12 GB"),
+    ("RTX 5070 (rented)",                            41.89, 137.0, "prover-tiers-real-cards.md",                      "12 GB"),
+    ("RTX 3060 (rented)",                            23.78, 103.7, "prover-tiers-real-cards.md",                      "12 GB"),
+    ("RTX 3080 (rented)",                            40.82, 204.9, "prover-tiers-real-cards.md",                      "10 GB"),
+    ("RTX 4060 Ti 16 GB (rented)",                   17.58, 72.3,  "prover-tiers-real-cards.md",                      "16 GB"),
+    ("RTX 4060 Ti 8 GB (rented)",                    19.07, 72.6,  "prover-tiers-real-cards.md",                      "8 GB"),
+    ("RX 9070 XT (PC 1, ADLX 199 to 203 W)",         18.9,  201.0, "bench-log 9070 XT telemetry; status 3a watts job",  "16 GB AMD"),
+    ("Apple M5 Max (GPU + DRAM channels)",           27.08, 21.0,  "latency-shadow-2026-10-06.md s3",                 "Apple"),
+    ("Apple M5 Max (package, approx 38 W)",          27.08, 38.0,  "ember-tune.md Apple row, approximate",            "Apple"),
+]
+# the RTX 4060 (rented) logged 0.0 W: no watt reading, left out of the per-joule rows
+
+# Marginal ALU energy per counted op at the shadow (measured): 5090 11 pJ (10.2 to 13.2), M5 Max 6.9 pJ
+MARGINAL_PJ = {"NVIDIA": 11.0, "Apple": 6.9, "AMD": 11.0}   # AMD unmeasured: NVIDIA's figure, approx
+N_V4 = 100_000          # counted ops per hash in the class v4 shadow (sh256x27: 102,100 counted, 55,296 instrs)
+
+# Measured v4 cards (whole card): 5090 3.27 uJ at 431 W; M5 Max 1.40 uJ at 37 W; 4070 3.51 uJ at 109 W
+MEASURED_V4 = {
+    "RTX 5090 (PC 2 bench, 431 W cap, control)": (131.95, 431.0),
+    "RTX 4070 (PC 1, 1,860 MHz lock, 160 W cap)": (31.08, 109.0),
+    "Apple M5 Max (GPU + DRAM channels)": (26.67, 37.2),
+    "Apple M5 Max (package, approx 38 W)": (26.67, 54.0),   # 37.2 + the same 17 W of package, approx
+}
+
+# Chips (chip-model-v3.md s5.4 and latency-shadow s6; all approximate arithmetic on cited memory figures)
+CHIPS = [
+    # name, MH/s, watts at v3, silicon+memory dollars at v3, extra dollars for the v4 ALU array
+    ("f = 0 on-die recompute (256 MiB SRAM, x8 mixer)",   41.7,  53.7,  700.0, 40.0),
+    ("f = 1 stored dataset, GDDR7 (16 devices, 512-bit)", 166.4, 77.6,  470.0, 40.0),
+    ("f = 1 stored dataset, HBM3 one stack",               83.6,  26.8,  550.0, 40.0),
+    ("f = 1 stored dataset, HBM3 eight stacks",            666.4, 174.4, 2650.0, 40.0),
+]
+K_LIST = [0.3, 0.5, 1.0, 1.5]
+
+# Card list prices, approximate (launch MSRP from memory unless cited), USD
+CARD_PRICE = {
+    "RTX 5090": 1999.0, "RTX 4090": 1599.0, "RTX 3090": 1499.0, "RTX A5000": 2250.0, "RTX 4070": 549.0,
+    "RTX 5070": 549.0, "RTX 3060": 329.0, "RTX 3080": 699.0, "RTX 4060 Ti 16 GB": 499.0, "RTX 4060 Ti 8 GB": 399.0,
+    "RX 9070 XT": 599.0, "Apple M5 Max": 3500.0,
+}
+RENTAL_USD_PER_MHS_HOUR = 0.0117    # bench-log "Rental cost of hash, 6 October 2026" (measured, RunPod list)
+ELECTRICITY_USD_PER_KWH = 0.10      # approx
+AMORTISE_HOURS = 2 * 365 * 24       # two years, approx
+
+
+def uj(mhs, watts):
+    return watts / (mhs * 1e6) / UJ
+
+
+def card_price(name):
+    for k, v in CARD_PRICE.items():
+        if name.startswith(k):
+            return v
+    return None
+
+
+def hourly_cost_per_mhs(price, uj_per_hash):
+    cap = price / AMORTISE_HOURS                     # USD per hour for the whole device
+    return cap, uj_per_hash * 3.6e9 * UJ / 3.6e6 * ELECTRICITY_USD_PER_KWH  # (capex/h total, energy USD per MH/s-h)
+
+
+def section_chip():
+    print("## Chip edge per joule and per dollar, class v3 and class v4\n")
+    print("Chip rows (model, approximate): energy per hash at v3 = watts / rate; at v4 the chip adds N x 11 pJ x k for its")
+    print(f"shadow core (N = {N_V4:,} counted ops, k = chip core energy per op over the 5090's measured 11 pJ).\n")
+    print("| Chip class | MH/s | W at v3 | uJ per hash, v3 | uJ at v4, k = 0.3 / 0.5 / 1 / 1.5 | $ silicon + memory, v3 / v4 | $ per MH/s, v3 |")
+    print("|---|---|---|---|---|---|---|")
+    chip_rows = []
+    for name, mhs, w, usd, usd_v4 in CHIPS:
+        e3 = uj(mhs, w)
+        e4 = [e3 + N_V4 * 11.0 * k * PJ / UJ for k in K_LIST]
+        chip_rows.append((name, e3, e4, usd, usd_v4))
+        print(f"| {name} | {mhs:.1f} | {w:.1f} | {e3:.3f} | " + " / ".join(f"{x:.2f}" for x in e4) +
+              f" | {usd:.0f} / {usd + usd_v4:.0f} | {usd / mhs:.1f} |")
+    print()
+    print("Honest cards at v3 (measured) and at v4 (measured where a row exists, else the card's marginal ALU energy times N;")
+    print("a card under a power cap that binds at v4 pays less energy and loses rate instead, as the 5090 did).\n")
+    print("| Card (tier) | MH/s | W | uJ, v3 | uJ, v4 | Edge of f=0 chip per joule, v3 / v4 at k=1 | f=1 GDDR7, v3 / v4 at k=0.3 / 0.5 / 1 / 1.5 | f=1 HBM3 one stack, v3 / v4 at k=1 | $ list (approx) | $ per MH/s | USD per MH/s-hour owned (capex 2 y + 0.10/kWh) |")
+    print("|---|---|---|---|---|---|---|---|---|---|---|")
+    for name, mhs, w, src, tier in CARDS:
+        e3 = uj(mhs, w)
+        vendor = "Apple" if "Apple" in name else ("AMD" if "RX " in name else "NVIDIA")
+        if name in MEASURED_V4:
+            m4, w4 = MEASURED_V4[name]
+            e4 = uj(m4, w4)
+            tag = ""
+        else:
+            e4 = e3 + N_V4 * MARGINAL_PJ[vendor] * PJ / UJ
+            tag = "*"
+        f0, f1g, f1h = chip_rows[0], chip_rows[1], chip_rows[2]
+        price = card_price(name)
+        pm = f"{price:.0f}" if price else "n/a"
+        ppm = f"{price / mhs:.1f}" if price else "n/a"
+        if price:
+            cap, en = hourly_cost_per_mhs(price, e3)
+            own = f"{cap / mhs + en:.5f}"
+        else:
+            own = "n/a"
+        print(f"| {name} ({tier}) | {mhs:.2f} | {w:.1f} | {e3:.2f} | {e4:.2f}{tag} | {e3 / f0[1]:.2f}x / {e4 / f0[2][2]:.2f}x | "
+              f"{e3 / f1g[1]:.1f}x / " + " / ".join(f"{e4 / x:.1f}x" for x in f1g[2]) +
+              f" | {e3 / f1h[1]:.1f}x / {e4 / f1h[2][2]:.1f}x | {pm} | {ppm} | {own} |")
+    print("\n`*` = modelled v4 energy (marginal pJ x N), not measured. Rental hash for comparison: USD 0.0117 per MH/s-hour (measured, RunPod).")
+    # chip hourly cost
+    print("\nChip hourly cost per MH/s (amortised over two years plus electricity at USD 0.10 per kWh, approximate):\n")
+    print("| Chip | uJ, v3 | USD per MH/s-hour | Against rental (0.0117) | Against an owned 5090 (bench row) |")
+    print("|---|---|---|---|---|")
+    p5090 = CARD_PRICE["RTX 5090"]
+    e5090 = uj(132.2, 350.0)
+    cap5, en5 = hourly_cost_per_mhs(p5090, e5090)
+    own5090 = cap5 / 132.2 + en5
+    for name, mhs, w, usd, usd_v4 in CHIPS:
+        e3 = uj(mhs, w)
+        cap, en = hourly_cost_per_mhs(usd, e3)
+        c = cap / mhs + en
+        print(f"| {name} | {e3:.3f} | {c:.6f} | {RENTAL_USD_PER_MHS_HOUR / c:.0f}x cheaper | {own5090 / c:.1f}x cheaper |")
+    print(f"\nOwned 5090 (bench row): USD {own5090:.5f} per MH/s-hour; rental is {RENTAL_USD_PER_MHS_HOUR / own5090:.0f}x that.")
+
+
+def section_fpga():
+    print("## HBM2 FPGA random-read ceilings (U55C, U280, AWS F2 VU47P: 2 stacks, 16 channels, 32 pseudo-channels)\n")
+    channels = 16
+    pcs = 32
+    banks_per_pc = 16          # approx: HBM2 16 banks per channel, each split into half banks per pseudo-channel
+    clk_mhz = 1066.0           # 2,133 MT/s data rate, JEDEC HBM2 as tabled by ICCAD 2021 Table I (cycles)
+    ns = 1000.0 / clk_mhz
+    tRC = (14 + 34) * ns       # tRCD + tRAS cycles (ICCAD 2021 Table I): 48 cycles
+    tFAW = 30 * ns             # 4 activates per channel per tFAW (Table I)
+    tRRD = 6 * ns              # ACT to ACT, different bank (Table I)
+    bank_bound = pcs * banks_per_pc / (tRC * 1e-9)
+    faw_bound = channels * 4 / (tFAW * 1e-9)
+    rrd_bound = channels / (tRRD * 1e-9)
+    oconnor_bound = channels * 8 / (12e-9)   # the figure chip-model-v3.md s5.3 carried for HBM2/3 (O'Connor Table 2)
+    lat = 137.8                # ns, Shuhai Table IV page miss on the U280
+    print(f"tRC {tRC:.1f} ns, tFAW {tFAW:.1f} ns (4 ACT per channel), tRRD {tRRD:.1f} ns, latency {lat} ns (page miss, measured).\n")
+    print("| Ceiling | Formula | G reads/s per card | Reads in flight at 137.8 ns | Per W at 115 / 150 / 225 W (M reads/s/W) | Against the 5090 per W (53.7 M at 326 W; 50.0 M at 350 W) |")
+    print("|---|---|---|---|---|---|")
+    rows = [
+        ("Measured, Shuhai U280 default mapping", "2.4 G (FCCM 2020, Fig 7)", 2.4e9),
+        ("tFAW-bound (JEDEC HBM2 cycles, ICCAD 2021 Table I)", "16 ch x 4 / 28.1 ns", faw_bound),
+        ("tRRD-bound", "16 ch / 5.6 ns", rrd_bound),
+        ("Bank-bound, no activate window (the 12.2 ceiling row)", "32 pc x 16 banks / 45 ns", bank_bound),
+        ("O'Connor HBM2 activate figure as carried by chip-model-v3 s5.3", "16 ch x 8 / 12 ns", oconnor_bound),
+    ]
+    for name, f, g in rows:
+        flight = g * lat * 1e-9
+        pw = [g / w / 1e6 for w in (115, 150, 225)]
+        print(f"| {name} | {f} | {g / 1e9:.1f} | {flight:.0f} | " + " / ".join(f"{x:.0f}" for x in pw) +
+              f" | {pw[0] / 53.7:.2f}x to {pw[1] / 53.7:.2f}x (U55C); {pw[2] / 53.7:.2f}x (U280) |")
+    print("\nReading: the measured 2.4 G/s equals the tFAW-bound ceiling at JEDEC HBM2 timings (2.3 G/s), so the measured row is")
+    print("not a mapping artefact: it is the activate window. The bank-bound 11.4 G/s needs tFAW removed, which the DRAM die")
+    print("enforces and no controller overrides. The tightened range for a 2-stack HBM2 FPGA: 2.3 to 2.9 G/s, 0.30x to 0.47x of")
+    print("the 5090 per watt at the U55C's 115 to 150 W; the 0.7x to 1.9x row survives only if HBM3-class parts (tFAW about half,")
+    print("4 bank groups, approximate) reach an FPGA, and none has (Versal HBM and Agilex M are HBM2e).")
+
+
+def section_v5():
+    print("## Class v5 options: the shadow N against the chip's k\n")
+    # honest cards at N: measured ladders where they exist, else model
+    # 5090 measured (431 W cap): N -> (MH/s, W)
+    r5090 = {930: (132.2, 350), 49700: (132.28, 424.6), 102100: (131.95, 431), 150800: (131.75, 431), 199600: (128.67, 431), 330700: (86.39, 431)}
+    rmac = {930: (27.08, 21.0), 49700: (26.75, 31.1), 102100: (26.67, 37.2), 150800: (25.10, 36.7), 199600: (24.25, 38.2), 330700: (21.39, 40.1)}
+    r4070 = {930: (30.95, 79.5), 49700: (31.08, 93.5), 102100: (31.08, 109.0), 199600: (31.07, 138.2), 330700: (27.14, 159.9)}
+    gddr7 = uj(166.4, 77.6)
+    hbm3 = uj(83.6, 26.8)
+    print("| N counted ops | 5090 uJ (rate delta) | M5 Max uJ (delta) | 4070 uJ (delta) | 9070 XT | f=1 GDDR7 chip uJ at k = 0.3 / 0.5 / 1 / 1.5 | Edge over the 5090 | Edge over the M5 Max | Edge over the 4070 | Verifier add, M5 Max core / box core / box half-core (ms per warp) |")
+    print("|---|---|---|---|---|---|---|---|---|---|")
+    # verifier slopes: Mac 3.2 us per 1,000 shadow instrs; box one core 7.0; box half core 12.1 (measured 6 Oct, this lane)
+    for N in (930, 49700, 102100, 130000, 150800, 199600, 330700):
+        def interp(tbl):
+            ks = sorted(tbl)
+            if N in tbl:
+                return tbl[N]
+            lo = max(k for k in ks if k < N); hi = min(k for k in ks if k > N)
+            t = (N - lo) / (hi - lo)
+            return (tbl[lo][0] + t * (tbl[hi][0] - tbl[lo][0]), tbl[lo][1] + t * (tbl[hi][1] - tbl[lo][1]))
+        m5, w5 = interp(r5090); mm, wm = interp(rmac); m4, w4 = interp(r4070)
+        e5, em, e4 = uj(m5, w5), uj(mm, wm), uj(m4, w4)
+        shadow = max(N - 930, 0)
+        chip = [gddr7 + shadow * 11.0 * k * PJ / UJ for k in K_LIST]
+        instrs = shadow / 1.83
+        vadd = (instrs / 1000 * 3.2e-3, instrs / 1000 * 7.0e-3, instrs / 1000 * 12.1e-3)
+        print(f"| {N:,} | {e5:.2f} ({(m5 / 132.2 - 1) * 100:+.1f}%) | {em:.2f} ({(mm / 27.08 - 1) * 100:+.1f}%) | {e4:.2f} ({(m4 / 30.95 - 1) * 100:+.1f}%) | holds to 331k (watts owed) | "
+              + " / ".join(f"{c:.2f}" for c in chip) + " | " + " / ".join(f"{e5 / c:.1f}x" for c in chip) + " | "
+              + " / ".join(f"{em / c:.2f}x" for c in chip) + " | " + " / ".join(f"{e4 / c:.1f}x" for c in chip)
+              + f" | {vadd[0]:.2f} / {vadd[1]:.2f} / {vadd[2]:.2f} |")
+    print("\nThe 130,000 row is interpolated between the measured 102,100 and 150,800 rungs (the Mac's 5 percent point).")
+    print("\nOption (ii), a shuffle-heavy shadow mix: the chip's datapath floor per op (N5, approx) by op class and the GPU's measured step cost.\n")
+    print("| Op class | Chip datapath energy per op, N5 floor (pJ, approx) | GPU step cost on the 5090 (ratio to the add-xor-rotate chain, measured) | Structure a chip must add |")
+    print("|---|---|---|---|")
+    ops = [("add, sub, xor, or (weights 32 of 75)", 0.06, "1.00", "adder, gates"),
+           ("mul, mulhi, mad (22 of 75)", 0.52, "1.00 (IMAD is the chain's own op)", "32x32 multiplier"),
+           ("rotl, rotr (13 of 75)", 0.06, "1.32", "barrel rotator"),
+           ("shfl xor-mask (8 of 75)", 0.30, "1.49", "5-stage butterfly per warp (5,120 mux bits)"),
+           ("shfla lane+delta (reserve R3)", 1.00, "1.53", "32x32x32-bit crossbar per warp (32,768 mux bits)"),
+           ("mm8 (reserve R8)", 1.60, "2.43", "8x8x16 u8 MAC tile per warp (1,024 MACs)")]
+    for n, e, g, s in ops:
+        print(f"| {n} | {e:.2f} | {g} | {s} |")
+    def mix_floor(w_alu, w_mul, w_rot, w_shfl, w_shfla):
+        tot = w_alu + w_mul + w_rot + w_shfl + w_shfla
+        return (w_alu * 0.06 + w_mul * 0.52 + w_rot * 0.06 + w_shfl * 0.30 + w_shfla * 1.00) / tot
+    base = mix_floor(32, 22, 13, 8, 0)
+    heavy = mix_floor(26, 18, 9, 14, 8)
+    print(f"\nShadow mix energy floor per op: today's weights {base:.3f} pJ; a shuffle-heavy v5 mix (shfl 14, shfla 8 of 75, the")
+    print(f"others scaled) {heavy:.3f} pJ, {heavy / base:.2f}x. With the 2x pipeline and 8x register-file and wire overhead of")
+    print(f"latency-shadow s6 the k floor moves from {base * 16 / 11:.2f} to {heavy * 16 / 11:.2f} (approx): the shuffle-heavy mix")
+    print("raises the attacker's claimed floor, it does not reach k = 1.")
+
+
+def section_era():
+    print("## The era draw: what grinding costs and what a draw can move\n")
+    print("Forging the certified checkpoint the era VDF reads needs 2/3 of the 30-day blue-block weight: 20 days of 100 percent")
+    print("hash (CLAUDE.md headline). Rented at USD 0.0117 per MH/s-hour (measured, RunPod list, 6 October 2026):\n")
+    print("| Network hash | 20 days of 100 percent, rented | What the forged checkpoint buys in the draw |")
+    print("|---|---|---|")
+    for g in (1, 10, 100, 1000):
+        usd = g * 1000 * 480 * RENTAL_USD_PER_MHS_HOUR
+        print(f"| {g} GH/s | USD {usd:,.0f} | one era's (M, R, pos, weights +-2, fold rotations): 0.8 to 3.2 percent hash-rate spread per card (measured six eras), 0 chip effect |")
+    print("\nWithholding the last blue block before C_era(n) to re-roll the input costs one block and needs the 3,600 s VDF")
+    print("evaluated inside the 2 s publish window: a 1,800x faster evaluator (spec 04 s4.6 margin table: 300x beats the epoch,")
+    print("not the era). Gain of the re-roll even if free: one draw of the same space.\n")
+    print("Op-weight corners: each of the ten non-load weights is perturbed by -2..+2 points; the multiply share (mul, mad,")
+    print("mulhi: 22 of 75) can move to 16 or 28 of 75. Chip datapath energy per shadow op at the N5 floor (0.06 add, 0.52 mul):")
+    for share in (16, 22, 28):
+        e = (share * 0.52 + (75 - share) * 0.06) / 75
+        print(f"  multiply share {share}/75: {e:.3f} pJ per op")
+    print("so the weakest corner for a chip is a draw with the fewest multiplies, worth about 20 percent of the shadow's")
+    print("datapath energy (approx) and nothing on the memory side; the GPU's cost moves the same way.")
+
+
+def section_verifier():
+    print("## The 2019-class verifier gate: measured proxies (this lane, 6 October 2026, igneum-build-1)\n")
+    mac = {"v2": 0.60, "mx8 (class v3)": 2.06, "mx8+sh256x27 (class v4)": 2.33, "dr368": 2.69, "dr736": 4.88}
+    box1 = {"v2": 1.128, "mx8 (class v3)": 4.516, "mx8+sh256x27 (class v4)": 4.901, "dr368": 4.716, "dr736": 9.763}
+    box1cold = {"v2": 1.305, "mx8 (class v3)": 4.670, "mx8+sh256x27 (class v4)": 5.061, "dr368": 5.324, "dr736": 10.509}
+    half = {"mx8 (class v3)": 7.56, "mx8+sh256x27 (class v4)": 8.23, "dr368": 8.16, "dr736": 15.49}
+    print("| Class | M5 Max core, quiet (ms per warp) | 2.5x rule (approx) | Box EPYC 9454P one core at 3.8 GHz, nice 19, taskset (steady / cold) | Box over Mac | Box half-core (SMT sibling loaded) | Gate 10 ms |")
+    print("|---|---|---|---|---|---|---|")
+    for c in mac:
+        h = half.get(c)
+        verdict = "pass" if box1cold[c] < 10 and (h is None or h < 10) else ("FAIL cold on one core" if box1cold[c] >= 10 else "fails the half-core proxy")
+        print(f"| {c} | {mac[c]:.2f} | {mac[c] * 2.5:.1f} | {box1[c]:.2f} / {box1cold[c]:.2f} | {box1[c] / mac[c]:.2f}x | {('%.2f' % h) if h else 'n/a'} | {verdict} |")
+    print("\nCache fill on the box core: 361 ms (M5 Max 175 to 181 ms): 2.0x. The box clock read 3,800 MHz during the run")
+    print("(scaling_cur_freq), so this is a 2022 server core at full boost with server DDR5 latency, not a 2019 laptop; the")
+    print("half-core row (both SMT siblings busy) is the pessimistic bracket. What the gate protects at 10 ms per warp:\n")
+    for ms in (10.0, 20.0):
+        print(f"| at {ms:.0f} ms per warp | 1 bps: {ms / 1000 * 100:.0f}% of one core | 10 bps: {ms / 1000 * 10 * 100:.0f}% of one core | IBD 108,000 headers: {108000 * ms / 1000 / 60:.0f} min | header flood to saturate one core: {1000 / ms:.0f} invalid headers per second | pool: {1000 / ms:.0f} shares per second per core |")
+
+
+def section_schedule():
+    print("## Dataset growth against the installed base and the prover footprint\n")
+    steam = [("512 MB to 4 GB", 2.60 + 1.44 + 3.69 + 1.20 + 5.13), ("6 GB", 5.12), ("8 GB", 26.71), ("10 to 11 GB", 1.91 + 0.83),
+             ("12 GB", 13.06), ("16 GB", 27.21), ("20 to 24 GB", 1.39 + 1.04 + 5.50), ("32 GB", 1.41), ("64 GB", 0.50), ("other", 1.26)]
+    print("Steam Hardware Survey, September 2026 (cited, store.steampowered.com/hwsurvey; 8 GB was 35.03 percent in August 2025")
+    print("and 33.66 in September 2025, 12 GB 19.30 in August 2025: videocardz, wccftech, pcguide, cited):\n")
+    print("| VRAM | Share of Steam users, Sep 2026 |")
+    print("|---|---|")
+    for n, s in steam:
+        print(f"| {n} | {s:.2f}% |")
+    # trend: 8 GB -7.3 points per year (33.66 -> 26.71 Sep 2025 to Sep 2026); 12 GB -6.2 (19.30 Aug 2025 -> 13.06)
+    print("\nLinear extrapolation of the 8 GB and 12 GB shares (approx; the 16 GB and 24 GB tiers absorb them):\n")
+    print("| Year | 8 GB share | 12 GB share | Dataset (option b) | Cache |")
+    print("|---|---|---|---|---|")
+    for y, ds, cache in ((2026, "1 GiB (devnet packs)", "256 MiB"), (2027, "2 GiB (genesis)", "256 MiB"), (2028, "2 GiB", "256 MiB"), (2029, "2 GiB", "256 MiB"),
+                         (2030, "2 GiB", "256 MiB"), (2031, "4 GiB (year 4)", "512 MiB"), (2035, "4 GiB", "512 MiB"), (2039, "8 GiB (year 12)", "1 GiB")):
+        s8 = max(0.0, 26.71 - 7.0 * (y - 2026)); s12 = max(0.0, 13.06 - 6.2 * (y - 2026) * 0.5)
+        print(f"| {y} | {s8:.0f}% | {s12:.0f}% | {ds} | {cache} |")
+    print("\nMemory per tier at each step (MiB): miner resident = dataset + 128 output buffers + scratch-free kernel (cache freed")
+    print("after the build, the decided reading); prover beside the miner from prover-tiers-real-cards.md (peak of the")
+    print("compressed 2^26 and core-only 2^25 profiles, both with a 1.4 GB miner resident at the 1 GiB dataset):\n")
+    print("| Tier (usable = 75% of VRAM, Apple 50%) | Usable MiB | Mine-only: last step that fits | Mine + prove compressed (peak 8.9 to 10.7 GB at 1 GiB): last step | Mine + prove core-only (peak 7.1 to 7.4 GB at 1 GiB): last step |")
+    print("|---|---|---|---|---|")
+    steps = [("1 GiB (today)", 1024), ("2 GiB (genesis)", 2048), ("4 GiB (year 4)", 4096), ("8 GiB (year 12)", 8192), ("16 GiB (year 28)", 16384)]
+    # (tier, VRAM MiB, measured compressed peak beside the miner at the 1 GiB dataset in MiB or None, measured core-only peak)
+    tiers = [("8 GB (4060 Ti 8 GB)", 8192, None, 7352), ("12 GB (4070, 5070)", 12288, 10240, 5734 + 1434), ("16 GB (4060 Ti 16 GB)", 16384, 9216, 5939 + 1434),
+             ("24 GB (4090, 3090, A5000)", 24576, 10956, 6246 + 1434), ("32 GB (5090)", 32768, 10138, 6451 + 1434)]
+    for name, vram, comp_peak1, core_peak1 in tiers:
+        usable = vram * 0.75
+        mine_last = "none"; comp_last = "none"; core_last = "none"
+        for sname, ds in steps:
+            if ds + 128 + 64 <= usable:
+                mine_last = sname
+            grow = ds - 1024   # the miner's resident set grows with the dataset; the prover's part does not
+            if comp_peak1 is not None and comp_peak1 + grow <= vram * 0.98:   # headless Linux: the rows used nearly the whole card
+                comp_last = sname
+            if core_peak1 + grow <= vram * 0.98:
+                core_last = sname
+        print(f"| {name} | {usable:.0f} | {mine_last} | {comp_last} | {core_last} |")
+    print("\nReading: the 8 GB tier never mines and proves compressed at any dataset size (measured: does not fit at 1 GiB); core-only")
+    print("fits at 1 GiB with 1 GB spare and loses that at the 2 GiB genesis step. The 12 GB tier mines and proves compressed on")
+    print("headless Linux at 1 and 2 GiB and loses it at the year-4 step (4 GiB). The 16 GB tier holds compressed to year 4 and")
+    print("core-only to year 12. Mine-only: 8 GB to year 12, 12 and 16 GB to year 28, as card-lifetime-2026-10-05.md says.")
+
+
+def section_ladder():
+    """The reconciled N ladder asked for by the coordinator (lane 7's HBM4 inputs, this lane's measured cards)."""
+    print("## The reconciled N ladder (lane 2 measured cards, lane 7 HBM4 inputs)\n")
+    # chips: bare uJ per hash (memory-bound f = 1): 128 x E_read + static / rate. Lane 7's HBM4 inputs (approximate):
+    # one stack, 32 channels, ceiling 2 x 10.7 G = 21.4 G reads/s, 1.0 nJ per read, 5 W static, 10 W controller.
+    hbm4_rate = 21.4e9 / 128
+    hbm4_bare = (128 * 1.0e-9 * hbm4_rate + 15.0) / hbm4_rate / UJ
+    chips = [("GDDR7", uj(166.4, 77.6)), ("HBM3 1 stack", uj(83.6, 26.8)), ("HBM3 8 stacks", uj(666.4, 174.4)), ("HBM4 1 stack (lane 7)", hbm4_bare)]
+    r5090 = {930: (132.2, 350), 49700: (132.28, 424.6), 102100: (131.95, 431), 150800: (131.75, 431), 199600: (128.67, 431), 330700: (86.39, 431)}
+    rmac = {930: (27.08, 21.0), 49700: (26.75, 31.1), 102100: (26.67, 37.2), 150800: (25.10, 36.7), 199600: (24.25, 38.2), 330700: (21.39, 40.1)}
+    r4070 = {930: (30.95, 79.5), 49700: (31.08, 93.5), 102100: (31.08, 109.0), 199600: (31.07, 138.2), 330700: (27.14, 159.9)}
+    r9070 = {930: 18.92, 49700: 19.31, 102100: 19.29, 199600: 19.11, 330700: 19.60}
+    def interp(tbl, N):
+        ks = sorted(tbl)
+        if N in tbl:
+            return tbl[N]
+        lo = max(k for k in ks if k < N); hi = min(k for k in ks if k > N)
+        t = (N - lo) / (hi - lo)
+        a, b = tbl[lo], tbl[hi]
+        return tuple(x + t * (y - x) for x, y in zip(a, b)) if isinstance(a, tuple) else a + t * (b - a)
+    print("Chip bare uJ per hash: " + ", ".join(f"{n} {e:.3f}" for n, e in chips) + ". Chip at N: bare + (N - 930) x 11 pJ x k.")
+    print("Card energy: measured ladders (5090 under its 431 W cap; M5 Max GPU + DRAM; 4070 at its 160 W cap); 130,000 interpolated.\n")
+    print("| N counted ops | 5090 uJ, W (rate delta) | M5 Max uJ, W (delta) | 4070 uJ, W (delta) | 9070 XT rate delta (W owed) | 12 GB and 8 GB rented cards | Chip edge over the 5090 per joule, k = 0.5 / 1 / 1.5: GDDR7 | HBM3 one stack | HBM3 eight stacks | HBM4 one stack | Verifier ms per warp: M5 Max core / 2019-class (2.5x rule) / half-core proxy | Card that binds first (5 percent rule) |")
+    print("|---|---|---|---|---|---|---|---|---|---|---|---|")
+    binds = {930: "none", 49700: "none", 102100: "none (M5 Max -1.5%)", 130000: "M5 Max at its 5% point", 150800: "M5 Max (-7.3%)", 199600: "M5 Max (-10%), 5090 (-2.7%)", 330700: "5090 (-35%), M5 Max (-21%), 4070 (-12%)"}
+    for N in (930, 49700, 102100, 130000, 150800, 199600, 330700):
+        m5, w5 = interp(r5090, N); mm, wm = interp(rmac, N); m4, w4 = interp(r4070, N); m9 = interp(r9070, N)
+        e5 = uj(m5, w5)
+        instrs = max(N - 930, 0) / 1.83
+        vmac = 2.06 + instrs / 1000 * 3.2e-3
+        vrule = vmac * 2.5
+        vhalf = 7.56 + instrs / 1000 * 12.1e-3
+        cells = []
+        for name, bare in chips:
+            cells.append(" / ".join(f"{e5 / (bare + max(N - 930, 0) * 11.0 * k * PJ / UJ):.1f}x" for k in (0.5, 1.0, 1.5)))
+        print(f"| {N:,} | {e5:.2f}, {w5:.0f} W ({(m5 / 132.2 - 1) * 100:+.1f}%) | {uj(mm, wm):.2f}, {wm:.0f} W ({(mm / 27.08 - 1) * 100:+.1f}%) | {uj(m4, w4):.2f}, {w4:.0f} W ({(m4 / 30.95 - 1) * 100:+.1f}%) | {(m9 / 18.92 - 1) * 100:+.1f}% | not measured at any N (v3 only) | "
+              + " | ".join(cells) + f" | {vmac:.2f} / {vrule:.1f} / {vhalf:.2f} | {binds[N]} |")
+    print("\nDisagreements with lane 7's model 1.4, named: (a) its honest card at N is the linear 326 to 575 W model (2.95 uJ at")
+    print("N = 100,000, 3.50 at 200,000, 4.22 at 330,000); the measured 5090 under its 431 W cap reads 3.27, 3.35 and 4.99 uJ with")
+    print("-0.2, -2.7 and -34.7 percent of rate (the cap binds from 102,100 ops; power.min_limit is 400 W so no cap under it exists);")
+    print("(b) its shadow core is 150 W fixed at the 5090's 136 MH/s, so on a 167 MH/s HBM4 chip it under-counts the core by 1.23x;")
+    print("energy per hash is N x 11 pJ x k whatever the chip's rate, which is what this table uses (HBM4 at N = 100,000, k = 1: 1.33 uJ,")
+    print(f"not 1.11; edge {uj(131.95, 431) / (hbm4_bare + 101170 * 11e-12 / UJ):.1f}x, not 2.65x); (c) its HBM3 and HBM4 ceilings (10.7 and 21.4 G) rest on 8 activates per 12 ns")
+    print("per channel; the JEDEC HBM2 cycle table gives 4 per 28 ns (this file, section 5.1), and HBM3's own tFAW is behind the paywall.")
+    hbm4_low = (128 * 1.0e-9 * (4.6e9 / 128) + 15.0) / (4.6e9 / 128) / UJ
+    print(f"If HBM3 and HBM4 carry HBM2's activate window the one-stack ceilings are 2.3 and 4.6 G and the HBM4 bare energy {hbm4_low:.2f} uJ,")
+    print(f"an edge of {2.65 / hbm4_low:.1f}x bare over the 5090 instead of 11x; the GDDR7 column (the 5090 measures 82 percent of its ceiling) is")
+    print("the one with a measured anchor and is the column to quote.")
+    print("\nVerifier headroom for N (the \"10x\" claim): on the M5 Max core 10 - 2.33 = 7.67 ms buys 2.4 M shadow instructions, N about")
+    print("4.5 M ops (19x); on the 2.5x rule 4.2 ms buys 525,000 instructions, N about 1.06 M (10x); on the measured half-core proxy 1.77 ms")
+    print("buys 146,000 instructions, N about 370,000 (3.7x). The cards bind first at every bracket: M5 Max 130,000, 5090 at 431 W")
+    print("210,000, 4070 at 160 W about 250,000, 9070 XT over 331,000.")
+
+
+SECTIONS = {"chip": section_chip, "fpga": section_fpga, "v5": section_v5, "ladder": section_ladder, "era": section_era, "verifier": section_verifier, "schedule": section_schedule}
+
+if __name__ == "__main__":
+    want = None
+    if len(sys.argv) > 2 and sys.argv[1] == "--section":
+        want = sys.argv[2]
+    for k, f in SECTIONS.items():
+        if want is None or want == k:
+            f()
+            print()
diff --git a/sim/horizon/consensus-security/README.md b/sim/horizon/consensus-security/README.md
new file mode 100644
index 000000000..82fb69582
--- /dev/null
+++ b/sim/horizon/consensus-security/README.md
@@ -0,0 +1,12 @@
+# sim/horizon/consensus-security
+
+Models behind `docs/analysis/horizon/consensus-security.md` and `docs/analysis/51-percent.md` (Horizon lane 1, 6 October 2026). Python 3.10 with numpy; run on the Mac under the main checkout's run lock: `/Users/joshm/Projects/igneum/tools/lock/with-lock.sh run nice -n 19 <cmd>`. Nothing here edits `sim/finality_v2.py`; `finality_horizon.py` imports it.
+
+| file | what | run | output |
+|---|---|---|---|
+| `ghostdag_sim.py` | GHOSTDAG (as `protocol.rs`) under a withholding attacker: reorg depth, fork age, win rate, blue share, honest blocks turned red, by hash share H, delay d, hold T; 1 or 10 blocks/s | `python3 ghostdag_sim.py --seeds 20 --out ghostdag_results_1bps.md --json ghostdag_results_1bps.json`; `--bps 10 --k 124 --delays 0.35,0.67,2 --holds 10,30,60,90 --warm 60 --post 15` | `ghostdag_results_1bps.md/.json`, `ghostdag_results_10bps.md/.json` |
+| `finality_horizon.py` | the finality rule over the adversary's share 20, 34, 51, 67, 90 percent: renter, silent set, bought keys, poisoned eclipse, partition with an equivocator (v2 and v3), abrupt departure (v2 and v3) | `python3 finality_horizon.py --out finality_horizon_results.md` (about 10 min; `--quick` for a smoke run) | `finality_horizon_results.md` |
+| `signalling.py` | the P2 miner-signalling game: binomial noise, holdout, forced flip, signal then defect, window alternatives | `python3 signalling.py --out signalling_results.md` | `signalling_results.md` |
+| `cost_model.py` | every attack's rented hash, duration, cost at 1 to 1,000 GH/s, subsidy earned, and the rental equilibrium | `python3 cost_model.py --out cost_results.md` | `cost_results.md` |
+
+Price basis USD 11.7 per GH/s-hour, measured 6 October 2026 (`docs/bench-log.md`, "Rental cost of hash"). Seeds and machine for each result are in the result file's first line.
diff --git a/sim/horizon/consensus-security/cost_model.py b/sim/horizon/consensus-security/cost_model.py
new file mode 100644
index 000000000..e3d8c8867
--- /dev/null
+++ b/sim/horizon/consensus-security/cost_model.py
@@ -0,0 +1,120 @@
+#!/usr/bin/env python3
+"""What each attack costs in rented hash and what it earns: the table behind docs/analysis/51-percent.md.
+
+Inputs (every one labelled):
+  * price: USD 11.7 per GH/s-hour, MEASURED 6 Oct 2026 on RunPod community pods (docs/bench-log.md, "Rental cost of hash,
+    6 October 2026": 1,748 MH/s for USD 20.44 an hour); approximate above 2 GH/s because the market supplied no more.
+  * subsidy: 31.688 IGN per DAA second at full ramp before the first halving (spec 02 2.5, BASE_SUBSIDY_PER_SECOND_SOMPI),
+    80% to the producer, 20% to the proving pool (the attacker earns the pool share only if it proves: not counted).
+  * IGN price inputs USD 0.005, 0.02, 0.10: the three assumptions of docs/analysis/security-budget.md, NOT predictions.
+  * durations: from the finality arithmetic (spec 03 3.1: 1/3 on day 10/A, 2/3 on day 20/A for an attacker producing
+    share A of blocks), the lock latency (spec 03 3.11.3, about 90 to 120 s), the finality depth (spec 02 2.1, 12 h), the
+    merge depth (3,600 s) and the P2 signalling window (one day). The DAG simulator of this directory gives the hash
+    share needed to win the lock-latency race (ghostdag_results_1bps.md section 2).
+An attacker at share A of the TOTAL hash rents A/(1 - A) times the honest network N.
+
+Run: python3 sim/horizon/consensus-security/cost_model.py [--out file.md]
+"""
+
+import argparse
+import sys
+
+PRICE = 11.7                     # USD per GH/s-hour, measured
+SUBSIDY_IGN_PER_S = 31.688       # spec 02 2.5
+PRODUCER_SHARE = 0.8
+IGN_PRICES = (0.005, 0.02, 0.10)  # security-budget.md inputs
+NETWORKS = (1, 10, 100, 1000)    # GH/s
+
+
+def ign_per_hour(A):
+    return PRODUCER_SHARE * A * SUBSIDY_IGN_PER_S * 3600.0
+
+
+def md(headers, rows):
+    out = ["| " + " | ".join(headers) + " |", "|" + "---|" * len(headers)]
+    for r in rows:
+        out.append("| " + " | ".join(str(x) for x in r) + " |")
+    return "\n".join(out)
+
+
+def usd(x):
+    if x >= 1e6:
+        return "USD %.1fM" % (x / 1e6)
+    if x >= 1e3:
+        return "USD %.0fk" % (x / 1e3)
+    return "USD %.0f" % x
+
+
+ATTACKS = [
+    # (name, share A, hours, what it buys, bound)
+    ("Reorder the last ~20 s (the k-block head start, any share)", 0.20, 30 / 3600.0, "an earlier-ordered conflicting tx inside the last k honest blocks; nothing a lock covers", "k = 18 blocks; the lock covers it"),
+    ("Win the lock-latency race: reorg up to the unlocked checkpoint (90 s)", 0.51, 90 / 3600.0, "a double spend of a deposit credited before the lock (no exchange should)", "the lock, 90 to 120 s; DAG sim: 45% wins half, 34% never at 90 s"),
+    ("PoW double spend at the 12-h finality depth during a PAUSE or the first 30 days", 0.51, 12.0, "a deposit credited at the proof-of-work depth the exchange guidance names", "finality depth 43,200 DAA; only while nothing locks"),
+    ("Orphan an hour of honest blocks (beyond merge depth) during a pause", 0.51, 1.5, "honest blocks of the hour unmergeable, their subsidy lost; the 229-block shape of 6 Oct", "merge depth 3,600 s; refused by F1 once a lock exists inside the hour"),
+    ("The veto: reach 1/3 of 30-day weight at 51% of blocks", 0.51, 20 * 24.0, "pause finality at will, for ever, at no further cost (silent weight keeps earning)", "20 days in public; 51% never reaches 2/3 while honest miners stay"),
+    ("The veto at 67% of blocks", 0.67, 15 * 24.0, "the same, five days sooner", "day 15"),
+    ("The veto at 90% of blocks", 0.90, 11.1 * 24.0, "the same", "day 11.1"),
+    ("Lock alone: 2/3 of weight at 67% of blocks", 0.67, 30 * 24.0, "certify any chain forward of the last honest lock; never undo a certificate an honest node holds", "day 30; 3.11.4"),
+    ("Lock alone at 90% of blocks", 0.90, 22.2 * 24.0, "the same", "day 22.2"),
+    ("Long-range: a private DAG heavier than the public one over the window (cold-start F5)", 0.51, 30 * 24.0, "a cold node with no trusted certificate follows the private DAG", "F5: a configured certificate; the client-shipped checkpoint (proposal)"),
+    ("Signalling holdout: 6% of blocks every day until the floor", 0.06, 24.0, "delay of a class change until N6", "the floor"),
+    ("Forced flip: 95% of one day's blue blocks with a patched byte", 0.95, 24.0, "an activation while part of the fleet lacks the object (a v5 shape, not v4)", "the one-day window; 7 consecutive days proposed"),
+]
+
+
+def main(argv=None):
+    ap = argparse.ArgumentParser()
+    ap.add_argument("--out", default="")
+    args = ap.parse_args(argv)
+    out = ["# Attack cost in rented hash against what it earns", ""]
+    out.append("Generated by `sim/horizon/consensus-security/cost_model.py`. Price USD %.1f per GH/s-hour (measured 6 Oct 2026, bench-log); subsidy %.3f IGN/s, producer share %.0f%%; IGN price inputs USD %s (assumptions, security-budget.md). "
+               "An attacker at share A rents A/(1-A) x N. Earnings are the attacker's own block subsidy over the attack (it mines in public while it accumulates weight)." % (PRICE, SUBSIDY_IGN_PER_S, 100 * PRODUCER_SHARE, ", ".join("%g" % p for p in IGN_PRICES)))
+    out.append("")
+    out.append("## 1. Cost by network size")
+    out.append("")
+    rows = []
+    for name, A, hours, buys, bound in ATTACKS:
+        rented = A / (1 - A)
+        costs = [rented * N * hours * PRICE for N in NETWORKS]
+        rows.append([name, "%.0f%%" % (100 * A), "%.1f h" % hours if hours < 48 else "%.1f d" % (hours / 24), "%.2f N" % rented] + [usd(c) for c in costs] + [bound])
+    out.append(md(["attack", "share A", "duration", "rented hash"] + ["cost at %d GH/s" % N for N in NETWORKS] + ["what bounds it"], rows))
+    out.append("")
+    out.append("## 2. What the attacker earns meanwhile (its own blocks, 80% producer share), and the net at each price input")
+    out.append("")
+    rows = []
+    for name, A, hours, buys, bound in ATTACKS:
+        earn_ign = ign_per_hour(A) * hours
+        cells = []
+        for P in IGN_PRICES:
+            e = earn_ign * P
+            cells.append(usd(e))
+        rows.append([name, "%.0f M IGN" % (earn_ign / 1e6) if earn_ign >= 1e6 else "%.0f k IGN" % (earn_ign / 1e3)] + cells + [buys])
+    out.append(md(["attack", "subsidy earned"] + ["at USD %g" % P for P in IGN_PRICES] + ["what it buys"], rows))
+    out.append("")
+    out.append("## 3. The equilibrium network: where rented hash earns its rent")
+    out.append("")
+    out.append("If every GH/s is rented at the measured price, hash joins until the hourly producer subsidy equals the hourly rent: N_eq = 0.8 x 31.688 x 3600 x P / 11.7 GH/s. Attack costs at N_eq are multiples of the chain's own hourly income, so the table below is price-independent in shape.")
+    out.append("")
+    rows = []
+    for P in IGN_PRICES:
+        hourly = ign_per_hour(1.0) * P
+        neq = hourly / PRICE
+        veto = 0.51 / 0.49 * neq * 480 * PRICE
+        veto_earn = ign_per_hour(0.51) * 480 * P
+        alone = 2.0 * neq * 720 * PRICE
+        alone_earn = ign_per_hour(0.67) * 720 * P
+        ds = 0.51 / 0.49 * neq * 12 * PRICE
+        rows.append(["USD %g" % P, usd(hourly), "%.0f GH/s" % neq, usd(veto), usd(veto_earn), usd(veto - veto_earn), usd(alone), usd(alone_earn), usd(alone - alone_earn), usd(ds)])
+    out.append(md(["IGN price", "hourly producer subsidy", "N_eq", "veto: 51% for 20 d, rent", "earned", "net", "lock alone: 67% for 30 d, rent", "earned", "net", "12-h double spend in a pause, rent"], rows))
+    out.append("")
+    out.append("Reading: at the equilibrium the veto's net cost is about 48% of 20 days of the chain's subsidy (the attacker earns 51% of it back), and locking alone nets about 33% of 30 days of subsidy. Both are public for weeks. The 12-hour double spend during a pause costs about 12.5 hours of the chain's subsidy and is the cheapest line in the table: it is why the pause is the residual risk of docs/analysis/51-percent.md section 4.")
+    text = "\n".join(out)
+    if args.out:
+        with open(args.out, "w") as fh:
+            fh.write(text + "\n")
+    print(text)
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/sim/horizon/consensus-security/cost_results.md b/sim/horizon/consensus-security/cost_results.md
new file mode 100644
index 000000000..d55d828c7
--- /dev/null
+++ b/sim/horizon/consensus-security/cost_results.md
@@ -0,0 +1,49 @@
+# Attack cost in rented hash against what it earns
+
+Generated by `sim/horizon/consensus-security/cost_model.py`. Price USD 11.7 per GH/s-hour (measured 6 Oct 2026, bench-log); subsidy 31.688 IGN/s, producer share 80%; IGN price inputs USD 0.005, 0.02, 0.1 (assumptions, security-budget.md). An attacker at share A rents A/(1-A) x N. Earnings are the attacker's own block subsidy over the attack (it mines in public while it accumulates weight).
+
+## 1. Cost by network size
+
+| attack | share A | duration | rented hash | cost at 1 GH/s | cost at 10 GH/s | cost at 100 GH/s | cost at 1000 GH/s | what bounds it |
+|---|---|---|---|---|---|---|---|---|
+| Reorder the last ~20 s (the k-block head start, any share) | 20% | 0.0 h | 0.25 N | USD 0 | USD 0 | USD 2 | USD 24 | k = 18 blocks; the lock covers it |
+| Win the lock-latency race: reorg up to the unlocked checkpoint (90 s) | 51% | 0.0 h | 1.04 N | USD 0 | USD 3 | USD 30 | USD 304 | the lock, 90 to 120 s; DAG sim: 45% wins half, 34% never at 90 s |
+| PoW double spend at the 12-h finality depth during a PAUSE or the first 30 days | 51% | 12.0 h | 1.04 N | USD 146 | USD 1k | USD 15k | USD 146k | finality depth 43,200 DAA; only while nothing locks |
+| Orphan an hour of honest blocks (beyond merge depth) during a pause | 51% | 1.5 h | 1.04 N | USD 18 | USD 183 | USD 2k | USD 18k | merge depth 3,600 s; refused by F1 once a lock exists inside the hour |
+| The veto: reach 1/3 of 30-day weight at 51% of blocks | 51% | 20.0 d | 1.04 N | USD 6k | USD 58k | USD 585k | USD 5.8M | 20 days in public; 51% never reaches 2/3 while honest miners stay |
+| The veto at 67% of blocks | 67% | 15.0 d | 2.03 N | USD 9k | USD 86k | USD 855k | USD 8.6M | day 15 |
+| The veto at 90% of blocks | 90% | 11.1 d | 9.00 N | USD 28k | USD 281k | USD 2.8M | USD 28.1M | day 11.1 |
+| Lock alone: 2/3 of weight at 67% of blocks | 67% | 30.0 d | 2.03 N | USD 17k | USD 171k | USD 1.7M | USD 17.1M | day 30; 3.11.4 |
+| Lock alone at 90% of blocks | 90% | 22.2 d | 9.00 N | USD 56k | USD 561k | USD 5.6M | USD 56.1M | day 22.2 |
+| Long-range: a private DAG heavier than the public one over the window (cold-start F5) | 51% | 30.0 d | 1.04 N | USD 9k | USD 88k | USD 877k | USD 8.8M | F5: a configured certificate; the client-shipped checkpoint (proposal) |
+| Signalling holdout: 6% of blocks every day until the floor | 6% | 24.0 h | 0.06 N | USD 18 | USD 179 | USD 2k | USD 18k | the floor |
+| Forced flip: 95% of one day's blue blocks with a patched byte | 95% | 24.0 h | 19.00 N | USD 5k | USD 53k | USD 534k | USD 5.3M | the one-day window; 7 consecutive days proposed |
+
+## 2. What the attacker earns meanwhile (its own blocks, 80% producer share), and the net at each price input
+
+| attack | subsidy earned | at USD 0.005 | at USD 0.02 | at USD 0.1 | what it buys |
+|---|---|---|---|---|---|
+| Reorder the last ~20 s (the k-block head start, any share) | 0 k IGN | USD 1 | USD 3 | USD 15 | an earlier-ordered conflicting tx inside the last k honest blocks; nothing a lock covers |
+| Win the lock-latency race: reorg up to the unlocked checkpoint (90 s) | 1 k IGN | USD 6 | USD 23 | USD 116 | a double spend of a deposit credited before the lock (no exchange should) |
+| PoW double spend at the 12-h finality depth during a PAUSE or the first 30 days | 559 k IGN | USD 3k | USD 11k | USD 56k | a deposit credited at the proof-of-work depth the exchange guidance names |
+| Orphan an hour of honest blocks (beyond merge depth) during a pause | 70 k IGN | USD 349 | USD 1k | USD 7k | honest blocks of the hour unmergeable, their subsidy lost; the 229-block shape of 6 Oct |
+| The veto: reach 1/3 of 30-day weight at 51% of blocks | 22 M IGN | USD 112k | USD 447k | USD 2.2M | pause finality at will, for ever, at no further cost (silent weight keeps earning) |
+| The veto at 67% of blocks | 22 M IGN | USD 110k | USD 440k | USD 2.2M | the same, five days sooner |
+| The veto at 90% of blocks | 22 M IGN | USD 109k | USD 438k | USD 2.2M | the same |
+| Lock alone: 2/3 of weight at 67% of blocks | 44 M IGN | USD 220k | USD 880k | USD 4.4M | certify any chain forward of the last honest lock; never undo a certificate an honest node holds |
+| Lock alone at 90% of blocks | 44 M IGN | USD 219k | USD 875k | USD 4.4M | the same |
+| Long-range: a private DAG heavier than the public one over the window (cold-start F5) | 34 M IGN | USD 168k | USD 670k | USD 3.4M | a cold node with no trusted certificate follows the private DAG |
+| Signalling holdout: 6% of blocks every day until the floor | 131 k IGN | USD 657 | USD 3k | USD 13k | delay of a class change until N6 |
+| Forced flip: 95% of one day's blue blocks with a patched byte | 2 M IGN | USD 10k | USD 42k | USD 208k | an activation while part of the fleet lacks the object (a v5 shape, not v4) |
+
+## 3. The equilibrium network: where rented hash earns its rent
+
+If every GH/s is rented at the measured price, hash joins until the hourly producer subsidy equals the hourly rent: N_eq = 0.8 x 31.688 x 3600 x P / 11.7 GH/s. Attack costs at N_eq are multiples of the chain's own hourly income, so the table below is price-independent in shape.
+
+| IGN price | hourly producer subsidy | N_eq | veto: 51% for 20 d, rent | earned | net | lock alone: 67% for 30 d, rent | earned | net | 12-h double spend in a pause, rent |
+|---|---|---|---|---|---|---|---|---|---|
+| USD 0.005 | USD 456 | 39 GH/s | USD 228k | USD 112k | USD 116k | USD 657k | USD 220k | USD 437k | USD 6k |
+| USD 0.02 | USD 2k | 156 GH/s | USD 912k | USD 447k | USD 465k | USD 2.6M | USD 880k | USD 1.7M | USD 23k |
+| USD 0.1 | USD 9k | 780 GH/s | USD 4.6M | USD 2.2M | USD 2.3M | USD 13.1M | USD 4.4M | USD 8.7M | USD 114k |
+
+Reading: at the equilibrium the veto's net cost is about 48% of 20 days of the chain's subsidy (the attacker earns 51% of it back), and locking alone nets about 33% of 30 days of subsidy. Both are public for weeks. The 12-hour double spend during a pause costs about 12.5 hours of the chain's subsidy and is the cheapest line in the table: it is why the pause is the residual risk of docs/analysis/51-percent.md section 4.
diff --git a/sim/horizon/consensus-security/finality_horizon.py b/sim/horizon/consensus-security/finality_horizon.py
new file mode 100644
index 000000000..3c69b5a00
--- /dev/null
+++ b/sim/horizon/consensus-security/finality_horizon.py
@@ -0,0 +1,250 @@
+#!/usr/bin/env python3
+"""Finality weight attacks swept over the adversary's share: 20, 34, 51, 67 and 90 percent.
+
+Horizon lane consensus-security, 6 October 2026. This file IMPORTS sim/finality_v2.py unchanged (the model, its
+assumptions and its limits are results_v2.md's: 1,000 Pareto keys, 3 regions, 2-s inter-region delay, 2.2% outage,
+perfect retarget, no DAG, keys free) and adds six sweeps the brief asked for. The rule is the one as specified today:
+floor 2/3 of total (O-3.15), cert reading, and for the partition and departure rows rule v3 (the frozen table, F21) beside
+rule v2 with view-local weights. Nothing in finality_v2.py is edited.
+
+Sweeps (A = the adversary's share):
+  R  renter: a new key with hash share A of the network from a warm 30-day state, signing; the day it reaches 1/3 (veto)
+     and 2/3 (locks alone). Formula: share(t) = (t/30) A, so day 10/A and 20/A (results_v2.md B verified it to 0.04 points).
+  S  silent: keys holding A of weight stop signing and keep mining for 1 and 6 h; the pause and the resume.
+  K  bought keys: an attacker buys keys worth A of the window and mines at 30% of the network (results_v2.md K's shape);
+     peak share, veto days, stalls when it withholds votes.
+  E  poisoned eclipse: an attacker holding A feeds a 20% pool a private fork for 2 h and signs both (results_v2.md F2, L3).
+  P  partition: a 50/50 honest split for 150 min with an equivocator holding A reaching both sides, rule v2 (+local) and v3.
+  C  abrupt departure (tonight's pause, 6 Oct 2026 18:42Z): keys holding A stop mining and signing at once; days to the
+     first lock under v2 and v3, 31 days.
+
+Run (under the main checkout's run lock, about 10 minutes):
+  /Users/joshm/Projects/igneum/tools/lock/with-lock.sh run nice -n 19 python3 \
+      sim/horizon/consensus-security/finality_horizon.py --out sim/horizon/consensus-security/finality_horizon_results.md
+Options: --seeds 7,11 --shares 0.2,0.34,0.51,0.67,0.9 --sweeps R,S,K,E,P,C --quick
+"""
+
+import argparse
+import os
+import sys
+import time
+
+import numpy as np
+
+HERE = os.path.dirname(os.path.abspath(__file__))
+sys.path.insert(0, os.path.abspath(os.path.join(HERE, "..", "..")))
+import finality_v2 as f  # noqa: E402
+
+f.set_floor(1.0)
+
+
+def run_renter(seed, share, days, p):
+    """A fresh key arrives at day 0 with hash share `share` of the network and signs every checkpoint."""
+    sim, rng, _ = f.build_honest(p, seed)
+    att = int(sim.add_keys([0.0], [0], flaky=False)[0])
+    sim.warm_start()
+    sim.init_views(warm=True)
+    sim.run(f.SLOTS_PER_HOUR)
+    honest = sim.hash.sum()
+    sim.hash[att] = honest * share / (1.0 - share)
+    sim.set_uptime()
+    series = []
+    d13 = d23 = None
+    for day in range(1, days + 1):
+        sim.run(f.SLOTS_PER_DAY)
+        sh = sim.share([att])
+        series.append((day, sh))
+        if d13 is None and sh >= 1.0 / 3.0:
+            d13 = day
+        if d23 is None and sh >= 2.0 / 3.0:
+            d23 = day
+    recs = sim.recs()
+    return dict(series=series, d13=d13, d23=d23, stalls=f.stalls_between(recs, 0, sim.slot), conflicts=len(sim.conflicts))
+
+
+def run_eclipse_share(seed, att_share, dur_h, p, pool=0.2, pre_min=60, post_h=3):
+    """results_v2.md F2 with the attacker's share as a parameter: pool 20%, attacker att_share, honest rest."""
+    rng = np.random.default_rng(seed)
+    sim = f.Sim(p, rng, n_regions=5)
+    others = 1.0 - pool - att_share
+    h = f.pareto_hashrates(rng, f.N_HONEST - 1, total=others)
+    reg = f.assign_regions(h, f.GEOGRAPHY)
+    sim.add_keys(h, reg, flaky=True)
+    K = int(sim.add_keys([pool], [3], flaky=False)[0])
+    att = int(sim.add_keys([att_share], [4], flaky=False, equiv=True)[0])
+    sim.warm_start()
+    sim.init_views(warm=True)
+    sim.run(pre_min * 2)
+    t0 = sim.slot
+    sim.split([[0, 1, 2], [3, 4]])
+    sim.run(int(dur_h * f.SLOTS_PER_HOUR))
+    t_end = sim.slot
+    sim.heal()
+    sim.run(post_h * f.SLOTS_PER_HOUR)
+    recs = sim.recs()
+    res = dict(conflicts=len(sim.conflicts), att_share=sim.share([att]))
+    res["first_conflict_min"] = (min(c[1] for c in sim.conflicts) - t0) / 2.0 if sim.conflicts else None
+    res["ecl_locks"] = int(((recs[:, 2] == 2) & (recs[:, 3] >= 0) & (recs[:, 0] >= t0) & (recs[:, 0] < t_end)).sum())
+    res["hon_locks"] = int(((recs[:, 2] == 1) & (recs[:, 3] >= 0) & (recs[:, 0] >= t0) & (recs[:, 0] < t_end)).sum())
+    res["honest_stalls"] = f.stalls_between(recs, t0, t_end, sid=1)
+    res["post_stalls"] = f.stalls_between(recs, t_end, sim.slot)
+    return res
+
+
+def fmt_day(x):
+    return "never" if x is None else "%.1f" % x
+
+
+def main(argv=None):
+    ap = argparse.ArgumentParser()
+    ap.add_argument("--seeds", default="7,11")
+    ap.add_argument("--shares", default="0.2,0.34,0.51,0.67,0.9")
+    ap.add_argument("--sweeps", default="R,S,K,E,P,C")
+    ap.add_argument("--delay", type=float, default=2.0)
+    ap.add_argument("--quick", action="store_true")
+    ap.add_argument("--out", default="")
+    args = ap.parse_args(argv)
+    seeds = [int(s) for s in args.seeds.split(",")]
+    shares = [float(s) for s in args.shares.split(",")]
+    q = args.quick
+    t_all = time.time()
+    out = ["# Finality weight attacks over the adversary's share (20, 34, 51, 67, 90 percent)", ""]
+    out.append("Generated by `sim/horizon/consensus-security/finality_horizon.py` on %s, importing `sim/finality_v2.py` unchanged; seeds %s; rule %s; "
+               "inter-region delay %.1f s. Model assumptions and limits: `sim/results_v2.md` (no DAG, perfect retarget, keys free, 2.2%% outage)." % (
+                   time.strftime("%Y-%m-%d %H:%M UTC", time.gmtime()), ",".join(str(s) for s in seeds), f.rule_name(), args.delay))
+    out.append("")
+    sweeps = [s.strip().upper() for s in args.sweeps.split(",")]
+
+    if "R" in sweeps:
+        t = time.time()
+        days = 8 if q else 32
+        out.append("## R. Renter with hash share A from a warm 30-day state, signing every checkpoint (%d days, seed %d)" % (days, seeds[0]))
+        out.append("")
+        out.append("Formula (spec 03 3.1, results_v2.md B): share(t) = (t/30) A; the veto (1/3) on day 10/A, locking alone (2/3) on day 20/A, never when A < 2/3.")
+        out.append("")
+        rows = []
+        for A in shares:
+            r = run_renter(seeds[0], A, days, f.rule_p(args.delay))
+            s10 = next((sh for d_, sh in r["series"] if d_ == 10), None)
+            s20 = next((sh for d_, sh in r["series"] if d_ == 20), None)
+            rows.append(["%.0f%%" % (100 * A), "%.1f%% / %.1f%%" % (100 * (s10 or r["series"][-1][1]), 100 * min(1.0, 10 * A / 30)) if s10 else "-",
+                         "%.1f%% / %.1f%%" % (100 * s20, 100 * min(1.0, 20 * A / 30)) if s20 else "-",
+                         "%s / %s" % (fmt_day(r["d13"]), "%.1f" % (10 / A) if 10 / A <= days else "> %d" % days),
+                         "%s / %s" % (fmt_day(r["d23"]), ("%.1f" % (20 / A)) if A >= 2 / 3 and 20 / A <= days else "never"),
+                         r["stalls"], r["conflicts"]])
+        out.append(f.md_table(["attacker hash share A", "share day 10, sim / formula", "share day 20, sim / formula", "reaches 1/3 (veto), day sim / formula",
+                               "reaches 2/3 (locks alone), day sim / formula", "stalled checkpoints", "conflicting locks"], rows))
+        out.append("")
+        print("R %.0f s" % (time.time() - t), file=sys.stderr)
+
+    if "S" in sweeps:
+        t = time.time()
+        hours = (1,) if q else (1, 6)
+        out.append("## S. Silent set holding A of weight stops signing and keeps mining, then resumes (seeds %s)" % ",".join(str(s) for s in seeds))
+        out.append("")
+        rows = []
+        for A in shares:
+            for h in hours:
+                rs = [f.run_silent_resume(sd, A, h, f.rule_p(args.delay)) for sd in seeds]
+                rows.append(["%.0f%%" % (100 * A), h, f.span(int(round(100 * r["got"])) for r in rs) + "%", f.span_min(r["first_lock"] for r in rs),
+                             f.span(r["stalls"] for r in rs), f.span(int(round(100 * r["locked_share"])) for r in rs) + "%",
+                             f.span((r["gap"] for r in rs), "%.0f"), f.span_min(r["resume"] for r in rs), f.span(r["conflicts"] for r in rs)])
+        out.append(f.md_table(["silent weight A", "hours", "picked", "first lock while silent, min", "stalled checkpoints", "locked while silent",
+                               "longest gap, min", "first lock after resume, min", "conflicting locks"], rows))
+        out.append("")
+        out.append("Reading: at A >= 1/3 the pause lasts exactly as long as the silence (the floor needs two thirds of total signing), the first lock comes 0 minutes after the resume, and no row conflicts. A silent set that keeps mining keeps its subsidy, so the pause costs it nothing.")
+        out.append("")
+        print("S %.0f s" % (time.time() - t), file=sys.stderr)
+
+    if "K" in sweeps:
+        t = time.time()
+        days = 5 if q else 30
+        out.append("## K. Bought keys worth A of the window, attacker mining at 30%% of the network, %d days (seeds %s)" % (days, ",".join(str(s) for s in seeds)))
+        out.append("")
+        out.append("Formula (spec 03 3.11.5): share(t) = A (1 - t/30) + 0.30 t/30. Sellers keep their rigs under fresh keys. 'signs' = the buyer votes; 'silent' = it withholds votes (the pause attack with bought weight).")
+        out.append("")
+        rows = []
+        for A in shares:
+            for signs in (True, False):
+                rs = [f.run_acquired(sd, A, 0.30, signs, days, f.rule_p(args.delay)) for sd in seeds]
+                rows.append(["%.0f%%" % (100 * A), "signs" if signs else "silent", f.span(int(round(100 * r["got"])) for r in rs) + "%",
+                             f.span(int(round(100 * r["max_share"])) for r in rs) + "%", f.span(int(round(100 * r["end_share"])) for r in rs) + "%",
+                             "day %s to %s" % (f.span(r["above13"] for r in rs if r["above13"]) if any(r["above13"] for r in rs) else "-",
+                                               f.span(r["last13"] for r in rs if r["last13"]) if any(r["last13"] for r in rs) else "-") if any(r["above13"] for r in rs) else "never",
+                             f.span(r["stalls"] for r in rs), f.span(r["conflicts"] for r in rs)])
+        out.append(f.md_table(["bought weight A", "buyer", "picked", "peak share", "share at day %d" % days, "holds at least 1/3 (veto)",
+                               "stalled checkpoints of %d" % (2880 * days), "conflicting locks"], rows))
+        out.append("")
+        print("K %.0f s" % (time.time() - t), file=sys.stderr)
+
+    if "E" in sweeps:
+        t = time.time()
+        dur = 1 if q else 2
+        out.append("## E. Poisoned eclipse: an attacker holding A of weight feeds a 20%% pool a private fork for %d h and signs both sides (seeds %s)" % (dur, ",".join(str(s) for s in seeds)))
+        out.append("")
+        out.append("The eclipsed side holds 20% + A of total; the honest side 80% - A. Rule v2 (floor 2/3 of total) as results_v2.md L3; the floor binds whatever the presence window does. A = 90% is not run: the attacker alone is over two thirds and locks alone everywhere, the 20-day public event of spec 03 3.1.")
+        out.append("")
+        rows = []
+        for A in shares:
+            if A + 0.2 >= 0.999:
+                rows.append(["%.0f%%" % (100 * A), "%.0f%%" % (100 * (0.2 + A)), "not run (attacker alone over 2/3)", "-", "-", "-", "-"])
+                continue
+            rs = [run_eclipse_share(sd, A, dur, f.rule_p(args.delay)) for sd in seeds]
+            rows.append(["%.0f%%" % (100 * A), "%.0f%%" % (100 * (0.2 + A)), f.span(r["conflicts"] for r in rs), f.span_min(r["first_conflict_min"] for r in rs),
+                         f.span(r["ecl_locks"] for r in rs), f.span(r["hon_locks"] for r in rs), f.span(r["post_stalls"] for r in rs)])
+        out.append(f.md_table(["attacker weight A", "eclipsed side holds", "conflicting locks", "first conflict, min", "locks on the eclipsed side (%d h)" % dur,
+                               "locks on the honest side (%d h)" % dur, "stalls in 3 h after the heal"], rows))
+        out.append("")
+        print("E %.0f s" % (time.time() - t), file=sys.stderr)
+
+    if "P" in sweeps:
+        t = time.time()
+        dur = 60 if q else 150
+        out.append("## P. 50/50 honest partition for %d min with an equivocator holding A of total reaching both sides (seeds %s)" % (dur, ",".join(str(s) for s in seeds)))
+        out.append("")
+        out.append("Each side holds (1 - A)/2 + A of total: 60% at A = 20%, 67% at 34%, 75.5% at 51%, 83.5% at 67%, 95% at 90%. Two conflicting certificates need two thirds each, so A >= 1/3 is the bound (spec 03 3.11.2). v2 = the rule as specified with view-local weights; v3 = plus the frozen table (F21).")
+        out.append("")
+        rows = []
+        for A in shares:
+            for name, mk in (("v2", f.rule_v2_local), ("v3", f.rule_v3)):
+                rs = [f.run_partition2(sd, (0.5, 0.5), A, dur, mk(args.delay)) for sd in seeds]
+                rows.append(["%.0f%%" % (100 * A), "%.1f%%" % (100 * ((1 - A) / 2 + A)), name, f.span(r["conflicts"] for r in rs),
+                             f.span_min(r["first_conflict_min"] for r in rs),
+                             " / ".join(f.span_min(r["side_first_lock"][i] for r in rs) for i in range(2)),
+                             "yes" if all(r["kept"] for r in rs) else "NO", f.span_min(r["post_first_lock_min"] for r in rs), f.span(r["post_stalls"] for r in rs)])
+        out.append(f.md_table(["equivocator A", "each side holds", "rule", "conflicting locks", "first conflict, min", "first lock per side, min",
+                               "every pre-heal lock kept", "first lock after heal, min", "stalls in 3 h after"], rows))
+        out.append("")
+        print("P %.0f s" % (time.time() - t), file=sys.stderr)
+
+    if "C" in sweeps:
+        t = time.time()
+        days = 3 if q else 31
+        out.append("## C. Abrupt departure (tonight's pause): keys holding A of weight stop mining AND signing at once; survivors inherit the block supply (%d days, seeds %s)" % (days, ",".join(str(s) for s in seeds)))
+        out.append("")
+        out.append("v2 analytic: the survivors hold 1 - A (30 - t)/30 of the sliding table on day t and reach two thirds on day 30 (1 - 1/(3A)) (never for A <= 1/3). v3: the frozen table at the last certified checkpoint holds the departed keys until it expires one window after that checkpoint, so the first lock comes on day 30 whatever A (results_v2.md M4). On the devnet the window is 7,200 DAA (2 h), so divide the days by 360.")
+        out.append("")
+        rows = []
+        for A in shares:
+            for name, mk in (("v2", f.rule_v2_local), ("v3", f.rule_v3)):
+                rs = [f.run_churn(sd, A, days, mk(args.delay)) for sd in seeds]
+                pred = "never" if A <= 1 / 3 else "%.1f" % (30 * (1 - 1 / (3 * A)))
+                rows.append(["%.0f%%" % (100 * A), name, f.span(int(round(100 * r["got"])) for r in rs) + "%",
+                             f.span_min([None if r["first_lock_days"] is None else r["first_lock_days"] for r in rs]).replace("never", "never in %d days" % days) if any(r["first_lock_days"] is None for r in rs) else f.span((r["first_lock_days"] for r in rs), "%.2f"),
+                             pred if name == "v2" else ("never" if A <= 1 / 3 else "30.0"),
+                             f.span(r["stalls"] for r in rs), f.span(int(round(100 * r["live_share"])) for r in rs) + "%", f.span(r["conflicts"] for r in rs)])
+        out.append(f.md_table(["departed weight A", "rule", "picked", "first lock after the departure, days", "analytic", "stalled checkpoints", "live share of total at the end", "conflicting locks"], rows))
+        out.append("")
+        print("C %.0f s" % (time.time() - t), file=sys.stderr)
+
+    out.append("(%.0f s in all)" % (time.time() - t_all))
+    text = "\n".join(out)
+    if args.out:
+        with open(args.out, "w") as fh:
+            fh.write(text + "\n")
+    print(text)
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/sim/horizon/consensus-security/finality_horizon_results.md b/sim/horizon/consensus-security/finality_horizon_results.md
new file mode 100644
index 000000000..a28568be6
--- /dev/null
+++ b/sim/horizon/consensus-security/finality_horizon_results.md
@@ -0,0 +1,97 @@
+# Finality weight attacks over the adversary's share (20, 34, 51, 67, 90 percent)
+
+Generated by `sim/horizon/consensus-security/finality_horizon.py` on 2026-10-06 19:42 UTC, importing `sim/finality_v2.py` unchanged; seeds 7,11; rule active/cert + floor 1.00 (a lock needs 66.7% of total); inter-region delay 2.0 s. Model assumptions and limits: `sim/results_v2.md` (no DAG, perfect retarget, keys free, 2.2% outage).
+
+## R. Renter with hash share A from a warm 30-day state, signing every checkpoint (32 days, seed 7)
+
+Formula (spec 03 3.1, results_v2.md B): share(t) = (t/30) A; the veto (1/3) on day 10/A, locking alone (2/3) on day 20/A, never when A < 2/3.
+
+| attacker hash share A | share day 10, sim / formula | share day 20, sim / formula | reaches 1/3 (veto), day sim / formula | reaches 2/3 (locks alone), day sim / formula | stalled checkpoints | conflicting locks |
+|---|---|---|---|---|---|---|
+| 20% | 6.7% / 6.7% | 13.3% / 13.3% | never / > 32 | never / never | 0 | 0 |
+| 34% | 11.3% / 11.3% | 22.6% / 22.7% | 30.0 / 29.4 | never / never | 0 | 0 |
+| 51% | 17.0% / 17.0% | 34.0% / 34.0% | 20.0 / 19.6 | never / never | 0 | 0 |
+| 67% | 22.4% / 22.3% | 44.7% / 44.7% | 15.0 / 14.9 | 30.0 / 29.9 | 0 | 0 |
+| 90% | 30.0% / 30.0% | 60.0% / 60.0% | 12.0 / 11.1 | 23.0 / 22.2 | 0 | 0 |
+
+## S. Silent set holding A of weight stops signing and keeps mining, then resumes (seeds 7,11)
+
+| silent weight A | hours | picked | first lock while silent, min | stalled checkpoints | locked while silent | longest gap, min | first lock after resume, min | conflicting locks |
+|---|---|---|---|---|---|---|---|---|
+| 20% | 1 | 20% | 0 | 0 | 100% | 1 | 0 | 0 |
+| 20% | 6 | 20% | 0 | 0 | 100% | 1 | 0 to 0 | 0 |
+| 34% | 1 | 34% | never | 122 to 123 | 0% | 60 | 0 | 0 |
+| 34% | 6 | 34% | never | 720 to 722 | 0% | 360 | 0 to 0 | 0 |
+| 51% | 1 | 51% | never | 122 to 123 | 0% | 60 | 0 | 0 |
+| 51% | 6 | 51% | never | 720 to 722 | 0% | 360 | 0 to 0 | 0 |
+| 67% | 1 | 67% | never | 122 to 123 | 0% | 60 | 0 | 0 |
+| 67% | 6 | 67% | never | 720 to 722 | 0% | 360 | 0 to 0 | 0 |
+| 90% | 1 | 83 to 90% | never | 122 to 123 | 0% | 60 | 0 | 0 |
+| 90% | 6 | 83 to 90% | never | 720 to 722 | 0% | 360 | 0 to 0 | 0 |
+
+Reading: at A >= 1/3 the pause lasts exactly as long as the silence (the floor needs two thirds of total signing), the first lock comes 0 minutes after the resume, and no row conflicts. A silent set that keeps mining keeps its subsidy, so the pause costs it nothing.
+
+## K. Bought keys worth A of the window, attacker mining at 30% of the network, 30 days (seeds 7,11)
+
+Formula (spec 03 3.11.5): share(t) = A (1 - t/30) + 0.30 t/30. Sellers keep their rigs under fresh keys. 'signs' = the buyer votes; 'silent' = it withholds votes (the pause attack with bought weight).
+
+| bought weight A | buyer | picked | peak share | share at day 30 | holds at least 1/3 (veto) | stalled checkpoints of 86400 | conflicting locks |
+|---|---|---|---|---|---|---|---|
+| 20% | signs | 20% | 30% | 30% | never | 0 | 0 |
+| 20% | silent | 20% | 30% | 30% | never | 816 to 1045 | 0 |
+| 34% | signs | 34% | 34% | 30% | day 1 to 6 | 0 | 0 |
+| 34% | silent | 34% | 34% | 30% | day 1 to 6 | 36334 to 41588 | 0 |
+| 51% | signs | 51% | 51% | 30% | day 1 to 24 | 0 | 0 |
+| 51% | silent | 51% | 51% | 30% | day 1 to 24 | 74391 to 75691 | 0 |
+| 67% | signs | 67% | 66% | 30% | day 1 to 26 | 0 | 0 |
+| 67% | silent | 67% | 66% | 30% | day 1 to 26 | 79408 to 79841 | 0 |
+| 90% | signs | 83 to 90% | 82 to 89% | 30% | day 1 to 27 | 0 | 0 |
+| 90% | silent | 83 to 90% | 82 to 89% | 30% | day 1 to 27 | 81759 to 82557 | 0 |
+
+## E. Poisoned eclipse: an attacker holding A of weight feeds a 20% pool a private fork for 2 h and signs both sides (seeds 7,11)
+
+The eclipsed side holds 20% + A of total; the honest side 80% - A. Rule v2 (floor 2/3 of total) as results_v2.md L3; the floor binds whatever the presence window does. A = 90% is not run: the attacker alone is over two thirds and locks alone everywhere, the 20-day public event of spec 03 3.1.
+
+| attacker weight A | eclipsed side holds | conflicting locks | first conflict, min | locks on the eclipsed side (2 h) | locks on the honest side (2 h) | stalls in 3 h after the heal |
+|---|---|---|---|---|---|---|
+| 20% | 40% | 0 | never | 0 | 141 to 149 | 0 |
+| 34% | 54% | 0 | never | 0 | 108 to 110 | 0 |
+| 51% | 71% | 67 to 70 | 2 | 172 to 173 | 67 to 70 | 0 |
+| 67% | 87% | 30 to 32 | 4 to 5 | 208 to 209 | 30 to 32 | 0 |
+| 90% | 110% | not run (attacker alone over 2/3) | - | - | - | - |
+
+## P. 50/50 honest partition for 150 min with an equivocator holding A of total reaching both sides (seeds 7,11)
+
+Each side holds (1 - A)/2 + A of total: 60% at A = 20%, 67% at 34%, 75.5% at 51%, 83.5% at 67%, 95% at 90%. Two conflicting certificates need two thirds each, so A >= 1/3 is the bound (spec 03 3.11.2). v2 = the rule as specified with view-local weights; v3 = plus the frozen table (F21).
+
+| equivocator A | each side holds | rule | conflicting locks | first conflict, min | first lock per side, min | every pre-heal lock kept | first lock after heal, min | stalls in 3 h after |
+|---|---|---|---|---|---|---|---|---|
+| 20% | 60.0% | v2 | 0 | never | never / never | yes | 0 | 0 |
+| 20% | 60.0% | v3 | 0 | never | never / never | yes | 0 | 0 |
+| 34% | 67.0% | v2 | 21 to 70 | 14 to 77 | 11 to 48 / 0 to 76 | yes | 0 | 0 |
+| 34% | 67.0% | v3 | 21 to 69 | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 | 0 |
+| 51% | 75.5% | v2 | 299 to 300 | 0 | 0 / 0 | yes | 0 to 0 | 0 |
+| 51% | 75.5% | v3 | 299 to 300 | 0 | 0 / 0 | yes | 0 to 0 | 0 |
+| 67% | 83.5% | v2 | 301 | 0 | 0 / 0 | yes | 0 to 0 | 0 |
+| 67% | 83.5% | v3 | 301 | 0 | 0 / 0 | yes | 0 to 0 | 0 |
+| 90% | 95.0% | v2 | 293 to 300 | 0 | 0 to 0 / 0 to 0 | yes | 0 to 0 | 0 |
+| 90% | 95.0% | v3 | 293 to 300 | 0 | 0 to 0 / 0 to 0 | yes | 0 to 0 | 0 |
+
+## C. Abrupt departure (tonight's pause): keys holding A of weight stop mining AND signing at once; survivors inherit the block supply (31 days, seeds 7,11)
+
+v2 analytic: the survivors hold 1 - A (30 - t)/30 of the sliding table on day t and reach two thirds on day 30 (1 - 1/(3A)) (never for A <= 1/3). v3: the frozen table at the last certified checkpoint holds the departed keys until it expires one window after that checkpoint, so the first lock comes on day 30 whatever A (results_v2.md M4). On the devnet the window is 7,200 DAA (2 h), so divide the days by 360.
+
+| departed weight A | rule | picked | first lock after the departure, days | analytic | stalled checkpoints | live share of total at the end | conflicting locks |
+|---|---|---|---|---|---|---|---|
+| 20% | v2 | 20% | 0.00 | never | 39 to 213 | 100% | 0 |
+| 20% | v3 | 20% | 0.00 | never | 39 to 213 | 100% | 0 |
+| 34% | v2 | 34% | 0.77 to 0.85 | 0.6 | 4265 to 4727 | 100% | 0 |
+| 34% | v3 | 34% | 30.00 | 30.0 | 86395 to 86472 | 100% | 0 |
+| 51% | v2 | 51% | 10.46 to 10.52 | 10.4 | 31312 to 31739 | 100% | 0 |
+| 51% | v3 | 51% | 30.00 | 30.0 | 86326 to 86336 | 100% | 0 |
+| 67% | v2 | 67% | 15.15 to 15.24 | 15.1 | 44464 to 45047 | 100% | 0 |
+| 67% | v3 | 67% | 30.00 | 30.0 | 86361 to 86411 | 100% | 0 |
+| 90% | v2 | 83 to 90% | 17.92 to 18.88 | 18.9 | 51897 to 55628 | 100% | 0 |
+| 90% | v3 | 83 to 90% | 30.00 to 30.00 | 30.0 | 86340 to 86481 | 100% | 0 |
+
+(592 s in all)
diff --git a/sim/horizon/consensus-security/ghostdag_results_10bps.json b/sim/horizon/consensus-security/ghostdag_results_10bps.json
new file mode 100644
index 000000000..71df9047e
--- /dev/null
+++ b/sim/horizon/consensus-security/ghostdag_results_10bps.json
@@ -0,0 +1,1014 @@
+{
+ "bps": 10.0,
+ "k": 124,
+ "cells": [
+  {
+   "kind": "baseline",
+   "d": 0.35,
+   "p99": 11.0,
+   "max": 15
+  },
+  {
+   "kind": "baseline",
+   "d": 0.67,
+   "p99": 22.029999999999973,
+   "max": 26
+  },
+  {
+   "kind": "baseline",
+   "d": 2.0,
+   "p99": 98.56,
+   "max": 109
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.2,
+   "T": 10.0,
+   "won": 0.25,
+   "reorg_med": 1.0,
+   "reorg_max": 33,
+   "fork_age_med": 10.263804150330849,
+   "att_blue_share": 0.9864583333333333,
+   "hon_red_share": 0.016596482536537033,
+   "withheld_mean": 20.45
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.2,
+   "T": 30.0,
+   "won": 0.0,
+   "reorg_med": 1.0,
+   "reorg_max": 3,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.4119977362761743,
+   "hon_red_share": 0.008018802709802295,
+   "withheld_mean": 60.3
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.2,
+   "T": 60.0,
+   "won": 0.0,
+   "reorg_med": 0.0,
+   "reorg_max": 11,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.18341362697866484,
+   "hon_red_share": 0.004003336113427856,
+   "withheld_mean": 118.05
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.2,
+   "T": 90.0,
+   "won": 0.0,
+   "reorg_med": 1.0,
+   "reorg_max": 6,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.1362417743114794,
+   "hon_red_share": 0.0029818702290076338,
+   "withheld_mean": 176.65
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.34,
+   "T": 10.0,
+   "won": 0.9,
+   "reorg_med": 25.5,
+   "reorg_max": 30,
+   "fork_age_med": 10.29624693831716,
+   "att_blue_share": 0.9906922629435718,
+   "hon_red_share": 0.013447432762836185,
+   "withheld_mean": 38.0
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.34,
+   "T": 30.0,
+   "won": 0.85,
+   "reorg_med": 77.0,
+   "reorg_max": 84,
+   "fork_age_med": 30.283822131164086,
+   "att_blue_share": 0.9184871209651125,
+   "hon_red_share": 0.22777777777777777,
+   "withheld_mean": 104.4
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.34,
+   "T": 60.0,
+   "won": 0.0,
+   "reorg_med": 0.5,
+   "reorg_max": 2,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.3244575936883629,
+   "hon_red_share": 0.008539188777066178,
+   "withheld_mean": 202.95
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.34,
+   "T": 90.0,
+   "won": 0.0,
+   "reorg_med": 1.0,
+   "reorg_max": 3,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.1320085166784954,
+   "hon_red_share": 0.003684971098265896,
+   "withheld_mean": 304.85
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.45,
+   "T": 10.0,
+   "won": 0.95,
+   "reorg_med": 23.0,
+   "reorg_max": 29,
+   "fork_age_med": 10.263870133461005,
+   "att_blue_share": 0.9930362116991643,
+   "hon_red_share": 0.01849217638691323,
+   "withheld_mean": 44.5
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.45,
+   "T": 30.0,
+   "won": 0.95,
+   "reorg_med": 71.0,
+   "reorg_max": 79,
+   "fork_age_med": 30.246747649608658,
+   "att_blue_share": 0.9599298772852491,
+   "hon_red_share": 0.19111199681147867,
+   "withheld_mean": 132.3
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.45,
+   "T": 60.0,
+   "won": 0.95,
+   "reorg_med": 139.0,
+   "reorg_max": 152,
+   "fork_age_med": 60.24675710249759,
+   "att_blue_share": 0.9546944858420269,
+   "hon_red_share": 0.4903952037195644,
+   "withheld_mean": 267.95
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.45,
+   "T": 90.0,
+   "won": 0.95,
+   "reorg_med": 208.0,
+   "reorg_max": 225,
+   "fork_age_med": 90.21743271277799,
+   "att_blue_share": 0.9523557437797776,
+   "hon_red_share": 0.620550587410135,
+   "withheld_mean": 407.05
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.51,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 23.0,
+   "reorg_max": 27,
+   "fork_age_med": 10.160535942871956,
+   "att_blue_share": 0.994899960768929,
+   "hon_red_share": 0.01809954751131222,
+   "withheld_mean": 53.75
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.51,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 66.0,
+   "reorg_max": 74,
+   "fork_age_med": 30.285089387077004,
+   "att_blue_share": 0.9958315050460729,
+   "hon_red_share": 0.18553459119496854,
+   "withheld_mean": 153.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.51,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 132.5,
+   "reorg_max": 144,
+   "fork_age_med": 60.15401532284122,
+   "att_blue_share": 0.9973639119546592,
+   "hon_red_share": 0.509728692792546,
+   "withheld_mean": 304.5
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.51,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 199.0,
+   "reorg_max": 217,
+   "fork_age_med": 90.20035816925896,
+   "att_blue_share": 0.998211091234347,
+   "hon_red_share": 0.6500879421536057,
+   "withheld_mean": 458.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.67,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 17.0,
+   "reorg_max": 22,
+   "fork_age_med": 10.270717629197495,
+   "att_blue_share": 0.9954995499549955,
+   "hon_red_share": 0.01768292682926829,
+   "withheld_mean": 69.35
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.67,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 51.5,
+   "reorg_max": 62,
+   "fork_age_med": 30.231180310072197,
+   "att_blue_share": 0.9973257563095437,
+   "hon_red_share": 0.28566677751912206,
+   "withheld_mean": 203.1
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.67,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 103.5,
+   "reorg_max": 116,
+   "fork_age_med": 60.23560679850234,
+   "att_blue_share": 0.9982904263877715,
+   "hon_red_share": 0.5744379177638241,
+   "withheld_mean": 399.05
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.67,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 157.5,
+   "reorg_max": 174,
+   "fork_age_med": 90.279129862258,
+   "att_blue_share": 0.9986392609038173,
+   "hon_red_share": 0.6936793273412584,
+   "withheld_mean": 602.6
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.9,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 7.0,
+   "reorg_max": 11,
+   "fork_age_med": 10.204500268385711,
+   "att_blue_share": 0.9957484895949877,
+   "hon_red_share": 0.01609657947686117,
+   "withheld_mean": 93.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.9,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 23.5,
+   "reorg_max": 29,
+   "fork_age_med": 30.180348837865917,
+   "att_blue_share": 0.9975411851487583,
+   "hon_red_share": 0.3826879271070615,
+   "withheld_mean": 273.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.9,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 46.0,
+   "reorg_max": 54,
+   "fork_age_med": 60.16843821645766,
+   "att_blue_share": 0.9985843081737575,
+   "hon_red_share": 0.6330837304288631,
+   "withheld_mean": 539.6
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.9,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 70.5,
+   "reorg_max": 80,
+   "fork_age_med": 90.13279881044505,
+   "att_blue_share": 0.998935717326522,
+   "hon_red_share": 0.7438376027066216,
+   "withheld_mean": 810.15
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.2,
+   "T": 10.0,
+   "won": 0.45,
+   "reorg_med": 10.5,
+   "reorg_max": 33,
+   "fork_age_med": 11.33445112480534,
+   "att_blue_share": 0.9704641350210971,
+   "hon_red_share": 0.023517638228671502,
+   "withheld_mean": 20.45
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.2,
+   "T": 30.0,
+   "won": 0.0,
+   "reorg_med": 3.0,
+   "reorg_max": 13,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.47413303013075614,
+   "hon_red_share": 0.018194444444444444,
+   "withheld_mean": 60.3
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.2,
+   "T": 60.0,
+   "won": 0.0,
+   "reorg_med": 3.0,
+   "reorg_max": 16,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.1787941787941788,
+   "hon_red_share": 0.006107764390896921,
+   "withheld_mean": 118.05
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.2,
+   "T": 90.0,
+   "won": 0.0,
+   "reorg_med": 3.0,
+   "reorg_max": 20,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.13202933985330073,
+   "hon_red_share": 0.005200860832137733,
+   "withheld_mean": 176.65
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.34,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 20.0,
+   "reorg_max": 32,
+   "fork_age_med": 10.768404668463056,
+   "att_blue_share": 0.9887905604719764,
+   "hon_red_share": 0.023162445954292774,
+   "withheld_mean": 38.0
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.34,
+   "T": 30.0,
+   "won": 0.95,
+   "reorg_med": 59.0,
+   "reorg_max": 64,
+   "fork_age_med": 30.696360600214405,
+   "att_blue_share": 0.9800065552277941,
+   "hon_red_share": 0.27392627663172137,
+   "withheld_mean": 104.4
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.34,
+   "T": 60.0,
+   "won": 0.0,
+   "reorg_med": 1.5,
+   "reorg_max": 11,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.33459019646755306,
+   "hon_red_share": 0.01879276886936983,
+   "withheld_mean": 202.95
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.34,
+   "T": 90.0,
+   "won": 0.0,
+   "reorg_med": 2.5,
+   "reorg_max": 12,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.12756556442417333,
+   "hon_red_share": 0.005582541869064018,
+   "withheld_mean": 304.85
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.45,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 17.0,
+   "reorg_max": 22,
+   "fork_age_med": 10.377380234077613,
+   "att_blue_share": 0.9915572232645403,
+   "hon_red_share": 0.023758099352051837,
+   "withheld_mean": 44.5
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.45,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 51.5,
+   "reorg_max": 58,
+   "fork_age_med": 30.357566571524398,
+   "att_blue_share": 0.9936980085707083,
+   "hon_red_share": 0.2252703243892671,
+   "withheld_mean": 132.3
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.45,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 102.5,
+   "reorg_max": 111,
+   "fork_age_med": 60.38375657105449,
+   "att_blue_share": 0.9962546816479401,
+   "hon_red_share": 0.5330877839165132,
+   "withheld_mean": 267.95
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.45,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 154.5,
+   "reorg_max": 166,
+   "fork_age_med": 90.35754330396347,
+   "att_blue_share": 0.9976650392697941,
+   "hon_red_share": 0.6646459321736075,
+   "withheld_mean": 407.05
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.51,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 16.5,
+   "reorg_max": 26,
+   "fork_age_med": 10.612376063677964,
+   "att_blue_share": 0.9916732751784298,
+   "hon_red_share": 0.02658911508101371,
+   "withheld_mean": 53.75
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.51,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 50.0,
+   "reorg_max": 58,
+   "fork_age_med": 30.62841551667742,
+   "att_blue_share": 0.9944714727996462,
+   "hon_red_share": 0.21417287294064546,
+   "withheld_mean": 153.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.51,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 100.0,
+   "reorg_max": 109,
+   "fork_age_med": 60.60134443644297,
+   "att_blue_share": 0.9976177871889889,
+   "hon_red_share": 0.5286676749621889,
+   "withheld_mean": 304.5
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.51,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 146.0,
+   "reorg_max": 163,
+   "fork_age_med": 90.58537950998196,
+   "att_blue_share": 0.9983012457531144,
+   "hon_red_share": 0.6621939275220372,
+   "withheld_mean": 458.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.67,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 13.0,
+   "reorg_max": 16,
+   "fork_age_med": 10.288698205008014,
+   "att_blue_share": 0.9951338199513382,
+   "hon_red_share": 0.024630541871921183,
+   "withheld_mean": 69.35
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.67,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 39.0,
+   "reorg_max": 47,
+   "fork_age_med": 30.238210072155052,
+   "att_blue_share": 0.9969727547931383,
+   "hon_red_share": 0.3154722036168788,
+   "withheld_mean": 203.1
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.67,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 77.5,
+   "reorg_max": 89,
+   "fork_age_med": 60.25709982477166,
+   "att_blue_share": 0.9978785735932922,
+   "hon_red_share": 0.5899573083960155,
+   "withheld_mean": 399.05
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.67,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 118.5,
+   "reorg_max": 132,
+   "fork_age_med": 90.29587896981211,
+   "att_blue_share": 0.998420561418623,
+   "hon_red_share": 0.7051561365286856,
+   "withheld_mean": 602.6
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.9,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 6.0,
+   "reorg_max": 9,
+   "fork_age_med": 10.209187813361062,
+   "att_blue_share": 0.9956955142727685,
+   "hon_red_share": 0.05454545454545454,
+   "withheld_mean": 93.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.9,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 19.0,
+   "reorg_max": 23,
+   "fork_age_med": 30.209720716730338,
+   "att_blue_share": 0.9973968017850502,
+   "hon_red_share": 0.41122565864833904,
+   "withheld_mean": 273.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.9,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 38.0,
+   "reorg_max": 44,
+   "fork_age_med": 60.16132974666912,
+   "att_blue_share": 0.9985774183887391,
+   "hon_red_share": 0.6438356164383562,
+   "withheld_mean": 539.6
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.9,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 58.0,
+   "reorg_max": 66,
+   "fork_age_med": 90.13279881044505,
+   "att_blue_share": 0.9989323653445791,
+   "hon_red_share": 0.7578692493946732,
+   "withheld_mean": 810.15
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.2,
+   "T": 10.0,
+   "won": 0.9,
+   "reorg_med": 29.0,
+   "reorg_max": 97,
+   "fork_age_med": 20.85305355293914,
+   "att_blue_share": 0.9642857142857143,
+   "hon_red_share": 0.051570680628272254,
+   "withheld_mean": 20.45
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.2,
+   "T": 30.0,
+   "won": 0.0,
+   "reorg_med": 17.0,
+   "reorg_max": 75,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.6196355085243974,
+   "hon_red_share": 0.06726393629124004,
+   "withheld_mean": 60.3
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.2,
+   "T": 60.0,
+   "won": 0.0,
+   "reorg_med": 16.5,
+   "reorg_max": 100,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.16115411681914146,
+   "hon_red_share": 0.00926476838079048,
+   "withheld_mean": 118.05
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.2,
+   "T": 90.0,
+   "won": 0.0,
+   "reorg_med": 31.5,
+   "reorg_max": 69,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.1222524080019758,
+   "hon_red_share": 0.008083489171743983,
+   "withheld_mean": 176.65
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.34,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 16.5,
+   "reorg_max": 29,
+   "fork_age_med": 13.679419418135751,
+   "att_blue_share": 0.9820544554455446,
+   "hon_red_share": 0.04398447606727038,
+   "withheld_mean": 38.0
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.34,
+   "T": 30.0,
+   "won": 0.85,
+   "reorg_med": 35.0,
+   "reorg_max": 51,
+   "fork_age_med": 31.94550888829277,
+   "att_blue_share": 0.9435238417314846,
+   "hon_red_share": 0.3208695652173913,
+   "withheld_mean": 104.4
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.34,
+   "T": 60.0,
+   "won": 0.0,
+   "reorg_med": 17.0,
+   "reorg_max": 90,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.3623129801860089,
+   "hon_red_share": 0.050933609958506224,
+   "withheld_mean": 202.95
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.34,
+   "T": 90.0,
+   "won": 0.0,
+   "reorg_med": 13.5,
+   "reorg_max": 52,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.1145577838695715,
+   "hon_red_share": 0.009663250366032211,
+   "withheld_mean": 304.85
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.45,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 13.0,
+   "reorg_max": 78,
+   "fork_age_med": 12.214199635179408,
+   "att_blue_share": 0.9846382556987116,
+   "hon_red_share": 0.07444818555929666,
+   "withheld_mean": 44.5
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.45,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 32.0,
+   "reorg_max": 44,
+   "fork_age_med": 31.18261699934544,
+   "att_blue_share": 0.9893229166666667,
+   "hon_red_share": 0.30927835051546393,
+   "withheld_mean": 132.3
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.45,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 62.5,
+   "reorg_max": 77,
+   "fork_age_med": 61.22382062107279,
+   "att_blue_share": 0.9940476190476191,
+   "hon_red_share": 0.5862197856964865,
+   "withheld_mean": 267.95
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.45,
+   "T": 90.0,
+   "won": 0.9,
+   "reorg_med": 92.5,
+   "reorg_max": 101,
+   "fork_age_med": 91.19196193738864,
+   "att_blue_share": 0.9308973670069854,
+   "hon_red_share": 0.6312616366699175,
+   "withheld_mean": 407.05
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.51,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 9.5,
+   "reorg_max": 16,
+   "fork_age_med": 11.470227344857953,
+   "att_blue_share": 0.9875,
+   "hon_red_share": 0.06495204882301657,
+   "withheld_mean": 53.75
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.51,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 26.5,
+   "reorg_max": 33,
+   "fork_age_med": 31.006576179009635,
+   "att_blue_share": 0.9883508451347647,
+   "hon_red_share": 0.3169487595641085,
+   "withheld_mean": 153.8
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.51,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 57.0,
+   "reorg_max": 66,
+   "fork_age_med": 60.87240745314251,
+   "att_blue_share": 0.9944714131607335,
+   "hon_red_share": 0.588874947720619,
+   "withheld_mean": 304.5
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.51,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 85.0,
+   "reorg_max": 98,
+   "fork_age_med": 90.86791985593362,
+   "att_blue_share": 0.9971308339709258,
+   "hon_red_share": 0.7120672601384768,
+   "withheld_mean": 458.8
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.67,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 6.0,
+   "reorg_max": 13,
+   "fork_age_med": 10.447102144083832,
+   "att_blue_share": 0.9935876883616543,
+   "hon_red_share": 0.07124352331606218,
+   "withheld_mean": 69.35
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.67,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 22.0,
+   "reorg_max": 28,
+   "fork_age_med": 30.388658972712367,
+   "att_blue_share": 0.9947862356621481,
+   "hon_red_share": 0.4101414280786478,
+   "withheld_mean": 203.1
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.67,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 44.5,
+   "reorg_max": 52,
+   "fork_age_med": 60.3434739831812,
+   "att_blue_share": 0.9970170746759925,
+   "hon_red_share": 0.6542904290429042,
+   "withheld_mean": 399.05
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.67,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 68.0,
+   "reorg_max": 75,
+   "fork_age_med": 90.34464144289228,
+   "att_blue_share": 0.9978169116576917,
+   "hon_red_share": 0.7566137566137566,
+   "withheld_mean": 602.6
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.9,
+   "T": 10.0,
+   "won": 1.0,
+   "reorg_med": 3.0,
+   "reorg_max": 5,
+   "fork_age_med": 10.219298367658897,
+   "att_blue_share": 0.9954523695548109,
+   "hon_red_share": 0.1673913043478261,
+   "withheld_mean": 93.8
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.9,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 11.5,
+   "reorg_max": 14,
+   "fork_age_med": 30.212047441887105,
+   "att_blue_share": 0.9974463738508682,
+   "hon_red_share": 0.5294117647058824,
+   "withheld_mean": 273.8
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.9,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 24.0,
+   "reorg_max": 27,
+   "fork_age_med": 60.16843821645766,
+   "att_blue_share": 0.998551939638747,
+   "hon_red_share": 0.7115117891816921,
+   "withheld_mean": 539.6
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.9,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 37.0,
+   "reorg_max": 40,
+   "fork_age_med": 90.1605719712775,
+   "att_blue_share": 0.9989202030018357,
+   "hon_red_share": 0.8052967140755272,
+   "withheld_mean": 810.15
+  },
+  {
+   "kind": "selfish",
+   "d": 0.67,
+   "H": 0.2,
+   "att_blue_share": 0.9993445846305096,
+   "blue_share_of_all": 0.2030360531309298,
+   "won": 0.6,
+   "reorg_max": 5
+  },
+  {
+   "kind": "selfish",
+   "d": 0.67,
+   "H": 0.34,
+   "att_blue_share": 0.9994144627695911,
+   "blue_share_of_all": 0.34092346616065783,
+   "won": 0.8,
+   "reorg_max": 7
+  },
+  {
+   "kind": "selfish",
+   "d": 0.67,
+   "H": 0.45,
+   "att_blue_share": 0.9995604073558503,
+   "blue_share_of_all": 0.4542518479057069,
+   "won": 0.8,
+   "reorg_max": 5
+  },
+  {
+   "kind": "selfish",
+   "d": 0.67,
+   "H": 0.51,
+   "att_blue_share": 0.9996086616227498,
+   "blue_share_of_all": 0.5102543614329471,
+   "won": 1.0,
+   "reorg_max": 3
+  },
+  {
+   "kind": "selfish",
+   "d": 0.67,
+   "H": 0.67,
+   "att_blue_share": 0.9997048406139315,
+   "blue_share_of_all": 0.676768349540429,
+   "won": 1.0,
+   "reorg_max": 5
+  },
+  {
+   "kind": "selfish",
+   "d": 0.67,
+   "H": 0.9,
+   "att_blue_share": 0.9998149176383491,
+   "blue_share_of_all": 0.8992242900422812,
+   "won": 1.0,
+   "reorg_max": 0
+  }
+ ]
+}
\ No newline at end of file
diff --git a/sim/horizon/consensus-security/ghostdag_results_10bps.md b/sim/horizon/consensus-security/ghostdag_results_10bps.md
new file mode 100644
index 000000000..4825db6eb
--- /dev/null
+++ b/sim/horizon/consensus-security/ghostdag_results_10bps.md
@@ -0,0 +1,103 @@
+# GHOSTDAG withholding simulator, 10 blocks/s, k 124, 8 honest miners, 20 seeds per cell
+
+Generated by `sim/horizon/consensus-security/ghostdag_sim.py` on 2026-10-06 19:38 UTC. Every number is this simulator's; the model and its limits are in the file header.
+
+## 1. Honest parallelism alone: natural selected-chain reorg depth at honest miner 0 (chain blocks), 75 s per episode
+
+| one-way delay d, s | blocks in flight (bps x d) | reorg depth p99 (worst seed) | reorg depth max |
+|---|---|---|---|
+| 0.35 | 3.50 | 11 | 15 |
+| 0.67 | 6.70 | 22 | 26 |
+| 2 | 20.00 | 99 | 109 |
+
+## 2. Withhold for T seconds, then release everything: what the honest selected chain does
+
+`won` = the attacker's private tip became honest miner 0's selected chain after the release (its earlier-ordered conflicting transaction then precedes the honest copy). `reorg` = chain blocks removed from miner 0's selected chain (median and max over seeds). `fork age` = seconds between the fork point and the release: the window a conflicting transaction can reach back. `att blue` = the attacker's blue blocks over its blocks in miner 0's view (weight and subsidy kept); `hon red` = honest blocks since the fork turned red by the release.
+
+| d, s | attacker share H | hold T, s | blocks withheld (mean) | won | reorg med / max | fork age if won, s (med) | att blue / att blocks | hon red / hon blocks |
+|---|---|---|---|---|---|---|---|---|
+| 0.35 | 20% | 10 | 20.4 | 25% | 1 / 33 | 10 | 99% | 2% |
+| 0.35 | 20% | 30 | 60.3 | 0% | 1 / 3 | - | 41% | 1% |
+| 0.35 | 20% | 60 | 118.0 | 0% | 0 / 11 | - | 18% | 0% |
+| 0.35 | 20% | 90 | 176.7 | 0% | 1 / 6 | - | 14% | 0% |
+| 0.35 | 34% | 10 | 38.0 | 90% | 26 / 30 | 10 | 99% | 1% |
+| 0.35 | 34% | 30 | 104.4 | 85% | 77 / 84 | 30 | 92% | 23% |
+| 0.35 | 34% | 60 | 202.9 | 0% | 0 / 2 | - | 32% | 1% |
+| 0.35 | 34% | 90 | 304.9 | 0% | 1 / 3 | - | 13% | 0% |
+| 0.35 | 45% | 10 | 44.5 | 95% | 23 / 29 | 10 | 99% | 2% |
+| 0.35 | 45% | 30 | 132.3 | 95% | 71 / 79 | 30 | 96% | 19% |
+| 0.35 | 45% | 60 | 267.9 | 95% | 139 / 152 | 60 | 95% | 49% |
+| 0.35 | 45% | 90 | 407.1 | 95% | 208 / 225 | 90 | 95% | 62% |
+| 0.35 | 51% | 10 | 53.8 | 100% | 23 / 27 | 10 | 99% | 2% |
+| 0.35 | 51% | 30 | 153.8 | 100% | 66 / 74 | 30 | 100% | 19% |
+| 0.35 | 51% | 60 | 304.5 | 100% | 132 / 144 | 60 | 100% | 51% |
+| 0.35 | 51% | 90 | 458.8 | 100% | 199 / 217 | 90 | 100% | 65% |
+| 0.35 | 67% | 10 | 69.3 | 100% | 17 / 22 | 10 | 100% | 2% |
+| 0.35 | 67% | 30 | 203.1 | 100% | 52 / 62 | 30 | 100% | 29% |
+| 0.35 | 67% | 60 | 399.1 | 100% | 104 / 116 | 60 | 100% | 57% |
+| 0.35 | 67% | 90 | 602.6 | 100% | 158 / 174 | 90 | 100% | 69% |
+| 0.35 | 90% | 10 | 93.8 | 100% | 7 / 11 | 10 | 100% | 2% |
+| 0.35 | 90% | 30 | 273.8 | 100% | 24 / 29 | 30 | 100% | 38% |
+| 0.35 | 90% | 60 | 539.6 | 100% | 46 / 54 | 60 | 100% | 63% |
+| 0.35 | 90% | 90 | 810.1 | 100% | 70 / 80 | 90 | 100% | 74% |
+| 0.67 | 20% | 10 | 20.4 | 45% | 10 / 33 | 11 | 97% | 2% |
+| 0.67 | 20% | 30 | 60.3 | 0% | 3 / 13 | - | 47% | 2% |
+| 0.67 | 20% | 60 | 118.0 | 0% | 3 / 16 | - | 18% | 1% |
+| 0.67 | 20% | 90 | 176.7 | 0% | 3 / 20 | - | 13% | 1% |
+| 0.67 | 34% | 10 | 38.0 | 100% | 20 / 32 | 11 | 99% | 2% |
+| 0.67 | 34% | 30 | 104.4 | 95% | 59 / 64 | 31 | 98% | 27% |
+| 0.67 | 34% | 60 | 202.9 | 0% | 2 / 11 | - | 33% | 2% |
+| 0.67 | 34% | 90 | 304.9 | 0% | 2 / 12 | - | 13% | 1% |
+| 0.67 | 45% | 10 | 44.5 | 100% | 17 / 22 | 10 | 99% | 2% |
+| 0.67 | 45% | 30 | 132.3 | 100% | 52 / 58 | 30 | 99% | 23% |
+| 0.67 | 45% | 60 | 267.9 | 100% | 102 / 111 | 60 | 100% | 53% |
+| 0.67 | 45% | 90 | 407.1 | 100% | 154 / 166 | 90 | 100% | 66% |
+| 0.67 | 51% | 10 | 53.8 | 100% | 16 / 26 | 11 | 99% | 3% |
+| 0.67 | 51% | 30 | 153.8 | 100% | 50 / 58 | 31 | 99% | 21% |
+| 0.67 | 51% | 60 | 304.5 | 100% | 100 / 109 | 61 | 100% | 53% |
+| 0.67 | 51% | 90 | 458.8 | 100% | 146 / 163 | 91 | 100% | 66% |
+| 0.67 | 67% | 10 | 69.3 | 100% | 13 / 16 | 10 | 100% | 2% |
+| 0.67 | 67% | 30 | 203.1 | 100% | 39 / 47 | 30 | 100% | 32% |
+| 0.67 | 67% | 60 | 399.1 | 100% | 78 / 89 | 60 | 100% | 59% |
+| 0.67 | 67% | 90 | 602.6 | 100% | 118 / 132 | 90 | 100% | 71% |
+| 0.67 | 90% | 10 | 93.8 | 100% | 6 / 9 | 10 | 100% | 5% |
+| 0.67 | 90% | 30 | 273.8 | 100% | 19 / 23 | 30 | 100% | 41% |
+| 0.67 | 90% | 60 | 539.6 | 100% | 38 / 44 | 60 | 100% | 64% |
+| 0.67 | 90% | 90 | 810.1 | 100% | 58 / 66 | 90 | 100% | 76% |
+| 2 | 20% | 10 | 20.4 | 90% | 29 / 97 | 21 | 96% | 5% |
+| 2 | 20% | 30 | 60.3 | 0% | 17 / 75 | - | 62% | 7% |
+| 2 | 20% | 60 | 118.0 | 0% | 16 / 100 | - | 16% | 1% |
+| 2 | 20% | 90 | 176.7 | 0% | 32 / 69 | - | 12% | 1% |
+| 2 | 34% | 10 | 38.0 | 100% | 16 / 29 | 14 | 98% | 4% |
+| 2 | 34% | 30 | 104.4 | 85% | 35 / 51 | 32 | 94% | 32% |
+| 2 | 34% | 60 | 202.9 | 0% | 17 / 90 | - | 36% | 5% |
+| 2 | 34% | 90 | 304.9 | 0% | 14 / 52 | - | 11% | 1% |
+| 2 | 45% | 10 | 44.5 | 100% | 13 / 78 | 12 | 98% | 7% |
+| 2 | 45% | 30 | 132.3 | 100% | 32 / 44 | 31 | 99% | 31% |
+| 2 | 45% | 60 | 267.9 | 100% | 62 / 77 | 61 | 99% | 59% |
+| 2 | 45% | 90 | 407.1 | 90% | 92 / 101 | 91 | 93% | 63% |
+| 2 | 51% | 10 | 53.8 | 100% | 10 / 16 | 11 | 99% | 6% |
+| 2 | 51% | 30 | 153.8 | 100% | 26 / 33 | 31 | 99% | 32% |
+| 2 | 51% | 60 | 304.5 | 100% | 57 / 66 | 61 | 99% | 59% |
+| 2 | 51% | 90 | 458.8 | 100% | 85 / 98 | 91 | 100% | 71% |
+| 2 | 67% | 10 | 69.3 | 100% | 6 / 13 | 10 | 99% | 7% |
+| 2 | 67% | 30 | 203.1 | 100% | 22 / 28 | 30 | 99% | 41% |
+| 2 | 67% | 60 | 399.1 | 100% | 44 / 52 | 60 | 100% | 65% |
+| 2 | 67% | 90 | 602.6 | 100% | 68 / 75 | 90 | 100% | 76% |
+| 2 | 90% | 10 | 93.8 | 100% | 3 / 5 | 10 | 100% | 17% |
+| 2 | 90% | 30 | 273.8 | 100% | 12 / 14 | 30 | 100% | 53% |
+| 2 | 90% | 60 | 539.6 | 100% | 24 / 27 | 60 | 100% | 71% |
+| 2 | 90% | 90 | 810.1 | 100% | 37 / 40 | 90 | 100% | 81% |
+
+## 3. Selfish withholding (release when about to lose, or at lead L = 6): blue share against hash share over 300 s, d = 0.67 s
+
+| attacker share H | attacker blue blocks / its blocks (weight kept) | attacker share of ALL blue blocks (weight share; honest mining gives H) | private tip is the chain at the end | max reorg depth seen |
+|---|---|---|---|---|
+| 20% | 100% | 20.3% | 60% | 5 |
+| 34% | 100% | 34.1% | 80% | 7 |
+| 45% | 100% | 45.4% | 80% | 5 |
+| 51% | 100% | 51.0% | 100% | 3 |
+| 67% | 100% | 67.7% | 100% | 5 |
+| 90% | 100% | 89.9% | 100% | 0 |
+
+(81 cells, 223 s)
diff --git a/sim/horizon/consensus-security/ghostdag_results_1bps.json b/sim/horizon/consensus-security/ghostdag_results_1bps.json
new file mode 100644
index 000000000..4235cae37
--- /dev/null
+++ b/sim/horizon/consensus-security/ghostdag_results_1bps.json
@@ -0,0 +1,1332 @@
+{
+ "bps": 1.0,
+ "k": 18,
+ "cells": [
+  {
+   "kind": "baseline",
+   "d": 0.35,
+   "p99": 1.6899999999999977,
+   "max": 3
+  },
+  {
+   "kind": "baseline",
+   "d": 0.67,
+   "p99": 2.0,
+   "max": 2
+  },
+  {
+   "kind": "baseline",
+   "d": 2.0,
+   "p99": 6.0,
+   "max": 7
+  },
+  {
+   "kind": "baseline",
+   "d": 5.0,
+   "p99": 15.0,
+   "max": 15
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.2,
+   "T": 30.0,
+   "won": 0.05,
+   "reorg_med": 0.0,
+   "reorg_max": 21,
+   "fork_age_med": 30.33060063561254,
+   "att_blue_share": 0.5654205607476636,
+   "hon_red_share": 0.031762295081967214,
+   "withheld_mean": 6.05
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.2,
+   "T": 60.0,
+   "won": 0.0,
+   "reorg_med": 0.0,
+   "reorg_max": 0,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.3638968481375358,
+   "hon_red_share": 0.01532033426183844,
+   "withheld_mean": 10.9
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.2,
+   "T": 90.0,
+   "won": 0.0,
+   "reorg_med": 0.0,
+   "reorg_max": 0,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.2159827213822894,
+   "hon_red_share": 0.010476689366160294,
+   "withheld_mean": 17.9
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.2,
+   "T": 120.0,
+   "won": 0.0,
+   "reorg_med": 0.0,
+   "reorg_max": 1,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.18024263431542462,
+   "hon_red_share": 0.009688289806234204,
+   "withheld_mean": 23.4
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.34,
+   "T": 30.0,
+   "won": 0.4,
+   "reorg_med": 0.0,
+   "reorg_max": 19,
+   "fork_age_med": 30.466906598850834,
+   "att_blue_share": 0.7270588235294118,
+   "hon_red_share": 0.029150823827629912,
+   "withheld_mean": 11.45
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.34,
+   "T": 60.0,
+   "won": 0.4,
+   "reorg_med": 0.0,
+   "reorg_max": 38,
+   "fork_age_med": 60.515179760680134,
+   "att_blue_share": 0.5485436893203883,
+   "hon_red_share": 0.12875536480686695,
+   "withheld_mean": 21.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.34,
+   "T": 90.0,
+   "won": 0.05,
+   "reorg_med": 0.0,
+   "reorg_max": 42,
+   "fork_age_med": 95.20561358302432,
+   "att_blue_share": 0.3568075117370892,
+   "hon_red_share": 0.032089063523248196,
+   "withheld_mean": 31.35
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.34,
+   "T": 120.0,
+   "won": 0.1,
+   "reorg_med": 0.0,
+   "reorg_max": 58,
+   "fork_age_med": 123.9750212133662,
+   "att_blue_share": 0.27533460803059273,
+   "hon_red_share": 0.06013478486262312,
+   "withheld_mean": 43.0
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.45,
+   "T": 30.0,
+   "won": 0.75,
+   "reorg_med": 12.5,
+   "reorg_max": 18,
+   "fork_age_med": 30.976276221091652,
+   "att_blue_share": 0.9319470699432892,
+   "hon_red_share": 0.045171339563862926,
+   "withheld_mean": 14.1
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.45,
+   "T": 60.0,
+   "won": 0.8,
+   "reorg_med": 24.0,
+   "reorg_max": 34,
+   "fork_age_med": 60.97386852854766,
+   "att_blue_share": 0.8721804511278195,
+   "hon_red_share": 0.2481675392670157,
+   "withheld_mean": 26.75
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.45,
+   "T": 90.0,
+   "won": 0.75,
+   "reorg_med": 39.0,
+   "reorg_max": 48,
+   "fork_age_med": 91.41299238949202,
+   "att_blue_share": 0.8383458646616542,
+   "hon_red_share": 0.3581395348837209,
+   "withheld_mean": 40.4
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.45,
+   "T": 120.0,
+   "won": 0.75,
+   "reorg_med": 51.5,
+   "reorg_max": 61,
+   "fork_age_med": 121.41179729850158,
+   "att_blue_share": 0.8356164383561644,
+   "hon_red_share": 0.4423791821561338,
+   "withheld_mean": 53.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.51,
+   "T": 30.0,
+   "won": 0.8,
+   "reorg_med": 11.0,
+   "reorg_max": 16,
+   "fork_age_med": 31.620287779847068,
+   "att_blue_share": 0.9335604770017035,
+   "hon_red_share": 0.05084745762711865,
+   "withheld_mean": 15.55
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.51,
+   "T": 60.0,
+   "won": 0.8,
+   "reorg_med": 21.5,
+   "reorg_max": 30,
+   "fork_age_med": 62.449048763799475,
+   "att_blue_share": 0.8623853211009175,
+   "hon_red_share": 0.25904977375565613,
+   "withheld_mean": 29.85
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.51,
+   "T": 90.0,
+   "won": 0.75,
+   "reorg_med": 34.0,
+   "reorg_max": 46,
+   "fork_age_med": 91.42277013565511,
+   "att_blue_share": 0.8396624472573839,
+   "hon_red_share": 0.36324786324786323,
+   "withheld_mean": 44.4
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.51,
+   "T": 120.0,
+   "won": 0.75,
+   "reorg_med": 46.0,
+   "reorg_max": 57,
+   "fork_age_med": 121.6371942295755,
+   "att_blue_share": 0.8125845737483085,
+   "hon_red_share": 0.43012951601908656,
+   "withheld_mean": 59.7
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.67,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 9.5,
+   "reorg_max": 15,
+   "fork_age_med": 32.09724225393881,
+   "att_blue_share": 0.9773013871374527,
+   "hon_red_share": 0.1038961038961039,
+   "withheld_mean": 21.9
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.67,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 17.0,
+   "reorg_max": 26,
+   "fork_age_med": 61.7128260930632,
+   "att_blue_share": 0.9846547314578005,
+   "hon_red_share": 0.3931034482758621,
+   "withheld_mean": 40.4
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.67,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 27.5,
+   "reorg_max": 35,
+   "fork_age_med": 91.51591201940197,
+   "att_blue_share": 0.9904761904761905,
+   "hon_red_share": 0.5502577319587629,
+   "withheld_mean": 59.35
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.67,
+   "T": 120.0,
+   "won": 1.0,
+   "reorg_med": 37.0,
+   "reorg_max": 45,
+   "fork_age_med": 121.94686533304682,
+   "att_blue_share": 0.9938931297709923,
+   "hon_red_share": 0.6330275229357798,
+   "withheld_mean": 79.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.9,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 3.0,
+   "reorg_max": 4,
+   "fork_age_med": 31.560139111495815,
+   "att_blue_share": 0.9820415879017014,
+   "hon_red_share": 0.1792452830188679,
+   "withheld_mean": 28.7
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.9,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 5.0,
+   "reorg_max": 9,
+   "fork_age_med": 61.69910068716553,
+   "att_blue_share": 0.9880728185812931,
+   "hon_red_share": 0.49390243902439024,
+   "withheld_mean": 54.0
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.9,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 7.0,
+   "reorg_max": 13,
+   "fork_age_med": 91.52221029166355,
+   "att_blue_share": 0.9918931807343825,
+   "hon_red_share": 0.592274678111588,
+   "withheld_mean": 81.05
+  },
+  {
+   "kind": "hold",
+   "d": 0.35,
+   "H": 0.9,
+   "T": 120.0,
+   "won": 1.0,
+   "reorg_med": 10.0,
+   "reorg_max": 18,
+   "fork_age_med": 121.59183000976304,
+   "att_blue_share": 0.9946727549467276,
+   "hon_red_share": 0.7226027397260274,
+   "withheld_mean": 106.5
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.2,
+   "T": 30.0,
+   "won": 0.1,
+   "reorg_med": 0.0,
+   "reorg_max": 18,
+   "fork_age_med": 32.92382841955939,
+   "att_blue_share": 0.6495327102803738,
+   "hon_red_share": 0.03917525773195876,
+   "withheld_mean": 6.05
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.2,
+   "T": 60.0,
+   "won": 0.0,
+   "reorg_med": 0.0,
+   "reorg_max": 1,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.37752161383285304,
+   "hon_red_share": 0.0196078431372549,
+   "withheld_mean": 10.9
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.2,
+   "T": 90.0,
+   "won": 0.0,
+   "reorg_med": 0.0,
+   "reorg_max": 1,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.21304347826086956,
+   "hon_red_share": 0.014713610089332634,
+   "withheld_mean": 17.9
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.2,
+   "T": 120.0,
+   "won": 0.0,
+   "reorg_med": 0.0,
+   "reorg_max": 1,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.17881944444444445,
+   "hon_red_share": 0.01180936313791649,
+   "withheld_mean": 23.4
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.34,
+   "T": 30.0,
+   "won": 0.4,
+   "reorg_med": 0.0,
+   "reorg_max": 18,
+   "fork_age_med": 30.466906598850834,
+   "att_blue_share": 0.7735849056603774,
+   "hon_red_share": 0.03694267515923567,
+   "withheld_mean": 11.45
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.34,
+   "T": 60.0,
+   "won": 0.4,
+   "reorg_med": 0.0,
+   "reorg_max": 36,
+   "fork_age_med": 60.515179760680134,
+   "att_blue_share": 0.5479674796747968,
+   "hon_red_share": 0.1358555460017197,
+   "withheld_mean": 21.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.34,
+   "T": 90.0,
+   "won": 0.05,
+   "reorg_med": 0.0,
+   "reorg_max": 39,
+   "fork_age_med": 95.20561358302432,
+   "att_blue_share": 0.35141509433962265,
+   "hon_red_share": 0.03674540682414698,
+   "withheld_mean": 31.35
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.34,
+   "T": 120.0,
+   "won": 0.1,
+   "reorg_med": 0.0,
+   "reorg_max": 52,
+   "fork_age_med": 123.9750212133662,
+   "att_blue_share": 0.27724665391969405,
+   "hon_red_share": 0.061330561330561334,
+   "withheld_mean": 43.0
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.45,
+   "T": 30.0,
+   "won": 0.7,
+   "reorg_med": 10.5,
+   "reorg_max": 17,
+   "fork_age_med": 30.945369650170477,
+   "att_blue_share": 0.9411764705882353,
+   "hon_red_share": 0.053208137715179966,
+   "withheld_mean": 14.1
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.45,
+   "T": 60.0,
+   "won": 0.75,
+   "reorg_med": 21.5,
+   "reorg_max": 32,
+   "fork_age_med": 61.049857739729106,
+   "att_blue_share": 0.8402515723270441,
+   "hon_red_share": 0.24737945492662475,
+   "withheld_mean": 26.75
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.45,
+   "T": 90.0,
+   "won": 0.7,
+   "reorg_med": 33.0,
+   "reorg_max": 46,
+   "fork_age_med": 91.27351530135655,
+   "att_blue_share": 0.8011310084825636,
+   "hon_red_share": 0.34498834498834496,
+   "withheld_mean": 40.4
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.45,
+   "T": 120.0,
+   "won": 0.7,
+   "reorg_med": 46.0,
+   "reorg_max": 57,
+   "fork_age_med": 121.39064673004347,
+   "att_blue_share": 0.7957317073170732,
+   "hon_red_share": 0.4225264467952707,
+   "withheld_mean": 53.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.51,
+   "T": 30.0,
+   "won": 0.85,
+   "reorg_med": 10.0,
+   "reorg_max": 15,
+   "fork_age_med": 31.699782899722834,
+   "att_blue_share": 0.9044368600682594,
+   "hon_red_share": 0.05641025641025641,
+   "withheld_mean": 15.55
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.51,
+   "T": 60.0,
+   "won": 0.85,
+   "reorg_med": 20.0,
+   "reorg_max": 28,
+   "fork_age_med": 62.62275705260092,
+   "att_blue_share": 0.8788927335640139,
+   "hon_red_share": 0.2840909090909091,
+   "withheld_mean": 29.85
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.51,
+   "T": 90.0,
+   "won": 0.8,
+   "reorg_med": 31.5,
+   "reorg_max": 44,
+   "fork_age_med": 91.81251802202425,
+   "att_blue_share": 0.8630600169061707,
+   "hon_red_share": 0.3921232876712329,
+   "withheld_mean": 44.4
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.51,
+   "T": 120.0,
+   "won": 0.8,
+   "reorg_med": 42.5,
+   "reorg_max": 53,
+   "fork_age_med": 121.77005775158754,
+   "att_blue_share": 0.8436437797416724,
+   "hon_red_share": 0.46169630642954856,
+   "withheld_mean": 59.7
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.67,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 8.0,
+   "reorg_max": 13,
+   "fork_age_med": 32.22000800909116,
+   "att_blue_share": 0.9759188846641318,
+   "hon_red_share": 0.12467532467532468,
+   "withheld_mean": 21.9
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.67,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 16.0,
+   "reorg_max": 23,
+   "fork_age_med": 61.7128260930632,
+   "att_blue_share": 0.984641638225256,
+   "hon_red_share": 0.4013840830449827,
+   "withheld_mean": 40.4
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.67,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 25.5,
+   "reorg_max": 31,
+   "fork_age_med": 91.92139140230415,
+   "att_blue_share": 0.9916932907348243,
+   "hon_red_share": 0.5574193548387096,
+   "withheld_mean": 59.35
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.67,
+   "T": 120.0,
+   "won": 1.0,
+   "reorg_med": 34.5,
+   "reorg_max": 41,
+   "fork_age_med": 121.94686533304682,
+   "att_blue_share": 0.9918492103922567,
+   "hon_red_share": 0.644535240040858,
+   "withheld_mean": 79.8
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.9,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 2.5,
+   "reorg_max": 4,
+   "fork_age_med": 31.560139111495815,
+   "att_blue_share": 0.9818875119161106,
+   "hon_red_share": 0.18867924528301888,
+   "withheld_mean": 28.7
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.9,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 4.0,
+   "reorg_max": 9,
+   "fork_age_med": 61.69910068716553,
+   "att_blue_share": 0.9880201765447667,
+   "hon_red_share": 0.50920245398773,
+   "withheld_mean": 54.0
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.9,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 6.5,
+   "reorg_max": 13,
+   "fork_age_med": 91.52221029166355,
+   "att_blue_share": 0.9918815663801337,
+   "hon_red_share": 0.5905172413793104,
+   "withheld_mean": 81.05
+  },
+  {
+   "kind": "hold",
+   "d": 0.67,
+   "H": 0.9,
+   "T": 120.0,
+   "won": 1.0,
+   "reorg_med": 9.0,
+   "reorg_max": 17,
+   "fork_age_med": 121.59183000976304,
+   "att_blue_share": 0.9939001143728555,
+   "hon_red_share": 0.7275862068965517,
+   "withheld_mean": 106.5
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.2,
+   "T": 30.0,
+   "won": 0.1,
+   "reorg_med": 0.0,
+   "reorg_max": 12,
+   "fork_age_med": 33.84243017792537,
+   "att_blue_share": 0.6908212560386473,
+   "hon_red_share": 0.07555089192025184,
+   "withheld_mean": 6.05
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.2,
+   "T": 60.0,
+   "won": 0.0,
+   "reorg_med": 0.0,
+   "reorg_max": 2,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.347953216374269,
+   "hon_red_share": 0.025677603423680456,
+   "withheld_mean": 10.9
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.2,
+   "T": 90.0,
+   "won": 0.0,
+   "reorg_med": 0.0,
+   "reorg_max": 3,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.19389978213507625,
+   "hon_red_share": 0.02336696760488582,
+   "withheld_mean": 17.9
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.2,
+   "T": 120.0,
+   "won": 0.0,
+   "reorg_med": 0.0,
+   "reorg_max": 3,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.17017543859649123,
+   "hon_red_share": 0.01788756388415673,
+   "withheld_mean": 23.4
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.34,
+   "T": 30.0,
+   "won": 0.7,
+   "reorg_med": 8.0,
+   "reorg_max": 12,
+   "fork_age_med": 32.711405852640375,
+   "att_blue_share": 0.8561151079136691,
+   "hon_red_share": 0.11328125,
+   "withheld_mean": 11.45
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.34,
+   "T": 60.0,
+   "won": 0.55,
+   "reorg_med": 15.0,
+   "reorg_max": 23,
+   "fork_age_med": 63.822863497704944,
+   "att_blue_share": 0.6852459016393443,
+   "hon_red_share": 0.2131004366812227,
+   "withheld_mean": 21.8
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.34,
+   "T": 90.0,
+   "won": 0.05,
+   "reorg_med": 0.0,
+   "reorg_max": 29,
+   "fork_age_med": 95.20561358302432,
+   "att_blue_share": 0.39593301435406697,
+   "hon_red_share": 0.05444887118193891,
+   "withheld_mean": 31.35
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.34,
+   "T": 120.0,
+   "won": 0.1,
+   "reorg_med": 0.0,
+   "reorg_max": 38,
+   "fork_age_med": 123.9750212133662,
+   "att_blue_share": 0.26692456479690524,
+   "hon_red_share": 0.07041513399894903,
+   "withheld_mean": 43.0
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.45,
+   "T": 30.0,
+   "won": 0.9,
+   "reorg_med": 9.0,
+   "reorg_max": 15,
+   "fork_age_med": 32.474818064689856,
+   "att_blue_share": 0.9497098646034816,
+   "hon_red_share": 0.1281645569620253,
+   "withheld_mean": 14.1
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.45,
+   "T": 60.0,
+   "won": 0.85,
+   "reorg_med": 16.5,
+   "reorg_max": 23,
+   "fork_age_med": 61.68352699000897,
+   "att_blue_share": 0.9025641025641026,
+   "hon_red_share": 0.3237791932059448,
+   "withheld_mean": 26.75
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.45,
+   "T": 90.0,
+   "won": 0.8,
+   "reorg_med": 26.0,
+   "reorg_max": 31,
+   "fork_age_med": 92.09485651240217,
+   "att_blue_share": 0.8761904761904762,
+   "hon_red_share": 0.42338072669826227,
+   "withheld_mean": 40.4
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.45,
+   "T": 120.0,
+   "won": 0.65,
+   "reorg_med": 32.5,
+   "reorg_max": 39,
+   "fork_age_med": 122.88359030170486,
+   "att_blue_share": 0.7926267281105991,
+   "hon_red_share": 0.4183994959042218,
+   "withheld_mean": 53.8
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.51,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 9.0,
+   "reorg_max": 13,
+   "fork_age_med": 32.96442652437154,
+   "att_blue_share": 0.975609756097561,
+   "hon_red_share": 0.13908450704225353,
+   "withheld_mean": 15.55
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.51,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 18.0,
+   "reorg_max": 23,
+   "fork_age_med": 63.35421641240294,
+   "att_blue_share": 0.981242672919109,
+   "hon_red_share": 0.40229885057471265,
+   "withheld_mean": 29.85
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.51,
+   "T": 90.0,
+   "won": 0.95,
+   "reorg_med": 25.0,
+   "reorg_max": 33,
+   "fork_age_med": 93.49784986535856,
+   "att_blue_share": 0.9701110162254484,
+   "hon_red_share": 0.5181660899653979,
+   "withheld_mean": 44.4
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.51,
+   "T": 120.0,
+   "won": 0.9,
+   "reorg_med": 31.5,
+   "reorg_max": 41,
+   "fork_age_med": 123.22618322906288,
+   "att_blue_share": 0.932145305003427,
+   "hon_red_share": 0.5685733976567884,
+   "withheld_mean": 59.7
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.67,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 7.0,
+   "reorg_max": 9,
+   "fork_age_med": 33.029810733017385,
+   "att_blue_share": 0.977922077922078,
+   "hon_red_share": 0.20844327176781002,
+   "withheld_mean": 21.9
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.67,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 12.0,
+   "reorg_max": 16,
+   "fork_age_med": 62.84524795716415,
+   "att_blue_share": 0.9826539462272333,
+   "hon_red_share": 0.492091388400703,
+   "withheld_mean": 40.4
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.67,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 19.5,
+   "reorg_max": 23,
+   "fork_age_med": 93.05022707965117,
+   "att_blue_share": 0.9903536977491961,
+   "hon_red_share": 0.6171875,
+   "withheld_mean": 59.35
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.67,
+   "T": 120.0,
+   "won": 1.0,
+   "reorg_med": 25.5,
+   "reorg_max": 30,
+   "fork_age_med": 123.25682100058734,
+   "att_blue_share": 0.9917990773962071,
+   "hon_red_share": 0.6992790937178167,
+   "withheld_mean": 79.8
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.9,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 2.5,
+   "reorg_max": 4,
+   "fork_age_med": 31.67617467684341,
+   "att_blue_share": 0.9814634146341463,
+   "hon_red_share": 0.2857142857142857,
+   "withheld_mean": 28.7
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.9,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 4.0,
+   "reorg_max": 8,
+   "fork_age_med": 62.02880171556297,
+   "att_blue_share": 0.9871712636305324,
+   "hon_red_share": 0.5759493670886076,
+   "withheld_mean": 54.0
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.9,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 6.5,
+   "reorg_max": 13,
+   "fork_age_med": 91.781989130436,
+   "att_blue_share": 0.9899038461538462,
+   "hon_red_share": 0.611353711790393,
+   "withheld_mean": 81.05
+  },
+  {
+   "kind": "hold",
+   "d": 2.0,
+   "H": 0.9,
+   "T": 120.0,
+   "won": 1.0,
+   "reorg_med": 9.0,
+   "reorg_max": 16,
+   "fork_age_med": 121.66983074420074,
+   "att_blue_share": 0.9930769230769231,
+   "hon_red_share": 0.7638888888888888,
+   "withheld_mean": 106.5
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.2,
+   "T": 30.0,
+   "won": 0.15,
+   "reorg_med": 2.0,
+   "reorg_max": 14,
+   "fork_age_med": 35.51705620350624,
+   "att_blue_share": 0.6666666666666666,
+   "hon_red_share": 0.14786418400876233,
+   "withheld_mean": 6.05
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.2,
+   "T": 60.0,
+   "won": 0.0,
+   "reorg_med": 2.0,
+   "reorg_max": 8,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.3169230769230769,
+   "hon_red_share": 0.05417276720351391,
+   "withheld_mean": 10.9
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.2,
+   "T": 90.0,
+   "won": 0.0,
+   "reorg_med": 1.0,
+   "reorg_max": 5,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.18876404494382024,
+   "hon_red_share": 0.03967391304347826,
+   "withheld_mean": 17.9
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.2,
+   "T": 120.0,
+   "won": 0.0,
+   "reorg_med": 2.5,
+   "reorg_max": 5,
+   "fork_age_med": 0.0,
+   "att_blue_share": 0.14311270125223613,
+   "hon_red_share": 0.029016890428757037,
+   "withheld_mean": 23.4
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.34,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 7.0,
+   "reorg_max": 13,
+   "fork_age_med": 35.00274686151423,
+   "att_blue_share": 0.9595959595959596,
+   "hon_red_share": 0.3069577080491132,
+   "withheld_mean": 11.45
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.34,
+   "T": 60.0,
+   "won": 0.35,
+   "reorg_med": 10.5,
+   "reorg_max": 18,
+   "fork_age_med": 67.89625788177362,
+   "att_blue_share": 0.668918918918919,
+   "hon_red_share": 0.22461814914645103,
+   "withheld_mean": 21.8
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.34,
+   "T": 90.0,
+   "won": 0.05,
+   "reorg_med": 1.0,
+   "reorg_max": 22,
+   "fork_age_med": 103.92257775267147,
+   "att_blue_share": 0.42284325637910086,
+   "hon_red_share": 0.11193526635198921,
+   "withheld_mean": 31.35
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.34,
+   "T": 120.0,
+   "won": 0.05,
+   "reorg_med": 2.0,
+   "reorg_max": 29,
+   "fork_age_med": 123.14624350007075,
+   "att_blue_share": 0.2334322453016815,
+   "hon_red_share": 0.088,
+   "withheld_mean": 43.0
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.45,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 5.0,
+   "reorg_max": 9,
+   "fork_age_med": 34.67795719142558,
+   "att_blue_share": 0.963855421686747,
+   "hon_red_share": 0.2847571189279732,
+   "withheld_mean": 14.1
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.45,
+   "T": 60.0,
+   "won": 0.95,
+   "reorg_med": 10.0,
+   "reorg_max": 14,
+   "fork_age_med": 64.36819556410187,
+   "att_blue_share": 0.9428950863213812,
+   "hon_red_share": 0.46994535519125685,
+   "withheld_mean": 26.75
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.45,
+   "T": 90.0,
+   "won": 0.85,
+   "reorg_med": 16.0,
+   "reorg_max": 19,
+   "fork_age_med": 93.9697407965104,
+   "att_blue_share": 0.9086491739552964,
+   "hon_red_share": 0.5369181380417335,
+   "withheld_mean": 40.4
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.45,
+   "T": 120.0,
+   "won": 0.65,
+   "reorg_med": 20.5,
+   "reorg_max": 25,
+   "fork_age_med": 124.34992527365583,
+   "att_blue_share": 0.777951524628616,
+   "hon_red_share": 0.48586118251928023,
+   "withheld_mean": 53.8
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.51,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 6.0,
+   "reorg_max": 9,
+   "fork_age_med": 34.29281671574093,
+   "att_blue_share": 0.9636363636363636,
+   "hon_red_share": 0.3272058823529412,
+   "withheld_mean": 15.55
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.51,
+   "T": 60.0,
+   "won": 0.95,
+   "reorg_med": 10.0,
+   "reorg_max": 15,
+   "fork_age_med": 64.0306378378153,
+   "att_blue_share": 0.9588377723970944,
+   "hon_red_share": 0.5142857142857142,
+   "withheld_mean": 29.85
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.51,
+   "T": 90.0,
+   "won": 0.95,
+   "reorg_med": 16.0,
+   "reorg_max": 22,
+   "fork_age_med": 94.04177312350635,
+   "att_blue_share": 0.9669277632724108,
+   "hon_red_share": 0.6124780316344464,
+   "withheld_mean": 44.4
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.51,
+   "T": 120.0,
+   "won": 0.9,
+   "reorg_med": 20.0,
+   "reorg_max": 28,
+   "fork_age_med": 123.97834387240374,
+   "att_blue_share": 0.9329608938547486,
+   "hon_red_share": 0.6455250176180408,
+   "withheld_mean": 59.7
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.67,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 4.0,
+   "reorg_max": 7,
+   "fork_age_med": 34.02980224863815,
+   "att_blue_share": 0.9711141678129298,
+   "hon_red_share": 0.3879781420765027,
+   "withheld_mean": 21.9
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.67,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 9.0,
+   "reorg_max": 12,
+   "fork_age_med": 64.17313822888646,
+   "att_blue_share": 0.9818346957311535,
+   "hon_red_share": 0.6087751371115173,
+   "withheld_mean": 40.4
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.67,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 13.0,
+   "reorg_max": 16,
+   "fork_age_med": 93.83317402526555,
+   "att_blue_share": 0.9862204724409449,
+   "hon_red_share": 0.7282463186077643,
+   "withheld_mean": 59.35
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.67,
+   "T": 120.0,
+   "won": 1.0,
+   "reorg_med": 18.0,
+   "reorg_max": 22,
+   "fork_age_med": 123.35879353755776,
+   "att_blue_share": 0.9890052356020942,
+   "hon_red_share": 0.7661375661375661,
+   "withheld_mean": 79.8
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.9,
+   "T": 30.0,
+   "won": 1.0,
+   "reorg_med": 2.0,
+   "reorg_max": 3,
+   "fork_age_med": 31.82365216764382,
+   "att_blue_share": 0.9785932721712538,
+   "hon_red_share": 0.5196078431372549,
+   "withheld_mean": 28.7
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.9,
+   "T": 60.0,
+   "won": 1.0,
+   "reorg_med": 4.0,
+   "reorg_max": 6,
+   "fork_age_med": 61.99791718307589,
+   "att_blue_share": 0.9872311827956989,
+   "hon_red_share": 0.6580645161290323,
+   "withheld_mean": 54.0
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.9,
+   "T": 90.0,
+   "won": 1.0,
+   "reorg_med": 5.0,
+   "reorg_max": 10,
+   "fork_age_med": 91.781989130436,
+   "att_blue_share": 0.9906771344455348,
+   "hon_red_share": 0.7433628318584071,
+   "withheld_mean": 81.05
+  },
+  {
+   "kind": "hold",
+   "d": 5.0,
+   "H": 0.9,
+   "T": 120.0,
+   "won": 1.0,
+   "reorg_med": 7.5,
+   "reorg_max": 14,
+   "fork_age_med": 121.68955570370397,
+   "att_blue_share": 0.9921844470496287,
+   "hon_red_share": 0.8321428571428572,
+   "withheld_mean": 106.5
+  },
+  {
+   "kind": "selfish",
+   "d": 0.67,
+   "H": 0.2,
+   "att_blue_share": 1.0,
+   "blue_share_of_all": 0.1932045303131246,
+   "won": 0.0,
+   "reorg_max": 1
+  },
+  {
+   "kind": "selfish",
+   "d": 0.67,
+   "H": 0.34,
+   "att_blue_share": 0.9990286546867412,
+   "blue_share_of_all": 0.34260493004663556,
+   "won": 0.6,
+   "reorg_max": 1
+  },
+  {
+   "kind": "selfish",
+   "d": 0.67,
+   "H": 0.45,
+   "att_blue_share": 0.9981502034776175,
+   "blue_share_of_all": 0.44876912840984695,
+   "won": 0.6,
+   "reorg_max": 2
+  },
+  {
+   "kind": "selfish",
+   "d": 0.67,
+   "H": 0.51,
+   "att_blue_share": 0.9987000324991875,
+   "blue_share_of_all": 0.5109743930828068,
+   "won": 0.8,
+   "reorg_max": 2
+  },
+  {
+   "kind": "selfish",
+   "d": 0.67,
+   "H": 0.67,
+   "att_blue_share": 0.9990101460034645,
+   "blue_share_of_all": 0.6721611721611722,
+   "won": 1.0,
+   "reorg_max": 3
+  },
+  {
+   "kind": "selfish",
+   "d": 0.67,
+   "H": 0.9,
+   "att_blue_share": 0.9990830735375023,
+   "blue_share_of_all": 0.9033327806333942,
+   "won": 1.0,
+   "reorg_max": 1
+  }
+ ]
+}
\ No newline at end of file
diff --git a/sim/horizon/consensus-security/ghostdag_results_1bps.md b/sim/horizon/consensus-security/ghostdag_results_1bps.md
new file mode 100644
index 000000000..4a40e6eac
--- /dev/null
+++ b/sim/horizon/consensus-security/ghostdag_results_1bps.md
@@ -0,0 +1,128 @@
+# GHOSTDAG withholding simulator, 1 blocks/s, k 18, 8 honest miners, 20 seeds per cell
+
+Generated by `sim/horizon/consensus-security/ghostdag_sim.py` on 2026-10-06 19:37 UTC. Every number is this simulator's; the model and its limits are in the file header.
+
+## 1. Honest parallelism alone: natural selected-chain reorg depth at honest miner 0 (chain blocks), 150 s per episode
+
+| one-way delay d, s | blocks in flight (bps x d) | reorg depth p99 (worst seed) | reorg depth max |
+|---|---|---|---|
+| 0.35 | 0.35 | 2 | 3 |
+| 0.67 | 0.67 | 2 | 2 |
+| 2 | 2.00 | 6 | 7 |
+| 5 | 5.00 | 15 | 15 |
+
+## 2. Withhold for T seconds, then release everything: what the honest selected chain does
+
+`won` = the attacker's private tip became honest miner 0's selected chain after the release (its earlier-ordered conflicting transaction then precedes the honest copy). `reorg` = chain blocks removed from miner 0's selected chain (median and max over seeds). `fork age` = seconds between the fork point and the release: the window a conflicting transaction can reach back. `att blue` = the attacker's blue blocks over its blocks in miner 0's view (weight and subsidy kept); `hon red` = honest blocks since the fork turned red by the release.
+
+| d, s | attacker share H | hold T, s | blocks withheld (mean) | won | reorg med / max | fork age if won, s (med) | att blue / att blocks | hon red / hon blocks |
+|---|---|---|---|---|---|---|---|---|
+| 0.35 | 20% | 30 | 6.0 | 5% | 0 / 21 | 30 | 57% | 3% |
+| 0.35 | 20% | 60 | 10.9 | 0% | 0 / 0 | - | 36% | 2% |
+| 0.35 | 20% | 90 | 17.9 | 0% | 0 / 0 | - | 22% | 1% |
+| 0.35 | 20% | 120 | 23.4 | 0% | 0 / 1 | - | 18% | 1% |
+| 0.35 | 34% | 30 | 11.4 | 40% | 0 / 19 | 30 | 73% | 3% |
+| 0.35 | 34% | 60 | 21.8 | 40% | 0 / 38 | 61 | 55% | 13% |
+| 0.35 | 34% | 90 | 31.4 | 5% | 0 / 42 | 95 | 36% | 3% |
+| 0.35 | 34% | 120 | 43.0 | 10% | 0 / 58 | 124 | 28% | 6% |
+| 0.35 | 45% | 30 | 14.1 | 75% | 12 / 18 | 31 | 93% | 5% |
+| 0.35 | 45% | 60 | 26.8 | 80% | 24 / 34 | 61 | 87% | 25% |
+| 0.35 | 45% | 90 | 40.4 | 75% | 39 / 48 | 91 | 84% | 36% |
+| 0.35 | 45% | 120 | 53.8 | 75% | 52 / 61 | 121 | 84% | 44% |
+| 0.35 | 51% | 30 | 15.6 | 80% | 11 / 16 | 32 | 93% | 5% |
+| 0.35 | 51% | 60 | 29.9 | 80% | 22 / 30 | 62 | 86% | 26% |
+| 0.35 | 51% | 90 | 44.4 | 75% | 34 / 46 | 91 | 84% | 36% |
+| 0.35 | 51% | 120 | 59.7 | 75% | 46 / 57 | 122 | 81% | 43% |
+| 0.35 | 67% | 30 | 21.9 | 100% | 10 / 15 | 32 | 98% | 10% |
+| 0.35 | 67% | 60 | 40.4 | 100% | 17 / 26 | 62 | 98% | 39% |
+| 0.35 | 67% | 90 | 59.4 | 100% | 28 / 35 | 92 | 99% | 55% |
+| 0.35 | 67% | 120 | 79.8 | 100% | 37 / 45 | 122 | 99% | 63% |
+| 0.35 | 90% | 30 | 28.7 | 100% | 3 / 4 | 32 | 98% | 18% |
+| 0.35 | 90% | 60 | 54.0 | 100% | 5 / 9 | 62 | 99% | 49% |
+| 0.35 | 90% | 90 | 81.0 | 100% | 7 / 13 | 92 | 99% | 59% |
+| 0.35 | 90% | 120 | 106.5 | 100% | 10 / 18 | 122 | 99% | 72% |
+| 0.67 | 20% | 30 | 6.0 | 10% | 0 / 18 | 33 | 65% | 4% |
+| 0.67 | 20% | 60 | 10.9 | 0% | 0 / 1 | - | 38% | 2% |
+| 0.67 | 20% | 90 | 17.9 | 0% | 0 / 1 | - | 21% | 1% |
+| 0.67 | 20% | 120 | 23.4 | 0% | 0 / 1 | - | 18% | 1% |
+| 0.67 | 34% | 30 | 11.4 | 40% | 0 / 18 | 30 | 77% | 4% |
+| 0.67 | 34% | 60 | 21.8 | 40% | 0 / 36 | 61 | 55% | 14% |
+| 0.67 | 34% | 90 | 31.4 | 5% | 0 / 39 | 95 | 35% | 4% |
+| 0.67 | 34% | 120 | 43.0 | 10% | 0 / 52 | 124 | 28% | 6% |
+| 0.67 | 45% | 30 | 14.1 | 70% | 10 / 17 | 31 | 94% | 5% |
+| 0.67 | 45% | 60 | 26.8 | 75% | 22 / 32 | 61 | 84% | 25% |
+| 0.67 | 45% | 90 | 40.4 | 70% | 33 / 46 | 91 | 80% | 34% |
+| 0.67 | 45% | 120 | 53.8 | 70% | 46 / 57 | 121 | 80% | 42% |
+| 0.67 | 51% | 30 | 15.6 | 85% | 10 / 15 | 32 | 90% | 6% |
+| 0.67 | 51% | 60 | 29.9 | 85% | 20 / 28 | 63 | 88% | 28% |
+| 0.67 | 51% | 90 | 44.4 | 80% | 32 / 44 | 92 | 86% | 39% |
+| 0.67 | 51% | 120 | 59.7 | 80% | 42 / 53 | 122 | 84% | 46% |
+| 0.67 | 67% | 30 | 21.9 | 100% | 8 / 13 | 32 | 98% | 12% |
+| 0.67 | 67% | 60 | 40.4 | 100% | 16 / 23 | 62 | 98% | 40% |
+| 0.67 | 67% | 90 | 59.4 | 100% | 26 / 31 | 92 | 99% | 56% |
+| 0.67 | 67% | 120 | 79.8 | 100% | 34 / 41 | 122 | 99% | 64% |
+| 0.67 | 90% | 30 | 28.7 | 100% | 2 / 4 | 32 | 98% | 19% |
+| 0.67 | 90% | 60 | 54.0 | 100% | 4 / 9 | 62 | 99% | 51% |
+| 0.67 | 90% | 90 | 81.0 | 100% | 6 / 13 | 92 | 99% | 59% |
+| 0.67 | 90% | 120 | 106.5 | 100% | 9 / 17 | 122 | 99% | 73% |
+| 2 | 20% | 30 | 6.0 | 10% | 0 / 12 | 34 | 69% | 8% |
+| 2 | 20% | 60 | 10.9 | 0% | 0 / 2 | - | 35% | 3% |
+| 2 | 20% | 90 | 17.9 | 0% | 0 / 3 | - | 19% | 2% |
+| 2 | 20% | 120 | 23.4 | 0% | 0 / 3 | - | 17% | 2% |
+| 2 | 34% | 30 | 11.4 | 70% | 8 / 12 | 33 | 86% | 11% |
+| 2 | 34% | 60 | 21.8 | 55% | 15 / 23 | 64 | 69% | 21% |
+| 2 | 34% | 90 | 31.4 | 5% | 0 / 29 | 95 | 40% | 5% |
+| 2 | 34% | 120 | 43.0 | 10% | 0 / 38 | 124 | 27% | 7% |
+| 2 | 45% | 30 | 14.1 | 90% | 9 / 15 | 32 | 95% | 13% |
+| 2 | 45% | 60 | 26.8 | 85% | 16 / 23 | 62 | 90% | 32% |
+| 2 | 45% | 90 | 40.4 | 80% | 26 / 31 | 92 | 88% | 42% |
+| 2 | 45% | 120 | 53.8 | 65% | 32 / 39 | 123 | 79% | 42% |
+| 2 | 51% | 30 | 15.6 | 100% | 9 / 13 | 33 | 98% | 14% |
+| 2 | 51% | 60 | 29.9 | 100% | 18 / 23 | 63 | 98% | 40% |
+| 2 | 51% | 90 | 44.4 | 95% | 25 / 33 | 93 | 97% | 52% |
+| 2 | 51% | 120 | 59.7 | 90% | 32 / 41 | 123 | 93% | 57% |
+| 2 | 67% | 30 | 21.9 | 100% | 7 / 9 | 33 | 98% | 21% |
+| 2 | 67% | 60 | 40.4 | 100% | 12 / 16 | 63 | 98% | 49% |
+| 2 | 67% | 90 | 59.4 | 100% | 20 / 23 | 93 | 99% | 62% |
+| 2 | 67% | 120 | 79.8 | 100% | 26 / 30 | 123 | 99% | 70% |
+| 2 | 90% | 30 | 28.7 | 100% | 2 / 4 | 32 | 98% | 29% |
+| 2 | 90% | 60 | 54.0 | 100% | 4 / 8 | 62 | 99% | 58% |
+| 2 | 90% | 90 | 81.0 | 100% | 6 / 13 | 92 | 99% | 61% |
+| 2 | 90% | 120 | 106.5 | 100% | 9 / 16 | 122 | 99% | 76% |
+| 5 | 20% | 30 | 6.0 | 15% | 2 / 14 | 36 | 67% | 15% |
+| 5 | 20% | 60 | 10.9 | 0% | 2 / 8 | - | 32% | 5% |
+| 5 | 20% | 90 | 17.9 | 0% | 1 / 5 | - | 19% | 4% |
+| 5 | 20% | 120 | 23.4 | 0% | 2 / 5 | - | 14% | 3% |
+| 5 | 34% | 30 | 11.4 | 100% | 7 / 13 | 35 | 96% | 31% |
+| 5 | 34% | 60 | 21.8 | 35% | 10 / 18 | 68 | 67% | 22% |
+| 5 | 34% | 90 | 31.4 | 5% | 1 / 22 | 104 | 42% | 11% |
+| 5 | 34% | 120 | 43.0 | 5% | 2 / 29 | 123 | 23% | 9% |
+| 5 | 45% | 30 | 14.1 | 100% | 5 / 9 | 35 | 96% | 28% |
+| 5 | 45% | 60 | 26.8 | 95% | 10 / 14 | 64 | 94% | 47% |
+| 5 | 45% | 90 | 40.4 | 85% | 16 / 19 | 94 | 91% | 54% |
+| 5 | 45% | 120 | 53.8 | 65% | 20 / 25 | 124 | 78% | 49% |
+| 5 | 51% | 30 | 15.6 | 100% | 6 / 9 | 34 | 96% | 33% |
+| 5 | 51% | 60 | 29.9 | 95% | 10 / 15 | 64 | 96% | 51% |
+| 5 | 51% | 90 | 44.4 | 95% | 16 / 22 | 94 | 97% | 61% |
+| 5 | 51% | 120 | 59.7 | 90% | 20 / 28 | 124 | 93% | 65% |
+| 5 | 67% | 30 | 21.9 | 100% | 4 / 7 | 34 | 97% | 39% |
+| 5 | 67% | 60 | 40.4 | 100% | 9 / 12 | 64 | 98% | 61% |
+| 5 | 67% | 90 | 59.4 | 100% | 13 / 16 | 94 | 99% | 73% |
+| 5 | 67% | 120 | 79.8 | 100% | 18 / 22 | 123 | 99% | 77% |
+| 5 | 90% | 30 | 28.7 | 100% | 2 / 3 | 32 | 98% | 52% |
+| 5 | 90% | 60 | 54.0 | 100% | 4 / 6 | 62 | 99% | 66% |
+| 5 | 90% | 90 | 81.0 | 100% | 5 / 10 | 92 | 99% | 74% |
+| 5 | 90% | 120 | 106.5 | 100% | 8 / 14 | 122 | 99% | 83% |
+
+## 3. Selfish withholding (release when about to lose, or at lead L = 6): blue share against hash share over 600 s, d = 0.67 s
+
+| attacker share H | attacker blue blocks / its blocks (weight kept) | attacker share of ALL blue blocks (weight share; honest mining gives H) | private tip is the chain at the end | max reorg depth seen |
+|---|---|---|---|---|
+| 20% | 100% | 19.3% | 0% | 1 |
+| 34% | 100% | 34.3% | 60% | 1 |
+| 45% | 100% | 44.9% | 60% | 2 |
+| 51% | 100% | 51.1% | 80% | 2 |
+| 67% | 100% | 67.2% | 100% | 3 |
+| 90% | 100% | 90.3% | 100% | 1 |
+
+(106 cells, 11 s)
diff --git a/sim/horizon/consensus-security/ghostdag_sim.py b/sim/horizon/consensus-security/ghostdag_sim.py
new file mode 100644
index 000000000..66f27de06
--- /dev/null
+++ b/sim/horizon/consensus-security/ghostdag_sim.py
@@ -0,0 +1,440 @@
+#!/usr/bin/env python3
+"""GHOSTDAG ordering under a withholding attacker: an abstract DAG simulator for the Horizon consensus-security lane.
+
+What it models (6 October 2026):
+  * Blocks arrive as a Poisson process at rate `bps` (1 or 10 blocks per DAA second); every block has equal work.
+  * `honest` equal miners publish at once; every other miner sees a published block `d` seconds later (one uniform
+    one-way propagation delay, the cloud devnet measured p50 0.34 s, p99 0.67 s, max 2.3 s at 1 block/s:
+    docs/fud-ledger.md F7; Kaspa's k table assumes a 5 s bound: docs/spec/02-consensus.md 2.1).
+  * One attacker with share H of the hash rate mines on its own private view (its blocks plus the honest blocks it has
+    seen) and WITHHOLDS its blocks. Two strategies: `hold T` releases everything after T seconds; `selfish L` releases
+    when its private tip is about to lose the blue-work race or when its lead reaches L blocks.
+  * GHOSTDAG exactly as the fork runs it (vendor/igneum-node/consensus/src/processes/ghostdag/protocol.rs: selected
+    parent = max blue work, mergeset in topological order, the two k-cluster conditions through blues_anticone_sizes,
+    blue work = selected parent's plus the mergeset blues' work). Parents capped at 10 (spec 02 2.1).
+  * Finality is NOT in the loop. The output says what the ordering layer alone does; the lock of spec 03 (determined
+    d = 60 blue score after the checkpoint, locked about 3 s later: spec 03 C1, 3.11.3) is then read against it.
+
+What it reports, from the view of honest miner 0:
+  * the selected-chain reorg depth (chain blocks removed) when the withheld blocks arrive, and the age in seconds of
+    the fork point: the window in which an earlier-ordered conflicting transaction in the attacker's first private
+    block would be executed before the honest copy (spec 07: a segment is the mergeset in GHOSTDAG order, the chain
+    block last, and the EVM nonce rule skips the later copy);
+  * whether the attacker's private tip became the honest selected chain ("won");
+  * the attacker's share of blue blocks against its share of blocks (vote weight is blue blocks, spec 03 W2; a red
+    block's subsidy goes to the honest merger, spec 02 2.5), and the honest blocks turned red by the release.
+
+Not modelled: difficulty (equal work per block), timestamps, mergeset size limit 180, bodies and mass, the
+certificate-driven fork choice. Honest parallelism is the only source of natural reorgs.
+
+Run (about 2 minutes at the default grid; the lock is the main checkout's):
+  /Users/joshm/Projects/igneum/tools/lock/with-lock.sh run nice -n 19 python3 \
+      sim/horizon/consensus-security/ghostdag_sim.py --out sim/horizon/consensus-security/ghostdag_results.md
+Options: --bps 1 --k 18 --seeds 20 --delays 0.35,0.67,2,5 --shares 0.2,0.34,0.45,0.51,0.67,0.9 --holds 30,60,90,120
+"""
+
+import argparse
+import heapq
+import json
+import sys
+import time
+
+import numpy as np
+
+MAX_PARENTS = 10
+
+
+class DAG:
+    """GHOSTDAG data per block, mirroring protocol.rs. Block ids are dense integers; `past` is a bitset of ancestors."""
+
+    def __init__(self, k, rng):
+        self.k = k
+        self.rng = rng
+        self.parents = [()]
+        self.past = [0]
+        self.sp = [-1]
+        self.blues = [[]]          # mergeset blues, selected parent first (genesis: none)
+        self.reds = [[]]
+        self.bas = [{}]            # blues_anticone_sizes
+        self.blue_score = [0]
+        self.blue_work = [0]
+        self.hash = [0]            # a random 62-bit tiebreak standing in for the block hash
+        self.time = [0.0]
+        self.miner = [-1]
+
+    def n(self):
+        return len(self.parents)
+
+    def is_ancestor(self, a, b):
+        """a in past(b)"""
+        return (self.past[b] >> a) & 1
+
+    def key(self, b):
+        return (self.blue_work[b], self.hash[b])
+
+    def add(self, parents, t, miner):
+        parents = tuple(parents)
+        idx = len(self.parents)
+        past = 0
+        for p in parents:
+            past |= self.past[p] | (1 << p)
+        sp = max(parents, key=self.key)
+        # mergeset without the selected parent: past(new) minus past(sp) minus sp, in topological order
+        x = past & ~self.past[sp] & ~(1 << sp)
+        ms = []
+        while x:
+            lsb = x & -x
+            ms.append(lsb.bit_length() - 1)
+            x ^= lsb
+        ms.sort(key=self.key)  # blue work is strictly increasing along ancestry, so this is a topological order
+        blues = [sp]
+        bas = {sp: 0}
+        reds = []
+        k = self.k
+        for c in ms:
+            res = self._check_blue(sp, blues, bas, c, k)
+            if res is None:
+                reds.append(c)
+            else:
+                size, sizes = res
+                blues.append(c)
+                bas[c] = size
+                for peer, s in sizes.items():
+                    bas[peer] = s + 1
+        self.parents.append(parents)
+        self.past.append(past)
+        self.sp.append(sp)
+        self.blues.append(blues)
+        self.reds.append(reds)
+        self.bas.append(bas)
+        self.blue_score.append(self.blue_score[sp] + len(blues))
+        self.blue_work.append(self.blue_work[sp] + len(blues))
+        self.hash.append(int(self.rng.integers(0, 1 << 62)))
+        self.time.append(t)
+        self.miner.append(miner)
+        return idx
+
+    def _blue_anticone_size(self, peer, new_sp, new_bas):
+        if peer in new_bas:
+            return new_bas[peer]
+        cur = new_sp
+        while True:
+            b = self.bas[cur]
+            if peer in b:
+                return b[peer]
+            cur = self.sp[cur]
+            if cur < 0:
+                raise AssertionError("blue block not found on the selected chain")
+
+    def _check_blue(self, new_sp, new_blues, new_bas, cand, k):
+        """None = red; (blue anticone size, affected sizes) = blue. protocol.rs check_blue_candidate."""
+        if len(new_blues) == k + 1:
+            return None
+        sizes = {}
+        size = 0
+        chain = None  # None stands for the new block itself
+        while True:
+            if chain is not None and self.is_ancestor(chain, cand):
+                return size, sizes
+            peers = new_blues if chain is None else self.blues[chain]
+            for peer in peers:
+                if peer == cand or self.is_ancestor(peer, cand):
+                    continue
+                ps = self._blue_anticone_size(peer, new_sp, new_bas)
+                sizes[peer] = ps
+                size += 1
+                if size > k:
+                    return None
+                if ps == k:
+                    return None
+            chain = new_sp if chain is None else self.sp[chain]
+            if chain < 0:
+                return size, sizes
+
+    def chain(self, tip):
+        out = []
+        while tip >= 0:
+            out.append(tip)
+            tip = self.sp[tip]
+        return out
+
+    def removed_between(self, old_tip, new_tip):
+        """Chain blocks of the old selected chain not on the new one (the reorg depth), and the fork point."""
+        a, b, steps = old_tip, new_tip, 0
+        while a != b:
+            if self.blue_score[a] >= self.blue_score[b] and a != 0:
+                a = self.sp[a]
+                steps += 1
+            else:
+                b = self.sp[b]
+        return steps, a
+
+    def blue_set(self, tip):
+        """Every blue block in the past of `tip` plus tip's own chain blues (walk the selected chain)."""
+        s = 0
+        cur = tip
+        while cur >= 0:
+            for b in self.blues[cur]:
+                s |= 1 << b
+            cur = self.sp[cur]
+        return s
+
+
+class View:
+    def __init__(self):
+        self.known = 1  # genesis
+        self.tips = {0}
+        self.pending = {}
+
+    def knows(self, b):
+        return (self.known >> b) & 1
+
+    def add(self, dag, b):
+        if self.knows(b):
+            return False
+        if any(not self.knows(p) for p in dag.parents[b]):
+            self.pending[b] = True
+            return False
+        self.known |= 1 << b
+        for p in dag.parents[b]:
+            self.tips.discard(p)
+        self.tips.add(b)
+        # retry pending children
+        for c in [c for c in self.pending if all(self.knows(p) for p in dag.parents[c])]:
+            del self.pending[c]
+            self.add(dag, c)
+        return True
+
+    def parents(self, dag):
+        tips = sorted(self.tips, key=dag.key, reverse=True)
+        return tips[:MAX_PARENTS]
+
+    def virtual(self, dag):
+        return max(self.tips, key=dag.key)
+
+
+def episode(bps, k, d, H, strategy, hold, lead, honest_n, warm_s, post_s, seed):
+    rng = np.random.default_rng(seed)
+    dag = DAG(k, rng)
+    n_miners = honest_n + 1
+    ATT = honest_n
+    shares = [(1.0 - H) / honest_n] * honest_n + [H]
+    views = [View() for _ in range(n_miners)]
+    q = []
+    seq = 0
+    for i in range(n_miners):
+        if shares[i] <= 0:
+            continue
+        heapq.heappush(q, (float(rng.exponential(1.0 / (bps * shares[i]))), seq, "mine", i, -1))
+        seq += 1
+    t_attack = warm_s
+    t_release = None
+    withheld = []
+    honest_tip_at_fork = None
+    ref_tip = 0
+    max_reorg = 0
+    fork_age = 0.0
+    won = False
+    natural = []  # reorg depths before the attack (honest parallelism only)
+    t_end = warm_s + (hold if strategy == "hold" and H > 0 else (post_s if strategy == "selfish" else 0.0)) + post_s
+    attack_blocks = []
+    honest_after = []
+    t = 0.0
+
+    tip_at_release = None
+
+    def publish(b, t_now, frm):
+        nonlocal seq
+        for j in range(n_miners):
+            if j == frm:
+                continue
+            heapq.heappush(q, (t_now + d, seq, "deliver", j, b))
+            seq += 1
+
+    while q:
+        t, _, kind, who, payload = heapq.heappop(q)
+        if t > t_end:
+            break
+        if kind == "mine":
+            v = views[who]
+            if who == ATT and t >= t_attack and t_release is None and withheld:
+                # the private chain: the own tip first, honest tips only while they are lighter than it, so the
+                # attacker's block keeps the attacker's tip as its selected parent (GHOSTDAG picks the heaviest parent)
+                own = withheld[-1]
+                others = [h for h in sorted(v.tips, key=dag.key, reverse=True) if h != own and dag.key(h) < dag.key(own)]
+                parents = [own] + others[:MAX_PARENTS - 1]
+            else:
+                parents = v.parents(dag)
+            b = dag.add(parents, t, who)
+            v.add(dag, b)
+            heapq.heappush(q, (t + float(rng.exponential(1.0 / (bps * shares[who]))), seq, "mine", who, -1))
+            seq += 1
+            if who == ATT and t >= t_attack and t_release is None:
+                withheld.append(b)
+                attack_blocks.append(b)
+                if honest_tip_at_fork is None:
+                    honest_tip_at_fork = views[0].virtual(dag)
+                if strategy == "selfish":
+                    if len(withheld) >= lead:
+                        t_release = t
+                        tip_at_release = views[0].virtual(dag)
+                        for w in withheld:
+                            publish(w, t, ATT)
+            else:
+                if who != ATT and t >= t_attack:
+                    honest_after.append(b)
+                publish(b, t, who)
+                if who == ATT and t_release is not None:
+                    attack_blocks.append(b)
+            if strategy == "hold" and t_release is None and t >= t_attack + hold and withheld:
+                t_release = t
+                tip_at_release = views[0].virtual(dag)
+                for w in withheld:
+                    publish(w, t, ATT)
+        else:
+            v = views[who]
+            if v.add(dag, payload) and who == 0:
+                new_tip = v.virtual(dag)
+                if new_tip != ref_tip:
+                    if t < t_attack:
+                        steps, fork = dag.removed_between(ref_tip, new_tip)
+                        natural.append(steps)
+                    elif tip_at_release is not None:
+                        # the reorg is measured against the chain miner 0 held when the attacker released
+                        steps, fork = dag.removed_between(tip_at_release, new_tip)
+                        if steps > max_reorg:
+                            max_reorg = steps
+                            fork_age = t_release - dag.time[fork]
+                    ref_tip = new_tip
+            if who == ATT and t_release is None and strategy == "selfish" and withheld and t >= t_attack:
+                # about to lose the race: release when the honest tip's blue work reaches ours minus one
+                h_tip = max((x for x in views[ATT].tips if dag.miner[x] != ATT), key=dag.key, default=None)
+                a_tip = views[ATT].virtual(dag)
+                if h_tip is not None and dag.blue_work[h_tip] >= dag.blue_work[a_tip] - 1:
+                    t_release = t
+                    tip_at_release = views[0].virtual(dag)
+                    for w in withheld:
+                        publish(w, t, ATT)
+    # outcome from honest miner 0's final view
+    v0 = views[0]
+    tip = v0.virtual(dag)
+    chain_set = set(dag.chain(tip))
+    if withheld:
+        won = withheld[-1] in chain_set
+    blues = dag.blue_set(tip)
+    known = v0.known
+    att_known = [b for b in attack_blocks if (known >> b) & 1]
+    att_blue = sum(1 for b in att_known if (blues >> b) & 1)
+    hon_known = [b for b in honest_after if (known >> b) & 1]
+    hon_red = sum(1 for b in hon_known if not (blues >> b) & 1)
+    hon_blue = len(hon_known) - hon_red
+    return dict(reorg=max_reorg, fork_age=fork_age, won=bool(won), withheld=len(withheld), att_blocks=len(att_known),
+                att_blue=att_blue, hon_blocks=len(hon_known), hon_red=hon_red, hon_blue=hon_blue,
+                natural_p99=float(np.percentile(natural, 99)) if natural else 0.0,
+                natural_max=max(natural) if natural else 0, release_s=(t_release - t_attack) if t_release else None)
+
+
+def md(headers, rows):
+    out = ["| " + " | ".join(headers) + " |", "|" + "---|" * len(headers)]
+    for r in rows:
+        out.append("| " + " | ".join(str(x) for x in r) + " |")
+    return "\n".join(out)
+
+
+def main(argv=None):
+    ap = argparse.ArgumentParser()
+    ap.add_argument("--bps", type=float, default=1.0)
+    ap.add_argument("--k", type=int, default=18)
+    ap.add_argument("--seeds", type=int, default=20)
+    ap.add_argument("--delays", default="0.35,0.67,2,5")
+    ap.add_argument("--shares", default="0.2,0.34,0.45,0.51,0.67,0.9")
+    ap.add_argument("--holds", default="30,60,90,120")
+    ap.add_argument("--honest", type=int, default=8)
+    ap.add_argument("--warm", type=float, default=120.0)
+    ap.add_argument("--post", type=float, default=30.0)
+    ap.add_argument("--selfish-run", type=float, default=600.0, help="seconds of the selfish-lead strategy per episode")
+    ap.add_argument("--out", default="")
+    ap.add_argument("--json", default="")
+    args = ap.parse_args(argv)
+    delays = [float(x) for x in args.delays.split(",")]
+    shares = [float(x) for x in args.shares.split(",")]
+    holds = [float(x) for x in args.holds.split(",")]
+    t0 = time.time()
+    out = ["# GHOSTDAG withholding simulator, %s blocks/s, k %d, %d honest miners, %d seeds per cell" % (
+        ("%g" % args.bps), args.k, args.honest, args.seeds), ""]
+    out.append("Generated by `sim/horizon/consensus-security/ghostdag_sim.py` on %s. Every number is this simulator's; the model and its limits are in the file header." % time.strftime("%Y-%m-%d %H:%M UTC", time.gmtime()))
+    out.append("")
+    results = {"bps": args.bps, "k": args.k, "cells": []}
+
+    # 1. honest-only baseline per delay
+    out.append("## 1. Honest parallelism alone: natural selected-chain reorg depth at honest miner 0 (chain blocks), %g s per episode" % (args.warm + args.post))
+    out.append("")
+    rows = []
+    for d in delays:
+        eps = [episode(args.bps, args.k, d, 0.0, "hold", 0.0, 0, args.honest, args.warm + args.post, 0.0, 1000 + s) for s in range(args.seeds)]
+        p99 = max(e["natural_p99"] for e in eps)
+        mx = max(e["natural_max"] for e in eps)
+        rows.append(["%g" % d, "%.2f" % (args.bps * d), "%.0f" % p99, mx])
+        results["cells"].append(dict(kind="baseline", d=d, p99=p99, max=mx))
+    out.append(md(["one-way delay d, s", "blocks in flight (bps x d)", "reorg depth p99 (worst seed)", "reorg depth max"], rows))
+    out.append("")
+
+    # 2. hold T then release
+    out.append("## 2. Withhold for T seconds, then release everything: what the honest selected chain does")
+    out.append("")
+    out.append("`won` = the attacker's private tip became honest miner 0's selected chain after the release (its earlier-ordered conflicting transaction then precedes the honest copy). `reorg` = chain blocks removed from miner 0's selected chain (median and max over seeds). `fork age` = seconds between the fork point and the release: the window a conflicting transaction can reach back. `att blue` = the attacker's blue blocks over its blocks in miner 0's view (weight and subsidy kept); `hon red` = honest blocks since the fork turned red by the release.")
+    out.append("")
+    rows = []
+    for d in delays:
+        for H in shares:
+            for T in holds:
+                eps = [episode(args.bps, args.k, d, H, "hold", T, 0, args.honest, args.warm, args.post, 2000 + s) for s in range(args.seeds)]
+                won = np.mean([e["won"] for e in eps])
+                reorg = [e["reorg"] for e in eps]
+                age = [e["fork_age"] for e in eps if e["won"]]
+                ab = sum(e["att_blue"] for e in eps)
+                at = sum(e["att_blocks"] for e in eps)
+                hr = sum(e["hon_red"] for e in eps)
+                ht = sum(e["hon_blocks"] for e in eps)
+                cell = dict(kind="hold", d=d, H=H, T=T, won=float(won), reorg_med=float(np.median(reorg)), reorg_max=int(max(reorg)),
+                            fork_age_med=float(np.median(age)) if age else 0.0, att_blue_share=(ab / at if at else 0.0), hon_red_share=(hr / ht if ht else 0.0),
+                            withheld_mean=float(np.mean([e["withheld"] for e in eps])))
+                results["cells"].append(cell)
+                rows.append(["%g" % d, "%.0f%%" % (100 * H), "%g" % T, "%.1f" % cell["withheld_mean"], "%.0f%%" % (100 * won),
+                             "%.0f / %d" % (cell["reorg_med"], cell["reorg_max"]), "%.0f" % cell["fork_age_med"] if age else "-",
+                             "%.0f%%" % (100 * cell["att_blue_share"]), "%.0f%%" % (100 * cell["hon_red_share"])])
+    out.append(md(["d, s", "attacker share H", "hold T, s", "blocks withheld (mean)", "won", "reorg med / max", "fork age if won, s (med)", "att blue / att blocks", "hon red / hon blocks"], rows))
+    out.append("")
+
+    # 3. selfish-lead strategy over a longer run
+    out.append("## 3. Selfish withholding (release when about to lose, or at lead L = 6): blue share against hash share over %g s, d = %g s" % (args.selfish_run, delays[1] if len(delays) > 1 else delays[0]))
+    out.append("")
+    d = delays[1] if len(delays) > 1 else delays[0]
+    rows = []
+    for H in shares:
+        eps = [episode(args.bps, args.k, d, H, "selfish", 0, 6, args.honest, 60.0, args.selfish_run, 3000 + s) for s in range(max(3, args.seeds // 4))]
+        ab = sum(e["att_blue"] for e in eps)
+        at = sum(e["att_blocks"] for e in eps)
+        hb = sum(e["hon_blue"] for e in eps)
+        won = np.mean([e["won"] for e in eps])
+        reorg = max(e["reorg"] for e in eps)
+        cell = dict(kind="selfish", d=d, H=H, att_blue_share=(ab / at if at else 0.0), blue_share_of_all=(ab / (ab + hb) if ab + hb else 0.0),
+                    won=float(won), reorg_max=int(reorg))
+        results["cells"].append(cell)
+        rows.append(["%.0f%%" % (100 * H), "%.0f%%" % (100 * cell["att_blue_share"]), "%.1f%%" % (100 * cell["blue_share_of_all"]), "%.0f%%" % (100 * won), reorg])
+    out.append(md(["attacker share H", "attacker blue blocks / its blocks (weight kept)", "attacker share of ALL blue blocks (weight share; honest mining gives H)", "private tip is the chain at the end", "max reorg depth seen"], rows))
+    out.append("")
+    out.append("(%d cells, %.0f s)" % (len(results["cells"]), time.time() - t0))
+    text = "\n".join(out)
+    if args.out:
+        with open(args.out, "w") as f:
+            f.write(text + "\n")
+    if args.json:
+        with open(args.json, "w") as f:
+            json.dump(results, f, indent=1)
+    print(text)
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/sim/horizon/consensus-security/signalling.py b/sim/horizon/consensus-security/signalling.py
new file mode 100644
index 000000000..a9968a215
--- /dev/null
+++ b/sim/horizon/consensus-security/signalling.py
@@ -0,0 +1,110 @@
+#!/usr/bin/env python3
+"""The miner-signalling game (P2, docs/plans/counter-asic-3-node.md section 6): what a holdout, a renter and a
+signal-then-defect miner can do against the 95 percent threshold over a one-day window with a floor height.
+
+Rule as proposed (6 October 2026): epoch e is the new class when (a) its start is at or past the floor N6, or (b) the
+previous epoch was, or (c) the window of W = 86,400 DAA below the epoch's seed block is full and at least 9,500 bps of
+its blue blocks carry the new object byte. Weight = blue blocks (the finality walk). The byte is set by the node that
+builds the template, so a pool's hashers cannot change it and a renter needs only a patched node to set it.
+
+This file is arithmetic, not a stochastic simulation: with 86,400 blocks in the window the binomial noise on the share is
+sqrt(p (1 - p) / 86,400) = 0.07 points at p = 0.95, so "95 percent" is a hard line, not a coin flip. Cost basis: the
+measured rental price USD 11.7 per GH/s-hour (docs/bench-log.md, "Rental cost of hash, 6 October 2026": 1,748 MH/s for
+USD 20.44 an hour on RunPod community pods, approximate at scale because the market could not supply a TH/s).
+
+Run: python3 sim/horizon/consensus-security/signalling.py [--out file.md]
+"""
+
+import argparse
+import math
+import sys
+
+PRICE_PER_GHS_HOUR = 11.7  # USD, measured 6 Oct 2026 (bench-log line "Rental cost of hash")
+W_BLOCKS = 86_400
+THRESHOLD = 0.95
+NETWORKS_GHS = [1, 10, 100, 1000]
+
+
+def binom_flip_prob(p, n=W_BLOCKS, thr=THRESHOLD):
+    """P(share >= thr) for a true signalling fraction p over n blocks, normal approximation."""
+    if p <= 0 or p >= 1:
+        return 1.0 if p >= thr else 0.0
+    mu, sd = p, math.sqrt(p * (1 - p) / n)
+    z = (thr - mu) / sd
+    return 0.5 * math.erfc(z / math.sqrt(2))
+
+
+def md(headers, rows):
+    out = ["| " + " | ".join(headers) + " |", "|" + "---|" * len(headers)]
+    for r in rows:
+        out.append("| " + " | ".join(str(x) for x in r) + " |")
+    return "\n".join(out)
+
+
+def main(argv=None):
+    ap = argparse.ArgumentParser()
+    ap.add_argument("--out", default="")
+    args = ap.parse_args(argv)
+    out = ["# Miner signalling: the 95 percent game, one-day window, floor height", ""]
+    out.append("Generated by `sim/horizon/consensus-security/signalling.py`. Arithmetic on the P2 rule; price USD %.1f per GH/s-hour (measured, bench-log 6 Oct 2026)." % PRICE_PER_GHS_HOUR)
+    out.append("")
+
+    out.append("## 1. The threshold is a hard line: binomial noise over 86,400 blocks")
+    out.append("")
+    rows = []
+    for p in (0.93, 0.94, 0.945, 0.949, 0.95, 0.951, 0.955, 0.96):
+        rows.append(["%.1f%%" % (100 * p), "%.2f points" % (100 * math.sqrt(p * (1 - p) / W_BLOCKS)), "%.4f" % binom_flip_prob(p)])
+    out.append(md(["true signalling share p", "std of the window share", "P(window share >= 95%) on a given day"], rows))
+    out.append("")
+    out.append("Reading: a 94.5% fleet never flips by luck (P = 0.0000); a 95.1% fleet flips on its first full day (P = 0.91). A holdout of 5.1% of blue blocks blocks the signal path for ever; only the floor height ends it.")
+    out.append("")
+
+    out.append("## 2. The holdout: what 6 percent of the hash costs to hold until the floor")
+    out.append("")
+    out.append("A holdout needs 5% plus one block of the blue blocks of every day until N6. Rented on top of a network of N GH/s that otherwise signals 100%: h/(1 - h) x N for h = 6%.")
+    out.append("")
+    rows = []
+    for N in NETWORKS_GHS:
+        hr = 0.06 / 0.94 * N
+        rows.append(["%d GH/s" % N, "%.3f GH/s" % hr, "USD %.0f" % (hr * PRICE_PER_GHS_HOUR * 24), "USD %.0f" % (hr * PRICE_PER_GHS_HOUR * 24 * 14), "USD %.0f" % (hr * PRICE_PER_GHS_HOUR * 24 * 30)])
+    out.append(md(["network hash", "rented hash for a 6% holdout", "per day", "14 days (a devnet-scale floor)", "30 days"], rows))
+    out.append("")
+    out.append("What the holdout gains: nothing but delay, bounded by the floor. The holdout earns block subsidy on its hash like any miner (6% of blocks), so its net cost is the rental premium over revenue, which at a rental market in equilibrium is near zero. The floor is therefore the whole defence against a veto, and the floor is a fixed height: the hazard of 6 October 2026 (the DAA 198,000 crossing while the fleet was still updating: a two-sided chain and a 229-block reorg, CLAUDE.md 6 Oct rules) returns at N6 for any node not yet on the new object.")
+    out.append("")
+
+    out.append("## 3. The renter: forcing the flip early with one day of 95 percent")
+    out.append("")
+    out.append("The window is one day of blue blocks and the byte is the template builder's. A renter who patches the byte and holds 95% of a day's blue blocks flips the class at the next epoch boundary whether or not the real fleet has the object. Hash needed: 0.95/0.05 x N = 19 N for 24 h (the window must be full and 95% signalling; a lower share over more days never reaches 95% because the window slides).")
+    out.append("")
+    rows = []
+    for N in NETWORKS_GHS:
+        hr = 19.0 * N
+        rows.append(["%d GH/s" % N, "%.0f GH/s" % hr, "USD %.0f" % (hr * PRICE_PER_GHS_HOUR * 24), "%s" % ("rentable tonight (1.75 GH/s on RunPod)" if hr <= 1.75 else "the market could not supply a TH/s on 6 Oct (bench-log)")])
+    out.append(md(["network hash", "rented hash for one day", "cost of the day", "supply"], rows))
+    out.append("")
+    out.append("What it buys: an activation while part of the fleet lacks the object. For the v4 cut nothing: the signalling binary IS the v4 binary, so every node that reads the high byte can mine v4 (section 6.1 item 1), and a pre-signalling node already refuses the high-byte headers. For a later object (v5) it is the fork of the nodes still on v4, the same shape as a fixed height crossed early. Bound: the share of the fleet not on the new object at the forced flip, which the renter chooses. Defence that costs nothing in liveness: require the threshold on each of D consecutive daily windows (D = 7 makes the renter's bill 7x and gives a week of public warning: the chain shows the share every epoch in `programClassV4SignalBps`), or weight the signal by the 30-day finality window, which a one-day rental cannot fill (W2: a day is 1/30 of the table).")
+    out.append("")
+
+    out.append("## 4. Signal then defect")
+    out.append("")
+    out.append("A node that signals (byte 4) and after the flip runs the old class produces headers whose PoW fails under the new program: refused by every node, its blocks are lost, nobody else is touched (`check_header_version` then the PoW check). A pool that signals with its template and whose hashers run old workers loses the hashers' blocks after the flip (the worker computes the program from the template's class; a stale worker's blocks fail PoW). Bound: the defector's own income, zero to anyone else. Signal-then-defect is not an attack on the chain; it is a mis-upgraded miner.")
+    out.append("")
+
+    out.append("## 5. The one-day window against the 30-day finality window")
+    out.append("")
+    rows = [["one day (P2 as proposed)", "19 N for 24 h", "USD %.0f at 1 GH/s, %.0f at 100 GH/s" % (19 * PRICE_PER_GHS_HOUR * 24, 1900 * PRICE_PER_GHS_HOUR * 24), "flips within a day of the last upgrade", "a renter forces it in a day"],
+            ["7 consecutive days at 95%", "19 N for 7 x 24 h", "USD %.0f at 1 GH/s, %.0f at 100 GH/s" % (19 * PRICE_PER_GHS_HOUR * 24 * 7, 1900 * PRICE_PER_GHS_HOUR * 24 * 7), "flips a week after the last upgrade", "7x the bill and a week of visible share"],
+            ["30-day blue-block window (the finality table)", "the renter must mine 95% of 30 days of blocks: 19 N for 30 days", "USD %.0f at 1 GH/s, %.0f at 100 GH/s" % (19 * PRICE_PER_GHS_HOUR * 24 * 30, 1900 * PRICE_PER_GHS_HOUR * 24 * 30), "flips 30 days after the fleet is ready (the status file's objection)", "same bound as finality's own 2/3: the 20-day public event"]]
+    out.append(md(["window", "renter's hash", "renter's cost", "honest latency", "what it buys the defence"], rows))
+    out.append("")
+    out.append("Recommendation to the lane that owns P2: keep the one-day tally for the live share display, require the threshold on D = 7 consecutive daily windows for the flip, keep the floor as the backstop but set it no nearer than 7 days past the publish on any network miners run (14,400 DAA = 4 h was a devnet value), and never let a floor cross while under 95% is signalling without a node-side line that says which boxes are not on the object (the stale-box list is already a P1 pass rule).")
+    text = "\n".join(out)
+    if args.out:
+        with open(args.out, "w") as fh:
+            fh.write(text + "\n")
+    print(text)
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/sim/horizon/consensus-security/signalling_results.md b/sim/horizon/consensus-security/signalling_results.md
new file mode 100644
index 000000000..8cdc87380
--- /dev/null
+++ b/sim/horizon/consensus-security/signalling_results.md
@@ -0,0 +1,58 @@
+# Miner signalling: the 95 percent game, one-day window, floor height
+
+Generated by `sim/horizon/consensus-security/signalling.py`. Arithmetic on the P2 rule; price USD 11.7 per GH/s-hour (measured, bench-log 6 Oct 2026).
+
+## 1. The threshold is a hard line: binomial noise over 86,400 blocks
+
+| true signalling share p | std of the window share | P(window share >= 95%) on a given day |
+|---|---|---|
+| 93.0% | 0.09 points | 0.0000 |
+| 94.0% | 0.08 points | 0.0000 |
+| 94.5% | 0.08 points | 0.0000 |
+| 94.9% | 0.07 points | 0.0908 |
+| 95.0% | 0.07 points | 0.5000 |
+| 95.1% | 0.07 points | 0.9133 |
+| 95.5% | 0.07 points | 1.0000 |
+| 96.0% | 0.07 points | 1.0000 |
+
+Reading: a 94.5% fleet never flips by luck (P = 0.0000); a 95.1% fleet flips on its first full day (P = 0.91). A holdout of 5.1% of blue blocks blocks the signal path for ever; only the floor height ends it.
+
+## 2. The holdout: what 6 percent of the hash costs to hold until the floor
+
+A holdout needs 5% plus one block of the blue blocks of every day until N6. Rented on top of a network of N GH/s that otherwise signals 100%: h/(1 - h) x N for h = 6%.
+
+| network hash | rented hash for a 6% holdout | per day | 14 days (a devnet-scale floor) | 30 days |
+|---|---|---|---|---|
+| 1 GH/s | 0.064 GH/s | USD 18 | USD 251 | USD 538 |
+| 10 GH/s | 0.638 GH/s | USD 179 | USD 2509 | USD 5377 |
+| 100 GH/s | 6.383 GH/s | USD 1792 | USD 25093 | USD 53770 |
+| 1000 GH/s | 63.830 GH/s | USD 17923 | USD 250928 | USD 537702 |
+
+What the holdout gains: nothing but delay, bounded by the floor. The holdout earns block subsidy on its hash like any miner (6% of blocks), so its net cost is the rental premium over revenue, which at a rental market in equilibrium is near zero. The floor is therefore the whole defence against a veto, and the floor is a fixed height: the hazard of 6 October 2026 (the DAA 198,000 crossing while the fleet was still updating: a two-sided chain and a 229-block reorg, CLAUDE.md 6 Oct rules) returns at N6 for any node not yet on the new object.
+
+## 3. The renter: forcing the flip early with one day of 95 percent
+
+The window is one day of blue blocks and the byte is the template builder's. A renter who patches the byte and holds 95% of a day's blue blocks flips the class at the next epoch boundary whether or not the real fleet has the object. Hash needed: 0.95/0.05 x N = 19 N for 24 h (the window must be full and 95% signalling; a lower share over more days never reaches 95% because the window slides).
+
+| network hash | rented hash for one day | cost of the day | supply |
+|---|---|---|---|
+| 1 GH/s | 19 GH/s | USD 5335 | the market could not supply a TH/s on 6 Oct (bench-log) |
+| 10 GH/s | 190 GH/s | USD 53352 | the market could not supply a TH/s on 6 Oct (bench-log) |
+| 100 GH/s | 1900 GH/s | USD 533520 | the market could not supply a TH/s on 6 Oct (bench-log) |
+| 1000 GH/s | 19000 GH/s | USD 5335200 | the market could not supply a TH/s on 6 Oct (bench-log) |
+
+What it buys: an activation while part of the fleet lacks the object. For the v4 cut nothing: the signalling binary IS the v4 binary, so every node that reads the high byte can mine v4 (section 6.1 item 1), and a pre-signalling node already refuses the high-byte headers. For a later object (v5) it is the fork of the nodes still on v4, the same shape as a fixed height crossed early. Bound: the share of the fleet not on the new object at the forced flip, which the renter chooses. Defence that costs nothing in liveness: require the threshold on each of D consecutive daily windows (D = 7 makes the renter's bill 7x and gives a week of public warning: the chain shows the share every epoch in `programClassV4SignalBps`), or weight the signal by the 30-day finality window, which a one-day rental cannot fill (W2: a day is 1/30 of the table).
+
+## 4. Signal then defect
+
+A node that signals (byte 4) and after the flip runs the old class produces headers whose PoW fails under the new program: refused by every node, its blocks are lost, nobody else is touched (`check_header_version` then the PoW check). A pool that signals with its template and whose hashers run old workers loses the hashers' blocks after the flip (the worker computes the program from the template's class; a stale worker's blocks fail PoW). Bound: the defector's own income, zero to anyone else. Signal-then-defect is not an attack on the chain; it is a mis-upgraded miner.
+
+## 5. The one-day window against the 30-day finality window
+
+| window | renter's hash | renter's cost | honest latency | what it buys the defence |
+|---|---|---|---|---|
+| one day (P2 as proposed) | 19 N for 24 h | USD 5335 at 1 GH/s, 533520 at 100 GH/s | flips within a day of the last upgrade | a renter forces it in a day |
+| 7 consecutive days at 95% | 19 N for 7 x 24 h | USD 37346 at 1 GH/s, 3734640 at 100 GH/s | flips a week after the last upgrade | 7x the bill and a week of visible share |
+| 30-day blue-block window (the finality table) | the renter must mine 95% of 30 days of blocks: 19 N for 30 days | USD 160056 at 1 GH/s, 16005600 at 100 GH/s | flips 30 days after the fleet is ready (the status file's objection) | same bound as finality's own 2/3: the 20-day public event |
+
+Recommendation to the lane that owns P2: keep the one-day tally for the live share display, require the threshold on D = 7 consecutive daily windows for the flip, keep the floor as the backstop but set it no nearer than 7 days past the publish on any network miners run (14,400 DAA = 4 h was a devnet value), and never let a floor cross while under 95% is signalling without a node-side line that says which boxes are not on the object (the stale-box list is already a P1 pass rule).
diff --git a/sim/horizon/economy-and-utility/README.md b/sim/horizon/economy-and-utility/README.md
new file mode 100644
index 000000000..35ece7c51
--- /dev/null
+++ b/sim/horizon/economy-and-utility/README.md
@@ -0,0 +1,14 @@
+# sim/horizon/economy-and-utility
+
+Models behind `docs/analysis/horizon/economy-and-utility.md` (Horizon lane 4, 6 October 2026). Python 3.10, numpy only for `stress.py`.
+
+| File | What | Run |
+|---|---|---|
+| `utility.py` | Task 1: proving supply cost per measured card (alone, beside the miner, rented), the published prices it competes with, demand curves (a) to (e) with dollars per day and burn at launch, year 2, year 5 under low/base/high and three IGN prices, proof storage | `python3 utility.py > utility_out.md` (arithmetic, no lock) |
+| `stress.py` | Task 2: `sim/economy/sim.py` with the eleven measured cards, the measured rental price for the farm, the 25-s window and 120-s timeout, a FIFO backlog with the 600-s record window (stranded pool credit), burn per day; scenarios a, p10, pd10, c, x100, cartel, refuse, halving (b, d, e, f kept) | `/Users/joshm/Projects/igneum/tools/lock/with-lock.sh run nice -n 19 python3 stress.py --seeds 3 > results/stress_main.md` (about 20 s a run on the M5 Max) |
+| `security_budget_10y.py` | Task 3: ten years of subsidy, pool, fees (utility.py section 4), the hash the subsidy sustains at the measured card economics, the 34% weight attack in rented hash at USD 281 per GH/s-day, the audit lines against the entity's income | `python3 security_budget_10y.py > security_budget_10y_out.md` |
+| `signal_game.py` | Task 5: the 60/90/95 thresholds, forcing and blocking costs, the 30% pool, signal-then-defect by what is signalled | `python3 signal_game.py > signal_game_out.md` |
+| `devfee.py` | Task 4: the Ember dev fee in dollars by year, price and the share of miners who keep it on; per tier | `python3 devfee.py > devfee_out.md` |
+| `results/` | The stress runs as they ran tonight (`stress_main.md`: 8 scenarios x 3 seeds; `stress_busy.md`: 3 shards a block; `stress_elecfarm.md`: the farm on electricity instead of rent; its `renter farm margin` row printed a division by zero rent and is blank in the current script) | |
+
+Every input is labelled in the script (measured, cited, designed, approximate). Nothing here is a price prediction.
diff --git a/sim/horizon/economy-and-utility/devfee.py b/sim/horizon/economy-and-utility/devfee.py
new file mode 100644
index 000000000..1ca0202e7
--- /dev/null
+++ b/sim/horizon/economy-and-utility/devfee.py
@@ -0,0 +1,62 @@
+#!/usr/bin/env python3
+"""Horizon lane 4, task 4: the Ember dev fee in dollars, by the share of miners who keep it on.
+
+    python3 devfee.py > devfee_out.md
+
+Rule (docs/design/miner-dev-fee.md, measured 4 Oct 2026): one block template in 100 is requested with the dev payout address
+(template counter, exact), default on, `--dev-fee 0` or the app switch turns it off; the fee block keeps the user's vote key and
+UTXO address, only the execution-layer payout (`IGNA`) moves. So the fee is 1% of the producer subsidy and of the producer's
+80% tip share for the templates it takes; the pool share (20%) is untouched (the proving payout is per record, not per template).
+
+Precedents (approximate, from memory; none cloned): T-Rex 1% (not switchable), lolMiner 0.7 to 1.5% by algorithm (not switchable),
+PhoenixMiner 0.65% (not switchable), TeamRedMiner 0.75 to 2.5% (not switchable), NBMiner 1 to 2% (not switchable); ethminer and
+the open-source Kaspa miners 0%. NiceHash is a marketplace, not a dev fee: it takes 2% of the buyer's payment on its own
+exchange (approximate). On Ethereum the closed-source fee miners held the large majority of GPU hash over ethminer, approximate,
+because they were faster; nobody measured the opt-out share because none offered one.
+"""
+
+RAMP_LOSS = 37_000_000
+PRICES = [0.005, 0.02, 0.10]
+SHARES = [0.20, 0.50, 0.80, 1.00]
+
+
+def emission(year):
+    h = (year - 1) // 2
+    e = 1_000_000_000 / (2 ** h)
+    if year == 1:
+        e -= RAMP_LOSS
+    return e
+
+
+def usd(x):
+    return f"{x:,.0f}"
+
+
+def main():
+    print("# The Ember dev fee in dollars (generated by devfee.py)\n")
+    print("Fee = 1% x 80% of emission (the producer share) x the share of hash on Ember with the fee on. Tips are left out (under 0.01% of emission in every lane scenario). Every price is an input.\n")
+    print("| Year | Emission, M IGN | Price | Fee at 20% on | at 50% | at 80% | at 100% | 100% as a share of funding.md's unfunded USD 220,000 to 310,000 |")
+    print("|---|---|---|---|---|---|---|---|")
+    for y in (1, 2, 3, 4, 5, 7, 10):
+        for p in PRICES:
+            e = emission(y)
+            f = 0.01 * 0.8 * e * p
+            cells = [usd(f * s) for s in SHARES]
+            print(f"| {y} | {e / 1e6:,.0f} | {p} | " + " | ".join(cells) + f" | {f / 265_000 * 100:.0f}% |")
+    print()
+    print("## What a miner pays\n")
+    print("| Tier | Hash (measured, prover-tiers) | Blocks a month at 100 GH/s network | Fee blocks a month | Fee at USD 0.02 a month | Switch |")
+    print("|---|---|---|---|---|---|")
+    for name, mhs in [("home 8 GB (4060 Ti 8)", 19.07), ("home 12 GB (4070)", 24.99), ("home 16 GB (4060 Ti 16)", 17.58), ("home 24 GB (4090)", 52.25), ("home 32 GB (5090)", 98.48), ("rig 8x 4090", 8 * 52.25), ("pool user (any)", 0)]:
+        if mhs == 0:
+            print(f"| {name} | n/a | the pool's | the pool's: a pool on Ember pays 1% of its templates, a pool on its own software 0% | passed through or absorbed by the pool's fee | the pool's choice, not the user's |")
+            continue
+        blocks = mhs / 100_000 * 86400 * 30.44
+        fee_blocks = blocks / 100
+        fee_usd = fee_blocks * 31.688 * 0.8 * 0.02
+        print(f"| {name} | {mhs:.2f} MH/s | {blocks:,.1f} | {fee_blocks:.2f} | {fee_usd:,.2f} | Settings switch or `--dev-fee 0`; HiveOS `DEV_FEE=0` |")
+    print()
+
+
+if __name__ == "__main__":
+    main()
diff --git a/sim/horizon/economy-and-utility/devfee_out.md b/sim/horizon/economy-and-utility/devfee_out.md
new file mode 100644
index 000000000..c2f7d67af
--- /dev/null
+++ b/sim/horizon/economy-and-utility/devfee_out.md
@@ -0,0 +1,40 @@
+# The Ember dev fee in dollars (generated by devfee.py)
+
+Fee = 1% x 80% of emission (the producer share) x the share of hash on Ember with the fee on. Tips are left out (under 0.01% of emission in every lane scenario). Every price is an input.
+
+| Year | Emission, M IGN | Price | Fee at 20% on | at 50% | at 80% | at 100% | 100% as a share of funding.md's unfunded USD 220,000 to 310,000 |
+|---|---|---|---|---|---|---|---|
+| 1 | 963 | 0.005 | 7,704 | 19,260 | 30,816 | 38,520 | 15% |
+| 1 | 963 | 0.02 | 30,816 | 77,040 | 123,264 | 154,080 | 58% |
+| 1 | 963 | 0.1 | 154,080 | 385,200 | 616,320 | 770,400 | 291% |
+| 2 | 1,000 | 0.005 | 8,000 | 20,000 | 32,000 | 40,000 | 15% |
+| 2 | 1,000 | 0.02 | 32,000 | 80,000 | 128,000 | 160,000 | 60% |
+| 2 | 1,000 | 0.1 | 160,000 | 400,000 | 640,000 | 800,000 | 302% |
+| 3 | 500 | 0.005 | 4,000 | 10,000 | 16,000 | 20,000 | 8% |
+| 3 | 500 | 0.02 | 16,000 | 40,000 | 64,000 | 80,000 | 30% |
+| 3 | 500 | 0.1 | 80,000 | 200,000 | 320,000 | 400,000 | 151% |
+| 4 | 500 | 0.005 | 4,000 | 10,000 | 16,000 | 20,000 | 8% |
+| 4 | 500 | 0.02 | 16,000 | 40,000 | 64,000 | 80,000 | 30% |
+| 4 | 500 | 0.1 | 80,000 | 200,000 | 320,000 | 400,000 | 151% |
+| 5 | 250 | 0.005 | 2,000 | 5,000 | 8,000 | 10,000 | 4% |
+| 5 | 250 | 0.02 | 8,000 | 20,000 | 32,000 | 40,000 | 15% |
+| 5 | 250 | 0.1 | 40,000 | 100,000 | 160,000 | 200,000 | 75% |
+| 7 | 125 | 0.005 | 1,000 | 2,500 | 4,000 | 5,000 | 2% |
+| 7 | 125 | 0.02 | 4,000 | 10,000 | 16,000 | 20,000 | 8% |
+| 7 | 125 | 0.1 | 20,000 | 50,000 | 80,000 | 100,000 | 38% |
+| 10 | 62 | 0.005 | 500 | 1,250 | 2,000 | 2,500 | 1% |
+| 10 | 62 | 0.02 | 2,000 | 5,000 | 8,000 | 10,000 | 4% |
+| 10 | 62 | 0.1 | 10,000 | 25,000 | 40,000 | 50,000 | 19% |
+
+## What a miner pays
+
+| Tier | Hash (measured, prover-tiers) | Blocks a month at 100 GH/s network | Fee blocks a month | Fee at USD 0.02 a month | Switch |
+|---|---|---|---|---|---|
+| home 8 GB (4060 Ti 8) | 19.07 MH/s | 501.5 | 5.02 | 2.54 | Settings switch or `--dev-fee 0`; HiveOS `DEV_FEE=0` |
+| home 12 GB (4070) | 24.99 MH/s | 657.2 | 6.57 | 3.33 | Settings switch or `--dev-fee 0`; HiveOS `DEV_FEE=0` |
+| home 16 GB (4060 Ti 16) | 17.58 MH/s | 462.4 | 4.62 | 2.34 | Settings switch or `--dev-fee 0`; HiveOS `DEV_FEE=0` |
+| home 24 GB (4090) | 52.25 MH/s | 1,374.2 | 13.74 | 6.97 | Settings switch or `--dev-fee 0`; HiveOS `DEV_FEE=0` |
+| home 32 GB (5090) | 98.48 MH/s | 2,590.0 | 25.90 | 13.13 | Settings switch or `--dev-fee 0`; HiveOS `DEV_FEE=0` |
+| rig 8x 4090 | 418.00 MH/s | 10,993.5 | 109.93 | 55.74 | Settings switch or `--dev-fee 0`; HiveOS `DEV_FEE=0` |
+| pool user (any) | n/a | the pool's | the pool's: a pool on Ember pays 1% of its templates, a pool on its own software 0% | passed through or absorbed by the pool's fee | the pool's choice, not the user's |
+
diff --git a/sim/horizon/economy-and-utility/results/stress_busy.err b/sim/horizon/economy-and-utility/results/stress_busy.err
new file mode 100644
index 000000000..dd0dc13e5
--- /dev/null
+++ b/sim/horizon/economy-and-utility/results/stress_busy.err
@@ -0,0 +1,9 @@
+with-lock: holding run-1 for: nice -n 19 python3 stress.py --seeds 2 --scenarios a,cartel,refuse,x100 --set shards_per_block=3
+<!-- scenario a seed 1: 14.6 s -->
+<!-- scenario a seed 2: 15.4 s -->
+<!-- scenario cartel seed 1: 15.2 s -->
+<!-- scenario cartel seed 2: 15.5 s -->
+<!-- scenario refuse seed 1: 14.8 s -->
+<!-- scenario refuse seed 2: 14.3 s -->
+<!-- scenario x100 seed 1: 15.6 s -->
+<!-- scenario x100 seed 2: 15.4 s -->
diff --git a/sim/horizon/economy-and-utility/results/stress_busy.md b/sim/horizon/economy-and-utility/results/stress_busy.md
new file mode 100644
index 000000000..937e36c3f
--- /dev/null
+++ b/sim/horizon/economy-and-utility/results/stress_busy.md
@@ -0,0 +1,62 @@
+# Igneum economy under stress (lane 4), 1000 operators, 30 days, seeds [1, 2], tick 180 s, the eleven measured cards
+
+Parameters: tick=180.0, days=30, n_ops=1000, emission=31.688, pool=0.2, window=25.0, assignees=8, burn=0.1, timeout=120.0, shards_per_block=3.0, content_shards_per_block=0.03, job_work=10.0, ext_usd_day=2000.0, ext_mult=1.0, price0=0.012, vol_day=0.05, hyb_loss=0.04, hyb_extra_w=70.0, aggregation=4.0, waste=0.5, hyst_lo=0.05, hyst_hi=0.25, dwell_ticks=20, decide_every=4, ema_ticks=20.0, farm_share=0.2, renter_usd_mhs_h=0.0117, backlog_rule=600.0, record_window=600.0, burn_per_shard=0.51, cartel_weight=0.1, refuse_from=10.0, refuse_to=20.0
+
+Cards (measured, prover-tiers-real-cards.md): 3060 23.78 MH/s 104 W alone 14.4 s beside 37.5 s; 3080 40.82 MH/s 205 W alone 7.1 s beside 25.6 s; 3090 37.79 MH/s 229 W alone 14.9 s beside 19.9 s; 4060Ti16 17.58 MH/s 72 W alone 11.6 s beside 34.6 s; 4060Ti8 19.07 MH/s 73 W alone 9.6 s beside 26.3 s (core-only beside); 4060 17.07 MH/s 115 W alone 18.4 s beside 22.1 s (core-only beside); 4070 24.99 MH/s 91 W alone 12.1 s beside 27.3 s; 4090 52.25 MH/s 183 W alone 6.3 s beside 26.1 s; 5070 41.89 MH/s 137 W alone 4.8 s beside 37.2 s; 5090 98.48 MH/s 258 W alone 6.3 s beside 10.7 s; A5000 47.70 MH/s 223 W alone 8.3 s beside 34.6 s
+
+- a: baseline (measured cards, 25-s window, 120-s timeout, farm is a renter at USD 0.0117 per MH/s-h)
+- cartel: the operators holding the top 10% of weight never answer an assignment or claim
+- refuse: every prover refuses (no assignment answered, no open claim) from day 10 to day 20
+- x100: external demand pays x100 from day 7
+
+| Metric | a | a min | a max | cartel | cartel min | cartel max | refuse | refuse min | refuse max | x100 | x100 min | x100 max |
+|---|---|---|---|---|---|---|---|---|---|---|---|---|
+| hash mining share (mean) | 0.96 | 0.96 | 0.96 | 0.97 | 0.96 | 0.97 | 0.98 | 0.98 | 0.98 | 0.95 | 0.95 | 0.96 |
+| cards proving, day 10 | 0.07 | 0.06 | 0.07 | 0.07 | 0.06 | 0.09 | 0.07 | 0.06 | 0.07 | 0.09 | 0.08 | 0.10 |
+| cards proving, day 30 | 0.07 | 0.06 | 0.07 | 0.08 | 0.08 | 0.09 | 0.06 | 0.06 | 0.07 | 0.09 | 0.08 | 0.10 |
+| cards hybrid, day 30 | 0.58 | 0.57 | 0.58 | 0.58 | 0.57 | 0.58 | 0.76 | 0.76 | 0.76 | 0.58 | 0.57 | 0.59 |
+| cards off, day 30 | 0.09 | 0.09 | 0.09 | 0.00 | 0.00 | 0.00 | 0.09 | 0.09 | 0.09 | 0.07 | 0.07 | 0.07 |
+| hash min / pre-event | 1.00 | 1.00 | 1.00 | 0.99 | 0.99 | 1.00 | 1.00 | 1.00 | 1.00 | 0.95 | 0.93 | 0.97 |
+| hash day 30 / pre-event | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.04 | 1.02 | 1.05 |
+| T1: hours hash under 50% | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| backlog max, shards | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 2,265 | 2,251 | 2,279 | 0.00 | 0.00 | 0.00 |
+| T2: oldest unproven age max, s | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 565.00 | 565.00 | 565.00 | 0.00 | 0.00 | 0.00 |
+| age max day 30, s | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| blocks proven within 60 s | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 0.67 | 0.67 | 0.67 | 1.00 | 1.00 | 1.00 |
+| T4: worst day within 60 s | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 0.00 | 0.00 | 0.00 | 1.00 | 1.00 | 1.00 |
+| blocks proven within 20 s | 0.14 | 0.14 | 0.14 | 0.12 | 0.11 | 0.14 | 0.08 | 0.08 | 0.09 | 0.18 | 0.17 | 0.18 |
+| difficulty end / start | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.10 | 0.97 | 1.22 |
+| external jobs delivered | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 0.67 | 0.67 | 0.68 | 1.00 | 1.00 | 1.00 |
+| price mean, $ | 0.0158 | 0.0101 | 0.0215 | 0.0119 | 0.0108 | 0.0130 | 0.0159 | 0.0109 | 0.0210 | 0.0139 | 0.0109 | 0.0169 |
+| price at day 30, $ | 0.0154 | 0.0087 | 0.0220 | 0.0107 | 0.0099 | 0.0115 | 0.0154 | 0.0102 | 0.0206 | 0.0125 | 0.0101 | 0.0150 |
+| T5: proving-share 10-90 pct range, points | 0.26 | 0.17 | 0.36 | 2.20 | 0.70 | 3.71 | 0.03 | 0.01 | 0.04 | 1.93 | 1.41 | 2.45 |
+| burn, IGN per day (base fee + job burn) | 16,247 | 10,791 | 21,703 | 18,346 | 16,533 | 20,159 | 10,924 | 8,475 | 13,373 | 1,192,701 | 915,866 | 1,469,535 |
+| of which external job burn, IGN per day | 14,924 | 9,468 | 20,380 | 17,024 | 15,212 | 18,836 | 9,601 | 7,152 | 12,050 | 1,191,377 | 914,542 | 1,468,211 |
+| burn, $ per day at the mean price | 225.56 | 219.04 | 232.08 | 216.28 | 215.33 | 217.23 | 161.71 | 145.15 | 178.28 | 15,767 | 15,473 | 16,061 |
+| share of the 20% pool paid out | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 0.67 | 0.67 | 0.67 | 1.00 | 1.00 | 1.00 |
+| share of the 20% pool stranded (expired shards) | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.33 | 0.33 | 0.33 | 0.00 | 0.00 | 0.00 |
+| stranded, IGN per day | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 182,436 | 182,369 | 182,504 | 0.00 | 0.00 | 0.00 |
+| renter farm cards | 968.00 | 925.00 | 1,011 | 968.00 | 925.00 | 1,011 | 968.00 | 925.00 | 1,011 | 968.00 | 925.00 | 1,011 |
+| renter farm cards on, day 30 | 0.00 | 0.00 | 0.00 | 968.00 | 925.00 | 1,011 | 0.00 | 0.00 | 0.00 | 212.74 | 181.15 | 244.32 |
+| renter farm margin over rent | -0.75 | -0.77 | -0.74 | -0.80 | -0.83 | -0.77 | -0.75 | -0.77 | -0.74 | 0.11 | 0.11 | 0.11 |
+| cartel operators | 0.00 | 0.00 | 0.00 | 1.00 | 1.00 | 1.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| mode switches (operator x class) | 43,516 | 41,276 | 45,757 | 108,987 | 53,600 | 164,374 | 19,692 | 18,647 | 20,737 | 47,444 | 42,981 | 51,908 |
+
+| Flag | a | cartel | refuse | x100 |
+|---|---|---|---|---|
+| T1 miner shortage (hash under 50% of pre-event for 1 h or more) | 0/2 | 0/2 | 0/2 | 0/2 |
+| T2 backlog over 600 s | 0/2 | 0/2 | 0/2 | 0/2 |
+| T3 growing backlog (positive 10-day trend and over 60 s at day 30) | 0/2 | 0/2 | 0/2 | 0/2 |
+| T4 window miss (a day under 90% of blocks within 60 s) | 0/2 | 0/2 | 2/2 | 0/2 |
+| T5 oscillation (proving-share 10-90 range over 10 points in the last 10 days) | 0/2 | 0/2 | 0/2 | 0/2 |
+
+Operator profit by card class, $ per card-day (mean over seeds, all modes including off), and the share of shards each class proves:
+
+| Scenario | 3060 | 3080 | 3090 | 4060Ti16 | 4060Ti8 | 4060 | 4070 | 4090 | 5070 | 5090 | A5000 | sh 3060 | sh 3080 | sh 3090 | sh 4060Ti16 | sh 4060Ti8 | sh 4060 | sh 4070 | sh 4090 | sh 5070 | sh 5090 | sh A5000 |
+|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
+| a | 2.004 | 4.570 | 4.177 | 2.343 | 3.246 | 1.356 | 2.958 | 5.684 | 4.449 | 5.750 | 4.922 | 0.00 | 0.05 | 0.11 | 0.04 | 0.22 | 0.01 | 0.11 | 0.11 | 0.06 | 0.24 | 0.04 |
+| cartel | 1.149 | 2.887 | 2.523 | 1.556 | 2.057 | 0.762 | 1.850 | 3.574 | 3.333 | -7.105 | 3.031 | 0.00 | 0.05 | 0.11 | 0.04 | 0.15 | 0.03 | 0.11 | 0.10 | 0.14 | 0.23 | 0.04 |
+| refuse | 2.155 | 4.088 | 3.686 | 1.990 | 3.021 | 1.355 | 2.600 | 5.192 | 4.103 | 5.201 | 4.544 | 0.05 | 0.05 | 0.10 | 0.03 | 0.26 | 0.00 | 0.10 | 0.10 | 0.05 | 0.22 | 0.04 |
+| x100 | 1.629 | 22.473 | 3.329 | 19.229 | 39.967 | 1.086 | 2.382 | 23.427 | 23.886 | 26.253 | 18.805 | 0.00 | 0.05 | 0.10 | 0.04 | 0.16 | 0.01 | 0.10 | 0.10 | 0.16 | 0.26 | 0.04 |
+
+<!-- total 121 s -->
diff --git a/sim/horizon/economy-and-utility/results/stress_elecfarm.err b/sim/horizon/economy-and-utility/results/stress_elecfarm.err
new file mode 100644
index 000000000..4072d7a86
--- /dev/null
+++ b/sim/horizon/economy-and-utility/results/stress_elecfarm.err
@@ -0,0 +1,5 @@
+with-lock: holding run-1 for: nice -n 19 python3 stress.py --seeds 2 --scenarios a,pd10 --set renter_usd_mhs_h=0
+<!-- scenario a seed 1: 16.0 s -->
+<!-- scenario a seed 2: 15.6 s -->
+<!-- scenario pd10 seed 1: 15.8 s -->
+<!-- scenario pd10 seed 2: 16.5 s -->
diff --git a/sim/horizon/economy-and-utility/results/stress_elecfarm.md b/sim/horizon/economy-and-utility/results/stress_elecfarm.md
new file mode 100644
index 000000000..1b645575d
--- /dev/null
+++ b/sim/horizon/economy-and-utility/results/stress_elecfarm.md
@@ -0,0 +1,58 @@
+# Igneum economy under stress (lane 4), 1000 operators, 30 days, seeds [1, 2], tick 180 s, the eleven measured cards
+
+Parameters: tick=180.0, days=30, n_ops=1000, emission=31.688, pool=0.2, window=25.0, assignees=8, burn=0.1, timeout=120.0, shards_per_block=1.0, content_shards_per_block=0.03, job_work=10.0, ext_usd_day=2000.0, ext_mult=1.0, price0=0.012, vol_day=0.05, hyb_loss=0.04, hyb_extra_w=70.0, aggregation=4.0, waste=0.5, hyst_lo=0.05, hyst_hi=0.25, dwell_ticks=20, decide_every=4, ema_ticks=20.0, farm_share=0.2, renter_usd_mhs_h=0.0, backlog_rule=600.0, record_window=600.0, burn_per_shard=0.51, cartel_weight=0.1, refuse_from=10.0, refuse_to=20.0
+
+Cards (measured, prover-tiers-real-cards.md): 3060 23.78 MH/s 104 W alone 14.4 s beside 37.5 s; 3080 40.82 MH/s 205 W alone 7.1 s beside 25.6 s; 3090 37.79 MH/s 229 W alone 14.9 s beside 19.9 s; 4060Ti16 17.58 MH/s 72 W alone 11.6 s beside 34.6 s; 4060Ti8 19.07 MH/s 73 W alone 9.6 s beside 26.3 s (core-only beside); 4060 17.07 MH/s 115 W alone 18.4 s beside 22.1 s (core-only beside); 4070 24.99 MH/s 91 W alone 12.1 s beside 27.3 s; 4090 52.25 MH/s 183 W alone 6.3 s beside 26.1 s; 5070 41.89 MH/s 137 W alone 4.8 s beside 37.2 s; 5090 98.48 MH/s 258 W alone 6.3 s beside 10.7 s; A5000 47.70 MH/s 223 W alone 8.3 s beside 34.6 s
+
+- a: baseline (measured cards, 25-s window, 120-s timeout, farm is a renter at USD 0.0117 per MH/s-h)
+- pd10: coin price /10 at day 7
+
+| Metric | a | a min | a max | pd10 | pd10 min | pd10 max |
+|---|---|---|---|---|---|---|
+| hash mining share (mean) | 0.98 | 0.97 | 0.99 | 0.91 | 0.91 | 0.91 |
+| cards proving, day 10 | 0.04 | 0.02 | 0.07 | 0.17 | 0.17 | 0.17 |
+| cards proving, day 30 | 0.05 | 0.03 | 0.07 | 0.15 | 0.15 | 0.15 |
+| cards hybrid, day 30 | 0.67 | 0.66 | 0.67 | 0.51 | 0.50 | 0.52 |
+| cards off, day 30 | 0.00 | 0.00 | 0.00 | 0.25 | 0.23 | 0.27 |
+| hash min / pre-event | 0.99 | 0.98 | 1.00 | 0.63 | 0.62 | 0.64 |
+| hash day 30 / pre-event | 1.00 | 1.00 | 1.00 | 0.77 | 0.74 | 0.79 |
+| T1: hours hash under 50% | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| backlog max, shards | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| T2: oldest unproven age max, s | 0.00 | 0.00 | 0.00 | 565.00 | 565.00 | 565.00 |
+| age max day 30, s | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| blocks proven within 60 s | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
+| T4: worst day within 60 s | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
+| blocks proven within 20 s | 0.39 | 0.35 | 0.43 | 0.51 | 0.51 | 0.52 |
+| difficulty end / start | 1.00 | 1.00 | 1.00 | 0.77 | 0.74 | 0.79 |
+| external jobs delivered | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
+| price mean, $ | 0.0118 | 0.0113 | 0.0123 | 0.0041 | 0.0040 | 0.0042 |
+| price at day 30, $ | 0.0094 | 0.0088 | 0.0101 | 0.0012 | 0.0012 | 0.0013 |
+| T5: proving-share 10-90 pct range, points | 1.88 | 0.39 | 3.37 | 2.51 | 2.32 | 2.71 |
+| burn, IGN per day (base fee + job burn) | 18,779 | 17,620 | 19,937 | 119,872 | 118,764 | 120,980 |
+| of which external job burn, IGN per day | 17,457 | 16,297 | 18,617 | 118,551 | 117,444 | 119,658 |
+| burn, $ per day at the mean price | 221.05 | 216.04 | 226.07 | 492.51 | 480.29 | 504.72 |
+| share of the 20% pool paid out | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
+| share of the 20% pool stranded (expired shards) | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| stranded, IGN per day | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| renter farm cards | 968.00 | 925.00 | 1,011 | 968.00 | 925.00 | 1,011 |
+| renter farm cards on, day 30 | 968.00 | 925.00 | 1,011 | 968.00 | 925.00 | 1,011 |
+| renter farm margin over rent | 204,942,454,880,445 | 200,962,934,166,413 | 208,921,975,594,476 | 83,466,041,323,923 | 80,404,979,462,614 | 86,527,103,185,233 |
+| cartel operators | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| mode switches (operator x class) | 84,770 | 46,616 | 122,924 | 340,786 | 313,839 | 367,732 |
+
+| Flag | a | pd10 |
+|---|---|---|
+| T1 miner shortage (hash under 50% of pre-event for 1 h or more) | 0/2 | 0/2 |
+| T2 backlog over 600 s | 0/2 | 0/2 |
+| T3 growing backlog (positive 10-day trend and over 60 s at day 30) | 0/2 | 0/2 |
+| T4 window miss (a day under 90% of blocks within 60 s) | 0/2 | 0/2 |
+| T5 oscillation (proving-share 10-90 range over 10 points in the last 10 days) | 0/2 | 0/2 |
+
+Operator profit by card class, $ per card-day (mean over seeds, all modes including off), and the share of shards each class proves:
+
+| Scenario | 3060 | 3080 | 3090 | 4060Ti16 | 4060Ti8 | 4060 | 4070 | 4090 | 5070 | 5090 | A5000 | sh 3060 | sh 3080 | sh 3090 | sh 4060Ti16 | sh 4060Ti8 | sh 4060 | sh 4070 | sh 4090 | sh 5070 | sh 5090 | sh A5000 |
+|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
+| a | 1.113 | 2.677 | 2.338 | 1.419 | 1.558 | 0.721 | 1.718 | 3.343 | 3.175 | 6.758 | 2.845 | 0.00 | 0.04 | 0.09 | 0.03 | 0.10 | 0.01 | 0.09 | 0.09 | 0.12 | 0.38 | 0.03 |
+| pd10 | 0.325 | 0.894 | 0.668 | 0.621 | 0.778 | 0.209 | 0.523 | 1.137 | 1.147 | 2.497 | 0.928 | 0.01 | 0.04 | 0.05 | 0.05 | 0.11 | 0.02 | 0.08 | 0.08 | 0.14 | 0.38 | 0.03 |
+
+<!-- total 64 s -->
diff --git a/sim/horizon/economy-and-utility/results/stress_main.err b/sim/horizon/economy-and-utility/results/stress_main.err
new file mode 100644
index 000000000..ac572fcc1
--- /dev/null
+++ b/sim/horizon/economy-and-utility/results/stress_main.err
@@ -0,0 +1,25 @@
+with-lock: holding run-1 for: nice -n 19 python3 stress.py --seeds 3
+<!-- scenario a seed 1: 20.0 s -->
+<!-- scenario a seed 2: 20.3 s -->
+<!-- scenario a seed 3: 17.9 s -->
+<!-- scenario p10 seed 1: 18.9 s -->
+<!-- scenario p10 seed 2: 15.3 s -->
+<!-- scenario p10 seed 3: 15.6 s -->
+<!-- scenario pd10 seed 1: 15.5 s -->
+<!-- scenario pd10 seed 2: 15.6 s -->
+<!-- scenario pd10 seed 3: 15.5 s -->
+<!-- scenario c seed 1: 17.1 s -->
+<!-- scenario c seed 2: 16.1 s -->
+<!-- scenario c seed 3: 15.5 s -->
+<!-- scenario x100 seed 1: 16.2 s -->
+<!-- scenario x100 seed 2: 16.0 s -->
+<!-- scenario x100 seed 3: 23.6 s -->
+<!-- scenario cartel seed 1: 31.6 s -->
+<!-- scenario cartel seed 2: 30.9 s -->
+<!-- scenario cartel seed 3: 16.6 s -->
+<!-- scenario refuse seed 1: 15.7 s -->
+<!-- scenario refuse seed 2: 13.7 s -->
+<!-- scenario refuse seed 3: 13.8 s -->
+<!-- scenario halving seed 1: 14.7 s -->
+<!-- scenario halving seed 2: 14.7 s -->
+<!-- scenario halving seed 3: 14.6 s -->
diff --git a/sim/horizon/economy-and-utility/results/stress_main.md b/sim/horizon/economy-and-utility/results/stress_main.md
new file mode 100644
index 000000000..59a6cb7d4
--- /dev/null
+++ b/sim/horizon/economy-and-utility/results/stress_main.md
@@ -0,0 +1,70 @@
+# Igneum economy under stress (lane 4), 1000 operators, 30 days, seeds [1, 2, 3], tick 180 s, the eleven measured cards
+
+Parameters: tick=180.0, days=30, n_ops=1000, emission=31.688, pool=0.2, window=25.0, assignees=8, burn=0.1, timeout=120.0, shards_per_block=1.0, content_shards_per_block=0.03, job_work=10.0, ext_usd_day=2000.0, ext_mult=1.0, price0=0.012, vol_day=0.05, hyb_loss=0.04, hyb_extra_w=70.0, aggregation=4.0, waste=0.5, hyst_lo=0.05, hyst_hi=0.25, dwell_ticks=20, decide_every=4, ema_ticks=20.0, farm_share=0.2, renter_usd_mhs_h=0.0117, backlog_rule=600.0, record_window=600.0, burn_per_shard=0.51, cartel_weight=0.1, refuse_from=10.0, refuse_to=20.0
+
+Cards (measured, prover-tiers-real-cards.md): 3060 23.78 MH/s 104 W alone 14.4 s beside 37.5 s; 3080 40.82 MH/s 205 W alone 7.1 s beside 25.6 s; 3090 37.79 MH/s 229 W alone 14.9 s beside 19.9 s; 4060Ti16 17.58 MH/s 72 W alone 11.6 s beside 34.6 s; 4060Ti8 19.07 MH/s 73 W alone 9.6 s beside 26.3 s (core-only beside); 4060 17.07 MH/s 115 W alone 18.4 s beside 22.1 s (core-only beside); 4070 24.99 MH/s 91 W alone 12.1 s beside 27.3 s; 4090 52.25 MH/s 183 W alone 6.3 s beside 26.1 s; 5070 41.89 MH/s 137 W alone 4.8 s beside 37.2 s; 5090 98.48 MH/s 258 W alone 6.3 s beside 10.7 s; A5000 47.70 MH/s 223 W alone 8.3 s beside 34.6 s
+
+- a: baseline (measured cards, 25-s window, 120-s timeout, farm is a renter at USD 0.0117 per MH/s-h)
+- p10: coin price x10 at day 7
+- pd10: coin price /10 at day 7
+- c: external demand zero for 30 days
+- x100: external demand pays x100 from day 7
+- cartel: the operators holding the top 10% of weight never answer an assignment or claim
+- refuse: every prover refuses (no assignment answered, no open claim) from day 10 to day 20
+- halving: the first halving: 15.844 IGN per block throughout
+
+| Metric | a | a min | a max | p10 | p10 min | p10 max | pd10 | pd10 min | pd10 max | c | c min | c max | x100 | x100 min | x100 max | cartel | cartel min | cartel max | refuse | refuse min | refuse max | halving | halving min | halving max |
+|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
+| hash mining share (mean) | 0.97 | 0.96 | 0.99 | 0.97 | 0.97 | 0.98 | 0.90 | 0.89 | 0.91 | 0.95 | 0.95 | 0.95 | 0.95 | 0.95 | 0.95 | 0.97 | 0.96 | 0.97 | 0.98 | 0.98 | 0.98 | 0.98 | 0.97 | 0.98 |
+| cards proving, day 10 | 0.05 | 0.03 | 0.07 | 0.06 | 0.06 | 0.07 | 0.15 | 0.14 | 0.15 | 0.06 | 0.05 | 0.06 | 0.09 | 0.09 | 0.09 | 0.07 | 0.06 | 0.09 | 0.05 | 0.03 | 0.07 | 0.04 | 0.03 | 0.05 |
+| cards proving, day 30 | 0.06 | 0.03 | 0.07 | 0.06 | 0.06 | 0.06 | 0.14 | 0.14 | 0.14 | 0.06 | 0.05 | 0.06 | 0.10 | 0.10 | 0.11 | 0.06 | 0.04 | 0.08 | 0.06 | 0.06 | 0.07 | 0.04 | 0.04 | 0.06 |
+| cards hybrid, day 30 | 0.58 | 0.58 | 0.58 | 0.66 | 0.66 | 0.66 | 0.44 | 0.42 | 0.47 | 0.48 | 0.47 | 0.48 | 0.55 | 0.53 | 0.56 | 0.57 | 0.57 | 0.58 | 0.76 | 0.76 | 0.76 | 0.58 | 0.58 | 0.58 |
+| cards off, day 30 | 0.09 | 0.09 | 0.09 | 0.00 | 0.00 | 0.00 | 0.31 | 0.25 | 0.35 | 0.09 | 0.09 | 0.09 | 0.08 | 0.07 | 0.09 | 0.00 | 0.00 | 0.00 | 0.09 | 0.09 | 0.09 | 0.09 | 0.09 | 0.09 |
+| hash min / pre-event | 0.99 | 0.97 | 1.00 | 0.99 | 0.98 | 1.00 | 0.55 | 0.49 | 0.58 | 0.99 | 0.99 | 0.99 | 0.91 | 0.89 | 0.92 | 0.99 | 0.99 | 1.00 | 0.99 | 0.97 | 1.00 | 0.98 | 0.98 | 0.98 |
+| hash day 30 / pre-event | 1.00 | 0.99 | 1.00 | 1.25 | 1.23 | 1.26 | 0.74 | 0.70 | 0.81 | 1.00 | 0.99 | 1.00 | 0.97 | 0.92 | 1.01 | 1.01 | 1.00 | 1.01 | 0.99 | 0.98 | 1.00 | 1.00 | 1.00 | 1.00 |
+| T1: hours hash under 50% | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| backlog max, shards | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 765.62 | 761.65 | 769.55 | 0.00 | 0.00 | 0.00 |
+| T2: oldest unproven age max, s | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 565.00 | 565.00 | 565.00 | 0.00 | 0.00 | 0.00 |
+| age max day 30, s | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| blocks proven within 60 s | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 0.67 | 0.67 | 0.67 | 1.00 | 1.00 | 1.00 |
+| T4: worst day within 60 s | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 0.00 | 0.00 | 0.00 | 1.00 | 1.00 | 1.00 |
+| blocks proven within 20 s | 0.29 | 0.24 | 0.32 | 0.37 | 0.36 | 0.38 | 0.39 | 0.38 | 0.41 | 0.29 | 0.28 | 0.29 | 0.36 | 0.34 | 0.37 | 0.28 | 0.26 | 0.31 | 0.19 | 0.17 | 0.20 | 0.26 | 0.25 | 0.27 |
+| difficulty end / start | 1.00 | 1.00 | 1.00 | 1.25 | 1.23 | 1.26 | 0.76 | 0.71 | 0.83 | 1.00 | 0.99 | 1.00 | 0.96 | 0.95 | 0.97 | 1.00 | 1.00 | 1.00 | 0.99 | 0.98 | 1.00 | 0.99 | 0.98 | 1.00 |
+| external jobs delivered | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | nan | nan | nan | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 0.67 | 0.67 | 0.68 | 1.00 | 1.00 | 1.00 |
+| price mean, $ | 0.0108 | 0.0095 | 0.0120 | 0.0858 | 0.0741 | 0.0968 | 0.0035 | 0.0033 | 0.0037 | 0.0111 | 0.0100 | 0.0127 | 0.0100 | 0.0085 | 0.0108 | 0.0129 | 0.0122 | 0.0135 | 0.0112 | 0.0092 | 0.0133 | 0.0132 | 0.0114 | 0.0154 |
+| price at day 30, $ | 0.0108 | 0.0092 | 0.0123 | 0.1096 | 0.0948 | 0.1184 | 0.0011 | 0.0010 | 0.0013 | 0.0095 | 0.0076 | 0.0126 | 0.0081 | 0.0065 | 0.0097 | 0.0137 | 0.0126 | 0.0149 | 0.0109 | 0.0090 | 0.0147 | 0.0129 | 0.0122 | 0.0135 |
+| T5: proving-share 10-90 pct range, points | 1.59 | 0.18 | 4.25 | 0.14 | 0.13 | 0.16 | 2.02 | 1.73 | 2.20 | 0.55 | 0.40 | 0.79 | 2.93 | 2.56 | 3.67 | 2.19 | 0.46 | 3.07 | 0.04 | 0.04 | 0.05 | 4.42 | 4.31 | 4.63 |
+| burn, IGN per day (base fee + job burn) | 19,928 | 17,925 | 22,668 | 6,758 | 6,348 | 7,165 | 146,737 | 132,955 | 155,837 | 1,322 | 1,321 | 1,323 | 1,576,947 | 1,412,017 | 1,895,647 | 16,954 | 16,184 | 17,747 | 13,366 | 11,984 | 15,369 | 17,247 | 14,881 | 19,620 |
+| of which external job burn, IGN per day | 18,606 | 16,604 | 21,346 | 5,437 | 5,027 | 5,844 | 145,415 | 131,633 | 154,516 | 0.00 | 0.00 | 0.00 | 1,575,623 | 1,410,693 | 1,894,324 | 15,632 | 14,862 | 16,425 | 12,044 | 10,663 | 14,047 | 15,926 | 13,560 | 18,299 |
+| burn, $ per day at the mean price | 213.60 | 211.83 | 214.53 | 578.25 | 531.08 | 654.07 | 505.68 | 489.33 | 525.24 | 14.66 | 13.22 | 16.74 | 15,535 | 15,204 | 16,184 | 217.72 | 217.11 | 218.48 | 147.76 | 140.77 | 159.19 | 223.76 | 219.33 | 228.72 |
+| share of the 20% pool paid out | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 0.67 | 0.67 | 0.67 | 1.00 | 1.00 | 1.00 |
+| share of the 20% pool stranded (expired shards) | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.33 | 0.33 | 0.33 | 0.00 | 0.00 | 0.00 |
+| stranded, IGN per day | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 182,387 | 182,348 | 182,410 | 0.00 | 0.00 | 0.00 |
+| renter farm cards | 984.00 | 925.00 | 1,016 | 984.00 | 925.00 | 1,016 | 984.00 | 925.00 | 1,016 | 984.00 | 925.00 | 1,016 | 984.00 | 925.00 | 1,016 | 984.00 | 925.00 | 1,016 | 984.00 | 925.00 | 1,016 | 984.00 | 925.00 | 1,016 |
+| renter farm cards on, day 30 | 0.00 | 0.00 | 0.00 | 984.00 | 925.00 | 1,016 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 53.96 | 0.00 | 161.88 | 984.00 | 925.00 | 1,016 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| renter farm margin over rent | -0.77 | -0.80 | -0.74 | 1.14 | 0.78 | 1.35 | -0.77 | -0.80 | -0.74 | -0.76 | -0.80 | -0.73 | -0.06 | -0.10 | 0.01 | -0.79 | -0.79 | -0.78 | -0.77 | -0.80 | -0.74 | -0.88 | -0.90 | -0.86 |
+| cartel operators | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 1.00 | 1.00 | 1.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 | 0.00 |
+| mode switches (operator x class) | 68,668 | 43,384 | 115,468 | 45,506 | 40,107 | 53,876 | 299,713 | 255,963 | 325,037 | 124,200 | 119,674 | 126,827 | 62,079 | 53,259 | 78,476 | 110,155 | 52,993 | 141,064 | 27,814 | 20,329 | 41,746 | 153,983 | 143,139 | 166,180 |
+
+| Flag | a | p10 | pd10 | c | x100 | cartel | refuse | halving |
+|---|---|---|---|---|---|---|---|---|
+| T1 miner shortage (hash under 50% of pre-event for 1 h or more) | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 |
+| T2 backlog over 600 s | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 |
+| T3 growing backlog (positive 10-day trend and over 60 s at day 30) | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 |
+| T4 window miss (a day under 90% of blocks within 60 s) | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 3/3 | 0/3 |
+| T5 oscillation (proving-share 10-90 range over 10 points in the last 10 days) | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 | 0/3 |
+
+Operator profit by card class, $ per card-day (mean over seeds, all modes including off), and the share of shards each class proves:
+
+| Scenario | 3060 | 3080 | 3090 | 4060Ti16 | 4060Ti8 | 4060 | 4070 | 4090 | 5070 | 5090 | A5000 | sh 3060 | sh 3080 | sh 3090 | sh 4060Ti16 | sh 4060Ti8 | sh 4060 | sh 4070 | sh 4090 | sh 5070 | sh 5090 | sh A5000 |
+|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
+| a | 1.302 | 3.089 | 2.692 | 1.629 | 2.027 | 0.851 | 1.962 | 3.857 | 3.364 | 3.954 | 3.296 | 0.00 | 0.05 | 0.11 | 0.04 | 0.16 | 0.01 | 0.12 | 0.11 | 0.12 | 0.24 | 0.04 |
+| p10 | 9.360 | 20.454 | 19.943 | 10.154 | 13.062 | 6.602 | 13.701 | 25.201 | 19.791 | 36.999 | 22.265 | 0.00 | 0.05 | 0.10 | 0.03 | 0.18 | 0.00 | 0.10 | 0.10 | 0.07 | 0.33 | 0.04 |
+| pd10 | 0.347 | 0.985 | 0.703 | 0.683 | 0.928 | 0.222 | 0.552 | 1.248 | 1.192 | 1.348 | 1.016 | 0.01 | 0.05 | 0.06 | 0.06 | 0.15 | 0.03 | 0.10 | 0.10 | 0.17 | 0.22 | 0.04 |
+| c | 1.368 | 3.037 | 2.945 | 1.373 | 1.126 | 0.901 | 2.149 | 3.824 | 3.010 | 3.792 | 3.251 | 0.00 | 0.06 | 0.12 | 0.03 | 0.01 | 0.03 | 0.14 | 0.12 | 0.20 | 0.24 | 0.04 |
+| x100 | 1.148 | 20.443 | 2.313 | 17.528 | 37.192 | 0.742 | 1.701 | 21.189 | 21.968 | 23.114 | 17.119 | 0.00 | 0.05 | 0.09 | 0.04 | 0.14 | 0.01 | 0.10 | 0.10 | 0.18 | 0.25 | 0.04 |
+| cartel | 1.223 | 3.059 | 2.684 | 1.655 | 1.836 | 0.808 | 1.971 | 3.779 | 3.839 | -6.770 | 3.217 | 0.00 | 0.05 | 0.10 | 0.04 | 0.11 | 0.03 | 0.11 | 0.10 | 0.17 | 0.23 | 0.04 |
+| refuse | 1.452 | 2.815 | 2.461 | 1.405 | 2.085 | 0.883 | 1.784 | 3.606 | 2.968 | 3.653 | 3.110 | 0.05 | 0.05 | 0.09 | 0.03 | 0.23 | 0.00 | 0.10 | 0.10 | 0.08 | 0.22 | 0.04 |
+| halving | 0.704 | 1.839 | 1.429 | 1.030 | 0.938 | 0.429 | 1.103 | 2.314 | 2.552 | 2.416 | 1.927 | 0.00 | 0.05 | 0.10 | 0.04 | 0.07 | 0.01 | 0.11 | 0.10 | 0.23 | 0.23 | 0.04 |
+
+<!-- total 426 s -->
diff --git a/sim/horizon/economy-and-utility/security_budget_10y.py b/sim/horizon/economy-and-utility/security_budget_10y.py
new file mode 100644
index 000000000..5d590991e
--- /dev/null
+++ b/sim/horizon/economy-and-utility/security_budget_10y.py
@@ -0,0 +1,151 @@
+#!/usr/bin/env python3
+"""Horizon lane 4, task 3: no-treasury sustainability over ten years.
+
+Extends sim/economy/security_budget.py (5 October 2026) with: the fee scenarios of utility.py (section 4 of its
+output), the proving-pool share as a separate line, the hash the subsidy sustains at the measured card economics,
+the cost of a 34-percent weight attack in rented hash at the measured USD 281 per GH/s-day, and the audit line of
+docs/plans/funding.md against what the entity could earn. Pure Python, no numpy; arithmetic, not a measurement.
+
+    python3 security_budget_10y.py > security_budget_10y_out.md
+
+Model.
+  Emission: spec 2.5 (1 B IGN a year in years 1 and 2 minus the ramp's 37 M, halving every two years; 80/20).
+  Prices: flat USD 0.005, 0.02, 0.10 (security-budget.md inputs; assumptions).
+  Fees: the lane's low/base/high grid (utility.py section 4) interpolated: launch values in year 1, year-2 values in
+        year 2, year-5 values from year 5 on, linear between; tips 80% to miners and provers split 50/50 (the earlier
+        script's convention); job income in IGN 90% to provers; external USD jobs 90% to provers.
+  Hash the subsidy sustains: cards whose cost the miners' income pays at break-even, where the cost per MH/s-day is
+        electricity + capital: the 5090 fleet row (98.48 MH/s at 258 W, measured) at USD 0.10 per kWh gives
+        USD 0.00629 per MH/s-day of electricity; capital USD 2,000 per card over 3 years (approximate) gives
+        USD 0.0185 per MH/s-day; total USD 0.0248 per MH/s-day, USD 24.8 per GH/s-day. The brief's formula.
+  Attack: lane 3's rule (sim/horizon/consensus-security/cost_model.py): an attacker at share A rents A/(1-A) x N;
+        a third of the 30-day weight at 51% of blocks takes 20 days (spec 3 headline); rental USD 281 per GH/s-day
+        (bench-log 6 Oct 2026, 1,748 MH/s for USD 20.44 an hour). The 34% weight attack = 1.04 N for 20 days.
+        The attacker earns 51% of the producer subsidy over those 20 days; the net is shown.
+  Audits: funding.md section 2 rows, priced there (approximate).
+"""
+
+YEAR_S = 365.25 * 86400
+RAMP_LOSS = 37_000_000
+PRICES = [0.005, 0.02, 0.10]
+RENTAL_USD_GHS_DAY = 281.0           # measured, bench-log 6 Oct 2026 (USD 0.0117 per MH/s-hour x 24)
+ELEC_USD_KWH = 0.10
+CARD_MHS, CARD_W = 98.48, 258.2       # RTX 5090 fleet row, measured
+CARD_USD, CARD_LIFE_D = 2000.0, 3 * 365.25   # approximate
+ELEC_PER_MHS_DAY = CARD_W / CARD_MHS * 24 / 1000 * ELEC_USD_KWH
+CAP_PER_MHS_DAY = CARD_USD / CARD_MHS / CARD_LIFE_D
+COST_PER_MHS_DAY = ELEC_PER_MHS_DAY + CAP_PER_MHS_DAY
+
+# utility.py section 4 totals, IGN per day (tips to miners+provers, job income to provers) and USD per day (external)
+FEES = {
+    "low":  {1: (0.168, 0.0, 0.0),        2: (1.68, 22_478, 500.0),    5: (16.8, 44_955, 1_000.0)},
+    "base": {1: (1.68, 22_478, 500.0),    2: (16.8, 67_432, 2_000.0),  5: (168.0, 209_588, 10_000.0)},
+    "high": {1: (16.8, 44_955, 2_000.0),  2: (168.0, 209_588, 10_000.0), 5: (290.3, 1_002_375, 100_000.0)},
+}
+# the burn per day in IGN from the same table (for the supply line only)
+BURN = {"low": {1: 51, 2: 5_748, 5: 15_578}, "base": {1: 5_748, 2: 23_316, 5: 126_716}, "high": {1: 20_578, 2: 126_716, 5: 711_481}}
+
+AUDITS = [
+    ("Finality rule review (phase 4 gate)", 50_000, 100_000, "funding.md section 2"),
+    ("Node fork audit before public testnet", 60_000, 120_000, "funding.md section 2"),
+    ("Mixer cryptanalysis, two reviews (genesis gate)", 80_000, 160_000, "funding.md section 2, the brief B1 to B8"),
+    ("Execution layer and proving audit before mainnet", 80_000, 150_000, "funding.md section 2"),
+    ("Client and release process audit", 20_000, 40_000, "funding.md section 2"),
+    ("SECOND cryptanalysis after a class or era change (year 3)", 80_000, 160_000, "the brief's question; priced as the first"),
+]
+
+
+def emission(year):
+    h = (year - 1) // 2
+    e = 1_000_000_000 / (2 ** h)
+    if year == 1:
+        e -= RAMP_LOSS
+    return e
+
+
+def interp(table, year):
+    if year <= 1:
+        return table[1]
+    if year >= 5:
+        return table[5]
+    if year <= 2:
+        return table[2]
+    a, b = table[2], table[5]
+    f = (year - 2) / 3.0
+    return tuple(x + (y - x) * f for x, y in zip(a, b))
+
+
+def usd(x):
+    return f"{x:,.0f}"
+
+
+def main():
+    print("# Security budget over ten years with the lane's fee scenarios (generated by security_budget_10y.py)\n")
+    print(f"Inputs: electricity USD {ELEC_USD_KWH} per kWh; card {CARD_MHS} MH/s at {CARD_W} W (RTX 5090 fleet row, measured) = USD {ELEC_PER_MHS_DAY:.5f} per MH/s-day; "
+          f"capital USD {CARD_USD:.0f} over {CARD_LIFE_D / 365.25:.0f} years (approximate) = USD {CAP_PER_MHS_DAY:.5f} per MH/s-day; total USD {COST_PER_MHS_DAY:.4f} per MH/s-day "
+          f"(USD {COST_PER_MHS_DAY * 1000:.1f} per GH/s-day); rental USD {RENTAL_USD_GHS_DAY:.0f} per GH/s-day (measured); the rental premium over the honest cost is {RENTAL_USD_GHS_DAY / (COST_PER_MHS_DAY * 1000):.1f}x.\n")
+
+    print("## 1. Per year: subsidy, fees, the hash the subsidy sustains, and the 34% weight attack\n")
+    for scen in ("low", "base", "high"):
+        for price in PRICES:
+            print(f"### Fee scenario {scen}, price USD {price} per IGN\n")
+            print("| Year | Subsidy to miners, USD/day | Pool (20%) to provers, USD/day | Tips to miners+provers, USD/day | Job income to provers, USD/day (IGN jobs + external) | Burn, USD/day | Sustained hash, GH/s | 34% weight attack: rent 1.04 N for 20 d, USD | Attacker's subsidy over 20 d, USD | Net cost, USD | Fees as % of total security spend |")
+            print("|---|---|---|---|---|---|---|---|---|---|---|")
+            for y in range(1, 11):
+                e_day = emission(y) / 365.25
+                miners = 0.8 * e_day * price
+                pool = 0.2 * e_day * price
+                tips_ign, jobs_ign, ext_usd = interp(FEES[scen], y)
+                tips = 0.8 * tips_ign * price
+                jobs = 0.9 * jobs_ign * price + 0.9 * ext_usd
+                burn = interp({1: (BURN[scen][1],), 2: (BURN[scen][2],), 5: (BURN[scen][5],)}, y)[0] * price
+                miners_total = miners + 0.5 * tips
+                hash_ghs = miners_total / (COST_PER_MHS_DAY * 1000)
+                attack = 1.04 * hash_ghs * RENTAL_USD_GHS_DAY * 20
+                earned = 0.51 * (miners_total) * 20
+                fees_share = (tips + jobs) / (miners + pool + tips + jobs) * 100
+                print(f"| {y} | {usd(miners)} | {usd(pool)} | {usd(tips)} | {usd(jobs)} | {usd(burn)} | {hash_ghs:,.1f} | {usd(attack)} | {usd(earned)} | {usd(attack - earned)} | {fees_share:.1f}% |")
+            print()
+
+    print("## 2. The year the attack gets cheap: the 20-day 34% weight attack's net cost by year and price (base fee scenario)\n")
+    print("| Year | Net cost at USD 0.005 | at 0.02 | at 0.10 | Sustained hash at 0.005, GH/s | at 0.02 | at 0.10 |")
+    print("|---|---|---|---|---|---|---|")
+    for y in range(1, 11):
+        row = [str(y)]
+        hashes = []
+        for price in PRICES:
+            e_day = emission(y) / 365.25
+            tips_ign, jobs_ign, ext_usd = interp(FEES["base"], y)
+            miners_total = 0.8 * e_day * price + 0.5 * 0.8 * tips_ign * price
+            h = miners_total / (COST_PER_MHS_DAY * 1000)
+            hashes.append(h)
+            row.append(usd(1.04 * h * RENTAL_USD_GHS_DAY * 20 - 0.51 * miners_total * 20))
+        row += [f"{h:,.1f}" for h in hashes]
+        print("| " + " | ".join(row) + " |")
+    print()
+    print("Reading. Because the sustained hash is proportional to the subsidy and the attack cost is proportional to the hash, the ratio of attack cost to "
+          f"20 days of subsidy is a constant: 1.04 x {RENTAL_USD_GHS_DAY:.0f} / {COST_PER_MHS_DAY * 1000:.1f} = {1.04 * RENTAL_USD_GHS_DAY / (COST_PER_MHS_DAY * 1000):.1f}x the honest fleet's 20-day cost, "
+          "minus the 51% the attacker earns back. The subsidy never 'falls under' the attack cost in ratio terms; what the halvings do is shrink both until the absolute "
+          "number is small. The rows name the year the net cost of the veto drops under USD 1 M and under USD 100 k at each price, which is the honest statement.\n")
+
+    print("## 3. The audits, and who pays the second one\n")
+    print("| Review | Low, USD | High, USD | Source |")
+    print("|---|---|---|---|")
+    for name, lo, hi, src in AUDITS:
+        print(f"| {name} | {usd(lo)} | {usd(hi)} | {src} |")
+    print()
+    print("What the entity's own lines could earn (every one an input, none a forecast): the Ember dev fee at 1% of the rewards of the miners who keep it on, "
+          "the entity's own provers' pool and job income, and the app share on the contracts it deploys.\n")
+    print("| Year | Price | Dev fee ceiling at 100% on Ember, USD/year | At 50% | At 20% | Entity's provers at 5% of the pool, USD/year | Second cryptanalysis as % of the 50% dev fee |")
+    print("|---|---|---|---|---|---|---|")
+    for y in (1, 2, 3, 4, 5):
+        for price in PRICES:
+            e = emission(y)
+            fee100 = 0.01 * e * price
+            pool5 = 0.05 * 0.2 * e * price
+            print(f"| {y} | {price} | {usd(fee100)} | {usd(fee100 * 0.5)} | {usd(fee100 * 0.2)} | {usd(pool5)} | {160_000 / max(fee100 * 0.5, 1) * 100:.0f}% |")
+    print()
+
+
+if __name__ == "__main__":
+    main()
diff --git a/sim/horizon/economy-and-utility/security_budget_10y_out.md b/sim/horizon/economy-and-utility/security_budget_10y_out.md
new file mode 100644
index 000000000..220ab8525
--- /dev/null
+++ b/sim/horizon/economy-and-utility/security_budget_10y_out.md
@@ -0,0 +1,189 @@
+# Security budget over ten years with the lane's fee scenarios (generated by security_budget_10y.py)
+
+Inputs: electricity USD 0.1 per kWh; card 98.48 MH/s at 258.2 W (RTX 5090 fleet row, measured) = USD 0.00629 per MH/s-day; capital USD 2000 over 3 years (approximate) = USD 0.01853 per MH/s-day; total USD 0.0248 per MH/s-day (USD 24.8 per GH/s-day); rental USD 281 per GH/s-day (measured); the rental premium over the honest cost is 11.3x.
+
+## 1. Per year: subsidy, fees, the hash the subsidy sustains, and the 34% weight attack
+
+### Fee scenario low, price USD 0.005 per IGN
+
+| Year | Subsidy to miners, USD/day | Pool (20%) to provers, USD/day | Tips to miners+provers, USD/day | Job income to provers, USD/day (IGN jobs + external) | Burn, USD/day | Sustained hash, GH/s | 34% weight attack: rent 1.04 N for 20 d, USD | Attacker's subsidy over 20 d, USD | Net cost, USD | Fees as % of total security spend |
+|---|---|---|---|---|---|---|---|---|---|---|
+| 1 | 10,546 | 2,637 | 0 | 0 | 0 | 424.8 | 2,482,848 | 107,571 | 2,375,277 | 0.0% |
+| 2 | 10,951 | 2,738 | 0 | 551 | 29 | 441.1 | 2,578,244 | 111,704 | 2,466,540 | 3.9% |
+| 3 | 5,476 | 1,369 | 0 | 735 | 45 | 220.6 | 1,289,125 | 55,852 | 1,233,273 | 9.7% |
+| 4 | 5,476 | 1,369 | 0 | 919 | 62 | 220.6 | 1,289,127 | 55,852 | 1,233,275 | 11.8% |
+| 5 | 2,738 | 684 | 0 | 1,102 | 78 | 110.3 | 644,569 | 27,926 | 616,642 | 24.4% |
+| 6 | 2,738 | 684 | 0 | 1,102 | 78 | 110.3 | 644,569 | 27,926 | 616,642 | 24.4% |
+| 7 | 1,369 | 342 | 0 | 1,102 | 78 | 55.1 | 322,288 | 13,963 | 308,325 | 39.2% |
+| 8 | 1,369 | 342 | 0 | 1,102 | 78 | 55.1 | 322,288 | 13,963 | 308,325 | 39.2% |
+| 9 | 684 | 171 | 0 | 1,102 | 78 | 27.6 | 161,148 | 6,982 | 154,166 | 56.3% |
+| 10 | 684 | 171 | 0 | 1,102 | 78 | 27.6 | 161,148 | 6,982 | 154,166 | 56.3% |
+
+### Fee scenario low, price USD 0.02 per IGN
+
+| Year | Subsidy to miners, USD/day | Pool (20%) to provers, USD/day | Tips to miners+provers, USD/day | Job income to provers, USD/day (IGN jobs + external) | Burn, USD/day | Sustained hash, GH/s | 34% weight attack: rent 1.04 N for 20 d, USD | Attacker's subsidy over 20 d, USD | Net cost, USD | Fees as % of total security spend |
+|---|---|---|---|---|---|---|---|---|---|---|
+| 1 | 42,185 | 10,546 | 0 | 0 | 1 | 1,699.2 | 9,931,394 | 430,285 | 9,501,109 | 0.0% |
+| 2 | 43,806 | 10,951 | 0 | 855 | 115 | 1,764.5 | 10,312,976 | 446,817 | 9,866,159 | 1.5% |
+| 3 | 21,903 | 5,476 | 0 | 1,139 | 180 | 882.2 | 5,156,499 | 223,409 | 4,933,090 | 4.0% |
+| 4 | 21,903 | 5,476 | 0 | 1,424 | 246 | 882.2 | 5,156,509 | 223,410 | 4,933,099 | 4.9% |
+| 5 | 10,951 | 2,738 | 0 | 1,709 | 312 | 441.1 | 2,578,275 | 111,706 | 2,466,569 | 11.1% |
+| 6 | 10,951 | 2,738 | 0 | 1,709 | 312 | 441.1 | 2,578,275 | 111,706 | 2,466,569 | 11.1% |
+| 7 | 5,476 | 1,369 | 0 | 1,709 | 312 | 220.6 | 1,289,153 | 55,854 | 1,233,300 | 20.0% |
+| 8 | 5,476 | 1,369 | 0 | 1,709 | 312 | 220.6 | 1,289,153 | 55,854 | 1,233,300 | 20.0% |
+| 9 | 2,738 | 684 | 0 | 1,709 | 312 | 110.3 | 644,592 | 27,927 | 616,665 | 33.3% |
+| 10 | 2,738 | 684 | 0 | 1,709 | 312 | 110.3 | 644,592 | 27,927 | 616,665 | 33.3% |
+
+### Fee scenario low, price USD 0.1 per IGN
+
+| Year | Subsidy to miners, USD/day | Pool (20%) to provers, USD/day | Tips to miners+provers, USD/day | Job income to provers, USD/day (IGN jobs + external) | Burn, USD/day | Sustained hash, GH/s | 34% weight attack: rent 1.04 N for 20 d, USD | Attacker's subsidy over 20 d, USD | Net cost, USD | Fees as % of total security spend |
+|---|---|---|---|---|---|---|---|---|---|---|
+| 1 | 210,924 | 52,731 | 0 | 0 | 5 | 8,495.9 | 49,656,968 | 2,151,425 | 47,505,543 | 0.0% |
+| 2 | 219,028 | 54,757 | 0 | 2,473 | 575 | 8,822.4 | 51,564,882 | 2,234,087 | 49,330,795 | 0.9% |
+| 3 | 109,514 | 27,379 | 1 | 3,297 | 902 | 4,411.2 | 25,782,496 | 1,117,046 | 24,665,451 | 2.4% |
+| 4 | 109,514 | 27,379 | 1 | 4,122 | 1,230 | 4,411.2 | 25,782,544 | 1,117,048 | 24,665,496 | 2.9% |
+| 5 | 54,757 | 13,689 | 1 | 4,946 | 1,558 | 2,205.6 | 12,891,375 | 558,528 | 12,332,846 | 6.7% |
+| 6 | 54,757 | 13,689 | 1 | 4,946 | 1,558 | 2,205.6 | 12,891,375 | 558,528 | 12,332,846 | 6.7% |
+| 7 | 27,379 | 6,845 | 1 | 4,946 | 1,558 | 1,102.8 | 6,445,766 | 279,268 | 6,166,499 | 12.6% |
+| 8 | 27,379 | 6,845 | 1 | 4,946 | 1,558 | 1,102.8 | 6,445,766 | 279,268 | 6,166,499 | 12.6% |
+| 9 | 13,689 | 3,422 | 1 | 4,946 | 1,558 | 551.4 | 3,222,962 | 139,637 | 3,083,325 | 22.4% |
+| 10 | 13,689 | 3,422 | 1 | 4,946 | 1,558 | 551.4 | 3,222,962 | 139,637 | 3,083,325 | 22.4% |
+
+### Fee scenario base, price USD 0.005 per IGN
+
+| Year | Subsidy to miners, USD/day | Pool (20%) to provers, USD/day | Tips to miners+provers, USD/day | Job income to provers, USD/day (IGN jobs + external) | Burn, USD/day | Sustained hash, GH/s | 34% weight attack: rent 1.04 N for 20 d, USD | Attacker's subsidy over 20 d, USD | Net cost, USD | Fees as % of total security spend |
+|---|---|---|---|---|---|---|---|---|---|---|
+| 1 | 10,546 | 2,637 | 0 | 551 | 29 | 424.8 | 2,482,849 | 107,571 | 2,375,278 | 4.0% |
+| 2 | 10,951 | 2,738 | 0 | 2,103 | 117 | 441.1 | 2,578,251 | 111,705 | 2,466,547 | 13.3% |
+| 3 | 5,476 | 1,369 | 0 | 4,717 | 289 | 220.6 | 1,289,153 | 55,854 | 1,233,300 | 40.8% |
+| 4 | 5,476 | 1,369 | 0 | 7,330 | 461 | 220.6 | 1,289,177 | 55,855 | 1,233,322 | 51.7% |
+| 5 | 2,738 | 684 | 1 | 9,943 | 634 | 110.3 | 644,640 | 27,930 | 616,710 | 74.4% |
+| 6 | 2,738 | 684 | 1 | 9,943 | 634 | 110.3 | 644,640 | 27,930 | 616,710 | 74.4% |
+| 7 | 1,369 | 342 | 1 | 9,943 | 634 | 55.2 | 322,360 | 13,966 | 308,393 | 85.3% |
+| 8 | 1,369 | 342 | 1 | 9,943 | 634 | 55.2 | 322,360 | 13,966 | 308,393 | 85.3% |
+| 9 | 684 | 171 | 1 | 9,943 | 634 | 27.6 | 161,219 | 6,985 | 154,234 | 92.1% |
+| 10 | 684 | 171 | 1 | 9,943 | 634 | 27.6 | 161,219 | 6,985 | 154,234 | 92.1% |
+
+### Fee scenario base, price USD 0.02 per IGN
+
+| Year | Subsidy to miners, USD/day | Pool (20%) to provers, USD/day | Tips to miners+provers, USD/day | Job income to provers, USD/day (IGN jobs + external) | Burn, USD/day | Sustained hash, GH/s | 34% weight attack: rent 1.04 N for 20 d, USD | Attacker's subsidy over 20 d, USD | Net cost, USD | Fees as % of total security spend |
+|---|---|---|---|---|---|---|---|---|---|---|
+| 1 | 42,185 | 10,546 | 0 | 855 | 115 | 1,699.2 | 9,931,396 | 430,285 | 9,501,111 | 1.6% |
+| 2 | 43,806 | 10,951 | 0 | 3,014 | 466 | 1,764.5 | 10,313,005 | 446,819 | 9,866,186 | 5.2% |
+| 3 | 21,903 | 5,476 | 1 | 6,267 | 1,156 | 882.3 | 5,156,613 | 223,414 | 4,933,199 | 18.6% |
+| 4 | 21,903 | 5,476 | 2 | 9,520 | 1,845 | 882.3 | 5,156,708 | 223,418 | 4,933,290 | 25.8% |
+| 5 | 10,951 | 2,738 | 3 | 12,773 | 2,534 | 441.2 | 2,578,560 | 111,718 | 2,466,842 | 48.3% |
+| 6 | 10,951 | 2,738 | 3 | 12,773 | 2,534 | 441.2 | 2,578,560 | 111,718 | 2,466,842 | 48.3% |
+| 7 | 5,476 | 1,369 | 3 | 12,773 | 2,534 | 220.6 | 1,289,438 | 55,866 | 1,233,572 | 65.1% |
+| 8 | 5,476 | 1,369 | 3 | 12,773 | 2,534 | 220.6 | 1,289,438 | 55,866 | 1,233,572 | 65.1% |
+| 9 | 2,738 | 684 | 3 | 12,773 | 2,534 | 110.3 | 644,877 | 27,940 | 616,937 | 78.9% |
+| 10 | 2,738 | 684 | 3 | 12,773 | 2,534 | 110.3 | 644,877 | 27,940 | 616,937 | 78.9% |
+
+### Fee scenario base, price USD 0.1 per IGN
+
+| Year | Subsidy to miners, USD/day | Pool (20%) to provers, USD/day | Tips to miners+provers, USD/day | Job income to provers, USD/day (IGN jobs + external) | Burn, USD/day | Sustained hash, GH/s | 34% weight attack: rent 1.04 N for 20 d, USD | Attacker's subsidy over 20 d, USD | Net cost, USD | Fees as % of total security spend |
+|---|---|---|---|---|---|---|---|---|---|---|
+| 1 | 210,924 | 52,731 | 0 | 2,473 | 575 | 8,495.9 | 49,656,982 | 2,151,426 | 47,505,556 | 0.9% |
+| 2 | 219,028 | 54,757 | 1 | 7,869 | 2,332 | 8,822.4 | 51,565,024 | 2,234,093 | 49,330,931 | 2.8% |
+| 3 | 109,514 | 27,379 | 5 | 14,534 | 5,778 | 4,411.3 | 25,783,066 | 1,117,071 | 24,665,995 | 9.6% |
+| 4 | 109,514 | 27,379 | 9 | 21,198 | 9,225 | 4,411.4 | 25,783,541 | 1,117,091 | 24,666,449 | 13.4% |
+| 5 | 54,757 | 13,689 | 13 | 27,863 | 12,672 | 2,205.9 | 12,892,799 | 558,590 | 12,334,209 | 28.9% |
+| 6 | 54,757 | 13,689 | 13 | 27,863 | 12,672 | 2,205.9 | 12,892,799 | 558,590 | 12,334,209 | 28.9% |
+| 7 | 27,379 | 6,845 | 13 | 27,863 | 12,672 | 1,103.1 | 6,447,190 | 279,329 | 6,167,861 | 44.9% |
+| 8 | 27,379 | 6,845 | 13 | 27,863 | 12,672 | 1,103.1 | 6,447,190 | 279,329 | 6,167,861 | 44.9% |
+| 9 | 13,689 | 3,422 | 13 | 27,863 | 12,672 | 551.7 | 3,224,386 | 139,699 | 3,084,687 | 62.0% |
+| 10 | 13,689 | 3,422 | 13 | 27,863 | 12,672 | 551.7 | 3,224,386 | 139,699 | 3,084,687 | 62.0% |
+
+### Fee scenario high, price USD 0.005 per IGN
+
+| Year | Subsidy to miners, USD/day | Pool (20%) to provers, USD/day | Tips to miners+provers, USD/day | Job income to provers, USD/day (IGN jobs + external) | Burn, USD/day | Sustained hash, GH/s | 34% weight attack: rent 1.04 N for 20 d, USD | Attacker's subsidy over 20 d, USD | Net cost, USD | Fees as % of total security spend |
+|---|---|---|---|---|---|---|---|---|---|---|
+| 1 | 10,546 | 2,637 | 0 | 2,002 | 103 | 424.8 | 2,482,856 | 107,572 | 2,375,285 | 13.2% |
+| 2 | 10,951 | 2,738 | 1 | 9,943 | 634 | 441.1 | 2,578,322 | 111,708 | 2,466,615 | 42.1% |
+| 3 | 5,476 | 1,369 | 1 | 38,132 | 1,608 | 220.6 | 1,289,220 | 55,856 | 1,233,364 | 84.8% |
+| 4 | 5,476 | 1,369 | 1 | 66,322 | 2,583 | 220.6 | 1,289,239 | 55,857 | 1,233,382 | 90.6% |
+| 5 | 2,738 | 684 | 1 | 94,511 | 3,557 | 110.3 | 644,698 | 27,932 | 616,766 | 96.5% |
+| 6 | 2,738 | 684 | 1 | 94,511 | 3,557 | 110.3 | 644,698 | 27,932 | 616,766 | 96.5% |
+| 7 | 1,369 | 342 | 1 | 94,511 | 3,557 | 55.2 | 322,417 | 13,969 | 308,448 | 98.2% |
+| 8 | 1,369 | 342 | 1 | 94,511 | 3,557 | 55.2 | 322,417 | 13,969 | 308,448 | 98.2% |
+| 9 | 684 | 171 | 1 | 94,511 | 3,557 | 27.6 | 161,277 | 6,987 | 154,289 | 99.1% |
+| 10 | 684 | 171 | 1 | 94,511 | 3,557 | 27.6 | 161,277 | 6,987 | 154,289 | 99.1% |
+
+### Fee scenario high, price USD 0.02 per IGN
+
+| Year | Subsidy to miners, USD/day | Pool (20%) to provers, USD/day | Tips to miners+provers, USD/day | Job income to provers, USD/day (IGN jobs + external) | Burn, USD/day | Sustained hash, GH/s | 34% weight attack: rent 1.04 N for 20 d, USD | Attacker's subsidy over 20 d, USD | Net cost, USD | Fees as % of total security spend |
+|---|---|---|---|---|---|---|---|---|---|---|
+| 1 | 42,185 | 10,546 | 0 | 2,609 | 412 | 1,699.2 | 9,931,425 | 430,286 | 9,501,138 | 4.7% |
+| 2 | 43,806 | 10,951 | 3 | 12,773 | 2,534 | 1,764.5 | 10,313,290 | 446,831 | 9,866,459 | 18.9% |
+| 3 | 21,903 | 5,476 | 3 | 44,529 | 6,433 | 882.3 | 5,156,880 | 223,426 | 4,933,454 | 61.9% |
+| 4 | 21,903 | 5,476 | 4 | 76,286 | 10,331 | 882.3 | 5,156,957 | 223,429 | 4,933,528 | 73.6% |
+| 5 | 10,951 | 2,738 | 5 | 108,043 | 14,230 | 441.2 | 2,578,790 | 111,728 | 2,467,062 | 88.8% |
+| 6 | 10,951 | 2,738 | 5 | 108,043 | 14,230 | 441.2 | 2,578,790 | 111,728 | 2,467,062 | 88.8% |
+| 7 | 5,476 | 1,369 | 5 | 108,043 | 14,230 | 220.7 | 1,289,668 | 55,876 | 1,233,793 | 94.0% |
+| 8 | 5,476 | 1,369 | 5 | 108,043 | 14,230 | 220.7 | 1,289,668 | 55,876 | 1,233,793 | 94.0% |
+| 9 | 2,738 | 684 | 5 | 108,043 | 14,230 | 110.4 | 645,108 | 27,950 | 617,158 | 96.9% |
+| 10 | 2,738 | 684 | 5 | 108,043 | 14,230 | 110.4 | 645,108 | 27,950 | 617,158 | 96.9% |
+
+### Fee scenario high, price USD 0.1 per IGN
+
+| Year | Subsidy to miners, USD/day | Pool (20%) to provers, USD/day | Tips to miners+provers, USD/day | Job income to provers, USD/day (IGN jobs + external) | Burn, USD/day | Sustained hash, GH/s | 34% weight attack: rent 1.04 N for 20 d, USD | Attacker's subsidy over 20 d, USD | Net cost, USD | Fees as % of total security spend |
+|---|---|---|---|---|---|---|---|---|---|---|
+| 1 | 210,924 | 52,731 | 1 | 5,846 | 2,058 | 8,495.9 | 49,657,124 | 2,151,432 | 47,505,692 | 2.2% |
+| 2 | 219,028 | 54,757 | 13 | 27,863 | 12,672 | 8,822.6 | 51,566,448 | 2,234,155 | 49,332,293 | 9.2% |
+| 3 | 109,514 | 27,379 | 17 | 78,647 | 32,164 | 4,411.5 | 25,784,399 | 1,117,128 | 24,667,271 | 36.5% |
+| 4 | 109,514 | 27,379 | 20 | 129,430 | 51,656 | 4,411.6 | 25,784,783 | 1,117,145 | 24,667,638 | 48.6% |
+| 5 | 54,757 | 13,689 | 23 | 180,214 | 71,148 | 2,206.1 | 12,893,950 | 558,640 | 12,335,310 | 72.5% |
+| 6 | 54,757 | 13,689 | 23 | 180,214 | 71,148 | 2,206.1 | 12,893,950 | 558,640 | 12,335,310 | 72.5% |
+| 7 | 27,379 | 6,845 | 23 | 180,214 | 71,148 | 1,103.3 | 6,448,342 | 279,379 | 6,168,963 | 84.0% |
+| 8 | 27,379 | 6,845 | 23 | 180,214 | 71,148 | 1,103.3 | 6,448,342 | 279,379 | 6,168,963 | 84.0% |
+| 9 | 13,689 | 3,422 | 23 | 180,214 | 71,148 | 551.9 | 3,225,538 | 139,749 | 3,085,789 | 91.3% |
+| 10 | 13,689 | 3,422 | 23 | 180,214 | 71,148 | 551.9 | 3,225,538 | 139,749 | 3,085,789 | 91.3% |
+
+## 2. The year the attack gets cheap: the 20-day 34% weight attack's net cost by year and price (base fee scenario)
+
+| Year | Net cost at USD 0.005 | at 0.02 | at 0.10 | Sustained hash at 0.005, GH/s | at 0.02 | at 0.10 |
+|---|---|---|---|---|---|---|
+| 1 | 2,375,278 | 9,501,111 | 47,505,556 | 424.8 | 1,699.2 | 8,495.9 |
+| 2 | 2,466,547 | 9,866,186 | 49,330,931 | 441.1 | 1,764.5 | 8,822.4 |
+| 3 | 1,233,300 | 4,933,199 | 24,665,995 | 220.6 | 882.3 | 4,411.3 |
+| 4 | 1,233,322 | 4,933,290 | 24,666,449 | 220.6 | 882.3 | 4,411.4 |
+| 5 | 616,710 | 2,466,842 | 12,334,209 | 110.3 | 441.2 | 2,205.9 |
+| 6 | 616,710 | 2,466,842 | 12,334,209 | 110.3 | 441.2 | 2,205.9 |
+| 7 | 308,393 | 1,233,572 | 6,167,861 | 55.2 | 220.6 | 1,103.1 |
+| 8 | 308,393 | 1,233,572 | 6,167,861 | 55.2 | 220.6 | 1,103.1 |
+| 9 | 154,234 | 616,937 | 3,084,687 | 27.6 | 110.3 | 551.7 |
+| 10 | 154,234 | 616,937 | 3,084,687 | 27.6 | 110.3 | 551.7 |
+
+Reading. Because the sustained hash is proportional to the subsidy and the attack cost is proportional to the hash, the ratio of attack cost to 20 days of subsidy is a constant: 1.04 x 281 / 24.8 = 11.8x the honest fleet's 20-day cost, minus the 51% the attacker earns back. The subsidy never 'falls under' the attack cost in ratio terms; what the halvings do is shrink both until the absolute number is small. The rows name the year the net cost of the veto drops under USD 1 M and under USD 100 k at each price, which is the honest statement.
+
+## 3. The audits, and who pays the second one
+
+| Review | Low, USD | High, USD | Source |
+|---|---|---|---|
+| Finality rule review (phase 4 gate) | 50,000 | 100,000 | funding.md section 2 |
+| Node fork audit before public testnet | 60,000 | 120,000 | funding.md section 2 |
+| Mixer cryptanalysis, two reviews (genesis gate) | 80,000 | 160,000 | funding.md section 2, the brief B1 to B8 |
+| Execution layer and proving audit before mainnet | 80,000 | 150,000 | funding.md section 2 |
+| Client and release process audit | 20,000 | 40,000 | funding.md section 2 |
+| SECOND cryptanalysis after a class or era change (year 3) | 80,000 | 160,000 | the brief's question; priced as the first |
+
+What the entity's own lines could earn (every one an input, none a forecast): the Ember dev fee at 1% of the rewards of the miners who keep it on, the entity's own provers' pool and job income, and the app share on the contracts it deploys.
+
+| Year | Price | Dev fee ceiling at 100% on Ember, USD/year | At 50% | At 20% | Entity's provers at 5% of the pool, USD/year | Second cryptanalysis as % of the 50% dev fee |
+|---|---|---|---|---|---|---|
+| 1 | 0.005 | 48,150 | 24,075 | 9,630 | 48,150 | 665% |
+| 1 | 0.02 | 192,600 | 96,300 | 38,520 | 192,600 | 166% |
+| 1 | 0.1 | 963,000 | 481,500 | 192,600 | 963,000 | 33% |
+| 2 | 0.005 | 50,000 | 25,000 | 10,000 | 50,000 | 640% |
+| 2 | 0.02 | 200,000 | 100,000 | 40,000 | 200,000 | 160% |
+| 2 | 0.1 | 1,000,000 | 500,000 | 200,000 | 1,000,000 | 32% |
+| 3 | 0.005 | 25,000 | 12,500 | 5,000 | 25,000 | 1280% |
+| 3 | 0.02 | 100,000 | 50,000 | 20,000 | 100,000 | 320% |
+| 3 | 0.1 | 500,000 | 250,000 | 100,000 | 500,000 | 64% |
+| 4 | 0.005 | 25,000 | 12,500 | 5,000 | 25,000 | 1280% |
+| 4 | 0.02 | 100,000 | 50,000 | 20,000 | 100,000 | 320% |
+| 4 | 0.1 | 500,000 | 250,000 | 100,000 | 500,000 | 64% |
+| 5 | 0.005 | 12,500 | 6,250 | 2,500 | 12,500 | 2560% |
+| 5 | 0.02 | 50,000 | 25,000 | 10,000 | 50,000 | 640% |
+| 5 | 0.1 | 250,000 | 125,000 | 50,000 | 250,000 | 128% |
+
diff --git a/sim/horizon/economy-and-utility/signal_game.py b/sim/horizon/economy-and-utility/signal_game.py
new file mode 100644
index 000000000..d93c57efa
--- /dev/null
+++ b/sim/horizon/economy-and-utility/signal_game.py
@@ -0,0 +1,80 @@
+#!/usr/bin/env python3
+"""Horizon lane 4, task 5: miner-signalled parameters, the arithmetic of the thresholds.
+
+Lane 3 (sim/horizon/consensus-security/signalling.py, signalling_results.md) already prices the 95-percent
+one-day rule: the 6-percent holdout, the forced flip at 19 N for a day, signal-then-defect on a PoW class.
+This script adds the other two thresholds the spec carries (60 percent over two weeks for a parameter the
+genesis rules leave to miners, spec 5.5 and 5.8; 90 percent for an upgrade, spec 5.7), the 30-percent pool,
+and the cost of forcing or blocking each. Pure Python; arithmetic.
+
+    python3 signal_game.py > signal_game_out.md
+
+Inputs: rental USD 11.7 per GH/s-hour (measured, bench-log 6 Oct 2026); network hash N at 1, 10, 100, 1000 GH/s;
+subsidy 31.688 IGN/s, 80 percent to producers; IGN prices 0.005, 0.02, 0.10 (assumptions).
+"""
+
+RENT_GHS_H = 11.7
+SUBSIDY = 31.688 * 0.8 * 3600  # IGN per hour to producers
+PRICES = [0.005, 0.02, 0.10]
+NETS = [1, 10, 100, 1000]
+RULES = [
+    ("parameter (60% of blue blocks, 14-day window)", 0.60, 14 * 24, "spec 5.5, 5.8"),
+    ("upgrade (90% of blue blocks, window open O-5.3; 14 days assumed)", 0.90, 14 * 24, "spec 5.7"),
+    ("class activation (95% of blue blocks, 1-day window, floor height)", 0.95, 24, "P2, counter-asic-3-node.md section 6"),
+    ("class activation, 7 consecutive days (lane 3's proposal)", 0.95, 7 * 24, "signalling_results.md section 5"),
+]
+
+
+def usd(x):
+    return f"{x:,.0f}"
+
+
+def main():
+    print("# Signalling thresholds: what it costs to force, what it costs to block (generated by signal_game.py)\n")
+    print("## 1. Forcing a signal with rented hash against a fleet that does not want it\n")
+    print("A renter must hold the threshold share of the window's blue blocks: rent = T/(1-T) x N for the whole window. Earns its own producer subsidy meanwhile.\n")
+    print("| Rule | Threshold | Window h | Rented hash as a multiple of N | Rent at N = 1 GH/s | 10 | 100 | 1000 | Subsidy earned back at USD 0.02, N = 100 GH/s |")
+    print("|---|---|---|---|---|---|---|---|---|")
+    for name, th, hours, src in RULES:
+        mult = th / (1 - th)
+        row = [name, f"{th:.0%}", f"{hours}", f"{mult:.1f} N"]
+        for n in NETS:
+            row.append(usd(mult * n * RENT_GHS_H * hours))
+        earned = th * SUBSIDY * hours * 0.02
+        row.append(usd(earned))
+        print("| " + " | ".join(row) + " |")
+    print()
+    print("## 2. Blocking a signal: the holdout a rule tolerates, and what a 30% pool can do\n")
+    print("| Rule | Holdout that blocks | Rented holdout as a multiple of N | Rent per day at 1 GH/s | at 100 GH/s | A 30% pool alone | A 30% pool plus a 6% renter | What ends the block |")
+    print("|---|---|---|---|---|---|---|---|")
+    for name, th, hours, src in RULES:
+        hold = 1 - th
+        mult = (hold + 0.001) / (1 - hold - 0.001)
+        can30 = "blocks it" if 0.30 > hold else "cannot block"
+        can36 = "blocks it" if 0.36 > hold else "cannot block"
+        ends = "the proposal fails and is re-registered; nothing else" if th < 0.95 else "the floor height (the fixed height returns with its 6 October hazard)"
+        print(f"| {name} | over {hold:.0%} of blue blocks | {mult:.3f} N | {usd(mult * 1 * RENT_GHS_H * 24)} | {usd(mult * 100 * RENT_GHS_H * 24)} | {can30} | {can36} | {ends} |")
+    print()
+    print("Reading. At 60% a 30% pool can block nothing on its own and needs 11 more points of blocks; at 90% and 95% any pool above 10% or 5% holds a veto, "
+          "and the devnet's top three vote keys held 34.5% of blocks on 4 October 2026 (litepaper, Governance). A holdout's cost is near zero because it mines and is paid "
+          "like anyone (lane 3 section 2); the only thing that ends a holdout against a class change is the floor height, and against a parameter or upgrade proposal, nothing: "
+          "the proposal fails. So the 95% rule hands every pool above 5% a veto over class changes until the floor, and the 90% rule hands every pool above 10% a permanent veto over upgrades.\n")
+    print("## 3. Signal then defect, by what is being signalled\n")
+    print("| What is signalled | What a defector (signalled, then runs the old rule) produces after the flip | Who is hurt | Bound |")
+    print("|---|---|---|---|")
+    print("| A PoW class (P2) | headers whose PoW fails under the new program: refused by every node (`check_header_version`, then the PoW check; lane 3 section 4) | the defector alone: its blocks are lost | its own income |")
+    print("| An execution parameter (`B_p`, a floor, the pgas table; spec 5.11) | valid blocks (blocks carry transactions only, design 1.1) but a different execution state: every proof record it sees fails its native statement and pays nothing; every record it signs fails everyone else's | the defector's provers earn nothing; its users read wrong balances until it notices. The consensus digest carries `Params.fees` (spec 5.11), so a node whose digest differs is refused at the handshake (G12, X18): the defector is isolated, not split | zero to others IF the parameter is in the digest and the digest is in the handshake; a parameter outside the digest is a silent state fork for that node |")
+    print("| A consensus rule (an upgrade, 5.7) | blocks valid under the old rule and invalid under the new: a chain split for the defector and for anyone following it | the defector's hashers and anyone who trusts its blocks | the defector's share of hash; the 2/3 finality floor keeps the split's locks from certifying while honest weight stays |")
+    print()
+    print("## 4. The two-week 60% window against a day of 95%: what each buys\n")
+    print("| Rule | Honest latency from 'the fleet is ready' to 'in force' | Renter's cost to force at 100 GH/s | Who can block | Suits |")
+    print("|---|---|---|---|---|")
+    print(f"| 60% over 14 days | 14 days | {usd(1.5 * 100 * RENT_GHS_H * 14 * 24)} | over 40% of blocks | economic dials where a hostile majority can only move a bounded number (the floors, `B_p`, the window) |")
+    print(f"| 90% over 14 days | 14 days | {usd(9 * 100 * RENT_GHS_H * 14 * 24)} | over 10% of blocks | rule changes where a split is the danger |")
+    print(f"| 95% over 1 day | 1 day | {usd(19 * 100 * RENT_GHS_H * 24)} | over 5% of blocks, until the floor | the PoW class flip, where the floor is the backstop and the danger is a half-updated fleet |")
+    print(f"| 95% over 7 days | 7 days | {usd(19 * 100 * RENT_GHS_H * 7 * 24)} | over 5% of blocks, until the floor | the same, with a week of public warning |")
+    print()
+
+
+if __name__ == "__main__":
+    main()
diff --git a/sim/horizon/economy-and-utility/signal_game_out.md b/sim/horizon/economy-and-utility/signal_game_out.md
new file mode 100644
index 000000000..4f09ebcdf
--- /dev/null
+++ b/sim/horizon/economy-and-utility/signal_game_out.md
@@ -0,0 +1,41 @@
+# Signalling thresholds: what it costs to force, what it costs to block (generated by signal_game.py)
+
+## 1. Forcing a signal with rented hash against a fleet that does not want it
+
+A renter must hold the threshold share of the window's blue blocks: rent = T/(1-T) x N for the whole window. Earns its own producer subsidy meanwhile.
+
+| Rule | Threshold | Window h | Rented hash as a multiple of N | Rent at N = 1 GH/s | 10 | 100 | 1000 | Subsidy earned back at USD 0.02, N = 100 GH/s |
+|---|---|---|---|---|---|---|---|---|
+| parameter (60% of blue blocks, 14-day window) | 60% | 336 | 1.5 N | 5,897 | 58,968 | 589,680 | 5,896,800 | 367,966 |
+| upgrade (90% of blue blocks, window open O-5.3; 14 days assumed) | 90% | 336 | 9.0 N | 35,381 | 353,808 | 3,538,080 | 35,380,800 | 551,949 |
+| class activation (95% of blue blocks, 1-day window, floor height) | 95% | 24 | 19.0 N | 5,335 | 53,352 | 533,520 | 5,335,200 | 41,615 |
+| class activation, 7 consecutive days (lane 3's proposal) | 95% | 168 | 19.0 N | 37,346 | 373,464 | 3,734,640 | 37,346,400 | 291,307 |
+
+## 2. Blocking a signal: the holdout a rule tolerates, and what a 30% pool can do
+
+| Rule | Holdout that blocks | Rented holdout as a multiple of N | Rent per day at 1 GH/s | at 100 GH/s | A 30% pool alone | A 30% pool plus a 6% renter | What ends the block |
+|---|---|---|---|---|---|---|---|
+| parameter (60% of blue blocks, 14-day window) | over 40% of blue blocks | 0.669 N | 188 | 18,798 | cannot block | cannot block | the proposal fails and is re-registered; nothing else |
+| upgrade (90% of blue blocks, window open O-5.3; 14 days assumed) | over 10% of blue blocks | 0.112 N | 32 | 3,155 | blocks it | blocks it | the proposal fails and is re-registered; nothing else |
+| class activation (95% of blue blocks, 1-day window, floor height) | over 5% of blue blocks | 0.054 N | 15 | 1,509 | blocks it | blocks it | the floor height (the fixed height returns with its 6 October hazard) |
+| class activation, 7 consecutive days (lane 3's proposal) | over 5% of blue blocks | 0.054 N | 15 | 1,509 | blocks it | blocks it | the floor height (the fixed height returns with its 6 October hazard) |
+
+Reading. At 60% a 30% pool can block nothing on its own and needs 11 more points of blocks; at 90% and 95% any pool above 10% or 5% holds a veto, and the devnet's top three vote keys held 34.5% of blocks on 4 October 2026 (litepaper, Governance). A holdout's cost is near zero because it mines and is paid like anyone (lane 3 section 2); the only thing that ends a holdout against a class change is the floor height, and against a parameter or upgrade proposal, nothing: the proposal fails. So the 95% rule hands every pool above 5% a veto over class changes until the floor, and the 90% rule hands every pool above 10% a permanent veto over upgrades.
+
+## 3. Signal then defect, by what is being signalled
+
+| What is signalled | What a defector (signalled, then runs the old rule) produces after the flip | Who is hurt | Bound |
+|---|---|---|---|
+| A PoW class (P2) | headers whose PoW fails under the new program: refused by every node (`check_header_version`, then the PoW check; lane 3 section 4) | the defector alone: its blocks are lost | its own income |
+| An execution parameter (`B_p`, a floor, the pgas table; spec 5.11) | valid blocks (blocks carry transactions only, design 1.1) but a different execution state: every proof record it sees fails its native statement and pays nothing; every record it signs fails everyone else's | the defector's provers earn nothing; its users read wrong balances until it notices. The consensus digest carries `Params.fees` (spec 5.11), so a node whose digest differs is refused at the handshake (G12, X18): the defector is isolated, not split | zero to others IF the parameter is in the digest and the digest is in the handshake; a parameter outside the digest is a silent state fork for that node |
+| A consensus rule (an upgrade, 5.7) | blocks valid under the old rule and invalid under the new: a chain split for the defector and for anyone following it | the defector's hashers and anyone who trusts its blocks | the defector's share of hash; the 2/3 finality floor keeps the split's locks from certifying while honest weight stays |
+
+## 4. The two-week 60% window against a day of 95%: what each buys
+
+| Rule | Honest latency from 'the fleet is ready' to 'in force' | Renter's cost to force at 100 GH/s | Who can block | Suits |
+|---|---|---|---|---|
+| 60% over 14 days | 14 days | 589,680 | over 40% of blocks | economic dials where a hostile majority can only move a bounded number (the floors, `B_p`, the window) |
+| 90% over 14 days | 14 days | 3,538,080 | over 10% of blocks | rule changes where a split is the danger |
+| 95% over 1 day | 1 day | 533,520 | over 5% of blocks, until the floor | the PoW class flip, where the floor is the backstop and the danger is a half-updated fleet |
+| 95% over 7 days | 7 days | 3,734,640 | over 5% of blocks, until the floor | the same, with a week of public warning |
+
diff --git a/sim/horizon/economy-and-utility/stress.py b/sim/horizon/economy-and-utility/stress.py
new file mode 100644
index 000000000..0bb41f6ea
--- /dev/null
+++ b/sim/horizon/economy-and-utility/stress.py
@@ -0,0 +1,777 @@
+#!/usr/bin/env python3
+"""Igneum economy under stress, Horizon lane 4 (6 October 2026): sim/economy/sim.py re-run with the
+measured card table and the measured rental price.
+
+A copy of sim/economy/sim.py (4 October 2026) with these changes, and nothing else in the market model:
+
+  1. The four approximate card classes are replaced by the ELEVEN cards measured on rented GPUs on
+     6 October 2026 (docs/analysis/prover-tiers-real-cards.md): hash rate and watts while mining, the
+     v1 shard time proving alone (patched server, 2^26, compressed) and the shard time BESIDE the running
+     miner. Hybrid mode uses the beside time, and costs the miner the measured 4% of hash (5090,
+     bench-log proving v1 step 1; approximate for the other cards) plus about 70 W, instead of the
+     earlier model's full hash loss for the proof's duration and a 5-s program swap.
+  2. Operator 0 (the 20% farm) is a RENTER: its cost is USD 0.0117 per MH/s-hour for every card-hour it
+     keeps on (bench-log "Rental cost of hash, 6 October 2026"), not electricity. It switches off when
+     the rent beats its income like any operator.
+  3. The exclusive window is 25 s and the external claim timeout 120 s (the project lead's decision of 6 October
+     2026, ledger P9), the design values the phase 4 devnet starts from.
+  4. The backlog is a FIFO of shard arrivals; a shard unproven for longer than the 600-block record
+     window (spec 7.7 item 3) expires: its pool credit is STRANDED in the escrow (no rule returns it),
+     which is what the 20% pool does when nobody claims.
+  5. Burn per day is reported: 10% of IGN-settled external jobs plus the base fee of the chain's
+     paid traffic at the adopted floors (0.51 IGN per 30,000-pgas shard of transfers: 0.30 proving + 0.21
+     execution; spec 5.11). The proving load is one shard per block (every block has its shard, measured
+     on the devnet) and the paid content a fraction of a shard (0.03 at launch traffic).
+  6. New scenarios: price x10 and /10, external demand zero (c) and x100, a cartel of the top 10% of
+     weight that never proves, a refusal by every prover for days 10 to 20, and the first halving.
+
+Usage
+  python3 stress.py                                   the lane's eight scenarios, 3 seeds, markdown
+  python3 stress.py --scenarios a,p10 --seeds 1       a subset
+  python3 stress.py --set pool=0.3,window=20          override parameters
+
+Run on the Mac under the main checkout's lock: /Users/joshm/Projects/igneum/tools/lock/with-lock.sh run nice -n 19 python3 stress.py
+All figures are approximate unless the source line says measured. See docs/analysis/horizon/economy-and-utility.md.
+"""
+import argparse
+import math
+import sys
+import time
+
+import numpy as np
+
+# ---------------------------------------------------------------- parameters
+P = dict(
+    tick=180.0,            # s per tick
+    days=30,
+    n_ops=1000,
+    emission=31.688,       # IGN per block, pre-halving, ramp complete (spec 2.5, designed)
+    pool=0.20,             # proving pool share of emission (spec 2.5, 5.3)
+    window=25.0,           # sortition exclusive window, s (P9 decision 6 Oct 2026; was 10)
+    assignees=8,           # provers drawn per shard (spec 7.2)
+    burn=0.10,             # external job burn (spec 5.4)
+    timeout=120.0,         # external job claim timeout, s (P9 decision 6 Oct 2026; was 300)
+    shards_per_block=1.0,  # proving load: shards per block; every block has at least its one (empty) shard (measured on the devnet, bench-log proving v1: one shard a block); 3 = the 4 October busy value
+    content_shards_per_block=0.03,  # shards of paid transactions per block at launch traffic (utility.py: 1 M transfers a day = 0.039); only these burn a base fee
+    job_work=10.0,         # shard-equivalents of work per external job
+    ext_usd_day=2000.0,    # external demand, dollars per day (customer brief: market low millions/yr)
+    ext_mult=1.0,          # scenario multiplier on the dollar price per job
+    price0=0.012,          # $ per IGN at t=0 (assumption)
+    vol_day=0.05,          # price daily volatility
+    hyb_loss=0.04,         # hash lost while a hybrid card proves (measured 5090; approximate elsewhere)
+    hyb_extra_w=70.0,      # extra watts while a hybrid card proves (measured 5090; approximate elsewhere)
+    aggregation=4.0,       # aggregation plus inclusion, s, added to every block proof (approximate)
+    waste=0.5,             # wasted duplicate attempts per open-claim shard (race losers)
+    hyst_lo=0.05, hyst_hi=0.25,
+    dwell_ticks=20,        # minimum ticks between switches of one (operator, class): 1 h
+    decide_every=4,        # ticks between decisions: 12 min
+    ema_ticks=20.0,        # observation window for realised rates: 1 h
+    farm_share=0.20,       # operator 0 share of total hash
+    renter_usd_mhs_h=0.0117,   # the renter's cost per MH/s-hour (measured, bench-log 6 Oct 2026); 0 = electricity
+    backlog_rule=600.0,    # s of oldest age per halving of B_p (design 4.3)
+    record_window=600.0,   # s after which an unproven shard's credit is stranded (spec 7.7 item 3)
+    burn_per_shard=0.51,   # IGN of base fee burned per 30,000-pgas shard of transfers at the floors (spec 5.11)
+    cartel_weight=0.10,    # the cartel scenario: the top operators holding this share of weight never prove
+    refuse_from=10.0, refuse_to=20.0,   # the refusal scenario: no prover answers or claims between these days
+)
+
+# card classes: the eleven measured cards (docs/analysis/prover-tiers-real-cards.md, 6 October 2026)
+CLS = ["3060", "3080", "3090", "4060Ti16", "4060Ti8", "4060", "4070", "4090", "5070", "5090", "A5000"]
+HASH = np.array([23.78, 40.82, 37.79, 17.58, 19.07, 17.07, 24.99, 52.25, 41.89, 98.48, 47.70])    # MH/s, measured
+PMINE = np.array([103.7, 204.9, 228.8, 72.3, 72.6, 115.0, 91.1, 183.1, 137.0, 258.2, 222.7])     # W mining, measured (4060 read 0 W: 115 W rated, approximate)
+PPROVE = PMINE.copy()                                                                               # W proving alone, approximate (the mining draw)
+PIDLE = np.maximum(15.0, 0.2 * PMINE)                                                               # W proving-ready idle, approximate
+TPROVE = np.array([14.4, 7.1, 14.9, 11.6, 9.6, 18.4, 12.1, 6.3, 4.8, 6.3, 8.3])                   # s per v1 shard alone, measured
+TBESIDE = np.array([37.5, 25.6, 19.9, 34.6, 26.3, 22.1, 27.3, 26.1, 37.2, 10.7, 34.6])             # s per shard beside the miner, measured (8 GB rows: core-only)
+CANHYB = np.array([True, True, True, True, False, False, True, True, True, True, True])             # compressed shard beside the miner fits (8 GB: core-only, not paid as compressed)
+CANPROVE = np.ones(11, bool)
+MIX = np.array([0.20, 0.05, 0.08, 0.05, 0.07, 0.10, 0.12, 0.10, 0.08, 0.10, 0.05])                  # fleet mix by count, approximate (installed-base shape)
+OFF, MINE, PROVE, HYB = 0, 1, 2, 3
+NC = len(CLS)
+
+
+def build_population(rng, p, extra=0):
+    n = p["n_ops"] + extra
+    size = np.maximum(1, np.round(rng.lognormal(math.log(5.0), 1.2, n))).astype(int)
+    cards = np.zeros((n, NC), dtype=float)
+    for i in range(n):
+        cards[i] = rng.multinomial(size[i], MIX)
+    z = (np.log(size) - np.log(5.0)) / 1.2
+    elec = np.exp(rng.normal(math.log(0.10) - 0.25 * z, 0.40, n))
+    elec = np.clip(elec, 0.02, 0.40)
+    # operator 0: the farm, all 5090s, sized to farm_share of total hash; a renter at the measured rental price
+    cards[0] = 0
+    rest = (cards[1:p["n_ops"]] * HASH).sum()
+    farm_hash = rest * p["farm_share"] / (1 - p["farm_share"])
+    cards[0, CLS.index("5090")] = max(1, round(farm_hash / HASH[CLS.index("5090")]))
+    elec[0] = 0.05
+    hyst = rng.uniform(p["hyst_lo"], p["hyst_hi"], n)
+    phase = rng.integers(0, p["decide_every"], n)
+    return cards, elec, hyst, phase
+
+
+class Sim:
+    def __init__(self, scenario, seed, p):
+        self.p = dict(p)
+        self.sc = scenario
+        self.rng = np.random.default_rng(seed)
+        p = self.p
+        extra = 0
+        if scenario == "f":
+            extra = 200
+        if scenario == "e":
+            p["farm_share"] = 0.30
+        if scenario == "halving":
+            p["emission"] = 31.688 / 2
+        self.cards, self.elec, self.hyst, self.phase = build_population(self.rng, p, extra)
+        self.n = self.cards.shape[0]
+        self.n_base = p["n_ops"]
+        self.active = np.ones(self.n, bool)
+        if extra:
+            self.active[self.n_base:] = False
+            base_hash = (self.cards[: self.n_base] * HASH).sum()
+            pool_hash = (self.cards[self.n_base:] * HASH).sum()
+            self.cards[self.n_base:] *= base_hash / pool_hash
+            self.cards[self.n_base:] = np.round(self.cards[self.n_base:])
+            self.elec[self.n_base:] = np.clip(self.elec[self.n_base:], 0.02, 0.08)
+        self.mode = np.full((self.n, NC), MINE, dtype=int)
+        self.mode[self.cards == 0] = OFF
+        for i in range(self.n):
+            for c in range(NC):
+                if self.cards[i, c] > 0 and CANPROVE[c] and self.rng.random() < 0.20:
+                    self.mode[i, c] = PROVE
+        if not self.active.all():
+            self.mode[~self.active] = OFF
+        self.fixed_mine = np.zeros(self.n, bool)
+        self.withhold = np.zeros(self.n, bool)
+        if scenario == "e":
+            self.fixed_mine[0] = True
+            self.withhold[0] = True
+            self.mode[0] = np.where(self.cards[0] > 0, MINE, OFF)
+        self.dead = np.zeros(self.n, bool)
+        self.hist = np.zeros((self.n, 30))
+        h0 = (self.cards * HASH * (self.mode != OFF)).sum(1)
+        h0[~self.active] = 0
+        self.hist[:] = (h0 / h0.sum() * 86400.0)[:, None]
+        self.w = self.hist.sum(1)
+        if scenario == "cartel":
+            # the operators holding the top cartel_weight of the 30-day weight never answer an assignment and never claim
+            order = np.argsort(-self.w)
+            cum = np.cumsum(self.w[order]) / self.w.sum()
+            k = int(np.searchsorted(cum, p["cartel_weight"])) + 1
+            self.withhold[order[:k]] = True
+            self.fixed_mine[order[:k]] = True
+            for i in order[:k]:
+                self.mode[i] = np.where(self.cards[i] > 0, MINE, OFF)
+            self.cartel_n = k
+        else:
+            self.cartel_n = 0
+        self.cards_active = self.cards[self.active].sum()
+        self.day = 0
+        self.last_switch = np.full((self.n, NC), -10**9, dtype=int)
+        self.price = p["price0"]
+        self.H_est = h0.sum() * 1e6
+        self.D = self.H_est * 1.0
+        self.queue = []            # FIFO of [arrival tick, shards remaining, pool credit per shard in IGN]
+        self.q = 0.0
+        self.age = 0.0
+        self.duty = np.zeros((self.n, NC))
+        self.R_hash = p["emission"] * (1 - p["pool"]) / self.H_est
+        self.open_pc = np.zeros(NC)
+        self.asg_pw = 0.0
+        self.asg_pw_h = 0.0
+        self.asg_ext_pw = 0.0
+        self.t_open = p["window"] + TPROVE.min()
+        self.eligible = CANPROVE.copy()
+        self.ok60 = 1.0
+        self.ok20 = 1.0
+        self.hourly = []
+        self.hour_acc = []
+        self.cls_profit = np.zeros(NC)
+        self.cls_cards = np.zeros(NC)
+        self.cls_shards = np.zeros(NC)
+        self.ext_served = 0.0
+        self.ext_demand = 0.0
+        self.burned_ign = 0.0
+        self.burn_ext_ign = 0.0
+        self.burn_base_ign = 0.0
+        self.stranded_ign = 0.0
+        self.pool_paid_ign = 0.0
+        self.farm_rent_usd = 0.0
+        self.farm_income_usd = 0.0
+        self.switches = 0
+
+    def refusing(self, day_f):
+        return self.sc == "refuse" and self.p["refuse_from"] <= day_f < self.p["refuse_to"]
+
+    # ------------------------------------------------------------ one tick
+    def step(self, t):
+        p = self.p
+        T = p["tick"]
+        day_f = t * T / 86400.0
+        rng = self.rng
+        if self.sc == "d" and day_f >= 10 and not self.dead[0]:
+            self.dead[0] = True
+            self.mode[0] = OFF
+        if self.sc == "f" and day_f >= 10 and not self.active[self.n_base]:
+            self.active[self.n_base:] = True
+            self.mode[self.n_base:] = np.where(self.cards[self.n_base:] > 0, MINE, OFF)
+            self.cards_active = self.cards[self.active].sum()
+        ext_mult = p["ext_mult"]
+        if self.sc == "b" and day_f >= 7:
+            ext_mult = 10.0
+        if self.sc == "x100" and day_f >= 7:
+            ext_mult = 100.0
+        if self.sc == "c":
+            ext_mult = 0.0
+        # price
+        dt = T / 86400.0
+        self.price *= math.exp(p["vol_day"] * math.sqrt(dt) * rng.standard_normal() - 0.5 * p["vol_day"] ** 2 * dt)
+        if self.sc == "b" and 7 <= day_f < 14:
+            self.price *= math.exp(math.log(0.30) / (7 * 86400.0 / T))
+        if self.sc in ("p10", "pd10") and day_f >= 7 and not getattr(self, "shocked", False):
+            self.shocked = True
+            self.price *= 10.0 if self.sc == "p10" else 0.1
+        price = self.price
+        refusing = self.refusing(day_f)
+
+        cards, mode = self.cards, self.mode
+        is_m = mode == MINE
+        is_p = mode == PROVE
+        is_h = mode == HYB
+        hcards = cards * HASH * 1e6
+        h_op = (hcards * (is_m + is_h * (1 - p["hyb_loss"] * self.duty))).sum(1)
+        H = h_op.sum()
+        if H <= 0:
+            H = 1.0
+        lam = T * H / self.D
+        blocks = rng.poisson(lam)
+        self.H_est += (H - self.H_est) * min(1.0, blocks / 120.0)
+        ratio = self.H_est / self.D
+        ratio = min(max(ratio, 0.90 ** blocks), 1.03 ** blocks)
+        self.D *= ratio
+        E = p["emission"]
+        mined = rng.multinomial(blocks, h_op / H) if blocks > 0 else np.zeros(self.n, int)
+        self.hist[:, self.day % 30] += mined
+        self.w += mined
+        w = self.w
+        W = w.sum()
+        mine_ign = mined * E * (1 - p["pool"])
+        pool_ign = blocks * E * p["pool"]
+
+        spb = p["shards_per_block"] * 0.5 ** math.floor(self.age / p["backlog_rule"])
+        shards = rng.poisson(blocks * spb) if blocks > 0 else 0
+        pool_per_shard = pool_ign / shards if shards > 0 else 0.0
+        self.burn_base_ign += blocks * p["content_shards_per_block"] * p["burn_per_shard"]
+
+        capP = np.where(is_p, cards * T / TPROVE, 0.0) * CANPROVE
+        capH = np.where(is_h, cards * T / TBESIDE, 0.0) * CANHYB
+        capP[self.dead | ~self.active] = 0
+        capH[self.dead | ~self.active] = 0
+        if refusing:
+            capP[:] = 0
+            capH[:] = 0
+        capP_op = capP.sum(1)
+        capH_op = capH.sum(1)
+        resp = ((capP_op + capH_op) >= 1.0) & ~self.withhold & ~self.dead
+        a = (w * resp).sum() / W if W > 0 else 0.0
+        p_resp = 1 - (1 - a) ** p["assignees"]
+        shards_served = np.zeros((self.n, NC))
+        jobs_usd = p["ext_usd_day"] * ext_mult
+        job_price = 50.0 * ext_mult
+        jobs = rng.poisson(p["ext_usd_day"] / 50.0 * T / 86400.0) if jobs_usd > 0 else 0
+        ext_work = jobs * p["job_work"]
+        ext_pay_per_shard = job_price / p["job_work"] * (1 - p["burn"])
+        eligible = (p["job_work"] * TPROVE <= p["timeout"]) & CANPROVE
+        ext_served = np.zeros((self.n, NC))
+        ext_asg = [0.0]
+        ext_open = np.zeros(NC)
+        self.ext_demand += ext_work
+        internal_first = pool_per_shard * price >= ext_pay_per_shard
+
+        def serve_external():
+            nonlocal ext_work
+            if ext_work <= 0:
+                return
+            capE_P = capP * eligible
+            capE_H = capH * eligible
+            capE_op = capE_P.sum(1) + capE_H.sum(1)
+            respE = (capE_op >= 1.0) & ~self.withhold & ~self.dead
+            aE = (w * respE).sum() / W if W > 0 else 0.0
+            pE = 1 - (1 - aE) ** p["assignees"]
+            s_asg = ext_work * pE
+            over = 0.0
+            wrE = w * respE
+            WrE = wrE.sum()
+            if s_asg > 0 and WrE > 0:
+                x = s_asg * wrE / WrE
+                got = np.minimum(x, capE_op)
+                over = s_asg - got.sum()
+                capE = capE_P + capE_H
+                frac = capE / np.maximum(capE.sum(1, keepdims=True), 1e-9)
+                alloc = got[:, None] * frac
+                ext_served[:] += alloc
+                ext_asg[0] += got.sum()
+                usedP = alloc * (capE_P / np.maximum(capE, 1e-9))
+                capP[:] -= usedP
+                capH[:] -= alloc - usedP
+            else:
+                over = s_asg
+            open_w = ext_work - s_asg + over
+            for lat, cap, c in self.open_order(capP, capH):
+                if not eligible[c] or open_w <= 0:
+                    continue
+                tot = cap[:, c].sum()
+                if tot <= 0:
+                    continue
+                take = min(open_w, tot / (1 + p["waste"]))
+                alloc = cap[:, c] * (take / tot)
+                ext_served[:, c] += alloc
+                ext_open[c] += take
+                cap[:, c] -= alloc * (1 + p["waste"])
+                open_w -= take
+            ext_work = open_w
+
+        if not internal_first:
+            serve_external()
+        wr = w * resp
+        Wr = wr.sum()
+        if Wr > 0:
+            capPH = capP + capH
+            mixP = (wr[:, None] * (capP / np.maximum(capPH.sum(1, keepdims=True), 1e-9))).sum(0) / Wr
+            mixH = (wr[:, None] * (capH / np.maximum(capPH.sum(1, keepdims=True), 1e-9))).sum(0) / Wr
+        else:
+            mixP = np.zeros(NC)
+            mixH = np.zeros(NC)
+        t_open = p["window"] + np.inf
+        for lat, cap, c in self.open_order(capP, capH):
+            if cap[:, c].sum() > 0:
+                t_open = p["window"] + lat
+                break
+        LA_P = TPROVE
+        LA_H = TBESIDE
+        winP = (LA_P <= t_open) * mixP
+        winH = (LA_H <= t_open) * mixH
+        p_win = winP.sum() + winH.sum()
+        s_asg = shards * p_resp * p_win
+        if s_asg > 0 and Wr > 0:
+            x = s_asg * wr / Wr
+            capPH_op = capP.sum(1) + capH.sum(1)
+            got = np.minimum(x, capPH_op)
+            overflow = s_asg - got.sum()
+            capPH = capP + capH
+            frac = capPH / np.maximum(capPH.sum(1, keepdims=True), 1e-9)
+            alloc = got[:, None] * frac
+            shards_served += alloc
+            usedP = alloc * (capP / np.maximum(capPH, 1e-9))
+            usedH = alloc - usedP
+            capP -= usedP
+            capH -= usedH
+        else:
+            overflow = s_asg
+        open_new = shards - s_asg + overflow
+        # the FIFO backlog: new open shards join the queue, the queue is served oldest first, the expired strand their credit
+        if open_new > 0:
+            self.queue.append([t, float(open_new), pool_per_shard])
+        q_prev = self.q
+        open_total = sum(e[1] for e in self.queue)
+        served_open = 0.0
+        open_by_cls = np.zeros(NC)
+        open_lat = np.zeros(NC)
+        for lat, cap, c in self.open_order(capP, capH):
+            tot = cap[:, c].sum()
+            if tot <= 0 or open_total - served_open <= 0:
+                continue
+            take = min(open_total - served_open, tot / (1 + p["waste"]))
+            alloc = cap[:, c] * (take / tot)
+            shards_served[:, c] += alloc
+            open_by_cls[c] += take
+            open_lat[c] += take * lat
+            cap[:, c] -= alloc * (1 + p["waste"])
+            served_open += take
+        # drain the FIFO by what was served (oldest first), paying each served shard its own credit
+        remaining = served_open
+        paid_open_ign = 0.0
+        while remaining > 1e-12 and self.queue:
+            e = self.queue[0]
+            take = min(remaining, e[1])
+            e[1] -= take
+            remaining -= take
+            paid_open_ign += take * e[2]
+            if e[1] <= 1e-12:
+                self.queue.pop(0)
+        # expire what has waited longer than the record window
+        keep = []
+        for e in self.queue:
+            if (t - e[0]) * T > p["record_window"]:
+                self.stranded_ign += e[1] * e[2]
+            else:
+                keep.append(e)
+        self.queue = keep
+        self.q = sum(e[1] for e in self.queue)
+        self.age = ((t - self.queue[0][0]) * T + p["window"]) if self.queue else 0.0
+        if internal_first:
+            serve_external()
+        self.ext_served += ext_served.sum()
+        wait = q_prev / max(served_open / T, 1e-9) if q_prev > 0 else 0.0
+        thr60 = 60.0 - p["aggregation"]
+        thr20 = 20.0 - p["aggregation"]
+        p_q = min(1.0, max(0.0, (open_new - max(0.0, served_open - q_prev)) / max(shards, 1e-9))) if shards > 0 else 0.0
+        pa = p_resp
+        p_assigned_won = pa * p_win
+        okA60 = pa * (((LA_P <= t_open) & (LA_P <= thr60)) * mixP).sum() + pa * (((LA_H <= t_open) & (LA_H <= thr60)) * mixH).sum()
+        okA20 = pa * (((LA_P <= t_open) & (LA_P <= thr20)) * mixP).sum() + pa * (((LA_H <= t_open) & (LA_H <= thr20)) * mixH).sum()
+        if open_by_cls.sum() > 0:
+            l_open = p["window"] + wait + open_lat / np.maximum(open_by_cls, 1e-9)
+            sh = open_by_cls / open_by_cls.sum()
+            okO60 = (sh * (l_open <= thr60)).sum()
+            okO20 = (sh * (l_open <= thr20)).sum()
+        else:
+            okO60 = okO20 = 0.0
+        p_open_served = max(0.0, 1 - p_assigned_won - p_q)
+        ps60 = min(1.0, okA60 + p_open_served * okO60)
+        ps20 = min(1.0, okA20 + p_open_served * okO20)
+        lam_s = max(spb, 1e-9)
+
+        def block_ok(ps):
+            return (math.exp(-lam_s * (1 - ps)) - math.exp(-lam_s)) / (1 - math.exp(-lam_s))
+        self.ok60 = block_ok(ps60) if not refusing else 0.0
+        self.ok20 = block_ok(ps20) if not refusing else 0.0
+        # income and power
+        # assigned shards are paid this tick's credit; open shards are paid the credit of the shard they cleared (FIFO)
+        asg_served = shards_served.sum() - open_by_cls.sum()
+        prove_ign = shards_served * pool_per_shard
+        # correct the open part to the FIFO credit: scale the open-served rows by paid_open / (served_open x pool_per_shard)
+        if served_open > 0 and pool_per_shard > 0:
+            corr = paid_open_ign / (served_open * pool_per_shard)
+        else:
+            corr = 1.0
+        # the fluid allocation cannot tell assigned from open per operator; apply the correction to the whole row proportionally
+        tot_served = max(shards_served.sum(), 1e-9)
+        prove_ign *= (asg_served + served_open * corr) / tot_served if tot_served > 1e-9 else 1.0
+        self.pool_paid_ign += prove_ign.sum()
+        ext_usd = ext_served * ext_pay_per_shard
+        self.burn_ext_ign += ext_served.sum() * (job_price / p["job_work"]) * p["burn"] / max(price, 1e-9)
+        self.burned_ign = self.burn_ext_ign + self.burn_base_ign
+        busyP = np.where(is_p, np.minimum(1.0, (shards_served + ext_served) * TPROVE / np.maximum(cards * T, 1e-9)), 0.0) * CANPROVE
+        dutyH = np.where(is_h, np.minimum(1.0, (shards_served + ext_served) * TBESIDE / np.maximum(cards * T, 1e-9)), 0.0) * CANHYB
+        self.duty = dutyH
+        kwh = cards * T / 3600.0 / 1000.0
+        power_w = is_m * PMINE + is_p * (busyP * PPROVE + (1 - busyP) * PIDLE) + is_h * (PMINE + dutyH * p["hyb_extra_w"])
+        cost = kwh * power_w * self.elec[:, None]
+        if p["renter_usd_mhs_h"] > 0:
+            # the renter pays per card-hour whatever the card does, unless it is off
+            on = (mode[0] != OFF)
+            cost[0] = cards[0] * on * HASH * p["renter_usd_mhs_h"] * T / 3600.0
+            self.farm_rent_usd += cost[0].sum()
+        hsh = hcards * (is_m + is_h * (1 - p["hyb_loss"] * self.duty))
+        hfrac = hsh / np.maximum(hsh.sum(1, keepdims=True), 1e-9)
+        mine_usd = (mine_ign * price)[:, None] * hfrac
+        inc = mine_usd + prove_ign * price + ext_usd
+        self.farm_income_usd += inc[0].sum()
+        profit = inc - cost
+        al = 1.0 / p["ema_ticks"]
+        self.R_hash += ((blocks * E * (1 - p["pool"]) / H / T) - self.R_hash) * al
+        nPH_cls = (np.where(is_p | is_h, cards, 0.0)).sum(0)
+        open_inc = open_by_cls * pool_per_shard * price * corr + ext_open * ext_pay_per_shard
+        open_pc = np.where(nPH_cls > 0, open_inc / np.maximum(nPH_cls, 1e-9), 0.0) * 3600.0 / T
+        self.open_pc += (open_pc - self.open_pc) * al
+        asg_usd = (s_asg - overflow) * pool_per_shard * price
+        asg_pw = asg_usd / max(Wr, 1e-9) * 3600.0 / T
+        self.asg_pw += (asg_pw - self.asg_pw) * al
+        asg_ext_pw = ext_asg[0] * ext_pay_per_shard / max(W, 1e-9) * 3600.0 / T
+        self.asg_ext_pw += (asg_ext_pw - self.asg_ext_pw) * al
+        self.t_open = t_open
+        self.eligible = eligible
+        self.decide(t, price, w, Wr, p_resp, p_win, t_open)
+        ca = max(self.cards_active, 1)
+        n_p = (cards * is_p).sum()
+        n_h = (cards * is_h).sum()
+        n_m = (cards * is_m).sum()
+        self.hour_acc.append((
+            H / 1e6, (hcards * (mode != OFF)).sum() / 1e6, n_p / ca,
+            n_h / ca, 1 - (n_p + n_h + n_m) / ca,
+            blocks / T, self.D, self.q, self.age, self.ok60, self.ok20, price,
+            ext_served.sum(), ext_work, shards,
+            (self.burn_ext_ign + self.burn_base_ign), self.stranded_ign, float((cards[0] * (mode[0] != OFF)).sum()),
+        ))
+        self.cls_profit += profit.sum(0)
+        self.cls_cards += (cards * self.active[:, None]).sum(0)
+        self.cls_shards += shards_served.sum(0)
+        if len(self.hour_acc) * T >= 3600:
+            arr = np.array(self.hour_acc)
+            self.hourly.append(arr.mean(0).tolist() + [arr[:, 8].max(), arr[:, 0].min()])
+            self.hour_acc = []
+        if (t + 1) * T % 86400 == 0:
+            self.day += 1
+            self.w -= self.hist[:, self.day % 30]
+            self.hist[:, self.day % 30] = 0
+
+    def open_order(self, capP, capH):
+        """Open-claim service order: the fastest responder wins the race. PROVE cards at their alone shard
+        time, HYBRID cards at their beside-the-miner shard time."""
+        order = [(TPROVE[c], capP, c) for c in range(NC) if CANPROVE[c]] + [(TBESIDE[c], capH, c) for c in range(NC) if CANHYB[c]]
+        order.sort(key=lambda x: x[0])
+        return order
+
+    # ------------------------------------------------------------ decisions
+    def decide(self, t, price, w, Wr, p_resp, p_win, t_open):
+        p = self.p
+        due = ((t + self.phase) % p["decide_every"] == 0) & self.active & ~self.dead & ~self.fixed_mine
+        if not due.any():
+            return
+        idx = np.nonzero(due)[0]
+        cards = self.cards[idx]
+        elec = self.elec[idx][:, None]
+        n_pcards = (self.cards[idx] * ((self.mode[idx] == PROVE) | (self.mode[idx] == HYB))).sum(1, keepdims=True)
+        v_mine = HASH * 1e6 * self.R_hash * price * 3600.0 - PMINE * elec / 1000.0
+        per_w = w[idx][:, None] / np.maximum(n_pcards + (n_pcards == 0) * cards, 1e-9)
+        asg_int = self.asg_pw * per_w
+        asg_ext = self.asg_ext_pw * per_w * self.eligible
+        v_prove = self.open_pc + asg_ext + asg_int * (TPROVE <= t_open) - PIDLE * elec / 1000.0 - 0.3 * (PPROVE - PIDLE) * elec / 1000.0
+        v_hyb = v_mine * (1 - p["hyb_loss"] * np.minimum(1.0, self.duty[idx])) + 0.9 * (asg_ext + asg_int * (TBESIDE <= t_open)) - p["hyb_extra_w"] * np.minimum(1.0, self.duty[idx]) * elec / 1000.0
+        # the renter's cost replaces electricity for operator 0
+        if p["renter_usd_mhs_h"] > 0:
+            r0 = np.nonzero(idx == 0)[0]
+            if len(r0):
+                rent = HASH * p["renter_usd_mhs_h"]
+                v_mine[r0] = HASH * 1e6 * self.R_hash * price * 3600.0 - rent
+                v_prove[r0] = self.open_pc + asg_ext[r0] + asg_int[r0] * (TPROVE <= t_open) - rent
+                v_hyb[r0] = v_mine[r0] + 0.9 * (asg_ext[r0] + asg_int[r0] * (TBESIDE <= t_open))
+        v_prove[:, ~CANPROVE] = -1e9
+        v_hyb[:, ~CANHYB] = -1e9
+        v_off = np.zeros_like(v_mine)
+        V = np.stack([v_off, v_mine, v_prove, v_hyb], 0)
+        cur = self.mode[idx]
+        v_cur = np.take_along_axis(V, cur[None], 0)[0]
+        best = V.argmax(0)
+        v_best = V.max(0)
+        hy = self.hyst[idx][:, None]
+        gain = v_best - v_cur
+        ok = (gain > hy * np.abs(v_cur) + 1e-4) & (cards > 0) & ((t - self.last_switch[idx]) >= p["dwell_ticks"])
+        ok &= best != cur
+        if ok.any():
+            newmode = np.where(ok, best, cur)
+            self.mode[idx] = newmode
+            ls = self.last_switch[idx]
+            ls[ok] = t
+            self.last_switch[idx] = ls
+            self.switches += int(ok.sum())
+
+    def run(self):
+        nt = int(self.p["days"] * 86400 / self.p["tick"])
+        for t in range(nt):
+            self.step(t)
+        return np.array(self.hourly)
+
+
+COLS = ["hash_MHs", "hash_pot", "frac_prove", "frac_hyb", "frac_off", "bps", "D", "q", "age", "ok60", "ok20",
+        "price", "ext_served", "ext_lost", "shards", "burn_cum", "stranded_cum", "farm_cards_on", "age_max", "hash_min"]
+
+
+def metrics(hourly, sim):
+    h = hourly
+    d = {}
+    hrs = h.shape[0]
+    nd = hrs // 24
+
+    def day_mean(col, d0, d1):
+        d0, d1 = min(d0, nd - 1), min(d1, nd)
+        return h[d0 * 24:d1 * 24, COLS.index(col)].mean()
+
+    def day_max(col, dd):
+        dd = min(dd, nd)
+        return h[(dd - 1) * 24:dd * 24, COLS.index(col)].max()
+    pre_hash = day_mean("hash_MHs", 1, 7) if nd >= 7 else h[:, COLS.index("hash_MHs")].mean()
+    d["hash_pre"] = pre_hash
+    d["hash_min_ratio"] = h[24:, COLS.index("hash_min")].min() / pre_hash if nd >= 2 else 1.0
+    d["hash_d30_ratio"] = day_mean("hash_MHs", 29, 30) / pre_hash
+    d["hours_hash_lt50"] = int((h[24:, COLS.index("hash_MHs")] < 0.5 * pre_hash).sum())
+    d["mining_hash_share"] = (h[:, COLS.index("hash_MHs")] / np.maximum(h[:, COLS.index("hash_pot")], 1e-9)).mean()
+    for dd in (1, 10, 20, 30):
+        d[f"prove_d{dd}"] = day_mean("frac_prove", dd - 1, dd)
+        d[f"hyb_d{dd}"] = day_mean("frac_hyb", dd - 1, dd)
+        d[f"off_d{dd}"] = day_mean("frac_off", dd - 1, dd)
+    d["age_max"] = h[:, COLS.index("age_max")].max()
+    d["q_max"] = h[:, COLS.index("q")].max()
+    d["age_d30"] = day_max("age_max", 30)
+    daily_age = h[:, COLS.index("age_max")].reshape(-1, 24).max(1)
+    x = np.arange(10)
+    slope = np.polyfit(x, daily_age[-10:], 1)[0] if nd >= 10 else 0.0
+    d["backlog_growing"] = bool(slope > 0 and daily_age[-1] > 60)
+    d["backlog_600"] = bool(d["age_max"] > 600)
+    d["ok60_mean"] = h[:, COLS.index("ok60")].mean()
+    d["ok60_min_day"] = h[:, COLS.index("ok60")].reshape(-1, 24).mean(1).min()
+    d["ok20_mean"] = h[:, COLS.index("ok20")].mean()
+    d["bps_mean"] = h[:, COLS.index("bps")].mean()
+    d["D_end_over_start"] = h[-1, COLS.index("D")] / h[min(24, hrs - 1), COLS.index("D")]
+    d["price_end"] = h[-1, COLS.index("price")]
+    d["price_mean"] = h[:, COLS.index("price")].mean()
+    es, el = h[:, COLS.index("ext_served")].sum(), h[:, COLS.index("ext_lost")].sum()
+    d["ext_delivered"] = es / (es + el) if es + el > 0 else float("nan")
+    fp = h[:, COLS.index("frac_prove")]
+    ma = np.convolve(fp, np.ones(24) / 24, mode="same")
+    dev = (fp - ma)[-240:]
+    d["osc_cross_per_day"] = float((np.diff(np.sign(dev)) != 0).sum() / 10.0)
+    d["osc_amp_pts"] = float((np.percentile(fp[-240:], 90) - np.percentile(fp[-240:], 10)) * 100)
+    days = sim.p["days"]
+    d["profit_card_day"] = sim.cls_profit / np.maximum(sim.cls_cards / (days * 86400 / sim.p["tick"]), 1e-9) / days
+    d["shard_share"] = sim.cls_shards / max(sim.cls_shards.sum(), 1e-9)
+    d["switches"] = sim.switches
+    d["miner_shortage"] = bool(d["hours_hash_lt50"] >= 1)
+    d["window_miss"] = bool(d["ok60_min_day"] < 0.90)
+    d["oscillation"] = bool(d["osc_amp_pts"] > 10 and d["osc_cross_per_day"] >= 1)
+    # burn and the pool
+    d["burn_ign_day"] = sim.burned_ign / days
+    d["burn_ext_ign_day"] = sim.burn_ext_ign / days
+    d["burn_base_ign_day"] = sim.burn_base_ign / days
+    d["burn_usd_day"] = d["burn_ign_day"] * d["price_mean"]
+    d["stranded_ign"] = sim.stranded_ign
+    d["stranded_ign_day"] = sim.stranded_ign / days
+    pool_total = sim.p["emission"] * sim.p["pool"] * 86400 * days
+    d["pool_paid_share"] = sim.pool_paid_ign / pool_total
+    d["stranded_share"] = sim.stranded_ign / pool_total
+    d["farm_cards_on_d30"] = day_mean("farm_cards_on", 29, 30)
+    d["farm_cards"] = float(sim.cards[0].sum())
+    d["farm_margin"] = (sim.farm_income_usd - sim.farm_rent_usd) / sim.farm_rent_usd if sim.farm_rent_usd > 0 else float("nan")   # undefined when the farm pays electricity (renter_usd_mhs_h=0)
+    d["cartel_n"] = sim.cartel_n
+    return d
+
+
+SCEN = {
+    "a": "baseline (measured cards, 25-s window, 120-s timeout, farm is a renter at USD 0.0117 per MH/s-h)",
+    "p10": "coin price x10 at day 7",
+    "pd10": "coin price /10 at day 7",
+    "c": "external demand zero for 30 days",
+    "x100": "external demand pays x100 from day 7",
+    "cartel": "the operators holding the top 10% of weight never answer an assignment or claim",
+    "refuse": "every prover refuses (no assignment answered, no open claim) from day 10 to day 20",
+    "halving": "the first halving: 15.844 IGN per block throughout",
+    "b": "external pays 10x from day 7, coin price falls 70% over days 7 to 14 (the 4 October worst case)",
+    "d": "the 20% operator disappears at day 10",
+    "e": "a 30% operator never fulfils its assignments",
+    "f": "a pool with hash equal to the network's arrives at day 10 (2x hash)",
+}
+DEFAULT = "a,p10,pd10,c,x100,cartel,refuse,halving"
+
+
+def fmt(v, nd=2):
+    if isinstance(v, (bool, np.bool_)):
+        return "yes" if v else "no"
+    if isinstance(v, (int, np.integer)):
+        return f"{v:,}"
+    if isinstance(v, float):
+        if abs(v) >= 1000:
+            return f"{v:,.0f}"
+        return f"{v:.{nd}f}"
+    return str(v)
+
+
+def agg(ms, key):
+    vals = np.array([m[key] for m in ms], dtype=float)
+    return vals.mean(), vals.min(), vals.max()
+
+
+def run_scenarios(scen, seeds, p, quiet=False):
+    out = {}
+    for s in scen:
+        ms = []
+        for seed in seeds:
+            t0 = time.time()
+            sim = Sim(s, seed, p)
+            h = sim.run()
+            ms.append(metrics(h, sim))
+            if not quiet:
+                print(f"<!-- scenario {s} seed {seed}: {time.time() - t0:.1f} s -->", file=sys.stderr)
+        out[s] = ms
+    return out
+
+
+def table_scenarios(out):
+    keys = [
+        ("mining_hash_share", "hash mining share (mean)"),
+        ("prove_d10", "cards proving, day 10"), ("prove_d30", "cards proving, day 30"),
+        ("hyb_d30", "cards hybrid, day 30"), ("off_d30", "cards off, day 30"),
+        ("hash_min_ratio", "hash min / pre-event"), ("hash_d30_ratio", "hash day 30 / pre-event"), ("hours_hash_lt50", "T1: hours hash under 50%"),
+        ("q_max", "backlog max, shards"), ("age_max", "T2: oldest unproven age max, s"), ("age_d30", "age max day 30, s"),
+        ("ok60_mean", "blocks proven within 60 s"), ("ok60_min_day", "T4: worst day within 60 s"), ("ok20_mean", "blocks proven within 20 s"),
+        ("D_end_over_start", "difficulty end / start"),
+        ("ext_delivered", "external jobs delivered"), ("price_mean", "price mean, $"), ("price_end", "price at day 30, $"),
+        ("osc_amp_pts", "T5: proving-share 10-90 pct range, points"),
+        ("burn_ign_day", "burn, IGN per day (base fee + job burn)"), ("burn_ext_ign_day", "of which external job burn, IGN per day"),
+        ("burn_usd_day", "burn, $ per day at the mean price"),
+        ("pool_paid_share", "share of the 20% pool paid out"), ("stranded_share", "share of the 20% pool stranded (expired shards)"),
+        ("stranded_ign_day", "stranded, IGN per day"),
+        ("farm_cards", "renter farm cards"), ("farm_cards_on_d30", "renter farm cards on, day 30"), ("farm_margin", "renter farm margin over rent"),
+        ("cartel_n", "cartel operators"),
+        ("switches", "mode switches (operator x class)"),
+    ]
+    scen = list(out)
+    lines = ["| Metric | " + " | ".join(f"{s} | {s} min | {s} max" for s in scen) + " |",
+             "|---|" + "---|" * (3 * len(scen))]
+    for k, label in keys:
+        row = [label]
+        for s in scen:
+            m, lo, hi = agg(out[s], k)
+            nd = 4 if k.startswith("price") else 2
+            row += [fmt(float(m), nd), fmt(float(lo), nd), fmt(float(hi), nd)]
+        lines.append("| " + " | ".join(row) + " |")
+    print("\n".join(lines))
+    print()
+    print("| Flag | " + " | ".join(scen) + " |")
+    print("|---|" + "---|" * len(scen))
+    for k, label in [("miner_shortage", "T1 miner shortage (hash under 50% of pre-event for 1 h or more)"),
+                     ("backlog_600", "T2 backlog over 600 s"),
+                     ("backlog_growing", "T3 growing backlog (positive 10-day trend and over 60 s at day 30)"),
+                     ("window_miss", "T4 window miss (a day under 90% of blocks within 60 s)"),
+                     ("oscillation", "T5 oscillation (proving-share 10-90 range over 10 points in the last 10 days)")]:
+        row = [label]
+        for s in scen:
+            n = sum(1 for m in out[s] if m[k])
+            row.append(f"{n}/{len(out[s])}")
+        print("| " + " | ".join(row) + " |")
+    print()
+    print("Operator profit by card class, $ per card-day (mean over seeds, all modes including off), and the share of shards each class proves:")
+    print()
+    print("| Scenario | " + " | ".join(CLS) + " | " + " | ".join("sh " + c for c in CLS) + " |")
+    print("|---|" + "---|" * (2 * NC))
+    for s in scen:
+        pr = np.mean([m["profit_card_day"] for m in out[s]], 0)
+        sh = np.mean([m["shard_share"] for m in out[s]], 0)
+        print(f"| {s} | " + " | ".join(f"{v:.3f}" for v in pr) + " | " + " | ".join(f"{v:.2f}" for v in sh) + " |")
+    print()
+
+
+def main():
+    ap = argparse.ArgumentParser()
+    ap.add_argument("--scenarios", default=DEFAULT)
+    ap.add_argument("--seeds", type=int, default=3)
+    ap.add_argument("--seed0", type=int, default=1)
+    ap.add_argument("--set", default="", help="k=v,k=v parameter overrides")
+    ap.add_argument("--days", type=int, default=None)
+    args = ap.parse_args()
+    p = dict(P)
+    for kv in filter(None, args.set.split(",")):
+        k, v = kv.split("=")
+        p[k] = float(v)
+    if args.days:
+        p["days"] = args.days
+    seeds = range(args.seed0, args.seed0 + args.seeds)
+    scen = args.scenarios.split(",")
+    print(f"# Igneum economy under stress (lane 4), {p['n_ops']} operators, {p['days']} days, seeds {list(seeds)}, tick {p['tick']:.0f} s, the eleven measured cards")
+    print()
+    print("Parameters: " + ", ".join(f"{k}={v}" for k, v in p.items()))
+    print()
+    print("Cards (measured, prover-tiers-real-cards.md): " + "; ".join(f"{c} {HASH[i]:.2f} MH/s {PMINE[i]:.0f} W alone {TPROVE[i]:.1f} s beside {TBESIDE[i]:.1f} s{'' if CANHYB[i] else ' (core-only beside)'}" for i, c in enumerate(CLS)))
+    print()
+    for s in scen:
+        print(f"- {s}: {SCEN[s]}")
+    print()
+    t0 = time.time()
+    out = run_scenarios(scen, seeds, p)
+    table_scenarios(out)
+    print(f"<!-- total {time.time() - t0:.0f} s -->")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/sim/horizon/economy-and-utility/utility.py b/sim/horizon/economy-and-utility/utility.py
new file mode 100644
index 000000000..a3318fbbb
--- /dev/null
+++ b/sim/horizon/economy-and-utility/utility.py
@@ -0,0 +1,385 @@
+#!/usr/bin/env python3
+"""Horizon lane 4, task 1: what IGN is for beyond gas, as demand curves with dollar numbers.
+
+Pure Python, no numpy. Arithmetic only; not run under the lock (it measures nothing).
+
+    python3 utility.py > utility_out.md
+
+Every input is labelled in INPUTS: measured (a bench-log or analysis file), cited (another project's
+document, named), designed (the spec), or approximate (from memory or a secondary source). Prices of
+IGN are the three inputs of docs/analysis/security-budget.md (USD 0.005, 0.02, 0.10) and are
+assumptions, never forecasts.
+
+Sections printed:
+  1. The supply side of proving: cost per v1 shard and per billion cycles, per measured card, alone
+     and beside its miner, at four network hash sizes; the renter's cost at the measured rental price.
+  2. The published prices this competes with (Boundless, Succinct, Bonsai, Ethereum L1 trackers, Taiko).
+  3. Demand curves (a) to (e): dollars per day at launch, year 2, year 5 under low/base/high, and the
+     burn each causes, at the three IGN prices.
+  4. The totals: fee income to miners and provers, external income to provers, and burn, per scenario,
+     which security_budget_10y.py reads as its fee scenarios.
+"""
+
+# ------------------------------------------------------------------ inputs
+INPUTS = {
+    # chain constants (designed, spec 2.5 and 5.11)
+    "subsidy_ign_per_s": 31.688,            # designed, spec 2.5, pre-halving, ramp complete
+    "producer_share": 0.80,                 # designed, spec 2.5
+    "pool_share": 0.20,                     # designed
+    "blocks_per_day": 86_400,               # designed, 1 block/s
+    "f_e_floor_ign_per_gas": 100e-9,        # adopted 5 Oct 2026, spec 5.11: 100 gwei
+    "f_p_floor_ign_per_pgas": 10_000e-9,    # adopted: 10,000 gwei per pgas
+    "intrinsic_pgas": 300,                  # adopted
+    "transfer_gas": 21_000,                 # Ethereum's rule
+    "B_e": 30_000_000,                      # implemented
+    "B_p": 120_000,                         # adopted
+    "S_p": 30_000,                          # adopted (30 M cycles)
+    "job_premium": 1.5,                     # designed, execution-layer design 6, parameter open
+    "job_burn": 0.10,                       # designed, spec 5.4
+    "cycles_per_pgas": 1_000,               # designed unit
+    # the v1 shard fixture (measured)
+    "v1_shard_cycles": 4_717_439,           # measured, prover-tiers-real-cards.md (fees-v1-shards2 shard 0)
+    # energy and rental
+    "elec_usd_per_kwh": 0.10,               # the brief's input
+    "rental_usd_per_mhs_hour": 0.0117,      # measured, bench-log "Rental cost of hash, 6 October 2026"
+    "hybrid_hash_loss": 0.04,               # measured on the 5090 only (bench-log, proving v1 step 1: 124.7 -> 119.7 MH/s); approximate for other cards
+    "hybrid_extra_w": 70.0,                 # measured on the 5090 only: power max 328.6 W mining+proving against 258 W mining (prover-tiers fleet row); approximate elsewhere
+    # IGN price inputs (assumptions, security-budget.md)
+    "prices": [0.005, 0.02, 0.10],
+    # proof record sizes (implemented, spec 7.7 and 7.8)
+    "shard_record_bytes": 274,
+    "segment_record_bytes": 586,
+    "segment_blocks": 8,
+    "compressed_proof_bytes": 1_272_897,    # measured, bench-log proving v1 (shard proof); the segment proof is 1,272,909
+    # storage prices (approximate)
+    "hdd_usd_per_tb": 15.0,                 # approximate, consumer HDD 2026
+    "object_store_usd_per_gb_month": 0.02,  # approximate, S3-standard class
+}
+
+# measured card table, docs/analysis/prover-tiers-real-cards.md (6 October 2026, rented Vast.ai boxes).
+# (name, vram GB, MH/s mining, W mining, shard alone s (patched 2^26 compressed), shard beside the miner s (compressed peak row),
+#  core-only beside s, mines-and-proves-compressed-beside?)
+CARDS = [
+    ("RTX 3060",        12, 23.78, 103.7, 14.4, 37.5, 27.2, True),
+    ("RTX 3080",        10, 40.82, 204.9,  7.1, 25.6, 19.2, True),
+    ("RTX 3090",        24, 37.79, 228.8, 14.9, 19.9, 13.3, True),
+    ("RTX 4060 Ti 16",  16, 17.58,  72.3, 11.6, 34.6, 25.9, True),
+    ("RTX 4060 Ti 8",    8, 19.07,  72.6,  9.6, None, 26.3, False),
+    ("RTX 4060",         8, 17.07, 115.0, 18.4, None, 22.1, False),   # power read 0.0 W on the box; 115 W is the card's rated draw, approximate
+    ("RTX 4070",        12, 24.99,  91.1, 12.1, 27.3, 14.3, True),
+    ("RTX 4090",        24, 52.25, 183.1,  6.3, 26.1, 10.6, True),
+    ("RTX 5070",        12, 41.89, 137.0,  4.8, 37.2, 19.8, True),
+    ("RTX 5090",        32, 98.48, 258.2,  6.3, 10.7,  7.4, True),
+    ("RTX A5000",       24, 47.70, 222.7,  8.3, 34.6, 18.2, True),
+]
+
+NET_HASH_GHS = [1, 10, 100, 1000]
+
+# ------------------------------------------------------------------ published prices (section 2)
+# Every row is cited to the file in this repository that recorded it, or marked approximate.
+COMPETITORS = [
+    ("Boundless (RISC Zero), Base mainnet", 0.21,
+     "median lock price about USD 0.21 per billion cycles, 8 provers, 8.4 T cycles in the explorer's trailing day; docs/design/developer-adoption.md 2b, secondary summary of 4 Oct 2026; approximate"),
+    ("Succinct Prover Network, example request", 0.046 + 0.46,
+     "quickstart example: base fee 0.2 PROVE plus up to 2.0 PROVE per billion PGU at USD 0.23 per PROVE = USD 0.046 plus up to 0.46 per billion PGU; example parameters, not a market price; developer-adoption.md 2b; approximate"),
+    ("RISC Zero Bonsai (hosted API)", None,
+     "no public per-cycle list price was ever published; Bonsai was priced on request and RISC Zero moved paid proving to Boundless in 2025; not cloned, approximate"),
+    ("Ethereum L1 block, ethproofs tracker cost, Sep 2026", 0.005 / 0.9,
+     "sub-half-cent per L1 block (frontier.md 2.6, secondary); an L1 block of about 15 to 30 M gas at the 14 to 44 SP1 cycles per gas measured on Igneum (base-fee-floor.md, developer-adoption.md 2b) is 0.2 to 1.3 B cycles, so about USD 0.004 to 0.025 per billion cycles at cluster cost; approximate"),
+    ("Taiko-class rollup, per batch proof", None,
+     "taiko-mono not cloned; Taiko Alethia proves batches through its own prover market (SGX plus ZK tiers, SP1 and RISC0 accepted); the ZK proof's cost per batch in 2026 is of the order of the ethproofs L1 figure times the batch's cycles, cents to tens of cents; approximate"),
+]
+
+
+def usd(x, nd=2):
+    if x is None:
+        return "n/a"
+    if x == 0:
+        return "0"
+    if abs(x) >= 1000:
+        return f"{x:,.0f}"
+    if abs(x) >= 1:
+        return f"{x:,.{nd}f}"
+    return f"{x:.6f}".rstrip("0").rstrip(".") if abs(x) >= 1e-6 else f"{x:.2e}"
+
+
+def ign(x):
+    if abs(x) >= 1000:
+        return f"{x:,.0f}"
+    if abs(x) >= 1:
+        return f"{x:,.3f}"
+    return f"{x:.6f}".rstrip("0").rstrip(".")
+
+
+# ------------------------------------------------------------------ section 1: supply side
+def shard_cost_alone(card, net_ghs, price):
+    """Cost to prove one v1 shard on a card that stops mining to prove: electricity plus the mining income forgone."""
+    name, vram, mhs, w, t_alone, t_beside, t_core, hyb = card
+    elec = w * t_alone / 3600.0 / 1000.0 * INPUTS["elec_usd_per_kwh"]
+    share = mhs / (net_ghs * 1000.0)
+    opp_ign = share * INPUTS["subsidy_ign_per_s"] * INPUTS["producer_share"] * t_alone
+    return elec, opp_ign * price, opp_ign
+
+
+def shard_cost_beside(card, net_ghs, price):
+    """Cost to prove one v1 shard beside the running miner: the measured 4% hash loss for the proof's duration plus the extra watts."""
+    name, vram, mhs, w, t_alone, t_beside, t_core, hyb = card
+    t = t_beside if t_beside else t_core
+    elec = INPUTS["hybrid_extra_w"] * t / 3600.0 / 1000.0 * INPUTS["elec_usd_per_kwh"]
+    share = mhs / (net_ghs * 1000.0)
+    opp_ign = share * INPUTS["subsidy_ign_per_s"] * INPUTS["producer_share"] * t * INPUTS["hybrid_hash_loss"]
+    return elec, opp_ign * price, opp_ign, t
+
+
+def renter_cost_per_shard(card):
+    name, vram, mhs, w, t_alone, t_beside, t_core, hyb = card
+    return mhs * INPUTS["rental_usd_per_mhs_hour"] / 3600.0 * t_alone
+
+
+def per_billion(x_per_shard):
+    return x_per_shard * 1e9 / INPUTS["v1_shard_cycles"]
+
+
+def section1():
+    print("## 1. The supply side: what one v1 shard (4,717,439 cycles) costs to prove, per measured card\n")
+    print("Inputs: the eleven cards of `docs/analysis/prover-tiers-real-cards.md` (measured 6 Oct 2026); electricity USD 0.10 per kWh (the brief); "
+          "the renter's cost USD 0.0117 per MH/s-hour (measured, bench-log 'Rental cost of hash'); the miner's opportunity cost = its hash share x 80% of 31.688 IGN/s "
+          "x the proof's seconds; beside the miner the loss is the measured 4% of hash (5090 only, approximate for the others) and about 70 extra watts.\n")
+    print("### 1.1 Proving alone (the card stops mining), cost per shard in USD at USD 0.02 per IGN, by network hash\n")
+    print("| Card | MH/s | W | Shard alone s | Electricity per shard | Forgone subsidy per shard, IGN at 1 GH/s | USD at 1 GH/s | 10 GH/s | 100 GH/s | 1 TH/s | Renter's cost per shard |")
+    print("|---|---|---|---|---|---|---|---|---|---|---|")
+    for c in CARDS:
+        elec, _, opp1 = shard_cost_alone(c, 1, 0.02)
+        row = [c[0], f"{c[2]:.2f}", f"{c[3]:.0f}", f"{c[4]:.1f}", usd(elec), ign(opp1)]
+        for n in NET_HASH_GHS:
+            e, o, _ = shard_cost_alone(c, n, 0.02)
+            row.append(usd(e + o))
+        row.append(usd(renter_cost_per_shard(c)))
+        print("| " + " | ".join(row) + " |")
+    print()
+    print("### 1.2 Proving beside the running miner (hybrid), cost per shard in USD at USD 0.02 per IGN\n")
+    print("| Card | Shard beside s | Extra electricity per shard | USD at 1 GH/s | 10 GH/s | 100 GH/s | 1 TH/s | USD per billion cycles at 100 GH/s |")
+    print("|---|---|---|---|---|---|---|---|")
+    for c in CARDS:
+        if not c[7]:
+            continue
+        e, o, oi, t = shard_cost_beside(c, 1, 0.02)
+        row = [c[0], f"{t:.1f}", usd(e)]
+        for n in NET_HASH_GHS:
+            e, o, oi, t = shard_cost_beside(c, n, 0.02)
+            row.append(usd(e + o))
+        e, o, oi, t = shard_cost_beside(c, 100, 0.02)
+        row.append(usd(per_billion(e + o)))
+        print("| " + " | ".join(row) + " |")
+    print()
+    print("### 1.3 Per billion cycles, the unit the market quotes (USD at 0.02 per IGN; the three IGN prices move only the opportunity term)\n")
+    print("| Card | Alone, 1 GH/s | Alone, 100 GH/s | Alone, 1 TH/s | Beside, 100 GH/s | Renter (rental price, no subsidy) | Electricity only |")
+    print("|---|---|---|---|---|---|---|")
+    for c in CARDS:
+        e1, o1, _ = shard_cost_alone(c, 1, 0.02)
+        e100, o100, _ = shard_cost_alone(c, 100, 0.02)
+        e1000, o1000, _ = shard_cost_alone(c, 1000, 0.02)
+        if c[7]:
+            eb, ob, _, _ = shard_cost_beside(c, 100, 0.02)
+            beside = usd(per_billion(eb + ob))
+        else:
+            beside = "core-only"
+        print(f"| {c[0]} | {usd(per_billion(e1 + o1))} | {usd(per_billion(e100 + o100))} | {usd(per_billion(e1000 + o1000))} | {beside} | {usd(per_billion(renter_cost_per_shard(c)))} | {usd(per_billion(e1))} |")
+    print()
+    print("Reading. The electricity of a shard is under a thousandth of a cent on every card. What a prover charges is set by the subsidy it forgoes, "
+          "which scales as 1 / network hash: at 1 GH/s a 5090 that stops mining to prove gives up 15.7 IGN per shard (USD 0.31 at 0.02), at 1 TH/s 0.016 IGN. "
+          "Beside its miner the same card gives up 4% of that for 10.7 s: at 100 GH/s about USD 0.0003 per shard, USD 0.06 per billion cycles, "
+          "which is under Boundless's USD 0.21 median and above the ethproofs cluster cost. The renter's row is the hard floor nobody beats for long: "
+          "USD 0.0020 per shard on a rented 5090, USD 0.43 per billion cycles.\n")
+
+
+def section2():
+    print("## 2. The published prices this competes with (per billion cycles)\n")
+    print("| Supplier | USD per billion cycles | Source and label |")
+    print("|---|---|---|")
+    for name, p, src in COMPETITORS:
+        print(f"| {name} | {usd(p) if p else 'not published'} | {src} |")
+    print()
+    print("Igneum's own floor as a quote: a billion-cycle job at the adopted floor is 1,000,000 pgas x 10,000 gwei x 1.5 = 15 IGN "
+          f"(USD {usd(15 * 0.005)}, {usd(15 * 0.02)}, {usd(15 * 0.10)} at the three prices). At USD 0.02 that is 1.4x Boundless's median; at 0.005 it is "
+          "a third of it; at 0.10 it is 7x. The floor was calibrated for spam, not for the market (base-fee-floor.md section 3), and it is a miner-signalled parameter.\n")
+
+
+# ------------------------------------------------------------------ section 3: demand curves
+def job_fee_ign(cycles):
+    pgas = cycles / INPUTS["cycles_per_pgas"]
+    return pgas * INPUTS["f_p_floor_ign_per_pgas"] * INPUTS["job_premium"]
+
+
+def transfer_fee_ign():
+    return INPUTS["transfer_gas"] * INPUTS["f_e_floor_ign_per_gas"] + INPUTS["intrinsic_pgas"] * INPUTS["f_p_floor_ign_per_pgas"]
+
+
+def batch_post_fee_ign(calldata_bytes):
+    gas = 21_000 + 16 * calldata_bytes
+    return gas * INPUTS["f_e_floor_ign_per_gas"] + INPUTS["intrinsic_pgas"] * INPUTS["f_p_floor_ign_per_pgas"]
+
+
+# scenario grid: (launch, year 2, year 5) x (low, base, high)
+SCEN = {
+    # (a) external proving demand, USD per day paid by customers (at launch on their own chain; IGN-settled from phase two)
+    "ext_usd_day": {"launch": (0, 500, 2000), "y2": (500, 2000, 10000), "y5": (1000, 10000, 100000)},
+    # (b) rollups settling on Igneum: count, batches per day each, calldata bytes per batch, cycles per batch proof job
+    "rollups": {"launch": (0, 1, 2), "y2": (1, 3, 10), "y5": (2, 10, 50)},
+    "batches_per_rollup_day": 1440,          # one a minute, approximate
+    "calldata_per_batch": 100_000,           # 100 KB, approximate
+    "cycles_per_batch_job": 1e9,             # a batch proof job of 1 B cycles, approximate (a Helios-class program is of that order, developer-adoption.md 2b)
+    # (c) bridges: light-client update jobs
+    "bridges": {"launch": (0, 1, 2), "y2": (1, 3, 5), "y5": (2, 5, 10)},
+    "bridge_updates_day": 225,               # one sync-committee finality update per 6.4-min epoch, approximate
+    "cycles_per_bridge_job": 1e9,            # approximate
+    # (d) payments: plain transfers per day
+    "transfers_day": {"launch": (10_000, 100_000, 1_000_000), "y2": (100_000, 1_000_000, 10_000_000), "y5": (1_000_000, 10_000_000, 30_000_000)},   # 30 M is above the EIP-1559 target of 17.28 M a day: the fee leaves the floor
+    "tip_gwei": 1,                           # the default wallet tip; node policy proposal developer-adoption.md 2a
+    # (e) shards per block (proof records in blocks), from the transfer traffic
+}
+LABELS = ["low", "base", "high"]
+PERIODS = ["launch", "y2", "y5"]
+
+
+def demand_rows():
+    """Return per period x scenario: dict of flows in IGN per day and USD-denominated external income."""
+    out = {}
+    tf = transfer_fee_ign()
+    for per in PERIODS:
+        for i, lab in enumerate(LABELS):
+            ext_usd = SCEN["ext_usd_day"][per][i]
+            n_roll = SCEN["rollups"][per][i]
+            n_br = SCEN["bridges"][per][i]
+            n_tx = SCEN["transfers_day"][per][i]
+            # (b) rollups
+            batches = n_roll * SCEN["batches_per_rollup_day"]
+            roll_burn_base = batches * batch_post_fee_ign(SCEN["calldata_per_batch"])
+            roll_job_fee = batches * job_fee_ign(SCEN["cycles_per_batch_job"])
+            roll_job_burn = roll_job_fee * INPUTS["job_burn"]
+            roll_job_provers = roll_job_fee * (1 - INPUTS["job_burn"])
+            # (c) bridges
+            upd = n_br * SCEN["bridge_updates_day"]
+            br_job_fee = upd * job_fee_ign(SCEN["cycles_per_bridge_job"])
+            br_burn = br_job_fee * INPUTS["job_burn"] + upd * batch_post_fee_ign(2_000)
+            br_provers = br_job_fee * (1 - INPUTS["job_burn"])
+            # (d) payments
+            # above the EIP-1559 target (B_p/2 = 200 transfers a block = 17.28 M a day) the fee leaves the floor; multiplier approximate
+            # above the target the fee leaves the floor and rations demand; the burn is then volume x a fee set by
+            # willingness to pay, which no model here knows, so the served volume is clamped at the target and flagged
+            target_day = INPUTS["B_p"] / 2 / INPUTS["intrinsic_pgas"] * INPUTS["blocks_per_day"]
+            served = min(n_tx, target_day)
+            mult = 1.0 if n_tx <= target_day else float("nan")
+            pay_burn = served * tf
+            pay_tip = served * INPUTS["transfer_gas"] * SCEN["tip_gwei"] * 1e-9
+            pay_tip_miners = pay_tip * 0.8
+            pay_tip_burn = pay_tip * 0.2   # a plain transfer has no registered frame: the app share burns
+            # (e) proof records: shards per block from pgas traffic
+            pgas_day = n_tx * INPUTS["intrinsic_pgas"]
+            shards_per_block = max(1.0, pgas_day / INPUTS["blocks_per_day"] / INPUTS["S_p"])
+            rec_bytes_block = shards_per_block * INPUTS["shard_record_bytes"] + INPUTS["segment_record_bytes"] / INPUTS["segment_blocks"]
+            proof_bytes_block = (shards_per_block + 1) * INPUTS["compressed_proof_bytes"]
+            out[(per, lab)] = dict(
+                ext_usd=ext_usd, n_roll=n_roll, n_br=n_br, n_tx=n_tx,
+                roll_burn=roll_burn_base + roll_job_burn, roll_provers=roll_job_provers, roll_fee=roll_job_fee + roll_burn_base,
+                br_burn=br_burn, br_provers=br_provers, br_fee=br_job_fee,
+                pay_burn=pay_burn + pay_tip_burn, pay_miners=pay_tip_miners, pay_mult=mult,
+                shards_per_block=shards_per_block, rec_bytes_block=rec_bytes_block, proof_bytes_block=proof_bytes_block,
+            )
+    return out
+
+
+def section3():
+    tf = transfer_fee_ign()
+    print("## 3. Demand curves (a) to (e): dollars per day and the burn each causes\n")
+    print("Scenario grid (every count is an assumption, labelled approximate): external proving USD per day "
+          f"{SCEN['ext_usd_day']}; rollups settling here {SCEN['rollups']} at {SCEN['batches_per_rollup_day']} batches a day, {SCEN['calldata_per_batch'] // 1000} KB calldata and a {SCEN['cycles_per_batch_job'] / 1e9:.0f} B-cycle proof job each; "
+          f"bridges {SCEN['bridges']} at {SCEN['bridge_updates_day']} updates a day of {SCEN['cycles_per_bridge_job'] / 1e9:.0f} B cycles; plain transfers {SCEN['transfers_day']} at a {SCEN['tip_gwei']} gwei tip. "
+          "Fees at the adopted floors (spec 5.11); a job = pgas x f_p x 1.5 (design 6), 90% to provers, 10% burned once IGN-settled (spec 5.4).\n")
+    print("### 3.1 Unit prices at the floors\n")
+    print("| Item | IGN | USD at 0.005 | at 0.02 | at 0.10 |")
+    print("|---|---|---|---|---|")
+    items = [
+        ("Plain transfer, base fee (burned)", tf),
+        ("Plain transfer, 1 gwei tip (80% miners and provers, 20% burned: no registered frame)", INPUTS["transfer_gas"] * 1e-9),
+        ("Rollup batch post, 100 KB calldata, base fee (burned)", batch_post_fee_ign(SCEN["calldata_per_batch"])),
+        ("Rollup batch proof job, 1 B cycles (90% provers, 10% burned)", job_fee_ign(SCEN["cycles_per_batch_job"])),
+        ("Bridge update job, 1 B cycles", job_fee_ign(SCEN["cycles_per_bridge_job"])),
+        ("A v1 shard as a job (4.7 M cycles)", job_fee_ign(INPUTS["v1_shard_cycles"])),
+    ]
+    for name, v in items:
+        print(f"| {name} | {ign(v)} | {usd(v * 0.005)} | {usd(v * 0.02)} | {usd(v * 0.10)} |")
+    print()
+    print("### 3.2 Payments: what a transfer costs against 1 bps and 10 bps rails\n")
+    print("| IGN price | Transfer fee at the floor, USD | Payment size at which the fee is 10 bps | At which it is 1 bps | Fee on a USD 100 payment, bps |")
+    print("|---|---|---|---|---|")
+    for p in INPUTS["prices"]:
+        f = tf * p
+        print(f"| {p} | {usd(f)} | {usd(f / 0.001)} | {usd(f / 0.0001)} | {f / 100 * 10000:.3f} |")
+    print()
+    print("Reading: at the floor a transfer undercuts a 1 bps rail on any payment above USD 0.26 (at 0.005) to USD 5.10 (at 0.10); a USD 100 payment pays 0.003 to 0.05 bps. "
+          "The fee is flat in IGN, so the chain takes nothing proportional to value; what payments give the coin is burn, not income (table 3.4). "
+          "The proving dimension binds first: 400 transfers a block (`B_p` / 300), 34.6 M a day, and the EIP-1559 step leaves the floor above 17.3 M a day.\n")
+    rows = demand_rows()
+    print("### 3.3 Dollars per day to miners and provers, by source, scenario and IGN price\n")
+    print("| Period | Scenario | External jobs to provers, USD (any price) | Rollup settlement to provers, IGN | Bridges to provers, IGN | Payments tips to miners and provers, IGN | IGN flows in USD at 0.005 | at 0.02 | at 0.10 |")
+    print("|---|---|---|---|---|---|---|---|---|")
+    for per in PERIODS:
+        for lab in LABELS:
+            r = rows[(per, lab)]
+            ignflow = r["roll_provers"] + r["br_provers"] + r["pay_miners"]
+            print(f"| {per} | {lab} | {usd(r['ext_usd'] * 0.9)} | {ign(r['roll_provers'])} | {ign(r['br_provers'])} | {ign(r['pay_miners'])} | {usd(ignflow * 0.005)} | {usd(ignflow * 0.02)} | {usd(ignflow * 0.10)} |")
+    print()
+    print("### 3.4 Burn per day, by source, scenario and IGN price\n")
+    print("| Period | Scenario | Rollup burn, IGN (base fee + 10% of jobs) | Bridge burn, IGN | Payments burn, IGN (base fee + unregistered tip share) | Fee multiplier (payments) | External job burn, IGN at 0.02 (phase two only) | Total burn, IGN | USD at 0.005 | at 0.02 | at 0.10 | Burn as % of daily emission (2,737,851 IGN) |")
+    print("|---|---|---|---|---|---|---|---|---|---|---|---|")
+    for per in PERIODS:
+        for lab in LABELS:
+            r = rows[(per, lab)]
+            ext_burn_002 = r["ext_usd"] * INPUTS["job_burn"] / 0.02
+            tot = r["roll_burn"] + r["br_burn"] + r["pay_burn"] + ext_burn_002
+            print(f"| {per} | {lab} | {ign(r['roll_burn'])} | {ign(r['br_burn'])} | {ign(r['pay_burn'])} | {'at the floor' if r['pay_mult'] == 1.0 else 'ABOVE TARGET: fee leaves the floor, volume clamped at 17.28 M'} | {ign(ext_burn_002)} | {ign(tot)} | {usd(tot * 0.005)} | {usd(tot * 0.02)} | {usd(tot * 0.10)} | {tot / 2_737_851 * 100:.3f}% |")
+    print()
+    print("### 3.5 Storage of proofs: bytes per block and per year, and who pays\n")
+    print("| Period | Scenario | Transfers a day | Shards per block | Record bytes per block (in coinbase, kept to the pruning depth) | Record GB per year | Proof bytes per block (p2p, not in blocks) | Proof TB per year if every proof were kept | Who pays |")
+    print("|---|---|---|---|---|---|---|---|---|")
+    bpy = INPUTS["blocks_per_day"] * 365.25
+    for per in PERIODS:
+        for lab in LABELS:
+            r = rows[(per, lab)]
+            print(f"| {per} | {lab} | {r['n_tx']:,} | {r['shards_per_block']:.1f} | {r['rec_bytes_block']:.0f} | {r['rec_bytes_block'] * bpy / 1e9:.1f} | {r['proof_bytes_block'] / 1e6:.1f} MB | {r['proof_bytes_block'] * bpy / 1e12:.0f} | node operators; no fee reaches them for it |")
+    print()
+    print(f"Reading: the records are small ({INPUTS['shard_record_bytes']} bytes a shard, {INPUTS['segment_record_bytes']} per 8-block segment): 11 to 37 GB a year at the floor, "
+          f"USD {11 * INPUTS['hdd_usd_per_tb'] / 1000:.2f} to {37 * INPUTS['hdd_usd_per_tb'] / 1000:.2f} of disk a year per node (approximate HDD price), paid by whoever runs a node and by nobody else; "
+          "no fee is charged for them because they ride in the coinbase extra data. The proof bytes (1.27 MB each) never enter a block and are discardable once the next "
+          "segment proof has verified them by recursion (spec 7.8 item 1): a node keeps the proof pool for the 600-block record window (about 3 GB at four shards a block) "
+          "and a light client keeps one 1.27 MB proof. Nobody is paid to archive proofs; an archive that kept every proof would hold 80 to 200 TB a year "
+          f"(USD {80 * INPUTS['hdd_usd_per_tb']:,.0f} to {200 * INPUTS['hdd_usd_per_tb']:,.0f} a year of HDD, approximate), which is a service someone sells, not a protocol cost.\n")
+    return rows
+
+
+def section4(rows):
+    print("## 4. The fee scenarios security_budget_10y.py reads (totals per day)\n")
+    print("| Period | Scenario | Tips to miners and provers, IGN/day | Job income to provers in IGN/day (rollups + bridges) | External jobs, USD/day (90% to provers) | Burn, IGN/day (at 0.02 for the external part) |")
+    print("|---|---|---|---|---|---|")
+    for per in PERIODS:
+        for lab in LABELS:
+            r = rows[(per, lab)]
+            tips = r["pay_miners"]
+            jobs = r["roll_provers"] + r["br_provers"]
+            burn = r["roll_burn"] + r["br_burn"] + r["pay_burn"] + r["ext_usd"] * INPUTS["job_burn"] / 0.02
+            print(f"| {per} | {lab} | {ign(tips)} | {ign(jobs)} | {usd(r['ext_usd'])} | {ign(burn)} |")
+    print()
+
+
+def main():
+    print("# Lane 4 utility model: what IGN is for beyond gas (generated by sim/horizon/economy-and-utility/utility.py)\n")
+    print("INPUTS (label in the comment of each line of the script): " + ", ".join(f"{k}={v}" for k, v in INPUTS.items() if k != "prices") + "\n")
+    section1()
+    section2()
+    rows = section3()
+    section4(rows)
+
+
+if __name__ == "__main__":
+    main()
diff --git a/sim/horizon/economy-and-utility/utility_out.md b/sim/horizon/economy-and-utility/utility_out.md
new file mode 100644
index 000000000..1196b4f1f
--- /dev/null
+++ b/sim/horizon/economy-and-utility/utility_out.md
@@ -0,0 +1,151 @@
+# Lane 4 utility model: what IGN is for beyond gas (generated by sim/horizon/economy-and-utility/utility.py)
+
+INPUTS (label in the comment of each line of the script): subsidy_ign_per_s=31.688, producer_share=0.8, pool_share=0.2, blocks_per_day=86400, f_e_floor_ign_per_gas=1e-07, f_p_floor_ign_per_pgas=1e-05, intrinsic_pgas=300, transfer_gas=21000, B_e=30000000, B_p=120000, S_p=30000, job_premium=1.5, job_burn=0.1, cycles_per_pgas=1000, v1_shard_cycles=4717439, elec_usd_per_kwh=0.1, rental_usd_per_mhs_hour=0.0117, hybrid_hash_loss=0.04, hybrid_extra_w=70.0, shard_record_bytes=274, segment_record_bytes=586, segment_blocks=8, compressed_proof_bytes=1272897, hdd_usd_per_tb=15.0, object_store_usd_per_gb_month=0.02
+
+## 1. The supply side: what one v1 shard (4,717,439 cycles) costs to prove, per measured card
+
+Inputs: the eleven cards of `docs/analysis/prover-tiers-real-cards.md` (measured 6 Oct 2026); electricity USD 0.10 per kWh (the brief); the renter's cost USD 0.0117 per MH/s-hour (measured, bench-log 'Rental cost of hash'); the miner's opportunity cost = its hash share x 80% of 31.688 IGN/s x the proof's seconds; beside the miner the loss is the measured 4% of hash (5090 only, approximate for the others) and about 70 extra watts.
+
+### 1.1 Proving alone (the card stops mining), cost per shard in USD at USD 0.02 per IGN, by network hash
+
+| Card | MH/s | W | Shard alone s | Electricity per shard | Forgone subsidy per shard, IGN at 1 GH/s | USD at 1 GH/s | 10 GH/s | 100 GH/s | 1 TH/s | Renter's cost per shard |
+|---|---|---|---|---|---|---|---|---|---|---|
+| RTX 3060 | 23.78 | 104 | 14.4 | 0.000041 | 8.681 | 0.173657 | 0.017403 | 0.001778 | 0.000215 | 0.001113 |
+| RTX 3080 | 40.82 | 205 | 7.1 | 0.00004 | 7.347 | 0.146982 | 0.014735 | 0.00151 | 0.000187 | 0.000942 |
+| RTX 3090 | 37.79 | 229 | 14.9 | 0.000095 | 14.274 | 0.285576 | 0.028643 | 0.00295 | 0.00038 | 0.00183 |
+| RTX 4060 Ti 16 | 17.58 | 72 | 11.6 | 0.000023 | 5.170 | 0.103416 | 0.010363 | 0.001057 | 0.000127 | 0.000663 |
+| RTX 4060 Ti 8 | 19.07 | 73 | 9.6 | 0.000019 | 4.641 | 0.092838 | 0.009301 | 0.000948 | 0.000112 | 0.000595 |
+| RTX 4060 | 17.07 | 115 | 18.4 | 0.000059 | 7.962 | 0.159304 | 0.015983 | 0.001651 | 0.000218 | 0.001021 |
+| RTX 4070 | 24.99 | 91 | 12.1 | 0.000031 | 7.665 | 0.153339 | 0.015361 | 0.001564 | 0.000184 | 0.000983 |
+| RTX 4090 | 52.25 | 183 | 6.3 | 0.000032 | 8.345 | 0.166926 | 0.016721 | 0.001701 | 0.000199 | 0.00107 |
+| RTX 5070 | 41.89 | 137 | 4.8 | 0.000018 | 5.097 | 0.101963 | 0.010213 | 0.001038 | 0.00012 | 0.000653 |
+| RTX 5090 | 98.48 | 258 | 6.3 | 0.000045 | 15.728 | 0.314605 | 0.031501 | 0.003191 | 0.00036 | 0.002016 |
+| RTX A5000 | 47.70 | 223 | 8.3 | 0.000051 | 10.036 | 0.200781 | 0.020124 | 0.002059 | 0.000252 | 0.001287 |
+
+### 1.2 Proving beside the running miner (hybrid), cost per shard in USD at USD 0.02 per IGN
+
+| Card | Shard beside s | Extra electricity per shard | USD at 1 GH/s | 10 GH/s | 100 GH/s | 1 TH/s | USD per billion cycles at 100 GH/s |
+|---|---|---|---|---|---|---|---|
+| RTX 3060 | 37.5 | 0.000073 | 0.018158 | 0.001881 | 0.000254 | 0.000091 | 0.053793 |
+| RTX 3080 | 25.6 | 0.00005 | 0.021243 | 0.002169 | 0.000262 | 0.000071 | 0.055476 |
+| RTX 3090 | 19.9 | 0.000039 | 0.01529 | 0.001564 | 0.000191 | 0.000054 | 0.040532 |
+| RTX 4060 Ti 16 | 34.6 | 0.000067 | 0.012403 | 0.001301 | 0.000191 | 0.00008 | 0.040411 |
+| RTX 4070 | 27.3 | 0.000053 | 0.013889 | 0.001437 | 0.000191 | 0.000067 | 0.040582 |
+| RTX 4090 | 26.1 | 0.000051 | 0.027708 | 0.002816 | 0.000327 | 0.000078 | 0.069385 |
+| RTX 5070 | 37.2 | 0.000072 | 0.031675 | 0.003233 | 0.000388 | 0.000104 | 0.082325 |
+| RTX 5090 | 10.7 | 0.000021 | 0.021391 | 0.002158 | 0.000235 | 0.000042 | 0.049711 |
+| RTX A5000 | 34.6 | 0.000067 | 0.033538 | 0.003414 | 0.000402 | 0.000101 | 0.085213 |
+
+### 1.3 Per billion cycles, the unit the market quotes (USD at 0.02 per IGN; the three IGN prices move only the opportunity term)
+
+| Card | Alone, 1 GH/s | Alone, 100 GH/s | Alone, 1 TH/s | Beside, 100 GH/s | Renter (rental price, no subsidy) | Electricity only |
+|---|---|---|---|---|---|---|
+| RTX 3060 | 36.81 | 0.376823 | 0.045596 | 0.053793 | 0.235913 | 0.008793 |
+| RTX 3080 | 31.16 | 0.320053 | 0.039715 | 0.055476 | 0.199668 | 0.008566 |
+| RTX 3090 | 60.54 | 0.625236 | 0.08059 | 0.040532 | 0.387918 | 0.020074 |
+| RTX 4060 Ti 16 | 21.92 | 0.224111 | 0.026856 | 0.040411 | 0.140493 | 0.004938 |
+| RTX 4060 Ti 8 | 19.68 | 0.200861 | 0.02378 | core-only | 0.126124 | 0.004104 |
+| RTX 4060 | 33.77 | 0.350027 | 0.046216 | core-only | 0.216386 | 0.01246 |
+| RTX 4070 | 32.50 | 0.331473 | 0.038989 | 0.040582 | 0.208319 | 0.006491 |
+| RTX 4090 | 35.38 | 0.360574 | 0.042171 | 0.069385 | 0.22678 | 0.006792 |
+| RTX 5070 | 21.61 | 0.219975 | 0.025482 | 0.082325 | 0.138525 | 0.003872 |
+| RTX 5090 | 66.69 | 0.676381 | 0.076259 | 0.049711 | 0.427431 | 0.009578 |
+| RTX A5000 | 42.56 | 0.436389 | 0.053435 | 0.085213 | 0.272756 | 0.010884 |
+
+Reading. The electricity of a shard is under a thousandth of a cent on every card. What a prover charges is set by the subsidy it forgoes, which scales as 1 / network hash: at 1 GH/s a 5090 that stops mining to prove gives up 15.7 IGN per shard (USD 0.31 at 0.02), at 1 TH/s 0.016 IGN. Beside its miner the same card gives up 4% of that for 10.7 s: at 100 GH/s about USD 0.0003 per shard, USD 0.06 per billion cycles, which is under Boundless's USD 0.21 median and above the ethproofs cluster cost. The renter's row is the hard floor nobody beats for long: USD 0.0020 per shard on a rented 5090, USD 0.43 per billion cycles.
+
+## 2. The published prices this competes with (per billion cycles)
+
+| Supplier | USD per billion cycles | Source and label |
+|---|---|---|
+| Boundless (RISC Zero), Base mainnet | 0.21 | median lock price about USD 0.21 per billion cycles, 8 provers, 8.4 T cycles in the explorer's trailing day; docs/design/developer-adoption.md 2b, secondary summary of 4 Oct 2026; approximate |
+| Succinct Prover Network, example request | 0.506 | quickstart example: base fee 0.2 PROVE plus up to 2.0 PROVE per billion PGU at USD 0.23 per PROVE = USD 0.046 plus up to 0.46 per billion PGU; example parameters, not a market price; developer-adoption.md 2b; approximate |
+| RISC Zero Bonsai (hosted API) | not published | no public per-cycle list price was ever published; Bonsai was priced on request and RISC Zero moved paid proving to Boundless in 2025; not cloned, approximate |
+| Ethereum L1 block, ethproofs tracker cost, Sep 2026 | 0.005556 | sub-half-cent per L1 block (frontier.md 2.6, secondary); an L1 block of about 15 to 30 M gas at the 14 to 44 SP1 cycles per gas measured on Igneum (base-fee-floor.md, developer-adoption.md 2b) is 0.2 to 1.3 B cycles, so about USD 0.004 to 0.025 per billion cycles at cluster cost; approximate |
+| Taiko-class rollup, per batch proof | not published | taiko-mono not cloned; Taiko Alethia proves batches through its own prover market (SGX plus ZK tiers, SP1 and RISC0 accepted); the ZK proof's cost per batch in 2026 is of the order of the ethproofs L1 figure times the batch's cycles, cents to tens of cents; approximate |
+
+Igneum's own floor as a quote: a billion-cycle job at the adopted floor is 1,000,000 pgas x 10,000 gwei x 1.5 = 15 IGN (USD 0.075, 0.3, 1.50 at the three prices). At USD 0.02 that is 1.4x Boundless's median; at 0.005 it is a third of it; at 0.10 it is 7x. The floor was calibrated for spam, not for the market (base-fee-floor.md section 3), and it is a miner-signalled parameter.
+
+## 3. Demand curves (a) to (e): dollars per day and the burn each causes
+
+Scenario grid (every count is an assumption, labelled approximate): external proving USD per day {'launch': (0, 500, 2000), 'y2': (500, 2000, 10000), 'y5': (1000, 10000, 100000)}; rollups settling here {'launch': (0, 1, 2), 'y2': (1, 3, 10), 'y5': (2, 10, 50)} at 1440 batches a day, 100 KB calldata and a 1 B-cycle proof job each; bridges {'launch': (0, 1, 2), 'y2': (1, 3, 5), 'y5': (2, 5, 10)} at 225 updates a day of 1 B cycles; plain transfers {'launch': (10000, 100000, 1000000), 'y2': (100000, 1000000, 10000000), 'y5': (1000000, 10000000, 30000000)} at a 1 gwei tip. Fees at the adopted floors (spec 5.11); a job = pgas x f_p x 1.5 (design 6), 90% to provers, 10% burned once IGN-settled (spec 5.4).
+
+### 3.1 Unit prices at the floors
+
+| Item | IGN | USD at 0.005 | at 0.02 | at 0.10 |
+|---|---|---|---|---|
+| Plain transfer, base fee (burned) | 0.0051 | 0.000026 | 0.000102 | 0.00051 |
+| Plain transfer, 1 gwei tip (80% miners and provers, 20% burned: no registered frame) | 0.000021 | 1.05e-07 | 4.20e-07 | 0.000002 |
+| Rollup batch post, 100 KB calldata, base fee (burned) | 0.1651 | 0.000825 | 0.003302 | 0.01651 |
+| Rollup batch proof job, 1 B cycles (90% provers, 10% burned) | 15.000 | 0.075 | 0.3 | 1.50 |
+| Bridge update job, 1 B cycles | 15.000 | 0.075 | 0.3 | 1.50 |
+| A v1 shard as a job (4.7 M cycles) | 0.070762 | 0.000354 | 0.001415 | 0.007076 |
+
+### 3.2 Payments: what a transfer costs against 1 bps and 10 bps rails
+
+| IGN price | Transfer fee at the floor, USD | Payment size at which the fee is 10 bps | At which it is 1 bps | Fee on a USD 100 payment, bps |
+|---|---|---|---|---|
+| 0.005 | 0.000026 | 0.0255 | 0.255 | 0.003 |
+| 0.02 | 0.000102 | 0.102 | 1.02 | 0.010 |
+| 0.1 | 0.00051 | 0.51 | 5.10 | 0.051 |
+
+Reading: at the floor a transfer undercuts a 1 bps rail on any payment above USD 0.26 (at 0.005) to USD 5.10 (at 0.10); a USD 100 payment pays 0.003 to 0.05 bps. The fee is flat in IGN, so the chain takes nothing proportional to value; what payments give the coin is burn, not income (table 3.4). The proving dimension binds first: 400 transfers a block (`B_p` / 300), 34.6 M a day, and the EIP-1559 step leaves the floor above 17.3 M a day.
+
+### 3.3 Dollars per day to miners and provers, by source, scenario and IGN price
+
+| Period | Scenario | External jobs to provers, USD (any price) | Rollup settlement to provers, IGN | Bridges to provers, IGN | Payments tips to miners and provers, IGN | IGN flows in USD at 0.005 | at 0.02 | at 0.10 |
+|---|---|---|---|---|---|---|---|---|
+| launch | low | 0 | 0 | 0 | 0.168 | 0.00084 | 0.00336 | 0.0168 |
+| launch | base | 450.00 | 19,440 | 3,038 | 1.680 | 112.40 | 449.58 | 2,248 |
+| launch | high | 1,800 | 38,880 | 6,075 | 16.800 | 224.86 | 899.44 | 4,497 |
+| y2 | low | 450.00 | 19,440 | 3,038 | 1.680 | 112.40 | 449.58 | 2,248 |
+| y2 | base | 1,800 | 58,320 | 9,112 | 16.800 | 337.25 | 1,349 | 6,745 |
+| y2 | high | 9,000 | 194,400 | 15,188 | 168.000 | 1,049 | 4,195 | 20,976 |
+| y5 | low | 900.00 | 38,880 | 6,075 | 16.800 | 224.86 | 899.44 | 4,497 |
+| y5 | base | 9,000 | 194,400 | 15,188 | 168.000 | 1,049 | 4,195 | 20,976 |
+| y5 | high | 90,000 | 972,000 | 30,375 | 290.304 | 5,013 | 20,053 | 100,267 |
+
+### 3.4 Burn per day, by source, scenario and IGN price
+
+| Period | Scenario | Rollup burn, IGN (base fee + 10% of jobs) | Bridge burn, IGN | Payments burn, IGN (base fee + unregistered tip share) | Fee multiplier (payments) | External job burn, IGN at 0.02 (phase two only) | Total burn, IGN | USD at 0.005 | at 0.02 | at 0.10 | Burn as % of daily emission (2,737,851 IGN) |
+|---|---|---|---|---|---|---|---|---|---|---|---|
+| launch | low | 0 | 0 | 51.042 | at the floor | 0 | 51.042 | 0.25521 | 1.02 | 5.10 | 0.002% |
+| launch | base | 2,398 | 339.368 | 510.420 | at the floor | 2,500 | 5,748 | 28.74 | 114.95 | 574.75 | 0.210% |
+| launch | high | 4,795 | 678.735 | 5,104 | at the floor | 10,000 | 20,578 | 102.89 | 411.57 | 2,058 | 0.752% |
+| y2 | low | 2,398 | 339.368 | 510.420 | at the floor | 2,500 | 5,748 | 28.74 | 114.95 | 574.75 | 0.210% |
+| y2 | base | 7,193 | 1,018 | 5,104 | at the floor | 10,000 | 23,316 | 116.58 | 466.31 | 2,332 | 0.852% |
+| y2 | high | 23,977 | 1,697 | 51,042 | at the floor | 50,000 | 126,716 | 633.58 | 2,534 | 12,672 | 4.628% |
+| y5 | low | 4,795 | 678.735 | 5,104 | at the floor | 5,000 | 15,578 | 77.89 | 311.57 | 1,558 | 0.569% |
+| y5 | base | 23,977 | 1,697 | 51,042 | at the floor | 50,000 | 126,716 | 633.58 | 2,534 | 12,672 | 4.628% |
+| y5 | high | 119,887 | 3,394 | 88,201 | ABOVE TARGET: fee leaves the floor, volume clamped at 17.28 M | 500,000 | 711,481 | 3,557 | 14,230 | 71,148 | 25.987% |
+
+### 3.5 Storage of proofs: bytes per block and per year, and who pays
+
+| Period | Scenario | Transfers a day | Shards per block | Record bytes per block (in coinbase, kept to the pruning depth) | Record GB per year | Proof bytes per block (p2p, not in blocks) | Proof TB per year if every proof were kept | Who pays |
+|---|---|---|---|---|---|---|---|---|
+| launch | low | 10,000 | 1.0 | 347 | 11.0 | 2.5 MB | 80 | node operators; no fee reaches them for it |
+| launch | base | 100,000 | 1.0 | 347 | 11.0 | 2.5 MB | 80 | node operators; no fee reaches them for it |
+| launch | high | 1,000,000 | 1.0 | 347 | 11.0 | 2.5 MB | 80 | node operators; no fee reaches them for it |
+| y2 | low | 100,000 | 1.0 | 347 | 11.0 | 2.5 MB | 80 | node operators; no fee reaches them for it |
+| y2 | base | 1,000,000 | 1.0 | 347 | 11.0 | 2.5 MB | 80 | node operators; no fee reaches them for it |
+| y2 | high | 10,000,000 | 1.2 | 390 | 12.3 | 2.7 MB | 87 | node operators; no fee reaches them for it |
+| y5 | low | 1,000,000 | 1.0 | 347 | 11.0 | 2.5 MB | 80 | node operators; no fee reaches them for it |
+| y5 | base | 10,000,000 | 1.2 | 390 | 12.3 | 2.7 MB | 87 | node operators; no fee reaches them for it |
+| y5 | high | 30,000,000 | 3.5 | 1025 | 32.3 | 5.7 MB | 180 | node operators; no fee reaches them for it |
+
+Reading: the records are small (274 bytes a shard, 586 per 8-block segment): 11 to 37 GB a year at the floor, USD 0.17 to 0.56 of disk a year per node (approximate HDD price), paid by whoever runs a node and by nobody else; no fee is charged for them because they ride in the coinbase extra data. The proof bytes (1.27 MB each) never enter a block and are discardable once the next segment proof has verified them by recursion (spec 7.8 item 1): a node keeps the proof pool for the 600-block record window (about 3 GB at four shards a block) and a light client keeps one 1.27 MB proof. Nobody is paid to archive proofs; an archive that kept every proof would hold 80 to 200 TB a year (USD 1,200 to 3,000 a year of HDD, approximate), which is a service someone sells, not a protocol cost.
+
+## 4. The fee scenarios security_budget_10y.py reads (totals per day)
+
+| Period | Scenario | Tips to miners and provers, IGN/day | Job income to provers in IGN/day (rollups + bridges) | External jobs, USD/day (90% to provers) | Burn, IGN/day (at 0.02 for the external part) |
+|---|---|---|---|---|---|
+| launch | low | 0.168 | 0 | 0 | 51.042 |
+| launch | base | 1.680 | 22,478 | 500.00 | 5,748 |
+| launch | high | 16.800 | 44,955 | 2,000 | 20,578 |
+| y2 | low | 1.680 | 22,478 | 500.00 | 5,748 |
+| y2 | base | 16.800 | 67,432 | 2,000 | 23,316 |
+| y2 | high | 168.000 | 209,588 | 10,000 | 126,716 |
+| y5 | low | 16.800 | 44,955 | 1,000 | 15,578 |
+| y5 | base | 168.000 | 209,588 | 10,000 | 126,716 |
+| y5 | high | 290.304 | 1,002,375 | 100,000 | 711,481 |
+
diff --git a/sim/horizon/finality-and-weight/README.md b/sim/horizon/finality-and-weight/README.md
new file mode 100644
index 000000000..f04976452
--- /dev/null
+++ b/sim/horizon/finality-and-weight/README.md
@@ -0,0 +1,45 @@
+# sim/horizon/finality-and-weight
+
+Models behind `docs/analysis/horizon/finality-and-weight.md` (Horizon lane 3, 6 October 2026).
+
+## finality_horizon.py
+
+A copy of `sim/finality_v2.py` as of fud-close `1544c63` (the block reading of Q2, scenario O) plus four candidate rules and three scenarios. The base rule in every candidate is the live one: active denominator under the block reading, floor 1.0 (a lock needs 2/3 of total), each partition side retargets (+daa) and counts only its own blocks (+local), and `frozen=True` for rule v3 (the frozen table, ledger F21).
+
+Candidates (`--cands`, comma-separated keys or `all`):
+
+| key | rule |
+|---|---|
+| `v2` | sliding table only (the rule before F21) |
+| `v3` | plus the frozen table (the live rule since N3) |
+| `leave` | (iv) departure announcement: a key's signed leave removes it from every denominator 1 h later |
+| `decay1` | (i) decaying denominator: a key the view has not seen vote for 1 h loses 0.5 of its denominator weight per hour (gone after 3 h) |
+| `decay6` | (i) slow decay: 6 h grace, 1/24 per hour (gone after 30 h) |
+| `hyst` | (iii) floor with hysteresis: after 1 h under 2/3 signing the floor drops to 0.85 x 2/3 (sliding and frozen), back after 1 h at or above 2/3 |
+| `twotier` | (ii) a provisional lock at 2/3 of the active denominator (block reading, no floor), reported beside the final lock, never certifying |
+
+Scenarios: `T` tonight's departure (34, 45, 50 percent of weight stops mining and signing at once, 31 days), `P` the partition suite (H, I, E, L3 eclipse, L4 12-day splits), `Q` silent weight (L1) and acquired keys that leave (Q2, leave candidate only).
+
+Runs behind the analysis (igneum-build-1, Python 3.12, numpy 1.26.4, `nice -n 19`, one process per candidate, seeds 7, 11, 13; about 25 minutes wall):
+
+    for c in v2 v3 leave decay1 decay6 hyst twotier; do
+      nice -n 19 python3 finality_horizon.py --scenarios T,P,Q --seeds 7,11,13 --cands $c > out-$c.md 2> err-$c.log &
+    done
+
+Smoke run on the Mac (under the main checkout's run lock, about one minute):
+
+    /Users/joshm/Projects/igneum/tools/lock/with-lock.sh run nice -n 19 python3 finality_horizon.py --quick --scenarios T,P,Q --seeds 7
+
+Outputs of the full run are in `results/` (`out-<cand>.md`, `err-<cand>.log` with the per-scenario timings); `python3 merge_results.py` merges them into `results/combined.md`, the tables section 5 of the analysis quotes.
+
+## weight_capture.py
+
+Arithmetic of task 3 (rented hash against the 30-day window at the measured USD 11.7 per GH/s-hour; bought keys). `python3 weight_capture.py`.
+
+## lightclient_cost.py
+
+Arithmetic of task 4 (bytes and verification time of a year of certificates by voter count; the ZK light client's per-checkpoint cycles, approximate). `python3 lightclient_cost.py`.
+
+## obs-query.mjs (not in this directory)
+
+The observer rows of tonight's pause were read with read-only SELECTs against the observer's Neon database (the script lived in the session scratchpad; it is `fetch` to the Neon SQL endpoint with `DATABASE_URL` from `~/.config/igneum/env`, refusing anything but SELECT). The queries are quoted in the analysis document.
diff --git a/sim/horizon/finality-and-weight/finality_horizon.py b/sim/horizon/finality-and-weight/finality_horizon.py
new file mode 100644
index 000000000..f6c30f3fe
--- /dev/null
+++ b/sim/horizon/finality-and-weight/finality_horizon.py
@@ -0,0 +1,2229 @@
+#!/usr/bin/env python3
+"""Igneum finality rule V2: checkpoint-level simulation with latency, partitions and eclipses.
+
+Rule under test (CLAUDE.md, FINALITY RULE V2, review round 2, 3 October 2026):
+  * Vote weight of a key = its blue blocks over a flat trailing 30-day window (DAA time,
+    86,400 blocks a day). No damping. Dust threshold DUST blocks: a key below it is not a
+    voter and is not counted in any denominator.
+  * A checkpoint forms every 30 blocks (blue score 30i). Every voter signs every checkpoint
+    it sees while online. Aggregators collect votes; a certificate (a lock) exists once the
+    collected signatures reach QUORUM (2/3) of the denominator.
+  * ACTIVE denominator: sum over eligible keys of weight x participation, where participation
+    = min(1, certified votes of that key over the last PRESENCE (240) checkpoint indices / 240).
+    A key whose first block is less than 240 checkpoints old counts as participation 1.
+  * TOTAL denominator (the alternative): sum of weight over every eligible key, no factor.
+  * Equivocation (one key signing two different checkpoint blocks at one index) zeroes the
+    key's weight for the rest of the window once the evidence is seen.
+
+Participation bookkeeping has three readings, selected with --pmode. The difference only shows
+when a checkpoint index gets no certificate:
+  cert    (the brief, literal) an uncertified index contributes 0 certified votes to EVERY key,
+          so a stall decays everyone's participation and the denominator shrinks until the
+          present signers reach 2/3 of it. Self-healing, and the partition hazard.
+  seen    an uncertified index credits the keys whose votes the node observed on the wire.
+          Silent keys decay, present keys do not. Not objective: each node counts its own view.
+  frozen  the window is over the last 240 CERTIFIED indices, so a stall freezes participation.
+          Fails safe and never recovers liveness within the window.
+  block   (spec 3.3 Q2, the rule since 3 October 2026, ledger F3) a key is credited at an index when any
+          block in the checkpoint's past carries its vote, as a vote or inside a certificate. Every honest
+          producer carries every vote it received (the carriage rule), so in this model every vote an
+          online signing key issues is credited whatever certificate forms. Objective: every node reads
+          the same blocks. Scenario O runs it against a hostile aggregator (P.hostile).
+
+Model (all assumptions, repeated in results_v2.md):
+  * Time step = one 30-s slot. The network mines Poisson(30) blocks per slot, split per key by
+    hashrate share (perfect difficulty retarget). Every block is blue (GHOSTDAG abstracted).
+  * Weight window = 720 hourly buckets of blocks per key (30 days), rolled every hour.
+  * A checkpoint index forms on a side each time that side's blue score passes a multiple of
+    30, so a partition side mining a fraction s of the hashrate forms checkpoints at s per slot.
+    Checkpoint blocks on different sides are different blocks at the same index.
+  * Regions: a one-way delay matrix, DELAY between regions, INTRA inside one, lognormal jitter
+    per hop. A vote for checkpoint i issued by a key in region r reaches the aggregator in
+    region a at t0 + d(src, r) + d(r, a) (+ a per-key extra delay for an eclipsed key).
+    One aggregator per region on the side; the certificate forms at the first one to reach
+    quorum; its signer set is every vote that arrived there by max(threshold time, t0 + GRACE).
+  * Honest keys follow a two-state uptime chain: availability UPTIME (UPTIME_BIG for keys at or
+    above 1% of hashrate, a pool with redundant infrastructure), mean outage OUTAGE slots.
+  * A partition splits regions into sides, each with its own view (certificates, participation
+    ring, blue score). At the heal the views merge: certificates are unioned, two certificates
+    at one index with different blocks count as a CONFLICTING LOCK, participation rings are
+    OR-merged by index, and any key that signed on two sides at a common index is stripped.
+  * Weights are global (a side does not see the other side's blocks for the partition's
+    duration; at most 150 minutes of a 30-day window, ignored).
+
+Standard library plus numpy. Deterministic for a given --seed.
+
+Usage:
+  python3 finality_v2.py                       # every scenario, markdown on stdout
+  python3 finality_v2.py --scenarios A,E --delay 5
+  python3 finality_v2.py --quick               # shortened runs for development
+"""
+
+import argparse
+import os
+import sys
+import time
+
+import numpy as np
+
+SLOT_S = 30.0
+BLOCKS_PER_CP = 30
+SLOTS_PER_HOUR = 120
+SLOTS_PER_DAY = 2_880
+WINDOW_HOURS = 720
+WINDOW_BLOCKS = 86_400 * 30
+N_HONEST = 1_000
+PARETO_SHAPE = 1.0
+GEOGRAPHY = (0.45, 0.35, 0.20)  # honest hashrate per region, model assumption
+TWO_THIRDS = 2.0 / 3.0
+
+
+class P:
+    """Parameters. Keyword overrides."""
+
+    def __init__(self, **kw):
+        self.delay = 2.0        # one-way inter-region delay, seconds
+        self.intra = 0.1        # one-way intra-region delay, seconds
+        self.jitter = 0.25      # lognormal sigma per hop
+        self.grace = 15.0       # seconds after t0 during which late votes still enter the certificate
+        self.uptime = 0.97      # availability of an honest key under 1% of hashrate
+        self.uptime_big = 0.995  # availability of a key at or above 1% of hashrate (redundant pool infrastructure)
+        self.big_share = 0.01
+        self.outage = 20        # mean outage length, slots (10 minutes)
+        self.denom = "active"   # "active" or "total"
+        self.pmode = "cert"     # "cert", "seen", "frozen"
+        self.presence = 240     # checkpoints in the participation window
+        self.dust = 100         # blocks
+        self.quorum = TWO_THIRDS
+        self.floor = 0.0        # hybrid: active denominator never below floor x total weight (0 = off; 1.0 = the rule of 4 Oct 2026, a lock needs 2/3 of total)
+        self.daa = "none"       # "none": a partition side mines at its hashrate share; "full": each side retargets to 30 blocks/slot at once
+        self.local = False      # True: a partition side's weight table counts only the blocks it has seen (its own after the split), as a real node's window does
+        self.frozen = False     # True: rule v3 (4 Oct 2026, ledger F21): a lock also needs 2/3 of the weight table FROZEN at the view's last
+                                # certified checkpoint, signers counted at their frozen weights; the frozen table expires one window (30 days)
+                                # after its checkpoint, after which the sliding table alone applies (as today)
+        self.hostile = None     # ledger F3 / O-3.3 (scenario O): (target key mask, from slot, to slot). Between those slots a
+                                # chosen aggregator drops the target's votes from every certificate it builds, and its
+                                # certificate is the one carried whenever the other votes reach quorum at all (the strongest
+                                # form: the block producer carries the certificate it likes, F3's premise)
+        # ---- Horizon lane 3 (6 Oct 2026), candidate rules modelled against tonight's pause (docs/analysis/horizon/finality-and-weight.md)
+        self.decay = None       # (i) decaying denominator: (T hours, r per hour): a key this VIEW has not seen vote for more than T hours
+                                #     counts max(0, 1 - r (silent - T)) of its weight in every denominator (sliding and frozen); signed weight unchanged
+        self.twotier = False    # (ii) two-tier: a PROVISIONAL lock at 2/3 of the active (presence, block reading) denominator with no floor,
+                                #      reported beside the final lock and never certifying; final = the rule as configured
+        self.hyst = None        # (iii) floor with hysteresis: (H hours, low floor factor): after the view's signing share of total has sat
+                                #       under 2/3 for H hours the floor (sliding and frozen) drops to low x 2/3, back to the full floor after H hours at or above 2/3
+        self.leave = None       # (iv) departure announcement: delay in hours after a key's signed leave (Sim.leave_slot) before it is in no
+                                #      denominator and can no longer vote; a partition side never sees the other side leave, so nothing changes there
+        self.wform = "hour"     # the W2 form (ledger F14, scenario N): "hour" = the hourly ring above (a perfect retarget makes
+                                # it the DAA window); "daa" = blocks over the trailing 2,592,000 blocks whatever the wall clock;
+                                # "median" = a key's share of each 60-s wall-clock bucket summed over the trailing 30 days, x60
+        self.__dict__.update(kw)
+
+    def label(self):
+        if self.denom == "total":
+            return "total"
+        s = "active/" + self.pmode
+        if self.floor > 0:
+            s += "+floor%.2f" % self.floor
+        if self.daa != "none":
+            s += "+daa"
+        if self.local:
+            s += "+local"
+        if self.frozen:
+            s += "+frozen"
+        if self.hostile is not None:
+            s += "+hostile"
+        if self.decay is not None:
+            s += "+decay(T%gh,r%g/h)" % self.decay
+        if self.twotier:
+            s += "+twotier"
+        if self.hyst is not None:
+            s += "+hyst(%gh,%.2f)" % self.hyst
+        if self.leave is not None:
+            s += "+leave%gh" % self.leave
+        return s
+
+
+class View:
+    """One side's view: participation ring, checkpoint counter, certificates."""
+
+    def __init__(self, sid, regions, n, presence, next_idx):
+        self.sid = sid
+        self.regions = list(regions)
+        self.ring = np.zeros((presence, n), dtype=np.int8)
+        self.ring_idx = np.full(presence, -1, dtype=np.int64)
+        self.pcount = np.zeros(n, dtype=np.int32)
+        self.next_idx = int(next_idx)
+        self.blue = 0.0
+        self.certs = {}      # idx -> (sid, slot, latency_s)
+        self.stalls = []     # (idx, slot)
+        self.key_mask = None  # keys whose region is on this side
+        self.mine_mask = None
+        self.excl = np.zeros(n)  # blocks mined off this side since the split, unseen by it (only used with P.local)
+        self.frozen_wt = None    # rule v3: the weight table at this view's last certified checkpoint (None before the first)
+        self.frozen_slot = -1
+        # Horizon lane 3 bookkeeping
+        self.last_seen = np.full(n, -1, dtype=np.int64)   # slot at which this view last received a vote from each key (-1 = never)
+        self.born_slot = 0
+        self.hyst_low = False
+        self.hyst_lo_cnt = 0
+        self.hyst_hi_cnt = 0
+        self.pring = np.zeros((presence, n), dtype=np.int8)  # provisional tier: participation ring under the block reading
+        self.pring_idx = np.full(presence, -1, dtype=np.int64)
+        self.ppcount = np.zeros(n, dtype=np.int32)
+        self.prov_certs = {}     # idx -> sid (provisional locks, two-tier)
+
+    def clone_ring_from(self, other):
+        self.last_seen[:] = other.last_seen
+        self.born_slot = other.born_slot
+        self.hyst_low, self.hyst_lo_cnt, self.hyst_hi_cnt = other.hyst_low, other.hyst_lo_cnt, other.hyst_hi_cnt
+        self.pring[:] = other.pring
+        self.pring_idx[:] = other.pring_idx
+        self.ppcount[:] = other.ppcount
+        self.ring[:] = other.ring
+        self.ring_idx[:] = other.ring_idx
+        self.pcount[:] = other.pcount
+        self.frozen_wt = None if other.frozen_wt is None else other.frozen_wt.copy()
+        self.frozen_slot = other.frozen_slot
+
+
+class Sim:
+    def __init__(self, p, rng, n_regions=3):
+        self.p = p
+        self.rng = rng
+        self.R = int(n_regions)
+        self.D = np.full((self.R, self.R), p.delay)
+        np.fill_diagonal(self.D, p.intra)
+        self.N = 0
+        self.hash = np.zeros(0)
+        self.region = np.zeros(0, dtype=np.int64)
+        self.online = np.zeros(0, dtype=bool)
+        self.flaky = np.zeros(0, dtype=bool)
+        self.signs = np.zeros(0, dtype=bool)
+        self.equiv = np.zeros(0, dtype=bool)
+        self.stripped = np.zeros(0, dtype=bool)
+        self.extra_delay = np.zeros(0)
+        self.first_idx = np.zeros(0, dtype=np.int64)
+        self.buckets = np.zeros((WINDOW_HOURS, 0))
+        self.weight = np.zeros(0)
+        self.slot = 0
+        self.views = []
+        self.next_sid = 1
+        self.records = []    # (slot, idx, sid, latency_s or -1, signed/denom, denom/total)
+        self.conflicts = []  # (idx, slot the second certificate existed)
+        self.q_on = 1.0 / p.outage
+        self.q_off = np.zeros(0)
+        self.leave_slot = np.full(0, -1, dtype=np.int64)  # Horizon (iv): slot of each key's signed leave, -1 = none
+        self.pconflicts = []  # Horizon (ii): conflicting PROVISIONAL locks at the heal
+        # scenario N (ledger M14/F14): a block supply from a difficulty trace, fn(slot) -> blocks per key, in place of
+        # the Poisson(30) draw; and the ledgers of the two W2 forms (10-minute buckets of 20 slots)
+        self.supply = None
+        self.wq = []          # daa form: [(bucket vector, bucket total)] oldest first; median form: [group vector]
+        self.wq_head = 0
+        self.wq_total = 0.0   # daa form: blocks in the queued buckets
+        self.wcur = None      # the bucket or group being filled
+        self.wpair = None     # median form: the 60-s pair being filled
+
+    # ------------------------------------------------------------- keys
+    def add_keys(self, hashes, regions, flaky=True, equiv=False, signs=True):
+        hashes = np.asarray(hashes, dtype=float)
+        regions = np.asarray(regions, dtype=np.int64)
+        n = hashes.size
+        self.hash = np.concatenate([self.hash, hashes])
+        self.region = np.concatenate([self.region, regions])
+        self.online = np.concatenate([self.online, np.ones(n, dtype=bool)])
+        self.flaky = np.concatenate([self.flaky, np.full(n, flaky, dtype=bool)])
+        self.signs = np.concatenate([self.signs, np.full(n, signs, dtype=bool)])
+        self.equiv = np.concatenate([self.equiv, np.full(n, equiv, dtype=bool)])
+        self.stripped = np.concatenate([self.stripped, np.zeros(n, dtype=bool)])
+        self.extra_delay = np.concatenate([self.extra_delay, np.zeros(n)])
+        self.first_idx = np.concatenate([self.first_idx, np.full(n, -1, dtype=np.int64)])
+        self.leave_slot = np.concatenate([self.leave_slot, np.full(n, -1, dtype=np.int64)])
+        self.buckets = np.concatenate([self.buckets, np.zeros((WINDOW_HOURS, n))], axis=1)
+        self.weight = np.concatenate([self.weight, np.zeros(n)])
+        first = self.N
+        self.N += n
+        self.q_off = np.concatenate([self.q_off, np.zeros(n)])
+        self.set_uptime()
+        return np.arange(first, self.N)
+
+    def set_uptime(self):
+        """Per-key off-switch probability per slot from the size-dependent availability. Call after hashrate changes."""
+        tot = self.hash.sum()
+        share = self.hash / tot if tot > 0 else np.zeros(self.N)
+        u = np.where(share >= self.p.big_share, self.p.uptime_big, self.p.uptime)
+        self.q_off = self.q_on * (1.0 - u) / u
+
+    def warm_start(self):
+        """Fill the 30-day window as if the mining keys had been mining at their share for 30 days."""
+        share = self.hash / self.hash.sum()
+        lam = 3_600.0 * share
+        for h in range(WINDOW_HOURS):
+            self.buckets[h] = self.rng.poisson(lam)
+        self.weight = self.buckets.sum(axis=0)
+        if self.p.wform == "daa":
+            # 4,320 ten-minute buckets of Poisson(600 x share): a full window of 2,592,000 blocks at 1 block/s
+            self.wq = []
+            for _ in range(WINDOW_BLOCKS // 600):
+                v = self.rng.poisson(600.0 * share).astype(float)
+                self.wq.append((v, float(v.sum())))
+            self.wq_head = 0
+            self.wq_total = sum(t for _, t in self.wq)
+            self.weight = np.sum([v for v, _ in self.wq], axis=0)
+            self.wcur = np.zeros(self.N)
+        elif self.p.wform == "median":
+            # 4,320 ten-minute groups, each the sum of ten 60-s bucket shares x 60: a steady share s weighs 2,592,000 s
+            self.wq = []
+            for _ in range(WINDOW_BLOCKS // 600):
+                v = self.rng.poisson(600.0 * share).astype(float)
+                tot = v.sum()
+                self.wq.append(600.0 * v / tot if tot > 0 else np.zeros(self.N))
+            self.wq_head = 0
+            self.weight = np.sum(self.wq, axis=0)
+            self.wcur = np.zeros(self.N)
+            self.wpair = np.zeros(self.N)
+        self.first_idx[self.hash > 0] = -10 ** 9
+        self.slot = 0
+
+    def init_views(self, warm):
+        v = View(0, range(self.R), self.N, self.p.presence, next_idx=(WINDOW_BLOCKS // BLOCKS_PER_CP if warm else 0))
+        self._set_masks(v)
+        if warm:
+            elig = (self.weight >= self.p.dust) & self.signs
+            v.ring[:] = elig.astype(np.int8)[None, :]
+            v.ring_idx[:] = np.arange(v.next_idx - self.p.presence, v.next_idx)
+            v.pcount[:] = v.ring.sum(axis=0)
+            v.pring[:] = v.ring
+            v.pring_idx[:] = v.ring_idx
+            v.ppcount[:] = v.pcount
+            v.last_seen[elig] = self.slot
+        v.born_slot = self.slot
+        self.views = [v]
+        self.next_sid = 1
+
+    def _set_masks(self, v):
+        v.key_mask = np.isin(self.region, v.regions)
+        v.mine_mask = v.key_mask.copy()
+
+    # ------------------------------------------------------------- partitions
+    def split(self, groups):
+        base = self.views[0]
+        new = []
+        for g in groups:
+            v = View(self.next_sid, g, self.N, self.p.presence, next_idx=base.next_idx)
+            self.next_sid += 1
+            v.clone_ring_from(base)
+            v.born_slot = self.slot
+            self._set_masks(v)
+            new.append(v)
+        self.split_idx = base.next_idx
+        self.views = new
+
+    def heal(self):
+        views = self.views
+        P_ = self.p.presence
+        nxt = max(v.next_idx for v in views)
+        m = View(self.next_sid, range(self.R), self.N, P_, next_idx=nxt)
+        self.next_sid += 1
+        self._set_masks(m)
+        for i in range(max(0, nxt - P_), nxt):
+            row = i % P_
+            acc = np.zeros(self.N, dtype=np.int8)
+            hit = False
+            for v in views:
+                if v.ring_idx[row] == i:
+                    acc |= v.ring[row]
+                    hit = True
+            if hit:
+                m.ring[row] = acc
+                m.ring_idx[row] = i
+        m.pcount[:] = m.ring.sum(axis=0)
+        # Horizon: the provisional ring merges like the final one; last_seen is the latest any side saw; hysteresis stays low only if every side was low
+        for i in range(max(0, nxt - P_), nxt):
+            row = i % P_
+            acc = np.zeros(self.N, dtype=np.int8)
+            hit = False
+            for v in views:
+                if v.pring_idx[row] == i:
+                    acc |= v.pring[row]
+                    hit = True
+            if hit:
+                m.pring[row] = acc
+                m.pring_idx[row] = i
+        m.ppcount[:] = m.pring.sum(axis=0)
+        m.last_seen[:] = np.max(np.stack([v.last_seen for v in views]), axis=0)
+        m.born_slot = min(v.born_slot for v in views)
+        m.hyst_low = all(v.hyst_low for v in views)
+        for v in views:
+            for idx, rec in v.prov_certs.items():
+                if idx in m.prov_certs and m.prov_certs[idx][0] != rec[0]:
+                    self.pconflicts.append(idx)
+                else:
+                    m.prov_certs.setdefault(idx, rec)
+        newest = max(views, key=lambda v: v.frozen_slot)
+        m.frozen_wt = None if newest.frozen_wt is None else newest.frozen_wt.copy()
+        m.frozen_slot = newest.frozen_slot
+        # certificates and conflicts
+        for v in views:
+            for idx, (sid, slot, lat) in v.certs.items():
+                if idx in m.certs and m.certs[idx][0] != sid:
+                    self.conflicts.append((idx, max(slot, m.certs[idx][1])))
+                else:
+                    m.certs.setdefault(idx, (sid, slot, lat))
+            m.stalls.extend(v.stalls)
+        # equivocation evidence: an equivocating key signed every side's checkpoint at every common index
+        common = min(v.next_idx for v in views) > self.split_idx
+        if common and self.equiv.any():
+            self.stripped |= self.equiv
+            self.strip_slot = self.slot
+        self.views = [m]
+
+    # ------------------------------------------------------------- stepping
+    def run(self, n_slots, snap=None):
+        """snap = (every_n_slots, fn(sim)) called before the step on matching slots."""
+        for _ in range(int(n_slots)):
+            if snap is not None and self.slot % snap[0] == 0:
+                snap[1](self)
+            self.step()
+
+    def step(self):
+        p = self.p
+        slot = self.slot
+        tot = self.hash.sum()
+        if self.supply is not None:
+            blocks = self.supply(slot)
+        elif p.daa == "full" and len(self.views) > 1:
+            blocks = np.zeros(self.N)
+            for v in self.views:
+                side_tot = self.hash[v.mine_mask].sum()
+                if side_tot > 0:
+                    blocks[v.mine_mask] = self.rng.poisson(BLOCKS_PER_CP * self.hash[v.mine_mask] / side_tot)
+        else:
+            blocks = self.rng.poisson(BLOCKS_PER_CP * self.hash / tot) if tot > 0 else np.zeros(self.N)
+        if p.wform == "daa":
+            # the window is a block count: the newest blocks enter at once, the oldest 10-minute buckets leave once the
+            # queued blocks exceed the window (the edge moves by whole buckets, at most 600 base blocks plus a burst)
+            self.weight += blocks
+            self.wcur += blocks
+            if slot % 20 == 19:
+                t = float(self.wcur.sum())
+                self.wq.append((self.wcur, t))
+                self.wq_total += t
+                self.wcur = np.zeros(self.N)
+                while self.wq_head < len(self.wq) - 1 and self.wq_total - self.wq[self.wq_head][1] >= WINDOW_BLOCKS:
+                    v, t = self.wq[self.wq_head]
+                    self.weight -= v
+                    self.wq_total -= t
+                    self.wq[self.wq_head] = None
+                    self.wq_head += 1
+        elif p.wform == "median":
+            # a 60-s bucket is two slots: each key's share of it (x60) enters the weight; a 10-minute group of ten
+            # buckets leaves 30 days later
+            self.wpair += blocks
+            if slot % 2 == 1:
+                t = float(self.wpair.sum())
+                sh = 60.0 * self.wpair / t if t > 0 else np.zeros(self.N)
+                self.weight += sh
+                self.wcur += sh
+                self.wpair = np.zeros(self.N)
+            if slot % 20 == 19:
+                self.wq.append(self.wcur)
+                self.wcur = np.zeros(self.N)
+                while len(self.wq) - self.wq_head > WINDOW_BLOCKS // 600:
+                    self.weight -= self.wq[self.wq_head]
+                    self.wq[self.wq_head] = None
+                    self.wq_head += 1
+        else:
+            hp = (slot // SLOTS_PER_HOUR) % WINDOW_HOURS
+            if slot % SLOTS_PER_HOUR == 0:
+                self.weight -= self.buckets[hp]
+                self.buckets[hp] = 0.0
+            self.buckets[hp] += blocks
+            self.weight += blocks
+        if p.local and len(self.views) > 1:
+            # a side's window holds only the blocks it has seen: the other sides' post-split blocks are unseen
+            for v in self.views:
+                v.excl += blocks * ~v.mine_mask
+        gidx = max(v.next_idx for v in self.views)
+        newly = (blocks > 0) & (self.first_idx == -1)
+        if newly.any():
+            self.first_idx[newly] = gidx
+        r = self.rng.random(self.N)
+        flip = np.where(self.online, r < self.q_off, r < self.q_on) & self.flaky
+        self.online ^= flip
+        for v in self.views:
+            v.blue += blocks[v.mine_mask].sum()
+            while v.blue >= BLOCKS_PER_CP:
+                v.blue -= BLOCKS_PER_CP
+                self.checkpoint(v, blocks)
+        self.slot += 1
+
+    def participation(self, v, idx):
+        part = np.minimum(1.0, v.pcount / float(self.p.presence))
+        new = (self.first_idx > idx - self.p.presence) & (self.first_idx >= 0)
+        part[new] = 1.0
+        return part
+
+    def checkpoint(self, v, blocks):
+        p = self.p
+        idx = v.next_idx
+        v.next_idx += 1
+        t0 = self.slot * SLOT_S
+        # miner of the checkpoint block: a key on this side weighted by its blocks this slot
+        bm = blocks * v.mine_mask
+        cum = np.cumsum(bm)
+        if cum[-1] > 0:
+            j = int(np.searchsorted(cum, self.rng.random() * cum[-1], side="right"))
+            src = int(self.region[min(j, self.N - 1)])
+        else:
+            src = v.regions[0]
+        jit1 = np.exp(self.rng.normal(0.0, p.jitter, self.R))
+        jit2 = np.exp(self.rng.normal(0.0, p.jitter, (self.R, self.R)))
+        # the weight table this side computes: global, or (P.local) less the blocks it has not seen since the split
+        wt = np.maximum(self.weight - v.excl, 0.0) if p.local else self.weight
+        elig = (wt >= p.dust) & ~self.stripped
+        # Horizon (iv): a key whose signed leave is `leave` hours old is in no denominator and cannot vote
+        left = np.zeros(self.N, dtype=bool)
+        if p.leave is not None:
+            left = (self.leave_slot >= 0) & (self.slot >= self.leave_slot + int(round(p.leave * SLOTS_PER_HOUR)))
+            elig &= ~left
+        voters = elig & self.online & self.signs & (v.key_mask | self.equiv)
+        # Horizon (i): the decaying denominator, from THIS view's own observation of who has voted
+        df = np.ones(self.N)
+        if p.decay is not None:
+            T_h, r_h = p.decay
+            seen = np.where(v.last_seen >= 0, v.last_seen, v.born_slot)
+            silent_h = (self.slot - seen) / float(SLOTS_PER_HOUR)
+            df = np.clip(1.0 - r_h * np.maximum(0.0, silent_h - T_h), 0.0, 1.0)
+        wd = wt * df
+        if p.denom == "active":
+            denom = float((wd * self.participation(v, idx))[elig].sum())
+        else:
+            denom = float(wd[elig].sum())
+        total = float(wd[elig].sum())
+        total_plain = float(wt[elig].sum())
+        # Horizon (iii): the floor with hysteresis
+        floor_eff = p.floor
+        if p.hyst is not None and v.hyst_low:
+            floor_eff = p.hyst[1]
+        if p.denom == "active" and floor_eff > 0:
+            denom = max(denom, floor_eff * total)
+        need = p.quorum * denom
+        vi = np.flatnonzero(voters)
+        signed_w = float(wt[vi].sum())
+        ratio = signed_w / denom if denom > 0 else 0.0
+        # rule v3 (frozen): signers also need 2/3 of the table frozen at the view's last certified checkpoint, counted at
+        # their frozen weights, while that checkpoint is less than one window old
+        wf, need_f = None, 0.0
+        if p.frozen and v.frozen_wt is not None and (self.slot - v.frozen_slot) < WINDOW_HOURS * SLOTS_PER_HOUR:
+            felig = (v.frozen_wt >= p.dust) & ~self.stripped & ~left
+            total_f = float((v.frozen_wt * df)[felig].sum())
+            if total_f > 0:
+                wf = np.where(felig, v.frozen_wt, 0.0)[vi]
+                need_f = p.quorum * total_f * ((floor_eff / p.floor) if (p.hyst is not None and p.floor > 0) else 1.0)
+        # Horizon (ii): the provisional tier, 2/3 of the active denominator under the block reading, no floor, never certifies
+        if p.twotier:
+            part_p = np.minimum(1.0, v.ppcount / float(p.presence))
+            newk = (self.first_idx > idx - p.presence) & (self.first_idx >= 0)
+            part_p[newk] = 1.0
+            denom_p = float((wt * part_p)[elig].sum())
+            if denom_p > 0 and signed_w >= p.quorum * denom_p:
+                v.prov_certs[idx] = (v.sid, self.slot)
+            prow = idx % p.presence
+            v.ppcount -= v.pring[prow]
+            v.pring[prow] = voters.astype(np.int8)
+            v.ppcount += v.pring[prow]
+            v.pring_idx[prow] = idx
+        # Horizon bookkeeping: what this view saw, and the hysteresis counters (signing share of the undecayed total)
+        if vi.size:
+            v.last_seen[vi] = self.slot
+        if p.hyst is not None:
+            share = signed_w / total_plain if total_plain > 0 else 0.0
+            if share < p.quorum:
+                v.hyst_hi_cnt = 0
+                v.hyst_lo_cnt += 1
+            else:
+                v.hyst_lo_cnt = 0
+                v.hyst_hi_cnt += 1
+            H = int(round(p.hyst[0] * SLOTS_PER_HOUR))
+            if not v.hyst_low and v.hyst_lo_cnt >= H:
+                v.hyst_low = True
+            elif v.hyst_low and v.hyst_hi_cnt >= H:
+                v.hyst_low = False
+        def form(sel):
+            # the certificate an aggregator builds from the votes in `sel` (a mask over vi): the first region to reach
+            # quorum, or None when those votes never do
+            if denom <= 0 or not sel.any():
+                return None
+            w = wt[vi][sel]
+            reg = self.region[vi][sel]
+            eq = self.equiv[vi][sel]
+            hop1 = np.where(eq, p.intra, self.D[src, reg] * jit1[reg])
+            issue = t0 + hop1 + self.extra_delay[vi][sel]
+            found = None
+            for a in v.regions:
+                hop2 = np.where(eq, p.intra, self.D[reg, a] * jit2[reg, a])
+                arr = issue + hop2
+                order = np.argsort(arr, kind="stable")
+                cw = np.cumsum(w[order])
+                k = int(np.searchsorted(cw, need))
+                if wf is not None:
+                    k = max(k, int(np.searchsorted(np.cumsum(wf[sel][order]), need_f)))
+                if k < cw.size:
+                    thr = float(arr[order[k]])
+                    if found is None or thr < found[0]:
+                        found = (thr, arr, sel)
+            return found
+        best = None
+        if p.hostile is not None and p.hostile[1] <= self.slot < p.hostile[2] and vi.size > 0:
+            # the hostile aggregator drops the target's votes; its certificate is carried whenever the rest reach quorum
+            best = form(~p.hostile[0][vi])
+        if best is None and vi.size > 0:
+            best = form(np.ones(vi.size, dtype=bool))
+        if best is not None:
+            thr, arr, sel = best
+            lat = thr - t0
+            seal = max(thr, t0 + p.grace)
+            mask = np.zeros(self.N, dtype=np.int8)
+            mask[vi[sel][arr <= seal]] = 1
+            v.certs[idx] = (v.sid, self.slot, lat)
+            if p.frozen:
+                v.frozen_wt = wt.copy()
+                v.frozen_slot = self.slot
+            # cert reading: the certificate's signers are credited; block reading (Q2): every vote issued is carried by
+            # some block in the checkpoint's past, whatever the aggregator kept
+            self._push(v, idx, voters.astype(np.int8) if p.pmode == "block" else mask)
+            self.records.append((self.slot, idx, v.sid, lat, ratio, denom / total if total > 0 else 0.0))
+        else:
+            v.stalls.append((idx, self.slot))
+            if p.pmode == "cert":
+                self._push(v, idx, np.zeros(self.N, dtype=np.int8))
+            elif p.pmode in ("seen", "block"):
+                self._push(v, idx, voters.astype(np.int8))
+            # frozen: no ring update
+            self.records.append((self.slot, idx, v.sid, -1.0, ratio, denom / total if total > 0 else 0.0))
+
+    def _push(self, v, idx, mask):
+        row = idx % self.p.presence
+        v.pcount -= v.ring[row]
+        v.ring[row] = mask
+        v.pcount += mask
+        v.ring_idx[row] = idx
+
+    # ------------------------------------------------------------- queries
+    def recs(self):
+        return np.array(self.records, dtype=float).reshape(-1, 6)
+
+    def elig_mask(self):
+        return (self.weight >= self.p.dust) & ~self.stripped
+
+    def share(self, keys):
+        e = self.elig_mask()
+        tot = self.weight[e].sum()
+        if tot <= 0:
+            return 0.0
+        m = np.zeros(self.N, dtype=bool)
+        m[keys] = True
+        return float(self.weight[m & e].sum() / tot)
+
+
+# ---------------------------------------------------------------- helpers
+
+def pareto_hashrates(rng, n, total=1.0):
+    h = rng.pareto(PARETO_SHAPE, n) + 1.0
+    return h * (total / h.sum())
+
+
+def assign_regions(hashes, targets):
+    """Largest key first, each to the region with the largest remaining hashrate deficit."""
+    targets = np.asarray(targets, dtype=float)
+    tot = hashes.sum()
+    filled = np.zeros(targets.size)
+    reg = np.zeros(hashes.size, dtype=np.int64)
+    for i in np.argsort(-hashes):
+        r = int(np.argmax(targets * tot - filled))
+        reg[i] = r
+        filled[r] += hashes[i]
+    return reg
+
+
+def pick_weight_subset(rng, weights, frac):
+    """Random keys whose weight sums to about frac of total, never over."""
+    target = frac * weights.sum()
+    mask = np.zeros(weights.size, dtype=bool)
+    acc = 0.0
+    for i in rng.permutation(weights.size):
+        if acc + weights[i] <= target:
+            mask[i] = True
+            acc += weights[i]
+    return mask, acc / weights.sum()
+
+
+def gini(x):
+    x = np.sort(np.asarray(x, dtype=float))
+    n = x.size
+    if n == 0 or x.sum() == 0:
+        return 0.0
+    cum = np.cumsum(x)
+    return (n + 1 - 2.0 * cum.sum() / cum[-1]) / n
+
+
+def pct(x, d=1):
+    return ("%%.%df%%%%" % d) % (100.0 * x)
+
+
+def md_table(headers, rows):
+    out = ["| " + " | ".join(str(h) for h in headers) + " |", "|" + "---|" * len(headers)]
+    for r in rows:
+        out.append("| " + " | ".join(str(c) for c in r) + " |")
+    return "\n".join(out)
+
+
+def lat_stats(recs, s_from=0, s_to=None):
+    if s_to is None:
+        s_to = np.inf
+    sel = recs[(recs[:, 0] >= s_from) & (recs[:, 0] < s_to)]
+    lat = sel[:, 3]
+    ok = lat >= 0
+    n = int(sel.shape[0])
+    st = int((~ok).sum())
+    cps = np.floor(lat[ok] / SLOT_S)
+    d = dict(n=n, stalls=st, c0=int((cps == 0).sum()), c1=int((cps == 1).sum()), c2=int((cps >= 2).sum()))
+    if ok.any():
+        d.update(med=float(np.median(lat[ok])), p99=float(np.percentile(lat[ok], 99)), mx=float(lat[ok].max()),
+                 ratio_min=float(sel[ok, 4].min()), ratio_med=float(np.median(sel[ok, 4])))
+    else:
+        d.update(med=float("nan"), p99=float("nan"), mx=float("nan"), ratio_min=float("nan"), ratio_med=float("nan"))
+    return d
+
+
+def lat_row(label, d):
+    return [label, d["n"], d["c0"], d["c1"], d["c2"], d["stalls"], "%.1f" % d["med"], "%.1f" % d["p99"], "%.1f" % d["mx"],
+            "%.3f" % d["ratio_min"]]
+
+
+LAT_HEADERS = ["run", "checkpoints", "locked in slot 0", "slot 1", "slot 2+", "stalled", "median s", "p99 s", "max s",
+               "min signed/denominator"]
+
+
+def first_lock_after(recs, slot, sid=None):
+    sel = recs[(recs[:, 0] >= slot) & (recs[:, 3] >= 0)]
+    if sid is not None:
+        sel = sel[sel[:, 2] == sid]
+    if sel.shape[0] == 0:
+        return None
+    return int(sel[0, 0])
+
+
+def stalls_between(recs, s_from, s_to, sid=None):
+    sel = recs[(recs[:, 0] >= s_from) & (recs[:, 0] < s_to) & (recs[:, 3] < 0)]
+    if sid is not None:
+        sel = sel[sel[:, 2] == sid]
+    return int(sel.shape[0])
+
+
+def fmt_min(slots):
+    if slots is None:
+        return "never"
+    m = slots * SLOT_S / 60.0
+    if m < 120:
+        return "%.0f min" % m
+    if m < 48 * 60:
+        return "%.1f h" % (m / 60.0)
+    return "%.1f d" % (m / 1440.0)
+
+
+def fmt_days(slots):
+    return "never" if slots is None else "%.1f" % (slots / SLOTS_PER_DAY)
+
+
+def build_honest(p, seed, n_regions=3, geography=GEOGRAPHY, big_pool=None):
+    rng = np.random.default_rng(seed)
+    sim = Sim(p, rng, n_regions=n_regions)
+    if big_pool is None:
+        h = pareto_hashrates(rng, N_HONEST)
+        reg = assign_regions(h, geography)
+        sim.add_keys(h, reg, flaky=True)
+        pool = None
+    else:
+        h = pareto_hashrates(rng, N_HONEST - 1, total=1.0 - big_pool)
+        reg = assign_regions(h, geography)
+        sim.add_keys(h, reg, flaky=True)
+        pool = int(sim.add_keys([big_pool], [3], flaky=False)[0])
+    return sim, rng, pool
+
+
+# ---------------------------------------------------------------- scenarios
+
+def scenario_a(args):
+    out = ["### A. Steady state from zero history, 1,000 honest keys, 3 regions %s, %d days" % (
+        "/".join(pct(g, 0) for g in GEOGRAPHY), args.days_a), ""]
+    days = args.days_a
+    snaps = {}
+    lat_rows = []
+    prop_rows = []
+    for denom in ("active", "total"):
+        p = P(denom=denom, delay=args.delay)
+        sim, rng, _ = build_honest(p, args.seed)
+        sim.init_views(warm=False)
+        series = []
+
+        def snap(s, series=series):
+            e = s.elig_mask()
+            series.append((s.slot // SLOTS_PER_DAY, s.weight.sum() / WINDOW_BLOCKS, int((~e).sum())))
+
+        sim.run(days * SLOTS_PER_DAY, snap=(SLOTS_PER_DAY, snap))
+        snap(sim)
+        recs = sim.recs()
+        snaps[denom] = series
+        lat_rows.append(lat_row("%s, days 0 to 1" % denom, lat_stats(recs, 0, SLOTS_PER_DAY)))
+        lat_rows.append(lat_row("%s, days 1 to 30" % denom, lat_stats(recs, SLOTS_PER_DAY, 30 * SLOTS_PER_DAY)))
+        lat_rows.append(lat_row("%s, days 30 to %d" % (denom, days), lat_stats(recs, 30 * SLOTS_PER_DAY, None)))
+        w = sim.weight
+        ws = w / w.sum()
+        hs = sim.hash / sim.hash.sum()
+        order = np.argsort(-hs)
+        rel = ws / hs
+        prop_rows.append([denom, "%.5f" % np.corrcoef(hs, ws)[0, 1], "%.3f / %.3f" % (gini(hs), gini(ws)),
+                          pct(hs[order[0]]) + " / " + pct(ws[order[0]]),
+                          pct(hs[order[:10]].sum()) + " / " + pct(ws[order[:10]].sum()),
+                          pct(hs[order[500:]].sum()) + " / " + pct(ws[order[500:]].sum()),
+                          "%.3f / %.3f" % (rel.min(), rel.max()), int((rel < 0.9).sum()), int((~sim.elig_mask()).sum())])
+        # genesis stall run
+        first = first_lock_after(recs, 0)
+        snaps[denom + "_first"] = first
+    s = snaps["active"]
+    ramp = []
+    for d in (1, 2, 5, 10, 20, 30, 31, 45, days):
+        row = [x for x in s if x[0] == d]
+        if row:
+            ramp.append([d, pct(row[0][1]), row[0][2]])
+    out.append("Weight ramp (active run; the total run mines the same blocks):")
+    out.append("")
+    out.append(md_table(["day", "total weight / full window", "keys under dust (100 blocks)"], ramp))
+    out.append("")
+    out.append("Weight against hashrate at day %d:" % days)
+    out.append("")
+    out.append(md_table(["denominator", "corr(hash, weight)", "Gini hash / weight", "top-1 hash / weight",
+                         "top-10 hash / weight", "bottom-500 hash / weight", "min / max weight:hash", "keys under 0.9x",
+                         "dust keys"], prop_rows))
+    out.append("")
+    out.append("Lock latency (seconds from checkpoint block to quorum; slot = 30 s), inter-region delay %.1f s:" % args.delay)
+    out.append("")
+    out.append(md_table(LAT_HEADERS, lat_rows))
+    out.append("")
+    out.append("First lock from genesis: active at slot %s, total at slot %s (the first checkpoints have no key above dust)." % (
+        snaps["active_first"], snaps["total_first"]))
+    out.append("")
+    # delay comparison, short warm-started runs
+    rows = []
+    for delay in (0.5, 2.0, 5.0):
+        for grace in (args.grace,):
+            p = P(denom="active", delay=delay, grace=grace)
+            sim, rng, _ = build_honest(p, args.seed)
+            sim.warm_start()
+            sim.init_views(warm=True)
+            sim.run(args.days_delay * SLOTS_PER_DAY)
+            recs = sim.recs()
+            d = lat_stats(recs)
+            # participation of the slowest region
+            v = sim.views[0]
+            part = sim.participation(v, v.next_idx)
+            by_region = ["%.3f" % np.average(part[sim.region == r], weights=sim.weight[sim.region == r]) for r in range(3)]
+            rows.append(lat_row("delay %.1f s, grace %.0f s, %d days warm" % (delay, grace, args.days_delay), d) + ["/".join(by_region)])
+    out.append("Delay sweep, warm-started (steady-state weights), active denominator. Last column: weight-averaged participation per region.")
+    out.append("")
+    out.append(md_table(LAT_HEADERS + ["participation r0/r1/r2"], rows))
+    return "\n".join(out)
+
+
+def scenario_b(args):
+    out = ["### B. Rental burst at day 60, one public key with a x honest hashrate, signs every checkpoint", ""]
+    mults = (1, 2, 4, 9)
+    series = {}
+    cross = {}
+    for a in mults:
+        p = P(denom="active", delay=args.delay)
+        sim, rng, _ = build_honest(p, args.seed, n_regions=4)
+        att = int(sim.add_keys([0.0], [3], flaky=False)[0])
+        sim.warm_start()
+        sim.init_views(warm=True)
+        sim.run(SLOTS_PER_HOUR)  # one hour of baseline
+        t_event = sim.slot
+        sim.hash[att] = float(a)
+        s = []
+        c13 = c23 = None
+        for day in range(1, args.days_b + 1):
+            for _ in range(SLOTS_PER_DAY // 24):
+                sim.run(24)
+                sh = sim.share([att])
+                if c13 is None and sh >= 1.0 / 3.0:
+                    c13 = sim.slot - t_event
+                if c23 is None and sh >= TWO_THIRDS:
+                    c23 = sim.slot - t_event
+            s.append((day, sim.share([att])))
+        recs = sim.recs()
+        series[a] = s
+        cross[a] = (c13, c23, lat_stats(recs, t_event, None))
+    pick = [d for d in (1, 5, 10, 15, 20, 25, 30, 35) if d <= args.days_b]
+    rows = []
+    for d in pick:
+        row = ["+%d" % d]
+        for a in mults:
+            sim_v = dict(series[a])[d]
+            formula = min(d / 30.0, 1.0) * a / (1.0 + a)
+            row.append("%s / %s" % (pct(sim_v), pct(formula)))
+        rows.append(row)
+    out.append("Attacker weight share, simulated / formula (t/30) x a/(1+a):")
+    out.append("")
+    out.append(md_table(["day after burst"] + ["a=%d (%s of hashrate)" % (a, pct(a / (1.0 + a), 0)) for a in mults], rows))
+    out.append("")
+    ev = [
+        ["crosses 1/3 (honest alone can no longer lock), sim day"] + [fmt_days(cross[a][0]) for a in mults],
+        ["crosses 1/3, formula 10(1+a)/a"] + ["%.1f" % (10.0 * (1 + a) / a) for a in mults],
+        ["crosses 2/3 (locks alone), sim day"] + [fmt_days(cross[a][1]) for a in mults],
+        ["crosses 2/3, formula 20(1+a)/a"] + ["%.1f" % (20.0 * (1 + a) / a) if 20.0 * (1 + a) / a <= 30 else "never (ceiling %s)" % pct(a / (1 + a), 0) for a in mults],
+        ["max abs deviation sim vs formula, days 1 to 30, points"] + [
+            "%.2f" % (100 * max(abs(v - min(d / 30.0, 1.0) * a / (1.0 + a)) for d, v in series[a] if d <= 30)) for a in mults],
+        ["stalled checkpoints after the burst"] + [cross[a][2]["stalls"] for a in mults],
+    ]
+    out.append(md_table(["event"] + ["a=%d" % a for a in mults], ev))
+    return "\n".join(out)
+
+
+def scenario_c(args):
+    out = ["### C. Silent set: a random set holding x of weight stops signing at day 60 (hour 3 of the run) and keeps mining", ""]
+    fracs = (0.34, 0.40, 0.45, 0.50, 0.55)
+    configs = [("active", "cert", args.hours_c, 0.0, 240), ("active", "seen", args.hours_c, 0.0, 240),
+               ("active", "frozen", args.hours_c, 0.0, 240), ("active", "cert", args.hours_c_total, 0.0, 2880),
+               ("active", "cert", args.hours_c_total, 0.8, 240), ("active", "cert", args.hours_c_total, 0.85, 240),
+               ("active", "cert", args.hours_c_total, 1.0, 240), ("total", "cert", args.hours_c_total, 0.0, 240)]
+    labels = []
+    for denom, pmode, hours, floor, presence in configs:
+        lab = P(denom=denom, pmode=pmode, floor=floor, presence=presence).label()
+        if presence != 240:
+            lab += ", presence %d" % presence
+        labels.append(lab)
+    rows = []
+    detail = []
+    for frac in fracs:
+        row = [pct(frac, 0)]
+        for denom, pmode, hours, floor, presence in configs:
+            p = P(denom=denom, pmode=pmode, delay=args.delay, floor=floor, presence=presence)
+            sim, rng, _ = build_honest(p, args.seed)
+            sim.warm_start()
+            sim.init_views(warm=True)
+            sim.run(3 * SLOTS_PER_HOUR)
+            silent, got = pick_weight_subset(rng, sim.weight, frac)
+            sim.signs[silent] = False
+            t_event = sim.slot
+            v0 = sim.views[0]
+            e0 = sim.elig_mask()
+            s_on = float(sim.weight[e0 & sim.online & ~silent].sum() / sim.weight[e0].sum())
+            p0 = float((sim.weight * sim.participation(v0, v0.next_idx))[e0].sum() / sim.weight[e0].sum())
+            predicted = max(0, int(round(p.presence * (p0 - 1.5 * s_on))))
+            sim.run(int(hours * SLOTS_PER_HOUR))
+            recs = sim.recs()
+            fl = first_lock_after(recs, t_event)
+            st = stalls_between(recs, t_event, sim.slot)
+            v = sim.views[0]
+            part = sim.participation(v, v.next_idx)
+            sil_part = float(np.average(part[silent], weights=sim.weight[silent]))
+            # stalls after the first lock (does it stay locked?)
+            later = stalls_between(recs, fl, sim.slot) if fl is not None else st
+            fl_txt = "never (%s)" % fmt_min(sim.slot - t_event) if fl is None else fmt_min(fl - t_event)
+            row.append("%s, %d stalled" % (fl_txt, st))
+            if denom == "active" and pmode == "cert" and floor == 0 and presence == 240:
+                tail = recs[(recs[:, 0] >= sim.slot - SLOTS_PER_HOUR) & (recs[:, 3] >= 0)]
+                detail.append([pct(frac, 0), pct(got), int(silent.sum()), pct(s_on), "%.3f" % p0, predicted, fl_txt, st, later, "%.3f" % sil_part,
+                               "%.3f" % (np.median(tail[:, 4]) if tail.shape[0] else float("nan")),
+                               "%.3f" % (np.median(tail[:, 5]) if tail.shape[0] else float("nan"))])
+        rows.append(row)
+    out.append("Time from the event to the first lock, and checkpoints stalled in the run (%d h for the first three columns, %d h for the rest):" % (
+        args.hours_c, args.hours_c_total))
+    out.append("")
+    out.append(md_table(["silent weight"] + labels, rows))
+    out.append("")
+    out.append("Active/cert detail. Predicted stalls = presence x (p0 - 1.5 x online signing share), where p0 is the weight-averaged participation at the event:")
+    out.append("")
+    out.append(md_table(["silent weight", "picked", "keys", "online signing share at event", "p0", "predicted stalls", "first lock", "stalled", "stalled after first lock",
+                         "silent participation at end", "signed/denominator at end (median, last hour)",
+                         "active/total at end"], detail))
+    return "\n".join(out)
+
+
+def scenario_d(args):
+    out = ["### D. Churn: a random set holding x of weight stops mining and signing at day 60 (hour 3 of the run)", ""]
+    fracs = (0.35, 0.50)
+    rows = []
+    dconfigs = [P(denom="active", delay=args.delay), P(denom="active", presence=2880, delay=args.delay),
+                P(denom="active", floor=0.8, delay=args.delay), P(denom="active", floor=0.85, delay=args.delay),
+                P(denom="active", floor=1.0, delay=args.delay), P(denom="total", delay=args.delay)]
+    for frac in fracs:
+        for p in dconfigs:
+            days = args.days_d35 if frac < 0.4 else args.days_d50
+            denom = p.label() + (", presence 2880" if p.presence == 2880 else "")
+            sim, rng, _ = build_honest(p, args.seed)
+            sim.warm_start()
+            sim.init_views(warm=True)
+            sim.run(3 * SLOTS_PER_HOUR)
+            gone, got = pick_weight_subset(rng, sim.weight, frac)
+            sim.signs[gone] = False
+            sim.online[gone] = False
+            sim.flaky[gone] = False
+            sim.hash[gone] = 0.0
+            t_event = sim.slot
+            live = ~gone
+            sim.run(int(days * SLOTS_PER_DAY))
+            recs = sim.recs()
+            fl = first_lock_after(recs, t_event)
+            st = stalls_between(recs, t_event, sim.slot)
+            later = stalls_between(recs, fl, sim.slot) if fl is not None else 0
+            live_share_at = None
+            rows.append([pct(frac, 0), pct(got), int(gone.sum()), denom,
+                         "never in %s" % fmt_min(sim.slot - t_event) if fl is None else fmt_min(fl - t_event),
+                         st, later, pct(sim.share(np.flatnonzero(live)))])
+    out.append(md_table(["churn weight", "picked", "keys", "denominator", "first lock after the event", "stalled checkpoints",
+                         "stalled after first lock", "live share of total weight at end of run"], rows))
+    out.append("")
+    out.append("Analytic (perfect retarget): live share of total weight on day t = 1 - x(30 - t)/30, so the total "
+               "denominator recovers at t = 30(1 - 1/(3x)): never for x <= 1/3, day 1.4 at 35%, day 10 at 50%.")
+    return "\n".join(out)
+
+
+def run_partition(seed, fracs, att_share, dur_min, p, pre_min=60, post_min=180):
+    rng = np.random.default_rng(seed)
+    nR = max(3, len(fracs) + 1)
+    sim = Sim(p, rng, n_regions=nR)
+    h = pareto_hashrates(rng, N_HONEST)
+    reg = assign_regions(h, fracs)
+    sim.add_keys(h, reg, flaky=True)
+    groups = [[i] for i in range(len(fracs))]
+    att = None
+    if att_share > 0:
+        att = int(sim.add_keys([att_share / (1.0 - att_share)], [len(fracs)], flaky=False, equiv=True)[0])
+        groups[0].append(len(fracs))
+    sim.warm_start()
+    sim.init_views(warm=True)
+    sim.run(pre_min * 2)
+    t_split = sim.slot
+    sim.split(groups)
+    sides = [v.sid for v in sim.views]
+    sim.run(dur_min * 2)
+    t_heal = sim.slot
+    sim.heal()
+    sim.run(post_min * 2)
+    recs = sim.recs()
+    res = dict(conflicts=len(sim.conflicts), t_split=t_split, t_heal=t_heal)
+    res["first_conflict_min"] = (min(c[1] for c in sim.conflicts) - t_split) / 2.0 if sim.conflicts else None
+    res["side_first_lock"] = []
+    res["side_locks"] = []
+    res["side_stalls"] = []
+    for sid in sides:
+        fl = first_lock_after(recs[recs[:, 0] < t_heal], t_split, sid=sid)
+        res["side_first_lock"].append(None if fl is None else (fl - t_split) / 2.0)
+        sel = recs[(recs[:, 0] >= t_split) & (recs[:, 0] < t_heal) & (recs[:, 2] == sid)]
+        res["side_locks"].append(int((sel[:, 3] >= 0).sum()))
+        res["side_stalls"].append(int((sel[:, 3] < 0).sum()))
+    res["post_stalls"] = stalls_between(recs, t_heal, sim.slot)
+    fl = first_lock_after(recs, t_heal)
+    res["post_first_lock_min"] = None if fl is None else (fl - t_heal) / 2.0
+    res["att_share"] = sim.share([att]) if att is not None else 0.0
+    return res
+
+
+def fm(m):
+    return "never" if m is None else "%.0f" % m
+
+
+def scenario_e(args):
+    out = ["### E. Partition: honest weight split across sides for a set time, then healed", ""]
+    configs = [P(denom="active", pmode="cert", delay=args.delay), P(denom="active", pmode="seen", delay=args.delay),
+               P(denom="total", delay=args.delay)]
+    q = getattr(args, "quick", False)
+    splits = [("50/50", [0.5, 0.5])] if q else [("50/50", [0.5, 0.5]), ("33/33/34", [0.33, 0.33, 0.34])]
+    rows_conf = []
+    rows_first = []
+    for name, fr in splits:
+        for att in ((0.0,) if q else (0.0, 0.34)):
+            for dur in ((30,) if q else (30, 90, 150)):
+                rc = [name, pct(att, 0), dur]
+                rf = [name, pct(att, 0), dur]
+                for p in configs:
+                    r = run_partition(args.seed, fr, att, dur, p, **({"pre_min": 15, "post_min": 30} if q else {}))
+                    rc.append("%d%s" % (r["conflicts"], "" if r["conflicts"] == 0 else " (first at %s min)" % fm(r["first_conflict_min"])))
+                    rf.append(" / ".join(fm(x) for x in r["side_first_lock"]) + " ; post-heal stalls %d" % r["post_stalls"])
+                rows_conf.append(rc)
+                rows_first.append(rf)
+    labels = [p.label() for p in configs]
+    out.append("Conflicting locks (two certificates at one index, different blocks). Attacker = equivocating key holding the stated share of total weight, honest weight split as stated. Pass needs 0 at 0% attacker for 30, 90 and 150 min.")
+    out.append("")
+    out.append(md_table(["honest split", "attacker", "partition min"] + labels, rows_conf))
+    out.append("")
+    out.append("Minutes after the split until each side's first lock (side order as in the split; attacker mines on the first side) and stalls in the 3 hours after the heal:")
+    out.append("")
+    out.append(md_table(["honest split", "attacker", "partition min"] + labels, rows_first))
+    out.append("")
+    # supplementary: more splits, 0% attacker, plus the DAA-retarget and floor variants
+    configs2 = configs + [P(denom="active", pmode="cert", daa="full", delay=args.delay),
+                          P(denom="active", pmode="seen", daa="full", delay=args.delay),
+                          P(denom="active", pmode="cert", floor=0.8, daa="full", delay=args.delay),
+                          P(denom="active", pmode="cert", floor=0.85, daa="full", delay=args.delay),
+                          P(denom="active", pmode="cert", floor=1.0, daa="full", delay=args.delay)]
+    labels2 = [p.label() for p in configs2]
+    rows = []
+    for name, fr in (("50/50", [0.5, 0.5]), ("60/40", [0.6, 0.4]), ("67/33", [0.67, 0.33]), ("80/20", [0.8, 0.2]),
+                     ("33/33/34", [0.33, 0.33, 0.34])):
+        for dur in (150, 360):
+            rc = [name, dur]
+            for p in configs2:
+                r = run_partition(args.seed, fr, 0.0, dur, p, post_min=120)
+                rc.append("%d; %s" % (r["conflicts"], " / ".join(fm(x) for x in r["side_first_lock"])))
+            rows.append(rc)
+    out.append("Supplementary, 0% attacker, 150 and 360 min. Cell = conflicting locks; minutes to each side's first lock. "
+               "'+daa' = each side retargets to 1 block/s at once (worst case for the presence clock); "
+               "'+floor0.80' = active denominator never below 80% of total weight (a lock needs at least 53.3% of total), "
+               "'+floor0.85' needs 56.7%, '+floor1.00' needs 66.7% (the rule of 4 October 2026; arithmetically the total column).")
+    out.append("")
+    out.append(md_table(["honest split", "partition min"] + labels2, rows))
+    out.append("")
+    # presence window sweep, active/cert, 0% attacker
+    rows = []
+    for presence in (240, 720, 2880):
+        for name, fr in (("50/50", [0.5, 0.5]), ("60/40", [0.6, 0.4]), ("33/33/34", [0.33, 0.33, 0.34])):
+            dur = {240: 360, 720: 720, 2880: 1500}[presence]
+            p = P(denom="active", pmode="cert", presence=presence, delay=args.delay)
+            r = run_partition(args.seed, fr, 0.0, dur, p, post_min=120)
+            s = min(fr)
+            pred = presence * (1.0 - 1.5 * s) / s / 2.0 if s < TWO_THIRDS else None
+            rows.append([presence, "%.1f h" % (presence / 120.0), name, dur, r["conflicts"],
+                         " / ".join(fm(x) for x in r["side_first_lock"]), "%.0f" % pred if pred is not None else "no"])
+    out.append("Presence window sweep, active/cert, 0% attacker. Prediction for the smallest side (share s): "
+               "first lock after presence x (1 - 1.5 s) / s slots, in minutes = that / 2.")
+    out.append("")
+    out.append(md_table(["presence (checkpoints)", "presence (hours)", "honest split", "partition min", "conflicts",
+                         "first lock per side, min", "predicted smallest-side lock, min"], rows))
+    return "\n".join(out)
+
+
+def run_eclipse(seed, dur_h, poisoned, p, pre_min=60, post_h=5):
+    rng = np.random.default_rng(seed)
+    sim = Sim(p, rng, n_regions=5)
+    # shares of TOTAL weight: pool 20%, attacker 34% when poisoned, the rest honest
+    others = 0.8 if not poisoned else 0.46
+    h = pareto_hashrates(rng, N_HONEST - 1, total=others)
+    reg = assign_regions(h, GEOGRAPHY)
+    sim.add_keys(h, reg, flaky=True)
+    K = int(sim.add_keys([0.2], [3], flaky=False)[0])
+    att = None
+    if poisoned:
+        att = int(sim.add_keys([0.34], [4], flaky=False, equiv=True)[0])
+    sim.warm_start()
+    sim.init_views(warm=True)
+    track = []
+
+    def snap(s):
+        v = [x for x in s.views if 0 in x.regions][0]
+        track.append((s.slot, float(min(1.0, v.pcount[K] / p.presence))))
+
+    sim.run(pre_min * 2, snap=(10, snap))
+    t0 = sim.slot
+    if poisoned:
+        sim.split([[0, 1, 2], [3, 4]])
+    else:
+        sim.extra_delay[K] = dur_h * 3600.0
+    sim.run(int(dur_h * SLOTS_PER_HOUR), snap=(10, snap))
+    t_end = sim.slot
+    if poisoned:
+        sim.heal()
+    else:
+        sim.extra_delay[K] = 0.0
+    sim.run(post_h * SLOTS_PER_HOUR, snap=(10, snap))
+    snap(sim)
+    recs = sim.recs()
+    tr = np.array(track)
+    during = tr[(tr[:, 0] >= t0) & (tr[:, 0] <= t_end)]
+    after = tr[tr[:, 0] >= t_end]
+    res = dict(min_part=float(tr[:, 1].min()), part_at_end=float(during[-1, 1]) if during.shape[0] else 1.0)
+    below = tr[(tr[:, 0] >= t0) & (tr[:, 1] < 0.999)]
+    res["drop_min"] = None if below.shape[0] == 0 else (below[0, 0] - t0) / 2.0
+    rec = after[after[:, 1] >= 0.999]
+    res["recover_min"] = None if rec.shape[0] == 0 else (rec[0, 0] - t_end) / 2.0
+    res["conflicts"] = len(sim.conflicts)
+    res["pconflicts"] = len(sim.pconflicts)
+    res["first_conflict_min"] = (min(c[1] for c in sim.conflicts) - t0) / 2.0 if sim.conflicts else None
+    honest_sid = [v for v in [1]] if poisoned else [0]
+    res["honest_stalls"] = stalls_between(recs, t0, t_end, sid=(1 if poisoned else 0))
+    res["ecl_locks"] = int(((recs[:, 2] == 2) & (recs[:, 3] >= 0) & (recs[:, 0] >= t0) & (recs[:, 0] < t_end)).sum()) if poisoned else 0
+    res["post_stalls"] = stalls_between(recs, t_end, sim.slot)
+    return res
+
+
+def scenario_f(args):
+    out = ["### F. Eclipse of one pool holding 20% of weight", ""]
+    configs = [P(denom="active", pmode="cert", delay=args.delay), P(denom="active", pmode="seen", delay=args.delay),
+               P(denom="total", delay=args.delay)]
+    q = getattr(args, "quick", False)
+    rows = []
+    for dur in ((1,) if q else (1, 2, 4)):
+        for p in configs:
+            r = run_eclipse(args.seed, dur, False, p)
+            rows.append([dur, p.label(), "%.3f" % r["min_part"], fm(r["drop_min"]), fm(r["recover_min"]), r["conflicts"],
+                         r["honest_stalls"], r["post_stalls"]])
+    out.append("F1. Delayed view: the pool receives every block and vote %s late, votes for the right blocks, late. Participation as the rest of the network computes it." % "D hours")
+    out.append("")
+    out.append(md_table(["eclipse h", "denominator", "pool participation, minimum", "first drop below 1, min after start",
+                         "back to 1, min after end", "conflicting locks", "stalls during", "stalls after"], rows))
+    out.append("")
+    rows = []
+    configs2 = configs + [P(denom="active", pmode="cert", floor=0.8, delay=args.delay),
+                          P(denom="active", pmode="cert", floor=0.85, delay=args.delay),
+                          P(denom="active", pmode="cert", floor=1.0, delay=args.delay)]
+    for dur in ((1,) if q else (1, 2, 4)):
+        for p in configs2:
+            r = run_eclipse(args.seed, dur, True, p)
+            rows.append([dur, p.label(), "%.3f" % r["min_part"], fm(r["recover_min"]), r["conflicts"], fm(r["first_conflict_min"]),
+                         r["ecl_locks"], r["honest_stalls"], r["post_stalls"]])
+    out.append("F2. Poisoned view: an attacker holding 34% of weight feeds the pool a private fork for the eclipse, signs both forks, and is stripped at the heal. The pool votes for the attacker's checkpoints. Honest side = the other 46%.")
+    out.append("")
+    out.append(md_table(["eclipse h", "denominator", "pool participation, minimum (honest view)", "back to 1, min after end",
+                         "conflicting locks", "first conflict, min after start", "locks on the eclipsed side",
+                         "honest-side stalls during", "stalls after heal"], rows))
+    return "\n".join(out)
+
+
+def scenario_g(args):
+    out = ["### G. Honest doubling overnight at day 60: 1,000 new keys, fresh Pareto draw, same total hashrate as the old 1,000", ""]
+    rows_share = []
+    rows_lat = []
+    ev = []
+    for denom in ("active", "total"):
+        p = P(denom=denom, delay=args.delay)
+        sim, rng, _ = build_honest(p, args.seed)
+        h_new = pareto_hashrates(rng, N_HONEST, total=1.0)
+        new = sim.add_keys(np.zeros(N_HONEST), assign_regions(h_new, GEOGRAPHY), flaky=True)
+        old = np.arange(N_HONEST)
+        sim.warm_start()
+        sim.init_views(warm=True)
+        sim.run(SLOTS_PER_HOUR)
+        t_event = sim.slot
+        sim.hash[new] = h_new
+        sim.set_uptime()
+        series = []
+        last_23 = None
+        for day in range(1, args.days_g + 1):
+            sim.run(SLOTS_PER_DAY)
+            so = sim.share(old)
+            sn = sim.share(new)
+            dust_new = int((sim.weight[new] < p.dust).sum())
+            series.append((day, so, sn, dust_new))
+            if so >= TWO_THIRDS:
+                last_23 = day
+        recs = sim.recs()
+        if denom == "active":
+            for d in (1, 5, 10, 15, 20, 21, 25):
+                r = [x for x in series if x[0] == d]
+                if r:
+                    rows_share.append(["+%d" % d, pct(r[0][1]), pct(r[0][2]), pct(min(d / 60.0, 0.5)), r[0][3]])
+        rows_lat.append(lat_row("%s, day before" % denom, lat_stats(recs, 0, t_event)))
+        rows_lat.append(lat_row("%s, days 1 to 5 after" % denom, lat_stats(recs, t_event, t_event + 5 * SLOTS_PER_DAY)))
+        rows_lat.append(lat_row("%s, days 5 to %d after" % (denom, args.days_g), lat_stats(recs, t_event + 5 * SLOTS_PER_DAY, None)))
+        r45 = next((d for d, so, sn, _ in series if sn >= 0.45), None)
+        r49 = next((d for d, so, sn, _ in series if sn >= 0.49), None)
+        ev.append([denom, last_23, "not in run" if r45 is None else r45, "not in run" if r49 is None else r49,
+                   stalls_between(recs, t_event, sim.slot)])
+    out.append("Weight shares (active run):")
+    out.append("")
+    out.append(md_table(["day after doubling", "old cohort", "new cohort", "new cohort formula t/60", "new keys under dust"], rows_share))
+    out.append("")
+    out.append(md_table(["denominator", "last day old cohort holds 2/3 (locks alone)", "new cohort reaches 45%", "new cohort reaches 49%",
+                         "stalled checkpoints"], ev))
+    out.append("")
+    out.append(md_table(LAT_HEADERS, rows_lat))
+    return "\n".join(out)
+
+
+# ---------------------------------------------------------------- additions, 3 October 2026, for section 3.11 Guarantees
+# Scenarios H to K run the rule exactly as Q3 specifies it (active denominator, cert reading, the floor at FLOOR_F x 2/3 of
+# total) over several seeds. Floor factor FLOOR_F: 0.85 until 4 October 2026 (a lock needed 2/3 of active and 17/30 of
+# total); 1.0 since (decision of 4 October 2026, O-3.15: a lock needs 2/3 of total, which implies the active test).
+# `--floor 0.85` reproduces the 3 October tables. The floor-1.0 rule is arithmetically the "total" denominator of A to G.
+
+NEW_SEEDS = (7, 11, 13, 17, 19)
+FLOOR_F = 1.0
+P_FLOOR = FLOOR_F * TWO_THIRDS
+
+
+def set_floor(f):
+    """Set the floor factor for rule_p and the predictions of H to L (called from main with --floor)."""
+    global FLOOR_F, P_FLOOR
+    FLOOR_F = float(f)
+    P_FLOOR = FLOOR_F * TWO_THIRDS
+
+
+def rule_p(delay, **kw):
+    """Q3 as specified: active/cert with the floor at FLOOR_F x 2/3 of total."""
+    base = dict(denom="active", pmode="cert", floor=FLOOR_F, delay=delay)
+    base.update(kw)
+    return P(**base)
+
+
+def rule_name():
+    return "active/cert + floor %.2f (a lock needs %s of total)" % (FLOOR_F, pct(P_FLOOR))
+
+
+def seeds_of(args):
+    s = getattr(args, "seeds", "") or ""
+    out = tuple(int(x) for x in s.split(",") if x.strip())
+    return out or NEW_SEEDS
+
+
+def span(vals, fmt="%d"):
+    """'a' when every seed agrees, else 'a to b'."""
+    vals = list(vals)
+    lo, hi = min(vals), max(vals)
+    return (fmt % lo) if lo == hi else (fmt % lo) + " to " + (fmt % hi)
+
+
+def span_min(vals):
+    """Minutes over seeds, 'never' when no seed produced the event, 'never in k of n' when some did."""
+    vals = list(vals)
+    got = [v for v in vals if v is not None]
+    if not got:
+        return "never"
+    s = span(got, "%.0f")
+    if len(got) < len(vals):
+        s += " (never in %d of %d)" % (len(vals) - len(got), len(vals))
+    return s
+
+
+def lock_gaps_min(recs, s_from, s_to):
+    """Longest run of consecutive slots without a lock inside [s_from, s_to), in minutes; the 'finality unavailable' interval."""
+    locks = recs[(recs[:, 0] >= s_from) & (recs[:, 0] < s_to) & (recs[:, 3] >= 0), 0]
+    edges = np.concatenate([[s_from], np.unique(locks), [s_to]])
+    return float(np.max(np.diff(edges)) * SLOT_S / 60.0)
+
+
+def run_partition2(seed, fracs, att_share, dur_min, p, pre_min=60, post_min=180):
+    """run_partition with the heal check of section 3.11 item 4: every certificate any side held before the heal
+    is in the merged view afterwards (a lock is never reversed), plus per-side lock counts."""
+    rng = np.random.default_rng(seed)
+    nR = max(3, len(fracs) + 1)
+    sim = Sim(p, rng, n_regions=nR)
+    h = pareto_hashrates(rng, N_HONEST)
+    reg = assign_regions(h, fracs)
+    sim.add_keys(h, reg, flaky=True)
+    groups = [[i] for i in range(len(fracs))]
+    att = None
+    if att_share > 0:
+        att = int(sim.add_keys([att_share / (1.0 - att_share)], [len(fracs)], flaky=False, equiv=True)[0])
+        groups[0].append(len(fracs))
+    sim.warm_start()
+    sim.init_views(warm=True)
+    sim.run(pre_min * 2)
+    t_split = sim.slot
+    sim.split(groups)
+    sides = [v.sid for v in sim.views]
+    sim.run(dur_min * 2)
+    t_heal = sim.slot
+    before = {}
+    for v in sim.views:
+        for idx, c in v.certs.items():
+            before.setdefault(idx, set()).add(c[0])
+    sim.heal()
+    merged = sim.views[0].certs
+    kept = all(idx in merged for idx in before)
+    sim.run(post_min * 2)
+    recs = sim.recs()
+    res = dict(conflicts=len(sim.conflicts), kept=kept, pre_locks=len(before),
+               att_share=sim.share([att]) if att is not None else 0.0, pconflicts=len(sim.pconflicts))
+    res["first_conflict_min"] = (min(c[1] for c in sim.conflicts) - t_split) / 2.0 if sim.conflicts else None
+    res["side_first_lock"] = []
+    res["side_locks"] = []
+    for sid in sides:
+        fl = first_lock_after(recs[recs[:, 0] < t_heal], t_split, sid=sid)
+        res["side_first_lock"].append(None if fl is None else (fl - t_split) / 2.0)
+        sel = recs[(recs[:, 0] >= t_split) & (recs[:, 0] < t_heal) & (recs[:, 2] == sid)]
+        res["side_locks"].append(int((sel[:, 3] >= 0).sum()))
+    fl = first_lock_after(recs, t_heal)
+    res["post_first_lock_min"] = None if fl is None else (fl - t_heal) / 2.0
+    res["post_stalls"] = stalls_between(recs, t_heal, sim.slot)
+    return res
+
+
+def scenario_h(args):
+    """Partition with an equivocator under the rule as specified: the 4/30 bound of section 3.11."""
+    seeds = seeds_of(args)
+    q = getattr(args, "quick", False)
+    durs = (60,) if q else (150, 360)
+    atts = (0.0, 0.10, 0.13, 0.14, 0.20, 0.30, 0.33, 0.34)
+    out = ["### H. Partition of a 50/50 honest network with an equivocating attacker, rule as specified (%s), "
+           "each side retargets at once (+daa, the median-time clock of Q1), seeds %s" % (rule_name(), ",".join(str(s) for s in seeds)), ""]
+    out.append("Attacker = one key holding the stated share of TOTAL weight, mining on the first side, voting on both. Each side holds "
+               "(1 - a)/2 + a of total. Prediction (section 3.11 item 2): a side holding s of total locks alone once s >= the floor (%s) and its "
+               "view's active weight has decayed to 1.5 s, which under the cert reading is P x (1 - 1.5 s) slots after the split "
+               "(P = 240, so 2 h x (1 - 1.5 s), 0 at s >= 2/3); two sides over the floor need a >= %s." % (pct(P_FLOOR), pct(2 * P_FLOOR - 1)))
+    out.append("")
+    rows = []
+    for a in atts:
+        s = (1.0 - a) / 2.0 + a
+        pred = "no (side holds %s < %s)" % (pct(s), pct(P_FLOOR)) if s < P_FLOOR else "%.0f min" % (120.0 * max(0.0, 1.0 - 1.5 * s))
+        for dur in durs:
+            rs = [run_partition2(sd, [0.5, 0.5], a, dur, rule_p(args.delay, daa="full")) for sd in seeds]
+            rows.append([pct(a, 0), pct(s), dur, pred, span(r["conflicts"] for r in rs), span_min(r["first_conflict_min"] for r in rs),
+                         " / ".join(span_min([r["side_first_lock"][i] for r in rs]) for i in range(2)),
+                         "yes" if all(r["kept"] for r in rs) else "NO", span(r["post_stalls"] for r in rs)])
+    out.append(md_table(["attacker (of total)", "each side holds", "partition min", "predicted first conflict", "conflicting locks",
+                         "first conflict, min", "first lock per side, min", "every pre-heal lock kept at the heal", "stalls in 3 h after heal"], rows))
+    return "\n".join(out)
+
+
+def scenario_i(args):
+    """The 40/40/20 split, three readings."""
+    seeds = seeds_of(args)
+    q = getattr(args, "quick", False)
+    durs = (60,) if q else (150, 360)
+    out = ["### I. The 40/40/20 split, rule as specified (%s), +daa, seeds %s" % (rule_name(), ",".join(str(s) for s in seeds)), ""]
+    cases = [("honest 40/40/20, no attacker", [0.4, 0.4, 0.2], 0.0),
+             ("honest 40/40/20 plus a 10% equivocator (sides 36+10 / 36+10 / 18+10)", [0.4, 0.4, 0.2], 0.10),
+             ("honest 40/40/20 plus a 20% equivocator (sides 32+20 / 32+20 / 16+20)", [0.4, 0.4, 0.2], 0.20),
+             ("honest 40/40 plus a 20% equivocator reaching both (sides 40+20 / 40+20)", [0.5, 0.5], 0.20),
+             ("honest 40/40 plus a 34% equivocator reaching both (sides 33+34 / 33+34)", [0.5, 0.5], 0.34)]
+    rows = []
+    for name, fr, a in cases:
+        for dur in durs:
+            rs = [run_partition2(sd, fr, a, dur, rule_p(args.delay, daa="full")) for sd in seeds]
+            n = len(fr)
+            rows.append([name, dur, span(r["conflicts"] for r in rs), span_min(r["first_conflict_min"] for r in rs),
+                         " / ".join(span([r["side_locks"][i] for r in rs]) for i in range(n)),
+                         "yes" if all(r["kept"] for r in rs) else "NO",
+                         span_min(r["post_first_lock_min"] for r in rs), span(r["post_stalls"] for r in rs)])
+    out.append(md_table(["case", "partition min", "conflicting locks", "first conflict, min", "locks per side during",
+                         "every pre-heal lock kept", "first lock after heal, min", "stalls in 3 h after heal"], rows))
+    return "\n".join(out)
+
+
+def run_silent_resume(seed, frac, hours, p, pre_h=3, post_h=3):
+    sim, rng, _ = build_honest(p, seed)
+    sim.warm_start()
+    sim.init_views(warm=True)
+    sim.run(pre_h * SLOTS_PER_HOUR)
+    silent, got = pick_weight_subset(rng, sim.weight, frac)
+    sim.signs[silent] = False
+    t0 = sim.slot
+    sim.run(int(hours * SLOTS_PER_HOUR))
+    t1 = sim.slot
+    sim.signs[silent] = True
+    sim.run(post_h * SLOTS_PER_HOUR)
+    recs = sim.recs()
+    fl = first_lock_after(recs, t0)
+    fr = first_lock_after(recs, t1)
+    return dict(got=got, stalls=stalls_between(recs, t0, t1), first_lock=None if fl is None or fl >= t1 else (fl - t0) / 2.0,
+                gap=lock_gaps_min(recs, t0, t1), resume=None if fr is None else (fr - t1) / 2.0,
+                post_stalls=stalls_between(recs, t1, sim.slot), conflicts=len(sim.conflicts),
+                locked_share=float(((recs[:, 0] >= t0) & (recs[:, 0] < t1) & (recs[:, 3] >= 0)).sum()) / max(1, int(((recs[:, 0] >= t0) & (recs[:, 0] < t1)).sum())))
+
+
+def scenario_j(args):
+    """Signing stops while mining continues, for 1, 6 and 24 hours, then resumes."""
+    seeds = seeds_of(args)
+    q = getattr(args, "quick", False)
+    hours = (1,) if q else (1, 6, 24)
+    fracs = (0.34, 0.40, 0.45)
+    out = ["### J. Signing stops while mining continues for 1, 6 and 24 hours, then resumes; rule as specified, seeds %s" % ",".join(str(s) for s in seeds), ""]
+    out.append("A random set holding x of weight stops signing at hour 3 and resumes after the stated time. Its weight never ages out because it keeps mining. "
+               "'Longest gap' is the longest interval without a lock while they are silent: the time the node reports finality unavailable.")
+    out.append("")
+    rows = []
+    for frac in fracs:
+        for h in hours:
+            rs = [run_silent_resume(sd, frac, h, rule_p(args.delay)) for sd in seeds]
+            rows.append([pct(frac, 0), h, span_min(r["first_lock"] for r in rs), span(r["stalls"] for r in rs),
+                         span(int(round(100 * r["locked_share"])) for r in rs) + "%",
+                         span((r["gap"] for r in rs), "%.0f"), span_min(r["resume"] for r in rs), span(r["post_stalls"] for r in rs),
+                         span(r["conflicts"] for r in rs)])
+    out.append(md_table(["silent weight", "silent hours", "first lock after the stop, min", "stalled checkpoints while silent",
+                         "checkpoints locked while silent", "longest gap without a lock, min", "first lock after resume, min",
+                         "stalls in 3 h after resume", "conflicting locks"], rows))
+    return "\n".join(out)
+
+
+def run_acquired(seed, bought, att_hash, signs, days, p):
+    """An attacker buys keys holding `bought` of window weight and starts mining at `att_hash` of network hashrate.
+    The sellers keep their rigs and mine on under fresh keys."""
+    sim, rng, _ = build_honest(p, seed)
+    # the bought set is picked by hashrate, which the warm start turns into weight at the same share
+    mask, got = pick_weight_subset(rng, sim.hash, bought)
+    bidx = np.flatnonzero(mask)
+    seller_hash = sim.hash[bidx].copy()
+    fresh = sim.add_keys(np.zeros(bidx.size), sim.region[bidx].copy(), flaky=True)
+    att = int(sim.add_keys([0.0], [0], flaky=False, signs=signs)[0])
+    sim.warm_start()
+    sim.init_views(warm=True)
+    sim.run(SLOTS_PER_HOUR)
+    honest = sim.hash.sum()
+    sim.hash[fresh] = seller_hash
+    sim.hash[bidx] = 0.0
+    sim.flaky[bidx] = False
+    sim.online[bidx] = True
+    sim.signs[bidx] = signs
+    sim.hash[att] = honest * att_hash / (1.0 - att_hash)
+    sim.set_uptime()
+    got = float(sim.share(bidx))
+    owned = np.concatenate([bidx, [att]])
+    t0 = sim.slot
+    series = []
+    above13 = None
+    last13 = None
+    for day in range(1, days + 1):
+        s0 = sim.slot
+        sim.run(SLOTS_PER_DAY)
+        sh = sim.share(owned)
+        recs = sim.recs()
+        series.append((day, sh, stalls_between(recs, s0, sim.slot)))
+        if sh >= 1.0 / 3.0:
+            last13 = day
+            if above13 is None:
+                above13 = day
+    recs = sim.recs()
+    return dict(got=got, series=series, above13=above13, last13=last13, stalls=stalls_between(recs, t0, sim.slot),
+                max_share=max(s for _, s, _ in series), end_share=series[-1][1], conflicts=len(sim.conflicts))
+
+
+def scenario_k(args):
+    """Acquired old keys against fresh hashrate."""
+    seeds = seeds_of(args)
+    q = getattr(args, "quick", False)
+    days = 3 if q else 30
+    att_hash = 0.30
+    out = ["### K. Acquired keys: an attacker buys keys holding 20%% or 40%% of window weight and mines at 30%% of network hashrate from day 0; "
+           "rule as specified, %d days, seeds %s" % (days, ",".join(str(s) for s in seeds)), ""]
+    out.append("The sellers keep their rigs and mine on under fresh keys (so honest hashrate is unchanged and the fresh keys start under dust). "
+               "Formula (section 3.11 item 5): share(t) = b (1 - t/30) + 0.30 t/30, the bought blocks age out of the window as the attacker's own blocks enter it. "
+               "'Fresh hash only' is b = 0: share(t) = 0.30 t/30.")
+    out.append("")
+    configs = [(0.0, True), (0.20, True), (0.40, True), (0.20, False), (0.40, False)]
+    results = {}
+    for b, signs in configs:
+        results[(b, signs)] = [run_acquired(sd, b, att_hash, signs, days, rule_p(args.delay)) for sd in seeds]
+    pick = [d for d in (1, 5, 10, 15, 20, 25, 30) if d <= days]
+    rows = []
+    for d in pick:
+        row = ["+%d" % d]
+        for b, signs in configs:
+            if not signs:
+                continue
+            vals = [dict((x[0], x[1]) for x in r["series"])[d] for r in results[(b, signs)]]
+            formula = b * (1.0 - d / 30.0) + att_hash * d / 30.0
+            row.append("%s / %s" % (span((100 * v for v in vals), "%.1f") + "%", pct(formula)))
+        rows.append(row)
+    out.append("Attacker weight share, simulated over the seeds / formula (attacker signs every checkpoint):")
+    out.append("")
+    out.append(md_table(["day after purchase"] + ["bought %s" % pct(b, 0) for b, s in configs if s], rows))
+    out.append("")
+    ev = []
+    for b, signs in configs:
+        rs = results[(b, signs)]
+        ev.append([pct(b, 0), "signs" if signs else "silent", span((100 * r["got"] for r in rs), "%.1f") + "%",
+                   span((100 * r["max_share"] for r in rs), "%.1f") + "%", span((100 * r["end_share"] for r in rs), "%.1f") + "%",
+                   "never" if all(r["above13"] is None for r in rs) else "from day %s until day %s" % (span(r["above13"] for r in rs), span(r["last13"] for r in rs)),
+                   span(r["stalls"] for r in rs), span(r["conflicts"] for r in rs)])
+    out.append(md_table(["bought weight", "attacker", "bought, as picked", "peak share", "share at day %d" % days,
+                         "holds at least 1/3 (can veto)", "stalled checkpoints in %d days" % days, "conflicting locks"], ev))
+    out.append("")
+    srows = []
+    for b, signs in configs:
+        if signs:
+            continue
+        rs = results[(b, signs)]
+        for d in pick:
+            vals = [dict((x[0], x[2]) for x in r["series"])[d] for r in rs]
+            srows.append([pct(b, 0), "+%d" % d, span(vals)])
+    out.append("Stalled checkpoints per day while the attacker withholds its votes (2,880 checkpoints a day):")
+    out.append("")
+    out.append(md_table(["bought weight", "day", "stalled that day"], srows))
+    return "\n".join(out)
+
+
+def run_churn(seed, frac, days, p):
+    """Scenario D as a function: a set holding `frac` of weight stops mining and signing at hour 3; survivors inherit the block supply."""
+    sim, rng, _ = build_honest(p, seed)
+    sim.warm_start()
+    sim.init_views(warm=True)
+    sim.run(3 * SLOTS_PER_HOUR)
+    gone, got = pick_weight_subset(rng, sim.weight, frac)
+    sim.signs[gone] = False
+    sim.online[gone] = False
+    sim.flaky[gone] = False
+    sim.hash[gone] = 0.0
+    t_event = sim.slot
+    sim.run(int(days * SLOTS_PER_DAY))
+    recs = sim.recs()
+    fl = first_lock_after(recs, t_event)
+    st = stalls_between(recs, t_event, sim.slot)
+    later = stalls_between(recs, fl, sim.slot) if fl is not None else 0
+    return dict(got=got, first_lock_days=None if fl is None else (fl - t_event) / float(SLOTS_PER_DAY), stalls=st, later=later,
+                live_share=float(sim.share(np.flatnonzero(~gone))), conflicts=len(sim.conflicts))
+
+
+def scenario_l(args):
+    """The floor at 2/3 of total (4 October 2026): the cases the decision turns on, over seeds. Rule as rule_p (FLOOR_F)."""
+    seeds = seeds_of(args)
+    few = seeds[:3]
+    q = getattr(args, "quick", False)
+    out = ["### L. The floor at %s of total (floor factor %.2f): silent weight, churn, the eclipse, and long partitions with view-local "
+           "weight; seeds %s (churn and long partitions: %s)" % (pct(P_FLOOR), FLOOR_F, ",".join(str(s) for s in seeds), ",".join(str(s) for s in few)), ""]
+    # (a) silent weight, fine resolution around one third
+    hours = (1,) if q else (1, 6)
+    fracs = (0.25, 0.30, 0.32, 0.33, 0.34, 0.40, 0.45)
+    out.append("L1. Signing stops while mining continues (as J), finer around one third. The floor needs the signing weight at or above %s of total; "
+               "the model's resting participation is 0.978, so the online signing share is about 0.978 x (1 - silent)." % pct(P_FLOOR))
+    out.append("")
+    rows = []
+    for frac in fracs:
+        for h in hours:
+            rs = [run_silent_resume(sd, frac, h, rule_p(args.delay)) for sd in seeds]
+            rows.append([pct(frac, 0), pct(0.978 * (1.0 - frac)), h, span_min(r["first_lock"] for r in rs), span(r["stalls"] for r in rs),
+                         span(int(round(100 * r["locked_share"])) for r in rs) + "%",
+                         span((r["gap"] for r in rs), "%.0f"), span_min(r["resume"] for r in rs), span(r["post_stalls"] for r in rs),
+                         span(r["conflicts"] for r in rs)])
+    out.append(md_table(["silent weight", "online signing share, about", "silent hours", "first lock after the stop, min", "stalled checkpoints while silent",
+                         "checkpoints locked while silent", "longest gap without a lock, min", "first lock after resume, min",
+                         "stalls in 3 h after resume", "conflicting locks"], rows))
+    out.append("")
+    # (b) churn
+    d35 = 1 if q else 3
+    d50 = 1 if q else 12
+    out.append("L2. Churn (as D): a set stops mining and signing; survivors inherit the block supply (perfect retarget). Analytic first lock at day "
+               "30 (1 - (1 - %s) / x) for a set holding x: %s." % (pct(P_FLOOR), ", ".join("%s: %s" % (pct(x, 0), "never" if 1 - (1 - P_FLOOR) / x <= 0 else "day %.1f" % (30 * (1 - (1 - P_FLOOR) / x))) for x in (0.35, 0.50))))
+    out.append("")
+    rows = []
+    for frac, days in ((0.35, d35), (0.50, d50)):
+        rs = [run_churn(sd, frac, days, rule_p(args.delay)) for sd in few]
+        rows.append([pct(frac, 0), days, span_min(None if r["first_lock_days"] is None else r["first_lock_days"] * 1440.0 for r in rs) if days <= 1
+                     else ("never in %d days" % days if all(r["first_lock_days"] is None for r in rs) else span((r["first_lock_days"] for r in rs if r["first_lock_days"] is not None), "%.1f") + " days"),
+                     span(r["stalls"] for r in rs), span(r["later"] for r in rs), span((100 * r["live_share"] for r in rs), "%.1f") + "%", span(r["conflicts"] for r in rs)])
+    out.append(md_table(["churn weight", "days run", "first lock after the event", "stalled checkpoints", "stalled after the first lock",
+                         "live share of total weight at the end", "conflicting locks"], rows))
+    out.append("")
+    # (c) the poisoned eclipse of F2
+    out.append("L3. The poisoned eclipse (as F2): a 34% attacker feeds a 20% pool a private fork and signs both; the eclipsed side holds 54% of total.")
+    out.append("")
+    rows = []
+    for dur in ((1,) if q else (1, 2, 4)):
+        rs = [run_eclipse(sd, dur, True, rule_p(args.delay)) for sd in seeds]
+        rows.append([dur, span(r["conflicts"] for r in rs), span_min(r["first_conflict_min"] for r in rs), span(r["ecl_locks"] for r in rs),
+                     span(r["honest_stalls"] for r in rs), span(r["post_stalls"] for r in rs), span(("%.3f" % r["min_part"] for r in rs), "%s")])
+    out.append(md_table(["eclipse h", "conflicting locks", "first conflict, min", "locks on the eclipsed side", "honest-side stalls during",
+                         "stalls after heal", "pool participation, minimum"], rows))
+    out.append("")
+    # (d) long honest partitions with view-local weight tables: the window bound of attack scenario 6A
+    days = 1 if q else 12
+    out.append("L4. Long honest partitions with view-local weight ('+local'): after the split a side's window holds only the blocks it has seen, so its own "
+               "share of its own table rises as s + (1 - s) T / 30 on day T (each side retargets, +daa). Prediction: a side with pre-split share s locks "
+               "alone from day 30 (floor - s) / (1 - s), 0 if s is already at the floor; %d days, no attacker, seeds %s. The 3 October tables kept weights "
+               "global (results_v2.md, 'Weights in a partition'), which hid this bound; attack scenario 6A found it on the devnet." % (days, ",".join(str(s) for s in few)))
+    out.append("")
+    rows = []
+    for name, fr in (("50/50", [0.5, 0.5]), ("60/40", [0.6, 0.4]), ("55/45", [0.55, 0.45])):
+        for f in sorted({FLOOR_F, 0.85}, reverse=True):
+            pf = f * TWO_THIRDS
+            preds = []
+            for s in fr:
+                preds.append("0" if s >= pf else ("%.1f" % (30.0 * (pf - s) / (1.0 - s)) if 30.0 * (pf - s) / (1.0 - s) <= days else "> %d" % days))
+            p = P(denom="active", pmode="cert", floor=f, daa="full", local=True, delay=args.delay)
+            rs = [run_partition2(sd, fr, 0.0, days * 1440, p, pre_min=60, post_min=180) for sd in few]
+            fl = [[None if r["side_first_lock"][i] is None else r["side_first_lock"][i] / 1440.0 for r in rs] for i in range(len(fr))]
+            rows.append([name, "%.2f (%s)" % (f, pct(pf)), days, " / ".join(preds),
+                         " / ".join(("never" if all(x is None for x in col) else span((x for x in col if x is not None), "%.1f") + ("" if all(x is not None for x in col) else " (never in %d of %d)" % (sum(x is None for x in col), len(col)))) for col in fl),
+                         span(r["conflicts"] for r in rs),
+                         ("never" if all(r["first_conflict_min"] is None for r in rs) else span((r["first_conflict_min"] / 1440.0 for r in rs if r["first_conflict_min"] is not None), "%.1f") + " days"),
+                         "yes" if all(r["kept"] for r in rs) else "NO", span(r["post_stalls"] for r in rs)])
+    out.append(md_table(["honest split", "floor factor (lock needs, of the side's own table)", "partition days", "predicted first lock per side, day",
+                         "first lock per side, day", "conflicting locks", "first conflict", "every pre-heal lock kept", "stalls in 3 h after heal"], rows))
+    return "\n".join(out)
+
+
+# ---------------------------------------------------------------- addition, 4 October 2026 (evening): rule v3, ledger F21
+# The frozen-table rule ('+frozen', P.frozen): a lock needs two thirds of the sliding table at C_i (Q3 as today) AND two
+# thirds of the table frozen at the view's last certified checkpoint, signers counted at their frozen weights. The frozen
+# table rolls forward only when a checkpoint certifies and expires one window (30 days) after its checkpoint, after which
+# the sliding table alone applies. Scenario M measures what that does to the window bound of 3.7 item 9 (L4, 6A), to 6B,
+# to the heal, to churn (L2) and to the equivocator bound (H).
+
+WINDOW_SLOTS = WINDOW_HOURS * SLOTS_PER_HOUR
+
+
+def rule_v3(delay, **kw):
+    base = dict(denom="active", pmode="cert", floor=FLOOR_F, delay=delay, daa="full", local=True, frozen=True)
+    base.update(kw)
+    return P(**base)
+
+
+def rule_v2_local(delay, **kw):
+    base = dict(denom="active", pmode="cert", floor=FLOOR_F, delay=delay, daa="full", local=True)
+    base.update(kw)
+    return P(**base)
+
+
+def scenario_m(args):
+    seeds = seeds_of(args)[:2]
+    q = getattr(args, "quick", False)
+    out = ["### M. Rule v3, the frozen weight table (ledger F21): partitions, the heal, churn and the equivocator bound; "
+           "v2 = the rule as specified today with view-local weights (+local), v3 = v2 plus the frozen table (+frozen); seeds %s" % ",".join(str(s) for s in seeds), ""]
+    out.append("Prediction for v3: a side of an honest partition holds its pre-split share s of the frozen table for as long as the table stands, so "
+               "no side under two thirds locks until the frozen checkpoint is one window old (day 30 after the last lock, whatever s), after which the "
+               "sliding table applies and the v2 bound (already crossed) locks both sides. A side at or above two thirds (6B) locks at once under both. "
+               "A departed set stalls the survivors until day 30 under v3 (v2: 30 (1 - 1/(3x)) days). The equivocator bound of 3.11.2 is unchanged: an "
+               "equivocator at a of total gives each side (1 - a)/2 + a of the frozen table, two thirds at a = 1/3.")
+    out.append("")
+    # M1: 6A and 6B at devnet lengths (minutes), v2 against v3
+    rows = []
+    cases = [("50/50 (6A)", [0.5, 0.5]), ("60/40", [0.6, 0.4]), ("67/33 (6B, the 4/2 split)", [0.667, 0.333]), ("70/30", [0.7, 0.3])]
+    durs = (60,) if q else (150, 360)
+    for name, fr in cases:
+        for dur in durs:
+            for lab, mk in (("v2", rule_v2_local), ("v3", rule_v3)):
+                rs = [run_partition2(sd, fr, 0.0, dur, mk(args.delay), pre_min=60, post_min=180) for sd in seeds]
+                rows.append([name, dur, lab, span(r["conflicts"] for r in rs), " / ".join(span([r["side_locks"][i] for r in rs]) for i in range(2)),
+                             " / ".join(span_min([r["side_first_lock"][i] for r in rs]) for i in range(2)),
+                             "yes" if all(r["kept"] for r in rs) else "NO", span_min(r["post_first_lock_min"] for r in rs), span(r["post_stalls"] for r in rs)])
+    out.append("M1. Honest partitions at devnet lengths, no attacker, each side retargets and counts only its own blocks:")
+    out.append("")
+    out.append(md_table(["honest split", "partition min", "rule", "conflicting locks", "locks per side during", "first lock per side, min",
+                         "every pre-heal lock kept", "first lock after heal, min", "stalls in 3 h after heal"], rows))
+    out.append("")
+    # M2: L4 rerun, 12 days
+    days = 1 if q else 12
+    rows = []
+    for name, fr in (("50/50", [0.5, 0.5]), ("60/40", [0.6, 0.4]), ("55/45", [0.55, 0.45])):
+        for lab, mk in (("v2", rule_v2_local), ("v3", rule_v3)):
+            rs = [run_partition2(sd, fr, 0.0, days * 1440, mk(args.delay), pre_min=60, post_min=180) for sd in seeds]
+            fl = [[None if r["side_first_lock"][i] is None else r["side_first_lock"][i] / 1440.0 for r in rs] for i in range(len(fr))]
+            rows.append([name, lab, days, " / ".join(("never" if all(x is None for x in col) else span((x for x in col if x is not None), "%.1f")) for col in fl),
+                         span(r["conflicts"] for r in rs),
+                         "yes" if all(r["kept"] for r in rs) else "NO", span_min(r["post_first_lock_min"] for r in rs), span(r["post_stalls"] for r in rs)])
+    out.append("M2. L4 again (long honest partitions, %d days): v2 locks alone from day 30 (2/3 - s) / (1 - s), v3 not before day 30:" % days)
+    out.append("")
+    out.append(md_table(["honest split", "rule", "partition days", "first lock per side, day", "conflicting locks", "every pre-heal lock kept",
+                         "first lock after heal, min", "stalls in 3 h after heal"], rows))
+    out.append("")
+    # M3: the expiry of the frozen table: 50/50 for 31 days under v3
+    days3 = 2 if q else 31
+    rows = []
+    for name, fr in (("50/50", [0.5, 0.5]), ("60/40", [0.6, 0.4])):
+        rs = [run_partition2(sd, fr, 0.0, days3 * 1440, rule_v3(args.delay), pre_min=60, post_min=180) for sd in seeds]
+        fl = [[None if r["side_first_lock"][i] is None else r["side_first_lock"][i] / 1440.0 for r in rs] for i in range(len(fr))]
+        rows.append([name, days3, " / ".join(("never" if all(x is None for x in col) else span((x for x in col if x is not None), "%.2f")) for col in fl),
+                     span(r["conflicts"] for r in rs),
+                     ("never" if all(r["first_conflict_min"] is None for r in rs) else span((r["first_conflict_min"] / 1440.0 for r in rs if r["first_conflict_min"] is not None), "%.2f") + " days")])
+    out.append("M3. The frozen table expires one window after its checkpoint (%d-day partitions, v3): the bound moves to day 30 for every split under two thirds:" % days3)
+    out.append("")
+    out.append(md_table(["honest split", "partition days", "first lock per side, day", "conflicting locks", "first conflict"], rows))
+    out.append("")
+    # M4: churn under v3 against v2
+    rows = []
+    for frac in (0.35, 0.50):
+        for lab, mk in (("v2", rule_p), ("v3", lambda d: rule_p(d, frozen=True))):
+            rs = [run_churn(sd, frac, days3, mk(args.delay)) for sd in seeds]
+            rows.append([pct(frac, 0), lab, days3,
+                         "never in %d days" % days3 if all(r["first_lock_days"] is None for r in rs) else span((r["first_lock_days"] for r in rs if r["first_lock_days"] is not None), "%.2f") + " days",
+                         span(r["stalls"] for r in rs), span(r["later"] for r in rs), span(r["conflicts"] for r in rs)])
+    out.append("M4. Churn (as L2): a set holding x of weight stops mining and signing at once; v2 recovers at 30 (1 - 1/(3x)) days, v3 when the frozen table expires:")
+    out.append("")
+    out.append(md_table(["churn weight", "rule", "days run", "first lock after the event", "stalled checkpoints", "stalled after the first lock", "conflicting locks"], rows))
+    out.append("")
+    # M5: the equivocator bound (H) under v3
+    rows = []
+    for a in (0.30, 0.33, 0.34):
+        s_ = (1.0 - a) / 2.0 + a
+        rs = [run_partition2(sd, [0.5, 0.5], a, 60 if q else 150, rule_v3(args.delay)) for sd in seeds]
+        rows.append([pct(a, 0), pct(s_), span(r["conflicts"] for r in rs), span_min(r["first_conflict_min"] for r in rs),
+                     " / ".join(span_min([r["side_first_lock"][i] for r in rs]) for i in range(2))])
+    out.append("M5. The equivocator across a 50/50 split (as H), v3: each side holds (1 - a)/2 + a of the frozen table, so the one-third bound stands:")
+    out.append("")
+    out.append(md_table(["attacker (of total)", "each side holds", "conflicting locks", "first conflict, min", "first lock per side, min"], rows))
+    return "\n".join(out)
+
+
+def run_pulse_sim(job):
+    """Scenario N worker: the honest network (1,000 keys) plus one renter key, the block supply from a difficulty trace
+    (daa_trace.pulse_trace: a 50x pulse for 10 min of every hour under a lagging retarget), the weight kept in the W2
+    form asked. Returns the renter's weight share at the end of every day, the day it first holds a third, stalls and
+    conflicts."""
+    rule, seed, days, form, delay = job
+    sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
+    import daa_trace as DT
+    tr = DT.cached_trace(rule, seed, days)
+    s = tr["settle_slots"]
+    base, rent = tr["blocks"][0, s:], tr["blocks"][1, s:]
+    hb, hr = tr["hashes"][0, s:], tr["hashes"][1, s:]
+    p = rule_p(delay, wform=form)
+    sim, rng, _ = build_honest(p, seed)
+    att = int(sim.add_keys([0.0], [0], flaky=False, signs=True)[0])
+    sim.warm_start()
+    sim.init_views(warm=True)
+    shares = sim.hash[:att] / sim.hash[:att].sum()
+    n_keys = sim.N
+
+    def supply(slot):
+        v = np.zeros(n_keys)
+        i = min(slot, base.size - 1)
+        nb = int(base[i])
+        if nb > 0:
+            v[:att] = rng.multinomial(nb, shares)
+        v[att] = rent[i]
+        return v
+
+    sim.supply = supply
+    series = []
+    cross = None
+    t0 = time.time()
+    for day in range(1, days + 1):
+        s0 = sim.slot
+        sim.run(SLOTS_PER_DAY)
+        sh = float(sim.share([att]))
+        recs = sim.recs()
+        sel = recs[(recs[:, 0] >= s0) & (recs[:, 0] < sim.slot)]
+        locks = int((sel[:, 3] >= 0).sum()) if sel.size else 0
+        stalls = stalls_between(recs, s0, sim.slot) if recs.size else 0
+        lo, hi = max(0, (day - 30) * SLOTS_PER_DAY), day * SLOTS_PER_DAY
+        hs = float(hr[lo:hi].sum() / max(hr[lo:hi].sum() + hb[lo:hi].sum(), 1e-9))
+        series.append((day, sh, stalls, locks, hs))
+        if cross is None and sh >= 1.0 / 3.0:
+            cross = day
+    return dict(rule=rule, seed=seed, form=form, days=days, series=series, cross=cross, peak=max(x[1] for x in series),
+                end=series[-1][1], hash_end=series[-1][4], stalls=sum(x[2] for x in series), locks=sum(x[3] for x in series),
+                conflicts=len(sim.conflicts), wall=time.time() - t0, keys=n_keys)
+
+
+def scenario_n(args):
+    """The M14/F14 run (O-3.14): a 50x rented pulse for 10 minutes of every hour against a lagging retarget, Kaspa's
+    sampled DAA and the Igneum rule v2, the weight counted under both W2 forms."""
+    from multiprocessing import Pool
+    seeds = seeds_of(args)[:3] if not getattr(args, "seeds", "") else seeds_of(args)
+    q = getattr(args, "quick", False)
+    days = 2 if q else int(getattr(args, "days", 30))
+    rules = getattr(args, "rules", "igneum-v2,kaspa").split(",")
+    jobs_n = int(getattr(args, "jobs", 6))
+    sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
+    import daa_trace as DT
+    t0 = time.time()
+    # the traces first (one per rule and seed, cached under daa_trace.CACHE_DIR), then the sims (one per form)
+    with Pool(min(jobs_n, len(rules) * len(seeds))) as pool:
+        traces = pool.map(DT.job, [(r, sd, days) for r in rules for sd in seeds])
+    t_trace = time.time() - t0
+    jobs = [(r, sd, days, form, args.delay) for r in rules for sd in seeds for form in ("daa", "median")]
+    with Pool(min(jobs_n, len(jobs))) as pool:
+        res = pool.map(run_pulse_sim, jobs)
+    tr = {(t["rule"], t["seed"]): t for t in traces}
+    out = ["### N. Pulsed rental against a lagging retarget (ledger M14, F14; O-3.14): a renter brings 50x the honest hashrate for "
+           "10 minutes of every hour for %d days; the block supply comes from the difficulty controller in the loop "
+           "(sim/daa_trace.py: Kaspa's sampled DAA and the Igneum rule v2 of sim/difficulty/sim.py), the weight is counted under "
+           "both W2 forms; rule %s, seeds %s, delay %.1f s; traces %.0f s, sims %.0f s wall" % (
+               days, rule_name(), ",".join(str(s) for s in seeds), args.delay, t_trace, time.time() - t0 - t_trace), ""]
+    out.append("Hash share = the renter's hashes over everyone's in the trailing 30 days of the trace (the pulse is 500 of 560 "
+               "hash-minutes an hour, 89.3%). Weight share over hash share is the amplifier the critic names; 1.0 means the "
+               "window pays blocks per hash at par, below 1.0 the pulse buys weight at a loss. Under a perfect retarget "
+               "(results_v2.md) the renter's share would be its block share.")
+    out.append("")
+    rows = []
+    for r in rules:
+        t = [tr[(r, sd)] for sd in seeds]
+        rows.append([r, "trace (aggregate, no finality)", span((100 * x["hash_share_30d"] for x in t), "%.1f") + "%",
+                     span((100 * x["block_share"] for x in t), "%.1f") + "%", span((x["bph_ratio"] for x in t), "%.3f"),
+                     "%s / %s" % (span((x["cross_daa"] or 0 for x in t)) if all(x["cross_daa"] for x in t) else "never",
+                                  span((x["cross_median"] or 0 for x in t)) if all(x["cross_median"] for x in t) else "never"),
+                     "%s / %s" % (span((100 * x["end_daa"] for x in t), "%.1f") + "%", span((100 * x["end_median"] for x in t), "%.1f") + "%"),
+                     "%s / %s" % (span((x["end_daa"] / x["hash_share_30d"] for x in t), "%.2f"), span((x["end_median"] / x["hash_share_30d"] for x in t), "%.2f")),
+                     span((x["blocks_per_day"] for x in t), "%.0f"), span((x["peak_blocks_per_min"] for x in t)), span((x["worst_gap_s"] for x in t), "%.0f"), "", ""])
+        for form in ("daa", "median"):
+            rs = [x for x in res if x["rule"] == r and x["form"] == form]
+            rows.append([r, "finality sim, W2 %s" % form, span((100 * x["hash_end"] for x in rs), "%.1f") + "%", "", "",
+                         span((x["cross"] or 0 for x in rs)) if all(x["cross"] for x in rs) else ("never" if not any(x["cross"] for x in rs) else "/".join(str(x["cross"] or "never") for x in rs)),
+                         span((100 * x["end"] for x in rs), "%.1f") + "% (peak " + span((100 * x["peak"] for x in rs), "%.1f") + "%)",
+                         span((x["end"] / x["hash_end"] for x in rs), "%.2f"), "", "", "", span((x["stalls"] for x in rs)) + " of " + span((x["stalls"] + x["locks"] for x in rs)), span((x["conflicts"] for x in rs))])
+    out.append(md_table(["controller", "row", "renter hash share (30 d)", "renter block share", "blocks per hash, renter over base",
+                         "day the renter first holds 1/3 (DAA form / median form)", "renter weight share at day %d" % days,
+                         "weight share over hash share", "chain blocks per day", "peak blocks per minute", "worst gap (s)",
+                         "stalled checkpoints of all", "conflicting locks"], rows))
+    out.append("")
+    pick = [d for d in (1, 2, 3, 5, 7, 10, 12, 15, 20, 25, 30) if d <= days]
+    out.append("Renter weight share at the end of the day, finality sim, seed %d (DAA form / median form):" % seeds[0])
+    out.append("")
+    srows = []
+    for r in rules:
+        d_ = {x["form"]: x for x in res if x["rule"] == r and x["seed"] == seeds[0]}
+        srows.append([r] + ["%.1f / %.1f" % (100 * d_["daa"]["series"][d - 1][1], 100 * d_["median"]["series"][d - 1][1]) for d in pick])
+    out.append(md_table(["controller"] + ["+%d" % d for d in pick], srows))
+    out.append("")
+    out.append("Same, from the trace alone (the renter against the whole honest network, exact to the slot):")
+    out.append("")
+    srows = []
+    for r in rules:
+        t = tr[(r, seeds[0])]
+        srows.append([r] + ["%.1f / %.1f" % (100 * t["daily_daa"][d - 1], 100 * t["daily_median"][d - 1]) for d in pick])
+    out.append(md_table(["controller"] + ["+%d" % d for d in pick], srows))
+    out.append("")
+    out.append("Sim walls: " + ", ".join("%s/%s/s%d %.0f s" % (x["rule"], x["form"], x["seed"], x["wall"]) for x in res) + ".")
+    return "\n".join(out)
+
+
+def run_hostile(seed, hostile, pmode, delay, pool_share=0.20, pre_h=3, attack_h=2, post_h=2):
+    """Ledger F3 / O-3.3: a chosen aggregator drops a 20% pool's votes from every certificate it builds for attack_h hours."""
+    p = rule_p(delay, pmode=pmode)
+    rng = np.random.default_rng(seed)
+    sim = Sim(p, rng, n_regions=4)
+    h = pareto_hashrates(rng, N_HONEST - 1, total=1.0 - pool_share)
+    reg = assign_regions(h, GEOGRAPHY)
+    sim.add_keys(h, reg, flaky=True)
+    K = int(sim.add_keys([pool_share], [3], flaky=False)[0])
+    sim.warm_start()
+    sim.init_views(warm=True)
+    track = []  # (slot, pool participation, pool share of the active denominator, pool share of total weight)
+
+    def snap(s):
+        v = s.views[0]
+        part = s.participation(v, v.next_idx)
+        e = s.elig_mask()
+        act = s.weight * part
+        track.append((s.slot, float(part[K]), float(act[K] / act[e].sum()), float(s.weight[K] / s.weight[e].sum())))
+
+    sim.run(pre_h * SLOTS_PER_HOUR, snap=(10, snap))
+    t0 = sim.slot
+    if hostile:
+        target = np.zeros(sim.N, dtype=bool)
+        target[K] = True
+        p.hostile = (target, t0, t0 + attack_h * SLOTS_PER_HOUR)
+    sim.run(attack_h * SLOTS_PER_HOUR, snap=(10, snap))
+    t1 = sim.slot
+    p.hostile = None
+    sim.run(post_h * SLOTS_PER_HOUR, snap=(10, snap))
+    snap(sim)
+    recs = sim.recs()
+    tr = np.array(track)
+    before = tr[tr[:, 0] < t0]
+    during = tr[(tr[:, 0] >= t0) & (tr[:, 0] <= t1)]
+    after = tr[tr[:, 0] > t1]
+    back = after[after[:, 1] >= 0.999]
+    d_before = lat_stats(recs, t0 - SLOTS_PER_HOUR, t0)
+    d_during = lat_stats(recs, t0, t1)
+    d_after = lat_stats(recs, t1, sim.slot)
+    return dict(weight_share=float(during[-1, 3]), part_min=float(during[:, 1].min()), part_end=float(during[-1, 1]),
+                active_before=float(before[-1, 2]), active_end=float(during[-1, 2]),
+                recover_min=None if back.shape[0] == 0 else (back[0, 0] - t1) / 2.0,
+                before=d_before, during=d_during, after=d_after, conflicts=len(sim.conflicts))
+
+
+def scenario_o(args):
+    """Hostile aggregator (ledger F3, O-3.3): the cert reading against the block reading of Q2, three seeds."""
+    seeds = seeds_of(args)[:3]
+    q = getattr(args, "quick", False)
+    attack_h = 1 if q else 2
+    out = ["### O. Hostile aggregator (ledger F3, O-3.3): a chosen aggregator drops a 20%% pool's votes from every certificate it builds for %d h; %s; seeds %s" % (
+        attack_h, rule_name(), ",".join(str(s) for s in seeds)), ""]
+    out.append("The pool holds 20% of total weight in its own region, always online. From hour 3 the hostile aggregator's certificate is the one carried "
+               "whenever the other 80% reach quorum without the pool (the strongest form of F3's premise: the producer carries the certificate it likes). "
+               "'cert' credits participation from the certificate's signers (the simulation's reading until tonight); 'block' is spec 3.3 Q2, every vote "
+               "carried by any block. Weight share = the pool's share of total weight (W2, blocks); active share = its share of the active denominator "
+               "(weight x participation, the liveness-side report of Q3; the 2/3-of-total floor decides the lock either way). Lock latency is the "
+               "certificate's time after the checkpoint block, median and p99 over the hour before, the attack, and the 2 h after.")
+    out.append("")
+    rows = []
+    for pmode in ("cert", "block"):
+        for hostile in (False, True):
+            for sd in seeds:
+                r = run_hostile(sd, hostile, pmode, args.delay, attack_h=attack_h, pre_h=1 if q else 3, post_h=1 if q else 2)
+                rows.append([pmode, "yes" if hostile else "no", sd, pct(r["weight_share"]), "%.3f" % r["part_min"], "%.3f" % r["part_end"],
+                             pct(r["active_before"]), pct(r["active_end"]), fm(r["recover_min"]),
+                             "%.1f / %.1f" % (r["before"]["med"], r["before"]["p99"]), "%.1f / %.1f" % (r["during"]["med"], r["during"]["p99"]),
+                             "%.1f / %.1f" % (r["after"]["med"], r["after"]["p99"]), r["during"]["stalls"], r["during"]["n"], r["conflicts"]])
+    out.append(md_table(["reading", "hostile aggregator", "seed", "pool weight share at the end of the attack", "pool participation, minimum", "at the end of the attack",
+                         "pool share of active, before", "at the end of the attack", "participation back to 1, min after the attack",
+                         "lock latency before, median / p99 s", "during the attack", "after", "stalled checkpoints during", "checkpoints during", "conflicting locks"], rows))
+    return "\n".join(out)
+
+
+
+# ---------------------------------------------------------------- Horizon lane 3 (6 October 2026): candidate rules against tonight's pause
+# docs/analysis/horizon/finality-and-weight.md. The base is the live rule's shape: active denominator under the block reading of
+# Q2, floor 1.0 (a lock needs 2/3 of total), each partition side retargets (+daa) and counts only its own blocks (+local).
+HORIZON_BASE = dict(denom="active", pmode="block", floor=1.0, daa="full", local=True)
+HORIZON_CANDS = [
+    ("v2", "v2: sliding table only (the rule before F21)", dict()),
+    ("v3", "v3: plus the frozen table (the live rule since N3, 5 Oct 2026)", dict(frozen=True)),
+    ("leave", "v3 + (iv) departure announcement: weight out of every denominator 1 h after the signed leave", dict(frozen=True, leave=1.0)),
+    ("decay1", "v3 + (i) decaying denominator, T 1 h, r 0.5 per h (a silent key is gone from the denominator after 3 h)", dict(frozen=True, decay=(1.0, 0.5))),
+    ("decay6", "v3 + (i) decaying denominator, T 6 h, r 1/24 per h (gone after 30 h)", dict(frozen=True, decay=(6.0, 1.0 / 24.0))),
+    ("hyst", "v3 + (iii) floor with hysteresis: after 1 h under 2/3 signing the floor drops to 0.85 x 2/3, back after 1 h at or above 2/3", dict(frozen=True, hyst=(1.0, 0.85))),
+    ("twotier", "v3 + (ii) two-tier: a provisional lock at 2/3 of active (block reading, no floor) reported beside the final lock", dict(frozen=True, twotier=True)),
+]
+
+
+def horizon_cands(args):
+    want = [c.strip() for c in (getattr(args, "cands", "") or "all").split(",")]
+    return [c for c in HORIZON_CANDS if "all" in want or c[0] in want]
+
+
+def cand_p(kw, delay):
+    base = dict(HORIZON_BASE)
+    base.update(kw)
+    return P(delay=delay, **base)
+
+
+def prov_first_after(sim, slot):
+    s = [rec[1] for rec in sim.views[0].prov_certs.values() if rec[1] >= slot]
+    return min(s) if s else None
+
+
+def fmt_days_dev(days):
+    """Mainnet days and the devnet equivalent (the devnet window is 7,200 DAA s, 1/360 of mainnet's: one mainnet day = 4 devnet minutes)."""
+    if days is None:
+        return "never"
+    return "%.2f d (devnet %.0f min)" % (days, days * 4.0)
+
+
+def run_churn_h(seed, frac, days, p):
+    """Tonight's shape: a set holding `frac` of weight stops mining AND signing at once at hour 3 (the 15 prover boxes plus
+    the keys that left with them, 44.8% of the live devnet's window weight at 18:40Z). With P.leave the departing keys
+    sign a leave at the moment they stop (the orchestrated case: the fleet job knew it was taking them)."""
+    sim, rng, _ = build_honest(p, seed)
+    sim.warm_start()
+    sim.init_views(warm=True)
+    sim.run(3 * SLOTS_PER_HOUR)
+    gone, got = pick_weight_subset(rng, sim.weight, frac)
+    sim.signs[gone] = False
+    sim.online[gone] = False
+    sim.flaky[gone] = False
+    sim.hash[gone] = 0.0
+    t_event = sim.slot
+    if p.leave is not None:
+        sim.leave_slot[gone] = t_event
+    sim.run(int(days * SLOTS_PER_DAY))
+    recs = sim.recs()
+    fl = first_lock_after(recs, t_event)
+    st = stalls_between(recs, t_event, sim.slot)
+    later = stalls_between(recs, fl, sim.slot) if fl is not None else 0
+    pf = prov_first_after(sim, t_event) if p.twotier else None
+    return dict(got=got, first_lock_days=None if fl is None else (fl - t_event) / float(SLOTS_PER_DAY), stalls=st, later=later,
+                prov_first_days=None if pf is None else (pf - t_event) / float(SLOTS_PER_DAY),
+                live_share=float(sim.share(np.flatnonzero(~gone))), conflicts=len(sim.conflicts), pconflicts=len(sim.pconflicts))
+
+
+def scenario_t(args):
+    seeds = seeds_of(args)[:3]
+    q = getattr(args, "quick", False)
+    days = 2 if q else 31
+    out = ["### T. Tonight's departure (6 Oct 2026, 18:40Z): a set holding x of weight stops mining and signing at once; first lock "
+           "after it under each candidate rule; %d days, seeds %s" % (days, ",".join(str(s) for s in seeds)), ""]
+    out.append("Mainnet scale (30-day window). The devnet's window is 7,200 DAA s, so divide by 360: one mainnet day is four devnet minutes. "
+               "Analytic: v2 recovers at 30 (1 - 1/(3x)) days (never at x <= 1/3), v3 at day 30 (the frozen table's expiry), the leave rule after its delay, "
+               "the decay rule after T + 1/r x (1 - (1 - x) / (2 x)) hours at the latest (the departed weight has to decay until the stayers hold 2/3 of what is left).")
+    out.append("")
+    rows = []
+    for frac in (0.34, 0.45, 0.50):
+        for key, name, kw in horizon_cands(args):
+            rs = [run_churn_h(sd, frac, days, cand_p(kw, args.delay)) for sd in seeds]
+            fl = [r["first_lock_days"] for r in rs]
+            pf = [r["prov_first_days"] for r in rs]
+            rows.append([pct(frac, 0), key, "never in %d d" % days if all(x is None for x in fl) else span((x for x in fl if x is not None), "%.2f") + " d (devnet %s min)" % span((x * 4 for x in fl if x is not None), "%.0f"),
+                         ("provisional " + ("never" if all(x is None for x in pf) else span((x for x in pf if x is not None), "%.3f") + " d (devnet %s min)" % span((x * 4 for x in pf if x is not None), "%.1f"))) if kw.get("twotier") else "",
+                         span(r["stalls"] for r in rs), span(r["later"] for r in rs), span(r["conflicts"] for r in rs), span(r["pconflicts"] for r in rs) if kw.get("twotier") else ""])
+    out.append(md_table(["departed weight", "rule", "first final lock after the departure", "provisional tier", "stalled checkpoints", "stalled after the first lock",
+                         "conflicting final locks", "conflicting provisional locks"], rows))
+    return "\n".join(out)
+
+
+def scenario_p(args):
+    """The partition suite under each candidate: the equivocator across a 50/50 split (H), the three-way and 60/60 cases (I),
+    honest 60/40 and 70/30 (E), the poisoned eclipse (L3) and the 12-day honest partitions with view-local weight (L4)."""
+    seeds = seeds_of(args)[:3]
+    q = getattr(args, "quick", False)
+    dur = 60 if q else 360
+    ldays = 1 if q else 12
+    out = ["### P. The partition suite under each candidate rule (every side retargets and counts only its own blocks), seeds %s" % ",".join(str(s) for s in seeds), ""]
+    out.append("Pass line: 0 conflicting FINAL locks in every row. A candidate that removes weight from a denominator on what a view does NOT see "
+               "(silence, missing blocks) is view-dependent: each side of a partition sees the other side as silent, so both denominators shrink and the "
+               "two sides lock alone, the active-denominator hazard of `sim/results_v2.md` E in a new coat. A candidate that removes weight on what a view DOES see "
+               "(a signed leave, equivocation evidence) keeps the 4/3 arithmetic of spec 3.11.2 over the weight both sides count.")
+    out.append("")
+    rows = []
+    cases = [("50/50 honest, 0% attacker", [0.5, 0.5], 0.0), ("50/50 + 20% equivocator (sides 60/60)", [0.5, 0.5], 0.20),
+             ("50/50 + 33% equivocator (sides 66.5/66.5)", [0.5, 0.5], 0.33), ("50/50 + 34% equivocator (sides 67/67, the bound)", [0.5, 0.5], 0.34),
+             ("40/40/20 honest", [0.4, 0.4, 0.2], 0.0), ("60/40 honest", [0.6, 0.4], 0.0), ("70/30 honest", [0.7, 0.3], 0.0)]
+    for key, name, kw in horizon_cands(args):
+        for cname, fr, a in cases:
+            rs = [run_partition2(sd, fr, a, dur, cand_p(kw, args.delay), pre_min=60, post_min=120) for sd in seeds]
+            n = len(fr)
+            rows.append([key, cname, dur, span(r["conflicts"] for r in rs), span(r["pconflicts"] for r in rs) if kw.get("twotier") else "",
+                         span_min(r["first_conflict_min"] for r in rs),
+                         " / ".join(span_min([r["side_first_lock"][i] for r in rs]) for i in range(n)),
+                         "yes" if all(r["kept"] for r in rs) else "NO", span_min(r["post_first_lock_min"] for r in rs), span(r["post_stalls"] for r in rs)])
+    out.append("P1. Partitions of %d minutes:" % dur)
+    out.append("")
+    out.append(md_table(["rule", "case", "partition min", "conflicting final locks", "conflicting provisional locks", "first conflict, min", "first lock per side, min",
+                         "every pre-heal lock kept", "first lock after heal, min", "stalls in 2 h after heal"], rows))
+    out.append("")
+    rows = []
+    for key, name, kw in horizon_cands(args):
+        for h in ((1,) if q else (1, 2, 4)):
+            rs = [run_eclipse(sd, h, True, cand_p(kw, args.delay)) for sd in seeds]
+            rows.append([key, h, span(r["conflicts"] for r in rs), span(r["pconflicts"] for r in rs) if kw.get("twotier") else "", span_min(r["first_conflict_min"] for r in rs),
+                         span(r["ecl_locks"] for r in rs), span(r["honest_stalls"] for r in rs), span(r["post_stalls"] for r in rs)])
+    out.append("P2. The poisoned eclipse (L3: a 34% attacker feeds a 20% pool a private fork and signs both; the eclipsed side holds 54% of total):")
+    out.append("")
+    out.append(md_table(["rule", "eclipse h", "conflicting final locks", "conflicting provisional locks", "first conflict, min", "locks on the eclipsed side",
+                         "honest-side stalls during", "stalls after heal"], rows))
+    out.append("")
+    rows = []
+    for key, name, kw in horizon_cands(args):
+        for cname, fr in (("50/50", [0.5, 0.5]), ("60/40", [0.6, 0.4])):
+            rs = [run_partition2(sd, fr, 0.0, ldays * 1440, cand_p(kw, args.delay), pre_min=60, post_min=180) for sd in seeds]
+            fl = [[None if r["side_first_lock"][i] is None else r["side_first_lock"][i] / 1440.0 for r in rs] for i in range(len(fr))]
+            rows.append([key, cname, ldays, " / ".join(("never" if all(x is None for x in col) else span((x for x in col if x is not None), "%.2f")) for col in fl),
+                         span(r["conflicts"] for r in rs), span(r["pconflicts"] for r in rs) if kw.get("twotier") else "",
+                         ("never" if all(r["first_conflict_min"] is None for r in rs) else span((r["first_conflict_min"] / 1440.0 for r in rs if r["first_conflict_min"] is not None), "%.2f") + " d"),
+                         "yes" if all(r["kept"] for r in rs) else "NO", span_min(r["post_first_lock_min"] for r in rs)])
+    out.append("P3. Long honest partitions with view-local weight (L4), %d days:" % ldays)
+    out.append("")
+    out.append(md_table(["rule", "honest split", "days", "first lock per side, day", "conflicting final locks", "conflicting provisional locks", "first conflict", "every pre-heal lock kept",
+                         "first lock after heal, min"], rows))
+    return "\n".join(out)
+
+
+def run_acquired_h(seed, bought, att_hash, mode, days, p):
+    """Scenario K with a third attacker behaviour: `mode` = sign, silent or leave (the bought keys announce a leave at purchase,
+    which under rule (iv) removes them from every denominator after the delay and raises every remaining key's share, the attacker's own included)."""
+    sim, rng, _ = build_honest(p, seed)
+    mask, got = pick_weight_subset(rng, sim.hash, bought)
+    bidx = np.flatnonzero(mask)
+    seller_hash = sim.hash[bidx].copy()
+    fresh = sim.add_keys(np.zeros(bidx.size), sim.region[bidx].copy(), flaky=True)
+    att = int(sim.add_keys([0.0], [0], flaky=False, signs=True)[0])
+    sim.warm_start()
+    sim.init_views(warm=True)
+    sim.run(SLOTS_PER_HOUR)
+    honest = sim.hash.sum()
+    sim.hash[fresh] = seller_hash
+    sim.hash[bidx] = 0.0
+    sim.flaky[bidx] = False
+    sim.online[bidx] = True
+    sim.signs[bidx] = mode == "sign"
+    sim.hash[att] = honest * att_hash / (1.0 - att_hash)
+    sim.set_uptime()
+    t0 = sim.slot
+    if mode == "leave":
+        sim.leave_slot[bidx] = t0
+    series = []
+    for day in range(1, days + 1):
+        s0 = sim.slot
+        sim.run(SLOTS_PER_DAY)
+        e = sim.elig_mask()
+        if p.leave is not None:
+            e &= ~((sim.leave_slot >= 0) & (sim.slot >= sim.leave_slot + int(round(p.leave * SLOTS_PER_HOUR))))
+        tot = sim.weight[e].sum()
+        own = np.zeros(sim.N, dtype=bool)
+        own[att] = True
+        if mode != "leave":
+            own[bidx] = True
+        sh = float(sim.weight[own & e].sum() / tot) if tot > 0 else 0.0
+        recs = sim.recs()
+        series.append((day, sh, stalls_between(recs, s0, sim.slot)))
+    recs = sim.recs()
+    veto = [d for d, s, _ in series if s >= 1.0 / 3.0]
+    return dict(got=got, series=series, veto_from=min(veto) if veto else None, veto_to=max(veto) if veto else None,
+                max_share=max(s for _, s, _ in series), end_share=series[-1][1], stalls=stalls_between(recs, t0, sim.slot), conflicts=len(sim.conflicts))
+
+
+def scenario_q(args):
+    seeds = seeds_of(args)[:3]
+    q = getattr(args, "quick", False)
+    out = ["### Q. Silent weight that keeps mining (L1) under each candidate, and acquired keys that LEAVE under the leave rule; seeds %s" % ",".join(str(s) for s in seeds), ""]
+    rows = []
+    hours = 1 if q else 6
+    for key, name, kw in horizon_cands(args):
+        for frac in (0.30, 0.34, 0.45):
+            rs = [run_silent_resume(sd, frac, hours, cand_p(kw, args.delay)) for sd in seeds]
+            rows.append([key, pct(frac, 0), hours, span_min(r["first_lock"] for r in rs), span(r["stalls"] for r in rs),
+                         span((r["gap"] for r in rs), "%.0f"), span_min(r["resume"] for r in rs), span(r["conflicts"] for r in rs)])
+    out.append("Q1. A set holding x of weight stops signing but keeps mining for %d h, then resumes (its weight never ages out):" % hours)
+    out.append("")
+    out.append(md_table(["rule", "silent weight", "silent hours", "first lock after the stop, min", "stalled while silent", "longest gap, min", "first lock after resume, min", "conflicting locks"], rows))
+    out.append("")
+    days = 3 if q else 30
+    rows = []
+    kw_leave = dict(frozen=True, leave=1.0)
+    if not any(c[0] == "leave" for c in horizon_cands(args)):
+        return "\n".join(out)
+    for bought in (0.40, 0.49):
+        for mode in ("sign", "silent", "leave"):
+            rs = [run_acquired_h(sd, bought, 0.30, mode, days, cand_p(kw_leave, args.delay)) for sd in seeds]
+            rows.append([pct(bought, 0), mode, span((100 * r["max_share"] for r in rs), "%.1f") + "%", span((100 * r["end_share"] for r in rs), "%.1f") + "%",
+                         "never" if all(r["veto_from"] is None for r in rs) else "day %s to %s" % (span(r["veto_from"] for r in rs if r["veto_from"] is not None), span(r["veto_to"] for r in rs if r["veto_to"] is not None)),
+                         span(r["stalls"] for r in rs), span(r["conflicts"] for r in rs)])
+    out.append("Q2. Under v3 + leave 1 h: an attacker at 30%% of hashrate buys keys worth 40%% or 49%% of the window and makes them sign, stay silent, or LEAVE "
+               "(the leave removes the bought weight from every denominator after 1 h, so the attacker's own share of what remains is w / (1 - L)). "
+               "Arithmetic: to lock alone it needs w >= 2/3 (1 - L), so w + L >= 2/3 + L/3 >= 2/3 of the window either way; leaving bought keys is never cheaper than signing with them. %d days:" % days)
+    out.append("")
+    out.append(md_table(["bought weight", "bought keys", "attacker's peak share of the denominator", "share at the end", "holds the veto (1/3)", "stalled checkpoints", "conflicting locks"], rows))
+    return "\n".join(out)
+
+
+SCENARIOS = {"A": scenario_a, "B": scenario_b, "C": scenario_c, "D": scenario_d, "E": scenario_e, "F": scenario_f, "G": scenario_g,
+             "T": scenario_t, "P": scenario_p, "Q": scenario_q,
+             "H": scenario_h, "I": scenario_i, "J": scenario_j, "K": scenario_k, "L": scenario_l, "M": scenario_m, "N": scenario_n, "O": scenario_o}
+
+
+def main(argv=None):
+    ap = argparse.ArgumentParser(description="Igneum finality rule V2 simulation")
+    ap.add_argument("--seed", type=int, default=7)
+    ap.add_argument("--scenarios", default="A,B,C,D,E,F,G")
+    ap.add_argument("--delay", type=float, default=2.0, help="one-way inter-region delay in seconds for the main runs")
+    ap.add_argument("--grace", type=float, default=15.0)
+    ap.add_argument("--quick", action="store_true", help="shortened runs for development")
+    ap.add_argument("--seeds", default="", help="comma-separated seeds for scenarios H to L (default 7,11,13,17,19)")
+    ap.add_argument("--floor", type=float, default=FLOOR_F,
+                    help="floor factor f for the rule of H to L and the floor columns of C to F: a lock needs f x 2/3 of total (1.0 = the rule of 4 Oct 2026; 0.85 = the 3 Oct tables)")
+    ap.add_argument("--rules", default="igneum-v2,kaspa", help="scenario N: difficulty controllers of sim/difficulty/sim.py to put in the loop")
+    ap.add_argument("--days", type=int, default=30, help="scenario N: days of the pulse (2 under --quick)")
+    ap.add_argument("--jobs", type=int, default=6, help="scenario N: worker processes")
+    ap.add_argument("--cands", default="all", help="scenarios T, P, Q: comma-separated candidate keys (v2,v3,leave,decay1,decay6,hyst,twotier) or all")
+    args = ap.parse_args(argv)
+    set_floor(args.floor)
+    q = args.quick
+    # --quick is the smoke run: every scenario end to end at a length that finishes in under two minutes on a
+    # 2-vCPU CI runner (the full set takes about an hour). The numbers it prints are not the results of
+    # results_v2.md; only the full run is.
+    args.days_a = 1 if q else 60
+    args.days_delay = 1 if q else 3
+    args.days_b = 1 if q else 35
+    args.hours_c = 1 if q else 6
+    args.hours_c_total = 1 if q else 72
+    args.days_d35 = 1 if q else 3
+    args.days_d50 = 1 if q else 12
+    args.days_g = 1 if q else 25
+    print("# finality_horizon output (sim/horizon/finality-and-weight/finality_horizon.py, a copy of sim/finality_v2.py at fud-close 1544c63 plus the candidate rules)")
+    print()
+    p = P()
+    print("seed %d, slot %.0f s, %d blocks per checkpoint, window %d h, presence %d checkpoints, dust %d, quorum 2/3, "
+          "floor factor %.2f (a lock needs %s of total under the rule as specified), "
+          "inter-region delay %.1f s (intra %.1f s, jitter sigma %.2f), grace %.0f s, uptime %.2f (mean outage %d slots), "
+          "uptime %.3f for keys at or above %s of hashrate, honest keys %d Pareto %.1f, geography %s%s" % (
+              args.seed, SLOT_S, BLOCKS_PER_CP, WINDOW_HOURS, p.presence, p.dust, FLOOR_F, pct(P_FLOOR), args.delay, p.intra, p.jitter,
+              args.grace, p.uptime, p.outage, p.uptime_big, pct(p.big_share, 0), N_HONEST, PARETO_SHAPE, "/".join(pct(g, 0) for g in GEOGRAPHY),
+              ", QUICK" if q else ""))
+    print()
+    for s in args.scenarios.split(","):
+        s = s.strip().upper()
+        if s not in SCENARIOS:
+            print("unknown scenario %s" % s, file=sys.stderr)
+            return 2
+        t = time.time()
+        print(SCENARIOS[s](args))
+        print()
+        print("(%s took %.0f s)" % (s, time.time() - t), file=sys.stderr)
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/sim/horizon/finality-and-weight/lightclient_cost.py b/sim/horizon/finality-and-weight/lightclient_cost.py
new file mode 100644
index 000000000..cee5b77a1
--- /dev/null
+++ b/sim/horizon/finality-and-weight/lightclient_cost.py
@@ -0,0 +1,94 @@
+#!/usr/bin/env python3
+"""Light-client cost of a certificate chain (Horizon lane 3, task 4): bytes and verification time per year of chain, by voter
+count and mode, and the ZK light client's per-checkpoint work. Inputs labelled measured / cited / approximate.
+
+Sizes (fork, consensus/core/src/finality.rs, cited in spec 3.4.2 item 1): vote item 281 B; certificate 273 B plus ceil(V/8) B of
+bitmap; header 400 B working figure (spec 10.5, approximate); 2,880 checkpoints a day at 1 block/s (spec C1).
+Verification (approximate, blst 0.3.17 min_pk, the crate the fork uses: vendor/igneum-node/Cargo.toml line 238; per-operation costs
+from memory of blst's published benchmarks, labelled approximate): one G1 affine addition about 1 us, hash-to-G2 about 150 us,
+two pairings about 1.6 ms, decompressing and subgroup-checking one 48-byte G1 key about 60 us (done once per key when the voter
+list is loaded, not per certificate). Measured anchor: the pure-JavaScript verifier of a 16-signer certificate took 58 to 68 ms warm
+on the M5 Max (docs/bench-log.md, FUD ledger sweep round 6, P3), about 30x the native estimate.
+
+Run:  python3 lightclient_cost.py
+"""
+VOTE_B = 281
+CERT_FIXED_B = 273
+HEADER_B = 400
+CP_PER_DAY = 2880
+DAYS = 365
+G1_ADD_US = 1.0
+H2G2_US = 150.0
+PAIRINGS_US = 1600.0
+KEY_DECOMP_US = 60.0
+
+
+def cert_bytes(V):
+    return CERT_FIXED_B + (V + 7) // 8
+
+
+def verify_ms(V):
+    return (V * G1_ADD_US + H2G2_US + PAIRINGS_US) / 1000.0
+
+
+def fmt_b(b):
+    if b >= 1e9:
+        return "%.2f GB" % (b / 1e9)
+    if b >= 1e6:
+        return "%.1f MB" % (b / 1e6)
+    return "%.0f KB" % (b / 1e3)
+
+
+def fmt_t(ms):
+    if ms >= 3.6e6:
+        return "%.1f h" % (ms / 3.6e6)
+    if ms >= 60e3:
+        return "%.1f min" % (ms / 60e3)
+    if ms >= 1e3:
+        return "%.1f s" % (ms / 1e3)
+    return "%.1f ms" % ms
+
+
+def main():
+    n = CP_PER_DAY * DAYS
+    print("## A year of certificates, checkpoint mode (spec 10.3 item 3), one certificate per index")
+    print()
+    print("| voters | certificate bytes | per year: certificates + headers | verify per certificate (native, approximate) | per year on one laptop core | on a phone core (3x, approximate) | voter list once |")
+    print("|---|---|---|---|---|---|---|")
+    for V in (12, 93, 1000, 8192, 65536):
+        print("| %d | %d B | %s | %.2f ms | %s | %s | %s |" % (V, cert_bytes(V), fmt_b(n * (cert_bytes(V) + HEADER_B)), verify_ms(V),
+                                                         fmt_t(n * verify_ms(V)), fmt_t(3 * n * verify_ms(V)), fmt_b(V * 60 + 0.0) + " plus %s of key decompression" % fmt_t(V * KEY_DECOMP_US / 1000.0)))
+    print()
+    print("## Skipping: one certificate per presence window (240 indices), spec 10.3 item 3's allowance")
+    print()
+    print("| voters | certificates per year | bytes per year | verify per year, laptop core |")
+    print("|---|---|---|---|")
+    for V in (93, 1000, 8192, 65536):
+        k = n // 240
+        print("| %d | %d | %s | %s |" % (V, k, fmt_b(k * (cert_bytes(V) + HEADER_B)), fmt_t(k * verify_ms(V))))
+    print()
+    print("What skipping does not pay for: the voter set at each skipped-to checkpoint (spec 10.4 item 3), which is 30 days of headers (W2) "
+          "or a trusted answer from N of M nodes. Full-header mode per year: %s of headers at 1 block/s (86,400 x 365 x %d B), plus the bodies' finality sections (O-10.1)." % (fmt_b(86400 * 365 * HEADER_B), HEADER_B))
+    print()
+    print("## The ZK light client: one recursive proof per checkpoint")
+    print()
+    print("Per-step statement: certificate i verifies under the voter table T_i; T_i follows from T_(i-1) by the 30 blue headers of the interval and the window's ageing; "
+          "signers hold at least 2/3 of T_i and of the frozen table (Q3, Q5); C_i's selected chain passes through C_(i-1). Cycle estimates in the SP1 6.8.1 zkVM, approximate, "
+          "from the precompile list of sp1-core-executor-6.8.1/src/syscall_code.rs (BLS12381_ADD, BLS12381_DOUBLE, BLS12381_FP_ADD/SUB/MUL, BLS12381_FP2_ADD/SUB/MUL; no pairing precompile):")
+    print()
+    print("| Part | Work | Approximate cycles | Note |")
+    print("|---|---|---|---|")
+    for V in (93, 1000, 8192):
+        print("| key aggregation, %d voters | %d x BLS12381_ADD | %s | one precompile call per set bit, about 500 cycles each (approximate) |" % (V, V, "{:,}".format(V * 500)))
+    print("| hash to G2 | SHA-256 (precompiled) plus Fp2 arithmetic | about 300,000 | approximate |")
+    print("| two pairings | Miller loops and the final exponentiation in Fp2/Fp6/Fp12 arithmetic built from the Fp2 precompiles | 10 to 30 million | approximate; no pairing precompile in 6.8.1, this is the dominant term |")
+    print("| 30 header hashes and the table transition | 30 x BLAKE2b (no precompile, about 30,000 cycles each) plus a Merkle update per key touched | about 1 to 2 million | approximate |")
+    print("| recursion: verify the previous step's proof | VERIFY_SP1_PROOF (the deferred-proof path) | the measured aggregation step | measured on the RTX 5090: 2.2 to 2.5 s idle, 7.9 to 9.7 s beside the miner (bench-log, agg-cost and chain-pc2-pv1c) |")
+    print()
+    print("Prover time per checkpoint, from the measured shard curve (docs/analysis/prover-tiers-real-cards.md: 4,717,439 cycles compressed in 4.8 to 14.4 s alone, 10.7 to 37.5 s beside the miner): "
+          "a 15 to 35 million cycle step is about 3 to 7 shards' worth, so 15 to 100 s alone and 40 to 260 s beside a miner, approximate; one checkpoint every 30 s therefore needs 1 to 4 proving-only cards, or 2 to 9 mining cards, kept at it continuously, plus the recursion step. "
+          "A phone then verifies one wrapped proof (phase two, spec 10.4), the certificate chain never: the per-year columns above fall to one proof of about 400 B (approximate, O-10.7).")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/sim/horizon/finality-and-weight/merge_results.py b/sim/horizon/finality-and-weight/merge_results.py
new file mode 100644
index 000000000..e3558e582
--- /dev/null
+++ b/sim/horizon/finality-and-weight/merge_results.py
@@ -0,0 +1,77 @@
+#!/usr/bin/env python3
+"""Merge the per-candidate outputs (results/out-<cand>.md) of finality_horizon.py into combined tables, one per scenario
+section, in candidate order. Writes results/combined.md. Run after the box runs: python3 merge_results.py"""
+import os
+import re
+
+HERE = os.path.dirname(os.path.abspath(__file__))
+RES = os.path.join(HERE, "results")
+ORDER = ["v2", "v3", "leave", "decay1", "decay6", "hyst", "twotier"]
+SECTIONS = [("T", "### T."), ("P1", "P1."), ("P2", "P2."), ("P3", "P3."), ("Q1", "Q1."), ("Q2", "Q2.")]
+
+
+def tables(text):
+    """Return {section: (header lines, row lines)} for the section markers above."""
+    out = {}
+    lines = text.splitlines()
+    for key, marker in SECTIONS:
+        try:
+            i = next(k for k, l in enumerate(lines) if l.startswith(marker))
+        except StopIteration:
+            continue
+        j = i
+        while j < len(lines) and not lines[j].startswith("|"):
+            j += 1
+        head = lines[j:j + 2] if j + 1 < len(lines) else []
+        rows = []
+        k = j + 2
+        while k < len(lines) and lines[k].startswith("|"):
+            rows.append(lines[k])
+            k += 1
+        out[key] = (head, rows, lines[i])
+    return out
+
+
+def main():
+    per = {}
+    for c in ORDER:
+        p = os.path.join(RES, "out-%s.md" % c)
+        if os.path.exists(p) and os.path.getsize(p) > 0:
+            per[c] = tables(open(p).read())
+    titles = {"T": "T. Tonight's departure: first lock after x of weight stops mining and signing at once (31 days, seeds 7, 11, 13)",
+              "P1": "P1. Partitions of 360 minutes (each side retargets and counts only its own blocks)",
+              "P2": "P2. The poisoned eclipse (a 34% attacker plus a 20% pool; the eclipsed side holds 54% of total)",
+              "P3": "P3. Long honest partitions with view-local weight, 12 days",
+              "Q1": "Q1. Silent weight that keeps mining for 6 hours, then resumes",
+              "Q2": "Q2. Acquired keys that sign, stay silent or leave, under v3 + leave 1 h (30 days)"}
+    out = ["# Combined results of finality_horizon.py (candidates: %s)" % ", ".join(per), ""]
+    for key, _ in SECTIONS:
+        head = None
+        rows = []
+        for c in ORDER:
+            if c in per and key in per[c]:
+                h, r, _ = per[c][key]
+                head = head or h
+                if key == "T":
+                    # rows are per departed weight then rule; keep the candidate's rows, sorted later by weight
+                    rows.extend(r)
+                else:
+                    rows.extend(r)
+        if head is None:
+            continue
+        if key == "T":
+            def wkey(row):
+                m = re.match(r"\| (\d+)% \| (\w+) ", row)
+                return (int(m.group(1)), ORDER.index(m.group(2))) if m else (99, 99)
+            rows.sort(key=wkey)
+        out.append("## " + titles[key])
+        out.append("")
+        out.extend(head)
+        out.extend(rows)
+        out.append("")
+    open(os.path.join(RES, "combined.md"), "w").write("\n".join(out))
+    print("\n".join(out))
+
+
+if __name__ == "__main__":
+    main()
diff --git a/sim/horizon/finality-and-weight/results/combined.md b/sim/horizon/finality-and-weight/results/combined.md
new file mode 100644
index 000000000..35cddabf0
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/combined.md
@@ -0,0 +1,163 @@
+# Combined results of finality_horizon.py (candidates: v2, v3, leave, decay1, decay6, hyst, twotier)
+
+## T. Tonight's departure: first lock after x of weight stops mining and signing at once (31 days, seeds 7, 11, 13)
+
+| departed weight | rule | first final lock after the departure | provisional tier | stalled checkpoints | stalled after the first lock | conflicting final locks | conflicting provisional locks |
+|---|---|---|---|---|---|---|---|
+| 34% | v2 | 0.77 to 0.87 d (devnet 3 to 3 min) |  | 4057 to 4727 | 1531 to 2489 | 0 |  |
+| 34% | v3 | 30.00 d (devnet 120 min) |  | 86388 to 86472 | 0 to 31 | 0 |  |
+| 34% | leave | 0.04 to 0.04 d (devnet 0 to 0 min) |  | 119 to 521 | 0 to 398 | 0 |  |
+| 34% | decay1 | 0.05 to 0.05 d (devnet 0 to 0 min) |  | 133 to 534 | 0 to 398 | 0 |  |
+| 34% | decay6 | 0.30 to 0.30 d (devnet 1 to 1 min) |  | 897 to 1298 | 24 to 442 | 0 |  |
+| 34% | hyst | 0.04 to 0.04 d (devnet 0 to 0 min) |  | 881 to 1445 | 761 to 1325 | 0 |  |
+| 34% | twotier | 30.00 d (devnet 120 min) | provisional 0.000 to 0.004 d (devnet 0.0 to 0.0 min) | 86388 to 86472 | 0 to 31 | 0 | 0 |
+| 45% | v2 | 7.85 to 8.03 d (devnet 31 to 32 min) |  | 23947 to 25153 | 1369 to 2065 | 0 |  |
+| 45% | v3 | 30.00 d (devnet 120 min) |  | 86382 to 86420 | 0 to 22 | 0 |  |
+| 45% | leave | 0.04 d (devnet 0 min) |  | 119 to 204 | 0 to 83 | 0 |  |
+| 45% | decay1 | 0.07 to 0.08 d (devnet 0 to 0 min) |  | 224 to 296 | 9 to 83 | 0 |  |
+| 45% | decay6 | 0.64 to 0.67 d (devnet 3 to 3 min) |  | 1946 to 1985 | 0 to 129 | 0 |  |
+| 45% | hyst | 30.00 d (devnet 120 min) |  | 86382 to 86420 | 0 to 22 | 0 |  |
+| 45% | twotier | 30.00 d (devnet 120 min) | provisional 0.031 to 0.034 d (devnet 0.1 to 0.1 min) | 86382 to 86420 | 0 to 22 | 0 | 0 |
+| 50% | v2 | 10.09 to 10.34 d (devnet 40 to 41 min) |  | 30107 to 31264 | 1065 to 1456 | 0 |  |
+| 50% | v3 | 30.00 d (devnet 120 min) |  | 86387 to 86514 | 0 to 10 | 0 |  |
+| 50% | leave | 0.04 d (devnet 0 min) |  | 118 to 490 | 0 to 371 | 0 |  |
+| 50% | decay1 | 0.08 to 0.09 d (devnet 0 to 0 min) |  | 244 to 609 | 0 to 371 | 0 |  |
+| 50% | decay6 | 0.76 to 0.77 d (devnet 3 to 3 min) |  | 2231 to 2543 | 0 to 371 | 0 |  |
+| 50% | hyst | 30.00 d (devnet 120 min) |  | 86387 to 86514 | 0 to 10 | 0 |  |
+| 50% | twotier | 30.00 d (devnet 120 min) | provisional 0.042 d (devnet 0.2 min) | 86387 to 86514 | 0 to 10 | 0 | 0 |
+
+## P1. Partitions of 360 minutes (each side retargets and counts only its own blocks)
+
+| rule | case | partition min | conflicting final locks | conflicting provisional locks | first conflict, min | first lock per side, min | every pre-heal lock kept | first lock after heal, min | stalls in 2 h after heal |
+|---|---|---|---|---|---|---|---|---|---|
+| v2 | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| v2 | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| v2 | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 |  | never | never / 279 (never in 2 of 3) | yes | 0 to 0 | 0 |
+| v2 | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 142 to 291 |  | 14 to 77 | 11 to 48 / 0 to 76 | yes | 0 to 0 | 0 |
+| v2 | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| v2 | 60/40 honest | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| v2 | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+| v3 | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| v3 | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| v3 | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| v3 | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 139 to 283 |  | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 to 0 | 0 |
+| v3 | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| v3 | 60/40 honest | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| v3 | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+| leave | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| leave | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| leave | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| leave | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 139 to 283 |  | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 to 0 | 0 |
+| leave | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| leave | 60/40 honest | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| leave | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+| decay1 | 50/50 honest, 0% attacker | 360 | 467 to 473 |  | 121 to 126 | 120 to 122 / 121 to 123 | yes | 0 | 0 |
+| decay1 | 50/50 + 20% equivocator (sides 60/60) | 360 | 528 to 535 |  | 93 to 94 | 91 / 92 to 94 | yes | 0 | 0 |
+| decay1 | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 587 to 595 |  | 64 to 65 | 62 / 63 to 65 | yes | 0 to 0 | 0 |
+| decay1 | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 575 to 612 |  | 14 to 62 | 12 to 50 / 0 to 62 | yes | 0 to 0 | 0 |
+| decay1 | 40/40/20 honest | 360 | 815 to 822 |  | 142 to 144 | 140 to 142 / 140 to 140 / 166 to 166 | yes | 0 to 0 | 0 |
+| decay1 | 60/40 honest | 360 | 435 to 436 |  | 142 to 142 | 92 to 96 / 141 to 142 | yes | 0 to 0 | 0 |
+| decay1 | 70/30 honest | 360 | 403 to 414 |  | 154 to 156 | 0 to 4 / 154 to 156 | yes | 0 | 0 |
+| decay6 | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| decay6 | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| decay6 | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| decay6 | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 139 to 283 |  | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 to 0 | 0 |
+| decay6 | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| decay6 | 60/40 honest | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| decay6 | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+| hyst | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| hyst | 50/50 + 20% equivocator (sides 60/60) | 360 | 565 to 597 |  | 60 to 61 | 58 to 61 / 58 to 61 | yes | 0 | 0 |
+| hyst | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 596 to 603 |  | 60 to 62 | 59 to 60 / 60 to 62 | yes | 0 to 0 | 0 |
+| hyst | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 160 to 342 |  | 14 to 60 | 12 to 50 / 0 to 60 | yes | 0 to 0 | 0 |
+| hyst | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| hyst | 60/40 honest | 360 | 0 |  | never | 58 to 61 / never | yes | 0 to 0 | 0 |
+| hyst | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+| twotier | 50/50 honest, 0% attacker | 360 | 0 | 589 to 603 | never | never / never | yes | 0 | 0 |
+| twotier | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 | 653 to 660 | never | never / never | yes | 0 | 0 |
+| twotier | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 | 705 to 715 | never | never / never | yes | 0 to 0 | 0 |
+| twotier | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 139 to 283 | 713 to 720 | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 to 0 | 0 |
+| twotier | 40/40/20 honest | 360 | 0 | 1056 to 1062 | never | never / never / never | yes | 0 to 0 | 0 |
+| twotier | 60/40 honest | 360 | 0 | 516 to 564 | never | never / never | yes | 0 to 0 | 0 |
+| twotier | 70/30 honest | 360 | 0 | 523 to 532 | never | 0 to 4 / never | yes | 0 | 0 |
+
+## P2. The poisoned eclipse (a 34% attacker plus a 20% pool; the eclipsed side holds 54% of total)
+
+| rule | eclipse h | conflicting final locks | conflicting provisional locks | first conflict, min | locks on the eclipsed side | honest-side stalls during | stalls after heal |
+|---|---|---|---|---|---|---|---|
+| v2 | 1 | 0 |  | never | 0 | 0 | 0 |
+| v2 | 2 | 0 |  | never | 0 | 0 | 0 |
+| v2 | 4 | 0 |  | never | 0 | 0 | 0 |
+| v3 | 1 | 0 |  | never | 0 | 0 | 0 |
+| v3 | 2 | 0 |  | never | 0 | 0 | 0 |
+| v3 | 4 | 0 |  | never | 0 | 0 | 0 |
+| leave | 1 | 0 |  | never | 0 | 0 | 0 |
+| leave | 2 | 0 |  | never | 0 | 0 | 0 |
+| leave | 4 | 0 |  | never | 0 | 0 | 0 |
+| decay1 | 1 | 0 |  | never | 0 | 0 | 0 |
+| decay1 | 2 | 17 to 24 |  | 109 to 111 | 22 to 24 | 0 | 0 |
+| decay1 | 4 | 257 to 264 |  | 109 to 111 | 263 to 265 | 0 | 0 |
+| decay6 | 1 | 0 |  | never | 0 | 0 | 0 |
+| decay6 | 2 | 0 |  | never | 0 | 0 | 0 |
+| decay6 | 4 | 0 |  | never | 0 | 0 | 0 |
+| hyst | 1 | 0 |  | never | 0 | 0 | 0 |
+| hyst | 2 | 0 |  | never | 0 | 0 | 0 |
+| hyst | 4 | 0 |  | never | 0 | 0 | 0 |
+| twotier | 1 | 0 | 19 to 24 | never | 0 | 0 | 0 |
+| twotier | 2 | 0 | 137 to 145 | never | 0 | 0 | 0 |
+| twotier | 4 | 0 | 377 to 385 | never | 0 | 0 | 0 |
+
+## P3. Long honest partitions with view-local weight, 12 days
+
+| rule | honest split | days | first lock per side, day | conflicting final locks | conflicting provisional locks | first conflict | every pre-heal lock kept | first lock after heal, min |
+|---|---|---|---|---|---|---|---|---|
+| v2 | 50/50 | 12 | 10.15 to 10.18 / 10.12 to 10.34 | 2890 to 3550 |  | 10.22 to 10.35 d | yes | 0 |
+| v2 | 60/40 | 12 | 5.15 to 5.27 / never | 0 |  | never | yes | 0 to 0 |
+| v3 | 50/50 | 12 | never / never | 0 |  | never | yes | 0 |
+| v3 | 60/40 | 12 | never / never | 0 |  | never | yes | 0 to 0 |
+| leave | 50/50 | 12 | never / never | 0 |  | never | yes | 0 |
+| leave | 60/40 | 12 | never / never | 0 |  | never | yes | 0 to 0 |
+| decay1 | 50/50 | 12 | 0.08 to 0.08 / 0.08 to 0.09 | 34146 to 34212 |  | 0.08 to 0.09 d | yes | 0 |
+| decay1 | 60/40 | 12 | 0.06 to 0.07 / 0.10 to 0.10 | 33931 to 34254 |  | 0.10 to 0.10 d | yes | 0 to 0 |
+| decay6 | 50/50 | 12 | 0.77 to 0.77 / 0.75 to 0.78 | 32120 to 32246 |  | 0.77 to 0.78 d | yes | 0 |
+| decay6 | 60/40 | 12 | 0.52 / 0.92 to 0.93 | 31545 to 31873 |  | 0.93 to 0.93 d | yes | 0 to 0 |
+| hyst | 50/50 | 12 | never / never | 0 |  | never | yes | 0 |
+| hyst | 60/40 | 12 | 0.04 to 0.04 / never | 0 |  | never | yes | 0 to 0 |
+| twotier | 50/50 | 12 | never / never | 0 | 34267 to 34418 | never | yes | 0 |
+| twotier | 60/40 | 12 | never / never | 0 | 34094 to 34381 | never | yes | 0 to 0 |
+
+## Q1. Silent weight that keeps mining for 6 hours, then resumes
+
+| rule | silent weight | silent hours | first lock after the stop, min | stalled while silent | longest gap, min | first lock after resume, min | conflicting locks |
+|---|---|---|---|---|---|---|---|
+| v2 | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| v2 | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| v2 | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| v3 | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| v3 | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| v3 | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| leave | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| leave | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| leave | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| decay1 | 30% | 6 | 0 | 0 | 1 | 0 to 0 | 0 |
+| decay1 | 34% | 6 | 66 to 68 | 134 to 135 | 66 to 68 | 0 to 0 | 0 |
+| decay1 | 45% | 6 | 108 to 112 | 217 to 229 | 108 to 112 | 0 to 0 | 0 |
+| decay6 | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| decay6 | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| decay6 | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| hyst | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| hyst | 34% | 6 | 59 to 61 | 120 | 59 to 61 | 0 to 0 | 0 |
+| hyst | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| twotier | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| twotier | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| twotier | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+
+## Q2. Acquired keys that sign, stay silent or leave, under v3 + leave 1 h (30 days)
+
+| bought weight | bought keys | attacker's peak share of the denominator | share at the end | holds the veto (1/3) | stalled checkpoints | conflicting locks |
+|---|---|---|---|---|---|---|
+| 40% | sign | 39.8 to 39.8% | 30.0 to 30.0% | day 1 to 19 | 0 | 0 |
+| 40% | silent | 39.8 to 39.8% | 30.0 to 30.0% | day 1 to 19 | 86402 to 86491 | 0 |
+| 40% | leave | 30.0 to 30.0% | 30.0 to 30.0% | never | 119 to 144 | 0 |
+| 49% | sign | 48.5 to 48.6% | 30.0 to 30.0% | day 1 to 23 to 24 | 0 | 0 |
+| 49% | silent | 48.5 to 48.6% | 30.0 to 30.0% | day 1 to 23 to 24 | 86371 to 86408 | 0 |
+| 49% | leave | 30.0 to 30.0% | 30.0 to 30.0% | never | 143 to 188 | 0 |
diff --git a/sim/horizon/finality-and-weight/results/err-decay1.log b/sim/horizon/finality-and-weight/results/err-decay1.log
new file mode 100644
index 000000000..da660639e
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/err-decay1.log
@@ -0,0 +1,3 @@
+(T took 212 s)
+(P took 77 s)
+(Q took 4 s)
diff --git a/sim/horizon/finality-and-weight/results/err-decay6.log b/sim/horizon/finality-and-weight/results/err-decay6.log
new file mode 100644
index 000000000..0458d1a9b
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/err-decay6.log
@@ -0,0 +1,3 @@
+(T took 215 s)
+(P took 78 s)
+(Q took 4 s)
diff --git a/sim/horizon/finality-and-weight/results/err-hyst.log b/sim/horizon/finality-and-weight/results/err-hyst.log
new file mode 100644
index 000000000..46b1a31d2
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/err-hyst.log
@@ -0,0 +1,3 @@
+(T took 196 s)
+(P took 68 s)
+(Q took 3 s)
diff --git a/sim/horizon/finality-and-weight/results/err-leave.log b/sim/horizon/finality-and-weight/results/err-leave.log
new file mode 100644
index 000000000..5a4e3e07f
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/err-leave.log
@@ -0,0 +1,3 @@
+(T took 205 s)
+(P took 68 s)
+(Q took 508 s)
diff --git a/sim/horizon/finality-and-weight/results/err-twotier.log b/sim/horizon/finality-and-weight/results/err-twotier.log
new file mode 100644
index 000000000..0b29aa68e
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/err-twotier.log
@@ -0,0 +1,3 @@
+(T took 204 s)
+(P took 73 s)
+(Q took 3 s)
diff --git a/sim/horizon/finality-and-weight/results/err-v2.log b/sim/horizon/finality-and-weight/results/err-v2.log
new file mode 100644
index 000000000..2040d2607
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/err-v2.log
@@ -0,0 +1,3 @@
+(T took 173 s)
+(P took 59 s)
+(Q took 3 s)
diff --git a/sim/horizon/finality-and-weight/results/err-v3.log b/sim/horizon/finality-and-weight/results/err-v3.log
new file mode 100644
index 000000000..372df15da
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/err-v3.log
@@ -0,0 +1,3 @@
+(T took 191 s)
+(P took 66 s)
+(Q took 3 s)
diff --git a/sim/horizon/finality-and-weight/results/out-decay1.md b/sim/horizon/finality-and-weight/results/out-decay1.md
new file mode 100644
index 000000000..22086dd14
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/out-decay1.md
@@ -0,0 +1,56 @@
+# finality_horizon output (sim/horizon/finality-and-weight/finality_horizon.py, a copy of sim/finality_v2.py at fud-close 1544c63 plus the candidate rules)
+
+seed 7, slot 30 s, 30 blocks per checkpoint, window 720 h, presence 240 checkpoints, dust 100, quorum 2/3, floor factor 1.00 (a lock needs 66.7% of total under the rule as specified), inter-region delay 2.0 s (intra 0.1 s, jitter sigma 0.25), grace 15 s, uptime 0.97 (mean outage 20 slots), uptime 0.995 for keys at or above 1% of hashrate, honest keys 1000 Pareto 1.0, geography 45%/35%/20%
+
+### T. Tonight's departure (6 Oct 2026, 18:40Z): a set holding x of weight stops mining and signing at once; first lock after it under each candidate rule; 31 days, seeds 7,11,13
+
+Mainnet scale (30-day window). The devnet's window is 7,200 DAA s, so divide by 360: one mainnet day is four devnet minutes. Analytic: v2 recovers at 30 (1 - 1/(3x)) days (never at x <= 1/3), v3 at day 30 (the frozen table's expiry), the leave rule after its delay, the decay rule after T + 1/r x (1 - (1 - x) / (2 x)) hours at the latest (the departed weight has to decay until the stayers hold 2/3 of what is left).
+
+| departed weight | rule | first final lock after the departure | provisional tier | stalled checkpoints | stalled after the first lock | conflicting final locks | conflicting provisional locks |
+|---|---|---|---|---|---|---|---|
+| 34% | decay1 | 0.05 to 0.05 d (devnet 0 to 0 min) |  | 133 to 534 | 0 to 398 | 0 |  |
+| 45% | decay1 | 0.07 to 0.08 d (devnet 0 to 0 min) |  | 224 to 296 | 9 to 83 | 0 |  |
+| 50% | decay1 | 0.08 to 0.09 d (devnet 0 to 0 min) |  | 244 to 609 | 0 to 371 | 0 |  |
+
+### P. The partition suite under each candidate rule (every side retargets and counts only its own blocks), seeds 7,11,13
+
+Pass line: 0 conflicting FINAL locks in every row. A candidate that removes weight from a denominator on what a view does NOT see (silence, missing blocks) is view-dependent: each side of a partition sees the other side as silent, so both denominators shrink and the two sides lock alone, the active-denominator hazard of `sim/results_v2.md` E in a new coat. A candidate that removes weight on what a view DOES see (a signed leave, equivocation evidence) keeps the 4/3 arithmetic of spec 3.11.2 over the weight both sides count.
+
+P1. Partitions of 360 minutes:
+
+| rule | case | partition min | conflicting final locks | conflicting provisional locks | first conflict, min | first lock per side, min | every pre-heal lock kept | first lock after heal, min | stalls in 2 h after heal |
+|---|---|---|---|---|---|---|---|---|---|
+| decay1 | 50/50 honest, 0% attacker | 360 | 467 to 473 |  | 121 to 126 | 120 to 122 / 121 to 123 | yes | 0 | 0 |
+| decay1 | 50/50 + 20% equivocator (sides 60/60) | 360 | 528 to 535 |  | 93 to 94 | 91 / 92 to 94 | yes | 0 | 0 |
+| decay1 | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 587 to 595 |  | 64 to 65 | 62 / 63 to 65 | yes | 0 to 0 | 0 |
+| decay1 | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 575 to 612 |  | 14 to 62 | 12 to 50 / 0 to 62 | yes | 0 to 0 | 0 |
+| decay1 | 40/40/20 honest | 360 | 815 to 822 |  | 142 to 144 | 140 to 142 / 140 to 140 / 166 to 166 | yes | 0 to 0 | 0 |
+| decay1 | 60/40 honest | 360 | 435 to 436 |  | 142 to 142 | 92 to 96 / 141 to 142 | yes | 0 to 0 | 0 |
+| decay1 | 70/30 honest | 360 | 403 to 414 |  | 154 to 156 | 0 to 4 / 154 to 156 | yes | 0 | 0 |
+
+P2. The poisoned eclipse (L3: a 34% attacker feeds a 20% pool a private fork and signs both; the eclipsed side holds 54% of total):
+
+| rule | eclipse h | conflicting final locks | conflicting provisional locks | first conflict, min | locks on the eclipsed side | honest-side stalls during | stalls after heal |
+|---|---|---|---|---|---|---|---|
+| decay1 | 1 | 0 |  | never | 0 | 0 | 0 |
+| decay1 | 2 | 17 to 24 |  | 109 to 111 | 22 to 24 | 0 | 0 |
+| decay1 | 4 | 257 to 264 |  | 109 to 111 | 263 to 265 | 0 | 0 |
+
+P3. Long honest partitions with view-local weight (L4), 12 days:
+
+| rule | honest split | days | first lock per side, day | conflicting final locks | conflicting provisional locks | first conflict | every pre-heal lock kept | first lock after heal, min |
+|---|---|---|---|---|---|---|---|---|
+| decay1 | 50/50 | 12 | 0.08 to 0.08 / 0.08 to 0.09 | 34146 to 34212 |  | 0.08 to 0.09 d | yes | 0 |
+| decay1 | 60/40 | 12 | 0.06 to 0.07 / 0.10 to 0.10 | 33931 to 34254 |  | 0.10 to 0.10 d | yes | 0 to 0 |
+
+### Q. Silent weight that keeps mining (L1) under each candidate, and acquired keys that LEAVE under the leave rule; seeds 7,11,13
+
+Q1. A set holding x of weight stops signing but keeps mining for 6 h, then resumes (its weight never ages out):
+
+| rule | silent weight | silent hours | first lock after the stop, min | stalled while silent | longest gap, min | first lock after resume, min | conflicting locks |
+|---|---|---|---|---|---|---|---|
+| decay1 | 30% | 6 | 0 | 0 | 1 | 0 to 0 | 0 |
+| decay1 | 34% | 6 | 66 to 68 | 134 to 135 | 66 to 68 | 0 to 0 | 0 |
+| decay1 | 45% | 6 | 108 to 112 | 217 to 229 | 108 to 112 | 0 to 0 | 0 |
+
+
diff --git a/sim/horizon/finality-and-weight/results/out-decay6.md b/sim/horizon/finality-and-weight/results/out-decay6.md
new file mode 100644
index 000000000..e294d97fd
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/out-decay6.md
@@ -0,0 +1,56 @@
+# finality_horizon output (sim/horizon/finality-and-weight/finality_horizon.py, a copy of sim/finality_v2.py at fud-close 1544c63 plus the candidate rules)
+
+seed 7, slot 30 s, 30 blocks per checkpoint, window 720 h, presence 240 checkpoints, dust 100, quorum 2/3, floor factor 1.00 (a lock needs 66.7% of total under the rule as specified), inter-region delay 2.0 s (intra 0.1 s, jitter sigma 0.25), grace 15 s, uptime 0.97 (mean outage 20 slots), uptime 0.995 for keys at or above 1% of hashrate, honest keys 1000 Pareto 1.0, geography 45%/35%/20%
+
+### T. Tonight's departure (6 Oct 2026, 18:40Z): a set holding x of weight stops mining and signing at once; first lock after it under each candidate rule; 31 days, seeds 7,11,13
+
+Mainnet scale (30-day window). The devnet's window is 7,200 DAA s, so divide by 360: one mainnet day is four devnet minutes. Analytic: v2 recovers at 30 (1 - 1/(3x)) days (never at x <= 1/3), v3 at day 30 (the frozen table's expiry), the leave rule after its delay, the decay rule after T + 1/r x (1 - (1 - x) / (2 x)) hours at the latest (the departed weight has to decay until the stayers hold 2/3 of what is left).
+
+| departed weight | rule | first final lock after the departure | provisional tier | stalled checkpoints | stalled after the first lock | conflicting final locks | conflicting provisional locks |
+|---|---|---|---|---|---|---|---|
+| 34% | decay6 | 0.30 to 0.30 d (devnet 1 to 1 min) |  | 897 to 1298 | 24 to 442 | 0 |  |
+| 45% | decay6 | 0.64 to 0.67 d (devnet 3 to 3 min) |  | 1946 to 1985 | 0 to 129 | 0 |  |
+| 50% | decay6 | 0.76 to 0.77 d (devnet 3 to 3 min) |  | 2231 to 2543 | 0 to 371 | 0 |  |
+
+### P. The partition suite under each candidate rule (every side retargets and counts only its own blocks), seeds 7,11,13
+
+Pass line: 0 conflicting FINAL locks in every row. A candidate that removes weight from a denominator on what a view does NOT see (silence, missing blocks) is view-dependent: each side of a partition sees the other side as silent, so both denominators shrink and the two sides lock alone, the active-denominator hazard of `sim/results_v2.md` E in a new coat. A candidate that removes weight on what a view DOES see (a signed leave, equivocation evidence) keeps the 4/3 arithmetic of spec 3.11.2 over the weight both sides count.
+
+P1. Partitions of 360 minutes:
+
+| rule | case | partition min | conflicting final locks | conflicting provisional locks | first conflict, min | first lock per side, min | every pre-heal lock kept | first lock after heal, min | stalls in 2 h after heal |
+|---|---|---|---|---|---|---|---|---|---|
+| decay6 | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| decay6 | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| decay6 | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| decay6 | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 139 to 283 |  | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 to 0 | 0 |
+| decay6 | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| decay6 | 60/40 honest | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| decay6 | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+
+P2. The poisoned eclipse (L3: a 34% attacker feeds a 20% pool a private fork and signs both; the eclipsed side holds 54% of total):
+
+| rule | eclipse h | conflicting final locks | conflicting provisional locks | first conflict, min | locks on the eclipsed side | honest-side stalls during | stalls after heal |
+|---|---|---|---|---|---|---|---|
+| decay6 | 1 | 0 |  | never | 0 | 0 | 0 |
+| decay6 | 2 | 0 |  | never | 0 | 0 | 0 |
+| decay6 | 4 | 0 |  | never | 0 | 0 | 0 |
+
+P3. Long honest partitions with view-local weight (L4), 12 days:
+
+| rule | honest split | days | first lock per side, day | conflicting final locks | conflicting provisional locks | first conflict | every pre-heal lock kept | first lock after heal, min |
+|---|---|---|---|---|---|---|---|---|
+| decay6 | 50/50 | 12 | 0.77 to 0.77 / 0.75 to 0.78 | 32120 to 32246 |  | 0.77 to 0.78 d | yes | 0 |
+| decay6 | 60/40 | 12 | 0.52 / 0.92 to 0.93 | 31545 to 31873 |  | 0.93 to 0.93 d | yes | 0 to 0 |
+
+### Q. Silent weight that keeps mining (L1) under each candidate, and acquired keys that LEAVE under the leave rule; seeds 7,11,13
+
+Q1. A set holding x of weight stops signing but keeps mining for 6 h, then resumes (its weight never ages out):
+
+| rule | silent weight | silent hours | first lock after the stop, min | stalled while silent | longest gap, min | first lock after resume, min | conflicting locks |
+|---|---|---|---|---|---|---|---|
+| decay6 | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| decay6 | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| decay6 | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+
+
diff --git a/sim/horizon/finality-and-weight/results/out-hyst.md b/sim/horizon/finality-and-weight/results/out-hyst.md
new file mode 100644
index 000000000..7358ae6f6
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/out-hyst.md
@@ -0,0 +1,56 @@
+# finality_horizon output (sim/horizon/finality-and-weight/finality_horizon.py, a copy of sim/finality_v2.py at fud-close 1544c63 plus the candidate rules)
+
+seed 7, slot 30 s, 30 blocks per checkpoint, window 720 h, presence 240 checkpoints, dust 100, quorum 2/3, floor factor 1.00 (a lock needs 66.7% of total under the rule as specified), inter-region delay 2.0 s (intra 0.1 s, jitter sigma 0.25), grace 15 s, uptime 0.97 (mean outage 20 slots), uptime 0.995 for keys at or above 1% of hashrate, honest keys 1000 Pareto 1.0, geography 45%/35%/20%
+
+### T. Tonight's departure (6 Oct 2026, 18:40Z): a set holding x of weight stops mining and signing at once; first lock after it under each candidate rule; 31 days, seeds 7,11,13
+
+Mainnet scale (30-day window). The devnet's window is 7,200 DAA s, so divide by 360: one mainnet day is four devnet minutes. Analytic: v2 recovers at 30 (1 - 1/(3x)) days (never at x <= 1/3), v3 at day 30 (the frozen table's expiry), the leave rule after its delay, the decay rule after T + 1/r x (1 - (1 - x) / (2 x)) hours at the latest (the departed weight has to decay until the stayers hold 2/3 of what is left).
+
+| departed weight | rule | first final lock after the departure | provisional tier | stalled checkpoints | stalled after the first lock | conflicting final locks | conflicting provisional locks |
+|---|---|---|---|---|---|---|---|
+| 34% | hyst | 0.04 to 0.04 d (devnet 0 to 0 min) |  | 881 to 1445 | 761 to 1325 | 0 |  |
+| 45% | hyst | 30.00 d (devnet 120 min) |  | 86382 to 86420 | 0 to 22 | 0 |  |
+| 50% | hyst | 30.00 d (devnet 120 min) |  | 86387 to 86514 | 0 to 10 | 0 |  |
+
+### P. The partition suite under each candidate rule (every side retargets and counts only its own blocks), seeds 7,11,13
+
+Pass line: 0 conflicting FINAL locks in every row. A candidate that removes weight from a denominator on what a view does NOT see (silence, missing blocks) is view-dependent: each side of a partition sees the other side as silent, so both denominators shrink and the two sides lock alone, the active-denominator hazard of `sim/results_v2.md` E in a new coat. A candidate that removes weight on what a view DOES see (a signed leave, equivocation evidence) keeps the 4/3 arithmetic of spec 3.11.2 over the weight both sides count.
+
+P1. Partitions of 360 minutes:
+
+| rule | case | partition min | conflicting final locks | conflicting provisional locks | first conflict, min | first lock per side, min | every pre-heal lock kept | first lock after heal, min | stalls in 2 h after heal |
+|---|---|---|---|---|---|---|---|---|---|
+| hyst | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| hyst | 50/50 + 20% equivocator (sides 60/60) | 360 | 565 to 597 |  | 60 to 61 | 58 to 61 / 58 to 61 | yes | 0 | 0 |
+| hyst | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 596 to 603 |  | 60 to 62 | 59 to 60 / 60 to 62 | yes | 0 to 0 | 0 |
+| hyst | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 160 to 342 |  | 14 to 60 | 12 to 50 / 0 to 60 | yes | 0 to 0 | 0 |
+| hyst | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| hyst | 60/40 honest | 360 | 0 |  | never | 58 to 61 / never | yes | 0 to 0 | 0 |
+| hyst | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+
+P2. The poisoned eclipse (L3: a 34% attacker feeds a 20% pool a private fork and signs both; the eclipsed side holds 54% of total):
+
+| rule | eclipse h | conflicting final locks | conflicting provisional locks | first conflict, min | locks on the eclipsed side | honest-side stalls during | stalls after heal |
+|---|---|---|---|---|---|---|---|
+| hyst | 1 | 0 |  | never | 0 | 0 | 0 |
+| hyst | 2 | 0 |  | never | 0 | 0 | 0 |
+| hyst | 4 | 0 |  | never | 0 | 0 | 0 |
+
+P3. Long honest partitions with view-local weight (L4), 12 days:
+
+| rule | honest split | days | first lock per side, day | conflicting final locks | conflicting provisional locks | first conflict | every pre-heal lock kept | first lock after heal, min |
+|---|---|---|---|---|---|---|---|---|
+| hyst | 50/50 | 12 | never / never | 0 |  | never | yes | 0 |
+| hyst | 60/40 | 12 | 0.04 to 0.04 / never | 0 |  | never | yes | 0 to 0 |
+
+### Q. Silent weight that keeps mining (L1) under each candidate, and acquired keys that LEAVE under the leave rule; seeds 7,11,13
+
+Q1. A set holding x of weight stops signing but keeps mining for 6 h, then resumes (its weight never ages out):
+
+| rule | silent weight | silent hours | first lock after the stop, min | stalled while silent | longest gap, min | first lock after resume, min | conflicting locks |
+|---|---|---|---|---|---|---|---|
+| hyst | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| hyst | 34% | 6 | 59 to 61 | 120 | 59 to 61 | 0 to 0 | 0 |
+| hyst | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+
+
diff --git a/sim/horizon/finality-and-weight/results/out-leave.md b/sim/horizon/finality-and-weight/results/out-leave.md
new file mode 100644
index 000000000..1506d9848
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/out-leave.md
@@ -0,0 +1,66 @@
+# finality_horizon output (sim/horizon/finality-and-weight/finality_horizon.py, a copy of sim/finality_v2.py at fud-close 1544c63 plus the candidate rules)
+
+seed 7, slot 30 s, 30 blocks per checkpoint, window 720 h, presence 240 checkpoints, dust 100, quorum 2/3, floor factor 1.00 (a lock needs 66.7% of total under the rule as specified), inter-region delay 2.0 s (intra 0.1 s, jitter sigma 0.25), grace 15 s, uptime 0.97 (mean outage 20 slots), uptime 0.995 for keys at or above 1% of hashrate, honest keys 1000 Pareto 1.0, geography 45%/35%/20%
+
+### T. Tonight's departure (6 Oct 2026, 18:40Z): a set holding x of weight stops mining and signing at once; first lock after it under each candidate rule; 31 days, seeds 7,11,13
+
+Mainnet scale (30-day window). The devnet's window is 7,200 DAA s, so divide by 360: one mainnet day is four devnet minutes. Analytic: v2 recovers at 30 (1 - 1/(3x)) days (never at x <= 1/3), v3 at day 30 (the frozen table's expiry), the leave rule after its delay, the decay rule after T + 1/r x (1 - (1 - x) / (2 x)) hours at the latest (the departed weight has to decay until the stayers hold 2/3 of what is left).
+
+| departed weight | rule | first final lock after the departure | provisional tier | stalled checkpoints | stalled after the first lock | conflicting final locks | conflicting provisional locks |
+|---|---|---|---|---|---|---|---|
+| 34% | leave | 0.04 to 0.04 d (devnet 0 to 0 min) |  | 119 to 521 | 0 to 398 | 0 |  |
+| 45% | leave | 0.04 d (devnet 0 min) |  | 119 to 204 | 0 to 83 | 0 |  |
+| 50% | leave | 0.04 d (devnet 0 min) |  | 118 to 490 | 0 to 371 | 0 |  |
+
+### P. The partition suite under each candidate rule (every side retargets and counts only its own blocks), seeds 7,11,13
+
+Pass line: 0 conflicting FINAL locks in every row. A candidate that removes weight from a denominator on what a view does NOT see (silence, missing blocks) is view-dependent: each side of a partition sees the other side as silent, so both denominators shrink and the two sides lock alone, the active-denominator hazard of `sim/results_v2.md` E in a new coat. A candidate that removes weight on what a view DOES see (a signed leave, equivocation evidence) keeps the 4/3 arithmetic of spec 3.11.2 over the weight both sides count.
+
+P1. Partitions of 360 minutes:
+
+| rule | case | partition min | conflicting final locks | conflicting provisional locks | first conflict, min | first lock per side, min | every pre-heal lock kept | first lock after heal, min | stalls in 2 h after heal |
+|---|---|---|---|---|---|---|---|---|---|
+| leave | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| leave | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| leave | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| leave | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 139 to 283 |  | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 to 0 | 0 |
+| leave | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| leave | 60/40 honest | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| leave | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+
+P2. The poisoned eclipse (L3: a 34% attacker feeds a 20% pool a private fork and signs both; the eclipsed side holds 54% of total):
+
+| rule | eclipse h | conflicting final locks | conflicting provisional locks | first conflict, min | locks on the eclipsed side | honest-side stalls during | stalls after heal |
+|---|---|---|---|---|---|---|---|
+| leave | 1 | 0 |  | never | 0 | 0 | 0 |
+| leave | 2 | 0 |  | never | 0 | 0 | 0 |
+| leave | 4 | 0 |  | never | 0 | 0 | 0 |
+
+P3. Long honest partitions with view-local weight (L4), 12 days:
+
+| rule | honest split | days | first lock per side, day | conflicting final locks | conflicting provisional locks | first conflict | every pre-heal lock kept | first lock after heal, min |
+|---|---|---|---|---|---|---|---|---|
+| leave | 50/50 | 12 | never / never | 0 |  | never | yes | 0 |
+| leave | 60/40 | 12 | never / never | 0 |  | never | yes | 0 to 0 |
+
+### Q. Silent weight that keeps mining (L1) under each candidate, and acquired keys that LEAVE under the leave rule; seeds 7,11,13
+
+Q1. A set holding x of weight stops signing but keeps mining for 6 h, then resumes (its weight never ages out):
+
+| rule | silent weight | silent hours | first lock after the stop, min | stalled while silent | longest gap, min | first lock after resume, min | conflicting locks |
+|---|---|---|---|---|---|---|---|
+| leave | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| leave | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| leave | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+
+Q2. Under v3 + leave 1 h: an attacker at 30% of hashrate buys keys worth 40% or 49% of the window and makes them sign, stay silent, or LEAVE (the leave removes the bought weight from every denominator after 1 h, so the attacker's own share of what remains is w / (1 - L)). Arithmetic: to lock alone it needs w >= 2/3 (1 - L), so w + L >= 2/3 + L/3 >= 2/3 of the window either way; leaving bought keys is never cheaper than signing with them. 30 days:
+
+| bought weight | bought keys | attacker's peak share of the denominator | share at the end | holds the veto (1/3) | stalled checkpoints | conflicting locks |
+|---|---|---|---|---|---|---|
+| 40% | sign | 39.8 to 39.8% | 30.0 to 30.0% | day 1 to 19 | 0 | 0 |
+| 40% | silent | 39.8 to 39.8% | 30.0 to 30.0% | day 1 to 19 | 86402 to 86491 | 0 |
+| 40% | leave | 30.0 to 30.0% | 30.0 to 30.0% | never | 119 to 144 | 0 |
+| 49% | sign | 48.5 to 48.6% | 30.0 to 30.0% | day 1 to 23 to 24 | 0 | 0 |
+| 49% | silent | 48.5 to 48.6% | 30.0 to 30.0% | day 1 to 23 to 24 | 86371 to 86408 | 0 |
+| 49% | leave | 30.0 to 30.0% | 30.0 to 30.0% | never | 143 to 188 | 0 |
+
diff --git a/sim/horizon/finality-and-weight/results/out-twotier.md b/sim/horizon/finality-and-weight/results/out-twotier.md
new file mode 100644
index 000000000..c75da4006
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/out-twotier.md
@@ -0,0 +1,56 @@
+# finality_horizon output (sim/horizon/finality-and-weight/finality_horizon.py, a copy of sim/finality_v2.py at fud-close 1544c63 plus the candidate rules)
+
+seed 7, slot 30 s, 30 blocks per checkpoint, window 720 h, presence 240 checkpoints, dust 100, quorum 2/3, floor factor 1.00 (a lock needs 66.7% of total under the rule as specified), inter-region delay 2.0 s (intra 0.1 s, jitter sigma 0.25), grace 15 s, uptime 0.97 (mean outage 20 slots), uptime 0.995 for keys at or above 1% of hashrate, honest keys 1000 Pareto 1.0, geography 45%/35%/20%
+
+### T. Tonight's departure (6 Oct 2026, 18:40Z): a set holding x of weight stops mining and signing at once; first lock after it under each candidate rule; 31 days, seeds 7,11,13
+
+Mainnet scale (30-day window). The devnet's window is 7,200 DAA s, so divide by 360: one mainnet day is four devnet minutes. Analytic: v2 recovers at 30 (1 - 1/(3x)) days (never at x <= 1/3), v3 at day 30 (the frozen table's expiry), the leave rule after its delay, the decay rule after T + 1/r x (1 - (1 - x) / (2 x)) hours at the latest (the departed weight has to decay until the stayers hold 2/3 of what is left).
+
+| departed weight | rule | first final lock after the departure | provisional tier | stalled checkpoints | stalled after the first lock | conflicting final locks | conflicting provisional locks |
+|---|---|---|---|---|---|---|---|
+| 34% | twotier | 30.00 d (devnet 120 min) | provisional 0.000 to 0.004 d (devnet 0.0 to 0.0 min) | 86388 to 86472 | 0 to 31 | 0 | 0 |
+| 45% | twotier | 30.00 d (devnet 120 min) | provisional 0.031 to 0.034 d (devnet 0.1 to 0.1 min) | 86382 to 86420 | 0 to 22 | 0 | 0 |
+| 50% | twotier | 30.00 d (devnet 120 min) | provisional 0.042 d (devnet 0.2 min) | 86387 to 86514 | 0 to 10 | 0 | 0 |
+
+### P. The partition suite under each candidate rule (every side retargets and counts only its own blocks), seeds 7,11,13
+
+Pass line: 0 conflicting FINAL locks in every row. A candidate that removes weight from a denominator on what a view does NOT see (silence, missing blocks) is view-dependent: each side of a partition sees the other side as silent, so both denominators shrink and the two sides lock alone, the active-denominator hazard of `sim/results_v2.md` E in a new coat. A candidate that removes weight on what a view DOES see (a signed leave, equivocation evidence) keeps the 4/3 arithmetic of spec 3.11.2 over the weight both sides count.
+
+P1. Partitions of 360 minutes:
+
+| rule | case | partition min | conflicting final locks | conflicting provisional locks | first conflict, min | first lock per side, min | every pre-heal lock kept | first lock after heal, min | stalls in 2 h after heal |
+|---|---|---|---|---|---|---|---|---|---|
+| twotier | 50/50 honest, 0% attacker | 360 | 0 | 589 to 603 | never | never / never | yes | 0 | 0 |
+| twotier | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 | 653 to 660 | never | never / never | yes | 0 | 0 |
+| twotier | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 | 705 to 715 | never | never / never | yes | 0 to 0 | 0 |
+| twotier | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 139 to 283 | 713 to 720 | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 to 0 | 0 |
+| twotier | 40/40/20 honest | 360 | 0 | 1056 to 1062 | never | never / never / never | yes | 0 to 0 | 0 |
+| twotier | 60/40 honest | 360 | 0 | 516 to 564 | never | never / never | yes | 0 to 0 | 0 |
+| twotier | 70/30 honest | 360 | 0 | 523 to 532 | never | 0 to 4 / never | yes | 0 | 0 |
+
+P2. The poisoned eclipse (L3: a 34% attacker feeds a 20% pool a private fork and signs both; the eclipsed side holds 54% of total):
+
+| rule | eclipse h | conflicting final locks | conflicting provisional locks | first conflict, min | locks on the eclipsed side | honest-side stalls during | stalls after heal |
+|---|---|---|---|---|---|---|---|
+| twotier | 1 | 0 | 19 to 24 | never | 0 | 0 | 0 |
+| twotier | 2 | 0 | 137 to 145 | never | 0 | 0 | 0 |
+| twotier | 4 | 0 | 377 to 385 | never | 0 | 0 | 0 |
+
+P3. Long honest partitions with view-local weight (L4), 12 days:
+
+| rule | honest split | days | first lock per side, day | conflicting final locks | conflicting provisional locks | first conflict | every pre-heal lock kept | first lock after heal, min |
+|---|---|---|---|---|---|---|---|---|
+| twotier | 50/50 | 12 | never / never | 0 | 34267 to 34418 | never | yes | 0 |
+| twotier | 60/40 | 12 | never / never | 0 | 34094 to 34381 | never | yes | 0 to 0 |
+
+### Q. Silent weight that keeps mining (L1) under each candidate, and acquired keys that LEAVE under the leave rule; seeds 7,11,13
+
+Q1. A set holding x of weight stops signing but keeps mining for 6 h, then resumes (its weight never ages out):
+
+| rule | silent weight | silent hours | first lock after the stop, min | stalled while silent | longest gap, min | first lock after resume, min | conflicting locks |
+|---|---|---|---|---|---|---|---|
+| twotier | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| twotier | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| twotier | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+
+
diff --git a/sim/horizon/finality-and-weight/results/out-v2.md b/sim/horizon/finality-and-weight/results/out-v2.md
new file mode 100644
index 000000000..045e9d1e1
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/out-v2.md
@@ -0,0 +1,56 @@
+# finality_horizon output (sim/horizon/finality-and-weight/finality_horizon.py, a copy of sim/finality_v2.py at fud-close 1544c63 plus the candidate rules)
+
+seed 7, slot 30 s, 30 blocks per checkpoint, window 720 h, presence 240 checkpoints, dust 100, quorum 2/3, floor factor 1.00 (a lock needs 66.7% of total under the rule as specified), inter-region delay 2.0 s (intra 0.1 s, jitter sigma 0.25), grace 15 s, uptime 0.97 (mean outage 20 slots), uptime 0.995 for keys at or above 1% of hashrate, honest keys 1000 Pareto 1.0, geography 45%/35%/20%
+
+### T. Tonight's departure (6 Oct 2026, 18:40Z): a set holding x of weight stops mining and signing at once; first lock after it under each candidate rule; 31 days, seeds 7,11,13
+
+Mainnet scale (30-day window). The devnet's window is 7,200 DAA s, so divide by 360: one mainnet day is four devnet minutes. Analytic: v2 recovers at 30 (1 - 1/(3x)) days (never at x <= 1/3), v3 at day 30 (the frozen table's expiry), the leave rule after its delay, the decay rule after T + 1/r x (1 - (1 - x) / (2 x)) hours at the latest (the departed weight has to decay until the stayers hold 2/3 of what is left).
+
+| departed weight | rule | first final lock after the departure | provisional tier | stalled checkpoints | stalled after the first lock | conflicting final locks | conflicting provisional locks |
+|---|---|---|---|---|---|---|---|
+| 34% | v2 | 0.77 to 0.87 d (devnet 3 to 3 min) |  | 4057 to 4727 | 1531 to 2489 | 0 |  |
+| 45% | v2 | 7.85 to 8.03 d (devnet 31 to 32 min) |  | 23947 to 25153 | 1369 to 2065 | 0 |  |
+| 50% | v2 | 10.09 to 10.34 d (devnet 40 to 41 min) |  | 30107 to 31264 | 1065 to 1456 | 0 |  |
+
+### P. The partition suite under each candidate rule (every side retargets and counts only its own blocks), seeds 7,11,13
+
+Pass line: 0 conflicting FINAL locks in every row. A candidate that removes weight from a denominator on what a view does NOT see (silence, missing blocks) is view-dependent: each side of a partition sees the other side as silent, so both denominators shrink and the two sides lock alone, the active-denominator hazard of `sim/results_v2.md` E in a new coat. A candidate that removes weight on what a view DOES see (a signed leave, equivocation evidence) keeps the 4/3 arithmetic of spec 3.11.2 over the weight both sides count.
+
+P1. Partitions of 360 minutes:
+
+| rule | case | partition min | conflicting final locks | conflicting provisional locks | first conflict, min | first lock per side, min | every pre-heal lock kept | first lock after heal, min | stalls in 2 h after heal |
+|---|---|---|---|---|---|---|---|---|---|
+| v2 | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| v2 | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| v2 | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 |  | never | never / 279 (never in 2 of 3) | yes | 0 to 0 | 0 |
+| v2 | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 142 to 291 |  | 14 to 77 | 11 to 48 / 0 to 76 | yes | 0 to 0 | 0 |
+| v2 | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| v2 | 60/40 honest | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| v2 | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+
+P2. The poisoned eclipse (L3: a 34% attacker feeds a 20% pool a private fork and signs both; the eclipsed side holds 54% of total):
+
+| rule | eclipse h | conflicting final locks | conflicting provisional locks | first conflict, min | locks on the eclipsed side | honest-side stalls during | stalls after heal |
+|---|---|---|---|---|---|---|---|
+| v2 | 1 | 0 |  | never | 0 | 0 | 0 |
+| v2 | 2 | 0 |  | never | 0 | 0 | 0 |
+| v2 | 4 | 0 |  | never | 0 | 0 | 0 |
+
+P3. Long honest partitions with view-local weight (L4), 12 days:
+
+| rule | honest split | days | first lock per side, day | conflicting final locks | conflicting provisional locks | first conflict | every pre-heal lock kept | first lock after heal, min |
+|---|---|---|---|---|---|---|---|---|
+| v2 | 50/50 | 12 | 10.15 to 10.18 / 10.12 to 10.34 | 2890 to 3550 |  | 10.22 to 10.35 d | yes | 0 |
+| v2 | 60/40 | 12 | 5.15 to 5.27 / never | 0 |  | never | yes | 0 to 0 |
+
+### Q. Silent weight that keeps mining (L1) under each candidate, and acquired keys that LEAVE under the leave rule; seeds 7,11,13
+
+Q1. A set holding x of weight stops signing but keeps mining for 6 h, then resumes (its weight never ages out):
+
+| rule | silent weight | silent hours | first lock after the stop, min | stalled while silent | longest gap, min | first lock after resume, min | conflicting locks |
+|---|---|---|---|---|---|---|---|
+| v2 | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| v2 | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| v2 | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+
+
diff --git a/sim/horizon/finality-and-weight/results/out-v3.md b/sim/horizon/finality-and-weight/results/out-v3.md
new file mode 100644
index 000000000..23452be5e
--- /dev/null
+++ b/sim/horizon/finality-and-weight/results/out-v3.md
@@ -0,0 +1,56 @@
+# finality_horizon output (sim/horizon/finality-and-weight/finality_horizon.py, a copy of sim/finality_v2.py at fud-close 1544c63 plus the candidate rules)
+
+seed 7, slot 30 s, 30 blocks per checkpoint, window 720 h, presence 240 checkpoints, dust 100, quorum 2/3, floor factor 1.00 (a lock needs 66.7% of total under the rule as specified), inter-region delay 2.0 s (intra 0.1 s, jitter sigma 0.25), grace 15 s, uptime 0.97 (mean outage 20 slots), uptime 0.995 for keys at or above 1% of hashrate, honest keys 1000 Pareto 1.0, geography 45%/35%/20%
+
+### T. Tonight's departure (6 Oct 2026, 18:40Z): a set holding x of weight stops mining and signing at once; first lock after it under each candidate rule; 31 days, seeds 7,11,13
+
+Mainnet scale (30-day window). The devnet's window is 7,200 DAA s, so divide by 360: one mainnet day is four devnet minutes. Analytic: v2 recovers at 30 (1 - 1/(3x)) days (never at x <= 1/3), v3 at day 30 (the frozen table's expiry), the leave rule after its delay, the decay rule after T + 1/r x (1 - (1 - x) / (2 x)) hours at the latest (the departed weight has to decay until the stayers hold 2/3 of what is left).
+
+| departed weight | rule | first final lock after the departure | provisional tier | stalled checkpoints | stalled after the first lock | conflicting final locks | conflicting provisional locks |
+|---|---|---|---|---|---|---|---|
+| 34% | v3 | 30.00 d (devnet 120 min) |  | 86388 to 86472 | 0 to 31 | 0 |  |
+| 45% | v3 | 30.00 d (devnet 120 min) |  | 86382 to 86420 | 0 to 22 | 0 |  |
+| 50% | v3 | 30.00 d (devnet 120 min) |  | 86387 to 86514 | 0 to 10 | 0 |  |
+
+### P. The partition suite under each candidate rule (every side retargets and counts only its own blocks), seeds 7,11,13
+
+Pass line: 0 conflicting FINAL locks in every row. A candidate that removes weight from a denominator on what a view does NOT see (silence, missing blocks) is view-dependent: each side of a partition sees the other side as silent, so both denominators shrink and the two sides lock alone, the active-denominator hazard of `sim/results_v2.md` E in a new coat. A candidate that removes weight on what a view DOES see (a signed leave, equivocation evidence) keeps the 4/3 arithmetic of spec 3.11.2 over the weight both sides count.
+
+P1. Partitions of 360 minutes:
+
+| rule | case | partition min | conflicting final locks | conflicting provisional locks | first conflict, min | first lock per side, min | every pre-heal lock kept | first lock after heal, min | stalls in 2 h after heal |
+|---|---|---|---|---|---|---|---|---|---|
+| v3 | 50/50 honest, 0% attacker | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| v3 | 50/50 + 20% equivocator (sides 60/60) | 360 | 0 |  | never | never / never | yes | 0 | 0 |
+| v3 | 50/50 + 33% equivocator (sides 66.5/66.5) | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| v3 | 50/50 + 34% equivocator (sides 67/67, the bound) | 360 | 139 to 283 |  | 14 to 78 | 12 to 50 / 0 to 77 | yes | 0 to 0 | 0 |
+| v3 | 40/40/20 honest | 360 | 0 |  | never | never / never / never | yes | 0 to 0 | 0 |
+| v3 | 60/40 honest | 360 | 0 |  | never | never / never | yes | 0 to 0 | 0 |
+| v3 | 70/30 honest | 360 | 0 |  | never | 0 to 4 / never | yes | 0 | 0 |
+
+P2. The poisoned eclipse (L3: a 34% attacker feeds a 20% pool a private fork and signs both; the eclipsed side holds 54% of total):
+
+| rule | eclipse h | conflicting final locks | conflicting provisional locks | first conflict, min | locks on the eclipsed side | honest-side stalls during | stalls after heal |
+|---|---|---|---|---|---|---|---|
+| v3 | 1 | 0 |  | never | 0 | 0 | 0 |
+| v3 | 2 | 0 |  | never | 0 | 0 | 0 |
+| v3 | 4 | 0 |  | never | 0 | 0 | 0 |
+
+P3. Long honest partitions with view-local weight (L4), 12 days:
+
+| rule | honest split | days | first lock per side, day | conflicting final locks | conflicting provisional locks | first conflict | every pre-heal lock kept | first lock after heal, min |
+|---|---|---|---|---|---|---|---|---|
+| v3 | 50/50 | 12 | never / never | 0 |  | never | yes | 0 |
+| v3 | 60/40 | 12 | never / never | 0 |  | never | yes | 0 to 0 |
+
+### Q. Silent weight that keeps mining (L1) under each candidate, and acquired keys that LEAVE under the leave rule; seeds 7,11,13
+
+Q1. A set holding x of weight stops signing but keeps mining for 6 h, then resumes (its weight never ages out):
+
+| rule | silent weight | silent hours | first lock after the stop, min | stalled while silent | longest gap, min | first lock after resume, min | conflicting locks |
+|---|---|---|---|---|---|---|---|
+| v3 | 30% | 6 | 0 | 0 to 40 | 1 to 8 | 0 to 0 | 0 |
+| v3 | 34% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+| v3 | 45% | 6 | never | 714 to 722 | 360 | 0 to 0 | 0 |
+
+
diff --git a/sim/horizon/finality-and-weight/weight_capture.py b/sim/horizon/finality-and-weight/weight_capture.py
new file mode 100644
index 000000000..5aa02517c
--- /dev/null
+++ b/sim/horizon/finality-and-weight/weight_capture.py
@@ -0,0 +1,81 @@
+#!/usr/bin/env python3
+"""Weight capture cost (Horizon lane 3, task 3): what it costs in rented hash to hold W of the 30-day window weight
+against a network of N GH/s, and what buying old keys is worth. Pure arithmetic from spec 03 W2 (weight = blue blocks over a
+flat 30-day window) and the rental price of the fleet's bench entry.
+
+Model (every input labelled):
+  * Weight share of an attacker who rents A GH/s against a network of N GH/s for t days (t <= 30), spec 3.1 headline,
+    verified by sim/results_v2.md B to 0.04 points:  share(t) = (t / 30) x A / (N + A).
+  * To hold W at day t:  A = N x q / (1 - q) with q = 30 W / t, which needs t > 30 W (q < 1).
+  * Cost = A x t x 24 x price, price = USD 11.7 per GH/s-hour (MEASURED: docs/bench-log.md "Rental cost of hash,
+    6 October 2026", 1,748 MH/s for USD 20.44/h on RunPod community pods, USD 0.0117 per MH/s-hour).
+  * Cost is decreasing in t (cost = 24 x price x N x 30 W / (1 - 30 W / t)), so the cheapest attack takes the whole window:
+    t = 30, A = N W / (1 - W), cost = 8,424 x N x W / (1 - W) USD per GH/s of network.
+  * A bought key is worth the blocks it holds and nothing more (spec 3.11.5, sim K): keys worth b of the window are the
+    position of having rented b / (1 - b) x N for 30 days, so their replacement cost is the same formula at W = b.
+
+Run:  python3 weight_capture.py            (markdown tables on stdout)
+"""
+PRICE_GHS_HOUR = 11.7          # USD, measured 6 Oct 2026 (bench-log "Rental cost of hash")
+PRICE_LABEL = "USD 11.7 per GH/s-hour, measured 6 Oct 2026 on RunPod community pods (bench-log)"
+
+
+def rented(N, W, t):
+    q = 30.0 * W / t
+    if q >= 1.0:
+        return None
+    return N * q / (1.0 - q)
+
+
+def cost(N, W, t):
+    A = rented(N, W, t)
+    return None if A is None else A * t * 24.0 * PRICE_GHS_HOUR
+
+
+def fmt_usd(x):
+    if x is None:
+        return "impossible (needs t > 30 W days)"
+    if x >= 1e6:
+        return "USD %.2f M" % (x / 1e6)
+    if x >= 1e3:
+        return "USD %.0f k" % (x / 1e3)
+    return "USD %.0f" % x
+
+
+def main():
+    print("## Weight capture by rented hash (price %s)" % PRICE_LABEL)
+    print()
+    print("Share of the 30-day window after t days at A GH/s against N GH/s: (t/30) x A/(N + A). The hashrate step the detector sees on day 1: +A/N.")
+    print()
+    for W, what in ((0.34, "34%: blocks every lock (the veto)"), (0.51, "51%"), (0.67, "67%: locks alone")):
+        print("### W = %s" % what)
+        print()
+        rows = []
+        for t in (30, 25, 22, 21):
+            r = rented(1.0, W, t)
+            rows.append(["%d days" % t, "impossible" if r is None else "%.2f x N (hash step +%.0f%%)" % (r, 100 * r)] +
+                        [fmt_usd(cost(N, W, t)) for N in (1, 10, 100, 1000)])
+        print("| held from day | rented hash | N = 1 GH/s | N = 10 GH/s | N = 100 GH/s | N = 1 TH/s |")
+        print("|---|---|---|---|---|---|")
+        for r in rows:
+            print("| " + " | ".join(r) + " |")
+        print()
+    print("### What the market could supply tonight (measured): asked for 20 pods of any of 8 card types at 18:59Z to 19:15Z, RunPod gave 0; 38 pods were 1.75 GH/s. "
+          "So at N = 1 GH/s the 0.52 x N for a veto is rentable for the price of a dinner; at N = 100 GH/s the 52 GH/s does not exist to rent on any one market (approximate: the fleet asked one provider).")
+    print()
+    print("## Buying old keys (F19) against renting")
+    print()
+    print("| Route | What it buys | Price floor | Decay | Detectable |")
+    print("|---|---|---|---|---|")
+    for b in (0.20, 0.34, 0.40):
+        print("| keys worth %d%% of the window | %d%% of weight on day 0, falling as b (1 - t/30) + r t/30 (sim K, within 0.6 points) | the seller's own 30-day rental equivalent: %s per GH/s of network (same formula at W = b); a pool's key is also its payout identity and reputation, so the price is the pool, not the key | gone in 30 days unless the buyer mines | the key's blocks stop matching its hash (the detector of lane 1); W5 succession is public |"
+              % (100 * b, 100 * b, fmt_usd(cost(1.0, b, 30))))
+    print("| renting the same share | the same weight 30 days later, in public on the hashrate chart from day 1 | the table above | the same | day 1: the hashrate step |")
+    print()
+    print("What makes weight unbuyable: nothing; what makes it decay: the window (every block leaves 30 days after it was mined whoever holds the key). "
+          "What keeps the price at the rental cost: a key is one 32-byte scalar, the seller can keep a copy, and one equivocation by either holder strips it for 30 days (spec 3.6), "
+          "so a buyer pays for weight the seller can destroy. What the header does: it names vote_key_hash, so a sale is invisible until the key's blocks stop matching its old hash profile.")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/sim/horizon/frontier/README.md b/sim/horizon/frontier/README.md
new file mode 100644
index 000000000..61c6ad7b9
--- /dev/null
+++ b/sim/horizon/frontier/README.md
@@ -0,0 +1,13 @@
+# sim/horizon/frontier
+
+Lane 7 (frontier) of the Horizon programme, 6 October 2026. One script, pure Python 3 (no numpy):
+
+    python3 sim/horizon/frontier/frontier_model.py > sim/horizon/frontier/out.md
+
+It prints the arithmetic behind `docs/analysis/horizon/frontier.md`: the 2030 predictions (VRAM, memory
+dollars, random-read ceilings for GDDR7, HBM3 and HBM4, the stored-dataset chip under the latency shadow,
+zkVM cost per Ethereum block, the 2028 prover tiers), the rental-tax reward rule, the work-stake bond,
+the burn-funded bounty, the GPU-rental settlement comparison, the 30-s beacon and the proving-income
+ceiling. Every input carries a label (measured, cited, designed, approximate) and its source in the
+`INPUTS` table at the top of the script and of the output. Run on the Mac without the lock: it is
+arithmetic, not a measurement (about 50 ms).
diff --git a/sim/horizon/frontier/frontier_model.py b/sim/horizon/frontier/frontier_model.py
new file mode 100644
index 000000000..0f61205f2
--- /dev/null
+++ b/sim/horizon/frontier/frontier_model.py
@@ -0,0 +1,251 @@
+#!/usr/bin/env python3
+"""Horizon lane 7 (frontier): the arithmetic behind docs/analysis/horizon/frontier.md.
+
+Every input is labelled in the INPUTS dict: measured (a repo bench entry), cited (a URL
+or paper named in frontier.md) or approximate (from memory, or an estimate). Nothing
+here is a prediction of a coin price. Run: python3 frontier_model.py  (pure Python 3,
+no numpy; about 50 ms).
+
+Sections (one function each, printed as markdown tables):
+  1. predictions_2030   VRAM, GB per dollar, random-read ceilings (GDDR7, HBM3, HBM4),
+                        the f = 1 chip on HBM4 with and without the latency shadow,
+                        zkVM cost per Ethereum block, prover tiers in 2028
+  2. rental_tax         the reward rule: pay per block falls when hash arrives faster
+                        than the 30-day weight can follow (idea 1)
+  3. work_stake         vote weight as the external-job bond (idea 2)
+  4. burn_bounty        audits paid from the base-fee burn by 60% signal (idea 6)
+  5. rental_settlement  Igneum as the settlement layer for GPU rental (idea 10)
+  6. beacon             a 30-s VDF beacon against drand quicknet (idea 12)
+  7. proving_income     could proving others' chains be the main income by 2030 (idea 14)
+"""
+import math
+
+INPUTS = {
+    # label, value, source
+    "rtx5090_mhs_v3": ("measured", 136.1, "docs/analysis/chip-model-v3.md 5.1 (bench-log Counter ASIC 2.0)"),
+    "rtx5090_w_v3": ("measured", 326.0, "chip-model-v3.md 5.1 (peak with prover on; 290 W in the app, 350 W bench)"),
+    "rtx5090_uj_per_hash": ("measured", 2.40, "chip-model-v3.md 5.1"),
+    "rtx5090_reads_per_s": ("measured", 17.5e9, "chip-model-v3.md 5.1 (CUDA wall)"),
+    "gddr7_ceiling_reads": ("approximate", 21.3e9, "chip-model-v3.md 5.3 activate-bound ceiling, 16 devices"),
+    "hbm3_ceiling_reads_per_stack": ("approximate", 10.7e9, "chip-model-v3.md 5.3 (8 activates per 12 ns per channel, 16 channels)"),
+    "hbm4_channels_per_stack": ("cited", 32, "JEDEC JESD270-4 via allaboutcircuits.com: channels 16 to 32, each with two pseudo-channels"),
+    "hbm3_channels_per_stack": ("cited", 16, "chip-model-v3.md 5.1 (Synopsys HBM3 glossary)"),
+    "gddr7_read_nj": ("approximate", 2.0, "chip-model-v3.md 5.3"),
+    "hbm3_read_nj": ("approximate", 1.2, "chip-model-v3.md 5.3"),
+    "hbm4_read_nj": ("approximate", 1.0, "estimate: 15 percent under HBM3 on a shorter interposer path; unsourced"),
+    "hbm3_stack_usd": ("approximate", 200.0, "chip-model-v3.md 5.1 (siliconanalysts, 24 GB factory gate)"),
+    "hbm4_stack_usd": ("approximate", 550.0, "siliconanalysts.com/data/hbm-pricing, 36 GB 12-high, October 2026"),
+    "gddr7_2gb_usd": ("cited", 20.0, "TrendForce 24 Sep 2026 via chip-model-v3.md 5.1"),
+    "gddr6_8gb_usd_2023": ("cited", 27.0, "Tom's Hardware 'GDDR6 VRAM prices plummet' (2023)"),
+    "gddr6_usd_per_gb_2025": ("cited", 2.50, "TechSpot 'AI is eating all the DRAM' (2026)"),
+    "gddr6_usd_per_gb_2026": ("cited", 3.30, "TechSpot, same article"),
+    "rtx5090_msrp": ("cited", 1999.0, "chip-model-v3.md 5.1"),
+    "rtx5090_street_2026": ("cited", 3695.0, "localaimaster.com GPU price-per-GB table, 2026"),
+    "shadow_N": ("measured", 100000, "class v4 candidate mx8+sh256x27, counter-asic-3-status.md section 4"),
+    "shadow_chip_core_w_at_k1": ("approximate", 150.0, "latency-shadow-2026-10-06.md via counter-asic-3-status.md section 4 (14,000-lane array, N5)"),
+    "card_w_at_N100k": ("approximate", 401.0, "chip-model-v3.md 5.7 (linear toward 575 W TGP)"),
+    "card_uj_at_N100k": ("approximate", 2.95, "chip-model-v3.md 5.7"),
+    "ethproofs_usd_per_block_jan2025": ("cited", 1.69, "HackMD 'Ethproofs 2025 review' (willcorcoran), secondary"),
+    "ethproofs_usd_per_block_sep2026": ("cited", 0.005, "ethproofs via the Sept 2026 comparative analysis (GitHub Ricosworks1), secondary; 'under 4 cents' by Dec 2025 per HackMD"),
+    "eth_blocks_per_day": ("cited", 7200, "12-s slots"),
+    "emission_ign_per_block": ("designed", 31.688, "sim/economy assumptions, spec 2.5, 1 block/s, pre-halving"),
+    "rented_usd_per_gh_hour": ("measured", 11.69, "docs/bench-log.md line 2582, Rental cost of hash, 6 October 2026: 1,748 MH/s for USD 20.44 per hour on RunPod community pods, USD 0.0117 per MH/s-hour; the live devnet 1.16 GH/s"),
+    "base_fee_full_block_ign": ("designed", 3.0, "spec 5.11: a full block burns 3 IGN at the floor"),
+    "base_fee_full_day_ign": ("designed", 259200.0, "spec 5.11"),
+    "vast_take": ("approximate", 0.15, "secondary comparisons (spheron, miningboard) say about 15 percent; Vast's own June 2024 update says the host fee was removed and replaced by a surcharge it does not publish"),
+    "runpod_take": ("approximate", 0.07, "secondary (miningboard): hosts keep 93 percent"),
+    "rtx5090_rent_usd_h": ("cited", 0.44, "Vast.ai on-demand, getdeploying.com 6 Oct 2026; RunPod secure cloud 0.99"),
+    "rtx4090_rent_usd_h": ("cited", 0.31, "Vast.ai low, gpuperhour/runcrate 2026"),
+    "plain_transfer_ign": ("designed", 0.0051, "spec 5.11"),
+    "vdf_10min_s": ("measured", 600, "spec 04 epoch VDF; 4.47 ms verify, 516 B proof"),
+    "drand_quicknet_period_s": ("cited", 3, "docs.drand.love quicknet, unchained"),
+    "checkpoint_period_s": ("designed", 30, "spec 03"),
+}
+
+def v(k):
+    return INPUTS[k][1]
+
+def row(*cells):
+    print("| " + " | ".join(str(c) for c in cells) + " |")
+
+def header(*cells):
+    row(*cells)
+    print("|" + "---|" * len(cells))
+
+# ---------------------------------------------------------------- 1. predictions
+def predictions_2030():
+    print("\n## 1. Predictions to 2030\n")
+    print("### 1.1 Flagship consumer VRAM (approximate: generations from memory, the 5090 cited)\n")
+    gens = [(2016, "GTX 1080", 8), (2018, "RTX 2080 Ti", 11), (2020, "RTX 3090", 24), (2022, "RTX 4090", 24), (2025, "RTX 5090", 32)]
+    header("Year", "Card", "GB", "Years since 2016", "GB growth per year (compound)")
+    for y, c, gb in gens:
+        n = y - 2016
+        g = (gb / 8) ** (1 / n) if n else float("nan")
+        row(y, c, gb, n, f"{g:.3f}" if n else "")
+    cagr = (32 / 8) ** (1 / 9)
+    print(f"\nCompound growth 2016 to 2025: {cagr:.3f} per year (4x in 9 years). Extrapolated: 2028 {32*cagr**3:.0f} GB, 2030 {32*cagr**5:.0f} GB (approximate).")
+    print("Module arithmetic: a 512-bit board is 16 devices; 2 GB devices give 32 GB, 3 GB devices 48 GB (Micron ends 2 GB GDDR7, TrendForce Sep 2026), 4 GB devices 64 GB. So the 2028 flagship is 48 GB if the RTX 60 series (Rubin GR20x, rumoured 2028, kopite7kimi via videocardz) ships 3 GB GDDR7, and 64 GB is the 2030 shape.\n")
+
+    print("### 1.2 Memory dollars per GB (consumer GDDR)\n")
+    header("Point", "USD per GB", "Source label")
+    row("2023 GDDR6", f"{v('gddr6_8gb_usd_2023')/8:.2f}", "cited")
+    row("2025 GDDR6", f"{v('gddr6_usd_per_gb_2025'):.2f}", "cited")
+    row("2026 GDDR6", f"{v('gddr6_usd_per_gb_2026'):.2f}", "cited")
+    row("Sep 2026 GDDR7 2 GB device", f"{v('gddr7_2gb_usd')/2:.2f}", "cited")
+    row("Sep 2026 GDDR7 3 GB device", f"{65/3:.2f}", "cited (60 to 70 USD per device)")
+    print("\nDirection: GB per dollar fell in 2026 for the first time in a decade (DRAM shortage, forecast tight through 2027). The chip model's f = 1 chip pays the same device price the GPU does, so the ratio of chip memory cost to GPU memory cost is unchanged; what changes is the share of each bill of materials that is memory.\n")
+
+    print("### 1.3 Random-read ceilings per memory system (reads per second; the lottery is latency-bound, so this is the number that matters, not GB/s)\n")
+    hbm4_ceiling = v("hbm3_ceiling_reads_per_stack") * v("hbm4_channels_per_stack") / v("hbm3_channels_per_stack")
+    header("Memory system", "Reads/s ceiling", "Scaling rule", "Label")
+    row("GDDR7, 16 devices, 512-bit (RTX 5090 board)", f"{v('gddr7_ceiling_reads')/1e9:.1f} G", "activates per tFAW per channel x 64 channels; pin rate irrelevant (28 Gbps = 48 Gbps)", "approximate")
+    row("RTX 5090 measured", f"{v('rtx5090_reads_per_s')/1e9:.1f} G", "82 percent of the ceiling", "measured")
+    row("HBM3 or HBM3E, one stack", f"{v('hbm3_ceiling_reads_per_stack')/1e9:.1f} G", "16 channels", "approximate")
+    row("HBM4, one stack", f"{hbm4_ceiling/1e9:.1f} G", "32 channels (JEDEC): 2x the activate parallelism per stack if tFAW per channel holds", "approximate, derived")
+    row("A 48 GB GDDR7 board (16 x 3 GB)", f"{v('gddr7_ceiling_reads')/1e9:.1f} G", "same channel count; capacity does not add channels", "approximate")
+
+    print("\n### 1.4 The stored-dataset (f = 1) chip in 2028 on HBM4, bare and under the latency shadow\n")
+    def chip(ceiling, read_nj, static_w, ctrl_w, mem_usd, extra_w=0.0, label=""):
+        rate = ceiling / 128
+        p = rate * 128 * read_nj * 1e-9 + static_w + ctrl_w + extra_w
+        uj = p / rate * 1e6
+        return rate, p, uj
+    header("Chip", "MH/s per chip", "W", "uJ per hash", "Gain per joule vs 5090 at 2.40 uJ", "Gain per joule vs 5090 under the shadow (2.95 uJ at N = 100k)", "Memory USD")
+    for name, ceil, nj, st, ct, usd in [
+        ("GDDR7 f=1 (today's model row)", v("gddr7_ceiling_reads"), v("gddr7_read_nj"), 20, 15, 320),
+        ("HBM3 one stack f=1", v("hbm3_ceiling_reads_per_stack"), v("hbm3_read_nj"), 4, 10, 400),
+        ("HBM4 one stack f=1 (2028)", hbm4_ceiling, v("hbm4_read_nj"), 5, 10, v("hbm4_stack_usd") + 200),
+    ]:
+        r, p, uj = chip(ceil, nj, st, ct, usd)
+        r2, p2, uj2 = chip(ceil, nj, st, ct, usd, extra_w=v("shadow_chip_core_w_at_k1"))
+        row(name, f"{r/1e6:.0f}", f"{p:.0f} (bare) / {p2:.0f} (with a 150 W shadow core at k = 1)", f"{uj:.2f} / {uj2:.2f}", f"{2.40/uj:.1f}x", f"{v('card_uj_at_N100k')/uj2:.1f}x", f"{usd:.0f}")
+    print("\nReading: HBM4's doubled channel count doubles the chip's rate per stack at about the same watts, so the bare per-joule edge rises from about 7x to about 11x, and under the class v4 shadow (N = 100,000, k = 1) from about 2.3x to about 2.7x (approximate; every chip figure is arithmetic). The lever that answers it is N: the chip's shadow core scales with N while the card's spare ALU budget is 330,000 ops per hash on the 5090. Verifier cost is N x 32 ops per warp: 3.2 M ops at N = 100k (about 1 ms on one M5 Max core, measured class), 10 M at N = 330k (about 3 ms), inside the 10 ms gate; the 2019-class core is unmeasured.\n")
+    # N needed to hold 2x on HBM4
+    for N in (100000, 200000, 330000):
+        card_w = 326 + (575 - 326) * N / 330000
+        card_uj = card_w / 136.1
+        core_w = v("shadow_chip_core_w_at_k1") * N / 100000
+        r, p, uj = chip(hbm4_ceiling, v("hbm4_read_nj"), 5, 10, 0, extra_w=core_w)
+        print(f"- N = {N:,}: card {card_w:.0f} W, {card_uj:.2f} uJ; HBM4 chip {p:.0f} W, {uj:.2f} uJ; gain {card_uj/uj:.2f}x at k = 1")
+    print("So the schedule for N should be written into the era draw at genesis (a doubling per era is the candidate), because the memory generation it answers arrives every two to three years and the verifier has 10x of headroom.\n")
+
+    print("### 1.5 Chip fabrication cost curve (mask sets, cited; project totals approximate)\n")
+    header("Node", "Mask set USD", "Source", "What it means for Igneum")
+    row("28 nm", "1 to 3 M", "TubeTime (3 M), VBsemi (over 1 M)", "The f = 1 memory-controller chip lives here: no mixer on the die. Project 5 to 30 M (history 2.5)")
+    row("7 nm", "10 to 15 M", "VBsemi, HN thread", "The f = 0 recompute chip with the 256 MiB cache on die. Project 50 to 75 M")
+    row("5 nm", "6.5 M (2026 data) to 30 M (2023 estimate)", "siliconanalysts, HN", "The shadow core at N5 (30 mm^2 at N = 100k) pushes the f = 1 chip from a 28 nm project to a 5 nm one, or to a reticle-class 28 nm die")
+    row("3 nm", "15 to 22 M (Q4 2025), up to 40 M (older estimate)", "siliconanalysts, semianalysis", "Not relevant to a chip whose cost is memory")
+    print("\nThe curve is falling at a given node (5 nm masks quoted at 30 M in 2023 and 6.5 M in 2026) while the leading node's cost rises. Consequence: the shadow lever's economic teeth (forcing an advanced-node core onto a memory-controller chip) weaken by about 4x in mask cost over three years; the rate and joule arithmetic above, not the fab bill, is what holds in 2030.\n")
+
+    print("### 1.6 zkVM proving cost per Ethereum block (public tracker, secondary sources, approximate)\n")
+    a, b = v("ethproofs_usd_per_block_jan2025"), v("ethproofs_usd_per_block_sep2026")
+    months = 20
+    per_year = (b / a) ** (12 / months)
+    header("Point", "USD per Ethereum block proof", "Hardware named")
+    row("Jan 2025", f"{a:.2f}", "about 160 RTX 4090s for 90 percent real-time (Succinct, May 2025 estimate)")
+    row("Dec 2025", "under 0.04", "16 x RTX 5090 (SP1 Hypercube 99.7 percent under 12 s); Pico Prism 16 GPUs")
+    row("Sep 2026", f"{b:.3f}", "ZisK 4 x RTX 5090 p99 9.62 s (Aug 2026); Cysic Venus 7.4 s on 24 GPUs (Apr 2026)")
+    print(f"\nThe 20-month ratio is {a/b:.0f}x, which is {1/per_year:.0f}x per year. That rate cannot hold (it is software catching up with hardware), so the table below uses 1.5x, 3x and 10x per year from today's measured Igneum shard times.\n")
+
+    print("### 1.7 Which card tier proves a v1 shard in under 10 s in 2028 (measured 6 Oct 2026 times, prover-tiers-real-cards.md, divided by two years of software gain)\n")
+    tiers = [("RTX 3060 12 GB", 37.5, 14.4), ("RTX 4060 8 GB (core-only beside, alone)", 22.1, 18.4), ("RTX 4070 12 GB", 27.3, 12.1), ("RTX 4060 Ti 16 GB", 34.6, 11.6), ("RTX 3080 10 GB", 25.6, 7.1), ("RTX 3090 24 GB", 19.9, 14.9), ("RTX 4090 24 GB", 26.1, 6.3), ("RTX 5070 12 GB", 37.2, 4.8), ("RTX 5090 32 GB", 10.7, 6.3)]
+    header("Card", "Beside the miner today, s", "Alone today, s", "2028 at 1.5x/yr (beside / alone)", "2028 at 3x/yr", "2028 at 10x/yr", "Under 10 s beside the miner in 2028?")
+    for name, beside, alone in tiers:
+        cells = []
+        for g in (1.5, 3, 10):
+            cells.append(f"{beside/g**2:.1f} / {alone/g**2:.1f}")
+        verdict = "yes at 3x or more" if beside / 9 < 10 else "no"
+        if beside / 2.25 < 10:
+            verdict = "yes even at 1.5x"
+        row(name, beside, alone, *cells, verdict)
+    print("\nConsequence per tier: at the floor rate (1.5x a year) only the 32 GB card mines and proves inside 10 s in 2028, so a 10-s proof lag at launch is a 24 GB and 32 GB story; at 3x a year every card from the 3060 up does it, and the 8 GB card alone proves in 2 s. The block-proof target (under 10 s behind the tip) should be written as a function of the measured fleet median, re-read each era, not as a date.\n")
+
+# ---------------------------------------------------------------- 2. rental tax
+def rental_tax():
+    print("\n## 2. Idea 1: the reward rule that prices rented hash out\n")
+    print("Rule modelled: m = clamp(W30 / H_now, m_min, 1) where W30 is the 30-day work-weighted hash (the finality window's blue blocks per DAA second, which every node already computes for W2) and H_now the DAA-window estimate. The block subsidy paid to the producer is m x the schedule; the remainder (1 - m) x subsidy goes to the proving pool escrow of that block (not to incumbents, to avoid the cartel transfer; see the Monero attack in the text). Fees are untouched.\n")
+    E = v("emission_ign_per_block") * 3600  # IGN per hour
+    rent = v("rented_usd_per_gh_hour")
+    header("Network hash", "Attacker adds", "H_now / W30", "m", "Attacker's share of blocks", "Attacker IGN per hour, no rule", "With rule", "Rent USD per hour", "Break-even IGN price, no rule", "With rule", "To the pool per hour, IGN")
+    for net in (1, 10, 100, 1000):
+        for mult in (1.0, 2.0, 5.0):
+            add = net * mult
+            ratio = (net + add) / net
+            m = max(0.25, min(1.0, 1 / ratio))
+            share = add / (net + add)
+            no_rule = E * share
+            with_rule = no_rule * m
+            cost = add * rent
+            pool = E * (1 - m)
+            row(f"{net} GH/s", f"{add:.0f} GH/s", f"{ratio:.1f}", f"{m:.2f}", f"{share:.2f}", f"{no_rule:,.0f}", f"{with_rule:,.0f}", f"{cost:,.0f}", f"{cost/no_rule:.5f}", f"{cost/with_rule:.5f}", f"{pool:,.0f}")
+    print("\nHonest-growth cost: a listing that doubles honest hash overnight halves every miner's subsidy per block (not per hash: difficulty halves the per-hash rate anyway; the rule halves it again) until W30 catches up, which is the 30-day ramp of ledger C7 (0.9x on day 28 to 31). With the floor m_min = 0.25 the worst case is a 4x cut, and the money is not lost to the chain: it reaches the provers of the same block, who are the same population. Per tier: a home miner's monthly income during a doubling month falls 50 percent under the rule against 50 percent already from difficulty (so 25 percent of the pre-event figure); a pool user sees the same through PPLNS; a prover with weight gains the diverted share. The gate: in the economy simulator (sim/economy/sim.py scenario f, a pool with the network's hash arriving on day 10) the incumbents' income under the rule must stay above the no-rule row for the 30 days and the newcomers' under; and in the fast-time harness a timestamp-manipulated H_now (headers inside the 132-s tolerance) must move m by under 2 percent.\n")
+
+# ---------------------------------------------------------------- 3. work stake
+def work_stake():
+    print("\n## 3. Idea 2: work-stake, vote weight as the external-job bond\n")
+    print("A key that claims an external job and delivers late or wrong loses s of its 30-day weight for 30 days (as equivocation strips 100 percent, spec 3.6). Weight is blue blocks; it cannot be bought, only mined. Arithmetic: what a stripped key forgoes.\n")
+    E = v("emission_ign_per_block")
+    header("Key's hash share", "Blocks per 30 days at 1 bps", "Weight share", "Shard sortition income per 30 days (20 percent pool, pro rata), IGN", "Stripped at s = 25 percent: lost pool income over 30 days, IGN", "Stripped at s = 100 percent", "IGN bond that would match (design 4.6: maxPgas x f_p x 1.5 for a 1 B-cycle job at the floor)")
+    for share in (0.0001, 0.001, 0.01, 0.1):
+        blocks = share * 86400 * 30
+        pool_30d = 0.2 * E * 86400 * 30 * share
+        row(f"{share*100:.2f} percent", f"{blocks:,.0f}", f"{share*100:.2f} percent", f"{pool_30d:,.0f}", f"{pool_30d*0.25:,.0f}", f"{pool_30d:,.0f}", "0.0015 IGN")
+    print("\nReading: for every key above dust the 30-day pool income at risk is many orders above the designed IGN bond for one job, so weight is a far larger bond than coins, and it is a bond nobody can buy on a market. It also strips the key's vote for 30 days, which is the sentence the finality rule already hands out for equivocation. The cost: a false positive (a partition that makes an honest proof late) strips an honest voter; so the rule must use DAA time, a long deadline (the 120-s claim timeout of P9 decision, or longer), and a one-strike grace per 30 days. Per tier: a solo 8 GB miner below dust has no weight and so cannot take external jobs at all under this rule (it can still prove shards, which carry no bond); a pool user's jobs are the pool's and the pool's weight is at risk, which is what a pool operator wants priced. Gate: on the phase 4 devnet, 1,000 jobs with a 10 percent injected late rate: every injected fault stripped, zero honest keys stripped across a 60-s partition.\n")
+
+# ---------------------------------------------------------------- 4. burn bounty
+def burn_bounty():
+    print("\n## 4. Idea 6: audits paid from the burn, by 60 percent signal, no standing address\n")
+    full_day = v("base_fee_full_day_ign")
+    header("Chain traffic (fraction of full blocks)", "Base fee burned per day, IGN", "7-day redirect, IGN", "30-day redirect, IGN", "USD at 0.02 (7 d / 30 d)", "USD at 0.10 (7 d / 30 d)")
+    for frac in (0.01, 0.1, 0.5, 1.0):
+        d = full_day * frac
+        row(f"{frac:.2f}", f"{d:,.0f}", f"{7*d:,.0f}", f"{30*d:,.0f}", f"{7*d*0.02:,.0f} / {30*d*0.02:,.0f}", f"{7*d*0.10:,.0f} / {30*d*0.10:,.0f}")
+    print("\nReading: at launch traffic (1 to 10 percent of full blocks) a 30-day redirect is USD 1,600 to 16,000 at 0.02 per IGN, under one Code4rena contest (base pricing from USD 6,500 before the 2025 zero-fee change; Immunefi's standard pays 10 percent of funds at risk). At half-full blocks it reaches a serious bounty (USD 78,000 for 30 days at 0.02). So the burn can fund audits only once the chain is used; before that the only money is the client's 1 percent dev fee and the founders' mined coins (litepaper: grants from founders' mined coins). The text gives the attack: this is a dev fund with a 60 percent veto and a per-event payee, which is exactly the switch spec 5.5 removed.\n")
+
+# ---------------------------------------------------------------- 5. rental settlement
+def rental_settlement():
+    print("\n## 5. Idea 10: Igneum as the settlement layer for GPU rental\n")
+    header("Card", "Vast.ai on-demand USD/h (cited)", "Platform take modelled", "Host loses USD per card-year", "Igneum settlement cost per rental (2 transfers at the floor), IGN", "At 0.02 and 0.10 USD per IGN", "Hours of rental to pay 1 USD of chain fees at 0.02")
+    for name, price in (("RTX 5090", v("rtx5090_rent_usd_h")), ("RTX 4090", v("rtx4090_rent_usd_h"))):
+        for take_name, take in (("Vast about 15 percent", v("vast_take")), ("RunPod about 7 percent", v("runpod_take"))):
+            lost = price * take * 8766
+            fee = 2 * v("plain_transfer_ign")
+            row(name, f"{price:.2f}", take_name, f"{lost:,.0f}", f"{fee:.4f}", f"{fee*0.02:.5f} / {fee*0.10:.4f}", f"{1/(fee*0.02)/ (1/1):,.0f} rentals")
+    print("\nReading: the chain's fee is three to five orders of magnitude under the platform take. The platform's take pays for what the chain cannot do: matching, trust, dispute, image hosting, and the verification of delivered work. The honest problem is the last one: a rented hour of general compute is unverifiable, so an on-chain escrow without a verifier is a trust-me payment with lower fees. What is verifiable on this chain today: ZK proving jobs (the precompile); what is verifiable with sampling: deterministic recompute checked on a sampled fraction (SPEX, arXiv 2503.18899; Render's result-quorum, approximate); what needs hardware the fleet does not have: TEE attestation (NVIDIA confidential computing is H100 and H200 class, phala.com; no consumer card has it).\n")
+
+# ---------------------------------------------------------------- 6. beacon
+def beacon():
+    print("\n## 6. Idea 12: a randomness beacon from the checkpoint VDF\n")
+    header("Beacon", "Period", "Latency to a value", "Unbiasability argument", "Verify cost", "Who runs it")
+    row("drand quicknet (League of Entropy)", f"{v('drand_quicknet_period_s')} s", "about 3 s", "threshold BLS over H(round) with a 2/3 threshold of about 20 named organisations; unbiasable while under 1/3 collude; unchained", "one BLS verify", "a league, trusted set")
+    row("Igneum epoch seed today", "3,600 s", f"{v('vdf_10min_s')} s (10-min VDF)", "a certified checkpoint 10 minutes before use; the VDF makes the last block producer's choice useless because it cannot see the output in time", "4.47 ms (516 B)", "nobody: any node evaluates")
+    row("Proposed: a per-checkpoint VDF beacon", f"{v('checkpoint_period_s')} s", "30 to 60 s (a 30-s VDF of each certified checkpoint hash)", "the checkpoint is locked by 2/3 of 30-day weight before the VDF starts, so no single party chooses the input; a last-block grind costs a block's subsidy per try and buys one bit of influence only if the attacker can evaluate the VDF faster than the chain, which is the class-group ASIC question (Chia timelords)", "4.47 ms per value, 2,880 values a day", "nobody: the epoch pipeline already exists")
+    print("\nReading: the chain already produces an unbiasable value once an hour with a 10-minute delay. A 30-s beacon is the same code at 120x the cadence, and its honest limit is the one Chia carries: the fastest class-group squarer sets the floor on 'delay', so a timelord-class ASIC owner can learn the value earlier than everyone else (Chia docs: timelords are software or ASIC). That earlier knowledge is a front-running edge, not a bias. The product: PREVRANDAO per block already comes from this pipeline (spec 7.1); the beacon makes it a 30-s value usable off-chain (lotteries, shuffles, timelock encryption as drand does).\n")
+
+# ---------------------------------------------------------------- 7. proving income
+def proving_income():
+    print("\n## 7. Idea 14: proving other chains as the main income by 2030\n")
+    eth_day = v("ethproofs_usd_per_block_sep2026") * v("eth_blocks_per_day")
+    emission_day_ign = v("emission_ign_per_block") * 86400
+    header("Income line", "USD per day", "Basis")
+    row("Proving every Ethereum L1 block at the Sep 2026 tracker cost", f"{eth_day:,.0f}", "0.005 USD x 7,200 blocks; the price a buyer pays is above cost, call it 10x: 360")
+    row("The same at the Dec 2025 cost (under 0.04)", f"{0.04*7200:,.0f}", "secondary")
+    for p in (0.005, 0.02, 0.10):
+        row(f"Igneum year-1 emission at {p} USD per IGN", f"{emission_day_ign*p:,.0f}", "31.688 IGN per block x 86,400")
+    row("Rollup proving spend, all rollups (customer brief)", f"{3e6/365:,.0f} to {10e6/365:,.0f}", "low millions a year, approximate")
+    row("Boundless trailing day in the explorer (4 Oct 2026)", f"{8.4*0.21:,.0f}", "8.4 T cycles at a 0.21 USD per B-cycle median, developer-adoption.md 2b, approximate")
+    print("\nReading: the whole public proving market is three to four orders of magnitude under year-1 emission at any price input. For proving to be the main income by 2030, demand must grow about 1,000x while cost per proof keeps falling 3x to 30x a year, which pushes dollars per proof down as fast as volume rises. The arithmetic says never by 2030 for 'main income'; it says 'yes' for 'a second income that keeps cards on after the subsidy fades' (spec 5.10.2), which is the design's own claim.\n")
+
+if __name__ == "__main__":
+    print("# frontier_model.py output (Horizon lane 7), run on " + __import__("datetime").date.today().isoformat())
+    print("\nInputs and labels:\n")
+    header("Key", "Label", "Value", "Source")
+    for k, (lab, val, src) in INPUTS.items():
+        row(k, lab, val, src)
+    predictions_2030()
+    rental_tax()
+    work_stake()
+    burn_bounty()
+    rental_settlement()
+    beacon()
+    proving_income()
diff --git a/sim/horizon/frontier/out.md b/sim/horizon/frontier/out.md
new file mode 100644
index 000000000..4340d7705
--- /dev/null
+++ b/sim/horizon/frontier/out.md
@@ -0,0 +1,220 @@
+# frontier_model.py output (Horizon lane 7), run on 2026-10-06
+
+Inputs and labels:
+
+| Key | Label | Value | Source |
+|---|---|---|---|
+| rtx5090_mhs_v3 | measured | 136.1 | docs/analysis/chip-model-v3.md 5.1 (bench-log Counter ASIC 2.0) |
+| rtx5090_w_v3 | measured | 326.0 | chip-model-v3.md 5.1 (peak with prover on; 290 W in the app, 350 W bench) |
+| rtx5090_uj_per_hash | measured | 2.4 | chip-model-v3.md 5.1 |
+| rtx5090_reads_per_s | measured | 17500000000.0 | chip-model-v3.md 5.1 (CUDA wall) |
+| gddr7_ceiling_reads | approximate | 21300000000.0 | chip-model-v3.md 5.3 activate-bound ceiling, 16 devices |
+| hbm3_ceiling_reads_per_stack | approximate | 10700000000.0 | chip-model-v3.md 5.3 (8 activates per 12 ns per channel, 16 channels) |
+| hbm4_channels_per_stack | cited | 32 | JEDEC JESD270-4 via allaboutcircuits.com: channels 16 to 32, each with two pseudo-channels |
+| hbm3_channels_per_stack | cited | 16 | chip-model-v3.md 5.1 (Synopsys HBM3 glossary) |
+| gddr7_read_nj | approximate | 2.0 | chip-model-v3.md 5.3 |
+| hbm3_read_nj | approximate | 1.2 | chip-model-v3.md 5.3 |
+| hbm4_read_nj | approximate | 1.0 | estimate: 15 percent under HBM3 on a shorter interposer path; unsourced |
+| hbm3_stack_usd | approximate | 200.0 | chip-model-v3.md 5.1 (siliconanalysts, 24 GB factory gate) |
+| hbm4_stack_usd | approximate | 550.0 | siliconanalysts.com/data/hbm-pricing, 36 GB 12-high, October 2026 |
+| gddr7_2gb_usd | cited | 20.0 | TrendForce 24 Sep 2026 via chip-model-v3.md 5.1 |
+| gddr6_8gb_usd_2023 | cited | 27.0 | Tom's Hardware 'GDDR6 VRAM prices plummet' (2023) |
+| gddr6_usd_per_gb_2025 | cited | 2.5 | TechSpot 'AI is eating all the DRAM' (2026) |
+| gddr6_usd_per_gb_2026 | cited | 3.3 | TechSpot, same article |
+| rtx5090_msrp | cited | 1999.0 | chip-model-v3.md 5.1 |
+| rtx5090_street_2026 | cited | 3695.0 | localaimaster.com GPU price-per-GB table, 2026 |
+| shadow_N | measured | 100000 | class v4 candidate mx8+sh256x27, counter-asic-3-status.md section 4 |
+| shadow_chip_core_w_at_k1 | approximate | 150.0 | latency-shadow-2026-10-06.md via counter-asic-3-status.md section 4 (14,000-lane array, N5) |
+| card_w_at_N100k | approximate | 401.0 | chip-model-v3.md 5.7 (linear toward 575 W TGP) |
+| card_uj_at_N100k | approximate | 2.95 | chip-model-v3.md 5.7 |
+| ethproofs_usd_per_block_jan2025 | cited | 1.69 | HackMD 'Ethproofs 2025 review' (willcorcoran), secondary |
+| ethproofs_usd_per_block_sep2026 | cited | 0.005 | ethproofs via the Sept 2026 comparative analysis (GitHub Ricosworks1), secondary; 'under 4 cents' by Dec 2025 per HackMD |
+| eth_blocks_per_day | cited | 7200 | 12-s slots |
+| emission_ign_per_block | designed | 31.688 | sim/economy assumptions, spec 2.5, 1 block/s, pre-halving |
+| rented_usd_per_gh_hour | measured | 11.69 | docs/bench-log.md line 2582, Rental cost of hash, 6 October 2026: 1,748 MH/s for USD 20.44 per hour on RunPod community pods, USD 0.0117 per MH/s-hour; the live devnet 1.16 GH/s |
+| base_fee_full_block_ign | designed | 3.0 | spec 5.11: a full block burns 3 IGN at the floor |
+| base_fee_full_day_ign | designed | 259200.0 | spec 5.11 |
+| vast_take | approximate | 0.15 | secondary comparisons (spheron, miningboard) say about 15 percent; Vast's own June 2024 update says the host fee was removed and replaced by a surcharge it does not publish |
+| runpod_take | approximate | 0.07 | secondary (miningboard): hosts keep 93 percent |
+| rtx5090_rent_usd_h | cited | 0.44 | Vast.ai on-demand, getdeploying.com 6 Oct 2026; RunPod secure cloud 0.99 |
+| rtx4090_rent_usd_h | cited | 0.31 | Vast.ai low, gpuperhour/runcrate 2026 |
+| plain_transfer_ign | designed | 0.0051 | spec 5.11 |
+| vdf_10min_s | measured | 600 | spec 04 epoch VDF; 4.47 ms verify, 516 B proof |
+| drand_quicknet_period_s | cited | 3 | docs.drand.love quicknet, unchained |
+| checkpoint_period_s | designed | 30 | spec 03 |
+
+## 1. Predictions to 2030
+
+### 1.1 Flagship consumer VRAM (approximate: generations from memory, the 5090 cited)
+
+| Year | Card | GB | Years since 2016 | GB growth per year (compound) |
+|---|---|---|---|---|
+| 2016 | GTX 1080 | 8 | 0 |  |
+| 2018 | RTX 2080 Ti | 11 | 2 | 1.173 |
+| 2020 | RTX 3090 | 24 | 4 | 1.316 |
+| 2022 | RTX 4090 | 24 | 6 | 1.201 |
+| 2025 | RTX 5090 | 32 | 9 | 1.167 |
+
+Compound growth 2016 to 2025: 1.167 per year (4x in 9 years). Extrapolated: 2028 51 GB, 2030 69 GB (approximate).
+Module arithmetic: a 512-bit board is 16 devices; 2 GB devices give 32 GB, 3 GB devices 48 GB (Micron ends 2 GB GDDR7, TrendForce Sep 2026), 4 GB devices 64 GB. So the 2028 flagship is 48 GB if the RTX 60 series (Rubin GR20x, rumoured 2028, kopite7kimi via videocardz) ships 3 GB GDDR7, and 64 GB is the 2030 shape.
+
+### 1.2 Memory dollars per GB (consumer GDDR)
+
+| Point | USD per GB | Source label |
+|---|---|---|
+| 2023 GDDR6 | 3.38 | cited |
+| 2025 GDDR6 | 2.50 | cited |
+| 2026 GDDR6 | 3.30 | cited |
+| Sep 2026 GDDR7 2 GB device | 10.00 | cited |
+| Sep 2026 GDDR7 3 GB device | 21.67 | cited (60 to 70 USD per device) |
+
+Direction: GB per dollar fell in 2026 for the first time in a decade (DRAM shortage, forecast tight through 2027). The chip model's f = 1 chip pays the same device price the GPU does, so the ratio of chip memory cost to GPU memory cost is unchanged; what changes is the share of each bill of materials that is memory.
+
+### 1.3 Random-read ceilings per memory system (reads per second; the lottery is latency-bound, so this is the number that matters, not GB/s)
+
+| Memory system | Reads/s ceiling | Scaling rule | Label |
+|---|---|---|---|
+| GDDR7, 16 devices, 512-bit (RTX 5090 board) | 21.3 G | activates per tFAW per channel x 64 channels; pin rate irrelevant (28 Gbps = 48 Gbps) | approximate |
+| RTX 5090 measured | 17.5 G | 82 percent of the ceiling | measured |
+| HBM3 or HBM3E, one stack | 10.7 G | 16 channels | approximate |
+| HBM4, one stack | 21.4 G | 32 channels (JEDEC): 2x the activate parallelism per stack if tFAW per channel holds | approximate, derived |
+| A 48 GB GDDR7 board (16 x 3 GB) | 21.3 G | same channel count; capacity does not add channels | approximate |
+
+### 1.4 The stored-dataset (f = 1) chip in 2028 on HBM4, bare and under the latency shadow
+
+| Chip | MH/s per chip | W | uJ per hash | Gain per joule vs 5090 at 2.40 uJ | Gain per joule vs 5090 under the shadow (2.95 uJ at N = 100k) | Memory USD |
+|---|---|---|---|---|---|---|
+| GDDR7 f=1 (today's model row) | 166 | 78 (bare) / 228 (with a 150 W shadow core at k = 1) | 0.47 / 1.37 | 5.1x | 2.2x | 320 |
+| HBM3 one stack f=1 | 84 | 27 (bare) / 177 (with a 150 W shadow core at k = 1) | 0.32 / 2.12 | 7.5x | 1.4x | 400 |
+| HBM4 one stack f=1 (2028) | 167 | 36 (bare) / 186 (with a 150 W shadow core at k = 1) | 0.22 / 1.11 | 11.0x | 2.6x | 750 |
+
+Reading: HBM4's doubled channel count doubles the chip's rate per stack at about the same watts, so the bare per-joule edge rises from about 7x to about 11x, and under the class v4 shadow (N = 100,000, k = 1) from about 2.3x to about 2.7x (approximate; every chip figure is arithmetic). The lever that answers it is N: the chip's shadow core scales with N while the card's spare ALU budget is 330,000 ops per hash on the 5090. Verifier cost is N x 32 ops per warp: 3.2 M ops at N = 100k (about 1 ms on one M5 Max core, measured class), 10 M at N = 330k (about 3 ms), inside the 10 ms gate; the 2019-class core is unmeasured.
+
+- N = 100,000: card 401 W, 2.95 uJ; HBM4 chip 186 W, 1.11 uJ; gain 2.65x at k = 1
+- N = 200,000: card 477 W, 3.50 uJ; HBM4 chip 336 W, 2.01 uJ; gain 1.74x at k = 1
+- N = 330,000: card 575 W, 4.22 uJ; HBM4 chip 531 W, 3.18 uJ; gain 1.33x at k = 1
+So the schedule for N should be written into the era draw at genesis (a doubling per era is the candidate), because the memory generation it answers arrives every two to three years and the verifier has 10x of headroom.
+
+### 1.5 Chip fabrication cost curve (mask sets, cited; project totals approximate)
+
+| Node | Mask set USD | Source | What it means for Igneum |
+|---|---|---|---|
+| 28 nm | 1 to 3 M | TubeTime (3 M), VBsemi (over 1 M) | The f = 1 memory-controller chip lives here: no mixer on the die. Project 5 to 30 M (history 2.5) |
+| 7 nm | 10 to 15 M | VBsemi, HN thread | The f = 0 recompute chip with the 256 MiB cache on die. Project 50 to 75 M |
+| 5 nm | 6.5 M (2026 data) to 30 M (2023 estimate) | siliconanalysts, HN | The shadow core at N5 (30 mm^2 at N = 100k) pushes the f = 1 chip from a 28 nm project to a 5 nm one, or to a reticle-class 28 nm die |
+| 3 nm | 15 to 22 M (Q4 2025), up to 40 M (older estimate) | siliconanalysts, semianalysis | Not relevant to a chip whose cost is memory |
+
+The curve is falling at a given node (5 nm masks quoted at 30 M in 2023 and 6.5 M in 2026) while the leading node's cost rises. Consequence: the shadow lever's economic teeth (forcing an advanced-node core onto a memory-controller chip) weaken by about 4x in mask cost over three years; the rate and joule arithmetic above, not the fab bill, is what holds in 2030.
+
+### 1.6 zkVM proving cost per Ethereum block (public tracker, secondary sources, approximate)
+
+| Point | USD per Ethereum block proof | Hardware named |
+|---|---|---|
+| Jan 2025 | 1.69 | about 160 RTX 4090s for 90 percent real-time (Succinct, May 2025 estimate) |
+| Dec 2025 | under 0.04 | 16 x RTX 5090 (SP1 Hypercube 99.7 percent under 12 s); Pico Prism 16 GPUs |
+| Sep 2026 | 0.005 | ZisK 4 x RTX 5090 p99 9.62 s (Aug 2026); Cysic Venus 7.4 s on 24 GPUs (Apr 2026) |
+
+The 20-month ratio is 338x, which is 33x per year. That rate cannot hold (it is software catching up with hardware), so the table below uses 1.5x, 3x and 10x per year from today's measured Igneum shard times.
+
+### 1.7 Which card tier proves a v1 shard in under 10 s in 2028 (measured 6 Oct 2026 times, prover-tiers-real-cards.md, divided by two years of software gain)
+
+| Card | Beside the miner today, s | Alone today, s | 2028 at 1.5x/yr (beside / alone) | 2028 at 3x/yr | 2028 at 10x/yr | Under 10 s beside the miner in 2028? |
+|---|---|---|---|---|---|---|
+| RTX 3060 12 GB | 37.5 | 14.4 | 16.7 / 6.4 | 4.2 / 1.6 | 0.4 / 0.1 | yes at 3x or more |
+| RTX 4060 8 GB (core-only beside, alone) | 22.1 | 18.4 | 9.8 / 8.2 | 2.5 / 2.0 | 0.2 / 0.2 | yes even at 1.5x |
+| RTX 4070 12 GB | 27.3 | 12.1 | 12.1 / 5.4 | 3.0 / 1.3 | 0.3 / 0.1 | yes at 3x or more |
+| RTX 4060 Ti 16 GB | 34.6 | 11.6 | 15.4 / 5.2 | 3.8 / 1.3 | 0.3 / 0.1 | yes at 3x or more |
+| RTX 3080 10 GB | 25.6 | 7.1 | 11.4 / 3.2 | 2.8 / 0.8 | 0.3 / 0.1 | yes at 3x or more |
+| RTX 3090 24 GB | 19.9 | 14.9 | 8.8 / 6.6 | 2.2 / 1.7 | 0.2 / 0.1 | yes even at 1.5x |
+| RTX 4090 24 GB | 26.1 | 6.3 | 11.6 / 2.8 | 2.9 / 0.7 | 0.3 / 0.1 | yes at 3x or more |
+| RTX 5070 12 GB | 37.2 | 4.8 | 16.5 / 2.1 | 4.1 / 0.5 | 0.4 / 0.0 | yes at 3x or more |
+| RTX 5090 32 GB | 10.7 | 6.3 | 4.8 / 2.8 | 1.2 / 0.7 | 0.1 / 0.1 | yes even at 1.5x |
+
+Consequence per tier: at the floor rate (1.5x a year) only the 32 GB card mines and proves inside 10 s in 2028, so a 10-s proof lag at launch is a 24 GB and 32 GB story; at 3x a year every card from the 3060 up does it, and the 8 GB card alone proves in 2 s. The block-proof target (under 10 s behind the tip) should be written as a function of the measured fleet median, re-read each era, not as a date.
+
+
+## 2. Idea 1: the reward rule that prices rented hash out
+
+Rule modelled: m = clamp(W30 / H_now, m_min, 1) where W30 is the 30-day work-weighted hash (the finality window's blue blocks per DAA second, which every node already computes for W2) and H_now the DAA-window estimate. The block subsidy paid to the producer is m x the schedule; the remainder (1 - m) x subsidy goes to the proving pool escrow of that block (not to incumbents, to avoid the cartel transfer; see the Monero attack in the text). Fees are untouched.
+
+| Network hash | Attacker adds | H_now / W30 | m | Attacker's share of blocks | Attacker IGN per hour, no rule | With rule | Rent USD per hour | Break-even IGN price, no rule | With rule | To the pool per hour, IGN |
+|---|---|---|---|---|---|---|---|---|---|---|
+| 1 GH/s | 1 GH/s | 2.0 | 0.50 | 0.50 | 57,038 | 28,519 | 12 | 0.00020 | 0.00041 | 57,038 |
+| 1 GH/s | 2 GH/s | 3.0 | 0.33 | 0.67 | 76,051 | 25,350 | 23 | 0.00031 | 0.00092 | 76,051 |
+| 1 GH/s | 5 GH/s | 6.0 | 0.25 | 0.83 | 95,064 | 23,766 | 58 | 0.00061 | 0.00246 | 85,558 |
+| 10 GH/s | 10 GH/s | 2.0 | 0.50 | 0.50 | 57,038 | 28,519 | 117 | 0.00205 | 0.00410 | 57,038 |
+| 10 GH/s | 20 GH/s | 3.0 | 0.33 | 0.67 | 76,051 | 25,350 | 234 | 0.00307 | 0.00922 | 76,051 |
+| 10 GH/s | 50 GH/s | 6.0 | 0.25 | 0.83 | 95,064 | 23,766 | 584 | 0.00615 | 0.02459 | 85,558 |
+| 100 GH/s | 100 GH/s | 2.0 | 0.50 | 0.50 | 57,038 | 28,519 | 1,169 | 0.02049 | 0.04099 | 57,038 |
+| 100 GH/s | 200 GH/s | 3.0 | 0.33 | 0.67 | 76,051 | 25,350 | 2,338 | 0.03074 | 0.09223 | 76,051 |
+| 100 GH/s | 500 GH/s | 6.0 | 0.25 | 0.83 | 95,064 | 23,766 | 5,845 | 0.06148 | 0.24594 | 85,558 |
+| 1000 GH/s | 1000 GH/s | 2.0 | 0.50 | 0.50 | 57,038 | 28,519 | 11,690 | 0.20495 | 0.40990 | 57,038 |
+| 1000 GH/s | 2000 GH/s | 3.0 | 0.33 | 0.67 | 76,051 | 25,350 | 23,380 | 0.30742 | 0.92227 | 76,051 |
+| 1000 GH/s | 5000 GH/s | 6.0 | 0.25 | 0.83 | 95,064 | 23,766 | 58,450 | 0.61485 | 2.45940 | 85,558 |
+
+Honest-growth cost: a listing that doubles honest hash overnight halves every miner's subsidy per block (not per hash: difficulty halves the per-hash rate anyway; the rule halves it again) until W30 catches up, which is the 30-day ramp of ledger C7 (0.9x on day 28 to 31). With the floor m_min = 0.25 the worst case is a 4x cut, and the money is not lost to the chain: it reaches the provers of the same block, who are the same population. Per tier: a home miner's monthly income during a doubling month falls 50 percent under the rule against 50 percent already from difficulty (so 25 percent of the pre-event figure); a pool user sees the same through PPLNS; a prover with weight gains the diverted share. The gate: in the economy simulator (sim/economy/sim.py scenario f, a pool with the network's hash arriving on day 10) the incumbents' income under the rule must stay above the no-rule row for the 30 days and the newcomers' under; and in the fast-time harness a timestamp-manipulated H_now (headers inside the 132-s tolerance) must move m by under 2 percent.
+
+
+## 3. Idea 2: work-stake, vote weight as the external-job bond
+
+A key that claims an external job and delivers late or wrong loses s of its 30-day weight for 30 days (as equivocation strips 100 percent, spec 3.6). Weight is blue blocks; it cannot be bought, only mined. Arithmetic: what a stripped key forgoes.
+
+| Key's hash share | Blocks per 30 days at 1 bps | Weight share | Shard sortition income per 30 days (20 percent pool, pro rata), IGN | Stripped at s = 25 percent: lost pool income over 30 days, IGN | Stripped at s = 100 percent | IGN bond that would match (design 4.6: maxPgas x f_p x 1.5 for a 1 B-cycle job at the floor) |
+|---|---|---|---|---|---|---|
+| 0.01 percent | 259 | 0.01 percent | 1,643 | 411 | 1,643 | 0.0015 IGN |
+| 0.10 percent | 2,592 | 0.10 percent | 16,427 | 4,107 | 16,427 | 0.0015 IGN |
+| 1.00 percent | 25,920 | 1.00 percent | 164,271 | 41,068 | 164,271 | 0.0015 IGN |
+| 10.00 percent | 259,200 | 10.00 percent | 1,642,706 | 410,676 | 1,642,706 | 0.0015 IGN |
+
+Reading: for every key above dust the 30-day pool income at risk is many orders above the designed IGN bond for one job, so weight is a far larger bond than coins, and it is a bond nobody can buy on a market. It also strips the key's vote for 30 days, which is the sentence the finality rule already hands out for equivocation. The cost: a false positive (a partition that makes an honest proof late) strips an honest voter; so the rule must use DAA time, a long deadline (the 120-s claim timeout of P9 decision, or longer), and a one-strike grace per 30 days. Per tier: a solo 8 GB miner below dust has no weight and so cannot take external jobs at all under this rule (it can still prove shards, which carry no bond); a pool user's jobs are the pool's and the pool's weight is at risk, which is what a pool operator wants priced. Gate: on the phase 4 devnet, 1,000 jobs with a 10 percent injected late rate: every injected fault stripped, zero honest keys stripped across a 60-s partition.
+
+
+## 4. Idea 6: audits paid from the burn, by 60 percent signal, no standing address
+
+| Chain traffic (fraction of full blocks) | Base fee burned per day, IGN | 7-day redirect, IGN | 30-day redirect, IGN | USD at 0.02 (7 d / 30 d) | USD at 0.10 (7 d / 30 d) |
+|---|---|---|---|---|---|
+| 0.01 | 2,592 | 18,144 | 77,760 | 363 / 1,555 | 1,814 / 7,776 |
+| 0.10 | 25,920 | 181,440 | 777,600 | 3,629 / 15,552 | 18,144 / 77,760 |
+| 0.50 | 129,600 | 907,200 | 3,888,000 | 18,144 / 77,760 | 90,720 / 388,800 |
+| 1.00 | 259,200 | 1,814,400 | 7,776,000 | 36,288 / 155,520 | 181,440 / 777,600 |
+
+Reading: at launch traffic (1 to 10 percent of full blocks) a 30-day redirect is USD 1,600 to 16,000 at 0.02 per IGN, under one Code4rena contest (base pricing from USD 6,500 before the 2025 zero-fee change; Immunefi's standard pays 10 percent of funds at risk). At half-full blocks it reaches a serious bounty (USD 78,000 for 30 days at 0.02). So the burn can fund audits only once the chain is used; before that the only money is the client's 1 percent dev fee and the founders' mined coins (litepaper: grants from founders' mined coins). The text gives the attack: this is a dev fund with a 60 percent veto and a per-event payee, which is exactly the switch spec 5.5 removed.
+
+
+## 5. Idea 10: Igneum as the settlement layer for GPU rental
+
+| Card | Vast.ai on-demand USD/h (cited) | Platform take modelled | Host loses USD per card-year | Igneum settlement cost per rental (2 transfers at the floor), IGN | At 0.02 and 0.10 USD per IGN | Hours of rental to pay 1 USD of chain fees at 0.02 |
+|---|---|---|---|---|---|---|
+| RTX 5090 | 0.44 | Vast about 15 percent | 579 | 0.0102 | 0.00020 / 0.0010 | 4,902 rentals |
+| RTX 5090 | 0.44 | RunPod about 7 percent | 270 | 0.0102 | 0.00020 / 0.0010 | 4,902 rentals |
+| RTX 4090 | 0.31 | Vast about 15 percent | 408 | 0.0102 | 0.00020 / 0.0010 | 4,902 rentals |
+| RTX 4090 | 0.31 | RunPod about 7 percent | 190 | 0.0102 | 0.00020 / 0.0010 | 4,902 rentals |
+
+Reading: the chain's fee is three to five orders of magnitude under the platform take. The platform's take pays for what the chain cannot do: matching, trust, dispute, image hosting, and the verification of delivered work. The honest problem is the last one: a rented hour of general compute is unverifiable, so an on-chain escrow without a verifier is a trust-me payment with lower fees. What is verifiable on this chain today: ZK proving jobs (the precompile); what is verifiable with sampling: deterministic recompute checked on a sampled fraction (SPEX, arXiv 2503.18899; Render's result-quorum, approximate); what needs hardware the fleet does not have: TEE attestation (NVIDIA confidential computing is H100 and H200 class, phala.com; no consumer card has it).
+
+
+## 6. Idea 12: a randomness beacon from the checkpoint VDF
+
+| Beacon | Period | Latency to a value | Unbiasability argument | Verify cost | Who runs it |
+|---|---|---|---|---|---|
+| drand quicknet (League of Entropy) | 3 s | about 3 s | threshold BLS over H(round) with a 2/3 threshold of about 20 named organisations; unbiasable while under 1/3 collude; unchained | one BLS verify | a league, trusted set |
+| Igneum epoch seed today | 3,600 s | 600 s (10-min VDF) | a certified checkpoint 10 minutes before use; the VDF makes the last block producer's choice useless because it cannot see the output in time | 4.47 ms (516 B) | nobody: any node evaluates |
+| Proposed: a per-checkpoint VDF beacon | 30 s | 30 to 60 s (a 30-s VDF of each certified checkpoint hash) | the checkpoint is locked by 2/3 of 30-day weight before the VDF starts, so no single party chooses the input; a last-block grind costs a block's subsidy per try and buys one bit of influence only if the attacker can evaluate the VDF faster than the chain, which is the class-group ASIC question (Chia timelords) | 4.47 ms per value, 2,880 values a day | nobody: the epoch pipeline already exists |
+
+Reading: the chain already produces an unbiasable value once an hour with a 10-minute delay. A 30-s beacon is the same code at 120x the cadence, and its honest limit is the one Chia carries: the fastest class-group squarer sets the floor on 'delay', so a timelord-class ASIC owner can learn the value earlier than everyone else (Chia docs: timelords are software or ASIC). That earlier knowledge is a front-running edge, not a bias. The product: PREVRANDAO per block already comes from this pipeline (spec 7.1); the beacon makes it a 30-s value usable off-chain (lotteries, shuffles, timelock encryption as drand does).
+
+
+## 7. Idea 14: proving other chains as the main income by 2030
+
+| Income line | USD per day | Basis |
+|---|---|---|
+| Proving every Ethereum L1 block at the Sep 2026 tracker cost | 36 | 0.005 USD x 7,200 blocks; the price a buyer pays is above cost, call it 10x: 360 |
+| The same at the Dec 2025 cost (under 0.04) | 288 | secondary |
+| Igneum year-1 emission at 0.005 USD per IGN | 13,689 | 31.688 IGN per block x 86,400 |
+| Igneum year-1 emission at 0.02 USD per IGN | 54,757 | 31.688 IGN per block x 86,400 |
+| Igneum year-1 emission at 0.1 USD per IGN | 273,784 | 31.688 IGN per block x 86,400 |
+| Rollup proving spend, all rollups (customer brief) | 8,219 to 27,397 | low millions a year, approximate |
+| Boundless trailing day in the explorer (4 Oct 2026) | 2 | 8.4 T cycles at a 0.21 USD per B-cycle median, developer-adoption.md 2b, approximate |
+
+Reading: the whole public proving market is three to four orders of magnitude under year-1 emission at any price input. For proving to be the main income by 2030, demand must grow about 1,000x while cost per proof keeps falling 3x to 30x a year, which pushes dollars per proof down as fast as volume rises. The arithmetic says never by 2030 for 'main income'; it says 'yes' for 'a second income that keeps cards on after the subsidy fades' (spec 5.10.2), which is the design's own claim.
+
diff --git a/site/404.html b/site/404.html
index 0a71bd054..682276224 100644
--- a/site/404.html
+++ b/site/404.html
@@ -13,9 +13,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -27,73 +28,21 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;
---max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--fs-h1:clamp(32px,5.5vw,56px)}
-*{box-sizing:border-box}
-body{margin:0;min-height:100vh;display:flex;flex-direction:column;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:17px;line-height:1.55;-webkit-font-smoothing:antialiased}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter);width:100%}
+/* page block; tokens, type and components are in /site.css */
 main{flex:1}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
-h1{font-family:var(--f-display);font-weight:900;font-size:var(--fs-h1);line-height:1.05;margin:12px 0 16px}
-p{margin:0;color:var(--ink-2);max-width:52ch}
 .lost{padding-block:var(--sec)}
 .places{display:grid;gap:12px;grid-template-columns:repeat(auto-fit,minmax(min(100%,220px),1fr));margin-top:32px;list-style:none;padding:0}
 .places a{display:flex;flex-direction:column;gap:6px;padding:18px 20px;border:1px solid var(--line);border-radius:14px;background:var(--graphite);color:var(--bone);text-decoration:none;transition:border-color .2s ease,transform .2s ease}
 .places a:hover{border-color:var(--ember);transform:translateY(-2px)}
 .places b{font-weight:600}
 .places span{font-size:14px;color:var(--ash)}
-.foot{margin-top:0}
 </style>
 </head>
 <body>
@@ -102,10 +51,9 @@ p{margin:0;color:var(--ink-2);max-width:52ch}
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live">Live devnet</a>
@@ -114,20 +62,32 @@ p{margin:0;color:var(--ink-2);max-width:52ch}
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
@@ -135,9 +95,9 @@ p{margin:0;color:var(--ink-2);max-width:52ch}
   <section class="lost">
     <div class="eyebrow">404</div>
     <h1>Nothing is mined here.</h1>
-    <p>That address is not on igneum.network. It may have moved, or the link had a typo. These four pages are everything the site has.</p>
+    <p>That address is not on igneum.network. It may have moved, or the link had a typo. The pages below are where most readers want to go; the footer lists every page.</p>
     <ul class="places">
-      <li><a href="/litepaper"><b>Litepaper</b><span>How the chain works, in 17 sections</span></a></li>
+      <li><a href="/litepaper"><b>Litepaper</b><span>How the chain works, in 19 sections</span></a></li>
       <li><a href="/live"><b>Live devnet</b><span>Blocks, miners and finality as they happen</span></a></li>
       <li><a href="/bench"><b>Engineering log</b><span>Every measurement, with the commands</span></a></li>
       <li><a href="/evidence"><b>Evidence</b><span>Every claim and how far it is tested</span></a></li>
@@ -149,7 +109,7 @@ p{margin:0;color:var(--ink-2);max-width:52ch}
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -175,9 +135,9 @@ p{margin:0;color:var(--ink-2);max-width:52ch}
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -185,10 +145,23 @@ p{margin:0;color:var(--ink-2);max-width:52ch}
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 </body>
 </html>
diff --git a/site/address.html b/site/address.html
index 640a8121d..bca765066 100644
--- a/site/address.html
+++ b/site/address.html
@@ -29,9 +29,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -43,81 +44,25 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
+/* page block; tokens, type and components are in /site.css */
 /* the explorer pages share this block with block.html and address.html; same tokens as live.html */
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--line-2:#3A3A42;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;--ember-ink:#0C0C0E;--blue:#5CB8FF;--green:#3FD39A;
---max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
 --card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
 --fs-h1:clamp(32px,5.5vw,56px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px)}
-*{box-sizing:border-box}
-body{margin:0;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:17px;line-height:1.55;-webkit-font-smoothing:antialiased;overflow-x:hidden}
-a{color:inherit;text-decoration:none}a:hover{color:var(--molten)}
 a:focus-visible,button:focus-visible,input:focus-visible{outline:2px solid var(--ember);outline-offset:3px;border-radius:6px}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
 .mono{font-family:var(--f-mono)}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
 h1,h2{font-family:var(--f-display);margin:0;line-height:1.08;text-wrap:balance}
-h1{font-weight:900;font-size:var(--fs-h1);letter-spacing:-.01em;overflow-wrap:anywhere}
-h2{font-weight:700;font-size:var(--fs-h3)}
-p{margin:0}
-.card{background:var(--graphite);border:1px solid var(--line);border-radius:var(--card-r);padding:var(--card-pad);min-width:0;margin-top:var(--gap)}
 .head{padding-block:var(--head) var(--gap);display:flex;flex-direction:column;gap:14px}
 .head p{color:var(--ink-2);max-width:64ch;font-size:16px}
 .search{display:flex;gap:10px;max-width:760px;margin-top:4px}
 .search input{flex:1;min-width:0;min-height:48px;padding:10px 14px;border-radius:10px;border:1px solid var(--line-2);background:var(--graphite);color:var(--bone);font:500 15px/1.3 var(--f-mono)}
 .search input::placeholder{color:var(--ash)}
-.btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;min-height:48px;padding:12px 22px;border-radius:10px;font-weight:600;font-size:16px;border:1px solid var(--line-2);color:var(--bone);background:transparent;cursor:pointer;font-family:var(--f-sans)}
-.btn.primary{background:var(--ember);color:var(--ember-ink);border-color:var(--ember)}
 .btn.primary:hover{background:#FF6A2B;border-color:#FF6A2B;color:var(--ember-ink)}
 .msg{font-family:var(--f-mono);font-size:13px;color:var(--molten);min-height:18px}
 .strip{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:var(--gap-tile)}
@@ -129,28 +74,15 @@ p{margin:0}
 @media (max-width:700px){.cell .v{font-size:19px}}
 .cell .s{font-family:var(--f-mono);font-size:12px;color:var(--ash);text-wrap:balance}
 .cell.status .v{display:flex;align-items:center;gap:10px}
-.dot{width:10px;height:10px;border-radius:50%;background:var(--molten);display:inline-block;flex:0 0 10px;animation:pulse 2s ease-in-out infinite}
 .off .dot{background:var(--ash);animation:none}.off .cell.status .v{color:var(--ash)}.on .cell.status .v{color:var(--molten)}
-@keyframes pulse{0%,100%{box-shadow:0 0 0 0 rgba(255,179,92,.5)}50%{box-shadow:0 0 0 8px rgba(255,179,92,0)}}
 @media (prefers-reduced-motion:reduce){.dot{animation:none}}
-.viz-head{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:center;gap:10px 20px;margin-bottom:12px}
-.tbl{overflow-x:auto;margin-top:12px;-webkit-overflow-scrolling:touch}
-table{border-collapse:collapse;width:100%;font-size:14px}
-th,td{padding:10px 10px;text-align:left;border-bottom:1px solid var(--line);white-space:nowrap;vertical-align:top}
-th{font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);font-weight:500}
 td.n,th.n{text-align:right;font-variant-numeric:tabular-nums}
-tr:last-child td{border-bottom:0}
 tbody tr:hover td{background:rgba(255,255,255,.025)}
 .id{font-family:var(--f-mono);color:var(--molten)}
 .hash{font-family:var(--f-mono)}
-.sw{width:10px;height:10px;border-radius:3px;display:inline-block;margin-right:7px;vertical-align:middle;border:1.5px solid var(--ash)}
 .sw.chain{background:var(--ember);border-color:var(--blue)}.sw.blue{background:rgba(92,184,255,.7);border-color:var(--blue)}.sw.red{background:linear-gradient(45deg,transparent 44%,var(--ash) 44%,var(--ash) 56%,transparent 56%) center/8px 8px no-repeat}
 .chip{display:inline-block;font-family:var(--f-mono);font-size:11px;letter-spacing:.08em;text-transform:uppercase;padding:3px 8px;border-radius:999px;border:1px solid var(--line-2);color:var(--ink-2);margin-right:6px}
 .chip.hot{border-color:var(--molten);color:var(--molten)}.chip.ok{border-color:var(--green);color:var(--green)}
-.legend{display:flex;flex-wrap:wrap;gap:6px 16px;margin-top:14px;font-size:13px;color:var(--ink-2)}
-.legend span{display:inline-flex;align-items:center;white-space:nowrap}
-.empty{color:var(--ash);font-size:14px;padding:12px 0}
-.note{font-size:13px;color:var(--ash);margin-top:14px;max-width:80ch}
 dl{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:8px 20px;margin:12px 0 0;font-size:14px}
 dt{font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);padding-top:3px}
 dd{margin:0;overflow-wrap:anywhere;font-variant-numeric:tabular-nums}
@@ -159,7 +91,6 @@ dd{margin:0;overflow-wrap:anywhere;font-variant-numeric:tabular-nums}
 @media (min-width:900px){.two{grid-template-columns:1fr 1fr}.two .card{margin-top:0}}
 .two-wrap{margin-top:var(--gap)}
 main{padding-bottom:var(--sec)}
-.foot{margin-top:0}
 </style>
 </head>
 <body>
@@ -168,10 +99,9 @@ main{padding-bottom:var(--sec)}
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live" aria-current="page">Live devnet</a>
@@ -180,20 +110,32 @@ main{padding-bottom:var(--sec)}
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
@@ -222,7 +164,7 @@ main{padding-bottom:var(--sec)}
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -248,9 +190,9 @@ main{padding-bottom:var(--sec)}
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -258,10 +200,23 @@ main{padding-bottom:var(--sec)}
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 <script type="module">
 import { ign, ignFromWei, shortHash, rel, int, utc } from '/lib/explorer.mjs';
diff --git a/site/bench.html b/site/bench.html
index 7a3d050cc..1251d665a 100644
--- a/site/bench.html
+++ b/site/bench.html
@@ -31,9 +31,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -45,93 +46,38 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;
-/* one system for every page: container, gutter, section rhythm, card and tile boxes, heading scale (same tokens as the homepage) */
---max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
---card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
---fs-h1:clamp(32px,5.5vw,56px);--fs-h2:clamp(28px,4.2vw,44px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px)}
-*{box-sizing:border-box}body{margin:0;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:16px;line-height:1.6;padding:0;-webkit-font-smoothing:antialiased}
-a{color:var(--ember);text-decoration:none}a:hover{text-decoration:underline}
+/* generated-page block (the engineering log, the bench table, the evidence table); tokens, type and components are in /site.css */
 [id]{scroll-margin-top:calc(var(--nav-h) + 16px)}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
-h1{font-family:var(--f-display);font-weight:900;font-size:var(--fs-h1);line-height:1.05;margin:12px 0 12px}
-.head{padding-top:var(--head)}
-.note{color:var(--ash);font-size:15px;max-width:72ch;margin:0 0 32px}
-.layout{display:grid;grid-template-columns:minmax(0,1fr);gap:32px}
+.head{padding-top:calc(var(--sec) * .6)}
+.head h1{margin:var(--s-3) 0}
+.head .note{max-width:72ch;margin:0 0 var(--s-6)}
+.layout{display:grid;grid-template-columns:minmax(0,1fr);gap:var(--s-6)}
 @media(min-width:960px){.layout{grid-template-columns:260px minmax(0,1fr);gap:56px}}
-.toc{align-self:start;font-size:14px;border:1px solid var(--line);border-radius:var(--tile-r);background:var(--graphite);padding:8px}
-.toc .lbl{font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);padding:6px 10px 8px}
+.toc{align-self:start;font-size:14px;border:1px solid var(--line);border-radius:var(--r-row);background:var(--graphite);padding:8px}
+.toc .lbl{font:500 var(--t-xs)/1.4 var(--f-mono);letter-spacing:.12em;text-transform:uppercase;color:var(--ash);padding:6px 10px 8px}
 .toc ol{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:1px;counter-reset:s;max-height:40vh;overflow:auto;overscroll-behavior:contain;scrollbar-width:thin}
 @media(min-width:960px){.toc{position:sticky;top:calc(var(--nav-h) + 20px)}.toc ol{max-height:calc(100vh - var(--nav-h) - 96px)}}
 .toc a{display:flex;gap:10px;padding:7px 10px;border-radius:8px;color:var(--ink-2);counter-increment:s;line-height:1.35}
 .toc a::before{content:counter(s,decimal-leading-zero);font-family:var(--f-mono);font-size:11px;color:var(--ash);min-width:20px;padding-top:2px}
-.toc a:hover{background:var(--obsidian);text-decoration:none;color:var(--bone)}
-article{max-width:78ch;min-width:0}
+.toc a:hover{background:var(--row);text-decoration:none;color:var(--bone)}
+article{max-width:78ch;min-width:0;color:var(--ink-2)}
 article h1{display:none}
-article h2{font-family:var(--f-display);font-weight:700;font-size:var(--fs-h3);line-height:1.3;margin:44px 0 12px;padding-top:24px;border-top:1px solid var(--line)}
+article h2{font-size:var(--t-h3);margin:44px 0 12px;padding-top:24px;border-top:1px solid var(--line)}
 article h2:first-of-type{margin-top:0;padding-top:0;border-top:0}
-article h3{font-family:var(--f-display);font-weight:500;font-size:16px;margin:26px 0 8px}
-article h4{font-size:15px;margin:20px 0 6px;color:var(--molten)}
+article h3{font-size:16px;margin:26px 0 8px}
+article h4{font:600 15px/1.4 var(--f-sans);margin:20px 0 6px;color:var(--bone)}
 article p{margin:0 0 14px}article ul,article ol{margin:0 0 14px;padding-left:22px}article li{margin-bottom:6px}
 article p,article li,article h2,article h3{overflow-wrap:anywhere}
-code{font-family:var(--f-mono);font-size:.92em;background:var(--graphite);padding:1px 5px;border-radius:4px;overflow-wrap:anywhere}
-pre{margin:0 0 16px;padding:16px 18px;background:var(--graphite);border-radius:var(--card-r);font-family:var(--f-mono);font-size:13px;line-height:1.55;overflow-x:auto;-webkit-overflow-scrolling:touch}
-pre code{background:none;padding:0;font-size:inherit}
-.tbl{overflow-x:auto;margin:18px 0 24px;border:1px solid var(--line);border-radius:var(--card-r);background:var(--graphite);-webkit-overflow-scrolling:touch}
-table{border-collapse:collapse;width:100%;min-width:560px;font-size:15px}th,td{padding:12px 14px;text-align:left;vertical-align:top;border-bottom:1px solid var(--line)}
-th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);font-weight:500;background:var(--obsidian)}tr:last-child td{border-bottom:0}
+article pre{margin:0 0 var(--s-4)}
+.tbl{margin:var(--s-4) 0 var(--s-5)}
+table{min-width:560px}
 .gen{color:var(--ash);font-size:13px;margin:40px 0 0;max-width:72ch}
 </style>
 </head>
@@ -141,10 +87,9 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live">Live devnet</a>
@@ -153,31 +98,43 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
 <main id="main" class="wrap">
 <div class="head">
-<div class="eyebrow">88 entries, newest at the bottom</div>
+<div class="eyebrow">90 entries, newest at the bottom</div>
 <h1>Engineering log</h1>
 <p class="note">Every measurement the project has made, newest at the bottom, written by the people and agents who ran it, with the commands and hardware. Prototype numbers are not mining numbers and say so.</p>
 </div>
 <div class="layout">
-<nav class="toc" aria-label="Contents"><div class="lbl">Contents</div><ol><li><a href="#2026-10-03-proto-metal-igneum-bench-first-run">2026-10-03  proto-metal / igneum-bench, first run</a></li><li><a href="#2026-10-03-proto-cuda-program-pack-export-apple-m5-max-side-only-rtx-5090-run-pending">2026-10-03  proto-cuda / program pack export (Apple M5 Max side only; RTX 5090 run pending)</a></li><li><a href="#2026-10-03-sim-finality-sim-py-sustained-mining-finality-vote-weight-model-not-hardware">2026-10-03  sim/finality_sim.py, sustained-mining finality vote weight (model, not hardware)</a></li><li><a href="#2026-10-03-proto-metal-hardening-tests-correctness-and-soundness-of-the-lottery-hash-metal-only">2026-10-03  proto-metal hardening tests (correctness and soundness of the lottery hash, Metal only)</a></li><li><a href="#3-october-2026-rtx-5090-first-run-an-rtx-5090-on-windows-cuda-12-8-runtime-driver-13-4-visual-studio-2026-with-the-14-30-toolset-selected-via-vcvarsall-vcvars-ver-14-30">3 October 2026, RTX 5090 first run (an RTX 5090 on Windows, CUDA 12.8 runtime, driver 13.4, Visual Studio 2026 with the 14.30 toolset selected via vcvarsall -vcvars_ver=14.30)</a></li><li><a href="#2026-10-03-sim-finality-v2-py-finality-rule-v2-with-latency-partitions-and-eclipses-model-not-hardware">2026-10-03  sim/finality_v2.py, finality rule V2 with latency, partitions and eclipses (model, not hardware)</a></li><li><a href="#2026-10-03-proto-metal-memory-hard-dataset-cache-8-dependent-reads-metal-only-cuda-pack-emulated">2026-10-03  proto-metal memory-hard dataset (cache + 8 dependent reads), Metal only; CUDA pack emulated</a></li><li><a href="#2026-10-03-rusty-kaspa-base-build-and-3-node-devnet-on-the-apple-m5-max-consensus-engineer-pre-fork-proof">2026-10-03  rusty-kaspa base build and 3-node devnet on the Apple M5 Max (consensus-engineer, pre-fork proof)</a></li><li><a href="#3-october-2026-rtx-5090-memory-hard-dataset-pack-igneum-genesis-mh">3 October 2026, RTX 5090, memory-hard dataset (pack igneum-genesis-mh)</a></li><li><a href="#2026-10-03-proto-vdf-wesolowski-vdf-between-the-certified-checkpoint-and-the-program-seed-epoch-10-min-era-1-h">2026-10-03  proto-vdf, Wesolowski VDF between the certified checkpoint and the program seed (epoch 10 min, era 1 h)</a></li><li><a href="#2026-10-03-igneum-pow-rust-crate-bit-exact-with-proto-metal-consensus-engineer">2026-10-03  igneum-pow: Rust crate bit-exact with proto-metal (consensus-engineer)</a></li><li><a href="#3-october-2026-proto-opencl-opencl-path-built-and-proven-without-amd-silicon-apple-opencl-1-2-pocl-cpu-emulator">3 October 2026, proto-opencl: OpenCL path built and proven without AMD silicon (Apple OpenCL 1.2, pocl, CPU emulator)</a></li><li><a href="#3-october-2026-amd-gfx1036-ryzen-7-9800x3d-integrated-rdna-2-graphics-1-compute-unit-amd-opencl-2-1-driver-3652-0">3 October 2026, AMD gfx1036 (Ryzen 7 9800X3D integrated RDNA 2 graphics, 1 compute unit), AMD OpenCL 2.1 driver 3652.0</a></li><li><a href="#3-october-2026-rtx-5090-through-nvidia-opencl-fourth-compiler-path-on-the-same-card">3 October 2026, RTX 5090 through NVIDIA OpenCL (fourth compiler path on the same card)</a></li><li><a href="#3-october-2026-igneum-node-devnet-v0-3-node-igneum-devnet-at-1-bps-with-the-80-20-coinbase-and-vote-key-hash-consensus-engineer">3 October 2026, igneum-node devnet v0: 3-node igneum-devnet at 1 BPS with the 80/20 coinbase and vote_key_hash (consensus-engineer)</a></li><li><a href="#3-october-2026-first-devnet-blocks-on-the-real-lottery-hash-cpu-then-metal-gpu-three-worker-implementations-consensus-engineer">3 October 2026, first devnet blocks on the real lottery hash: CPU, then Metal GPU, three worker implementations (consensus-engineer)</a></li><li><a href="#3-october-2026-windows-node-package-igneumd-cross-compiled-for-x86-64-pc-windows-gnu-two-peer-sync-test-consensus-engineer">3 October 2026, Windows node package: igneumd cross-compiled for x86_64-pc-windows-gnu, two-peer sync test (consensus-engineer)</a></li><li><a href="#3-october-2026-r3-26-m15-pow-checked-after-the-cheap-checks-cache-build-cap-attack-before-and-after-consensus-engineer">3 October 2026, R3.26 / M15: PoW checked after the cheap checks, cache-build cap, attack before and after (consensus-engineer)</a></li><li><a href="#3-october-2026-difficulty-controller-devnet-record-simulator-igneum-dual-lane-rule-3-node-cpu-test-network-consensus-engineer">3 October 2026, difficulty controller: devnet record, simulator, Igneum dual-lane rule, 3-node CPU test network (consensus-engineer)</a></li><li><a href="#3-october-2026-igneum-node-devnet-v2-sustained-mining-finality-rule-v2-on-a-four-miner-test-network-and-as-a-follower-of-the-live-devnet-consensus-engineer-and-cryptographer">3 October 2026, igneum-node devnet v2: sustained-mining finality rule v2 on a four-miner test network, and as a follower of the live devnet (consensus-engineer and cryptographer)</a></li><li><a href="#3-october-2026-execution-layer-devnet-v3-revm-over-the-selected-chain-3-node-simnet-viem-smoke-test-execution-engineer">3 October 2026, execution layer devnet v3: revm over the selected chain, 3-node simnet, viem smoke test (execution-engineer)</a></li><li><a href="#2026-10-03-consensus-attack-harness-consensus-engineer-catalogue-run-on-the-ordering-layer-node">2026-10-03, consensus attack harness (consensus-engineer), catalogue run on the ordering-layer node</a></li><li><a href="#3-october-2026-weak-program-census-400-000-program-runs-through-the-cpu-reference-the-redundant-load-finding-and-the-rules-for-m5-and-m6-cryptographer">3 October 2026, weak-program census: 400,000 program runs through the CPU reference, the redundant-load finding, and the rules for M5 and M6 (cryptographer)</a></li><li><a href="#3-october-2026-proving-v0-first-sp1-proof-of-an-igneum-block-apple-m5-max-cpu-loaded-machine-execution-engineer-proving">3 October 2026, proving v0: first SP1 proof of an Igneum block, Apple M5 Max CPU, loaded machine (execution-engineer, proving)</a></li><li><a href="#2026-10-03-execution-layer-attack-suite-malformed-txs-nonce-games-rpc-fuzz-pgas-exhaustion-reorgs-registry-abuse-execution-test-engineer">2026-10-03  execution layer attack suite: malformed txs, nonce games, RPC fuzz, pgas exhaustion, reorgs, registry abuse (execution test engineer)</a></li><li><a href="#4-october-2026-sim-economy-mining-versus-proving-under-stress-agent-based-economist-model-not-hardware">4 October 2026, sim/economy: mining versus proving under stress, agent-based (economist; model, not hardware)</a></li><li><a href="#2026-10-04-execution-layer-attack-fixes-f-exec-a-mempool-gas-limit-bound-and-f-exec-b-pgas-abort-rule-spec-7-5-execution-engineer">2026-10-04  execution layer attack fixes: F-exec-A (mempool gas-limit bound) and F-exec-B (pgas abort rule, spec 7.5) (execution-engineer)</a></li><li><a href="#3-october-2026-per-identity-hash-rate-decay-on-the-rtx-5090-diagnosis-and-metal-reproduction-miner-community-lead">3 October 2026, per-identity hash rate "decay" on the RTX 5090: diagnosis and Metal reproduction (miner-community-lead)</a></li><li><a href="#2026-10-04-finality-v2-attack-harness-seven-hostile-scenarios-on-a-six-voter-private-test-network-consensus-test-engineer-cryptographer">2026-10-04  finality v2 attack harness: seven hostile scenarios on a six-voter private test network (consensus test engineer, cryptographer)</a></li><li><a href="#4-october-2026-difficulty-rule-under-attack-pool-hopping-pulsed-rental-timestamp-stretching-short-lane-oscillation-epoch-games-polluted-window-block-flood-consensus-test-engineer">4 October 2026, difficulty rule under attack: pool hopping, pulsed rental, timestamp stretching, short-lane oscillation, epoch games, polluted window, block flood (consensus test engineer)</a></li><li><a href="#2026-10-04-finality-fixes-f17-and-f1-aggregators-drawn-by-weight-first-month-gate-min-daa-window-attack-scenarios-2-and-5-before-and-after-consensus-engineer">2026-10-04  finality fixes F17 and F1: aggregators drawn by weight, first-month gate min_daa = window; attack scenarios 2 and 5 before and after (consensus-engineer)</a></li><li><a href="#4-october-2026-difficulty-rule-timestamp-attack-fixed-tight-bounds-sanitised-clock-target-floor-simulator-regression-3-node-forger-test-consensus-engineer">4 October 2026, difficulty rule: timestamp attack fixed (tight bounds, sanitised clock, target floor), simulator regression, 3-node forger test (consensus-engineer)</a></li><li><a href="#4-october-2026-devnet-v4-integration-nine-branches-merged-3-node-test-network-on-the-merged-node-windows-cross-build-release-engineer">4 October 2026, devnet-v4 integration: nine branches merged, 3-node test network on the merged node, Windows cross-build (release engineer)</a></li><li><a href="#4-october-2026-generator-version-2-adopted-exact-load-count-fresh-source-loads-program-acceptance-every-vector-re-cut-three-workers-re-checked-20-000-program-census-devnet-v4-binaries-rebuilt-cryptographer">4 October 2026, generator version 2 adopted: exact load count, fresh-source loads, program acceptance; every vector re-cut, three workers re-checked, 20,000-program census, devnet-v4 binaries rebuilt (cryptographer)</a></li><li><a href="#2026-10-04-finality-floor-2-3-the-total-weight-floor-raised-from-17-30-to-two-thirds-simulator-a-to-l-re-run-attack-scenarios-6a-and-6b-on-a-three-node-six-voter-network-cryptographer">2026-10-04  finality floor 2/3: the total-weight floor raised from 17/30 to two thirds, simulator A to L re-run, attack scenarios 6A and 6B on a three-node, six-voter network (cryptographer)</a></li><li><a href="#4-october-2026-proving-v0-on-the-rtx-5090-first-gpu-proof-of-an-igneum-block-wsl2-sp1-6-8-1-cuda">4 October 2026, proving v0 on the RTX 5090: first GPU proof of an Igneum block (WSL2, SP1 6.8.1 cuda)</a></li><li><a href="#4-october-2026-devnet-v4-cut-over-generator-v2-2-3-floor-three-nodes-and-a-seed-on-a-fresh-chain">4 October 2026, devnet v4 cut-over: generator v2, 2/3 floor, three nodes and a seed on a fresh chain</a></li><li><a href="#4-october-2026-one-click-windows-workers-what-the-apple-m5-max-could-measure-no-nvidia-gpu-here">4 October 2026, one-click Windows workers: what the Apple M5 Max could measure (no NVIDIA GPU here)</a></li><li><a href="#4-october-2026-first-hourly-program-swap-on-the-live-devnet-compile-ahead-no-pause-two-cards">4 October 2026, first hourly program swap on the live devnet: compile-ahead, no pause, two cards</a></li><li><a href="#4-october-2026-proving-devnet-v4-shards-on-the-apple-m5-max-cpu-loaded-machine-execution-engineer-proving">4 October 2026, proving: devnet v4 shards on the Apple M5 Max CPU, loaded machine (execution-engineer, proving)</a></li><li><a href="#2026-10-04-fast-time-60x-test-profile-linux-cross-compile-from-the-apple-m5-max-ci-on-every-push-consensus-engineer">2026-10-04, fast time (60x test profile), Linux cross-compile from the Apple M5 Max, CI on every push (consensus-engineer)</a></li><li><a href="#4-october-2026-first-finality-lock-on-the-live-devnet-checkpoint-242-at-77-4-of-all-weight-two-hours-after-genesis">4 October 2026, first finality lock on the live devnet: checkpoint 242 at 77.4% of all weight, two hours after genesis</a></li><li><a href="#4-october-2026-the-gfx1036-worker-fault-and-what-the-apple-m5-max-could-and-could-not-reproduce">4 October 2026, the gfx1036 worker fault and what the Apple M5 Max could and could not reproduce</a></li><li><a href="#4-october-2026-a-node-60-s-behind-the-clock-is-silently-dead-pc-2-s-first-app-install">4 October 2026, a node 60 s behind the clock is silently dead (PC 2's first app install)</a></li><li><a href="#4-october-2026-first-machine-on-the-igneum-miner-app-pc-2-s-rtx-5090-at-118-mh-s-via-setup-exe">4 October 2026, first machine on the Igneum Miner app: PC 2's RTX 5090 at 118 MH/s, via Setup.exe</a></li><li><a href="#4-october-2026-difficulty-rule-v2-the-live-oscillation-its-cause-the-dag-replay-the-fix-behind-a-height-switch-consensus-engineer">4 October 2026, difficulty rule v2: the live oscillation, its cause, the DAG replay, the fix behind a height switch (consensus-engineer)</a></li><li><a href="#4-october-2026-the-observer-stored-nothing-for-78-minutes-then-7-022-blocks-in-two-minutes">4 October 2026, the observer stored nothing for 78 minutes, then 7,022 blocks in two minutes</a></li><li><a href="#4-october-2026-pc-2-at-the-14-20-boundary-a-worker-stuck-on-the-previous-epoch-root-cause-from-the-uploads">4 October 2026, PC 2 at the 14:20 boundary: a worker stuck on the previous epoch (root cause from the uploads)</a></li><li><a href="#4-october-2026-shard-proving-on-the-rtx-5090-a-full-shard-compressed-in-10-9-s-a-two-shard-block-aggregated-in-2-2-s-all-verified">4 October 2026, shard proving on the RTX 5090: a full shard compressed in 10.9 s, a two-shard block aggregated in 2.2 s, all verified</a></li><li><a href="#4-october-2026-first-outside-machine-on-the-devnet-an-apple-silicon-laptop-through-the-igneum-miner-app">4 October 2026, first outside machine on the devnet: an Apple silicon laptop through the Igneum Miner app</a></li><li><a href="#2026-10-04-afternoon-proving-v0-end-to-end-on-a-3-node-test-network-mac-cpu-prover">2026-10-04 (afternoon)  proving v0 end to end on a 3-node test network (Mac, CPU prover)</a></li><li><a href="#4-october-2026-cloud-devnet-12-igneumd-nodes-in-5-locations-inter-region-latency-two-singapore-partitions-hash-rate-steps-consensus-engineer">4 October 2026, cloud devnet: 12 igneumd nodes in 5 locations, inter-region latency, two Singapore partitions, hash-rate steps (consensus-engineer)</a></li><li><a href="#4-october-2026-correction-the-78-minute-observer-gap-was-the-apple-m5-max-hibernating">4 October 2026, correction: the 78-minute observer gap was the Apple M5 Max hibernating</a></li><li><a href="#2026-10-04-afternoon-the-app-s-prover-loop-end-to-end-on-the-apple-m5-max-igneum-miner-engine-packaged-binaries-private-test-network">2026-10-04 (afternoon)  the app's prover loop end to end on the Apple M5 Max (Igneum Miner engine, packaged binaries, private test network)</a></li><li><a href="#4-october-2026-difficulty-v2-rollout-rehearsal-on-the-12-node-the-cloud-provider-network-binaries-for-the-devnet-the-devnet-plan-rollout-engineer">4 October 2026, difficulty v2 rollout rehearsal on the 12-node the cloud provider network, binaries for the devnet, the devnet plan (rollout engineer)</a></li><li><a href="#4-october-2026-difficulty-rule-v2-activated-on-the-live-devnet-at-daa-33-000-by-height-switch-no-fresh-chain">4 October 2026, difficulty rule v2 activated on the live devnet at DAA 33,000 by height switch, no fresh chain</a></li><li><a href="#4-october-2026-first-machine-in-the-united-states-a-windows-laptop-on-an-intel-integrated-gpu-synced-and-voting">4 October 2026, first machine in the United States: a Windows laptop on an Intel integrated GPU, synced and voting</a></li><li><a href="#4-october-2026-evening-finality-rule-v3-the-frozen-weight-table-f21-and-the-certificate-fold-f22-simulator-unit-tests-fast-time-3-node-network-with-300-ms-links-finality-engineer">4 October 2026 (evening), finality rule v3: the frozen weight table (F21) and the certificate fold (F22), simulator, unit tests, fast-time 3-node network with 300-ms links (finality engineer)</a></li><li><a href="#4-october-2026-miner-performance-variant-racing-metal-worker-on-the-m5-max-the-rtx-5090-job-is-ready-not-run">4 October 2026, miner performance: variant racing (Metal worker on the M5 Max; the RTX 5090 job is ready, not run)</a></li><li><a href="#4-october-2026-miner-fault-guards-and-the-app-watchdog-measured-against-a-fake-worker-miner-community-lead-app-owner">4 October 2026, miner fault guards and the app watchdog measured against a fake worker (miner-community-lead, app owner)</a></li><li><a href="#4-october-2026-evening-the-software-dev-fee-measured-on-a-test-network-9-fee-blocks-in-785-the-chain-and-the-miners-counters-agree">4 October 2026 (evening), the software dev fee measured on a test network: 9 fee blocks in 785, the chain and the miners' counters agree</a></li><li><a href="#4-october-2026-night-ledger-m30-the-block-and-transaction-floods-grew-the-node-by-256-mib-per-epoch-roll-fixed-by-sharing-the-pow-cache-across-the-epochs-of-a-day-memory-engineer">4 October 2026 (night), ledger M30: the block and transaction floods grew the node by 256 MiB per epoch roll, fixed by sharing the PoW cache across the epochs of a day (memory engineer)</a></li><li><a href="#4-october-2026-night-round-4-consensus-items-f23-f24-g12-x18-and-m31-unit-tests-and-fast-time-3-node-runs-against-the-control-consensus-engineer">4 October 2026 (night), round-4 consensus items F23, F24, G12, X18 and M31: unit tests and fast-time 3-node runs against the control (consensus engineer)</a></li><li><a href="#5-october-2026-live-devnet-the-first-shards-proven-verified-and-paid">5 October 2026, live devnet: the first shards proven, verified and paid</a></li><li><a href="#5-october-2026-the-program-id-split-why-the-apple-m5-max-rejected-pc-2-s-proofs-and-the-verifier-at-114-s">5 October 2026, the program id split: why the Apple M5 Max rejected PC 2's proofs, and the verifier at 114 s</a></li><li><a href="#5-october-2026-afternoon-live-devnet-real-transactions-the-first-non-empty-shard-proven-and-paid-and-the-exporter-s-block-structure-fixed-execution-engineer">5 October 2026 (afternoon), live devnet: real transactions, the first non-empty shard proven and paid, and the exporter's block structure fixed (execution engineer)</a></li><li><a href="#5-october-2026-the-prover-carries-both-fee-tables-and-the-height-switch-one-pinned-guest-on-either-side-of-daa-210-000">5 October 2026, the prover carries both fee tables and the height switch: one pinned guest on either side of DAA 210,000</a></li><li><a href="#5-october-2026-night-the-c4-fix-certificate-driven-reorg">5 October 2026 (night), the C4 fix: certificate-driven reorg</a></li><li><a href="#5-october-2026-evening-fud-ledger-sweep-round-6">5 October 2026 (evening), FUD ledger sweep round 6</a></li><li><a href="#5-october-2026-evening-the-9070-xt-on-the-egpu-why-17-9-mh-s-and-what-moved">5 October 2026 (evening), the 9070 XT on the eGPU: why 17.9 MH/s, and what moved</a></li><li><a href="#5-october-2026-night-ember-tune-the-two-knob-efficiency-tune-the-fleet-prior-and-what-pc-1-could-measure-tonight-miner-community-lead">5 October 2026 (night), Ember Tune: the two-knob efficiency tune, the fleet prior, and what PC 1 could measure tonight (miner-community-lead)</a></li><li><a href="#5-october-2026-night-read-width-of-the-lottery-hash-4-16-and-64-byte-loads-a-per-load-mix-a-written-scratch-three-cards-gate-1-experiment-cryptographer">5 October 2026 (night), read width of the lottery hash: 4, 16 and 64-byte loads, a per-load mix, a written scratch; three cards (gate 1 experiment, cryptographer)</a></li><li><a href="#5-october-2026-night-the-hot-table-on-the-m5-max-a-second-table-sized-to-gpu-cache-beside-the-1-gib-dataset-counter-asic-2-0-layer-5">5 October 2026 (night), the hot table on the M5 Max: a second table sized to GPU cache beside the 1 GiB dataset (Counter ASIC 2.0 layer 5)</a></li><li><a href="#5-october-2026-night-mixer-x4-and-the-cache-growth-rule-the-class-v3-dataset-construction-with-the-x8-candidate-counter-asic-2-0-branch-ca2-mixer-on-ca2-v3-6c75dad-cryptographer-s-lane">5 October 2026 (night), mixer x4 and the cache growth rule: the class v3 dataset construction, with the x8 candidate (Counter ASIC 2.0; branch ca2-mixer on ca2-v3 6c75dad; cryptographer's lane)</a></li><li><a href="#5-october-2026-evening-evm-transaction-relay-three-nodes-in-a-chain-every-transaction-sent-to-one-end-included-by-the-other-two-miners-execution-and-networking-engineer">5 October 2026 (evening), EVM transaction relay: three nodes in a chain, every transaction sent to one end included by the other two miners (execution and networking engineer)</a></li><li><a href="#5-october-2026-night-the-sp1-cpu-prover-on-pc-1-beside-the-miners-and-the-backend-survey-no-zkvm-proves-on-amd-amd-prove-agent">5 October 2026 (night), the SP1 CPU prover on PC 1 beside the miners, and the backend survey: no zkVM proves on AMD (amd-prove agent)</a></li><li><a href="#counter-asic-2-0-the-numbers">Counter ASIC 2.0, the numbers</a></li><li><a href="#5-october-2026-evening-proving-v1-segment-records-the-chain-rule-the-unproven-rule-what-was-measured-tonight-proving-engineer">5 October 2026 (evening), proving v1: segment records, the chain rule, the unproven rule; what was measured tonight (proving engineer)</a></li><li><a href="#5-october-2026-night-dp4a-class-throughput-on-the-m5-max-the-dot4-emulation-against-the-alu-chain-counter-asic-2-0-layer-7">5 October 2026 (night), dp4a-class throughput on the M5 Max: the dot4 emulation against the ALU chain (Counter ASIC 2.0 layer 7)</a></li><li><a href="#5-october-2026-layer-3-scratch-soundness-counter-asic-2-0-step-4-branch-ca2-soundness-on-readwidth-b970dda-cryptographer">5 October 2026, layer 3 scratch soundness (Counter ASIC 2.0 step 4; branch ca2-soundness on readwidth b970dda; cryptographer)</a></li><li><a href="#5-october-2026-night-epoch-length-as-an-era-parameter-counter-asic-2-0-layer-9-the-apple-m5-max-s-compile-ahead-per-program">5 October 2026 (night), epoch length as an era parameter (Counter ASIC 2.0, layer 9): the Apple M5 Max's compile-ahead per program</a></li><li><a href="#6-october-2026-counter-asic-3-0-item-2-the-per-day-derivation">6 October 2026, Counter ASIC 3.0 item 2: the per-day derivation</a></li><li><a href="#6-october-2026-counter-asic-3-0-item-8-program-work-in-the-latency-shadow">6 October 2026, Counter ASIC 3.0 item 8: program work in the latency shadow</a></li><li><a href="#6-october-2026-counter-asic-3-0-item-6-the-reserve-families-step-costs">6 October 2026, Counter ASIC 3.0 item 6: the reserve families' step costs</a></li><li><a href="#6-october-2026-counter-asic-3-0-gate-run-the-hash-side">6 October 2026, Counter ASIC 3.0 gate run, the hash side</a></li><li><a href="#5-october-2026-night-aggregation-cost-on-the-rtx-5090-what-a-per-block-aggregation-spends-and-what-each-lever-gives-proving-engineer-agg-cost">5 October 2026 (night), aggregation cost on the RTX 5090: what a per-block aggregation spends and what each lever gives (proving engineer, agg-cost)</a></li><li><a href="#6-october-2026-12-25-to-13-20z-the-finality-route-why-26-fresh-nodes-lost-the-seed-every-checkpoint-fork-fin-route-0313-5a339733-on-83089544-release-engineer">6 October 2026, 12:25 to 13:20Z, the finality route: why 26 fresh nodes lost the seed every checkpoint (fork `fin-route-0313` 5a339733 on 83089544; release engineer)</a></li><li><a href="#6-october-2026-16-01z-ember-run-6-on-pc-1-ember-tune-pc1-6-0-3-13-kit-6-564bdea-elevated-one-click">6 October 2026, 16:01Z: Ember run 6 on PC 1 (ember-tune-pc1-6, 0.3.13 + kit-6 = 564bdea, elevated, one click)</a></li></ol></nav>
+<nav class="toc" aria-label="Contents"><div class="lbl">Contents</div><ol><li><a href="#2026-10-03-proto-metal-igneum-bench-first-run">2026-10-03  proto-metal / igneum-bench, first run</a></li><li><a href="#2026-10-03-proto-cuda-program-pack-export-apple-m5-max-side-only-rtx-5090-run-pending">2026-10-03  proto-cuda / program pack export (Apple M5 Max side only; RTX 5090 run pending)</a></li><li><a href="#2026-10-03-sim-finality-sim-py-sustained-mining-finality-vote-weight-model-not-hardware">2026-10-03  sim/finality_sim.py, sustained-mining finality vote weight (model, not hardware)</a></li><li><a href="#2026-10-03-proto-metal-hardening-tests-correctness-and-soundness-of-the-lottery-hash-metal-only">2026-10-03  proto-metal hardening tests (correctness and soundness of the lottery hash, Metal only)</a></li><li><a href="#3-october-2026-rtx-5090-first-run-an-rtx-5090-on-windows-cuda-12-8-runtime-driver-13-4-visual-studio-2026-with-the-14-30-toolset-selected-via-vcvarsall-vcvars-ver-14-30">3 October 2026, RTX 5090 first run (an RTX 5090 on Windows, CUDA 12.8 runtime, driver 13.4, Visual Studio 2026 with the 14.30 toolset selected via vcvarsall -vcvars_ver=14.30)</a></li><li><a href="#2026-10-03-sim-finality-v2-py-finality-rule-v2-with-latency-partitions-and-eclipses-model-not-hardware">2026-10-03  sim/finality_v2.py, finality rule V2 with latency, partitions and eclipses (model, not hardware)</a></li><li><a href="#2026-10-03-proto-metal-memory-hard-dataset-cache-8-dependent-reads-metal-only-cuda-pack-emulated">2026-10-03  proto-metal memory-hard dataset (cache + 8 dependent reads), Metal only; CUDA pack emulated</a></li><li><a href="#2026-10-03-rusty-kaspa-base-build-and-3-node-devnet-on-the-apple-m5-max-consensus-engineer-pre-fork-proof">2026-10-03  rusty-kaspa base build and 3-node devnet on the Apple M5 Max (consensus-engineer, pre-fork proof)</a></li><li><a href="#3-october-2026-rtx-5090-memory-hard-dataset-pack-igneum-genesis-mh">3 October 2026, RTX 5090, memory-hard dataset (pack igneum-genesis-mh)</a></li><li><a href="#2026-10-03-proto-vdf-wesolowski-vdf-between-the-certified-checkpoint-and-the-program-seed-epoch-10-min-era-1-h">2026-10-03  proto-vdf, Wesolowski VDF between the certified checkpoint and the program seed (epoch 10 min, era 1 h)</a></li><li><a href="#2026-10-03-igneum-pow-rust-crate-bit-exact-with-proto-metal-consensus-engineer">2026-10-03  igneum-pow: Rust crate bit-exact with proto-metal (consensus-engineer)</a></li><li><a href="#3-october-2026-proto-opencl-opencl-path-built-and-proven-without-amd-silicon-apple-opencl-1-2-pocl-cpu-emulator">3 October 2026, proto-opencl: OpenCL path built and proven without AMD silicon (Apple OpenCL 1.2, pocl, CPU emulator)</a></li><li><a href="#3-october-2026-amd-gfx1036-ryzen-7-9800x3d-integrated-rdna-2-graphics-1-compute-unit-amd-opencl-2-1-driver-3652-0">3 October 2026, AMD gfx1036 (Ryzen 7 9800X3D integrated RDNA 2 graphics, 1 compute unit), AMD OpenCL 2.1 driver 3652.0</a></li><li><a href="#3-october-2026-rtx-5090-through-nvidia-opencl-fourth-compiler-path-on-the-same-card">3 October 2026, RTX 5090 through NVIDIA OpenCL (fourth compiler path on the same card)</a></li><li><a href="#3-october-2026-igneum-node-devnet-v0-3-node-igneum-devnet-at-1-bps-with-the-80-20-coinbase-and-vote-key-hash-consensus-engineer">3 October 2026, igneum-node devnet v0: 3-node igneum-devnet at 1 BPS with the 80/20 coinbase and vote_key_hash (consensus-engineer)</a></li><li><a href="#3-october-2026-first-devnet-blocks-on-the-real-lottery-hash-cpu-then-metal-gpu-three-worker-implementations-consensus-engineer">3 October 2026, first devnet blocks on the real lottery hash: CPU, then Metal GPU, three worker implementations (consensus-engineer)</a></li><li><a href="#3-october-2026-windows-node-package-igneumd-cross-compiled-for-x86-64-pc-windows-gnu-two-peer-sync-test-consensus-engineer">3 October 2026, Windows node package: igneumd cross-compiled for x86_64-pc-windows-gnu, two-peer sync test (consensus-engineer)</a></li><li><a href="#3-october-2026-r3-26-m15-pow-checked-after-the-cheap-checks-cache-build-cap-attack-before-and-after-consensus-engineer">3 October 2026, R3.26 / M15: PoW checked after the cheap checks, cache-build cap, attack before and after (consensus-engineer)</a></li><li><a href="#3-october-2026-difficulty-controller-devnet-record-simulator-igneum-dual-lane-rule-3-node-cpu-test-network-consensus-engineer">3 October 2026, difficulty controller: devnet record, simulator, Igneum dual-lane rule, 3-node CPU test network (consensus-engineer)</a></li><li><a href="#3-october-2026-igneum-node-devnet-v2-sustained-mining-finality-rule-v2-on-a-four-miner-test-network-and-as-a-follower-of-the-live-devnet-consensus-engineer-and-cryptographer">3 October 2026, igneum-node devnet v2: sustained-mining finality rule v2 on a four-miner test network, and as a follower of the live devnet (consensus-engineer and cryptographer)</a></li><li><a href="#3-october-2026-execution-layer-devnet-v3-revm-over-the-selected-chain-3-node-simnet-viem-smoke-test-execution-engineer">3 October 2026, execution layer devnet v3: revm over the selected chain, 3-node simnet, viem smoke test (execution-engineer)</a></li><li><a href="#2026-10-03-consensus-attack-harness-consensus-engineer-catalogue-run-on-the-ordering-layer-node">2026-10-03, consensus attack harness (consensus-engineer), catalogue run on the ordering-layer node</a></li><li><a href="#3-october-2026-weak-program-census-400-000-program-runs-through-the-cpu-reference-the-redundant-load-finding-and-the-rules-for-m5-and-m6-cryptographer">3 October 2026, weak-program census: 400,000 program runs through the CPU reference, the redundant-load finding, and the rules for M5 and M6 (cryptographer)</a></li><li><a href="#3-october-2026-proving-v0-first-sp1-proof-of-an-igneum-block-apple-m5-max-cpu-loaded-machine-execution-engineer-proving">3 October 2026, proving v0: first SP1 proof of an Igneum block, Apple M5 Max CPU, loaded machine (execution-engineer, proving)</a></li><li><a href="#2026-10-03-execution-layer-attack-suite-malformed-txs-nonce-games-rpc-fuzz-pgas-exhaustion-reorgs-registry-abuse-execution-test-engineer">2026-10-03  execution layer attack suite: malformed txs, nonce games, RPC fuzz, pgas exhaustion, reorgs, registry abuse (execution test engineer)</a></li><li><a href="#4-october-2026-sim-economy-mining-versus-proving-under-stress-agent-based-economist-model-not-hardware">4 October 2026, sim/economy: mining versus proving under stress, agent-based (economist; model, not hardware)</a></li><li><a href="#2026-10-04-execution-layer-attack-fixes-f-exec-a-mempool-gas-limit-bound-and-f-exec-b-pgas-abort-rule-spec-7-5-execution-engineer">2026-10-04  execution layer attack fixes: F-exec-A (mempool gas-limit bound) and F-exec-B (pgas abort rule, spec 7.5) (execution-engineer)</a></li><li><a href="#3-october-2026-per-identity-hash-rate-decay-on-the-rtx-5090-diagnosis-and-metal-reproduction-miner-community-lead">3 October 2026, per-identity hash rate "decay" on the RTX 5090: diagnosis and Metal reproduction (miner-community-lead)</a></li><li><a href="#2026-10-04-finality-v2-attack-harness-seven-hostile-scenarios-on-a-six-voter-private-test-network-consensus-test-engineer-cryptographer">2026-10-04  finality v2 attack harness: seven hostile scenarios on a six-voter private test network (consensus test engineer, cryptographer)</a></li><li><a href="#4-october-2026-difficulty-rule-under-attack-pool-hopping-pulsed-rental-timestamp-stretching-short-lane-oscillation-epoch-games-polluted-window-block-flood-consensus-test-engineer">4 October 2026, difficulty rule under attack: pool hopping, pulsed rental, timestamp stretching, short-lane oscillation, epoch games, polluted window, block flood (consensus test engineer)</a></li><li><a href="#2026-10-04-finality-fixes-f17-and-f1-aggregators-drawn-by-weight-first-month-gate-min-daa-window-attack-scenarios-2-and-5-before-and-after-consensus-engineer">2026-10-04  finality fixes F17 and F1: aggregators drawn by weight, first-month gate min_daa = window; attack scenarios 2 and 5 before and after (consensus-engineer)</a></li><li><a href="#4-october-2026-difficulty-rule-timestamp-attack-fixed-tight-bounds-sanitised-clock-target-floor-simulator-regression-3-node-forger-test-consensus-engineer">4 October 2026, difficulty rule: timestamp attack fixed (tight bounds, sanitised clock, target floor), simulator regression, 3-node forger test (consensus-engineer)</a></li><li><a href="#4-october-2026-devnet-v4-integration-nine-branches-merged-3-node-test-network-on-the-merged-node-windows-cross-build-release-engineer">4 October 2026, devnet-v4 integration: nine branches merged, 3-node test network on the merged node, Windows cross-build (release engineer)</a></li><li><a href="#4-october-2026-generator-version-2-adopted-exact-load-count-fresh-source-loads-program-acceptance-every-vector-re-cut-three-workers-re-checked-20-000-program-census-devnet-v4-binaries-rebuilt-cryptographer">4 October 2026, generator version 2 adopted: exact load count, fresh-source loads, program acceptance; every vector re-cut, three workers re-checked, 20,000-program census, devnet-v4 binaries rebuilt (cryptographer)</a></li><li><a href="#2026-10-04-finality-floor-2-3-the-total-weight-floor-raised-from-17-30-to-two-thirds-simulator-a-to-l-re-run-attack-scenarios-6a-and-6b-on-a-three-node-six-voter-network-cryptographer">2026-10-04  finality floor 2/3: the total-weight floor raised from 17/30 to two thirds, simulator A to L re-run, attack scenarios 6A and 6B on a three-node, six-voter network (cryptographer)</a></li><li><a href="#4-october-2026-proving-v0-on-the-rtx-5090-first-gpu-proof-of-an-igneum-block-wsl2-sp1-6-8-1-cuda">4 October 2026, proving v0 on the RTX 5090: first GPU proof of an Igneum block (WSL2, SP1 6.8.1 cuda)</a></li><li><a href="#4-october-2026-devnet-v4-cut-over-generator-v2-2-3-floor-three-nodes-and-a-seed-on-a-fresh-chain">4 October 2026, devnet v4 cut-over: generator v2, 2/3 floor, three nodes and a seed on a fresh chain</a></li><li><a href="#4-october-2026-one-click-windows-workers-what-the-apple-m5-max-could-measure-no-nvidia-gpu-here">4 October 2026, one-click Windows workers: what the Apple M5 Max could measure (no NVIDIA GPU here)</a></li><li><a href="#4-october-2026-first-hourly-program-swap-on-the-live-devnet-compile-ahead-no-pause-two-cards">4 October 2026, first hourly program swap on the live devnet: compile-ahead, no pause, two cards</a></li><li><a href="#4-october-2026-proving-devnet-v4-shards-on-the-apple-m5-max-cpu-loaded-machine-execution-engineer-proving">4 October 2026, proving: devnet v4 shards on the Apple M5 Max CPU, loaded machine (execution-engineer, proving)</a></li><li><a href="#2026-10-04-fast-time-60x-test-profile-linux-cross-compile-from-the-apple-m5-max-ci-on-every-push-consensus-engineer">2026-10-04, fast time (60x test profile), Linux cross-compile from the Apple M5 Max, CI on every push (consensus-engineer)</a></li><li><a href="#4-october-2026-first-finality-lock-on-the-live-devnet-checkpoint-242-at-77-4-of-all-weight-two-hours-after-genesis">4 October 2026, first finality lock on the live devnet: checkpoint 242 at 77.4% of all weight, two hours after genesis</a></li><li><a href="#4-october-2026-the-gfx1036-worker-fault-and-what-the-apple-m5-max-could-and-could-not-reproduce">4 October 2026, the gfx1036 worker fault and what the Apple M5 Max could and could not reproduce</a></li><li><a href="#4-october-2026-a-node-60-s-behind-the-clock-is-silently-dead-the-rtx-5090-windows-rig-s-first-app-install">4 October 2026, a node 60 s behind the clock is silently dead (the RTX 5090 Windows rig's first app install)</a></li><li><a href="#4-october-2026-first-machine-on-the-igneum-miner-app-the-rtx-5090-windows-rig-s-rtx-5090-at-118-mh-s-via-setup-exe">4 October 2026, first machine on the Igneum Miner app: the RTX 5090 Windows rig's RTX 5090 at 118 MH/s, via Setup.exe</a></li><li><a href="#4-october-2026-difficulty-rule-v2-the-live-oscillation-its-cause-the-dag-replay-the-fix-behind-a-height-switch-consensus-engineer">4 October 2026, difficulty rule v2: the live oscillation, its cause, the DAG replay, the fix behind a height switch (consensus-engineer)</a></li><li><a href="#4-october-2026-the-observer-stored-nothing-for-78-minutes-then-7-022-blocks-in-two-minutes">4 October 2026, the observer stored nothing for 78 minutes, then 7,022 blocks in two minutes</a></li><li><a href="#4-october-2026-the-rtx-5090-windows-rig-at-the-14-20-boundary-a-worker-stuck-on-the-previous-epoch-root-cause-from-the-uploads">4 October 2026, the RTX 5090 Windows rig at the 14:20 boundary: a worker stuck on the previous epoch (root cause from the uploads)</a></li><li><a href="#4-october-2026-shard-proving-on-the-rtx-5090-a-full-shard-compressed-in-10-9-s-a-two-shard-block-aggregated-in-2-2-s-all-verified">4 October 2026, shard proving on the RTX 5090: a full shard compressed in 10.9 s, a two-shard block aggregated in 2.2 s, all verified</a></li><li><a href="#4-october-2026-first-outside-machine-on-the-devnet-an-apple-silicon-laptop-through-the-igneum-miner-app">4 October 2026, first outside machine on the devnet: an Apple silicon laptop through the Igneum Miner app</a></li><li><a href="#2026-10-04-afternoon-proving-v0-end-to-end-on-a-3-node-test-network-mac-cpu-prover">2026-10-04 (afternoon)  proving v0 end to end on a 3-node test network (Mac, CPU prover)</a></li><li><a href="#4-october-2026-cloud-devnet-12-igneumd-nodes-in-5-locations-inter-region-latency-two-singapore-partitions-hash-rate-steps-consensus-engineer">4 October 2026, cloud devnet: 12 igneumd nodes in 5 locations, inter-region latency, two Singapore partitions, hash-rate steps (consensus-engineer)</a></li><li><a href="#4-october-2026-correction-the-78-minute-observer-gap-was-the-apple-m5-max-hibernating">4 October 2026, correction: the 78-minute observer gap was the Apple M5 Max hibernating</a></li><li><a href="#2026-10-04-afternoon-the-app-s-prover-loop-end-to-end-on-the-apple-m5-max-igneum-miner-engine-packaged-binaries-private-test-network">2026-10-04 (afternoon)  the app's prover loop end to end on the Apple M5 Max (Igneum Miner engine, packaged binaries, private test network)</a></li><li><a href="#4-october-2026-difficulty-v2-rollout-rehearsal-on-the-12-node-the-cloud-provider-network-binaries-for-the-devnet-the-devnet-plan-rollout-engineer">4 October 2026, difficulty v2 rollout rehearsal on the 12-node the cloud provider network, binaries for the devnet, the devnet plan (rollout engineer)</a></li><li><a href="#4-october-2026-difficulty-rule-v2-activated-on-the-live-devnet-at-daa-33-000-by-height-switch-no-fresh-chain">4 October 2026, difficulty rule v2 activated on the live devnet at DAA 33,000 by height switch, no fresh chain</a></li><li><a href="#4-october-2026-first-machine-in-the-united-states-a-windows-laptop-on-an-intel-integrated-gpu-synced-and-voting">4 October 2026, first machine in the United States: a Windows laptop on an Intel integrated GPU, synced and voting</a></li><li><a href="#4-october-2026-evening-finality-rule-v3-the-frozen-weight-table-f21-and-the-certificate-fold-f22-simulator-unit-tests-fast-time-3-node-network-with-300-ms-links-finality-engineer">4 October 2026 (evening), finality rule v3: the frozen weight table (F21) and the certificate fold (F22), simulator, unit tests, fast-time 3-node network with 300-ms links (finality engineer)</a></li><li><a href="#4-october-2026-miner-performance-variant-racing-metal-worker-on-the-m5-max-the-rtx-5090-job-is-ready-not-run">4 October 2026, miner performance: variant racing (Metal worker on the M5 Max; the RTX 5090 job is ready, not run)</a></li><li><a href="#4-october-2026-miner-fault-guards-and-the-app-watchdog-measured-against-a-fake-worker-miner-community-lead-app-owner">4 October 2026, miner fault guards and the app watchdog measured against a fake worker (miner-community-lead, app owner)</a></li><li><a href="#4-october-2026-evening-the-software-dev-fee-measured-on-a-test-network-9-fee-blocks-in-785-the-chain-and-the-miners-counters-agree">4 October 2026 (evening), the software dev fee measured on a test network: 9 fee blocks in 785, the chain and the miners' counters agree</a></li><li><a href="#4-october-2026-night-ledger-m30-the-block-and-transaction-floods-grew-the-node-by-256-mib-per-epoch-roll-fixed-by-sharing-the-pow-cache-across-the-epochs-of-a-day-memory-engineer">4 October 2026 (night), ledger M30: the block and transaction floods grew the node by 256 MiB per epoch roll, fixed by sharing the PoW cache across the epochs of a day (memory engineer)</a></li><li><a href="#4-october-2026-night-round-4-consensus-items-f23-f24-g12-x18-and-m31-unit-tests-and-fast-time-3-node-runs-against-the-control-consensus-engineer">4 October 2026 (night), round-4 consensus items F23, F24, G12, X18 and M31: unit tests and fast-time 3-node runs against the control (consensus engineer)</a></li><li><a href="#5-october-2026-live-devnet-the-first-shards-proven-verified-and-paid">5 October 2026, live devnet: the first shards proven, verified and paid</a></li><li><a href="#5-october-2026-the-program-id-split-why-the-apple-m5-max-rejected-the-rtx-5090-windows-rig-s-proofs-and-the-verifier-at-114-s">5 October 2026, the program id split: why the Apple M5 Max rejected the RTX 5090 Windows rig's proofs, and the verifier at 114 s</a></li><li><a href="#5-october-2026-afternoon-live-devnet-real-transactions-the-first-non-empty-shard-proven-and-paid-and-the-exporter-s-block-structure-fixed-execution-engineer">5 October 2026 (afternoon), live devnet: real transactions, the first non-empty shard proven and paid, and the exporter's block structure fixed (execution engineer)</a></li><li><a href="#5-october-2026-the-prover-carries-both-fee-tables-and-the-height-switch-one-pinned-guest-on-either-side-of-daa-210-000">5 October 2026, the prover carries both fee tables and the height switch: one pinned guest on either side of DAA 210,000</a></li><li><a href="#5-october-2026-night-the-c4-fix-certificate-driven-reorg">5 October 2026 (night), the C4 fix: certificate-driven reorg</a></li><li><a href="#5-october-2026-evening-fud-ledger-sweep-round-6">5 October 2026 (evening), FUD ledger sweep round 6</a></li><li><a href="#5-october-2026-evening-the-9070-xt-on-the-egpu-why-17-9-mh-s-and-what-moved">5 October 2026 (evening), the 9070 XT on the eGPU: why 17.9 MH/s, and what moved</a></li><li><a href="#5-october-2026-night-ember-tune-the-two-knob-efficiency-tune-the-fleet-prior-and-what-the-three-card-windows-rig-rtx-5090-rtx-4070-rx-9070-xt-could-measure-tonight-miner-community-lead">5 October 2026 (night), Ember Tune: the two-knob efficiency tune, the fleet prior, and what the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) could measure tonight (miner-community-lead)</a></li><li><a href="#5-october-2026-night-read-width-of-the-lottery-hash-4-16-and-64-byte-loads-a-per-load-mix-a-written-scratch-three-cards-gate-1-experiment-cryptographer">5 October 2026 (night), read width of the lottery hash: 4, 16 and 64-byte loads, a per-load mix, a written scratch; three cards (gate 1 experiment, cryptographer)</a></li><li><a href="#5-october-2026-night-the-hot-table-on-the-m5-max-a-second-table-sized-to-gpu-cache-beside-the-1-gib-dataset-counter-asic-2-0-layer-5">5 October 2026 (night), the hot table on the M5 Max: a second table sized to GPU cache beside the 1 GiB dataset (Counter ASIC 2.0 layer 5)</a></li><li><a href="#5-october-2026-night-mixer-x4-and-the-cache-growth-rule-the-class-v3-dataset-construction-with-the-x8-candidate-counter-asic-2-0-branch-ca2-mixer-on-ca2-v3-6c75dad-cryptographer-s-lane">5 October 2026 (night), mixer x4 and the cache growth rule: the class v3 dataset construction, with the x8 candidate (Counter ASIC 2.0; branch ca2-mixer on ca2-v3 6c75dad; cryptographer's lane)</a></li><li><a href="#5-october-2026-evening-evm-transaction-relay-three-nodes-in-a-chain-every-transaction-sent-to-one-end-included-by-the-other-two-miners-execution-and-networking-engineer">5 October 2026 (evening), EVM transaction relay: three nodes in a chain, every transaction sent to one end included by the other two miners (execution and networking engineer)</a></li><li><a href="#5-october-2026-night-the-sp1-cpu-prover-on-the-three-card-windows-rig-rtx-5090-rtx-4070-rx-9070-xt-beside-the-miners-and-the-backend-survey-no-zkvm-proves-on-amd-amd-prove-agent">5 October 2026 (night), the SP1 CPU prover on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) beside the miners, and the backend survey: no zkVM proves on AMD (amd-prove agent)</a></li><li><a href="#counter-asic-2-0-the-numbers">Counter ASIC 2.0, the numbers</a></li><li><a href="#5-october-2026-evening-proving-v1-segment-records-the-chain-rule-the-unproven-rule-what-was-measured-tonight-proving-engineer">5 October 2026 (evening), proving v1: segment records, the chain rule, the unproven rule; what was measured tonight (proving engineer)</a></li><li><a href="#5-october-2026-night-dp4a-class-throughput-on-the-m5-max-the-dot4-emulation-against-the-alu-chain-counter-asic-2-0-layer-7">5 October 2026 (night), dp4a-class throughput on the M5 Max: the dot4 emulation against the ALU chain (Counter ASIC 2.0 layer 7)</a></li><li><a href="#5-october-2026-layer-3-scratch-soundness-counter-asic-2-0-step-4-branch-ca2-soundness-on-readwidth-b970dda-cryptographer">5 October 2026, layer 3 scratch soundness (Counter ASIC 2.0 step 4; branch ca2-soundness on readwidth b970dda; cryptographer)</a></li><li><a href="#5-october-2026-night-epoch-length-as-an-era-parameter-counter-asic-2-0-layer-9-the-apple-m5-max-s-compile-ahead-per-program">5 October 2026 (night), epoch length as an era parameter (Counter ASIC 2.0, layer 9): the Apple M5 Max's compile-ahead per program</a></li><li><a href="#6-october-2026-counter-asic-3-0-item-2-the-per-day-derivation">6 October 2026, Counter ASIC 3.0 item 2: the per-day derivation</a></li><li><a href="#6-october-2026-counter-asic-3-0-item-8-program-work-in-the-latency-shadow">6 October 2026, Counter ASIC 3.0 item 8: program work in the latency shadow</a></li><li><a href="#6-october-2026-counter-asic-3-0-item-6-the-reserve-families-step-costs">6 October 2026, Counter ASIC 3.0 item 6: the reserve families' step costs</a></li><li><a href="#6-october-2026-counter-asic-3-0-gate-run-the-hash-side">6 October 2026, Counter ASIC 3.0 gate run, the hash side</a></li><li><a href="#5-october-2026-night-aggregation-cost-on-the-rtx-5090-what-a-per-block-aggregation-spends-and-what-each-lever-gives-proving-engineer-agg-cost">5 October 2026 (night), aggregation cost on the RTX 5090: what a per-block aggregation spends and what each lever gives (proving engineer, agg-cost)</a></li><li><a href="#6-october-2026-12-25-to-13-20z-the-finality-route-why-26-fresh-nodes-lost-the-seed-every-checkpoint-fork-fin-route-0313-5a339733-on-83089544-release-engineer">6 October 2026, 12:25 to 13:20Z, the finality route: why 26 fresh nodes lost the seed every checkpoint (fork `fin-route-0313` 5a339733 on 83089544; release engineer)</a></li><li><a href="#6-october-2026-16-01z-ember-run-6-on-the-three-card-windows-rig-rtx-5090-rtx-4070-rx-9070-xt-ember-tune-pc1-6-0-3-13-kit-6-564bdea-elevated-one-click">6 October 2026, 16:01Z: Ember run 6 on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) (ember-tune-pc1-6, 0.3.13 + kit-6 = 564bdea, elevated, one click)</a></li><li><a href="#prover-tiers-on-real-cards-the-rented-fleet-6-october-2026-branch-gpu-fleet">Prover tiers on real cards: the rented fleet, 6 October 2026 (branch gpu-fleet)</a></li><li><a href="#rental-cost-of-hash-6-october-2026-branch-gpu-fleet-what-a-gh-s-costs-by-the-hour-against-the-devnet">Rental cost of hash, 6 October 2026 (branch gpu-fleet): what a GH/s costs by the hour against the devnet</a></li></ol></nav>
 <article><h1 id="igneum-bench-log">Igneum bench log</h1>
 <p>Append-only. Every number here was measured on the machine named, on the date given.</p>
 <h2 id="2026-10-03-proto-metal-igneum-bench-first-run">2026-10-03  proto-metal / igneum-bench, first run</h2>
@@ -227,9 +184,9 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <h2 id="3-october-2026-igneum-node-devnet-v0-3-node-igneum-devnet-at-1-bps-with-the-80-20-coinbase-and-vote-key-hash-consensus-engineer">3 October 2026, igneum-node devnet v0: 3-node igneum-devnet at 1 BPS with the 80/20 coinbase and vote_key_hash (consensus-engineer)</h2>
 <p>Machine: Apple M5 Max (18 logical cores), rustc 1.99.0, fork <code>vendor/igneum-node</code> at commit "Build: forward the igneum-pow feature" on top of rusty-kaspa v2.1.0 <code>01b532e8</code>. Release build of <code>kaspad</code> and <code>igneum-miner</code>; the kHeavyHash stub engine (default feature set); <code>cargo check -p kaspad --features igneum-pow</code> also builds. Network: three <code>kaspad --devnet --nodnsseed --disable-upnp --enable-unsynced-mining</code> nodes, P2P 26611/26621/26631, gRPC 26610/26620/26630, nodes 2 and 3 <code>--connect</code> to node 1 and node 3 also to node 2; network name <code>igneum-devnet</code>, k 18, merge depth 3,600 blocks, DAA 661 samples x 4 blocks, genesis bits 0x1e020000 (2^23 expected hashes per block). Miners: three <code>igneum-miner mine</code> processes, 6 threads each, one per node, 960 s, each with its own vote-key label: 2.21 MH/s each (6.63 MH/s total), found 253 + 284 + 270 = 807 blocks, 0 rejected. Blocks per second: 0.84 on all three nodes over the 901.9 s watch window (755 blocks each); expected 0.79 from hash rate over genesis difficulty, then the DAA lowered difficulty from 4,194,304 to 3,444,348 after its 600-block minimum window (block 600 to 711), still converging to 1.00 when the run ended. Propagation: block count, DAA score and sink hash identical on all three nodes at 90 of 90 ten-second samples; 1.11 parents and 1.11 mergeset per block on average, tips stayed at 1 (three serial CPU miners rarely collide). vote_key_hash: <code>igneum-miner inspect 40</code> read the same 40 selected-chain blocks from all three nodes over gRPC and found the header's vote_key_hash identical on every node for 40 of 40 blocks, with the three miners' distinct hashes (17 + 17 + 6 blocks) all present, so the field round-trips through the template RPC, submit, p2p relay and the header hash. Emission: 80/20 exact on 39 of 39 single-payee coinbases (the 40th merged two blues, three outputs, pool share still 0.2000); at DAA 806 the payload subsidy was 317,767,704 units (launch ramp day 0, 10.03%), split 254,213,284 to the miner and 63,553,320 to the OP_RETURN <code>igneum-proving-pool-v0</code> output. Unit tests, release profile: kaspa-consensus-core igneum 8 pass (subsidy table, ramp, split, cap), params window test 1 pass, kaspa-pow 5 pass (stub) and 6 pass with <code>--features igneum-pow</code> (engine smoke, one 256 MiB cache, 0.39 s), kaspa-consensus coinbase 8 pass. Per-second subsidy, 8 decimals: 3,168,808,781 units (31.68808781 coins) for years 0 to 2, 1,584,404,390 for years 2 to 4, 792,202,195 for years 4 to 6, 1 unit in period 31, 0 from period 32; ramp day 0 is 316,880,878; the sum is under the 4,000,000,000-coin cap by less than 100 coins. Not done: the devnet ran on the kHeavyHash stub, not the lottery engine (the miner has no igneum-pow path yet and the lane hash does not absorb the header); no VDF seed, no finality, no prover payout; 8 versus 18 decimals open (docs/fork-divergence.md).</p>
 <h2 id="3-october-2026-first-devnet-blocks-on-the-real-lottery-hash-cpu-then-metal-gpu-three-worker-implementations-consensus-engineer">3 October 2026, first devnet blocks on the real lottery hash: CPU, then Metal GPU, three worker implementations (consensus-engineer)</h2>
-<p>Machine: Apple M5 Max (18 logical cores, 40 GPU cores), rustc 1.99.0, Swift 5.8.1, fork <code>vendor/igneum-node</code> at "PoW: header-bound lottery engine, real-hash miner modes, genesis bits 0x1e400000" plus the overnight genesis commit; <code>igneum-pow</code> at "igneum-pow: header binding ...". Release builds with <code>--features igneum-pow</code>. Binding (spec 01 section 1.6, O-1.9, <code>igneum-pow/src/bind.rs</code>): I = seed_words_from_bytes("igneum-block/" || H || nonce_hi_le32), lane nonce = low 32 bits of the 64-bit header nonce, H = header hash with the nonce zeroed and the timestamp kept, pow256 = lane hash in the top 64 bits with zero low bits (pow &lt;= target is exactly lane &lt;= target &gt;&gt; 192). Interim day seed "igneum-day/" || day_le64 (day = timestamp_ms / 86,400,000); epoch seed = the 32 bytes of the epoch block hash (genesis for epoch 0). 8 bound vectors in <code>igneum-pow/README.md</code>; 29 crate tests pass; the 288 pack vectors and the pack files are unchanged, <code>program_bound.metal</code>, <code>kernel_bound.cu</code> and <code>kernel_bound.cl</code> are new pack files. CPU rate on the real hash: 0.44 ms per 32-lane warp on one core (crate bench); 0.142 MH/s with one 6-thread miner (1.35 ms per warp per thread); 0.294 MH/s with three 6-thread miners at once (2.0 ms per warp per thread, memory-latency bound), 0.37 MH/s later in the run. Genesis bits for the CPU devnet: 0x1e400000 = 2^18 expected hashes per block. CPU devnet, 3 nodes (node 1 RPC and p2p on 0.0.0.0, ports 26610/26611, 26620/26621, 26630/26631), three 6-thread <code>igneum-miner mine --engine igneum-pow</code>, 660 s: found 252 + 309 + 272 = 833 blocks, 0 rejected; watch window 641 s: 825 blocks on all three nodes = 1.29 blocks/s; sink identical on all nodes at 61 of 64 samples (tips 1 or 2, twice 3). DAA: 1.43 blocks/s over the first 600 blocks at difficulty 131,072, then difficulty 184,000 to 187,000 (1.41x) and 1.03 blocks/s over blocks 610 to 816. Each node logged "PoW accepted &lt;hash&gt; by igneum-lottery-v1-bound" 833 times, 0 rejections during the run. <code>igneum-miner bad-nonce</code>: Reject(BlockInvalid) and a "PoW rejected ... by igneum-lottery-v1-bound" line. <code>inspect 30</code>: vote_key_hash identical on all 3 nodes for 30 of 30, 80/20 exact on 19 of 19 single-payee coinbases. Epoch 0 seed = devnet genesis hash 03115da0...d86b, day 20729, program 104 loads/hash. Metal GPU worker (<code>proto-metal/igneum-bench --serve</code>, runtime-compiled <code>igneum_hash_bound</code>, init words in buffer 3, 2^22 nonces per dispatch, CPU-side scan of the 64-bit outputs) driven by <code>igneum-miner --worker</code> on node 1 of the same devnet, 300 s: 506 jobs of 2^24 nonces, 5,636 blocks found and accepted, 0 rejected, 0 CPU/GPU mismatches (every found nonce is re-hashed on the CPU before submit); nodes 833 -&gt; 5,073 blocks on all three (14.57 blocks/s over the 291 s watch window), sink identical at 28 of 29 samples; difficulty 180,562 -&gt; 7,134,312 (39x) and still rising at the end. Epoch change crossed live at DAA 3,600: new seed 76c39fcf..., 128-load program compiled by the worker in 129 ms (first program 6.5 ms), no rejected blocks across the change. Rate through the worker: 32.4 MH/s inside jobs, 28.2 MH/s wall, against 45.2 MH/s raw bench (<code>igneum-bench</code> 2^22 x 4 batches): the gap is the read-back and CPU scan per dispatch, one command buffer per dispatch, and the template round trip per job. Early in the run one job found about 45 sibling blocks of one template; the miner now submits one block per job. Overnight devnet (started 19:07 UTC): genesis bits 0x1d100000 = 2^28 expected hashes per block, sized for RTX 5090 229 + M5 Max 45 + gfx1036 4 = 278 MH/s (1.04 blocks/s); genesis hash edc4fa84...fb07; epoch 0 program 136 loads/hash compiled in 69.5 ms on Metal; node 1 alone (0.0.0.0:26610/26611, <code>caffeinate -dims</code>, logs /tmp/igneum-devnet/node1.log) with the Metal worker (<code>/tmp/igneum-devnet/metal-worker.log</code>): 31 blocks in 273 s = 0.11 blocks/s at 31.1 MH/s, as expected for 2^28 until the RTX 5090 machine joins. Worker implementations, all bit-exact with <code>igneum-pow hash-bound</code> for a 96-nonce job across the 2^32 lane boundary (nonces 4294967264 to 4294967359, prehash ab x 32, devnet seeds): Metal (M5 Max GPU), OpenCL (<code>proto-opencl/host.c --serve</code>, Apple OpenCL 1.2 on the M5 Max, local-memory exchange, <code>--vendor</code> device filter added), CUDA (<code>proto-cuda/host.cu --serve</code> with the pack's <code>kernel_bound.cu</code>, through the clang emulation shim: bench PASS on the Rust-exported devnet pack, serve job bit-exact, seed-mismatch error exercised). CUDA and OpenCL are built ahead of time per pack; the Windows launcher re-exports and rebuilds at each epoch or day change (miner exit 42). <code>igneum-miner.exe</code> cross-compiled for x86_64-pc-windows-gnu with Homebrew mingw-w64 (9.4 MB; no rocksdb in the miner's closure). Not done: no NVIDIA or AMD run of the bound kernels yet (the Windows package <code>igneum-mine-test.zip</code> is the next step); NVRTC and runtime OpenCL rebuilds inside the workers; the block level for pruning proofs on a lane-only pow value; 8 vs 18 decimals; the VDF seeds and finality.</p>
+<p>Machine: Apple M5 Max (18 logical cores, 40 GPU cores), rustc 1.99.0, Swift 5.8.1, fork <code>vendor/igneum-node</code> at "PoW: header-bound lottery engine, real-hash miner modes, genesis bits 0x1e400000" plus the overnight genesis commit; <code>igneum-pow</code> at "igneum-pow: header binding ...". Release builds with <code>--features igneum-pow</code>. Binding (spec 01 section 1.6, O-1.9, <code>igneum-pow/src/bind.rs</code>): I = seed_words_from_bytes("igneum-block/" || H || nonce_hi_le32), lane nonce = low 32 bits of the 64-bit header nonce, H = header hash with the nonce zeroed and the timestamp kept, pow256 = lane hash in the top 64 bits with zero low bits (pow &lt;= target is exactly lane &lt;= target &gt;&gt; 192). Interim day seed "igneum-day/" || day_le64 (day = timestamp_ms / 86,400,000); epoch seed = the 32 bytes of the epoch block hash (genesis for epoch 0). 8 bound vectors in <code>igneum-pow/README.md</code>; 29 crate tests pass; the 288 pack vectors and the pack files are unchanged, <code>program_bound.metal</code>, <code>kernel_bound.cu</code> and <code>kernel_bound.cl</code> are new pack files. CPU rate on the real hash: 0.44 ms per 32-lane warp on one core (crate bench); 0.142 MH/s with one 6-thread miner (1.35 ms per warp per thread); 0.294 MH/s with three 6-thread miners at once (2.0 ms per warp per thread, memory-latency bound), 0.37 MH/s later in the run. Genesis bits for the CPU devnet: 0x1e400000 = 2^18 expected hashes per block. CPU devnet, 3 nodes (node 1 RPC and p2p on 0.0.0.0, ports 26610/26611, 26620/26621, 26630/26631), three 6-thread <code>igneum-miner mine --engine igneum-pow</code>, 660 s: found 252 + 309 + 272 = 833 blocks, 0 rejected; watch window 641 s: 825 blocks on all three nodes = 1.29 blocks/s; sink identical on all nodes at 61 of 64 samples (tips 1 or 2, twice 3). DAA: 1.43 blocks/s over the first 600 blocks at difficulty 131,072, then difficulty 184,000 to 187,000 (1.41x) and 1.03 blocks/s over blocks 610 to 816. Each node logged "PoW accepted &lt;hash&gt; by igneum-lottery-v1-bound" 833 times, 0 rejections during the run. <code>igneum-miner bad-nonce</code>: Reject(BlockInvalid) and a "PoW rejected ... by igneum-lottery-v1-bound" line. <code>inspect 30</code>: vote_key_hash identical on all 3 nodes for 30 of 30, 80/20 exact on 19 of 19 single-payee coinbases. Epoch 0 seed = devnet genesis hash 03115da0...d86b, day 20729, program 104 loads/hash. Metal GPU worker (<code>proto-metal/igneum-bench --serve</code>, runtime-compiled <code>igneum_hash_bound</code>, init words in buffer 3, 2^22 nonces per dispatch, CPU-side scan of the 64-bit outputs) driven by <code>igneum-miner --worker</code> on node 1 of the same devnet, 300 s: 506 jobs of 2^24 nonces, 5,636 blocks found and accepted, 0 rejected, 0 CPU/GPU mismatches (every found nonce is re-hashed on the CPU before submit); nodes 833 -&gt; 5,073 blocks on all three (14.57 blocks/s over the 291 s watch window), sink identical at 28 of 29 samples; difficulty 180,562 -&gt; 7,134,312 (39x) and still rising at the end. Epoch change crossed live at DAA 3,600: new seed 76c39fcf..., 128-load program compiled by the worker in 129 ms (first program 6.5 ms), no rejected blocks across the change. Rate through the worker: 32.4 MH/s inside jobs, 28.2 MH/s wall, against 45.2 MH/s raw bench (<code>igneum-bench</code> 2^22 x 4 batches): the gap is the read-back and CPU scan per dispatch, one command buffer per dispatch, and the template round trip per job. Early in the run one job found about 45 sibling blocks of one template; the miner now submits one block per job. Overnight devnet (started 19:07 UTC): genesis bits 0x1d100000 = 2^28 expected hashes per block, sized for RTX 5090 229 + M5 Max 45 + gfx1036 4 = 278 MH/s (1.04 blocks/s); genesis hash edc4fa84...fb07; epoch 0 program 136 loads/hash compiled in 69.5 ms on Metal; node 1 alone (&lt;listen address&gt;/26611, <code>caffeinate -dims</code>, logs /tmp/igneum-devnet/node1.log) with the Metal worker (<code>/tmp/igneum-devnet/metal-worker.log</code>): 31 blocks in 273 s = 0.11 blocks/s at 31.1 MH/s, as expected for 2^28 until the RTX 5090 machine joins. Worker implementations, all bit-exact with <code>igneum-pow hash-bound</code> for a 96-nonce job across the 2^32 lane boundary (nonces 4294967264 to 4294967359, prehash ab x 32, devnet seeds): Metal (M5 Max GPU), OpenCL (<code>proto-opencl/host.c --serve</code>, Apple OpenCL 1.2 on the M5 Max, local-memory exchange, <code>--vendor</code> device filter added), CUDA (<code>proto-cuda/host.cu --serve</code> with the pack's <code>kernel_bound.cu</code>, through the clang emulation shim: bench PASS on the Rust-exported devnet pack, serve job bit-exact, seed-mismatch error exercised). CUDA and OpenCL are built ahead of time per pack; the Windows launcher re-exports and rebuilds at each epoch or day change (miner exit 42). <code>igneum-miner.exe</code> cross-compiled for x86_64-pc-windows-gnu with Homebrew mingw-w64 (9.4 MB; no rocksdb in the miner's closure). Not done: no NVIDIA or AMD run of the bound kernels yet (the Windows package <code>igneum-mine-test.zip</code> is the next step); NVRTC and runtime OpenCL rebuilds inside the workers; the block level for pruning proofs on a lane-only pow value; 8 vs 18 decimals; the VDF seeds and finality.</p>
 <h2 id="3-october-2026-windows-node-package-igneumd-cross-compiled-for-x86-64-pc-windows-gnu-two-peer-sync-test-consensus-engineer">3 October 2026, Windows node package: igneumd cross-compiled for x86_64-pc-windows-gnu, two-peer sync test (consensus-engineer)</h2>
-<p>Machine: Apple M5 Max, load average 60 to 110 (three other agents building), rustc 1.99.0, Homebrew mingw-w64 (gcc 16.2.0), Homebrew llvm (libclang). Worktree <code>vendor/igneum-node-win</code>, branch <code>windows-node</code> at <code>352495f6</code> (the rename commit <code>d62708a8</code> plus one miner change: <code>watch</code> prints <code>blue=</code> and <code>synced=</code> after <code>sink=</code>). Cross-compile: <code>cargo build --release -j 6 -p kaspad -p igneum-miner --features igneum-pow --target x86_64-pc-windows-gnu</code> at <code>nice -n 19</code>, 8 min 25 s from a clean target directory (recipe in <code>proto-cuda/windows-node/cross-build.sh</code>). <code>librocksdb-sys</code> (bindgen plus the bundled rocksdb and snappy C++) built with <code>LIBCLANG_PATH=/opt/homebrew/opt/llvm/lib</code>, <code>BINDGEN_EXTRA_CLANG_ARGS_x86_64_pc_windows_gnu="--target=x86_64-w64-mingw32 --sysroot=&lt;mingw sysroot&gt; -I&lt;mingw include&gt;"</code> and <code>CXX_x86_64_pc_windows_gnu=x86_64-w64-mingw32-g++</code>; zstd, lz4, bzip2, zlib, secp256k1 and mimalloc built with the mingw gcc. <code>igneumd.exe</code> 43,172,352 bytes, <code>igneum-miner.exe</code> 9,391,104 bytes. The exe imports <code>libstdc++-6.dll</code>: <code>-static-libstdc++</code> is ignored by the gcc driver rustc links with, and <code>-C link-arg=-static</code> (second full build, 8 min) does not cover a library rustc passes as <code>-Bdynamic</code>; the package ships <code>libstdc++-6.dll</code>, <code>libgcc_s_seh-1.dll</code> and <code>libwinpthread-1.dll</code> next to the exe (fix for next time: empty <code>CXXSTDLIB_x86_64_pc_windows_gnu</code> plus <code>-Wl,-Bstatic -lstdc++</code>). Not run on Windows yet. Sync test (native build of the same worktree, 20:44 to 20:46 UTC, live node on 26610/26611 untouched): node A on 27000/27001 with START-NODE.bat's flags (<code>--addpeer=&lt;lan-ip&gt;:26611 --listen=0.0.0.0:27001 --nodnsseed --disable-upnp --nologfiles</code>) connected and started IBD within 20 ms, had 5,144 headers and 1,386 blocks at 7 s, and from 17 s on matched the live node's block count, DAA score, blue score and sink at every 10-s sample over 60 s (5,157 to 5,175 blocks, sink identical 5 of 6 samples, <code>synced=true</code>); every header checked by <code>igneum-lottery-v1-bound</code>. Live node <code>peers</code> 1 -&gt; 2 -&gt; 1. Node B on 27010/27011 dialled A's listener, synced to the same sink within 25 s and learnt the live node from A (outbound 2): a node with <code>--addpeer</code> plus <code>--listen</code> accepts inbound connections (<code>--connect</code> would set the inbound limit to 0, <code>kaspad/src/daemon.rs</code>). SIGINT stopped both cleanly. Package: <code>igneum-node-windows.zip</code> from <code>proto-cuda/windows-node/make-package.sh</code> (exe, miner exe, src.zip snapshot of the worktree HEAD plus <code>igneum-pow/</code>, scripts, README). Build on the RTX 5090 machine (BUILD-NODE.bat) estimated at 15 to 25 minutes on the 9800X3D, approximate, untested.</p>
+<p>Machine: Apple M5 Max, load average 60 to 110 (three other agents building), rustc 1.99.0, Homebrew mingw-w64 (gcc 16.2.0), Homebrew llvm (libclang). Worktree <code>vendor/igneum-node-win</code>, branch <code>windows-node</code> at <code>352495f6</code> (the rename commit <code>d62708a8</code> plus one miner change: <code>watch</code> prints <code>blue=</code> and <code>synced=</code> after <code>sink=</code>). Cross-compile: <code>cargo build --release -j 6 -p kaspad -p igneum-miner --features igneum-pow --target x86_64-pc-windows-gnu</code> at <code>nice -n 19</code>, 8 min 25 s from a clean target directory (recipe in <code>proto-cuda/windows-node/cross-build.sh</code>). <code>librocksdb-sys</code> (bindgen plus the bundled rocksdb and snappy C++) built with <code>LIBCLANG_PATH=/opt/homebrew/opt/llvm/lib</code>, <code>BINDGEN_EXTRA_CLANG_ARGS_x86_64_pc_windows_gnu="--target=x86_64-w64-mingw32 --sysroot=&lt;mingw sysroot&gt; -I&lt;mingw include&gt;"</code> and <code>CXX_x86_64_pc_windows_gnu=x86_64-w64-mingw32-g++</code>; zstd, lz4, bzip2, zlib, secp256k1 and mimalloc built with the mingw gcc. <code>igneumd.exe</code> 43,172,352 bytes, <code>igneum-miner.exe</code> 9,391,104 bytes. The exe imports <code>libstdc++-6.dll</code>: <code>-static-libstdc++</code> is ignored by the gcc driver rustc links with, and <code>-C link-arg=-static</code> (second full build, 8 min) does not cover a library rustc passes as <code>-Bdynamic</code>; the package ships <code>libstdc++-6.dll</code>, <code>libgcc_s_seh-1.dll</code> and <code>libwinpthread-1.dll</code> next to the exe (fix for next time: empty <code>CXXSTDLIB_x86_64_pc_windows_gnu</code> plus <code>-Wl,-Bstatic -lstdc++</code>). Not run on Windows yet. Sync test (native build of the same worktree, 20:44 to 20:46 UTC, live node on 26610/26611 untouched): node A on 27000/27001 with START-NODE.bat's flags (<code>--addpeer=&lt;lan-ip&gt;:26611 --listen=&lt;listen address&gt; --nodnsseed --disable-upnp --nologfiles</code>) connected and started IBD within 20 ms, had 5,144 headers and 1,386 blocks at 7 s, and from 17 s on matched the live node's block count, DAA score, blue score and sink at every 10-s sample over 60 s (5,157 to 5,175 blocks, sink identical 5 of 6 samples, <code>synced=true</code>); every header checked by <code>igneum-lottery-v1-bound</code>. Live node <code>peers</code> 1 -&gt; 2 -&gt; 1. Node B on 27010/27011 dialled A's listener, synced to the same sink within 25 s and learnt the live node from A (outbound 2): a node with <code>--addpeer</code> plus <code>--listen</code> accepts inbound connections (<code>--connect</code> would set the inbound limit to 0, <code>kaspad/src/daemon.rs</code>). SIGINT stopped both cleanly. Package: <code>igneum-node-windows.zip</code> from <code>proto-cuda/windows-node/make-package.sh</code> (exe, miner exe, src.zip snapshot of the worktree HEAD plus <code>igneum-pow/</code>, scripts, README). Build on the RTX 5090 machine (BUILD-NODE.bat) estimated at 15 to 25 minutes on the 9800X3D, approximate, untested.</p>
 <h2 id="3-october-2026-r3-26-m15-pow-checked-after-the-cheap-checks-cache-build-cap-attack-before-and-after-consensus-engineer">3 October 2026, R3.26 / M15: PoW checked after the cheap checks, cache-build cap, attack before and after (consensus-engineer)</h2>
 <p>Machine: Apple M5 Max (18 logical cores), load average 60 to 110 (three other agents building at the same time), rustc 1.99.0. Worktree <code>vendor/igneum-node-r3</code>, branch <code>r3-fixes</code> at <code>5166ee26</code> on top of the rename commit <code>d62708a8</code>. Release builds; the real engine needs <code>--features igneum-pow</code>. Fix: <code>validate_header</code> now runs version, timestamp-not-in-future, parent, vote-key, parents-exist, GHOSTDAG, pruning, DAA-score, difficulty, blue-score, blue-work and past-median checks before the PoW engine; the engine (the one 256 MiB cache per day seed) is the last check that chooses seeds. The engine is process-wide, holds <code>KEEP = 4</code> <code>(epoch seed, day)</code> caches, keeps the chain's current and next day resident, runs at most one build per seed pair and at most 2 at once with a queue of 4 (then <code>PowCacheQueueFull</code>, retryable, not a peer fault). A per-peer p2p guard counts an off-day cold build or a rejected-before-PoW header as a strike; more than <code>IGNEUM_POW_STRIKES</code> (default 2) in an hour disconnects the peer and bans its IP for an hour. Cache build time: one 256 MiB ChaCha12 program-plus-cache build in 222 ms on one core under this load (the engine smoke test on an idle machine earlier the same day measured about 0.2 s; <code>proto-metal</code> reported 273.6 ms for the CPU reference fill under the same load). The honest 20-to-60 s proving lag and the 10 ms CPU verify gate are unaffected. Attack, before and after (ignored test <code>measure_m15_attack_before_and_after</code>, release, <code>--features igneum-pow</code>, <code>validate_and_insert_block</code>, the path <code>submit_block</code> and block relay call into): an honest 10-block chain builds 1 cache (genesis epoch, genesis day). Then 50 headers with bogus timestamps (50 distinct past days) and bogus DAA scores.</p>
 <ul><li>Before (the pre-fix order, replayed by calling the engine with the header's own unvalidated day seed): 50 cold 256 MiB builds, 10,595 ms, and the honest day's entry is evicted (<code>KEEP</code> was 3).</li><li>After (the new order): 0 builds, all 50 rejected (<code>TimeTooOld</code> or <code>UnexpectedHeaderDaaScore</code>) in 14 ms total. The live day stays resident.</li></ul>
@@ -348,30 +305,30 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <h2 id="4-october-2026-first-finality-lock-on-the-live-devnet-checkpoint-242-at-77-4-of-all-weight-two-hours-after-genesis">4 October 2026, first finality lock on the live devnet: checkpoint 242 at 77.4% of all weight, two hours after genesis</h2>
 <p>Live devnet v4 (genesis 09:05 UTC). The weight window and <code>min_daa</code> are 7,200 DAA seconds, so no checkpoint could lock before DAA 7,200. The first checkpoint past it, index 242 (block <code>59b4a314</code>, blue score 7,261), locked at 11:03:44 UTC with 77.4% of total weight and 77.4% of active weight signed, 12 aggregated votes from 17 vote keys (two RTX 5090 machines with 8 identities each, the Apple M5 Max's Metal miner, the integrated AMD chip's identities), floor 2/3. The certificate (23 headers) was stored and carried in block <code>1e2439a1</code>; <code>observer.mjs</code> logged <code>checkpoint_locked</code> 0.7 s after the miner's own <code>LOCK</code> line. The floor was raised to 2/3 this morning (O-3.15); this is its first live lock. Difficulty at the moment of the lock was mid-oscillation (93M to 99M, see the oscillation finding), which did not affect voting.</p>
 <h2 id="4-october-2026-the-gfx1036-worker-fault-and-what-the-apple-m5-max-could-and-could-not-reproduce">4 October 2026, the gfx1036 worker fault and what the Apple M5 Max could and could not reproduce</h2>
-<p>PC 2 (RTX 5090 plus the Ryzen's integrated gfx1036), package 0.3.0 prebuilt workers. The CUDA worker compiled the pack with NVRTC (after <code>-default-device</code>) and mined at 124.2 MH/s, equal to the nvcc-built worker, 0 rejected, CPU re-check clean. The OpenCL worker (<code>igneum-worker-opencl.exe --pack</code>, path <code>prebuilt-generic</code>) self-tested PASS and mined correctly at 3.3 MH/s for 577 s (8 accepted blocks), then from about 600 s every job "completed" in 0.5 ms with no hash: 906 jobs became 56,384 within 30 s, the miner reported 4.3 GH/s inside jobs and the dashboard over 1 GH/s, with no error line, no exit and no restart. PC 1's cl.exe-built worker on the same host.c serve loop ran over an hour without this.</p>
+<p>the RTX 5090 Windows rig (RTX 5090 plus the Ryzen's integrated gfx1036), package 0.3.0 prebuilt workers. The CUDA worker compiled the pack with NVRTC (after <code>-default-device</code>) and mined at 124.2 MH/s, equal to the nvcc-built worker, 0 rejected, CPU re-check clean. The OpenCL worker (<code>igneum-worker-opencl.exe --pack</code>, path <code>prebuilt-generic</code>) self-tested PASS and mined correctly at 3.3 MH/s for 577 s (8 accepted blocks), then from about 600 s every job "completed" in 0.5 ms with no hash: 906 jobs became 56,384 within 30 s, the miner reported 4.3 GH/s inside jobs and the dashboard over 1 GH/s, with no error line, no exit and no restart. the three-card Windows rig's cl.exe-built worker on the same host.c serve loop ran over an hour without this.</p>
 <p>Root cause, as far as it can be stated: the AMD runtime kept answering <code>clEnqueueNDRangeKernel</code>, <code>clWaitForEvents</code> and the blocking <code>clEnqueueReadBuffer</code> with CL_SUCCESS while running nothing, so the loop walked its chunks at memory speed and reported the stale output buffer as a finished job. What flipped the runtime into that state at 600 s is not visible in the logs and the job path itself leaks nothing (one event per chunk, created and released; verified below). The two plausible triggers are a device reset of the integrated GPU with the runtime swallowing it (the generic path is the only one that self-tests, which reads 256 MiB back and runs the three vector warps at start; an hourly <code>prepare</code> would do the same work again on a second queue while jobs run) and a runtime limit reached after about 900 jobs. Neither reproduces on Apple OpenCL:</p>
 <div class="tbl"><table><thead><tr><th>Run on the M5 Max (Apple OpenCL 1.2, pack-a, 2^22 nonces per job)</th><th>Jobs</th><th>Job time ms (mean, min, max)</th><th>Faults</th><th>Live objects at the end</th></tr></thead><tbody><tr><td>20-minute soak of the shipped generic worker</td><td>3,365</td><td>412 / 305 / 591</td><td>0</td><td>not counted (that build had no counters)</td></tr><tr><td>1,200-job soak of the hardened worker (events and buffers counted)</td><td>1,200</td><td>411 / 315 / 549</td><td>0</td><td>0 events, 4 buffers (cache, dataset, out, init words); 1,200 events created and released</td></tr><tr><td>the same worker with <code>IGNEUM_FAULT_TEST=6</code> (the dispatch skipped from chunk 6 on, the runtime "succeeding")</td><td>6 real + 1</td><td></td><td>1: <code>the output buffer is unchanged since the previous dispatch</code>, exit 3</td><td></td></tr></tbody></table></div>
 <p>So the fix is defensive at three levels (commit 112acf6 and vendor devnet-v4 f9392600): the worker treats every OpenCL error in the job path as fatal, requires CL_COMPLETE on the dispatch event, refuses a chunk 20x faster per nonce than the running mean or an output buffer unchanged since the previous dispatch, prints live object counts every 200 jobs and exits 3 on any of these; the miner kills and restarts a worker whose job time per hash drops under 1/20 of the mean or whose interval rate exceeds 10x the mean before it, rolls its counters back to the last report and prints <code>WORKER FAULT</code>; the launcher shows <code>worker fault</code> and <code>restarting</code> for that card instead of a rate. The next gfx1036 run says which guard fires first; that line is the diagnosis the Apple M5 Max cannot give.</p>
-<h2 id="4-october-2026-a-node-60-s-behind-the-clock-is-silently-dead-pc-2-s-first-app-install">4 October 2026, a node 60 s behind the clock is silently dead (PC 2's first app install)</h2>
-<p>PC 2 came back from a power cut with its clock 60 s slow. igneumd connected, then logged <code>HandleRelayInvsFlow flow error: the block timestamp is too far into the future: block timestamp is ... but maximum timestamp allowed is ...</code> for every relayed block, processed 0 blocks and the app sat on "waiting for a peer" with nothing to say. The consensus rule is right (a header may not be ahead of the node's clock by more than the tolerance, <code>check_block_timestamp_in_isolation</code>); the reporting was not. The node prints one WARN per relayed block with two millisecond numbers and never the one line a person needs.</p>
+<h2 id="4-october-2026-a-node-60-s-behind-the-clock-is-silently-dead-the-rtx-5090-windows-rig-s-first-app-install">4 October 2026, a node 60 s behind the clock is silently dead (the RTX 5090 Windows rig's first app install)</h2>
+<p>the RTX 5090 Windows rig came back from a power cut with its clock 60 s slow. igneumd connected, then logged <code>HandleRelayInvsFlow flow error: the block timestamp is too far into the future: block timestamp is ... but maximum timestamp allowed is ...</code> for every relayed block, processed 0 blocks and the app sat on "waiting for a peer" with nothing to say. The consensus rule is right (a header may not be ahead of the node's clock by more than the tolerance, <code>check_block_timestamp_in_isolation</code>); the reporting was not. The node prints one WARN per relayed block with two millisecond numbers and never the one line a person needs.</p>
 <div class="tbl"><table><thead><tr><th>What</th><th>Where</th><th>Now</th></tr></thead><tbody><tr><td>The app reads that WARN, takes <code>block timestamp - maximum allowed</code> as a lower bound and shows "Your clock is at least N seconds behind the network; mining cannot start until it is fixed" on the node card with a Sync clock button (macOS <code>sntp -sS time.apple.com</code> under an administrator prompt, Windows <code>w32tm /resync</code> elevated, Linux <code>chronyc makestep</code> / <code>timedatectl</code>) and the manual steps</td><td><code>app/igneum-app/src/engine.rs</code> <code>node_line</code>, <code>resolve_clock</code>; <code>platform.rs</code> <code>sync_clock</code></td><td>done</td></tr><tr><td>Independent of the node: once blocks arrive the engine samples the latest block's timestamp through the node's Ethereum JSON-RPC every 10 s and takes the median of local minus block time over the last 9 (behind only; a stalled chain reads as ahead); and an HTTPS Date header from the downloads host at start and every 10 min (either direction, 1 s resolution). Over 5 s: a warning. Over 10 s (the consensus bound): the Start button is blocked and running miners are held</td><td><code>engine.rs</code> <code>watch_line</code>, <code>update.rs</code> <code>latest_block_time</code>, <code>https_time</code></td><td>done</td></tr><tr><td>The node itself should log one clear line at WARN, once, not per block: <code>clock skew: local time is N s behind the median peer block time</code> (and the same for ahead, when its own templates are refused by peers). Filed for the devnet-v4 worktree owner; the app does not patch the node</td><td><code>docs/plans/node-changes.md</code></td><td>filed</td></tr></tbody></table></div>
 <p>Checked on the Apple M5 Max with a fake 60 s skew (<code>IGNEUM_APP_FAKE_SKEW=-60</code>): the banner, the node card, the blocked Start button and the held miner all showed; with the real clock the HTTPS source read +0.4 s and the block source agreed.</p>
-<h2 id="4-october-2026-first-machine-on-the-igneum-miner-app-pc-2-s-rtx-5090-at-118-mh-s-via-setup-exe">4 October 2026, first machine on the Igneum Miner app: PC 2's RTX 5090 at 118 MH/s, via Setup.exe</h2>
+<h2 id="4-october-2026-first-machine-on-the-igneum-miner-app-the-rtx-5090-windows-rig-s-rtx-5090-at-118-mh-s-via-setup-exe">4 October 2026, first machine on the Igneum Miner app: the RTX 5090 Windows rig's RTX 5090 at 118 MH/s, via Setup.exe</h2>
 <p>the maintainers' second PC (a clone of the first; the app's per-install machine id <code>1ccfe586</code> keeps its keys apart), installed from the runner-built <code>Igneum-Miner-Setup-0.3.0.exe</code> (unsigned, SmartScreen "run anyway"), the one-click package: prebuilt NVRTC worker, no toolchain on the machine. First attempt sat at "waiting for peer": the RTX 5090 machine's clock was 62 s slow after a power cut and <code>igneumd</code> rejected every relayed block ("the block timestamp is too far into the future"; the 10-s skew bound from the hardened timestamp rule) and processed 0 blocks for 12 minutes with no visible reason. Clock set by hand; the node caught up (46 blocks in the next 10 s at 11:27:53 UTC), the 5090 started inside the app and ran at 117 to 119 MH/s with 34 accepted blocks in the first minute, CPU re-check OK on every share, the integrated AMD chip at 3.3 MH/s beside it. Two defects from the run, both fixed in the app the same hour: no clock-skew warning (now detected from the node's warning, block timestamps and an HTTPS Date header; Start is blocked above 10 s), and the node card stayed on "syncing" after the late catch-up while the miner was already accepted (state now re-derived every poll).</p>
 <h2 id="4-october-2026-difficulty-rule-v2-the-live-oscillation-its-cause-the-dag-replay-the-fix-behind-a-height-switch-consensus-engineer">4 October 2026, difficulty rule v2: the live oscillation, its cause, the DAG replay, the fix behind a height switch (consensus-engineer)</h2>
-<p>Machine: Apple M5 Max shared with four other agents' builds (load average 7 at the start, 184 to 442 from 11:40 UTC on); every simulation and build at nice 19, cargo at 4 jobs; the live devnet (26610/26611, 26640/28640, observer.mjs, the Metal miner) untouched, read through the observer node's wRPC only. Worktree <code>vendor/igneum-node-v4</code>, branch <code>devnet-v4</code>, built in its own <code>target/</code>. Everything in <code>docs/analysis/difficulty-2026-10-04-oscillation.md</code>; ledger M24; spec 2.3 revised. Live finding (devnet v4, UTC): PC 1 (RTX 5090, 122 MH/s, 8 identities through its own node) with the Apple M5 Max (26.7 MH/s) and a Radeon (2.8) from 09:11; PC 2 (RTX 5090, 124 MH/s, 8 identities through the Apple M5 Max node) from 10:12:17, off 10:31:25 to 10:35:19; both PCs restarted at 11:00 for the machine-id package (they are clones with one computer name and had signed with the same vote keys). Difficulty (node convention): flat 56.7M to 67M within 1% per minute from 09:24 to 10:04; 70M to 144M in 90 s after the join; then 101.8M to 164.3M from 10:17 to 10:32 (5 peaks of 1.33x spaced 132 chain blocks, std of log difficulty 0.123, 54 to 81 blocks a minute) and 103M to 150M from 10:37 to 10:54 (4 peaks of 1.35x, std 0.072, a floor rising 110M to 127M) against a true 139M; after the epoch boundary at DAA 7,200 (11:01:52) 69.0M to 72.7M within 1.3% per minute. Stacked clamps in the observer's 2-s polls: "up 15.9%" = five 3% hardens, "down 24.3%" = three 10% eases. DAG: 6,741 blocks to 10:54, 38% of chain blocks merging two or more blues, every merged block blue. Records <code>sim/difficulty/records/live-2026-10-04.csv</code> (8,090 headers, <code>pull_live.py</code>) and <code>live-2026-10-04-hashrate.csv</code> (587 worker STATUS lines from the log intake, by run id and node). Cause: spec 2.3's reference lane is the whole epoch, so a step 7 minutes into the hour left it polluted for the hour; the short lane read 11 to 25% above it; the 25% trigger flipped on the short lane's noise; the clamps turned each flip into a ramp. The DAG's bursts widen the short lane's noise and the stacked clamps steepen each flip; neither starts it. The 3 October simulator stepped at epoch boundaries, so it never saw it. Replay: <code>sim.py --live</code>, a DAG model (miners on two nodes with <code>igneum-miner</code>'s template staleness, templates stamped by the node, GHOSTDAG, the rule as <code>igneum_difficulty_bits</code> runs it, the sampled window per mergeset), one scale fitted to the merge fraction. Join window 10:20 to 10:31, 3 seeds: std of log difficulty 0.115 against the record's 0.134, 4.3 peaks of 1.31x against 4 of 1.37x, 110.7M to 167.2M against 101.8M to 164.3M, 56.7 to 73.7 blocks a minute against 59 to 72, 22 lane flips, the short lane ruling 38% of the time. Whole polluted window: 0.118 against 0.123, 5.3 peaks against 5. The chain-only simulator with a 1.85x step 10 minutes into an epoch: std 0.136 to 0.189 with 96 to 142 flips (v1). Candidates on the live replay (join window, 3 seeds, std of log difficulty / lane flips): v1 0.115 / 22; short lane 240 0.125 / 10; 360 0.107 / 11; ease clamp 3% 0.113 / 20; clamp once per DAA second 0.132 / 21; hysteresis leave at 10% 0.090 / 2 (short lane ruling 78%); median of three 0.124 / 15; soft trigger 0.110 / 13; reference window 1,200 0.108, 900 0.081, 720 0.055, 600 0.024 / 0, 480 0.021 / 0. Adopted: v2 = the reference lane is the epoch lane over the newest 600 DAA score of the epoch, the sampled long lane not consulted: 0.026 / 0, mean 142.6M against 139M true; rejoin window 0.031 / 0; chain-only 0.022 to 0.081. Cost (synthetic set seed 7, v1 / v2): x50 settled 61.7 / 65.5 s (standard under 90), /50 628 / 753 s (worst gap 32 / 62 s), epoch +-30% settled 144 / 143 s, hop10 211 / 200 s, polluted overshoot 0.180 / 0.089, warm-ups equal, steady std 0.038 / 0.049 with blocks-per-minute CV 0.135 / 0.130. Attacks (seeds 7 to 9, v1 / v2): greedy hopper at most +1.5% / +2.5%, with a 60 s dwell -4.0% / -1.5% at 100%; pulsed rental -96.4% / -96.3% with weight per hash 0.262 / 0.262; forger drift +0.4 to +1.1% / -0.8 to +0.5% (worst seed 2.7% / 1.5%); short-lane oscillation gain 3.75 / 3.29; epoch games 0.0 to +0.7% / 0.0 to +0.4%; polluted window settled 287 to 329 s / 288 to 331 s; base profiles 3-seed up50 154 / 150 s, down50 762 / 822 s, epoch30 88 / 88 s, hop10 245 / 233 s, polluted 75 / 76 s, steady std 0.042 / 0.053. Implementation (devnet-v4): <code>difficulty_v2_activation_daa</code> in <code>Params</code> (every network <code>u64::MAX</code>), <code>OverrideParams</code>, <code>override_params</code>, the daemon's file parser (prints the height), <code>SampledDifficultyManager</code> (new field, <code>reference_window(daa_score, epoch_blocks, activation)</code>), <code>REF_WINDOW_V2 = 600</code>, <code>IgneumInputs.k_ref</code>; <code>infra/fast-time/override-60x.json</code> carries the field as never. <code>cargo test --release -p kaspa-consensus --lib difficulty</code>: 15 pass (12 of 3 and 4 October plus <code>reference_window_switches_at_the_activation_height</code>, <code>v2_reference_window_follows_a_step_inside_the_epoch_where_v1_eases_into_it</code>, <code>v1_and_v2_agree_in_a_steady_epoch</code>); <code>-p kaspa-consensus-core --lib params</code>: 7 pass (<code>override_params_carry_the_difficulty_v2_activation</code>, the fast-time file test extended). Build 2 min incremental for <code>igneumd</code> and <code>igneum-miner</code>. Test network (<code>sim/difficulty/testnet_v2.py</code>, 3 nodes on 29600 to 29622, the 60x file with the devnet epoch, genesis bits 2^16, activation 900 on nodes 1 and 2, node 3 without it; CPU miners A from 0, B from minute 4, off at 19, back at 23): node 1 reached DAA 900 at 1,022 s; node 3 rejected the first v2 block ("difficulty of 520437997 is not the expected value of 520406991"), banned its peer and stayed at DAA 900 (901 headers, a prefix of node 1's 1,472); nodes 1 and 2 agreed on every header and the sink. Under v2 the leave eased 6,589 to 5,972 over 180 s (std 0.036, no peak), the rejoin hardened 6,154 to 8,312 within 60 s and held within 3%. The v1 phase is not readable: the load swung the CPU miners' delivered hash rate 2x on its own (difficulty fell 40% after B joined). Record <code>records/testnet-v2-2026-10-04.csv</code>. Repeat on a quiet machine, 30 minutes. Rollout: only <code>igneumd</code> changes (the Apple M5 Max build, <code>infra/cross/build-linux.sh</code> for the seed and the the cloud provider nodes, the Windows package for PC 1's node); every node of a chain needs the same <code>"difficulty_v2_activation_daa": N</code> in its override file before the height or it forks off there. First the 12 the cloud provider nodes on their own chain (N = current DAA + 1,800, restart one by one, a miner joins inside an epoch, no flips after the height), then the devnet with N about two hours ahead: observer node, seed, Mac node 1, PC 1's node, in that order, by the maintainers. A new network sets 0. Not done: a quiet-machine test-network run; the DAG model's red blocks and the Apple M5 Max's log series; v2 with +-500 ms stamp jitter.</p>
+<p>Machine: Apple M5 Max shared with four other agents' builds (load average 7 at the start, 184 to 442 from 11:40 UTC on); every simulation and build at nice 19, cargo at 4 jobs; the live devnet (26610/26611, 26640/28640, observer.mjs, the Metal miner) untouched, read through the observer node's wRPC only. Worktree <code>vendor/igneum-node-v4</code>, branch <code>devnet-v4</code>, built in its own <code>target/</code>. Everything in <code>docs/analysis/difficulty-2026-10-04-oscillation.md</code>; ledger M24; spec 2.3 revised. Live finding (devnet v4, UTC): the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) (RTX 5090, 122 MH/s, 8 identities through its own node) with the Apple M5 Max (26.7 MH/s) and a Radeon (2.8) from 09:11; the RTX 5090 Windows rig (RTX 5090, 124 MH/s, 8 identities through the Apple M5 Max node) from 10:12:17, off 10:31:25 to 10:35:19; both PCs restarted at 11:00 for the machine-id package (they are clones with one computer name and had signed with the same vote keys). Difficulty (node convention): flat 56.7M to 67M within 1% per minute from 09:24 to 10:04; 70M to 144M in 90 s after the join; then 101.8M to 164.3M from 10:17 to 10:32 (5 peaks of 1.33x spaced 132 chain blocks, std of log difficulty 0.123, 54 to 81 blocks a minute) and 103M to 150M from 10:37 to 10:54 (4 peaks of 1.35x, std 0.072, a floor rising 110M to 127M) against a true 139M; after the epoch boundary at DAA 7,200 (11:01:52) 69.0M to 72.7M within 1.3% per minute. Stacked clamps in the observer's 2-s polls: "up 15.9%" = five 3% hardens, "down 24.3%" = three 10% eases. DAG: 6,741 blocks to 10:54, 38% of chain blocks merging two or more blues, every merged block blue. Records <code>sim/difficulty/records/live-2026-10-04.csv</code> (8,090 headers, <code>pull_live.py</code>) and <code>live-2026-10-04-hashrate.csv</code> (587 worker STATUS lines from the log intake, by run id and node). Cause: spec 2.3's reference lane is the whole epoch, so a step 7 minutes into the hour left it polluted for the hour; the short lane read 11 to 25% above it; the 25% trigger flipped on the short lane's noise; the clamps turned each flip into a ramp. The DAG's bursts widen the short lane's noise and the stacked clamps steepen each flip; neither starts it. The 3 October simulator stepped at epoch boundaries, so it never saw it. Replay: <code>sim.py --live</code>, a DAG model (miners on two nodes with <code>igneum-miner</code>'s template staleness, templates stamped by the node, GHOSTDAG, the rule as <code>igneum_difficulty_bits</code> runs it, the sampled window per mergeset), one scale fitted to the merge fraction. Join window 10:20 to 10:31, 3 seeds: std of log difficulty 0.115 against the record's 0.134, 4.3 peaks of 1.31x against 4 of 1.37x, 110.7M to 167.2M against 101.8M to 164.3M, 56.7 to 73.7 blocks a minute against 59 to 72, 22 lane flips, the short lane ruling 38% of the time. Whole polluted window: 0.118 against 0.123, 5.3 peaks against 5. The chain-only simulator with a 1.85x step 10 minutes into an epoch: std 0.136 to 0.189 with 96 to 142 flips (v1). Candidates on the live replay (join window, 3 seeds, std of log difficulty / lane flips): v1 0.115 / 22; short lane 240 0.125 / 10; 360 0.107 / 11; ease clamp 3% 0.113 / 20; clamp once per DAA second 0.132 / 21; hysteresis leave at 10% 0.090 / 2 (short lane ruling 78%); median of three 0.124 / 15; soft trigger 0.110 / 13; reference window 1,200 0.108, 900 0.081, 720 0.055, 600 0.024 / 0, 480 0.021 / 0. Adopted: v2 = the reference lane is the epoch lane over the newest 600 DAA score of the epoch, the sampled long lane not consulted: 0.026 / 0, mean 142.6M against 139M true; rejoin window 0.031 / 0; chain-only 0.022 to 0.081. Cost (synthetic set seed 7, v1 / v2): x50 settled 61.7 / 65.5 s (standard under 90), /50 628 / 753 s (worst gap 32 / 62 s), epoch +-30% settled 144 / 143 s, hop10 211 / 200 s, polluted overshoot 0.180 / 0.089, warm-ups equal, steady std 0.038 / 0.049 with blocks-per-minute CV 0.135 / 0.130. Attacks (seeds 7 to 9, v1 / v2): greedy hopper at most +1.5% / +2.5%, with a 60 s dwell -4.0% / -1.5% at 100%; pulsed rental -96.4% / -96.3% with weight per hash 0.262 / 0.262; forger drift +0.4 to +1.1% / -0.8 to +0.5% (worst seed 2.7% / 1.5%); short-lane oscillation gain 3.75 / 3.29; epoch games 0.0 to +0.7% / 0.0 to +0.4%; polluted window settled 287 to 329 s / 288 to 331 s; base profiles 3-seed up50 154 / 150 s, down50 762 / 822 s, epoch30 88 / 88 s, hop10 245 / 233 s, polluted 75 / 76 s, steady std 0.042 / 0.053. Implementation (devnet-v4): <code>difficulty_v2_activation_daa</code> in <code>Params</code> (every network <code>u64::MAX</code>), <code>OverrideParams</code>, <code>override_params</code>, the daemon's file parser (prints the height), <code>SampledDifficultyManager</code> (new field, <code>reference_window(daa_score, epoch_blocks, activation)</code>), <code>REF_WINDOW_V2 = 600</code>, <code>IgneumInputs.k_ref</code>; <code>infra/fast-time/override-60x.json</code> carries the field as never. <code>cargo test --release -p kaspa-consensus --lib difficulty</code>: 15 pass (12 of 3 and 4 October plus <code>reference_window_switches_at_the_activation_height</code>, <code>v2_reference_window_follows_a_step_inside_the_epoch_where_v1_eases_into_it</code>, <code>v1_and_v2_agree_in_a_steady_epoch</code>); <code>-p kaspa-consensus-core --lib params</code>: 7 pass (<code>override_params_carry_the_difficulty_v2_activation</code>, the fast-time file test extended). Build 2 min incremental for <code>igneumd</code> and <code>igneum-miner</code>. Test network (<code>sim/difficulty/testnet_v2.py</code>, 3 nodes on 29600 to 29622, the 60x file with the devnet epoch, genesis bits 2^16, activation 900 on nodes 1 and 2, node 3 without it; CPU miners A from 0, B from minute 4, off at 19, back at 23): node 1 reached DAA 900 at 1,022 s; node 3 rejected the first v2 block ("difficulty of 520437997 is not the expected value of 520406991"), banned its peer and stayed at DAA 900 (901 headers, a prefix of node 1's 1,472); nodes 1 and 2 agreed on every header and the sink. Under v2 the leave eased 6,589 to 5,972 over 180 s (std 0.036, no peak), the rejoin hardened 6,154 to 8,312 within 60 s and held within 3%. The v1 phase is not readable: the load swung the CPU miners' delivered hash rate 2x on its own (difficulty fell 40% after B joined). Record <code>records/testnet-v2-2026-10-04.csv</code>. Repeat on a quiet machine, 30 minutes. Rollout: only <code>igneumd</code> changes (the Apple M5 Max build, <code>infra/cross/build-linux.sh</code> for the seed and the the cloud provider nodes, the Windows package for the three-card Windows rig's node); every node of a chain needs the same <code>"difficulty_v2_activation_daa": N</code> in its override file before the height or it forks off there. First the 12 the cloud provider nodes on their own chain (N = current DAA + 1,800, restart one by one, a miner joins inside an epoch, no flips after the height), then the devnet with N about two hours ahead: observer node, seed, Mac node 1, the three-card Windows rig's node, in that order, by the maintainers. A new network sets 0. Not done: a quiet-machine test-network run; the DAG model's red blocks and the Apple M5 Max's log series; v2 with +-500 ms stamp jitter.</p>
 <h2 id="4-october-2026-the-observer-stored-nothing-for-78-minutes-then-7-022-blocks-in-two-minutes">4 October 2026, the observer stored nothing for 78 minutes, then 7,022 blocks in two minutes</h2>
-<p>Mac, load average 200 to 300 from other agents' simulations (<code>uptime</code> at 13:21 UTC: 83 / 224 / 206). The observer (<code>tools/observer/observer.mjs</code>, reading the Apple M5 Max's non-mining peer on wRPC 28640) kept writing <code>live_state</code> every 2 s, so the page said LIVE with <code>age_s</code> 0.1 while its newest stored block was 4,868 s old; the DAG panel showed "waiting for the first block" and one identity while PC 1 mined at 122 MH/s.</p>
+<p>Mac, load average 200 to 300 from other agents' simulations (<code>uptime</code> at 13:21 UTC: 83 / 224 / 206). The observer (<code>tools/observer/observer.mjs</code>, reading the Apple M5 Max's non-mining peer on wRPC 28640) kept writing <code>live_state</code> every 2 s, so the page said LIVE with <code>age_s</code> 0.1 while its newest stored block was 4,868 s old; the DAG panel showed "waiting for the first block" and one identity while the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) mined at 122 MH/s.</p>
 <p>Measured from <code>live_blocks</code> (<code>received_at</code> minus the header timestamp, UTC):</p>
 <div class="tbl"><table><thead><tr><th>Window</th><th>Blocks stored</th><th>Mean lag s</th><th>Max lag s</th></tr></thead><tbody><tr><td>11:30 to 11:55, five-minute slots</td><td>150 to 451 each</td><td>4 to 11</td><td>12 to 61</td></tr><tr><td>11:57 to 13:15</td><td>0</td><td></td><td></td></tr><tr><td>13:15 slot (the restart at 13:18)</td><td>7,023</td><td>2,487</td><td>4,911</td></tr><tr><td>13:20 slot</td><td>135</td><td>10</td><td>84</td></tr></tbody></table></div>
 <p>The 7,022 catch-up blocks carried header times spread evenly over the gap (66 to 95 per minute by header time), and <code>blocks_per_minute</code> was bucketed by processing time, so the hour chart showed 3,762 and 3,260 for 13:18 and 13:19 against a true 76 and 63. The lag was already 4 to 11 s on average before the gap, and the observer's colour marking from this morning did a <code>getBlock</code> per chain block inline on the same timers as the block flush.</p>
 <p>What changed (commit "Observer: decoupled ingest, lag metric, per-minute by header time, feed self-check, restart loop"):</p>
 <div class="tbl"><table><thead><tr><th>Change</th><th>Where</th><th>Measured after</th></tr></thead><tbody><tr><td>Notifications only enqueue; a drain loop handles them in bounded batches; block flush, colour marking and certificate work on separate timers, none waits on another</td><td><code>observer.mjs</code></td><td>queue_depth 0</td></tr><tr><td>Mergesets taken from each notification's verbose data (bounded cache of 4,000); <code>getBlock</code> only on a miss, four in flight</td><td><code>observer.mjs</code></td><td>0 RPC fetch failures in the first 5 min</td></tr><tr><td><code>live_state.observer_lag_s</code> (now minus newest stored header time) and <code>queue_depth</code>; served by <code>/api/live</code>; the page shows "observer N s behind" past 30 s instead of "waiting for the first block"</td><td><code>observer.mjs</code>, <code>site/api/live.mjs</code>, <code>site/live.html</code></td><td>lag 0.7 s at 13:27 UTC</td></tr><tr><td><code>blocks_per_minute</code> and <code>blocks_60s</code> bucketed by the block's own timestamp, reseeded from the table on start</td><td><code>observer.mjs</code></td><td>13:18 = 76, 13:19 = 63; max in the hour 110</td></tr><tr><td>Self-check: no <code>blockAdded</code> for 60 s while the node's <code>block_count</code> advances resubscribes; two failed attempts exit 2</td><td><code>observer.mjs</code></td><td>not yet triggered</td></tr><tr><td><code>tools/observer/run.sh</code>: restart loop, same env and log (<code>/tmp/igneum-devnet/observer-mjs-v4.out</code>)</td><td>new</td><td>running since 13:26 UTC</td></tr></tbody></table></div>
 <p>Open: the gap itself. Zero blocks for 78 minutes followed by every missed block arriving with its original header time is also what a stalled observer node delivering its own catch-up looks like; the lag metric now makes either case visible on the page within 30 s, and the self-check covers the dead-subscription case. Node logs for 11:57 to 13:18 UTC would settle which it was.</p>
-<h2 id="4-october-2026-pc-2-at-the-14-20-boundary-a-worker-stuck-on-the-previous-epoch-root-cause-from-the-uploads">4 October 2026, PC 2 at the 14:20 boundary: a worker stuck on the previous epoch (root cause from the uploads)</h2>
-<p>Run <code>win-1ccfe586-20261004-132055</code> (the Igneum Miner app, package 0.3.0 workers). Sequence from the node and miner uploads: the app reinstalled and its node restarted at 13:20:29 UTC in IBD from DAA 17,881, inside epoch 4 (seed 57ac7663...); the app exported <code>packs\devnet</code> from that node's template at once, so both workers started on 57ac. The boundary at DAA 18,000 passed about a minute later. The CUDA miner's first templates still carried <code>next_epoch_seed</code> c23e65dd... within lead: <code>PREPARE sent</code> at 14:20:57, <code>prepared</code> 0.9 s later (NVRTC 151 ms, cache 68, dataset 113, self-test 511 ms), <code>switched to the prepared pair</code> at 14:21:28, then 60 MH/s with 8 identities and 101 accepted blocks in 271 s. The OpenCL worker reported ready 43 s after the CUDA one (14:21:39); by then every template was on c23e as the current pair and no next epoch was within lead, so the miner never sent a <code>prepare</code>, and the worker answered 514 jobs in a row with <code>epoch seed mismatch</code> (one every 0.5 s, the miner's error back-off) for the rest of the run. The message text "holds prepared epoch 57ac..." is host.c's wording for a pack read at run time, which is why the stuck worker looked like a wrong prediction: PC 2's node announced the same next epoch (c23e) as the chain. No node on this PC predicted a different epoch, and the 57ac pack was simply the previous epoch's. Fixes: devnet-v4 miner 3bfe346f (prepare the current pair after a <code>need</code> line or three mismatches; exit 42 without prepare support; restart a ready worker with jobs queued and no job done for 60 s), workers emit <code>need &lt;epoch&gt; &lt;day&gt;</code> before the error. Not measured here: the swap time of the forced prepare on the RTX 5090 machine; the OpenCL run's "2 jobs in 154 s" were the two jobs before the first mismatch and are not a rate.</p>
+<h2 id="4-october-2026-the-rtx-5090-windows-rig-at-the-14-20-boundary-a-worker-stuck-on-the-previous-epoch-root-cause-from-the-uploads">4 October 2026, the RTX 5090 Windows rig at the 14:20 boundary: a worker stuck on the previous epoch (root cause from the uploads)</h2>
+<p>Run <code>win-1ccfe586-20261004-132055</code> (the Igneum Miner app, package 0.3.0 workers). Sequence from the node and miner uploads: the app reinstalled and its node restarted at 13:20:29 UTC in IBD from DAA 17,881, inside epoch 4 (seed 57ac7663...); the app exported <code>packs\devnet</code> from that node's template at once, so both workers started on 57ac. The boundary at DAA 18,000 passed about a minute later. The CUDA miner's first templates still carried <code>next_epoch_seed</code> c23e65dd... within lead: <code>PREPARE sent</code> at 14:20:57, <code>prepared</code> 0.9 s later (NVRTC 151 ms, cache 68, dataset 113, self-test 511 ms), <code>switched to the prepared pair</code> at 14:21:28, then 60 MH/s with 8 identities and 101 accepted blocks in 271 s. The OpenCL worker reported ready 43 s after the CUDA one (14:21:39); by then every template was on c23e as the current pair and no next epoch was within lead, so the miner never sent a <code>prepare</code>, and the worker answered 514 jobs in a row with <code>epoch seed mismatch</code> (one every 0.5 s, the miner's error back-off) for the rest of the run. The message text "holds prepared epoch 57ac..." is host.c's wording for a pack read at run time, which is why the stuck worker looked like a wrong prediction: the RTX 5090 Windows rig's node announced the same next epoch (c23e) as the chain. No node on this PC predicted a different epoch, and the 57ac pack was simply the previous epoch's. Fixes: devnet-v4 miner 3bfe346f (prepare the current pair after a <code>need</code> line or three mismatches; exit 42 without prepare support; restart a ready worker with jobs queued and no job done for 60 s), workers emit <code>need &lt;epoch&gt; &lt;day&gt;</code> before the error. Not measured here: the swap time of the forced prepare on the RTX 5090 machine; the OpenCL run's "2 jobs in 154 s" were the two jobs before the first mismatch and are not a rate.</p>
 <h2 id="4-october-2026-shard-proving-on-the-rtx-5090-a-full-shard-compressed-in-10-9-s-a-two-shard-block-aggregated-in-2-2-s-all-verified">4 October 2026, shard proving on the RTX 5090: a full shard compressed in 10.9 s, a two-shard block aggregated in 2.2 s, all verified</h2>
-<p>Machine: the maintainers' PC 2 (RTX 5090, 32,607 MiB; WSL2 Ubuntu 24.04, SP1 v6.8.1 with the cuda feature, the toolchain of the 4 October morning run in <code>~/igneum-prove</code>), the Igneum Miner app (machine id 1ccfe586) stopping its miners for the run. Delivered as the signed job <code>shard-benchmark</code> (<code>app/igneum-app/src/jobrun.rs</code>, <code>packaging/ota/publish-jobs.sh</code>), which runs <code>prove-shard.sh block-338-shard1 "block-341-shards2 block-344-shards4"</code> and reports every RESULT line to the intake as <code>job-&lt;id&gt;-1ccfe586</code> (<code>node tools/jobs.mjs &lt;id&gt;</code>). The Mac CPU column is the 4 October entry above ("proving: devnet v4 shards"); the Apple M5 Max proved only the 200-pgas test cut, so its shard rows at <code>S_p</code> are the executor alone. <code>S_p</code> = 7,500,000 pgas provisional; the fixtures carry 6.75 M pgas per shard.</p>
+<p>Machine: the maintainers' the RTX 5090 Windows rig (RTX 5090, 32,607 MiB; WSL2 Ubuntu 24.04, SP1 v6.8.1 with the cuda feature, the toolchain of the 4 October morning run in <code>~/igneum-prove</code>), the Igneum Miner app (machine id 1ccfe586) stopping its miners for the run. Delivered as the signed job <code>shard-benchmark</code> (<code>app/igneum-app/src/jobrun.rs</code>, <code>packaging/ota/publish-jobs.sh</code>), which runs <code>prove-shard.sh block-338-shard1 "block-341-shards2 block-344-shards4"</code> and reports every RESULT line to the intake as <code>job-&lt;id&gt;-1ccfe586</code> (<code>node tools/jobs.mjs &lt;id&gt;</code>). The Mac CPU column is the 4 October entry above ("proving: devnet v4 shards"); the Apple M5 Max proved only the 200-pgas test cut, so its shard rows at <code>S_p</code> are the executor alone. <code>S_p</code> = 7,500,000 pgas provisional; the fixtures carry 6.75 M pgas per shard.</p>
 <div class="tbl"><table><thead><tr><th>Stage</th><th>Apple M5 Max CPU (4 October, loaded)</th><th>RTX 5090 (job id, UTC)</th></tr></thead><tbody><tr><td>shard at <code>S_p</code> (block-338-shard1, 6.75 M pgas): execute</td><td>60.0 M cycles, 9 per pgas, 6.9 s (block-344 shard 0, the same size)</td><td>60,759,590 cycles, 9 per pgas, 44 per EVM gas, 1.63 s (run-20261004-173115, 17:40:20)</td></tr><tr><td>shard at <code>S_p</code>: core proof (prove s, bytes, verify s)</td><td>not run at <code>S_p</code> (200-pgas shard: 83.1 s, 7,310,257 B, 0.368 s)</td><td>8.3 s, 18,116,295 B, 0.564 s, VERIFIED (run-20261004-173115, 17:40:29)</td></tr><tr><td>shard at <code>S_p</code>: compressed proof (prove s, bytes, verify s)</td><td>not run at <code>S_p</code> (200-pgas shard: 272.3 s, 1,272,897 B, 0.075 s)</td><td>10.9 s, 1,272,897 B, 0.040 s, VERIFIED (run-20261004-173115, 18:04:44)</td></tr><tr><td>two-shard block (block-341-shards2): compressed proof per shard</td><td>not run</td><td>11.7 s and 10.0 s, 1,272,897 B each, verify 0.039 and 0.038 s (run-20261004-173115, 18:06:50 and 18:07:00)</td></tr><tr><td>two-shard block: aggregation (prove s, bytes, verify s)</td><td>not run (three 200-pgas shards: 244.5 s, 1,272,909 B, 0.084 s)</td><td>2.2 s, 1,272,909 B, 0.039 s, VERIFIED, shard program id and claim checked (run-20261004-173115)</td></tr><tr><td>two-shard block: end to end, first shard proof to the verified block proof</td><td>not run (three 200-pgas shards: 1,139 s)</td><td>24 s of GPU stages (setup 12.6 s, two compressed proofs, aggregation); 2 min 18 s wall with the proof saves (run-20261004-173115, 18:06:26 to 18:08:44)</td></tr><tr><td>four-shard block (block-344-shards4, near <code>B_p</code>): compressed proof per shard</td><td>not run</td><td>10.6, 10.7, 10.5 and 10.2 s, 1,272,897 B each, verify 0.037 to 0.039 s (run-20261004-r3-shards, 19:01:49 to 19:02:21)</td></tr><tr><td>four-shard block: aggregation (prove s, bytes, verify s)</td><td>not run (aggregator statement 1.66 M cycles)</td><td>2.5 s, 1,272,909 B, 0.038 s, VERIFIED (run-20261004-r3-shards)</td></tr><tr><td>four-shard block: end to end</td><td>not run</td><td>44.5 s of GPU stages (setup 12.5 s, four compressed proofs, aggregation); the block at 27 M pgas proves in under a minute on one card (run-20261004-r3-shards)</td></tr><tr><td>setup (one per program id)</td><td>39.4 to 60.6 s (client plus two key setups)</td><td>21.3 s first process (client 6.7, shard keys 14.6, aggregator keys 0.03); 12.6 s second process</td></tr><tr><td>GPU idle wait before the run, package download and extract, build (incremental)</td><td></td><td>miners stopped 17:38:56; build 58 s (sources already compiled once); job 1,789 s wall, of which 25 min 46 s was saving proofs (below); mining resumed by itself at 127 MH/s</td></tr></tbody></table></div>
 <p>Job run-20261004-173115 (the <code>run</code> kind, prove only, as root inside the app's own WSL2 instance), log intake run <code>job-run-20261004-173115-1ccfe586</code>, exit 0 after 1,789 s. Fixtures captured from the devnet: block 338 (one shard at S_p, 11 transactions) and block 341 (two shards, 14 transactions). Every proof verified on the RTX 5090 machine; the three tampered witnesses per fixture (balance, storage or code, dropped account) were rejected before any proving.</p>
 <p>What the numbers say. One RTX 5090 turns a full shard into the 1.27 MB compressed proof the chain carries in about 11 s, and folds a block's shards into one proof in about 2 s more. Against the launch target of 20 to 60 s behind the tip, a single card has 9 s of slack on a one-shard block; a two-shard block needs two cards or two rounds. The 44 cycles per EVM gas and 9 cycles per prover gas are the first measured constants for the prover-gas schedule (spec 7, provisional S_p).</p>
@@ -412,7 +369,7 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <p>Hash-rate step under v2 (<code>hop.sh "half:4:600;all:1:600"</code>, 14:57 UTC) against the morning's v1 schedule, first 600 s of each step (<code>results/2026-10-04/v2/compare.md</code>): 2-min rate back within 10% of 60/min after 157 s (v1 161 s) on the step up and 172 s (v1 272 s) on the step down; neither rule holds the 3-min criterion inside 600 s on 12 CPU miners. After 300 s the v1 step-up difficulty swung 128k to 134k to 89k (max/min 1.51, std log D 0.169), the v2 one climbed 102k to 117k (1.15, 0.053); on the step down v2 reached the one-thread level (82k) by 600 s, v1 was at 100k after 600 s and 97k after 900 s. One run each, CPU miners, the v2 series has a bridged gap in its first two rows.</p>
 <p>Devnet: <code>docs/plans/difficulty-v2-rollout-devnet.md</code>. The gap found: the app launched igneumd without an override file, so an OTA-delivered v2 node would have forked at N; fixed with <code>node_override_params</code> in the packaged config (<code>igneum-app.json</code>, one <code>NODE_OVERRIDE_PARAMS</code> line in <code>packaging/mac/packaged-config.sh</code> read by both packagers; the engine writes <code>&lt;app data&gt;/app/override-params.json</code> and passes the flag). Rule: N = DAA at the manifest publish + 10,800 at least; since N is baked at the cut, choose DAA + 14,400 when committing the line and check at publish.</p>
 <h2 id="4-october-2026-difficulty-rule-v2-activated-on-the-live-devnet-at-daa-33-000-by-height-switch-no-fresh-chain">4 October 2026, difficulty rule v2 activated on the live devnet at DAA 33,000 by height switch, no fresh chain</h2>
-<p>Rollout: the cloud rehearsal in the morning (12 nodes, one chain through N + 600), then the devnet. Node 1, the observer node and the seed were restarted on the v2 binary with <code>--override-params-file</code> carrying <code>{"difficulty_v2_activation_daa": 33000}</code>; the three app machines received the same height through the signed update manifest (the engine writes it to the node's override file and restarts the node at a safe moment), the two PCs within two minutes of an <code>update-now</code> job, the Apple M5 Max on its next check; the height had first been set to 46,500 and was moved to 33,000 at 16:55 UTC by the same route. The height passed at 17:37 UTC: node 1 and the seed shared the sink (<code>ab6bb0a7147b</code> at block 33,291), the observer followed, both PCs' nodes processed blocks normally, difficulty kept moving (150.8M at the height, then stepping down as PC 2's card paused for a proving job). No node forked; no restart of the chain; a consensus rule changed under a running network with miners on three platforms. The first measurement of v2 on the devnet's own regime (two large miners, bursty parallel blocks) needs PC 2 back from its job; the cloud numbers stand meanwhile (settle 157 to 272 s, no swing).</p>
+<p>Rollout: the cloud rehearsal in the morning (12 nodes, one chain through N + 600), then the devnet. Node 1, the observer node and the seed were restarted on the v2 binary with <code>--override-params-file</code> carrying <code>{"difficulty_v2_activation_daa": 33000}</code>; the three app machines received the same height through the signed update manifest (the engine writes it to the node's override file and restarts the node at a safe moment), the two PCs within two minutes of an <code>update-now</code> job, the Apple M5 Max on its next check; the height had first been set to 46,500 and was moved to 33,000 at 16:55 UTC by the same route. The height passed at 17:37 UTC: node 1 and the seed shared the sink (<code>ab6bb0a7147b</code> at block 33,291), the observer followed, both PCs' nodes processed blocks normally, difficulty kept moving (150.8M at the height, then stepping down as the RTX 5090 Windows rig's card paused for a proving job). No node forked; no restart of the chain; a consensus rule changed under a running network with miners on three platforms. The first measurement of v2 on the devnet's own regime (two large miners, bursty parallel blocks) needs the RTX 5090 Windows rig back from its job; the cloud numbers stand meanwhile (settle 157 to 272 s, no swing).</p>
 <p>Third run (job run-20261004-r3-shards, 18:59 to 19:02 UTC, 3 min 22 s wall for the shard and both blocks): the buffered save closed the gap, the core proof finished at 19:00:38 and the compressed stage started at 19:00:39 UTC; shard timings repeated within 0.3 s of the first run (core 9.1 s, compressed 10.5 s). The second run (run-20261004-1912-shards) failed in its first second with a guest that returned 0 bytes of public values; the same sources executed the shard on the Apple M5 Max, and a forced rebuild of every source on the RTX 5090 machine cleared it (ledger P20 closed; the package build now has a gate).</p>
 <h2 id="4-october-2026-first-machine-in-the-united-states-a-windows-laptop-on-an-intel-integrated-gpu-synced-and-voting">4 October 2026, first machine in the United States: a Windows laptop on an Intel integrated GPU, synced and voting</h2>
 <p>A colleague's Windows laptop in the United States installed Igneum Miner 0.3.3 from the downloads link at about 18:52 UTC. Its node took the 38,000 headers and blocks from one peer, the seed node, in about eight minutes across the Atlantic. The only card is an Intel UHD integrated GPU: the OpenCL worker runs at 1.46 MH/s and found one block in its first four minutes; the identity's votes on checkpoints 1202 and 1203 were accepted by the network, so a laptop with no discrete card takes part in finality. Machine id 37ba0461 in the console; app log run <code>win-37ba0461-20261004-185342</code>.</p>
@@ -427,7 +384,7 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <p><strong>What remains uncertain.</strong> (1) The v3 split's hold was observed over the last 24 s of a 150-s split (the control crossed at 126 s); a longer split under the 240-s expiry (say 200 s) would show more held checkpoints, and the "held by the frozen table" line is logged at debug, which the runs did not enable. (2) No cloud rehearsal: the 12-node the cloud provider network was destroyed at 15:30 UTC, so the 95% target is shown on three nodes with emulated 300-ms links and on the cloud logs' arithmetic, not on the cloud topology itself; the rollout plan names the re-creation and the partition experiment to run first. (3) The frozen reference is the node's own highest lock on the chain, not the certificate carried in C_i's past, so two honest nodes can test one checkpoint against tables 30 s apart; in a connected network those tables differ by a minute of blocks, under a partition both are pre-split, and no run showed a disagreement, but it is a property argued, not proved. (4) The price: a sudden departure of a third or more now pauses finality for a full window (30 days on mainnet) instead of 1.4 to 10 days; a gradual one costs nothing. the maintainers asked for the pause over the fork; the number is stated in spec 3.7 item 2. (5) The fold clock is in memory: a restarted node folds from <code>daa(C_i) + depth</code>, a few seconds late at worst. (6) Binaries, all from <code>finality-fixes</code> 6aa69a45, hashes and checks in the rollout plan's section 2: Mac native <code>fe982a1d...</code> (verified running), Linux <code>7c100fc2...</code> (cargo-zigbuild, 34 min, not run on a Linux host), Windows <code>cc1d1001...</code> (mingw, 12 min 28 s, the v2 exe's DLL set, cannot run here); the Windows payload inputs were staged with <code>push-inputs.sh --no-deploy</code> into a scratch folder and NOT deployed (plan 7a).</p>
 <h2 id="4-october-2026-miner-performance-variant-racing-metal-worker-on-the-m5-max-the-rtx-5090-job-is-ready-not-run">4 October 2026, miner performance: variant racing (Metal worker on the M5 Max; the RTX 5090 job is ready, not run)</h2>
 <p>Method (<code>docs/design/miner-tuning.md</code>): at every hourly prepare the worker compiles the bound kernel in several variants (unroll, load path, register budget, threads per group, combinations), checks each bit for bit against the base kernel, times each for 2 s with the job loop paused, and keeps the fastest for the hour. Base is the kernel as it has always shipped. Code: <code>proto-metal/main.swift</code> (<code>raceProgram</code>, <code>--race-test</code>), <code>proto-cuda/nvrtc/worker.cpp</code> (<code>racePair</code>, <code>--race</code>), branch <code>miner-perf</code>, commit 460a99a.</p>
-<p>Machine: Apple M5 Max, Darwin 25.6.0 (macOS 26.6.2), 64 GiB. CONDITIONS: the live Igneum Miner app's own Metal worker (<code>igneum-bench --serve</code>, pid 14687) was mining on the same GPU throughout, and the load average was 130 at the build and 14 to 67 during the races (other agents' cargo builds). The absolute MH/s below are therefore about half of the card's (the app reported 26.7 MH/s on 4 October with the GPU to itself) and each window was contended; the numbers to read are the ratios, taken as the best of three interleaved rounds per variant so the contention hits every variant alike. A re-run with the Apple M5 Max card paused is listed under "next".</p>
+<p>Machine: Apple M5 Max, Darwin 25.6.0 (macOS 26.6.2), 64 GiB. CONDITIONS: the live Igneum Miner app's own Metal worker (<code>igneum-bench --serve</code>, pid &lt;n&gt;) was mining on the same GPU throughout, and the load average was 130 at the build and 14 to 67 during the races (other agents' cargo builds). The absolute MH/s below are therefore about half of the card's (the app reported 26.7 MH/s on 4 October with the GPU to itself) and each window was contended; the numbers to read are the ratios, taken as the best of three interleaved rounds per variant so the contention hits every variant alike. A re-run with the Apple M5 Max card paused is listed under "next".</p>
 <p>Command (under the measure lock, which holds the build lock too):</p>
 <p>    tools/lock/with-lock.sh measure bash scratchpad/metal/measure.sh       = swiftc -O -target arm64-apple-macos11 -o igneum-bench main.swift -framework Metal   (47 s under load 130)         igneum-bench --race-test --seed igneum-genesis --day 2026-10-04 --race-rounds 3 --race-bench-ms 2000         igneum-bench --race-test --seed igneum-hourly  --day 2026-10-04 --race-rounds 3 --race-bench-ms 2000</p>
 <p>Dataset 2^28 words (1 GiB, memory-hard, built in 285 and 295 ms), batch 2^22 nonces per launch, programs by the version-2 generator (128 loads per hash, no wide loads). 14 variants, every one bit-exact with base over 2^16 nonces (no variant discarded). MH/s = best of 3 rounds, 2 s windows, first launch of each window not counted.</p>
@@ -435,8 +392,8 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <p>Race cost: compile 1,798 ms (first seed; the Metal compiler cold) and 267 ms, timing 108 s for 14 variants x 3 rounds (2 s windows plus the 2^16-nonce check); in <code>--serve</code> the race runs one round, about 40 s, inside a 600-DAA lead, with mining paused only inside the windows.</p>
 <p>Reading. On Apple silicon the win is threads per threadgroup: the Metal worker has dispatched one 32-thread group per 32 nonces since 3 October, and 256-thread groups are 17 to 21% faster on both programs under these conditions, with 128 close behind; the unroll, register-budget and size-optimisation knobs are within noise or worse on their own. The winner agrees across the two programs, so a tuning entry <code>Apple_M5_Max: g256</code> would be the first fleet default; the race itself finds it in one round. These two programs are two points, under contention; the figure for the Apple M5 Max's own card with the GPU to itself is still to take. Nothing here says anything about NVIDIA: <code>w8</code> (8 warps per block) is the CUDA cousin of <code>g256</code>, and whether the 5090 moves at all is what the RTX 5090 machine job (<code>docs/plans/miner-perf.md</code>) measures. Range to measure there: from no gain to what the block-size and load-path variants give on a 1 GiB random-read kernel; no claim.</p>
 <p>Serve-protocol check (the same binary, <code>--serve --race-rounds 1</code>, scripted stdin: two inline jobs on pair A, the deferred race on A, <code>prepare</code> of pair B with its race, jobs on A meanwhile, the swap to B, a job across the 32-bit nonce boundary): 44 jobs done, 0 errors, no found line missed; the inline compile of pair A 220 ms, the deferred race on A <code>winner g256 14.207 base 11.404 gain +24.58%</code> (compile 563 ms, 36 s of windows); <code>prepared</code> for B after 35,554 ms = program 58 ms, dataset 524 ms, race 34,972 ms (<code>winner mt512-g256 12.807 base 10.346 gain +23.79%</code>), the swap to B in 0.01 ms, the 64-nonce job across the 32-bit boundary 14.8 ms. Found by this check: the job queued during a race waited for the whole race (job 2 done after 35,946 ms; the mutex is not fair), so the race now pauses 150 ms after every window (commit 32d1c01). Re-check with the pause (<code>--serve</code>, a job every 3 s through both races, load average 134 to 183): every job during the deferred race on A and the prepare race on B finished in 0.17 to 2.8 s (33 jobs, none over 2,831 ms, versus 35,946 ms before), the race on B 39.8 s inside a 40.2 s prepare, winner g256 both times, swap 0.01 ms, 0 errors; the race's own windows were 2 to 3 s longer in total than without the pause, as expected.</p>
-<p>NVIDIA side, what the Apple M5 Max could check: <code>proto-cuda/nvrtc/emu/test.sh</code> PASS on the race build (the race off under emulation, "variants 1 base only, no race (emulation)" logged per pair; 9 source checks PASS, the --serve protocol with prepare, swap and self-heal unchanged, 17 sampled hashes equal to <code>igneum-pow hash-bound</code>); mingw cross-compile of <code>igneum-worker-cuda.exe</code> with the race (<code>build-windows.sh</code>, mingw, static): 1,509,376 bytes, the same imports as the shipped worker (KERNEL32 and the Universal CRT), icon and version block verified; zipped as <code>igneum-worker-cuda-race.zip</code> (429,387 bytes, sha256 321a086e...c4c049) for the RTX 5090 machine 1 job. The race has not run on a GPU.</p>
-<p>Next: the RTX 5090 machine 1 job (ready in <code>docs/plans/miner-perf.md</code>); the Apple M5 Max card paused for a clean absolute table; the Mac app's own worker on this build (its hourly prepare then races by itself and logs the TUNING record).</p>
+<p>NVIDIA side, what the Apple M5 Max could check: <code>proto-cuda/nvrtc/emu/test.sh</code> PASS on the race build (the race off under emulation, "variants 1 base only, no race (emulation)" logged per pair; 9 source checks PASS, the --serve protocol with prepare, swap and self-heal unchanged, 17 sampled hashes equal to <code>igneum-pow hash-bound</code>); mingw cross-compile of <code>igneum-worker-cuda.exe</code> with the race (<code>build-windows.sh</code>, mingw, static): 1,509,376 bytes, the same imports as the shipped worker (KERNEL32 and the Universal CRT), icon and version block verified; zipped as <code>igneum-worker-cuda-race.zip</code> (429,387 bytes, sha256 321a086e...c4c049) for the the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job. The race has not run on a GPU.</p>
+<p>Next: the the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job (ready in <code>docs/plans/miner-perf.md</code>); the Apple M5 Max card paused for a clean absolute table; the Mac app's own worker on this build (its hourly prepare then races by itself and logs the TUNING record).</p>
 <h2 id="4-october-2026-miner-fault-guards-and-the-app-watchdog-measured-against-a-fake-worker-miner-community-lead-app-owner">4 October 2026, miner fault guards and the app watchdog measured against a fake worker (miner-community-lead, app owner)</h2>
 <p>Machine: Apple M5 Max, load average 17 to 92 (other agents' builds and runs throughout), everything at nice 19 under <code>tools/lock/with-lock.sh run</code>. These are recoveries and seconds, not hash rates: nothing here is a performance number. Private test networks only: one <code>igneumd</code> (devnet suffix 9950, ports 29950 to 29953) for the miner scenarios and the app's own private node (suffix 9960, ports 29960 and 29961) for the app scenarios; the live devnet was not touched. Worker: <code>tools/reliability/fake-worker.mjs</code>, a stand-in that speaks the serve protocol and misbehaves on command (jobs done in 0.3 ms, 0 hashes, silence, wrong hashes, refused prepares); it never hashes, so no block was found and the fake rate of about 157 MH/s inside jobs is an invented number. Miner: fork branch <code>miner-reliability</code> (<code>aea5ac6d</code>, <code>501363e0</code>, <code>945153ab</code>), <code>igneum-miner</code> release with <code>--status-secs 10</code>. App: <code>app/igneum-app</code> at <code>f39e240</code> plus the card-message fix, <code>IGNEUM_APP_STATUS_SECS=10</code>. Harness: <code>tools/reliability/run.mjs</code> and <code>app-run.mjs</code>; every scenario states what must and must not appear, and the detectors were shown to fire on the faulting scenarios and stay quiet on the healthy stretches before any number below was kept.</p>
 <p>Miner guards (review round 4 M26, M27, X21), one fresh miner process per scenario:</p>
@@ -486,24 +443,24 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <p><strong>G12</strong> is covered by the digest run (the environment's schedule is part of the digest, so a devnet node with <code>IGNEUM_POW_EPOCH_BLOCKS</code> set cannot connect to one without it) and by <code>env_pow_schedule_is_devnet_and_simnet_only</code>; no mainnet node was started tonight. <strong>M31</strong> is covered by <code>largest_coinbase_fits_on_every_network</code>; no simnet network was started tonight (the red team's <code>tools/exec-attacks/net.sh</code> is the run that would show templates on simnet without an override).</p>
 <p><strong>Uncertain.</strong> (1) Every run is fast time (W = 120 DAA, ban 120, depth 20) on three nodes with 100-ms links; the mainnet values are 30 days, 30 days and 60 blocks. (2) The ban run shows one equivocation at one index; the red team's s1 (equivocation at every index, two keys) was re-run on the new build only through the red team's f23 above (0 refusals where the evening had 9 / 3 / 4). (3) The digest-less allowance on devnet and simnet is deliberate for the rollout and is a hole until removed. (4) The reorg run's final pass had the majority lock no index during the first 60 s of the split, so the re-determination at 8 and 9 was exercised, the pending-certificate path only at 10 and 11; the first pass exercised the opposite. (5) The un-determination rule has a unit test and one network pass (<code>reorg-final2</code>) in which the shallow-sink case did not recur, so the rule is exercised by the test, not by a run; the case needs a split whose difficulty drifts enough for blue work to overtake blue score, which happened once in four runs. (6) The red team's f24b is a window-length partition at 6 blocks/s, so it measures F21's stated limit, not F24; a 4/2 cut under 20 s at that rate would be the F24 case.</p>
 <h2 id="5-october-2026-live-devnet-the-first-shards-proven-verified-and-paid">5 October 2026, live devnet: the first shards proven, verified and paid</h2>
-<p>Proving v0 activated at DAA 84,100 (manifest <code>consensus.override</code>, every node restarted with the same file; a hand node restarted early with another value was refused by the digest handshake and sat isolated for 20 minutes until it was restarted with the same file). The first proof records came from PC 2's RTX 5090 (SP1 CUDA under WSL2, app 0.3.7, node 2b6d23ef) and were verified by the Apple M5 Max node's verifier (<code>igneum-prove-host --mode verify</code>, the only block producer with a verifier until 0.3.7 put one on every machine) and paid at the carrying chain block.</p>
-<div class="tbl"><table><thead><tr><th>What</th><th>Measured</th></tr></thead><tbody><tr><td>First shard record in the pool (observer)</td><td>10:51 UTC, block 94,904 on the live page, prover key e809e396, shard 0, 0 pgas (an empty shard)</td></tr><tr><td>Paid shards by 10:53 UTC (Mac node <code>igneum_getProvingStatus</code>)</td><td>3 shards, 3.370437410 IGN in total, pool balance 68,601.72 IGN</td></tr><tr><td>Pool at that moment</td><td>4 entries: 3 pending, 1 failed verification, 0 verified-and-waiting</td></tr><tr><td>Non-empty shards</td><td>not yet: the exporter's post-root assertion fires on blocks with content (58,584 to 58,984 on 5 October); investigation open</td></tr><tr><td>The assertion, explained (12:30 UTC, branch prover-match)</td><td>Not block content. Every block it fired on is empty (PC 2's export logs: 58,752 to 58,843 hit the assertion; 58,584 to 58,740 hit the backslash path of 6d51e53), one reward plus the pool credit, no transactions, no payouts. PC 2's exporter was a stale build: the panic names shard.rs:175, the line before commit 1251f0a moved the assert to 179, and that core's planner gave an empty segment the pre-root as its post-root while the statement applied the rewards (left = the node's root after the rewards, right = the root before them, as the log shows for 58,752). The core at master reproduces 58,927 and 59,192 with the node's roots, and the same shape (59,507: one reward to the same miner) was proven and paid after the 10:49 and 10:52 UTC rebuilds on PC 2. Branch prover-match: fixture <code>block-58927-empty-reward.json</code>, <code>export/tests/fixtures.rs</code> (every fixture reproduces; an empty segment ends at the root after the rewards), and a source stamp on the first line of the exporter and the host so a stale binary names itself. The guest is untouched: built in one directory, master and the branch give byte-identical loadable segments for the shard program and the aggregator (shard program id 0x1ec8b941 at master in that directory). Noted on the way: the same sources built in three directories on this Mac gave two different guest ELFs (text segment c173b3de in the main checkout and in a fresh worktree, 830f7433 in the branch's worktree, shard program id 0x366e2aca there), so the program id is not yet a pure function of the sources on a native build; SP1's docker build is the reproducible path and is not in use. Open item.</td></tr></tbody></table></div>
-<p>Commands: <code>curl -X POST http://127.0.0.1:26800 -d '{"jsonrpc":"2.0","id":1,"method":"igneum_getProvingStatus","params":[]}'</code> on the Apple M5 Max; <code>node tools/logs.mjs</code> for PC 2's prover lines (<code>prover: block N shard 0 assigned to win-1ccfe586-1-1: export, cut, prove (CUDA), sign, submit</code>).</p>
-<h2 id="5-october-2026-the-program-id-split-why-the-apple-m5-max-rejected-pc-2-s-proofs-and-the-verifier-at-114-s">5 October 2026, the program id split: why the Apple M5 Max rejected PC 2's proofs, and the verifier at 114 s</h2>
+<p>Proving v0 activated at DAA 84,100 (manifest <code>consensus.override</code>, every node restarted with the same file; a hand node restarted early with another value was refused by the digest handshake and sat isolated for 20 minutes until it was restarted with the same file). The first proof records came from the RTX 5090 Windows rig's RTX 5090 (SP1 CUDA under WSL2, app 0.3.7, node 2b6d23ef) and were verified by the Apple M5 Max node's verifier (<code>igneum-prove-host --mode verify</code>, the only block producer with a verifier until 0.3.7 put one on every machine) and paid at the carrying chain block.</p>
+<div class="tbl"><table><thead><tr><th>What</th><th>Measured</th></tr></thead><tbody><tr><td>First shard record in the pool (observer)</td><td>10:51 UTC, block 94,904 on the live page, prover key e809e396, shard 0, 0 pgas (an empty shard)</td></tr><tr><td>Paid shards by 10:53 UTC (Mac node <code>igneum_getProvingStatus</code>)</td><td>3 shards, 3.370437410 IGN in total, pool balance 68,601.72 IGN</td></tr><tr><td>Pool at that moment</td><td>4 entries: 3 pending, 1 failed verification, 0 verified-and-waiting</td></tr><tr><td>Non-empty shards</td><td>not yet: the exporter's post-root assertion fires on blocks with content (58,584 to 58,984 on 5 October); investigation open</td></tr><tr><td>The assertion, explained (12:30 UTC, branch prover-match)</td><td>Not block content. Every block it fired on is empty (the RTX 5090 Windows rig's export logs: 58,752 to 58,843 hit the assertion; 58,584 to 58,740 hit the backslash path of 6d51e53), one reward plus the pool credit, no transactions, no payouts. the RTX 5090 Windows rig's exporter was a stale build: the panic names shard.rs:175, the line before commit 1251f0a moved the assert to 179, and that core's planner gave an empty segment the pre-root as its post-root while the statement applied the rewards (left = the node's root after the rewards, right = the root before them, as the log shows for 58,752). The core at master reproduces 58,927 and 59,192 with the node's roots, and the same shape (59,507: one reward to the same miner) was proven and paid after the 10:49 and 10:52 UTC rebuilds on the RTX 5090 Windows rig. Branch prover-match: fixture <code>block-58927-empty-reward.json</code>, <code>export/tests/fixtures.rs</code> (every fixture reproduces; an empty segment ends at the root after the rewards), and a source stamp on the first line of the exporter and the host so a stale binary names itself. The guest is untouched: built in one directory, master and the branch give byte-identical loadable segments for the shard program and the aggregator (shard program id 0x1ec8b941 at master in that directory). Noted on the way: the same sources built in three directories on this Mac gave two different guest ELFs (text segment c173b3de in the main checkout and in a fresh worktree, 830f7433 in the branch's worktree, shard program id 0x366e2aca there), so the program id is not yet a pure function of the sources on a native build; SP1's docker build is the reproducible path and is not in use. Open item.</td></tr></tbody></table></div>
+<p>Commands: <code>curl -X POST http://127.0.0.1:26800 -d '{"jsonrpc":"2.0","id":1,"method":"igneum_getProvingStatus","params":[]}'</code> on the Apple M5 Max; <code>node tools/logs.mjs</code> for the RTX 5090 Windows rig's prover lines (<code>prover: block N shard 0 assigned to win-1ccfe586-1-1: export, cut, prove (CUDA), sign, submit</code>).</p>
+<h2 id="5-october-2026-the-program-id-split-why-the-apple-m5-max-rejected-the-rtx-5090-windows-rig-s-proofs-and-the-verifier-at-114-s">5 October 2026, the program id split: why the Apple M5 Max rejected the RTX 5090 Windows rig's proofs, and the verifier at 114 s</h2>
 <p>Machine: Apple M5 Max under the live devnet node, the Metal miner and two other agents' builds (every number here is wall time under that load, taken through the measure lock). Code: <code>proving/igneum-prove</code> on branch <code>program-id</code>, SP1 6.8.1, circuit v6.1.0.</p>
-<div class="tbl"><table><thead><tr><th>Host</th><th>Built</th><th>Shard program id</th><th>Source</th></tr></thead><tbody><tr><td>Mac, shipped (<code>Igneum Miner.app/Contents/Resources/bin/igneum-prove-host</code>, app 0.3.7)</td><td>5 Oct 10:48, release tree on the Apple M5 Max</td><td><code>0x0559759b3d8740b26ceceb2c56054b89194878ab691b018d7dd2f8af2f2242dd</code></td><td>its own <code>--mode verify</code> setup line</td></tr><tr><td>PC 2, WSL2 CUDA (<code>&lt;server path&gt;</code>)</td><td>4 Oct 19:00Z, package sources</td><td><code>0x05db1aca65f8ae9d585c7bd178a832d92a67275857f21c0d484a58c06dba61a3</code></td><td>app log <code>run-20261004-r3-shards</code> (<code>node tools/logs.mjs job-collect-pc2-applog-paid-1ccfe586</code>); confirmed by the <code>sp1_vk_digest</code> inside its proof of block 59507 shard 0 (below)</td></tr><tr><td>Mac, fresh worktree <code>igneum-wt-programid</code></td><td>5 Oct 12:07Z, same sources as the shipped host</td><td><code>0x0dfade071ffc05a50be5f7e6640fb12638bac0ea63697ec252863f55658be16a</code></td><td><code>igneum-prove-pin</code></td></tr></tbody></table></div>
-<p>Three builds of the same guest sources, three ids. Cause: <code>host/build.rs</code> compiled the guest with <code>sp1_build::build_program</code> on whatever machine built the host, and the guest ELF depends on where it is built. Shown by <code>strings</code> on the two Mac ELFs: 946 anonymous symbol names differ, and the crate hash of <code>igneum_prove_core</code> is <code>Csl6o96CsXEfN_</code> in the main checkout against <code>Cs5Jl7brLd39a_</code> in the worktree (cargo's <code>-C metadata</code> for a path crate includes the checkout path, and rustc's symbol names carry it); the ELFs also embed <code>~/.cargo/registry/...</code> panic-location strings, which differ again on Linux. A different ELF is a different verifying key, so every verifier rejects every other machine's proof ("sp1 vk hash mismatch" inside SP1's <code>verify_compressed</code>), and the node log showed it as a bare <code>NOT VERIFIED</code> after 114 s to 138 s. Over the same window the Apple M5 Max's pool read 16 entries, 9 failed, 0 verified, 22 shards paid (included by PC 2's own node).</p>
+<div class="tbl"><table><thead><tr><th>Host</th><th>Built</th><th>Shard program id</th><th>Source</th></tr></thead><tbody><tr><td>Mac, shipped (<code>Igneum Miner.app/Contents/Resources/bin/igneum-prove-host</code>, app 0.3.7)</td><td>5 Oct 10:48, release tree on the Apple M5 Max</td><td><code>0x0559759b3d8740b26ceceb2c56054b89194878ab691b018d7dd2f8af2f2242dd</code></td><td>its own <code>--mode verify</code> setup line</td></tr><tr><td>the RTX 5090 Windows rig, WSL2 CUDA (<code>&lt;server path&gt;</code>)</td><td>4 Oct 19:00Z, package sources</td><td><code>0x05db1aca65f8ae9d585c7bd178a832d92a67275857f21c0d484a58c06dba61a3</code></td><td>app log <code>run-20261004-r3-shards</code> (<code>node tools/logs.mjs job-collect-pc2-applog-paid-1ccfe586</code>); confirmed by the <code>sp1_vk_digest</code> inside its proof of block 59507 shard 0 (below)</td></tr><tr><td>Mac, fresh worktree <code>igneum-wt-programid</code></td><td>5 Oct 12:07Z, same sources as the shipped host</td><td><code>0x0dfade071ffc05a50be5f7e6640fb12638bac0ea63697ec252863f55658be16a</code></td><td><code>igneum-prove-pin</code></td></tr></tbody></table></div>
+<p>Three builds of the same guest sources, three ids. Cause: <code>host/build.rs</code> compiled the guest with <code>sp1_build::build_program</code> on whatever machine built the host, and the guest ELF depends on where it is built. Shown by <code>strings</code> on the two Mac ELFs: 946 anonymous symbol names differ, and the crate hash of <code>igneum_prove_core</code> is <code>Csl6o96CsXEfN_</code> in the main checkout against <code>Cs5Jl7brLd39a_</code> in the worktree (cargo's <code>-C metadata</code> for a path crate includes the checkout path, and rustc's symbol names carry it); the ELFs also embed <code>~/.cargo/registry/...</code> panic-location strings, which differ again on Linux. A different ELF is a different verifying key, so every verifier rejects every other machine's proof ("sp1 vk hash mismatch" inside SP1's <code>verify_compressed</code>), and the node log showed it as a bare <code>NOT VERIFIED</code> after 114 s to 138 s. Over the same window the Apple M5 Max's pool read 16 entries, 9 failed, 0 verified, 22 shards paid (included by the RTX 5090 Windows rig's own node).</p>
 <p>Fix: the guests are pinned build artefacts (<code>proving/igneum-prove/elf/</code>: both ELFs, both verifying keys, <code>manifest.json</code> with SHA-256 hashes and ids), embedded by the host and checked at every start; <code>--mode verify</code> runs on SP1's light verifier with the pinned key, no prover client and no key setup; the verify line prints the id the proof was made with next to ours. Pinned set: shard <code>0x0dfade07...be16a</code>, aggregator <code>0x135e67e7...6c62</code>.</p>
-<div class="tbl"><table><thead><tr><th>Verify of PC 2's proof of block 59507 shard 0 (1,272,897 bytes) on the Apple M5 Max</th><th>Setup</th><th>Verify</th><th>Verdict</th></tr></thead><tbody><tr><td>Before: shipped host, <code>ProverClient::from_env</code> + two key setups</td><td>125.82 s</td><td>0.383 s</td><td>NOT VERIFIED, no reason given</td></tr><tr><td>Before, as the node saw it (blocks 59373 and 59402)</td><td>138.6 s and 114.4 s in all</td><td>0.409 s and 0.104 s</td><td>NOT VERIFIED</td></tr><tr><td>After: pinned key, light verifier (<code>program-id</code> host, same proof)</td><td>2.085 s</td><td>0.002 s (refused on the program id before any field arithmetic)</td><td>NOT VERIFIED, <code>program id 0x05db1aca...61a3 IS NOT OURS 0x0dfade07...be16a</code>; 2.35 s wall, exit 3</td></tr><tr><td>After, known-good case: block 56 shard 0 proven with the pinned ELF on this Mac (<code>--mode compressed</code>, 558,137 cycles, prove 1,066 s under load 113), verified against its real statement</td><td>1.323 s</td><td>0.108 s</td><td>VERIFIED, <code>program id ... (ours)</code>; 1.80 s wall, exit 0</td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>Verify of the RTX 5090 Windows rig's proof of block 59507 shard 0 (1,272,897 bytes) on the Apple M5 Max</th><th>Setup</th><th>Verify</th><th>Verdict</th></tr></thead><tbody><tr><td>Before: shipped host, <code>ProverClient::from_env</code> + two key setups</td><td>125.82 s</td><td>0.383 s</td><td>NOT VERIFIED, no reason given</td></tr><tr><td>Before, as the node saw it (blocks 59373 and 59402)</td><td>138.6 s and 114.4 s in all</td><td>0.409 s and 0.104 s</td><td>NOT VERIFIED</td></tr><tr><td>After: pinned key, light verifier (<code>program-id</code> host, same proof)</td><td>2.085 s</td><td>0.002 s (refused on the program id before any field arithmetic)</td><td>NOT VERIFIED, <code>program id 0x05db1aca...61a3 IS NOT OURS 0x0dfade07...be16a</code>; 2.35 s wall, exit 3</td></tr><tr><td>After, known-good case: block 56 shard 0 proven with the pinned ELF on this Mac (<code>--mode compressed</code>, 558,137 cycles, prove 1,066 s under load 113), verified against its real statement</td><td>1.323 s</td><td>0.108 s</td><td>VERIFIED, <code>program id ... (ours)</code>; 1.80 s wall, exit 0</td></tr></tbody></table></div>
 <p>Before: 127.0 s wall per proof on the Apple M5 Max (the node saw 114 s to 139 s). After: 1.8 s to 2.4 s wall, under the 2 s target for the verify call itself; the remaining 1.3 s to 2.1 s is SP1's light verifier construction plus paging a 58 MB binary under load, and would shrink in a long-lived verifier process. Unit tests (<code>cargo test -p igneum-prove-host --bin igneum-prove-host</code>): the embedded files hash to the manifest, the embedded keys derive the manifest's ids, a changed file is refused; the ignored test re-runs SP1's setup on the embedded ELFs and gets the pinned ids. <code>tools/ci/pinned-guests-check.sh</code> was shown failing on an empty <code>elf/</code> and passing on the pinned one.</p>
-<p>What every machine must do: the pinned shard id <code>0x0dfade07...be16a</code> differs from every id now running (Mac <code>0x0559759b...</code>, PC 2 <code>0x05db1aca...</code>), so this is a guest change for the whole devnet, and proofs in flight at the switch are rejected by a verifier that has moved. Rollout order (proving/README.md, "Pinned guest programs"): provers off on every machine; wait until <code>igneum_getProvingStatus</code> shows an empty pool on every node; install the host built from this <code>elf/</code> on every node (Mac DMG; PCs through <code>igneum-prove-wsl2.zip</code>, whose package carries <code>elf/</code>, so the WSL build embeds the same files); confirm <code>igneum-prove-host --mode id</code> prints the same shard id everywhere; provers back on. From then on a differing id is impossible without a change to the committed <code>elf/</code>.</p>
+<p>What every machine must do: the pinned shard id <code>0x0dfade07...be16a</code> differs from every id now running (Mac <code>0x0559759b...</code>, the RTX 5090 Windows rig <code>0x05db1aca...</code>), so this is a guest change for the whole devnet, and proofs in flight at the switch are rejected by a verifier that has moved. Rollout order (proving/README.md, "Pinned guest programs"): provers off on every machine; wait until <code>igneum_getProvingStatus</code> shows an empty pool on every node; install the host built from this <code>elf/</code> on every node (Mac DMG; PCs through <code>igneum-prove-wsl2.zip</code>, whose package carries <code>elf/</code>, so the WSL build embeds the same files); confirm <code>igneum-prove-host --mode id</code> prints the same shard id everywhere; provers back on. From then on a differing id is impossible without a change to the committed <code>elf/</code>.</p>
 <h2 id="5-october-2026-afternoon-live-devnet-real-transactions-the-first-non-empty-shard-proven-and-paid-and-the-exporter-s-block-structure-fixed-execution-engineer">5 October 2026 (afternoon), live devnet: real transactions, the first non-empty shard proven and paid, and the exporter's block structure fixed (execution engineer)</h2>
-<p>Until this run the devnet had carried no transaction at all, so every one of the 349 shards paid before 15:35 UTC was empty (0 pgas). <code>tools/txgen/run.mjs</code> (new; viem for EIP-1559 signing, otherwise Node 22 built-ins) funds generated wallets from the devnet dev-fee key (<code>~/.config/igneum/dev-fee-devnet.json</code>, keys of the generated wallets in <code>~/.config/igneum/txgen/wallets.json</code>, mode 0600) and sends transfers between them at a steady rate through one node's EVM RPC; <code>tools/txgen/proving-watch.mjs</code> samples the proving layer during a run and builds the per-block report afterwards. Both runs went through the Apple M5 Max node (127.0.0.1:26800) under <code>tools/lock/with-lock.sh run</code>, with PC 2's RTX 5090 (app 0.3.8, SP1 CUDA under WSL2) as the only prover and the Apple M5 Max node as the verifier. Chain id 4463, gas price quote 3 gwei (1 gwei execution base, 1 gwei proving base at ratio 1.0, 1 gwei tip), <code>eth_estimateGas</code> 25,380 for a transfer.</p>
+<p>Until this run the devnet had carried no transaction at all, so every one of the 349 shards paid before 15:35 UTC was empty (0 pgas). <code>tools/txgen/run.mjs</code> (new; viem for EIP-1559 signing, otherwise Node 22 built-ins) funds generated wallets from the devnet dev-fee key (<code>&lt;config path&gt;</code>, keys of the generated wallets in <code>&lt;config path&gt;</code>, mode 0600) and sends transfers between them at a steady rate through one node's EVM RPC; <code>tools/txgen/proving-watch.mjs</code> samples the proving layer during a run and builds the per-block report afterwards. Both runs went through the Apple M5 Max node (127.0.0.1:26800) under <code>tools/lock/with-lock.sh run</code>, with the RTX 5090 Windows rig's RTX 5090 (app 0.3.8, SP1 CUDA under WSL2) as the only prover and the Apple M5 Max node as the verifier. Chain id 4463, gas price quote 3 gwei (1 gwei execution base, 1 gwei proving base at ratio 1.0, 1 gwei tip), <code>eth_estimateGas</code> 25,380 for a transfer.</p>
 <div class="tbl"><table><thead><tr><th>Run</th><th>Window (UTC)</th><th>Wallets</th><th>Sent</th><th>Included</th><th>Included per s</th><th>Latency p50 / p90 / max (s)</th><th>Blocks with content</th><th>Transfers per content block p50 / p90 / max</th><th>Failures</th><th>Fees paid (IGN)</th></tr></thead><tbody><tr><td>1, master code</td><td>15:37:30 to 15:57:30</td><td>16</td><td>2,275</td><td>2,161 (103 pending at the cut, all with a receipt 20 s later)</td><td>1.86</td><td>40.7 / 110.8 / 209</td><td>59</td><td>8 / 92 / 224</td><td>60: 49 "replacement underpriced", 10 dropped, 1 skipped (9 of the 11 executed later, see below)</td><td>0.091</td></tr><tr><td>2, fixed code</td><td>15:59:34 to 16:14:34</td><td>16</td><td>1,650</td><td>1,633 (17 pending at the cut)</td><td>1.71</td><td>45.7 / 128.7 / 253</td><td>48</td><td>10 / 99 / 224</td><td>0 (0 nonce retries, 0 deferred)</td><td>0.069</td></tr></tbody></table></div>
 <p>Funding: 16 wallets at 2 IGN each, 16 IGN from the dev-fee address, which held 891 IGN before and 997 IGN after (it receives 1 block reward in 100 from every fee-paying miner). The wallets end with 31.83 IGN; the whole spend of the afternoon is 16.16 IGN.</p>
 <p>What paced inclusion. There is no p2p relay of EVM transactions (execution-layer ledger item 9), so only blocks produced by the Apple M5 Max's own miner carry what the Apple M5 Max node's RPC received. The Mac miner had 134 blocks accepted in run 1's window and 59 of them carried transfers: the pool hands a sender's contiguous run to one template and then withholds that sender for 4 s (<code>pool.rs HANDOUT_COOLDOWN</code>), templates are rebuilt on every tip change (about one a second, 3,888 switches in the miner's counters), so a sender is mineable about 1 s in 5 and inclusion comes in bursts (quiet 50 s stretches, then a Mac block with 205 or 224 transfers). Measured before run 1 started: 12 of the 14 Mac blocks found while the 8 funding transfers waited 124 s were empty. The pool refuses a nonce more than 16 ahead of the account (<code>MAX_NONCE_GAP</code>), so 8 wallets at 2 per second would hit the gap; 16 wallets keep every queue under 14. Design rule 463 already names this cooldown as a stand-in until the executor listens to block-added.</p>
 <p>The two tool defects run 1 found, fixed before run 2. (1) A transaction judged "not in the pool and in no block" 90 s after the send was counted dropped and the wallet's nonce re-synced to its <code>latest</code> nonce; the verdict is transient around a one-block selected-chain reorg (50 in the window, one every 8 s, the carrying block is re-merged seconds later), and the re-sync made the next send reuse a nonce already queued, which the pool refused as "replacement underpriced" (49 times). Now a drop needs two such verdicts 60 s apart and every re-sync reads the node's pending nonce (<code>eth_getTransactionCount</code> with <code>pending</code>, <code>pool.pending_nonce</code>). The wallets' chain nonces show 2,273 of run 1's 2,275 transfers executed, so 9 of the 11 "lost" verdicts were premature. (2) "nonce gap too large" and "too many queued" are back-pressure, not nonce errors: counted deferred, no retry.</p>
-<div class="tbl"><table><thead><tr><th>Proving during run 1 (node log 15:35:25 to 16:08:31 UTC, PC 2 app log by collect job)</th><th>Measured</th></tr></thead><tbody><tr><td>Proof records accepted / verified / rejected / paid lines</td><td>36 / 36 / 0 / 43 (7 records' "paid" line logged twice at the same carrying block after a reorg re-executed it; <code>paidShards</code> moved by exactly 36, no double payment)</td></tr><tr><td>Shards with pgas &gt; 0 among them</td><td>1: block 72704 shard 0, 29 transfers, 5,800 pgas, 609,000 gas (the prover takes the newest unpaid assigned shard, <code>prover.rs choose</code>; content blocks were 59 of about 1,400 in the window)</td></tr><tr><td>Block 72704 timeline</td><td>chain block executed 15:43:29.9; PC 2 assigned 15:43:43; proven and submitted in 34 s; record accepted by the Apple M5 Max 15:44:17 (47 s after execution); verified in 2.3 s wall, 0.297 s in the verifier; paid 1.7623286 IGN at chain block 72744 (15:44:22)</td></tr><tr><td>PC 2 prove+submit time, empty shards in the window (n=34)</td><td>p50 28 s, 27 to 29 s; 32 to 49 s for 73166 to 73339 while the housekeeping job <code>build-hk-tests-1</code> (five node suites and the app tests) ran on PC 2 from 15:54:13</td></tr><tr><td>Verify wall time on the Apple M5 Max, p50 / max</td><td>1.6 s / 6.8 s (the verifier itself 0.05 to 0.30 s)</td></tr><tr><td>Payout per shard</td><td>the segment's pool credit, 0.8813 IGN per mergeset block (20% of the 4.407 IGN block reward), divided by its shards: 0.88, 1.76 or 2.64 IGN for 1, 2 or 3 blocks; content changes nothing in v0 (<code>proving.rs shard_payouts</code>)</td></tr><tr><td>Content shard that failed</td><td>block 72803 shard 0: 7 copies skipped as NonceTooLow (duplicates from parallel blocks), 0 executed, 1,400 pgas; PC 2: "record refused: statement 0xa1ac35ee... is not the native statement 0xa00dfb3f... (native-execution veto)"; never proven</td></tr><tr><td>Run 2</td><td>5 shards proven, all empty, 28 to 30 s; at 16:02:28 the coordinated 0.3.9 rollout switched PC 2's prover off (<code>prove-off-pc2-039</code>), so run 2 had a prover for its first 3 minutes only</td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>Proving during run 1 (node log 15:35:25 to 16:08:31 UTC, the RTX 5090 Windows rig app log by collect job)</th><th>Measured</th></tr></thead><tbody><tr><td>Proof records accepted / verified / rejected / paid lines</td><td>36 / 36 / 0 / 43 (7 records' "paid" line logged twice at the same carrying block after a reorg re-executed it; <code>paidShards</code> moved by exactly 36, no double payment)</td></tr><tr><td>Shards with pgas &gt; 0 among them</td><td>1: block 72704 shard 0, 29 transfers, 5,800 pgas, 609,000 gas (the prover takes the newest unpaid assigned shard, <code>prover.rs choose</code>; content blocks were 59 of about 1,400 in the window)</td></tr><tr><td>Block 72704 timeline</td><td>chain block executed 15:43:29.9; the RTX 5090 Windows rig assigned 15:43:43; proven and submitted in 34 s; record accepted by the Apple M5 Max 15:44:17 (47 s after execution); verified in 2.3 s wall, 0.297 s in the verifier; paid 1.7623286 IGN at chain block 72744 (15:44:22)</td></tr><tr><td>the RTX 5090 Windows rig prove+submit time, empty shards in the window (n=34)</td><td>p50 28 s, 27 to 29 s; 32 to 49 s for 73166 to 73339 while the housekeeping job <code>build-hk-tests-1</code> (five node suites and the app tests) ran on the RTX 5090 Windows rig from 15:54:13</td></tr><tr><td>Verify wall time on the Apple M5 Max, p50 / max</td><td>1.6 s / 6.8 s (the verifier itself 0.05 to 0.30 s)</td></tr><tr><td>Payout per shard</td><td>the segment's pool credit, 0.8813 IGN per mergeset block (20% of the 4.407 IGN block reward), divided by its shards: 0.88, 1.76 or 2.64 IGN for 1, 2 or 3 blocks; content changes nothing in v0 (<code>proving.rs shard_payouts</code>)</td></tr><tr><td>Content shard that failed</td><td>block 72803 shard 0: 7 copies skipped as NonceTooLow (duplicates from parallel blocks), 0 executed, 1,400 pgas; the RTX 5090 Windows rig: "record refused: statement 0xa1ac35ee... is not the native statement 0xa00dfb3f... (native-execution veto)"; never proven</td></tr><tr><td>Run 2</td><td>5 shards proven, all empty, 28 to 30 s; at 16:02:28 the coordinated 0.3.9 rollout switched the RTX 5090 Windows rig's prover off (<code>prove-off-pc2-039</code>), so run 2 had a prover for its first 3 minutes only</td></tr></tbody></table></div>
 <p>The 72803 cause, in the exporter, not the core. The core's tx accumulator (<code>executor.rs Carry::absorb</code>) hashes every transaction's including miner and blue flag, skipped copies included, and the link hashes the block index; the node enumerates every mergeset block, empty ones included (<code>exec/executor.rs</code>), with the chain block itself last. The export (<code>igneum_exportSegments</code>) listed entries per block as executed-then-skipped with no position, no empty blocks and no miner on a skipped copy, and <code>igneum-prove-export blocks_of</code> sorted them by sequence (every skipped copy behind every executed one), merged consecutive blocks of one miner, dropped the empty blocks and gave a block of skipped copies only the previous block's miner or the zero address. Shown on the Apple M5 Max with the old exporter binary (built from master at 16:03): block 72803 rebuilt under the zero address, link_out 0x362fef10... against the node's 0x111a55ac...; block 72854 (an empty block before the 205 transfers, no skipped copy) link_out 0xd34e57b7... against the node's 0x85f27dc1..., roots equal. 72704 verified only because its transaction block came first.</p>
 <p>The fix, both sides ours. Fork (<code>vendor/igneum-node-txgen</code>, branch <code>txgen-export</code>, <code>exec/src/rpc.rs</code>): the export names the mergeset per segment ("blocks": hash, miner, blue, txCount, empty blocks included) and gives every entry "block" and "position" from the executor's boundaries (body order), skipped copies with their block's miner; records without boundaries keep the old shape. Exporter (<code>proving/igneum-prove/export/src/main.rs blocks_of</code>): rebuilds from those fields block for block; an old export is kept in its order and a block of skipped copies whose miner it does not name is refused instead of guessed. <code>tools/prove-fixtures/complete-export.mjs</code> completes an old export with the mergeset from <code>igneum_getSegment</code> (which names every skipped copy's block) for the fixtures. Fixtures <code>proving/fixtures/block-72803-skipped-copies.json</code> and <code>block-72854-empty-block-first.json</code>, each with <code>&lt;name&gt;.node-plan.json</code> beside it (the node's <code>igneum_getShardPlan</code>); <code>export/tests/fixtures.rs check_against_node_plan</code> asserts the cut's links, roots, gas, pgas and counts against the node's shard by shard, which the exporter-versus-core checks could not see. Known-failed shown: the old 72854 fixture under that check fails on "links (block index, block gas and pgas, tx accumulator)"; known-good: both new fixtures match the node's link_out exactly. Three unit tests on <code>blocks_of</code> (the 0.3.9 shape with an empty block, a skipped copy between two executed transactions and a block of skipped copies only; a count mismatch refused; the old shape kept in order and the skipped-only block refused). <code>cargo test --release -p igneum-prove-export</code>: 3 + 2 tests pass over 9 fixtures. The guest is untouched (no change under <code>core/</code>). The node side needs the 0.3.9 build and rollout; until every prover exports from a 0.3.9 node, a shard whose transaction block follows an empty block, or whose copies were all skipped, fails the veto.</p>
 <p>Also noted: the collect job uploads the first 256 KiB of a log file, so a tail needs <code>--command "powershell -NoProfile -Command Get-Content -Tail 500 logs\app-....log"</code>.</p>
@@ -513,22 +470,22 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <div class="tbl"><table><thead><tr><th>Check</th><th>Command</th><th>Result</th></tr></thead><tbody><tr><td>The node reads the switch</td><td><code>cargo test --release -p igneum-exec</code> on fork 2b6d23ef (this Mac, target <code>vendor/igneum-node/target-036</code>, 15:32:27Z to 15:36:30Z)</td><td>11 passed, 0 failed, among them <code>the_fee_switch_meters_by_the_block_daa_score</code></td></tr><tr><td>The digest for H = 210,000</td><td>20 s scratch node, override <code>{"difficulty_v2_activation_daa":33000,"proving_v0_activation_daa":84100,"fees_v1_activation_daa":210000}</code></td><td><code>ab8847da538dead1dc10e046dfaadab3c1c35928e3748810c4e050d4a886087a</code></td></tr><tr><td>One chain across the switch</td><td>private simnet on the 2b6d23ef binaries, override <code>{"fees_v1_activation_daa": 200}</code>, <code>tools/prove-fixtures/gen.mjs</code> before and after DAA 200, one <code>igneum_exportSegments</code> dump with every segment's <code>daaScore</code></td><td>one chain, 358 segments, DAA 0 to 1,121: block 51 (DAA 187, prototype, 11 transactions, 7,494,392 pgas, one shard at <code>S_p</code> 7.5 M) before the switch; blocks 351 (DAA 1,105, 11 transactions, 36,934 pgas, two shards at <code>S_p</code> 30,000) and 355 (DAA 1,117, 14 transactions, 69,292 pgas, three shards) after it; <code>igneum_getBudgets</code> went from <code>provingGasLimit</code> 0x1c9c380 to 0x1d4c0 and the base fees to 100 gwei and 10,000 gwei at the switch. Found on the way: a burst signed with a 21 gwei cap just before the switch never executed after it (the floor is 100 gwei), and under v1 a modexp bomb's proving charge (pgas x 10,000 gwei) crosses the signed budget unless the gas limit covers it (design 4.1); gen.mjs now sizes both from the node's budgets</td></tr><tr><td>The port replays both sides</td><td><code>igneum-prove-export</code> on that dump: every segment's state root equals the node's, prototype below 200 and v1 at and above it</td><td><code>replayed 358 segments from genesis; every state root equals the node's</code> for each of the three cuts; fixtures <code>fees-switch-prototype</code>, <code>fees-v1-shards2</code>, <code>fees-v1-shards3</code>; <code>igneum-prove-host --mode native</code> on each: MATCHES, the three tamper cases REJECTED</td></tr><tr><td>The pinned guest on both sides</td><td><code>igneum-prove-host &lt;fixture&gt; --mode execute</code> on this Mac (setup 37 s, <code>pinned: setup matches the manifest</code>)</td><td><code>fees-switch-prototype</code> shard 0: 66,043,259 cycles, 44 cycles per EVM gas, 9 cycles per prototype pgas, 2.88 s; <code>fees-v1-shards2</code> shard 0: 4,717,439 cycles (213 cycles per v1 pgas, 0.38 s), shard 1: 3,485,430 cycles (236 per pgas, 0.26 s); aggregator 1.4 M cycles over 2 shards; every tamper case REJECTED. Under v1 these transfer-and-modexp shards run at about a quarter of the unit (1,000 cycles per pgas): the table over-charges them, which is the safe side of design R1's calibration</td></tr><tr><td>The new pin</td><td><code>proving/igneum-prove/pin-guests.sh</code></td><td>shard program id <code>0x2b1a81cb413236cf063077b46ed3111628f6c41036bcf6e23ee4cbbf5679ef7a</code> (2,832,504 bytes), aggregator <code>0x474678f35f7545db28055d5e5bbc308231d84a5a072202087a2a8d5b09123896</code>, pinned 16:20:38Z; the 0.3.8 ids (<code>0x0dfade07...</code>, <code>0x135e67e7...</code>) are what every machine runs until 0.3.9</td></tr></tbody></table></div>
 <p>Block rate for H: DAA 111,230 at 15:23Z, 112,227 at 15:40:13Z, 0.965 blocks/s; H = 210,000 is 24 h ahead of a publish before about 19:50Z on 5 October (the runbook moves it otherwise).</p>
 <h2 id="5-october-2026-night-the-c4-fix-certificate-driven-reorg">5 October 2026 (night), the C4 fix: certificate-driven reorg</h2>
-<p>Owner: the consensus engineer and cryptographer agent, worktrees <code>igneum-wt-c4</code> (branch <code>c4-fix</code>) and <code>vendor/igneum-node-c4</code> (fork branch <code>c4-fix</code> on release-0.3.6 a24ab01a). Harness <code>tools/finality-attacks/c4.mjs</code> on the fast-time 3-node network (100-ms proxied links), node built on the Apple M5 Max in <code>vendor/igneum-node/target-c4</code> from the fork worktree (an APFS clone of <code>target-036</code>), suites on PC 2 through <code>tools/build-job.mjs</code>. The Mac carried two other builds and the M20 live sync throughout; every figure is a count, an index or a second from the harness clock.</p>
+<p>Owner: the consensus engineer and cryptographer agent, worktrees <code>igneum-wt-c4</code> (branch <code>c4-fix</code>) and <code>vendor/igneum-node-c4</code> (fork branch <code>c4-fix</code> on release-0.3.6 a24ab01a). Harness <code>tools/finality-attacks/c4.mjs</code> on the fast-time 3-node network (100-ms proxied links), node built on the Apple M5 Max in <code>vendor/igneum-node/target-c4</code> from the fork worktree (an APFS clone of <code>target-036</code>), suites on the RTX 5090 Windows rig through <code>tools/build-job.mjs</code>. The Mac carried two other builds and the M20 live sync throughout; every figure is a count, an index or a second from the harness clock.</p>
 <p><strong>The cause, in the code.</strong> <code>processes/finality.rs</code>: <code>ingest_certificate</code> verified a certificate only when its block was the node's own determination at that index (<code>cp.hash == cert.checkpoint</code>); any other block went to <code>hold_pending</code>, and nothing ever tried the pending certificate against the table at its own block. <code>fork_choice_lock</code> reads <code>state.locks</code>, which only <code>evaluate</code> filled, and <code>evaluate</code> only ever ran over the node's own determination. So a certified checkpoint off the node's chain never became a lock and never constrained the sink search, whatever spec 3.5 says. Second cause, found tonight on the harness: <code>protocol/flows/src/v10/blockrelay/flow.rs</code> skips a relayed block whose blue work is under the virtual's merge-depth root ("hence we are skipping it"), and the certified chain is lighter by construction, so the node on the heavier side never received the certified chain's blocks at all: in the first runs on the fixed consensus n0 held B's certificates by gossip for the whole heal window and B's blocks never arrived (n0's log shows only its own blocks "via submit block" after the reconnect).</p>
 <p><strong>The fix.</strong> Fork: <code>ingest_off_chain</code> (verifies against <code>voters_at</code> of the certificate's own block, Q3 and Q5 by <code>quorum_at</code> from that block's past, the lock chain by <code>off_lock_chain</code>, then LOCKED with a <code>FinalityLock</code> notification and a <code>VirtualStateProcessingMessage::Resolve</code> nudge so the sink moves without waiting for a block); <code>retry_pending_off_chain</code> on every virtual change; the lock-chain guard in <code>evaluate</code> (a determination off the chain through the node's nearest locks never locks and never aggregates); <code>fork_choice_lock</code> reports a lock beyond the depth-based finality point once; <code>wants_unknown_certified_block</code> and the relay-flow bypass of the merge-depth skip while a pending certificate names a block the node lacks (<code>finality_wants_blocks</code> through <code>ConsensusApi</code> and the session). Not gated on <code>finality_v3_activation_daa</code>: rule v2 took the same pending path.</p>
-<p><strong>Unit tests (PC 2, job build-20261005-180827, 18:09 UTC): <code>kaspa-consensus</code> 97 passed, 0 failed, 3 ignored; <code>kaspa-consensus-core</code> 101 passed.</strong> New: <code>a_lighter_certified_chain_wins_and_a_heavier_uncertified_one_does_not_override_it</code> (main chain 77 blocks locks to 13, a 7-block side chain's index-14 certificate is adopted, the sink moves to the side tip with no new block, ten more main-chain blocks do not move it back, a second certificate at 14 over the main block is CONFLICTING and the lock stands, the side chain then locks 15), <code>the_certificate_driven_reorg_holds_under_rule_v2</code> (the same at <code>finality_v3_activation_daa</code> never), <code>a_chain_that_misses_an_adopted_lock_never_locks_here</code> (the evaluate guard and the off-lock conflict). <code>reorg_past_an_unlocked_checkpoint_re_determines_it_and_verifies_the_pending_certificate</code> rewritten for the new behaviour (pending while the block is unknown, adopted when it arrives). <code>kaspa-p2p-flows</code> lib tests do not compile on release-0.3.6 before or after this change (nine <code>epoch_seed_headers</code> errors in the pruning-proof message tests; the M20 job build-20261005-172340 hit the same nine an hour earlier). Six PC 2 jobs were lost tonight to two tooling faults, both fixed in the class: <code>igneum-ota-sign embedded | head -1</code> under <code>pipefail</code> (SIGPIPE panic, four scripts, <code>tools/ci/signer-pipe-check.sh</code>) and the one shared <code>build-inputs.zip</code> in the downloads folder (a job published while another agent's pack landed pinned that agent's sources, three times; <code>build-job.mjs</code> now names every job's zip).</p>
+<p><strong>Unit tests (the RTX 5090 Windows rig, job build-20261005-180827, 18:09 UTC): <code>kaspa-consensus</code> 97 passed, 0 failed, 3 ignored; <code>kaspa-consensus-core</code> 101 passed.</strong> New: <code>a_lighter_certified_chain_wins_and_a_heavier_uncertified_one_does_not_override_it</code> (main chain 77 blocks locks to 13, a 7-block side chain's index-14 certificate is adopted, the sink moves to the side tip with no new block, ten more main-chain blocks do not move it back, a second certificate at 14 over the main block is CONFLICTING and the lock stands, the side chain then locks 15), <code>the_certificate_driven_reorg_holds_under_rule_v2</code> (the same at <code>finality_v3_activation_daa</code> never), <code>a_chain_that_misses_an_adopted_lock_never_locks_here</code> (the evaluate guard and the off-lock conflict). <code>reorg_past_an_unlocked_checkpoint_re_determines_it_and_verifies_the_pending_certificate</code> rewritten for the new behaviour (pending while the block is unknown, adopted when it arrives). <code>kaspa-p2p-flows</code> lib tests do not compile on release-0.3.6 before or after this change (nine <code>epoch_seed_headers</code> errors in the pruning-proof message tests; the M20 job build-20261005-172340 hit the same nine an hour earlier). Six the RTX 5090 Windows rig jobs were lost tonight to two tooling faults, both fixed in the class: <code>igneum-ota-sign embedded | head -1</code> under <code>pipefail</code> (SIGPIPE panic, four scripts, <code>tools/ci/signer-pipe-check.sh</code>) and the one shared <code>build-inputs.zip</code> in the downloads folder (a job published while another agent's pack landed pinned that agent's sources, three times; <code>build-job.mjs</code> now names every job's zip).</p>
 <p><strong>Harness, weight against work (B four keys and 70% of the weight, A two keys and 30%; at the cut A mines 0.6 and B 0.4 blocks/s; <code>WINDOW</code> = weight window, ban and <code>min_daa</code> at fast time).</strong> The 120-DAA window of the earlier runs turns every long split into F21's partition-longer-than-a-window shape once the p2p reconnect is added: n0 dials the proxy again on the connection manager's backoff, 84 to 114 s after the heal in every run tonight (the original sweep's 6 s was a short cut), so A's chain is 130 + 84 s = 128 DAA past the cut before any certificate can reach it, past its 120-DAA frozen table (v3) or its own two-thirds share of a sliding table (v2, 126 DAA at W 240 and s 0.3), and A locks alone first. With <code>WINDOW=240</code> and <code>WARM=320</code> the bound is 400 s (v3) or 210 s (v2) after the cut.</p>
 <div class="tbl"><table><thead><tr><th>Run</th><th>Node</th><th>Rule, W, split</th><th>B locks during the split</th><th>n0 reconnected</th><th>n0 adopted off-chain</th><th>Final chain</th><th>Conflicting</th><th>Disagreeing</th><th>Verdict</th></tr></thead><tbody><tr><td>on 90 s (the sweep's framing)</td><td>c4 consensus fix, no sync hook</td><td>v3, 120, 90 s</td><td>0 (36 blue blocks for B, a new index needs 50)</td><td>6 s</td><td>0</td><td>A, all three (no certificate to follow)</td><td>0</td><td>0</td><td>not the C4 shape</td></tr><tr><td>v2 90 s</td><td>same</td><td>v2, 120, 90 s</td><td>1 (index 8)</td><td>6 s</td><td>0</td><td>apart</td><td>5 / 5 / 5</td><td>2</td><td>n0 locked 10 alone at 18:32:42, B's certificate for 8 reached it at 18:32:43: F21's bound (63 DAA of A's own chain) crossed before the heal</td></tr><tr><td>on 130 s</td><td>same</td><td>v3, 120, 130 s</td><td>1 (index 9)</td><td>84 s</td><td>0</td><td>apart</td><td>9 / 3 / 3</td><td>2</td><td>n0 locked 12 alone at DAA 359, one window after lock 8 at 239, 6 s before the reconnect</td></tr><tr><td>off 150 s (control)</td><td>same</td><td>no certificate, 150 s</td><td>0</td><td>96 s</td><td>0</td><td>A (heavier), all three; B's nodes re-determined 2 indices</td><td>0</td><td>0</td><td>PASS, as in the sweep</td></tr><tr><td>on 130 s, W 240</td><td>same</td><td>v3, 240, 130 s</td><td>2 (10, 11)</td><td>114 s</td><td>0 (certificates 13 and 14 pending, blocks unknown)</td><td>apart</td><td>0</td><td>0</td><td>the sync gap: n0 never received a B block</td></tr><tr><td>v2 130 s, W 240</td><td>same</td><td>v2, 240, 130 s</td><td>2 (10, 11)</td><td>114 s</td><td>0</td><td>apart, n0 locked 16 alone at 293 s</td><td>0 / 1 / 1</td><td>0</td><td>the sync gap again (n0 reconnected after v2's 210-s bound)</td></tr><tr><td>v2 130 s, W 240</td><td>c4 fix with the sync hook</td><td>v2, 240, 130 s</td><td>1 (index 12)</td><td>84 s</td><td>3 (12, 13, 14 within 2 s of the first B block; 11 re-determined)</td><td>B, all three, A's split tip abandoned</td><td>0</td><td>0</td><td>PASS</td></tr><tr><td>on 130 s, W 240</td><td>same</td><td>v3, 240, 130 s</td><td>0 (Poisson: 52 blue blocks, the index fell just short)</td><td>84 s</td><td>n1 1, n2 2 (B's nodes adopted A's post-heal certificates and moved before IBD)</td><td>A, all three</td><td>0</td><td>0</td><td>the mirror case; not the C4 shape</td></tr><tr><td>on 140 s, W 240, addPeer at the heal</td><td>same</td><td>v3, 240, 140 s</td><td>2 (11, 12, first at 12 s)</td><td>3 s (the harness now dials through <code>addPeer</code>; the address goes as <code>{ip, port}</code>)</td><td>1 (12 by certificate; 11 verified on the new chain)</td><td>B, all three, A's split tip abandoned</td><td>0</td><td>0</td><td>PASS</td></tr></tbody></table></div>
 <p>Reading. With the consensus fix and the sync hook, a node on the heavier chain that receives a certificate for a chain it has never seen fetches that chain, verifies the certificate at its own block, locks it, moves its sink to the lighter certified chain and re-determines its own records onto it (the v2 W 240 row: 0 conflicts, 0 disagreements, every node on B's chain, which is the spec's F1 and the design's Fork choice items 1 to 4). The same holds under rule v3 with the frozen table on (the last row: B certified 11 and 12 during a 140-s split, n0 reconnected 3 s after the heal once the harness dialled through <code>addPeer</code>, adopted 12 by certificate and ended on B's chain with the other two, 0 conflicts, 0 disagreements). The fix does not and cannot cover a partition that outlasts the bound before the certificate arrives (rows 2, 3 and 6): there the node has already locked alone and 3.11.4 keeps that lock, the late certificate is CONFLICTING for the operator. On the live devnet (W 7,200 DAA, two hours) the bound is two hours after a side's last lock, so every partition under that heals by certificate. Raw: <code>scratchpad c4-results-*.md</code>, node logs <code>c4-*-n0.log</code>.</p>
 <h2 id="5-october-2026-evening-fud-ledger-sweep-round-6">5 October 2026 (evening), FUD ledger sweep round 6</h2>
 <p>Owner: the consensus engineer and cryptographer agent, worktree <code>igneum-wt-fud-a</code> (branch <code>fud-a</code>), 15:45 to 16:40 UTC. The Mac was loaded throughout (two cargo builds, a txgen run and a fee-switch simnet by other agents; load average over 100), so every figure below is a count, an index, a byte or a number from another machine; the only millisecond figures are the browser verifier's, taken as ratios and labelled. Live reads through the Apple M5 Max node's wRPC (<code>ws://127.0.0.1:28640</code>) and the log intake (Neon HTTP SQL, lines split server-side), never a restart.</p>
 <p><strong>Rolled-out fixes, the live evidence (F23, F24, G12, X18, M30, M31, F25, M20, M26, M27, X21).</strong> The 0.3.5 cut at 06:33 UTC (master 2054ae3, fork 20139145) carried <code>fud-consensus</code>, <code>m20-pruning</code> and <code>miner-reliability</code>; every reachable app machine was on the node line by 09:32 UTC and the hand nodes and the seed restarted on it for the proving activation (<code>docs/plans/release-0.3.6.md</code> 8j, "live devnet: the first shards proven"). Node logs of the five app machines over the 10 hours to 15:45 UTC, one intake query (<code>scratchpad fud-a/nodelines.mjs</code>):</p>
-<div class="tbl"><table><thead><tr><th>Line</th><th>PC 1</th><th>PC 2</th><th>Mac</th><th>Sam's Mac</th><th>US laptop</th><th>Reads on</th></tr></thead><tbody><tr><td><code>Finality: state blob of layout 1 read and converted</code></td><td>1</td><td>1</td><td>1</td><td>1</td><td>1</td><td>F23 (persisted state migrated, no locks lost)</td></tr><tr><td>certificates refused "names N voters"</td><td>0</td><td>0</td><td>0</td><td>0</td><td>0</td><td>F23</td></tr><tr><td>CONFLICTING, EQUIVOCATION</td><td>0, 0</td><td>0, 0</td><td>0, 0</td><td>0, 0</td><td>0, 0</td><td>F23, F24</td></tr><tr><td><code>re-determined</code> (checkpoints 2970 and 2971 at 09:56 UTC on three machines at once; the rest at first start)</td><td>7</td><td>8</td><td>4</td><td>0</td><td>1</td><td>F24</td></tr><tr><td>LOCKED</td><td>1,198</td><td>1,204</td><td>1,197</td><td>683</td><td>961</td><td>all</td></tr><tr><td><code>Consensus params digest</code> at start</td><td>f10a4eab...</td><td>f10a4eab...</td><td>f10a4eab...</td><td>f10a4eab...</td><td>f10a4eab...</td><td>X18, G12</td></tr><tr><td><code>consensus params digest mismatch</code> (07:15 to 07:35 UTC, the hand node restarted early with another proving height)</td><td>115</td><td>46</td><td>56</td><td>0</td><td>0</td><td>X18</td></tr><tr><td><code>PoW cache built</code> (each at a node start; none at the epoch rolls of 14:29 and 15:29 UTC)</td><td>5</td><td>5</td><td>8</td><td>1</td><td>5</td><td>M30</td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>Line</th><th>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT)</th><th>the RTX 5090 Windows rig</th><th>Mac</th><th>Sam's Mac</th><th>US laptop</th><th>Reads on</th></tr></thead><tbody><tr><td><code>Finality: state blob of layout 1 read and converted</code></td><td>1</td><td>1</td><td>1</td><td>1</td><td>1</td><td>F23 (persisted state migrated, no locks lost)</td></tr><tr><td>certificates refused "names N voters"</td><td>0</td><td>0</td><td>0</td><td>0</td><td>0</td><td>F23</td></tr><tr><td>CONFLICTING, EQUIVOCATION</td><td>0, 0</td><td>0, 0</td><td>0, 0</td><td>0, 0</td><td>0, 0</td><td>F23, F24</td></tr><tr><td><code>re-determined</code> (checkpoints 2970 and 2971 at 09:56 UTC on three machines at once; the rest at first start)</td><td>7</td><td>8</td><td>4</td><td>0</td><td>1</td><td>F24</td></tr><tr><td>LOCKED</td><td>1,198</td><td>1,204</td><td>1,197</td><td>683</td><td>961</td><td>all</td></tr><tr><td><code>Consensus params digest</code> at start</td><td>f10a4eab...</td><td>f10a4eab...</td><td>f10a4eab...</td><td>f10a4eab...</td><td>f10a4eab...</td><td>X18, G12</td></tr><tr><td><code>consensus params digest mismatch</code> (07:15 to 07:35 UTC, the hand node restarted early with another proving height)</td><td>115</td><td>46</td><td>56</td><td>0</td><td>0</td><td>X18</td></tr><tr><td><code>PoW cache built</code> (each at a node start; none at the epoch rolls of 14:29 and 15:29 UTC)</td><td>5</td><td>5</td><td>8</td><td>1</td><td>5</td><td>M30</td></tr></tbody></table></div>
 <p>M31 and M20 have no live line yet: no simnet or testnet node has been started since the cut, and the Apple M5 Max node's pruning point is still genesis at DAA 113,289 (<code>getBlockDagInfo</code>, 16:00 UTC), so no lottery-hashed pruning proof has been served; the unit tests of the 0.3.5 and 0.3.6 suites cover both (<code>largest_coinbase_fits_on_every_network</code>, <code>pruning_proof</code> 4 passed). Miner side (M26, M27, X21), from the <code>miner-*</code> uploads of the 20 hours to 15:30 UTC (<code>scratchpad fud-a/boundaries.mjs</code>): see the M11 table; the console at 15:46 UTC shows 0 faults and 0 restarts on every card.</p>
 <p><strong>M11, hourly runtime codegen on the fleet</strong> (same query, DAA 82,800 to 111,600 from each machine's 0.3.5 start; prepare = the worker's <code>prepared</code> total from the <code>PREPARE sent</code> to the answer):</p>
-<div class="tbl"><table><thead><tr><th>Machine</th><th>Compiler</th><th>Boundaries</th><th>Swapped with no pause</th><th>Compiled inline</th><th>Prepare total min / median / max</th><th>Notes</th></tr></thead><tbody><tr><td>PC 1, RTX 5090</td><td>NVRTC 12.8</td><td>10</td><td>10</td><td>0</td><td>656 / 684 / 1,074 ms (nvrtc 151 to 180 ms)</td><td></td></tr><tr><td>PC 1, Radeon integrated</td><td>OpenCL</td><td>10</td><td>8</td><td>2</td><td>55.3 / 115.8 / 123.8 s (the 1 GiB dataset build on the iGPU beside today's WSL build jobs)</td><td>the two inline boundaries (82,800 and 93,600) had the prepare sent 156 to 160 DAA before the boundary instead of 449</td></tr><tr><td>PC 2, RTX 5090</td><td>NVRTC 12.8</td><td>12</td><td>12</td><td>0</td><td>580 / 613 / 1,022 ms</td><td></td></tr><tr><td>PC 2, Radeon integrated</td><td>OpenCL</td><td>12</td><td>12</td><td>0</td><td>6.9 / 9.4 / 11.7 s</td><td></td></tr><tr><td>US laptop, Intel UHD</td><td>OpenCL</td><td>7</td><td>7</td><td>0</td><td>7.3 / 7.9 / 11.7 s (build 3.0 to 6.4 s)</td><td></td></tr><tr><td>Mac M5 Max</td><td>Metal</td><td>8</td><td>8</td><td>0</td><td>34.0 / 34.9 / 37.8 s (program 0 to 444 ms; the rest is the hourly race)</td><td></td></tr><tr><td>Sam's Mac M4 Max</td><td>Metal</td><td>1</td><td>1</td><td>0</td><td>40.3 s (one record before it went silent)</td><td></td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>Machine</th><th>Compiler</th><th>Boundaries</th><th>Swapped with no pause</th><th>Compiled inline</th><th>Prepare total min / median / max</th><th>Notes</th></tr></thead><tbody><tr><td>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT), RTX 5090</td><td>NVRTC 12.8</td><td>10</td><td>10</td><td>0</td><td>656 / 684 / 1,074 ms (nvrtc 151 to 180 ms)</td><td></td></tr><tr><td>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT), Radeon integrated</td><td>OpenCL</td><td>10</td><td>8</td><td>2</td><td>55.3 / 115.8 / 123.8 s (the 1 GiB dataset build on the iGPU beside today's WSL build jobs)</td><td>the two inline boundaries (82,800 and 93,600) had the prepare sent 156 to 160 DAA before the boundary instead of 449</td></tr><tr><td>the RTX 5090 Windows rig, RTX 5090</td><td>NVRTC 12.8</td><td>12</td><td>12</td><td>0</td><td>580 / 613 / 1,022 ms</td><td></td></tr><tr><td>the RTX 5090 Windows rig, Radeon integrated</td><td>OpenCL</td><td>12</td><td>12</td><td>0</td><td>6.9 / 9.4 / 11.7 s</td><td></td></tr><tr><td>US laptop, Intel UHD</td><td>OpenCL</td><td>7</td><td>7</td><td>0</td><td>7.3 / 7.9 / 11.7 s (build 3.0 to 6.4 s)</td><td></td></tr><tr><td>Mac M5 Max</td><td>Metal</td><td>8</td><td>8</td><td>0</td><td>34.0 / 34.9 / 37.8 s (program 0 to 444 ms; the rest is the hourly race)</td><td></td></tr><tr><td>Sam's Mac M4 Max</td><td>Metal</td><td>1</td><td>1</td><td>0</td><td>40.3 s (one record before it went silent)</td><td></td></tr></tbody></table></div>
 <p>The 0.3.4 storm, for the record (M27): between 01:24 and 02:59 UTC both PCs' NVIDIA workers refused the pack for epoch 1130e9ea... (<code>prepare-failed ...: the epoch seed bytes do not give the pack's IGNEUM_SEEDW_INIT</code>), 4,299 and 4,233 refusals at one every 0.7 s, 3,609 and 3,494 <code>WORKER FAULT seed mismatch</code> lines, boundaries 61,200 and 64,800 crossed by inline compile; from the 0.3.5 start 0 <code>prepare-failed</code> on any machine and 4 and 4 <code>WORKER FAULT</code> lines in all.</p>
-<p><strong>M11, the variant race on the RTX 5090</strong> (<code>docs/plans/miner-perf.md</code> job, PC 1, miners stopped, 15:52:23 to 15:56:10 UTC, run <code>job-run-race-5090-20261004-ae432dc7</code>; pack <code>ac027dca95d9d33f-20731</code>, this hour's version 2 program; <code>nvidia-smi</code> before: 460 W cap of 575, 2,850 MHz, 63 C; after: 323 W, 67 C):</p>
+<p><strong>M11, the variant race on the RTX 5090</strong> (<code>docs/plans/miner-perf.md</code> job, the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT), miners stopped, 15:52:23 to 15:56:10 UTC, run <code>job-run-race-5090-20261004-ae432dc7</code>; pack <code>ac027dca95d9d33f-20731</code>, this hour's version 2 program; <code>nvidia-smi</code> before: 460 W cap of 575, 2,850 MHz, 63 C; after: 323 W, 67 C):</p>
 <div class="tbl"><table><thead><tr><th>Run</th><th>Variants timed</th><th>Winner</th><th>Base MH/s</th><th>Gain</th><th>Spread across the 17</th><th>Compile for 17</th><th>Timing</th></tr></thead><tbody><tr><td>1</td><td>17 of 17 (none discarded, self-test PASS)</td><td>base, 31 registers, 24 blocks per SM at 1 warp per block</td><td>139.746</td><td>+0.00%</td><td>137.75 (<code>ldcs</code>, -1.4%) to 139.75</td><td>300 ms</td><td>112.2 s</td></tr><tr><td>2</td><td>17 of 17</td><td>base</td><td>139.654</td><td>+0.00%</td><td>137.70 to 139.69</td><td>232 ms</td><td>112.3 s</td></tr></tbody></table></div>
 <p>Reading: on a 1 GiB random-read kernel the 5090 does not move with block shape, load path, unroll or register budget; the two runs agree and every variant sits within 1.5% of base, so the race finds nothing on NVIDIA for this program class (the plan's "no gain" end of the range). 139.7 MH/s with the card to itself against the 141 Mhash/s projected for version 2 programs (weak-program census) is the first 5090 run of a version 2 pack, a match to 1%; the app mines the same card at 107 to 110 MH/s under its power cap and beside the Radeon worker. The Mac fleet records (<code>node tools/tuning.mjs</code>, 10 records on the M5 Max with the GPU to itself) also put base first (g256 at -4.2%), against the +17 to +21% for g256 measured under contention on 4 October: the race's Apple result was a contention artefact. Both results say the race should default off; it costs the Macs about 35 s of paused mining an hour (the prepare totals above).</p>
 <p><strong>P3, the browser verifier in a phone-sized tab</strong> (<code>https://igneum.network/verify/test.html</code>, live checkpoint 3668, 16 of 21 signers, 21 headers; the built-in browser pane, mobile preset 375 x 812 with an Android user agent, then the desktop size, same tab, same Mac at load average over 100):</p>
@@ -542,8 +499,8 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <div class="tbl"><table><thead><tr><th>Run</th><th>Rule</th><th>New locks during the split A / B</th><th>First lock A / B (s)</th><th>Blue score A / B at the heal</th><th>Sinks after the heal</th><th>Final chain</th><th>Conflicting certificates</th><th>Disagreeing locked indices</th></tr></thead><tbody><tr><td>control</td><td>v2 (the live devnet's rule), <code>min_daa</code> 120</td><td>4 / 3</td><td>133 / 9</td><td>335 / 296</td><td>apart (n0 on its own)</td><td>none (a finality fork, F21)</td><td>1 on n0</td><td>1</td></tr><tr><td>off</td><td>no certificates (<code>min_daa</code> never)</td><td>0 / 0</td><td>none / none</td><td>330 / 301</td><td>one sink on all three</td><td>A's (the heavier)</td><td>0</td><td>0; B's nodes re-determined 2 indices onto A's chain; n0 reconnected 36 s after the heal</td></tr><tr><td>on, split 150 s</td><td>v3 from checkpoint DAA 0</td><td>0 / 2</td><td>none / 39</td><td>326 / 313</td><td>apart</td><td>none</td><td>3 on n0</td><td>2 (n0 reconnected 66 s after the heal, A's chain past the 120-DAA table by then)</td></tr><tr><td>on, split 90 s</td><td>v3</td><td>0 / 2</td><td>none / 3</td><td>278 / 265</td><td>apart</td><td>none</td><td>3 on n0</td><td>2 (n0 reconnected 6 s after the heal, A's chain at about 58 DAA, inside the table)</td></tr></tbody></table></div>
 <p>Reading (the NEW finding, ledger C4). With the module off GHOSTDAG alone converges on the heavier chain and the losing side's records re-determine (F24 works when the chain moves). With the module on the overlay holds during the split (A, with 30% of the frozen table, locks nothing; B locks 7 and 8) and then fails at the heal in the shipped node: B's certificates for blocks off n0's chain are "kept pending until the chain decides (no lock at this index)", n0's chain never decides because GHOSTDAG keeps its heavier tip and nothing turns the certificate into a fork-choice constraint, and once n0's last lock (index 7, DAA 209) is one window old (DAA 329) the frozen table stops applying on A's chain ("no frozen table (no lock on this chain inside the window)"), A's two keys are 100% of A's own window (B's post-cut blocks are red there) and n0 locks 10, 11, 12 alone; B's certificates for 10 and 11 then log CONFLICTING on n0 (n0 log, 16:27:04 to 16:29:54 UTC). A finality fork from a 96-s honest partition, no attacker, table intact at the heal; the 150-s run and the v2 control end the same way. The spec's fork choice ("GHOSTDAG among tips through all certified checkpoints", 3.5) is therefore implemented only for certificates over blocks already on the node's chain. Fix named in the ledger entry: verify an off-chain certificate against the table at its own block and let it constrain fork choice (a certificate-driven reorg), then re-determine. Raw: <code>scratchpad fud-a/c4-results-*.md</code>, node logs <code>c4-on90-tmp/</code>, <code>c4-v2-control-tmp/</code>.</p>
 <h2 id="5-october-2026-evening-the-9070-xt-on-the-egpu-why-17-9-mh-s-and-what-moved">5 October 2026 (evening), the 9070 XT on the eGPU: why 17.9 MH/s, and what moved</h2>
-<p>PC 1 (ae432dc7, Windows 11, Ryzen 7 9800X3D with its gfx1036, RTX 5090 on CUDA), an AMD Radeon RX 9070 XT (gfx1201, RDNA 4) in a Sonnet Breakaway Box 850T5 over USB4, Adrenalin 26.9.2 (OpenCL driver string <code>3683.0 (PAL,LC)</code>, platform <code>OpenCL 2.1 AMD-APP (3683.0)</code>). Branch <code>opencl-rdna4</code>. the maintainers: "the hashrate is low" (17.9 MH/s with one worker; two workers on the card earlier gave 8.9 and 9.4).</p>
-<p><strong>Before, from PC 1's own app log</strong> (<code>node tools/logs.mjs win-ae432dc7-20261005-181046</code>, the miner's STATUS line for the card <code>amd:1:gfx1201</code>, 2^21-nonce jobs): <code>hash=17.82 MH/s wall (17.83 MH/s inside jobs) ... idle=0.3%</code>. Wall equals inside, so the host loop (template fetch, job line, read-back, scan) costs nothing measurable; the dispatch itself is slow. The worker's <code>ready</code> line: <code>exchange 0</code> (local memory: AMD lists <code>cl_khr_subgroups</code> and no shuffle extension), <code>batch 4194304</code>, <code>dataset-log2 28</code> (1 GiB), device <code>[1] gfx1201</code> on the 3683.0 platform, <code>AMD wavefront width 32</code>. The same card was listed again as <code>[3] gfx1201</code> on the older platform <code>3652.0</code> (the 32.0.21042 driver's OpenCL registration is still present after the update): that is the two-worker run.</p>
+<p>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) (ae432dc7, Windows 11, Ryzen 7 9800X3D with its gfx1036, RTX 5090 on CUDA), an AMD Radeon RX 9070 XT (gfx1201, RDNA 4) in a Sonnet Breakaway Box 850T5 over USB4, Adrenalin 26.9.2 (OpenCL driver string <code>3683.0 (PAL,LC)</code>, platform <code>OpenCL 2.1 AMD-APP (3683.0)</code>). Branch <code>opencl-rdna4</code>. the maintainers: "the hashrate is low" (17.9 MH/s with one worker; two workers on the card earlier gave 8.9 and 9.4).</p>
+<p><strong>Before, from the three-card Windows rig's own app log</strong> (<code>node tools/logs.mjs win-ae432dc7-20261005-181046</code>, the miner's STATUS line for the card <code>amd:1:gfx1201</code>, 2^21-nonce jobs): <code>hash=17.82 MH/s wall (17.83 MH/s inside jobs) ... idle=0.3%</code>. Wall equals inside, so the host loop (template fetch, job line, read-back, scan) costs nothing measurable; the dispatch itself is slow. The worker's <code>ready</code> line: <code>exchange 0</code> (local memory: AMD lists <code>cl_khr_subgroups</code> and no shuffle extension), <code>batch 4194304</code>, <code>dataset-log2 28</code> (1 GiB), device <code>[1] gfx1201</code> on the 3683.0 platform, <code>AMD wavefront width 32</code>. The same card was listed again as <code>[3] gfx1201</code> on the older platform <code>3652.0</code> (the 32.0.21042 driver's OpenCL registration is still present after the update): that is the two-worker run.</p>
 <p><strong>Hypotheses, each with its number</strong> (the measurement job <code>rdna4-bench-1</code>, 18:39:25 to 18:41:17 UTC, the card switched off in the app through <code>POST /api/cards</code> for key <code>amd:1:gfx1201</code> only, the 5090 untouched; worker exe sha256 <code>53c7e8c9…5403e10</code> built from this branch by <code>proto-cuda/nvrtc/build-windows.sh</code>; read back with <code>node tools/jobs.mjs rdna4-bench-1</code>):</p>
 <div class="tbl"><table><thead><tr><th>#</th><th>Hypothesis</th><th>Measured</th><th>Verdict</th></tr></thead><tbody><tr><td>1</td><td>The dataset or program is re-sent over the eGPU link per job</td><td>Nothing is re-sent: the dataset (1 GiB) and cache (256 MiB) are built on the device once per pair (<code>info first pack ... cache 11 dataset 51 ms</code> on the Apple M5 Max check); per 2^21-nonce job the old path sent 32 B up and read 16 MiB down; the serve A/B below puts a number on that read-back</td><td>Not the cause</td></tr><tr><td>2</td><td>Work-group, occupancy, wave width, the exchange</td><td><code>clGetKernelSubGroupInfoKHR</code>: sub-group 32 for a 32-item work-group (wave32), private memory 0 (no spills), preferred multiple 32; <code>--group-warps 1, 2, 4, 8</code> = 18.024, 18.063, 18.070, 18.039 MH/s (<code>--batches 3</code>, 2^24, device event time); <code>--batch-log2 21</code> (the app's job size) = 18.108</td><td>Not the cause: the shape does not move the number</td></tr><tr><td>3</td><td>The wrong AMD platform</td><td>The app's worker runs on <code>[1]</code>, the 3683.0 platform (ready line). The old platform's <code>[3]</code> gives 18.049 MH/s: the same. The duplicate listing is real and is the two-worker halving</td><td>Not the cause of 17.9; fixed anyway (below)</td></tr><tr><td>4</td><td>The card's own random-read rate</td><td><code>--memprobe</code>: dependent random 4-byte loads over 1024 MiB top out at 2.42 to 2.68 G loads/s from 4,096 lanes up (table below); 128 loads per hash gives a ceiling of 18.9 to 20.9 MH/s; the hash runs at 18.0 to 18.1</td><td>THE CAUSE: the hash is at 87 to 95% of what this card does for this access pattern</td></tr></tbody></table></div>
 <p><strong>The memprobe on the 9070 XT</strong> (<code>igneum-worker-opencl.exe --device 1 --memprobe</code>, device event time, best of 3, 256 dependent steps per lane; <code>chase</code> = one dependent random 4-byte load per step, <code>indep x8</code> = eight independent chains per lane):</p>
@@ -557,38 +514,38 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <p>Reading: the 9070 XT draws 199 W of its 304 W board rating (vendor figure) at 100% busy with the shader clock at its top, so the die is waiting on memory, which is the ceiling finding again; the fans at 657 rpm and 64 C are the card's own curve at that load, not a fault. Per watt the 5090 is 4.5x the 9070 XT on this program class (0.398 against 0.089 MH/W). The earlier per-watt claim from the board rating (304 W) would have read 0.058 MH/W; the measured number is 1.5x that.</p>
 <p><strong>Is it the eGPU link?</strong> No. 2.42 G loads/s x 64 B lines = 155 GB/s of DRAM traffic, forty times what a USB4 PCIe tunnel carries (about 4 GB/s, approximate); the 1 GiB buffer sits in the card's own memory (the 4 and 64 MiB cases show the card's caches at work above it, and a buffer in host memory would run below 0.1 G/s). A PCIe slot would move the per-job read-back (16 MiB per 2^21-nonce job on the old path, now gone) and nothing else; the random-read ceiling is the card's. What a PCIe slot would give: the same 18 MH/s.</p>
 <p><strong>What changed on <code>opencl-rdna4</code></strong> (<code>proto-opencl/host.c</code>, <code>app/igneum-app/src/detect.rs</code>):</p>
-<div class="tbl"><table><thead><tr><th>Change</th><th>Before</th><th>After</th></tr></thead><tbody><tr><td>Duplicate platform</td><td><code>--list</code> showed the card twice ([1] 3683.0 and [3] 3652.0); the app made two cards and ran two workers (8.9 + 9.4 MH/s)</td><td>the older platform's entry prints as <code> dup [3] ... hidden, use [1]</code>, the default pick skips it, the app's parser (<code>parse_opencl_list</code>, 3 tests) never makes a card of it; <code>--device 3</code> still works for comparison. Verified on PC 1: <code>platforms: 2 device(s) hidden ...</code>, cards <code>amd:0:gfx1036</code> and <code>amd:1:gfx1201</code> only</td></tr><tr><td>Kernel report</td><td>work-group and local memory</td><td>plus preferred multiple, private memory (spills), sub-group size on every exchange path (<code>info kernel:</code> in serve mode)</td></tr><tr><td>Read-back per dispatch</td><td>8 B per nonce (16 MiB per job) and a host scan of 2^21 words</td><td>a GPU select pass: the hits (index, hash) behind an atomic counter plus 34 sentinel words; 276 B per chunk plus 16 B per hit; found lines in nonce order; <code>--readback full</code> / <code>IGNEUM_READBACK=full</code> keeps the old path; a chunk with over 256 hits falls back to the full read</td></tr><tr><td>Transfer accounting</td><td>none</td><td>bytes up and down per chunk and the mean device time of kernel, select, read-back and scan in the stats line every 200 jobs and at quit</td></tr><tr><td><code>--memprobe</code></td><td>none</td><td>the tables above, no pack needed</td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>Change</th><th>Before</th><th>After</th></tr></thead><tbody><tr><td>Duplicate platform</td><td><code>--list</code> showed the card twice ([1] 3683.0 and [3] 3652.0); the app made two cards and ran two workers (8.9 + 9.4 MH/s)</td><td>the older platform's entry prints as <code> dup [3] ... hidden, use [1]</code>, the default pick skips it, the app's parser (<code>parse_opencl_list</code>, 3 tests) never makes a card of it; <code>--device 3</code> still works for comparison. Verified on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT): <code>platforms: 2 device(s) hidden ...</code>, cards <code>amd:0:gfx1036</code> and <code>amd:1:gfx1201</code> only</td></tr><tr><td>Kernel report</td><td>work-group and local memory</td><td>plus preferred multiple, private memory (spills), sub-group size on every exchange path (<code>info kernel:</code> in serve mode)</td></tr><tr><td>Read-back per dispatch</td><td>8 B per nonce (16 MiB per job) and a host scan of 2^21 words</td><td>a GPU select pass: the hits (index, hash) behind an atomic counter plus 34 sentinel words; 276 B per chunk plus 16 B per hit; found lines in nonce order; <code>--readback full</code> / <code>IGNEUM_READBACK=full</code> keeps the old path; a chunk with over 256 hits falls back to the full read</td></tr><tr><td>Transfer accounting</td><td>none</td><td>bytes up and down per chunk and the mean device time of kernel, select, read-back and scan in the stats line every 200 jobs and at quit</td></tr><tr><td><code>--memprobe</code></td><td>none</td><td>the tables above, no pack needed</td></tr></tbody></table></div>
 <p>Correctness: <code>proto-opencl/test-generic.sh</code> on the Apple M5 Max (Apple OpenCL) PASS on both paths: "15 sampled hashes (both packs, both sides of the 32-bit nonce boundary) equal igneum-pow hash-bound"; select path transfers <code>5 chunks, up 180 B, down 4452 B</code>, full path <code>up 160 B, down 1536 B</code> (the check's jobs are 32 to 64 nonces with every nonce a hit). The bench on the 9070 XT: cache check PASS, dataset self-test PASS, 6 of 6 vector warps PASS, batch fingerprint <code>3cc4fbf90fa6366c</code> at 2^24 for the devnet pack (the Apple OpenCL value in the README), at every <code>--group-warps</code>.</p>
 <p><strong>The serve-mode A/B on the card</strong> (job <code>rdna4-serve-4</code>, 19:11 UTC, card off in the app, worker exe sha256 <code>324a6d9b…2bfdfff</code>; 200 real <code>job</code> lines of 2,097,152 nonces each, the app's <code>--job-nonces</code>, against the emulator test pack <code>pack-a</code> (epoch <code>edc4fa84…</code>, self-test PASS, 96 of 96 vector lanes), target <code>0000100000000000</code> so that 408 hits fall in 200 jobs on both paths; <code>done</code> ms over jobs 11 to 200; <code>node tools/jobs.mjs rdna4-serve-4</code>):</p>
 <div class="tbl"><table><thead><tr><th>Read-back</th><th>Bytes down per job</th><th>Kernel (device, mean)</th><th>Select pass</th><th>Read-back (wall)</th><th>Host scan</th><th>Mean job</th><th>Inside-job rate</th></tr></thead><tbody><tr><td>full (before)</td><td>16,777,216</td><td>116.12 ms</td><td>0</td><td>7.28 ms</td><td>0.55 ms</td><td>124.22 ms</td><td>16.88 MH/s</td></tr><tr><td>select (after)</td><td>309</td><td>116.00 ms</td><td>0.039 ms</td><td>0.78 ms</td><td>0.00 ms</td><td>117.38 ms</td><td>17.87 MH/s</td></tr><tr><td>select (repeat)</td><td>309</td><td>115.96 ms</td><td>0.038 ms</td><td>0.76 ms</td><td>0.00 ms</td><td>117.33 ms</td><td>17.87 MH/s</td></tr></tbody></table></div>
 <p>Reading: the kernel is the same 116.0 ms on both paths (18.08 MH/s pure kernel, the bench's number). The old path paid 7.8 ms per job for 16 MiB over the eGPU link (2.3 GB/s, the USB4 tunnel's rate; a PCIe slot would read it in about 1 ms, approximate) and the host scan. The select pass removes it: +5.9% per job on this link, nothing on the kernel. Both paths found the same 408 hits. The <code>--group-warps</code> and exchange levers were already shown flat above, so this is the whole host-side gain available on the 9070 XT.</p>
 <p><strong>Probes with a fresh seed per repetition</strong> (the first probe round replayed the same addresses on repeats, so its low-lane rows were cache hits; fixed in <code>probeLaunch</code>, job <code>rdna4-serve-4</code>): 1024 MiB chase at 256 lanes 276 ns per dependent load, at 1,024 lanes 422 ns, at 4,096 lanes 1,560 ns (2.63 G/s, the cap). Random 64-byte lines (four <code>uint4</code> loads per step) at 1024 MiB: 2.46 to 2.88 G lines/s = 158 to 184 GB/s in lines, the same count per second as the 4-byte chase: every random 4-byte read costs this card a 64-byte line fetch. Coalesced stream over the whole 1024 MiB: 635.2 GB/s against the vendor's 640 GB/s, so the memory clock is in its full state and the card is not parked. Inside the 64 MiB buffer the line probe reaches 8.3 to 14.0 G lines/s (533 to 894 GB/s in lines: the Infinity Cache, approximate).</p>
-<p><strong>A second defect found on the way: the pack export race.</strong> PC 1's app log since its 19:02 UTC restart (<code>node tools/logs.mjs win-ae432dc7-20261005-190232</code>): <code>worker error: error 0 pack packs\devnet: the epoch seed bytes do not give the pack's IGNEUM_SEEDW_INIT</code> at 19:07:03, 19:07:19 and 19:08:07, so the 9070 XT was not mining at all in the app while this entry was written (my job <code>rdna4-serve-1</code> at 18:43 hit the same folder in the same state). Cause, from <code>app/igneum-app/src/engine.rs</code> <code>prepare_worker</code>: one thread per card, each running <code>igneum-miner export-pack</code> into the one folder <code>packs\devnet</code>; across an epoch change the two exports interleave and the folder keeps one epoch's <code>program.h</code> with the other's <code>seeds.txt</code> until the next export. Fix on this branch: a process-wide mutex around both export sites (<code>EXPORT_LOCK</code>); the second export rewrites the same pack. Not measured in the app yet: it ships with the branch.</p>
+<p><strong>A second defect found on the way: the pack export race.</strong> the three-card Windows rig's app log since its 19:02 UTC restart (<code>node tools/logs.mjs win-ae432dc7-20261005-190232</code>): <code>worker error: error 0 pack packs\devnet: the epoch seed bytes do not give the pack's IGNEUM_SEEDW_INIT</code> at 19:07:03, 19:07:19 and 19:08:07, so the 9070 XT was not mining at all in the app while this entry was written (my job <code>rdna4-serve-1</code> at 18:43 hit the same folder in the same state). Cause, from <code>app/igneum-app/src/engine.rs</code> <code>prepare_worker</code>: one thread per card, each running <code>igneum-miner export-pack</code> into the one folder <code>packs\devnet</code>; across an epoch change the two exports interleave and the folder keeps one epoch's <code>program.h</code> with the other's <code>seeds.txt</code> until the next export. Fix on this branch: a process-wide mutex around both export sites (<code>EXPORT_LOCK</code>); the second export rewrites the same pack. Not measured in the app yet: it ships with the branch.</p>
 <p><strong>Answer to the maintainers.</strong> The 9070 XT does 2.5 G random 4-byte reads per second from its memory for this access pattern, and the hash needs 128 of them, so about 19 MH/s is this card's ceiling for the current program class, on any slot; it was running at 92% of that. The eGPU link cost 6% per job through the read-back, now removed (17.87 against 16.88 MH/s inside jobs standalone). The duplicate platform that halved it to 8.9 + 9.4 is folded away. The pack race that stopped it is serialised. Nothing else in the worker's control moves the number: the next step for this card is the program class itself (fewer, wider loads per hash would favour AMD's 64-byte lines), which is a consensus question, not a worker one.</p>
-<h2 id="5-october-2026-night-ember-tune-the-two-knob-efficiency-tune-the-fleet-prior-and-what-pc-1-could-measure-tonight-miner-community-lead">5 October 2026 (night), Ember Tune: the two-knob efficiency tune, the fleet prior, and what PC 1 could measure tonight (miner-community-lead)</h2>
+<h2 id="5-october-2026-night-ember-tune-the-two-knob-efficiency-tune-the-fleet-prior-and-what-the-three-card-windows-rig-rtx-5090-rtx-4070-rx-9070-xt-could-measure-tonight-miner-community-lead">5 October 2026 (night), Ember Tune: the two-knob efficiency tune, the fleet prior, and what the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) could measure tonight (miner-community-lead)</h2>
 <p>Branch <code>ember-tune</code> (54ff1bc), docs/plans/ember-tune.md. Every card tuned for MH per watt out of the box: the power limit and the core clock cap stepped on the live kernel (memory clock never touched), the point with the best MH per watt within 1% of the top rate kept and pinned, every result uploaded as a <code>TUNE {json}</code> record (a hash of the install id, no address) and folded per (card model, driver major, program class) into a prior the signed manifest carries back, so a new card of a known model starts there and confirms it in two steps.</p>
-<p><strong>What was measured tonight (PC 1, machine ae432dc7, from its own uploads to the intake):</strong></p>
-<div class="tbl"><table><thead><tr><th>Fact</th><th>Where it was read</th><th>Consequence</th></tr></thead><tbody><tr><td>The installed 0.3.9 app runs as <code>&lt;pc-hostname&gt;\Admin</code> with <code>elevated=False</code> (account line, 19:02:33 UTC)</td><td>app log <code>win-ae432dc7-20261005-190232</code></td><td><code>nvidia-smi -pl</code> and <code>-lgc</code> need administrator rights; the one prompt is the Power control switch (3562f26), which the app never raises by itself</td></tr><tr><td>Two in-app sweep attempts aborted at 20:09 UTC: <code>the_elevated_helper_did_not_run_(the_administrator_prompt_was_cancelled)</code></td><td>the same log</td><td>no stored sweep result from today exists; the 5090's two-knob tune is owed to the morning (one click on Power control, then it runs by itself within 2 minutes of steady mining)</td></tr><tr><td>The RX 9070 XT left PC 1's bus at about 20:40 UTC, was back at 21:09 and gone again at 21:22:59 UTC (the eGPU link, third drop today)</td><td>the telemetry agent and the RTX 5090 machine 1 scheduler</td><td>the AMD path (ADLX, no prompt) is unit-tested on the helper's captured line shapes; its end-to-end run waits for the card</td></tr></tbody></table></div>
+<p><strong>What was measured tonight (the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT), machine ae432dc7, from its own uploads to the intake):</strong></p>
+<div class="tbl"><table><thead><tr><th>Fact</th><th>Where it was read</th><th>Consequence</th></tr></thead><tbody><tr><td>The installed 0.3.9 app runs as <code>&lt;pc-hostname&gt;\Admin</code> with <code>elevated=False</code> (account line, 19:02:33 UTC)</td><td>app log <code>win-ae432dc7-20261005-190232</code></td><td><code>nvidia-smi -pl</code> and <code>-lgc</code> need administrator rights; the one prompt is the Power control switch (3562f26), which the app never raises by itself</td></tr><tr><td>Two in-app sweep attempts aborted at 20:09 UTC: <code>the_elevated_helper_did_not_run_(the_administrator_prompt_was_cancelled)</code></td><td>the same log</td><td>no stored sweep result from today exists; the 5090's two-knob tune is owed to the morning (one click on Power control, then it runs by itself within 2 minutes of steady mining)</td></tr><tr><td>The RX 9070 XT left the three-card Windows rig's bus at about 20:40 UTC, was back at 21:09 and gone again at 21:22:59 UTC (the eGPU link, third drop today)</td><td>the telemetry agent and the the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) scheduler</td><td>the AMD path (ADLX, no prompt) is unit-tested on the helper's captured line shapes; its end-to-end run waits for the card</td></tr></tbody></table></div>
 <p><strong>The pipeline, verified without a card:</strong> 9 <code>ember</code> unit tests (plans, clamps, the choice rule, the five marks, a faulted step reverted inside a fake-clock run, the confirm verdicts, the baseline plan, the record and prior shapes, the vendor reasons), the AMD <code>tune</code> line and the 0.3.10 sample line parsed (<code>engine::amd_telemetry_tests</code>), the helper protocol (<code>sweep::tests</code>), 6 relay aggregation tests (five samples converge on 2,470 MHz at 100%; an outlier at 0.908 MH/W moves the median by nothing; baseline records make no prior; de-duplication; the manifest merge keeps lever 2's cards; the canonical round trip), 3 UI line tests. A test manifest was signed on this Mac with <code>packaging/ota/publish-manifest.sh --tuning</code> from fixture priors: <code>tuning.priors["NVIDIA_GeForce_RTX_5090|581|l128w16"]</code> = 2,470 MHz at 100%, 5 samples, beside the kernel-variant <code>cards</code> entry and <code>tuning.ember {enabled: true, min_samples: 5, rate_tolerance_pct: 1}</code>, signature verified by the signer, 21:25 UTC.</p>
 <p><strong>Tier consequences</strong> (docs/plans/ember-tune.md section 7): a 9-step full tune costs about 12 minutes once and 3 minutes a week per card, under 1% of the hour, the worker never stops; a rig tunes one card at a time and every card of a known model after the first takes the 3-minute confirm; a pool user gives up the same 1% of shares at most; Apple silicon and AMD on Linux measure only and the row says so.</p>
-<p><strong>The PC 1 run, 22:30 UTC (job ember-tune-pc1-1, engine aeea3228..., PC 1 on 0.3.10):</strong> the job published at 22:29:40Z, the installed app stopped its miners and started the second engine at 22:30:21Z, and at 22:31:06Z the installed app quit (its log: <code>quit: stopping the miners, then the node</code>, then <code>job ember-tune-pc1-1: aborted (the app is quitting)</code>), 46 s in, before any step. Nothing was set. Corrected the same night (C35), then named the next morning from the second engine's own log (collect ember-c35-collect-1, 06:59Z): the second engine, reporting 0.3.9 (the branch's Cargo version) under the manifest's <code>min_supported_version</code>, took the 0.3.10 update as urgent (the "urgent" rule beats the copied <code>auto_update = false</code>), downloaded it at 22:31:02Z and started <code>ota-apply.ps1</code> with the per-user installer at 22:31:05Z; the installer's PrepareToInstall sent <code>POST /api/quit</code> to the installed app, which logged <code>quit:</code> at 22:31:06Z. So the source was my own second engine's updater, through the installer, one second before: a second install of 0.3.10 over the 0.3.10 PC 1 had taken through the shipper's update-now at 21:40:41Z (release-0.3.10.md section 8), whose only effect was the quit and the hang. The first reading (the 0.3.11 rollout) was wrong in the cause and right in the class: an installer. What else is established: the engine's quit then HUNG for 24 minutes in the jobs runner's abort, waiting for EOF on the script's stdout pipe whose write end the second engine and its miners had inherited, and those miners (2 igneum-miner, 2 CUDA workers, 1 OpenCL worker) mined on, orphaned, until the relay lane killed them at about 23:00Z; the second engine also raised one administrator prompt at about 22:30:25Z (<code>apply_power_limits</code> at start counted <code>--sweep</code> as Power control), 41 s before the quit; PC 2's unexplained quit at 20:01:09Z came 20 s after a cancelled prompt of the same class, so the prompt is the common factor and the morning's test (one prompt raised beside the mining app on PC 2, the stamped quit line read). Fixed on the branch: b671c8b (quit sources, Power control alone decides, no cap at start under <code>--sweep</code>), 8ab9068 (no pipe into a second engine, its tree ended, the CI check), and the third close: a second engine never runs the updater (<code>IGNEUM_APP_NO_OTA=1</code>, implied by <code>--sweep</code>; the playbooks set it; the CI check demands it). What the run did record, the "before" snapshots with the miners stopped:</p>
+<p><strong>The the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) run, 22:30 UTC (job ember-tune-pc1-1, engine aeea3228..., the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) on 0.3.10):</strong> the job published at 22:29:40Z, the installed app stopped its miners and started the second engine at 22:30:21Z, and at 22:31:06Z the installed app quit (its log: <code>quit: stopping the miners, then the node</code>, then <code>job ember-tune-pc1-1: aborted (the app is quitting)</code>), 46 s in, before any step. Nothing was set. Corrected the same night (C35), then named the next morning from the second engine's own log (collect ember-c35-collect-1, 06:59Z): the second engine, reporting 0.3.9 (the branch's Cargo version) under the manifest's <code>min_supported_version</code>, took the 0.3.10 update as urgent (the "urgent" rule beats the copied <code>auto_update = false</code>), downloaded it at 22:31:02Z and started <code>ota-apply.ps1</code> with the per-user installer at 22:31:05Z; the installer's PrepareToInstall sent <code>POST /api/quit</code> to the installed app, which logged <code>quit:</code> at 22:31:06Z. So the source was my own second engine's updater, through the installer, one second before: a second install of 0.3.10 over the 0.3.10 the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) had taken through the shipper's update-now at 21:40:41Z (release-0.3.10.md section 8), whose only effect was the quit and the hang. The first reading (the 0.3.11 rollout) was wrong in the cause and right in the class: an installer. What else is established: the engine's quit then HUNG for 24 minutes in the jobs runner's abort, waiting for EOF on the script's stdout pipe whose write end the second engine and its miners had inherited, and those miners (2 igneum-miner, 2 CUDA workers, 1 OpenCL worker) mined on, orphaned, until the relay lane killed them at about 23:00Z; the second engine also raised one administrator prompt at about 22:30:25Z (<code>apply_power_limits</code> at start counted <code>--sweep</code> as Power control), 41 s before the quit; the RTX 5090 Windows rig's unexplained quit at 20:01:09Z came 20 s after a cancelled prompt of the same class, so the prompt is the common factor and the morning's test (one prompt raised beside the mining app on the RTX 5090 Windows rig, the stamped quit line read). Fixed on the branch: b671c8b (quit sources, Power control alone decides, no cap at start under <code>--sweep</code>), 8ab9068 (no pipe into a second engine, its tree ended, the CI check), and the third close: a second engine never runs the updater (<code>IGNEUM_APP_NO_OTA=1</code>, implied by <code>--sweep</code>; the playbooks set it; the CI check demands it). What the run did record, the "before" snapshots with the miners stopped:</p>
 <div class="tbl"><table><thead><tr><th>Card</th><th>Read back at 22:30:20Z</th><th>Meaning</th></tr></thead><tbody><tr><td>RTX 5090 (driver 617.14)</td><td>limit 450 W of 575 W default (min 400, max 600), draw 259.9 W idle-after-stop, core 2,850 MHz, <code>clocks.max.gr</code> 3,090 MHz, memory 14,001 MHz</td><td>the two-knob plan for this card is 5 power steps (575, 518, 460, 403, 400 W) and 4 clock steps (2,781, 2,472, 2,163, 1,854 MHz); it needs the one administrator prompt (Power control)</td></tr><tr><td>RX 9070 XT (bus 98, present again)</td><td><code>tune 1 ... gmax 0 gmax_range -500 1000 plimit 0 plimit_range -30 10 factory 1 ok</code></td><td>the helper's clock range is an OFFSET from stock in MHz, not a ceiling: a probe reading it as a 1,000 MHz maximum would have asked for <code>--set-gmax 900</code>, an overclock. Fixed at 054e041: an offset range closes the clock knob (until the stock clock is known) and the power ladder runs on the percent scale bounded by the range, so the 9070 XT's plan is 100, 90, 80, 70% (the -30 floor), 4 steps</td></tr><tr><td>Radeon(TM) Graphics (integrated)</td><td><code>tune 0 ... gmax - ... factory 0 ok</code></td><td>no manual tuning: measure only, and it is off by default anyway</td></tr></tbody></table></div>
-<p><strong>Run 2, 6 October 2026, 07:21 to 07:56Z (job ember-tune-pc1-2, elevated on the maintainers' word, engine 25113f52..., PC 1 on 0.3.11):</strong> the maintainers answered the one prompt; the installed app stopped its miners at 07:21:16Z; the second engine ran for the whole 35-minute budget at "waiting, 0.00 MH/s" and no step ran. Cause: the playbook wrote the engine's copy of settings.json with PowerShell 5.1's <code>Set-Content -Encoding utf8</code>, which adds a UTF-8 BOM; the engine's JSON parser refuses it, <code>Settings::load</code> fell back to defaults (no payout address, no cards), the engine logged <code>[error] no payout address</code> and never started a miner. Run 1's scratch log carried the same line the night before. Readbacks, idle both times: the 5090 at 90.6 W before and 69.9 W after (2,505 then 2,407 MHz core, 14,001 MHz memory, limit 450 W of 575), the 9070 XT at factory (<code>gmax 0</code>, <code>plimit 0</code>). Nothing set on either card. The installed app's runner released the miners-stopped hold by itself on the failed exit (<code>job finished; the miners restart</code> at 07:56:50Z, both miners up by 07:57:04Z, <code>mining</code> at 07:57:29Z): mining paused 36 min 13 s. Fix 8273494: the copy is written without a BOM, the address is read back and the job fails within seconds if it is empty (<code>RESULT TUNE scratch settings: address ..., cards N, first bytes ...</code>), and the CI check fails any playbook writing JSON with <code>Set-Content -Encoding utf8</code>. The re-run needs one more click on the prompt.</p>
-<p><strong>Dry run 3, 6 October 2026, 14:56 to 15:02Z (job ember-dryrun-pc1-3, unelevated, no prompt, measure only; engine from ember-tune 07d5a72, kit sha256 36b522c9...):</strong> the first measurement engine on PC 1 that mined. Both cards, one 60 s row each at the installed app's 80% cap, clocks unlocked, rate = the worker's STATUS wall rate, draw = nvidia-smi every 5 s:</p>
+<p><strong>Run 2, 6 October 2026, 07:21 to 07:56Z (job ember-tune-pc1-2, elevated on the maintainers' word, engine 25113f52..., the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) on 0.3.11):</strong> the maintainers answered the one prompt; the installed app stopped its miners at 07:21:16Z; the second engine ran for the whole 35-minute budget at "waiting, 0.00 MH/s" and no step ran. Cause: the playbook wrote the engine's copy of settings.json with PowerShell 5.1's <code>Set-Content -Encoding utf8</code>, which adds a UTF-8 BOM; the engine's JSON parser refuses it, <code>Settings::load</code> fell back to defaults (no payout address, no cards), the engine logged <code>[error] no payout address</code> and never started a miner. Run 1's scratch log carried the same line the night before. Readbacks, idle both times: the 5090 at 90.6 W before and 69.9 W after (2,505 then 2,407 MHz core, 14,001 MHz memory, limit 450 W of 575), the 9070 XT at factory (<code>gmax 0</code>, <code>plimit 0</code>). Nothing set on either card. The installed app's runner released the miners-stopped hold by itself on the failed exit (<code>job finished; the miners restart</code> at 07:56:50Z, both miners up by 07:57:04Z, <code>mining</code> at 07:57:29Z): mining paused 36 min 13 s. Fix 8273494: the copy is written without a BOM, the address is read back and the job fails within seconds if it is empty (<code>RESULT TUNE scratch settings: address ..., cards N, first bytes ...</code>), and the CI check fails any playbook writing JSON with <code>Set-Content -Encoding utf8</code>. The re-run needs one more click on the prompt.</p>
+<p><strong>Dry run 3, 6 October 2026, 14:56 to 15:02Z (job ember-dryrun-pc1-3, unelevated, no prompt, measure only; engine from ember-tune 07d5a72, kit sha256 36b522c9...):</strong> the first measurement engine on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) that mined. Both cards, one 60 s row each at the installed app's 80% cap, clocks unlocked, rate = the worker's STATUS wall rate, draw = nvidia-smi every 5 s:</p>
 <div class="tbl"><table><thead><tr><th>Card</th><th>MH/s</th><th>W</th><th>MH/W</th><th>core</th><th>memory</th><th>GPU C</th><th>limit</th></tr></thead><tbody><tr><td>RTX 5090</td><td>127.31</td><td>316.5</td><td>0.402</td><td>2,850 MHz</td><td>13,801 MHz</td><td>68</td><td>460 W of 575</td></tr><tr><td>RTX 4070</td><td>28.68</td><td>102.7</td><td>0.279</td><td>2,805 MHz</td><td>10,251 MHz</td><td>46</td><td>160 W of 200</td></tr></tbody></table></div>
-<p>Nothing set; the installed app's miners back after 350 s. Why every earlier run (5 and 6 October, runs 1 to 4 and dry runs 1 and 2) read its copied settings as defaults, measured on PC 1 (collect ember-acl-2): the engine's own start locks its app folder with <code>icacls /inheritance:r /grant:r &lt;user&gt;:F</code>; cutting the folder's inheritance propagates down, the non-inheritable grant gives the children nothing, so a file COPIED in before the start (settings.json, machine-id, wallet.json) is left with no access entry and its owner cannot read it (<code>ReadAllText</code>: access denied), while the engine's own files written after the lock inherit fine, which hid it for a day. A first fix with <code>(OI)(CI)F /T</code> left the file empty too: <code>/T</code> re-applies <code>/inheritance:r</code> to each file after the propagation and an <code>(OI)(CI)</code> entry on a file is inherit-only. The right form is the inheritable grant without <code>/T</code> (07d5a72). Consequence for every tier on Windows: nothing changes for the installed app (its files were always its own); any tool that drops files into the app folder before the app starts (an installer's seed, a migration, a support script) was unreadable to the app until now and is readable from 0.3.13 on.</p>
-<p><strong>Run 5, 6 October 2026, 15:28 to 15:39Z (job ember-tune-pc1-5, elevated on the maintainers' click, PC 1 on 0.3.13, the tune engine = kit ember-kit-5 from 07d5a72, mode=direct):</strong> the first run that set limits. The 5090's power ladder, 75 s a step, the clock unlocked (2,850 MHz core, 13,801 MHz memory), the rate = the worker's STATUS wall rate, the draw = nvidia-smi every 5 s:</p>
+<p>Nothing set; the installed app's miners back after 350 s. Why every earlier run (5 and 6 October, runs 1 to 4 and dry runs 1 and 2) read its copied settings as defaults, measured on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) (collect ember-acl-2): the engine's own start locks its app folder with <code>icacls /inheritance:r /grant:r &lt;user&gt;:F</code>; cutting the folder's inheritance propagates down, the non-inheritable grant gives the children nothing, so a file COPIED in before the start (settings.json, machine-id, wallet.json) is left with no access entry and its owner cannot read it (<code>ReadAllText</code>: access denied), while the engine's own files written after the lock inherit fine, which hid it for a day. A first fix with <code>(OI)(CI)F /T</code> left the file empty too: <code>/T</code> re-applies <code>/inheritance:r</code> to each file after the propagation and an <code>(OI)(CI)</code> entry on a file is inherit-only. The right form is the inheritable grant without <code>/T</code> (07d5a72). Consequence for every tier on Windows: nothing changes for the installed app (its files were always its own); any tool that drops files into the app folder before the app starts (an installer's seed, a migration, a support script) was unreadable to the app until now and is readable from 0.3.13 on.</p>
+<p><strong>Run 5, 6 October 2026, 15:28 to 15:39Z (job ember-tune-pc1-5, elevated on the maintainers' click, the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) on 0.3.13, the tune engine = kit ember-kit-5 from 07d5a72, mode=direct):</strong> the first run that set limits. The 5090's power ladder, 75 s a step, the clock unlocked (2,850 MHz core, 13,801 MHz memory), the rate = the worker's STATUS wall rate, the draw = nvidia-smi every 5 s:</p>
 <div class="tbl"><table><thead><tr><th>Cap</th><th>Limit</th><th>MH/s</th><th>W</th><th>MH/W</th><th>GPU C</th></tr></thead><tbody><tr><td>100%</td><td>575 W</td><td>127.38</td><td>309.9</td><td>0.411</td><td>64</td></tr><tr><td>90%</td><td>518 W</td><td>99.32</td><td>313.6</td><td>0.317</td><td>65</td></tr><tr><td>80%</td><td>460 W</td><td>123.11</td><td>312.2</td><td>0.394</td><td>65</td></tr><tr><td>70%</td><td>403 W</td><td>127.38</td><td>310.9</td><td>0.410</td><td>65</td></tr><tr><td>60% (floor 400 W)</td><td>400 W</td><td>127.38</td><td>311.3</td><td>0.409</td><td>65</td></tr></tbody></table></div>
 <p>Reading: the cap does not bind on this hash (310 to 314 W under every limit, as the 4 October stability line said), so the power knob is flat at 0.41 MH/W on the 5090 and the saving must come from the clocks; the 90% and 80% rows' rate dips at the same draw are stalls inside those holds (a worker restart or a template wait), not the cap. The clock ladder's first step (2,781 MHz at 575 W) was requested at 15:37:47Z and never measured: the playbook's own watchdog killed the live engine at 15:39:03Z (all three cards mining at 177 MH/s) because its idle clause sampled one log line and read "idle" from a missing match; the 4070's and the 9070 XT's plans never ran. Consequences: the 5090 is probably left with its core clock locked at 2,781 MHz (an <code>-lgc</code> lock persists until <code>-rgc</code> or a reboot) under the 575 W cap, which costs little rate; freeing it needs administrator rights; and the Power Helper was NOT registered by this run (the registration lived only in the installed app's cap path, which a <code>--sweep</code> engine skips). Fixed the same hour: the watchdog's idle rule (three consecutive status lines reading 0.00 MH/s and 300 s, never a missing match), the <code>after</code> snapshot and the engine-log dump on every exit, and an elevated tune engine registering the task itself before its first step. The decided way out: the maintainers switches Power control ON in the 0.3.13 app (its one prompt registers the task from the install folder), a job frees the clock through the task (<code>rgc</code>), the tune runs unelevated through the task.</p>
-<p>Consequence for the tiers: an AMD card is tuned on its power limit alone until its stock core clock is read (a 9070 XT at -30% is the floor the driver allows, 4 steps, 5 minutes); every NVIDIA card's two-knob plan waits on the user's one click on Power control; the re-run on PC 1 is held until the quit's source is named (the event-log collect) and follows the 0.3.11 rollout (the update clears the jobs folder, so the engine and the helper are fetched again), with the scheduler's slot.</p>
+<p>Consequence for the tiers: an AMD card is tuned on its power limit alone until its stock core clock is read (a 9070 XT at -30% is the floor the driver allows, 4 steps, 5 minutes); every NVIDIA card's two-knob plan waits on the user's one click on Power control; the re-run on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) is held until the quit's source is named (the event-log collect) and follows the 0.3.11 rollout (the update clears the jobs folder, so the engine and the helper are fetched again), with the scheduler's slot.</p>
 <h2 id="5-october-2026-night-read-width-of-the-lottery-hash-4-16-and-64-byte-loads-a-per-load-mix-a-written-scratch-three-cards-gate-1-experiment-cryptographer">5 October 2026 (night), read width of the lottery hash: 4, 16 and 64-byte loads, a per-load mix, a written scratch; three cards (gate 1 experiment, cryptographer)</h2>
 <p>Branch <code>readwidth</code> (commits 019b014, b970dda, 4badcee, a9e002c, d0018cf and the entry commit); plan and recommendation in <code>docs/plans/read-width.md</code>. Nothing here changes consensus: every class sits behind <code>igneum-pow --class</code> and the default class is generator version 2 byte for byte (<code>igneum-pow/tests/packs.rs</code> passes on the four pinned packs after every commit). Question (the maintainers, after "the 9070 XT on the eGPU" above): would wider reads keep the latency-bound random-access property while closing the vendor gap. Additions from the coordinator: a per-load width drawn from an era-fixed mix, and a written per-warp scratch (measurement only, no soundness claim).</p>
 <p><strong>What a class does</strong> (<code>igneum-pow/src/generator.rs</code> <code>LoadClass</code>, <code>verify::fold_words</code>, the three emitters): a load of W words reads the W-word-aligned address <code>(src AND MASK) AND NOT (W - 1)</code> and folds every word into <code>dst</code> (<code>x = dst ^ w0; x = (rotl(x, 11) * 0x9e3779b1) ^ w[j]</code>); W = 1 is the lottery hash exactly (<code>w4</code> = pack <code>bcc1248b10cc90f2</code>). A mix class draws W per load with one extra <code>below(100)</code> roll per instruction. A scratch class <code>scr&lt;k&gt;k&lt;kb&gt;</code> turns <code>k</code> of the 16 memory slots into read-modify-writes of a 16-byte slot of the lane's share of a <code>kb</code> KiB per-warp scratch (kernels run persistent warps, one per block or work-group; a slot reads as a seed-and-base fill until the unit writes it, behind a per-unit tag). Program ids carry the class. Dependent chain and 32-lane unit unchanged.</p>
 <p><strong>Correctness</strong>: 23 packs (<code>proto-cuda/packs-readwidth/</code>, Rust CPU reference vectors). Every pack passed its three vector units and the cache and dataset checks on Metal (M5 Max, <code>proto-metal/packbench</code>), Apple OpenCL (<code>--bench-pack</code>), the RTX 5090 (NVRTC, <code>igneum-worker-cuda --bench</code>) and, the 16 width and mix packs, the RX 9070 XT (<code>igneum-worker-opencl --bench-pack</code>); the 2^24 batch fingerprints agree across all four runtimes on every pack (for example w16 <code>e7c890445b47af60</code>, w64 <code>836e56e7d496e980</code>, mixB-2 <code>a18ac73098c76007</code>). The clang CUDA emulation (w16, w64, w64x4, mixA-0, mixB-0: 3 of 3 units standalone and 2 of 2 in batch at 2 warps per block) and the clang OpenCL emulation (the same five plus scr2k32 and scr8k128, sub-group 32 and, width packs, wave64 with sub-group shuffles) pass with equal fingerprints per configuration. Acceptance rule on the classes: 60 candidates per class, rejection 0 to 14 of 60 (w16 and w64 as v2; the mixes the same; the scratch classes' distinct-address bound now covers dataset loads only, since a 64-slot lane scratch repeats slots by design). CPU verifier (M5 Max, one core, avg of 50 units, <code>igneum-pow bench --class</code>): v2 0.604 ms, w16 0.610, w64 0.630, w64x4 0.160, mix50-35-15 0.620, mix25-50-25 0.614, scr0k32 0.600 (1.004 on a loaded re-run), scr2k32 0.657, scr4k32 0.458, scr8k32 0.317, scr2k128 0.535, scr4k128 0.458, scr8k128 0.311; per hash divide by 32. The wide reads cost the verifier nothing (a lane's words lie in one item); scratch ops replace item derivations and make it cheaper.</p>
 <p><strong>Probes</strong> (<code>--memprobe</code>, dependent random reads at 1024 MiB, G reads/s, best over lanes in flight; 4 B = the hash's pattern; the 5090 and 9070 XT with the card off in the app, the Apple M5 Max through Apple OpenCL under a load average of 5 to 10):</p>
-<div class="tbl"><table><thead><tr><th>Card</th><th>4 B chase</th><th>16 B</th><th>64 B</th><th>64 B as GB/s</th><th>coalesced stream GB/s (rated)</th><th>integer chain</th></tr></thead><tbody><tr><td>RTX 5090 (PC 2, CUDA)</td><td>17.5 to 18.2</td><td>18.0 to 19.9</td><td>9.1 to 15.7 (9.1 at 4 M lanes)</td><td>584</td><td>1,579 (1,792)</td><td>39.0 T op/s</td></tr><tr><td>RX 9070 XT (PC 1, eGPU, OpenCL)</td><td>2.42 to 2.66</td><td>2.43 to 2.73</td><td>2.47 to 2.87</td><td>158</td><td>636 (640)</td><td>6.2 T op/s</td></tr><tr><td>Apple M5 Max (Apple OpenCL, approximate)</td><td>3.50</td><td>3.51</td><td>3.51</td><td>225</td><td>522</td><td></td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>Card</th><th>4 B chase</th><th>16 B</th><th>64 B</th><th>64 B as GB/s</th><th>coalesced stream GB/s (rated)</th><th>integer chain</th></tr></thead><tbody><tr><td>RTX 5090 (the RTX 5090 Windows rig, CUDA)</td><td>17.5 to 18.2</td><td>18.0 to 19.9</td><td>9.1 to 15.7 (9.1 at 4 M lanes)</td><td>584</td><td>1,579 (1,792)</td><td>39.0 T op/s</td></tr><tr><td>RX 9070 XT (the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT), eGPU, OpenCL)</td><td>2.42 to 2.66</td><td>2.43 to 2.73</td><td>2.47 to 2.87</td><td>158</td><td>636 (640)</td><td>6.2 T op/s</td></tr><tr><td>Apple M5 Max (Apple OpenCL, approximate)</td><td>3.50</td><td>3.51</td><td>3.51</td><td>225</td><td>522</td><td></td></tr></tbody></table></div>
 <p>Reading: on the 9070 XT and the M5 Max a 64-byte dependent read costs exactly what a 4-byte one costs (the line is fetched either way); on the 5090 a 64-byte read costs about two 4-byte reads (two 32-byte sectors) and the 64 B chase at full occupancy sits at 584 GB/s, a third of the stream.</p>
-<p><strong>Hash rates</strong> (5 timed dispatches of 2^24 nonces after a warm-up; Metal and the 9070 XT by device time, the 5090 by wall time around the stream sync; the RTX 5090 machine cards switched off in the app for the run and restored, PC 1's 5090 and the integrated chip kept mining; the Apple M5 Max under other agents' builds, load 4 to 9, so its absolute numbers carry that; the share = measured / (the card's probe ceiling at the class's widths / loads per hash)):</p>
+<p><strong>Hash rates</strong> (5 timed dispatches of 2^24 nonces after a warm-up; Metal and the 9070 XT by device time, the 5090 by wall time around the stream sync; the RTX 5090 machine cards switched off in the app for the run and restored, the three-card Windows rig's 5090 and the integrated chip kept mining; the Apple M5 Max under other agents' builds, load 4 to 9, so its absolute numbers carry that; the share = measured / (the card's probe ceiling at the class's widths / loads per hash)):</p>
 <div class="tbl"><table><thead><tr><th>Class</th><th>dataset B/hash</th><th>RTX 5090 MH/s (share)</th><th>RX 9070 XT MH/s (share)</th><th>M5 Max Metal MH/s (share)</th><th>5090 / 9070</th></tr></thead><tbody><tr><td>v2 (w4, the lottery hash)</td><td>512</td><td>136.1 (0.96)</td><td>18.15 (0.87)</td><td>27.74 (1.01)</td><td>7.5x</td></tr><tr><td>w16</td><td>2,048</td><td>139.8 (0.90)</td><td>17.90 (0.84)</td><td>28.26 (1.03)</td><td>7.8x</td></tr><tr><td>w64</td><td>8,192</td><td>71.9 (0.58)</td><td>17.59 (0.78)</td><td>28.27 (1.03)</td><td>4.1x</td></tr><tr><td>w64x4 (32 loads)</td><td>2,048</td><td>275.3 (0.56)</td><td>75.19 (0.84)</td><td>109.7 (1.00)</td><td>3.7x</td></tr><tr><td>mix50-35-15, 6 programs: min / median / max (spread of median)</td><td>1,664 to 3,680</td><td>99.5 / 114.2 / 121.0 (18.8%)</td><td>17.45 / 18.76 / 18.83 (7.4%)</td><td>25.36 / 27.26 / 28.43 (11.3%)</td><td>6.1x</td></tr><tr><td>mix25-50-25, 6 programs</td><td>2,240 to 5,024</td><td>95.9 / 107.3 / 119.8 (22.3%)</td><td>17.84 / 18.45 / 18.85 (5.5%)</td><td>23.21 / 24.68 / 25.21 (8.1%)</td><td>5.8x</td></tr></tbody></table></div>
 <p>Scratch (variant 5; N persistent warps; 5090: 2,048 warps launched against a resident capacity of 4,080 = 24 blocks/SM x 1 warp/block x 170 SMs at <code>--block-warps 1</code>, the occupancy query unchanged by the allocation (24 before and after); Metal: 2,048 to 16,384 warps swept, best shown; arena = N x per-warp size; the whole working set = 1 GiB dataset + 256 MiB cache + 128 MiB output + arena, under 2 GB on every row):</p>
 <div class="tbl"><table><thead><tr><th>Class (k of 16 slots, KiB per warp)</th><th>scratch ops/hash</th><th>dataset B/hash</th><th>RTX 5090 MH/s (vs scr0, share)</th><th>M5 Max Metal MH/s (vs scr0)</th><th>RX 9070 XT MH/s</th><th>5090 arena / working set</th></tr></thead><tbody><tr><td>scr0k32 (control, persistent loop, no RMW)</td><td>0</td><td>512</td><td>139.1 (0, 0.98)</td><td>28.25 (0)</td><td>17.88 (control, 0.86)</td><td>64 MiB / 1.4 GiB</td></tr><tr><td>scr2k32 (12.5%)</td><td>16</td><td>448</td><td>114.4 (-18%, 0.80)</td><td>26.14 (-7%)</td><td>14.65 (-18%)</td><td>64 MiB / 1.4 GiB</td></tr><tr><td>scr4k32 (25%)</td><td>32</td><td>384</td><td>109.8 (-21%, 0.76)</td><td>31.74 (+12%)</td><td>14.00 (-22%)</td><td>64 MiB / 1.4 GiB</td></tr><tr><td>scr8k32 (50%)</td><td>64</td><td>256</td><td>122.1 (-12%, 0.82)</td><td>49.08 (+74%)</td><td>14.17 (-21%)</td><td>64 MiB / 1.4 GiB</td></tr><tr><td>scr2k128 (12.5%)</td><td>16</td><td>448</td><td>110.1 (-21%, 0.77)</td><td>26.24 (-7%)</td><td>14.07 (-21%)</td><td>256 MiB / 1.6 GiB</td></tr><tr><td>scr4k128 (25%)</td><td>32</td><td>384</td><td>98.0 (-30%, 0.68)</td><td>28.08 (-1%)</td><td>13.14 (-27%)</td><td>256 MiB / 1.6 GiB</td></tr><tr><td>scr8k128 (50%)</td><td>64</td><td>256</td><td>72.8 (-48%, 0.49)</td><td>35.44 (+25%)</td><td>12.03 (-33%)</td><td>256 MiB / 1.6 GiB</td></tr></tbody></table></div>
@@ -609,7 +566,7 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <p><strong>Addendum, the added form</strong> (coordinator's form of 5 October 2026: 16 + k load slots, the k hot ones drawn among them, the 16 dataset loads and the 4,096-item verifier bound unchanged; packs <code>hot32k4a</code>, <code>hot64k4a</code>, <code>hot96k4a</code>; second Mac session 21:03 to 21:19 UTC, load average 7 to 14; same harnesses and commands, branch <code>ca2-cache</code> on ca2-v3 464d6e1, the hosts rebuilt on the merged packfile.h):</p>
 <div class="tbl"><table><thead><tr><th>Pack</th><th>Metal Mhash/s</th><th>Apple OpenCL Mhash/s</th><th>fingerprint (equal on both)</th><th>vectors</th><th>hot table</th><th>g against v2 (Metal, v2 27.63 in this session)</th><th>probe-predicted g</th><th>CPU verify ms/warp (v2 0.602)</th><th>hot fill, one core</th></tr></thead><tbody><tr><td>hot32k4a</td><td>25.76</td><td>25.72</td><td>8a3414735db4523c</td><td>96/96 both</td><td>PASS both</td><td>0.93</td><td>0.96</td><td>0.631</td><td>21.7 ms</td></tr><tr><td>hot64k4a</td><td>23.92</td><td>23.87</td><td>45668f34105f6307</td><td>96/96 both</td><td>PASS both</td><td>0.87</td><td>0.94</td><td>0.609</td><td>43.3 ms</td></tr><tr><td>hot96k4a</td><td>22.92</td><td>22.88</td><td>af763997dfee4c82</td><td>96/96 both</td><td>PASS both</td><td>0.83</td><td>0.93</td><td>0.614</td><td>64.9 ms</td></tr></tbody></table></div>
 <p>Reading: the added form costs this card 7, 13 and 17% of its rate at 32, 64 and 96 MiB for four extra loads per iteration, more than the probe predicts as the table grows; the verifier is unchanged (4,096 items, plus 32 table reads) and pays the fill per epoch. Chip arithmetic in the plan, section 6.4. All eight packs load and self-test through the rebuilt OpenCL host (the Windows exe's host.c) on the Apple M5 Max.</p>
-<p><strong>Addendum, the PCs</strong> (5 October 2026, 21:29 to 21:35 UTC, PC 1 ae432dc7, app 0.3.9 before and after; fetch <code>fetch-ca2-hot-20261005</code> (zip sha256 bd49faa1c9d48024f49c615481faff5c68a4c09f0889dbaf009c208674d67b3f), jobs <code>run-ca2-hot-5090-20261005</code> (126 s) and <code>run-ca2-hot-9070-20261005</code> (247 s), both exit 0, the card under test switched off in the app through <code>api/cards</code> and restored; workers <code>igneum-worker-cuda.exe</code> sha256 956c4ab34f42cbcd1d2c1c6fb1a58fd9b3a8c70166df771cafcd0296ca6a27d4 and <code>igneum-worker-opencl.exe</code> sha256 32d3d34390aad70485c3524424c354223387137d383b5c5daf01f40073c12703, built from ca2-cache 196db96 on ca2-v3's merged packfile.h d2cd6e1; read back with <code>node tools/jobs.mjs &lt;id&gt; --all</code>):</p>
+<p><strong>Addendum, the PCs</strong> (5 October 2026, 21:29 to 21:35 UTC, the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) ae432dc7, app 0.3.9 before and after; fetch <code>fetch-ca2-hot-20261005</code> (zip sha256 bd49faa1c9d48024f49c615481faff5c68a4c09f0889dbaf009c208674d67b3f), jobs <code>run-ca2-hot-5090-20261005</code> (126 s) and <code>run-ca2-hot-9070-20261005</code> (247 s), both exit 0, the card under test switched off in the app through <code>api/cards</code> and restored; workers <code>igneum-worker-cuda.exe</code> sha256 956c4ab34f42cbcd1d2c1c6fb1a58fd9b3a8c70166df771cafcd0296ca6a27d4 and <code>igneum-worker-opencl.exe</code> sha256 32d3d34390aad70485c3524424c354223387137d383b5c5daf01f40073c12703, built from ca2-cache 196db96 on ca2-v3's merged packfile.h d2cd6e1; read back with <code>node tools/jobs.mjs &lt;id&gt; --all</code>):</p>
 <p>Probe (<code>--memprobe --probe-mib S</code>, dependent 4 B chase ceiling at 4,194,304 lanes, G loads/s; ns per dependent load at 4,096 lanes in brackets):</p>
 <div class="tbl"><table><thead><tr><th>Card</th><th>32 MiB</th><th>64</th><th>96</th><th>1024</th><th>stream at 1024 MiB</th></tr></thead><tbody><tr><td>RTX 5090 (CUDA, wall)</td><td>112.6 (320)</td><td>112.6 (340)</td><td>112.6 (336)</td><td>17.6 (610)</td><td>1,563 GB/s</td></tr><tr><td>RX 9070 XT (OpenCL, event)</td><td>9.88 (396)</td><td>9.47 (457)</td><td>8.18 (454)</td><td>2.43 (1,579)</td><td>633 GB/s</td></tr></tbody></table></div>
 <p>Rates (5 dispatches of 2^24 after a warm-up; 5090 <code>--bench --block-warps 1</code>, 9070 XT <code>--bench-pack --device 1</code> work-group 256; every row check=PASS with the Apple M5 Max's fingerprint; v2 references from the readwidth entry, same night, same workers: 136.1 and 18.15 MH/s):</p>
@@ -623,25 +580,25 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <div class="tbl"><table><thead><tr><th>Construction</th><th>Verifier ms per 32-lane unit, avg of 50 (two rounds)</th><th>Worst cold unit</th><th>Against v2</th><th>256 MiB fill, one core</th><th>Metal 1 GiB build, GPU ms</th></tr></thead><tbody><tr><td>v2</td><td>1.361 / 1.310</td><td>1.579</td><td>1</td><td>172 to 173 ms</td><td>29.7 (first touch) / 21.0</td></tr><tr><td>x4 (class v3)</td><td>1.956 / 1.923</td><td>2.043</td><td>1.45x</td><td>172 to 175 ms</td><td>20.9 / 21.0</td></tr><tr><td>x8 (candidate)</td><td>2.785 / 2.790</td><td>2.942</td><td>2.09x</td><td>172 ms</td><td>21.9 / 21.9</td></tr></tbody></table></div>
 <p>Reading: the mixer multiplies the verifier's ALU part only (the 8 dependent misses per item are unchanged), hence 1.45x and 2.1x and not 4x and 8x; the Apple M5 Max's GPU build is latency-bound and does not move with the mixer, so the "under 1 s on every discrete card" half of the x8 rule is the RTX 5090 machine job (five packs, <code>relay/playbooks/mixer-x4-pc1-bench.ps1</code>, waiting for the go). Verification throughput (C19): a quiet 2026 core serves about 1,100 shares per second at x4 and 800 at x8 (1,660 at v2, re-cutting spec 09's 2,270), a 22,000-member pool at one share per 10 s needs 2 cores at x4 and 3 at x8, IBD over 108,000 headers is 1.6 min at x4 and 2.3 at x8 on that core; the 10 ms gate keeps 8.0 ms (x4) and 7.1 ms (x8) of margin on the loaded core, 6 to 7 ms on a 2019-class laptop core (approximate, unmeasured, O-1.14).</p>
 <p>Chip model (<code>docs/analysis/chip-model-v3.md</code>): the on-die-cache recompute chip at 50 T op/s against the 5090's measured 136.1 MH/s: v2 334 MH/s, 2.45x bare, 7.4x with the 3x fixed-function factor; x4 83.5 MH/s, 0.61x bare, 1.84x with the factor, 1.53x with the 128 mm^2 N5 mirror deducted at equal silicon; x8 41.7 MH/s, 0.31x, 0.92x, 0.76x. The claim at x4 is "under 2x" with the margin thin on the equal-budget convention (a 3.3x factor or a 10 percent larger budget reads 2.0x); the hot table in the added form would have raised it to 2.1x to 2.2x at the 5090's g (kept as measured, not adopted). Nothing here is a measurement of a chip.</p>
-<p><strong>Addendum, 22:15 UTC: the verifier regression, the RTX 5090 machine 1 build rows, and x8 into v3.</strong> The era agent measured the same v2 input with readwidth's binary (0.604 ms) and ca2-v3 HEAD's (1.33) in one minute; bisected under the measure lock to this branch's 0fc0ad1 (seam 6c75dad 0.610, 0fc0ad1 1.332; the "loaded box" reading above was wrong by that factor, the load was real but the 2x was the code). Cause: the item loop (<code>derive_items</code>) inlined into <code>MemhardCpu::fetch</code>; the mask hoisted, the mask constant, and the constant-mask loop inlined all stayed at 1.33, the same loop <code>#[inline(never)]</code> read 0.60 to 0.62. Fix: <code>derive_items_mask</code>, out of line, one instance per cache size with the line mask a constant. Measured the era agent's way (readwidth's binary beside the fixed one, same input, same minute, 22:07 UTC): v2 0.607 / 0.610 against 0.609 / 0.611; on the fixed binary x4 1.238 / 1.237 (2.0x), x8 2.077 / 2.058 (3.4x), worst cold 2.15 ms; the increments (+0.63, +1.46 ms per unit) equal the slow binary's. Lesson, the class: an inlined item loop costs 2.2x and nothing in the suite sees it; a verifier benchmark with a pinned bound in the crate's CI is filed for the next cut, and until then every change to the item loop is measured against the previous binary on the same input in the same minute. PC 1 (job run-mixer-x4-pc1-20261005, 22:00 to 22:04 UTC, the worker's <code>cache ... dataset ... ms</code> wall line): RTX 5090 dataset 23 to 25 ms at v2, x4 and x8; RX 9070 XT (gfx1201) 72 to 77 ms at all three; every fingerprint equal to the Apple M5 Max's; rates the v2 rate (136.5 to 137.4 and 18.0 to 18.2 MH/s). Decision under the delegated rule (coordinator, 22:05 UTC): x8 enters class v3 (<code>V3_CLASS = MX8</code>); pinned packs mx8-genesis (7c28cfb06c5c65a9) and mx8-devnet-epoch0 through the chain path with the era inside (90f794dd556f7a3b, Metal and Apple OpenCL, 22:12 UTC); the x4 packs kept as the candidate's record. Chip headline at x8: 41.7 MH/s, 0.31x bare, 0.92x with the 3x factor, 0.76x at equal silicon (<code>docs/analysis/chip-model-v3.md</code>).</p>
+<p><strong>Addendum, 22:15 UTC: the verifier regression, the the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) build rows, and x8 into v3.</strong> The era agent measured the same v2 input with readwidth's binary (0.604 ms) and ca2-v3 HEAD's (1.33) in one minute; bisected under the measure lock to this branch's 0fc0ad1 (seam 6c75dad 0.610, 0fc0ad1 1.332; the "loaded box" reading above was wrong by that factor, the load was real but the 2x was the code). Cause: the item loop (<code>derive_items</code>) inlined into <code>MemhardCpu::fetch</code>; the mask hoisted, the mask constant, and the constant-mask loop inlined all stayed at 1.33, the same loop <code>#[inline(never)]</code> read 0.60 to 0.62. Fix: <code>derive_items_mask</code>, out of line, one instance per cache size with the line mask a constant. Measured the era agent's way (readwidth's binary beside the fixed one, same input, same minute, 22:07 UTC): v2 0.607 / 0.610 against 0.609 / 0.611; on the fixed binary x4 1.238 / 1.237 (2.0x), x8 2.077 / 2.058 (3.4x), worst cold 2.15 ms; the increments (+0.63, +1.46 ms per unit) equal the slow binary's. Lesson, the class: an inlined item loop costs 2.2x and nothing in the suite sees it; a verifier benchmark with a pinned bound in the crate's CI is filed for the next cut, and until then every change to the item loop is measured against the previous binary on the same input in the same minute. the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) (job run-mixer-x4-pc1-20261005, 22:00 to 22:04 UTC, the worker's <code>cache ... dataset ... ms</code> wall line): RTX 5090 dataset 23 to 25 ms at v2, x4 and x8; RX 9070 XT (gfx1201) 72 to 77 ms at all three; every fingerprint equal to the Apple M5 Max's; rates the v2 rate (136.5 to 137.4 and 18.0 to 18.2 MH/s). Decision under the delegated rule (coordinator, 22:05 UTC): x8 enters class v3 (<code>V3_CLASS = MX8</code>); pinned packs mx8-genesis (7c28cfb06c5c65a9) and mx8-devnet-epoch0 through the chain path with the era inside (90f794dd556f7a3b, Metal and Apple OpenCL, 22:12 UTC); the x4 packs kept as the candidate's record. Chip headline at x8: 41.7 MH/s, 0.31x bare, 0.92x with the 3x factor, 0.76x at equal silicon (<code>docs/analysis/chip-model-v3.md</code>).</p>
 <h2 id="5-october-2026-evening-evm-transaction-relay-three-nodes-in-a-chain-every-transaction-sent-to-one-end-included-by-the-other-two-miners-execution-and-networking-engineer">5 October 2026 (evening), EVM transaction relay: three nodes in a chain, every transaction sent to one end included by the other two miners (execution and networking engineer)</h2>
 <p>Until this change the node did not relay EVM transactions to its peers, so a transaction sent to one node was only ever included by that node's own templates (this file, "5 October 2026 (afternoon), live devnet: real transactions": 3,794 transfers, all in the Apple M5 Max's blocks; execution-layer ledger item 9). Fork branch <code>tx-gossip</code> (worktree <code>vendor/igneum-node-txgossip</code>, from release-0.3.6 a24ab01a, commit e242acd0), main repo branch <code>tx-gossip</code>. Design in <code>docs/design/execution-layer.md</code> 1.4 "Relay"; the hand-out cooldown of its 10.2 table is gone with it (row "Mempool hold").</p>
 <p>What was built. Three p2p messages after Kaspa's own transaction relay (<code>protocol/flows/src/v10/txrelay/flow.rs</code>): an inventory of admitted hashes, a request for the unknown ones, one answer with the raw bytes (<code>protocol/p2p/proto/p2p.proto</code>, payload numbers 72 to 74). Two flows per peer (<code>protocol/flows/src/v10/evmrelay.rs</code>), a pump that announces the mempool's admitted hashes every 250 ms, a sink trait the execution layer implements (<code>kaspa_consensus_core::evm::EvmTxSink</code>, <code>igneum/exec/src/service.rs EvmTxRelaySink</code>), and the mempool's side: every admitted hash queued for gossip, executed, evicted and invalid hashes remembered (65,536) so a second announcement is not requested, a 50,000-transaction cap, and the hold on block-added in place of the 4-second cooldown (the executor subscribes to consensus <code>BlockAdded</code>; a transaction leaves the templates when any DAG block carries it and comes back if a chain block skipped it). Limits per peer in the table.</p>
 <div class="tbl"><table><thead><tr><th>Limit</th><th>Value</th><th>Over it</th></tr></thead><tbody><tr><td>Hashes announced to us, or requested from us</td><td>2,000 per second, burst 8,192</td><td>the surplus of the message is dropped (the sender paid as much as we did)</td></tr><tr><td>Hashes per inventory or request message</td><td>4,096</td><td>disconnect</td></tr><tr><td>Bytes per answer / per transaction</td><td>4 MiB / 128 KiB</td><td>disconnect</td></tr><tr><td>Transaction failing a state-free rule (malformed, signature, chain id, type 3 or 4)</td><td></td><td>disconnect, hash remembered</td></tr><tr><td>State-dependent refusal (nonce more than 16 ahead, fee cap under the base fee, funds, 64 queued per sender, pool full)</td><td></td><td>dropped quietly, hash not remembered</td></tr></tbody></table></div>
 <p>Protocol version. 13 to 14. An Igneum node drops a connection on a payload it cannot decode (<code>protocol/p2p/src/core/router.rs route_to_flow</code>: prost leaves the oneof empty, the router returns "empty payload", the connection closes), so the three messages go only to peers that advertised 14 or later, exactly as the finality (12) and proof-record (13) messages did. A 14 node registers the 13 flows for a 13 peer and never announces to it. The consensus params digest does not cover the protocol version: a scratch node on the devnet profile from the shipped 0.3.6 binary (<code>target-036</code>) and from this build printed the same digest, <code>9409dedac4bf9f0f20a54fb169b52a75a2903364909fe9ffd6fc5cdcd9d95d38</code>, so a 14 node and a 13 node still peer. Rollout: during the mixed fleet a transaction reaches the 14 nodes connected to the node it was sent to, and whatever a 13 node mines carries only what its own RPC received, as today; the relay is complete when the last miner is on 14. No fresh chain, no activation height.</p>
-<p>Unit tests (PC 2, job build-20261005-173606, <code>igneum-exec</code> 15 of 15 in 0.01 s, <code>kaspa-p2p-flows</code> 33 of 33 in 0.19 s, 24 s for both): the pool queues an admitted hash for gossip once and answers "known" for the duplicate; wrong chain id, a signature above the curve order and truncated bytes are refused and remembered by hash, a nonce beyond the gap and a fee cap under the base fee are refused and not remembered; a transaction stays in every template until a block carries it, is held then, comes back when a chain block skips it and leaves (hash remembered) when one executes it; the wire messages round-trip through prost and the router's payload type, hash lists of the wrong length or over 4,096 are refused, the per-peer bucket grants the burst then the rate. The first PC 2 run of the suites (build-20261005-173013) failed on the signature case: a flipped low bit of <code>s</code> recovers a different signer (a funds refusal), not a fault; the test now sets <code>s</code> above the curve order. Found on the way: the <code>kaspa-p2p-flows</code> test target had not compiled since M20 added the epoch-seed headers to the pruning proof messages (<code>ibd/proof.rs</code> tests), fixed in the same commit.</p>
+<p>Unit tests (the RTX 5090 Windows rig, job build-20261005-173606, <code>igneum-exec</code> 15 of 15 in 0.01 s, <code>kaspa-p2p-flows</code> 33 of 33 in 0.19 s, 24 s for both): the pool queues an admitted hash for gossip once and answers "known" for the duplicate; wrong chain id, a signature above the curve order and truncated bytes are refused and remembered by hash, a nonce beyond the gap and a fee cap under the base fee are refused and not remembered; a transaction stays in every template until a block carries it, is held then, comes back when a chain block skips it and leaves (hash remembered) when one executes it; the wire messages round-trip through prost and the router's payload type, hash lists of the wrong length or over 4,096 are refused, the per-peer bucket grants the burst then the rate. The first the RTX 5090 Windows rig run of the suites (build-20261005-173013) failed on the signature case: a flipped low bit of <code>s</code> recovers a different signer (a funds refusal), not a fault; the test now sets <code>s</code> above the curve order. Found on the way: the <code>kaspa-p2p-flows</code> test target had not compiled since M20 added the epoch-seed headers to the pruning proof messages (<code>ibd/proof.rs</code> tests), fixed in the same commit.</p>
 <p>The 3-node run (<code>tools/txgen/relay-net.mjs</code>, new; this Mac, load 7 to 8 at the end of the run after the other agents' harnesses finished, every number a count or an inclusion latency, not a timing of the node). Fast-time profile (<code>infra/fast-time/override-60x.json</code>, proof of work skipped), ports 29700+, data <code>/tmp/igneum-txrelay</code>. Chain A - B - C: B dials A and C (a harness node that dials accepts no inbound, and <code>--connect</code> takes one address per flag; both found by the first two runs, which are not numbers). A mines nothing. One vmine on B and one on C at 0.5 blocks/s each, paid to throwaway keys made for the run; B's rewards funded 16 generator wallets (2 IGN each) 33 s after start. The generator (<code>tools/txgen/run.mjs</code>) sent to A's EVM RPC only, 2 transfers a second for 120 s, so every inclusion is by a block B or C built from a pool the relay fed; C is two hops from A. Result files <code>docs/benchmarks/evm-relay-2026-10-05/{relay-report,txgen-summary}.json</code>.</p>
 <div class="tbl"><table><thead><tr><th>Measured, 3-node fast-time run (17:49 to 17:52 UTC)</th><th>Value</th></tr></thead><tbody><tr><td>Sent to A / included / pending at the end / failures</td><td>240 / 240 / 0 / 0 (0 nonce retries, 0 deferred, 0 throttled)</td></tr><tr><td>Included per second over the send span</td><td>1.98 (target 2)</td></tr><tr><td>Inclusion latency p50 / p90 / p99 / max</td><td>1,545 / 3,058 / 5,033 / 6,017 ms (mean 1,859)</td></tr><tr><td>Chain blocks in the window / executed transfers / skipped copies</td><td>149 / 256 (240 transfers and 16 funding) / 0</td></tr><tr><td>Included by miner B (one hop): blocks / with transactions / executed</td><td>79 / 59 / 151</td></tr><tr><td>Included by miner C (two hops): blocks / with transactions / executed</td><td>70 / 42 / 105</td></tr><tr><td>Pool depth, sampled every 5 s on A, B and C</td><td>equal on all three at 27 of 27 samples (0 to 6 pending), peak 6</td></tr><tr><td>Sinks agree at the end</td><td>yes</td></tr><tr><td>First funding transfer, sent to A, included</td><td>2.0 s after the send (block 37, mined by B or C)</td></tr></tbody></table></div>
 <p>Reading. Every transaction given to A was mined by B or C within 6 s, two thirds of them within 3 s, with no skipped copy: the hold on block-added kept B's and C's parallel blocks from carrying the same transfer. The afternoon run on the live devnet, through one node with the cooldown, had p50 40.7 s and p90 110.8 s with 50-s quiet stretches; here the 1.5 s p50 is one fast-time block plus the relay and the executor's lag. The pool depth matching on all three nodes at every sample is the convergence. Not measured here: a transaction flood above the per-peer rate (the bucket is unit-tested only), a 13 peer in the fleet (the digest check and the version gate are the evidence), and the hold's 30-s expiry on a block that never reaches the chain (not seen in 149 chain blocks).</p>
 <p>Commands: <code>IGNEUMD=vendor/igneum-node/target-txgossip/release/igneumd IGNEUM_MINER=vendor/igneum-node/target-txgossip/release/igneum-miner tools/lock/with-lock.sh run node tools/txgen/relay-net.mjs --rate 2 --duration 120 --wallets 16 --fund 2</code>; the Apple M5 Max binaries from the fork worktree with <code>CARGO_TARGET_DIR=vendor/igneum-node/target-txgossip cargo build --release -j 4 -p kaspad -p igneum-miner --features kaspad/igneum-pow</code> under the build lock (an APFS clone of <code>target-036</code>, 2 min 15 s to clone, 5 min 06 s to build); the suites with <code>node tools/build-job.mjs run --target 1ccfe586 --node vendor/igneum-node-txgossip --targets linux --node-tests "igneum-exec kaspa-p2p-flows" --no-app</code>.</p>
-<h2 id="5-october-2026-night-the-sp1-cpu-prover-on-pc-1-beside-the-miners-and-the-backend-survey-no-zkvm-proves-on-amd-amd-prove-agent">5 October 2026 (night), the SP1 CPU prover on PC 1 beside the miners, and the backend survey: no zkVM proves on AMD (amd-prove agent)</h2>
+<h2 id="5-october-2026-night-the-sp1-cpu-prover-on-the-three-card-windows-rig-rtx-5090-rtx-4070-rx-9070-xt-beside-the-miners-and-the-backend-survey-no-zkvm-proves-on-amd-amd-prove-agent">5 October 2026 (night), the SP1 CPU prover on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) beside the miners, and the backend survey: no zkVM proves on AMD (amd-prove agent)</h2>
 <p>the maintainers, 21:50 UTC: "test proving on the amd card?" and "can we test proving on mac?". The analysis with the backend table and the tier consequences: <code>docs/analysis/amd-proving.md</code>. The survey (SP1 v6.8.1 and <code>dev</code> 318dd530 of 28 Sep 2026, RISC Zero, Jolt, OpenVM, ICICLE, sppark; every claim cites a file or page there): on 5 October 2026 no zkVM proves on an AMD GPU; Apple silicon has RISC Zero's shipped Metal prover and ICICLE's Metal backend; SP1, the prover here, is CPU-only off NVIDIA.</p>
-<p>Machine: PC 1 (machine ae432dc7), Windows 11, WSL2 Ubuntu 24.04 as root, 16 cores and 46,994 MB visible to the VM, the Igneum Miner app 0.3.9 mining on the RTX 5090 and the RX 9070 XT throughout (the 5090 at 89% mean utilisation, 59 to 70% minimum, from a 1-s <code>nvidia-smi</code> sampler under the run: the job never touched a card). Signed <code>run</code> job <code>cpu-prove-pc1-small2</code> (<code>tools/amd-prove/pc1-cpu-prove.ps1</code>), 20:49:00Z to 20:59:49Z: the hosted package <code>igneum-prove-wsl2-pv1b.zip</code> (sha256 df50dee5...) built WITHOUT the <code>cuda</code> feature (6 s warm; the first job <code>cpu-prove-pc1-small</code> built it cold in 126 s), <code>--mode id</code> the pinned pair (shard <code>0x2b1a81cb...</code>, aggregator <code>0x474678f3...</code>, pinned 2026-10-05T16:20:38Z), <code>SP1_PROVER=cpu</code>, <code>--mode shard --shard 0</code> under <code>/usr/bin/time -v</code>. Log: <code>node tools/jobs.mjs cpu-prove-pc1-small2 --all</code>.</p>
-<div class="tbl"><table><thead><tr><th>Fixture</th><th>SP1 cycles</th><th>Setup s</th><th>Core prove s (bytes, verify s)</th><th>Compressed prove s (bytes, verify s)</th><th>Wall s</th><th>Peak RSS</th><th>CPU</th></tr></thead><tbody><tr><td>block-56-transfers-3shards shard 0 (200 pgas, one transfer)</td><td>315,479</td><td>22.75 (client 19.46, shard keys 1.85, aggregator keys 1.44)</td><td>82.5 (7,310,257, 0.210) VERIFIED</td><td>199.2 (1,272,897, 0.035) VERIFIED</td><td>312.1</td><td>29,503,652 kB (29.5 GB)</td><td>978% (9.8 of 16 cores), user 2,516 s, system 537 s, load max 11.3</td></tr><tr><td>block-78-increment (2 transactions, 1 executed 1 skipped)</td><td>631,127</td><td>21.75</td><td>87.0 (7,317,857, 0.209) VERIFIED</td><td>202.3 (1,272,897, 0.034) VERIFIED</td><td>322.3</td><td>30,517,916 kB (30.5 GB)</td><td>979%, user 2,616 s, system 541 s, load max 13.1</td></tr><tr><td>block-338-shard1 (one shard at <code>S_p</code>, 60.8 M cycles)</td><td></td><td>not run: the RTX 5090 machine 1 scheduler kept the machine for the Counter ASIC 2.0 gates (21:05Z). Approximate extrapolation: about 29 SP1 shards of 2^21 cycles at about 80 s each, 40 min of core proof, then hours of recursion; floor from the 5090's ratios (6x core, 4x compressed, block-78 to <code>S_p</code>): 9 min core, 13 min compressed</td><td></td><td></td><td></td><td></td><td></td></tr></tbody></table></div>
+<p>Machine: the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) (machine ae432dc7), Windows 11, WSL2 Ubuntu 24.04 as root, 16 cores and 46,994 MB visible to the VM, the Igneum Miner app 0.3.9 mining on the RTX 5090 and the RX 9070 XT throughout (the 5090 at 89% mean utilisation, 59 to 70% minimum, from a 1-s <code>nvidia-smi</code> sampler under the run: the job never touched a card). Signed <code>run</code> job <code>cpu-prove-pc1-small2</code> (<code>tools/amd-prove/pc1-cpu-prove.ps1</code>), 20:49:00Z to 20:59:49Z: the hosted package <code>igneum-prove-wsl2-pv1b.zip</code> (sha256 df50dee5...) built WITHOUT the <code>cuda</code> feature (6 s warm; the first job <code>cpu-prove-pc1-small</code> built it cold in 126 s), <code>--mode id</code> the pinned pair (shard <code>0x2b1a81cb...</code>, aggregator <code>0x474678f3...</code>, pinned 2026-10-05T16:20:38Z), <code>SP1_PROVER=cpu</code>, <code>--mode shard --shard 0</code> under <code>/usr/bin/time -v</code>. Log: <code>node tools/jobs.mjs cpu-prove-pc1-small2 --all</code>.</p>
+<div class="tbl"><table><thead><tr><th>Fixture</th><th>SP1 cycles</th><th>Setup s</th><th>Core prove s (bytes, verify s)</th><th>Compressed prove s (bytes, verify s)</th><th>Wall s</th><th>Peak RSS</th><th>CPU</th></tr></thead><tbody><tr><td>block-56-transfers-3shards shard 0 (200 pgas, one transfer)</td><td>315,479</td><td>22.75 (client 19.46, shard keys 1.85, aggregator keys 1.44)</td><td>82.5 (7,310,257, 0.210) VERIFIED</td><td>199.2 (1,272,897, 0.035) VERIFIED</td><td>312.1</td><td>29,503,652 kB (29.5 GB)</td><td>978% (9.8 of 16 cores), user 2,516 s, system 537 s, load max 11.3</td></tr><tr><td>block-78-increment (2 transactions, 1 executed 1 skipped)</td><td>631,127</td><td>21.75</td><td>87.0 (7,317,857, 0.209) VERIFIED</td><td>202.3 (1,272,897, 0.034) VERIFIED</td><td>322.3</td><td>30,517,916 kB (30.5 GB)</td><td>979%, user 2,616 s, system 541 s, load max 13.1</td></tr><tr><td>block-338-shard1 (one shard at <code>S_p</code>, 60.8 M cycles)</td><td></td><td>not run: the the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) scheduler kept the machine for the Counter ASIC 2.0 gates (21:05Z). Approximate extrapolation: about 29 SP1 shards of 2^21 cycles at about 80 s each, 40 min of core proof, then hours of recursion; floor from the 5090's ratios (6x core, 4x compressed, block-78 to <code>S_p</code>): 9 min core, 13 min compressed</td><td></td><td></td><td></td><td></td><td></td></tr></tbody></table></div>
 <p>For comparison (this log): the Apple M5 Max CPU on 4 October, loaded, block-56 shard 0: core 83.1 s, compressed 272.3 s; on 3 October the v0 guest on block-78: core 22.0 s, compressed 55.7 s. The RTX 5090: block-78 core 1.4 s, compressed 2.7 s (4 October, mining paused); a full shard at <code>S_p</code> compressed 10.9 s alone and 33.0 s beside the miner; an empty live shard 7.0 to 7.7 s beside the miner (5 October). No fresh Mac run tonight: the measure lock was held from 20:31Z (a read-width <code>packbench</code>, three builds, a 1,500-s proving-v1 network under <code>run</code>) and did not free inside the 10-minute window set for it.</p>
 <p>Reading, and the consequences (the design document, every number). Doubling the cycles added 4.5 s to the core proof and 3.1 s to the compressed proof: about 280 s of a CPU proof is fixed cost in the compressed-proof recursion, so no shard size brings a CPU proof under the launch deadline (20 to 60 s behind the tip) or near the 10-s assignment window; it fits only the v1 unproven deadline (600 s), which pays a CPU prover only when no card has proven the shard in 10 minutes. The 29.5 to 30.5 GB peak RSS means the CPU prover needs 32 GB free: a 64 GB an RTX 5090 on Windows (WSL2 takes half the host's RAM by default), a 32 GB Linux machine, a 64 GB Mac; a 16 GB machine cannot run it at all. Per tier: an AMD-only home miner (8, 12 or 16 GB, Windows or Linux) mines and does not prove, and loses the 20% proving-pool share; Apple silicon the same (the M5 Max mines at 26.7 MH/s, this log, 4 October); a mixed rig proves on its NVIDIA cards and the rig installer's <code>prover_decision</code> already skips every non-NVIDIA card (<code>packaging/linux/bin/igneum-rig-lib.sh</code>, branch <code>rig-install</code>), now a stated requirement; the app's <code>provedefault.rs</code> already keeps proving off on Apple silicon and off without an NVIDIA card. Decision asked of nobody: no CPU tier (the analysis, section 4a); the public line for the site, litepaper and Proving tile is in section 4c ("Proving needs an NVIDIA card with 16 GB or more today ... AMD and Apple cards mine. A prover for them lands when a zkVM ships one"). The first job proved nothing because an apostrophe inside a single-quoted awk program ended the quote and bash refused the loop while the job reported exit 0; the class fix is <code>tools/amd-prove/check-job-bash.sh</code> (<code>bash -n</code> on the embedded bash body before publishing) and the same <code>bash -n</code> inside the job before the run, both shown to refuse the bad body and pass the fixed one.</p>
 <h2 id="counter-asic-2-0-the-numbers">Counter ASIC 2.0, the numbers</h2>
-<p>5 October 2026 (night). The chip-resistance layers measured on the three cards we own (Apple M5 Max, RTX 5090 on PC 1 and PC 2, RX 9070 XT on PC 1's eGPU), the decisions taken under the maintainers' delegated rules for the devnet, and the chip model before and after. Every number is from an entry above or from the plan documents named; approximate is marked. Levels: <code>docs/plans/counter-asic-2-public.md</code>.</p>
+<p>5 October 2026 (night). The chip-resistance layers measured on the three cards we own (Apple M5 Max, RTX 5090 on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) and the RTX 5090 Windows rig, RX 9070 XT on the three-card Windows rig's eGPU), the decisions taken under the maintainers' delegated rules for the devnet, and the chip model before and after. Every number is from an entry above or from the plan documents named; approximate is marked. Levels: <code>docs/plans/counter-asic-2-public.md</code>.</p>
 <p><strong>Program class v3 (the devnet, activation by height switch <code>program_class_v3_activation_daa</code>)</strong> = class v2's 128 x 4-byte loads, the era draw of the table layout and the working-set windows (layers 4 and 8), the cache growth rule (layer 6, option C: the cache doubles when the dataset doubles), the mixer at x8 (M16's multiplier), reserve family R1 (integer matrix, switched off) and the epoch length as a signalled reserve parameter (layer 9, 3,600 DAA s until a 90% signal). Not adopted on the measurements: wider reads (layer 1), the per-load width mix (layer 2), the per-warp write scratch (layer 3), the hot table (layer 5).</p>
 <div class="tbl"><table><thead><tr><th>Card</th><th>v2 MH/s</th><th>v3 MH/s, six eras (spread)</th><th>Bytes per hash</th><th>Latency-bound share</th><th>Daily 1 GiB build, v2 / v3</th></tr></thead><tbody><tr><td>Apple M5 Max, Metal</td><td>27.68</td><td>27.85 to 27.98 (0.5%)</td><td>512</td><td>1.06</td><td>21 / 21 ms</td></tr><tr><td>RTX 5090, CUDA</td><td>137.2</td><td>135.90 to 137.70 (1.3%)</td><td>512</td><td>1.01</td><td>25 / 23 ms</td></tr><tr><td>RX 9070 XT, OpenCL</td><td>18.09</td><td>18.59 to 19.18 (3.1%)</td><td>512</td><td>0.95</td><td>74 / 75 ms</td></tr></tbody></table></div>
 <p>CPU verifier, one M5 Max core at load average 5.5 (the fixed crate, ca2-mixer 1ab8b21): v2 0.61 ms per warp, v3 (x8) 2.08 ms (3.4x), worst cold 2.15; the 10 ms gate holds 4.8x (4.6x on the worst cold unit). Bit-exact: every v3 pack's fingerprint equal on Metal, Apple OpenCL, CUDA and AMD OpenCL.</p>
@@ -650,38 +607,38 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <p><strong>The user tiers.</strong> AMD RDNA 4 sits at about a seventh of a 5090 on this hash (its dependent-read rate: 2.4 G against 17.5 G per second), 2.2x worse per pound at list prices and 4.9x worse per watt (approximate); the card's memory system, not a tuning gap. The integrated tier on the CUDA and OpenCL one-click workers mines v3 with a restart per epoch until per-day dataset reuse lands (0.3.12). Card lifetime under the step schedule: a 4 GB card to year 4, 8 GB to year 12, 12 GB to year 28 with the cache freed after the daily build.</p>
 <p><strong>The bounty.</strong> A bounty for any chip design beating a GPU by more than 2x on the published model, with a leaderboard by card model, follows the external review (spec O-1.17, January 2027); it is named publicly only once escrowed (<code>docs/plans/funding.md</code>, rule 3), which it is not yet.</p>
 <h2 id="5-october-2026-evening-proving-v1-segment-records-the-chain-rule-the-unproven-rule-what-was-measured-tonight-proving-engineer">5 October 2026 (evening), proving v1: segment records, the chain rule, the unproven rule; what was measured tonight (proving engineer)</h2>
-<p>Branches <code>proving-v1</code> (main repository, worktree <code>igneum-wt-proving-v1</code>; fork <code>vendor/igneum-node-pv1</code> from a24ab01a). Rules: spec 7.8; plan <code>docs/plans/proving-v1.md</code>. Every row names its command. The live devnet was in a degraded state the whole evening: from 18:35Z the RTX 5090 workers on PC 1 and PC 2 exited at start on a pack seed mismatch (<code>the epoch seed bytes do not give the pack's IGNEUM_SEEDW_INIT</code>, restart 60+ on PC 2 by 19:05Z, another agent's branch <code>pack-loop</code>), the Apple M5 Max app node was down from 17:45Z, so PC 2 mined 3.4 MH/s from its iGPU and PC 2's prover was the only prover; the coordinator held every PC 2 measurement at 19:00Z until the fleet mines again.</p>
+<p>Branches <code>proving-v1</code> (main repository, worktree <code>igneum-wt-proving-v1</code>; fork <code>vendor/igneum-node-pv1</code> from a24ab01a). Rules: spec 7.8; plan <code>docs/plans/proving-v1.md</code>. Every row names its command. The live devnet was in a degraded state the whole evening: from 18:35Z the RTX 5090 workers on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) and the RTX 5090 Windows rig exited at start on a pack seed mismatch (<code>the epoch seed bytes do not give the pack's IGNEUM_SEEDW_INIT</code>, restart 60+ on the RTX 5090 Windows rig by 19:05Z, another agent's branch <code>pack-loop</code>), the Apple M5 Max app node was down from 17:45Z, so the RTX 5090 Windows rig mined 3.4 MH/s from its iGPU and the RTX 5090 Windows rig's prover was the only prover; the coordinator held every the RTX 5090 Windows rig measurement at 19:00Z until the fleet mines again.</p>
 <h3 id="step-1-the-prover-default-and-its-cost">Step 1, the prover default and its cost</h3>
-<div class="tbl"><table><thead><tr><th>What</th><th>Measured</th></tr></thead><tbody><tr><td>The default rule (<code>app/igneum-app/src/provedefault.rs</code>)</td><td><code>cargo test --release -p igneum-app provedefault</code> on this Mac (the app crate, build lock, 19:05Z): 5 passed (a 5090 with WSL2 on Windows is on; Windows without WSL2 off with the Set up hint; Linux needs no WSL2 and the 12 GB gate holds, a 10 GB 3080 and a 16 GB AMD card stay off; Apple silicon off; the biggest qualifying card is named)</td></tr><tr><td>Mining alone against mining with the prover, first try (PC 2 job <code>prover-cost-pc2-pv1</code>, <code>tools/proving-v1/pc2-prover-cost.ps1</code>, published 18:40:48Z, ran 18:41:13Z)</td><td>VOID: the job waited 20 min for the 5090 worker to hash and it never did (the pack fault above); "mining alone" was 0 MH/s</td></tr><tr><td>Mining alone against mining with the prover, the re-run after the coordinator's go (job <code>prover-cost-pc2-pv1b</code>, ran 19:20:36Z to 19:51:17Z; the 5090 worker restored at 19:16Z and hashing throughout; prover OFF by <code>POST /api/prove {"on":false}</code> 19:40:39Z, back ON 19:46:09Z, left on). The job's own <code>/api/state</code> samples stayed empty on PC 2 (<code>Invoke-RestMethod</code> returns an object PowerShell 5.1 cannot walk, <code>cards=0</code>, the fix is for the next run), so the hash rate is read from the miner's own STATUS lines (<code>miner-nvidia-1ccfe586-1</code> uploads, <code>now=... MH/s wall</code>, one every 30 s, the intake table <code>miner_logs</code>)</td><td>prover OFF, 19:41:09 to 19:46:09Z: n 10, mean 124.72 MH/s, p50 124.81, min 124.10, max 125.38. Prover ON, 19:46:39 to 19:51:13Z: n 9, mean 119.74, p50 118.87, min 118.08, max 123.42. The 15 min before the job with the prover on (19:25 to 19:40Z): n 30, mean 119.88, p50 118.79. So the prover costs the 5090 5.0 MH/s, 4.0% of its hash rate, while it proves the devnet's empty shards one after another (1.4 a minute here: the node's paidShards 559 -&gt; 566 over the 5-min phase). A full shard at <code>S_p</code> keeps the card busier (the 4 October run proved one in 10.9 s); the cost at that load is the chain job's row</td></tr><tr><td>GPU memory during proving, first try (phase B of the first job: the prover on for 5 min, 298 one-second <code>nvidia-smi --query-gpu=memory.used</code> samples, the 5090 worker dead so the card held nothing else)</td><td>memory.used min 1,654 MiB, max 13,816 MiB, utilisation mean 2.7%, power max 190.6 W: the prover alone on empty shards</td></tr><tr><td>GPU memory with the miner AND the prover on the card (the re-run's phase B, 298 one-second samples, 19:46 to 19:51Z)</td><td>memory.used min 3,396 MiB (the miner's dataset and program resident), max 15,590 MiB, utilisation mean 92.9%, power max 328.6 W. So the prover's own peak is about 12.2 GB on an empty shard (15,590 minus the miner's 3,396), and the two together need 15.6 GB: a 16 GB card (5080, 9070 XT class, if it had a CUDA path) sits 0.4 GB under tonight's peak with no room for a full shard, a 24 GB 4090 has 8.4 GB of headroom, a 12 GB card cannot mine and prove at once on this build. The full-shard peak is the chain job's row</td></tr><tr><td>Shards per minute with the mining worker dead</td><td>the node's <code>paidShards</code> 510 -&gt; 518 over the 5-min phase: 1.6 shards a minute from one 5090 through the app's loop (export, cut, prove, sign, submit)</td></tr><tr><td>Host RAM (Windows <code>Win32_OperatingSystem</code> and the <code>vmmem</code> working set, sampled every 15 s)</td><td>host used 25,550 MB of 63,132 MB at the end; the WSL2 VM's working set 7,915 MB (2,334 MB used of 30,914 MB inside the distribution)</td></tr><tr><td>The SP1 GPU server's compiled targets (<code>cuobjdump --list-elf &lt;server path&gt;</code> inside PC 2's Ubuntu-24.04, CUDA 12.8, driver 610.47)</td><td><code>sp1-gpu-server</code> 6.8.1 (251,306,680 bytes, sha256 c2642ad1c42e85d8525159cf0c7cd5200d8766c9be1283f452a1f9bf9fea725c, the asset <code>sp1_gpu_server_v6.8.1_x86_64.tar.gz</code> the SDK downloads, <code>sp1-cuda-6.8.1/src/server.rs</code>): one ELF each for sm_80, sm_86, sm_89, sm_90, sm_100 and sm_120; <code>strings</code> finds compute_120 PTX as well. So sm_89 (Ada: RTX 4090, 4080) is compiled in natively, no JIT; so are Ampere (3090, 3060), Hopper, Blackwell datacentre (sm_100) and consumer (sm_120, the 5090). Nothing for AMD (no HIP path in SP1)</td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>What</th><th>Measured</th></tr></thead><tbody><tr><td>The default rule (<code>app/igneum-app/src/provedefault.rs</code>)</td><td><code>cargo test --release -p igneum-app provedefault</code> on this Mac (the app crate, build lock, 19:05Z): 5 passed (a 5090 with WSL2 on Windows is on; Windows without WSL2 off with the Set up hint; Linux needs no WSL2 and the 12 GB gate holds, a 10 GB 3080 and a 16 GB AMD card stay off; Apple silicon off; the biggest qualifying card is named)</td></tr><tr><td>Mining alone against mining with the prover, first try (the RTX 5090 Windows rig job <code>prover-cost-pc2-pv1</code>, <code>tools/proving-v1/pc2-prover-cost.ps1</code>, published 18:40:48Z, ran 18:41:13Z)</td><td>VOID: the job waited 20 min for the 5090 worker to hash and it never did (the pack fault above); "mining alone" was 0 MH/s</td></tr><tr><td>Mining alone against mining with the prover, the re-run after the coordinator's go (job <code>prover-cost-pc2-pv1b</code>, ran 19:20:36Z to 19:51:17Z; the 5090 worker restored at 19:16Z and hashing throughout; prover OFF by <code>POST /api/prove {"on":false}</code> 19:40:39Z, back ON 19:46:09Z, left on). The job's own <code>/api/state</code> samples stayed empty on the RTX 5090 Windows rig (<code>Invoke-RestMethod</code> returns an object PowerShell 5.1 cannot walk, <code>cards=0</code>, the fix is for the next run), so the hash rate is read from the miner's own STATUS lines (<code>miner-nvidia-1ccfe586-1</code> uploads, <code>now=... MH/s wall</code>, one every 30 s, the intake table <code>miner_logs</code>)</td><td>prover OFF, 19:41:09 to 19:46:09Z: n 10, mean 124.72 MH/s, p50 124.81, min 124.10, max 125.38. Prover ON, 19:46:39 to 19:51:13Z: n 9, mean 119.74, p50 118.87, min 118.08, max 123.42. The 15 min before the job with the prover on (19:25 to 19:40Z): n 30, mean 119.88, p50 118.79. So the prover costs the 5090 5.0 MH/s, 4.0% of its hash rate, while it proves the devnet's empty shards one after another (1.4 a minute here: the node's paidShards 559 -&gt; 566 over the 5-min phase). A full shard at <code>S_p</code> keeps the card busier (the 4 October run proved one in 10.9 s); the cost at that load is the chain job's row</td></tr><tr><td>GPU memory during proving, first try (phase B of the first job: the prover on for 5 min, 298 one-second <code>nvidia-smi --query-gpu=memory.used</code> samples, the 5090 worker dead so the card held nothing else)</td><td>memory.used min 1,654 MiB, max 13,816 MiB, utilisation mean 2.7%, power max 190.6 W: the prover alone on empty shards</td></tr><tr><td>GPU memory with the miner AND the prover on the card (the re-run's phase B, 298 one-second samples, 19:46 to 19:51Z)</td><td>memory.used min 3,396 MiB (the miner's dataset and program resident), max 15,590 MiB, utilisation mean 92.9%, power max 328.6 W. So the prover's own peak is about 12.2 GB on an empty shard (15,590 minus the miner's 3,396), and the two together need 15.6 GB: a 16 GB card (5080, 9070 XT class, if it had a CUDA path) sits 0.4 GB under tonight's peak with no room for a full shard, a 24 GB 4090 has 8.4 GB of headroom, a 12 GB card cannot mine and prove at once on this build. The full-shard peak is the chain job's row</td></tr><tr><td>Shards per minute with the mining worker dead</td><td>the node's <code>paidShards</code> 510 -&gt; 518 over the 5-min phase: 1.6 shards a minute from one 5090 through the app's loop (export, cut, prove, sign, submit)</td></tr><tr><td>Host RAM (Windows <code>Win32_OperatingSystem</code> and the <code>vmmem</code> working set, sampled every 15 s)</td><td>host used 25,550 MB of 63,132 MB at the end; the WSL2 VM's working set 7,915 MB (2,334 MB used of 30,914 MB inside the distribution)</td></tr><tr><td>The SP1 GPU server's compiled targets (<code>cuobjdump --list-elf &lt;server path&gt;</code> inside the RTX 5090 Windows rig's Ubuntu-24.04, CUDA 12.8, driver 610.47)</td><td><code>sp1-gpu-server</code> 6.8.1 (251,306,680 bytes, sha256 c2642ad1c42e85d8525159cf0c7cd5200d8766c9be1283f452a1f9bf9fea725c, the asset <code>sp1_gpu_server_v6.8.1_x86_64.tar.gz</code> the SDK downloads, <code>sp1-cuda-6.8.1/src/server.rs</code>): one ELF each for sm_80, sm_86, sm_89, sm_90, sm_100 and sm_120; <code>strings</code> finds compute_120 PTX as well. So sm_89 (Ada: RTX 4090, 4080) is compiled in natively, no JIT; so are Ampere (3090, 3060), Hopper, Blackwell datacentre (sm_100) and consumer (sm_120, the 5090). Nothing for AMD (no HIP path in SP1)</td></tr></tbody></table></div>
 <h3 id="step-2-aggregated-chains">Step 2, aggregated chains</h3>
-<div class="tbl"><table><thead><tr><th>What</th><th>Measured</th></tr></thead><tbody><tr><td>The new host (<code>--mode chain</code>, <code>aggregate</code>, <code>verify-segment</code>) against every fixture natively</td><td><code>igneum-prove-host &lt;f&gt; --mode native</code> on the Apple M5 Max for the 12 fixtures of <code>proving/fixtures/</code> (9 block, 3 fee-switch), host built from this branch 19:06Z: every one MATCHES (the package gate's native half); <code>--mode id</code>: shard <code>0x2b1a81cb...</code>, aggregator <code>0x474678f3...</code>, the 0.3.9 pin, unchanged</td></tr><tr><td>Eight consecutive live fixtures</td><td><code>igneum_exportSegments 0x0..0x13cb4</code> on node 1's exec RPC (127.0.0.1:26790, read-only, 19:06 UTC, tip 81,076): 71,042,616 bytes, 81,077 segments, 28 accounts, 0.5 s; <code>igneum-prove-export export.json &lt;n&gt; block-&lt;n&gt;.json</code> for 81046..81053: replayed 81,077 segments from genesis in 1.8 s each, every state root equal to the node's; one shard a block, 0 pgas (no transactions on the devnet tonight), <code>proving/fixtures/chain/</code></td></tr><tr><td>Chain of 2 on the Apple M5 Max CPU (the known-finished case of <code>--mode chain</code> before the GPU; M5 Max under the live nodes, the harness and two builds)</td><td><code>SP1_PROVER=cpu igneum-prove-host --mode chain --chain block-81046.json,block-81047.json --out results.json</code> under the run lock, 19:07:48Z to 19:11:28Z: setup 12.2 s; block 81046: shard 0 compressed 55.4 s (1,272,897 bytes, verify 0.036 s), aggregate 52.0 s (1,272,909 bytes, verify 0.031 s), chain_len 1, agg_vk zero; block 81047: shard 41.3 s, aggregate WITH the previous block proof 59.1 s, chain_len 2, agg_vk = the pinned aggregator id; end to end 207.9 s; final proof 1,272,909 bytes, statement 0x232276f4... The recursion over the previous proof cost 7 s more than the first aggregation on this CPU</td></tr><tr><td><code>--mode verify-segment</code> on that proof (the node's path: SP1 light verifier, pinned aggregator key)</td><td>VERIFIED in 0.032 s (0.27 s wall, three runs: 0.033, 0.032, 0.032); known-failed: a wrong statement NOT VERIFIED (0.032 s); the shard verifier (<code>--mode verify</code>) on the segment proof NOT VERIFIED, "program id 0x474678f3... IS NOT OURS 0x2b1a81cb..."</td></tr><tr><td>Chain of 8 on the RTX 5090 (N = 2, 4, 8), job <code>chain-pc2-pv1b</code> (<code>tools/proving-v1/pc2-chain.ps1</code>; the package <code>igneum-prove-wsl2-pv1.zip</code> eb6dccf8..., 1.5 MB, fetched by <code>fetch-prove-pv1</code> 19:51Z; the first try <code>chain-pc2-pv1</code> died in its own export step, fixed)</td><td>Ran 19:58:37Z: the export from PC 2's node (72,901,414 bytes, 1.4 s), the host built in WSL2 against the live build's warm target dir in 6 s and installed to <code>&lt;server path&gt;</code> (the live <code>&lt;server path&gt;</code> host untouched, sha 29cc4768...), <code>--mode id</code> the pinned pair; eight consecutive fixtures 83346..83353 cut, every one MATCHES natively. The chain on the GPU (SP1_PROVER=cuda, the miner mining on the same card at 119 MH/s): setup 12.7 s; block 83346: shard 7.4 s, aggregate 7.6 s (chain_len 1), 15.1 s; block 83347: shard 7.2 s, aggregate WITH the previous proof 9.5 s (chain_len 2, agg_vk the pinned aggregator id), 16.8 s, cumulative 31.8 s over 2 blocks; block 83348: shard 7.0 s, then at 20:01:09Z the app quit and aborted the job ("quit: stopping the miners, then the node", then "job chain-pc2-pv1b: aborted (the app is quitting)"; NOT an update: nothing of 0.3.10 was published; the log gives the quit no source; 20 s earlier the efficiency sweep's administrator prompt had been cancelled at the keyboard, and 13 s earlier the live prover had failed with "CudaClientError: Connect(PermissionDenied)", the root-owned socket my job had left, below). So N = 2 measured: 31.8 s of GPU time for two empty blocks, the chained aggregation 1.9 s dearer than the first; N = 4 and 8 are the re-run <code>chain-pc2-pv1c</code> after the restart. An empty shard's compressed proof on the 5090 is 7.0 to 7.4 s (the 200-pgas shard of 4 October took 2.7 s with the card to itself; tonight the miner held it at 92% utilisation)</td></tr><tr><td>The chain of 8, the third run <code>chain-pc2-pv1c</code> (20:05:21Z to 20:08:33Z, after the app restart; blocks 83616..83623 from PC 2's node at tip 83646, the same script; results <code>tools/proving-v1/chain-pc2-2026-10-05.json</code>)</td><td>Build 5 s (warm), eight fixtures cut and MATCHING natively, setup 15.7 s, then on the GPU with the miner mining on the same card: shard proofs 7.3 to 7.7 s each (8 x, 59.5 s), aggregations 7.9 s for the first block and 9.6 to 9.7 s for every chained one (75.5 s), every proof VERIFIED, end to end 135.6 s for 8 blocks (17.0 s a block from the second on). Cumulative: N = 2 at 32.6 s, N = 4 at 66.8 s, N = 8 at 135.6 s. The final proof is 1,272,909 bytes whatever N (chain_len 8, agg_vk the pinned aggregator id), the record 586 bytes; <code>--mode verify-segment</code> on it: VERIFIED in 0.039, 0.037, 0.040 s after a 0.26-s light-verifier setup, the same three runs each time. GPU memory over the chain (152 one-second samples): max 16,751 MiB with the miner's 3.4 GB resident, so the chained aggregation holds about 13.4 GB, 1.2 GB over the shard-only peak; WSL used 2,456 MB</td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>What</th><th>Measured</th></tr></thead><tbody><tr><td>The new host (<code>--mode chain</code>, <code>aggregate</code>, <code>verify-segment</code>) against every fixture natively</td><td><code>igneum-prove-host &lt;f&gt; --mode native</code> on the Apple M5 Max for the 12 fixtures of <code>proving/fixtures/</code> (9 block, 3 fee-switch), host built from this branch 19:06Z: every one MATCHES (the package gate's native half); <code>--mode id</code>: shard <code>0x2b1a81cb...</code>, aggregator <code>0x474678f3...</code>, the 0.3.9 pin, unchanged</td></tr><tr><td>Eight consecutive live fixtures</td><td><code>igneum_exportSegments 0x0..0x13cb4</code> on node 1's exec RPC (127.0.0.1:26790, read-only, 19:06 UTC, tip 81,076): 71,042,616 bytes, 81,077 segments, 28 accounts, 0.5 s; <code>igneum-prove-export export.json &lt;n&gt; block-&lt;n&gt;.json</code> for 81046..81053: replayed 81,077 segments from genesis in 1.8 s each, every state root equal to the node's; one shard a block, 0 pgas (no transactions on the devnet tonight), <code>proving/fixtures/chain/</code></td></tr><tr><td>Chain of 2 on the Apple M5 Max CPU (the known-finished case of <code>--mode chain</code> before the GPU; M5 Max under the live nodes, the harness and two builds)</td><td><code>SP1_PROVER=cpu igneum-prove-host --mode chain --chain block-81046.json,block-81047.json --out results.json</code> under the run lock, 19:07:48Z to 19:11:28Z: setup 12.2 s; block 81046: shard 0 compressed 55.4 s (1,272,897 bytes, verify 0.036 s), aggregate 52.0 s (1,272,909 bytes, verify 0.031 s), chain_len 1, agg_vk zero; block 81047: shard 41.3 s, aggregate WITH the previous block proof 59.1 s, chain_len 2, agg_vk = the pinned aggregator id; end to end 207.9 s; final proof 1,272,909 bytes, statement 0x232276f4... The recursion over the previous proof cost 7 s more than the first aggregation on this CPU</td></tr><tr><td><code>--mode verify-segment</code> on that proof (the node's path: SP1 light verifier, pinned aggregator key)</td><td>VERIFIED in 0.032 s (0.27 s wall, three runs: 0.033, 0.032, 0.032); known-failed: a wrong statement NOT VERIFIED (0.032 s); the shard verifier (<code>--mode verify</code>) on the segment proof NOT VERIFIED, "program id 0x474678f3... IS NOT OURS 0x2b1a81cb..."</td></tr><tr><td>Chain of 8 on the RTX 5090 (N = 2, 4, 8), job <code>chain-pc2-pv1b</code> (<code>tools/proving-v1/pc2-chain.ps1</code>; the package <code>igneum-prove-wsl2-pv1.zip</code> eb6dccf8..., 1.5 MB, fetched by <code>fetch-prove-pv1</code> 19:51Z; the first try <code>chain-pc2-pv1</code> died in its own export step, fixed)</td><td>Ran 19:58:37Z: the export from the RTX 5090 Windows rig's node (72,901,414 bytes, 1.4 s), the host built in WSL2 against the live build's warm target dir in 6 s and installed to <code>&lt;server path&gt;</code> (the live <code>&lt;server path&gt;</code> host untouched, sha 29cc4768...), <code>--mode id</code> the pinned pair; eight consecutive fixtures 83346..83353 cut, every one MATCHES natively. The chain on the GPU (SP1_PROVER=cuda, the miner mining on the same card at 119 MH/s): setup 12.7 s; block 83346: shard 7.4 s, aggregate 7.6 s (chain_len 1), 15.1 s; block 83347: shard 7.2 s, aggregate WITH the previous proof 9.5 s (chain_len 2, agg_vk the pinned aggregator id), 16.8 s, cumulative 31.8 s over 2 blocks; block 83348: shard 7.0 s, then at 20:01:09Z the app quit and aborted the job ("quit: stopping the miners, then the node", then "job chain-pc2-pv1b: aborted (the app is quitting)"; NOT an update: nothing of 0.3.10 was published; the log gives the quit no source; 20 s earlier the efficiency sweep's administrator prompt had been cancelled at the keyboard, and 13 s earlier the live prover had failed with "CudaClientError: Connect(PermissionDenied)", the root-owned socket my job had left, below). So N = 2 measured: 31.8 s of GPU time for two empty blocks, the chained aggregation 1.9 s dearer than the first; N = 4 and 8 are the re-run <code>chain-pc2-pv1c</code> after the restart. An empty shard's compressed proof on the 5090 is 7.0 to 7.4 s (the 200-pgas shard of 4 October took 2.7 s with the card to itself; tonight the miner held it at 92% utilisation)</td></tr><tr><td>The chain of 8, the third run <code>chain-pc2-pv1c</code> (20:05:21Z to 20:08:33Z, after the app restart; blocks 83616..83623 from the RTX 5090 Windows rig's node at tip 83646, the same script; results <code>tools/proving-v1/chain-pc2-2026-10-05.json</code>)</td><td>Build 5 s (warm), eight fixtures cut and MATCHING natively, setup 15.7 s, then on the GPU with the miner mining on the same card: shard proofs 7.3 to 7.7 s each (8 x, 59.5 s), aggregations 7.9 s for the first block and 9.6 to 9.7 s for every chained one (75.5 s), every proof VERIFIED, end to end 135.6 s for 8 blocks (17.0 s a block from the second on). Cumulative: N = 2 at 32.6 s, N = 4 at 66.8 s, N = 8 at 135.6 s. The final proof is 1,272,909 bytes whatever N (chain_len 8, agg_vk the pinned aggregator id), the record 586 bytes; <code>--mode verify-segment</code> on it: VERIFIED in 0.039, 0.037, 0.040 s after a 0.26-s light-verifier setup, the same three runs each time. GPU memory over the chain (152 one-second samples): max 16,751 MiB with the miner's 3.4 GB resident, so the chained aggregation holds about 13.4 GB, 1.2 GB over the shard-only peak; WSL used 2,456 MB</td></tr></tbody></table></div>
 <p>Reading the chain numbers. Aggregation is a fixed cost per block (9.7 s here), not per segment: the recursion verifies one more proof whatever <code>chain_len</code>, so the record for N blocks costs N aggregations and the verifier one. Against 4 October with the miner stopped (aggregate 2.2 to 2.5 s, a 200-pgas shard 2.7 s), tonight's 9.7 s and 7.3 s say the miner's 92% utilisation slows the prover about 3 to 4x while the prover slows the miner 4%: the card is shared, and the lottery wins the arbitration. A machine that mines and proves at once delivers one empty block's proof and aggregation in 17 s; one that only proves, about 5 s (approximate, from the 4 October stages).</p>
 <h3 id="step-3-coverage">Step 3, coverage</h3>
-<div class="tbl"><table><thead><tr><th>What</th><th>Measured</th></tr></thead><tbody><tr><td>A 3-minute window at 18:57Z on node 1 (<code>node tools/proving-v1/coverage.mjs --minutes 3</code>, chain blocks 80754..80839, 86 blocks)</td><td>4 blocks with a paid shard (4.7%), 4 fully proven, 4 of 86 shards; on-chain latency (carrier timestamp minus block timestamp) n 4: min 36 s, p50 39 s, max 44 s; 0 content blocks. One prover (PC 2), the Apple M5 Max verifier node down, PC 2 producing few blocks (3.4 MH/s): the degraded state above, not the fleet's number</td></tr><tr><td>A 30-minute window, 19:13 to 19:43Z, the degraded fleet (PC 2 the only prover, its 5090 worker restored at 19:16Z, the Apple M5 Max app node down by decision: the Apple M5 Max app is attached to node 1)</td><td><code>node tools/proving-v1/coverage.mjs --minutes 30 --watch</code> on node 1: chain blocks 81236..82668, 1,433 blocks; 38 with a paid shard (2.7%), all 38 fully proven (one shard a block, 0 content blocks); on-chain latency n 38: min 36, p50 44, p90 52, p99 62, max 65 s. The live page's 10-minute proving object read 0 shards and 0 provers at 19:42Z (it counts what its own node verified; that node is the Apple M5 Max app node, down), so the chain's own count is the number</td></tr><tr><td>A 30-minute window with the fleet mining (PC 2 at 119 MH/s from 19:16Z, PC 1 at 128.8 from 19:18Z; PC 2 still the only prover, its prover OFF for the 5 min of the cost job's phase A inside this window; the Apple M5 Max app node down by decision)</td><td><code>coverage.mjs --minutes 30 --watch</code>, 19:21 to 19:51Z on node 1: chain blocks 81644..83069, 1,426 blocks; 34 with a paid shard (2.4%), all fully proven (one shard a block, no content); on-chain latency n 34: min 38, p50 44, p90 51, p99 52, max 53 s. One 5090 through the app's loop as it is covers 2.4 to 2.7% of the blocks; the latency from block to carried record is 44 s at the median, under the litepaper's minute, and would be the same for every block if the fleet were 40 cards (the table below)</td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>What</th><th>Measured</th></tr></thead><tbody><tr><td>A 3-minute window at 18:57Z on node 1 (<code>node tools/proving-v1/coverage.mjs --minutes 3</code>, chain blocks 80754..80839, 86 blocks)</td><td>4 blocks with a paid shard (4.7%), 4 fully proven, 4 of 86 shards; on-chain latency (carrier timestamp minus block timestamp) n 4: min 36 s, p50 39 s, max 44 s; 0 content blocks. One prover (the RTX 5090 Windows rig), the Apple M5 Max verifier node down, the RTX 5090 Windows rig producing few blocks (3.4 MH/s): the degraded state above, not the fleet's number</td></tr><tr><td>A 30-minute window, 19:13 to 19:43Z, the degraded fleet (the RTX 5090 Windows rig the only prover, its 5090 worker restored at 19:16Z, the Apple M5 Max app node down by decision: the Apple M5 Max app is attached to node 1)</td><td><code>node tools/proving-v1/coverage.mjs --minutes 30 --watch</code> on node 1: chain blocks 81236..82668, 1,433 blocks; 38 with a paid shard (2.7%), all 38 fully proven (one shard a block, 0 content blocks); on-chain latency n 38: min 36, p50 44, p90 52, p99 62, max 65 s. The live page's 10-minute proving object read 0 shards and 0 provers at 19:42Z (it counts what its own node verified; that node is the Apple M5 Max app node, down), so the chain's own count is the number</td></tr><tr><td>A 30-minute window with the fleet mining (the RTX 5090 Windows rig at 119 MH/s from 19:16Z, the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) at 128.8 from 19:18Z; the RTX 5090 Windows rig still the only prover, its prover OFF for the 5 min of the cost job's phase A inside this window; the Apple M5 Max app node down by decision)</td><td><code>coverage.mjs --minutes 30 --watch</code>, 19:21 to 19:51Z on node 1: chain blocks 81644..83069, 1,426 blocks; 34 with a paid shard (2.4%), all fully proven (one shard a block, no content); on-chain latency n 34: min 38, p50 44, p90 51, p99 52, max 53 s. One 5090 through the app's loop as it is covers 2.4 to 2.7% of the blocks; the latency from block to carried record is 44 s at the median, under the litepaper's minute, and would be the same for every block if the fleet were 40 cards (the table below)</td></tr></tbody></table></div>
 <h3 id="step-3-the-fleet-size-arithmetic-from-measured-inputs-every-input-names-its-entry">Step 3, the fleet size (arithmetic from measured inputs; every input names its entry)</h3>
-<p>Inputs, all RTX 5090 (PC 2), SP1 6.8.1 cuda: a full shard at the provisional <code>S_p</code> (6.75 M pgas) compressed in 10.9 s and the four shards of a near-<code>B_p</code> block in 10.2 to 10.7 s each (bench-log 4 October 2026, "shard proving on the RTX 5090", runs run-20261004-173115 and run-20261004-r3-shards); one aggregation 2.2 s (two shards) to 2.5 s (four shards), the same entry; tonight's chain of 2 on the Apple M5 Max CPU shows the recursion over the previous block proof costs the same order as a first aggregation (52.0 s against 59.1 s), so the GPU figure for a chained aggregation is taken as 2.5 s, approximate, until the held PC 2 chain job measures it; the app's live loop tonight: 1.6 shards a minute per card on empty shards (export, cut, key setup, prove, sign, submit: about 37 s a shard, of which the proof is a few seconds), bench-log step 1 above. A 5090 proves one thing at a time.</p>
+<p>Inputs, all RTX 5090 (the RTX 5090 Windows rig), SP1 6.8.1 cuda: a full shard at the provisional <code>S_p</code> (6.75 M pgas) compressed in 10.9 s and the four shards of a near-<code>B_p</code> block in 10.2 to 10.7 s each (bench-log 4 October 2026, "shard proving on the RTX 5090", runs run-20261004-173115 and run-20261004-r3-shards); one aggregation 2.2 s (two shards) to 2.5 s (four shards), the same entry; tonight's chain of 2 on the Apple M5 Max CPU shows the recursion over the previous block proof costs the same order as a first aggregation (52.0 s against 59.1 s), so the GPU figure for a chained aggregation is taken as 2.5 s, approximate, until the held the RTX 5090 Windows rig chain job measures it; the app's live loop tonight: 1.6 shards a minute per card on empty shards (export, cut, key setup, prove, sign, submit: about 37 s a shard, of which the proof is a few seconds), bench-log step 1 above. A 5090 proves one thing at a time.</p>
 <div class="tbl"><table><thead><tr><th>Block content at 1 block/s</th><th>Shard proofs a second (fleet)</th><th>Card-seconds a second for shards</th><th>Aggregations a second</th><th>Card-seconds a second for aggregation</th><th>5090-class cards for 100%</th><th>Rule</th></tr></thead><tbody><tr><td>empty blocks (tonight's devnet), the app's loop as it is, the card also mining</td><td>1</td><td>37</td><td>1</td><td>9.7 (measured, <code>chain-pc2-pv1c</code>)</td><td>47</td><td>one shard per block, the loop's 37 s each plus a chained aggregation</td></tr><tr><td>empty blocks, the chain mode's shape (one key setup per process, proofs back to back), the card also mining</td><td>1</td><td>7.4 (measured)</td><td>1</td><td>9.7 (measured)</td><td>18</td><td>17.1 card-seconds a block, <code>chain-pc2-pv1c</code></td></tr><tr><td>empty blocks, cards that only prove</td><td>1</td><td>2.7 (4 October, a 200-pgas shard)</td><td>1</td><td>2.5 (4 October)</td><td>6 (approximate)</td><td>the miner's 92% utilisation costs the prover 3 to 4x</td></tr><tr><td>one full shard a block (<code>S_p</code>, 6.75 M pgas), cards that only prove</td><td>1</td><td>10.9</td><td>1</td><td>2.5</td><td>14</td><td>4 October's stages</td></tr><tr><td>one full shard a block, the card also mining</td><td>1</td><td>about 35 (approximate: 10.9 x 3.2, tonight's ratio)</td><td>1</td><td>9.7</td><td>about 45 (approximate)</td><td>the full-shard proof with the miner on the card is not measured</td></tr><tr><td>blocks at <code>B_p</code> (four full shards), cards that only prove</td><td>4</td><td>42.5</td><td>1</td><td>2.5</td><td>45</td><td>4 x 10.6 + 2.5</td></tr><tr><td>at the adopted v1 budgets (<code>B_p</code> 120,000 pgas, <code>S_p</code> 30,000, from DAA 210,000 on the devnet): a v1 shard of transfers ran at 213 to 236 cycles per pgas (bench-log 5 October, "the prover carries both fee tables"), 7 M cycles a shard against 60 M for the prototype shard</td><td>4</td><td>under 42.5 (the 5090 time for a 7 M-cycle shard is not measured; scaling 10.9 s by cycles gives about 1.3 s, approximate)</td><td>1</td><td>2.5 to 9.7</td><td>8 to 15 (approximate)</td><td>measure before the switch lands</td></tr></tbody></table></div>
 <p>Reading. The card count is the sum of card-seconds of work per block-second, rounded up, with no slack for the exclusive window, the relay or a card's idle gaps; the devnet's own numbers tonight (one card, 1.4 to 1.6 shards a minute, 2.4 to 4.7% of blocks) are the first row. Two levers, both measured tonight: the loop (a shard's carriage through export, cut and a 12-s key setup is 25 s on top of a 7-s proof; the host's <code>--mode aggregate</code> and <code>--mode chain</code> hold one key setup per process and the prover loop should do the same, the 0.3.11 item in the plan) and the card's other job (a mining card proves 3 to 4x slower than an idle one, <code>chain-pc2-pv1c</code> against 4 October; the prover's cost to mining is 4%). A fleet of 18 mining 5090s, or 6 proving-only ones, covers an empty-block chain at 1 block/s through the chain mode; the mandatory rule waits for the measured share to reach one, not for these rows.</p>
 <h3 id="the-12-gb-requirement-the-maintainers-20-1xz-make-sure-we-can-prove-on-12gb-cards-the-gpu-memory-peak-against-sp1-s-knobs">The 12 GB requirement (the maintainers, 20:1xZ: "make sure we can prove on 12gb cards"): the GPU memory peak against SP1's knobs</h3>
-<p>Job <code>memsweep-pc2-pv1</code> (<code>tools/proving-v1/pc2-memory-sweep.ps1</code>), PC 2's RTX 5090 (32,607 MiB), the miners STOPPED by the job and the live prover switched off (its <code>sp1-gpu-server</code> would otherwise be the one the client connects to), every row: the server killed first, a 1-s <code>nvidia-smi memory.used</code> sampler, one <code>--mode compressed --shard 0</code> run of the pv1 host (<code>&lt;server path&gt;</code>, SP1 6.8.1 cuda, <code>sp1-gpu-server</code> 6.8.1), 20:19 to 20:25Z. The knobs are the environment the GPU server inherits from the host process (<code>sp1-core-executor-6.8.1/src/opts.rs</code>: <code>SHARD_SIZE</code>, <code>ELEMENT_THRESHOLD</code>, <code>HEIGHT_THRESHOLD</code>, <code>MINIMAL_TRACE_CHUNK_THRESHOLD</code>, <code>TRACE_CHUNK_SLOTS</code>; <code>sp1-prover-6.8.1/src/worker/config.rs</code>: the <code>SP1_WORKER_NUM_*</code> and <code>*_BUFFER_SIZE</code> counts, defaults 4 core workers, 8 recursion prover workers). Idle card before the sweep: 1,732 MiB.</p>
+<p>Job <code>memsweep-pc2-pv1</code> (<code>tools/proving-v1/pc2-memory-sweep.ps1</code>), the RTX 5090 Windows rig's RTX 5090 (32,607 MiB), the miners STOPPED by the job and the live prover switched off (its <code>sp1-gpu-server</code> would otherwise be the one the client connects to), every row: the server killed first, a 1-s <code>nvidia-smi memory.used</code> sampler, one <code>--mode compressed --shard 0</code> run of the pv1 host (<code>&lt;server path&gt;</code>, SP1 6.8.1 cuda, <code>sp1-gpu-server</code> 6.8.1), 20:19 to 20:25Z. The knobs are the environment the GPU server inherits from the host process (<code>sp1-core-executor-6.8.1/src/opts.rs</code>: <code>SHARD_SIZE</code>, <code>ELEMENT_THRESHOLD</code>, <code>HEIGHT_THRESHOLD</code>, <code>MINIMAL_TRACE_CHUNK_THRESHOLD</code>, <code>TRACE_CHUNK_SLOTS</code>; <code>sp1-prover-6.8.1/src/worker/config.rs</code>: the <code>SP1_WORKER_NUM_*</code> and <code>*_BUFFER_SIZE</code> counts, defaults 4 core workers, 8 recursion prover workers). Idle card before the sweep: 1,732 MiB.</p>
 <div class="tbl"><table><thead><tr><th>Config (environment)</th><th>Fixture</th><th>Cycles</th><th>Peak MiB</th><th>Compressed prove s</th><th>Verified</th></tr></thead><tbody><tr><td>baseline (no knob)</td><td>block-338-shard1, a full shard at <code>S_p</code> (6.75 M pgas)</td><td>60,415,376</td><td><strong>28,295</strong></td><td>11.4</td><td>yes</td></tr><tr><td>baseline</td><td>block-83616, an empty live shard</td><td>280,706</td><td><strong>13,863</strong></td><td>2.3</td><td>yes</td></tr><tr><td>ELEMENT_THRESHOLD 2^27</td><td>full shard</td><td>60.4 M</td><td>28,326</td><td>10.9</td><td>yes</td></tr><tr><td>ELEMENT_THRESHOLD 2^26, HEIGHT_THRESHOLD 2^21</td><td>full shard</td><td>60.4 M</td><td>28,326</td><td>10.7</td><td>yes</td></tr><tr><td>every worker count and buffer 1</td><td>full shard</td><td>60.4 M</td><td>28,326</td><td>20.8</td><td>yes</td></tr><tr><td>every worker count and buffer 2</td><td>full shard</td><td>60.4 M</td><td>28,327</td><td>12.9</td><td>yes</td></tr><tr><td>workers 1 + ELEMENT 2^27</td><td>full shard</td><td>60.4 M</td><td>28,263</td><td>20.3</td><td>yes</td></tr><tr><td>workers 1 + ELEMENT 2^26 + HEIGHT 2^21</td><td>full shard</td><td>60.4 M</td><td>28,326</td><td>20.6</td><td>yes</td></tr><tr><td>workers 1 + ELEMENT 2^26 + HEIGHT 2^21 + trace chunks 4 M x 2 slots</td><td>full shard</td><td>60.4 M</td><td>28,358</td><td>22.6</td><td>yes</td></tr><tr><td>workers 1 + ELEMENT 2^25 + HEIGHT 2^20</td><td>full shard</td><td>60.4 M</td><td>22,919</td><td>22.2</td><td>yes</td></tr><tr><td>workers 1 + ELEMENT 2^26 + HEIGHT 2^21</td><td>empty shard</td><td>280,706</td><td>13,861</td><td>2.6</td><td>yes</td></tr></tbody></table></div>
 <p>Reading. The GPU memory of a compressed shard proof is <strong>13.9 GB for a shard of 280,000 cycles and 28.3 GB for one of 60 M cycles</strong>, and no knob the environment carries moves the floor: the worker counts only slow the proof (11.4 s to 20.8 s), the trace thresholds at 2^26 and 2^27 change nothing, and the smallest trace threshold tried (2^25 elements, 2^20 rows) takes 5.4 GB off the full shard (22.9 GB) at twice the time. The floor sits in the GPU server's own allocation, not in the shard: an empty shard with every knob at its minimum still takes 13.9 GB. So on SP1 6.8.1's <code>sp1-gpu-server</code> as shipped, <strong>a 12 GB card cannot prove even an empty shard</strong> (13.9 GB), and the 11.0 GB target of tonight's requirement is out of reach from the environment. The S_p/2 and S_p/4 cuts of block 344 did not run: the package carries no <code>tools/prove-fixtures/seq.json</code> (the cut rows need the export; they would sit between the two measured points, and the floor is the binding number anyway). What is left to try, in order: the server's own options (its <code>--help</code> and the option names in its strings: the miner-on job prints them), SP1's core-only proof (the node needs the compressed proof, so this changes the protocol), and an SP1 release built for smaller cards (the 6.8.1 release notes are not read here; approximate: the project's documentation names 24 GB as the GPU requirement, <code>proving/windows-wsl2/setup-wsl.sh</code> quotes it).</p>
 <h3 id="the-same-shard-with-the-miner-running-the-16-gb-requirement-and-the-gpu-server-s-own-options">The same shard with the miner running (the 16 GB requirement), and the GPU server's own options</h3>
 <p>Job <code>memminer-pc2-pv1</code> (<code>tools/proving-v1/pc2-memory-miner-on.ps1</code>), 20:28 to 20:30Z, the miner at full rate on the card, the live prover off for the run, the same 1-s sampler: the full shard at <code>S_p</code> (60.4 M cycles) peaked at <strong>30,039 MiB</strong> and took 33.0 s (28,295 MiB and 11.4 s with the card to itself: the miner costs the prover 2.9x in time and 1.7 GB of memory); the empty shard <strong>15,670 MiB</strong> and 7.7 s (13,863 and 2.3 s alone). So a 32 GB card mines and proves the prototype shard with 2.5 GB to spare; a 24 GB card cannot prove it even alone (28.3 GB); a 16 GB card cannot hold even the empty shard beside the miner (15.7 GB, the display and driver on top). <code>sp1-gpu-server --help</code> prints only <code>--version</code>: it has no options of its own, and its strings carry no memory setting (<code>CUDA_OUT_OF_MEMORY</code> is an error name). The shard SIZE is therefore the only lever left on this build, measured next as the S_p curve.</p>
-<p>The root-socket fault (the class, fixed the same evening). The chain and memory jobs ran the host as root inside WSL2; the first <code>sp1-gpu-server</code> they started left <code>/tmp/sp1-cuda-0.sock</code> owned by root, and the live prover (the app's own WSL user) then failed every shard with <code>CudaClientError: Connect(Os { code: 13, kind: PermissionDenied })</code> (PC 2 app log 1791230456, 20:00:56Z) until the socket was gone. Every pv1 playbook now kills the server and unlinks <code>/tmp/sp1-cuda-*.sock</code> at its start and end, <code>tools/ci/prover-socket-check.sh</code> fails CI on any playbook that runs a prove mode as root without both lines (shown failing on <code>pc2-prover-cost.ps1</code> before its <code>--mode id</code>-only exemption, passing after), and the plan carries the rule: a prover job on a shared card runs as the app's user or cleans its socket. It recurred at 21:25Z from another agent's job (agg-cost-pc2-1, the same root-run shape) and survived the 0.3.10 restart at 21:49:41Z; the fix job <code>socketfix-pc2-pv1</code> (<code>tools/proving-v1/pc2-socket-fix.ps1</code>, 22:01:14 to 22:02:12Z) found <code>/tmp/sp1-cuda-0.sock</code> owned by root, removed it, switched the prover off and on, and the app's next shard (block 89011 shard 0) was proven and submitted in 34 s and paid 0.93 IGN at 22:02:24Z. Playbooks that run the host: <code>tools/proving-v1/pc2-chain.ps1</code>, <code>pc2-memory-sweep.ps1</code>, <code>pc2-memory-miner-on.ps1</code>, <code>pc2-sp-curve.ps1</code> (all root, all with the cleanup now; the first two chain and sweep runs had none), <code>pc2-prover-cost.ps1</code> (<code>--mode id</code> only), <code>relay/playbooks/shard-test.ps1</code> and <code>proving/windows-wsl2/prove-shard.sh</code>, <code>prove-block.sh</code> (the app's user, not root), <code>tools/proving-v0/run.mjs</code> (the Apple M5 Max, no server).</p>
+<p>The root-socket fault (the class, fixed the same evening). The chain and memory jobs ran the host as root inside WSL2; the first <code>sp1-gpu-server</code> they started left <code>/tmp/sp1-cuda-0.sock</code> owned by root, and the live prover (the app's own WSL user) then failed every shard with <code>CudaClientError: Connect(Os { code: 13, kind: PermissionDenied })</code> (the RTX 5090 Windows rig app log 1791230456, 20:00:56Z) until the socket was gone. Every pv1 playbook now kills the server and unlinks <code>/tmp/sp1-cuda-*.sock</code> at its start and end, <code>tools/ci/prover-socket-check.sh</code> fails CI on any playbook that runs a prove mode as root without both lines (shown failing on <code>pc2-prover-cost.ps1</code> before its <code>--mode id</code>-only exemption, passing after), and the plan carries the rule: a prover job on a shared card runs as the app's user or cleans its socket. It recurred at 21:25Z from another agent's job (agg-cost-pc2-1, the same root-run shape) and survived the 0.3.10 restart at 21:49:41Z; the fix job <code>socketfix-pc2-pv1</code> (<code>tools/proving-v1/pc2-socket-fix.ps1</code>, 22:01:14 to 22:02:12Z) found <code>/tmp/sp1-cuda-0.sock</code> owned by root, removed it, switched the prover off and on, and the app's next shard (block 89011 shard 0) was proven and submitted in 34 s and paid 0.93 IGN at 22:02:24Z. Playbooks that run the host: <code>tools/proving-v1/pc2-chain.ps1</code>, <code>pc2-memory-sweep.ps1</code>, <code>pc2-memory-miner-on.ps1</code>, <code>pc2-sp-curve.ps1</code> (all root, all with the cleanup now; the first two chain and sweep runs had none), <code>pc2-prover-cost.ps1</code> (<code>--mode id</code> only), <code>relay/playbooks/shard-test.ps1</code> and <code>proving/windows-wsl2/prove-shard.sh</code>, <code>prove-block.sh</code> (the app's user, not root), <code>tools/proving-v0/run.mjs</code> (the Apple M5 Max, no server).</p>
 <h3 id="the-s-p-curve-peak-gpu-memory-against-shard-size-against-time-the-card-to-itself-the-first-of-the-two-curve-jobs">The S_p curve: peak GPU memory against shard size against time, the card to itself (the first of the two curve jobs)</h3>
-<p>Job <code>spcurve-stopped-pc2-pv1</code> (<code>tools/proving-v1/pc2-sp-curve.ps1</code>, the miners stopped by the job, the live prover off, the server killed and its socket unlinked around every point, a 1-s <code>nvidia-smi</code> sampler), 20:33 to 20:37Z, PC 2's RTX 5090, the pv1 host (this run's <code>--budget</code> points were ignored by the pv1 host, so its block-344 rows are the fixture's own 6.75 M-pgas shard 0 twice; the pv1b host's re-plans at 2.25 M and 4.5 M pgas are the next job's rows). Idle card 1,743 MiB.</p>
+<p>Job <code>spcurve-stopped-pc2-pv1</code> (<code>tools/proving-v1/pc2-sp-curve.ps1</code>, the miners stopped by the job, the live prover off, the server killed and its socket unlinked around every point, a 1-s <code>nvidia-smi</code> sampler), 20:33 to 20:37Z, the RTX 5090 Windows rig's RTX 5090, the pv1 host (this run's <code>--budget</code> points were ignored by the pv1 host, so its block-344 rows are the fixture's own 6.75 M-pgas shard 0 twice; the pv1b host's re-plans at 2.25 M and 4.5 M pgas are the next job's rows). Idle card 1,743 MiB.</p>
 <div class="tbl"><table><thead><tr><th>Shard</th><th>pgas</th><th>Witness bytes</th><th>SP1 cycles</th><th>Peak MiB, card alone</th><th>Compressed prove s</th><th>Knob</th></tr></thead><tbody><tr><td>block 83616, an empty live shard</td><td>0</td><td>13,964</td><td>280,706</td><td><strong>13,874</strong></td><td>2.2</td><td>none</td></tr><tr><td>block 56, one transfer</td><td>600</td><td>4,902</td><td>556,369</td><td>13,907</td><td>3.2</td><td>none</td></tr><tr><td>fees-v1-shards2 shard 0, a shard at the ADOPTED v1 budget (<code>S_p</code> 30,000; 4 transactions, 2 shards a block)</td><td>22,172</td><td>18,390</td><td>4,717,439</td><td><strong>20,434</strong></td><td>4.3</td><td>none</td></tr><tr><td>the same</td><td>22,172</td><td>18,390</td><td>4.7 M</td><td>20,435</td><td>3.7</td><td>ELEMENT_THRESHOLD 2^25, HEIGHT 2^20</td></tr><tr><td>block 338 shard 0, the full PROTOTYPE shard (<code>S_p</code> 7.5 M)</td><td>6,751,568</td><td>21,611</td><td>60,415,376</td><td><strong>28,307</strong></td><td>10.8</td><td>none</td></tr><tr><td>the same</td><td>6.75 M</td><td>21,611</td><td>60.4 M</td><td>22,963</td><td>11.5</td><td>ELEMENT_THRESHOLD 2^25, HEIGHT 2^20</td></tr><tr><td>block 344 shard 0 (the fixture's own cut, 6.75 M pgas, modexp)</td><td>6,748,392</td><td>18,535</td><td>59,678,420</td><td>28,275 and 28,307</td><td>11.5 and 11.0</td><td>none</td></tr></tbody></table></div>
 <p>The second job (<code>spcurve-stopped-pc2-pv1b</code>, the pv1b host whose <code>--budget</code> re-plans a fixture, 20:43 to 20:47Z, the same conditions) repeats the points (empty 13,875 MiB 2.1 s; one transfer 13,907 MiB 3.3 s; the v1 shard 20,435 MiB 4.2 s; the prototype shard 28,275 MiB 11.2 s) and adds the re-plans of block 344 (27 M pgas of modexp): at 2.25 M pgas (one transaction, 16 shards a block, 19,987,938 cycles) <strong>28,371 MiB</strong> and 6.6 s; at 4.5 M pgas (7 shards a block, 40,011,108 cycles) 28,307 MiB and 8.5 s; with the 2^25 trace threshold the 2.25 M shard 22,835 MiB and 6.2 s. So the peak is flat at 28.3 GB from 20 M cycles to 60 M (the server's buffers step up between 4.7 M and 20 M cycles and not after), and cutting the prototype shard smaller buys nothing until the v1 size.</p>
 <p>The third job (<code>spcurve-miner-pc2-pv1</code>, the same points WITH THE MINER RUNNING on the card, 20:49Z on, the live prover off): empty shard 15,585 MiB and 7.5 s; one transfer 15,745 MiB and 12.7 s; <strong>the v1 shard 22,210 MiB and 13.2 s</strong> (20,435 and 4.2 s alone: the miner adds 1.8 GB and 3.1x); the 2.25 M shard 30,049 MiB and 17.9 s; the 4.5 M shard 29,954 MiB and 26.3 s; the prototype shard 30,083 MiB and 33.3 s. With the 2^25 trace threshold beside the miner: the 2.25 M shard 24,642 MiB and 21.5 s, the prototype shard 24,739 MiB and 38.8 s (24.7 GB: over a 24 GB card by the display's share, and 3.6x slower than the card alone). So beside the miner the adopted shard needs 22.2 GB: a 24 GB card (24,564 MiB) has 2.3 GB spare for it (the number for a 24 GB card is the 5090's allocation pattern on a 32 GB card, so approximate for the card itself), and the prototype shard needs 30.1 GB, the 32 GB card alone.</p>
 <p>Reading, with the miner-on pairs above (empty shard 15,670 MiB, full prototype shard 30,039 MiB). The witness is never the binding term (4.9 to 21.6 KB a shard); the GPU server's working set is: a floor of 13.9 GB for any shard, 20.4 GB at 4.7 M cycles, 28.3 GB at 60 M cycles (23.0 GB with the smallest trace threshold, at the same time). By card: a <strong>12 GB card proves nothing</strong> on this build (the floor is 13.9 GB alone); a <strong>16 GB card proves only empty and near-empty shards, alone</strong> (13.9 GB; 15.7 GB beside the miner leaves nothing for the display); a <strong>24 GB card proves the adopted v1 shard alone</strong> (20.4 GB) and, at the miner's measured 1.7 GB extra, about 22.1 GB beside it (approximate: not measured on a 24 GB card), and never the prototype shard (28.3 GB); a <strong>32 GB card proves the prototype shard beside the miner with 2.5 GB spare</strong> (30.0 of 32.6 GB). The devnet is on the prototype table until H = 210,000 (6 October, about 19:50Z) and on the adopted v1 table (<code>S_p</code> 30,000 pgas) after it, so from H the 24 GB tier joins the provers and the shard that binds the memory is the 4.7 M-cycle one. Shards per block at each size: 1 at the prototype <code>S_p</code>, 4 at <code>B_p</code>; at the v1 budget 1 to 4 (one a block on tonight's chain, 2 to 3 on the txgen blocks).</p>
 <h3 id="step-4-the-rule">Step 4, the rule</h3>
-<div class="tbl"><table><thead><tr><th>What</th><th>Measured</th></tr></thead><tbody><tr><td>Unit tests</td><td><code>cargo test --release -p kaspa-consensus-core -p igneum-exec --lib -- proving config::params::tests::override_params_carry_the_proving_v1 config::params::tests::consensus_digest</code> on this Mac (target <code>vendor/igneum-node/target-pv1</code>, 19:09Z): consensus core 13 passed (the segment record round trip, signature and the three nested sections; the credit split; the params switch and the digest that moves only once the switch is set), exec 8 passed (the segment grid and the split; the record checks: alignment, block, chain length, the veto naming the field, the deadline, the window; the chain rule both ways; the unproven restart; the shard side at 90%; the pool offering the segment section). The six full node suites go to PC 2 as a build job when the fleet is back</td></tr><tr><td>The fast-time 3-node harness (<code>tools/proving-v1/net.mjs</code>, 29950+, suffix 956, every node in trust mode, three vmine voters, v0 at DAA 60, v1 at DAA 120, 4 blocks a segment, unproven after 60 DAA, a tenth to the aggregator; fork b177718e built on this Mac)</td><td>run 2, 19:13:01Z to 19:16:19Z, under the run lock: PASSED, 21 checks in 197.3 s (<code>tools/proving-v1/report-2026-10-05.json</code>). v1 start = chain block 119 on all three nodes; the native statement identical on all three. Known-finished: segment 119..122's fresh-chain record submitted to n1 at t=131.1 s, relayed, verified (trust) and PAID on n0 1.0 s later at chain block 129, 253,611,648,000,000,000 wei = a tenth of the four credits, the same on every node, the payout address holding it. Chain rule: segment 123..126's fresh-chain record refused ("does not chain to segment 119..122 ... proven (record paid at chain block 129)"), the continuing one (chain_len 8) accepted and paid. Known-failed: segment 127..130 left without a record: a fresh-chain record for 131..134 refused while 127..130 was pending ("pending until DAA 191"); at DAA 192 the status read unproven, a late record for 127..130 refused ("unproven: carried after the deadline"), the fresh-chain record for 131..134 accepted and paid with chain_len 4; <code>segmentsInWindow</code> proven 3, unproven 1. The shard side: a v1 shard's <code>shardWei</code> = 90% of its block's credit. Run 1 (19:10Z) failed in its own tooling (the signer's argument order), fixed. Run 3 on the FINAL fork tree (ece42979 on the 0.3.10 commit 21d4c73c, protocol 15, N = 8 both in the params default and <code>--segment 8</code>, the fast-time file's four fields), 20:52:41Z to 20:56:45Z: PASSED, 21 checks in 244.4 s (segments of 8: 119..126 paid in 1.0 s after submission, 127..134 refused fresh and paid continuing with chain_len 16, 135..142 left unproven and skipped, 143..150 restarted the chain)</td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>What</th><th>Measured</th></tr></thead><tbody><tr><td>Unit tests</td><td><code>cargo test --release -p kaspa-consensus-core -p igneum-exec --lib -- proving config::params::tests::override_params_carry_the_proving_v1 config::params::tests::consensus_digest</code> on this Mac (target <code>vendor/igneum-node/target-pv1</code>, 19:09Z): consensus core 13 passed (the segment record round trip, signature and the three nested sections; the credit split; the params switch and the digest that moves only once the switch is set), exec 8 passed (the segment grid and the split; the record checks: alignment, block, chain length, the veto naming the field, the deadline, the window; the chain rule both ways; the unproven restart; the shard side at 90%; the pool offering the segment section). The six full node suites go to the RTX 5090 Windows rig as a build job when the fleet is back</td></tr><tr><td>The fast-time 3-node harness (<code>tools/proving-v1/net.mjs</code>, 29950+, suffix 956, every node in trust mode, three vmine voters, v0 at DAA 60, v1 at DAA 120, 4 blocks a segment, unproven after 60 DAA, a tenth to the aggregator; fork b177718e built on this Mac)</td><td>run 2, 19:13:01Z to 19:16:19Z, under the run lock: PASSED, 21 checks in 197.3 s (<code>tools/proving-v1/report-2026-10-05.json</code>). v1 start = chain block 119 on all three nodes; the native statement identical on all three. Known-finished: segment 119..122's fresh-chain record submitted to n1 at t=131.1 s, relayed, verified (trust) and PAID on n0 1.0 s later at chain block 129, 253,611,648,000,000,000 wei = a tenth of the four credits, the same on every node, the payout address holding it. Chain rule: segment 123..126's fresh-chain record refused ("does not chain to segment 119..122 ... proven (record paid at chain block 129)"), the continuing one (chain_len 8) accepted and paid. Known-failed: segment 127..130 left without a record: a fresh-chain record for 131..134 refused while 127..130 was pending ("pending until DAA 191"); at DAA 192 the status read unproven, a late record for 127..130 refused ("unproven: carried after the deadline"), the fresh-chain record for 131..134 accepted and paid with chain_len 4; <code>segmentsInWindow</code> proven 3, unproven 1. The shard side: a v1 shard's <code>shardWei</code> = 90% of its block's credit. Run 1 (19:10Z) failed in its own tooling (the signer's argument order), fixed. Run 3 on the FINAL fork tree (ece42979 on the 0.3.10 commit 21d4c73c, protocol 15, N = 8 both in the params default and <code>--segment 8</code>, the fast-time file's four fields), 20:52:41Z to 20:56:45Z: PASSED, 21 checks in 244.4 s (segments of 8: 119..126 paid in 1.0 s after submission, 127..134 refused fresh and paid continuing with chain_len 16, 135..142 left unproven and skipped, 143..150 restarted the chain)</td></tr></tbody></table></div>
 <h2 id="5-october-2026-night-dp4a-class-throughput-on-the-m5-max-the-dot4-emulation-against-the-alu-chain-counter-asic-2-0-layer-7">5 October 2026 (night), dp4a-class throughput on the M5 Max: the dot4 emulation against the ALU chain (Counter ASIC 2.0 layer 7)</h2>
 <p>Apple M5 Max, macOS 26, branch <code>ca2-analysis</code> (base <code>readwidth</code> 4badcee). The probes are standalone (no pack, no lottery kernel): <code>proto-metal/dot4-probe.swift</code> (built <code>swiftc -O -o dot4-probe dot4-probe.swift -framework Metal</code> under <code>with-lock.sh build</code>), <code>proto-opencl/dot4-probe.c</code> (built <code>cc -std=c99 -O2 -o dot4-probe-cl dot4-probe.c -framework OpenCL</code>), both run under <code>with-lock.sh measure</code> (exclusive; nothing else built or measured on the Apple M5 Max during the runs). Shape: a dependent chain of one dot4 per step per lane, <code>acc = dot4(x, y, acc); x = x * 0x9E3779B1 + acc; y = rotl(y, 7) ^ (acc + s)</code>, 1,048,576 lanes x 4,096 steps, work-group 256, best of 3 with a fresh seed per repetition, device time (Metal: command buffer GPU start to end; OpenCL: event profiling). Beside it the ALU chain of the 9070 XT entry (<code>x = x * K + rotl(y, 7); y = (y ^ x) + s</code>, 5 ops per step counted). Every kernel is checked bit for bit against a CPU reference on lanes 0 and 1,048,575 in every repetition ("ok"). Design context: <code>docs/analysis/int8-matrix-family.md</code>.</p>
 <div class="tbl"><table><thead><tr><th>API, kernel</th><th>What one step is</th><th>best ms</th><th>G steps/s</th><th>ns per dependent step</th><th>ok</th></tr></thead><tbody><tr><td>Metal, <code>probe_alu</code></td><td>mul, add, rotate, xor, add</td><td>4.882</td><td>879.8 (about 4.4 T int ops/s at 5 per step, approximate)</td><td>1,192</td><td>yes</td></tr><tr><td>Metal, <code>probe_dot4s</code></td><td>signed dot4 emulated: <code>int4(as_type&lt;char4&gt;(a))</code> x same for b, 4 products summed into a wrapping int, plus the 3-op chain</td><td>22.820</td><td>188.2 G dot4/s</td><td>5,571</td><td>yes</td></tr><tr><td>Metal, <code>probe_dot4u</code></td><td>unsigned dot4 emulated: <code>uint4(as_type&lt;uchar4&gt;(a))</code>, same chain</td><td>7.834</td><td>548.2 G dot4/s</td><td>1,913</td><td>yes</td></tr><tr><td>Apple OpenCL 1.2, <code>alu</code></td><td>as Metal</td><td>4.928</td><td>871.5</td><td>1,203</td><td>yes</td></tr><tr><td>Apple OpenCL 1.2, <code>dot4e</code></td><td>signed dot4 emulated with <code>convert_int4(as_char4(a))</code></td><td>22.797</td><td>188.4 G dot4/s</td><td>5,566</td><td>yes</td></tr><tr><td>Apple OpenCL 1.2, <code>dot4_khr</code></td><td><code>acc + dot(as_char4(x), as_char4(y))</code> under <code>#pragma OPENCL EXTENSION cl_khr_integer_dot_product : enable</code></td><td>5.076</td><td>846.2</td><td>1,239</td><td>NO: mismatched the CPU reference on every lane checked in all 3 repetitions</td></tr></tbody></table></div>
 <p>Reading: on this GPU a signed-byte dot4 costs 4.7 ALU-chain steps and an unsigned-byte one 1.6; Metal has no dp4a and no integer simdgroup matrix (MSL 4.1 sections 2.4 and 6.9), so these are the honest Apple costs of a per-lane dot4 family, and an unsigned definition is 3x cheaper for Apple at no cost to NVIDIA or AMD (both carry the unsigned form, PTX <code>dp4a.u32.u32</code>, AMD <code>v_dot4_u32_u8</code>). Apple's OpenCL does not list <code>cl_khr_integer_dot_product</code>; its <code>dot</code> on <code>char4</code> compiled anyway and returned something other than the integer dot (the mismatch), which is why a family's conformance vectors must gate every vendor path on the feature macro, not on "it compiled". Not run here: NVIDIA and AMD. The PC job is prepared and not published (coordinator's rule): <code>relay/playbooks/dot4-probe.ps1</code> with <code>dot4-probe-cl.exe</code> (proto-opencl/dot4-probe.c cross-compiled with mingw as <code>x86_64-w64-mingw32-gcc -std=c99 -O2 -static -DIGNEUM_CL_DYNAMIC -DCL_TARGET_OPENCL_VERSION=120 -I proto-cuda/nvrtc/redist/include</code>, sha256 <code>5adaeb1aceb03dc41135baabe0b53f1ed5fac891a5b3c3849645b03efe4416f4</code>, 161,863 bytes); it runs the scalar, KHR, AMD <code>__builtin_amdgcn_sudot4</code> and NVIDIA inline-PTX <code>dp4a</code> variants on every OpenCL GPU of the machine with the mining cards switched off through <code>/api/cards</code> and restored after. The CUDA form (<code>proto-cuda/dot4-probe.cu</code>, <code>__dp4a</code>) needs nvcc on the RTX 5090 machine and is the cross-check.</p>
-<p><strong>PC 1, 5 October 2026 20:29 UTC, the same probe on the RTX 5090 and the RX 9070 XT</strong> (machine ae432dc7, Windows 11; fetch job <code>fetch-dot4-20261005</code> placed <code>dot4-probe-cl.exe</code> sha256 <code>5adaeb1a…6416f4</code>, run job <code>run-dot4-20261005</code> ran <code>relay/playbooks/dot4-probe.ps1</code>: the app's <code>nvidia:0</code> and <code>amd:1:gfx1201</code> cards switched off through <code>POST api/cards</code>, the probe run on every OpenCL device, the cards restored with their settings (identities 8 and 2, power cap 80% and none); <code>node tools/jobs.mjs run-dot4-20261005</code>; 101 s wall, every kernel under 10 ms; device event time, best of 3, same lanes and steps as the Apple M5 Max rows):</p>
+<p><strong>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT), 5 October 2026 20:29 UTC, the same probe on the RTX 5090 and the RX 9070 XT</strong> (machine ae432dc7, Windows 11; fetch job <code>fetch-dot4-20261005</code> placed <code>dot4-probe-cl.exe</code> sha256 <code>5adaeb1a…6416f4</code>, run job <code>run-dot4-20261005</code> ran <code>relay/playbooks/dot4-probe.ps1</code>: the app's <code>nvidia:0</code> and <code>amd:1:gfx1201</code> cards switched off through <code>POST api/cards</code>, the probe run on every OpenCL device, the cards restored with their settings (identities 8 and 2, power cap 80% and none); <code>node tools/jobs.mjs run-dot4-20261005</code>; 101 s wall, every kernel under 10 ms; device event time, best of 3, same lanes and steps as the Apple M5 Max rows):</p>
 <div class="tbl"><table><thead><tr><th>Device, platform</th><th>alu, G steps/s (ms)</th><th>dot4e signed emulation, G dot4/s (ms)</th><th>dot4 instruction, G dot4/s (ms)</th><th><code>cl_khr_integer_dot_product</code></th><th>ok</th></tr></thead><tbody><tr><td>RTX 5090, NVIDIA OpenCL 3.0 CUDA, driver 617.14</td><td>8,753.5 (0.491)</td><td>1,239.1 (3.466), 7.1x the ALU step</td><td>7,453.6 (0.576) via inline PTX <code>dp4a.s32.s32</code>, 1.17x the ALU step</td><td>not listed; the <code>dot(char4,char4)</code> kernel does not build</td><td>yes</td></tr><tr><td>RX 9070 XT (gfx1201), AMD-APP 3683.0 (PAL,LC), OpenCL 2.0</td><td>701.4 (6.124)</td><td>480.8 (8.932), 1.46x</td><td>664.3 (6.465) via <code>__builtin_amdgcn_sudot4</code>, 1.06x</td><td>not listed; same</td><td>yes</td></tr><tr><td>RX 9070 XT, the older 3652.0 platform entry (dup)</td><td>696.2 (6.169)</td><td>501.7 (8.561)</td><td>683.6 (6.283)</td><td>not listed</td><td>yes</td></tr><tr><td>gfx1036 (integrated RDNA 2, 2 CUs), 3683.0</td><td>40.6 (105.9)</td><td>15.8 (272.3), 2.6x</td><td><code>sudot4</code> does not build: "needs target feature dot8-insts"</td><td>not listed</td><td>alu and dot4e yes</td></tr></tbody></table></div>
 <p>Reading: one <code>dp4a</code> on the 5090 costs about one ALU-chain step (7.45 T dot4/s, 0.85 of the chain's 8.75 T steps/s); one <code>v_dot4_i32_iu8</code> on the 9070 XT the same (0.66 T, 0.95 of its chain). Emulating the signed dot4 costs 6.0x the instruction on NVIDIA (the OpenCL compiler does not fold the four sign-extended products into <code>dp4a</code>) and 1.38x on AMD. Vendor ratios: the 5090 is 12.5x the 9070 XT on the ALU chain and 11.2x on hardware dot4; against the M5 Max's best (unsigned emulation, 0.55 T) it is 10x on the chain and 13.6x on dot4. The hash itself is bound by DRAM reads, so these per-op numbers bound a family's cost and are not hash rates (<code>docs/analysis/int8-matrix-family.md</code> section 4). Adrenalin's OpenCL C accepts the clang builtin and emits the instruction on RDNA 4 (the third-party RDNA 3 report of the same route is now confirmed on this card); no PC platform lists the Khronos integer-dot extension. The 5090 SM clock read 2,505 MHz before and after (nvidia-smi; 2,850 MHz while mining in the telemetry entry), so the card was idle for the probe.</p>
 <h2 id="5-october-2026-layer-3-scratch-soundness-counter-asic-2-0-step-4-branch-ca2-soundness-on-readwidth-b970dda-cryptographer">5 October 2026, layer 3 scratch soundness (Counter ASIC 2.0 step 4; branch ca2-soundness on readwidth b970dda; cryptographer)</h2>
@@ -707,50 +664,50 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <p><strong>Daily 1 GiB build and hash rate, Metal (<code>with-lock.sh measure</code>, the same session, <code>packbench --batches 2 --batch-log2 22 --group 256</code>, three rounds):</strong></p>
 <div class="tbl"><table><thead><tr><th>Pack</th><th>Compile (1 / 2 / 3)</th><th>Build, GPU ms (1 / 2 / 3)</th><th>MH/s GPU (1 / 2 / 3)</th></tr></thead><tbody><tr><td>mx8-genesis (x8, the control)</td><td>80 / 1 / 1 ms</td><td>31.3 / 22.1 / 22.1</td><td>27.155 / 27.076 / 27.123</td></tr><tr><td>dr736-genesis</td><td>751 / 1 / 1 ms</td><td>28.9 / 29.0 / 29.1</td><td>27.125 / 27.129 / 27.063</td></tr></tbody></table></div>
 <p><strong>Chip model (chip-model-v3.md section 6):</strong> 1,278,976 chip ops per hash on the genesis day, 39.1 MH/s at 50 T op/s, 0.29x bare (0.31x at the floor, x8's figure); the fixed-function allowance of the wired mixer (3x) no longer applies to a chip that must run the day's program: at ProgPoW's claimed 1.2x the row reads 0.34x, at a cautious 1.5x 0.43x, at the old 3x 0.86x; equal silicon 0.29x / 0.36x. dr368: 0.57x bare, 0.69x / 0.86x.</p>
-<p><strong>Consequences per tier.</strong> The verifier: no miner tier runs it; a node on any 2026 core verifies a block in 5 ms (x8: 2.1), a pool core serves 205 shares per second (x8: 485; a 22,000-member pool at one share per 10 s needs 11 cores against 4.5), IBD over 108,000 headers is 8.8 min on one core (x8: 3.7); on a 2019-class laptop core (2.5x, approximate, O-1.14 unmeasured) 736 reads about 12 ms, over the gate, and 368 about 6.7 ms, under it. The build: the Apple M5 Max pays 7 ms more per day (29 against 22 ms), nothing to any tier; the 5090 is the RTX 5090 machine 2 job below; the 9070 XT is OWED (PC 1 is the maintainers' desk today; its x8 build was 72 to 77 ms); the integrated gfx1036 tier already misses the per-prepare rule at x8 (epoch-length.md 6.1: 6.9 / 9.4 / 11.7 s prepares at x1, about 55 to 94 s at x8, approximate) and the day program leaves that need (per-day dataset reuse in the workers, 0.3.12) the same in kind. The compile: the Metal item library is 0.75 to 0.8 s cold once a day and 1 ms from the shader cache; the CUDA worker compiles memhard.h into every per-epoch kernel and every race variant, so the 5090's nvrtc line is the number to read. The hash rate: unchanged within 0.3% on the Apple M5 Max, as the hash kernel only loads. Packs grow by about 550 KB (memhard.h 196 KB, program.json 156 KB): nothing to any tier.</p>
+<p><strong>Consequences per tier.</strong> The verifier: no miner tier runs it; a node on any 2026 core verifies a block in 5 ms (x8: 2.1), a pool core serves 205 shares per second (x8: 485; a 22,000-member pool at one share per 10 s needs 11 cores against 4.5), IBD over 108,000 headers is 8.8 min on one core (x8: 3.7); on a 2019-class laptop core (2.5x, approximate, O-1.14 unmeasured) 736 reads about 12 ms, over the gate, and 368 about 6.7 ms, under it. The build: the Apple M5 Max pays 7 ms more per day (29 against 22 ms), nothing to any tier; the 5090 is the the RTX 5090 Windows rig job below; the 9070 XT is OWED (the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) is the maintainers' desk today; its x8 build was 72 to 77 ms); the integrated gfx1036 tier already misses the per-prepare rule at x8 (epoch-length.md 6.1: 6.9 / 9.4 / 11.7 s prepares at x1, about 55 to 94 s at x8, approximate) and the day program leaves that need (per-day dataset reuse in the workers, 0.3.12) the same in kind. The compile: the Metal item library is 0.75 to 0.8 s cold once a day and 1 ms from the shader cache; the CUDA worker compiles memhard.h into every per-epoch kernel and every race variant, so the 5090's nvrtc line is the number to read. The hash rate: unchanged within 0.3% on the Apple M5 Max, as the hash kernel only loads. Packs grow by about 550 KB (memhard.h 196 KB, program.json 156 KB): nothing to any tier.</p>
 <p><strong>Go / no-go:</strong> GO as reserve entry R0 (the PROPOSED text in the derivation document's section 6, not in docs/spec); NO-GO for genesis-live at 736 instructions until the 2019-class core measurement lands under 10 ms; the number that decides it is 4.88 ms per unit on one M5 Max core (pass) against about 12 ms on the approximate laptop row (fail); dr368 passes both rows at 2.69 ms with the chip at 0.57x bare.</p>
-<p><strong>RTX 5090 (PC 2, one job <code>run-ca3-derive-pc2-20261006</code>, <code>relay/playbooks/ca3-derive-pc2.ps1</code>, published 08:26:08Z after the proving agent's clear at 08:24:27Z, lock 08:25:55 to 08:29:08Z; ran 08:26:43 to 08:28:49Z, done exit 0):</strong> the installed 0.3.11 worker through NVRTC 12.8 on the self-fetched zip. The card did NOT come off: the job read the key from settings.json (<code>nvidia:0:NVIDIA GeForce RTX 5090</code>, with the device index) where the 5 October jobs posted the state's key without it, and one worker process stayed up through the 90 s wait, so every row is a loaded-card figure (the v2 control 62.3 MH/s against its unloaded 136 to 137) with the ratios valid.</p>
+<p><strong>RTX 5090 (the RTX 5090 Windows rig, one job <code>run-ca3-derive-pc2-20261006</code>, <code>relay/playbooks/ca3-derive-pc2.ps1</code>, published 08:26:08Z after the proving agent's clear at 08:24:27Z, lock 08:25:55 to 08:29:08Z; ran 08:26:43 to 08:28:49Z, done exit 0):</strong> the installed 0.3.11 worker through NVRTC 12.8 on the self-fetched zip. The card did NOT come off: the job read the key from settings.json (<code>nvidia:0:NVIDIA GeForce RTX 5090</code>, with the device index) where the 5 October jobs posted the state's key without it, and one worker process stayed up through the 90 s wait, so every row is a loaded-card figure (the v2 control 62.3 MH/s against its unloaded 136 to 137) with the ratios valid.</p>
 <div class="tbl"><table><thead><tr><th>Pack</th><th>NVRTC</th><th>Cache</th><th>1 GiB build</th><th>Self-test (64 samples, 96 lanes)</th><th>Fingerprint 2^24</th><th>MH/s bw1 / bw8 (loaded)</th></tr></thead><tbody><tr><td>v2-genesis-mh</td><td>167 ms</td><td>6</td><td>46 ms</td><td>PASS</td><td>25f96e7dce90bd4e = Mac</td><td>62.26 / 61.34</td></tr><tr><td>mx8-genesis</td><td>164 ms</td><td>4</td><td>40 ms</td><td>PASS</td><td>7c28cfb06c5c65a9 = Mac</td><td>61.98 / 60.53</td></tr><tr><td>dr736-genesis</td><td>1,266 ms</td><td>5</td><td>42 ms</td><td>PASS</td><td>50e3eaa779da4f1e = Metal = Apple OpenCL</td><td>61.08 / 58.51</td></tr><tr><td>dr736-devnet-epoch0</td><td>1,266 ms</td><td>6</td><td>32 ms</td><td>PASS</td><td>9553f6d5c667205a = Metal</td><td>62.15 / 61.44</td></tr></tbody></table></div>
-<p>Reading: bit-exact on CUDA (four compilers now agree on both packs); the build and the rate do not move beyond the loaded noise; the number that moved is the NVRTC compile, +1.1 s per pack, because memhard.h's 6,624-statement item function is inside every hash-kernel and race-variant compile (17 variants: about +19 s per epoch, approximate, against a 38 s compile-ahead budget at the 600-s epoch floor), so compiling the item function once a day into its own module is a requirement of the class. Consequences: a 5090 owner pays 1.1 s once a day after that fix and 1.1 s per variant per epoch before it; the Apple M5 Max 0.75 s once a day. Filed: the card-off key form (post both forms, confirm by the process list) before the next PC 2 round; the unloaded 5090 rows re-run then. <strong>RX 9070 XT:</strong> OWED (PC 1).</p>
+<p>Reading: bit-exact on CUDA (four compilers now agree on both packs); the build and the rate do not move beyond the loaded noise; the number that moved is the NVRTC compile, +1.1 s per pack, because memhard.h's 6,624-statement item function is inside every hash-kernel and race-variant compile (17 variants: about +19 s per epoch, approximate, against a 38 s compile-ahead budget at the 600-s epoch floor), so compiling the item function once a day into its own module is a requirement of the class. Consequences: a 5090 owner pays 1.1 s once a day after that fix and 1.1 s per variant per epoch before it; the Apple M5 Max 0.75 s once a day. Filed: the card-off key form (post both forms, confirm by the process list) before the next the RTX 5090 Windows rig round; the unloaded 5090 rows re-run then. <strong>RX 9070 XT:</strong> OWED (the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT)).</p>
 <h2 id="6-october-2026-counter-asic-3-0-item-8-program-work-in-the-latency-shadow">6 October 2026, Counter ASIC 3.0 item 8: program work in the latency shadow</h2>
 <p>Branch <code>ca3-shadow</code>, worker "shadow" (<code>docs/analysis/latency-shadow-2026-10-06.md</code> carries the design, the chip side and the consequences; this entry carries the measurements). The knob: <code>LoadClass::shadow</code>, class name <code>&lt;class&gt;+sh&lt;S&gt;x&lt;R&gt;</code>, a block of <code>S</code> ALU instructions drawn from the program stream after the 64 base instructions and run <code>R</code> times at the end of every iteration (no load; the base program, its attempt and the acceptance verdict are the class's without the shadow; v2 and v3 byte-identical, <code>cargo test</code> in igneum-pow 54 + 4 + 19 + 7 green). Packs <code>proto-cuda/packs-ca3-shadow/*</code> over <code>mx8</code> for seed igneum-genesis; the control is the pinned class v3 pack <code>packs-ca2-mixer/mx8-genesis</code>. Ops per hash = shadow instructions x 1.83 (counted from the emitted statements: add 5, rotr 2, shfl 2, the rest 1, weighted over the non-load weights) + 930 (the base program's 384 ALU instructions and 128 loads).</p>
 <p><strong>Apple M5 Max, Metal</strong> (<code>proto-metal/packbench --pack &lt;dir&gt; --batches 60 --batch-log2 24 --group 256</code> under <code>with-lock.sh measure</code>, two sessions 07:51 to 08:03 UTC, GPU time; power = the IOReport "Energy Model" <code>GPU</code> and <code>DRAM</code> channels at 2 Hz through a dlopen of libIOReport, no root, the mean over each run after its first 6 s; idle GPU 0.44 W, DRAM 0.64 W; the package is about 17 W more, Ember Tune's 38 W row, approximate; load averages 3.3 to 6.8, the GPU idle: the Apple M5 Max mines nothing):</p>
 <div class="tbl"><table><thead><tr><th>Pack</th><th>Shadow instrs per hash</th><th>Ops per hash</th><th>MH/s</th><th>Against the control</th><th>GPU W</th><th>DRAM W</th><th>Microjoules per hash (GPU + DRAM)</th><th>Verifier ms per warp, one core, avg of 20 (worst cold)</th><th>Bit-exact, fingerprint 2^24</th><th>Load at start</th></tr></thead><tbody><tr><td>mx8-genesis (control; runs 1, 2, 3)</td><td>0</td><td>930</td><td>27.07, 27.07, 27.10</td><td></td><td>11.2, 9.2, 12.3</td><td>10.2, 10.0, 10.2</td><td>0.78</td><td>2.062 (2.188)</td><td>yes, 7c28cfb06c5c65a9</td><td>4.6, 6.8, 4.2</td></tr><tr><td>sh256x2</td><td>4,096</td><td>8,400</td><td>26.85</td><td>-0.8%</td><td>15.1</td><td>10.4</td><td>0.95</td><td>2.080 (2.249)</td><td>yes, 33e8bbe4c35b2e54</td><td>4.6</td></tr><tr><td>sh256x7</td><td>14,336</td><td>27,200</td><td>26.74</td><td>-1.3%</td><td>18.0</td><td>10.6</td><td>1.07</td><td>2.112 (2.224)</td><td>yes, 6cfb70911007520a</td><td>4.2</td></tr><tr><td>sh256x13</td><td>26,624</td><td>49,700</td><td>26.75</td><td>-1.2%</td><td>20.6</td><td>10.5</td><td>1.16</td><td>2.212 (2.237)</td><td>yes, 59ac286fe2a5a9ef</td><td>3.7</td></tr><tr><td>sh64x52 (64-instruction block; runs 1, 2)</td><td>26,624</td><td>49,700</td><td>27.72, 27.79</td><td>+2.5%</td><td>19.8, 20.3</td><td>10.2, 10.3</td><td>1.09</td><td>2.137 (2.237)</td><td>yes, 9dd010f79d8ca9f4</td><td>4.4, 4.1</td></tr><tr><td>sh1024x3 (1,024-instruction block)</td><td>24,576</td><td>45,900</td><td>22.53</td><td>-16.8%</td><td>20.2</td><td>9.7</td><td>1.33</td><td>2.150 (2.274)</td><td>yes, a05399c819b79aad</td><td>6.0</td></tr><tr><td>sh256x27 (runs 1, 2)</td><td>55,296</td><td>102,100</td><td>26.48, 26.86</td><td>-1.5%</td><td>26.9, 26.9</td><td>10.4, 10.2</td><td>1.40</td><td>2.229 (2.276)</td><td>yes, 3d2e8245cc084d07</td><td>3.3, 5.6</td></tr><tr><td>sh256x40</td><td>81,920</td><td>150,800</td><td>25.10</td><td>-7.3%</td><td>26.7</td><td>10.1</td><td>1.46</td><td>2.329 (2.396)</td><td>yes, 0844b706302f1c9c</td><td>5.0</td></tr><tr><td>sh256x53 (runs 1, 2)</td><td>108,544</td><td>199,600</td><td>24.40, 24.09</td><td>-10.4%</td><td>28.8, 28.5</td><td>9.5, 9.7</td><td>1.58</td><td>2.427 (2.461)</td><td>yes, 4f824b15cf2b124a</td><td>3.9, 4.6</td></tr><tr><td>sh256x88</td><td>180,224</td><td>330,700</td><td>21.39</td><td>-21.0%</td><td>31.7</td><td>8.4</td><td>1.88</td><td>2.619 (2.771)</td><td>yes, 0572522e39a94d8a</td><td>3.8</td></tr></tbody></table></div>
 <p>Reading: the M5 Max stays latency-bound to about 100,000 ops per hash and its 5 percent point is about 130,000 (between the 102,100 and 150,800 rungs), 2.2x under the chip model's 290,000 (from memory); the block size matters on Apple (64 instructions +2.5 percent, 256 holds, 1,024 costs 17 percent at the same N: the instruction footprint); the GPU rises from 11 to 27 W at 100,000 ops (marginal 6.9 pJ per counted op; 2.9 pJ at the compute-bound end) and the energy per hash from 0.78 to 1.40 microjoules, GPU plus DRAM. The verifier's law on this core: 2.06 ms + 3.2 microseconds per 1,000 shadow instructions per warp (0.1 ns per lane-instruction), so 330,700 ops cost 0.56 ms here and about 1.4 ms on a 2019-class core by the 2.5x rule: inside every pairing's headroom (x8 7.8 / 4.6 ms, dr368 7.1 / 2.8, dr736 5.1 / none, M5 Max / 2019-class, item 2's figures), so the node never binds the shadow before the cards do. The control is 2.5 percent under the 5 October figure for this pack (27.7, mixer-x4.md 6.2) on three runs; every row is read against today's 27.08.</p>
-<p><strong>RTX 5090 (PC 2, 1ccfe586), CUDA through NVRTC</strong> (job <code>run-ca3-shadow-pc2-20261006</code>, 08:30:26Z to 08:38:57Z, 511 s, exit 0, <code>--stop-miners</code>, the prover off for the run and back on, the card EMPTY before the ladder by nvidia-smi's compute-apps list; the installed worker 0.3.11 <code>--bench --batches 250 --batch-log2 24 --block-warps 1</code>, wall time; power = <code>nvidia-smi -l 1</code> means over each bench's window; the card under the app's 431 W limit, 73.8 W idle, 56 to 71 C):</p>
+<p><strong>RTX 5090 (the RTX 5090 Windows rig, 1ccfe586), CUDA through NVRTC</strong> (job <code>run-ca3-shadow-pc2-20261006</code>, 08:30:26Z to 08:38:57Z, 511 s, exit 0, <code>--stop-miners</code>, the prover off for the run and back on, the card EMPTY before the ladder by nvidia-smi's compute-apps list; the installed worker 0.3.11 <code>--bench --batches 250 --batch-log2 24 --block-warps 1</code>, wall time; power = <code>nvidia-smi -l 1</code> means over each bench's window; the card under the app's 431 W limit, 73.8 W idle, 56 to 71 C):</p>
 <div class="tbl"><table><thead><tr><th>Pack</th><th>Shadow instrs per hash</th><th>Ops per hash</th><th>MH/s</th><th>Against the control</th><th>Watts, mean</th><th>SM MHz</th><th>Microjoules per hash</th><th>Bit-exact, fingerprint 2^24 = the Apple M5 Max's</th><th>NVRTC ms</th></tr></thead><tbody><tr><td>mx8-genesis (control, first and last)</td><td>0</td><td>930</td><td>131.94, 132.47</td><td></td><td>342.4, 357.4</td><td>3,052, 3,037</td><td>2.65</td><td>yes, 7c28cfb06c5c65a9</td><td>158, 160</td></tr><tr><td>sh256x2</td><td>4,096</td><td>8,400</td><td>132.34</td><td>+0.1%</td><td>354.4</td><td>3,037</td><td>2.68</td><td>yes</td><td>248</td></tr><tr><td>sh256x7</td><td>14,336</td><td>27,200</td><td>132.32</td><td>+0.1%</td><td>385.3</td><td>3,037</td><td>2.91</td><td>yes</td><td>250</td></tr><tr><td>sh256x13</td><td>26,624</td><td>49,700</td><td>132.28</td><td>+0.1%</td><td>424.6</td><td>3,034</td><td>3.21</td><td>yes</td><td>240</td></tr><tr><td>sh64x52 (64-instruction block)</td><td>26,624</td><td>49,700</td><td>136.77</td><td>+3.5%</td><td>431.5 (the cap)</td><td>3,024</td><td>3.15</td><td>yes</td><td>181</td></tr><tr><td>sh1024x3 (1,024-instruction block)</td><td>24,576</td><td>45,900</td><td>132.02</td><td>-0.1%</td><td>428.3</td><td>3,030</td><td>3.24</td><td>yes</td><td>510</td></tr><tr><td>sh256x27</td><td>55,296</td><td>102,100</td><td>131.95</td><td>-0.2%</td><td>431.0 (the cap)</td><td>2,824</td><td>3.27</td><td>yes</td><td>242</td></tr><tr><td>sh256x40</td><td>81,920</td><td>150,800</td><td>131.75</td><td>-0.3%</td><td>431.0</td><td>2,427</td><td>3.27</td><td>yes</td><td>242</td></tr><tr><td>sh256x53</td><td>108,544</td><td>199,600</td><td>128.67</td><td>-2.7%</td><td>431.0</td><td>1,753</td><td>3.35</td><td>yes</td><td>241</td></tr><tr><td>sh256x88</td><td>180,224</td><td>330,700</td><td>86.39</td><td>-34.7%</td><td>431.0</td><td>1,834</td><td>4.99</td><td>yes</td><td>241</td></tr></tbody></table></div>
 <p>Reading: the 5090 holds to 150,800 ops (-0.3 percent) and loses 2.7 percent at 199,600, under a 431 W cap that the control never reaches (342 to 357 W) and that binds from 102,100 ops up: the SM clock falls from 3,037 to 1,834 MHz and at 330,700 ops the card is compute-bound at the capped clock (28.6 T counted op/s, the 45.2 T budget scaled by the clock). The 5 percent point at 431 W is about 210,000 ops. The marginal ALU energy at the shipping clock, read on the three rungs under the cap: 10.2 to 13.2 pJ per counted op, twice the 5.5 pJ the chip model assumed. The 64-instruction block runs 3.5 percent above the control here too. Clock rows (<code>-lgc</code>): OWED, nvidia-smi refused the lock without administrator rights and the job did not ask for them. Power-cap rows: the 5 October sweep's (floor 400 W, so <code>-pl 200</code> and <code>250</code> cannot be set; the cap never binds at the control).</p>
-<p><strong>RX 9070 XT (PC 1, ae432dc7)</strong>: OWED (PC 1 is the maintainers' desk and not released today); the OpenCL kernels are in every pack.</p>
+<p><strong>RX 9070 XT (the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT), ae432dc7)</strong>: OWED (the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) is the maintainers' desk and not released today); the OpenCL kernels are in every pack.</p>
 <p>Consequences per tier (the file's section 8 in short): at the recommended N = 100,000 ops per hash (<code>sh256x27</code>) the Apple card loses 1.5 percent of its rate and pays 16 W more (income per watt 0.56x, per pound unchanged), the 5090 holds its rate at its 431 W cap (350 W at the control: per watt 0.81x, measured), the 9070 XT holds by its budget (owed), a rig pays about 30 percent more electricity for the same hash, a pool user sees nothing, and the <code>f = 1</code> chip's edge per joule falls from 1.6x to 0.9x against the M5 Max and from 5.6x to 2.1x against the 5090 at <code>k = 1</code>, where <code>k</code> is the chip core's energy per op over the 5090's measured 11 pJ: the number that decides the item. Verdict: GO as a class v4 candidate at N = 100,000 (<code>mx8+sh256x27</code>), subject to the 9070 XT row and the gates; NO-GO above 130,000 or with a block over 256 instructions. No card we own may lose more than 5 percent (the 2.0 rule): the M5 Max caps N at 130,000.</p>
 <h2 id="6-october-2026-counter-asic-3-0-item-6-the-reserve-families-step-costs">6 October 2026, Counter ASIC 3.0 item 6: the reserve families' step costs</h2>
-<p>Branch <code>ca3-reserve</code>, worker "reserve" (<code>docs/plans/counter-asic-3-reserve.md</code> carries the proposed order and spec text; this entry carries the measurements). Method: the dot4 probe's dependent chain (<code>docs/analysis/int8-matrix-family.md</code> section 4), one op of the family per step per lane, 1,048,576 lanes x 4,096 steps, best of 3 dispatches per run, three runs, bit-exact against a CPU reference on two whole 32-lane warps (the shuffle rows need the whole warp). Every chain has the same glue (<code>acc = OP(acc, x, y); x = x * K + acc; y = rotl(y, 7) ^ (acc + s)</code>), so the "step cost" is the family's one op plus four glue ops against the add-xor-rotate chain of the 9070 XT bench-log entry (<code>alu</code>: <code>x = x * K + rotl(y, 7); y = (y ^ x) + s</code>, 5 ops per step counted, no <code>acc</code>). Reference rows are live families (<code>alu</code>; <code>rotr</code> = the live <code>rotr_var</code> text; <code>shflx</code> = the live <code>shfl</code>, lane XOR 8). Candidate rows are the seven families of spec 1.13.2 (<code>shl</code>, <code>shr</code>, <code>bfe</code> with the vendor's extract function and <code>bfec</code> the C form <code>(y &gt;&gt; 7) &amp; 0x1fff</code>, <code>andn</code>, <code>perm</code> = bytes (b1, b3, b0, b2), <code>popc</code> and <code>clz</code> folded by add, <code>sel</code> on bit 5, <code>shfla</code> = lane + 3 mod 32). Comparison rows: <code>dot4u</code> and <code>dot4s</code> (Apple, emulated), <code>dot4i</code> (<code>__dp4a</code>) and <code>mm8</code> (one <code>mma.sync.m8n8k16</code> u8 per step per warp, inline PTX) on CUDA. Sources: <code>proto-metal/family-probe.swift</code>, <code>proto-cuda/family-probe.cu</code>, the RTX 5090 machine 2 job <code>tools/ca3-reserve/pc2-family-probe.ps1</code> (made by <code>make-pc2-playbook.sh</code>). G steps/s is the whole card's dependent-step throughput; ops per step counted = the family's op plus 4 glue (<code>alu</code> 5, <code>shfla</code> and <code>shflx</code> 6: shuffle plus xor, <code>mm8</code> 1 mma plus 4).</p>
+<p>Branch <code>ca3-reserve</code>, worker "reserve" (<code>docs/plans/counter-asic-3-reserve.md</code> carries the proposed order and spec text; this entry carries the measurements). Method: the dot4 probe's dependent chain (<code>docs/analysis/int8-matrix-family.md</code> section 4), one op of the family per step per lane, 1,048,576 lanes x 4,096 steps, best of 3 dispatches per run, three runs, bit-exact against a CPU reference on two whole 32-lane warps (the shuffle rows need the whole warp). Every chain has the same glue (<code>acc = OP(acc, x, y); x = x * K + acc; y = rotl(y, 7) ^ (acc + s)</code>), so the "step cost" is the family's one op plus four glue ops against the add-xor-rotate chain of the 9070 XT bench-log entry (<code>alu</code>: <code>x = x * K + rotl(y, 7); y = (y ^ x) + s</code>, 5 ops per step counted, no <code>acc</code>). Reference rows are live families (<code>alu</code>; <code>rotr</code> = the live <code>rotr_var</code> text; <code>shflx</code> = the live <code>shfl</code>, lane XOR 8). Candidate rows are the seven families of spec 1.13.2 (<code>shl</code>, <code>shr</code>, <code>bfe</code> with the vendor's extract function and <code>bfec</code> the C form <code>(y &gt;&gt; 7) &amp; 0x1fff</code>, <code>andn</code>, <code>perm</code> = bytes (b1, b3, b0, b2), <code>popc</code> and <code>clz</code> folded by add, <code>sel</code> on bit 5, <code>shfla</code> = lane + 3 mod 32). Comparison rows: <code>dot4u</code> and <code>dot4s</code> (Apple, emulated), <code>dot4i</code> (<code>__dp4a</code>) and <code>mm8</code> (one <code>mma.sync.m8n8k16</code> u8 per step per warp, inline PTX) on CUDA. Sources: <code>proto-metal/family-probe.swift</code>, <code>proto-cuda/family-probe.cu</code>, the the RTX 5090 Windows rig job <code>tools/ca3-reserve/pc2-family-probe.ps1</code> (made by <code>make-pc2-playbook.sh</code>). G steps/s is the whole card's dependent-step throughput; ops per step counted = the family's op plus 4 glue (<code>alu</code> 5, <code>shfla</code> and <code>shflx</code> 6: shuffle plus xor, <code>mm8</code> 1 mma plus 4).</p>
 <p><strong>Apple M5 Max, Metal</strong> (<code>swiftc -O -o family-probe family-probe.swift -framework Metal</code> under <code>with-lock.sh build</code>; three runs of <code>with-lock.sh measure ./family-probe --reps 3</code>, 07:29:05 to 07:29:08 UTC, load average 7.64 / 7.59 / 7.14 before and after every run (the Apple M5 Max was loaded by other agents' builds the whole morning; the measure lock held, the GPU idle: the Apple M5 Max mines nothing), GPU start-to-end time):</p>
 <div class="tbl"><table><thead><tr><th>kernel</th><th>best ms, runs 1 / 2 / 3</th><th>best of the three, ms</th><th>G steps/s (best)</th><th>ns per step (best)</th><th>ops per step counted</th><th>step cost (ratio to <code>alu</code>, best)</th><th>bit-exact, 3 runs</th></tr></thead><tbody><tr><td>alu</td><td>5.039 / 4.918 / 4.873</td><td>4.873</td><td>881</td><td>1,190</td><td>5</td><td>1.00</td><td>yes</td></tr><tr><td>rotr (live)</td><td>5.610 / 5.533 / 5.492</td><td>5.492</td><td>782</td><td>1,341</td><td>5</td><td>1.13</td><td>yes</td></tr><tr><td>shflx (live)</td><td>4.196 / 4.259 / 4.223</td><td>4.196</td><td>1,024</td><td>1,024</td><td>6</td><td>0.86</td><td>yes</td></tr><tr><td>shl</td><td>4.120 / 4.202 / 4.119</td><td>4.119</td><td>1,043</td><td>1,006</td><td>5</td><td>0.85</td><td>yes</td></tr><tr><td>shr</td><td>4.296 / 4.194 / 4.319</td><td>4.194</td><td>1,024</td><td>1,024</td><td>5</td><td>0.86</td><td>yes</td></tr><tr><td>bfe (<code>extract_bits</code>)</td><td>3.731 / 3.805 / 3.816</td><td>3.731</td><td>1,151</td><td>911</td><td>5</td><td>0.77</td><td>yes</td></tr><tr><td>bfec (C form)</td><td>3.762 / 3.818 / 3.646</td><td>3.646</td><td>1,178</td><td>890</td><td>5</td><td>0.75</td><td>yes</td></tr><tr><td>andn</td><td>3.680 / 3.732 / 3.676</td><td>3.676</td><td>1,168</td><td>898</td><td>5</td><td>0.75</td><td>yes</td></tr><tr><td>perm</td><td>5.500 / 5.548 / 5.524</td><td>5.500</td><td>781</td><td>1,343</td><td>5</td><td>1.13</td><td>yes</td></tr><tr><td>popc</td><td>4.261 / 4.223 / 4.262</td><td>4.223</td><td>1,017</td><td>1,031</td><td>5</td><td>0.87</td><td>yes</td></tr><tr><td>clz</td><td>4.918 / 4.916 / 4.914</td><td>4.914</td><td>874</td><td>1,200</td><td>5</td><td>1.01</td><td>yes</td></tr><tr><td>sel</td><td>3.718 / 3.831 / 3.718</td><td>3.718</td><td>1,155</td><td>908</td><td>5</td><td>0.76</td><td>yes</td></tr><tr><td>shfla (lane + 3)</td><td>9.337 / 9.323 / 9.287</td><td>9.287</td><td>462</td><td>2,267</td><td>6</td><td>1.91</td><td>yes</td></tr><tr><td>dot4u (emulated)</td><td>7.818 / 8.044 / 7.925</td><td>7.818</td><td>549</td><td>1,909</td><td>5</td><td>1.60</td><td>yes</td></tr><tr><td>dot4s (emulated)</td><td>23.264 / 23.254 / 23.045</td><td>23.045</td><td>186</td><td>5,626</td><td>5</td><td>4.73</td><td>yes</td></tr></tbody></table></div>
 <p>Reading of the Apple M5 Max rows. The run-to-run spread is under 4% on every row. The dot4 rows reproduce the 5 October figures (1.6x unsigned, 4.7x signed), which is the check on the method. A step cost under 1.00 means the family's op plus the glue is cheaper than the five-op reference chain: the reference's two registers are a tighter dependency than the three-register candidate chains, and Apple's shifts, extract, andn and select each cost about what an xor costs. Three rows cost more than the reference: <code>perm</code> (1.13: no byte-permute function in MSL; the <code>uchar4</code> swizzle compiles to shifts and masks, so a byte permute is emulated on Apple at about the price of the live <code>rotr</code>), <code>clz</code> (1.01) and <code>shfla</code> (1.91: a shuffle by a computed lane index costs 2.2x the live xor shuffle on Apple, <code>simd_shuffle</code> against <code>simd_shuffle_xor</code>; the second shuffle form is the one candidate Apple pays for). <code>mm8</code> as a chain on Apple is owed (Metal 4 <code>matmul2d</code>; this toolchain is Swift 5.8 without the tensor API).</p>
-<p><strong>RTX 5090 (PC 2, 1ccfe586), CUDA</strong> (job <code>run-ca3-family-pc2-20261006</code>, a signed <code>run</code> job with <code>--stop-miners</code>, published 08:41:45Z after <code>/tmp/igneum-devnet/pc2-ca3.clear</code> (08:24:27Z) under the mkdir lock (taken 08:41:26Z, released 08:43:24Z the moment the closing report was read); ran 08:42:27Z to 08:43:03Z, done, exit 0, 36 s; <code>node tools/jobs.mjs run-ca3-family-pc2-20261006 --all</code>). The card to itself: the app had stopped the miner before the script started (<code>workers_before</code>: no CUDA compute app, the card at 847 MHz SM and 72 W), the script posted the card off through <code>api/cards</code> in both key forms (settings.json carries two NVIDIA keys, <code>nvidia:0:NVIDIA GeForce RTX 5090</code> with 8 identities and the older <code>nvidia:NVIDIA GeForce RTX 5090</code> with 2) and read the card quiet by nvidia-smi's compute-apps list and the process list after 30 s; prover off at 08:42:27Z and back on at 08:43:02Z (<code>{"ok":true}</code>, in the finally block); the cards restored to their settings. nvcc 12.8 in WSL2, <code>-arch=sm_120</code>, the source sha256 <code>1a3d07b8...0cf90d</code> equal on the Apple M5 Max, the Windows side and inside WSL. Three runs of <code>./family-probe --reps 3</code>, CUDA event time; the SM clock ramped from 862 MHz at run 1 to 2,572 MHz at run 3 (gpu_before per run; 129 W at the end), so the best of the three runs is the card's warm figure and the table carries it; the run-to-run spread of the best values is under 3% on every row except <code>shl</code> (12%: run 2 caught the ramp). Driver 610.47:</p>
+<p><strong>RTX 5090 (the RTX 5090 Windows rig, 1ccfe586), CUDA</strong> (job <code>run-ca3-family-pc2-20261006</code>, a signed <code>run</code> job with <code>--stop-miners</code>, published 08:41:45Z after <code>/tmp/igneum-devnet/pc2-ca3.clear</code> (08:24:27Z) under the mkdir lock (taken 08:41:26Z, released 08:43:24Z the moment the closing report was read); ran 08:42:27Z to 08:43:03Z, done, exit 0, 36 s; <code>node tools/jobs.mjs run-ca3-family-pc2-20261006 --all</code>). The card to itself: the app had stopped the miner before the script started (<code>workers_before</code>: no CUDA compute app, the card at 847 MHz SM and 72 W), the script posted the card off through <code>api/cards</code> in both key forms (settings.json carries two NVIDIA keys, <code>nvidia:0:NVIDIA GeForce RTX 5090</code> with 8 identities and the older <code>nvidia:NVIDIA GeForce RTX 5090</code> with 2) and read the card quiet by nvidia-smi's compute-apps list and the process list after 30 s; prover off at 08:42:27Z and back on at 08:43:02Z (<code>{"ok":true}</code>, in the finally block); the cards restored to their settings. nvcc 12.8 in WSL2, <code>-arch=sm_120</code>, the source sha256 <code>1a3d07b8...0cf90d</code> equal on the Apple M5 Max, the Windows side and inside WSL. Three runs of <code>./family-probe --reps 3</code>, CUDA event time; the SM clock ramped from 862 MHz at run 1 to 2,572 MHz at run 3 (gpu_before per run; 129 W at the end), so the best of the three runs is the card's warm figure and the table carries it; the run-to-run spread of the best values is under 3% on every row except <code>shl</code> (12%: run 2 caught the ramp). Driver 610.47:</p>
 <div class="tbl"><table><thead><tr><th>kernel</th><th>best ms, runs 1 / 2 / 3</th><th>best of the three, ms</th><th>G steps/s (best)</th><th>ns per step (best)</th><th>ops per step counted</th><th>step cost (ratio to <code>alu</code>, best)</th><th>bit-exact, 3 runs</th></tr></thead><tbody><tr><td>alu</td><td>0.553 / 0.541 / 0.553</td><td>0.541</td><td>7,941</td><td>132</td><td>5</td><td>1.00</td><td>yes</td></tr><tr><td>rotr (live)</td><td>0.729 / 0.719 / 0.715</td><td>0.715</td><td>6,005</td><td>175</td><td>5</td><td>1.32</td><td>yes</td></tr><tr><td>shflx (live)</td><td>0.808 / 0.817 / 0.817</td><td>0.808</td><td>5,315</td><td>197</td><td>6</td><td>1.49</td><td>yes</td></tr><tr><td>shl</td><td>0.687 / 0.770 / 0.696</td><td>0.687</td><td>6,253</td><td>168</td><td>5</td><td>1.27</td><td>yes</td></tr><tr><td>shr</td><td>0.698 / 0.697 / 0.691</td><td>0.691</td><td>6,212</td><td>169</td><td>5</td><td>1.28</td><td>yes</td></tr><tr><td>bfe (<code>bfe.u32</code>, inline PTX)</td><td>0.837 / 0.851 / 0.835</td><td>0.835</td><td>5,142</td><td>204</td><td>5</td><td>1.54</td><td>yes</td></tr><tr><td>bfec (C form)</td><td>0.836 / 0.837 / 0.835</td><td>0.835</td><td>5,144</td><td>204</td><td>5</td><td>1.54</td><td>yes</td></tr><tr><td>andn</td><td>0.680 / 0.700 / 0.693</td><td>0.680</td><td>6,313</td><td>166</td><td>5</td><td>1.26</td><td>yes</td></tr><tr><td>perm (<code>__byte_perm</code>)</td><td>0.706 / 0.715 / 0.718</td><td>0.706</td><td>6,084</td><td>172</td><td>5</td><td>1.30</td><td>yes</td></tr><tr><td>popc</td><td>0.819 / 0.813 / 0.835</td><td>0.813</td><td>5,283</td><td>198</td><td>5</td><td>1.50</td><td>yes</td></tr><tr><td>clz</td><td>0.897 / 0.898 / 0.884</td><td>0.884</td><td>4,856</td><td>216</td><td>5</td><td>1.63</td><td>yes</td></tr><tr><td>sel</td><td>0.723 / 0.713 / 0.729</td><td>0.713</td><td>6,024</td><td>174</td><td>5</td><td>1.32</td><td>yes</td></tr><tr><td>shfla (lane + 3)</td><td>0.845 / 0.848 / 0.829</td><td>0.829</td><td>5,179</td><td>202</td><td>6</td><td>1.53</td><td>yes</td></tr><tr><td>dot4i (<code>__dp4a</code>)</td><td>0.677 / 0.656 / 0.625</td><td>0.625</td><td>6,870</td><td>153</td><td>5</td><td>1.16</td><td>yes</td></tr><tr><td>mm8 (<code>mma.sync.m8n8k16.u8</code>, one per warp per step)</td><td>1.313 / 1.314 / 1.350</td><td>1.313</td><td>3,272</td><td>321</td><td>1 mma + 4</td><td>2.43</td><td>yes</td></tr></tbody></table></div>
 <p>Reading of the 5090 rows. Every row is bit-exact, <code>mm8</code> included, so the m8n8k16 fragment layout of the CPU reference (PTX ISA 9.4 section 9.7.16.5.3) is the layout the hardware uses. The <code>alu</code> chain reads 7,941 G steps/s here against 8,754 through OpenCL event time on 5 October: a CUDA event pair around a 0.54 ms kernel carries about 0.05 ms of launch, which also compresses every ratio toward 1 (approximate: the ratios are the card's at the 2% level, not better). On this card every candidate costs more than the reference chain, unlike Apple: the 5090 runs the two-register add-xor-rotate chain at one IMAD and one funnel shift per step, and the three-register candidate chains pay their glue. Against the live <code>rotr</code> (1.32), the candidates read: <code>andn</code> 0.95x, <code>shl</code> 0.96x, <code>shr</code> 0.97x, <code>perm</code> 0.98x, <code>sel</code> 1.00x, <code>popc</code> 1.14x, <code>shfla</code> 1.16x (the same as the live xor shuffle, 1.49: the indexed shuffle costs NVIDIA nothing extra), <code>bfe</code> 1.17x, <code>clz</code> 1.23x. <code>bfe.u32</code> and the C form cost the same to the nanosecond (0.835 ms), so the compiler emits the same code for both and no single-instruction bit-field extract is in play on this architecture (not checked by cuobjdump; the equal times are the evidence). <code>dp4a</code> reads 1.16x (1.17x on 5 October). <code>mm8</code> is the most expensive row on NVIDIA too (2.43x the reference: one tensor-core mma per warp per dependent step, latency-bound), which supports its place at the end of the reserve on the honest-card side as well as on the chip side.</p>
-<p><strong>RX 9070 XT (PC 1, ae432dc7), OpenCL</strong>: OWED. PC 1 is the maintainers' desk and not released today (the brief's rule); the OpenCL twin of the probe (<code>__builtin_amdgcn_*</code> paths for <code>v_bfe_u32</code>, <code>v_perm_b32</code>, <code>v_bcnt_u32_b32</code>, <code>v_cndmask_b32</code>, <code>ds_bpermute_b32</code>) is the next job on that card.</p>
+<p><strong>RX 9070 XT (the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT), ae432dc7), OpenCL</strong>: OWED. the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) is the maintainers' desk and not released today (the brief's rule); the OpenCL twin of the probe (<code>__builtin_amdgcn_*</code> paths for <code>v_bfe_u32</code>, <code>v_perm_b32</code>, <code>v_bcnt_u32_b32</code>, <code>v_cndmask_b32</code>, <code>ds_bpermute_b32</code>) is the next job on that card.</p>
 <p>Consequences per tier, Mac rows (the hash is latency-bound by 128 dependent DRAM reads; a family at <code>W_new</code> = 4 points is about 4% of the 64 instructions, so these per-op costs bound a family's hash-rate cost and are not hash rates; the 5% rule of 1.13.2 is argued from them, not measured, until a family is live):</p>
-<div class="tbl"><table><thead><tr><th>Tier</th><th>What the rows mean</th><th>What is being done</th></tr></thead><tbody><tr><td>Apple user (M-series laptop or desktop, the app's Metal worker)</td><td>six of the seven candidates (<code>shl</code>, <code>shr</code>, <code>bfe</code>, <code>andn</code>, <code>popc</code>, <code>sel</code>) cost at most the live <code>rotr</code> step; <code>clz</code> the same as the reference; <code>perm</code> 1.13x (emulated); <code>shfla</code> 1.91x, the only candidate over the live <code>shfl</code>'s cost by more than 2x on this card. At 4 points of 64 a 1.91x op costs under 1% of the program's ALU time, itself a small share of a latency-bound hash (approximate: argued, measured when live)</td><td>the proposed order puts <code>shfla</code> after the plain datapath families (R6), so Apple pays it last; <code>mm8</code> stays last</td></tr><tr><td>NVIDIA user (8 to 32 GB card)</td><td>every candidate is native and costs 0.95x to 1.23x the live <code>rotr</code> step (<code>andn</code>, the shifts, <code>perm</code>, <code>sel</code> under 1.0x; <code>popc</code> 1.14x; <code>shfla</code> 1.16x; <code>bfe</code> 1.17x; <code>clz</code> 1.23x); nothing on this card is emulated above a compiler sequence; at 4 points of 64 no family moves the ALU time by over 1% (argued) on a hash bound by DRAM reads</td><td>the family-live measurement at each unlock rehearsal; nothing to change in the order for NVIDIA</td></tr><tr><td>AMD user (RX 9070 XT, 16 GB)</td><td>owed: no row today</td><td>the RTX 5090 machine 1 job when the desk is free</td></tr><tr><td>A rig or a pool user</td><td>the same per-card figures; no family changes the dependent-read bound</td><td>nothing until a family is live</td></tr><tr><td>A chip</td><td>every candidate but <code>mm8</code> is a 32-bit datapath structure (barrel shifter, byte crossbar, popcount tree, 32-lane shuffle crossbar: <code>docs/plans/counter-asic-3-reserve.md</code> section 3 names them with approximate areas); none is licensable as a block the way an int8 matrix unit is</td><td>the reserve order of that document</td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>Tier</th><th>What the rows mean</th><th>What is being done</th></tr></thead><tbody><tr><td>Apple user (M-series laptop or desktop, the app's Metal worker)</td><td>six of the seven candidates (<code>shl</code>, <code>shr</code>, <code>bfe</code>, <code>andn</code>, <code>popc</code>, <code>sel</code>) cost at most the live <code>rotr</code> step; <code>clz</code> the same as the reference; <code>perm</code> 1.13x (emulated); <code>shfla</code> 1.91x, the only candidate over the live <code>shfl</code>'s cost by more than 2x on this card. At 4 points of 64 a 1.91x op costs under 1% of the program's ALU time, itself a small share of a latency-bound hash (approximate: argued, measured when live)</td><td>the proposed order puts <code>shfla</code> after the plain datapath families (R6), so Apple pays it last; <code>mm8</code> stays last</td></tr><tr><td>NVIDIA user (8 to 32 GB card)</td><td>every candidate is native and costs 0.95x to 1.23x the live <code>rotr</code> step (<code>andn</code>, the shifts, <code>perm</code>, <code>sel</code> under 1.0x; <code>popc</code> 1.14x; <code>shfla</code> 1.16x; <code>bfe</code> 1.17x; <code>clz</code> 1.23x); nothing on this card is emulated above a compiler sequence; at 4 points of 64 no family moves the ALU time by over 1% (argued) on a hash bound by DRAM reads</td><td>the family-live measurement at each unlock rehearsal; nothing to change in the order for NVIDIA</td></tr><tr><td>AMD user (RX 9070 XT, 16 GB)</td><td>owed: no row today</td><td>the the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job when the desk is free</td></tr><tr><td>A rig or a pool user</td><td>the same per-card figures; no family changes the dependent-read bound</td><td>nothing until a family is live</td></tr><tr><td>A chip</td><td>every candidate but <code>mm8</code> is a 32-bit datapath structure (barrel shifter, byte crossbar, popcount tree, 32-lane shuffle crossbar: <code>docs/plans/counter-asic-3-reserve.md</code> section 3 names them with approximate areas); none is licensable as a block the way an int8 matrix unit is</td><td>the reserve order of that document</td></tr></tbody></table></div>
 <h2 id="6-october-2026-counter-asic-3-0-gate-run-the-hash-side">6 October 2026, Counter ASIC 3.0 gate run, the hash side</h2>
 <p>Branch <code>ca3-v4-hash</code>, worker "v4-hash", on <code>ca3-coord</code> 3213ee9. The candidate class v4 <code>mx8+sh256x27</code> composed with the era as the chain composes it (<code>mx8-era&lt;hex&gt;+sh256x27</code>, generator 3), on the devnet epoch-0 and day seeds at the genesis era (<code>v4-devnet-epoch0</code>) and at the six test eras of 2.0 (<code>v4-era-0</code> to <code>v4-era-5</code>), with the class v3 control <code>mx8-devnet-epoch0</code> re-exported beside them (<code>proto-cuda/packs-ca3-v4/</code>). Gates G1, G2 and G3 of <code>docs/plans/counter-asic-2-rollout.md</code> section 7 and the pinned verifier benchmark; the evidence tables and one JSON per run in <code>docs/plans/counter-asic-3-gate/</code> (<code>hash-gates.md</code>). G4, G5 and G6 are the node's and the release's.</p>
 <p><strong>G1, bit-exact (<code>with-lock.sh run</code>, 15:49:29 to 15:50:02Z, load 6.8 to 6.7).</strong> <code>packbench --pack &lt;dir&gt; --batches 1 --batch-log2 24 --group 256</code> (Metal) and <code>igneum-bench-cl --bench-pack --pack &lt;dir&gt; --batches 1 --batch-log2 24</code> (Apple OpenCL), both built from this branch: on all eight packs the cache FNV 448274a57f508cbc PASS, the dataset head and last PASS, vectors 3 of 3 standalone and 3 of 3 in batch (Metal), 96 of 96 lanes (Apple OpenCL), and one fingerprint per pack across both harnesses. The control reproduces 2.0's 90f794dd556f7a3b (the harness fired on a known case).</p>
-<div class="tbl"><table><thead><tr><th>Pack</th><th>Class</th><th>Fingerprint 2^24 at base 0 (Metal = Apple OpenCL)</th><th>RTX 5090 (CUDA NVRTC, PC 2)</th><th>RX 9070 XT</th></tr></thead><tbody><tr><td>mx8-devnet-epoch0 (control)</td><td>mx8-erad810f22d</td><td>90f794dd556f7a3b</td><td>90f794dd556f7a3b</td><td>PC 1 job 1</td></tr><tr><td>v4-devnet-epoch0</td><td>mx8-erad810f22d+sh256x27</td><td>f410c731b6bc2d31</td><td>f410c731b6bc2d31</td><td>PC 1 job 1</td></tr><tr><td>v4-era-0</td><td>mx8-erab2ed8a89+sh256x27</td><td>b115c410e08be6ca</td><td>b115c410e08be6ca</td><td>PC 1 job 1</td></tr><tr><td>v4-era-1</td><td>mx8-era676a17fc+sh256x27</td><td>edc2b18fc67e9d1c</td><td>edc2b18fc67e9d1c</td><td>PC 1 job 1</td></tr><tr><td>v4-era-2</td><td>mx8-era843155d7+sh256x27</td><td>604ed87109570559</td><td>604ed87109570559</td><td>PC 1 job 1</td></tr><tr><td>v4-era-3</td><td>mx8-erad6367bfe+sh256x27</td><td>9541e2a41dde2ee6</td><td>9541e2a41dde2ee6</td><td>PC 1 job 1</td></tr><tr><td>v4-era-4</td><td>mx8-era4488f3ed+sh256x27</td><td>a9ffa2b67bd2e366</td><td>a9ffa2b67bd2e366</td><td>PC 1 job 1</td></tr><tr><td>v4-era-5</td><td>mx8-eraf897c84e+sh256x27</td><td>1f34e9c465945249</td><td>1f34e9c465945249</td><td>PC 1 job 1</td></tr></tbody></table></div>
-<p>The PC 2 job (run-ca3-v4-gates-pc2-20261006, <code>tools/ca3-v4/pc2-v4-gates.ps1</code>, 15:52:23 to 15:52:49Z, exit 0, 26 s, the installed 0.3.11 <code>igneum-worker-cuda.exe</code> through NVRTC on each pack's own text, beside the app's miner, the prover untouched, no card switched off: bit-exactness is not load sensitive) ran G1 (<code>--bench --batches 5 --batch-log2 24</code>) and G2 on all eight packs in one job. The intake's report keeps the last 200 KB of job.log and the 8 x 1,024 G2 found lines filled it; the G1 lines came home through a collect whose command filters job.log (collect-ca3-v4-g1only-20261006, 16:12Z): self-test PASS on every pack, every fingerprint equal to the Apple M5 Max's (the column above), NVRTC 180 to 274 ms per pack, the 1 GiB build 38 to 45 ms. G1 is GREEN on NVIDIA and Apple; AMD is PC 1 job 1.</p>
-<p><strong>G2, the verifier exact on 1,024 hashes per card (<code>with-lock.sh run</code>, 15:53:54 to 15:54:22Z, load 6.8 to 8.9).</strong> One serve-mode job per card and pack, <code>job g2 00..01 ffffffffffffffff 0 1024 &lt;epoch&gt; &lt;day&gt; class=v3 era=&lt;hex&gt;</code> (Metal after <code>prepare &lt;epoch&gt; &lt;day&gt; &lt;pack&gt; class=v3 era=&lt;hex&gt;</code>), every nonce a found line, re-hashed with <code>igneum-pow hash-bound --prehash 00..01 --nonce 0 --count 1024</code> on the same pack (<code>--count</code> ported from ca2-era). Metal 1,024 of 1,024 on all eight packs; Apple OpenCL 1,024 of 1,024 on all eight; RTX 5090 (<code>igneum-worker-cuda.exe --serve --pack &lt;dir&gt; --race off</code>, the same job) 1,024 of 1,024 on all eight packs, every found line equal to the Apple M5 Max's verifier; RX 9070 XT: PC 1 job 1. G2 is GREEN on NVIDIA and Apple.</p>
+<div class="tbl"><table><thead><tr><th>Pack</th><th>Class</th><th>Fingerprint 2^24 at base 0 (Metal = Apple OpenCL)</th><th>RTX 5090 (CUDA NVRTC, the RTX 5090 Windows rig)</th><th>RX 9070 XT</th></tr></thead><tbody><tr><td>mx8-devnet-epoch0 (control)</td><td>mx8-erad810f22d</td><td>90f794dd556f7a3b</td><td>90f794dd556f7a3b</td><td>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job 1</td></tr><tr><td>v4-devnet-epoch0</td><td>mx8-erad810f22d+sh256x27</td><td>f410c731b6bc2d31</td><td>f410c731b6bc2d31</td><td>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job 1</td></tr><tr><td>v4-era-0</td><td>mx8-erab2ed8a89+sh256x27</td><td>b115c410e08be6ca</td><td>b115c410e08be6ca</td><td>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job 1</td></tr><tr><td>v4-era-1</td><td>mx8-era676a17fc+sh256x27</td><td>edc2b18fc67e9d1c</td><td>edc2b18fc67e9d1c</td><td>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job 1</td></tr><tr><td>v4-era-2</td><td>mx8-era843155d7+sh256x27</td><td>604ed87109570559</td><td>604ed87109570559</td><td>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job 1</td></tr><tr><td>v4-era-3</td><td>mx8-erad6367bfe+sh256x27</td><td>9541e2a41dde2ee6</td><td>9541e2a41dde2ee6</td><td>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job 1</td></tr><tr><td>v4-era-4</td><td>mx8-era4488f3ed+sh256x27</td><td>a9ffa2b67bd2e366</td><td>a9ffa2b67bd2e366</td><td>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job 1</td></tr><tr><td>v4-era-5</td><td>mx8-eraf897c84e+sh256x27</td><td>1f34e9c465945249</td><td>1f34e9c465945249</td><td>the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job 1</td></tr></tbody></table></div>
+<p>The the RTX 5090 Windows rig job (run-ca3-v4-gates-pc2-20261006, <code>tools/ca3-v4/pc2-v4-gates.ps1</code>, 15:52:23 to 15:52:49Z, exit 0, 26 s, the installed 0.3.11 <code>igneum-worker-cuda.exe</code> through NVRTC on each pack's own text, beside the app's miner, the prover untouched, no card switched off: bit-exactness is not load sensitive) ran G1 (<code>--bench --batches 5 --batch-log2 24</code>) and G2 on all eight packs in one job. The intake's report keeps the last 200 KB of job.log and the 8 x 1,024 G2 found lines filled it; the G1 lines came home through a collect whose command filters job.log (collect-ca3-v4-g1only-20261006, 16:12Z): self-test PASS on every pack, every fingerprint equal to the Apple M5 Max's (the column above), NVRTC 180 to 274 ms per pack, the 1 GiB build 38 to 45 ms. G1 is GREEN on NVIDIA and Apple; AMD is the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job 1.</p>
+<p><strong>G2, the verifier exact on 1,024 hashes per card (<code>with-lock.sh run</code>, 15:53:54 to 15:54:22Z, load 6.8 to 8.9).</strong> One serve-mode job per card and pack, <code>job g2 00..01 ffffffffffffffff 0 1024 &lt;epoch&gt; &lt;day&gt; class=v3 era=&lt;hex&gt;</code> (Metal after <code>prepare &lt;epoch&gt; &lt;day&gt; &lt;pack&gt; class=v3 era=&lt;hex&gt;</code>), every nonce a found line, re-hashed with <code>igneum-pow hash-bound --prehash 00..01 --nonce 0 --count 1024</code> on the same pack (<code>--count</code> ported from ca2-era). Metal 1,024 of 1,024 on all eight packs; Apple OpenCL 1,024 of 1,024 on all eight; RTX 5090 (<code>igneum-worker-cuda.exe --serve --pack &lt;dir&gt; --race off</code>, the same job) 1,024 of 1,024 on all eight packs, every found line equal to the Apple M5 Max's verifier; RX 9070 XT: the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job 1. G2 is GREEN on NVIDIA and Apple.</p>
 <p><strong>G3, the soundness suite on the class.</strong> <code>cargo test -j4 --release</code> in igneum-pow (<code>with-lock.sh build</code>, nice 19, cargo 1.99.0, 15:49:29 to 15:50:01Z, load 6.8): 59 + 7 + 4 + 19 + 7 = 96 of 96. The mixer harness now takes the class (<code>IGNEUM_MIXER_CLASS</code>) in the fuzz, the stats and the determinism test, an era to compose (<code>IGNEUM_MIXER_ERA=igneum-era-test/&lt;n&gt;</code>), and a shadow contract (S instructions, no load, every field in range, the base program equal to the class's without the shadow draw for draw); the edge test is the dataset's alone and takes no class. On <code>mx8+sh256x27</code> (15:54:25 to 15:55:39Z, load 9.1): fuzz 200 programs, 800 units, 200 in the top 256 nonces; stats avalanche 49.96 and 49.98 percent, worst bit z 2.65 and 3.56, 0 duplicates (v2 49.87 and 49.98, z 2.25 and 2.30); edge pass; determinism two builds equal and equal to the pinned <code>packs-ca3-shadow/sh256x27</code>. With era test/0 composed (50 programs, 200 units, 15:56:35 to 15:57:03Z, load 12.6): 4 of 4, avalanche 50.03 and 50.11, z 2.65 and 3.76. The GPU fuzz on the written packs (<code>packbench --batches 1 --batch-log2 9 --batch-base 4294967040</code>, every tenth on Apple OpenCL <code>--batch-log2 10</code>, <code>with-lock.sh run</code>, 15:55:42 to 15:58:21Z, load 11.3 to 12.3): Metal 200 of 200 and 50 of 50, Apple OpenCL 20 of 20 and 5 of 5. Known-failed case: the first era-composed run FAILED (1 failed, 15:55:42Z) on <code>assert_ne!(p.program_id(), base.program_id())</code>, which is the finding below.</p>
 <p><strong>The verifier (<code>with-lock.sh measure</code>, one session, 15:54:27 to 15:54:31Z, load 9.1 to 9.4; one core on a loaded box, within 3 percent of the quiet figures).</strong> <code>igneum-pow bench --seed igneum-genesis --day 2026-10-03 --warps 20 --class &lt;c&gt;</code>, two rounds:</p>
 <div class="tbl"><table><thead><tr><th>Class</th><th>ms per 32-lane warp, avg of 20 (round 1 / round 2)</th><th>Worst cold single run</th><th>Against x8</th><th>2019-class core by the 2.5x rule (approximate)</th><th>Gate</th></tr></thead><tbody><tr><td>v2</td><td>0.655 / 0.648</td><td>0.674</td><td></td><td>about 1.6 ms</td><td>10 ms</td></tr><tr><td>x8 (mx8)</td><td>2.149 / 2.120</td><td>2.526</td><td>1</td><td>about 5.4 ms</td><td>10 ms</td></tr><tr><td>mx8+sh256x27</td><td>2.326 / 2.307</td><td>2.559</td><td>+0.18 ms, +8.5 percent</td><td>about 5.8 ms (worst cold about 6.4)</td><td>10 ms, about 4 ms spare</td></tr></tbody></table></div>
 <p>Per tier: 73 microseconds per hash on an M5 Max core, so a pool checks about 13,700 shares per second per such core and about 5,500 per 2019-class core (approximate); a node on any tier verifies a warp inside the gate; no tier is slower than under x8 by more than 8.5 percent.</p>
-<p><strong>Findings.</strong> (1) Under the chain's path a generator-3 program's id is <code>program_id(3, seed, attempt)</code>, class-independent: the seven exported packs carry 73bcbfe8ccf988f1 with and without the shadow, and 50 of 50 fuzz seeds agree. A node and a miner could agree on the id while running different classes, and 2.0's G4 check <code>program_ids_differ_across_the_switch</code> would not fire across a v4 activation: the v4 seam (G4, G6) must stamp its own generator version or put the class in the id. The hash needs nothing for it; the cut must not go without it. (2) The report cap: a G2 playbook that prints 8,192 found lines loses its own G1 lines; the tooling fix is a found-lines file plus a count and digest on stdout, with a collect. Owed: AMD (PC 1 job 1), the 2019-class core (O-1.14).</p>
+<p><strong>Findings.</strong> (1) Under the chain's path a generator-3 program's id is <code>program_id(3, seed, attempt)</code>, class-independent: the seven exported packs carry 73bcbfe8ccf988f1 with and without the shadow, and 50 of 50 fuzz seeds agree. A node and a miner could agree on the id while running different classes, and 2.0's G4 check <code>program_ids_differ_across_the_switch</code> would not fire across a v4 activation: the v4 seam (G4, G6) must stamp its own generator version or put the class in the id. The hash needs nothing for it; the cut must not go without it. (2) The report cap: a G2 playbook that prints 8,192 found lines loses its own G1 lines; the tooling fix is a found-lines file plus a count and digest on stdout, with a collect. Owed: AMD (the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job 1), the 2019-class core (O-1.14).</p>
 <h3 id="6-october-2026-00-4xz-the-empty-api-state-reply-proving-v1-branch">6 October 2026, 00:4xZ, the empty <code>/api/state</code> reply (proving v1 branch)</h3>
-<p>Reported by the aggregation-cost agent: PC 2's <code>/api/state</code> answered <code>{}</code> (2 bytes) at 22:22Z, 22:41Z and 00:18Z. Not measured on PC 2 (no job); derived from the app source and node 1's RPC, read-only on the Apple M5 Max:</p>
+<p>Reported by the aggregation-cost agent: the RTX 5090 Windows rig's <code>/api/state</code> answered <code>{}</code> (2 bytes) at 22:22Z, 22:41Z and 00:18Z. Not measured on the RTX 5090 Windows rig (no job); derived from the app source and node 1's RPC, read-only on the Apple M5 Max:</p>
 <div class="tbl"><table><thead><tr><th>Figure</th><th>Value</th><th>Source</th></tr></thead><tbody><tr><td>Paid shards, devnet, all provers</td><td>663</td><td><code>curl -s 127.0.0.1:26790 -d '{"jsonrpc":"2.0","id":1,"method":"igneum_getProvingStatus","params":[]}'</code> at tip DAA 0x22caf</td></tr><tr><td>Paid wei, all provers</td><td>0x2c2961a69990745400 = 814.64 IGN</td><td>same call</td></tr><tr><td>Average per paid shard</td><td>1.23 IGN (approximate: the mean over 663)</td><td>814.64 / 663</td></tr><tr><td>u64::MAX in IGN</td><td>18.45</td><td>2^64 - 1 over 1e18</td></tr><tr><td>Paid shards per app start before the reply empties</td><td>15 (approximate: at the mean payout)</td><td>18.45 / 1.23</td></tr></tbody></table></div>
 <p>Cause: <code>ProvingState.paid_wei: u128</code> and serde_json <code>to_value</code> (1.0.151, <code>value/ser.rs</code> <code>serialize_u128</code>: u64 range or an error); the error became <code>json!({})</code>. Fix: the field serialises as a decimal string; <code>state_json</code> logs the error once. Test <code>a_paid_total_over_u64_max_still_serialises_the_whole_state</code> (<code>cargo test --offline -q paid_wei</code>, 1 passed).</p>
 <div class="tbl"><table><thead><tr><th>The fast-time 3-node harness (<code>tools/proving-v1/net.mjs</code>, 29950+, suffix 956, every node in trust mode, three vmine voters, v0 at DAA 60, v1 at DAA 120, 4 blocks a segment, unproven after 60 DAA, a tenth to the aggregator; fork b177718e built on this Mac)</th><th>run 2, 19:13:01Z to 19:16:19Z, under the run lock: PASSED, 21 checks in 197.3 s (<code>tools/proving-v1/report-2026-10-05.json</code>). v1 start = chain block 119 on all three nodes; the native statement identical on all three. Known-finished: segment 119..122's fresh-chain record submitted to n1 at t=131.1 s, relayed, verified (trust) and PAID on n0 1.0 s later at chain block 129, 253,611,648,000,000,000 wei = a tenth of the four credits, the same on every node, the payout address holding it. Chain rule: segment 123..126's fresh-chain record refused ("does not chain to segment 119..122 ... proven (record paid at chain block 129)"), the continuing one (chain_len 8) accepted and paid. Known-failed: segment 127..130 left without a record: a fresh-chain record for 131..134 refused while 127..130 was pending ("pending until DAA 191"); at DAA 192 the status read unproven, a late record for 127..130 refused ("unproven: carried after the deadline"), the fresh-chain record for 131..134 accepted and paid with chain_len 4; <code>segmentsInWindow</code> proven 3, unproven 1. The shard side: a v1 shard's <code>shardWei</code> = 90% of its block's credit. Run 1 (19:10Z) failed in its own tooling (the signer's argument order), fixed</th></tr></thead><tbody></tbody></table></div>
 <h2 id="5-october-2026-night-aggregation-cost-on-the-rtx-5090-what-a-per-block-aggregation-spends-and-what-each-lever-gives-proving-engineer-agg-cost">5 October 2026 (night), aggregation cost on the RTX 5090: what a per-block aggregation spends and what each lever gives (proving engineer, agg-cost)</h2>
-<p>the maintainers, 5 October 2026: "fix everything else in the numbers tonight". The number under test: the chained segment aggregation cost 9.6 to 9.7 s a block on PC 2's 5090 while the card mined (<code>chain-pc2-pv1c</code>, the entry above), 2.2 s on 4 October with the card to itself. Target: under 3 s a block, the miner's slowdown of the prover under 1.5x, the proof statement unchanged. Branch <code>agg-cost</code> (worktree <code>igneum-wt-agg-cost</code>, from <code>proving-v1</code> 219517f). Host changes (statement untouched, <code>elf/</code> untouched): the aggregation's stdin build timed apart from the prove call, the deferred-proof count and the SP1 knobs in the RESULT lines, <code>--mode chain --save-shards</code> (every shard's compressed proof written next to the results, so <code>--mode aggregate</code> re-runs the same proofs under other settings). Jobs: <code>agg-cost-pc2-1</code> (21:01:20Z to 21:25:11Z, <code>tools/proving-v1/pc2-agg-cost.ps1</code>, the package <code>igneum-prove-wsl2-aggcost.zip</code> fetched by <code>fetch-prove-aggcost</code> 20:55:39Z, built in WSL2 against the live target dir in 5 s, installed to <code>&lt;server path&gt;</code>, the live <code>&lt;server path&gt;</code> untouched, <code>--mode id</code> the pinned pair) and <code>agg-cost-pc2-2</code> (21:34:00Z, the same script). The live prover was switched OFF for the runs (its sp1-gpu-server would otherwise be shared through <code>/tmp/sp1-cuda-0.sock</code> and carry its own environment; <code>gpu_server_before running=0</code>) and ON again at the end. Fixtures: four consecutive live blocks cut from PC 2's own node (86165..86168 at tip 86195, one empty shard each, every one MATCHES natively), the same four for every phase of job 1. App 0.3.9 on PC 2 throughout.</p>
+<p>the maintainers, 5 October 2026: "fix everything else in the numbers tonight". The number under test: the chained segment aggregation cost 9.6 to 9.7 s a block on the RTX 5090 Windows rig's 5090 while the card mined (<code>chain-pc2-pv1c</code>, the entry above), 2.2 s on 4 October with the card to itself. Target: under 3 s a block, the miner's slowdown of the prover under 1.5x, the proof statement unchanged. Branch <code>agg-cost</code> (worktree <code>igneum-wt-agg-cost</code>, from <code>proving-v1</code> 219517f). Host changes (statement untouched, <code>elf/</code> untouched): the aggregation's stdin build timed apart from the prove call, the deferred-proof count and the SP1 knobs in the RESULT lines, <code>--mode chain --save-shards</code> (every shard's compressed proof written next to the results, so <code>--mode aggregate</code> re-runs the same proofs under other settings). Jobs: <code>agg-cost-pc2-1</code> (21:01:20Z to 21:25:11Z, <code>tools/proving-v1/pc2-agg-cost.ps1</code>, the package <code>igneum-prove-wsl2-aggcost.zip</code> fetched by <code>fetch-prove-aggcost</code> 20:55:39Z, built in WSL2 against the live target dir in 5 s, installed to <code>&lt;server path&gt;</code>, the live <code>&lt;server path&gt;</code> untouched, <code>--mode id</code> the pinned pair) and <code>agg-cost-pc2-2</code> (21:34:00Z, the same script). The live prover was switched OFF for the runs (its sp1-gpu-server would otherwise be shared through <code>/tmp/sp1-cuda-0.sock</code> and carry its own environment; <code>gpu_server_before running=0</code>) and ON again at the end. Fixtures: four consecutive live blocks cut from the RTX 5090 Windows rig's own node (86165..86168 at tip 86195, one empty shard each, every one MATCHES natively), the same four for every phase of job 1. App 0.3.9 on the RTX 5090 Windows rig throughout.</p>
 <p>Known-finished case of the host changes before the GPU (this Mac, CPU, run lock, 20:41Z to 20:44Z): <code>--mode chain</code> over <code>fixtures/chain/block-81046.json</code> with <code>--save-shards</code> (shard 38.5 s, aggregate 43.4 s, the proof file written), then <code>--mode aggregate</code> over that saved shard proof with <code>SP1_WORKER_VERIFY_INTERMEDIATES=false</code> (46.6 s, the same statement <code>0x3dedb8ea...</code>), <code>--mode verify-segment</code> VERIFIED in 0.027 s; known-failed: a wrong statement NOT VERIFIED in 0.027 s. Unit tests: <code>cargo test --release -p igneum-prove-core -p igneum-prove-host</code>: core 8 passed, host 9 passed and 1 ignored (build lock, 20:53Z).</p>
 <h3 id="lever-1-the-profile-where-a-per-block-aggregation-goes">Lever 1, the profile: where a per-block aggregation goes</h3>
 <div class="tbl"><table><thead><tr><th>What</th><th>Measured (job <code>agg-cost-pc2-1</code>)</th></tr></thead><tbody><tr><td>The host's own share of an aggregation (the stdin build: the AggInput, the proof clones into the request)</td><td>0.000 s on every block, mining or idle (the <code>stdin</code> field of every <code>RESULT chain block</code> line): everything is inside the one <code>prove().compressed()</code> call to the GPU server</td></tr><tr><td>The GPU server's log at <code>RUST_LOG=info</code> (phase A0, the same chain of 1, stderr captured)</td><td>1 line: sp1-gpu-server 6.8.1 prints no spans and no timings, so the step costs below are read from the deferred-proof count, not from a profiler</td></tr><tr><td>Aggregation with 1 deferred proof (the first block, no previous proof) against 2 (every chained block), the card mining</td><td>7.9 s against 9.6, 9.6, 9.8 s: the second deferred proof costs 1.7 to 1.9 s under the miner</td></tr><tr><td>The same, the miners paused (phase C, the same fixtures, 21:05:51Z)</td><td>1.7 s against 2.1, 2.1, 2.2 s: the second deferred proof costs 0.4 to 0.5 s alone</td></tr><tr><td>The shard proof of an empty shard</td><td>7.4 to 7.8 s mining, 1.9 to 2.2 s alone</td></tr><tr><td>A whole block (one empty shard plus its aggregation)</td><td>17.1 to 17.3 s mining (end to end 67.4 s for 4 blocks), 4.1 s alone (16.4 s for 4)</td></tr><tr><td>GPU utilisation over the phase (1-s <code>nvidia-smi</code> samples)</td><td>93.9% mining (80 samples, the miner's), 15.8% alone (32 samples): the prover alone keeps the card busy a sixth of the time. Its work is short GPU bursts between CPU phases (the executor, the witness and recursion-program generation run on the CPU inside the server), and the miner's kernels fill the gaps</td></tr><tr><td>GPU memory peak</td><td>16,195 MiB mining (the miner's 3.4 GB resident), 14,483 MiB alone</td></tr><tr><td>The slowdown by the miner, same fixtures, same host, 2 min apart</td><td>shards 3.6x, the first aggregation 4.6x, a chained aggregation 4.5x, a block 4.2x</td></tr><tr><td>Setup per host process (client plus two key setups)</td><td>13.0 to 15.7 s, mining or not</td></tr></tbody></table></div>
@@ -761,19 +718,19 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <p>Reading. A batch fold halves to quarters the per-block aggregation but changes the aggregator's statement (<code>AggInput</code> carries one block's shards and the guest asserts one block hash), so it is a new pinned guest and a new program id: a provers-off drain and a rollout (proving/README.md, pinned guests). It does not reach 3 s on a mining card by itself (2.8 s at K = 8 is on the line), and the shard proof beside it stays 7.4 s a block on a mining card. The lever that moves both is the card's other job, lever 4. A tree fold gains nothing here because the fixed part of a call (the core shard and the lift) dominates the per-proof part 4 to 1.</p>
 <h3 id="levers-3-and-4-two-streams-and-the-miner-s-kernels-job-agg-cost-pc2-2-and-the-re-run">Levers 3 and 4, two streams and the miner's kernels (job <code>agg-cost-pc2-2</code> and the re-run)</h3>
 <p>Job <code>agg-cost-pc2-2</code> (21:34:00Z to 21:49:22Z) ran with the 5090 idle throughout: job 1's <code>/api/resume</code> had left the worker off (below), so the rows that needed the miner (the batch-log2 curve, the two streams beside the miner, the time-slice policy, the chosen combination) are void and wait for a re-run; the idle rows are measured.</p>
-<div class="tbl"><table><thead><tr><th>What</th><th>Measured (job <code>agg-cost-pc2-2</code>, card idle)</th></tr></thead><tbody><tr><td>Aggregate-only over job 1's four saved shard proofs (<code>--mode aggregate --proofs b1;b2;b3;b4 --parent ...</code>, one process, the same statement <code>0x3a995f24...</code> as the chain run), default knobs (phase B0, then C1)</td><td>1.7, 2.0, 2.0, 2.0 s (1, 2, 2, 2 deferred proofs), 8.1 s for four; C1: 1.8, 2.1, 2.1, 2.1 s, 8.3 s</td></tr><tr><td>The same with <code>SP1_WORKER_VERIFY_INTERMEDIATES=false</code> (phase B; the server inherits the host's environment, the knob printed in the <code>sp1 knobs</code> line)</td><td>1.7, 2.0, 2.0, 2.0 s, 7.8 s for four: no gain (0.3 s over four, inside the run-to-run spread of 0.2 s). The knobs that change the recursion shape (<code>SP1_WORKER_MAX_COMPOSE_ARITY</code>, <code>MAX_REDUCE_ARITY</code>) were not tried: a different shape is a different recursion key set and the pinned verifier would refuse the proof</td></tr><tr><td>A 4-deferred aggregation (block-344-shards4, four prototype shards of 6.75 M pgas, phase C2)</td><td>shards 42.8 s (10.7 s each, the 4 October 10.2 to 10.7 s), aggregation 2.4 s with 4 deferred proofs; GPU peak 28,402 MiB (the prototype shard's 28.3 GB), utilisation 27.7% over the phase. With 1.7 s at one deferred proof and 2.0 to 2.1 s at two: 0.25 s per further deferred proof alone, so a batch of 8 would cost about 3.5 s a call, 0.45 s a block (estimate, the pinned statement forbids it)</td></tr><tr><td>Two host processes at once on the one card (phase G0: chains of 2 on disjoint blocks, started 2 s apart)</td><td>both connected to ONE sp1-gpu-server (the first process's child; the socket is per device, <code>/tmp/sp1-cuda-0.sock</code>): process 1 shard 2.2 and 3.5 s, aggregation 3.0 and 4.0 s (12.9 s for 2 blocks against 8.2 s alone); process 2 shard 3.3 s, aggregation 3.6 s, then its second block died with <code>CudaClientError: Failed to read the response: early eof</code> when process 1 finished and its server exited. GPU 24,911 MiB, utilisation 12.4% and 13.1%. Two streams through SP1 6.8.1's server are serialised on one socket and the second dies with the first: no throughput gain (3 blocks in 33 s against 4 in 16.4 s) and a failure mode; lever 3 is closed on this SP1 version</td></tr><tr><td>Job 3 (<code>agg-cost-pc2-3</code>, 22:41:15Z, app 0.3.10, the same script with the socket rule and a card switch): phase A, the app's 5090 miner at 117.0 MH/s mean (n 3, STATUS lines 22:44:45Z to 22:46:11Z), four fresh live blocks 90896..90899</td><td>shards 8.0, 7.8, 7.6, 7.8 s; aggregations 8.0 s (1 deferred), 10.0, 10.0, 10.0 s (2 deferred); 69.5 s for four, 17.8 s a block; GPU 93.8%, peak 16,245 MiB: the job-1 baseline reproduced 100 min later on other blocks</td></tr><tr><td>Job 3's own-miner phases</td><td>void: the state reads came back empty (the class below), the card switch did nothing, phase D launched my miner beside the app's (the app's dropped to 62.2 MH/s, mine read 60.6 MH/s), then PC 2's app restarted at 23:03:30Z and the job died with it; no curve point</td></tr><tr><td>The GPU time-slice policy (<code>nvidia-smi compute-policy --set-timeslice</code>, the restore job <code>agg-cost-restore-1</code>, 23:16:53Z)</td><td>"Not Supported" on PC 2 (RTX 5090, driver 13.3, the Windows nvidia-smi, not elevated): the lever is closed on this driver; an elevated try is not worth a slot, the error is the driver's, not a permission's</td></tr><tr><td>The own-miner phases of job 2</td><td>void: no 5090 miner was running to copy the command line from (the worker off since 21:25Z)</td></tr></tbody></table></div>
-<p>The curve, job <code>agg-cost-pc2-6</code> (01:12:09Z to 01:24:14Z, app 0.3.11, PC 2 to itself; every phase closed before the next job landed on PC 2 at 01:24:21Z). The app's 5090 miner switched off through <code>/api/cards</code> (the keys from <code>settings.json</code>; the worker was still alive after 120 s, <code>/api/pause</code> as the fallback stopped it in 5 s), then the job's OWN miner on the 5090 with the app's command line (<code>igneum-miner mine ... --worker igneum-worker-cuda.exe --identities 8 --worker-args "--device 0 --pack packs\devnet --race off [--batch-log2 B]"</code>, the base variant, its STATUS line every 10 s), the same four live blocks 96556..96559 (one empty shard each) proven by <code>--mode chain</code> under it, the miner's rate from its own <code>now=</code> field (the first two lines skipped). <code>--batch-log2 B</code> sets the worker's nonces per kernel launch (2^B; 22 is the worker's default, 4,194,304 nonces, about 35 ms a launch at 120 MH/s; <code>proto-cuda/nvrtc/worker.cpp</code>).</p>
+<div class="tbl"><table><thead><tr><th>What</th><th>Measured (job <code>agg-cost-pc2-2</code>, card idle)</th></tr></thead><tbody><tr><td>Aggregate-only over job 1's four saved shard proofs (<code>--mode aggregate --proofs b1;b2;b3;b4 --parent ...</code>, one process, the same statement <code>0x3a995f24...</code> as the chain run), default knobs (phase B0, then C1)</td><td>1.7, 2.0, 2.0, 2.0 s (1, 2, 2, 2 deferred proofs), 8.1 s for four; C1: 1.8, 2.1, 2.1, 2.1 s, 8.3 s</td></tr><tr><td>The same with <code>SP1_WORKER_VERIFY_INTERMEDIATES=false</code> (phase B; the server inherits the host's environment, the knob printed in the <code>sp1 knobs</code> line)</td><td>1.7, 2.0, 2.0, 2.0 s, 7.8 s for four: no gain (0.3 s over four, inside the run-to-run spread of 0.2 s). The knobs that change the recursion shape (<code>SP1_WORKER_MAX_COMPOSE_ARITY</code>, <code>MAX_REDUCE_ARITY</code>) were not tried: a different shape is a different recursion key set and the pinned verifier would refuse the proof</td></tr><tr><td>A 4-deferred aggregation (block-344-shards4, four prototype shards of 6.75 M pgas, phase C2)</td><td>shards 42.8 s (10.7 s each, the 4 October 10.2 to 10.7 s), aggregation 2.4 s with 4 deferred proofs; GPU peak 28,402 MiB (the prototype shard's 28.3 GB), utilisation 27.7% over the phase. With 1.7 s at one deferred proof and 2.0 to 2.1 s at two: 0.25 s per further deferred proof alone, so a batch of 8 would cost about 3.5 s a call, 0.45 s a block (estimate, the pinned statement forbids it)</td></tr><tr><td>Two host processes at once on the one card (phase G0: chains of 2 on disjoint blocks, started 2 s apart)</td><td>both connected to ONE sp1-gpu-server (the first process's child; the socket is per device, <code>/tmp/sp1-cuda-0.sock</code>): process 1 shard 2.2 and 3.5 s, aggregation 3.0 and 4.0 s (12.9 s for 2 blocks against 8.2 s alone); process 2 shard 3.3 s, aggregation 3.6 s, then its second block died with <code>CudaClientError: Failed to read the response: early eof</code> when process 1 finished and its server exited. GPU 24,911 MiB, utilisation 12.4% and 13.1%. Two streams through SP1 6.8.1's server are serialised on one socket and the second dies with the first: no throughput gain (3 blocks in 33 s against 4 in 16.4 s) and a failure mode; lever 3 is closed on this SP1 version</td></tr><tr><td>Job 3 (<code>agg-cost-pc2-3</code>, 22:41:15Z, app 0.3.10, the same script with the socket rule and a card switch): phase A, the app's 5090 miner at 117.0 MH/s mean (n 3, STATUS lines 22:44:45Z to 22:46:11Z), four fresh live blocks 90896..90899</td><td>shards 8.0, 7.8, 7.6, 7.8 s; aggregations 8.0 s (1 deferred), 10.0, 10.0, 10.0 s (2 deferred); 69.5 s for four, 17.8 s a block; GPU 93.8%, peak 16,245 MiB: the job-1 baseline reproduced 100 min later on other blocks</td></tr><tr><td>Job 3's own-miner phases</td><td>void: the state reads came back empty (the class below), the card switch did nothing, phase D launched my miner beside the app's (the app's dropped to 62.2 MH/s, mine read 60.6 MH/s), then the RTX 5090 Windows rig's app restarted at 23:03:30Z and the job died with it; no curve point</td></tr><tr><td>The GPU time-slice policy (<code>nvidia-smi compute-policy --set-timeslice</code>, the restore job <code>agg-cost-restore-1</code>, 23:16:53Z)</td><td>"Not Supported" on the RTX 5090 Windows rig (RTX 5090, driver 13.3, the Windows nvidia-smi, not elevated): the lever is closed on this driver; an elevated try is not worth a slot, the error is the driver's, not a permission's</td></tr><tr><td>The own-miner phases of job 2</td><td>void: no 5090 miner was running to copy the command line from (the worker off since 21:25Z)</td></tr></tbody></table></div>
+<p>The curve, job <code>agg-cost-pc2-6</code> (01:12:09Z to 01:24:14Z, app 0.3.11, the RTX 5090 Windows rig to itself; every phase closed before the next job landed on the RTX 5090 Windows rig at 01:24:21Z). The app's 5090 miner switched off through <code>/api/cards</code> (the keys from <code>settings.json</code>; the worker was still alive after 120 s, <code>/api/pause</code> as the fallback stopped it in 5 s), then the job's OWN miner on the 5090 with the app's command line (<code>igneum-miner mine ... --worker igneum-worker-cuda.exe --identities 8 --worker-args "--device 0 --pack packs\devnet --race off [--batch-log2 B]"</code>, the base variant, its STATUS line every 10 s), the same four live blocks 96556..96559 (one empty shard each) proven by <code>--mode chain</code> under it, the miner's rate from its own <code>now=</code> field (the first two lines skipped). <code>--batch-log2 B</code> sets the worker's nonces per kernel launch (2^B; 22 is the worker's default, 4,194,304 nonces, about 35 ms a launch at 120 MH/s; <code>proto-cuda/nvrtc/worker.cpp</code>).</p>
 <div class="tbl"><table><thead><tr><th>batch-log2</th><th>Shard proof (4, s)</th><th>Aggregation (1 deferred, then 2) (s)</th><th>A block (s)</th><th>GPU util. (%)</th><th>GPU peak (MiB)</th><th>Own miner (MH/s wall, n)</th><th>Against the card alone (4.1 s a block)</th></tr></thead><tbody><tr><td>22 (the default), phase D</td><td>8.1, 7.8, 7.9, 7.8</td><td>8.4; 10.3, 10.0, 10.4</td><td>18.1</td><td>95.5</td><td>16,580</td><td>103.9 (9)</td><td>4.4x</td></tr><tr><td>20, E20</td><td>8.1, 7.8, 7.8, 7.8</td><td>8.4; 10.3, 10.1, 10.1</td><td>18.0</td><td>94.9</td><td>16,461</td><td>103.7 (8)</td><td>4.4x</td></tr><tr><td>18, E18</td><td>7.0, 6.7, 6.7, 6.7</td><td>7.2; 8.9, 8.8, 8.8</td><td>15.6</td><td>91.5</td><td>16,487</td><td>99.3 (7), minus 4.4%</td><td>3.8x</td></tr><tr><td>16, E16</td><td>5.1, 4.9, 4.9, 4.9</td><td>5.0; 6.1, 6.2, 6.2</td><td>11.1</td><td>85.3</td><td>16,519</td><td>83.8 (6), minus 19%</td><td>2.7x</td></tr><tr><td>16 again, phase H (the job's own choice: the shortest chain)</td><td>5.0, 4.9, 4.8, 4.9</td><td>4.9; 6.1, 6.2, 6.2</td><td>11.1</td><td>85.7</td><td>16,487</td><td>84.0 (6)</td><td>2.7x</td></tr></tbody></table></div>
-<p>Reading. Between 2^22 and 2^20 nothing moves: the card's time-slice scheduler alternates the two contexts whatever the kernel length above a few milliseconds. From 2^18 down the miner's launches get short enough (about 2 ms at 2^18, 0.5 ms at 2^16) that the prover's bursts find the card sooner, and the miner pays in launch overhead and idle gaps: at 2^16 the prover runs 1.6x faster (18.1 to 11.1 s a block, the chained aggregation 10.2 to 6.2 s) for a fifth of the hash rate, and it is still 2.7x slower than on a card to itself. The trade is about 1 MH/s per 0.37 s of block time at the 2^16 point, and the 3-s aggregation and the 1.5x slowdown are not reachable on a mining card by the kernel length; a 2^14 point (approximate, extrapolated) would be about 8 s a block at about 65 MH/s. The phase E0 (a 4-deferred aggregation under the miner) failed in 0.1 s: its proof paths pointed at <code>/</code> where job 1 had left its shard proofs, but job 2's block-344 proofs sit in job 2's own folder (<code>$JOB</code> was exported from job 2 on); the 4-deferred cost under the miner stays an estimate (lever 2 above). The app's own 5090 miner ran at 117 MH/s (job 3, 22:44Z) and 110 to 129 MH/s (its STATUS lines at 01:10Z) with the prover beside it, against my miner's 104 MH/s at the default batch: my miner runs the base variant with <code>--race off</code> (no tuning file on PC 2), so the curve's rates are relative to each other, not to the app's.</p>
+<p>Reading. Between 2^22 and 2^20 nothing moves: the card's time-slice scheduler alternates the two contexts whatever the kernel length above a few milliseconds. From 2^18 down the miner's launches get short enough (about 2 ms at 2^18, 0.5 ms at 2^16) that the prover's bursts find the card sooner, and the miner pays in launch overhead and idle gaps: at 2^16 the prover runs 1.6x faster (18.1 to 11.1 s a block, the chained aggregation 10.2 to 6.2 s) for a fifth of the hash rate, and it is still 2.7x slower than on a card to itself. The trade is about 1 MH/s per 0.37 s of block time at the 2^16 point, and the 3-s aggregation and the 1.5x slowdown are not reachable on a mining card by the kernel length; a 2^14 point (approximate, extrapolated) would be about 8 s a block at about 65 MH/s. The phase E0 (a 4-deferred aggregation under the miner) failed in 0.1 s: its proof paths pointed at <code>/</code> where job 1 had left its shard proofs, but job 2's block-344 proofs sit in job 2's own folder (<code>$JOB</code> was exported from job 2 on); the 4-deferred cost under the miner stays an estimate (lever 2 above). The app's own 5090 miner ran at 117 MH/s (job 3, 22:44Z) and 110 to 129 MH/s (its STATUS lines at 01:10Z) with the prover beside it, against my miner's 104 MH/s at the default batch: my miner runs the base variant with <code>--race off</code> (no tuning file on the RTX 5090 Windows rig), so the curve's rates are relative to each other, not to the app's.</p>
 <h3 id="lever-5-the-host-side-under-wsl2-what-the-chain-mode-numbers-leave-out">Lever 5, the host side under WSL2 (what the chain-mode numbers leave out)</h3>
-<div class="tbl"><table><thead><tr><th>What</th><th>Measured</th></tr></thead><tbody><tr><td>The export (<code>igneum_exportSegments</code> 0..tip, 75 to 77 MB over curl.exe to a file on <code>C:</code>)</td><td>1.1 to 1.5 s</td></tr><tr><td>The cut (<code>igneum-prove-export</code> replaying from genesis, then <code>--mode native</code>), four blocks</td><td>18 s for four including the native checks (21:01:28Z to 21:01:46Z), about 4 s a block; the export's file sits on <code>/mnt/c</code></td></tr><tr><td>The key setup per host process</td><td>13.0 to 15.7 s on PC 2 (8.0 to 8.5 s on the Apple M5 Max CPU): <code>--mode chain</code> and <code>--mode aggregate</code> pay it once per process, the app's loop pays it per shard</td></tr><tr><td>The proof file write through the WSL2 bridge</td><td>the 4 October entry ("shard proving on the RTX 5090"): 24 min of unbuffered <code>save</code> across <code>/mnt/c</code>, fixed by the 4 MB buffer; tonight <code>--save-shards</code> wrote the four 1.27 MB proofs inside the chain phase with no visible gap (the A phase's 80.4 s wall against 67.4 s of proving plus 13.0 s of setup)</td></tr><tr><td>Native Linux</td><td>not measured: no native Linux machine with an NVIDIA card exists in the project tonight, and the 4 October numbers were also WSL2 (Ubuntu 24.04 under PC 2's Windows). The WSL2 cost inside a <code>prove()</code> call is not separable from here; the host-side pieces above are what a native box would also skip or keep</td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>What</th><th>Measured</th></tr></thead><tbody><tr><td>The export (<code>igneum_exportSegments</code> 0..tip, 75 to 77 MB over curl.exe to a file on <code>C:</code>)</td><td>1.1 to 1.5 s</td></tr><tr><td>The cut (<code>igneum-prove-export</code> replaying from genesis, then <code>--mode native</code>), four blocks</td><td>18 s for four including the native checks (21:01:28Z to 21:01:46Z), about 4 s a block; the export's file sits on <code>/mnt/c</code></td></tr><tr><td>The key setup per host process</td><td>13.0 to 15.7 s on the RTX 5090 Windows rig (8.0 to 8.5 s on the Apple M5 Max CPU): <code>--mode chain</code> and <code>--mode aggregate</code> pay it once per process, the app's loop pays it per shard</td></tr><tr><td>The proof file write through the WSL2 bridge</td><td>the 4 October entry ("shard proving on the RTX 5090"): 24 min of unbuffered <code>save</code> across <code>/mnt/c</code>, fixed by the 4 MB buffer; tonight <code>--save-shards</code> wrote the four 1.27 MB proofs inside the chain phase with no visible gap (the A phase's 80.4 s wall against 67.4 s of proving plus 13.0 s of setup)</td></tr><tr><td>Native Linux</td><td>not measured: no native Linux machine with an NVIDIA card exists in the project tonight, and the 4 October numbers were also WSL2 (Ubuntu 24.04 under the RTX 5090 Windows rig's Windows). The WSL2 cost inside a <code>prove()</code> call is not separable from here; the host-side pieces above are what a native box would also skip or keep</td></tr></tbody></table></div>
 <h3 id="what-went-wrong-measured">What went wrong, measured</h3>
-<div class="tbl"><table><thead><tr><th>What</th><th>Fixed</th></tr></thead><tbody><tr><td>Job 1's per-phase command ran with <code>$JOB</code> empty (the bash variables of <code>vars.sh</code> were set, not exported, and the command runs in a child bash): <code>--out /results-A.json</code>, the saved shard proofs in <code>/</code> on the WSL root, so the aggregate-only phases B0, B, C1 and the prototype-shard phase C2 failed in 0.0 s ("No such file")</td><td><code>export</code> in <code>vars.sh</code>; job 2 reads the proofs from <code>/</code></td></tr><tr><td>Job 1's own-miner phases launched the iGPU miner (the first <code>igneum-miner mine</code> process matched; the 5090's is the second) and <code>if (StartMiner ...)</code> was always true (PowerShell: a function's emitted RESULT strings are part of its output), so D and E ran with the 5090 idle and the AMD iGPU at 3.4 MH/s: three more idle replicates of the chain (2.0 to 2.2 s shards, 1.8 and 2.2 s aggregations), no curve</td><td>the miner matched on <code>igneum-worker-cuda</code>, the outcome in a script-scope flag, <code>--race off</code> for the own miner (no tuning file on PC 2; a race costs up to 120 s a start)</td></tr><tr><td>Job 1's <code>/api/resume</code> at 21:25:11Z answered ok and the 5090 miner stayed off (card state <code>off</code>, hash 0.0, 1,760 MiB on the card) until the 0.3.10 restart; job 2 waited its full 600 s for a hash rate and ran its mining phases void</td><td>the restore job <code>tools/proving-v1/pc2-agg-cost-restore.ps1</code> also posts <code>/api/start</code>; the Counter ASIC coordinator opened a task chip for the resume defect</td></tr><tr><td>Jobs 3 and 4 (<code>agg-cost-pc2-3</code> 22:41Z on app 0.3.10, <code>agg-cost-pc2-4</code> 00:18Z on 0.3.11): every <code>/api/state</code> read came back as the two bytes <code>{}</code> (job 4's raw-body print: <code>raw_len=2</code>; the same reads gave the full state on 0.3.9 at 21:01Z and the AMD agent saw the empty reply at 22:22Z), so the card switch found no card, the app's 5090 miner kept mining, and job 3 ran a second miner beside it (two miners at about 60 MH/s each) while job 4's double-mining guard voided its own-miner phases. The class is the app's, not the reader's: <code>state_json()</code> (engine.rs:180) does <code>serde_json::to_value(st).unwrap_or(json!({}))</code>, and the value that fails is <code>ProvingState.paid_wei: u128</code> (serde_json 1.0.151 refuses a u128 over u64::MAX, 18.45 IGN; the proving-v1 agent's diagnosis): a paid shard averages 1.23 IGN, so the reply empties about 15 paid shards after every app start and comes back at the next restart, which matches the times (full at 21:01Z with paid_wei 0, empty from 22:22Z after the prover had paid from 22:02Z). Fixed on the app branch proving-v1 at 6714a45 (paid_wei as a decimal string, the error logged, an <code>{"error":...}</code> reply on any future failure)</td><td>job 5 reads the card keys from the app's <code>settings.json</code> (<code>cards</code>: key to enabled and identities), restores the 5090's 8 identities first (the restore job of 23:16:53Z had set 2: its parser read the next card's value), refuses before any pause when it cannot name the card, waits on the CUDA worker process count for the card to stop, and checks the worker is back at the end</td></tr><tr><td>Job 5 (<code>agg-cost-pc2-5</code>, 01:10:44Z) failed at PowerShell's parse in 1 s: <code>$RestoreIdentities:</code> inside a double-quoted string (a drive-qualified variable); no card or miner touched</td><td><code>${RestoreIdentities}:</code>; the other <code>$name:</code> shapes are inside single-quoted bash here-strings</td></tr><tr><td>Job 6's identities step found <code>settings.json</code> already at 8 identities under the active key <code>nvidia:0:NVIDIA GeForce RTX 5090</code> (a stale key <code>nvidia:NVIDIA GeForce RTX 5090</code> carries 2), so no change was sent; job 6's <code>/api/cards</code> with the 5090 disabled answered ok but the worker ran on for 120 s, <code>/api/pause</code> stopped it in 5 s, and at the end <code>/api/resume</code> brought it back in 5 s on 0.3.11</td><td>the card switch keeps the pause as its fallback; the resume path works on 0.3.11</td></tr><tr><td>PC 2 ran three jobs at once from 01:24Z (<code>run-prover-on-pc2-20261006</code> at 01:24:21Z, the ledger suites build at 01:26:15Z, while agg-cost-pc2-6's closing report was still being uploaded): the app does not serialise jobs, "one job per machine at a time" holds only by the coordinator's word; job 6 had closed at 01:24:14Z, so its rows are clean</td><td>nothing of mine to fix; a rule for the job runner</td></tr><tr><td>The make-package gate ran the exporter's side files (<code>block-N.json.node-plan.json</code>) as fixtures and failed; its execute step took the exclusive <code>measure</code> lock for a cycle count and queued 25 min behind a packbench run</td><td>the glob skips <code>.node-plan.json</code>; the execute step runs under the <code>run</code> lock (a count, not a time)</td></tr></tbody></table></div>
+<div class="tbl"><table><thead><tr><th>What</th><th>Fixed</th></tr></thead><tbody><tr><td>Job 1's per-phase command ran with <code>$JOB</code> empty (the bash variables of <code>vars.sh</code> were set, not exported, and the command runs in a child bash): <code>--out /results-A.json</code>, the saved shard proofs in <code>/</code> on the WSL root, so the aggregate-only phases B0, B, C1 and the prototype-shard phase C2 failed in 0.0 s ("No such file")</td><td><code>export</code> in <code>vars.sh</code>; job 2 reads the proofs from <code>/</code></td></tr><tr><td>Job 1's own-miner phases launched the iGPU miner (the first <code>igneum-miner mine</code> process matched; the 5090's is the second) and <code>if (StartMiner ...)</code> was always true (PowerShell: a function's emitted RESULT strings are part of its output), so D and E ran with the 5090 idle and the AMD iGPU at 3.4 MH/s: three more idle replicates of the chain (2.0 to 2.2 s shards, 1.8 and 2.2 s aggregations), no curve</td><td>the miner matched on <code>igneum-worker-cuda</code>, the outcome in a script-scope flag, <code>--race off</code> for the own miner (no tuning file on the RTX 5090 Windows rig; a race costs up to 120 s a start)</td></tr><tr><td>Job 1's <code>/api/resume</code> at 21:25:11Z answered ok and the 5090 miner stayed off (card state <code>off</code>, hash 0.0, 1,760 MiB on the card) until the 0.3.10 restart; job 2 waited its full 600 s for a hash rate and ran its mining phases void</td><td>the restore job <code>tools/proving-v1/pc2-agg-cost-restore.ps1</code> also posts <code>/api/start</code>; the Counter ASIC coordinator opened a task chip for the resume defect</td></tr><tr><td>Jobs 3 and 4 (<code>agg-cost-pc2-3</code> 22:41Z on app 0.3.10, <code>agg-cost-pc2-4</code> 00:18Z on 0.3.11): every <code>/api/state</code> read came back as the two bytes <code>{}</code> (job 4's raw-body print: <code>raw_len=2</code>; the same reads gave the full state on 0.3.9 at 21:01Z and the AMD agent saw the empty reply at 22:22Z), so the card switch found no card, the app's 5090 miner kept mining, and job 3 ran a second miner beside it (two miners at about 60 MH/s each) while job 4's double-mining guard voided its own-miner phases. The class is the app's, not the reader's: <code>state_json()</code> (engine.rs:180) does <code>serde_json::to_value(st).unwrap_or(json!({}))</code>, and the value that fails is <code>ProvingState.paid_wei: u128</code> (serde_json 1.0.151 refuses a u128 over u64::MAX, 18.45 IGN; the proving-v1 agent's diagnosis): a paid shard averages 1.23 IGN, so the reply empties about 15 paid shards after every app start and comes back at the next restart, which matches the times (full at 21:01Z with paid_wei 0, empty from 22:22Z after the prover had paid from 22:02Z). Fixed on the app branch proving-v1 at 6714a45 (paid_wei as a decimal string, the error logged, an <code>{"error":...}</code> reply on any future failure)</td><td>job 5 reads the card keys from the app's <code>settings.json</code> (<code>cards</code>: key to enabled and identities), restores the 5090's 8 identities first (the restore job of 23:16:53Z had set 2: its parser read the next card's value), refuses before any pause when it cannot name the card, waits on the CUDA worker process count for the card to stop, and checks the worker is back at the end</td></tr><tr><td>Job 5 (<code>agg-cost-pc2-5</code>, 01:10:44Z) failed at PowerShell's parse in 1 s: <code>$RestoreIdentities:</code> inside a double-quoted string (a drive-qualified variable); no card or miner touched</td><td><code>${RestoreIdentities}:</code>; the other <code>$name:</code> shapes are inside single-quoted bash here-strings</td></tr><tr><td>Job 6's identities step found <code>settings.json</code> already at 8 identities under the active key <code>nvidia:0:NVIDIA GeForce RTX 5090</code> (a stale key <code>nvidia:NVIDIA GeForce RTX 5090</code> carries 2), so no change was sent; job 6's <code>/api/cards</code> with the 5090 disabled answered ok but the worker ran on for 120 s, <code>/api/pause</code> stopped it in 5 s, and at the end <code>/api/resume</code> brought it back in 5 s on 0.3.11</td><td>the card switch keeps the pause as its fallback; the resume path works on 0.3.11</td></tr><tr><td>the RTX 5090 Windows rig ran three jobs at once from 01:24Z (<code>run-prover-on-pc2-20261006</code> at 01:24:21Z, the ledger suites build at 01:26:15Z, while agg-cost-pc2-6's closing report was still being uploaded): the app does not serialise jobs, "one job per machine at a time" holds only by the coordinator's word; job 6 had closed at 01:24:14Z, so its rows are clean</td><td>nothing of mine to fix; a rule for the job runner</td></tr><tr><td>The make-package gate ran the exporter's side files (<code>block-N.json.node-plan.json</code>) as fixtures and failed; its execute step took the exclusive <code>measure</code> lock for a cycle count and queued 25 min behind a packbench run</td><td>the glob skips <code>.node-plan.json</code>; the execute step runs under the <code>run</code> lock (a count, not a time)</td></tr></tbody></table></div>
 <h3 id="6-october-2026-07-12z-to-07-17z-the-host-s-chain-mode-with-save-shards-records-and-prev-on-the-apple-m5-max-s-cpu">6 October 2026, 07:12Z to 07:17Z, the host's chain mode with --save-shards records and --prev, on the Apple M5 Max's CPU</h3>
-<p><code>tools/lock/with-lock.sh run</code>, <code>SP1_PROVER=cpu igneum-prove-host --mode chain --chain proving/fixtures/chain/block-81046.json,block-81047.json --save-shards --out chain-a.json</code>, then <code>--chain block-81048.json --save-shards --prev segment-81047-aggregated.bin --out chain-b.json</code> (the app branch at ce8f34a, Apple M5 Max, CPU prover). The flags the app's segment path needs, before PC 2 (approximate figures: a CPU run, one sample each):</p>
+<p><code>tools/lock/with-lock.sh run</code>, <code>SP1_PROVER=cpu igneum-prove-host --mode chain --chain proving/fixtures/chain/block-81046.json,block-81047.json --save-shards --out chain-a.json</code>, then <code>--chain block-81048.json --save-shards --prev segment-81047-aggregated.bin --out chain-b.json</code> (the app branch at ce8f34a, Apple M5 Max, CPU prover). The flags the app's segment path needs, before the RTX 5090 Windows rig (approximate figures: a CPU run, one sample each):</p>
 <div class="tbl"><table><thead><tr><th>Step</th><th>Value</th></tr></thead><tbody><tr><td>Shard proof, CPU, empty block</td><td>34.7 s and 36.3 s</td></tr><tr><td>Aggregation, CPU, 1 then 2 deferred proofs</td><td>39.1 s, 50.8 s</td></tr><tr><td>Chain of 2, end to end</td><td>160.9 s</td></tr><tr><td>Per-shard records written</td><td>2 (number, block_hash, shard, statement, proof_sha256, proof_bytes 1,272,897, proof_file, prove_seconds)</td></tr><tr><td><code>--prev</code> run: base_chain_len, final chain_len</td><td>2, 3 (the chain continued; a wrong previous proof is refused by number and parent hash)</td></tr></tbody></table></div>
-<h3 id="6-october-2026-07-52z-to-08-24z-the-segment-aligned-prover-beside-the-miner-on-pc-2-s-rtx-5090-job-segments-pc2-pv1c">6 October 2026, 07:52Z to 08:24Z, the segment-aligned prover beside the miner on PC 2's RTX 5090 (job <code>segments-pc2-pv1c</code>)</h3>
-<p><code>tools/proving-v1/pc2-segments.ps1</code> (app branch 330207d; the host from the package <code>igneum-prove-wsl2-segal</code>, built on PC 2 in 7 s warm to <code>&lt;server path&gt;</code>, pinned guests unchanged); the app's own prover OFF for the run through <code>/api/prove</code>, ON again at the end; the app's miner running (8 identities, batch-log2 22); <code>SP1_PROVER=cuda</code>, the stock 6.8.1 GPU server; a 1-s nvidia-smi sampler under every chain. Payouts read on node 1 (read-only, <code>igneum_getProofRecords</code> per block at 08:30Z). The miner's rate from the app's uploaded log (<code>status: ... MH/s</code> every 30 s, run win-1ccfe586-20261005-235130).</p>
+<h3 id="6-october-2026-07-52z-to-08-24z-the-segment-aligned-prover-beside-the-miner-on-the-rtx-5090-windows-rig-s-rtx-5090-job-segments-pc2-pv1c">6 October 2026, 07:52Z to 08:24Z, the segment-aligned prover beside the miner on the RTX 5090 Windows rig's RTX 5090 (job <code>segments-pc2-pv1c</code>)</h3>
+<p><code>tools/proving-v1/pc2-segments.ps1</code> (app branch 330207d; the host from the package <code>igneum-prove-wsl2-segal</code>, built on the RTX 5090 Windows rig in 7 s warm to <code>&lt;server path&gt;</code>, pinned guests unchanged); the app's own prover OFF for the run through <code>/api/prove</code>, ON again at the end; the app's miner running (8 identities, batch-log2 22); <code>SP1_PROVER=cuda</code>, the stock 6.8.1 GPU server; a 1-s nvidia-smi sampler under every chain. Payouts read on node 1 (read-only, <code>igneum_getProofRecords</code> per block at 08:30Z). The miner's rate from the app's uploaded log (<code>status: ... MH/s</code> every 30 s, run win-1ccfe586-20261005-235130).</p>
 <div class="tbl"><table><thead><tr><th>Figure</th><th>Value</th><th>Note</th></tr></thead><tbody><tr><td>Segments claimed in 30 min</td><td>9 (114470, 114654, 114862, 115022, 115198, 115366, 115542, 115710, 115870)</td><td>one every 210 s; 32.1 min of loop</td></tr><tr><td>Candidates per pass</td><td>32 to 38 whole segments inside the margin</td><td>margin 580 to 589 DAA at claim</td></tr><tr><td>Export (the chain to the segment's last block)</td><td>99.6 to 100.6 MB in 1.4 to 1.6 s</td><td>once per segment</td></tr><tr><td>Cut (8 fixtures, the exporter)</td><td>45.1 to 46.0 s</td><td>the exporter replays from genesis per block; the next lever</td></tr><tr><td>Chain run wall (8 shards, 8 aggregations, one key setup)</td><td>159.7 to 160.6 s</td><td>host <code>--mode chain --save-shards</code></td></tr><tr><td>Shard proofs, 8 per segment</td><td>63.0 to 63.5 s (7.9 s a shard)</td><td>empty blocks</td></tr><tr><td>Aggregation, 8 chained</td><td>80.4 to 81.1 s (10.1 s a block)</td><td>the fixed cost per block beside the miner</td></tr><tr><td>End to end per segment (export, cut, chain, sign, submit)</td><td>210.0 to 211.2 s</td><td></td></tr><tr><td>GPU memory peak during a chain</td><td>16,484 to 17,573 MiB (miner resident)</td><td>the 24 GB tier's gate holds</td></tr><tr><td>GPU utilisation during a chain</td><td>94.9 to 95.3%</td><td></td></tr><tr><td>Shard records accepted</td><td>72 of 72</td><td>8 per segment</td></tr><tr><td>Shard records paid on chain</td><td>72 of 72</td><td>0.905 to 2.719 IGN a shard (90% of the credit); carried 180 to 226 blocks after the block</td></tr><tr><td>Segment records accepted</td><td>0 of 9</td><td>every one refused: "does not chain to segment N-8..N-1 (chain_len 8), which is pending until DAA ..."</td></tr><tr><td>Miner alone (the app's prover off), 07:25 to 07:51Z</td><td>117.86 MH/s mean (n=52)</td><td>min 46.37 is the switch-off dip at 07:22Z</td></tr><tr><td>Miner beside the segment prover, 07:55 to 08:24Z</td><td>104.90 MH/s mean (n=58, min 98.39, max 119.24)</td><td>12.96 MH/s = 11.0% of the miner, at 95% GPU utilisation from the prover</td></tr><tr><td>The 0.3.11 prover as shipped beside the miner (5 October row)</td><td>5.0 MH/s = 4.0%</td><td>one shard per 46 s; this run proves 8 shards per 210 s, 2.8x the shards</td></tr><tr><td>Node 1's v1 window at 08:24Z</td><td>pending 59, proven 0, unproven 16, paid segments 0</td><td>unchanged by the run: the chain rule</td></tr></tbody></table></div>
 <p>What the refusal is (the fork, <code>igneum/exec/src/proving.rs</code> <code>check_segment_record</code>): a fresh record (chain_len = N) is valid only when the previous segment is UNPROVEN at the carrier, and the record's own deadline is the previous segment's deadline plus one segment length in DAA, so a fresh record is valid for 8 DAA (about 8 s) per segment and must be carried inside them. With one prover every previous segment is pending at proof time. Fixed on the fork branch behind <code>proving_v1_fresh_rule_daa</code> (0f0dda95): from the switch a fresh record is valid whenever the previous segment is not proven; the app holds a refused record and offers it again every pass until the deadline (272b025).</p>
 <p>Run b (<code>segments-pc2-pv1b</code>, 07:20Z to 07:51Z) claimed nothing in 88 passes: the driver's segment keys were doubles against int64 hashtable keys (fixed in 330207d); its 30 minutes are the miner-alone baseline above.</p>
@@ -788,10 +745,18 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <p><strong>The fix (four changes, 5a339733):</strong> <code>ingest_certificate</code> ignores an index below <code>keep_from</code> (counted, debug: the echo stops at its source once the seed runs it); the router's overflow policy for <code>IgneumFinality</code> is <code>Drop</code> with a counted warn once per 10 s per peer, never a disconnect; the finality route is subscribed with 4,096 (a checkpoint's worst case is <code>MAX_VOTES_PER_BLOCK</code> 48 votes on each of 30 blocks plus the certificates); the relay flow skips votes while IBD runs (counted, said once per 30 s; certificates still go in and land pending). No consensus change, no digest change. Tests: the overflow-policy table (p2p 33 of 33), the flows crate (19 of 19), a certificate below the window submitted twice (ignored, no gossip, counter 2; an index inside goes the normal way) with the finality tests (12 of 12).</p>
 <p><strong>After, on the fixed binary against the still-unfixed seed</strong> (203ae727, same run, 13:15:31 to 13:20:31Z): 63,628 certificates received (the seed's echo had grown to 3,032 per 10 s at the peak as more fleet nodes joined), 0 route errors, 0 drops, 4 connections kept (the seed and three peers learned from it), 168 votes skipped during IBD. The receiver side of the fix holds under a storm five times the morning's; the source side (the guard) cannot show on the seed until 0.3.13 runs there, and the fresh node's own guard never fires during IBD (its window starts at genesis), which is correct. Harness s7 on the fixed binary (<code>--quick --live-only</code>): PASS, 192 blocks accepted in 60 s under a 50 blocks/s flood from one peer, honest template p50/p95/max 0.4/0.6/1.4 ms, rss 306 to 321 MB.</p>
 <p><strong>Per tier:</strong> a home miner joining today sees the warning and the peers=0 flicker every checkpoint until the seed runs 0.3.13; a rig the same once; a pool user nothing; a fleet operator gets a node that keeps its only peer, and a seed that stops amplifying old certificates to every peer (13,354 lines of work it did not need in seven minutes). Owed: the fleet agent's synced-node reading; a receiver-side limit on certificates per index per minute as a second belt once the seed is fixed; the formatter's reflow of <code>finality.rs</code> (taken out of the commit).</p>
-<h2 id="6-october-2026-16-01z-ember-run-6-on-pc-1-ember-tune-pc1-6-0-3-13-kit-6-564bdea-elevated-one-click">6 October 2026, 16:01Z: Ember run 6 on PC 1 (ember-tune-pc1-6, 0.3.13 + kit-6 = 564bdea, elevated, one click)</h2>
+<h2 id="6-october-2026-16-01z-ember-run-6-on-the-three-card-windows-rig-rtx-5090-rtx-4070-rx-9070-xt-ember-tune-pc1-6-0-3-13-kit-6-564bdea-elevated-one-click">6 October 2026, 16:01Z: Ember run 6 on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) (ember-tune-pc1-6, 0.3.13 + kit-6 = 564bdea, elevated, one click)</h2>
 <p>The helper registered inside the run but on the scratch copy (fixed: task_exe, the <code>reregister</code> verb; see the plan's run 6 notes). RTX 5090: chosen 1854 MHz at 100% = 127.71 MH/s at 226.8 W, 0.563 MH/W, against 127.9 at 311.0 W (0.411) untuned: 84 W saved for 0.15% of rate. Every cap step 60 to 100% read 311 to 313 W (the cap never binds). The clock ladder: 2781 MHz 298.8 W 0.428; 2472 MHz 262.0 W 0.488; 2163 MHz 239.9 W 0.533; 1854 MHz 226.8 W 0.563 (the floor, not the optimum: the next cut's ladder goes to 45%). RTX 4070: caps 100 to 60% all 106.0 W 28.71 MH/s (0.271); 50% 99.1 W 28.70 (0.290); clock 2794 MHz at 50% 99.1 W (0.290); 2484 MHz 81.1 W 28.73 (0.354); further rows and the 9070 XT ladder below once the run closes.</p>
-<p>Run 6 closed 16:39:37Z, exit 0, 2317 s, 19 rows. RTX 4070 chosen 1863 MHz at 50% = 28.78 MH/s at 75.6 W (0.381) against 28.72 at 106.0 W (0.271): 30 W saved for no rate lost; its clock ladder at 50%: 2794 MHz 99.1 W 0.290; 2484 MHz 81.1 W 0.354; 2173 MHz 77.7 W 0.370; 1863 MHz 75.6 W 0.381 (the floor). RX 9070 XT: aborted at step 1, "card reports 0 W, acknowledged true" = the applied rule demanded watts from a card that reports offsets (fixed bd7fcf4); the draw itself was read on every tick (amd_watts_source=engine_telemetry, 363 samples). The helper registered on the scratch copy (fixed 200362a: task_exe, the reregister verb). PC 1 mined through the installed app again by 16:44Z: 170.6 MH/s over the three cards, 0 faults.</p>
-<p>Re-point and proof, 16:48 to 16:53Z: the Power Helper task re-pointed by the helper itself ("1 reregister ok: the task now runs ...Programs\Igneum Miner\igneum-app.exe --power-helper"), then the installed app's caps through the task with no prompt ("-pl 460: set to 460.00 W from 575.00 W", "-pl 160: set to 160.00 W from 100.00 W"). Task Running, Highest, user Admin. Cards: 5090 221 W at 1845 MHz, 4070 75.8 W at 1860 MHz, 9070 XT 202 W, all mining through the installed app. Ember closed 16:53Z.</p></article>
+<p>Run 6 closed 16:39:37Z, exit 0, 2317 s, 19 rows. RTX 4070 chosen 1863 MHz at 50% = 28.78 MH/s at 75.6 W (0.381) against 28.72 at 106.0 W (0.271): 30 W saved for no rate lost; its clock ladder at 50%: 2794 MHz 99.1 W 0.290; 2484 MHz 81.1 W 0.354; 2173 MHz 77.7 W 0.370; 1863 MHz 75.6 W 0.381 (the floor). RX 9070 XT: aborted at step 1, "card reports 0 W, acknowledged true" = the applied rule demanded watts from a card that reports offsets (fixed bd7fcf4); the draw itself was read on every tick (amd_watts_source=engine_telemetry, 363 samples). The helper registered on the scratch copy (fixed 200362a: task_exe, the reregister verb). the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) mined through the installed app again by 16:44Z: 170.6 MH/s over the three cards, 0 faults.</p>
+<p>Re-point and proof, 16:48 to 16:53Z: the Power Helper task re-pointed by the helper itself ("1 reregister ok: the task now runs ...Programs\Igneum Miner\igneum-app.exe --power-helper"), then the installed app's caps through the task with no prompt ("-pl 460: set to 460.00 W from 575.00 W", "-pl 160: set to 160.00 W from 100.00 W"). Task Running, Highest, user Admin. Cards: 5090 221 W at 1845 MHz, 4070 75.8 W at 1860 MHz, 9070 XT 202 W, all mining through the installed app. Ember closed 16:53Z.</p>
+<h2 id="prover-tiers-on-real-cards-the-rented-fleet-6-october-2026-branch-gpu-fleet">Prover tiers on real cards: the rented fleet, 6 October 2026 (branch gpu-fleet)</h2>
+<p>From 11:50 UTC, Vast.ai containers (nvidia/cuda:12.8.1-devel-ubuntu24.04, the host's driver), one card each, the 0.3.12 Linux node 83089544 on the ten-field override, the 0.3.12 CUDA worker, the patched SP1 server built on each box from <code>proving/prover-floor/sp1-gpu-6.8.1-floor.patch</code> v4 (e81cb0d0...) for the card's own arch, the cuda host with the pinned ids 0x2b1a81cb... and 0x474678f3...; the v1 shard (<code>fees-v1-shards2.json</code> shard 0, 4,717,439 cycles); every proof VERIFIED by the host's own SDK verifier; peak = nvidia-smi memory.used sampled once a second (a per-second loop, not <code>-l 1</code>, which buffers and ignores SIGTERM in a container); own = peak minus the reading before the point; beside = the card's miner running (its resident set is the base). Runner <code>tools/fleet/box-matrix.sh</code>, collector <code>tools/fleet/collect.py</code>, raw logs <code>fleet/&lt;instance&gt;/</code>, the analysis <code>docs/analysis/prover-tiers-real-cards.md</code>.</p>
+<div class="tbl"><table><thead><tr><th>Card</th><th>VRAM GB</th><th>Idle MiB</th><th>Miner</th><th>Stock SP1 6.8.1</th><th>Patched, proves alone (own)</th><th>Beside the miner (peak)</th><th>Core-only beside the miner (own)</th><th>Verdict</th></tr></thead><tbody><tr><td>RTX 3060</td><td>12</td><td>1</td><td>23.78 MH/s at 103.7 W, 1.4 GB</td><td>refused: thread 'tokio-rt-worker' (48952) panicked at sp1-gpu/crates/</td><td>7.4 GB, 14.4 s (alone-comp-26-v1)</td><td>8.9 GB peak, 37.5 s</td><td>5.6 GB, 27.2 s</td><td>mines and proves</td></tr><tr><td>RTX 3080</td><td>10</td><td>11</td><td>40.82 MH/s at 204.9 W, 1.5 GB</td><td>refused: thread 'tokio-rt-worker' (49593) panicked at sp1-gpu/crates/</td><td>8.0 GB, 7.1 s (alone-comp-26-v1)</td><td>9.2 GB peak, 25.6 s</td><td>5.9 GB, 19.2 s</td><td>mines and proves</td></tr><tr><td>RTX 3090</td><td>24</td><td>1</td><td>37.79 MH/s at 228.8 W, 1.5 GB</td><td>not measured: the SDK's server download stalled (killed at 553 s)</td><td>7.7 GB, 14.9 s (alone-comp-26-v1)</td><td>9.3 GB peak, 19.9 s</td><td>5.8 GB, 13.3 s</td><td>mines and proves</td></tr><tr><td>RTX 4060 Ti 16 GB</td><td>16</td><td>0</td><td>17.58 MH/s at 72.3 W, 1.4 GB</td><td>refused: thread 'tokio-rt-worker' (49293) panicked at sp1-gpu/crates/</td><td>7.8 GB, 11.6 s (alone-comp-26-v1)</td><td>9.0 GB peak, 34.6 s</td><td>5.8 GB, 25.9 s</td><td>mines and proves</td></tr><tr><td>RTX 4060 Ti 8 GB</td><td>8</td><td>0</td><td>19.07 MH/s at 72.6 W, 1.4 GB</td><td>refused: thread 'tokio-rt-worker' (43763) panicked at sp1-gpu/crates/</td><td>7.6 GB, 9.6 s (alone-comp-26-v1)</td><td>no GB peak,  s</td><td>5.8 GB, 26.3 s</td><td>mines and proves core-only</td></tr><tr><td>RTX 4060</td><td>8</td><td>2</td><td>17.07 MH/s at 0.0 W, 1.4 GB</td><td>refused: thread 'tokio-rt-worker' (48510) panicked at sp1-gpu/crates/</td><td>7.4 GB, 18.4 s (alone-comp-26-v1)</td><td>no GB peak,  s</td><td>5.6 GB, 22.1 s</td><td>mines and proves core-only</td></tr><tr><td>RTX 4070</td><td>12</td><td>9</td><td>24.99 MH/s at 91.1 W, 1.4 GB</td><td>refused: thread 'tokio-rt-worker' (47475) panicked at sp1-gpu/crates/</td><td>7.6 GB, 12.1 s (alone-comp-26-v1)</td><td>10.1 GB peak, 27.3 s</td><td>5.6 GB, 14.3 s</td><td>mines and proves</td></tr><tr><td>RTX 4090</td><td>24</td><td>1</td><td>52.25 MH/s at 183.1 W, 1.7 GB</td><td>proved 5.6 s at 17.4 GB</td><td>7.9 GB, 6.3 s (alone-comp-26-v1)</td><td>10.7 GB peak, 26.1 s</td><td>6.1 GB, 10.6 s</td><td>mines and proves</td></tr><tr><td>RTX 5070</td><td>12</td><td>2</td><td>41.89 MH/s at 137.0 W, 2.7 GB</td><td>refused: thread 'tokio-rt-worker' (53680) panicked at sp1-gpu/crates/</td><td>7.6 GB, 4.8 s (alone-comp-26-v1)</td><td>10.2 GB peak, 37.2 s</td><td>5.8 GB, 19.8 s</td><td>mines and proves</td></tr><tr><td>RTX 5090</td><td>32</td><td>2</td><td>98.48 MH/s at 258.2 W, 1.8 GB</td><td>proved 8.4 s at 18.3 GB</td><td>8.0 GB, 6.3 s (alone-comp-26-v1)</td><td>9.9 GB peak, 10.7 s</td><td>6.3 GB, 7.4 s</td><td>mines and proves</td></tr><tr><td>RTX A5000</td><td>24</td><td>1</td><td>47.7 MH/s at 222.7 W, 1.5 GB</td><td>proved 6.4 s at 17.2 GB</td><td>7.7 GB, 8.3 s (alone-comp-26-v1)</td><td>10.5 GB peak, 34.6 s</td><td>6.0 GB, 18.2 s</td><td>mines and proves</td></tr></tbody></table></div>
+<p>Also measured: the stock SP1 6.8.1 server refuses every card under 24 GB at <code>builder.rs:38</code> and proves the v1 shard on the 4090 (5.6 s, 17.4 GB), the A5000 (6.4 s, 17.2 GB) and the 5090 (8.4 s, 18.3 GB); 2^27 does not fit a 10 or 8 GB card and the v4 server hangs at the card's limit (568 and 904 s until killed) where v5 aborts in 13 s ("FLOOR abort: a device allocation failed at slop/crates/tensor/src/inner.rs:51 ... AllocError { size: 486586112 }", exit 70; the known-failed case of the prover-floor gate, on the 3080); the miner beside a prover costs 1.7x (5090) to 7.7x (5070) on the proof's time and 5 to 20% of the miner's rate; the empty-shard fixture (block-72854, a first block with a genesis witness) proves slower than the v1 shard on every card (24 to 55 s) and is not an empty live shard; Ember's two knobs are refused in the containers, so the ladders are baseline rows (<code>docs/plans/ember-tune.md</code>, fleet priors).</p>
+<h2 id="rental-cost-of-hash-6-october-2026-branch-gpu-fleet-what-a-gh-s-costs-by-the-hour-against-the-devnet">Rental cost of hash, 6 October 2026 (branch gpu-fleet): what a GH/s costs by the hour against the devnet</h2>
+<p>Measured on the rented fleet (RunPod community pods, list prices, 18:45Z): 38 wave pods (4090, A4000, L4, 3090, 3070, 4070 Ti, A5000, 4000 Ada) ran 1,748 MH/s inside jobs (median pod 28 MH/s) for USD 20.44 an hour, USD 0.0117 per MH/s-hour; the 8x 4090 rig 459 MH/s at 1,636 W for USD 5.92 an hour, USD 0.0129 per MH/s-hour; a single 5090 pod 98 to 128 MH/s for USD 0.41 to 0.74 an hour. The live devnet's difficulty read 1,156,040,186 at 1 block a second at 19:00Z, so the whole network was about 1.16 GH/s, and the rented fleet was most of it. The live litepaper's line ("2 GH/s for USD 13/h vs 280 MH/s devnet") is corrected to: 1.75 GH/s for USD 20 an hour on community pods, against a devnet of 1.16 GH/s.</p>
+<div class="tbl"><table><thead><tr><th>Buyer</th><th>What USD 20/h buys</th><th>Against the devnet (1.16 GH/s)</th><th>Against mainnet scale</th></tr></thead><tbody><tr><td>Home miner, 8 to 12 GB card (11 to 28 MH/s)</td><td>nothing: the card is owned, 0.15 to 0.2 kW</td><td>one card is 1 to 2 percent of the devnet</td><td>one card is noise at a TH/s</td></tr><tr><td>Rig, 8x 4090 (459 MH/s, USD 5.92/h rented)</td><td>1.7 rigs</td><td>one rig is 40 percent of the devnet</td><td>one rig is 0.05 percent of a TH/s</td></tr><tr><td>Renter at RunPod list prices</td><td>1.75 GH/s while cards exist</td><td>150 percent of the devnet: overtaken for USD 15/h</td><td>a TH/s costs USD 11,700 an hour and the market cannot supply it: asked for 20 pods of any of 8 card types at 18:59Z to 19:15Z, RunPod gave 0 ("no instances currently available")</td></tr></tbody></table></div>
+<p>Consequence: the devnet's hash is rentable for the price of a dinner, so nothing on it is a security result; the counter-ASIC and finality work is tested there for correctness, not for cost. The cost argument only starts at the TH/s scale, where the rental market's supply (not its price) is the limit, and that number belongs in the litepaper with this caveat.</p></article>
 </div>
 <p class="gen">Generated from the repository at build time. Times are UTC. Machine names are model names.</p>
 </main>
@@ -800,7 +765,7 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -826,9 +791,9 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -836,10 +801,23 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 </body>
 </html>
\ No newline at end of file
diff --git a/site/block.html b/site/block.html
index 2eab39af9..a786a3eb5 100644
--- a/site/block.html
+++ b/site/block.html
@@ -29,9 +29,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -43,81 +44,25 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
+/* page block; tokens, type and components are in /site.css */
 /* the explorer pages share this block with block.html and address.html; same tokens as live.html */
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--line-2:#3A3A42;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;--ember-ink:#0C0C0E;--blue:#5CB8FF;--green:#3FD39A;
---max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
 --card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
 --fs-h1:clamp(32px,5.5vw,56px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px)}
-*{box-sizing:border-box}
-body{margin:0;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:17px;line-height:1.55;-webkit-font-smoothing:antialiased;overflow-x:hidden}
-a{color:inherit;text-decoration:none}a:hover{color:var(--molten)}
 a:focus-visible,button:focus-visible,input:focus-visible{outline:2px solid var(--ember);outline-offset:3px;border-radius:6px}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
 .mono{font-family:var(--f-mono)}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
 h1,h2{font-family:var(--f-display);margin:0;line-height:1.08;text-wrap:balance}
-h1{font-weight:900;font-size:var(--fs-h1);letter-spacing:-.01em;overflow-wrap:anywhere}
-h2{font-weight:700;font-size:var(--fs-h3)}
-p{margin:0}
-.card{background:var(--graphite);border:1px solid var(--line);border-radius:var(--card-r);padding:var(--card-pad);min-width:0;margin-top:var(--gap)}
 .head{padding-block:var(--head) var(--gap);display:flex;flex-direction:column;gap:14px}
 .head p{color:var(--ink-2);max-width:64ch;font-size:16px}
 .search{display:flex;gap:10px;max-width:760px;margin-top:4px}
 .search input{flex:1;min-width:0;min-height:48px;padding:10px 14px;border-radius:10px;border:1px solid var(--line-2);background:var(--graphite);color:var(--bone);font:500 15px/1.3 var(--f-mono)}
 .search input::placeholder{color:var(--ash)}
-.btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;min-height:48px;padding:12px 22px;border-radius:10px;font-weight:600;font-size:16px;border:1px solid var(--line-2);color:var(--bone);background:transparent;cursor:pointer;font-family:var(--f-sans)}
-.btn.primary{background:var(--ember);color:var(--ember-ink);border-color:var(--ember)}
 .btn.primary:hover{background:#FF6A2B;border-color:#FF6A2B;color:var(--ember-ink)}
 .msg{font-family:var(--f-mono);font-size:13px;color:var(--molten);min-height:18px}
 .strip{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:var(--gap-tile)}
@@ -129,28 +74,15 @@ p{margin:0}
 @media (max-width:700px){.cell .v{font-size:19px}}
 .cell .s{font-family:var(--f-mono);font-size:12px;color:var(--ash);text-wrap:balance}
 .cell.status .v{display:flex;align-items:center;gap:10px}
-.dot{width:10px;height:10px;border-radius:50%;background:var(--molten);display:inline-block;flex:0 0 10px;animation:pulse 2s ease-in-out infinite}
 .off .dot{background:var(--ash);animation:none}.off .cell.status .v{color:var(--ash)}.on .cell.status .v{color:var(--molten)}
-@keyframes pulse{0%,100%{box-shadow:0 0 0 0 rgba(255,179,92,.5)}50%{box-shadow:0 0 0 8px rgba(255,179,92,0)}}
 @media (prefers-reduced-motion:reduce){.dot{animation:none}}
-.viz-head{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:center;gap:10px 20px;margin-bottom:12px}
-.tbl{overflow-x:auto;margin-top:12px;-webkit-overflow-scrolling:touch}
-table{border-collapse:collapse;width:100%;font-size:14px}
-th,td{padding:10px 10px;text-align:left;border-bottom:1px solid var(--line);white-space:nowrap;vertical-align:top}
-th{font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);font-weight:500}
 td.n,th.n{text-align:right;font-variant-numeric:tabular-nums}
-tr:last-child td{border-bottom:0}
 tbody tr:hover td{background:rgba(255,255,255,.025)}
 .id{font-family:var(--f-mono);color:var(--molten)}
 .hash{font-family:var(--f-mono)}
-.sw{width:10px;height:10px;border-radius:3px;display:inline-block;margin-right:7px;vertical-align:middle;border:1.5px solid var(--ash)}
 .sw.chain{background:var(--ember);border-color:var(--blue)}.sw.blue{background:rgba(92,184,255,.7);border-color:var(--blue)}.sw.red{background:linear-gradient(45deg,transparent 44%,var(--ash) 44%,var(--ash) 56%,transparent 56%) center/8px 8px no-repeat}
 .chip{display:inline-block;font-family:var(--f-mono);font-size:11px;letter-spacing:.08em;text-transform:uppercase;padding:3px 8px;border-radius:999px;border:1px solid var(--line-2);color:var(--ink-2);margin-right:6px}
 .chip.hot{border-color:var(--molten);color:var(--molten)}.chip.ok{border-color:var(--green);color:var(--green)}
-.legend{display:flex;flex-wrap:wrap;gap:6px 16px;margin-top:14px;font-size:13px;color:var(--ink-2)}
-.legend span{display:inline-flex;align-items:center;white-space:nowrap}
-.empty{color:var(--ash);font-size:14px;padding:12px 0}
-.note{font-size:13px;color:var(--ash);margin-top:14px;max-width:80ch}
 dl{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:8px 20px;margin:12px 0 0;font-size:14px}
 dt{font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);padding-top:3px}
 dd{margin:0;overflow-wrap:anywhere;font-variant-numeric:tabular-nums}
@@ -159,7 +91,6 @@ dd{margin:0;overflow-wrap:anywhere;font-variant-numeric:tabular-nums}
 @media (min-width:900px){.two{grid-template-columns:1fr 1fr}.two .card{margin-top:0}}
 .two-wrap{margin-top:var(--gap)}
 main{padding-bottom:var(--sec)}
-.foot{margin-top:0}
 </style>
 </head>
 <body>
@@ -168,10 +99,9 @@ main{padding-bottom:var(--sec)}
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live" aria-current="page">Live devnet</a>
@@ -180,20 +110,32 @@ main{padding-bottom:var(--sec)}
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
@@ -223,7 +165,7 @@ main{padding-bottom:var(--sec)}
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -249,9 +191,9 @@ main{padding-bottom:var(--sec)}
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -259,10 +201,23 @@ main{padding-bottom:var(--sec)}
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 <script type="module">
 import { ign, ignFromWei, shortHash, rel, int, utc } from '/lib/explorer.mjs';
diff --git a/site/build.mjs b/site/build.mjs
index 102e557db..83257d385 100644
--- a/site/build.mjs
+++ b/site/build.mjs
@@ -90,7 +90,7 @@ function meta(title, desc, path) {
 <link rel="apple-touch-icon" href="/apple-touch-icon.png" sizes="180x180">
 <link rel="manifest" href="/site.webmanifest">`;
 }
-function page(title, desc, bodyHtml, toc, note, { path = '/bench', heading = title, active = 'bench' } = {}) {
+function page(title, desc, bodyHtml, toc, note, { path = '/bench', heading = title, active = 'bench', eyebrow } = {}) {
   const h2s = toc.filter(t => t.lvl === 2);
   const nav = h2s.map(t => `<li><a href="#${t.id}">${esc(t.t)}</a></li>`).join('');
   return `<!doctype html>
@@ -103,42 +103,31 @@ ${meta(title, desc, path)}
 ${HEAD}
 <!-- head:end -->
 <style>
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;
-/* one system for every page: container, gutter, section rhythm, card and tile boxes, heading scale (same tokens as the homepage) */
---max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
---card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
---fs-h1:clamp(32px,5.5vw,56px);--fs-h2:clamp(28px,4.2vw,44px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px)}
-*{box-sizing:border-box}body{margin:0;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:16px;line-height:1.6;padding:0;-webkit-font-smoothing:antialiased}
-a{color:var(--ember);text-decoration:none}a:hover{text-decoration:underline}
+/* generated-page block (the engineering log, the bench table, the evidence table); tokens, type and components are in /site.css */
 [id]{scroll-margin-top:calc(var(--nav-h) + 16px)}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
-h1{font-family:var(--f-display);font-weight:900;font-size:var(--fs-h1);line-height:1.05;margin:12px 0 12px}
-.head{padding-top:var(--head)}
-.note{color:var(--ash);font-size:15px;max-width:72ch;margin:0 0 32px}
-.layout{display:grid;grid-template-columns:minmax(0,1fr);gap:32px}
+.head{padding-top:calc(var(--sec) * .6)}
+.head h1{margin:var(--s-3) 0}
+.head .note{max-width:72ch;margin:0 0 var(--s-6)}
+.layout{display:grid;grid-template-columns:minmax(0,1fr);gap:var(--s-6)}
 @media(min-width:960px){.layout{grid-template-columns:260px minmax(0,1fr);gap:56px}}
-.toc{align-self:start;font-size:14px;border:1px solid var(--line);border-radius:var(--tile-r);background:var(--graphite);padding:8px}
-.toc .lbl{font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);padding:6px 10px 8px}
+.toc{align-self:start;font-size:14px;border:1px solid var(--line);border-radius:var(--r-row);background:var(--graphite);padding:8px}
+.toc .lbl{font:500 var(--t-xs)/1.4 var(--f-mono);letter-spacing:.12em;text-transform:uppercase;color:var(--ash);padding:6px 10px 8px}
 .toc ol{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:1px;counter-reset:s;max-height:40vh;overflow:auto;overscroll-behavior:contain;scrollbar-width:thin}
 @media(min-width:960px){.toc{position:sticky;top:calc(var(--nav-h) + 20px)}.toc ol{max-height:calc(100vh - var(--nav-h) - 96px)}}
 .toc a{display:flex;gap:10px;padding:7px 10px;border-radius:8px;color:var(--ink-2);counter-increment:s;line-height:1.35}
 .toc a::before{content:counter(s,decimal-leading-zero);font-family:var(--f-mono);font-size:11px;color:var(--ash);min-width:20px;padding-top:2px}
-.toc a:hover{background:var(--obsidian);text-decoration:none;color:var(--bone)}
-article{max-width:78ch;min-width:0}
+.toc a:hover{background:var(--row);text-decoration:none;color:var(--bone)}
+article{max-width:78ch;min-width:0;color:var(--ink-2)}
 article h1{display:none}
-article h2{font-family:var(--f-display);font-weight:700;font-size:var(--fs-h3);line-height:1.3;margin:44px 0 12px;padding-top:24px;border-top:1px solid var(--line)}
+article h2{font-size:var(--t-h3);margin:44px 0 12px;padding-top:24px;border-top:1px solid var(--line)}
 article h2:first-of-type{margin-top:0;padding-top:0;border-top:0}
-article h3{font-family:var(--f-display);font-weight:500;font-size:16px;margin:26px 0 8px}
-article h4{font-size:15px;margin:20px 0 6px;color:var(--molten)}
+article h3{font-size:16px;margin:26px 0 8px}
+article h4{font:600 15px/1.4 var(--f-sans);margin:20px 0 6px;color:var(--bone)}
 article p{margin:0 0 14px}article ul,article ol{margin:0 0 14px;padding-left:22px}article li{margin-bottom:6px}
 article p,article li,article h2,article h3{overflow-wrap:anywhere}
-code{font-family:var(--f-mono);font-size:.92em;background:var(--graphite);padding:1px 5px;border-radius:4px;overflow-wrap:anywhere}
-pre{margin:0 0 16px;padding:16px 18px;background:var(--graphite);border-radius:var(--card-r);font-family:var(--f-mono);font-size:13px;line-height:1.55;overflow-x:auto;-webkit-overflow-scrolling:touch}
-pre code{background:none;padding:0;font-size:inherit}
-.tbl{overflow-x:auto;margin:18px 0 24px;border:1px solid var(--line);border-radius:var(--card-r);background:var(--graphite);-webkit-overflow-scrolling:touch}
-table{border-collapse:collapse;width:100%;min-width:560px;font-size:15px}th,td{padding:12px 14px;text-align:left;vertical-align:top;border-bottom:1px solid var(--line)}
-th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);font-weight:500;background:var(--obsidian)}tr:last-child td{border-bottom:0}
+article pre{margin:0 0 var(--s-4)}
+.tbl{margin:var(--s-4) 0 var(--s-5)}
+table{min-width:560px}
 .gen{color:var(--ash);font-size:13px;margin:40px 0 0;max-width:72ch}
 </style>
 </head>
@@ -148,7 +137,7 @@ ${navFor(active)}
 <!-- nav:end -->
 <main id="main" class="wrap">
 <div class="head">
-<div class="eyebrow">${h2s.length} entries, newest at the bottom</div>
+<div class="eyebrow">${eyebrow || `${h2s.length} entries, newest at the bottom`}</div>
 <h1>${esc(heading)}</h1>
 <p class="note">${note}</p>
 </div>
@@ -232,7 +221,7 @@ if (existsSync(join(docs, 'bench-log.md'))) {
   }
   const jp = join(here, 'journey.json');
   const j = JSON.parse(readFileSync(jp, 'utf8'));
-  for (const e of j.log) { const t = e.text.replace(/^\s*[,:;]\s*/, ''); e.text = t.charAt(0).toUpperCase() + t.slice(1); } // entries stored before the leading-comma fix
+  for (const e of j.log) { const t = scrubBench(e.text.replace(/^\s*[,:;]\s*/, '')); e.text = t.charAt(0).toUpperCase() + t.slice(1); } // entries stored before the leading-comma fix, and before a scrub rule was added, are re-scrubbed
   const seen = new Set(j.log.map(e => e.date + '|' + e.text));
   for (const e of entries.reverse()) { const k = e.date + '|' + e.text; if (!seen.has(k)) { j.log.unshift(e); seen.add(k); } }
   for (const e of j.log) e.short = shortTitle(e.text);
@@ -356,7 +345,9 @@ function renderEvidence(html) {
 
 const PAGES = [['index.html', ''], ['litepaper.html', 'litepaper'], ['live.html', 'live'], ['evidence.html', 'evidence'], ['miner.html', 'miner'], ['wallet.html', 'wallet'], ['metamask.html', ''], ['faucet.html', ''], ['404.html', ''],
   // the DAG explorer (5 Oct 2026): /explorer, /block/<hash> and /address/<addr> (vercel.json rewrites the last two)
-  ['explorer.html', 'live'], ['block.html', 'live'], ['address.html', 'live']];
+  ['explorer.html', 'live'], ['block.html', 'live'], ['address.html', 'live'],
+  // the scenes lab (6 Oct 2026): three animated views of the live feed, unlinked, noindex
+  ['scenes.html', '']];
 for (const [file, active] of PAGES) {
   const p = join(here, file);
   if (!existsSync(p)) throw new Error(`missing page ${file}`);
@@ -406,18 +397,18 @@ for (const [file, active] of PAGES) {
     '<p>Every row names the engineering log entry or the job it came from. "Measured by the team" means our own hardware and our own log. "Reported by the fleet" means a machine we do not own, read from the status lines its miner uploads.</p>',
     '<p>MH per watt needs the card\'s power draw during the run. The app reads it on NVIDIA cards through the driver. Rows get the figure when a run records it.</p>',
     '<p>There is no other Igneum miner to compare with yet, so this table compares cards, not miners. The app that produces these rows: <a href="/miner">the miner page</a>.</p>',
-    `<p>Rows: ${rows.length}. Source file: <code>site/miner-bench.json</code> in the repository.</p>`,
+    `<p>Rows: ${rows.length}. Each row names the engineering log entry it came from.</p>`,
     '<h2 id="priors">Fleet tuning priors</h2>',
     '<p>Ember Tune runs on every card the app mines with: the power limit and the core clock are stepped on the live program and the card keeps the point with the best MH per watt within 1% of its top rate. Every finished tune is reported back without anything that identifies the owner, and the fleet\'s median point per card model, driver major and program class comes back down inside the signed update manifest as the starting point for the next card of that model. A model needs ' + pj.min_samples + ' reports before its prior is used.</p>',
     ptable,
     // the team's own measured rows (site/miner-priors.json "team"): the per-user sentence per card, with its job
     ...((pj.team || []).length ? ['<h3 id="team">Measured by the team</h3>', '<ul>' + pj.team.map(t => `<li><b>${esc(t.card)}</b> (driver ${esc(t.driver_major)}, class ${esc(t.class)}, ${esc(t.date)}, job <code>${esc(t.job)}</code>): ${esc(t.point)}. ${esc(t.sentence)}${t.note ? ' ' + esc(t.note) : ''}</li>`).join('') + '</ul>'] : []),
-    `<p>Rows: ${prows.length}${pj.generated ? ', generated ' + pj.generated : ''}. Source file: <code>site/miner-priors.json</code> in the repository, written from the fleet records by <code>tools/tuning.mjs --priors --site</code>.</p>`,
+    `<p>Rows: ${prows.length}${pj.generated ? ', generated ' + pj.generated : ''}. Written from the fleet's tune records at build time.</p>`,
   ].join('\n'));
   const toc = [{ lvl: 2, t: 'The table', id: 'table' }, { lvl: 2, t: 'How a row gets here', id: 'how' }, { lvl: 2, t: 'Fleet tuning priors', id: 'priors' }];
   writeFileSync(join(here, 'miners.html'), page('Igneum GPU bench table', 'Measured Igneum hash rates per GPU: card, generator version, best MH/s, MH per watt where measured, miner version, date and the log entry each number came from.', body, toc,
     'Measured hash rates per card on the Igneum lottery hash, with the generator version, the miner version, the date and the log entry behind each number.',
-    { path: '/miners', heading: 'GPU bench table', active: 'miner' }));
+    { path: '/miners', heading: 'GPU bench table', active: 'miner', eyebrow: `${rows.length} measured rows, ${prows.length} fleet tuning models` }));
   built.push('miners.html (' + rows.length + ' rows)');
 }
 console.log('built: ' + built.join(', '));
diff --git a/site/evidence.html b/site/evidence.html
index 905482b19..52cf44008 100644
--- a/site/evidence.html
+++ b/site/evidence.html
@@ -31,9 +31,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -45,72 +46,20 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;
-/* one system for every page: container, gutter, section rhythm, card and tile boxes, heading scale (same tokens as the homepage) */
+/* page block; tokens, type and components are in /site.css */
 --max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
 --card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
 --fs-h1:clamp(32px,5.5vw,56px);--fs-h2:clamp(28px,4.2vw,44px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px)}
-*{box-sizing:border-box}body{margin:0;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:16px;line-height:1.6;padding:0;-webkit-font-smoothing:antialiased}
-a{color:var(--ember);text-decoration:none}a:hover{text-decoration:underline}
 [id]{scroll-margin-top:calc(var(--nav-h) + 16px)}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
 /* nav and footer: shared, see site/partials */
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
 .head{padding-top:var(--head)}
-h1{font-family:var(--f-display);font-weight:900;font-size:var(--fs-h1);line-height:1.05;margin:12px 0 12px}
-h2{font-family:var(--f-display);font-weight:700;font-size:var(--fs-h3);line-height:1.3;margin:44px 0 12px;padding-top:24px;border-top:1px solid var(--line)}
-.note{color:var(--ash);font-size:15px;max-width:72ch;margin-bottom:20px}
 .note b{color:var(--bone);font-weight:500}
 .labels{display:grid;gap:var(--gap-tile);grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));margin:20px 0 28px}
 .label{background:var(--graphite);border:1px solid var(--line);border-radius:var(--tile-r);padding:var(--tile-pad);min-width:0}
@@ -120,20 +69,15 @@ h2{font-family:var(--f-display);font-weight:700;font-size:var(--fs-h3);line-heig
 .chips{display:flex;flex-wrap:wrap;gap:8px;margin:0 0 16px}
 .chip{font:inherit;font-size:13px;color:var(--ink-2);background:var(--graphite);border:1px solid var(--line);border-radius:999px;padding:6px 12px;cursor:pointer;min-height:36px;transition:border-color .15s ease,color .15s ease}
 .chip b{color:var(--bone);font-weight:600}.chip:hover{border-color:var(--ink-2)}.chip.on{border-color:var(--ember);color:var(--bone)}
-.tbl{overflow-x:auto;margin:0 0 24px;border:1px solid var(--line);border-radius:var(--card-r);background:var(--graphite);-webkit-overflow-scrolling:touch}
 .hint{font-family:var(--f-mono);font-size:12px;color:var(--ash);margin:0 0 10px;display:none}
 @media (max-width:1140px){.hint{display:block}}
-table{border-collapse:collapse;width:100%;min-width:1100px;font-size:14px}th,td{padding:12px 14px;text-align:left;vertical-align:top;border-bottom:1px solid var(--line)}
-th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);font-weight:500;background:var(--obsidian);white-space:nowrap;padding:0}
 th button{all:unset;display:block;box-sizing:border-box;width:100%;padding:12px 14px;cursor:pointer;color:inherit;font:inherit;letter-spacing:inherit;text-transform:inherit}
 th button:hover{color:var(--bone)}th button:focus-visible{outline:2px solid var(--ember);outline-offset:-3px;border-radius:6px}
 th[aria-sort] button::after{content:' \2191';color:var(--ember)}th[aria-sort="descending"] button::after{content:' \2193'}
-tr:last-child td{border-bottom:0}tr[hidden]{display:none}
 td.n{font-family:var(--f-mono);color:var(--ash)}td.claim{min-width:220px;font-weight:500}td .where{font-weight:400;color:var(--ash);font-size:13px;margin-top:4px}
 td.mono{font-family:var(--f-mono);font-size:12.5px;min-width:180px}td.iv{color:var(--ash);white-space:nowrap}
 .st{display:inline-block;font-family:var(--f-mono);font-size:11px;letter-spacing:.08em;text-transform:uppercase;padding:3px 8px;border-radius:999px;border:1px solid var(--line);white-space:nowrap}
 .st-0{color:var(--ash)}.st-1{color:var(--ink-2)}.st-2{color:var(--molten);border-color:var(--molten)}.st-3,.st-4{color:var(--ember);border-color:var(--ember)}
-code{font-family:var(--f-mono);font-size:.92em;background:var(--obsidian);padding:1px 5px;border-radius:4px;overflow-wrap:anywhere}
 .small table{min-width:560px}
 .asof{color:var(--ash);font-size:13px;margin:40px 0 0;max-width:72ch}
 </style>
@@ -144,10 +88,9 @@ code{font-family:var(--f-mono);font-size:.92em;background:var(--obsidian);paddin
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live">Live devnet</a>
@@ -156,20 +99,32 @@ code{font-family:var(--f-mono);font-size:.92em;background:var(--obsidian);paddin
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence" aria-current="page">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
@@ -191,27 +146,27 @@ code{font-family:var(--f-mono);font-size:.92em;background:var(--obsidian);paddin
 <div class="tbl"><table id="claims">
 <thead><tr><th data-col="0" data-num="1">#</th><th data-col="1">Claim</th><th data-col="2" data-status="1">Status</th><th data-col="3">Version or commit</th><th data-col="4">Reproducible test</th><th data-col="5">Result, date, machine</th><th data-col="6">Independent verification</th></tr></thead>
 <tbody>
-<tr data-status="tested by the team"><td class="n">1</td><td class="claim">A new mining program every hour, compiled by the miner, with no human in the loop and no pause in mining<div class="where">Homepage hero and "This hour's program"; litepaper Mining</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">igneum-pow 0.2.0; repo <code>b27da39</code>, <code>1292110</code>, <code>100c5d7</code>; fork <code>devnet-v4</code> <code>6457ca95</code></td><td>The live devnet v4: the node announces <code>next_epoch_seed</code> 150 DAA past the seed score, <code>igneum-miner</code> sends <code>prepare</code> to its worker, the worker builds the next program while the current one mines; Metal (<code>proto-metal/igneum-bench</code>), CUDA and OpenCL workers; bench-log "first hourly program swap on the live devnet"</td><td>Epoch boundary at DAA 3,600 (10:05:07 UTC, 4 October 2026) crossed live on three vendors: the Apple M5 Max M5 Max (Metal) compiled the next program in 82 ms, 449 DAA before the boundary, swapped in 0.01 ms, 26.7 MH/s before and after; the RTX 5090 compiled in 1,285 ms, swapped in 0.00 ms, 121.8 before and 123.4 MH/s after; the integrated AMD chip 2.74 MH/s before and after. 0 restarts, 0 rejected blocks, 0 rebuilds. The epoch seed is the epoch block hash; the delay of row 2 is not wired in. At a later boundary (DAA 18,000) one OpenCL worker on PC 2 stayed on the previous epoch after an app reinstall and answered 514 jobs with a seed mismatch; fixed in the miner (<code>3bfe346f</code>, workers emit a <code>need</code> line), the swap time of that forced prepare not measured</td><td class="iv">none yet</td></tr>
+<tr data-status="tested by the team"><td class="n">1</td><td class="claim">A new mining program every hour, compiled by the miner, with no human in the loop and no pause in mining<div class="where">Homepage hero and "This hour's program"; litepaper Mining</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">igneum-pow 0.2.0; repo <code>b27da39</code>, <code>1292110</code>, <code>100c5d7</code>; fork <code>devnet-v4</code> <code>6457ca95</code></td><td>The live devnet v4: the node announces <code>next_epoch_seed</code> 150 DAA past the seed score, <code>igneum-miner</code> sends <code>prepare</code> to its worker, the worker builds the next program while the current one mines; Metal (<code>proto-metal/igneum-bench</code>), CUDA and OpenCL workers; bench-log "first hourly program swap on the live devnet"</td><td>Epoch boundary at DAA 3,600 (10:05:07 UTC, 4 October 2026) crossed live on three vendors: the Apple M5 Max M5 Max (Metal) compiled the next program in 82 ms, 449 DAA before the boundary, swapped in 0.01 ms, 26.7 MH/s before and after; the RTX 5090 compiled in 1,285 ms, swapped in 0.00 ms, 121.8 before and 123.4 MH/s after; the integrated AMD chip 2.74 MH/s before and after. 0 restarts, 0 rejected blocks, 0 rebuilds. The epoch seed is the epoch block hash; the delay of row 2 is not wired in. At a later boundary (DAA 18,000) one OpenCL worker on the RTX 5090 Windows rig stayed on the previous epoch after an app reinstall and answered 514 jobs with a seed mismatch; fixed in the miner (<code>3bfe346f</code>, workers emit a <code>need</code> line), the swap time of that forced prepare not measured</td><td class="iv">none yet</td></tr>
 <tr data-status="implemented"><td class="n">2</td><td class="claim">The program seed passes through a 10-minute verifiable delay from a certified checkpoint, so nobody can grind the seed<div class="where">Litepaper Mining, vs RandomX ("Closed by a verifiable delay")</div></td><td><span class="st st-1">implemented</span></td><td class="mono">repo <code>792776e</code>; <code>proto-vdf/</code></td><td><code>proto-vdf</code> full 10-minute runs and the tamper cases in <code>proto-vdf/README.md</code>; bench-log "proto-vdf"</td><td>Class group 1024-bit: 163,000 squarings per second, 10-min eval 585.4 s, prove 9.1 s on 12 threads, verify 4.47 ms, 516-byte proof; wrong checkpoint, flipped seed bit and T+1 all rejected; grinding model gains 0 blocks per epoch with the delay against +3.62 at a 30% advantage without it. 3 October 2026, Apple M5 Max, one core. Prototype only: not in the node on 4 October either, not reviewed against chiavdf (O-4.1)</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">3</td><td class="claim">The dataset is memory-hard: computing an item costs more than loading it, and every hash does 128 distinct dataset reads<div class="where">Litepaper Mining and vs RandomX; homepage vs RandomX ("Memory 2 GB, growing")</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>58a5a63</code> (memory-hard), <code>b27da39</code> (generator 2); igneum-pow 0.2.0 (<code>memhard.rs</code>, <code>generator.rs</code>, <code>accept.rs</code>); spec 01 sections 1.4.2 to 1.4.6; <code>proto-metal/MEMHARD.md</code></td><td><code>proto-metal/igneum-bench --inline-dataset</code> against the honest run at 1 GiB and 256 MiB; <code>igneum-census --gen v2 --warps 64</code> over 20,000 programs; bench-log "memory-hard dataset" and "generator version 2 adopted"</td><td>Honest 45.2 Mhash/s, inline (never reads the dataset) 9.49 Mhash/s, ratio 0.21 at 1 GiB, 0.10 at 256 MiB. 3 October 2026, Apple M5 Max. Generator 2, 4 October 2026: 20,000 programs, 128 static loads on every program, distinct addresses per hash mean 127.9, minimum 120.1; 5.2% of candidates rejected by the acceptance rule. The price of the 128 fresh reads is the hash rate: Apple OpenCL 45.0 MH/s on a version 1 program with 80 distinct loads against 27.5 to 27.9 on version 2; the RTX 5090 229 MH/s on a 104-load version 1 program at 1 GiB (3 October) against 121.8 to 124.2 MH/s mining version 2 on the live devnet (4 October). Apple only for the shortcut ratio (O-1.5); the on-die cache question of ledger M16 is unchanged</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">4</td><td class="claim">The same program produces identical hashes on three GPU vendors, cache and dataset included<div class="where">Litepaper vs RandomX ("Bit-exact on Apple, NVIDIA and AMD, measured"), For miners; homepage</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>f2e903e</code>, <code>0f1fdaf</code> (version 1 packs), <code>b27da39</code> (version 2 packs <code>igneum-genesis-mh</code>, <code>igneum-devnet-v4-epoch0</code>); igneum-pow 0.2.0</td><td>The 96 test vectors of a pack through <code>proto-metal/igneum-bench</code>, <code>proto-cuda/host.cu</code>, <code>proto-opencl/host.c</code>; batch fingerprint at <code>--batch-log2 24</code>; the miner's CPU re-check of every share a GPU worker finds on the devnet; bench-log entries "RTX 5090, memory-hard dataset", "AMD gfx1036", "RTX 5090 through NVIDIA OpenCL", "generator version 2 adopted", "the gfx1036 worker fault"</td><td>Version 1: 96/96 on Apple Metal (M5 Max), NVIDIA CUDA and NVIDIA OpenCL (RTX 5090, Windows), AMD OpenCL (Ryzen 7 9800X3D integrated gfx1036, 1 compute unit), Apple OpenCL, pocl and two CPU references; batch fingerprint <code>98af644e993239e2</code> over 16.7 million nonces identical on the AMD chip and the 5090, 3 October 2026. Version 2: 96/96 on Apple Metal, Apple OpenCL and the CUDA and OpenCL emulators with identical fingerprints; on real NVIDIA and AMD silicon the version 2 vectors have not run as a pack, but both mined accepted blocks on the live devnet with the CPU re-check clean on every share (RTX 5090 at 124.2 MH/s, gfx1036 at 3.3 MH/s), 4 October 2026. The AMD device is an integrated chip; no discrete AMD card and no Intel card has run anything (O-1.15)</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">5</td><td class="claim">A CPU verifies one hash in under 10 ms by simulating one warp<div class="where">Litepaper Mining ("about ten milliseconds"), vs RandomX; roadmap gate 2</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>75cac18</code>, <code>b27da39</code>; igneum-pow 0.2.0 (<code>verify.rs</code>)</td><td><code>cargo test</code> and the crate bench in <code>igneum-pow/</code>; bench-log "igneum-pow: Rust crate bit-exact with proto-metal" and "generator version 2 adopted"</td><td>0.411 to 0.579 ms per 32-lane warp steady, 0.41 to 0.87 ms cold, average of 20, 1 GiB dataset, cache held, one M5 Max performance core, 3 October 2026; version 2 units 0.631 ms (average of 20), cold 0.67 to 0.81 ms, 4 October 2026. Gate margin about 16x on this core. Not measured on a 2019-class laptop core (O-1.14)</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">6</td><td class="claim">The hash is bound to the header: one nonce serves one header, and a wrong nonce is rejected<div class="where">Spec 1.6; litepaper Mining (implied by "checks a hash")</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>33f7b33</code>, <code>9812466</code>, <code>b27da39</code>; igneum-pow 0.2.0 (<code>bind.rs</code>, bound vectors re-cut for version 2, 39 crate tests)</td><td><code>igneum-miner bad-nonce</code> against a devnet node; <code>igneum-pow hash-bound</code> for the 96-nonce job across the 2^32 lane boundary; bench-log "first devnet blocks on the real lottery hash" and "generator version 2 adopted"</td><td>833 blocks accepted by <code>igneum-lottery-v1-bound</code> on 3 nodes, 0 rejections; <code>bad-nonce</code> gave Reject(BlockInvalid); Metal, OpenCL and CUDA (emulated) workers bit-exact with the crate on the lane-boundary job, 3 October 2026, Apple M5 Max. Version 2: the node's engine reports <code>igneum-lottery-v2-bound</code>, 39 of 39 crate tests, and the live devnet v4 accepts its blocks under it, 4 October 2026</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">7</td><td class="claim">The devnet runs at one block a second<div class="where">Homepage stats ("1 / s"); litepaper Speed; roadmap phase 3</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>9812466</code>, <code>e9328c6</code>, <code>8dae48b</code>; fork <code>devnet-v4</code> <code>dc749905</code></td><td>The merged node's 3-node test network (<code>igneum-devnet-880</code>, 960 s); the live devnet v4 record <code>sim/difficulty/records/live-2026-10-04.csv</code>; the 12-node cloud network's arrival logs; bench-log "devnet-v4 integration", "difficulty rule v2", "first devnet blocks"</td><td>Merged node, 4 October 2026, Apple M5 Max: 1,055 blocks in 960 s, 1.03 blocks/s, sink identical on 3 nodes at 31 of 31 samples, 0 rejected. Live devnet v4 the same day: 49 to 81 blocks a minute while two RTX 5090s joined and left (row 12), 1.1 to 1.2 blocks/s in the oscillating window, then within 1.3% per minute with one PC and the Apple M5 Max. The 12-node cloud network at one block a second: 644 blocks in a 10-minute window. The 3 October CPU devnet: 1.29 blocks/s over 641 s, 1.03 after the first retarget. The phase 3 gate also asks for proofs under 60 s behind the tip; no proof is on the chain (row 15)</td><td class="iv">none yet</td></tr>
-<tr data-status="tested by the team"><td class="n">8</td><td class="claim">Blocks are mined by GPUs on Apple and NVIDIA<div class="where">Homepage live strip; journey phase 3 ("GPU miners on three vendors")</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>9812466</code>, <code>e9328c6</code>, <code>d7e1f89</code>, <code>2309c8d</code>; fork <code>devnet-v4</code></td><td>Metal worker <code>proto-metal/igneum-bench --serve</code> driven by <code>igneum-miner --worker</code>; the live devnet v4 hash-rate record <code>sim/difficulty/records/live-2026-10-04-hashrate.csv</code> (587 worker STATUS lines by run id); bench-log "first devnet blocks", "devnet v4 cut-over", "difficulty rule v2", "first machine on the Igneum Miner app"</td><td>Metal: 506 jobs, 5,636 blocks found and accepted, 0 rejected, 0 CPU/GPU mismatches, 28.2 MH/s wall, 3 October 2026. Live devnet v4, 4 October 2026: PC 1's RTX 5090 at 122 MH/s with 8 identities, PC 2's at 124 MH/s with 8 identities (117 to 119 MH/s inside the one-click app, 34 accepted blocks in its first minute, CPU re-check OK on every share), the Apple M5 Max's Metal worker at 26.7 MH/s; 17 vote keys signed the first finality lock (row 10); from the afternoon an Apple silicon laptop outside the project at 21.0 MH/s through the app (row 30). Two RTX 5090s and two Apple chips; no other NVIDIA model has mined</td><td class="iv">none yet</td></tr>
-<tr data-status="tested by the team"><td class="n">9</td><td class="claim">Blocks are mined by a GPU on AMD<div class="where">Journey phase 3 ("three vendors")</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>2c4b30f</code> (generic OpenCL worker, <code>--pack</code>), <code>112acf6</code> (fault guards); bound kernel <code>kernel_bound.cl</code> in the pack</td><td><code>igneum-worker-opencl.exe --pack</code> on PC 2's integrated Radeon against the live devnet v4 through the Windows package; bench-log "the gfx1036 worker fault", "first hourly program swap", "first machine on the Igneum Miner app"</td><td>PC 2's integrated gfx1036 (1 compute unit) mined on the live devnet on 4 October 2026: 8 accepted blocks at 3.3 MH/s over 577 s with the CPU re-check clean, and 2.74 MH/s through the hourly program swap with 0 rejected. At about 600 s the AMD runtime began answering every call with success while running nothing (906 jobs became 56,384 in 30 s, 4.3 GH/s of phantom work); not reproduced on Apple OpenCL in 4,565 jobs with 0 leaked objects; the worker and miner now refuse a job 20x faster than the mean or an unchanged output buffer and restart (<code>112acf6</code>), and the next gfx1036 run names the guard that fires. One integrated chip; no discrete AMD card has run anything</td><td class="iv">none yet</td></tr>
+<tr data-status="tested by the team"><td class="n">8</td><td class="claim">Blocks are mined by GPUs on Apple and NVIDIA<div class="where">Homepage live strip; journey phase 3 ("GPU miners on three vendors")</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>9812466</code>, <code>e9328c6</code>, <code>d7e1f89</code>, <code>2309c8d</code>; fork <code>devnet-v4</code></td><td>Metal worker <code>proto-metal/igneum-bench --serve</code> driven by <code>igneum-miner --worker</code>; the live devnet v4 hash-rate record <code>sim/difficulty/records/live-2026-10-04-hashrate.csv</code> (587 worker STATUS lines by run id); bench-log "first devnet blocks", "devnet v4 cut-over", "difficulty rule v2", "first machine on the Igneum Miner app"</td><td>Metal: 506 jobs, 5,636 blocks found and accepted, 0 rejected, 0 CPU/GPU mismatches, 28.2 MH/s wall, 3 October 2026. Live devnet v4, 4 October 2026: the three-card Windows rig's RTX 5090 at 122 MH/s with 8 identities, the RTX 5090 Windows rig's at 124 MH/s with 8 identities (117 to 119 MH/s inside the one-click app, 34 accepted blocks in its first minute, CPU re-check OK on every share), the Apple M5 Max's Metal worker at 26.7 MH/s; 17 vote keys signed the first finality lock (row 10); from the afternoon an Apple silicon laptop outside the project at 21.0 MH/s through the app (row 30). Two RTX 5090s and two Apple chips; no other NVIDIA model has mined</td><td class="iv">none yet</td></tr>
+<tr data-status="tested by the team"><td class="n">9</td><td class="claim">Blocks are mined by a GPU on AMD<div class="where">Journey phase 3 ("three vendors")</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>2c4b30f</code> (generic OpenCL worker, <code>--pack</code>), <code>112acf6</code> (fault guards); bound kernel <code>kernel_bound.cl</code> in the pack</td><td><code>igneum-worker-opencl.exe --pack</code> on the RTX 5090 Windows rig's integrated Radeon against the live devnet v4 through the Windows package; bench-log "the gfx1036 worker fault", "first hourly program swap", "first machine on the Igneum Miner app"</td><td>the RTX 5090 Windows rig's integrated gfx1036 (1 compute unit) mined on the live devnet on 4 October 2026: 8 accepted blocks at 3.3 MH/s over 577 s with the CPU re-check clean, and 2.74 MH/s through the hourly program swap with 0 rejected. At about 600 s the AMD runtime began answering every call with success while running nothing (906 jobs became 56,384 in 30 s, 4.3 GH/s of phantom work); not reproduced on Apple OpenCL in 4,565 jobs with 0 leaked objects; the worker and miner now refuse a job 20x faster than the mean or an unchanged output buffer and restart (<code>112acf6</code>), and the next gfx1036 run names the guard that fires. One integrated chip; no discrete AMD card has run anything</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">10</td><td class="claim">Checkpoints lock every 30 s of chain at two thirds of all 30-day weight, and the floor stops conflicting locks in partitions and eclipses for as long as neither side's own new blocks carry it past two thirds of its window (about 10 days of a 30-day window at a 50/50 split)<div class="where">Litepaper Finality, "What Igneum does not claim"; homepage "locked every 30 seconds"</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>a3a9833</code> (2/3 floor, O-3.15), <code>bbb264a</code> (simulation), <code>c16ccf1</code>; fork <code>devnet-v4</code> <code>6457ca95</code> (<code>FLOOR_NUM / FLOOR_DEN</code> 2/3), <code>da1eb889</code> (F17 by-weight sortition, F1 first-month gate <code>min_daa = window</code>); spec 3.3, 3.3.1, 3.7, 3.9</td><td>The live devnet v4 (<code>getFinalityCheckpoints</code>, <code>tools/observer/observer.mjs</code>, <code>/api/checkpoint</code>); <code>sim/finality_v2.py --floor 1.0</code>, scenarios A to L; the three-node, six-voter partition runs <code>igneum-devnet-921</code> to <code>-923</code>; <code>tools/finality-attacks</code> scenarios 1 to 6 and 8; bench-log "first finality lock on the live devnet", "finality floor 2/3", "finality v2 attack harness", "finality fixes F17 and F1"</td><td>Live: the first lock on the live devnet was checkpoint 242 at 11:03:44 UTC on 4 October 2026, two hours after genesis (the window and <code>min_daa</code> are 7,200 DAA), with 77.4% of all weight and of active weight signed by 12 aggregated votes from 17 vote keys; <code>observer.mjs</code> saw it 0.7 s after the miner's own lock line. By 13:21 UTC the observer held 280 certificates, indices 241 to 522 (DAA 7,229 to 17,982), 17 to 27 voters, no index with two hashes. Test networks, 4 October 2026, Apple M5 Max: a 4/2 split locked on the 4 side (67.9%) 2 to 8 s after the cut and never on the 2 side, 0 conflicts; a 3/3 split locked on neither side for 150 s with 0 conflicts, where the 3 October floor (56.7%) would have locked both sides at 76 and 106 s; the rule guarantees one lock history for partitions shorter than the window bound W / (3R) (200 s on that test network's 1,800-DAA window, about 40 minutes on the devnet, about 10 days at the 30-day mainnet window); beyond that bound each side can reach two thirds of its own window, so the next finality rule freezes the weight table at the last certified checkpoint and pauses instead. Simulator with the 2/3 floor: 0 conflicts up to a 33% equivocator (34% splits a 50/50 partition), silent weight pauses locks from 34%, a 50/50 partition locks alone from day 10.1. Harness: equivocating keys stripped on every node, Sybil dust at zero weight, a pulsed miner's weight equal to its block share (ratio 0.96 to 1.0), the first-month gate stops a young window locking under one key. Not demonstrated: certificate injection on the wire, an eclipse with a private fork, the 2-hour presence window at mainnet length</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">11</td><td class="claim">Hashrate that arrived today has almost no vote: ten days of the whole network's hashrate to reach a third of the weight, twenty for two thirds; 51% never reaches two thirds while honest miners stay<div class="where">Litepaper Finality; homepage firsts</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>bbb264a</code>; <code>sim/finality_v2.py</code></td><td>Scenario B of <code>sim/finality_v2.py</code>, seeds 7 and 11</td><td>share(t) = (t/30) x a/(1+a) holds to 0.04 points; a renter equal to the whole honest network (a = 1) crosses 1/3 on day 20 and never reaches 2/3; a = 9 crosses 1/3 on day 11.1 and 2/3 on day 22.2. The ten-day figure is a = infinity, honest miners gone. 3 October 2026, Apple M5 Max. A model with 1,000 Pareto keys and no DAG; the live devnet's window is two hours old, so the claim has no live measurement yet</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">12</td><td class="claim">The difficulty rule recovers from a hashrate step within minutes, where Kaspa's sampled rule never settles. A step inside an epoch set the rule oscillating on the live devnet on 4 October 2026; rule v2 removes it in the simulator and on a test network and is built but not yet rolled out<div class="where">Spec 2.3; litepaper Speed (implied); bench page</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>e9328c6</code>, <code>abb5a5d</code> (attacks), <code>67bf226</code> (rule v2); fork <code>difficulty</code> branch (timestamp fix) and <code>devnet-v4</code> <code>a21ff239</code> (<code>difficulty_v2_activation_daa</code>, <code>REF_WINDOW_V2 = 600</code>); <code>sim/difficulty/sim.py --live</code></td><td>The live record <code>sim/difficulty/records/live-2026-10-04.csv</code> (8,090 headers, <code>pull_live.py</code>) and the hash-rate record beside it; <code>sim/difficulty/sim.py</code> on the synthetic set and the DAG replay; <code>sim/difficulty/attacks/attacks.py</code>; <code>sim/difficulty/testnet_v2.py</code> (3 nodes, activation at DAA 900); <code>cargo test --release -p kaspa-consensus --lib difficulty</code> (15 pass); bench-log "difficulty controller", "difficulty rule under attack", "timestamp attack fixed", "difficulty rule v2"</td><td>Live devnet v4, 4 October 2026 (UTC): a second RTX 5090 joining 7 minutes into an epoch (about 152 to 280 MH/s) hardened the difficulty 70M to 144M in 90 s and then swung by about a third for 40 minutes around the true level of 139M while the epoch-long reference lane carried the join; that card leaving for 4 minutes eased 116M to 67M and back to 106M; the epoch boundary with both PCs restarting took 152M to 77M in 3 minutes, after which the rule held within 1.3% per minute with no flips. Cause: the reference lane covered the whole epoch, so a mid-epoch step polluted it for the hour and the 25% trigger flipped on the short lane's noise. The DAG replay reproduces the record (std of log difficulty 0.115 against 0.134, 4.3 peaks against 4). Rule v2 (reference window 600 DAA) on the replay: std 0.026, 0 flips, mean 142.6M against 139M true; on a 3-node test network the v2 nodes eased a leave with no peak and held a rejoin within 3% after 60 s, and a node without the activation height forked off at it as designed. Rule v2 rolled onto the 12-node cloud network on 4 October (all nodes crossed the height on one chain; a hash-rate step then settled in 160 to 270 s with no swing) and activates on the devnet at DAA 33,000 the same evening. Timestamp forging (ledger M23) fixed the same day: a 50% forger drifts the rate under 1.1% where the 3 October rule gave it a 9.9x difficulty. Simulator, settled seconds: x50 step 62 to 66 (Kaspa 1,542), /50 step 657 to 753 (Kaspa 12,296). Apple M5 Max under load 7 to 442; the DAG model is fitted on one scale; the pool hopper's 0.7-point excess over Kaspa's rule stays open</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">13</td><td class="claim">Every node executes the ordered transactions natively and reaches the same state root<div class="where">Litepaper Proving ("Every node executes ... natively"), Building ("runs on Igneum unchanged")</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>f5f8c80</code>, <code>8dae48b</code>; fork <code>devnet-v4</code> <code>dc749905</code>; revm 43.0.3</td><td><code>node tools/evm-smoke/smoke.mjs</code> against a 3-node <code>igneumd</code>; <code>igneum-exec-diff seq.json</code>; bench-log "execution layer devnet v3" and "devnet-v4 integration"</td><td>Simnet, 3 October 2026: 87 of 87 viem checks, state roots identical on 3 nodes at four heights, 57 executed and 19 skipped transactions agree with plain revm, 0 mismatches. Merged node on real proof of work, 4 October 2026: 84 of 85 checks (the miss needs parallel blocks the network did not produce in 36 s), 59 transfers in 10 chain blocks, state roots identical on 3 nodes, <code>igneum-exec-diff</code> 0 mismatches over 59 transactions; the live devnet v4 runs this execution layer. Apple M5 Max. The prover is a stub; state is rebuilt from genesis at start; no EVM transaction relay between nodes</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">14</td><td class="claim">Ethereum bytecode runs unchanged, with the documented differences of spec 7.1<div class="where">Homepage Build card; litepaper Building</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">as row 13; fixes <code>F-exec-A</code>, <code>F-exec-B</code> (spec 7.5)</td><td><code>tools/evm-smoke/smoke.mjs</code>: deploy via viem, <code>increment</code>, <code>hashLoop</code>, <code>eth_estimateGas</code>, <code>eth_getLogs</code>; <code>tools/exec-attacks</code> scenarios 1 and 3; bench-log "execution layer attack fixes"</td><td>Deployment, calls, reverts, logs and gas estimates behave as viem expects; chain id 4463; the prototype pgas table gives 0.0095 to 0.028 pgas per gas, below the design's band before calibration, 3 October 2026. 4 October 2026: a transaction that would cross the block's proving budget is refused by the mempool and, if forced in, aborted and charged with its nonce advanced (25 of 25 checks; 30 of 30 malformed cases). Apple M5 Max. The <code>Prover</code> precompile, proof records and the shard planner are not in the node</td><td class="iv">none yet</td></tr>
-<tr data-status="implemented"><td class="n">15</td><td class="claim">Every block is proven, with the proof landing within about a minute at launch<div class="where">Homepage stats ("~60 s to a proof"); litepaper Proving; roadmap phase 3 gate</div></td><td><span class="st st-1">implemented</span></td><td class="mono">repo <code>d7e1f89</code> (GPU proof), <code>e01a3cc</code>, <code>292e800</code>, <code>eedd136</code> (<code>proving/igneum-prove</code>: shard cutter, MPT witnesses, shard and aggregator guests); SP1 6.8.1; spec 7.2, 7.6</td><td><code>proving/windows-wsl2</code> (SETUP-PROVER, PROVE-BLOCK) on the RTX 5090; <code>igneum-prove-host --mode block</code> on <code>proving/fixtures/</code>; bench-log "proving v0 on the RTX 5090" and "proving: devnet v4 shards"</td><td>First GPU proof of an Igneum block, 4 October 2026, RTX 5090 (WSL2, SP1 cuda, mining paused): fixture <code>block-78-increment</code> (2 transactions), core proof 1.4 s (7.3 MB, verify 0.221 s), compressed proof 2.7 s (1.27 MB, verify 0.038 s), post-state and receipts roots identical to the node's; 15.7x and 20.6x faster than a loaded M5 Max CPU. The same day on that CPU (load 38 to 47): a three-shard block proved shard by shard and aggregated by recursion, 19 min (1,139 s) end to end, 245 to 337 s per compressed shard proof, every proof verified. What is not there: no proof is produced, carried or checked on the chain (the devnet prover is a stub that signs claims), the proving pool pays nobody (row 21), the block proven is far below one shard, and the 60-second figure remains a design target; the pass mark is the standard in <code>docs/benchmarks/proving-e2e.md</code>. Second RTX 5090 run, 4 October 2026 evening (job run-20261004-173115): a full shard at the provisional S_p (6.75 M pgas, 60.8 M cycles) executed in 1.63 s, core proof 8.3 s (18.1 MB), compressed proof 10.9 s (1.27 MB, verify 0.040 s); a two-shard block (13.5 M pgas) proved shard by shard (11.7 s and 10.0 s) and aggregated in 2.2 s, 24 s of GPU stages end to end, every proof verified, six tampered witnesses rejected. The two host defects (an abort after the upload, an idle wait that turned out to be an unbuffered 18 MB proof save through the WSL2 file bridge, 24 minutes) are fixed (ledger P20) 5 October 2026, live devnet with real transactions (bench-log "real transactions, the first non-empty shard proven and paid"): block 72704 shard 0, 29 transfers, 5,800 pgas, proven on PC 2 in 34 s, verified on the Apple M5 Max in 0.297 s and paid 1.7623 IGN, 53 s after the chain block executed; of about 1,400 blocks in the 20-minute window 36 were proven (the one prover takes the newest shard assigned to it), so "every block" is not yet true; a second content shard (72803, all copies skipped) failed the native-execution veto on the exporter's block structure, fixed with fixtures the same day, the node side pending the 0.3.9 rollout 5 October 2026, evening (bench-log "proving v1"): the aggregated segment record, the chain rule and the unproven rule are implemented behind <code>proving_v1_activation_daa</code> (branch proving-v1, not on the devnet before 0.3.11); on the RTX 5090 a chain of 8 consecutive live blocks proved and aggregated by recursion in 135.6 s with the miner on the card (17 s a block, one proof of 1,272,909 bytes attesting all 8, verified in 0.04 s); the 3-node fast-time harness paid a segment record 1.0 s after submission and refused a late one after its deadline (21 checks); the devnet itself, with one prover, carried proofs for 2.4% of blocks over 30 minutes at a block-to-record latency p50 44 s, p99 52 s. The "within about a minute" holds per proven block; "every block" needs 18 mining 5090s or 6 proving-only cards at empty blocks on the measured rates, and the mandatory rule stays off until the share is one</td><td class="iv">none yet</td></tr>
+<tr data-status="implemented"><td class="n">15</td><td class="claim">Every block is proven, with the proof landing within about a minute at launch<div class="where">Homepage stats ("~60 s to a proof"); litepaper Proving; roadmap phase 3 gate</div></td><td><span class="st st-1">implemented</span></td><td class="mono">repo <code>d7e1f89</code> (GPU proof), <code>e01a3cc</code>, <code>292e800</code>, <code>eedd136</code> (<code>proving/igneum-prove</code>: shard cutter, MPT witnesses, shard and aggregator guests); SP1 6.8.1; spec 7.2, 7.6</td><td><code>proving/windows-wsl2</code> (SETUP-PROVER, PROVE-BLOCK) on the RTX 5090; <code>igneum-prove-host --mode block</code> on <code>proving/fixtures/</code>; bench-log "proving v0 on the RTX 5090" and "proving: devnet v4 shards"</td><td>First GPU proof of an Igneum block, 4 October 2026, RTX 5090 (WSL2, SP1 cuda, mining paused): fixture <code>block-78-increment</code> (2 transactions), core proof 1.4 s (7.3 MB, verify 0.221 s), compressed proof 2.7 s (1.27 MB, verify 0.038 s), post-state and receipts roots identical to the node's; 15.7x and 20.6x faster than a loaded M5 Max CPU. The same day on that CPU (load 38 to 47): a three-shard block proved shard by shard and aggregated by recursion, 19 min (1,139 s) end to end, 245 to 337 s per compressed shard proof, every proof verified. What is not there: no proof is produced, carried or checked on the chain (the devnet prover is a stub that signs claims), the proving pool pays nobody (row 21), the block proven is far below one shard, and the 60-second figure remains a design target; the pass mark is the standard in <code>docs/benchmarks/proving-e2e.md</code>. Second RTX 5090 run, 4 October 2026 evening (job run-20261004-173115): a full shard at the provisional S_p (6.75 M pgas, 60.8 M cycles) executed in 1.63 s, core proof 8.3 s (18.1 MB), compressed proof 10.9 s (1.27 MB, verify 0.040 s); a two-shard block (13.5 M pgas) proved shard by shard (11.7 s and 10.0 s) and aggregated in 2.2 s, 24 s of GPU stages end to end, every proof verified, six tampered witnesses rejected. The two host defects (an abort after the upload, an idle wait that turned out to be an unbuffered 18 MB proof save through the WSL2 file bridge, 24 minutes) are fixed (ledger P20) 5 October 2026, live devnet with real transactions (bench-log "real transactions, the first non-empty shard proven and paid"): block 72704 shard 0, 29 transfers, 5,800 pgas, proven on the RTX 5090 Windows rig in 34 s, verified on the Apple M5 Max in 0.297 s and paid 1.7623 IGN, 53 s after the chain block executed; of about 1,400 blocks in the 20-minute window 36 were proven (the one prover takes the newest shard assigned to it), so "every block" is not yet true; a second content shard (72803, all copies skipped) failed the native-execution veto on the exporter's block structure, fixed with fixtures the same day, the node side pending the 0.3.9 rollout 5 October 2026, evening (bench-log "proving v1"): the aggregated segment record, the chain rule and the unproven rule are implemented behind <code>proving_v1_activation_daa</code> (branch proving-v1, not on the devnet before 0.3.11); on the RTX 5090 a chain of 8 consecutive live blocks proved and aggregated by recursion in 135.6 s with the miner on the card (17 s a block, one proof of 1,272,909 bytes attesting all 8, verified in 0.04 s); the 3-node fast-time harness paid a segment record 1.0 s after submission and refused a late one after its deadline (21 checks); the devnet itself, with one prover, carried proofs for 2.4% of blocks over 30 minutes at a block-to-record latency p50 44 s, p99 52 s. The "within about a minute" holds per proven block; "every block" needs 18 mining 5090s or 6 proving-only cards at empty blocks on the measured rates, and the mandatory rule stays off until the share is one</td><td class="iv">none yet</td></tr>
 <tr data-status="designed"><td class="n">16</td><td class="claim">A 12 GB card proves one shard in about 20 s (WITHDRAWN 5 October 2026: a 24 GB card proves a full shard at the adopted size in 4.3 s; 32 GB mines and proves)<div class="where">Litepaper Proving ("The proving budget"); roadmap gate 2</div></td><td><span class="st st-0">designed</span></td><td class="mono">spec 5.1 (Target), 7.6 (<code>S_p</code> provisional, 7,500,000 pgas = <code>B_p</code> / 4)</td><td><code>PROVE-SHARD.bat</code> on the RTX 5090 (pending); the end-to-end standard in <code>docs/benchmarks/proving-e2e.md</code>; bench-log "proving: devnet v4 shards"</td><td>Measured on a 32 GB card, not yet on a 12 GB card. A shard at the provisional <code>S_p</code> is 60.8 M SP1 cycles on the prototype pgas table (9 cycles per pgas, 44 per EVM gas; the modexp entry about 100x its SP1 cost); on an RTX 5090 (4 October 2026 evening, job run-20261004-173115) it executed in 1.63 s and its compressed proof took 10.9 s, verified in 0.040 s, so the 32 GB card is inside the 20 s target with margin. Whether a 12 GB card proves it at all, and in what time, is the next measurement (an RTX 3060 and an RTX 5060 Ti 16 GB are on order). A per-shard time can be met by shrinking the shard, so the project does not use it as a pass mark 5 October 2026, evening (bench-log "proving v1", the S_p curve): measured on the RTX 5090 with SP1 6.8.1's GPU prover, the card to itself, 1-s nvidia-smi samples: an empty shard 13,874 MiB and 2.2 s; a full shard at the ADOPTED v1 budget (30,000 pgas, 4.7 M cycles) 20,434 MiB and 4.3 s; the full prototype shard (6.75 M pgas, 60 M cycles) 28,307 MiB and 10.8 s; beside the miner 15,670 and 30,039 MiB. No environment knob of SP1 moves the 13.9 GB floor and the GPU server has no options of its own, so on this build a 12 GB card proves nothing, a 16 GB card only empty shards, a 24 GB card the adopted full shard alone and beside the miner (22,210 MiB and 13.2 s, measured on the 32 GB card: the 5090's allocation pattern, not yet a run on a 24 GB card) and a 32 GB card the prototype shard beside the miner with 2.5 GB spare. The litepaper line now says so; the 12 GB gate returns when a prover build with a smaller floor is measured on a 12 GB card</td><td class="iv">none yet</td></tr>
 <tr data-status="designed"><td class="n">17</td><td class="claim">The chip resistance claim: the strongest recompute chip under 1x per chip against an RTX 5090; the stored-dataset chip 1.2x per chip and 5x to 9x per joule in the model (2.1x to 4.8x by the Ethash precedent); the latency-shadow lever, measured and in its gates, brings it to about 2x<div class="where">Homepage hero and litepaper abstract (draft (a) of <code>docs/plans/counter-asic-3-status.md</code> section 6, chosen 6 October 2026), litepaper "What Igneum does not claim"</div></td><td><span class="st st-0">tested by the team (the model), designed (the target)</span></td><td class="mono">program class v3 (Counter ASIC 2.0, 5 October 2026): branches ca2-v3 d233fa1 and after, ca2-mixer 1ab8b21, ca2-era 78c0ee4; <code>docs/analysis/chip-model-v3.md</code>, <code>docs/analysis/sram-mirror.md</code>, <code>docs/analysis/scratch-soundness.md</code></td><td>The m16 recompute model re-run on the measured v3 rates and verifier times; the on-die-cache chip row</td><td>The on-die-cache recompute chip against the RTX 5090's measured 136.1 MH/s: class v2 2.4x; class v3 (mixer x8) 0.31x bare, 0.92x with a 3x fixed-function allowance (approximate), 0.76x at equal silicon; margin 8% on the allowance, 9% on the budget. 5 October 2026, M5 Max, RTX 5090, RX 9070 XT. The 2x target is a target: no chip has been built; the bounty stands (O-1.17)</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">18</td><td class="claim">The chip resistance measurements: the program is latency-bound (random reads), not bandwidth-bound, on every card we own, and sits beyond a card's on-chip cache<div class="where">Litepaper Mining ("waits on memory latency, not on maths or bandwidth"), vs RandomX; the numbers page</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">readwidth e752fc7 (<code>docs/plans/read-width.md</code>), ca2-era 78c0ee4, ca2-cache 2de19e5 (<code>docs/plans/hot-table.md</code>)</td><td>The dependent-read probes at 32 to 1,024 MiB and the hash rate per class on the three cards; the latency-bound share = rate over the probe ceiling per load</td><td>Latency-bound share at the 1 GiB dataset: RTX 5090 0.96 (v2) and 1.01 (v3), RX 9070 XT 0.87 and 0.95, M5 Max 1.01 and 1.06; wider reads do not close the AMD gap (the 9070 XT does 2.4 G dependent reads per second at every width; the 5090 goes bandwidth-bound at 64 B, share 0.58); a 32 to 96 MiB hot table is not kept resident by any card while the dataset streams (g 0.80 to 0.87 in the added form). 5 October 2026</td><td class="iv">none yet</td></tr>
-<tr data-status="tested by the team"><td class="n">19</td><td class="claim">The lottery hash is sound as a hash: uniform output, deterministic, no out-of-bounds read, fuzzed; class v3 bit-exact on the three vendors<div class="where">Litepaper vs RandomX ("Every number above is measured and logged"), the numbers page</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">ca2-mixer 1ab8b21 (<code>tests/mixer.rs</code>, <code>tests/scratch.rs</code>), ca2-era 78c0ee4, ca2-soundness a465881 (<code>docs/analysis/scratch-soundness.md</code>), <code>igneum-pow/tests/packs.rs</code></td><td>The crate suite (53 + 4 + 19 + 7), the Metal fuzz, edge, stats and determinism runs on the v3 construction, the pack vectors and 2^24 fingerprints on Metal, Apple OpenCL, the RTX 5090 and the RX 9070 XT, the 1,024-hash CPU re-check per card</td><td>Class v3 (mixer x8 + era): 200-program fuzz 200 of 200 on Metal, every tenth on Apple OpenCL; the pinned v3 packs 3/3 + 3/3 and 96 of 96 lanes on Metal and Apple OpenCL; the six era packs' fingerprints equal on the three vendors (PC 1 job run-ca2-era-pc1-20261005, 5 October 2026); the v2 exports byte-identical on the v3 crate; the final-class PC rows and the G2 re-check: job run-ca2-era-pc1b-20261005 (pending at the time of writing)</td><td class="iv">none yet</td></tr>
+<tr data-status="tested by the team"><td class="n">19</td><td class="claim">The lottery hash is sound as a hash: uniform output, deterministic, no out-of-bounds read, fuzzed; class v3 bit-exact on the three vendors<div class="where">Litepaper vs RandomX ("Every number above is measured and logged"), the numbers page</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">ca2-mixer 1ab8b21 (<code>tests/mixer.rs</code>, <code>tests/scratch.rs</code>), ca2-era 78c0ee4, ca2-soundness a465881 (<code>docs/analysis/scratch-soundness.md</code>), <code>igneum-pow/tests/packs.rs</code></td><td>The crate suite (53 + 4 + 19 + 7), the Metal fuzz, edge, stats and determinism runs on the v3 construction, the pack vectors and 2^24 fingerprints on Metal, Apple OpenCL, the RTX 5090 and the RX 9070 XT, the 1,024-hash CPU re-check per card</td><td>Class v3 (mixer x8 + era): 200-program fuzz 200 of 200 on Metal, every tenth on Apple OpenCL; the pinned v3 packs 3/3 + 3/3 and 96 of 96 lanes on Metal and Apple OpenCL; the six era packs' fingerprints equal on the three vendors (the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) job run-ca2-era-pc1-20261005, 5 October 2026); the v2 exports byte-identical on the v3 crate; the final-class PC rows and the G2 re-check: job run-ca2-era-pc1b-20261005 (pending at the time of writing)</td><td class="iv">none yet</td></tr>
 <tr data-status="implemented"><td class="n">20</td><td class="claim">No premine, no pre-sale, no allocation: every coin is minted by the schedule and every coin goes to the block producer (80%) and the proving pool (20%)<div class="where">Homepage stats and Economics tiles; litepaper Supply, Economics</div></td><td><span class="st st-1">implemented</span></td><td class="mono">repo <code>6ac80a3</code>; fork "igneum-node devnet v0"; <code>consensus/core/src/igneum.rs</code>, <code>coinbase.rs</code></td><td><code>cargo test -p kaspa-consensus-core igneum</code> (8 pass: subsidy table, ramp, split, cap) and <code>cargo test -p kaspa-consensus coinbase</code> (8 pass); <code>igneum-miner inspect 40</code>; bench-log "igneum-node devnet v0"</td><td>Coinbases on the devnet: 80/20 exact on 39 of 39 single-payee blocks, the 20% to the <code>igneum-proving-pool-v0</code> output; the per-second schedule sums to under the 4,000,000,000 cap by less than 100 coins; 3,168,808,781 units per DAA second in years 0 to 2, halving at 63,115,200 DAA s. 3 October 2026, Apple M5 Max. The devnet genesis carries no allocation; the mainnet genesis does not exist yet, so the claim is about the code and the stated rule, not a launch that has happened</td><td class="iv">none yet</td></tr>
-<tr data-status="tested by the team"><td class="n">21</td><td class="claim">The proving pool's 20% reaches shard provers and aggregators<div class="where">Litepaper Economics; homepage "20% provers"</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">spec 5.3; <code>proving/igneum-prove</code> carries the prover's payout address in every shard proof (ledger P12)</td><td>None. The pool output exists (row 20); the payout from it against proof records is unwritten. Since 5 October 2026: the payout rule is live on the devnet (<code>proving.rs shard_payouts</code>, the carrying segment pays the first valid record per shard its part of the segment's pool credit)</td><td>The escrow accumulated on the simnet (92.55 IGN at the end of the v3 run) and nothing can draw it. Rule decided: per block, divided among shards by consensus proving cost, sortition to 8 provers for 10 s then open (spec 7.2). The economy model of 4 October 2026 (<code>sim/economy</code>, 1,000 operators, 30 days) kept every block proven within 60 s under six stress scenarios; a model, not hardware Live devnet, 5 October 2026: 388 shards paid by 16:02 UTC, 446.13 IGN from the pool to PC 2's payout address, 0.8813 IGN per mergeset block of the proven segment (bench-log entries of 5 October: "the first shards proven, verified and paid" and "real transactions, the first non-empty shard proven and paid")</td><td class="iv">none yet</td></tr>
+<tr data-status="tested by the team"><td class="n">21</td><td class="claim">The proving pool's 20% reaches shard provers and aggregators<div class="where">Litepaper Economics; homepage "20% provers"</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">spec 5.3; <code>proving/igneum-prove</code> carries the prover's payout address in every shard proof (ledger P12)</td><td>None. The pool output exists (row 20); the payout from it against proof records is unwritten. Since 5 October 2026: the payout rule is live on the devnet (<code>proving.rs shard_payouts</code>, the carrying segment pays the first valid record per shard its part of the segment's pool credit)</td><td>The escrow accumulated on the simnet (92.55 IGN at the end of the v3 run) and nothing can draw it. Rule decided: per block, divided among shards by consensus proving cost, sortition to 8 provers for 10 s then open (spec 7.2). The economy model of 4 October 2026 (<code>sim/economy</code>, 1,000 operators, 30 days) kept every block proven within 60 s under six stress scenarios; a model, not hardware Live devnet, 5 October 2026: 388 shards paid by 16:02 UTC, 446.13 IGN from the pool to the RTX 5090 Windows rig's payout address, 0.8813 IGN per mergeset block of the proven segment (bench-log entries of 5 October: "the first shards proven, verified and paid" and "real transactions, the first non-empty shard proven and paid")</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">22</td><td class="claim">The base fee is burned in full and the priority fee splits 80% to the miner and provers, 20% to the apps whose code ran<div class="where">Homepage Economics caption and Build card; litepaper "Where fees go"</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>f5f8c80</code>; fork worktree <code>vendor/igneum-node-exec</code></td><td><code>tools/evm-smoke/smoke.mjs</code> receipt checks; bench-log "execution layer devnet v3"</td><td>Transfer receipt: <code>burnedProvingFee</code> 200 gwei, <code>minerTip</code> 16,800 gwei (80%), unregistered developer share 4,200 gwei burned; contract call: 80% to the miner, 20% credited to the payee the constructor registered, balance delta equal. 3 October 2026, Apple M5 Max simnet. The provers' part of the 80% is not split out (no provers exist); the base fee stayed at the 1 gwei floor throughout</td><td class="iv">none yet</td></tr>
 <tr data-status="designed"><td class="n">23</td><td class="claim">No fee to any team, foundation or fund; 0 admin keys in consensus<div class="where">Homepage Economics tiles and caption; litepaper "No fund, no foundation" and Governance</div></td><td><span class="st st-0">designed</span></td><td class="mono">spec 5.5, 5.6 (decided 3 October 2026); spec 08</td><td>Reading: no coinbase output, fee route or consensus key in the fork names any party (<code>coinbase.rs</code>, <code>docs/fork-divergence.md</code>)</td><td>The emission code has two outputs (row 20) and the fee code has three routes (row 22), none to a team. The 1% fee of the official client is a client setting, not a protocol rule, and is not implemented. The release key of spec 08 signs client updates (the Igneum Miner app's over-the-air manifest since 4 October 2026, Ed25519) and holds no consensus power; its custody policy is open (O-8.1)</td><td class="iv">none yet</td></tr>
 <tr data-status="designed"><td class="n">24</td><td class="claim">External proving jobs pay 90% to the provers who delivered and burn 10%, once settled in IGN<div class="where">Homepage "IGN burned from jobs, phase two"; litepaper Proving and Economics</div></td><td><span class="st st-0">designed</span></td><td class="mono">spec 5.4</td><td>None. Needs the proof bridge (spec 7.3, phase two) and the settlement switch (O-5.2)</td><td>At launch jobs are paid on the customer's chain in the customer's currency and nothing is burned (ledger P10). No job market code exists</td><td class="iv">none yet</td></tr>
@@ -220,7 +175,7 @@ code{font-family:var(--f-mono);font-size:.92em;background:var(--obsidian);paddin
 <tr data-status="tested by the team"><td class="n">27</td><td class="claim">The node survives malformed input, floods, withholding, partitions and eclipses<div class="where">Litepaper Speed ("GHOSTDAG, the BlockDAG consensus proven on Kaspa"); spec 2</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>394030c</code>, <code>8dae48b</code>, <code>6b5bd92</code>; fork worktree <code>vendor/igneum-node-harness</code> and <code>devnet-v4</code>; <code>tools/harness/</code>; <code>infra/cloud-devnet/experiments/partition.sh</code></td><td><code>tools/harness/</code> against a private <code>igneumd</code> test network; the merged node's harness scenarios 2 and 5; the cloud network's 10-minute partition of Singapore (<code>results/2026-10-04/partition-sin-20261004-110906/partition.md</code>); bench-log "consensus attack harness", "devnet-v4 integration"</td><td>3 October 2026, Apple M5 Max: 63 malformed cases, node up on every one; withholding at 10% to 45% within 2 sigma of share; partitions of 120 s to 3,700 s healed to one chain in 10 s; eclipse victims rejoined in 10 s; 50x floods left template p95 under 4 ms; one FAIL, a 45% withholder releasing every 20 blocks took 50.7% of blues (bound 47.4%). Merged node, 4 October 2026: 63 cases, node up, 0 cache builds; the 10 s timestamp floor and future bound exact. Cloud network, 4 October 2026: 12 nodes in five locations on their own chain, Singapore cut off by iptables for 10 minutes; the two minority nodes adopted the majority chain 10 and 14 s after the heal with reorgs of 445 and 516 blocks, the majority's deepest reorg was 2 blocks, 0 conflicting locks (none were possible: the weight window stood at DAA 3,030 of 7,200). CPU miners only; the finality rules under partition are row 10</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">28</td><td class="claim">Headers are validated cheaply before the lottery engine runs, so forged timestamps cannot force 256 MiB cache builds<div class="where">Spec 2.4; ledger M15</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>0953ec7</code>, <code>8dae48b</code>; fork worktree <code>vendor/igneum-node-r3</code> branch <code>r3-fixes</code> at <code>5166ee26</code>, merged into <code>devnet-v4</code></td><td><code>measure_m15_attack_before_and_after</code> (ignored test, release, <code>--features igneum-pow</code>); kaspa-pow 8, header_processor 1, p2p <code>pow_guard</code> 2 tests; harness scenario 5 on the merged node</td><td>50 forged headers: before, 50 cold builds in 10,595 ms and the live day evicted; after, 0 builds, all 50 rejected in 14 ms, 3 October 2026, Apple M5 Max under load 60 to 110. Merged node, 4 October 2026: 63 harness cases with 0 cache builds (the node log shows one build, the honest day) and the M15 p2p cases disconnected by the strike guard; the live devnet v4 runs it. Measured through the validate path with <code>skip_proof_of_work</code>, not the daemon RPC</td><td class="iv">none yet</td></tr>
 <tr data-status="tested by the team"><td class="n">29</td><td class="claim">Blocks reach every node well inside GHOSTDAG's delay bound across continents<div class="where">Litepaper Speed (GHOSTDAG at one block a second); spec 03 C1 (lock latency); <code>infra/cloud-devnet/README.md</code></div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>6b5bd92</code>; <code>infra/cloud-devnet/experiments/latency.sh</code>, <code>analyze.py</code>; the Linux cross-build <code>infra/cross/build-linux.sh</code></td><td>12 <code>igneumd</code> nodes on cloud VMs in Helsinki, Falkenstein, Ashburn, Hillsboro and Singapore (own chain <code>igneum-devnet-20</code>, one CPU trickle miner each), a ping matrix, then 10 minutes of per-node arrival logs joined on block hash; <code>results/2026-10-04/latency/propagation.md</code> and <code>rtt-by-region.md</code></td><td>644 blocks in the window, 642 seen by at least 80% of nodes; arrival at a node minus the first arrival anywhere: p50 343 ms, p90 497 ms, p99 666 ms, max 2,313 ms; by region p50 239 ms (Falkenstein) to 413 ms (Singapore), p90 455 to 632 ms; inter-region RTT 35 ms (Helsinki to Falkenstein) to 289 ms (Ashburn to Singapore); first arrival minus header time median 490 ms. 4 October 2026. The network is the project's own: 12 nodes not 20 (a new account's limits), CPU hash rate only, clocks by chrony, one evening of data; the 5 s bound behind GHOSTDAG k is a design parameter this run did not challenge</td><td class="iv">none yet</td></tr>
-<tr data-status="tested by the team"><td class="n">30</td><td class="claim">One click: install, press start, the card mines; the app looks after its node<div class="where">Homepage Mine section ("One click: install, press start"); litepaper "One click, for everyone else"; journey phase 5</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>3bb50d6</code>, <code>2c4b30f</code>, <code>6461540</code> (package 0.3.0: prebuilt NVRTC CUDA worker and generic OpenCL worker, driver only), <code>a1a33cb</code>, <code>7c794df</code>, <code>0d4498e</code>, <code>6c083db</code> (Igneum Miner 0.3.0), <code>78903cd</code> (0.3.1, over-the-air updates)</td><td><code>Igneum-Miner-Setup-0.3.0.exe</code> (runner-built, unsigned) on a an RTX 5090 on Windows with an RTX 5090 and no toolchain; <code>proto-cuda/nvrtc/emu/serve-check.sh</code> on the Apple M5 Max; <code>proto-cuda/windows-app/TEST.md</code>; bench-log "one-click Windows workers", "first machine on the Igneum Miner app", "a node 60 s behind the clock is silently dead", "the gfx1036 worker fault"</td><td>Four machines by 14:45 UTC on 4 October 2026: PC 2, then PC 1 (RTX 5090 at 110 MH/s under the 80% power cap), the project's Apple M5 Max (25 MH/s) and the outside Apple silicon laptop (row 29), all on Igneum Miner 0.3.1. The NVRTC worker compiled the pack on the card with no toolchain installed and mined at 124.2 MH/s, equal to the nvcc-built worker, 0 rejected, CPU re-check clean; inside the app 117 to 119 MH/s with 34 accepted blocks in the first minute, the integrated AMD chip at 3.3 MH/s beside it (row 9). Two defects found by the install, both fixed the same hour: a clock 62 s slow after a power cut made the node reject every relayed block for 12 minutes with no visible reason (the app now reads the skew from the node's warnings, the block timestamps over the EVM RPC and an HTTPS Date header, warns over 5 s and blocks Start over 10 s, with a one-click clock sync; checked on the Apple M5 Max with a fake 60 s skew; a one-line node warning is filed), and the node card said "syncing" while the miner was already accepted. The Mac could only emulate the NVIDIA path (17 of 17 sampled hashes) and the AMD path on Apple OpenCL (15 of 15). Over-the-air updates were dry-run on a private devnet (0.3.0 to 0.3.1 and back), not on a user's machine. The installer is unsigned (SmartScreen "run anyway"). Second machine, the same afternoon: a friend of the project installed Igneum Miner 0.3.1 from the DMG on an Apple silicon laptop with no toolchain and no instructions beyond five steps; the node synced from the seed, the Metal worker reported ready, 33 accepted blocks and 0 rejected in 7 minutes at 21.0 MH/s average, CPU re-check OK on every share, uploads arriving every minute under its per-install id. That laptop is not the project's hardware, but the result is observed through the project's own log intake and reported by the project, so it stays tested by the team until an outsider publishes a run of their own. The devnet's other GPU machines (PC 1 and the Apple M5 Max) run the same workers through the launcher, not the app</td><td class="iv">none yet</td></tr>
+<tr data-status="tested by the team"><td class="n">30</td><td class="claim">One click: install, press start, the card mines; the app looks after its node<div class="where">Homepage Mine section ("One click: install, press start"); litepaper "One click, for everyone else"; journey phase 5</div></td><td><span class="st st-2">tested by the team</span></td><td class="mono">repo <code>3bb50d6</code>, <code>2c4b30f</code>, <code>6461540</code> (package 0.3.0: prebuilt NVRTC CUDA worker and generic OpenCL worker, driver only), <code>a1a33cb</code>, <code>7c794df</code>, <code>0d4498e</code>, <code>6c083db</code> (Igneum Miner 0.3.0), <code>78903cd</code> (0.3.1, over-the-air updates)</td><td><code>Igneum-Miner-Setup-0.3.0.exe</code> (runner-built, unsigned) on a an RTX 5090 on Windows with an RTX 5090 and no toolchain; <code>proto-cuda/nvrtc/emu/serve-check.sh</code> on the Apple M5 Max; <code>proto-cuda/windows-app/TEST.md</code>; bench-log "one-click Windows workers", "first machine on the Igneum Miner app", "a node 60 s behind the clock is silently dead", "the gfx1036 worker fault"</td><td>Four machines by 14:45 UTC on 4 October 2026: the RTX 5090 Windows rig, then the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) (RTX 5090 at 110 MH/s under the 80% power cap), the project's Apple M5 Max (25 MH/s) and the outside Apple silicon laptop (row 29), all on Igneum Miner 0.3.1. The NVRTC worker compiled the pack on the card with no toolchain installed and mined at 124.2 MH/s, equal to the nvcc-built worker, 0 rejected, CPU re-check clean; inside the app 117 to 119 MH/s with 34 accepted blocks in the first minute, the integrated AMD chip at 3.3 MH/s beside it (row 9). Two defects found by the install, both fixed the same hour: a clock 62 s slow after a power cut made the node reject every relayed block for 12 minutes with no visible reason (the app now reads the skew from the node's warnings, the block timestamps over the EVM RPC and an HTTPS Date header, warns over 5 s and blocks Start over 10 s, with a one-click clock sync; checked on the Apple M5 Max with a fake 60 s skew; a one-line node warning is filed), and the node card said "syncing" while the miner was already accepted. The Mac could only emulate the NVIDIA path (17 of 17 sampled hashes) and the AMD path on Apple OpenCL (15 of 15). Over-the-air updates were dry-run on a private devnet (0.3.0 to 0.3.1 and back), not on a user's machine. The installer is unsigned (SmartScreen "run anyway"). Second machine, the same afternoon: a friend of the project installed Igneum Miner 0.3.1 from the DMG on an Apple silicon laptop with no toolchain and no instructions beyond five steps; the node synced from the seed, the Metal worker reported ready, 33 accepted blocks and 0 rejected in 7 minutes at 21.0 MH/s average, CPU re-check OK on every share, uploads arriving every minute under its per-install id. That laptop is not the project's hardware, but the result is observed through the project's own log intake and reported by the project, so it stays tested by the team until an outsider publishes a run of their own. The devnet's other GPU machines (the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) and the Apple M5 Max) run the same workers through the launcher, not the app</td><td class="iv">none yet</td></tr>
 <tr data-status="designed"><td class="n">31</td><td class="claim">Card lifetime: a 4 GB card mines about four years and an 8 GB card about twelve, under the dataset's step schedule (2 GB at genesis, doubling at years 4, 12, 28, 60) with the cache freed after the daily build<div class="where">Litepaper Hardware and vs RandomX ("Dataset" row); homepage Mine card and "Memory" row</div></td><td><span class="st st-0">designed</span></td><td class="mono"><code>docs/analysis/card-lifetime-2026-10-05.md</code> (branch card-lifetime 1fecfe2); spec 1.13.3 option (b) recommended to the owner 5 October 2026 (<code>docs/plans/counter-asic-2-rollout.md</code> 6c)</td><td>The per-tier working-set arithmetic of that document (GTX 1650, RTX 3050, RTX 3060, RTX 4090 tiers) against the step schedule</td><td>A design claim: under the continuous mapping (a) a 4 GB card is out within 1 to 1.5 years and an 8 GB card at 6 to 7.5 years, so the sentence is true only under the step schedule (b), which the spec has not yet fixed (O-1.13)</td><td class="iv">none yet</td></tr>
 </tbody></table></div>
 <p class="note">Click a column heading to sort; click again to reverse. Versions: <code>igneum-pow</code> is the Rust crate at version 0.2.0 (generator version 2, 4 October 2026); repo commits are this repository's; fork commits are the node fork and its worktrees, named by message as the engineering log names them. Source of every number: the <a href="/bench">engineering log</a>. The source of this page is <code>docs/evidence.md</code> in the repository.</p>
@@ -239,7 +194,7 @@ code{font-family:var(--f-mono);font-size:.92em;background:var(--obsidian);paddin
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -265,9 +220,9 @@ code{font-family:var(--f-mono);font-size:.92em;background:var(--obsidian);paddin
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -275,10 +230,23 @@ code{font-family:var(--f-mono);font-size:.92em;background:var(--obsidian);paddin
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 <script>
 (function(){
diff --git a/site/explorer.html b/site/explorer.html
index 089830452..aabcc317a 100644
--- a/site/explorer.html
+++ b/site/explorer.html
@@ -28,9 +28,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -42,81 +43,25 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
+/* page block; tokens, type and components are in /site.css */
 /* the explorer pages share this block with block.html and address.html; same tokens as live.html */
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--line-2:#3A3A42;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;--ember-ink:#0C0C0E;--blue:#5CB8FF;--green:#3FD39A;
---max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
 --card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
 --fs-h1:clamp(32px,5.5vw,56px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px)}
-*{box-sizing:border-box}
-body{margin:0;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:17px;line-height:1.55;-webkit-font-smoothing:antialiased;overflow-x:hidden}
-a{color:inherit;text-decoration:none}a:hover{color:var(--molten)}
 a:focus-visible,button:focus-visible,input:focus-visible{outline:2px solid var(--ember);outline-offset:3px;border-radius:6px}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
 .mono{font-family:var(--f-mono)}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
 h1,h2{font-family:var(--f-display);margin:0;line-height:1.08;text-wrap:balance}
-h1{font-weight:900;font-size:var(--fs-h1);letter-spacing:-.01em;overflow-wrap:anywhere}
-h2{font-weight:700;font-size:var(--fs-h3)}
-p{margin:0}
-.card{background:var(--graphite);border:1px solid var(--line);border-radius:var(--card-r);padding:var(--card-pad);min-width:0;margin-top:var(--gap)}
 .head{padding-block:var(--head) var(--gap);display:flex;flex-direction:column;gap:14px}
 .head p{color:var(--ink-2);max-width:64ch;font-size:16px}
 .search{display:flex;gap:10px;max-width:760px;margin-top:4px}
 .search input{flex:1;min-width:0;min-height:48px;padding:10px 14px;border-radius:10px;border:1px solid var(--line-2);background:var(--graphite);color:var(--bone);font:500 15px/1.3 var(--f-mono)}
 .search input::placeholder{color:var(--ash)}
-.btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;min-height:48px;padding:12px 22px;border-radius:10px;font-weight:600;font-size:16px;border:1px solid var(--line-2);color:var(--bone);background:transparent;cursor:pointer;font-family:var(--f-sans)}
-.btn.primary{background:var(--ember);color:var(--ember-ink);border-color:var(--ember)}
 .btn.primary:hover{background:#FF6A2B;border-color:#FF6A2B;color:var(--ember-ink)}
 .msg{font-family:var(--f-mono);font-size:13px;color:var(--molten);min-height:18px}
 .strip{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:var(--gap-tile)}
@@ -128,28 +73,15 @@ p{margin:0}
 @media (max-width:700px){.cell .v{font-size:19px}}
 .cell .s{font-family:var(--f-mono);font-size:12px;color:var(--ash);text-wrap:balance}
 .cell.status .v{display:flex;align-items:center;gap:10px}
-.dot{width:10px;height:10px;border-radius:50%;background:var(--molten);display:inline-block;flex:0 0 10px;animation:pulse 2s ease-in-out infinite}
 .off .dot{background:var(--ash);animation:none}.off .cell.status .v{color:var(--ash)}.on .cell.status .v{color:var(--molten)}
-@keyframes pulse{0%,100%{box-shadow:0 0 0 0 rgba(255,179,92,.5)}50%{box-shadow:0 0 0 8px rgba(255,179,92,0)}}
 @media (prefers-reduced-motion:reduce){.dot{animation:none}}
-.viz-head{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:center;gap:10px 20px;margin-bottom:12px}
-.tbl{overflow-x:auto;margin-top:12px;-webkit-overflow-scrolling:touch}
-table{border-collapse:collapse;width:100%;font-size:14px}
-th,td{padding:10px 10px;text-align:left;border-bottom:1px solid var(--line);white-space:nowrap;vertical-align:top}
-th{font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);font-weight:500}
 td.n,th.n{text-align:right;font-variant-numeric:tabular-nums}
-tr:last-child td{border-bottom:0}
 tbody tr:hover td{background:rgba(255,255,255,.025)}
 .id{font-family:var(--f-mono);color:var(--molten)}
 .hash{font-family:var(--f-mono)}
-.sw{width:10px;height:10px;border-radius:3px;display:inline-block;margin-right:7px;vertical-align:middle;border:1.5px solid var(--ash)}
 .sw.chain{background:var(--ember);border-color:var(--blue)}.sw.blue{background:rgba(92,184,255,.7);border-color:var(--blue)}.sw.red{background:linear-gradient(45deg,transparent 44%,var(--ash) 44%,var(--ash) 56%,transparent 56%) center/8px 8px no-repeat}
 .chip{display:inline-block;font-family:var(--f-mono);font-size:11px;letter-spacing:.08em;text-transform:uppercase;padding:3px 8px;border-radius:999px;border:1px solid var(--line-2);color:var(--ink-2);margin-right:6px}
 .chip.hot{border-color:var(--molten);color:var(--molten)}.chip.ok{border-color:var(--green);color:var(--green)}
-.legend{display:flex;flex-wrap:wrap;gap:6px 16px;margin-top:14px;font-size:13px;color:var(--ink-2)}
-.legend span{display:inline-flex;align-items:center;white-space:nowrap}
-.empty{color:var(--ash);font-size:14px;padding:12px 0}
-.note{font-size:13px;color:var(--ash);margin-top:14px;max-width:80ch}
 dl{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:8px 20px;margin:12px 0 0;font-size:14px}
 dt{font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);padding-top:3px}
 dd{margin:0;overflow-wrap:anywhere;font-variant-numeric:tabular-nums}
@@ -158,7 +90,6 @@ dd{margin:0;overflow-wrap:anywhere;font-variant-numeric:tabular-nums}
 @media (min-width:900px){.two{grid-template-columns:1fr 1fr}.two .card{margin-top:0}}
 .two-wrap{margin-top:var(--gap)}
 main{padding-bottom:var(--sec)}
-.foot{margin-top:0}
 </style>
 </head>
 <body class="off">
@@ -167,10 +98,9 @@ main{padding-bottom:var(--sec)}
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live" aria-current="page">Live devnet</a>
@@ -179,20 +109,32 @@ main{padding-bottom:var(--sec)}
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
@@ -244,7 +186,7 @@ main{padding-bottom:var(--sec)}
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -270,9 +212,9 @@ main{padding-bottom:var(--sec)}
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -280,10 +222,23 @@ main{padding-bottom:var(--sec)}
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 <script type="module">
 import { classify, hrefFor, ign, shortHash, hashrate, rel, int } from '/lib/explorer.mjs';
diff --git a/site/faucet.html b/site/faucet.html
index 106c514cb..a638f6a92 100644
--- a/site/faucet.html
+++ b/site/faucet.html
@@ -27,9 +27,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -41,78 +42,22 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--line-2:#3A3A42;--ember:#F2541B;--ember-ink:#0C0C0E;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;--ok:#7BD88F;--bad:#FF8A6A;
---max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--fs-h1:clamp(32px,5.5vw,56px);--fs-h3:clamp(18px,2vw,22px)}
-*{box-sizing:border-box}
-body{margin:0;min-height:100vh;display:flex;flex-direction:column;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:17px;line-height:1.55;-webkit-font-smoothing:antialiased}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter);width:100%}
+/* page block; tokens, type and components are in /site.css */
 main{flex:1}
-a{color:var(--ember)}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
-h1{font-family:var(--f-display);font-weight:900;font-size:var(--fs-h1);line-height:1.05;margin:12px 0 16px}
-h2{font-family:var(--f-display);font-weight:700;font-size:var(--fs-h3);line-height:1.3;margin:0 0 10px}
-p{margin:0;color:var(--ink-2);max-width:60ch}
 .head{padding-top:var(--sec);padding-bottom:32px}
 .grid{display:grid;gap:24px;grid-template-columns:minmax(0,1fr)}
 @media(min-width:900px){.grid{grid-template-columns:minmax(0,1.2fr) minmax(0,.8fr);gap:40px}}
-.card{border:1px solid var(--line);border-radius:18px;background:var(--graphite);padding:clamp(18px,3vw,28px)}
 form{display:flex;flex-direction:column;gap:12px;margin-top:16px}
 label{font-size:14px;color:var(--ash)}
 input{width:100%;min-height:52px;padding:12px 14px;border-radius:12px;border:1px solid var(--line-2);background:var(--obsidian);color:var(--bone);font:500 16px/1.3 var(--f-mono);letter-spacing:.01em}
 input:focus{outline:2px solid var(--ember);outline-offset:2px;border-color:var(--ember)}
-.btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;min-height:50px;padding:12px 22px;border-radius:12px;font:600 16px/1.2 var(--f-sans);border:1px solid var(--ember);color:var(--ember-ink);background:var(--ember);cursor:pointer;transition:background .15s ease,transform .15s ease}
-.btn:hover{background:#FF6A2B;border-color:#FF6A2B;transform:translateY(-1px)}
 .btn[disabled]{opacity:.6;cursor:default;transform:none}
 .status{min-height:28px;margin-top:4px;font-size:15px;color:var(--ink-2);overflow-wrap:anywhere}
 .status[data-state="ok"]{color:var(--ok)}
@@ -126,7 +71,6 @@ input:focus{outline:2px solid var(--ember);outline-offset:2px;border-color:var(-
 .notice{margin-top:14px;padding:12px 14px;border-radius:12px;border:1px dashed var(--line-2);font-size:14px;color:var(--molten)}
 dl{display:grid;grid-template-columns:auto 1fr;gap:6px 16px;margin:14px 0 0;font-size:15px}
 dt{color:var(--ash)}dd{margin:0;font-family:var(--f-mono);font-size:14px;overflow-wrap:anywhere}
-.foot{margin-top:var(--sec)}
 @media (prefers-reduced-motion:reduce){.btn:hover{transform:none}}
 </style>
 </head>
@@ -136,10 +80,9 @@ dt{color:var(--ash)}dd{margin:0;font-family:var(--f-mono);font-size:14px;overflo
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live">Live devnet</a>
@@ -148,20 +91,32 @@ dt{color:var(--ash)}dd{margin:0;font-family:var(--f-mono);font-size:14px;overflo
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
@@ -204,7 +159,7 @@ dt{color:var(--ash)}dd{margin:0;font-family:var(--f-mono);font-size:14px;overflo
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -230,9 +185,9 @@ dt{color:var(--ash)}dd{margin:0;font-family:var(--f-mono);font-size:14px;overflo
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -240,10 +195,23 @@ dt{color:var(--ash)}dd{margin:0;font-family:var(--f-mono);font-size:14px;overflo
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 <script>
 (function(){
diff --git a/site/forbidden-strings.txt b/site/forbidden-strings.txt
index d8586a05f..e0295db50 100644
--- a/site/forbidden-strings.txt
+++ b/site/forbidden-strings.txt
@@ -18,8 +18,16 @@ Hetzner
 igneum-seed
 /root/
 /opt/igneum
-dl\.igneum
+# a tokened downloads link (dl.igneum.network/dl/<token>/...); the public buttons use /public/ and /dl/public/ and are meant to be here
+dl\.igneum\.network/dl/[A-Za-z0-9_-]{16,}/
 intake id
 CLAUDE\.md
 DESKTOP-KMCV
 \bhcloud\b
+# 6 October 2026, site audit: the two Windows machines are described (site/scrub.mjs), never numbered
+\bPC [12]\b
+# the site audit's page-leak patterns, 6 October 2026: config paths, process ids, listen addresses, the node flag
+~/\.config
+\bpid [0-9]+\b
+0\.0\.0\.0:[0-9]+
+--rpclisten=
diff --git a/site/index.html b/site/index.html
index 7cab1c67b..317d164a4 100644
--- a/site/index.html
+++ b/site/index.html
@@ -6,20 +6,21 @@
 <title>Igneum, the GPU-mined layer 1</title>
 <meta name="description" content="A GPU-mined chain whose mining program rewrites itself every hour. Miners also prove the blocks. No premine, no stake, no fee to any team.">
 <link rel="canonical" href="https://igneum.network/">
-<meta name="theme-color" content="#0C0C0E">
+<meta name="theme-color" content="#0C0C0E" media="(prefers-color-scheme: dark)">
+<meta name="theme-color" content="#F4F1EC" media="(prefers-color-scheme: light)">
 <meta property="og:type" content="website">
 <meta property="og:site_name" content="Igneum">
 <meta property="og:title" content="Igneum, the GPU-mined layer 1">
 <meta property="og:description" content="A GPU-mined chain whose mining program rewrites itself every hour. Miners also prove the blocks. No premine, no stake, no fee to any team.">
 <meta property="og:url" content="https://igneum.network/">
-<meta property="og:image" content="https://igneum.network/og-small.png?v=3">
-<meta property="og:image:width" content="256">
-<meta property="og:image:height" content="256">
+<meta property="og:image" content="https://igneum.network/og.png?v=3">
+<meta property="og:image:width" content="1200">
+<meta property="og:image:height" content="630">
 <meta property="og:image:alt" content="Igneum. Mined by GPUs. Proven by fire.">
-<meta name="twitter:card" content="summary">
+<meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Igneum, the GPU-mined layer 1">
 <meta name="twitter:description" content="A GPU-mined chain whose mining program rewrites itself every hour. Miners also prove the blocks. No premine, no stake, no fee to any team.">
-<meta name="twitter:image" content="https://igneum.network/og-small.png?v=3">
+<meta name="twitter:image" content="https://igneum.network/og.png?v=3">
 <meta name="twitter:image:alt" content="Igneum. Mined by GPUs. Proven by fire.">
 <link rel="icon" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 1024 1024'%3E%3Crect width='1024' height='1024' fill='%230C0C0E'/%3E%3Cg transform='translate(166.95 166.95) scale(6.901)'%3E%3Cpolygon points='50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34' fill='%23F2541B'/%3E%3Cpolygon points='50,42 59,58 50,82 41,58' fill='%230C0C0E'/%3E%3C/g%3E%3C/svg%3E" type="image/svg+xml">
 <link rel="icon" href="/favicon.ico" sizes="48x48">
@@ -35,9 +36,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -49,253 +51,105 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--line-2:#3A3A42;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;--ember-ink:#0C0C0E;
-/* one system for every page: container, gutter, section rhythm, card and tile boxes, heading scale */
---max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
---card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
---fs-hero:clamp(32px,8.4vw,76px);--fs-h1:clamp(32px,5.5vw,56px);--fs-h2:clamp(28px,4.2vw,44px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px)}
-*{box-sizing:border-box}
-html{scroll-behavior:smooth}
-/* anchors land with the heading 11 px under the sticky bar at every width: a padded section subtracts its own top padding */
-:root{--sm:84px}
-@media (max-width:900px){:root{--sm:80px}}
-section,[id]{scroll-margin-top:var(--sm)}
-section[id]{scroll-margin-top:calc(var(--sm) - var(--sec))}
-@media (prefers-reduced-motion:reduce){html{scroll-behavior:auto}}
-body{margin:0;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:17px;line-height:1.55;-webkit-font-smoothing:antialiased;overflow-x:hidden}
-a{color:inherit;text-decoration:none}
-a:hover{color:var(--molten)}
-a:focus-visible,button:focus-visible{outline:2px solid var(--ember);outline-offset:3px;border-radius:6px}
-img,svg,canvas{max-width:100%}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
-.mono{font-family:var(--f-mono)}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
-.eyebrow.ember{color:var(--ember)}
-h1,h2,h3{font-family:var(--f-display);margin:0;line-height:1.08;text-wrap:balance}
-h1{font-weight:900;font-size:var(--fs-hero);letter-spacing:-.01em}
-h2{font-weight:700;font-size:var(--fs-h2)}
-h3{font-weight:700;font-size:var(--fs-h3)}
-p{margin:0}
-.btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;min-height:48px;padding:12px 22px;border-radius:10px;font-weight:600;font-size:16px;border:1px solid var(--line-2);color:var(--bone);background:transparent;cursor:pointer;transition:transform .15s ease,background .15s ease,border-color .15s ease}
-.btn:hover{transform:translateY(-1px);border-color:var(--ash);color:var(--bone)}
-.btn.primary{background:var(--ember);color:var(--ember-ink);border-color:var(--ember)}
-.btn.primary:hover{background:#FF6A2B;border-color:#FF6A2B;color:var(--ember-ink)}
-.btn.dark{background:var(--obsidian);color:var(--bone);border-color:var(--obsidian)}
-.btn.dark:hover{background:#222226;color:var(--bone)}
-.card{background:var(--graphite);border:1px solid var(--line);border-radius:var(--card-r);padding:var(--card-pad);min-width:0}
-.grid{display:grid;gap:var(--gap);grid-template-columns:repeat(auto-fit,minmax(min(100%,300px),1fr))}
-.reveal{opacity:0;transform:translateY(18px);transition:opacity .7s ease,transform .7s ease}
-.reveal.in{opacity:1;transform:none}
-@media (prefers-reduced-motion:reduce){.reveal{opacity:1;transform:none;transition:none}}
-
-/* nav and footer: shared, see site/partials */
-
-/* hero */
-.hero{position:relative;padding-block:clamp(56px,9vw,112px) clamp(40px,6vw,72px);overflow:hidden}
-.hero canvas{position:absolute;inset:0;width:100%;height:100%;pointer-events:none;-webkit-mask-image:linear-gradient(90deg,rgba(0,0,0,.08) 0,rgba(0,0,0,.35) 45%,rgba(0,0,0,.9) 100%);mask-image:linear-gradient(90deg,rgba(0,0,0,.08) 0,rgba(0,0,0,.35) 45%,rgba(0,0,0,.9) 100%)}
-@media (max-width:979px){.hero canvas{-webkit-mask-image:linear-gradient(180deg,rgba(0,0,0,.12) 0,rgba(0,0,0,.12) 55%,rgba(0,0,0,.8) 100%);mask-image:linear-gradient(180deg,rgba(0,0,0,.12) 0,rgba(0,0,0,.12) 55%,rgba(0,0,0,.8) 100%)}}
-.hero .wrap{position:relative;display:grid;gap:32px;grid-template-columns:1fr;align-items:center}
-@media (min-width:980px){.hero .wrap{grid-template-columns:1.15fr .85fr;gap:32px 56px}}
-.hero-copy{display:flex;flex-direction:column;gap:24px;container-type:inline-size}
-/* the headline is two lines at every width: the size is capped so "Mined by GPUs." fits the column (Unbounded 900 runs about 0.78 em per character) */
-.hero-copy h1{font-size:min(var(--fs-hero),9cqw)}
-.hero p.lead{font-size:clamp(17px,2vw,20px);color:var(--ink-2);max-width:56ch}
-.cta{display:flex;flex-wrap:wrap;gap:12px}
-/* live stats strip: hidden until the observer reports fresh numbers; spans the full hero width, tiles share the economics tile spec */
-.livestrip{display:none;flex-direction:column;gap:var(--gap-tile);grid-column:1/-1;min-width:0}
-.livestrip.on{display:flex}
-.livestrip-head{display:flex;align-items:center;gap:8px;font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:uppercase;color:var(--molten)}
-.livestrip-head a{color:var(--molten)}
-.livestrip-grid{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:var(--gap-tile)}
-.livestrip .tile .v{white-space:nowrap;font-variant-numeric:tabular-nums}
-@media (max-width:700px){.livestrip-grid{grid-template-columns:repeat(2,minmax(0,1fr))}}
-.verify{display:flex;flex-direction:column;gap:18px}
-.verify-head{display:flex;justify-content:space-between;align-items:center;gap:12px}
-.live{display:inline-flex;align-items:center;gap:8px;font-family:var(--f-mono);font-size:12px;color:var(--molten)}
-.dot{width:8px;height:8px;border-radius:50%;background:var(--molten);display:inline-block;animation:pulse 2s ease-in-out infinite}
-@keyframes pulse{0%,100%{box-shadow:0 0 0 0 rgba(255,179,92,.5)}50%{box-shadow:0 0 0 8px rgba(255,179,92,0)}}
-.verify-row{display:flex;align-items:center;gap:16px}
-.tick{width:56px;height:56px;border-radius:50%;background:var(--ember);display:flex;align-items:center;justify-content:center;flex:0 0 56px}
-.tick svg path{stroke-dasharray:30;stroke-dashoffset:30;animation:draw 1s .4s ease forwards}
-@keyframes draw{to{stroke-dashoffset:0}}
-.verify-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:12px}
-.cell{background:var(--obsidian);border-radius:12px;padding:14px;display:flex;flex-direction:column;gap:4px}
-.cell .k{font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;color:var(--ash)}
-.cell .v{font-family:var(--f-mono);font-size:15px}
-
-/* stats */
-.stats{border-top:1px solid var(--line);border-bottom:1px solid var(--line)}
-.stats .wrap{display:grid;grid-template-columns:repeat(auto-fit,minmax(120px,1fr));gap:20px 24px;padding-block:28px}
-.stat .v{font-family:var(--f-display);font-weight:700;font-size:var(--fs-tile);color:var(--ember);line-height:1.1}
-.stat .k{margin-top:6px;font-size:14px;color:var(--ash);line-height:1.35;text-wrap:balance}
-
-/* rhythm: every section keeps --sec from its content to the next boundary; two dark sections in a row share one */
-section{padding-block:var(--sec)}
-section:not(.light)+section:not(.light){padding-top:0;scroll-margin-top:var(--sm)}
-.sec-head{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:flex-end;gap:16px;margin-bottom:32px}
-.sec-head p{font-size:16px;color:var(--ash);max-width:46ch}
-
-/* dag */
-.viz{overflow:hidden}
-.viz-head{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:center;gap:10px 20px;margin-bottom:12px}
-.viz-stats{display:flex;gap:18px;font-size:12px;color:var(--ash)}
-.viz-stats b{color:var(--bone);font-weight:500;font-variant-numeric:tabular-nums}
-#chain{display:block;width:100%;height:clamp(200px,36vw,340px);border-radius:12px;background:var(--obsidian)}
-.dag{overflow:hidden}
-.dag-rows{display:flex;flex-direction:column;gap:var(--dg,14px);--bs:34px;--dg:14px}
-@media (max-width:640px){.dag-rows{--bs:26px;--dg:9px}}
-.dag-row{display:flex;gap:var(--dg);align-items:center;overflow:hidden}
-.blk{width:var(--bs);height:var(--bs);flex:0 0 var(--bs);border-radius:calc(var(--bs) * .24);border:2px solid var(--line-2);transition:background .5s ease,border-color .5s ease,transform .3s ease}
-.blk.proving{background:var(--molten);border-color:var(--molten)}
-.blk.proven{background:var(--ember);border-color:var(--ember)}
-.blk.lock{border-color:var(--ember);background:transparent;display:flex;align-items:center;justify-content:center}
-.blk.lock svg{width:50%;height:50%}
-.blk.new{animation:pop .4s ease}
-@keyframes pop{from{transform:scale(.4);opacity:0}to{transform:scale(1);opacity:1}}
-.legend{display:flex;flex-wrap:wrap;gap:20px;margin-top:24px;font-size:14px;color:var(--ink-2)}
-.viz-note{margin:14px 0 0;font-size:13px;line-height:1.5;color:var(--ash);max-width:80ch}
-.legend[hidden]{display:none}
-.legend span{display:inline-flex;align-items:center;gap:8px}
-.sw{width:14px;height:14px;border-radius:4px;display:inline-block}
-pre{margin:0;font-family:var(--f-mono);font-size:13px;line-height:1.6;color:var(--ink-2);white-space:pre-wrap;min-height:9.6em}
-.caret::after{content:'▍';color:var(--ember);animation:blink 1s steps(1) infinite}
-@keyframes blink{50%{opacity:0}}
-.feed{display:flex;flex-direction:column;gap:10px;font-family:var(--f-mono);font-size:13px;color:var(--ink-2)}
-.feed div{display:flex;justify-content:space-between;gap:12px;border-bottom:1px solid var(--line);padding-bottom:8px}
-.feed div:last-child{border-bottom:0}
-
-/* jobs cards */
-.jobs{display:grid;gap:var(--gap);grid-template-columns:repeat(auto-fit,minmax(min(100%,300px),1fr))}
-.job{display:flex;flex-direction:column;gap:14px;border:1px solid var(--line);border-radius:var(--card-r);padding:var(--card-pad);transition:border-color .2s ease,transform .2s ease}
-.job:hover{border-color:var(--line-2);transform:translateY(-2px)}
-.job p{font-size:15px;color:var(--ink-2)}
-.job a.more{color:var(--ember);font-weight:600;font-size:15px}
-.pt{font-size:15px;color:var(--ash);max-width:60ch}
-.lp{display:inline-block;margin-top:24px;color:var(--ember);font-weight:600;font-size:15px}
-.light .pt{color:#55534F}
-.cmp{border-collapse:collapse;width:100%;font-size:15px}
-.cmp th,.cmp td{text-align:left;padding:12px 20px;border-top:1px solid var(--line)}
-.cmp thead tr{background:var(--obsidian)}
-.cmp th{border-top:0}
-@media (max-width:480px){.cmp th,.cmp td{padding:10px 12px;font-size:14px}}
-
-/* miners */
-.light{background:var(--bone);color:var(--obsidian)}
-.light .card{background:#fff;border-color:#E4E0D8}
-.light .sec-head p{color:#55534F}
-.light .eyebrow{color:#7A776F}
-.light .job p{color:#3D3B37}
-
-/* product summaries: a framed screenshot beside the copy, mirrored for the wallet */
-.split{display:grid;gap:var(--gap);grid-template-columns:1fr;align-items:center}
-@media (min-width:980px){.split{grid-template-columns:1.1fr .9fr;gap:32px 56px}.split.rev{grid-template-columns:.9fr 1.1fr}}
-.split-copy{min-width:0}
-.shot{position:relative;min-width:0}
-.shot::before{content:'';position:absolute;inset:12% -6% -8% -6%;background:radial-gradient(closest-side,rgba(242,84,27,.22),rgba(242,84,27,0));filter:blur(12px);pointer-events:none}
-.frame{position:relative;border:1px solid var(--line-2);border-radius:16px;background:#0C0C0E;box-shadow:0 30px 80px rgba(0,0,0,.55);overflow:hidden;color:var(--bone)}
-.light .frame{box-shadow:0 30px 80px rgba(12,12,14,.28)}
-.frame .bar{height:32px;display:flex;align-items:center;gap:7px;padding:0 14px;border-bottom:1px solid var(--line);background:#121215}
-.frame .bar i{width:10px;height:10px;border-radius:50%;background:#2A2A30;display:block}
-.frame .bar b{margin-left:auto;font:500 11px/1 var(--f-mono);letter-spacing:.12em;color:var(--ash);text-transform:uppercase}
-.frame img{display:block;width:100%;height:auto}
-.frame figcaption{padding:10px 14px;font-size:13px;color:var(--ash);border-top:1px solid var(--line);background:#0C0C0E}
-.pills{display:flex;flex-direction:column;gap:10px}
-.pill{display:flex;flex-direction:column;gap:2px;padding:12px 16px;border:1px solid var(--line);border-radius:var(--tile-r);background:var(--graphite);font-size:15px}
-.pill b{font-weight:600}.pill span{font-size:14px;color:var(--ash);line-height:1.4}
-.light .pill{background:#fff;border-color:#E4E0D8}.light .pill span{color:#55534F}
-.states{display:flex;flex-wrap:wrap;gap:10px}
-.state{display:flex;flex-direction:column;gap:6px;flex:1 1 150px;min-width:0;padding:12px 14px;border:1px solid var(--line);border-radius:var(--tile-r);background:var(--graphite);font-size:13px;color:var(--ash)}
-.spill{display:inline-flex;align-items:center;gap:8px;align-self:flex-start;white-space:nowrap;font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase;padding:5px 9px;border-radius:999px;border:1px solid var(--line-2);color:var(--ash)}
-.spill i{width:7px;height:7px;border-radius:50%;background:var(--ash);display:inline-block}
-.state.block .spill{border-color:rgba(255,179,92,.5);color:var(--molten)}.state.block .spill i{background:var(--molten)}
-.state.final .spill{border-color:var(--ember);background:var(--ember);color:var(--ember-ink)}.state.final .spill i{background:var(--ember-ink)}
-
-/* journey */
-.journey{display:grid;gap:var(--gap-tile);grid-template-columns:repeat(auto-fit,minmax(min(100%,280px),1fr))}
-.phase{border:1px solid var(--line);border-radius:var(--tile-r);padding:var(--tile-pad);display:flex;flex-direction:column;gap:6px;position:relative;transition:border-color .2s ease;min-width:0}
-.phase .w{font-family:var(--f-mono);font-size:11px;color:var(--ash)}
-.phase .n{font-weight:600;font-size:15px;text-wrap:balance}
-.phase .g{font-size:12px;color:var(--ash);line-height:1.4;text-wrap:balance}
-.phase.done{border-color:var(--line-2)}
-.phase.done .n::after{content:' ✓';color:var(--molten)}
-.phase.active{border:2px solid var(--ember);box-shadow:0 0 0 0 rgba(242,84,27,.35);animation:glow 2.4s ease-in-out infinite}
-@keyframes glow{50%{box-shadow:0 0 0 10px rgba(242,84,27,0)}}
-.phase.active .w{color:var(--ember)}
-.now{display:inline-flex;align-items:flex-start;gap:8px;font-family:var(--f-mono);font-size:11px;line-height:1.5;color:var(--ember);letter-spacing:.12em;text-wrap:balance}
-.now .dot{margin-top:4px}
-.log{display:flex;flex-direction:column;gap:0;margin-top:var(--gap);border:1px solid var(--line);border-radius:var(--card-r);background:var(--graphite);padding:4px var(--card-pad)}
-.log div{display:flex;gap:18px;padding:14px 0;border-bottom:1px solid var(--line);font-size:15px;color:var(--ink-2)}
-.log div:last-of-type{border-bottom:0}
-.log div.more{display:none}
-.log.open div.more{display:flex}
-.log .log-toggle{align-self:flex-start;margin:12px 0 10px;background:none;border:1px solid var(--line);border-radius:999px;color:var(--ink-2);font:inherit;font-size:13px;padding:8px 14px;cursor:pointer}
-.log .log-toggle:hover{border-color:var(--ink-2)}
-.log .d{font-family:var(--f-mono);font-size:12px;color:var(--ash);flex:0 0 92px;padding-top:3px}
-
-/* economics */
-.bar{display:flex;height:22px;border-radius:8px;overflow:hidden}
-.bar div{transition:width 1.2s ease}
-.tiles{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:var(--gap-tile)}
-.tile{background:var(--graphite);border:1px solid var(--line);border-radius:var(--tile-r);padding:var(--tile-pad);min-width:0}
-.tile .v{font-family:var(--f-display);font-weight:700;font-size:var(--fs-tile);line-height:1.1;color:var(--bone)}
-.tile .k{font-size:14px;color:var(--ash);margin-top:6px;line-height:1.35;text-wrap:balance}
-
-.band{background:var(--ember);color:var(--ember-ink)}
-.band .wrap{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between;gap:24px;padding-block:56px}
-.band h2{font-weight:900;font-size:clamp(26px,3.5vw,36px)}
-.band p{font-size:16px;max-width:56ch}
-.foot{margin-top:0}
+/* home page block (docs/plans/site-ui-3.md section 3); the tokens, type and components are in /site.css */
+.hero{padding:calc(var(--sec) * .7) 0 var(--s-6)}
+.hero-grid{display:grid;grid-template-columns:minmax(0,1.15fr) minmax(0,.85fr);gap:var(--s-6);align-items:start}
+.hero h1{font-size:var(--t-hero);font-weight:900;line-height:.98;letter-spacing:-.02em;margin:var(--s-3) 0 var(--s-5)}
+.hero .lead{margin-bottom:var(--s-5)}
+.hero .cta{align-items:center}
+.hero .fine{font-size:var(--t-base);color:var(--ash);margin:var(--s-4) 0 0;max-width:62ch}
+.verify .verify-head{display:flex;justify-content:space-between;align-items:center;gap:var(--s-3);margin-bottom:var(--s-4)}
+.verify .verify-head .eyebrow{margin:0}
+.verify-row{display:flex;gap:var(--s-4);align-items:center;margin-bottom:var(--s-4)}
+.verify .tick{width:44px;height:44px;border-radius:12px;background:var(--ember);display:grid;place-items:center;flex:none}
+.verify .tick svg{stroke:var(--ember-ink)}
+.verify h3{margin:0 0 4px}
+.verify p{margin:0;color:var(--ash);font-size:var(--t-base)}
+.verify-grid{display:grid;grid-template-columns:1fr 1fr;gap:var(--s-2)}
+.verify .cell{background:var(--row);border:1px solid var(--line);border-radius:var(--r-row);padding:10px 12px;min-width:0}
+.verify .cell .k{font:500 var(--t-xs)/1.4 var(--f-mono);letter-spacing:.12em;text-transform:uppercase;color:var(--ash)}
+.verify .cell .v{font:500 14px/1.4 var(--f-mono);color:var(--bone);margin-top:2px;overflow-wrap:anywhere}
+.verify .cell .v.hot{color:var(--molten-text)}
+.facts{margin-top:var(--s-6)}
+.facts .tile .k{text-wrap:pretty}
+.scene-head{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:center;gap:var(--s-3) var(--s-5);margin-bottom:var(--s-3)}
+.scene-head .state{margin:0}
+.scene{position:relative}
+.scene canvas{width:100%;height:360px;border-radius:var(--r-row);background:var(--row);border:1px solid var(--line);display:block}
+.tip{position:absolute;left:0;top:0;pointer-events:none;background:var(--graphite);border:1px solid var(--line-2);border-radius:var(--r-row);padding:10px 12px;font:400 12px/1.5 var(--f-mono);color:var(--ink-2);display:flex;flex-direction:column;gap:2px;max-width:320px;box-shadow:0 14px 40px var(--shadow)}
+.tip b{color:var(--bone);font-weight:500;overflow-wrap:anywhere}
+.tip[hidden]{display:none}
+.scene-foot{display:flex;flex-wrap:wrap;justify-content:space-between;gap:var(--s-3) var(--s-5);align-items:center;margin-top:var(--s-4)}
+.scene-foot .legend{margin:0}
+.scene-foot .btn{min-height:36px;padding:6px 14px;font-size:14px}
+.program pre{min-height:168px;color:var(--ink-2)}
+.program .head{display:flex;justify-content:space-between;align-items:center;gap:var(--s-3);margin-bottom:var(--s-3)}
+.program .head .eyebrow{margin:0}
+.program .next{font:500 var(--t-sm)/1.4 var(--f-mono);color:var(--molten-text)}
+.feed{display:flex;flex-direction:column;border-top:1px solid var(--line)}
+.feed div{display:flex;justify-content:space-between;gap:var(--s-3);padding:10px 0;border-bottom:1px solid var(--line);font:400 14px/1.4 var(--f-mono);color:var(--ink-2)}
+.feed div span:last-child{color:var(--ash)}
+.proofs .card{display:flex;flex-direction:column;gap:var(--s-3)}
+.proofs .card p{margin:0;color:var(--ink-2);font-size:var(--t-base)}
+.proofs .card .more{margin-top:auto;font-weight:500}
+.cmp td:first-child{color:var(--ash);font-family:var(--f-mono);font-size:14px;white-space:nowrap}
+.cmp th:last-child,.cmp td:last-child{color:var(--bone)}
+.download{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1fr);gap:var(--s-6);align-items:center}
+.download .shot img{border-radius:var(--r-row);border:1px solid var(--line)}
+.download .shot figcaption{font-size:var(--t-sm);color:var(--ash);margin-top:var(--s-2);font-family:var(--f-mono)}
+.dl-list{display:flex;flex-direction:column;gap:var(--s-2);margin:var(--s-4) 0}
+.dl-list a{display:flex;justify-content:space-between;align-items:center;gap:var(--s-3);padding:12px 16px;border:1px solid var(--line);border-radius:var(--r-row);background:var(--graphite);color:var(--bone);font-weight:600}
+.dl-list a:hover{text-decoration:none;border-color:var(--line-2);background:var(--hover)}
+.dl-list a.primary{background:var(--ember);border-color:var(--ember);color:var(--ember-ink)}
+.dl-list a.primary:hover{background:var(--ember-hi)}
+.dl-list a span{font:400 var(--t-sm)/1.4 var(--f-mono);opacity:.85}
+.notice{font-size:var(--t-base);color:var(--ink-2);margin:var(--s-3) 0 0}
+.notice b{color:var(--bone);font-weight:600}
+.pillars{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:var(--s-4)}
+.pillar{display:flex;flex-direction:column;gap:var(--s-2)}
+.pillar svg{stroke:var(--ember);margin-bottom:var(--s-2)}
+.pillar p{color:var(--ink-2);margin:0;font-size:var(--t-base)}
+.pillar a{font-weight:500;margin-top:auto}
+.wallet-states{display:flex;flex-wrap:wrap;gap:var(--s-2);margin-bottom:var(--s-4)}
+.wstate{display:inline-flex;align-items:center;gap:8px;border:1px solid var(--line);border-radius:var(--r-pill);padding:6px 12px 6px 8px;font:500 var(--t-sm)/1.4 var(--f-mono);color:var(--ink-2);background:var(--row)}
+.wstate i{width:8px;height:8px;border-radius:50%;background:var(--ash);display:inline-block}
+.wstate.block i{background:var(--molten)}
+.wstate.final i{background:var(--ember)}
+.wstate small{color:var(--ash);font-weight:400}
+.phases{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:var(--s-3)}
+.phase{background:var(--graphite);border:1px solid var(--line);border-radius:var(--r-row);padding:var(--s-4);display:flex;flex-direction:column;gap:6px}
+.phase .w{font:500 var(--t-xs)/1.4 var(--f-mono);letter-spacing:.12em;text-transform:uppercase;color:var(--ash)}
+.phase .n{font:700 var(--t-base)/1.3 var(--f-display);color:var(--bone)}
+.phase .g{font-size:14px;color:var(--ink-2)}
+.phase.active{border-color:var(--ember-40)}
+.phase.active .w{color:var(--ember-text)}
+.phase.done .n{color:var(--ash)}
+.log{display:flex;flex-direction:column;border-top:1px solid var(--line);margin-top:var(--s-4)}
+.log>div{display:grid;grid-template-columns:110px 1fr;gap:var(--s-3);padding:10px 0;border-bottom:1px solid var(--line);font-size:var(--t-base);color:var(--ink-2)}
+.log>div .d{font:500 var(--t-sm)/1.6 var(--f-mono);color:var(--ash)}
+.log>div.more{display:none}
+.log.open>div.more{display:grid}
+.log-toggle{margin-top:var(--s-3);align-self:flex-start;background:none;border:1px solid var(--line);border-radius:var(--r-btn);color:var(--bone);font:600 14px/1.2 var(--f-sans);padding:8px 14px;cursor:pointer}
+.now{display:inline-flex;align-items:center;gap:8px;font:500 var(--t-sm)/1.4 var(--f-mono);letter-spacing:.08em;text-transform:uppercase;color:var(--ash)}
+.split2{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1fr);gap:var(--s-6);align-items:center}
+.bar{height:14px;border-radius:7px;overflow:hidden;display:flex;background:var(--row);border:1px solid var(--line)}
+.bar div{height:100%}
+.band{background:var(--ember);color:var(--ember-ink);padding:var(--s-6) 0;margin-top:var(--sec)}
+.band .wrap{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:center;gap:var(--s-4)}
+.band h2,.band p{color:var(--ember-ink);margin:0}
+.band p{opacity:.85;margin-top:6px;max-width:60ch}
+.band .btn{background:var(--ember-ink);color:var(--ember);border-color:var(--ember-ink)}
+.band .btn:hover{background:var(--ember-ink);opacity:.9}
+.band+.foot{margin-top:0}
+@media (max-width:900px){.hero-grid,.download,.split2{grid-template-columns:1fr}.pillars,.phases{grid-template-columns:1fr}.scene canvas{height:280px}}
+@media (max-width:560px){.verify-grid{grid-template-columns:1fr}.log>div{grid-template-columns:1fr;gap:2px}.scene canvas{height:240px}}
 </style>
 </head>
 <body>
@@ -305,10 +159,9 @@ pre{margin:0;font-family:var(--f-mono);font-size:13px;line-height:1.6;color:var(
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live">Live devnet</a>
@@ -317,313 +170,325 @@ pre{margin:0;font-family:var(--f-mono);font-size:13px;line-height:1.6;color:var(
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
 
 <main id="main">
+
 <header class="hero" id="top">
-  <canvas id="bg" aria-hidden="true"></canvas>
   <div class="wrap">
-    <div class="hero-copy">
-      <div class="eyebrow ember">GPUs are back · for good</div>
-      <h1>Mined by GPUs.<br>Proven by fire.</h1>
-      <p class="lead">Built for graphics cards. A new mining program every hour, compiled on the card. In our public model the strongest chip reaches 5x to 9x per joule against an RTX 5090 today, about 2x once the lever now in its gates ships: <a href="/bench#counter-asic-2-0-the-numbers" style="color:var(--molten)">the numbers</a>. Every card mines; today's app proves on a 24 GB NVIDIA card and mines and proves on 32 GB. Measured on 6 October 2026 on eleven rented cards with the patched server: every NVIDIA card from 8 GB proves, 10 GB and up mine and prove (<a href="/bench#prover-tiers-on-real-cards-the-rented-fleet-6-october-2026-branch-gpu-fleet" style="color:var(--molten)">the log</a>); ships when the packaging row lands. AMD and Apple cards mine. No premine, no stake, no foundation.</p>
-      <div class="cta">
-        <a href="#mine" class="btn primary">See the miner</a>
-        <a href="/litepaper" class="btn">Read the litepaper</a>
-      </div>
-    </div>
-    <div class="card verify reveal">
-      <div class="verify-head">
-        <div class="eyebrow">This tab · light client</div>
-        <div class="live" data-lc="badge"><span class="dot"></span><span data-lc="badge-text">PREVIEW</span></div>
-      </div>
-      <div class="verify-row">
-        <div class="tick"><svg viewBox="0 0 24 24" width="30" height="30" fill="none" stroke="#0C0C0E" stroke-width="3" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M5 12.5l4.5 4.5L19 7"></path></svg></div>
-        <div>
-          <h3 style="font-size:20px">Browser checks Igneum</h3>
-          <p style="font-size:14px;color:var(--ash)" data-lc="line">A checkpoint certificate, verified in this tab. Voter list from the node.</p>
+    <div class="hero-grid">
+      <div>
+        <div class="eyebrow ember">GPUs are back · for good</div>
+        <h1>Mined by GPUs.<br>Proven by fire.</h1>
+        <p class="lead">A proof-of-work chain built for graphics cards. The mining program rewrites itself every hour and is compiled on the card, so a chip built for one hour is useless the next. The same cards prove every block. No premine, no stake, no foundation.</p>
+        <div class="cta">
+          <a href="#get" class="btn primary">Download the miner</a>
+          <a href="/litepaper" class="btn">Read the litepaper</a>
         </div>
+        <p class="fine">Every card mines; today's app proves on a 24 GB NVIDIA card and mines and proves on 32 GB. Measured on 6 October 2026 on eleven rented cards with the patched server: every NVIDIA card from 8 GB proves, 10 GB and up mine and prove (<a href="/bench#prover-tiers-on-real-cards-the-rented-fleet-6-october-2026-branch-gpu-fleet">the log</a>); ships when the packaging row lands. AMD and Apple cards mine. The chip model is public: <a href="/bench#counter-asic-2-0-the-numbers">the numbers</a>.</p>
       </div>
-      <div class="verify-grid">
-        <div class="cell"><div class="k">BLOCK PROOF</div><div class="v" data-lc="proof" title="No execution proof is on the chain yet. The first off-chain GPU proof of a block was 4 October 2026">not yet</div></div>
-        <div class="cell"><div class="k">CHECKPOINT</div><div class="v" data-lc="checkpoint">checking</div></div>
-        <div class="cell"><div class="k">PROOF SYSTEM</div><div class="v" data-lc="system">BLS aggregate, version 1</div></div>
-        <div class="cell"><div class="k">VERIFIED IN THIS TAB</div><div class="v" style="color:var(--molten)" data-lc="tab">checking</div></div>
-      </div>
-      <script type="module" src="/verify/verify.js"></script>
-    </div>
-    <div class="livestrip" id="livestrip" aria-live="off">
-      <div class="livestrip-head"><span class="dot"></span><a href="/live">live devnet</a></div>
-      <div class="livestrip-grid">
-        <div class="tile"><div class="v" id="ls-miners">0</div><div class="k">vote keys active in 10 min (a card runs several)</div></div>
-        <div class="tile"><div class="v" id="ls-bps">0.0</div><div class="k">blocks / s</div></div>
-        <div class="tile"><div class="v" id="ls-hash">0.0 MH/s</div><div class="k">hash rate</div></div>
-        <div class="tile"><div class="v" id="ls-blocks">0</div><div class="k">chain block</div></div>
+      <div class="card verify">
+        <div class="verify-head">
+          <div class="eyebrow">This tab · light client</div>
+          <div class="state" data-lc="badge"><span class="dot off"></span><span data-lc="badge-text">PREVIEW</span></div>
+        </div>
+        <div class="verify-row">
+          <div class="tick"><svg viewBox="0 0 24 24" width="26" height="26" fill="none" stroke-width="3" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M5 12.5l4.5 4.5L19 7"></path></svg></div>
+          <div>
+            <h3>Browser checks Igneum</h3>
+            <p data-lc="line">A checkpoint certificate, verified in this tab. Voter list from the node.</p>
+          </div>
+        </div>
+        <div class="verify-grid">
+          <div class="cell"><div class="k">Block proof</div><div class="v" data-lc="proof" title="No execution proof is on the chain yet. The first off-chain GPU proof of a block was 4 October 2026">not yet</div></div>
+          <div class="cell"><div class="k">Checkpoint</div><div class="v" data-lc="checkpoint">checking</div></div>
+          <div class="cell"><div class="k">Proof system</div><div class="v" data-lc="system">BLS aggregate, version 1</div></div>
+          <div class="cell"><div class="k">Verified in this tab</div><div class="v hot" data-lc="tab">checking</div></div>
+        </div>
+        <script type="module" src="/verify/verify.js"></script>
       </div>
     </div>
+    <div class="tiles facts" aria-label="Four facts">
+      <div class="tile"><div class="v">1 / s</div><div class="k">blocks, rising to 10</div></div>
+      <div class="tile"><div class="v">~60 s</div><div class="k">to a proof at launch, the target. First GPU proof of a block: 1.4 s on an RTX 5090, 4 Oct 2026</div></div>
+      <div class="tile"><div class="v">0</div><div class="k">premine</div></div>
+      <div class="tile"><div class="v">4B</div><div class="k">IGN hard cap, ever</div></div>
+    </div>
+    <p class="note">100% of emission goes to miners and provers; the protocol carries no fee.</p>
   </div>
 </header>
 
-<div class="stats">
+<section id="prove" class="sec">
   <div class="wrap">
-    <div class="stat reveal"><div class="v" data-count="1" data-suffix=" / s">1 / s</div><div class="k">blocks, rising to 10</div></div>
-    <div class="stat reveal"><div class="v">~60 s</div><div class="k">to a proof at launch, the target. First GPU proof of a block: 1.4 s on an RTX 5090, 4 Oct 2026</div></div>
-    <div class="stat reveal"><div class="v" data-count="0">0</div><div class="k">premine</div></div>
-    <div class="stat reveal"><div class="v" data-count="4" data-suffix="B">4B</div><div class="k">IGN hard cap, ever</div></div>
-    <div class="stat reveal"><div class="v" data-count="100" data-suffix="%">100%</div><div class="k">of emission to miners and provers; the protocol carries no fee</div></div>
-  </div>
-</div>
-
-<section id="prove">
-  <div class="wrap">
-    <div class="sec-head reveal">
+    <div class="sec-head">
+      <div class="eyebrow">The chain, now</div>
       <h2>Watch the chain prove itself</h2>
       <p>Blocks every second, proven in shards, locked every 30 seconds. First live lock 4 Oct 2026: checkpoint 242, 77.4% of all weight, two hours after genesis.</p>
     </div>
-    <div class="card viz reveal" id="viz-card" aria-label="Block DAG: the live devnet while the observer is fresh, otherwise a simulated preview">
-      <div class="viz-head">
-        <div class="eyebrow" id="viz-label"><span class="dot" style="background:var(--ember);margin-right:8px"></span>simulated preview</div>
-        <div class="viz-stats mono"><span><span id="k-blocks">blocks</span> <b id="c-blocks">0</b></span><span><span id="k-proven">proven</span> <b id="c-proven">0</b></span><span><span id="k-locked">locked</span> <b id="c-locked">0</b></span></div>
+    <div class="card viz" id="viz-card">
+      <div class="scene-head">
+        <div class="state" id="viz-label"><span class="dot off"></span><span id="viz-word">connecting to the devnet observer</span></div>
+        <div class="viz-stats mono"><span>chain block <b id="c-blocks">pending</b></span><span>shards proven <b id="c-proven">pending</b></span><span>last lock <b id="c-locked">pending</b></span><span>vote keys in 10 min <b id="c-miners">pending</b></span><span>hash rate <b id="c-hash">pending</b></span></div>
       </div>
-      <canvas id="chain" aria-hidden="true"></canvas>
-      <div class="legend" id="legend-sim">
-        <span><i class="sw" style="border:2px solid var(--line-2)"></i>mined</span>
-        <span><i class="sw" style="background:var(--molten)"></i>shards being proven</span>
-        <span><i class="sw" style="background:var(--ember)"></i>proven</span>
-        <span><i class="sw" style="border:3px solid var(--ember);border-radius:50%;background:transparent"></i>locked checkpoint, final</span>
+      <div class="scene">
+        <canvas id="dag" aria-label="The devnet's block DAG, live: blocks by time and miner, parent edges, the selected chain, checkpoints and proofs"></canvas>
+        <div class="chip-zoom" id="dag-chip" hidden><span class="dot live"></span>scroll to zoom, Esc to release</div>
+        <div class="tip" id="dag-tip" hidden></div>
       </div>
-      <div class="legend" id="legend-live" hidden>
-        <span><i class="sw" style="border:2px solid var(--line-2)"></i>pending</span>
-        <span><i class="sw" style="border:2px solid var(--ember)"></i>included</span>
-        <span><i class="sw" style="border:2px solid var(--line-2);opacity:.45"></i>excluded</span>
-        <span><i class="sw" style="background:var(--ember)"></i>proven</span>
-        <span><i class="sw" style="border:3px solid var(--ember);border-radius:50%;background:transparent"></i>locked checkpoint, final to its left</span>
+      <div class="scene-foot">
+        <div class="legend" id="legend-live">
+          <span><i class="sw" style="border:2px solid var(--line-2)"></i>pending</span>
+          <span><i class="sw" style="border:2px solid var(--bone)"></i>included</span><span><i class="sw" style="border:2px solid var(--ember)"></i>selected chain</span>
+          <span><i class="sw" style="border:2px solid var(--line-2);opacity:.45"></i>excluded</span>
+          <span><i class="sw" style="background:var(--ember)"></i>proven</span>
+          <span><i class="sw" style="border:3px solid var(--ember);border-radius:50%;background:transparent"></i>locked checkpoint</span>
+          <span><i class="sw" style="width:0;height:12px;border-left:2px solid var(--ember);border-radius:0"></i>finality band, with its weight</span>
+        </div>
+        <div class="cta"><button type="button" class="btn" id="dag-pause" aria-pressed="false">Pause</button><a href="/live" class="btn">The live page</a></div>
       </div>
-      <p class="viz-note" id="viz-note" hidden></p>
+      <p class="note" id="viz-note">One node is read every 2 s. Chain block is the EVM block number. Shards proven is every shard paid on the chain so far. Last lock is the latest checkpoint the finality rule locked. Hover or tap a block for its hash, miner, blue score, parents and proof state. Ctrl or cmd and scroll, a pinch, or a click into the scene then scroll, changes the window.</p>
     </div>
-    <div class="grid" style="margin-top:24px">
-      <div class="card reveal" style="display:flex;flex-direction:column;gap:16px">
-        <div class="verify-head"><div class="eyebrow">This hour's program</div><div class="mono" style="font-size:12px;color:var(--molten)">next in <span id="countdown">59:59</span></div></div>
-        <pre id="program" class="caret"></pre>
-        <p class="pt">A new program every hour. Last hour's chip is already obsolete. First live swap 4 Oct 2026: Apple, NVIDIA and AMD kept hashing through it, 0 rejected blocks.</p>
+    <div class="grid c2" style="margin-top:var(--s-4)">
+      <div class="card program">
+        <div class="head"><div class="eyebrow">This hour's program</div><div class="next">next in <span id="countdown">59:59</span></div></div>
+        <pre id="program" aria-label="A sample of the current hour's mining program"></pre>
+        <p class="note">A new program every hour: a chip wired for one program is useless. A programmable chip is met by the latency-shadow work and the price per joule, not by surprise. First live swap 4 Oct 2026: Apple, NVIDIA and AMD kept hashing through it, 0 rejected blocks.</p>
       </div>
-      <div class="card reveal" style="display:flex;flex-direction:column;gap:16px">
+      <div class="card">
         <div class="eyebrow">Proofs sold to other chains</div>
         <div class="feed">
-          <div><span>rollup · batch proof</span><span style="color:var(--molten)">at testnet</span></div>
-          <div><span>bridge · state proof</span><span style="color:var(--molten)">at testnet</span></div>
-          <div><span>rollup · fault proof</span><span style="color:var(--ash)">at testnet</span></div>
-          <div><span>IGN burned from jobs</span><span style="color:var(--ember)">phase two</span></div>
+          <div><span>rollup · batch proof</span><span>at testnet</span></div>
+          <div><span>bridge · state proof</span><span>at testnet</span></div>
+          <div><span>rollup · fault proof</span><span>at testnet</span></div>
+          <div><span>IGN burned from jobs</span><span>phase two</span></div>
         </div>
-        <p class="pt">The same cards sell proofs to rollups and bridges. Jobs are paid on the customer's chain at launch; settlement in IGN with a 10% burn follows the proof bridge in phase two. Live rows arrive with the public testnet, August 2027.</p>
+        <p class="note">The same cards sell proofs to rollups and bridges. Jobs are paid on the customer's chain at launch; settlement in IGN with a 10% burn follows the proof bridge in phase two. Live rows arrive with the public testnet, August 2027.</p>
       </div>
     </div>
-    <a href="/litepaper#proving" class="lp reveal">Read more in the litepaper</a>
+    <p class="note"><a href="/litepaper#proving">Read more in the litepaper</a></p>
   </div>
 </section>
 
-<section id="randomx">
+<section id="check" class="sec">
   <div class="wrap">
-    <div class="sec-head reveal">
-      <h2>Monero's idea, finished for GPUs</h2>
-      <p>The random program that has kept chips off Monero since 2019 (approximate), rebuilt for graphics cards.</p>
+    <div class="sec-head">
+      <div class="eyebrow">For the sceptic</div>
+      <h2>Three things to check</h2>
+      <p>Igneum states its limits first. Each of these is measured, published and open to anyone who wants to break it.</p>
     </div>
-    <div class="card reveal" style="overflow-x:auto;padding:0;max-width:640px">
-      <table class="cmp">
-        <thead><tr><th class="eyebrow">Property</th><th class="eyebrow">RandomX</th><th class="eyebrow"><span style="color:var(--ember)">Igneum</span></th></tr></thead>
-        <tbody>
-          <tr><td>Who mines</td><td>CPUs</td><td>GPUs</td></tr>
-          <tr><td>Program changes</td><td>Every hash</td><td>Every hour</td></tr>
-          <tr><td>Memory</td><td>2 GB, fixed</td><td>2 GB, growing (the proposed schedule, fixed at the testnet genesis: 2 GB, doubling at years 4, 12 and 28)</td></tr>
-          <tr><td>Verified by</td><td>Any CPU</td><td>Any CPU</td></tr>
-        </tbody>
-      </table>
+    <div class="grid c3 proofs">
+      <div class="card">
+        <div class="eyebrow">Chip economics</div>
+        <h3>The chip model is public</h3>
+        <p>In our public model the strongest chip reaches 5x to 9x per joule against an RTX 5090 today, about 2x once the lever now in its gates ships. The model, its inputs and what it does not cover are in the engineering log.</p>
+        <a class="more" href="/bench#counter-asic-2-0-the-numbers">The numbers</a>
+      </div>
+      <div class="card">
+        <div class="eyebrow">Monero's technique, applied to GPUs</div>
+        <h3>A program that keeps changing</h3>
+        <p>The random program that has kept chips off Monero since 2019 (approximate), rebuilt for graphics cards. The program keeps changing on a schedule fixed at genesis; nobody touches it.</p>
+        <div class="tbl" style="margin-top:var(--s-2)"><table class="cmp">
+          <thead><tr><th>Property</th><th>RandomX</th><th>Igneum</th></tr></thead>
+          <tbody>
+            <tr><td>Who mines</td><td>CPUs</td><td>GPUs</td></tr>
+            <tr><td>Program changes</td><td>Every hash</td><td>Every hour</td></tr>
+            <tr><td>Memory</td><td>2 GB, fixed</td><td>2 GB, growing (the proposed schedule, fixed at the testnet genesis: 2 GB, doubling at years 4, 12 and 28)</td></tr>
+            <tr><td>Verified by</td><td>Any CPU</td><td>Any CPU</td></tr>
+          </tbody>
+        </table></div>
+        <a class="more" href="/litepaper#randomx">Igneum vs RandomX</a>
+      </div>
+      <div class="card">
+        <div class="eyebrow">Every criticism</div>
+        <h3>What Igneum does not claim</h3>
+        <p>Proof lag, chip economics, the market size, and the one rule external review will try hardest to break: the litepaper states the limits, and the ledger carries every criticism, answered or conceded.</p>
+        <a class="more" href="/litepaper#limits">The limits</a>
+        <a class="more" href="/ledger">The ledger</a>
+      </div>
     </div>
-    <p class="pt reveal" style="margin-top:20px">The program keeps changing on a schedule fixed at genesis. Nobody touches it.</p>
-    <a href="/litepaper#randomx" class="lp reveal">Read more in the litepaper</a>
-    <p class="reveal" style="margin-top:28px;font-size:14px;color:var(--ash);max-width:72ch">Built on the shoulders: Kaspa's GHOSTDAG and node, Monero's RandomX idea, Chia's class-group VDF, Ethereum's EVM, Succinct's SP1, BLS12-381 and Bitcoin's address format.<br>What changed, why, and how it is measured: <a href="/litepaper#shoulders" style="color:var(--ember)">the provenance section of the litepaper</a>.</p>
+    <p class="note">Built on the shoulders: Kaspa's GHOSTDAG and node, Monero's RandomX idea, Chia's class-group VDF, Ethereum's EVM, Succinct's SP1, BLS12-381 and Bitcoin's address format. What changed, why, and how it is measured: <a href="/litepaper#shoulders">the provenance section of the litepaper</a>.</p>
   </div>
 </section>
 
-<section id="build">
+<section id="get" class="sec">
   <div class="wrap">
-    <h2 class="reveal" style="margin-bottom:28px">One chain, three jobs</h2>
-    <div class="jobs">
-      <div class="job reveal">
-        <svg viewBox="0 0 24 24" width="32" height="32" fill="none" stroke="#F2541B" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="3" y="5" width="18" height="12" rx="2"></rect><path d="M7 9h4M7 13h2M15 9v4M18 9v4M9 21h6"></path></svg>
+    <div class="sec-head">
+      <div class="eyebrow"><span data-product="full">Igneum Ember</span> · one click</div>
+      <h2 id="mine">Install. Start. The card mines.</h2>
+      <p><span data-product="full">Igneum Ember</span> finds your GPU, makes a wallet for you and runs the node, the miner and the prover as one app. The card mines; a 24 GB NVIDIA card proves as well.</p>
+    </div>
+    <div class="download">
+      <div>
+        <div class="dl-list">
+          <a data-dl="miner-windows" href="https://dl.igneum.network/public/igneum-miner-windows.exe" class="primary">Windows <span data-dl-meta="miner-windows">v0.3.14 · 45.4 MB</span></a>
+          <a data-dl="miner-mac" href="https://dl.igneum.network/public/igneum-miner-mac.dmg">macOS <span data-dl-meta="miner-mac">v0.3.14 · 41.9 MB</span></a>
+          <a href="/miner#get">Linux · HiveOS <span>on the miner page</span></a>
+        </div>
+        <p class="notice" data-devnet-notice><b>Devnet.</b> Coins have no value and the chain may be reset.</p>
+        <p class="notice" data-testnet-notice>Public testnet: not yet open; the devnet build is here for people who want to look.</p>
+        <p class="notice"><a href="/miner">Read more about the miner</a>. The protocol carries no fee. The <span data-product="name">Ember</span> software takes an optional 1% dev fee, like other GPU miners, off with one flag. Download only from this domain. Nobody from Igneum will ask for your seed.</p>
+        <div class="grid c2" style="margin-top:var(--s-5)">
+          <div><h3 style="font-size:var(--t-base)">NVIDIA, AMD, Apple silicon</h3><p class="note" style="margin-top:4px">Found by itself. One worker per card, several identities each.</p></div>
+          <div><h3 style="font-size:var(--t-base)">A new program every hour, no pause</h3><p class="note" style="margin-top:4px">Compiled ahead and swapped in 0.01 ms on the live devnet, 0 rejected blocks.</p></div>
+          <div><h3 style="font-size:var(--t-base)">Signed updates at a safe moment</h3><p class="note" style="margin-top:4px">The card keeps mining through the download. The old version comes back if the new one fails to start.</p></div>
+          <div><h3 style="font-size:var(--t-base)">Four pages: Mine, Earnings, Prove, Settings</h3><p class="note" style="margin-top:4px">Every card is one row: rate, watts, MH per watt, pounds a day at your electricity price, a Tune button. The node is one line.</p></div>
+          <div><h3 style="font-size:var(--t-base)">Ember Tune, measured</h3><p class="note" style="margin-top:4px">An RTX 5090 from 311 W to 227 W for 0.15% of its rate; an RTX 4070 from 106 W to 76 W for none (the Windows rig, 6 Oct 2026). Every number in the bench table.</p></div>
+        </div>
+      </div>
+      <figure class="shot" style="margin:0">
+        <img src="/img/miner-dashboard.webp" width="2880" height="1800" alt="The Mine page of Igneum Miner 0.3.14 on a three-card PC: 169 MH/s at 532 W, one row per card with its rate, watts, MH per watt, temperature, tune line, Tune button and switch" loading="lazy" decoding="async">
+        <figcaption><span data-product="caption">Igneum Ember (the app window still says Igneum Miner)</span> 0.3.14 on a Windows rig with an RTX 5090, RTX 4070 and RX 9070 XT, live devnet, 6 Oct 2026.</figcaption>
+      </figure>
+    </div>
+    <details id="testnet-terms" style="margin-top:var(--s-6)">
+      <summary>What you agree to when you run the testnet miner</summary>
+      <div class="grid c3">
+        <p><b>No value.</b> Testnet IGN cannot be sold, bought or redeemed, now or at mainnet. There is no airdrop, no points scheme and no promise tied to testnet balances. Mainnet starts from an empty genesis.</p>
+        <p><b>Resets.</b> The chain restarts from a fresh genesis when a consensus rule changes. Every reset is announced at least seven days ahead on this page and in the app. Balances, contracts and history do not carry over. The devnet that runs today resets without notice.</p>
+        <p><b>What the app sends home.</b> The app version, a random machine id made at install, your operating system, the node version, the hash rate, and the app, node and miner logs (which name the address the card mines to). They go to the project's log intake, a service Igneum runs on Vercel, and are read by the maintainers to find faults. Never your seed phrase, never a key, never a file you did not make with the app. Nothing is sold or shared.</p>
+      </div>
+      <p class="note">Wallet set-up for MetaMask: <a href="/metamask">chain id, RPC and the one-click button</a>. The miner software takes an optional 1% fee, off with one flag; the protocol carries no fee to anyone.</p>
+    </details>
+  </div>
+</section>
+
+<section id="build" class="sec">
+  <div class="wrap">
+    <div class="sec-head">
+      <div class="eyebrow">How it works</div>
+      <h2>One chain, three jobs</h2>
+    </div>
+    <div class="pillars">
+      <div class="pillar">
+        <svg viewBox="0 0 24 24" width="32" height="32" fill="none" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="3" y="5" width="18" height="12" rx="2"></rect><path d="M7 9h4M7 13h2M15 9v4M18 9v4M9 21h6"></path></svg>
         <h3>Mine</h3>
         <p>Any 4 GB card at launch, 8 GB from about year 4 under the proposed schedule, fixed at the testnet genesis: 2 GB, doubling at years 4, 12 and 28, approximate. 80% of each block to its finder.</p>
-        <a href="#mine" class="more">About the miner</a>
+        <a href="#get">About the miner</a>
       </div>
-      <div class="job reveal">
-        <svg viewBox="0 0 24 24" width="32" height="32" fill="none" stroke="#F2541B" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3l8 4v5c0 5-3.5 8-8 9-4.5-1-8-4-8-9V7l8-4z"></path><path d="M9 12l2 2 4-4"></path></svg>
+      <div class="pillar">
+        <svg viewBox="0 0 24 24" width="32" height="32" fill="none" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3l8 4v5c0 5-3.5 8-8 9-4.5-1-8-4-8-9V7l8-4z"></path><path d="M9 12l2 2 4-4"></path></svg>
         <h3>Prove</h3>
         <p>The same card proves shards and sells proofs to other chains.</p>
-        <a href="#prove" class="more">How proving pays</a>
+        <a href="#prove">How proving pays</a>
       </div>
-      <div class="job reveal">
-        <svg viewBox="0 0 24 24" width="32" height="32" fill="none" stroke="#F2541B" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M8 7l-5 5 5 5M16 7l5 5-5 5M14 4l-4 16"></path></svg>
+      <div class="pillar">
+        <svg viewBox="0 0 24 24" width="32" height="32" fill="none" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M8 7l-5 5 5 5M16 7l5 5-5 5M14 4l-4 16"></path></svg>
         <h3>Build</h3>
         <p>Ethereum bytecode, with the differences documented. Proofs of any computation from the miners' cards, verified by the chain itself. 20% of priority fees to the contracts that ran, stated at the fee levels that exist.</p>
-        <a href="/litepaper#builders-ask" class="more">Deploy on Igneum</a>
+        <a href="/litepaper#builders-ask">Deploy on Igneum</a>
       </div>
     </div>
-    <a href="/litepaper#building" class="lp reveal">Read more in the litepaper</a>
+    <p class="note"><a href="/litepaper#building">Read more in the litepaper</a></p>
   </div>
 </section>
 
-<section id="mine" class="light">
+<section id="wallet" class="sec">
   <div class="wrap">
-    <div class="sec-head reveal">
-      <h2>One click. The card mines; a 24 GB NVIDIA card proves as well.</h2>
-      <p><span data-product="full">Igneum Ember</span> finds your GPU, makes a wallet for you and runs the node, the miner and the prover as one app.</p>
-    </div>
-    <div class="split">
-      <div class="shot reveal">
-        <figure class="frame" style="margin:0">
-          <div class="bar"><i></i><i></i><i></i><b><span data-product="app">Igneum Miner</span></b></div>
-          <img src="/img/miner-dashboard.webp" width="2880" height="1800" alt="The Mine page of Igneum Miner 0.3.14 on a three-card PC: 169 MH/s at 532 W, one row per card with its rate, watts, MH per watt, temperature, tune line, Tune button and switch" loading="lazy" decoding="async">
-          <figcaption><span data-product="caption">Igneum Ember (the app window still says Igneum Miner)</span> 0.3.14 on PC 1 (RTX 5090, RTX 4070, RX 9070 XT), live devnet, 6 Oct 2026.</figcaption>
-        </figure>
-      </div>
-      <div class="split-copy reveal">
-        <div class="pills">
-          <div class="pill"><b>NVIDIA, AMD, Apple silicon</b><span>Found by itself. One worker per card, several identities each.</span></div>
-          <div class="pill"><b>A new program every hour, no pause</b><span>Compiled ahead and swapped in 0.01 ms on the live devnet, 0 rejected blocks.</span></div>
-          <div class="pill"><b>Signed updates at a safe moment</b><span>The card keeps mining through the download. The old version comes back if the new one fails to start.</span></div>
-          <div class="pill"><b>Four pages: Mine, Earnings, Prove, Settings</b><span>Every card is one row: rate, watts, MH per watt, pounds a day at your electricity price, a Tune button. The node is one line.</span></div>
-          <div class="pill"><b>Ember Tune, measured</b><span>An RTX 5090 from 311 W to 227 W for 0.15% of its rate; an RTX 4070 from 106 W to 76 W for none (PC 1, 6 Oct 2026). Every number in the bench table.</span></div>
+    <div class="split2">
+      <div>
+        <div class="eyebrow">Igneum Wallet · desktop</div>
+        <h2>Your coins, your wallet</h2>
+        <p class="lead" style="margin-top:var(--s-3)">Igneum Wallet holds the key the miner makes for you and verifies finality itself. MetaMask works too.</p>
+        <div class="wallet-states" aria-label="The three states a transfer can be in">
+          <span class="wstate"><i></i>pending <small>waiting for a block</small></span>
+          <span class="wstate block"><i></i>in a block <small>carried, not yet covered</small></span>
+          <span class="wstate final"><i></i>final, checkpoint 5 <small>under a checkpoint this wallet verified</small></span>
         </div>
-        <div class="cta" style="margin-top:24px;align-items:center">
-          <a data-dl="miner-windows" href="https://dl.igneum.network/public/igneum-miner-windows.exe" class="btn dark">Windows <span data-dl-meta="miner-windows" style="font-weight:400;opacity:.8">v0.3.14 · 45.4 MB</span></a>
-          <a data-dl="miner-mac" href="https://dl.igneum.network/public/igneum-miner-mac.dmg" class="btn dark">macOS <span data-dl-meta="miner-mac" style="font-weight:400;opacity:.8">v0.3.14 · 41.9 MB</span></a>
-          <a href="/miner#get" class="btn" style="color:#0C0C0E;border-color:#0C0C0E">Linux · HiveOS</a>
+        <div class="grid c1" style="gap:var(--s-3)">
+          <div><h3 style="font-size:var(--t-base)">Sealed on your machine</h3><p class="note" style="margin-top:4px">24 words, three typed back, a password. Argon2id and XChaCha20-Poly1305. Nothing leaves.</p></div>
+          <div><h3 style="font-size:var(--t-base)">Rewards in one history</h3><p class="note" style="margin-top:4px">Block rewards, proving payouts and transfers. Send with the fee shown. Receive by a QR drawn locally.</p></div>
+          <div><h3 style="font-size:var(--t-base)">Reads your own node</h3><p class="note" style="margin-top:4px">When the miner is installed, the wallet uses its node. Nobody else sees your balance.</p></div>
         </div>
-        <p data-devnet-notice style="margin-top:14px;font-size:14px;color:#0C0C0E;font-weight:600">Devnet: coins have no value and the chain may be reset.</p>
-        <p data-testnet-notice style="margin-top:14px;font-size:14px;color:#0C0C0E;font-weight:600">Public testnet: not yet open; the devnet build is here for people who want to look.</p>
-        <p style="margin-top:12px;font-size:14px;color:#55534F"><a href="/miner" style="color:#0C0C0E">Read more about the miner</a>. The protocol carries no fee. The <span data-product="name">Ember</span> software takes an optional 1% dev fee, like other GPU miners, off with one flag. Download only from this domain. Nobody from Igneum will ask for your seed.</p>
-      </div>
-    </div>
-    <div class="card reveal" id="testnet-terms" style="margin-top:32px;display:flex;flex-direction:column;gap:12px">
-      <div class="eyebrow">Testnet terms</div>
-      <h3>What you agree to when you run the testnet miner</h3>
-      <div style="display:grid;gap:16px;grid-template-columns:repeat(auto-fit,minmax(min(100%,260px),1fr))">
-        <div>
-          <p style="font-size:15px;color:#3D3B37;margin:0 0 6px"><strong style="color:#0C0C0E">No value.</strong> Testnet IGN cannot be sold, bought or redeemed, now or at mainnet. There is no airdrop, no points scheme and no promise tied to testnet balances. Mainnet starts from an empty genesis.</p>
-        </div>
-        <div>
-          <p style="font-size:15px;color:#3D3B37;margin:0 0 6px"><strong style="color:#0C0C0E">Resets.</strong> The chain restarts from a fresh genesis when a consensus rule changes. Every reset is announced at least seven days ahead on this page and in the app. Balances, contracts and history do not carry over. The devnet that runs today resets without notice.</p>
-        </div>
-        <div>
-          <p style="font-size:15px;color:#3D3B37;margin:0 0 6px"><strong style="color:#0C0C0E">What the app sends home.</strong> The app version, a random machine id made at install, your operating system, the node version, the hash rate, and the app, node and miner logs (which name the address the card mines to). They go to the project's log intake, a service Igneum runs on Vercel, and are read by the maintainers to find faults. Never your seed phrase, never a key, never a file you did not make with the app. Nothing is sold or shared.</p>
-        </div>
-      </div>
-      <p style="font-size:14px;color:#55534F;margin:0">Wallet set-up for MetaMask: <a href="/metamask">chain id, RPC and the one-click button</a>. The miner software takes an optional 1% fee, off with one flag; the protocol carries no fee to anyone.</p>
-    </div>
-  </div>
-</section>
-
-<section id="wallet">
-  <div class="wrap">
-    <div class="sec-head reveal">
-      <h2>Your coins, your wallet</h2>
-      <p>Igneum Wallet holds the key the miner makes for you and verifies finality itself. MetaMask works too.</p>
-    </div>
-    <div class="split rev">
-      <div class="split-copy reveal">
-        <div class="states">
-          <div class="state"><span class="spill"><i></i>pending</span><span>waiting for a block</span></div>
-          <div class="state block"><span class="spill"><i></i>in a block</span><span>carried, not yet covered</span></div>
-          <div class="state final"><span class="spill"><i></i>final · cp 5</span><span>under a checkpoint this wallet verified</span></div>
-        </div>
-        <div class="pills" style="margin-top:20px">
-          <div class="pill"><b>Sealed on your machine</b><span>24 words, three typed back, a password. Argon2id and XChaCha20-Poly1305. Nothing leaves.</span></div>
-          <div class="pill"><b>Rewards in one history</b><span>Block rewards, proving payouts and transfers. Send with the fee shown. Receive by a QR drawn locally.</span></div>
-          <div class="pill"><b>Reads your own node</b><span>When the miner is installed, the wallet uses its node. Nobody else sees your balance.</span></div>
-        </div>
-        <div class="cta" style="margin-top:24px;align-items:center">
-          <a href="/wallet" class="btn primary">Read more about the wallet</a>
+        <div class="cta" style="margin-top:var(--s-5)">
+          <a href="/wallet" class="btn">Read more about the wallet</a>
           <a href="/wallet#metamask" class="btn">MetaMask export</a>
         </div>
-        <p style="margin-top:16px;font-size:14px;color:var(--ink-2)">macOS first, Windows next. Public testnet first. Download only from this domain. Nobody from Igneum will ask for your seed.</p>
-      </div>
-      <div class="shot reveal">
-        <figure class="frame" style="margin:0">
-          <div class="bar"><i></i><i></i><i></i><b>Igneum Wallet</b></div>
-          <img src="/img/wallet-home.webp" width="2240" height="1560" alt="The wallet window: a balance in IGN, an example address with Send and Receive, node and finality panels, and a history of block rewards" loading="lazy" decoding="async">
-          <figcaption>Igneum Wallet on a private test network, 5 Oct 2026. The address is an example.</figcaption>
-        </figure>
+        <p class="note">macOS first, Windows next. Public testnet first. Download only from this domain. Nobody from Igneum will ask for your seed.</p>
       </div>
+      <figure class="shot" style="margin:0">
+        <img src="/img/wallet-home.webp" width="2240" height="1560" alt="The wallet window: a balance in IGN, an example address with Send and Receive, node and finality panels, and a history of block rewards" loading="lazy" decoding="async" style="border-radius:var(--r-row);border:1px solid var(--line)">
+        <figcaption class="note" style="font-family:var(--f-mono);font-size:var(--t-sm)">Igneum Wallet on a private test network, 5 Oct 2026. The address is an example.</figcaption>
+      </figure>
     </div>
   </div>
 </section>
 
-<section id="journey">
+<section id="journey" class="sec">
   <div class="wrap">
-    <div class="sec-head reveal">
-      <div>
-        <h2>Where Igneum is right now</h2>
-        <div class="now" style="margin-top:12px"><span class="dot" style="background:var(--ember)"></span><span id="stage-label">LOADING</span></div>
-      </div>
+    <div class="sec-head">
+      <div class="eyebrow">The journey</div>
+      <h2>Where Igneum is right now</h2>
+      <div class="now" style="margin-top:var(--s-3)"><span class="dot live"></span><span id="stage-label">loading</span></div>
       <p>Thirteen months, four public gates, each a measurement published pass or fail.</p>
     </div>
-    <div class="journey reveal" id="phases"></div>
-    <p class="pt reveal" style="margin-top:24px;margin-bottom:0">The log below is the engineering log's dated entries, newest first. Day one was 3 October 2026; several entries can share a date because the work is logged as it is run.</p>
-    <div class="log reveal" id="log"></div>
-    <a href="/litepaper#roadmap" class="lp reveal">Read more in the litepaper</a>
+    <div class="phases" id="phases"></div>
+    <p class="note">The log below is the engineering log's dated entries, newest first. Day one was 3 October 2026; several entries can share a date because the work is logged as it is run.</p>
+    <div class="log" id="log"></div>
+    <p class="note"><a href="/litepaper#roadmap">Read more in the litepaper</a></p>
   </div>
 </section>
 
-<section id="economics">
+<section id="economics" class="sec">
   <div class="wrap">
-    <div style="display:grid;gap:48px;grid-template-columns:repeat(auto-fit,minmax(min(100%,380px),1fr));align-items:center">
-      <div class="reveal" style="display:flex;flex-direction:column;gap:20px">
+    <div class="split2">
+      <div>
+        <div class="eyebrow">Economics</div>
         <h2>Every coin, mined</h2>
-        <p style="color:var(--ink-2)">Hard cap of 4 billion IGN, halving every two years for ever.</p>
-        <div style="display:flex;flex-direction:column;gap:10px">
-          <div class="bar" id="bar"><div style="width:0;background:var(--ember)" data-w="80%"></div><div style="width:0;background:var(--molten)" data-w="20%"></div></div>
-          <div class="legend mono" style="margin-top:4px;font-size:13px">
-            <span><i class="sw" style="background:var(--ember)"></i>80% miners</span>
-            <span><i class="sw" style="background:var(--molten)"></i>20% provers</span>
-            <span><i class="sw" style="border:1px solid var(--line-2)"></i>0% anyone else in the protocol</span>
-          </div>
+        <p class="lead" style="margin-top:var(--s-3)">Hard cap of 4 billion IGN, halving every two years for ever.</p>
+        <div class="bar" id="bar" aria-label="Emission split"><div style="width:80%;background:var(--ember)"></div><div style="width:20%;background:var(--molten)"></div></div>
+        <div class="legend" style="margin-top:var(--s-3)">
+          <span><i class="sw" style="background:var(--ember)"></i>80% miners</span>
+          <span><i class="sw" style="background:var(--molten)"></i>20% provers</span>
+          <span><i class="sw" style="border:1px solid var(--line-2)"></i>0% anyone else in the protocol</span>
         </div>
       </div>
-      <div class="tiles reveal">
+      <div class="tiles" style="grid-template-columns:repeat(2,minmax(0,1fr))">
         <div class="tile"><div class="v">0</div><div class="k">premine</div></div>
         <div class="tile"><div class="v">0</div><div class="k">stake, anywhere</div></div>
         <div class="tile"><div class="v">0</div><div class="k">admin keys in consensus</div></div>
         <div class="tile"><div class="v">90%</div><div class="k">of blocks must signal to upgrade</div></div>
       </div>
     </div>
-    <p class="pt reveal" style="margin-top:28px">No premine, no stake, no fee to any team in the protocol. Base fee burned. The one payment to the project is the Ember software's optional 1% dev fee, off with one flag. On the devnet today the coinbase's 20% output is burned under the tag igneum-proving-pool-v0, and provers are paid from a separate escrow in the execution state credited with the same 20%.</p>
-    <a href="/litepaper#economics" class="lp reveal">Read more in the litepaper</a>
+    <p class="note" style="margin-top:var(--s-5)">No premine, no stake, no fee to any team in the protocol. Base fee burned. The one payment to the project is the Ember software's optional 1% dev fee, off with one flag. On the devnet today the coinbase's 20% output is burned under the tag igneum-proving-pool-v0, and provers are paid from a separate escrow in the execution state credited with the same 20%.</p>
+    <p class="note"><a href="/litepaper#economics">Read more in the litepaper</a></p>
   </div>
 </section>
 
 <div class="band">
   <div class="wrap">
-    <div style="display:flex;flex-direction:column;gap:8px">
+    <div>
       <h2>Read what Igneum does not claim.</h2>
-      <p>The litepaper states the limits before anyone else does. Proof lag, chip economics, the market size, and the one rule external review will try hardest to break.</p>
+      <p>The litepaper states the limits first. Proof lag, chip economics, the market size, and the one rule external review will try hardest to break.</p>
     </div>
-    <a href="/litepaper" class="btn dark">Litepaper</a>
+    <a href="/litepaper#limits" class="btn">The litepaper</a>
   </div>
 </div>
 </main>
@@ -633,7 +498,7 @@ pre{margin:0;font-family:var(--f-mono);font-size:13px;line-height:1.6;color:var(
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -659,9 +524,9 @@ pre{margin:0;font-family:var(--f-mono);font-size:13px;line-height:1.6;color:var(
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -669,225 +534,60 @@ pre{margin:0;font-family:var(--f-mono);font-size:13px;line-height:1.6;color:var(
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 
 <!-- journey:start -->
-<script type="application/json" id="journey-data">{"updated":"2026-10-06","stage":"phase-3","phases":[{"id":"phase-1","name":"Specification","when":"Oct to Nov 2026","status":"active","line":"Mining generator, shard proving, finality rules, written for external review"},{"id":"phase-2","name":"Prove the proving","when":"Nov 2026 to Jan 2027","status":"active","line":"Mining program proven on Apple, NVIDIA and AMD; shard proving benchmark on consumer cards still to run","gate":"A fixed published workload, job received to accepted proof on a declared consumer card, sustained with no growing backlog, reproduced by three independent operators"},{"id":"phase-3","name":"Devnet","when":"Started 3 Oct 2026, 20 nodes by Mar 2027","status":"active","line":"BlockDAG node mining on the new program, GPU miners on three vendors, EVM execution in build","gate":"1 block a second held with proofs under 60 s behind the tip"},{"id":"phase-4","name":"Finality and job market","when":"Apr to Jul 2027","status":"next","line":"Sustained-mining finality, external proving jobs, miner client with auto-switching","gate":"Finality design passes external review and one rollup signs for testnet"},{"id":"phase-5","name":"Public testnet","when":"Aug to Oct 2027","status":"next","line":"One-click miner app on Windows, macOS and Linux, HiveOS, pools, the first rollup as a proving customer, no coin yet","gate":"1,000 independent miners run 30 days and rollup proofs are delivered on time"},{"id":"phase-6","name":"Mainnet fair launch","when":"Nov 2027","status":"next","line":"Genesis with no premine, 30-day ramp. No listing is arranged, promised or sought by the project"}],"log":[{"date":"2026-10-06","text":"Counter ASIC 3.0 item 2: the per-day derivation","short":"Counter ASIC 3.0 item 2"},{"date":"2026-10-06","text":"Counter ASIC 3.0 item 8: program work in the latency shadow","short":"Counter ASIC 3.0 item 8"},{"date":"2026-10-06","text":"Counter ASIC 3.0 item 6: the reserve families' step costs","short":"Counter ASIC 3.0 item 6"},{"date":"2026-10-06","text":"Counter ASIC 3.0 gate run, the hash side","short":"Counter ASIC 3.0 gate run, the hash side"},{"date":"2026-10-06","text":"16:01Z: Ember run 6 on PC 1","short":"16:01Z: Ember run 6 on PC 1"},{"date":"2026-10-06","text":"00:4xZ, the empty `/api/state` reply","short":"00:4xZ, the empty `/api/state` reply"},{"date":"2026-10-06","text":"07:12Z to 07:17Z, the host's chain mode with --save-shards records and --prev, on the Apple M5 Max's CPU","short":"07:12Z to 07:17Z, the host's chain mode with --save-shards records…"},{"date":"2026-10-06","text":"07:52Z to 08:24Z, the segment-aligned prover beside the miner on PC 2's RTX 5090","short":"07:52Z to 08:24Z, the segment-aligned prover beside the miner on PC…"},{"date":"2026-10-06","text":"08:26Z to 08:35Z, the fast-time harness on the fresh-record rule","short":"08:26Z to 08:35Z, the fast-time harness on the fresh-record rule"},{"date":"2026-10-06","text":"12:25 to 13:20Z, the finality route: why 26 fresh nodes lost the seed every checkpoint","short":"12:25 to 13:20Z, the finality route: why 26 fresh nodes lost the…"},{"date":"2026-10-05","text":"The 9070 XT on the eGPU: why 17.9 MH/s, and what moved","short":"The 9070 XT on the eGPU"},{"date":"2026-10-05","text":"Ember Tune: the two-knob efficiency tune, the fleet prior, and what PC 1 could measure tonight","short":"Ember Tune: the two-knob efficiency tune, the fleet prior"},{"date":"2026-10-05","text":"Read width of the lottery hash: 4, 16 and 64-byte loads, a per-load mix, a written scratch; three cards","short":"Read width of the lottery hash"},{"date":"2026-10-05","text":"The hot table on the M5 Max: a second table sized to GPU cache beside the 1 GiB dataset","short":"The hot table on the M5 Max"},{"date":"2026-10-05","text":"Mixer x4 and the cache growth rule: the class v3 dataset construction, with the x8 candidate","short":"Mixer x4 and the cache growth rule"},{"date":"2026-10-05","text":"The SP1 CPU prover on PC 1 beside the miners, and the backend survey: no zkVM proves on AMD","short":"The SP1 CPU prover on PC 1 beside the miners, and the backend survey"},{"date":"2026-10-05","text":"Proving v1: segment records, the chain rule, the unproven rule; what was measured tonight","short":"Proving v1: segment records, the chain rule"},{"date":"2026-10-05","text":"Dp4a-class throughput on the M5 Max: the dot4 emulation against the ALU chain","short":"Dp4a-class throughput on the M5 Max"},{"date":"2026-10-05","text":"Layer 3 scratch soundness","short":"Layer 3 scratch soundness"},{"date":"2026-10-05","text":"Epoch length as an era parameter : the Apple M5 Max's compile-ahead per program","short":"Epoch length as an era parameter"},{"date":"2026-10-05","text":"Aggregation cost on the RTX 5090: what a per-block aggregation spends and what each lever gives","short":"Aggregation cost on the RTX 5090"},{"date":"2026-10-05","text":"The C4 fix: certificate-driven reorg","short":"The C4 fix: certificate-driven reorg"},{"date":"2026-10-05","text":"EVM transaction relay: three nodes in a chain, every transaction sent to one end included by the other two miners","short":"EVM transaction relay"},{"date":"2026-10-05","text":"The prover carries both fee tables and the height switch: one pinned guest on either side of DAA 210,000","short":"The prover carries both fee tables and the height switch"},{"date":"2026-10-05","text":"FUD ledger sweep round 6","short":"FUD ledger sweep round 6"},{"date":"2026-10-05","text":"Live devnet: real transactions, the first non-empty shard proven and paid, and the exporter's block structure fixed","short":"Live devnet: real transactions, the first non-empty shard proven and…"},{"date":"2026-10-05","text":"The program id split: why the Apple M5 Max rejected PC 2's proofs, and the verifier at 114 s","short":"The program id split"},{"date":"2026-10-05","text":"Live devnet: the first shards proven, verified and paid","short":"Live devnet: the first shards proven, verified and paid"},{"date":"2026-10-04","text":"One-click Windows workers: what the Apple M5 Max could measure","short":"One-click Windows workers"},{"date":"2026-10-04","text":"The gfx1036 worker fault and what the Apple M5 Max could and could not reproduce","short":"The gfx1036 worker fault and what the Apple M5 Max could and could…"},{"date":"2026-10-04","text":"Difficulty rule v2: the live oscillation, its cause, the DAG replay, the fix behind a height switch","short":"Difficulty rule v2"},{"date":"2026-10-04","text":"The observer stored nothing for 78 minutes, then 7,022 blocks in two minutes","short":"The observer stored nothing for 78 minutes, then 7,022 blocks in two…"},{"date":"2026-10-04","text":"PC 2 at the 14:20 boundary: a worker stuck on the previous epoch","short":"PC 2 at the 14:20 boundary: a worker stuck on the previous epoch"},{"date":"2026-10-04","text":"Shard proving on the RTX 5090: a full shard compressed in 10.9 s, a two-shard block aggregated in 2.2 s, all verified","short":"Shard layer on the RTX 5090: a full shard proven in 10.9 s, a block aggregated in 2.2 s"},{"date":"2026-10-04","text":"First outside machine on the devnet: an Apple silicon laptop through the Igneum Miner app","short":"First outside machine: a friend's Mac mining through the app"},{"date":"2026-10-04","text":"Cloud devnet: 12 igneumd nodes in 5 locations, inter-region latency, two Singapore partitions, hash-rate steps","short":"Cloud devnet: 12 igneumd nodes in 5 locations, inter-region latency"},{"date":"2026-10-04","text":"Correction: the 78-minute observer gap was the Apple M5 Max hibernating","short":"Correction: the 78-minute observer gap was the Apple M5 Max hibernating"},{"date":"2026-10-04","text":"Difficulty v2 rollout rehearsal on the 12-node the cloud provider network, binaries for the devnet, the devnet plan","short":"Difficulty v2 rollout rehearsal on the 12-node the cloud provider…"},{"date":"2026-10-04","text":"Difficulty rule v2 activated on the live devnet at DAA 33,000 by height switch, no fresh chain","short":"Difficulty rule v2 switched on the live devnet by height, no fresh chain"},{"date":"2026-10-04","text":"First machine in the United States: a Windows laptop on an Intel integrated GPU, synced and voting","short":"First machine in the United States: a laptop on an integrated GPU, synced and voting"}]}</script>
+<script type="application/json" id="journey-data">{"updated":"2026-10-06","stage":"phase-3","phases":[{"id":"phase-1","name":"Specification","when":"Oct to Nov 2026","status":"active","line":"Mining generator, shard proving, finality rules, written for external review"},{"id":"phase-2","name":"Prove the proving","when":"Nov 2026 to Jan 2027","status":"active","line":"Mining program proven on Apple, NVIDIA and AMD; shard proving benchmark on consumer cards still to run","gate":"A fixed published workload, job received to accepted proof on a declared consumer card, sustained with no growing backlog, reproduced by three independent operators"},{"id":"phase-3","name":"Devnet","when":"Started 3 Oct 2026, 20 nodes by Mar 2027","status":"active","line":"BlockDAG node mining on the new program, GPU miners on three vendors, EVM execution in build","gate":"1 block a second held with proofs under 60 s behind the tip"},{"id":"phase-4","name":"Finality and job market","when":"Apr to Jul 2027","status":"next","line":"Sustained-mining finality, external proving jobs, miner client with auto-switching","gate":"Finality design passes external review and one rollup signs for testnet"},{"id":"phase-5","name":"Public testnet","when":"Aug to Oct 2027","status":"next","line":"One-click miner app on Windows, macOS and Linux, HiveOS, pools, the first rollup as a proving customer, no coin yet","gate":"1,000 independent miners run 30 days and rollup proofs are delivered on time"},{"id":"phase-6","name":"Mainnet fair launch","when":"Nov 2027","status":"next","line":"Genesis with no premine, 30-day ramp. No listing is arranged, promised or sought by the project"}],"log":[{"date":"2026-10-06","text":"16:01Z: Ember run 6 on the three-card Windows rig","short":"16:01Z: Ember run 6 on the three-card Windows rig"},{"date":"2026-10-06","text":"Counter ASIC 3.0 item 2: the per-day derivation","short":"Counter ASIC 3.0 item 2"},{"date":"2026-10-06","text":"Counter ASIC 3.0 item 8: program work in the latency shadow","short":"Counter ASIC 3.0 item 8"},{"date":"2026-10-06","text":"Counter ASIC 3.0 item 6: the reserve families' step costs","short":"Counter ASIC 3.0 item 6"},{"date":"2026-10-06","text":"Counter ASIC 3.0 gate run, the hash side","short":"Counter ASIC 3.0 gate run, the hash side"},{"date":"2026-10-06","text":"16:01Z: Ember run 6 on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT)","short":"16:01Z: Ember run 6 on the three-card Windows rig (RTX 5090, RTX 4070"},{"date":"2026-10-06","text":"00:4xZ, the empty `/api/state` reply","short":"00:4xZ, the empty `/api/state` reply"},{"date":"2026-10-06","text":"07:12Z to 07:17Z, the host's chain mode with --save-shards records and --prev, on the Apple M5 Max's CPU","short":"07:12Z to 07:17Z, the host's chain mode with --save-shards records…"},{"date":"2026-10-06","text":"07:52Z to 08:24Z, the segment-aligned prover beside the miner on the RTX 5090 Windows rig's RTX 5090","short":"07:52Z to 08:24Z, the segment-aligned prover beside the miner on the…"},{"date":"2026-10-06","text":"08:26Z to 08:35Z, the fast-time harness on the fresh-record rule","short":"08:26Z to 08:35Z, the fast-time harness on the fresh-record rule"},{"date":"2026-10-06","text":"12:25 to 13:20Z, the finality route: why 26 fresh nodes lost the seed every checkpoint","short":"12:25 to 13:20Z, the finality route: why 26 fresh nodes lost the…"},{"date":"2026-10-05","text":"Ember Tune: the two-knob efficiency tune, the fleet prior, and what the three-card Windows rig could measure tonight","short":"Ember Tune: the two-knob efficiency tune, the fleet prior"},{"date":"2026-10-05","text":"The SP1 CPU prover on the three-card Windows rig beside the miners, and the backend survey: no zkVM proves on AMD","short":"The SP1 CPU prover on the three-card Windows rig beside the miners,…"},{"date":"2026-10-05","text":"The 9070 XT on the eGPU: why 17.9 MH/s, and what moved","short":"The 9070 XT on the eGPU"},{"date":"2026-10-05","text":"Ember Tune: the two-knob efficiency tune, the fleet prior, and what the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) could measure tonight","short":"Ember Tune: the two-knob efficiency tune, the fleet prior"},{"date":"2026-10-05","text":"Read width of the lottery hash: 4, 16 and 64-byte loads, a per-load mix, a written scratch; three cards","short":"Read width of the lottery hash"},{"date":"2026-10-05","text":"The hot table on the M5 Max: a second table sized to GPU cache beside the 1 GiB dataset","short":"The hot table on the M5 Max"},{"date":"2026-10-05","text":"Mixer x4 and the cache growth rule: the class v3 dataset construction, with the x8 candidate","short":"Mixer x4 and the cache growth rule"},{"date":"2026-10-05","text":"The SP1 CPU prover on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) beside the miners, and the backend survey: no zkVM proves on AMD","short":"The SP1 CPU prover on the three-card Windows rig (RTX 5090, RTX…"},{"date":"2026-10-05","text":"Proving v1: segment records, the chain rule, the unproven rule; what was measured tonight","short":"Proving v1: segment records, the chain rule"},{"date":"2026-10-05","text":"Dp4a-class throughput on the M5 Max: the dot4 emulation against the ALU chain","short":"Dp4a-class throughput on the M5 Max"},{"date":"2026-10-05","text":"Layer 3 scratch soundness","short":"Layer 3 scratch soundness"},{"date":"2026-10-05","text":"Epoch length as an era parameter : the Apple M5 Max's compile-ahead per program","short":"Epoch length as an era parameter"},{"date":"2026-10-05","text":"Aggregation cost on the RTX 5090: what a per-block aggregation spends and what each lever gives","short":"Aggregation cost on the RTX 5090"},{"date":"2026-10-05","text":"The C4 fix: certificate-driven reorg","short":"The C4 fix: certificate-driven reorg"},{"date":"2026-10-05","text":"EVM transaction relay: three nodes in a chain, every transaction sent to one end included by the other two miners","short":"EVM transaction relay"},{"date":"2026-10-05","text":"The prover carries both fee tables and the height switch: one pinned guest on either side of DAA 210,000","short":"The prover carries both fee tables and the height switch"},{"date":"2026-10-05","text":"FUD ledger sweep round 6","short":"FUD ledger sweep round 6"},{"date":"2026-10-05","text":"Live devnet: real transactions, the first non-empty shard proven and paid, and the exporter's block structure fixed","short":"Live devnet: real transactions, the first non-empty shard proven and…"},{"date":"2026-10-05","text":"The program id split: why the Apple M5 Max rejected the RTX 5090 Windows rig's proofs, and the verifier at 114 s","short":"The program id split"},{"date":"2026-10-05","text":"Live devnet: the first shards proven, verified and paid","short":"Live devnet: the first shards proven, verified and paid"},{"date":"2026-10-04","text":"One-click Windows workers: what the Apple M5 Max could measure","short":"One-click Windows workers"},{"date":"2026-10-04","text":"First finality lock on the live devnet: checkpoint 242 at 77.4% of all weight, two hours after genesis","short":"First live finality lock: 77.4% of weight, 17 voters"},{"date":"2026-10-04","text":"The gfx1036 worker fault and what the Apple M5 Max could and could not reproduce","short":"The gfx1036 worker fault and what the Apple M5 Max could and could…"},{"date":"2026-10-04","text":"A node 60 s behind the clock is silently dead","short":"A node 60 s behind the clock is silently dead"},{"date":"2026-10-04","text":"First machine on the Igneum Miner app: the RTX 5090 Windows rig's RTX 5090 at 118 MH/s, via Setup.exe","short":"First machine on the one-click app: a 5090 at 118 MH/s"},{"date":"2026-10-04","text":"Difficulty rule v2: the live oscillation, its cause, the DAG replay, the fix behind a height switch","short":"Difficulty rule v2"},{"date":"2026-10-04","text":"The observer stored nothing for 78 minutes, then 7,022 blocks in two minutes","short":"The observer stored nothing for 78 minutes, then 7,022 blocks in two…"},{"date":"2026-10-04","text":"The RTX 5090 Windows rig at the 14:20 boundary: a worker stuck on the previous epoch","short":"The RTX 5090 Windows rig at the 14"},{"date":"2026-10-04","text":"Shard proving on the RTX 5090: a full shard compressed in 10.9 s, a two-shard block aggregated in 2.2 s, all verified","short":"Shard layer on the RTX 5090: a full shard proven in 10.9 s, a block aggregated in 2.2 s"}]}</script>
 <!-- journey:end -->
+<script src="/live-dag.js" defer></script>
 <script>
 (function(){
-  var reduce = window.matchMedia('(prefers-reduced-motion: reduce)').matches;
-
-  // reveal on scroll
-  var io=new IntersectionObserver(function(es){es.forEach(function(e){if(e.isIntersecting){e.target.classList.add('in');io.unobserve(e.target);}});},{threshold:.12});
-  document.querySelectorAll('.reveal').forEach(function(el){io.observe(el);});
-
-  // emission bar
-  var bar=document.getElementById('bar');
-  var bio=new IntersectionObserver(function(es){es.forEach(function(e){if(e.isIntersecting){bar.querySelectorAll('div').forEach(function(d){d.style.width=d.getAttribute('data-w');});bio.disconnect();}});},{threshold:.4});
-  bio.observe(bar);
-
-  // live observer: ONE fetch of /api/live every 2 s feeds the hero, the stats strip and the chain scene.
-  // Subscribers get (fresh, d): the sampled new blocks since the last pull and the whole response, or ([], null) when off or stale.
-  // live.reason says why the feed is off, in plain words, for the scene's label: 'connecting', 'live feed unavailable' (the fetch
-  // failed or the function errored), or 'observer offline, last update N s ago' (the observer's row is older than 30 s).
-  var live={on:false,rate:1.3,seen:{},minerOf:{},subs:[],reason:'connecting'};
-  live.sub=function(fn){live.subs.push(fn);};
-  function emitLive(fresh,d){live.subs.forEach(function(fn){fn(fresh,d);});}
-  function fmtAge(sec){sec=Math.round(sec);return sec<90?sec+' s':sec<5400?Math.round(sec/60)+' min':Math.round(sec/3600)+' h';}
-  function liveOff(reason){live.on=false;live.reason=reason;emitLive([],null);return false;}
-  function pullLive(first){return fetch('/api/live',{cache:'no-store'}).then(function(r){if(!r.ok)throw new Error('HTTP '+r.status);return r.json();}).then(function(d){
-      if(!d||!d.ok)return liveOff('live feed unavailable');
-      if(!d.state||!d.blocks||!d.miners)return liveOff('live feed unavailable');
-      if(d.state.stale)return liveOff('observer offline'+(d.state.age_s!==null&&d.state.age_s!==undefined?', last update '+fmtAge(d.state.age_s)+' ago':''));
-      live.on=true;live.reason=null;
-      var fresh=d.blocks.filter(function(b){return !live.seen[b.hash];});if(first)fresh=fresh.slice(-12);
-      // the response is a 90 s window, so both maps are rebuilt from it and stay bounded
-      var seen={},minerOf={};d.blocks.forEach(function(b){seen[b.hash]=1;minerOf[b.hash]=b.miner||'?';});live.seen=seen;live.minerOf=minerOf;
-      /* the scenes keep a calm pace; faster chains are sampled, the counters stay true */
-      if(fresh.length>3){var step=fresh.length/3,pick=[];for(var i=0;i<3;i++)pick.push(fresh[Math.floor(i*step)]);fresh=pick;}
-      emitLive(fresh,d);return true;
-    }).catch(function(){return liveOff('live feed unavailable');});}
-
-  // live stats strip under the hero buttons: shown only while the observer is fresh
-  var strip=document.getElementById('livestrip');
-  function lsSet(id,v){var el=document.getElementById(id);if(el)el.textContent=v;}
+  var reduce=window.matchMedia&&window.matchMedia('(prefers-reduced-motion: reduce)').matches;
+  var fmtN=function(v){return v===null||v===undefined?'pending':Number(v).toLocaleString('en-GB');};
   function fmtHash(h){if(h===null||h===undefined||!(h>0))return 'pending';return h>=1e9?(h/1e9).toFixed(1)+' GH/s':(h/1e6).toFixed(1)+' MH/s';}
-  live.sub(function(fresh,d){var on=live.on&&!!d;if(strip)strip.classList.toggle('on',on);if(!on)return;var s=d.state;
-    lsSet('ls-miners',s.miners_10m!==null&&s.miners_10m!==undefined?s.miners_10m:d.miners.length);
-    lsSet('ls-bps',s.blocks_60s!==null&&s.blocks_60s!==undefined?(s.blocks_60s/60).toFixed(1):'pending');
-    lsSet('ls-hash',fmtHash(s.hashes_per_second_estimate));
-    lsSet('ls-blocks',s.height!==null&&s.height!==undefined?Number(s.height).toLocaleString('en-GB'):'pending');});
 
-  // hero background: a block graph that grows left to right, proves, and locks.
-  // Live: each dot is one miner seen in the last ten minutes (at most 24, no ids drawn); it flashes when that
-  // miner finds a sampled block and a faint line joins it to the miners of the block's parents for a moment.
-  var cv=document.getElementById('bg'),ctx=cv.getContext('2d'),nodes=[],W,H,dpr=Math.min(window.devicePixelRatio||1,2),lanes=5,count=0;
-  function size(){W=cv.clientWidth;H=cv.clientHeight;cv.width=W*dpr;cv.height=H*dpr;ctx.setTransform(dpr,0,0,dpr,0,0);}
-  size();window.addEventListener('resize',size);
-  var spacing=function(){return W<700?74:92;};
-  function laneY(l){return H*(0.18+l*(0.64/(lanes-1)));}
-  function edge(a,b){ctx.beginPath();ctx.moveTo(a.x,a.y);var mx=(a.x+b.x)/2;ctx.bezierCurveTo(mx,a.y,mx,b.y,b.x,b.y);ctx.stroke();}
-  function spawn(x){count++;var lane=Math.floor(Math.random()*lanes);var y=laneY(lane)+(Math.random()*18-9);
-    var cands=nodes.slice(-7).filter(function(p){return p.x<x-30;});var parents=[];
-    cands.sort(function(a,b){return b.x-a.x;});if(cands.length)parents.push(cands[0]);
-    cands.slice(1).forEach(function(p){if(Math.random()<0.45&&parents.length<3)parents.push(p);});
-    nodes.push({x:x,y:y,born:performance.now(),state:0,lock:count%10===0,parents:parents});if(nodes.length>60)nodes.shift();}
-  function seed(){nodes=[];count=0;var sp=spacing();for(var i=0;i<Math.ceil(W/sp)+2;i++){spawn(W-i*sp);nodes[nodes.length-1].born=performance.now()-i*1000;}}
-  var last=0,speed=0.22;
-  // live state: hm = miner dots, links = parent lines, hq = sampled blocks waiting to flash, simA = simulation opacity
-  var hm=[],links=[],hq=[],hLive=false,simA=1,hLast=0,MAXDOTS=24;
-  function minerDot(id){for(var i=0;i<hm.length;i++)if(hm[i].id===id)return hm[i];return null;}
-  function joinMiner(id){var m=minerDot(id);if(m){m.gone=false;return m;}
-    var used={};hm.forEach(function(q){used[q.slot]=1;});var s=-1;for(var i=0;i<MAXDOTS;i++)if(!used[i]){s=i;break;}if(s<0)return null;
-    m={id:id,slot:s,fx:0.06+0.88*((s*0.618034)%1),lane:s%lanes,jy:Math.random()*18-9,ph:Math.random()*Math.PI*2,a:0,gone:false,flash:0,x:0,y:0};hm.push(m);return m;}
-  live.sub(function(fresh,d){
-    if(reduce)return;
-    var on=live.on&&!!d;
-    if(on!==hLive){hLive=on;if(!on){hm.forEach(function(m){m.gone=true;});hq=[];}}
-    if(!on)return;
-    var keep={};d.miners.slice(0,MAXDOTS).forEach(function(m){if(!m.id)return;keep[m.id]=1;joinMiner(m.id);});
-    hm.forEach(function(m){if(!keep[m.id])m.gone=true;}); // not seen in ten minutes: fade out
-    fresh.forEach(function(b){hq.push(b);});if(hq.length>6)hq=hq.slice(-6);
-  });
-  function frame(t){
-    ctx.clearRect(0,0,W,H);
-    // simulation: unchanged while the observer is off or stale, fades out behind the live dots when it is on
-    simA=Math.max(0,Math.min(1,simA+(hLive?-0.02:0.02)));
-    if(!hLive){if(!nodes.length)seed();if(t-last>1000){spawn(W+16);last=t;}}
-    if(simA>0){
-      ctx.globalAlpha=simA;
-      nodes.forEach(function(n){n.x-=speed;var age=t-n.born;if(age>3500)n.state=2;else if(age>1800)n.state=1;});
-      ctx.lineWidth=1;
-      nodes.forEach(function(n){n.parents.forEach(function(p){if(nodes.indexOf(p)<0)return;var proven=n.state===2&&p.state===2;ctx.strokeStyle=proven?'rgba(242,84,27,0.35)':'rgba(154,154,158,0.18)';edge(n,p);});});
-      nodes.forEach(function(n){var r=n.state===2?5:4;
-        if(n.state===2&&n.lock){ctx.beginPath();ctx.arc(n.x,n.y,11,0,Math.PI*2);ctx.strokeStyle='rgba(242,84,27,0.9)';ctx.lineWidth=1.5;ctx.stroke();ctx.lineWidth=1;}
-        if(n.state===2){var g=ctx.createRadialGradient(n.x,n.y,0,n.x,n.y,16);g.addColorStop(0,'rgba(242,84,27,0.35)');g.addColorStop(1,'rgba(242,84,27,0)');ctx.fillStyle=g;ctx.beginPath();ctx.arc(n.x,n.y,16,0,Math.PI*2);ctx.fill();}
-        ctx.beginPath();ctx.arc(n.x,n.y,r,0,Math.PI*2);ctx.fillStyle=n.state===2?'#F2541B':(n.state===1?'#FFB35C':'#0C0C0E');ctx.fill();
-        if(n.state===0){ctx.strokeStyle='rgba(154,154,158,0.8)';ctx.stroke();}});
-      ctx.globalAlpha=1;
-    } else if(nodes.length) nodes=[];
-    // live: release one sampled block at the chain scene's pace; its miner flashes, lines reach its parents' miners
-    if(hLive&&hq.length&&t-hLast>Math.max(60,1000/live.rate)){var b=hq.shift();hLast=t;var m=joinMiner(b.miner||'?');
-      if(m){m.flash=1;var done={};(b.parents||[]).forEach(function(h){var pid=live.minerOf[h];if(!pid||pid===m.id||done[pid])return;done[pid]=1;var p=minerDot(pid);if(p&&!p.gone)links.push({a:m,b:p,born:t});});if(links.length>24)links=links.slice(-24);}}
-    hm.forEach(function(m){m.a=Math.max(0,Math.min(1,m.a+(m.gone?-0.012:0.012)));
-      m.fx-=speed/W;if(m.fx<-0.02){m.fx+=1.04;m.a=0;} // the same slow drift; a dot that leaves on the left fades back in on the right
-      m.x=W*m.fx+Math.sin(t/9000+m.ph)*14;m.y=laneY(m.lane)+m.jy+Math.cos(t/12000+m.ph*1.7)*6;
-      if(m.flash>0)m.flash=Math.max(0,m.flash-0.018);});
-    hm=hm.filter(function(m){return !(m.gone&&m.a<=0);});
-    links=links.filter(function(l){return t-l.born<1600&&hm.indexOf(l.a)>=0&&hm.indexOf(l.b)>=0;});
-    ctx.lineWidth=1;
-    links.forEach(function(l){if(Math.abs(l.a.x-l.b.x)>W*0.6)return;var p=(t-l.born)/1600;ctx.strokeStyle='rgba(242,84,27,'+(0.35*(1-p)*Math.min(l.a.a,l.b.a)).toFixed(3)+')';edge(l.a,l.b);});
-    hm.forEach(function(m){if(m.a<=0)return;var f=m.flash;ctx.globalAlpha=m.a;var gr=16+8*f;
-      var g=ctx.createRadialGradient(m.x,m.y,0,m.x,m.y,gr);g.addColorStop(0,'rgba(242,84,27,'+(0.2+0.35*f).toFixed(3)+')');g.addColorStop(1,'rgba(242,84,27,0)');ctx.fillStyle=g;ctx.beginPath();ctx.arc(m.x,m.y,gr,0,Math.PI*2);ctx.fill();
-      ctx.beginPath();ctx.arc(m.x,m.y,4+2*f,0,Math.PI*2);ctx.fillStyle='#F2541B';ctx.fill();
-      if(f>0){ctx.beginPath();ctx.arc(m.x,m.y,2+1.5*f,0,Math.PI*2);ctx.fillStyle='rgba(255,179,92,'+f.toFixed(3)+')';ctx.fill();}
-      ctx.globalAlpha=1;});
-    requestAnimationFrame(frame);
+  // the live scene: the shared module reads /api/live; the counters read the chain, never the window (chain block,
+  // shards paid on the chain, the latest locked checkpoint); the state word and the note say what the feed is doing
+  var label=document.getElementById('viz-label'),word=document.getElementById('viz-word'),dot=label?label.querySelector('.dot'):null,note=document.getElementById('viz-note');
+  var cb=document.getElementById('c-blocks'),cp=document.getElementById('c-proven'),cl=document.getElementById('c-locked'),cm=document.getElementById('c-miners'),ch=document.getElementById('c-hash');
+  function setWord(state,reason){
+    if(!word||!dot)return;
+    var w=state==='live'?'live devnet':state==='stale'?reason:state==='failed'?'live feed unavailable':'connecting to the devnet observer';
+    word.innerHTML=state==='live'?'<a href="/live">live devnet</a>':w;
+    dot.className='dot '+(state==='live'?'live':state==='failed'?'bad':'off');
+    label.className='state '+(state==='live'?'live':state==='failed'?'bad':'');
+    if(state!=='live'&&note){note.textContent=(state==='failed'?'The live feed is unavailable, so the scene holds its last blocks and the counters read pending.':state==='stale'?w.charAt(0).toUpperCase()+w.slice(1)+'. The scene holds the last stored blocks; the counters are the last the observer wrote.':'Connecting to the devnet observer.')+' The live page shows the last stored state.';}
   }
-  if(!reduce){seed();requestAnimationFrame(frame);}
-
-  // chain scene: blocks stream in, miners fly in to prove shards, locks ripple
-  (function(){
-    var c=document.getElementById('chain'),x=c.getContext('2d'),W,H,blocks=[],sparks=[],ripples=[],n=0,proven=0,locked=0,lanes=5,S,GAP,speed,k=1;
-    var cb=document.getElementById('c-blocks'),cp=document.getElementById('c-proven'),cl=document.getElementById('c-locked');
-    function size(){W=c.clientWidth;H=c.clientHeight;c.width=W*dpr;c.height=H*dpr;x.setTransform(dpr,0,0,dpr,0,0);S=W<600?18:26;GAP=W<600?S*2.5:S*3.1;speed=GAP/1000;k=Math.max(0.22,Math.min(1,(W/speed)/22000));}
-    size();window.addEventListener('resize',size);
-    function laneY(l){return H*0.14+l*(H*0.72/(lanes-1));}
-    // live path state: when the devnet observer is fresh, real blocks (lb) from the shared poller replace the random spawner
-    var liveMode=false,liveQ=[],liveLanes={},byHash={};
-    // a live block takes the observer's words: color pending / blue (included) / red (excluded), shards planned / proving / verified / paid,
-    // locked = a locked checkpoint block, final = at or before the newest lock. Re-applied on every poll so a block on screen updates.
-    function applyLive(b,src){b.color=src.color||'pending';b.chain=!!src.chain;b.isFinal=!!src.final;var sh=src.shards||[];
-      var done=function(x){return x.state==='verified'||x.state==='paid';};
-      var allProven=sh.length>0&&sh.every(done),anyProving=sh.some(function(x){return x.state==='proving'||done(x);});
-      if(allProven){if(b.state!=='proven'){b.state='proven';b.glow=1;}}else if(anyProving)b.state='proving';else b.state='mined';
-      b.shards=[0,0,0,0];sh.slice(0,4).forEach(function(x,i){b.shards[i]=done(x)?1:0;});
-      if(src.locked&&!b.locked){b.locked=true;ripples.push({x:b.x,y:b.y,r:S,a:1});ripples.push({x:b.x,y:b.y,r:S*0.5,a:1});}}
-    function spawn(px,lb){n++;var lane=lb?lb.lane:Math.floor(Math.random()*lanes);var b={id:n,x:px,y:laneY(lane),born:performance.now(),shards:[0,0,0,0],claimed:[false,false,false,false],state:'mined',cp:n%6===0,parents:[],glow:0,flash:0,hash:lb?lb.hash:null};
-      if(lb){byHash[lb.hash]=b;if(lb.src)applyLive(b,lb.src);lb.parents.forEach(function(h){var q=byHash[h];if(q&&blocks.indexOf(q)>=0&&b.parents.length<4)b.parents.push(q);});if(!b.parents.length){var prev=blocks.slice(-6).filter(function(q){return q.x<px-S;}).sort(function(a2,b2){return b2.x-a2.x;});if(prev.length)b.parents.push(prev[0]);if(prev.length>1&&Math.random()<0.5)b.parents.push(prev[1]);}}
-      else{var cands=blocks.slice(-8).filter(function(q){return q.x<px-S;}).sort(function(a2,b2){return b2.x-a2.x;});
-      if(cands.length)b.parents.push(cands[0]);cands.slice(1).forEach(function(q){if(Math.random()<0.4&&b.parents.length<3)b.parents.push(q);});}
-      blocks.push(b);if(blocks.length>80){var old=blocks.shift();if(old.hash)delete byHash[old.hash];}if(!liveMode)cb.textContent=n;}
-    function rr(px,py,w,h,r){x.beginPath();x.moveTo(px+r,py);x.arcTo(px+w,py,px+w,py+h,r);x.arcTo(px+w,py+h,px,py+h,r);x.arcTo(px,py+h,px,py,r);x.arcTo(px,py,px+w,py,r);x.closePath();}
-    var last=0,lastShard=0,prevT=0;
-    function frame(t){
-      if(liveMode){if(liveQ.length&&t-last>Math.max(60,1000/live.rate)){spawn(W+S,liveQ.shift());last=t;}}
-      else if(t-last>1000){spawn(W+S);last=t;}
-      // real frame time, capped: a fixed 16 ms ran the scene at double speed on 120 Hz displays (found 6 Oct 2026)
-      var dt=prevT?Math.min(50,t-prevT):16;prevT=t;
-      var sp=liveMode?speed*live.rate:speed;blocks.forEach(function(b){b.x-=sp*dt;var age=t-b.born;
-        if(!liveMode&&b.state==='mined'&&age>1200*k)b.state='proving';
-        if(!liveMode&&b.state==='proving'){for(var i=0;i<4;i++){if(!b.claimed[i]&&Math.random()<0.012/k){b.claimed[i]=true;var fromTop=Math.random()<0.5;sparks.push({x:Math.random()*W,y:fromTop?-6:H+6,tx:b.x,ty:b.y,b:b,i:i,p:0});}}
-          if(b.shards.every(function(v){return v>=1;})){b.state='proven';b.glow=1;proven++;if(!liveMode)cp.textContent=proven;if(b.cp)setTimeout(function(){b.locked=true;locked++;if(!liveMode)cl.textContent=locked;ripples.push({x:b.x,y:b.y,r:S,a:1});ripples.push({x:b.x,y:b.y,r:S*0.5,a:1});},1800*k);}}
-        if(b.glow>0)b.glow-=0.02;});
-      sparks.forEach(function(sp){sp.p+=Math.min(0.08,0.035/k);sp.tx=sp.b.x;sp.ty=sp.b.y;if(sp.p>=1){sp.done=true;sp.b.shards[sp.i]=1;}});
-      sparks=sparks.filter(function(sp){return !sp.done;});
-      ripples.forEach(function(r){r.r+=2.2;r.a-=0.012;r.x-=sp*dt;});ripples=ripples.filter(function(r){return r.a>0;});
-      x.clearRect(0,0,W,H);
-      // faint lane rails
-      x.strokeStyle='rgba(42,42,48,0.6)';x.lineWidth=1;for(var l=0;l<lanes;l++){x.beginPath();x.moveTo(0,laneY(l));x.lineTo(W,laneY(l));x.stroke();}
-      // edges
-      blocks.forEach(function(b){b.parents.forEach(function(q){if(blocks.indexOf(q)<0)return;var both=b.state==='proven'&&q.state==='proven';x.strokeStyle=both?'rgba(242,84,27,0.45)':'rgba(154,154,158,0.22)';x.lineWidth=both?1.5:1;x.beginPath();x.moveTo(b.x,b.y);var mx=(b.x+q.x)/2;x.bezierCurveTo(mx,b.y,mx,q.y,q.x,q.y);x.stroke();});});
-      // lock line: everything left of the newest locked block is final
-      var lk=null;blocks.forEach(function(b){if(b.locked&&(!lk||b.x>lk.x))lk=b;});
-      if(lk){x.strokeStyle='rgba(242,84,27,0.55)';x.lineWidth=1.5;x.setLineDash([5,6]);x.beginPath();x.moveTo(lk.x,6);x.lineTo(lk.x,H-6);x.stroke();x.setLineDash([]);var topBusy=blocks.some(function(q){return Math.abs(q.x-lk.x)<S*2.2&&q.y<H*0.3;});var ly=topBusy?H-10:14;x.fillStyle='rgba(154,154,158,0.9)';x.font='500 '+Math.max(10,Math.round(S*0.42))+'px IBM Plex Mono, monospace';x.textAlign='right';x.fillText('final',lk.x-8,ly);}
-      // blocks
-      blocks.forEach(function(b){var h=S/2;
-        // proving v0: a faint second glint behind a real block once every shard of it is verified on the devnet (nothing before activation)
-        if(b.glow>0){var g=x.createRadialGradient(b.x,b.y,0,b.x,b.y,S*1.6);g.addColorStop(0,'rgba(242,84,27,'+(0.45*b.glow)+')');g.addColorStop(1,'rgba(242,84,27,0)');x.fillStyle=g;x.beginPath();x.arc(b.x,b.y,S*1.6,0,Math.PI*2);x.fill();}
-        if(b.state==='proven'){x.fillStyle='#F2541B';rr(b.x-h,b.y-h,S,S,S*0.24);x.fill();}
-        else{var ex=b.color==='red';if(ex)x.globalAlpha=0.45;x.fillStyle='#0C0C0E';rr(b.x-h,b.y-h,S,S,S*0.24);x.fill();
-          // live: included (blue or on the selected chain) takes an ember outline, excluded (red) is dimmed, pending stays grey
-          x.strokeStyle=b.state==='proving'?'rgba(255,179,92,0.9)':(liveMode&&!ex&&(b.color==='blue'||b.chain))?'rgba(242,84,27,0.75)':'rgba(58,58,66,1)';x.lineWidth=2;rr(b.x-h,b.y-h,S,S,S*0.24);x.stroke();if(ex)x.globalAlpha=1;
-          if(b.state==='proving'){var q=S/2-3;for(var i=0;i<4;i++){if(b.shards[i]>=1){x.fillStyle='#FFB35C';var qx=b.x-h+3+(i%2)*q,qy=b.y-h+3+Math.floor(i/2)*q;rr(qx,qy,q-1,q-1,2);x.fill();}}}}
-        if(b.locked){var pulse=0.8+0.2*Math.sin(t/350);x.strokeStyle='rgba(242,84,27,'+pulse+')';x.lineWidth=3;x.beginPath();x.arc(b.x,b.y,S*1.15,0,Math.PI*2);x.stroke();x.fillStyle='#F4F1EC';x.beginPath();x.arc(b.x,b.y,S*0.16,0,Math.PI*2);x.fill();}
-      });
-      // sparks (miners claiming shards)
-      sparks.forEach(function(sp){var e=1-Math.pow(1-sp.p,3);var sx=sp.x+(sp.tx-sp.x)*e,sy=sp.y+(sp.ty-sp.y)*e;x.strokeStyle='rgba(255,179,92,'+(0.5*(1-sp.p))+')';x.lineWidth=1;x.beginPath();x.moveTo(sp.x+(sp.tx-sp.x)*Math.max(0,e-0.15),sp.y+(sp.ty-sp.y)*Math.max(0,e-0.15));x.lineTo(sx,sy);x.stroke();x.fillStyle='#FFB35C';x.beginPath();x.arc(sx,sy,2.2,0,Math.PI*2);x.fill();});
-      ripples.forEach(function(r){x.strokeStyle='rgba(242,84,27,'+r.a+')';x.lineWidth=1.5;x.beginPath();x.arc(r.x,r.y,r.r,0,Math.PI*2);x.stroke();});
-      if(!reduce)requestAnimationFrame(frame);
-    }
-    var seedN=Math.ceil(W/GAP)+1,pv=Math.min(5,Math.max(2,Math.floor(seedN*0.45)));for(var i=0;i<seedN;i++){spawn(W-i*GAP);var b=blocks[blocks.length-1];b.born=performance.now()-i*1000;if(i>pv){b.state='proven';b.shards=[1,1,1,1];b.claimed=[true,true,true,true];proven++;if(b.cp){b.locked=true;locked++;}}else if(i>1){b.state='proving';b.claimed=[true,true,false,false];b.shards=[1,1,0,0];}}
-    cb.textContent=n;cp.textContent=proven;cl.textContent=locked;
-    requestAnimationFrame(frame);
-    // live path: the shared poller above feeds sampled real blocks; while fresh, the label links to /live
-    var label=document.getElementById('viz-label'),note=document.getElementById('viz-note'),legSim=document.getElementById('legend-sim'),legLive=document.getElementById('legend-live');
-    var kb=document.getElementById('k-blocks'),kp=document.getElementById('k-proven'),kl=document.getElementById('k-locked');
-    var fmtN=function(v){return v===null||v===undefined?'pending':Number(v).toLocaleString('en-GB');};
-    function laneFor(m){if(!(m in liveLanes))liveLanes[m]=Object.keys(liveLanes).length%lanes;return liveLanes[m];}
-    // three label states: live (the observer is fresh), off with the reason (the simulation runs and its counters count simulated blocks), connecting
-    function setLive(on){
-      if(on!==liveMode){liveMode=on;if(!on){cb.textContent=n;cp.textContent=proven;cl.textContent=locked;}}
-      if(legSim)legSim.hidden=on;if(legLive)legLive.hidden=!on;
-      if(kb)kb.textContent=on?'chain block':'blocks';if(kp)kp.textContent=on?'shards proven':'proven';if(kl)kl.textContent=on?'last lock':'locked';
-      if(!label)return;
-      if(on){label.innerHTML='<span class="dot" style="margin-right:8px"></span><a href="/live" style="color:var(--molten)">live devnet</a>';return;}
-      var r=live.reason||'live feed unavailable';
-      label.innerHTML='<span class="dot" style="background:var(--ash);animation:none;margin-right:8px"></span>simulated preview'+(r==='connecting'?'':' · '+r);
-      if(note){note.hidden=false;note.textContent=r==='connecting'?'Connecting to the devnet observer. Until it answers, this is a simulation and its counters count simulated blocks.':r.charAt(0).toUpperCase()+r.slice(1)+'. This is a simulation and its counters count simulated blocks. The live page shows the last stored state.';}}
-    live.sub(function(fresh,d){setLive(live.on);if(!live.on)return;
-      // live counters come from the chain, never from the 90 s window: the chain block number, the shards proven and paid on the chain
-      // as the observer's node counts them (proofs land minutes behind the tip, so the blocks on screen are still pending), the latest locked checkpoint
-      var s=d.state,pv=d.proving,fn=d.finality;
-      cb.textContent=fmtN(s.height);
-      cp.textContent=!pv||!pv.supported?'no proving layer':!pv.active?'not active':fmtN(pv.paid_shards_total);
-      cl.textContent=!fn||!fn.supported?'no finality':!fn.active?'paused':fn.latest_locked_index!==null&&fn.latest_locked_index!==undefined?'#'+fmtN(fn.latest_locked_index):'none yet';
-      if(note){var lag=pv&&pv.active&&pv.median_proof_lag_s?Math.round(pv.median_proof_lag_s):null;
-        note.hidden=false;note.textContent='One node is read every 2 s. Chain block is the EVM block number. Shards proven is every shard paid on the chain so far'+(pv&&pv.active?' ('+fmtN(pv.shards_paid_10m||0)+' in the last 10 minutes'+(lag?', landing a median '+lag+' s behind the tip, so the newest blocks on screen are still pending':'')+')':'')+'. Last lock is the latest checkpoint the finality rule locked.';}
-      // blocks already on screen take their newest words (pending to included, a shard proven, a checkpoint locked)
-      d.blocks.forEach(function(src){var q=byHash[src.hash];if(q)applyLive(q,src);});
-      fresh.forEach(function(b){liveQ.push({hash:b.hash,parents:b.parents||[],lane:laneFor(b.miner||'?'),src:b});});
-      if(liveQ.length>6)liveQ=liveQ.slice(-6);});
-    setLive(false);
-  })();
-  // one fetch on load, then every 2 s while the feed is fresh and every 10 s while it is off, so a feed that comes back is picked up
-  function pollLive(on){setTimeout(function(){pullLive(false).then(pollLive);},on?2000:10000);}
-  pullLive(true).then(pollLive);
+  function onData(d){
+    var s=d.state,pv=d.proving,fn=d.finality;
+    cb.textContent=fmtN(s.height);
+    cp.textContent=!pv||!pv.supported?'no proving layer':!pv.active?'not active':fmtN(pv.paid_shards_total);
+    cl.textContent=!fn||!fn.supported?'no finality':!fn.active?'finality paused'+(fn.latest_locked_index?', last #'+fmtN(fn.latest_locked_index):''):fn.latest_locked_index!==null&&fn.latest_locked_index!==undefined?'#'+fmtN(fn.latest_locked_index):'none yet';
+    cm.textContent=fmtN(s.miners_10m!==null&&s.miners_10m!==undefined?s.miners_10m:(d.miners||[]).length);
+    ch.textContent=fmtHash(s.hashes_per_second_estimate);
+    if(note&&!s.stale){var lag=pv&&pv.active&&pv.median_proof_lag_s?Math.round(pv.median_proof_lag_s):null;
+      note.textContent='One node is read every 2 s. Chain block is the EVM block number. Shards proven is every shard paid on the chain so far'+(pv&&pv.active?' ('+fmtN(pv.shards_paid_10m||0)+' in the last 10 minutes'+(lag?', landing a median '+lag+' s behind the tip, so the newest blocks on screen are still pending':'')+')':'')+'. Last lock is the latest checkpoint the finality rule locked. A card runs several vote keys. Hover or tap a block for its details; ctrl or cmd and scroll, a pinch, or a click into the scene then scroll, changes the window.';}
+  }
+  function mountDag(){var c=document.getElementById('dag');if(!c||!window.IgneumDag)return;
+    IgneumDag.mount(c,{compact:window.innerWidth<700,window:90,onState:setWord,onData:onData,pauseButton:document.getElementById('dag-pause'),tooltip:document.getElementById('dag-tip'),chip:document.getElementById('dag-chip')});}
+  if(window.IgneumDag)mountDag();else document.addEventListener('DOMContentLoaded',function(){var s=document.querySelector('script[src="/live-dag.js"]');if(window.IgneumDag)mountDag();else if(s)s.addEventListener('load',mountDag);});
 
   // hourly program ticker
   var ops=['rotl','rotr','xor','add','sub','mul','mulhi','mad','or'];
@@ -917,8 +617,8 @@ pre{margin:0;font-family:var(--f-mono);font-size:13px;line-height:1.6;color:var(
     var ph=document.getElementById('phases'),lg=document.getElementById('log'),lab=document.getElementById('stage-label');
     var active=j.phases.filter(function(p){return p.status==='active';});
     var names=active.map(function(p){return p.name;}),list=names.length>1?names.slice(0,-1).join(', ')+' and '+names[names.length-1]:names.join('');
-    lab.textContent=('NOW · '+list+' · updated '+day(j.updated)).toUpperCase();
-    j.phases.forEach(function(p,i){var d=document.createElement('div');d.className='phase '+p.status;d.innerHTML='<div class="w">'+p.when.toUpperCase()+'</div><div class="n">'+(i+1)+'. '+p.name+'</div>'+(p.gate?'<div class="g">gate: '+p.gate+'</div>':'<div class="g">'+p.line+'</div>');ph.appendChild(d);});
+    lab.textContent='now · '+list+' · updated '+day(j.updated);
+    j.phases.forEach(function(p,i){var d=document.createElement('div');d.className='phase '+p.status;d.innerHTML='<div class="w">'+p.when+'</div><div class="n">'+(i+1)+'. '+p.name+'</div>'+(p.gate?'<div class="g">Gate: '+p.gate+'</div>':'<div class="g">'+p.line+'</div>');ph.appendChild(d);});
     var SHOW=8,last='';
     j.log.forEach(function(e,i){var d=document.createElement('div');if(i>=SHOW)d.className='more';var same=e.date===last;last=e.date;
       d.innerHTML='<span class="d"'+(same?' aria-hidden="true"':'')+'>'+(same?'':day(e.date))+'</span><span>'+(e.short||e.text)+'</span>';lg.appendChild(d);});
@@ -928,7 +628,7 @@ pre{margin:0;font-family:var(--f-mono);font-size:13px;line-height:1.6;color:var(
   var inline=document.getElementById('journey-data'),data=null;
   try{if(inline&&inline.textContent.trim())data=JSON.parse(inline.textContent);}catch(e){data=null;}
   if(data)journey(data);
-  else fetch('/journey.json').then(function(r){return r.json();}).then(journey).catch(function(){document.getElementById('stage-label').textContent='PHASE 3 · DEVNET';});
+  else fetch('/journey.json').then(function(r){return r.json();}).then(journey).catch(function(){document.getElementById('stage-label').textContent='phase 3 · devnet';});
 })();
 </script>
 </body>
diff --git a/site/journey.json b/site/journey.json
index 397dd412b..eca0cfc9b 100644
--- a/site/journey.json
+++ b/site/journey.json
@@ -50,6 +50,11 @@
     }
   ],
   "log": [
+    {
+      "date": "2026-10-06",
+      "text": "16:01Z: Ember run 6 on the three-card Windows rig",
+      "short": "16:01Z: Ember run 6 on the three-card Windows rig"
+    },
     {
       "date": "2026-10-06",
       "text": "Counter ASIC 3.0 item 2: the per-day derivation",
@@ -72,8 +77,8 @@
     },
     {
       "date": "2026-10-06",
-      "text": "16:01Z: Ember run 6 on PC 1",
-      "short": "16:01Z: Ember run 6 on PC 1"
+      "text": "16:01Z: Ember run 6 on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT)",
+      "short": "16:01Z: Ember run 6 on the three-card Windows rig (RTX 5090, RTX 4070"
     },
     {
       "date": "2026-10-06",
@@ -87,8 +92,8 @@
     },
     {
       "date": "2026-10-06",
-      "text": "07:52Z to 08:24Z, the segment-aligned prover beside the miner on PC 2's RTX 5090",
-      "short": "07:52Z to 08:24Z, the segment-aligned prover beside the miner on PC…"
+      "text": "07:52Z to 08:24Z, the segment-aligned prover beside the miner on the RTX 5090 Windows rig's RTX 5090",
+      "short": "07:52Z to 08:24Z, the segment-aligned prover beside the miner on the…"
     },
     {
       "date": "2026-10-06",
@@ -100,6 +105,16 @@
       "text": "12:25 to 13:20Z, the finality route: why 26 fresh nodes lost the seed every checkpoint",
       "short": "12:25 to 13:20Z, the finality route: why 26 fresh nodes lost the…"
     },
+    {
+      "date": "2026-10-05",
+      "text": "Ember Tune: the two-knob efficiency tune, the fleet prior, and what the three-card Windows rig could measure tonight",
+      "short": "Ember Tune: the two-knob efficiency tune, the fleet prior"
+    },
+    {
+      "date": "2026-10-05",
+      "text": "The SP1 CPU prover on the three-card Windows rig beside the miners, and the backend survey: no zkVM proves on AMD",
+      "short": "The SP1 CPU prover on the three-card Windows rig beside the miners,…"
+    },
     {
       "date": "2026-10-05",
       "text": "The 9070 XT on the eGPU: why 17.9 MH/s, and what moved",
@@ -107,7 +122,7 @@
     },
     {
       "date": "2026-10-05",
-      "text": "Ember Tune: the two-knob efficiency tune, the fleet prior, and what PC 1 could measure tonight",
+      "text": "Ember Tune: the two-knob efficiency tune, the fleet prior, and what the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) could measure tonight",
       "short": "Ember Tune: the two-knob efficiency tune, the fleet prior"
     },
     {
@@ -127,8 +142,8 @@
     },
     {
       "date": "2026-10-05",
-      "text": "The SP1 CPU prover on PC 1 beside the miners, and the backend survey: no zkVM proves on AMD",
-      "short": "The SP1 CPU prover on PC 1 beside the miners, and the backend survey"
+      "text": "The SP1 CPU prover on the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT) beside the miners, and the backend survey: no zkVM proves on AMD",
+      "short": "The SP1 CPU prover on the three-card Windows rig (RTX 5090, RTX…"
     },
     {
       "date": "2026-10-05",
@@ -182,7 +197,7 @@
     },
     {
       "date": "2026-10-05",
-      "text": "The program id split: why the Apple M5 Max rejected PC 2's proofs, and the verifier at 114 s",
+      "text": "The program id split: why the Apple M5 Max rejected the RTX 5090 Windows rig's proofs, and the verifier at 114 s",
       "short": "The program id split"
     },
     {
@@ -234,21 +249,6 @@
       "date": "2026-10-04",
       "text": "Proving: devnet v4 shards on the Apple M5 Max CPU, loaded machine",
       "short": "Proving: devnet v4 shards on the Apple M5 Max CPU, loaded machine"
-    },
-    {
-      "date": "2026-10-04",
-      "text": "First finality lock on the live devnet: checkpoint 242 at 77.4% of all weight, two hours after genesis",
-      "short": "First live finality lock: 77.4% of weight, 17 voters"
-    },
-    {
-      "date": "2026-10-04",
-      "text": "A node 60 s behind the clock is silently dead",
-      "short": "A node 60 s behind the clock is silently dead"
-    },
-    {
-      "date": "2026-10-04",
-      "text": "First machine on the Igneum Miner app: PC 2's RTX 5090 at 118 MH/s, via Setup.exe",
-      "short": "First machine on the one-click app: a 5090 at 118 MH/s"
     }
   ]
 }
diff --git a/site/ledger.html b/site/ledger.html
index 14bf00a2a..7b35d0f30 100644
--- a/site/ledger.html
+++ b/site/ledger.html
@@ -4,13 +4,13 @@
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
 <title>Igneum ledger: every criticism, answered</title>
-<meta name="description" content="Every criticism Igneum expects, in the critic's words, with what was done, the status and the date. 167 entries. Nothing deleted, nothing softened.">
+<meta name="description" content="Every criticism Igneum expects, in the critic's words, with what was done, the status and the date. 171 entries. Nothing deleted, nothing softened.">
 <link rel="canonical" href="https://igneum.network/ledger">
 <meta name="theme-color" content="#0C0C0E">
 <meta property="og:type" content="website">
 <meta property="og:site_name" content="Igneum">
 <meta property="og:title" content="Igneum ledger: every criticism, answered">
-<meta property="og:description" content="167 criticisms in the critic's words, with what was done, the status and the date.">
+<meta property="og:description" content="171 criticisms in the critic's words, with what was done, the status and the date.">
 <meta property="og:url" content="https://igneum.network/ledger">
 <meta property="og:image" content="https://igneum.network/og-small.png?v=3">
 <meta property="og:image:width" content="256">
@@ -18,7 +18,7 @@
 <meta property="og:image:alt" content="Igneum. Mined by GPUs. Proven by fire.">
 <meta name="twitter:card" content="summary">
 <meta name="twitter:title" content="Igneum ledger: every criticism, answered">
-<meta name="twitter:description" content="167 criticisms in the critic's words, with what was done, the status and the date.">
+<meta name="twitter:description" content="171 criticisms in the critic's words, with what was done, the status and the date.">
 <meta name="twitter:image" content="https://igneum.network/og-small.png?v=3">
 <meta name="twitter:image:alt" content="Igneum. Mined by GPUs. Proven by fire.">
 <link rel="icon" href="/favicon.ico" sizes="48x48">
@@ -29,9 +29,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -43,55 +44,11 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
 :root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--line-2:#3A3A42;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;--max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(40px,6vw,72px)}
@@ -101,7 +58,7 @@ a{color:var(--ember);text-decoration:none}a:hover{color:var(--molten)}
 .wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
 .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
 h1{font-family:var(--f-display);font-weight:900;font-size:clamp(30px,5vw,52px);line-height:1.08;margin:10px 0 18px}
-h2{font-family:var(--f-display);font-weight:700;font-size:clamp(22px,3vw,30px);margin:var(--sec) 0 16px;padding-top:8px;border-top:1px solid var(--line);scroll-margin-top:84px}
+main h2{font-family:var(--f-display);font-weight:700;font-size:clamp(20px,2.6vw,28px);text-wrap:balance;margin:var(--sec) 0 16px;padding-top:8px;border-top:1px solid var(--line);scroll-margin-top:84px}
 h3{font-family:var(--f-sans);font-weight:600;font-size:17px;margin:0;flex:1 1 auto;min-width:0}
 .intro{font-size:17px;color:var(--ink-2);max-width:76ch;margin:0 0 24px}
 .tbl{overflow-x:auto;border:1px solid var(--line);border-radius:16px;background:var(--graphite);margin:0 0 20px}
@@ -135,10 +92,9 @@ details{margin-top:8px;font-size:14px;color:var(--ash)}summary{cursor:pointer;co
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live">Live devnet</a>
@@ -147,39 +103,51 @@ details{margin-top:8px;font-size:14px;color:var(--ash)}summary{cursor:pointer;co
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
 <main id="main" class="wrap">
 <header style="padding-block:clamp(40px,6vw,72px) 8px">
-<div class="eyebrow">Ledger · 167 entries · regenerated from the repository</div>
+<div class="eyebrow">Ledger · 171 entries · regenerated from the repository</div>
 <h1>Every criticism, answered or conceded</h1>
-<p class="intro">This is every criticism the project expects, in the critic's words, with what was done about it and the date. 167 entries since 3 October 2026. Entries are never deleted; a status that changes keeps its history on the line. Where the critic was right the entry says Conceded. Where nothing has been done it says Open and names what settles it. The founder mined through the GPU years. Ethereum's move to proof of stake in September 2022 ended that income and the miners' place in that chain. This is one person building, with AI systems doing the engineering, the coin he wanted to exist for miners: GPU-mined, the miners are the provers, no founder allocation, every cost stated. Help is welcome and a team is wanted: cryptographers, node engineers, miners who will test. This ledger is the application form: pick an open row and write to <a href="mailto:hello@igneum.network">hello@igneum.network</a> with its id.</p>
+<p class="intro">This is every criticism the project expects, in the critic's words, with what was done about it and the date. 171 entries since 3 October 2026. Entries are never deleted; a status that changes keeps its history on the line. Where the critic was right the entry says Conceded. Where nothing has been done it says Open and names what settles it. The founder mined through the GPU years. Ethereum's move to proof of stake in September 2022 ended that income and the miners' place in that chain. This is one person building, with AI systems doing the engineering, the coin he wanted to exist for miners: GPU-mined, the miners are the provers, no founder allocation, every cost stated. Help is welcome and a team is wanted: cryptographers, node engineers, miners who will test. This ledger is the application form: pick an open row and write to <a href="mailto:hello@igneum.network">hello@igneum.network</a> with its id.</p>
 </header>
 <div class="tbl"><table>
 <thead><tr><th>Count</th><th>Status</th><th>Meaning</th></tr></thead>
 <tbody>
 <tr><td class="num">7</td><td><button type="button" class="chip" data-filter="Open">Open</button></td><td>Nothing has settled it yet. The entry names what will</td></tr>
-<tr><td class="num">53</td><td><button type="button" class="chip" data-filter="Conceded">Conceded</button></td><td>The critic is right. &quot;Stated&quot; means the public text says so; &quot;not yet stated&quot; means it does not yet</td></tr>
+<tr><td class="num">57</td><td><button type="button" class="chip" data-filter="Conceded">Conceded</button></td><td>The critic is right. &quot;Stated&quot; means the public text says so; &quot;not yet stated&quot; means it does not yet</td></tr>
 <tr><td class="num">54</td><td><button type="button" class="chip" data-filter="Fixed or built">Fixed or built</button></td><td>A code, spec or text change answers it, with the commit or the page named</td></tr>
 <tr><td class="num">27</td><td><button type="button" class="chip" data-filter="Closed by rule or decided">Closed by rule or decided</button></td><td>A consensus rule or a decision by the owner answers it, dated</td></tr>
 <tr><td class="num">13</td><td><button type="button" class="chip" data-filter="Answered with evidence">Answered with evidence</button></td><td>A measurement or a simulation exists and is named</td></tr>
 <tr><td class="num">13</td><td><button type="button" class="chip" data-filter="Answered by design">Answered by design</button></td><td>A design rule answers it; no measurement is possible yet</td></tr>
-<tr><td class="num">167</td><td><button type="button" class="chip" data-filter="">All</button></td><td>Every entry. The sections: <a href="#m">Mining and chips</a>, <a href="#f">Finality and attacks</a>, <a href="#p">Proving and the zkEVM</a>, <a href="#e">Economics and the coin</a>, <a href="#g">Governance and the founders</a>, <a href="#c">Comparisons</a>, <a href="#l">Legal and regulatory</a>, <a href="#x">Launch and operations</a>, <a href="#d">Builders</a></td></tr>
+<tr><td class="num">171</td><td><button type="button" class="chip" data-filter="">All</button></td><td>Every entry. The sections: <a href="#m">Mining and chips</a>, <a href="#f">Finality and attacks</a>, <a href="#p">Proving and the zkEVM</a>, <a href="#e">Economics and the coin</a>, <a href="#g">Governance and the founders</a>, <a href="#c">Comparisons</a>, <a href="#l">Legal and regulatory</a>, <a href="#x">Launch and operations</a>, <a href="#d">Builders</a></td></tr>
 </tbody></table></div>
 <div class="toolbar"><input type="search" id="q" placeholder="Search the ledger" aria-label="Search the ledger"><span id="shown"></span></div>
 <h2 id="m">Mining and chips</h2>
@@ -261,6 +229,18 @@ details{margin-top:8px;font-size:14px;color:var(--ash)}summary{cursor:pointer;co
 <div class="status"><span class="badge b-conceded">Conceded, stated</span> <span class="did">5 October 2026, night): <code>a repository file</code>, For miners, Hardware, &quot;Macs mine too, at about a fifth of a flagship card: Measured, 26.7 against 123 million hashes a second&quot; (confirmed by grep tonight; the projected-earnings half is not written because the app shows none, see M29). Was: Conceded, partly stated.</span></div>
 <details><summary>The answer as first written</summary><p>The measured ratio is about 5x in the 5090's favour, so a Mac is a poor miner per dollar. The litepaper says Macs mine; it should say Macs mine at about a fifth of a flagship card and that the one-click app shows projected earnings before it starts.</p></details>
 </article>
+<article class="entry" id="M32" data-bucket="Conceded">
+<div class="head"><span class="id">M32</span><h3>&quot;Automatic anti-ASIC escalators&quot; overstates what the era draw and the instruction reserve do</h3><span class="date">6 October 2026</span></div>
+<blockquote>You sell the era draw and the reserve unlock as anti-ASIC escalators, as if not knowing next era's parameters stops a chip. A chip that stores the dataset reads every drawn parameter as firmware: an address permute, a rotator, an immediate table. The families, the reserve order, the mixer, the dataset schedule and the class v4 shadow are all public at genesis. So what does the draw actually defend against?</blockquote>
+<div class="status"><span class="badge b-conceded">Conceded, stated</span> <span class="did">6 October 2026, evening; the Horizon lane analysis <code>a repository file</code> sections 5.4 and 8, lane 2): the era draw and the instruction reserve are automatic schedule changes against fixed datapaths and against human forks; against the stored-dataset chip every drawn parameter is firmware, and the defence against that chip is the latency-shadow work (class v4) and the price-per-joule model. Stated in <code>a repository file</code>, Mining section (&quot;These are automatic schedule changes ... every drawn parameter is firmware&quot;) and the &quot;A chip is impossible&quot; item (&quot;a chip wired for one program is a bad bet ... not the schedule&quot;), the &quot;Every six months&quot; row of the comparison table, and <code>a repository file</code>, the hourly-program note (&quot;a chip wired for one program is useless&quot;). The phrase &quot;automatic anti-ASIC escalators&quot; is withdrawn from public text; it stays in the internal design summary until that is next edited.</span></div>
+<details><summary>The answer as first written</summary><p>Correct. The draw hides (M, R, pos, the op weights within +-2, the fold rotations) until 2 hours before each era, and none of those needs silicon. Biasing the draw is priced at 20 days of 100 percent of the network's hash for one more sample of the same space (lane section 5.4), so the draw is unbiasable at any price that matters and that is its whole job: it is a fairness device and a fork-free schedule, not a chip defence. What a chip wired for one program loses to is the hourly program itself; what the stored-dataset chip loses to is the latency shadow (class v4, 2.1x per joule at k = 1 against the 5090 bench row, 0.9x against the Apple M5 Max) and the price per joule, which is where the public claim now rests.</p></details>
+</article>
+<article class="entry" id="M33" data-bucket="Conceded">
+<div class="head"><span class="id">M33</span><h3>The FPGA ceiling rests on a tFAW the JEDEC HBM2 table does not give</h3><span class="date">6 October 2026</span></div>
+<blockquote>Your chip model's HBM random-read ceiling takes 8 activates per 12 ns per channel from O'Connor and gets 10.7 G reads/s a stack; the epoch-length page's bank-bound row gets 11.4 and a 12.2 ceiling. JEDEC HBM2 tFAW is 28 ns with 4 activates per channel per window: 2.3 G. The one measured HBM2 FPGA random-read rate (Shuhai, FCCM 2020) is 2.4 G, right on the JEDEC ceiling. Your 1.9x FPGA ceiling is arithmetic on a timing the part does not have.</blockquote>
+<div class="status"><span class="badge b-conceded">Conceded, stated</span> <span class="did">6 October 2026, evening; the Horizon lane analysis <code>a repository file</code> section 5.1, the FPGA lane): the public FPGA line carries only the measured row, 2.4 G reads/s per card and 0.30x to 0.39x of the RTX 5090 per watt (Shuhai, FCCM 2020 Fig 7; the tFAW arithmetic from ICCAD 2021 Table I), and the 11.4 G bank-bound row and the 12.2 G ceiling are marked unmeasured until an AWS F2 hour measures them. Stated in <code>a repository file</code> section 5.3 (the activate-bound row marked UNMEASURED with the JEDEC figure beside it, and the FPGA paragraph after the table). The epoch-length analysis's 12.2 row is not on master yet and is corrected when it lands.</span></div>
+<details><summary>The answer as first written</summary><p>Correct. The measured 2.4 G/s had been read on 6 October as a mapping artefact (&quot;the paper's point is that this mapping is the wrong one for random access&quot;); the activate window says it is the DRAM's own limit, and a bank-interleaved mapping does not lift it because tFAW is enforced per channel by the die. The measurement that settles it is one AWS F2 hour (f2.6xlarge, Virtex UltraScale+ VU47P, 16 GB HBM2 in 2 stacks, 32 pseudo-channels, USD 1.98 an hour on demand): the chase kernel of <code>a repository file</code> 2.2 ported to a Vitis HLS AXI master over the HBM IP at 1 GiB across all 32 pseudo-channels, 256 to 4,096 lanes in flight, board power at 1 Hz; pass line 15 to 25 M reads/s/W (0.3x to 0.5x of the 5090), alarm 27 (0.5x), over 54 (1.0x) a Counter ASIC 4.0 item. Consequence per tier: none today (no FPGA mines); on the measured row a soft-overlay FPGA mines at an RX 9070 XT's rate per watt for about 7x the price (approximate), so no home or rig tier is displaced.</p></details>
+</article>
 <h2 id="f">Finality and attacks</h2>
 <article class="entry" id="F1" data-bucket="Fixed or built">
 <div class="head"><span class="id">F1</span><h3>Finality is attackable for the first month</h3><span class="date">5 October 2026</span></div>
@@ -340,6 +320,12 @@ details{margin-top:8px;font-size:14px;color:var(--ash)}summary{cursor:pointer;co
 <div class="status"><span class="badge b-answered-by-design">Answered by design</span></div>
 <details><summary>The answer as first written</summary><p>Full nodes execute natively so users see state in about a second. The proof is for everyone who is not a full node: light clients, bridges, exchanges syncing from a checkpoint, and the external market, which needs a standing prover population with hardware already running. It is also what lets a new node sync from a proven checkpoint instead of replaying history. The 20% is paid for capacity as much as for the proofs themselves, and the litepaper should say that.</p></details>
 </article>
+<article class="entry" id="F26" data-bucket="Conceded">
+<div class="head"><span class="id">F26</span><h3>&quot;No stake&quot; needs its one sentence: what is at stake, and what strips it</h3><span class="date">6 October 2026</span></div>
+<blockquote>You write 'no stake' and then run a vote whose weight can be stripped. Either nothing is at stake, in which case equivocation costs nothing, or something is, in which case say what it is and who can take it. One sentence, in the finality section and the summary, not an argument.</blockquote>
+<div class="status"><span class="badge b-conceded">Conceded, stated</span> <span class="did">6 October 2026, evening; the Horizon lane analysis <code>a repository file</code> section 4.1 and item I13 of its incremental list): <code>a repository file</code>, the finality section's &quot;What is not here&quot; paragraph and the &quot;Igneum at a glance&quot; Finality row carry the sentence verbatim: &quot;No coin is staked. The only thing at stake is 30 days of public work: a vote key's weight is its blue blocks over the window, and equivocation strips it for 30 days.&quot; The spec sentence for 03 and 05 (I13) follows with the lane's commit.</span></div>
+<details><summary>The answer as first written</summary><p>Correct. The weight is a quantity that is at stake, earned by work alone over 30 days, not transferable, not purchasable, and already stripped in full for equivocation (spec 3.6). That is a slashable bond made of blocks, with no coin and no stake class; the &quot;then it is stake&quot; objection and its answer (the weight cannot be bought, borrowed or bridged, so capture by capital is removed; the last-days attack is bounded by the 30-day re-earn) are in the lane file, section 4.1. Extending the strip to execution-layer faults (the lane's 3.2) is an idea, not a rule, and the public text does not claim it.</p></details>
+</article>
 <h2 id="p">Proving and the zkEVM</h2>
 <article class="entry" id="P1" data-bucket="Conceded">
 <div class="head"><span class="id">P1</span><h3>The 20-second shard is a number you made up</h3><span class="date">5 October 2026</span></div>
@@ -450,6 +436,12 @@ details{margin-top:8px;font-size:14px;color:var(--ash)}summary{cursor:pointer;co
 <div class="status"><span class="badge b-conceded">Conceded, stated</span></div>
 <details><summary>The answer as first written</summary><p>True and stated in the litepaper. Mined coins are the only coins the founders can hold. The addresses are disclosed, so the seeding is visible. Whether to do it at all is a question for counsel (L1, L2).</p></details>
 </article>
+<article class="entry" id="E19" data-bucket="Conceded">
+<div class="head"><span class="id">E19</span><h3>&quot;Proving: a second income&quot; without the arithmetic of how small it is</h3><span class="date">6 October 2026</span></div>
+<blockquote>You sell proving for other chains as the income that keeps cards on after the subsidy fades. Put a number on it. All of Ethereum L1's proving today costs tens of dollars a day. Your year-1 emission is tens of thousands a day at any price you dare print. Say which one pays the bills.</blockquote>
+<div class="status"><span class="badge b-conceded">Conceded, stated</span> <span class="did">6 October 2026, evening; the Horizon lane analysis <code>a repository file</code> section 3.11, <code>frontier_model.py</code> section 7): <code>a repository file</code>, &quot;For miners&quot;, under the three-streams table: all of Ethereum L1's proving is about USD 36 a day at the September 2026 tracker cost (USD 0.005 a block x 7,200 blocks; the tracker figure is a secondary source) against about USD 13,700 a day of Igneum's year-1 emission at USD 0.005 per IGN (31.688 IGN a block x 86,400; the price is an input, not a forecast), so external proving is a small second income at launch and the lottery pays the bills; paid demand would have to grow about 1,000x in dollars for proving to become the main income. Figures the lane labels approximate (all rollup proving spend, USD 8,200 to 27,400 a day; Boundless's trailing day, USD 2) are not on the page.</span></div>
+<details><summary>The answer as first written</summary><p>Correct. The whole public proving market is three to four orders of magnitude under year-1 emission at any price input (the lane's table: Ethereum L1 at the Sep 2026 cost USD 36 a day, at the Dec 2025 cost 288; year-1 emission 13,700 at USD 0.005, 54,800 at 0.02, 273,800 at 0.10). The cost curve falls 3x to 30x a year, so dollars per proof fall as fast as volume rises. The design's own claim stays the defensible one: a second income that keeps cards on after the subsidy fades (spec 5.10.2), never the main one by 2030.</p></details>
+</article>
 <h2 id="g">Governance and the founders</h2>
 <article class="entry" id="G1" data-bucket="Conceded">
 <div class="head"><span class="id">G1</span><h3>No cryptography team</h3><span class="date">5 October 2026</span></div>
@@ -1232,7 +1224,7 @@ details{margin-top:8px;font-size:14px;color:var(--ash)}summary{cursor:pointer;co
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -1258,9 +1250,9 @@ details{margin-top:8px;font-size:14px;color:var(--ash)}summary{cursor:pointer;co
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -1268,10 +1260,23 @@ details{margin-top:8px;font-size:14px;color:var(--ash)}summary{cursor:pointer;co
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 <script>
 (function(){
diff --git a/site/litepaper.html b/site/litepaper.html
index 799d1c796..4b67e57e2 100644
--- a/site/litepaper.html
+++ b/site/litepaper.html
@@ -32,9 +32,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -46,173 +47,84 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
-:root{
-  --ground:#F4F1EC; --surface:#FFFFFF; --surface-2:#ECE8E0; --line:#DAD5CB;
-  --ink:#0C0C0E; --ink-2:#3D3B37; --quiet:#6E6B65;
-  --ember:#D9430F; --ember-ink:#FFFFFF; --molten:#B9741C; --tint:#FBE9E0;
-  --code:#16161A; --code-ink:#E6E2DA;
-  /* the shared nav and footer follow the paper's scheme: light here, the dark defaults below */
-  --ui-bg:rgba(244,241,236,.86); --ui-menu:#F4F1EC; --ui-ink:#0C0C0E; --ui-ink-2:#3D3B37; --ui-ash:#6E6B65; --ui-line:#DAD5CB; --ui-line-2:#C9C3B8;
-  --ui-accent:#D9430F; --ui-accent-ink:#FFFFFF; --ui-hot:#B9741C; --ui-hover:#F2541B; --ui-tint:#FBE9E0;
-  /* one system for every page: container, gutter, section rhythm, card and tile boxes, heading scale (same tokens as the homepage) */
-  --max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
-  --card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
-  --fs-h1:clamp(32px,5.5vw,56px);--fs-h2:clamp(28px,4.2vw,44px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px);
-  --lp-off:84px;
-}
-@media (prefers-color-scheme: dark){
-  :root:not([data-theme="light"]){
-    --ground:#0C0C0E; --surface:#16161A; --surface-2:#1E1E23; --line:#2A2A30;
-    --ink:#F4F1EC; --ink-2:#C9C7C2; --quiet:#9A9A9E;
-    --ember:#F2541B; --ember-ink:#0C0C0E; --molten:#FFB35C; --tint:#2A1A12;
-    --code:#0C0C0E; --code-ink:#C9C7C2;
-    --ui-bg:rgba(12,12,14,.84); --ui-menu:#0C0C0E; --ui-ink:#F4F1EC; --ui-ink-2:#C9C7C2; --ui-ash:#9A9A9E; --ui-line:#2A2A30; --ui-line-2:#3A3A42;
-    --ui-accent:#F2541B; --ui-accent-ink:#0C0C0E; --ui-hot:#FFB35C; --ui-hover:#FF6A2B; --ui-tint:rgba(242,84,27,.12);
-    color-scheme:dark;
-  }
-}
-:root[data-theme="dark"]{
-  --ground:#0C0C0E; --surface:#16161A; --surface-2:#1E1E23; --line:#2A2A30;
-  --ink:#F4F1EC; --ink-2:#C9C7C2; --quiet:#9A9A9E;
-  --ember:#F2541B; --ember-ink:#0C0C0E; --molten:#FFB35C; --tint:#2A1A12;
-  --code:#0C0C0E; --code-ink:#C9C7C2;
-  --ui-bg:rgba(12,12,14,.84); --ui-menu:#0C0C0E; --ui-ink:#F4F1EC; --ui-ink-2:#C9C7C2; --ui-ash:#9A9A9E; --ui-line:#2A2A30; --ui-line-2:#3A3A42;
-  --ui-accent:#F2541B; --ui-accent-ink:#0C0C0E; --ui-hot:#FFB35C; --ui-hover:#FF6A2B; --ui-tint:rgba(242,84,27,.12);
-  color-scheme:dark;
-}
-*{box-sizing:border-box}
-body{margin:0;background:var(--ground);color:var(--ink);font-family:var(--f-sans);font-size:17px;line-height:1.6;padding:0;-webkit-font-smoothing:antialiased}
-a{color:var(--ember);text-decoration:none}
-a:hover{text-decoration:underline}
-/* every id lands under the sticky bar (and the sticky contents row on a phone); --lp-off is measured by the script */
-[id]{scroll-margin-top:var(--lp-off)}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
-.cover{padding-block:var(--head) 40px;border-bottom:1px solid var(--line);display:flex;flex-wrap:wrap;gap:32px;align-items:flex-end;justify-content:space-between}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--quiet)}
-.cover h1{margin:12px 0 10px;font-family:var(--f-display);font-weight:900;font-size:var(--fs-h1);line-height:1.05;letter-spacing:-.01em;text-wrap:balance}
-.cover .tag{font-size:20px;color:var(--ink-2);max-width:40ch}
-.meta{display:flex;flex-direction:column;gap:6px;font-family:var(--f-mono);font-size:13px;color:var(--quiet);text-align:right}
-.meta b{color:var(--ink);font-weight:500}
-.layout{display:grid;grid-template-columns:minmax(0,1fr);gap:32px;padding-block:40px var(--sec)}
+/* litepaper block (docs/plans/site-ui-3.md section 4); tokens, type and components are in /site.css */
+[id]{scroll-margin-top:var(--lp-off,84px)}
+.cover{padding:calc(var(--sec) * .6) 0 var(--s-6);border-bottom:1px solid var(--line);display:flex;flex-wrap:wrap;gap:var(--s-6);align-items:flex-end;justify-content:space-between}
+.cover h1{margin:var(--s-3) 0 var(--s-3)}
+.cover .tag{font-size:var(--t-lg);line-height:1.5;color:var(--ink-2);max-width:44ch}
+.meta{display:flex;flex-direction:column;gap:6px;font:400 13px/1.5 var(--f-mono);color:var(--ash);text-align:right}
+.meta b{color:var(--bone);font-weight:500}
+.layout{display:grid;grid-template-columns:minmax(0,1fr);gap:var(--s-6);padding:var(--s-6) 0 var(--sec)}
 @media (min-width:960px){.layout{grid-template-columns:240px minmax(0,1fr);gap:56px}}
 .toc{align-self:start}
-@media (min-width:960px){.toc{position:sticky;top:calc(var(--nav-h) + 24px)}}
+@media (min-width:960px){.toc{position:sticky;top:calc(var(--nav-h) + 24px);max-height:calc(100vh - var(--nav-h) - 48px);overflow:auto}}
 .toc ol{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:2px;counter-reset:s}
 .toc li a{display:flex;gap:10px;padding:7px 10px;border-radius:8px;color:var(--ink-2);font-size:14px;counter-increment:s;line-height:1.35}
-.toc li a::before{content:counter(s,decimal-leading-zero);font-family:var(--f-mono);font-size:12px;color:var(--quiet);min-width:22px;padding-top:2px}
-.toc li a:hover{background:var(--surface-2);text-decoration:none;color:var(--ink)}
-.toc .dl{margin-top:18px;padding-top:18px;border-top:1px solid var(--line);font-size:13px;color:var(--quiet)}
-article{max-width:72ch}
-section{padding-block:40px;border-top:1px solid var(--line)}
-section:first-of-type{border-top:0;padding-top:0}
-h2{margin:0 0 18px;font-family:var(--f-display);font-weight:700;font-size:var(--fs-h2);line-height:1.1;text-wrap:balance}
-h3{margin:28px 0 8px;font-family:var(--f-display);font-weight:500;font-size:var(--fs-h3);line-height:1.3}
-p{margin:0 0 16px}
-.lead{font-size:20px;line-height:1.5;color:var(--ink-2)}
-ul,ol{margin:0 0 16px;padding-left:22px}
-li{margin-bottom:8px}
-strong{font-weight:600}
-.pull{margin:24px 0;padding:20px var(--card-pad);border-left:4px solid var(--ember);background:var(--tint);border-radius:0 var(--tile-r) var(--tile-r) 0;font-family:var(--f-display);font-weight:500;font-size:19px;line-height:1.4}
-.tbl{overflow-x:auto;margin:18px 0 24px;border:1px solid var(--line);border-radius:var(--card-r);background:var(--surface)}
-table{border-collapse:collapse;width:100%;min-width:560px;font-size:15px}
-th,td{padding:12px 14px;text-align:left;vertical-align:top;border-bottom:1px solid var(--line)}
-th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:uppercase;color:var(--quiet);font-weight:500;background:var(--surface-2)}
-tr:last-child td{border-bottom:0}
-td.num{font-family:var(--f-mono);font-variant-numeric:tabular-nums;white-space:nowrap}
-.figure{margin:24px 0;padding:var(--card-pad);background:var(--surface);border:1px solid var(--line);border-radius:var(--card-r);overflow-x:auto}
+.toc li a::before{content:counter(s,decimal-leading-zero);font-family:var(--f-mono);font-size:12px;color:var(--ash);min-width:22px;padding-top:2px}
+.toc li a:hover{background:var(--row);text-decoration:none;color:var(--bone)}
+.toc li a.active{background:var(--row);color:var(--bone);font-weight:600;box-shadow:inset 2px 0 0 var(--ember)}
+.toc li a.active::before{color:var(--ember-text)}
+.toc .dl{margin-top:18px;padding-top:18px;border-top:1px solid var(--line);font-size:13px;color:var(--ash)}
+.toc .mode{margin-top:14px;display:flex;border:1px solid var(--line);border-radius:var(--r-pill);overflow:hidden}
+.toc .mode button{flex:1;min-height:36px;border:0;background:transparent;color:var(--ash);font:500 12px/1 var(--f-mono);cursor:pointer}
+.toc .mode button.on{background:var(--graphite);color:var(--bone)}
+article{max-width:68ch}
+article section{padding:var(--s-6) 0;border-top:1px solid var(--line)}
+article section:first-of-type{border-top:0;padding-top:0}
+article h2{margin:0 0 var(--s-4)}
+article h3{margin:var(--s-6) 0 var(--s-2);font-weight:700}
+article .lead{margin-bottom:var(--s-4)}
+article ul,article ol{margin:0 0 var(--s-4);padding-left:22px}
+article li{margin-bottom:8px;color:var(--ink-2)}
+article p{color:var(--ink-2)}
+article strong{color:var(--bone);font-weight:600}
+.pull{margin:var(--s-5) 0;padding:var(--s-4) var(--s-5);border-left:2px solid var(--ember);background:var(--row);border-radius:0 var(--r-row) var(--r-row) 0;font:500 var(--t-lg)/1.45 var(--f-sans);color:var(--bone)}
+.tbl{margin:var(--s-4) 0 var(--s-5)}
+table{min-width:560px}
+.figure{margin:var(--s-5) 0;padding:var(--s-5);background:var(--graphite);border:1px solid var(--line);border-radius:var(--r-card);overflow-x:auto}
 .figure svg{display:block;width:100%;height:auto;max-width:100%}
-.figure .cap{margin-top:12px;font-family:var(--f-mono);font-size:12px;color:var(--quiet)}
-.stats{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:var(--gap-tile);margin:8px 0 24px}
+.figure .cap{margin-top:var(--s-3);font:400 var(--t-sm)/1.5 var(--f-mono);color:var(--ash)}
+.stats{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:var(--s-3);margin:var(--s-2) 0 var(--s-5)}
 @media (min-width:700px){.stats{grid-template-columns:repeat(4,minmax(0,1fr))}}
-.stat{padding:var(--tile-pad);background:var(--surface);border:1px solid var(--line);border-radius:var(--tile-r);min-width:0}
-.stat .v{font-family:var(--f-display);font-weight:700;font-size:var(--fs-tile);color:var(--ember);line-height:1.1}
-.stat .k{margin-top:6px;font-size:14px;color:var(--quiet);line-height:1.35;text-wrap:balance}
-pre{margin:0 0 16px;padding:16px 18px;background:var(--code);color:var(--code-ink);border-radius:var(--card-r);font-family:var(--f-mono);font-size:13px;line-height:1.6;overflow-x:auto}
+.stat{padding:var(--s-4);background:var(--row);border:1px solid var(--line);border-radius:var(--r-row);min-width:0}
+.stat .v{font:700 var(--t-num)/1 var(--f-display);color:var(--bone);letter-spacing:-.02em}
+.stat .k{margin-top:var(--s-2);font:400 var(--t-sm)/1.4 var(--f-mono);color:var(--ash);text-wrap:balance}
+pre{margin:0 0 var(--s-4)}
 .foot{margin-top:0}
 article section{display:none;border-top:0;padding-top:0}
 article section.active{display:block}
-body.all article section{display:block;border-top:1px solid var(--line);padding-top:40px}
+body.all article section{display:block;border-top:1px solid var(--line);padding-top:var(--s-6)}
 body.all article section:first-of-type{border-top:0;padding-top:0}
 article h2:focus,article h3:focus{outline:none}
 article h2:focus-visible,article h3:focus-visible{outline:2px solid var(--ember);outline-offset:6px;border-radius:4px}
-.toc li a.active{background:var(--tint);color:var(--ink);font-weight:600}
-.toc li a.active::before{color:var(--ember)}
-.toc .mode{margin-top:14px;display:flex;flex-direction:column;gap:8px}
-@media (max-width:959px){.toc .mode{flex-direction:row}}
-.toc .mode button{flex:1;min-height:40px;border-radius:8px;border:1px solid var(--line);background:var(--surface);color:var(--ink-2);font:inherit;font-size:13px;cursor:pointer}
-.toc .mode button.on{background:var(--ink);color:var(--ground);border-color:var(--ink)}
-.toc .mode button:hover:not(.on){border-color:var(--quiet)}
-.pager{display:flex;justify-content:space-between;gap:12px;margin-top:36px;padding-top:22px;border-top:1px solid var(--line)}
-.pager a{display:inline-flex;align-items:center;gap:8px;min-height:44px;padding:10px 16px;border:1px solid var(--line);border-radius:10px;color:var(--ink);font-size:14px;max-width:48%}
-.pager a:hover{text-decoration:none;border-color:var(--ember)}
-.pager a span{color:var(--quiet);font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase}
+.pager{display:flex;justify-content:space-between;gap:var(--s-3);margin-top:var(--s-6);padding-top:var(--s-5);border-top:1px solid var(--line)}
+.pager a{display:inline-flex;align-items:center;gap:8px;min-height:44px;padding:10px 16px;border:1px solid var(--line);border-radius:var(--r-btn);color:var(--bone);font-size:14px;max-width:48%}
+.pager a:hover{text-decoration:none;border-color:var(--line-2);background:var(--hover)}
+.pager a span{color:var(--ash);font:500 var(--t-xs)/1.4 var(--f-mono);letter-spacing:.12em;text-transform:uppercase}
 .pager a.next{margin-left:auto;text-align:right}
 body.all .pager{display:none}
-/* the source line under a table or paragraph: where each number came from */
-.src{margin:-8px 0 20px;font-family:var(--f-mono);font-size:13px;line-height:1.5;color:var(--quiet)}
+.src{margin:calc(-1 * var(--s-2)) 0 var(--s-5);font:400 13px/1.5 var(--f-mono);color:var(--ash)}
 .src b{font-weight:500;color:var(--ink-2)}
 @media (max-width:600px){.pager{flex-direction:column}.pager a{max-width:none;justify-content:space-between}.pager a.next{margin-left:0}}
 @media (max-width:959px){
-  .toc{position:sticky;top:var(--nav-h);z-index:5;background:var(--ground);margin-inline:calc(-1 * var(--gutter));padding:8px var(--gutter);border-bottom:1px solid var(--line)}
+  .toc{position:sticky;top:var(--nav-h);z-index:5;background:var(--obsidian);margin-inline:calc(-1 * var(--gutter));padding:8px var(--gutter);border-bottom:1px solid var(--line)}
   .toc ol{flex-direction:row;overflow-x:auto;gap:6px;scrollbar-width:none;-webkit-overflow-scrolling:touch;padding-bottom:2px;scroll-padding-inline:var(--gutter)}
   .toc ol::-webkit-scrollbar{display:none}
   .toc li a{white-space:nowrap;border:1px solid var(--line);border-radius:999px;padding:7px 12px;font-size:13px;gap:6px}
+  .toc li a.active{box-shadow:none;border-color:var(--ember)}
   .toc li a::before{min-width:0}
   .toc .dl{display:none}
   .toc .mode{margin-top:6px}
-  .toc .mode button{min-height:32px;font-size:12px}
+  .toc .mode button{min-height:32px}
 }
+@media print{article section{display:block!important;border-top:1px solid #bbb;padding-top:18pt}.toc,.pager,.cover .meta span:last-child{display:none!important}.layout{display:block}article{max-width:none}table{min-width:0}}
 </style>
 </head>
 <body>
@@ -222,10 +134,9 @@ body.all .pager{display:none}
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper" aria-current="page">Litepaper</a>
       <a href="/live" data-nav="live">Live devnet</a>
@@ -234,20 +145,32 @@ body.all .pager{display:none}
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
@@ -260,7 +183,7 @@ body.all .pager{display:none}
       <div class="tag">A proof-of-work chain whose miners also prove every block, run Ethereum's apps, and are protected from specialised chips by a program that changes every hour.</div>
     </div>
     <div class="meta">
-      <span>Published <b>3 October 2026</b> · updated <b>5 October 2026</b></span>
+      <span>Published <b>3 October 2026</b> · updated <b>6 October 2026</b></span>
       <span>Coin <b>IGN</b> · cap <b>4,000,000,000</b></span>
       <span>Status <b>devnet live, pre-testnet</b></span>
       <span>Method <b>one founder with AI systems</b> · external review before gate 3</span>
@@ -291,14 +214,14 @@ body.all .pager{display:none}
         <li><a href="#shoulders">Built on the shoulders</a></li>
         <li><a href="#limits">What Igneum does not claim</a></li>
       </ol>
-      <div class="mode" role="group" aria-label="Reading mode"><button type="button" id="m-tabs" class="on" aria-pressed="true">One section at a time</button><button type="button" id="m-all" aria-pressed="false">Whole paper</button></div>
+      <div class="mode" role="group" aria-label="Reading mode"><button type="button" id="m-all" class="on" aria-pressed="true">Whole paper</button><button type="button" id="m-tabs" aria-pressed="false">One section at a time</button></div>
       <div class="dl">Latin igneum: fiery. A cupel is the vessel in which metal is proven by fire.</div>
     </nav>
 
     <article>
       <section id="abstract">
         <h2>Abstract</h2>
-        <p class="lead">Igneum is a proof-of-work blockchain built for graphics cards, where NVIDIA cards also prove every block with zero-knowledge proofs and sell proving to other chains. The strongest recompute chip we can price, holding the whole 256 MiB cache on-die, reaches under 1x per chip against an RTX 5090. A memory-controller chip that stores the whole dataset reaches 1.2x per chip and, in our model, 5x to 9x per joule; the Ethash chips of this class reached 2.1x to 4.8x. The lever against it, program work in the latency shadow, is measured and in its gates: it brings the chip to about 2x. Sources: the chip model (<code>docs/analysis/chip-model-v3.md</code> section 5, 6 October 2026); the Ethash rows of the ASIC history (<code>docs/analysis/asic-resistance-history.md</code>, Linzhi Phoenix 2020, Jasminer X4 2021, Antminer E9 2022); Counter ASIC 3.0 item 8 (100,000 ops per hash: the chip's per-joule edge over the RTX 5090 falls from 5.6x to 2.1x on GDDR7 at a chip core equal to the GPU's, the 5090 at 0.2% less rate, gates G1 to G6 in progress). The model is public; the claim is tested by paid independent cryptanalysis and the public benchmark.</p>
+        <p class="lead">Igneum is a proof-of-work blockchain built for graphics cards, where NVIDIA cards also prove every block with zero-knowledge proofs and sell proving to other chains. The strongest recompute chip we can price, holding the whole 256 MiB cache on-die, reaches under 1x per chip against an RTX 5090. A memory-controller chip that stores the whole dataset reaches 1.2x per chip and, in our model, 5x to 9x per joule; the Ethash chips of this class reached 2.1x to 4.8x. The lever against it, program work in the latency shadow, is measured and in its gates: it brings the chip to about 2x. Sources: the chip model analysis (6 October 2026); the Ethash rows of the ASIC history (Linzhi Phoenix 2020, Jasminer X4 2021, Antminer E9 2022); Counter ASIC 3.0 item 8 (100,000 ops per hash: the chip's per-joule edge over the RTX 5090 falls from 5.6x to 2.1x on GDDR7 at a chip core equal to the GPU's, the 5090 at 0.2% less rate, gates G1 to G6 in progress). The model is public; the claim is tested by paid independent cryptanalysis and the public benchmark.</p>
         <p>It runs the Ethereum virtual machine, so anything built for Ethereum runs on Igneum unchanged. Transactions are included in about one second, proven within about a minute at launch, and locked by miners within about two. There is no premine, no pre-sale, no treasury taken from emission, no stake anywhere in consensus, and no dependence on any other chain. Mining stays open to anyone with a GPU because the mining program changes every hour, so a chip built for one program is useless for the next, and a chip for the whole program space is a GPU without the graphics parts. No scheduled human release is needed to keep it that way. Writing new code, including an emergency fix to the proof system, is the one thing that takes a person, and it activates only on miner signalling.</p>
         <div class="stats">
           <div class="stat"><div class="v">1 / s</div><div class="k">blocks, rising to 10</div></div>
@@ -351,7 +274,7 @@ body.all .pager{display:none}
               <rect x="50" y="48" width="400" height="72" rx="8" fill="var(--surface)" stroke="var(--line)" stroke-width="1.25"></rect>
               <text x="66" y="72" font-size="13" font-weight="600" fill="var(--ink)">1. Mining lottery</text>
               <text x="66" y="90" fill="var(--ink)">A random GPU program picks who makes the next block</text>
-              <text x="66" y="106" fill="var(--quiet)">New program every hour, so a chip for last hour's program is useless</text>
+              <text x="66" y="106" fill="var(--quiet)">New program every hour: a chip wired for one program is useless</text>
             </g>
             <g>
               <rect x="50" y="152" width="400" height="72" rx="8" fill="var(--surface)" stroke="var(--line)" stroke-width="1.25"></rect>
@@ -395,10 +318,10 @@ body.all .pager{display:none}
             <tr><td>Mining lottery</td><td>A new program every hour on Apple, NVIDIA and AMD cards, compiled ahead, no pause and no rejected block at the boundary</td><td class="num">4 Oct 2026, first live swap</td></tr>
             <tr><td>Blocks</td><td>About one a second with the full fleet; 0.65 a second over the hour to 16:00 UTC on 6 Oct 2026 with one PC off (the live page's hour count, 2,325 blocks)</td><td class="num">genesis, 3 Oct 2026</td></tr>
             <tr><td>Difficulty</td><td>Rule v2, a 600-second reference window, switched on by height under the running chain with no fork and no restart of the chain</td><td class="num">DAA 33,000, 4 Oct 2026</td></tr>
-            <tr><td>Finality</td><td>Rule v2: a checkpoint every 30 s of chain, locked at two thirds of all 30-day weight. First live lock: checkpoint 242 at 77.4% of all weight, 17 vote keys</td><td class="num">4 Oct 2026</td></tr>
+            <tr><td>Finality</td><td>Rule v2: a checkpoint every 30 s of chain, locked at two thirds of all 30-day weight. First live lock: checkpoint 242 at 77.4% of all weight, 17 vote keys. No coin is staked. The only thing at stake is 30 days of public work: a vote key's weight is its blue blocks over the window, and equivocation strips it for 30 days</td><td class="num">4 Oct 2026</td></tr>
             <tr><td>Proving</td><td>v0 active: shards are assigned to miners' keys, proven on their cards, and the records are carried in blocks</td><td class="num">DAA 84,100, 5 Oct 2026</td></tr>
             <tr><td>Ember</td><td>The one-click miner on the fleet, version 0.3.13 (6 Oct 2026); the app window still says Igneum Miner</td><td class="num">4 Oct 2026, first install</td></tr>
-            <tr><td>Wallet</td><td>Igneum Wallet 0.1.1 on macOS</td><td class="num">5 Oct 2026</td></tr>
+            <tr><td>Wallet</td><td>Igneum Wallet 0.1.4 on macOS (0.1.1 first shipped 5 Oct 2026)</td><td class="num">6 Oct 2026</td></tr>
           </tbody>
         </table></div>
         <p class="src"><b>Measured:</b> engineering log, "first hourly program swap on the live devnet", "difficulty rule v2 activated on the live devnet at DAA 33,000", "first finality lock on the live devnet" (4 October 2026); the 0.3.6 release plan (5 October 2026). The block rate is the devnet record in the evidence table, row 7.</p>
@@ -416,11 +339,11 @@ body.all .pager{display:none}
             <tr><td>Every hash</td><td>The 128 dataset addresses depend on the nonce, so every hash reads different memory. The one-bit select inside the maths costs a chip nothing and is not a defence; the random reads are</td><td>No</td></tr>
             <tr><td>Every hour</td><td>A new random program</td><td>No, the miner compiles whatever arrives</td></tr>
             <tr><td>Every day</td><td>A new dataset</td><td>No</td></tr>
-            <tr><td>Every six months</td><td>A new instruction mix and memory pattern drawn by the chain from rules fixed at genesis, and a new family of instructions unlocked from a reserve written at genesis, so the program space widens every era</td><td>No</td></tr>
+            <tr><td>Every six months</td><td>A new instruction mix and memory pattern drawn by the chain from rules fixed at genesis, and a new family of instructions unlocked from a reserve written at genesis, so the program space widens every era. A schedule change against fixed datapaths and human forks, not a surprise: a programmable chip reads every drawn parameter as firmware</td><td>No</td></tr>
             <tr><td>Continuously</td><td>The dataset grows on a schedule fixed at genesis, slowly enough that consumer cards keep up for years. A chip is built with fixed memory, so it is on a countdown from the day it ships. Ethereum's growing dataset ran Bitmain's E3 out of memory in 2020 this way, approximate, with nobody doing anything</td><td>No</td></tr>
           </tbody>
         </table></div>
-        <p>Three ideas carry the chip resistance. <strong>The hash rewrites itself.</strong> A new program every hour, drawn from the chain. Its memory pattern changes with it. The rules change on a schedule fixed at launch. No release, no vote. <strong>It waits on memory, not maths.</strong> Every hash is a chain of random reads into a table too big for a chip to carry. The wait is the same physics for everyone. <strong>Miners hold the switch.</strong> Spare defences are written into the rules, switched off. A 90% miner signal turns one on. No fork.</p>
+        <p>Three ideas carry the chip resistance. <strong>The hash rewrites itself.</strong> A new program every hour, drawn from the chain. Its memory pattern changes with it. The rules change on a schedule fixed at launch. No release, no vote. These are automatic schedule changes: they defeat a chip wired for one datapath and they need no human fork. Against a chip that stores the dataset every drawn parameter is firmware, and what meets that chip is the latency-shadow work (class v4) and the price per joule (the Horizon lane analysis, 6 October 2026, section 5.4; ledger M32). <strong>It waits on memory, not maths.</strong> Every hash is a chain of random reads into a table too big for a chip to carry. The wait is the same physics for everyone. <strong>Miners hold the switch.</strong> Spare defences are written into the rules, switched off. A 90% miner signal turns one on. No fork.</p>
         <p>No hash has stayed free of chips forever. Igneum does not claim to. It states the gain its own model finds, the response takes a week, and both are measured. The model is public: <a href="/bench#counter-asic-2-0-the-numbers">the numbers</a>; the claim is tested by paid independent cryptanalysis and the public benchmark. Monero has run on RandomX since 2019 with no chip publicly shipped, approximate; that is precedent, not proof.</p>
         <p>One thing takes a person, here and on every chain that exists: writing new code. A chain cannot safely write its own generator, and it cannot safely tell a chip from a wave of honest new cards by hashrate alone. If the design above ever failed, anyone could publish a new generator and miners would switch it on by signalling, as Monero's community can fork. Igneum is built to make that day unlikely, and does not depend on avoiding it.</p>
       </section>
@@ -437,7 +360,7 @@ body.all .pager{display:none}
             <tr><td>Light verification</td><td>256 MB cache on a CPU, milliseconds</td><td>256 MB cache on a CPU (512 MB from year 4), one warp under 10 ms, the gate. Measured 2.1 ms on one Apple M5 Max core for class v3 (3.4x class v2's 0.61 ms); a 2019-class core not yet</td></tr>
             <tr><td>Changes over time</td><td>None. A fixed design, unchanged for seven years</td><td>A new program every hour, its memory pattern with it; era draws and reserved families on a schedule fixed at genesis. Nobody touches it</td></tr>
             <tr><td>Seed grinding</td><td>Not applicable, the program comes from the hash input</td><td>Closed by a verifiable delay between seed and program</td></tr>
-            <tr><td>Useful work</td><td>None. Hashing only</td><td>Every NVIDIA card from 8 GB proves; 12 GB and up mine and prove; 24 GB on the stock server (eleven rented cards, RTX 3060 to RTX 5090, 6 October 2026, <code>docs/analysis/prover-tiers-real-cards.md</code>); they sell proofs to other chains. AMD and Apple cards mine, and a prover for them lands when a zkVM ships one</td></tr>
+            <tr><td>Useful work</td><td>None. Hashing only</td><td>Every NVIDIA card from 8 GB proves; 12 GB and up mine and prove; 24 GB on the stock server (eleven rented cards, RTX 3060 to RTX 5090, 6 October 2026); they sell proofs to other chains. AMD and Apple cards mine, and a prover for them lands when a zkVM ships one</td></tr>
             <tr><td>Track record</td><td>No chip publicly shipped in seven years, approximate</td><td>Zero years. Every number above is measured and logged with the commands that produced it. The specification, reference hash, test vectors and simulators are public now (github.com/igneum-network/spec). The node, the miner and the wallet are in a private repository until the public testnet</td></tr>
           </tbody>
         </table></div>
@@ -449,7 +372,7 @@ body.all .pager{display:none}
         <p>Every Igneum block is proven with a zero-knowledge proof, and the miners produce it. Proving is a useful GPU workload that is cheaply verifiable by construction. A proof is right or it is not. Wrapped for light clients, a phone checks it in milliseconds; the wrapping cost is a phase two measurement. Measured so far, the certificate half only: the browser verifier on the home page checks a devnet finality certificate, one BLS aggregate signature over 16 keys and 21 header hashes, in 139 to 155 ms cold and 58 to 68 ms warm in a phone-sized tab on a laptop core (5 October 2026). No phone has been measured, and no wrapped block proof exists yet.</p>
         <h3>How a block gets proven</h3>
         <p>Blocks carry transactions only and make no claim about state. Every node executes the ordered transactions natively at once, so users see their transaction land in about a second. The execution is then split into shards of a fixed proving cost. Shards are assigned by lot to eight provers for ten seconds, then open to anyone; there is no bond. Provers run them on consumer cards, and the shard proofs are folded by recursive aggregation into one proof for the block. That proof lands on-chain within about a minute at launch. Because the proof computes the state from the ordered sequence, no node accepts a block with a wrong state root. Full nodes also execute every block natively and reject a proof record whose result differs from their own execution, so a forged proof is a light-client problem and never a chain split. Implemented: the native-execution check on every carried proof record, proving v0 on the devnet (specification section 7). The emergency path for a soundness bug in the proof system is a human one: a new proof-system version is written by people and activates only on miner signalling. Invalid transactions are skipped by rule, the way Kaspa skips conflicting spends.</p>
-        <p>Proving: every NVIDIA card from 8 GB proves; 12 GB and up mine and prove; 24 GB on the stock server. Measured on eleven rented cards, RTX 3060 to RTX 5090, 6 October 2026, <code>docs/analysis/prover-tiers-real-cards.md</code>: the RTX 3060 (12 GB) mines at 23.78 MH/s and proves the v1 shard beside its miner at an 8.9 GB peak in 37.5 s; the RTX 4060 (8 GB) proves it alone at 7.4 GB in 18.4 s; the RTX 4090 (24 GB) proves it on the stock SP1 server in 5.6 s at 17.4 GB. The patched server that fits the smaller cards is not yet in the shipped app. AMD and Apple cards mine. A prover for them lands when a zkVM ships one.</p>
+        <p>Proving: every NVIDIA card from 8 GB proves; 12 GB and up mine and prove; 24 GB on the stock server. Measured on eleven rented cards, RTX 3060 to RTX 5090, 6 October 2026: the RTX 3060 (12 GB) mines at 23.78 MH/s and proves the v1 shard beside its miner at an 8.9 GB peak in 37.5 s; the RTX 4060 (8 GB) proves it alone at 7.4 GB in 18.4 s; the RTX 4090 (24 GB) proves it on the stock SP1 server in 5.6 s at 17.4 GB. The patched server that fits the smaller cards is not yet in the shipped app. AMD and Apple cards mine. A prover for them lands when a zkVM ships one.</p>
         <h3>The proving budget</h3>
         <p>Gas prices execution. Proving cost is a different number, so Igneum meters it separately: every transaction pays in both dimensions, and each block has a proving-cost budget set in consensus from measured prover throughput. A transaction that is cheap to run and expensive to prove pays for what it costs the provers. Measured on 5 October 2026 (an RTX 5090 under SP1 6.8.1's GPU prover, the shard size the chain adopts from its fee switch, 30,000 proving gas, about 4.7 million prover cycles): one full shard proves in 4.3 seconds and needs 20.4 GB of GPU memory with the card to itself, so a 24 GB card proves full shards and a 12 GB or 16 GB card does not on this prover build, whose floor is 13.9 GB for even an empty shard; mining and proving on one card needs 32 GB today (the prototype-size shard beside the miner peaked at 30.1 GB) and 24 GB once the adopted shard size is live (22.2 GB beside the miner, 13.2 seconds a shard, measured on the 32 GB card; a 24 GB card has not run it yet). The old 12 GB gate on the roadmap was withdrawn on 5 October until a prover build with a smaller floor was measured; on 6 October a patched server proved the same shard at 7.4 to 8.0 GB alone on eleven rented cards from the RTX 3060 to the RTX 5090 (the real-card table), so the gate returns as measured and the patched server is not yet in the shipped app. The first proofs exist: on 4 October 2026 an RTX 5090 proved a small two-transaction block in 1.4 seconds (2.7 seconds compressed), verified in 0.22 and 0.038 seconds, and a laptop CPU proved a three-shard block end to end in 19 minutes. Later that day the same card proved a full shard at the provisional size, 6.75 million prover gas, which executed in 60.8 million cycles: core proof 8.3 seconds, compressed proof 10.9 seconds, verified in 0.040 seconds; a four-shard block took 44.5 seconds of GPU stages end to end. Since 5 October 2026 shards are assigned and proven on the live devnet. The gate asks for a mid-range card, and an RTX 5090 is not one, so the gate stands open. Once the gate is measured, the budget rises by schedule as hardware improves. The proof system is hash-based, which is what runs on consumer cards, and sits behind a versioned interface, so Igneum can adopt a better proof system when one exists by a miner-signalled release, and runs for ever on the current one if none is adopted.</p>
         <h3>Proving for everyone else</h3>
@@ -466,7 +389,7 @@ body.all .pager{display:none}
         <p>A miner's vote weight is simply the blocks it has mined over the trailing 30 days, measured by work, so splitting into many keys buys nothing and joining a pool costs nothing. Hashrate that arrived today holds almost none of it. Even an attacker producing every block on the chain, with honest miners gone, would need ten days of mining in public to hold a third of the weight, and twenty to hold two thirds. An attacker matching the honest network needs twenty days for a third and never reaches two thirds while the honest miners keep mining. Rental is priced by the hour. The only route left is to drive honest miners off the chain and hold two thirds for a month on the public hashrate charts, which is the same limit Bitcoin lives with, with a month's warning attached. Pools carry their hashers' votes, so vote concentration equals pool concentration, and it is public.</p>
         <p>Two further rules close the gaps. A lock needs two thirds of all 30-day weight, so finality pauses whenever less than two thirds of that weight is connected and signing, until it returns or ages out of the window, up to 30 days, and the chain runs on proof of work meanwhile. The node reports the pause. A key that stops signing is reported as absent within two hours, which is how operators see a pause coming. Beneath the latest lock the depth to rely on is the finality depth: a node never switches to a chain forked more than 12 hours of median time back, and a certified checkpoint shortens that to its own age. Kaspa's one-hour merge depth is a limit on which old blocks a new block may merge, not a reorganisation bound. Signing two different checkpoints at the same height is equivocation, provable by anyone, and it strips the key of its vote for 30 days.</p>
         <h3>What is not here</h3>
-        <p>No stake. No coin-holder class votes on anything. No anchoring into Bitcoin or any other chain. Nothing in Igneum's consensus depends on anything outside Igneum.</p>
+        <p>No coin is staked. The only thing at stake is 30 days of public work: a vote key's weight is its blue blocks over the window, and equivocation strips it for 30 days. No coin-holder class votes on anything. No anchoring into Bitcoin or any other chain. Nothing in Igneum's consensus depends on anything outside Igneum.</p>
       </section>
 
       <section id="building">
@@ -571,9 +494,10 @@ body.all .pager{display:none}
             <tr><td>External proving jobs</td><td>Rollups and apps on other chains, priced in their money</td><td>No, but the market is small today and is upside, not a promise</td></tr>
           </tbody>
         </table></div>
+        <p>The size of that third stream today, in numbers: all of Ethereum L1's proving is about USD 36 a day at the September 2026 tracker cost (USD 0.005 a block, 7,200 blocks a day; the tracker figure is a secondary source), against about USD 13,700 a day of Igneum's year-1 emission at USD 0.005 per IGN (31.688 IGN a block, 86,400 blocks a day; the price is an input, not a forecast). So external proving is a small second income at launch and the lottery pays the bills; for proving to become the main income the paid demand would have to grow about 1,000x in dollars (the Horizon lane analysis, 6 October 2026, section 3.11; ledger E19).</p>
         <p>The honest bear-market case rests on cost. A miner's card is already running and the power is often domestic, so Igneum miners' marginal cost in the proving market is close to power, which is an edge over data-centre provers and nothing more. Which of the two in-chain streams pays more per GPU-second depends on the size of the fleet: on the devnet of 4 October 2026, three machines at 275 million hashes a second, a second of hashing paid about 4.9x a second of proving the pool share; at 10,000 cards the same arithmetic favours proving by about 930x. That is arithmetic on measured devnet rates, approximate, not a market measurement.</p>
         <h3>Hardware</h3>
-        <p>The dataset starts at 2 GB and grows (the proposed schedule, fixed at the testnet genesis: 2 GB, doubling at years 4, 12 and 28, the average of half a gigabyte a year), so a 4 GB card mines for about four years and an 8 GB card for about twelve, approximate. Every NVIDIA card from 8 GB proves; 12 GB and up mine and prove; 24 GB on the stock server (eleven rented cards, RTX 3060 to RTX 5090, 6 October 2026, <code>docs/analysis/prover-tiers-real-cards.md</code>). NVIDIA and AMD both work, because the mining program is generated for the architecture both share and the proof system is hash-based. Apple's chips are GPUs with unified memory, so Macs mine too, at about a fifth of a flagship card: Measured, 26.7 against 123 million hashes a second, an Apple M5 Max beside an RTX 5090 on the live devnet, 4 October 2026. A Mac is a poor miner per dollar. There is no CPU mining lane, on purpose, because CPU mining is what botnets farm. Nodes, wallets and exchanges need no GPU at all.</p>
+        <p>The dataset starts at 2 GB and grows (the proposed schedule, fixed at the testnet genesis: 2 GB, doubling at years 4, 12 and 28, the average of half a gigabyte a year), so a 4 GB card mines for about four years and an 8 GB card for about twelve, approximate. Every NVIDIA card from 8 GB proves; 12 GB and up mine and prove; 24 GB on the stock server (eleven rented cards, RTX 3060 to RTX 5090, 6 October 2026). NVIDIA and AMD both work, because the mining program is generated for the architecture both share and the proof system is hash-based. Apple's chips are GPUs with unified memory, so Macs mine too, at about a fifth of a flagship card: Measured, 26.7 against 123 million hashes a second, an Apple M5 Max beside an RTX 5090 on the live devnet, 4 October 2026. A Mac is a poor miner per dollar. There is no CPU mining lane, on purpose, because CPU mining is what botnets farm. Nodes, wallets and exchanges need no GPU at all.</p>
         <h3>What a miner's hour looks like</h3>
         <p>The card hashes the lottery continuously. When the client sees a shard or an external job it can win, it switches the card to proving for a few seconds, posts the proof, and goes back to hashing. The client does the switching and the miner sees one balance.</p>
         <p>The protocol carries no fee: no dev fund, no cut to any team. Ember, the miner software, takes an optional 1% dev fee, the way other GPU miners do. One block template in 100 is requested with the dev address instead of yours, by a counter, not a random draw, so it is exactly 1 in 100 and anyone can check it from the source or from the chain. One flag turns it off (<code>--dev-fee 0</code>, a switch in the app, a line in the HiveOS config). The miner prints the fee and the address when it starts. Any other client is welcome.</p>
@@ -602,7 +526,7 @@ body.all .pager{display:none}
             <tr><td>Dashboard</td><td>Per card: rate, accepted and rejected blocks, temperature, draw, MH per watt, the kernel variant in use, the proving state, and every event. Served on this machine only, behind a per-launch token</td></tr>
           </tbody>
         </table></div>
-        <p class="src"><b>Source:</b> the app's engine, detection, keys, prover, updater, jobs and watchdog modules (<code>app/igneum-app/src</code>), the HiveOS package (<code>packaging/hive</code>). Design, not yet measured on a real card: the watchdog rules and the fault guards, which were measured against a fake worker only (engineering log, "miner fault guards and the app watchdog", 4 October 2026).</p>
+        <p class="src"><b>Source:</b> the app's engine, detection, keys, prover, updater, jobs and watchdog modules (the app source), the HiveOS package (the HiveOS package). Design, not yet measured on a real card: the watchdog rules and the fault guards, which were measured against a fake worker only (engineering log, "miner fault guards and the app watchdog", 4 October 2026).</p>
         <h3>Six levers</h3>
         <div class="tbl"><table>
           <thead><tr><th>Lever</th><th>What it does</th><th>State, 5 Oct 2026</th><th>Measured</th></tr></thead>
@@ -646,7 +570,7 @@ body.all .pager{display:none}
             <tr><td>Next</td><td>Touch ID and Windows Hello to unlock. In progress, not live. Windows build: next</td></tr>
           </tbody>
         </table></div>
-        <p class="src"><b>Source:</b> Igneum Wallet 0.1.1, 5 October 2026 (<code>app/igneum-wallet</code>: the vault, HD key, finality, QR and updater modules and the README). Verified: the over-the-air path end to end on one Mac against a test manifest. Not yet run: the Windows path, the rollback paths, a Developer ID signature.</p>
+        <p class="src"><b>Source:</b> Igneum Wallet 0.1.1, 5 October 2026, now 0.1.4 on the downloads host (the wallet source: the vault, HD key, finality, QR and updater modules and the README). Verified: the over-the-air path end to end on one Mac against a test manifest. Not yet run: the Windows path, the rollback paths, a Developer ID signature.</p>
       </section>
 
       <section id="governance">
@@ -668,16 +592,16 @@ body.all .pager{display:none}
           <thead><tr><th>Phase</th><th>When</th><th>What</th><th>Gate to pass</th></tr></thead>
           <tbody>
             <tr><td>1. Specification</td><td class="num">Oct to Nov 2026</td><td>Mining generator, shard proving, finality rules, written for external review</td><td></td></tr>
-            <tr><td>2. Prove the proving</td><td class="num">Nov 2026 to Jan 2027</td><td>Mining program prototype on GPU and CPU, shard proving benchmark on consumer cards. So far: an RTX 5090 proves a shard in 10.9 s compressed; a CPU verifies a warp in 0.41 to 0.58 ms. A mid-range card has not been measured</td><td>A mid-range GPU proves a shard in under 20 s and a CPU verifies a hash in 10 ms</td></tr>
-            <tr><td>3. Devnet</td><td class="num">Started 3 Oct 2026, 20 nodes by Mar 2027</td><td>BlockDAG node with the new mining program and EVM execution, 20 nodes. Live now: 1 block a second, difficulty v2, finality v2 locks, proving v0, Ember on every machine. Not yet measured on the live chain: the proof lag behind the tip</td><td>1 block a second held with proofs under 60 s behind the tip</td></tr>
+            <tr><td>2. Prove the proving</td><td class="num">Nov 2026 to Jan 2027</td><td>Mining program prototype on GPU and CPU, shard proving benchmark on consumer cards. So far: an RTX 5090 proves a shard in 10.9 s compressed; a CPU verifies a warp in 0.61 ms (class v2) to 2.1 ms (class v3). A mid-range card has not been measured</td><td>A mid-range GPU proves a shard in under 20 s and a CPU verifies a hash in 10 ms</td></tr>
+            <tr><td>3. Devnet</td><td class="num">Started 3 Oct 2026, 20 nodes by Mar 2027</td><td>BlockDAG node with the new mining program and EVM execution, 20 nodes. Live now: 1 block a second, difficulty v2, finality v2 locks, proving v0, Ember on every machine. Measured on the live chain on 6 October 2026: proofs land a median of about 380 s behind the tip (the observer, /live), against the 60 s gate</td><td>1 block a second held with proofs under 60 s behind the tip</td></tr>
             <tr><td>4. Finality and job market</td><td class="num">Apr to Jul 2027</td><td>Sustained-mining finality, external proving jobs, miner client with auto-switching</td><td>Finality design passes external review and one rollup signs for testnet</td></tr>
             <tr><td>5. Public testnet</td><td class="num">Aug to Oct 2027</td><td>One-click miner app on Windows, macOS and Linux, HiveOS, pools, the first rollup as a proving customer, no coin yet</td><td>1,000 independent miners run 30 days and rollup proofs are delivered on time</td></tr>
             <tr><td>6. Mainnet fair launch</td><td class="num">Nov 2027</td><td>Genesis with no premine, 30-day ramp. No listing is arranged, promised or sought by the project</td><td></td></tr>
           </tbody>
         </table></div>
         <p>Dates slip. Gates do not. Phase two decides everything. If consumer GPUs cannot prove shards fast enough, Igneum says so and does not launch on promises.</p>
-        <h3>What ships next: Ember 0.3.6</h3>
-        <p>The proving activation of 5 October 2026 set the next release. Each item is in the 0.3.6 plan; none is on the fleet yet.</p>
+        <h3>The 0.3.6 release plan, 5 October 2026</h3>
+        <p>The proving activation of 5 October 2026 set the next release. The table is the plan as written; Ember has since reached 0.3.14 (6 October 2026), and each item's state is in the engineering log.</p>
         <div class="tbl"><table>
           <thead><tr><th>Item</th><th>Why</th></tr></thead>
           <tbody>
@@ -703,11 +627,11 @@ body.all .pager{display:none}
         <div class="tbl"><table>
           <thead><tr><th>What</th><th>Number</th><th>Source</th></tr></thead>
           <tbody>
-            <tr><td>Rented NVIDIA hash, 6 October 2026</td><td class="num">2 GH/s for USD 13 an hour</td><td>The fleet's bench entry (the rented cards of 6 October 2026); the entry lands tonight with the wave measurement below</td></tr>
-            <tr><td>The devnet's hash the same afternoon</td><td class="num">282 MH/s</td><td><code>/api/stats</code>, 6 October 2026, 16:40 UTC; 181 MH/s an hour earlier with one PC off</td></tr>
+            <tr><td>Rented NVIDIA hash, 6 October 2026</td><td class="num">2 GH/s for USD 13 an hour</td><td>The rental order for the rented cards of 6 October 2026, approximate; the fleet's bench entry is not yet written</td></tr>
+            <tr><td>The devnet's hash the same afternoon</td><td class="num">282 MH/s</td><td>the public stats API, 6 October 2026, 16:40 UTC; 181 MH/s an hour earlier with one PC off; 2.66 GH/s at 18:16 UTC with the rented cards mining</td></tr>
             <tr><td>Weight a renter holds on day one</td><td class="num">0.0%</td><td>The finality simulator, table B (ledger M12)</td></tr>
             <tr><td>Lock latency behind the checkpoint</td><td class="num">1,018 ms median</td><td>Engineering log, the finality harness, three nodes</td></tr>
-            <tr><td>A 50-miner wave against the devnet: blocks taken, locks moved</td><td class="num">measurement tonight</td><td>The fleet's bench entry, 6 October 2026</td></tr>
+            <tr><td>A 50-miner wave against the devnet: blocks taken, locks moved</td><td class="num">not yet measured</td><td>Owed to the fleet's bench entry; the rented cards joined on 6 October 2026</td></tr>
           </tbody>
         </table></div>
         <h3>Finality weighted by mining history is new. New gets attacked.</h3>
@@ -750,7 +674,7 @@ body.all .pager{display:none}
           <li><strong>Bitcoin's bech32 and Bitcoin Cash's CashAddr checksum.</strong> The address format, through Kaspa, with Igneum prefixes.</li>
           <li><strong>BLAKE2b, BLAKE3, SHA-256, Keccak.</strong> The hashes the node already uses, unchanged. ChaCha, SplitMix64 and FNV-1a inside the lottery hash, implemented from their definitions.</li>
         </ul>
-        <p>What is Igneum's own: the hourly header-bound GPU program, the sustained-mining finality rule, two-dimensional gas with the per-frame app share, the shard market and proving precompile, and the automatic era draws. The full table, with what changed in each component, why the design needed it, and the measurement or specification section that covers it, is <code>docs/provenance.md</code> in the repository and is published with it at the public testnet. Licences stated from memory are marked approximate there and verified before the repository opens.</p>
+        <p>What is Igneum's own: the hourly header-bound GPU program, the sustained-mining finality rule, two-dimensional gas with the per-frame app share, the shard market and proving precompile, and the automatic era draws. The full table, with what changed in each component, why the design needed it, and the measurement or specification section that covers it, is the provenance document in the repository and is published with it at the public testnet. Licences stated from memory are marked approximate there and verified before the repository opens.</p>
       </section>
 
       <section id="limits">
@@ -758,7 +682,7 @@ body.all .pager{display:none}
         <p>Here are the limits, stated before anyone else states them.</p>
         <ul>
           <li><strong>A proof in seconds.</strong> Not at launch. Proving a full block today needs a cluster of 100 to 200 consumer GPUs, approximate, so Igneum launches with proofs within about a minute and tightens as hardware improves. Users still see their transaction land in one second.</li>
-          <li><strong>A chip is impossible.</strong> No. A chip is a bad bet, because the target moves before it ships. The published model (5 October 2026) prices the strongest chip we can name, one with the whole cache on-die computing dataset items on the fly, at 0.92x the hash rate of an RTX 5090 per unit of silicon with a 3x fixed-function allowance, approximate. The same model, drawn out to the chip that stores the dataset (6 October 2026): The strongest recompute chip we can price, holding the whole 256 MiB cache on-die, reaches under 1x per chip against an RTX 5090. A memory-controller chip that stores the whole dataset reaches 1.2x per chip and, in our model, 5x to 9x per joule; the Ethash chips of this class reached 2.1x to 4.8x. The lever against it, program work in the latency shadow, is measured and in its gates: it brings the chip to about 2x. Sources: the chip model (<code>docs/analysis/chip-model-v3.md</code> section 5, 6 October 2026); the Ethash rows of the ASIC history (<code>docs/analysis/asic-resistance-history.md</code>, Linzhi Phoenix 2020, Jasminer X4 2021, Antminer E9 2022); Counter ASIC 3.0 item 8 (100,000 ops per hash: the chip's per-joule edge over the RTX 5090 falls from 5.6x to 2.1x on GDDR7 at a chip core equal to the GPU's, the 5090 at 0.2% less rate, gates G1 to G6 in progress). No hash has stayed free of chips forever; Igneum does not claim to. Monero's seven years without a public chip are precedent, not proof, and a small prize: they say nothing about the price of a chip with the 256 MB cache on its die, and that price is a cost model, not a measurement.</li>
+          <li><strong>A chip is impossible.</strong> No. A chip wired for one program is a bad bet, because the program moves before it ships. A programmable chip is not stopped by the moving target: everything it needs is public at genesis and every drawn parameter is firmware to it (an address permute, a rotator, an immediate table), so the defence against it is the latency-shadow work (class v4) and the price per joule, not the schedule (the Horizon lane analysis, 6 October 2026, section 5.4; ledger M32). The published model (5 October 2026) prices the strongest chip we can name, one with the whole cache on-die computing dataset items on the fly, at 0.92x the hash rate of an RTX 5090 per unit of silicon with a 3x fixed-function allowance, approximate. The same model, drawn out to the chip that stores the dataset (6 October 2026): The strongest recompute chip we can price, holding the whole 256 MiB cache on-die, reaches under 1x per chip against an RTX 5090. A memory-controller chip that stores the whole dataset reaches 1.2x per chip and, in our model, 5x to 9x per joule; the Ethash chips of this class reached 2.1x to 4.8x. The lever against it, program work in the latency shadow, is measured and in its gates: it brings the chip to about 2x. Sources: the chip model analysis (6 October 2026); the Ethash rows of the ASIC history (Linzhi Phoenix 2020, Jasminer X4 2021, Antminer E9 2022); Counter ASIC 3.0 item 8 (100,000 ops per hash: the chip's per-joule edge over the RTX 5090 falls from 5.6x to 2.1x on GDDR7 at a chip core equal to the GPU's, the 5090 at 0.2% less rate, gates G1 to G6 in progress). No hash has stayed free of chips forever; Igneum does not claim to. Monero's seven years without a public chip are precedent, not proof, and a small prize: they say nothing about the price of a chip with the 256 MB cache on its die, and that price is a cost model, not a measurement.</li>
           <li><strong>A guaranteed income floor.</strong> No. External proving is a small market today. Igneum's miners' marginal cost in it is close to power, which is an edge and nothing more.</li>
           <li><strong>A memory-hard prototype on every vendor.</strong> Not yet. The 256 MB cache closed the shortcut on Apple silicon (computing items runs 4.8x slower than loading them, measured 3 October 2026). The same ratio on NVIDIA and on a discrete AMD card is Open.</li>
           <li><strong>Finality in the first month.</strong> No. No checkpoint locks until the 30-day window has 30 days of history. The first month of mainnet is proof of work with a 12-hour depth, and the text above says so wherever a day count appears.</li>
@@ -778,7 +702,7 @@ body.all .pager{display:none}
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -804,9 +728,9 @@ body.all .pager{display:none}
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -814,10 +738,23 @@ body.all .pager{display:none}
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 
 <script>
@@ -831,7 +768,7 @@ body.all .pager{display:none}
   var toc=document.querySelector('.toc'),links=Array.prototype.slice.call(document.querySelectorAll('.toc ol a'));
   var mAll=document.getElementById('m-all'),mTabs=document.getElementById('m-tabs');
   var reduce=window.matchMedia('(prefers-reduced-motion: reduce)').matches;
-  var all=false;try{all=localStorage.getItem('lp-mode')==='all';}catch(e){}
+  var all=true;try{all=localStorage.getItem('lp-mode')!=='tabs';}catch(e){}
   // every subsection heading gets an id from its text, so each one is reachable by URL
   var used={};secs.forEach(function(s){used[s.id]=1;});
   secs.forEach(function(s){Array.prototype.slice.call(s.querySelectorAll('h3')).forEach(function(h){if(h.id)return;
diff --git a/site/live-dag.js b/site/live-dag.js
new file mode 100644
index 000000000..bf379c7d7
--- /dev/null
+++ b/site/live-dag.js
@@ -0,0 +1,236 @@
+/* Igneum live DAG view (docs/plans/site-ui-3.md section 6, 6 October 2026).
+   One module for /live and the home page. Reads /api/live only; every pixel is a block, edge or checkpoint the observer
+   stored. Blocks are placed by header time on x (the axis is labelled in DAA score) and by miner lane on y. Parent edges
+   are drawn; the edge between two selected-chain blocks is heavier and the chain glows as one path. Colour words are the
+   ledger's: pending, included (blue), excluded (red), proven (every shard verified or paid), locked (a checkpoint block).
+   Checkpoints are vertical bands at their blue score with the lock weight; a locked band is solid, a pending one dashed.
+   The view scrolls at chain speed, new blocks arrive from the right with a brief glow. The page's scroll passes through the
+   scene; zoom takes ctrl or cmd with the wheel, a pinch, or a click into the scene (engaged, released by Escape or a click
+   outside; opts.chip is the "scroll to zoom, Esc to release" element); window 30 to 300 s (the API's ?window=); a pause button;
+   hover and tap show a block's details.
+
+   Usage: var dag = IgneumDag.mount(canvas, { compact, window, url, poll, mine, onState, onData, onWindow, onEngage, pauseButton, tooltip, chip })
+   - url: the /api/live endpoint (default '/api/live'); poll: false stops the module's own 2 s fetch, the host then calls
+     dag.push(reply) with a reply of the same shape ({ok, state:{stale, age_s, height, ...}, blocks:[...], finality:{checkpoints:[...]}, proving})
+     whenever it has new data (every poll or every new block, either is fine; blocks already on screen are updated in place).
+   - block record (the /api/live shape): hash (string, 16 hex), ts (ms, header time), blue_score, daa (numbers), parents ([hash]),
+     chain (bool, selected chain), color ('blue' | 'red' | 'pending'), miner (string lane key, 8 hex of the vote key hash),
+     locked (bool, a locked checkpoint block), final (bool, at or before the newest lock), shards ([{state: 'planned' | 'proving' |
+     'verified' | 'paid'}]), proven (bool, every shard verified or paid). Checkpoints: {index, blue_score, state: 'locked' | 'pending', fraction_total}.
+   - mine: a miner lane key (string) or function(block) -> bool; the user's own blocks take a molten ring and the lane is labelled "you".
+   - The legend is the host's; the module draws no HTML. Colours come from the CSS custom properties on :root (--ember, --ember-hi,
+     --molten, --bone, --ash, --line, --line-2, --row or --obsidian), re-read on data-theme and prefers-color-scheme changes.
+   - Sizing: the canvas fills its CSS box (width and height from the stylesheet); 280 px wide works, 600 or more shows lane labels well.
+   onState(state, reason): 'connecting' | 'live' | 'stale' | 'failed'; onData(d) with every fresh reply. */
+(function (root) {
+  'use strict';
+  var COL = {
+    ember: '#F2541B', emberHi: '#FF6A2B', molten: '#FFB35C', bone: '#F4F1EC', ash: '#9A9A9E', line: '#2A2A30', line2: '#3A3A42', obsidian: '#0C0C0E',
+    red: '#B0362B'
+  };
+  function cssVar(name, fallback) { try { var v = getComputedStyle(document.documentElement).getPropertyValue(name).trim(); return v || fallback; } catch (e) { return fallback; } }
+  function readTheme() {
+    COL.ember = cssVar('--ember', COL.ember); COL.emberHi = cssVar('--ember-hi', COL.emberHi); COL.molten = cssVar('--molten', COL.molten);
+    COL.bone = cssVar('--bone', COL.bone); COL.ash = cssVar('--ash', COL.ash); COL.line = cssVar('--line', COL.line); COL.line2 = cssVar('--line-2', COL.line2);
+    COL.obsidian = cssVar('--row', cssVar('--obsidian', COL.obsidian));
+  }
+  function rgba(hex, a) { var h = hex.replace('#', ''); if (h.length !== 6) return hex; return 'rgba(' + parseInt(h.slice(0, 2), 16) + ',' + parseInt(h.slice(2, 4), 16) + ',' + parseInt(h.slice(4, 6), 16) + ',' + a + ')'; }
+  function fmt(n) { return n === null || n === undefined ? 'pending' : Number(n).toLocaleString('en-GB'); }
+  function fmtAge(sec) { sec = Math.round(sec); return sec < 90 ? sec + ' s' : sec < 5400 ? Math.round(sec / 60) + ' min' : Math.round(sec / 3600) + ' h'; }
+
+  function mount(canvas, opts) {
+    opts = opts || {};
+    var compact = !!opts.compact, windowS = Math.max(30, Math.min(300, opts.window || (compact ? 90 : 120)));
+    var reduce = root.matchMedia && root.matchMedia('(prefers-reduced-motion: reduce)').matches;
+    var isMine = typeof opts.mine === 'function' ? opts.mine : opts.mine ? function (b) { return b.miner === opts.mine; } : null;
+    var ctx = canvas.getContext('2d'), dpr = Math.min(root.devicePixelRatio || 1, 2), W = 0, H = 0;
+    var blocks = [], byHash = {}, lanes = [], laneOf = {}, cps = [], data = null, state = 'connecting', reason = 'connecting';
+    var paused = false, offsetMs = 0, hover = null, pinned = null, lastPoll = 0, failures = 0, running = false, inView = true, lastT = 0;
+    var vnow = function () { return Date.now() - 2500 - offsetMs; }; // the right edge sits 2.5 s behind the clock so a block has arrived before it is drawn
+    var padL = compact ? 10 : 56, padR = 14, padT = compact ? 12 : 22, padB = compact ? 10 : 26;
+
+    function size() { W = canvas.clientWidth; H = canvas.clientHeight; canvas.width = Math.round(W * dpr); canvas.height = Math.round(H * dpr); ctx.setTransform(dpr, 0, 0, dpr, 0, 0); layout(); }
+    root.addEventListener('resize', size);
+
+    // ---- data ----
+    function apply(d) {
+      data = d;
+      var seen = {}, now = performance.now();
+      d.blocks.forEach(function (b) {
+        seen[b.hash] = 1;
+        var e = byHash[b.hash];
+        if (e) { e.chain = !!b.chain; e.color = b.color || 'pending'; e.locked = !!b.locked; e.final = !!b.final; e.shards = b.shards || []; e.proven = !!b.proven; e.blue = b.blue_score; e.daa = b.daa; return; }
+        e = { hash: b.hash, ts: b.ts, blue: b.blue_score, daa: b.daa, parents: b.parents || [], chain: !!b.chain, color: b.color || 'pending', miner: b.miner || '?', locked: !!b.locked, final: !!b.final, shards: b.shards || [], proven: !!b.proven, born: now, x: 0, y: 0 };
+        byHash[b.hash] = e; blocks.push(e);
+      });
+      var cut = vnow() - windowS * 1000 - 20000;
+      blocks = blocks.filter(function (b) { if (b.ts < cut && !seen[b.hash]) { delete byHash[b.hash]; return false; } return true; });
+      blocks.sort(function (a, b) { return a.ts - b.ts; });
+      cps = (d.finality && d.finality.checkpoints) || [];
+      layout();
+    }
+    function layout() {
+      // lanes: miners of the visible window ordered by blocks, as many as fit at 22 px, the rest in one "others" lane
+      var vis = vnow() - windowS * 1000, count = {};
+      blocks.forEach(function (b) { if (b.ts >= vis) count[b.miner] = (count[b.miner] || 0) + 1; });
+      var ids = Object.keys(count).sort(function (a, b) { return count[b] - count[a] || (a < b ? -1 : 1); });
+      var usable = H - padT - padB, laneH = compact ? 26 : 22, maxLanes = Math.max(2, Math.floor(usable / laneH));
+      var shown = ids.length > maxLanes ? ids.slice(0, maxLanes - 1) : ids;
+      lanes = shown.slice(); if (ids.length > shown.length) lanes.push('others');
+      laneOf = {}; shown.forEach(function (id, i) { laneOf[id] = i; });
+    }
+    function laneY(b) { var i = b.miner in laneOf ? laneOf[b.miner] : lanes.length - 1; var n = Math.max(1, lanes.length); return padT + (i + 0.5) * ((H - padT - padB) / n); }
+    function xOf(ts) { return padL + (W - padL - padR) * (1 - (vnow() - ts) / (windowS * 1000)); }
+
+    // the host can feed replies itself (poll: false); the same path the fetch takes
+    function push(d) {
+      if (!d || !d.ok || !d.state || !d.blocks) { setState('failed', 'live feed unavailable'); return; }
+      failures = 0;
+      if (d.state.stale) setState('stale', 'observer offline, last update ' + (d.state.age_s !== null && d.state.age_s !== undefined ? fmtAge(d.state.age_s) + ' ago' : 'unknown'));
+      else setState('live', null);
+      apply(d); if (opts.onData) opts.onData(d); kick();
+    }
+    function poll() {
+      if (opts.poll === false || document.hidden) return;
+      var u = (opts.url || '/api/live') + '?window=' + windowS;
+      fetch(u, { cache: 'no-store' }).then(function (r) { if (!r.ok) throw new Error('HTTP ' + r.status); return r.json(); }).then(function (d) {
+        if (!d || !d.ok || !d.state || !d.blocks) throw new Error('bad reply');
+        failures = 0;
+        if (d.state.stale) { setState('stale', 'observer offline, last update ' + (d.state.age_s !== null && d.state.age_s !== undefined ? fmtAge(d.state.age_s) + ' ago' : 'unknown')); }
+        else setState('live', null);
+        apply(d); if (opts.onData) opts.onData(d);
+        kick();
+      }).catch(function () { failures++; if (failures >= 2) setState('failed', 'live feed unavailable'); });
+    }
+    function setState(s, r) { if (s === state && r === reason) return; state = s; reason = r; if (opts.onState) opts.onState(s, r); }
+
+    // ---- drawing ----
+    function draw(t) {
+      if (!W || !H) return;
+      var dt = lastT ? Math.min(50, t - lastT) : 16; lastT = t;
+      ctx.clearRect(0, 0, W, H);
+      var vis = vnow() - windowS * 1000, n = Math.max(1, lanes.length), lh = (H - padT - padB) / n;
+      // lane rails and labels
+      ctx.lineWidth = 1;
+      for (var i = 0; i < n; i++) {
+        var y = padT + (i + 0.5) * lh;
+        ctx.strokeStyle = rgba(COL.line, 0.9); ctx.beginPath(); ctx.moveTo(padL, y); ctx.lineTo(W - padR, y); ctx.stroke();
+        if (!compact) { var mineLane = isMine && typeof opts.mine === 'string' && lanes[i] === opts.mine; ctx.fillStyle = mineLane ? COL.molten : COL.ash; ctx.font = (mineLane ? '500' : '400') + ' 10px IBM Plex Mono, monospace'; ctx.textAlign = 'left'; ctx.textBaseline = 'middle'; ctx.fillText(mineLane ? 'you' : lanes[i] === 'others' ? 'others' : String(lanes[i]).slice(0, 8), 6, y); }
+      }
+      // checkpoint bands at their blue score (x from the chain block carrying that score, else the nearest)
+      cps.forEach(function (c) {
+        var ref = null, best = Infinity;
+        for (var k = blocks.length - 1; k >= 0; k--) { var b = blocks[k]; if (b.blue === null || b.blue === undefined) continue; var dd = Math.abs(b.blue - c.blue_score); if (dd < best) { best = dd; ref = b; } }
+        if (!ref || best > 3 || ref.ts < vis) return;
+        var x = xOf(ref.ts), locked = c.state === 'locked';
+        ctx.strokeStyle = rgba(COL.ember, locked ? 0.55 : 0.3); ctx.lineWidth = locked ? 1.5 : 1; ctx.setLineDash(locked ? [] : [4, 6]);
+        ctx.beginPath(); ctx.moveTo(x, padT - 6); ctx.lineTo(x, H - padB + 6); ctx.stroke(); ctx.setLineDash([]);
+        if (!compact) { ctx.fillStyle = rgba(COL.ember, 0.9); ctx.font = '500 10px IBM Plex Mono, monospace'; ctx.textAlign = 'center'; ctx.textBaseline = 'alphabetic'; ctx.fillText((locked ? 'locked ' : 'pending ') + (c.fraction_total !== null && c.fraction_total !== undefined ? Math.round(c.fraction_total * 100) + '%' : ''), x, H - 8); }
+      });
+      // positions
+      blocks.forEach(function (b) { b.x = xOf(b.ts); b.y = laneY(b); b.on = b.ts >= vis && b.x >= padL - 10; });
+      // edges: merge edges thin, chain-to-chain heavier; the chain as one glowing path
+      blocks.forEach(function (b) {
+        if (!b.on) return;
+        b.parents.forEach(function (h) {
+          var p = byHash[h]; if (!p || !p.on) return;
+          var chainEdge = b.chain && p.chain;
+          ctx.strokeStyle = chainEdge ? rgba(COL.ember, 0.75) : rgba(COL.ash, b.color === 'red' ? 0.12 : 0.22);
+          ctx.lineWidth = chainEdge ? 2 : 1;
+          ctx.beginPath(); ctx.moveTo(b.x, b.y); var mx = (b.x + p.x) / 2; ctx.bezierCurveTo(mx, b.y, mx, p.y, p.x, p.y); ctx.stroke();
+          if (chainEdge) { ctx.strokeStyle = rgba(COL.ember, 0.18); ctx.lineWidth = 7; ctx.beginPath(); ctx.moveTo(b.x, b.y); ctx.bezierCurveTo(mx, b.y, mx, p.y, p.x, p.y); ctx.stroke(); }
+        });
+      });
+      // blocks
+      var S = compact ? 9 : 8, now = performance.now();
+      blocks.forEach(function (b) {
+        if (!b.on) return;
+        var age = now - b.born, glow = age < 1600 ? 1 - age / 1600 : 0, ex = b.color === 'red';
+        var r = b.chain ? S + 1 : S;
+        if (glow > 0) { var g = ctx.createRadialGradient(b.x, b.y, 0, b.x, b.y, r * 3); g.addColorStop(0, rgba(COL.ember, 0.4 * glow)); g.addColorStop(1, rgba(COL.ember, 0)); ctx.fillStyle = g; ctx.beginPath(); ctx.arc(b.x, b.y, r * 3, 0, Math.PI * 2); ctx.fill(); }
+        ctx.globalAlpha = ex ? 0.45 : 1;
+        // fill: proven = ember, otherwise the row surface; outline: included (blue or chain) = ember, pending = grey, excluded = dim
+        var proving = !b.proven && b.shards.some(function (s) { return s.state === 'proving' || s.state === 'verified' || s.state === 'paid'; });
+        ctx.beginPath(); rr(b.x - r, b.y - r, 2 * r, 2 * r, 3);
+        ctx.fillStyle = b.proven ? COL.ember : COL.obsidian; ctx.fill();
+        ctx.lineWidth = b.chain ? 2 : 1.5;
+        // chain blocks in ember (the path), included blocks lit in bone, pending in ash, excluded dim
+        ctx.strokeStyle = b.proven ? COL.ember : proving ? COL.molten : b.chain ? rgba(COL.ember, 0.9) : b.color === 'blue' ? rgba(COL.bone, 0.8) : ex ? rgba(COL.ash, 0.5) : rgba(COL.ash, 0.75);
+        ctx.stroke();
+        if (b.locked) { ctx.strokeStyle = rgba(COL.ember, 0.8 + 0.2 * Math.sin(t / 350)); ctx.lineWidth = 2; ctx.beginPath(); ctx.arc(b.x, b.y, r * 1.9, 0, Math.PI * 2); ctx.stroke(); }
+        if (isMine && isMine(b)) { ctx.strokeStyle = rgba(COL.molten, 0.9); ctx.lineWidth = 1.5; ctx.beginPath(); ctx.arc(b.x, b.y, r * 1.5, 0, Math.PI * 2); ctx.stroke(); }
+        ctx.globalAlpha = 1;
+      });
+      // hover or pinned ring
+      var f = pinned || hover; if (f && f.on) { ctx.strokeStyle = COL.bone; ctx.lineWidth = 1; ctx.setLineDash([2, 3]); ctx.beginPath(); ctx.arc(f.x, f.y, S * 2.4, 0, Math.PI * 2); ctx.stroke(); ctx.setLineDash([]); }
+      // axis in DAA at the left and right edges, and the lock line label
+      if (!compact) {
+        ctx.fillStyle = COL.ash; ctx.font = '400 10px IBM Plex Mono, monospace'; ctx.textBaseline = 'alphabetic';
+        var first = null, last = null; blocks.forEach(function (b) { if (!b.on) return; if (!first || b.ts < first.ts) first = b; if (!last || b.ts > last.ts) last = b; });
+        if (first && last) { ctx.textAlign = 'left'; ctx.fillText('daa ' + fmt(first.daa), padL, padT - 8); ctx.textAlign = 'right'; ctx.fillText('daa ' + fmt(last.daa) + (paused ? '  paused' : ''), W - padR, padT - 8); }
+      }
+      if (paused) { ctx.fillStyle = rgba(COL.obsidian, 0.0); }
+    }
+    function rr(x, y, w, h, r) { ctx.moveTo(x + r, y); ctx.arcTo(x + w, y, x + w, y + h, r); ctx.arcTo(x + w, y + h, x, y + h, r); ctx.arcTo(x, y + h, x, y, r); ctx.arcTo(x, y, x + w, y, r); ctx.closePath(); }
+
+    function frame(t) { if (!running) return; if (!paused) draw(t); if (reduce || document.hidden || !inView) { running = false; return; } requestAnimationFrame(frame); }
+    function start() { if (running) return; running = true; requestAnimationFrame(frame); }
+    function kick() { if (!running) requestAnimationFrame(function (t) { draw(t); if (!reduce && !document.hidden && inView) start(); }); }
+
+    // ---- interaction ----
+    function hit(ev) {
+      var rect = canvas.getBoundingClientRect(), px = ev.clientX - rect.left, py = ev.clientY - rect.top, best = null, bd = 14 * 14;
+      blocks.forEach(function (b) { if (!b.on) return; var dx = b.x - px, dy = b.y - py, d = dx * dx + dy * dy; if (d < bd) { bd = d; best = b; } });
+      return best;
+    }
+    function words(b) {
+      var state = b.locked ? 'locked checkpoint' : b.proven ? 'proven' : b.chain ? 'included, selected chain' : b.color === 'blue' ? 'included' : b.color === 'red' ? 'excluded' : 'pending';
+      var sh = b.shards.length ? b.shards.map(function (s) { return s.state; }).join(', ') : 'no shard plan yet';
+      return { title: b.hash + '  ' + state, lines: [(isMine && isMine(b) ? 'your block, miner ' : 'miner ') + b.miner + (b.miner in laneOf ? '' : ' (others lane)'), 'blue score ' + fmt(b.blue) + '  daa ' + fmt(b.daa), b.parents.length + (b.parents.length === 1 ? ' parent' : ' parents'), 'proof: ' + sh + (b.final ? '  final' : '')] };
+    }
+    var tip = opts.tooltip || null;
+    function showTip(b, ev) {
+      if (!tip) return;
+      if (!b) { tip.hidden = true; return; }
+      var w = words(b); tip.hidden = false; tip.innerHTML = '<b>' + w.title + '</b>' + w.lines.map(function (l) { return '<span>' + l + '</span>'; }).join('');
+      var rect = canvas.getBoundingClientRect(); var x = Math.min(rect.width - tip.offsetWidth - 8, Math.max(8, b.x + 12)), y = Math.max(8, b.y - tip.offsetHeight - 10); if (y < 8) y = b.y + 14;
+      tip.style.transform = 'translate(' + Math.round(x) + 'px,' + Math.round(y) + 'px)';
+    }
+    canvas.addEventListener('mousemove', function (ev) { hover = hit(ev); canvas.style.cursor = hover ? 'pointer' : 'default'; if (!pinned) showTip(hover, ev); kick(); });
+    canvas.addEventListener('mouseleave', function () { hover = null; if (!pinned) showTip(null); kick(); });
+    canvas.addEventListener('click', function (ev) { engage(true); var b = hit(ev); pinned = (pinned && b && pinned.hash === b.hash) ? null : b; showTip(pinned || hover); kick(); });
+    // the wheel is never captured by default (6 Oct 2026, the owner: scrolling past the scene zoomed it): the page scrolls through the
+    // scene; zoom takes ctrl or cmd with the wheel, a pinch, or a click into the scene, which engages it (opts.chip shows
+    // "scroll to zoom, Esc to release"); Escape, a click outside or leaving the scene releases it
+    var engaged = false, chip = opts.chip || null;
+    function engage(on) { if (on === engaged) return; engaged = on; canvas.classList.toggle('engaged', on); if (chip) chip.hidden = !on; if (opts.onEngage) opts.onEngage(on); }
+    canvas.addEventListener('wheel', function (ev) {
+      var zoomKey = ev.ctrlKey || ev.metaKey;
+      if (!zoomKey && !engaged) return; // a plain wheel or a two-finger scroll passes through to the page
+      if (Math.abs(ev.deltaY) < 1) return;
+      ev.preventDefault(); zoom(ev.deltaY > 0 ? 1.15 : 1 / 1.15);
+    }, { passive: false });
+    document.addEventListener('keydown', function (ev) { if (ev.key === 'Escape' && engaged) engage(false); });
+    document.addEventListener('pointerdown', function (ev) { if (engaged && !canvas.contains(ev.target) && !(chip && chip.contains(ev.target))) engage(false); });
+    var pinch = null;
+    canvas.addEventListener('touchstart', function (ev) { if (ev.touches.length === 2) pinch = dist(ev.touches); }, { passive: true });
+    canvas.addEventListener('touchmove', function (ev) { if (ev.touches.length === 2 && pinch) { var d = dist(ev.touches); if (Math.abs(d - pinch) > 12) { zoom(d > pinch ? 1 / 1.1 : 1.1); pinch = d; } } }, { passive: true });
+    canvas.addEventListener('touchend', function () { pinch = null; }, { passive: true });
+    function dist(t) { var dx = t[0].clientX - t[1].clientX, dy = t[0].clientY - t[1].clientY; return Math.sqrt(dx * dx + dy * dy); }
+    function zoom(f) { var w = Math.round(Math.max(30, Math.min(300, windowS * f))); if (w === windowS) return; windowS = w; layout(); if (opts.onWindow) opts.onWindow(w); poll(); kick(); }
+    function setPaused(p) { paused = !!p; if (paused) { offsetMs = 0; pausedAt = Date.now(); } else { offsetMs = 0; } if (opts.pauseButton) { opts.pauseButton.setAttribute('aria-pressed', paused ? 'true' : 'false'); opts.pauseButton.textContent = paused ? 'Resume' : 'Pause'; } kick(); }
+    var pausedAt = 0;
+    if (opts.pauseButton) opts.pauseButton.addEventListener('click', function () { setPaused(!paused); });
+    // while paused the clock stops: offsetMs grows so the scene holds still but keeps its blocks
+    setInterval(function () { if (paused) offsetMs = Date.now() - pausedAt; }, 250);
+
+    if ('IntersectionObserver' in root) { new IntersectionObserver(function (es) { es.forEach(function (e) { inView = e.isIntersecting; if (inView) kick(); }); }, { threshold: 0.05 }).observe(canvas); }
+    document.addEventListener('visibilitychange', function () { if (!document.hidden) { poll(); kick(); } });
+    if (root.matchMedia) { try { root.matchMedia('(prefers-color-scheme: dark)').addEventListener('change', function () { readTheme(); kick(); }); } catch (e) { } }
+    new MutationObserver(function () { readTheme(); kick(); }).observe(document.documentElement, { attributes: true, attributeFilter: ['data-theme'] });
+
+    readTheme(); size(); if (opts.poll !== false) { poll(); setInterval(poll, 2000); } kick();
+    return { push: push, setPaused: setPaused, zoom: zoom, engage: engage, getWindow: function () { return windowS; }, getState: function () { return { state: state, reason: reason }; }, redraw: kick, words: words };
+  }
+  root.IgneumDag = { mount: mount };
+})(window);
diff --git a/site/live.html b/site/live.html
index 7ef7e272a..586a6630e 100644
--- a/site/live.html
+++ b/site/live.html
@@ -31,9 +31,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -45,83 +46,26 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--line-2:#3A3A42;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;--ember-ink:#0C0C0E;
-/* one system for every page: container, gutter, section rhythm, card and tile boxes, heading scale (same tokens as the homepage) */
+/* page block; tokens, type and components are in /site.css */
+.scene{position:relative}.scene canvas{width:100%;height:420px;border-radius:var(--r-row);background:var(--row);border:1px solid var(--line);display:block}@media (max-width:700px){.scene canvas{height:300px}}
+.tip{position:absolute;left:0;top:0;pointer-events:none;background:var(--graphite);border:1px solid var(--line-2);border-radius:var(--r-row);padding:10px 12px;font:400 12px/1.5 var(--f-mono);color:var(--ink-2);display:flex;flex-direction:column;gap:2px;max-width:320px;box-shadow:0 14px 40px var(--shadow)}.tip b{color:var(--bone);font-weight:500;overflow-wrap:anywhere}.tip[hidden]{display:none}
+.scene-foot{display:flex;flex-wrap:wrap;justify-content:space-between;gap:var(--s-3);align-items:flex-start;margin-top:var(--s-4)}
 --max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
 --card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
 --fs-hero:clamp(40px,7vw,76px);--fs-h1:clamp(32px,5.5vw,56px);--fs-h2:clamp(28px,4.2vw,44px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px)}
-*{box-sizing:border-box}
-html{scroll-behavior:smooth}
-body{margin:0;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:17px;line-height:1.55;-webkit-font-smoothing:antialiased;overflow-x:hidden}
-a{color:inherit;text-decoration:none}
-a:hover{color:var(--molten)}
 a:focus-visible,button:focus-visible{outline:2px solid var(--ember);outline-offset:3px;border-radius:6px}
 img,svg,canvas{max-width:100%}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
 .mono{font-family:var(--f-mono)}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
 h1,h2,h3{font-family:var(--f-display);margin:0;line-height:1.08;text-wrap:balance}
-h1{font-weight:900;font-size:var(--fs-h1);letter-spacing:-.01em}
-h2{font-weight:700;font-size:var(--fs-h3)}
-p{margin:0}
-.btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;min-height:48px;padding:12px 22px;border-radius:10px;font-weight:600;font-size:16px;border:1px solid var(--line-2);color:var(--bone);background:transparent;cursor:pointer}
-.btn.primary{background:var(--ember);color:var(--ember-ink);border-color:var(--ember)}
 .btn.primary:hover{background:#FF6A2B;border-color:#FF6A2B;color:var(--ember-ink)}
-.card{background:var(--graphite);border:1px solid var(--line);border-radius:var(--card-r);padding:var(--card-pad);min-width:0}
-
 /* nav and footer: shared, see site/partials */
-
 /* page */
 .head{padding-block:var(--head) var(--gap);display:flex;flex-direction:column;gap:14px}
 .head p{color:var(--ink-2);max-width:60ch;font-size:16px}
@@ -135,46 +79,35 @@ p{margin:0}
 .cell .v.name{font-family:var(--f-mono);font-size:15px;font-weight:500}
 .cell .s{font-family:var(--f-mono);font-size:12px;color:var(--ash);text-wrap:balance}
 .cell.status .v{display:flex;align-items:center;gap:10px}
-.dot{width:10px;height:10px;border-radius:50%;background:var(--molten);display:inline-block;flex:0 0 10px;animation:pulse 2s ease-in-out infinite}
 .off .dot{background:var(--ash);animation:none}
 .off .cell.status .v{color:var(--ash)}
 .on .cell.status .v{color:var(--molten)}
-@keyframes pulse{0%,100%{box-shadow:0 0 0 0 rgba(255,179,92,.5)}50%{box-shadow:0 0 0 8px rgba(255,179,92,0)}}
 @media (prefers-reduced-motion:reduce){.dot{animation:none}}
-
-.viz-head{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:center;gap:10px 20px;margin-bottom:12px}
-.viz-stats{display:flex;flex-wrap:wrap;gap:14px 18px;font-size:12px;color:var(--ash)}
-.viz-stats b{color:var(--bone);font-weight:500;font-variant-numeric:tabular-nums}
 #dag{display:block;width:100%;height:calc(clamp(240px,38vw,380px) + 18px + 64px);border-radius:12px;background:var(--obsidian);touch-action:pan-y}
 @media (max-width:640px){#dag{height:calc(clamp(240px,38vw,380px) + 18px + 50px)}}
-.legend{display:flex;flex-direction:column;gap:8px;margin-top:16px;font-size:13px;color:var(--ink-2)}
 .legend div{display:flex;flex-wrap:wrap;align-items:center;gap:6px 10px}
 .legend .lk{font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);min-width:64px}
-.legend span{display:inline-flex;align-items:center;gap:6px;white-space:nowrap}
 .legend span.txt{white-space:normal;display:inline;color:var(--ash)}
-.sw{width:14px;height:14px;border-radius:4px;display:inline-block}
-
 .two{display:grid;gap:var(--gap);grid-template-columns:1fr;margin-top:var(--gap)}
+@media (min-width:900px){.two{grid-template-columns:1fr 1fr}}
 @media (min-width:900px){.two{grid-template-columns:1.1fr .9fr}}
-.tbl{overflow-x:auto;margin-top:12px;-webkit-overflow-scrolling:touch}
-table{border-collapse:collapse;width:100%;font-size:14px}
-th,td{padding:10px 10px;text-align:left;border-bottom:1px solid var(--line);white-space:nowrap}
-th{font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);font-weight:500}
 td.n{font-variant-numeric:tabular-nums;text-align:right}th.n{text-align:right}
-tr:last-child td{border-bottom:0}
 .id{font-family:var(--f-mono);color:var(--molten)}
 .bar{height:6px;border-radius:3px;background:var(--line);overflow:hidden;min-width:60px}
 .bar i{display:block;height:100%;background:var(--ember)}
 .feed{display:flex;flex-direction:column;margin-top:12px;font-family:var(--f-mono);font-size:13px;color:var(--ink-2)}
 .feed div{display:flex;justify-content:space-between;gap:12px;border-bottom:1px solid var(--line);padding:9px 0;align-items:baseline}
+.feed div>span:first-child{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;min-width:0}
+.lanes{display:flex;flex-direction:column;margin-top:12px}
+.lane{display:grid;grid-template-columns:84px minmax(0,1fr) 72px 64px;gap:12px;align-items:center;padding:8px 0;border-bottom:1px solid var(--line);font-family:var(--f-mono);font-size:13px;color:var(--ink-2)}
+.lane:last-child{border-bottom:0}
+.lane .n{text-align:right;white-space:nowrap}.lane .t{color:var(--ash);font-size:12px;text-align:right;white-space:nowrap}
+@media (max-width:480px){.lane{grid-template-columns:76px minmax(0,1fr) 60px}.lane .t{display:none}}
 .feed div:last-child{border-bottom:0}
 .feed .t{color:var(--ash);flex:0 0 auto;font-size:12px}
 .feed .k{color:var(--molten)}
-.empty{color:var(--ash);font-size:14px;padding:12px 0}
 #spark{display:block;width:100%;height:120px;border-radius:12px;background:var(--obsidian);margin-top:12px}
-.note{font-size:13px;color:var(--ash);margin-top:14px}
 main{padding-bottom:var(--sec)}
-.foot{margin-top:0}
 </style>
 </head>
 <body class="off">
@@ -184,10 +117,9 @@ main{padding-bottom:var(--sec)}
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live" aria-current="page">Live devnet</a>
@@ -196,30 +128,42 @@ main{padding-bottom:var(--sec)}
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
 
 <main id="main" class="wrap">
   <div class="head">
-    <div class="eyebrow">devnet v0</div>
+    <div class="eyebrow">live devnet</div>
     <h1>Live devnet</h1>
     <p>A node is read every two seconds. Every block below is real: its parents, its miner, whether it sits on the selected chain, and whether it is a locked checkpoint. A checkpoint locks when the finality rule's quorum signs it. Once the proving layer is activated, every chain block's shards show as they are planned, proven and paid.</p>
-    <p>Fees: the devnet meters with its prototype table until DAA score 210,000; from there the adopted table applies (300 pgas per transaction, 30,000-pgas shards, floors of 100 gwei per gas and 10,000 gwei per pgas) and the provers' program carries both.</p>
+    <p>Fees: from DAA score 210,000 (the chain's block-time clock, about one step a second) the adopted fee table applies: 300 proving gas per transaction, 30,000-gas shards, floors of 100 gwei per gas and 10,000 gwei per proving gas. Before it the devnet metered with its prototype table, and the provers' program carries both.</p>
   </div>
 
   <div class="strip" aria-live="polite">
@@ -229,37 +173,38 @@ main{padding-bottom:var(--sec)}
     <div class="cell"><div class="k">Blue score</div><div class="v" id="st-blue">0</div><div class="s" id="st-count">0 blocks</div></div>
     <div class="cell"><div class="k">Difficulty</div><div class="v" id="st-diff">0</div><div class="s">target per block</div></div>
     <div class="cell"><div class="k">Hash rate</div><div class="v" id="st-hps">0</div><div class="s">network estimate</div></div>
-    <div class="cell"><div class="k">Identities</div><div class="v" id="st-miners">0</div><div class="s">vote keys active in 10 min, a card runs several</div></div>
+    <div class="cell"><div class="k">Identities</div><div class="v" id="st-miners">0</div><div class="s">vote keys active in 10 min; a card runs several</div></div>
     <div class="cell"><div class="k">Peers</div><div class="v" id="st-peers">0</div><div class="s" id="st-mempool">mempool 0</div></div>
   </div>
 
-  <div class="card" aria-label="Block DAG, finality and proving, live">
+  <div class="card viz" aria-label="Block DAG, finality and proving, live">
     <div class="viz-head">
-      <div class="eyebrow"><span class="dot" style="margin-right:8px"></span>blocks, finality, proving</div>
-      <div class="viz-stats mono"><span>on screen <b id="c-screen">0</b></span><span>chain <b id="c-chain">0</b></span><span>identities <b id="c-idents">0</b></span><span>last lock <b id="c-locked">none</b></span><span>proven <b id="c-proven">pending</b></span></div>
+      <div class="state" id="dag-state"><span class="dot off"></span>connecting to the devnet observer</div>
+      <div class="viz-stats mono"><span>on screen <b id="c-screen">0</b></span><span>chain <b id="c-chain">0</b></span><span>identities <b id="c-idents">0</b></span><span>last lock <b id="c-locked">pending</b></span><span>proven <b id="c-proven">pending</b></span></div>
     </div>
-    <canvas id="dag" aria-hidden="true"></canvas>
+    <div class="scene"><canvas id="dag" aria-label="The devnet's block DAG, live: blocks by time and miner lane, parent edges, the selected chain, checkpoint bands with their lock weight, proofs filling blocks as segments are paid"></canvas><div class="tip" id="dag-tip" hidden></div><div class="chip-zoom" id="dag-chip" hidden><span class="dot live"></span>scroll to zoom, Esc to release</div></div>
     <div class="legend">
-      <div><span class="lk">blocks</span><span><i class="sw" style="background:var(--ember);border:1.5px solid #5CB8FF"></i>chain</span><span><i class="sw" style="background:rgba(92,184,255,.7);border:1.5px solid #5CB8FF"></i>included, paid</span><span><i class="sw" style="border:1.5px solid var(--ash)"></i>pending</span><span><i class="sw" style="border:1.5px solid rgba(154,154,158,.6);background:linear-gradient(45deg,transparent 44%,var(--ash) 44%,var(--ash) 56%,transparent 56%) center/8px 8px no-repeat"></i>excluded</span><span><i class="sw" style="border:2px solid var(--molten);box-shadow:0 0 8px rgba(255,179,92,.7)"></i>just arrived</span><span><i class="sw" style="width:22px;height:0;border-top:2px solid var(--ember)"></i>selected chain</span><span class="txt">one lane per miner, colour from its id; hover a block, or tap it to keep its details up</span></div>
-      <div><span class="lk">finality</span><span><i class="sw" style="width:22px;height:10px;background:rgba(242,84,27,.22);border-radius:2px"></i>final</span><span><i class="sw" style="width:3px;height:12px;background:var(--molten);border-radius:1px"></i>locked checkpoint</span><span><i class="sw" style="width:22px;height:10px;background:rgba(154,154,158,.10);border:1px solid rgba(154,154,158,.3);border-radius:2px"></i>proposed</span><span class="txt">reads "paused" whenever under two thirds of the weight is signing</span></div>
-      <div><span class="lk">proving</span><span><i class="sw" style="width:12px;height:9px;border:1px solid rgba(154,154,158,.55);border-radius:2px"></i>shard planned</span><span><i class="sw" style="width:12px;height:9px;border:1px solid var(--molten);background:rgba(255,179,92,.25);border-radius:2px"></i>proving</span><span><i class="sw" style="width:12px;height:9px;background:#3FD39A;border-radius:2px"></i>verified, prover colour</span><span><i class="sw" style="width:12px;height:9px;background:#3FD39A;border-radius:2px;position:relative"><i style="position:absolute;left:3px;top:1px;width:3px;height:5px;border:solid #0C0C0E;border-width:0 1.5px 1.5px 0;transform:rotate(45deg)"></i></i>paid</span><span><i class="sw" style="width:0;height:12px;border-left:1px dashed var(--molten)"></i>where proofs land behind the tip</span><span class="txt">hover a cell, or tap it to keep its details up</span></div>
+      <span><i class="sw" style="border:2px solid var(--line-2)"></i>pending</span>
+      <span><i class="sw" style="border:2px solid var(--bone)"></i>included</span><span><i class="sw" style="border:2px solid var(--ember)"></i>selected chain</span>
+      <span><i class="sw" style="border:2px solid var(--line-2);opacity:.45"></i>excluded</span>
+      <span><i class="sw" style="background:var(--ember)"></i>proven</span>
+      <span><i class="sw" style="border:3px solid var(--ember);border-radius:50%;background:transparent"></i>locked checkpoint</span>
+      <span><i class="sw" style="width:0;height:12px;border-left:2px solid var(--ember);border-radius:0"></i>finality band, locked, with its weight</span>
+      <span><i class="sw" style="width:0;height:12px;border-left:2px dashed var(--ember);border-radius:0;opacity:.5"></i>finality band, pending</span>
     </div>
+    <div class="scene-foot"><p class="note" style="margin:0"><span id="c-window">120 s of blocks on screen</span>. One lane per miner, the busiest first; the rest share the last lane. Hover or tap a block for its hash, miner, blue score, parents and proof state. Ctrl or cmd and scroll, a pinch, or a click into the scene then scroll, changes the window; the page's <code>?window=</code> fixes it.</p><button type="button" class="btn small" id="dag-pause" aria-pressed="false">Pause</button></div>
   </div>
 
   <div class="two">
     <div class="card">
-      <div class="viz-head"><h2>Miners</h2><div class="eyebrow">last 10 min</div></div>
-      <div class="tbl">
-        <table>
-          <thead><tr><th>Miner</th><th class="n">Blocks</th><th>Share</th><th>Last seen</th><th>Engine</th></tr></thead>
-          <tbody id="miners"><tr><td colspan="5" class="empty">No blocks in the last 10 minutes.</td></tr></tbody>
-        </table>
-      </div>
-      <p class="note">The short id is the first 8 hex characters of the vote key hash in each header. The engine is what the miner writes into the coinbase; the devnet miner writes nothing yet.</p>
+      <div class="viz-head"><h2>Miners</h2><div class="eyebrow" id="miners-count">last 10 min</div></div>
+      <div class="lanes" id="miners"><div class="empty">No blocks in the last 10 minutes.</div></div>
+      <p class="note" id="miners-more">Every vote key with a block in the last 10 minutes; a card runs several. The short id is the first 8 hex characters of the vote key hash in each header.</p>
     </div>
     <div class="card">
-      <div class="viz-head"><h2>Events</h2><div class="eyebrow">newest first</div></div>
+      <div class="viz-head"><h2>Events</h2><div class="eyebrow">the last five</div></div>
       <div class="feed" id="events"><div class="empty">No events yet.</div></div>
+      <p class="note" id="events-more">Checkpoint locks, miners going quiet and coming back, provers seen, as the observer records them.</p>
     </div>
   </div>
 
@@ -275,7 +220,7 @@ main{padding-bottom:var(--sec)}
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -301,9 +246,9 @@ main{padding-bottom:var(--sec)}
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -311,12 +256,26 @@ main{padding-bottom:var(--sec)}
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 
+<script src="/live-dag.js" defer></script>
 <script>
 (function(){
   var reduce=window.matchMedia('(prefers-reduced-motion: reduce)').matches;
@@ -327,304 +286,32 @@ main{padding-bottom:var(--sec)}
   // formatting
   function $(id){return document.getElementById(id);}
   function compact(n){if(n===null||n===undefined||isNaN(n))return '0';var a=Math.abs(n);if(a>=1e12)return (n/1e12).toFixed(2)+'T';if(a>=1e9)return (n/1e9).toFixed(2)+'G';if(a>=1e6)return (n/1e6).toFixed(2)+'M';if(a>=1e3)return (n/1e3).toFixed(1)+'k';return String(Math.round(n));}
-  function hashrate(n){if(n===null||n===undefined)return 'n/a';var u=['H/s','kH/s','MH/s','GH/s','TH/s'],i=0;while(n>=1000&&i<u.length-1){n/=1000;i++;}return (i?n.toFixed(1):Math.round(n))+' '+u[i];}
+  function hashrate(n){if(n===null||n===undefined)return 'pending';var u=['H/s','kH/s','MH/s','GH/s','TH/s'],i=0;while(n>=1000&&i<u.length-1){n/=1000;i++;}return (i?n.toFixed(1):Math.round(n))+' '+u[i];}
   function rel(ms){var s=Math.max(0,Math.round(ms/1000));if(s<60)return s+' s ago';var m=Math.floor(s/60);if(m<60)return m+' min ago';var h=Math.floor(m/60);if(h<24)return h+' h '+(m%60)+' min ago';return Math.floor(h/24)+' d ago';}
   function esc(s){return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');}
 
   // ---------- three strips on one time axis ----------
-  // One canvas, one requestAnimationFrame loop, newest at the right. BLOCKS (lanes: one per miner in the visible window,
-  // most blocks on top, the least active share an "others" lane; labels in a left gutter; edges under blocks), then a
-  // FINALITY bar, then a PROVING strip with one cell per shard of every chain block. All three share px-per-second.
-  var c=$('dag'),x=c.getContext('2d'),W=0,H=0,BH=0,S=22,G=78,narrow=false,level=0,maxLanes=8,FIN_H=18,PROV_H=64;
-  var blocks=[],byHash={},miners={},lanes=[],laneN=1,othersN=0,fin=null,prov=null,idents=0;
-  var LV=[{S:22,s:14,pps:40,npps:14},{S:16,s:12,pps:26,npps:10},{S:12,s:10,pps:18,npps:8}];
-  var pxPerSec=40,targetPx=40,bps=0,live=false,serverNow=0,serverAt=0,frozenAt=null,note='';
-  // ?window=N (30 to 300 s): a fixed long view for diagnosis, the API returns the same span; the default stays the adaptive scale
+  // ---------- the DAG: the shared module (/live-dag.js), fed by this page's poll ----------
   var fixedWindow=Math.max(0,Math.min(300,Number(new URLSearchParams(location.search).get('window'))||0));if(fixedWindow&&fixedWindow<30)fixedWindow=30;
-  var running=false,needSize=true,inView=true,ptrX=-1,ptrY=-1,laneLast=[],laneRun=[],lagNote='';
-  // pin: a tapped or clicked block (i = -1) or shard cell (i = shard index). It stays until a tap or click lands elsewhere,
-  // Escape, or the block leaves the strip (then pinFade holds it for a 200 ms fade). Hover never touches it.
-  var pin=null,pinFade=null,PIN_FADE=200,closeRect=null,panelRect=null,down=null,TAP_SLOP=10;
-  var TOP=20,BOT=12;
-  // 12 hues that sit beside ember on obsidian; the index comes from the short id, so a miner (or a prover) keeps its colour across reloads
-  var PAL=['#5CB8FF','#3FD39A','#F5C542','#C49BFF','#FF7AA8','#8FD15F','#FFB08A','#6F8CFF','#D9E25A','#FF8FD6','#4FD8D8','#E0A96D'];
-  function colour(id){var v=0;for(var i=0;i<id.length;i++)v=(v*33+id.charCodeAt(i))>>>0;return PAL[v%PAL.length];}
-  function jitter(h){var v=0;for(var i=0;i<8;i++)v=(v*31+h.charCodeAt(i))%1000;return v/1000-0.5;}
-  function vnow(){if(frozenAt!==null)return frozenAt;return serverNow+(performance.now()-serverAt);}
-  function laneY(l){var u=BH-TOP-BOT,p=u/Math.max(1,laneN);return TOP+(l+0.5)*p;}
-  function size(){
-    needSize=false;W=c.clientWidth;H=c.clientHeight;if(!W||!H)return;
-    c.width=Math.round(W*dpr);c.height=Math.round(H*dpr);x.setTransform(dpr,0,0,dpr,0,0);
-    narrow=W<560;G=narrow?36:80;PROV_H=narrow?50:64;BH=H-FIN_H-PROV_H;applyLevel();
-    for(var id in miners)miners[id].y=laneY(miners[id].lane); // a resize is a layout change: lanes snap, nothing eases from a stale position
-  }
-  function applyLevel(){
-    var L=LV[level];S=narrow?L.s:L.S;targetPx=narrow?L.npps:L.pps;
-    if(fixedWindow){targetPx=(W-G)/fixedWindow;S=fixedWindow>120?(narrow?8:10):(narrow?L.s:LV[1].S);}
-    maxLanes=Math.max(2,Math.min(14,Math.floor((BH-TOP-BOT)/(S*1.7))));
-    layoutLanes();
-  }
-  function pickLevel(){
-    // projected blocks on screen at the base scale drives the step, with hysteresis so it never flickers
-    var proj=bps*(W-G)/(narrow?LV[0].npps:LV[0].pps),up=[48,110],down=[36,85],next=level;
-    if(level<2&&proj>up[level])next=level+1;else if(level>0&&proj<down[level-1])next=level-1;
-    if(fixedWindow)next=fixedWindow>120?2:1;
-    if(next!==level){level=next;applyLevel();}
-  }
-  function layoutLanes(){
-    // rank miners by blocks in the window; one lane each, the overflow shares the last lane with a count
-    var ids=Object.keys(miners);
-    ids.sort(function(a,b){return miners[b].n-miners[a].n||(a<b?-1:1);});
-    laneN=Math.max(1,Math.min(maxLanes,ids.length));
-    othersN=ids.length>laneN?ids.length-(laneN-1):0;
-    lanes=[];
-    ids.forEach(function(id,i){var m=miners[id],l=othersN&&i>=laneN-1?laneN-1:i;m.lane=l;if(m.y===undefined&&BH>0)m.y=laneY(l);if(!othersN||l<laneN-1)lanes[l]=m;});
-    while(laneLast.length<laneN){laneLast.push(0);laneRun.push(0);}
-  }
-  function ingest(d){
-    if(needSize)size(); // the first poll can land before the first frame; the counts below need the canvas width
-    var now=performance.now();serverNow=new Date(d.now).getTime();serverAt=now;
-    fin=d.finality||null;prov=d.proving||null;idents=d.state.miners_10m||0;
-    d.blocks.forEach(function(b){var e=byHash[b.hash];
-      if(e){e.chain=b.chain;e.locked=!!b.locked;e.final=!!b.final;e.color=b.color||'pending';e.shards=b.shards||[];e.proven=!!b.proven;return;}
-      e={hash:b.hash,ts:b.ts,blue_score:b.blue_score,daa:b.daa,parents:b.parents||[],chain:b.chain,color:b.color||'pending',miner:b.miner||'?',born:now,j:jitter(b.hash),locked:!!b.locked,final:!!b.final,shards:b.shards||[],proven:!!b.proven,px:0,py:0,on:false};
-      byHash[b.hash]=e;blocks.push(e);});
-    // keep what the target scale will show (the scale eases toward it), plus 20 s so a scale change never drops a block early
-    var cut=vnow()-((W-G)/Math.max(2,Math.min(pxPerSec,targetPx)))*1000-20000;
-    blocks=blocks.filter(function(b){var keep=b.ts>cut;if(!keep)delete byHash[b.hash];return keep;});
-    blocks.sort(function(a,b){return a.ts-b.ts;});
-    for(var id in miners)miners[id].n=0;
-    blocks.forEach(function(b){var m=miners[b.miner];if(!m){m=miners[b.miner]={id:b.miner,n:0,col:colour(b.miner),tag:b.miner.slice(0,3),lane:0};}m.n++;});
-    for(id in miners)if(!miners[id].n)delete miners[id];
-    bps=d.state.blocks_per_second_60s||0;
-    pickLevel();layoutLanes();
-    var vis=vnow()-((W-G)/Math.max(2,targetPx))*1000,on=0,chain=0,planned=0,proven=0;
-    blocks.forEach(function(b){if(b.ts>vis){on++;if(b.chain){chain++;if(b.shards.length){planned++;if(b.proven)proven++;}}}});
-    $('c-screen').textContent=on;$('c-chain').textContent=chain;$('c-idents').textContent=idents;
-    var f=fin;$('c-locked').textContent=f&&f.latest_locked_index?('#'+f.latest_locked_index+(f.checkpoints&&f.checkpoints.length?', '+lockAge(f):'')):(f&&f.supported?'none yet':'n/a');
-    // 6 Oct 2026: proofs land a median of minutes behind the tip, so the on-screen window (proven+'/'+planned) read 0 for ever; the
-    // counter now reads the observer's 10-minute truth: chain blocks with every shard paid, of the chain blocks planned in 10 min
-    var pe=$('c-proven');if(prov&&prov.supported&&prov.active){pe.textContent=(prov.blocks_fully_proven_10m||0)+'/'+(prov.blocks_10m||0)+' in 10 min';pe.title=(prov.shards_paid_10m||0)+' shards paid in the last 10 minutes'+(prov.median_proof_lag_s?', landing a median '+Math.round(prov.median_proof_lag_s)+' s behind the tip':'')+'; '+(prov.paid_shards_total!==null&&prov.paid_shards_total!==undefined?Number(prov.paid_shards_total).toLocaleString('en-GB')+' paid on the chain so far':'');}
+  var dagCanvas=$('dag'),dag=null,lastD=null;
+  function windowWord(w){return w+' s of blocks on screen';}
+  function mountDag(){if(dag||!dagCanvas||!window.IgneumDag)return;
+    dag=IgneumDag.mount(dagCanvas,{poll:false,window:fixedWindow||120,tooltip:$('dag-tip'),chip:$('dag-chip'),pauseButton:$('dag-pause'),
+      onWindow:function(w){$('c-window').textContent=windowWord(w);},
+      onState:function(st,reason){var el=$('dag-state');if(!el)return;el.className='state '+(st==='live'?'live':st==='failed'?'bad':'');el.innerHTML='<span class="dot '+(st==='live'?'live':st==='failed'?'bad':'off')+'"></span>'+(st==='live'?'live devnet':st==='connecting'?'connecting to the devnet observer':esc(reason||'live feed unavailable'));}});
+    $('c-window').textContent=windowWord(dag.getWindow());if(lastD)dag.push(lastD);}
+  if(window.IgneumDag)mountDag();else{var ms=document.querySelector('script[src="/live-dag.js"]');if(ms)ms.addEventListener('load',mountDag);}
+  // the strip above the scene reads the chain, never the window: on screen and chain count the window and say so
+  function sceneCounters(d){
+    var w=dag?dag.getWindow():(fixedWindow||120),cut=new Date(d.now).getTime()-w*1000,on=0,chain=0;
+    d.blocks.forEach(function(b){if(b.ts>=cut){on++;if(b.chain)chain++;}});
+    $('c-screen').textContent=on;$('c-chain').textContent=chain;$('c-idents').textContent=d.state.miners_10m||0;
+    var f=d.finality;$('c-locked').textContent=f&&f.supported&&!f.active?('finality paused'+(f.latest_locked_index?', last #'+f.latest_locked_index:'')):f&&f.latest_locked_index?('#'+f.latest_locked_index+(f.checkpoints&&f.checkpoints.length?', '+lockAge(f):'')):(f&&f.supported?'none yet':'no finality');
+    var prov=d.proving,pe=$('c-proven');
+    if(prov&&prov.supported&&prov.active){pe.textContent=(prov.blocks_fully_proven_10m||0)+'/'+(prov.blocks_10m||0)+' in 10 min';pe.title=(prov.shards_paid_10m||0)+' shards paid in the last 10 minutes'+(prov.median_proof_lag_s?', landing a median '+Math.round(prov.median_proof_lag_s)+' s behind the tip':'')+'; '+(prov.paid_shards_total!==null&&prov.paid_shards_total!==undefined?Number(prov.paid_shards_total).toLocaleString('en-GB')+' paid on the chain so far':'');}
     else{pe.textContent=prov&&prov.supported?'not active':'no proving layer';pe.title='';}
-    if(!running&&!document.hidden)kick();
   }
-  function lockAge(f){var cps=f.checkpoints||[],lk=null;for(var i=cps.length-1;i>=0;i--)if(cps[i].state==='locked'){lk=cps[i];break;}
-    if(!lk||!lk.locked_at)return '';return rel(vnow()-new Date(lk.locked_at).getTime());}
-  function rrect(px,py,w,h,r){x.beginPath();x.moveTo(px+r,py);x.lineTo(px+w-r,py);x.quadraticCurveTo(px+w,py,px+w,py+r);x.lineTo(px+w,py+h-r);x.quadraticCurveTo(px+w,py+h,px+w-r,py+h);x.lineTo(px+r,py+h);x.quadraticCurveTo(px,py+h,px,py+h-r);x.lineTo(px,py+r);x.quadraticCurveTo(px,py,px+r,py);x.closePath();}
-  // a cubic with horizontal tangents; the control offset is clamped so a link across many lanes reads as a gentle S, never a loop
-  function link(a,b){var d=Math.max(S*0.6,Math.min(48,Math.abs(b.px-a.px)*0.5));x.moveTo(a.px,a.py);x.bezierCurveTo(a.px+d,a.py,b.px-d,b.py,b.px,b.py);}
-  // shard cells: a column under each chain block, shard 0 at the top; sizes from the zoom level, never wider than the block
-  function cellGeom(n){var avail=PROV_H-12,gap=2,ch=Math.min(narrow?7:9,Math.floor((avail-(n-1)*gap)/Math.max(1,n))),cw=Math.max(3,Math.min(narrow?10:12,Math.round(S*0.7),Math.round(pxPerSec*0.85)));return {ch:ch,cw:cw,gap:gap,top:BH+FIN_H+6+Math.max(0,Math.floor((avail-(n*ch+(n-1)*gap))/2))};}
-  function hitAt(qx,qy,touch){
-    // returns {b, i}: a block (i = -1) in the blocks strip, or a shard cell (i = shard index) in the proving strip.
-    // A finger is wider than a pointer: a touch gets a larger radius, the nearest target still wins; hover is unchanged
-    if(qx<0)return null;
-    if(qy<BH){var best=null,bd=S*(touch?1.3:0.9);
-      for(var i=0;i<blocks.length;i++){var b=blocks[i];if(!b.on)continue;var dx=Math.abs(b.px-qx),dy=Math.abs(b.py-qy);if(dx<bd&&dy<bd&&dx+dy<bd*1.5){best=b;bd=Math.max(dx,dy);}}
-      return best?{b:best,i:-1}:null;}
-    if(qy>=BH+FIN_H&&provOn()){var bb=null,bdx=1e9;
-      for(i=0;i<blocks.length;i++){b=blocks[i];if(!b.on||!b.chain||!b.shards.length)continue;var ddx=Math.abs(b.px-qx);if(ddx<bdx){bdx=ddx;bb=b;}}
-      if(!bb)return null;var g=cellGeom(bb.shards.length),ns=bb.shards.length;if(bdx>Math.max(g.cw,S*0.5)*(touch?1.8:1))return null;
-      var row=Math.floor((qy-g.top)/(g.ch+g.gap));
-      if(touch&&(row<0||row>=ns)&&qy>=g.top-8&&qy<=g.top+ns*(g.ch+g.gap)+8)row=Math.max(0,Math.min(ns-1,row));
-      if(row<0||row>=ns)return null;return {b:bb,i:row};}
-    return null;
-  }
-  function hover(){return ptrX<0?null:hitAt(ptrX,ptrY,false);}
-  // the pinned target while its block is still drawn; null once it has scrolled out of the strip
-  function pinned(){if(!pin)return null;var p=byHash[pin.h];return p&&p.on?{b:p,i:pin.i}:null;}
-  function same(a,b){return !!(a&&b&&a.b===b.b&&a.i===b.i);}
-  function inRect(r,qx,qy){return !!(r&&qx>=r[0]&&qx<r[0]+r[2]&&qy>=r[1]&&qy<r[1]+r[3]);}
-  function setPin(t){pin=t?{h:t.b.hash,i:t.i,b:t.b}:null;pinFade=null;if(reduce)kick();}
-  function clearPin(){if(!pin&&!pinFade)return;pin=null;pinFade=null;if(reduce)kick();}
-  // a tap or click at (qx, qy): the close control clears, the panel itself is inert, a block or cell pins (a second tap on the
-  // pinned one keeps it), anything else on the canvas clears
-  function tap(qx,qy,touch){
-    if(inRect(closeRect,qx,qy)){clearPin();return;}
-    if(inRect(panelRect,qx,qy))return;
-    var t=hitAt(qx,qy,touch);
-    if(t)setPin(t);else clearPin();
-  }
-  // the three panel lines for a target, its anchor y for the floating panel, and its border colour
-  function lines(t){var b=t.b,tcol=miners[b.miner]?miners[b.miner].col:'#3A3A42',l1,l2,l3,ay;
-    if(t.i<0){l1=b.hash.slice(0,8)+'  '+(b.locked?'locked':b.chain?'chain':b.color==='blue'?'included, paid':b.color==='red'?'excluded':'pending')+(b.chain&&b.shards.length?(b.proven?', proven':', '+b.shards.length+(b.shards.length===1?' shard':' shards')):'');l2='blue '+compact(b.blue_score)+'  daa '+compact(b.daa);l3=b.parents.length+(b.parents.length===1?' parent':' parents')+'  '+b.miner;ay=b.py;}
-    else{var sd=b.shards[t.i]||{};l1=b.hash.slice(0,8)+'  shard '+(t.i+1)+' of '+b.shards.length+'  '+(sd.state||'gone');l2='prover '+(sd.prover||'none yet')+'  lag '+(sd.lag!==null&&sd.lag!==undefined?sd.lag+' s':'n/a');l3=(sd.payout!==null&&sd.payout!==undefined?sd.payout+' IGN':'unpaid')+(sd.pgas?'  '+compact(sd.pgas)+' pgas':'');ay=BH+FIN_H+PROV_H/2;if(sd.prover)tcol=colour(sd.prover);}
-    return [l1,l2,l3,ay,tcol];}
-  function provOn(){return !!(prov&&prov.supported&&prov.active);}
-  function draw(now){
-    if(needSize)size();if(!W||!H)return;
-    pxPerSec+=(targetPx-pxPerSec)*0.06;
-    var t=vnow(),xr=W-S,i,b,m,n=blocks.length,id;
-    for(id in miners){m=miners[id];var ty=laneY(m.lane);if(m.y===undefined)m.y=ty;m.y+=(ty-m.y)*0.12;if(Math.abs(ty-m.y)<0.05)m.y=ty;}
-    for(i=0;i<laneN;i++){laneLast[i]=-1e9;laneRun[i]=0;}
-    // positions: time on x, lane on y; same-lane neighbours closer than a block are nudged up and down in a fixed sequence
-    for(i=0;i<n;i++){b=blocks[i];m=miners[b.miner];if(!m)continue;var l=m.lane;b.px=Math.min(xr,xr-(t-b.ts)*pxPerSec/1000);
-      if(b.px-laneLast[l]<S*1.25)laneRun[l]++;else laneRun[l]=0;laneLast[l]=b.px;
-      var k=laneRun[l]%3,dy=k===0?0:(k===1?1:-1)*S*0.62;b.py=m.y+dy;b.on=b.px>G-S;}
-    x.clearRect(0,0,W,H);
-    // the newest locked checkpoint on screen: its x bounds the final region of the finality bar
-    var lk=null,fx=-1;
-    for(i=0;i<n;i++){b=blocks[i];if(b.locked&&(!lk||b.ts>lk.ts))lk=b;if(b.final&&b.px>fx)fx=b.px;}
-    if(lk)fx=lk.px;
-    // lane rails
-    x.strokeStyle='rgba(42,42,48,0.75)';x.lineWidth=1;x.beginPath();for(i=0;i<laneN;i++){var y=Math.round(laneY(i))+0.5;x.moveTo(G,y);x.lineTo(W,y);}x.stroke();
-    x.save();x.beginPath();x.rect(G,0,W-G,BH);x.clip();
-    // side links: each side block to its first parent on screen, faint and short
-    x.strokeStyle='rgba(154,154,158,0.3)';x.lineWidth=1;x.beginPath();
-    for(i=0;i<n;i++){b=blocks[i];if(b.chain||!b.on)continue;var q=byHash[b.parents[0]];if(q&&q.px>G-S*2)link(q,b);}
-    x.stroke();
-    // the selected chain as one path through the chain blocks
-    x.strokeStyle=level?'rgba(242,84,27,0.6)':'rgba(242,84,27,0.85)';x.lineWidth=narrow||level?1.5:2;x.beginPath();var prev=null;
-    for(i=0;i<n;i++){b=blocks[i];if(!b.chain)continue;if(prev&&b.px>G-S*2)link(prev,b);prev=b;}
-    x.stroke();
-    // the pinned block scrolled out: let it go with a short fade instead of a snap (reduced motion: at once)
-    var pv=pinned();
-    if(pin&&!pv){pinFade=reduce?null:{b:pin.b,i:pin.i,at:now};pin=null;}
-    if(pinFade&&now-pinFade.at>=PIN_FADE)pinFade=null;
-    // hovered block (pointer devices only) and pinned block: all of their parent edges, bright
-    var hv=hover(),hb=hv?hv.b:null,pb=pv?pv.b:null;
-    if(pb&&pv.i<0){x.strokeStyle='rgba(255,179,92,0.7)';x.lineWidth=1.5;x.beginPath();for(i=0;i<pb.parents.length;i++){var pq0=byHash[pb.parents[i]];if(pq0)link(pq0,pb);}x.stroke();}
-    if(hb&&hv.i<0&&hb!==pb){x.strokeStyle='rgba(255,179,92,0.9)';x.lineWidth=1.5;x.beginPath();for(i=0;i<hb.parents.length;i++){var pq=byHash[hb.parents[i]];if(pq)link(pq,hb);}x.stroke();}
-    // blocks
-    var h=S/2,r=S*0.24,tip=null;
-    for(i=0;i<n;i++){b=blocks[i];if(!b.on)continue;m=miners[b.miner];var age=now-b.born,fl=age<900?1-age/900:0;
-      if(fl>0){var g=x.createRadialGradient(b.px,b.py,0,b.px,b.py,S*1.6);g.addColorStop(0,'rgba(255,179,92,'+(0.5*fl)+')');g.addColorStop(1,'rgba(255,179,92,0)');x.fillStyle=g;x.beginPath();x.arc(b.px,b.py,S*1.6,0,Math.PI*2);x.fill();}
-      if(b.chain){x.fillStyle='#F2541B';rrect(b.px-h,b.py-h,S,S,r);x.fill();x.strokeStyle=m?m.col:'#9A9A9E';x.lineWidth=1.5;rrect(b.px-h-1,b.py-h-1,S+2,S+2,r+1);x.stroke();tip=b;}
-      else if(b.color==='blue'){var mc=m?m.col:'#9A9A9E';x.fillStyle=mc+'B3';rrect(b.px-h,b.py-h,S,S,r);x.fill();x.strokeStyle=fl>0?'rgba(255,179,92,0.95)':mc;x.lineWidth=1.5;rrect(b.px-h,b.py-h,S,S,r);x.stroke();}
-      else{x.fillStyle='#0C0C0E';rrect(b.px-h,b.py-h,S,S,r);x.fill();x.strokeStyle=fl>0?'rgba(255,179,92,0.95)':(b.color==='red'?'rgba(154,154,158,0.6)':'rgba(154,154,158,0.85)');x.lineWidth=1.5;rrect(b.px-h,b.py-h,S,S,r);x.stroke();
-        if(b.color==='red'){x.strokeStyle='rgba(154,154,158,0.9)';x.lineWidth=1.5;x.beginPath();x.moveTo(b.px-h*0.5,b.py+h*0.5);x.lineTo(b.px+h*0.5,b.py-h*0.5);x.stroke();}}
-      if(fl>0&&b.chain){x.strokeStyle='rgba(255,179,92,'+fl+')';x.lineWidth=2;rrect(b.px-h-3,b.py-h-3,S+6,S+6,r+2);x.stroke();}
-      if(hb===b&&b!==pb){x.strokeStyle='#F4F1EC';x.lineWidth=1.5;rrect(b.px-h-3,b.py-h-3,S+6,S+6,r+2);x.stroke();}
-      // the pinned block: a molten ring with a glow, so the reader can find it as the strip moves
-      if(pb===b){x.save();x.shadowColor='rgba(255,179,92,0.8)';x.shadowBlur=8;x.strokeStyle='#FFB35C';x.lineWidth=2;rrect(b.px-h-5,b.py-h-5,S+10,S+10,r+3);x.stroke();x.restore();}}
-    x.font='500 10px IBM Plex Mono, monospace';
-    // the chain tip carries its short id; nothing else is labelled unless hovered or pinned
-    if(tip){var lt=tip.hash.slice(0,8),lw=x.measureText(lt).width,lh=11,pad=3;
-      // candidate label boxes around the tip: above-right, above-left, below-right, below-left, left, right; the first that
-      // stays inside the strip and overlaps no other on-screen block wins, so the id is never drawn over a neighbour
-      var cands=[[tip.px+h+2-lw,tip.py-h-6-lh],[tip.px-h-2-lw,tip.py-h-6-lh],[tip.px+h+2-lw,tip.py+h+4],[tip.px-h-2-lw,tip.py+h+4],[tip.px-h-6-lw,tip.py-lh/2],[tip.px+h+6,tip.py-lh/2]];
-      var pick=null,ci;for(ci=0;ci<cands.length&&!pick;ci++){var cx=cands[ci][0],cy=cands[ci][1];if(cx<G+2||cx+lw>W-2||cy<2||cy+lh>BH-2)continue;var clash=false;
-        for(var bi=0;bi<n&&!clash;bi++){var ob=blocks[bi];if(ob===tip||!ob.on)continue;if(cx-pad<ob.px+h&&cx+lw+pad>ob.px-h&&cy-pad<ob.py+h&&cy+lh+pad>ob.py-h)clash=true;}
-        if(!clash)pick=cands[ci];}
-      if(!pick)pick=cands[0];x.fillStyle='rgba(244,241,236,0.92)';x.textAlign='left';x.textBaseline='top';x.fillText(lt,Math.max(G+2,Math.min(W-2-lw,pick[0])),Math.max(2,pick[1]));x.textBaseline='alphabetic';}
-    x.restore();
-
-    // ---- FINALITY bar: regions along the same axis. Paused finality shows only the pause (R4.6.3: never 'final' while paused)
-    var y0=BH,yb=y0+3,hb2=FIN_H-6;
-    x.strokeStyle='rgba(42,42,48,0.9)';x.lineWidth=1;x.beginPath();x.moveTo(G,y0+0.5);x.lineTo(W,y0+0.5);x.moveTo(G,y0+FIN_H+0.5);x.lineTo(W,y0+FIN_H+0.5);x.stroke();
-    x.save();x.beginPath();x.rect(G,y0+1,W-G,FIN_H-1);x.clip();
-    x.font='500 10px IBM Plex Mono, monospace';x.textAlign='left';x.textBaseline='middle';
-    var ftxt=null,fcol='rgba(154,154,158,0.9)';
-    if(!fin||!fin.supported){ftxt='no finality data';}
-    else if(!fin.active){var wts=fin.weights,silent=wts&&wts.total_weight?Math.max(0,Math.round(100*(1-(wts.active_weight||0)/wts.total_weight))):null;
-      x.fillStyle='rgba(154,154,158,0.10)';x.fillRect(G,yb,W-G,hb2);ftxt='finality paused: '+(silent?silent+'% of weight silent':'not enough weight signing yet');fcol='#FFB35C';}
-    else{
-      // final: everything up to the newest locked checkpoint on screen
-      if(fx>G){x.fillStyle='rgba(242,84,27,0.22)';x.fillRect(G,yb,fx-G,hb2);}
-      // proposed: from the newest lock to the newest proposed checkpoint on screen, faint; every checkpoint a tick
-      var cps=fin.checkpoints||[],px2=-1,ci2,cb;
-      for(ci2=0;ci2<cps.length;ci2++){cb=byHash[cps[ci2].hash];if(!cb||!cb.on)continue;if(cps[ci2].state!=='locked'&&cb.px>px2)px2=cb.px;}
-      if(px2>Math.max(G,fx)){x.fillStyle='rgba(154,154,158,0.10)';x.fillRect(Math.max(G,fx),yb,px2-Math.max(G,fx),hb2);}
-      for(ci2=0;ci2<cps.length;ci2++){cb=byHash[cps[ci2].hash];if(!cb||!cb.on)continue;var lkd=cps[ci2].state==='locked';
-        x.fillStyle=lkd?'#FFB35C':'rgba(154,154,158,0.55)';x.fillRect(Math.round(cb.px)-(lkd?1:0.5),yb,lkd?2:1,hb2);}
-      if(fin.latest_locked_index){ftxt='locked #'+fin.latest_locked_index+(lockAge(fin)?', '+lockAge(fin):'');fcol='#FFB35C';}
-      else ftxt='no lock yet';
-      // the label sits beside the newest lock while that block is on screen, else at the left edge of the bar
-      if(ftxt&&lk&&fx>G){var tw0=x.measureText(ftxt).width,lx0=fx+8+tw0<W-4?fx+8:fx-8-tw0;x.fillStyle='rgba(12,12,14,0.82)';x.fillRect(lx0-3,yb,tw0+6,hb2);x.fillStyle=fcol;x.fillText(ftxt,lx0,y0+FIN_H/2);ftxt=null;}
-    }
-    if(ftxt){x.fillStyle=fcol;x.fillText(ftxt,G+8,y0+FIN_H/2);}
-    x.textBaseline='alphabetic';x.restore();
-
-    // ---- PROVING strip: one cell per shard under its chain block, and where proofs land behind the tip
-    var y1=BH+FIN_H;
-    x.save();x.beginPath();x.rect(G,y1+1,W-G,H-y1-1);x.clip();
-    x.font='500 10px IBM Plex Mono, monospace';x.textAlign='left';x.textBaseline='middle';
-    if(!provOn()){var ptxt=!prov||!prov.supported?'Proving layer: '+(prov&&prov.reason?prov.reason:'node without proving'):'Proving layer: not yet activated on this devnet; activation '+(prov.activation_daa!==null&&prov.activation_daa!==undefined?'at DAA '+prov.activation_daa.toLocaleString('en-GB')+(prov.tip_daa?' (tip '+prov.tip_daa.toLocaleString('en-GB')+')':''):'not set');
-      if(narrow)ptxt=ptxt.replace('Proving layer: ','').replace(' on this devnet','').replace(/ \(tip [^)]*\)/,'');
-      x.fillStyle='rgba(154,154,158,0.9)';
-      // a line wider than the strip breaks at its semicolon into two lines, so the phone never clips the activation height
-      if(x.measureText(ptxt).width>W-G-16&&ptxt.indexOf('; ')>0){var parts=ptxt.split('; ');x.fillText(parts[0]+';',G+8,y1+PROV_H/2-7);x.fillText(parts.slice(1).join('; '),G+8,y1+PROV_H/2+7);}
-      else x.fillText(ptxt,G+8,y1+PROV_H/2);}
-    else{
-      // the lag line: proofs land about median_proof_lag_s behind the tip
-      var lag=prov.median_proof_lag_s;
-      if(lag!==null&&lag!==undefined){var lx=Math.round(xr-lag*pxPerSec)+0.5,lagTxt=lag<1?'under 1 s':lag<120?Math.round(lag)+' s':Math.floor(lag/60)+' min '+Math.round(lag%60)+' s';
-        if(lx>G){x.strokeStyle='rgba(255,179,92,0.7)';x.lineWidth=1;x.setLineDash([3,4]);x.beginPath();x.moveTo(lx,y1+3);x.lineTo(lx,H-3);x.stroke();x.setLineDash([]);
-          var ltx=narrow?'lag '+lagTxt:'proofs land '+lagTxt+' behind the tip',ltw=x.measureText(ltx).width;x.fillStyle='#FFB35C';x.textAlign=lx+6+ltw<W-4?'left':'right';x.fillText(ltx,lx+(x.textAlign==='left'?6:-6),y1+9);x.textAlign='left';}
-        else{x.fillStyle='#FFB35C';x.fillText(narrow?'lag '+lagTxt+', off screen':'proofs land '+lagTxt+' behind the tip, left of this window',G+8,y1+9);}}
-      for(i=0;i<n;i++){b=blocks[i];if(!b.on||!b.chain||!b.shards.length)continue;var sh=b.shards,ng=cellGeom(sh.length);
-        for(var si=0;si<sh.length;si++){var sc=sh[si],cx0=Math.round(b.px-ng.cw/2),cy0=ng.top+si*(ng.ch+ng.gap),st=sc.state,pc=sc.prover?colour(sc.prover):'#9A9A9E';
-          if(st==='verified'||st==='paid'){x.fillStyle=pc;rrect(cx0,cy0,ng.cw,ng.ch,2);x.fill();
-            if(st==='paid'){x.strokeStyle='#0C0C0E';x.lineWidth=1.5;x.beginPath();x.moveTo(cx0+ng.cw*0.25,cy0+ng.ch*0.55);x.lineTo(cx0+ng.cw*0.45,cy0+ng.ch*0.8);x.lineTo(cx0+ng.cw*0.78,cy0+ng.ch*0.25);x.stroke();}}
-          else if(st==='proving'){x.fillStyle='rgba(255,179,92,0.25)';rrect(cx0,cy0,ng.cw,ng.ch,2);x.fill();x.strokeStyle='rgba(255,179,92,0.9)';x.lineWidth=1;rrect(cx0+0.5,cy0+0.5,ng.cw-1,ng.ch-1,2);x.stroke();}
-          else{x.strokeStyle='rgba(154,154,158,0.55)';x.lineWidth=1;rrect(cx0+0.5,cy0+0.5,ng.cw-1,ng.ch-1,2);x.stroke();}
-          if(pb===b&&pv.i===si){x.save();x.shadowColor='rgba(255,179,92,0.8)';x.shadowBlur=6;x.strokeStyle='#FFB35C';x.lineWidth=1.5;rrect(cx0-2.5,cy0-2.5,ng.cw+5,ng.ch+5,3);x.stroke();x.restore();}
-          else if(hb===b&&hv.i===si){x.strokeStyle='#F4F1EC';x.lineWidth=1;rrect(cx0-1.5,cy0-1.5,ng.cw+3,ng.ch+3,3);x.stroke();}}}
-    }
-    x.textBaseline='alphabetic';x.restore();
-
-    // the detail panel on the canvas, no DOM: a block, or one shard cell. A hovered target that is not the pinned one gets
-    // the floating panel beside it, as before. Otherwise the pinned target (or the one fading out) gets the fixed panel at
-    // the top left of the strip, where the oldest blocks are: it never moves as new blocks arrive.
-    x.save();x.beginPath();x.rect(G,0,W-G,H);x.clip();x.font='500 10px IBM Plex Mono, monospace';x.textAlign='left';
-    closeRect=null;panelRect=null;
-    var show=hv&&!same(hv,pv)?hv:(pv||pinFade),fixed=show&&show!==hv;
-    if(show){var L=lines(show),tw=Math.max(x.measureText(L[0]).width,x.measureText(L[1]).width,x.measureText(L[2]).width)+20,th,tx,tty;
-      if(!fixed){th=52;tx=show.b.px+h+10;tty=L[3]-th/2;
-        if(tx+tw>W-4)tx=show.b.px-h-10-tw;if(tx<G+4)tx=G+4;tty=Math.max(4,Math.min(H-th-4,tty));
-        x.fillStyle='rgba(22,22,26,0.96)';rrect(tx,tty,tw,th,6);x.fill();x.strokeStyle=L[4];x.lineWidth=1;rrect(tx+0.5,tty+0.5,tw-1,th-1,6);x.stroke();
-        x.fillStyle='#F4F1EC';x.fillText(L[0],tx+10,tty+16);x.fillStyle='#C9C7C2';x.fillText(L[1],tx+10,tty+31);x.fillStyle='#9A9A9E';x.fillText(L[2],tx+10,tty+46);}
-      else{th=72;tw=Math.max(tw,112);tx=G+6;tty=6;var CL=32,fade=show===pinFade?Math.max(0,1-(now-pinFade.at)/PIN_FADE):1;
-        x.globalAlpha=fade;
-        x.fillStyle='rgba(22,22,26,0.96)';rrect(tx,tty,tw,th,6);x.fill();x.strokeStyle=L[4];x.lineWidth=1;rrect(tx+0.5,tty+0.5,tw-1,th-1,6);x.stroke();
-        // header: a small pinned label and a 32 px close control for a thumb
-        x.font='500 9px IBM Plex Mono, monospace';x.fillStyle='#FFB35C';x.fillText('PINNED',tx+10,tty+14);
-        var cxm=tx+tw-CL/2,cym=tty+CL/2;x.strokeStyle='rgba(154,154,158,0.55)';x.lineWidth=1;x.beginPath();x.arc(cxm,cym,8.5,0,Math.PI*2);x.stroke();
-        x.strokeStyle='#F4F1EC';x.lineWidth=1.5;x.beginPath();x.moveTo(cxm-3.5,cym-3.5);x.lineTo(cxm+3.5,cym+3.5);x.moveTo(cxm+3.5,cym-3.5);x.lineTo(cxm-3.5,cym+3.5);x.stroke();
-        x.font='500 10px IBM Plex Mono, monospace';x.fillStyle='#F4F1EC';x.fillText(L[0],tx+10,tty+36);x.fillStyle='#C9C7C2';x.fillText(L[1],tx+10,tty+51);x.fillStyle='#9A9A9E';x.fillText(L[2],tx+10,tty+66);
-        x.globalAlpha=1;
-        if(show===pv){closeRect=[tx+tw-CL,tty,CL,CL];panelRect=[tx,tty,tw,th];}}}
-    x.restore();
-    // pointer devices: a hand over a block, a cell or the close control
-    var cur=hv||(ptrX>=0&&inRect(closeRect,ptrX,ptrY))?'pointer':'';if(c.style.cursor!==cur)c.style.cursor=cur;
-    // gutter: lane labels in the miner's colour, strip names, over anything that scrolled under it
-    x.fillStyle='#0C0C0E';x.fillRect(0,0,G,H);x.strokeStyle='rgba(42,42,48,0.9)';x.lineWidth=1;x.beginPath();x.moveTo(G-0.5,0);x.lineTo(G-0.5,H);x.stroke();
-    x.textAlign='left';x.font='500 '+(narrow?10:11)+'px IBM Plex Mono, monospace';
-    for(i=0;i<laneN;i++){var ly2=laneY(i)+4,lm=lanes[i];
-      if(lm){x.fillStyle=lm.col;x.fillText(narrow?lm.tag:lm.id,8,ly2);}
-      else{x.fillStyle='rgba(154,154,158,0.9)';x.fillText(narrow?'+'+othersN:'+'+othersN+' more',8,ly2);}}
-    x.font='500 '+(narrow?9:10)+'px IBM Plex Mono, monospace';x.fillStyle='rgba(154,154,158,0.9)';x.textBaseline='middle';
-    x.fillText(narrow?'fin':'finality',8,BH+FIN_H/2);x.fillText(narrow?'prf':'proving',8,BH+FIN_H+(provOn()?12:PROV_H/2));x.textBaseline='alphabetic';
-    if(lagNote){x.font='500 10px IBM Plex Mono, monospace';x.textAlign='right';x.fillStyle='#FFB35C';x.fillText(lagNote,W-6,12);}
-    if(!n){x.fillStyle='rgba(154,154,158,0.9)';x.font='500 13px IBM Plex Mono, monospace';x.textAlign='center';x.fillText(lagNote?'no block has reached the observer for '+lagNote.replace('observer ','').replace(' behind',''):(live?'waiting for the first block':'no observer data'),G+(W-G)/2,BH/2);}
-    if(note){x.fillStyle='rgba(12,12,14,0.72)';x.fillRect(0,BH/2-22,W,44);x.fillStyle='#F4F1EC';x.font='500 13px IBM Plex Mono, monospace';x.textAlign='center';x.fillText(note,W/2,BH/2+5);}
-  }
-  // Idle, the scene moves at 14 to 40 px/s, so 30 frames a second is enough; a pointer or a pinned block gets every frame.
-  // ?perf=1 exposes window.__igneumPerf = {frames, drawMs, since} so the draw cost can be read from the console.
-  var PERF=/[?&]perf=1/.test(location.search)?(window.__igneumPerf={frames:0,drawMs:0,since:performance.now()}):null,lastDraw=0;
-  function frame(now){if(!running)return;
-    if(ptrX>=0||pin||pinFade||now-lastDraw>=31){lastDraw=now;var t0=PERF?performance.now():0;draw(now);if(PERF){PERF.frames++;PERF.drawMs+=performance.now()-t0;}}
-    requestAnimationFrame(frame);}
-  function start(){if(running||reduce)return;if(document.hidden||!inView)return;running=true;requestAnimationFrame(frame);}
-  function stop(){running=false;}
-  function kick(){if(!running)requestAnimationFrame(function(now){draw(now);});}
-  document.addEventListener('visibilitychange',function(){if(document.hidden)stop();else start();});
-  if('IntersectionObserver' in window){new IntersectionObserver(function(es){inView=es[0].isIntersecting;if(inView)start();else stop();},{threshold:0}).observe(c);}
-  if('ResizeObserver' in window){new ResizeObserver(function(){needSize=true;kick();}).observe(c);}
-  else window.addEventListener('resize',function(){needSize=true;kick();});
-  // hover: pointer devices only, never a touch; it reads the strip and leaves the pin alone
-  c.addEventListener('pointermove',function(e){if(e.pointerType==='touch')return;ptrX=e.offsetX;ptrY=e.offsetY;if(reduce)kick();});
-  c.addEventListener('pointerleave',function(){ptrX=-1;ptrY=-1;if(reduce)kick();});
-  // tap or click: one pointer, down to up, under 10 px of travel, so a scroll on a phone never pins. Pointer events only;
-  // the canvas ignores click, so a touch tap fires once (its synthetic click is dropped below)
-  c.addEventListener('pointerdown',function(e){if(e.button&&e.button!==0)return;down=down?null:{id:e.pointerId,x:e.offsetX,y:e.offsetY};});
-  c.addEventListener('pointerup',function(e){if(!down||down.id!==e.pointerId){down=null;return;}
-    var dx=e.offsetX-down.x,dy=e.offsetY-down.y;down=null;if(dx*dx+dy*dy>TAP_SLOP*TAP_SLOP)return;tap(e.offsetX,e.offsetY,e.pointerType==='touch');});
-  c.addEventListener('pointercancel',function(){down=null;});
-  // anywhere else on the page clears the pin; Escape too
-  document.addEventListener('click',function(e){if(e.target!==c)clearPin();});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape')clearPin();});
-  start();
+  function lockAge(f){var c=f.checkpoints.filter(function(x){return x.state==='locked';}).slice(-1)[0];if(!c||!c.locked_at)return '';var t=new Date(c.locked_at.replace(' ','T')).getTime();return isNaN(t)?'':rel(Date.now()-t);}
 
   // ---------- sparkline ----------
   var sc=$('spark'),sx=sc.getContext('2d');
@@ -644,7 +331,7 @@ main{padding-bottom:var(--sec)}
   function setStatus(on,ageText){document.body.className=on?'on':'off';$('st-status').textContent=on?'LIVE':'OFFLINE';$('st-age').textContent=ageText;}
   function render(d){
     var s=d.state,on=!s.stale;
-    var lag=s.observer_lag_s;lagNote=on&&lag!==null&&lag>30?'observer '+(lag<120?Math.round(lag)+' s':Math.round(lag/60)+' min')+' behind':'';
+    var lag=s.observer_lag_s,lagNote=on&&lag!==null&&lag>30?'observer '+(lag<120?Math.round(lag)+' s':Math.round(lag/60)+' min')+' behind':'';
     setStatus(on,s.age_s===null?'no observer update yet':(lagNote?lagNote+(s.queue_depth?', '+s.queue_depth+' queued':''):'observer updated '+rel(s.age_s*1000)));
     $('st-network').textContent=s.network||'igneum-devnet';$('st-node').textContent=s.node_version?'node '+s.node_version:'node';
     $('st-bps').textContent=(s.blocks_per_second_60s||0).toFixed(2);
@@ -653,16 +340,20 @@ main{padding-bottom:var(--sec)}
     var hr=hashrate(s.hashes_per_second_estimate).split(' ');$('st-hps').innerHTML=hr.length>1?esc(hr[0])+'<small>'+esc(hr[1])+'</small>':esc(hr[0]);
     $('st-miners').textContent=s.miners_10m;$('st-peers').textContent=s.peers===null?'0':s.peers;$('st-mempool').textContent='mempool '+(s.mempool||0);
     var now=new Date(d.now).getTime();
-    if(d.miners.length){minersEl.innerHTML=d.miners.map(function(m){return '<tr><td><span class="id">'+esc(m.id)+'</span></td><td class="n">'+m.blocks+'</td><td><div style="display:flex;align-items:center;gap:8px"><div class="bar" style="width:70px"><i style="width:'+m.share+'%"></i></div><span class="mono" style="font-size:12px">'+m.share+'%</span></div></td><td>'+rel(now-new Date(m.last_seen).getTime())+'</td><td>'+(m.engine?esc(m.engine):'<span style="color:var(--ash)">not reported</span>')+'</td></tr>';}).join('');}
-    else minersEl.innerHTML='<tr><td colspan="5" class="empty">No blocks in the last 10 minutes.</td></tr>';
-    if(d.events.length){eventsEl.innerHTML=d.events.map(function(e){return '<div><span><span class="k">'+esc(e.kind)+'</span> '+esc(e.text)+'</span><span class="t">'+rel(now-new Date(e.ts).getTime())+'</span></div>';}).join('');}
+    // miners: one compact strip, the top five lanes by blocks with a bar each, the rest as a count (the full table is the bench page's job)
+    if(d.miners.length){var top=d.miners.slice(0,5),max=Math.max(1,top[0].blocks),rest=d.miners.length-top.length;
+      $('miners-count').textContent=d.miners.length+' vote keys in 10 min';
+      minersEl.innerHTML=top.map(function(m){return '<div class="lane"><span class="id">'+esc(m.id)+'</span><div class="bar"><i style="width:'+Math.round(m.blocks/max*100)+'%"></i></div><span class="n">'+m.blocks+' blocks</span><span class="t">'+esc(rel(now-new Date(m.last_seen.replace(' ','T')).getTime()))+'</span></div>';}).join('');
+      $('miners-more').innerHTML=(rest>0?'and '+rest+' more. ':'')+'Every vote key with a block in the last 10 minutes; a card runs several. <a href="/miners">The GPU bench table</a> has the measured rates per card.';}
+    else{minersEl.innerHTML='<div class="empty">No blocks in the last 10 minutes.</div>';$('miners-count').textContent='last 10 min';}
+    // events: the last five, one line each
+    if(d.events.length){var ev5=d.events.slice(0,5);eventsEl.innerHTML=ev5.map(function(e){return '<div><span><span class="k">'+esc(e.kind.replace(/_/g,' '))+'</span> '+esc(e.text)+'</span><span class="t">'+rel(now-new Date(e.ts).getTime())+'</span></div>';}).join('');
+      $('events-more').textContent=(d.events.length>5?(d.events.length-5)+' more in the observer\'s last 30. ':'')+'Checkpoint locks, miners going quiet and coming back, provers seen, as the observer records them.';}
     else eventsEl.innerHTML='<div class="empty">No events yet.</div>';
     spark(s.blocks_per_minute);
-    live=on;
-    if(on){frozenAt=null;note='';ingest(d);}
-    else{if(frozenAt===null)frozenAt=vnow()||now;note='observer offline, last update '+(s.age_s===null?'unknown':rel(s.age_s*1000));}
+    lastD=d;sceneCounters(d);if(dag)dag.push(d);
   }
-  function poll(){fetch('/api/live'+(fixedWindow?'?window='+fixedWindow:''),{cache:'no-store'}).then(function(r){if(!r.ok)throw new Error(r.status);return r.json();}).then(function(d){if(!d.ok)throw new Error(d.error);failures=0;render(d);}).catch(function(){failures++;if(failures>=3){setStatus(false,'api unreachable');if(frozenAt===null)frozenAt=vnow();note='api unreachable, scene frozen';}});}
+    function poll(){fetch('/api/live'+(fixedWindow?'?window='+fixedWindow:''),{cache:'no-store'}).then(function(r){if(!r.ok)throw new Error(r.status);return r.json();}).then(function(d){if(!d.ok)throw new Error(d.error);failures=0;render(d);}).catch(function(){failures++;if(failures>=3){setStatus(false,'live feed unavailable');if(dag)dag.push(null);}});}
   poll();setInterval(poll,2000);
 })();
 </script>
diff --git a/site/metamask.html b/site/metamask.html
index c71a0e386..d7870ec39 100644
--- a/site/metamask.html
+++ b/site/metamask.html
@@ -5,13 +5,13 @@
 <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
 <title>Add Igneum to MetaMask</title>
 <meta name="description" content="Add the Igneum network to MetaMask or any Ethereum wallet in one click: chain id, RPC URL, the IGN symbol and 18 decimals. Devnet today, public testnet next.">
-<link rel="canonical" href="https://igneum.network/wallet">
+<link rel="canonical" href="https://igneum.network/metamask">
 <meta name="theme-color" content="#0C0C0E">
 <meta property="og:type" content="website">
 <meta property="og:site_name" content="Igneum">
 <meta property="og:title" content="Add Igneum to MetaMask">
 <meta property="og:description" content="Add the Igneum network to MetaMask or any Ethereum wallet in one click: chain id, RPC URL, the IGN symbol and 18 decimals. Devnet today, public testnet next.">
-<meta property="og:url" content="https://igneum.network/wallet">
+<meta property="og:url" content="https://igneum.network/metamask">
 <meta property="og:image" content="https://igneum.network/og.png?v=3">
 <meta property="og:image:width" content="1200">
 <meta property="og:image:height" content="630">
@@ -31,9 +31,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -45,87 +46,30 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;
---max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
+/* page block; tokens, type and components are in /site.css */
 --card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
 --fs-h1:clamp(32px,5.5vw,56px);--fs-h2:clamp(28px,4.2vw,44px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px)}
-*{box-sizing:border-box}body{margin:0;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:16px;line-height:1.6;padding:0;-webkit-font-smoothing:antialiased}
-a{color:var(--ember);text-decoration:none}a:hover{text-decoration:underline}
 [id]{scroll-margin-top:calc(var(--nav-h) + 16px)}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
 .head{padding-top:var(--head)}
-h1{font-family:var(--f-display);font-weight:900;font-size:var(--fs-h1);line-height:1.05;margin:12px 0 12px}
-h2{font-family:var(--f-display);font-weight:700;font-size:var(--fs-h3);line-height:1.3;margin:44px 0 12px;padding-top:24px;border-top:1px solid var(--line)}
-.note{color:var(--ash);font-size:15px;max-width:72ch;margin:0 0 24px}
 .note b{color:var(--bone);font-weight:500}
 .grid{display:grid;gap:var(--gap);grid-template-columns:repeat(auto-fit,minmax(min(100%,320px),1fr));margin:8px 0 8px}
-.card{background:var(--graphite);border:1px solid var(--line);border-radius:var(--card-r);padding:var(--card-pad);min-width:0}
 .card h3{font-family:var(--f-display);font-weight:700;font-size:var(--fs-h3);margin:0 0 6px}
 .card .tag{display:inline-block;font-family:var(--f-mono);font-size:11px;letter-spacing:.1em;text-transform:uppercase;color:var(--molten);border:1px solid var(--line);border-radius:999px;padding:3px 9px;margin-bottom:12px}
 .card p{margin:0 0 12px;color:var(--ink-2);font-size:15px}
 dl{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:6px 16px;margin:0 0 16px;font-size:14px}
 dt{font-family:var(--f-mono);font-size:12px;letter-spacing:.08em;text-transform:uppercase;color:var(--ash);padding-top:3px}
 dd{margin:0;font-family:var(--f-mono);font-size:14px;color:var(--bone);overflow-wrap:anywhere}
-.btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;min-height:48px;padding:12px 22px;border-radius:10px;font-weight:600;font-size:16px;border:1px solid var(--ember);color:var(--obsidian);background:var(--ember);cursor:pointer;font-family:inherit}
-.btn:hover{background:var(--molten);border-color:var(--molten);text-decoration:none}
 .btn[disabled]{opacity:.5;cursor:not-allowed}
 .btn.ghost{background:transparent;color:var(--bone);border-color:var(--line)}
 .status{font-family:var(--f-mono);font-size:13px;color:var(--ash);margin:10px 0 0;min-height:1.4em}
 ol{margin:0 0 14px;padding-left:22px}li{margin-bottom:6px}
-code{font-family:var(--f-mono);font-size:.92em;background:var(--graphite);padding:1px 5px;border-radius:4px;overflow-wrap:anywhere}
-pre{margin:0 0 16px;padding:16px 18px;background:var(--graphite);border-radius:var(--card-r);font-family:var(--f-mono);font-size:13px;line-height:1.55;overflow-x:auto}
 .asof{color:var(--ash);font-size:13px;margin:40px 0 0;max-width:72ch}
 </style>
 </head>
@@ -135,10 +79,9 @@ pre{margin:0 0 16px;padding:16px 18px;background:var(--graphite);border-radius:v
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live">Live devnet</a>
@@ -147,20 +90,32 @@ pre{margin:0 0 16px;padding:16px 18px;background:var(--graphite);border-radius:v
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
@@ -197,7 +152,7 @@ pre{margin:0 0 16px;padding:16px 18px;background:var(--graphite);border-radius:v
       <dt>RPC URL</dt><dd>http://127.0.0.1:26790</dd>
       <dt>Symbol</dt><dd>IGN</dd>
       <dt>Decimals</dt><dd>18</dd>
-      <dt>Explorer</dt><dd>none yet</dd>
+      <dt>Explorer</dt><dd><a href="/explorer">igneum.network/explorer</a></dd>
     </dl>
     <button class="btn" type="button" data-add="devnet">Add Igneum Devnet to MetaMask</button>
     <p class="status" data-status="devnet"></p>
@@ -228,7 +183,7 @@ pre{margin:0 0 16px;padding:16px 18px;background:var(--graphite);border-radius:v
 <p class="note">Igneum signs transactions with the Ethereum rules (EIP-155, EIP-1559 and legacy envelopes). A transaction signed for another chain id is refused. Gas has two dimensions on Igneum, execution and proving, and the node folds the second into the price it quotes, so <code>eth_gasPrice</code> and <code>eth_estimateGas</code> work as they do on Ethereum. The <a href="/litepaper#builders-ask">litepaper</a> has the differences.</p>
 
 <h2 id="app-wallet">The app and the Igneum Wallet</h2>
-<p class="note">The Igneum Miner app makes an address for your earnings and shows you its seed phrase once. That address is an ordinary Ethereum account: import the seed into MetaMask and the balance is there. An Igneum Wallet with the Apps tab and the explorer built in is in the roadmap; until it ships, MetaMask is the wallet.</p>
+<p class="note">The Igneum Ember app (still labelled Igneum Miner in its window) makes an address for your earnings and shows you its seed phrase once. That address is an ordinary Ethereum account: import the seed into MetaMask and the balance is there. <a href="/wallet">Igneum Wallet</a> 0.1.4 is out for macOS and verifies finality itself; its Apps tab is in the roadmap. MetaMask works today and is the way in on Windows and Linux.</p>
 
 <p class="asof">Testnet coin for testing: <a href="/faucet">the faucet</a> sends 10 IGN per address per day. Chain ids 4461 (mainnet), 4462 (testnet) and 4463 (devnet) are fixed in the node. The testnet RPC URL above is a placeholder until the testnet opens; this page is updated the day it does.</p>
 </main>
@@ -237,7 +192,7 @@ pre{margin:0 0 16px;padding:16px 18px;background:var(--graphite);border-radius:v
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -263,9 +218,9 @@ pre{margin:0 0 16px;padding:16px 18px;background:var(--graphite);border-radius:v
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -273,10 +228,23 @@ pre{margin:0 0 16px;padding:16px 18px;background:var(--graphite);border-radius:v
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 <script>
 (function(){
diff --git a/site/miner.html b/site/miner.html
index a6866cff1..c745fb9f5 100644
--- a/site/miner.html
+++ b/site/miner.html
@@ -31,9 +31,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -45,83 +46,23 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--line-2:#3A3A42;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;--ember-ink:#0C0C0E;
---max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
+/* page block; tokens, type and components are in /site.css */
 --card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
 --fs-hero:clamp(32px,5.6vw,56px);--fs-h2:clamp(28px,4.2vw,44px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px)}
-*{box-sizing:border-box}
-html{scroll-behavior:smooth}
-:root{--sm:84px}@media (max-width:900px){:root{--sm:80px}}
 section,[id]{scroll-margin-top:var(--sm)}section[id]{scroll-margin-top:calc(var(--sm) - var(--sec))}
 @media (prefers-reduced-motion:reduce){html{scroll-behavior:auto}}
-body{margin:0;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:17px;line-height:1.55;-webkit-font-smoothing:antialiased;overflow-x:hidden}
-a{color:inherit;text-decoration:none}a:hover{color:var(--molten)}
 img,svg{max-width:100%}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
 .mono{font-family:var(--f-mono)}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
 .eyebrow.ember{color:var(--ember)}
 h1,h2,h3{font-family:var(--f-display);margin:0;line-height:1.08;text-wrap:balance}
-h1{font-weight:900;font-size:var(--fs-hero);letter-spacing:-.01em}
-h2{font-weight:700;font-size:var(--fs-h2)}
-h3{font-weight:700;font-size:var(--fs-h3)}
-p{margin:0}
-.btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;min-height:48px;padding:12px 22px;border-radius:10px;font-weight:600;font-size:16px;border:1px solid var(--line-2);color:var(--bone);background:transparent;cursor:pointer;transition:transform .15s ease,background .15s ease,border-color .15s ease}
-.btn:hover{transform:translateY(-1px);border-color:var(--ash);color:var(--bone)}
-.btn.primary{background:var(--ember);color:var(--ember-ink);border-color:var(--ember)}
 .btn.primary:hover{background:#FF6A2B;border-color:#FF6A2B;color:var(--ember-ink)}
-.card{background:var(--graphite);border:1px solid var(--line);border-radius:var(--card-r);padding:var(--card-pad);min-width:0}
 .grid{display:grid;gap:var(--gap);grid-template-columns:repeat(auto-fit,minmax(min(100%,300px),1fr))}
 .reveal{opacity:0;transform:translateY(18px);transition:opacity .7s ease,transform .7s ease}
 .reveal.in{opacity:1;transform:none}
@@ -133,7 +74,6 @@ section+section{padding-top:0;scroll-margin-top:var(--sm)}
 .pt{font-size:15px;color:var(--ash);max-width:64ch}
 .lp{display:inline-block;margin-top:24px;color:var(--ember);font-weight:600;font-size:15px}
 .cta{display:flex;flex-wrap:wrap;gap:12px}
-
 /* hero: copy left, the dashboard in its frame right; one column under 980 px */
 .hero{position:relative;padding-block:clamp(48px,8vw,96px) clamp(40px,6vw,72px);overflow:hidden}
 .hero::before{content:'';position:absolute;inset:auto -10% -30% 40%;height:70%;background:radial-gradient(closest-side,rgba(242,84,27,.18),rgba(242,84,27,0));pointer-events:none}
@@ -143,7 +83,6 @@ section+section{padding-top:0;scroll-margin-top:var(--sm)}
 .hero p.lead{font-size:clamp(17px,2vw,20px);color:var(--ink-2);max-width:52ch}
 .hero .os{display:flex;flex-wrap:wrap;gap:8px 18px;font-size:14px;color:var(--ash)}
 .hero .os span{display:inline-flex;align-items:center;gap:6px}
-
 /* the device frame: a window bar, the screenshot, an ember glow behind */
 .shot{position:relative;min-width:0}
 .shot::before{content:'';position:absolute;inset:12% -6% -8% -6%;background:radial-gradient(closest-side,rgba(242,84,27,.22),rgba(242,84,27,0));filter:blur(12px);pointer-events:none}
@@ -165,7 +104,6 @@ section+section{padding-top:0;scroll-margin-top:var(--sm)}
 .frame.light figcaption{background:#0C0C0E}
 .row-tbl{margin-top:28px}
 .row-tbl td:first-child{white-space:nowrap;font-weight:600}
-
 /* the three steps */
 .steps{display:grid;gap:var(--gap-tile);grid-template-columns:repeat(3,minmax(0,1fr));position:relative}
 .step{background:var(--graphite);border:1px solid var(--line);border-radius:var(--tile-r);padding:var(--tile-pad);display:flex;flex-direction:column;gap:10px;position:relative;min-width:0}
@@ -176,7 +114,6 @@ section+section{padding-top:0;scroll-margin-top:var(--sm)}
 .step::after{content:'';position:absolute;right:-9px;top:50%;width:14px;height:14px;border-top:2px solid var(--line-2);border-right:2px solid var(--line-2);transform:translateY(-50%) rotate(45deg);z-index:1}
 .step:last-child::after{display:none}
 @media (max-width:640px){.steps{grid-template-columns:1fr}.step::after{right:auto;left:50%;top:auto;bottom:-9px;transform:translateX(-50%) rotate(135deg)}}
-
 /* feature groups: a heading row, then tiles with one line each */
 .group{display:grid;gap:var(--gap);grid-template-columns:1fr;margin-bottom:var(--sec)}
 @media (min-width:900px){.group{grid-template-columns:300px minmax(0,1fr);gap:48px}}
@@ -190,17 +127,10 @@ section+section{padding-top:0;scroll-margin-top:var(--sm)}
 .feat p{font-size:14px;color:var(--ash);line-height:1.45}
 .feat .src{font-family:var(--f-mono);font-size:11px;color:var(--ember);margin-top:4px}
 .feat.wide{grid-column:1/-1}
-
 /* the swap table and the measured table */
-.tbl{overflow-x:auto;border:1px solid var(--line);border-radius:var(--card-r);background:var(--graphite);-webkit-overflow-scrolling:touch}
-table{border-collapse:collapse;width:100%;min-width:560px;font-size:15px}
-th,td{padding:12px 14px;text-align:left;vertical-align:top;border-bottom:1px solid var(--line)}
-th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);font-weight:500;background:var(--obsidian)}
-tr:last-child td{border-bottom:0}
 td.num{font-variant-numeric:tabular-nums;white-space:nowrap}
 td a{color:var(--ember)}
 .levers table{min-width:760px}.levers td:first-child{min-width:210px}.levers td:nth-child(2){min-width:260px}
-
 /* the fee card: the switch as the app draws it, the start lines as the miner prints them */
 .fee{display:grid;gap:var(--gap);grid-template-columns:1fr}
 @media (min-width:900px){.fee{grid-template-columns:1.1fr .9fr;align-items:start}}
@@ -208,16 +138,13 @@ td a{color:var(--ember)}
 .switch .track{width:44px;height:26px;border-radius:13px;background:var(--ember);position:relative;flex:0 0 44px}
 .switch .track::after{content:'';position:absolute;top:3px;right:3px;width:20px;height:20px;border-radius:50%;background:var(--bone)}
 .switch.off .track{background:var(--line-2)}.switch.off .track::after{right:auto;left:3px}
-pre{margin:0;padding:14px 16px;background:var(--obsidian);border:1px solid var(--line);border-radius:12px;font-family:var(--f-mono);font-size:12.5px;line-height:1.55;color:var(--ink-2);white-space:pre-wrap;overflow-wrap:anywhere}
 pre b{color:var(--molten);font-weight:500}
-
 .band{background:var(--ember);color:var(--ember-ink)}
 .band .wrap{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between;gap:24px;padding-block:56px}
 .band h2{font-weight:900;font-size:clamp(26px,3.5vw,36px)}
 .band p{font-size:16px;max-width:56ch}
 .btn.dark{background:var(--obsidian);color:var(--bone);border-color:var(--obsidian)}
 .btn.dark:hover{background:#222226;color:var(--bone)}
-.foot{margin-top:0}
 </style>
 </head>
 <body>
@@ -226,10 +153,9 @@ pre b{color:var(--molten);font-weight:500}
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live">Live devnet</a>
@@ -238,20 +164,32 @@ pre b{color:var(--molten);font-weight:500}
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
@@ -275,7 +213,7 @@ pre b{color:var(--molten);font-weight:500}
       <figure class="frame" style="margin:0">
         <div class="bar"><i></i><i></i><i></i><b><span data-product="app">Igneum Miner</span></b></div>
         <img src="/img/miner-dashboard.webp" width="2880" height="1800" alt="The Mine page of Igneum Miner 0.3.14 on a three-card PC: the Stop mining button, 169 MH/s at 532 W, 84 blocks this run, and one row per card: an RTX 5090 at 122 MH/s, 222 W, 0.55 MH/W and 56 °C, an RTX 4070 at 28.7 MH/s and 76 W, an RX 9070 XT at 18.9 MH/s and 198 W, each with its tune line, Tune button and switch, and the integrated GPU off" fetchpriority="high" decoding="async">
-        <figcaption><span data-product="caption">Igneum Ember (the app window still says Igneum Miner)</span> 0.3.14, Mine page, on PC 1 (RTX 5090, RTX 4070, RX 9070 XT), live devnet, 6 Oct 2026, 18:16 UTC. No electricity price set, so the £ cells ask for one. The tune lines are stopped tunes from before that afternoon's Power Helper fix.</figcaption>
+        <figcaption><span data-product="caption">Igneum Ember (the app window still says Igneum Miner)</span> 0.3.14, Mine page, on a Windows rig with an RTX 5090, RTX 4070 and RX 9070 XT, live devnet, 6 Oct 2026, 18:16 UTC. No electricity price set, so the £ cells ask for one. The tune lines are stopped tunes from before that afternoon's Power Helper fix.</figcaption>
       </figure>
     </div>
   </div>
@@ -311,7 +249,7 @@ pre b{color:var(--molten);font-weight:500}
   <div class="wrap">
     <div class="sec-head reveal">
       <h2>Four pages. Every card is one row.</h2>
-      <p>Mine, Earnings, Prove, Settings, shipped in 0.3.14 on 6 October 2026. The screenshots are the live app: PC 1's three cards for Mine, Earnings and Settings; this team's Apple M5 Max, paused, for Prove, light and the phone width. Apple silicon reports no draw, so its row carries no watts and no pounds; an NVIDIA or AMD card's row does.</p>
+      <p>Mine, Earnings, Prove, Settings, shipped in 0.3.14 on 6 October 2026. The screenshots are the live app: the Windows rig's three cards for Mine, Earnings and Settings; this team's Apple M5 Max, paused, for Prove, light and the phone width. Apple silicon reports no draw, so its row carries no watts and no pounds; an NVIDIA or AMD card's row does.</p>
     </div>
     <div class="tbl row-tbl reveal"><table>
       <thead><tr><th>On the row</th><th>What it says</th><th>When it is not shown</th></tr></thead>
@@ -331,7 +269,7 @@ pre b{color:var(--molten);font-weight:500}
       <div class="shot reveal">
         <figure class="frame" style="margin:0">
           <div class="bar"><i></i><i></i><i></i><b>Earnings</b></div>
-          <img src="/img/miner-earnings.webp" width="2880" height="1800" alt="The Earnings page on PC 1: pounds earned with the devnet reason, IGN from proofs, 64,778 blocks lifetime and 84 this run, 532 W of electricity waiting for a price, the dev fee switch, the rewards address with Copy, Change address and Show my key" loading="lazy" decoding="async">
+          <img src="/img/miner-earnings.webp" width="2880" height="1800" alt="The Earnings page on the Windows rig: pounds earned with the devnet reason, IGN from proofs, 64,778 blocks lifetime and 84 this run, 532 W of electricity waiting for a price, the dev fee switch, the rewards address with Copy, Change address and Show my key" loading="lazy" decoding="async">
           <figcaption>Money first. £ earned reads 0.00 on devnet and says why; 532 W waits for a price. The dev fee switch lives here. Change address and Show my key ask in place, no dialogs.</figcaption>
         </figure>
       </div>
@@ -345,7 +283,7 @@ pre b{color:var(--molten);font-weight:500}
       <div class="shot reveal">
         <figure class="frame" style="margin:0">
           <div class="bar"><i></i><i></i><i></i><b>Settings</b></div>
-          <img src="/img/miner-settings.webp" width="2880" height="1800" alt="The Settings page on PC 1: Tuning with the goal at Balanced (about 560 W), Ember Tune and Power control on, Hill climb off, the electricity price, the last tune 6 h ago with the next check on 13 Oct; This machine with start at login, remote jobs running a signed job, the name and appearance" loading="lazy" decoding="async">
+          <img src="/img/miner-settings.webp" width="2880" height="1800" alt="The Settings page on the Windows rig: Tuning with the goal at Balanced (about 560 W), Ember Tune and Power control on, Hill climb off, the electricity price, the last tune 6 h ago with the next check on 13 Oct; This machine with start at login, remote jobs running a signed job, the name and appearance" loading="lazy" decoding="async">
           <figcaption>Plain rows, one sentence each: Tuning, This machine, one update card, Logs, Advanced. Ember Tune and Power control on; the electricity price every £ figure uses is set here.</figcaption>
         </figure>
       </div>
@@ -386,7 +324,7 @@ pre b{color:var(--molten);font-weight:500}
         <div class="feat"><b>Windows, macOS, Linux</b><p>An installer on Windows, a disk image on macOS, a package on Linux. No toolchain, no driver work: the GPU workers are prebuilt.</p></div>
         <div class="feat"><b>HiveOS package</b><p>A custom miner for farms: the Linux miner, node and both GPU workers with the four Hive hooks. Hive itself is untested: report what breaks.</p></div>
         <div class="feat"><b>First outside machine</b><p>An Apple silicon laptop, no instructions beyond the five steps: 33 accepted blocks in 7 minutes, 0 rejected, 21.0 MH/s average.</p><a class="src" href="/bench#4-october-2026-first-outside-machine-on-the-devnet-an-apple-silicon-laptop-through-the-igneum-miner-app">log · 4 Oct 2026</a></div>
-        <div class="feat"><b>First card on the app</b><p>An RTX 5090 on Windows from the installer: 117 to 119 MH/s, 34 accepted blocks in the first minute, CPU re-check OK on every share.</p><a class="src" href="/bench#4-october-2026-first-machine-on-the-igneum-miner-app-pc-2-s-rtx-5090-at-118-mh-s-via-setup-exe">log · 4 Oct 2026</a></div>
+        <div class="feat"><b>First card on the app</b><p>An RTX 5090 on Windows from the installer: 117 to 119 MH/s, 34 accepted blocks in the first minute, CPU re-check OK on every share.</p><a class="src" href="/bench#4-october-2026-first-machine-on-the-igneum-miner-app-the-rtx-5090-windows-rig-s-rtx-5090-at-118-mh-s-via-setup-exe">log · 4 Oct 2026</a></div>
       </div>
     </div>
 
@@ -430,7 +368,7 @@ pre b{color:var(--molten);font-weight:500}
         <div class="feat"><b>Ember Tune</b><p>Tunes every card for hashes per watt: once after install, then every 7 days, and after a driver or program change. The app steps the power limit and the core clock on the live kernel, 60 seconds a step, and keeps the point with the best MH per watt within 1% of the card's top rate. The memory clock is never touched; a step with a rejected hash, a hot GPU or a dragged memory clock is reverted and marked. Every result feeds a fleet prior per card model that the next card of that model starts from. One goal for all cards: Efficiency, Balanced or Maximum, with about how many pounds a day at that goal.</p><a class="src" href="/bench">log · 6 Oct 2026, Ember run 6</a></div>
         <div class="feat"><b>Power control: one approval, then no prompts</b><p>Setting an NVIDIA power or clock limit needs administrator rights on Windows. The app asks once, when you turn Power control on, and registers a helper task; every cap after that is set through the task with no prompt. Off, NVIDIA cards are measured only. AMD cards are set through the app's own helper with no prompt at all.</p><a class="src" href="/bench">log · 6 Oct 2026, the task re-pointed and two caps set with no prompt</a></div>
         <div class="feat wide">
-          <b>Ember Tune measured, PC 1, 6 Oct 2026</b>
+          <b>Ember Tune measured on the Windows rig, 6 Oct 2026</b>
           <div class="tbl" style="margin-top:8px"><table>
             <thead><tr><th>Card</th><th>Untuned</th><th>Tuned</th><th>Saved</th></tr></thead>
             <tbody>
@@ -439,7 +377,7 @@ pre b{color:var(--molten);font-weight:500}
             </tbody>
           </table></div>
           <p style="font-size:13px;color:var(--ash);margin-top:8px">The chosen clocks are the floor of the ladder, not the optimum: the next cut's ladder goes lower. The pounds are arithmetic from the saved watts at 28p per kWh; the app uses your price. The RX 9070 XT's run aborted at step 1 on a rule that asked a card reporting offsets for watts, fixed the same hour; its row is owed.</p>
-          <a class="src" href="/bench">log · 6 Oct 2026, Ember run 6 on PC 1 (job ember-tune-pc1-6, 0.3.13 + kit 6, elevated, one click)</a>
+          <a class="src" href="/bench">log · 6 Oct 2026, Ember run 6 on the Windows rig (0.3.13 + tuning kit 6, elevated, one click)</a>
         </div>
         <div class="feat"><b>Latency work</b><p>A block built on a stale tip earns less. The miner is moving from polling to a template subscription and shorter jobs, so a new tip reaches the card in milliseconds. In progress, no number published yet.</p></div>
         <div class="feat"><b>Remote signed jobs, opt in</b><p>Our own fleet only. A switch, "Allow remote jobs from Igneum (signed)", with the key's fingerprint beside it. Off aborts the running job and stops polling. Jobs run at most once each and only on the machines they name.</p></div>
@@ -452,7 +390,7 @@ pre b{color:var(--molten);font-weight:500}
         <div class="feat"><b>Watchdog per card</b><p>No status line for 90 seconds, or a hash rate of 0 for 60 seconds while synced: the miner is restarted once. If it recurs, that card is marked faulted with the reason and the other cards keep mining.</p><a class="src" href="/bench#4-october-2026-miner-fault-guards-and-the-app-watchdog-measured-against-a-fake-worker-miner-community-lead-app-owner">log · 4 Oct 2026</a></div>
         <div class="feat"><b>Watchdog per node</b><p>A node that answers nothing for 120 seconds is restarted by the app, with a growing delay when it repeats. Measured: silent node to mining again in 160.0 s.</p><a class="src" href="/bench#4-october-2026-miner-fault-guards-and-the-app-watchdog-measured-against-a-fake-worker-miner-community-lead-app-owner">log · 4 Oct 2026</a></div>
         <div class="feat"><b>Restart in order</b><p>Miners first, then the node, on quit and on update. What crashes comes back. A worker that restarts itself is left alone, so nothing is restarted twice.</p></div>
-        <div class="feat"><b>Clock check</b><p>A clock 60 seconds slow kept a node silently dead for 12 minutes. Now the app reads block times and an HTTPS Date header: over 5 seconds a warning, over 10 seconds Start is blocked and a Sync clock button appears.</p><a class="src" href="/bench#4-october-2026-a-node-60-s-behind-the-clock-is-silently-dead-pc-2-s-first-app-install">log · 4 Oct 2026</a></div>
+        <div class="feat"><b>Clock check</b><p>A clock 60 seconds slow kept a node silently dead for 12 minutes. Now the app reads block times and an HTTPS Date header: over 5 seconds a warning, over 10 seconds Start is blocked and a Sync clock button appears.</p><a class="src" href="/bench#4-october-2026-a-node-60-s-behind-the-clock-is-silently-dead-the-rtx-5090-windows-rig-s-first-app-install">log · 4 Oct 2026</a></div>
         <div class="feat wide">
           <b>Recoveries measured, 4 Oct 2026</b>
           <div class="tbl" style="margin-top:8px"><table>
@@ -491,7 +429,7 @@ pre b{color:var(--molten);font-weight:500}
       <tbody>
         <tr><td><b>1 · Race the compiler every hour</b></td><td>For each new program, five to ten kernel variants are compiled, benched for two seconds each, and the winner is kept for the hour.</td><td>Measured on the Mac's Metal worker: the winning variant +17.3% on the genesis seed and +21.2% on the hourly seed over the base compile, under load from other work. The RTX 5090 race is prepared and not yet run. <a href="/bench#4-october-2026-miner-performance-variant-racing-metal-worker-on-the-m5-max-the-rtx-5090-job-is-ready-not-run">Log, 4 Oct 2026</a></td></tr>
         <tr><td><b>2 · Auto-tune that learns from the fleet</b></td><td>Apps report the race per card and program class, and every finished Ember Tune. The best settings come back down through the signed update manifest as defaults, so the miner gets faster and more efficient for everyone as the fleet grows.</td><td>Shipped. The fleet is still small, so no fleet table yet; the priors table on <a href="/miners#priors">/miners</a> fills as machines report.</td></tr>
-        <tr><td><b>3 · Hash per watt, not hash</b></td><td>Ember Tune: two knobs per card (power limit, core clock), the memory clock held, the point with the best MH per watt within 1% of the top rate kept and pinned. Miners pay for electricity; that is the number they compare.</td><td>Measured on PC 1, 6 Oct 2026: an RTX 5090 from 311.0 W to 226.8 W for 0.15% of its rate (0.411 to 0.563 MH/W); an RTX 4070 from 106.0 W to 75.6 W for none (0.271 to 0.381 MH/W). The chosen clocks are the ladder's floor, not the optimum. AMD through the app's own helper, no prompt; Apple silicon measures only. The <a href="#tuning">table above</a>.</td></tr>
+        <tr><td><b>3 · Hash per watt, not hash</b></td><td>Ember Tune: two knobs per card (power limit, core clock), the memory clock held, the point with the best MH per watt within 1% of the top rate kept and pinned. Miners pay for electricity; that is the number they compare.</td><td>Measured on the Windows rig, 6 Oct 2026: an RTX 5090 from 311.0 W to 226.8 W for 0.15% of its rate (0.411 to 0.563 MH/W); an RTX 4070 from 106.0 W to 75.6 W for none (0.271 to 0.381 MH/W). The chosen clocks are the ladder's floor, not the optimum. AMD through the app's own helper, no prompt; Apple silicon measures only. The <a href="#tuning">table above</a>.</td></tr>
         <tr><td><b>4 · Template latency</b></td><td>Solo against the local node, a new template within 50 ms of a new tip, because a late block on a BlockDAG goes red and earns nothing.</td><td>Shipped in 0.3.6 (the miner-latency merge; the app is at 0.3.14). Approximate, from the 0.3.6 release plan and not yet in the engineering log: switched p50 46 to 52 ms on a three-node CPU run, 5 Oct 2026.</td></tr>
         <tr><td><b>5 · Never lose a second</b></td><td>Zero-loss hourly program swaps, fault guards, automatic restart, a CPU re-check of every found hash, per-worker health.</td><td>Shipped. Swap 0.01 ms on Metal and 0.00 ms on CUDA with 0 rejected blocks; recoveries in the <a href="#reliability">table above</a>. <a href="/bench#4-october-2026-first-hourly-program-swap-on-the-live-devnet-compile-ahead-no-pause-two-cards">Log, 4 Oct 2026</a></td></tr>
         <tr><td><b>6 · Prove it in public</b></td><td>The bench table per card, fed from the job channel. We claim fastest only when the table says so.</td><td>Live at <a href="/miners">/miners</a>, one row per card, generator version and miner version, each with its log entry.</td></tr>
@@ -578,7 +516,7 @@ pre b{color:var(--molten);font-weight:500}
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -604,9 +542,9 @@ pre b{color:var(--molten);font-weight:500}
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -614,10 +552,23 @@ pre b{color:var(--molten);font-weight:500}
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 <script>
 (function(){
diff --git a/site/miners.html b/site/miners.html
index bcf822594..56164d670 100644
--- a/site/miners.html
+++ b/site/miners.html
@@ -31,9 +31,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -45,93 +46,38 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;
-/* one system for every page: container, gutter, section rhythm, card and tile boxes, heading scale (same tokens as the homepage) */
---max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
---card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
---fs-h1:clamp(32px,5.5vw,56px);--fs-h2:clamp(28px,4.2vw,44px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px)}
-*{box-sizing:border-box}body{margin:0;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:16px;line-height:1.6;padding:0;-webkit-font-smoothing:antialiased}
-a{color:var(--ember);text-decoration:none}a:hover{text-decoration:underline}
+/* generated-page block (the engineering log, the bench table, the evidence table); tokens, type and components are in /site.css */
 [id]{scroll-margin-top:calc(var(--nav-h) + 16px)}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
-h1{font-family:var(--f-display);font-weight:900;font-size:var(--fs-h1);line-height:1.05;margin:12px 0 12px}
-.head{padding-top:var(--head)}
-.note{color:var(--ash);font-size:15px;max-width:72ch;margin:0 0 32px}
-.layout{display:grid;grid-template-columns:minmax(0,1fr);gap:32px}
+.head{padding-top:calc(var(--sec) * .6)}
+.head h1{margin:var(--s-3) 0}
+.head .note{max-width:72ch;margin:0 0 var(--s-6)}
+.layout{display:grid;grid-template-columns:minmax(0,1fr);gap:var(--s-6)}
 @media(min-width:960px){.layout{grid-template-columns:260px minmax(0,1fr);gap:56px}}
-.toc{align-self:start;font-size:14px;border:1px solid var(--line);border-radius:var(--tile-r);background:var(--graphite);padding:8px}
-.toc .lbl{font-family:var(--f-mono);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);padding:6px 10px 8px}
+.toc{align-self:start;font-size:14px;border:1px solid var(--line);border-radius:var(--r-row);background:var(--graphite);padding:8px}
+.toc .lbl{font:500 var(--t-xs)/1.4 var(--f-mono);letter-spacing:.12em;text-transform:uppercase;color:var(--ash);padding:6px 10px 8px}
 .toc ol{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:1px;counter-reset:s;max-height:40vh;overflow:auto;overscroll-behavior:contain;scrollbar-width:thin}
 @media(min-width:960px){.toc{position:sticky;top:calc(var(--nav-h) + 20px)}.toc ol{max-height:calc(100vh - var(--nav-h) - 96px)}}
 .toc a{display:flex;gap:10px;padding:7px 10px;border-radius:8px;color:var(--ink-2);counter-increment:s;line-height:1.35}
 .toc a::before{content:counter(s,decimal-leading-zero);font-family:var(--f-mono);font-size:11px;color:var(--ash);min-width:20px;padding-top:2px}
-.toc a:hover{background:var(--obsidian);text-decoration:none;color:var(--bone)}
-article{max-width:78ch;min-width:0}
+.toc a:hover{background:var(--row);text-decoration:none;color:var(--bone)}
+article{max-width:78ch;min-width:0;color:var(--ink-2)}
 article h1{display:none}
-article h2{font-family:var(--f-display);font-weight:700;font-size:var(--fs-h3);line-height:1.3;margin:44px 0 12px;padding-top:24px;border-top:1px solid var(--line)}
+article h2{font-size:var(--t-h3);margin:44px 0 12px;padding-top:24px;border-top:1px solid var(--line)}
 article h2:first-of-type{margin-top:0;padding-top:0;border-top:0}
-article h3{font-family:var(--f-display);font-weight:500;font-size:16px;margin:26px 0 8px}
-article h4{font-size:15px;margin:20px 0 6px;color:var(--molten)}
+article h3{font-size:16px;margin:26px 0 8px}
+article h4{font:600 15px/1.4 var(--f-sans);margin:20px 0 6px;color:var(--bone)}
 article p{margin:0 0 14px}article ul,article ol{margin:0 0 14px;padding-left:22px}article li{margin-bottom:6px}
 article p,article li,article h2,article h3{overflow-wrap:anywhere}
-code{font-family:var(--f-mono);font-size:.92em;background:var(--graphite);padding:1px 5px;border-radius:4px;overflow-wrap:anywhere}
-pre{margin:0 0 16px;padding:16px 18px;background:var(--graphite);border-radius:var(--card-r);font-family:var(--f-mono);font-size:13px;line-height:1.55;overflow-x:auto;-webkit-overflow-scrolling:touch}
-pre code{background:none;padding:0;font-size:inherit}
-.tbl{overflow-x:auto;margin:18px 0 24px;border:1px solid var(--line);border-radius:var(--card-r);background:var(--graphite);-webkit-overflow-scrolling:touch}
-table{border-collapse:collapse;width:100%;min-width:560px;font-size:15px}th,td{padding:12px 14px;text-align:left;vertical-align:top;border-bottom:1px solid var(--line)}
-th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);font-weight:500;background:var(--obsidian)}tr:last-child td{border-bottom:0}
+article pre{margin:0 0 var(--s-4)}
+.tbl{margin:var(--s-4) 0 var(--s-5)}
+table{min-width:560px}
 .gen{color:var(--ash);font-size:13px;margin:40px 0 0;max-width:72ch}
 </style>
 </head>
@@ -141,10 +87,9 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live">Live devnet</a>
@@ -153,26 +98,38 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
 <main id="main" class="wrap">
 <div class="head">
-<div class="eyebrow">3 entries, newest at the bottom</div>
+<div class="eyebrow">6 measured rows, 0 fleet tuning models</div>
 <h1>GPU bench table</h1>
 <p class="note">Measured hash rates per card on the Igneum lottery hash, with the generator version, the miner version, the date and the log entry behind each number.</p>
 </div>
@@ -185,13 +142,13 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
 <p>Every row names the engineering log entry or the job it came from. "Measured by the team" means our own hardware and our own log. "Reported by the fleet" means a machine we do not own, read from the status lines its miner uploads.</p>
 <p>MH per watt needs the card's power draw during the run. The app reads it on NVIDIA cards through the driver. Rows get the figure when a run records it.</p>
 <p>There is no other Igneum miner to compare with yet, so this table compares cards, not miners. The app that produces these rows: <a href="/miner">the miner page</a>.</p>
-<p>Rows: 6. Source file: <code>site/miner-bench.json</code> in the repository.</p>
+<p>Rows: 6. Each row names the engineering log entry it came from.</p>
 <h2 id="priors">Fleet tuning priors</h2>
 <p>Ember Tune runs on every card the app mines with: the power limit and the core clock are stepped on the live program and the card keeps the point with the best MH per watt within 1% of its top rate. Every finished tune is reported back without anything that identifies the owner, and the fleet's median point per card model, driver major and program class comes back down inside the signed update manifest as the starting point for the next card of that model. A model needs 5 reports before its prior is used.</p>
 <p>No tune reports yet. The first rows appear once five machines with the same card model have reported.</p>
 <h3 id="team">Measured by the team</h3>
 <ul><li><b>NVIDIA GeForce RTX 5090</b> (driver 617, class l128w0, 2026-10-06, job <code>ember-tune-pc1-6</code>): 1854 MHz core cap, power limit 100% (575 W). 84 W saved for 0.15% of rate: 127.71 MH/s at 226.8 W (0.563 MH/W) against 127.9 MH/s at 311 W untuned (0.411 MH/W), 37% more hashes per watt. The chosen clock is the ladder's floor (60% of the maximum), not the optimum; the next cut's ladder goes to 45% and the climb walks on from here.</li><li><b>NVIDIA GeForce RTX 4070</b> (driver 617, class l128w0, 2026-10-06, job <code>ember-tune-pc1-6</code>): 1863 MHz core cap, power limit 50% (100 W). 30 W saved for no rate lost: 28.78 MH/s at 75.6 W (0.381 MH/W) against 28.72 MH/s at 106 W untuned (0.271 MH/W), 41% more hashes per watt. The chosen clock is the ladder's floor (60% of the maximum), not the optimum; the next cut's ladder goes to 45%.</li></ul>
-<p>Rows: 0. Source file: <code>site/miner-priors.json</code> in the repository, written from the fleet records by <code>tools/tuning.mjs --priors --site</code>.</p></article>
+<p>Rows: 0. Written from the fleet's tune records at build time.</p></article>
 </div>
 <p class="gen">Generated from the repository at build time. Times are UTC. Machine names are model names.</p>
 </main>
@@ -200,7 +157,7 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -226,9 +183,9 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -236,10 +193,23 @@ th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 </body>
 </html>
\ No newline at end of file
diff --git a/site/partials/footer.html b/site/partials/footer.html
index 348ad04ba..96fed4158 100644
--- a/site/partials/footer.html
+++ b/site/partials/footer.html
@@ -2,7 +2,7 @@
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -28,9 +28,9 @@
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -38,7 +38,20 @@
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
\ No newline at end of file
diff --git a/site/partials/head.html b/site/partials/head.html
index 0d4de444a..5ccac9439 100644
--- a/site/partials/head.html
+++ b/site/partials/head.html
@@ -1,8 +1,9 @@
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -14,52 +15,8 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
\ No newline at end of file
diff --git a/site/partials/nav.html b/site/partials/nav.html
index ac1baf05e..323997824 100644
--- a/site/partials/nav.html
+++ b/site/partials/nav.html
@@ -2,10 +2,9 @@
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live">Live devnet</a>
@@ -14,19 +13,31 @@
       <a href="/wallet" data-nav="wallet">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
diff --git a/site/scenes.html b/site/scenes.html
new file mode 100644
index 000000000..f6a51b043
--- /dev/null
+++ b/site/scenes.html
@@ -0,0 +1,212 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
+<title>Igneum scenes, a lab</title>
+<meta name="description" content="Three animated views of the same live devnet feed: Forge, Lattice and Pulse. An unlinked lab page.">
+<meta name="robots" content="noindex">
+<meta name="theme-color" content="#0C0C0E" media="(prefers-color-scheme: dark)">
+<meta name="theme-color" content="#F4F1EC" media="(prefers-color-scheme: light)">
+<link rel="icon" href="/favicon.ico" sizes="48x48">
+<!-- head:start -->
+<link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
+<style>
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
+@font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'IBM Plex Sans';font-style:normal;font-weight:400;font-display:swap;src:url(/fonts/plex-sans-400.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'IBM Plex Sans';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/plex-sans-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'IBM Plex Sans';font-style:normal;font-weight:600;font-display:swap;src:url(/fonts/plex-sans-600.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'IBM Plex Mono';font-style:normal;font-weight:400;font-display:swap;src:url(/fonts/plex-mono-400.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'IBM Plex Mono';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/plex-mono-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
+@font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
+@font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
+</style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
+<!-- head:end -->
+<style>
+/* scenes lab block; tokens, type and components are in /site.css */
+.lab{padding:calc(var(--sec) * .5) 0 var(--sec)}
+.lab-head{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:flex-end;gap:var(--s-3);margin-bottom:var(--s-5)}
+.scenes{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:var(--s-4)}
+.scenes.only{grid-template-columns:1fr}
+.scene-card{display:flex;flex-direction:column;gap:var(--s-3)}
+.scene-card .head{display:flex;justify-content:space-between;align-items:baseline;gap:var(--s-3)}
+.scene-card .head .eyebrow{margin:0}
+.scene-card canvas{width:100%;height:420px;border-radius:var(--r-row);background:var(--row);border:1px solid var(--line);display:block}
+.scenes.only .scene-card canvas{height:560px}
+.scene-card p{margin:0;color:var(--ink-2);font-size:var(--t-base)}
+@media (max-width:1000px){.scenes{grid-template-columns:1fr}.scene-card canvas{height:320px}.scenes.only .scene-card canvas{height:420px}}
+</style>
+</head>
+<body>
+<!-- nav:start -->
+<a class="skip" href="#main">Skip to content</a>
+<nav class="nav" aria-label="Main">
+  <div class="wrap">
+    <a href="/" class="brand" aria-label="Igneum home">
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <span class="word">IGNEUM</span>
+    </a>
+    <div class="links" id="nav-links">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
+    </div>
+  </div>
+</nav>
+<script>
+(function(){
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+})();
+</script>
+<!-- nav:end -->
+<main id="main">
+<section class="lab">
+  <div class="wrap">
+    <div class="lab-head">
+      <div>
+        <div class="eyebrow">A lab, not linked</div>
+        <h1>Three scenes, one feed</h1>
+        <p class="lead" style="margin-top:var(--s-3)">The same live devnet reply, drawn three ways. Every mark is a block the observer stored; the words are the ledger's.</p>
+      </div>
+      <div class="state" id="feed-state"><span class="dot off"></span>connecting to the devnet observer</div>
+    </div>
+    <div class="scenes" id="scenes">
+      <div class="scene-card card" data-scene="a">
+        <div class="head"><h3>A · Forge</h3><div class="eyebrow">embers rise</div></div>
+        <canvas id="sc-a" aria-label="Forge: blocks rise as embers from the bottom and cool from molten to bone as they go from pending to included to proven; a dark band sweeps up at the lock"></canvas>
+        <p>Blocks arrive as embers from the hearth, one column per miner, and cool as they go: pending molten, included ember, proven bone. A lock is the dark band sweeping up; everything under it is final.</p>
+      </div>
+      <div class="scene-card card" data-scene="b">
+        <div class="head"><h3>B · Lattice</h3><div class="eyebrow">a slow isometric DAG</div></div>
+        <canvas id="sc-b" aria-label="Lattice: an isometric DAG with parents behind children, the selected chain a lit spine, checkpoints as rings closing around it"></canvas>
+        <p>Time runs left to right, each miner one step deeper, so parents stand behind their children. The selected chain is the lit spine; a checkpoint is a ring that closes around it when it locks. The camera drifts at chain speed.</p>
+      </div>
+      <div class="scene-card card" data-scene="c">
+        <div class="head"><h3>C · Pulse</h3><div class="eyebrow">the tip at the centre</div></div>
+        <canvas id="sc-c" aria-label="Pulse: the tip at the centre, time outward in rings, each block a bead on its miner's ray, proofs filling beads, locks as a ring hardening"></canvas>
+        <p>The tip is the centre and time runs outward, a ring every 30 seconds. Each miner is a ray; a block is a bead on it that drifts outward, filling when proven. A lock is a ring that hardens from dashed to solid.</p>
+      </div>
+    </div>
+    <div class="legend" style="margin-top:var(--s-5)">
+      <span><i class="sw" style="border:2px solid var(--molten);border-radius:50%"></i>pending</span>
+      <span><i class="sw" style="background:var(--ember);border-radius:50%"></i>included</span>
+      <span><i class="sw" style="border:2px solid var(--line-2);border-radius:50%;opacity:.45"></i>excluded</span>
+      <span><i class="sw" style="background:var(--bone);border-radius:50%"></i>proven</span>
+      <span><i class="sw" style="border:3px solid var(--ember);border-radius:50%;background:transparent"></i>locked checkpoint</span>
+    </div>
+    <p class="note">One node is read every 2 s; the window is the last 120 s. Under reduced motion each scene draws a still frame on every reply. Add <code>?only=a</code>, <code>b</code> or <code>c</code> to the address for one scene full width.</p>
+  </div>
+</section>
+</main>
+<!-- footer:start -->
+<footer class="foot">
+  <div class="wrap">
+    <div class="foot-grid">
+      <div class="foot-brand">
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <p>Mined by GPUs. Proven by fire.</p>
+      </div>
+      <nav class="foot-col" aria-label="Read">
+        <div class="eyebrow">Read</div>
+        <a href="/litepaper">Litepaper</a>
+        <a href="/litepaper#limits">What Igneum does not claim</a>
+        <a href="/litepaper#randomx">Igneum vs RandomX</a>
+        <a href="/litepaper#shoulders">Built on the shoulders</a>
+        <a href="/bench">Engineering log</a>
+        <a href="/evidence">Evidence</a>
+        <a href="/ledger">Ledger: every criticism</a>
+      </nav>
+      <nav class="foot-col" aria-label="Run">
+        <div class="eyebrow">Run</div>
+        <a href="/miner">The miner</a>
+        <a href="/wallet">The wallet</a>
+        <a href="/miners">GPU bench table</a>
+        <a href="/miner#fee">The dev fee</a>
+        <a href="/faucet">Testnet faucet</a>
+      </nav>
+      <nav class="foot-col" aria-label="Follow">
+        <div class="eyebrow">Follow</div>
+        <a href="/live">Live devnet</a>
+        <a href="/explorer">Explorer</a>
+        <a href="/#journey">Journey</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
+        <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
+        <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
+        <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
+      </nav>
+    </div>
+    <div class="foot-base">
+      <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
+      <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
+      <span class="mono">igneum.network</span>
+    </div>
+  </div>
+</footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
+<!-- footer:end -->
+<script src="/scenes/feed.js"></script>
+<script src="/scenes/forge.js"></script>
+<script src="/scenes/lattice.js"></script>
+<script src="/scenes/pulse.js"></script>
+<script>
+(function(){
+  var only=new URLSearchParams(location.search).get('only'),grid=document.getElementById('scenes');
+  if(only){grid.classList.add('only');Array.prototype.slice.call(grid.children).forEach(function(c){if(c.getAttribute('data-scene')!==only)c.remove();});}
+  var subs=[];
+  if(document.getElementById('sc-a'))subs.push(IgneumForge.mount(document.getElementById('sc-a'),{}));
+  if(document.getElementById('sc-b'))subs.push(IgneumLattice.mount(document.getElementById('sc-b'),{window:120,compact:window.innerWidth<700}));
+  if(document.getElementById('sc-c'))subs.push(IgneumPulse.mount(document.getElementById('sc-c'),{window:120}));
+  var st=document.getElementById('feed-state');
+  IgneumFeed.start({window:120,subs:subs,onState:function(s,r){st.className='state '+(s==='live'?'live':s==='failed'?'bad':'');st.innerHTML='<span class="dot '+(s==='live'?'live':s==='failed'?'bad':'off')+'"></span>'+(s==='live'?'live devnet':s==='connecting'?'connecting to the devnet observer':(r||'live feed unavailable'));}});
+})();
+</script>
+</body>
+</html>
diff --git a/site/scenes/feed.js b/site/scenes/feed.js
new file mode 100644
index 000000000..178353b0b
--- /dev/null
+++ b/site/scenes/feed.js
@@ -0,0 +1,40 @@
+/* One poll of /api/live every 2 s, pushed to every scene on the page (docs/plans/site-ui-3.md, the scenes lab, 6 Oct 2026).
+   IgneumFeed.start({ url, window, onState, subs: [scene, ...] }); each scene has push(reply). The state words are the site's:
+   connecting, live, stale (observer offline, last update N ago), failed (live feed unavailable). */
+(function (root) {
+  'use strict';
+  function fmtAge(sec) { sec = Math.round(sec); return sec < 90 ? sec + ' s' : sec < 5400 ? Math.round(sec / 60) + ' min' : Math.round(sec / 3600) + ' h'; }
+  function start(opts) {
+    var subs = opts.subs || [], failures = 0, state = 'connecting', reason = 'connecting';
+    function set(s, r) { if (s === state && r === reason) return; state = s; reason = r; if (opts.onState) opts.onState(s, r); }
+    function poll() {
+      if (document.hidden) return;
+      fetch((opts.url || '/api/live') + '?window=' + (opts.window || 120), { cache: 'no-store' }).then(function (r) { if (!r.ok) throw new Error('HTTP ' + r.status); return r.json(); }).then(function (d) {
+        if (!d || !d.ok || !d.state || !d.blocks) throw new Error('bad reply');
+        failures = 0;
+        if (d.state.stale) set('stale', 'observer offline, last update ' + (d.state.age_s !== null && d.state.age_s !== undefined ? fmtAge(d.state.age_s) + ' ago' : 'unknown')); else set('live', null);
+        subs.forEach(function (s) { s.push(d); });
+      }).catch(function () { failures++; if (failures >= 2) set('failed', 'live feed unavailable'); });
+    }
+    poll(); var t = setInterval(poll, 2000);
+    document.addEventListener('visibilitychange', function () { if (!document.hidden) poll(); });
+    return { stop: function () { clearInterval(t); }, state: function () { return { state: state, reason: reason }; } };
+  }
+  // shared helpers for the three scenes
+  function cssVar(name, fallback) { try { var v = getComputedStyle(document.documentElement).getPropertyValue(name).trim(); return v || fallback; } catch (e) { return fallback; } }
+  function theme() { return { ember: cssVar('--ember', '#F2541B'), molten: cssVar('--molten', '#FFB35C'), bone: cssVar('--bone', '#F4F1EC'), ash: cssVar('--ash', '#9A9A9E'), line: cssVar('--line', '#2A2A30'), row: cssVar('--row', '#111114'), ink2: cssVar('--ink-2', '#C9C7C2') }; }
+  function rgba(hex, a) { var h = hex.replace('#', ''); if (h.length !== 6) return hex; return 'rgba(' + parseInt(h.slice(0, 2), 16) + ',' + parseInt(h.slice(2, 4), 16) + ',' + parseInt(h.slice(4, 6), 16) + ',' + a + ')'; }
+  // the ledger's word for a block
+  function word(b) { return b.locked ? 'locked' : b.proven ? 'proven' : (b.chain || b.color === 'blue') ? 'included' : b.color === 'red' ? 'excluded' : 'pending'; }
+  function hash32(s) { var h = 2166136261; for (var i = 0; i < s.length; i++) { h ^= s.charCodeAt(i); h = Math.imul(h, 16777619); } return (h >>> 0) / 4294967296; }
+  function sizer(canvas, ctx) { var dpr = Math.min(root.devicePixelRatio || 1, 2); return function () { var W = canvas.clientWidth, H = canvas.clientHeight; canvas.width = Math.round(W * dpr); canvas.height = Math.round(H * dpr); ctx.setTransform(dpr, 0, 0, dpr, 0, 0); return { W: W, H: H }; }; }
+  function loop(draw, canvas) {
+    var reduce = root.matchMedia && root.matchMedia('(prefers-reduced-motion: reduce)').matches, running = false, inView = true;
+    function frame(t) { if (!running) return; draw(t); if (reduce || document.hidden || !inView) { running = false; return; } requestAnimationFrame(frame); }
+    function kick() { if (!running) { running = true; requestAnimationFrame(frame); } }
+    if ('IntersectionObserver' in root) new IntersectionObserver(function (es) { es.forEach(function (e) { inView = e.isIntersecting; if (inView) kick(); }); }, { threshold: 0.05 }).observe(canvas);
+    document.addEventListener('visibilitychange', function () { if (!document.hidden) kick(); });
+    return { kick: kick, reduce: reduce };
+  }
+  root.IgneumFeed = { start: start, theme: theme, rgba: rgba, word: word, hash32: hash32, sizer: sizer, loop: loop };
+})(window);
diff --git a/site/scenes/forge.js b/site/scenes/forge.js
new file mode 100644
index 000000000..eb509c8f4
--- /dev/null
+++ b/site/scenes/forge.js
@@ -0,0 +1,61 @@
+/* Scene A, Forge. Blocks arrive as embers rising from the bottom, one column per miner. A block cools as its word changes:
+   pending is molten, included is ember, proven is bone. A lock is a dark band that sweeps up the scene at the newest locked
+   checkpoint; everything below it is final and settles to ash. Every ember is a block the observer stored. */
+(function (root) {
+  'use strict';
+  var F = root.IgneumFeed;
+  function mount(canvas, opts) {
+    opts = opts || {};
+    var ctx = canvas.getContext('2d'), size = F.sizer(canvas, ctx), dims = size(), T = F.theme();
+    var blocks = [], byHash = {}, lanes = {}, laneN = 0, lockBlue = null, lockY = null, lockTarget = null, lastT = 0;
+    var WIN = opts.window || 120; // seconds from the hearth to the top; a block's height is its header age, its glow is its arrival
+    function vnow() { return Date.now() - 2500; }
+    root.addEventListener('resize', function () { dims = size(); L.kick(); });
+    function laneX(id) { if (!(id in lanes)) lanes[id] = laneN++; var n = Math.max(1, laneN); var i = lanes[id]; return 24 + ((i * 0.618034) % 1) * (dims.W - 48); }
+    function push(d) {
+      var now = performance.now();
+      d.blocks.forEach(function (b) {
+        var e = byHash[b.hash];
+        if (e) { e.src = b; e.word = F.word(b); return; }
+        e = { hash: b.hash, src: b, word: F.word(b), x: laneX(b.miner || '?') + (F.hash32(b.hash) - 0.5) * 10, born: now, ts: b.ts, glow: 1, settle: 0 };
+        byHash[b.hash] = e; blocks.push(e);
+      });
+      var cps = (d.finality && d.finality.checkpoints) || [], locked = cps.filter(function (c) { return c.state === 'locked'; });
+      lockBlue = locked.length ? locked[locked.length - 1].blue_score : null;
+      blocks.forEach(function (e) { e.final = lockBlue !== null && e.src.blue_score !== null && e.src.blue_score <= lockBlue; });
+      var cut = vnow() - WIN * 1000 - 8000;
+      blocks = blocks.filter(function (e) { if (e.ts < cut) { delete byHash[e.hash]; return false; } return true; });
+      L.kick();
+    }
+    function yOf(e) { return dims.H - 16 - ((vnow() - e.ts) / 1000) * ((dims.H - 32) / WIN); }
+    function draw(t) {
+      var W = dims.W, H = dims.H; T = F.theme();
+      ctx.clearRect(0, 0, W, H);
+      // the hearth: a faint warm floor
+      var g = ctx.createLinearGradient(0, H, 0, H - 90); g.addColorStop(0, F.rgba(T.ember, 0.16)); g.addColorStop(1, F.rgba(T.ember, 0)); ctx.fillStyle = g; ctx.fillRect(0, H - 90, W, 90);
+      // the lock band: the lowest final block's height, eased
+      var target = null; blocks.forEach(function (e) { if (e.final) { var y = yOf(e); if (target === null || y > target) target = y; } });
+      if (target !== null) { lockY = lockY === null ? target : lockY + (target - lockY) * 0.08; }
+      if (lockY !== null) { var band = ctx.createLinearGradient(0, lockY - 70, 0, lockY); band.addColorStop(0, F.rgba(T.row, 0)); band.addColorStop(1, F.rgba(T.row, 0.9)); ctx.fillStyle = band; ctx.fillRect(0, lockY - 70, W, 70); ctx.fillStyle = F.rgba(T.row, 0.9); ctx.fillRect(0, 0, W, Math.max(0, lockY - 70));
+        ctx.strokeStyle = F.rgba(T.ember, 0.6); ctx.lineWidth = 1; ctx.beginPath(); ctx.moveTo(0, lockY); ctx.lineTo(W, lockY); ctx.stroke();
+        ctx.fillStyle = T.ash; ctx.font = '500 10px IBM Plex Mono, monospace'; ctx.textAlign = 'right'; ctx.textBaseline = 'bottom'; ctx.fillText('locked', W - 10, lockY - 4); }
+      blocks.forEach(function (e) {
+        var y = yOf(e); if (y < -20) return;
+        var age = (t - e.born) / 1000, w = e.word;
+        var col = w === 'proven' ? T.bone : w === 'included' || w === 'locked' ? T.ember : w === 'excluded' ? T.ash : T.molten;
+        var r = w === 'excluded' ? 2.2 : w === 'proven' ? 3.6 : 3;
+        var a = e.final ? 0.45 : 1;
+        if (age < 1.2) { var gl = 1 - age / 1.2; var rg = ctx.createRadialGradient(e.x, y, 0, e.x, y, 18); rg.addColorStop(0, F.rgba(T.molten, 0.5 * gl)); rg.addColorStop(1, F.rgba(T.molten, 0)); ctx.fillStyle = rg; ctx.beginPath(); ctx.arc(e.x, y, 18, 0, Math.PI * 2); ctx.fill(); }
+        var flicker = e.final ? 0 : Math.sin(t / 420 + e.x) * 0.6;
+        ctx.globalAlpha = a; ctx.fillStyle = col; ctx.beginPath(); ctx.arc(e.x + flicker, y, r, 0, Math.PI * 2); ctx.fill();
+        if (w === 'locked') { ctx.strokeStyle = F.rgba(T.ember, 0.9); ctx.lineWidth = 1.5; ctx.beginPath(); ctx.arc(e.x, y, r + 4, 0, Math.PI * 2); ctx.stroke(); }
+        // a thin trail: the ember's rise
+        ctx.strokeStyle = F.rgba(col, 0.12); ctx.lineWidth = 1; ctx.beginPath(); ctx.moveTo(e.x, y + r); ctx.lineTo(e.x, Math.min(H - 16, y + 14)); ctx.stroke();
+        ctx.globalAlpha = 1;
+      });
+    }
+    var L = F.loop(draw, canvas); L.kick();
+    return { push: push, redraw: L.kick };
+  }
+  root.IgneumForge = { mount: mount };
+})(window);
diff --git a/site/scenes/lattice.js b/site/scenes/lattice.js
new file mode 100644
index 000000000..1ff35cea3
--- /dev/null
+++ b/site/scenes/lattice.js
@@ -0,0 +1,77 @@
+/* Scene B, Lattice. A slow isometric DAG: time runs left to right, each miner lane sits one step deeper, so parents stand
+   behind their children. The selected chain is a lit spine; every other edge is a thin thread. Checkpoints are rings that
+   close around the spine where they lock. The camera drifts at chain speed. */
+(function (root) {
+  'use strict';
+  var F = root.IgneumFeed;
+  function mount(canvas, opts) {
+    opts = opts || {};
+    var ctx = canvas.getContext('2d'), size = F.sizer(canvas, ctx), dims = size(), T = F.theme();
+    var blocks = [], byHash = {}, lanes = {}, laneN = 0, cps = [], windowS = opts.window || 120, rank = {};
+    var DEPTH = 8; // up to DEPTH lanes deep; the isometric step scales with the canvas (about 4.5% of its height per lane)
+    // the step scales with the canvas; the whole shear never takes more than a third of the width, so a narrow card keeps its time axis
+    function stepY() { return Math.max(7, Math.min(dims.H * 0.045, (dims.W * 0.33) / (DEPTH * 1.4))); } function stepX() { return stepY() * 1.4; }
+    root.addEventListener('resize', function () { dims = size(); L.kick(); });
+    function lane(id) { if (!(id in lanes)) lanes[id] = laneN++; return lanes[id]; }
+    function vnow() { return Date.now() - 2500; }
+    function push(d) {
+      var now = performance.now();
+      d.blocks.forEach(function (b) { var e = byHash[b.hash]; if (e) { e.src = b; e.word = F.word(b); return; } e = { hash: b.hash, src: b, word: F.word(b), lane: lane(b.miner || '?'), born: now }; byHash[b.hash] = e; blocks.push(e); });
+      var cut = vnow() - windowS * 1000 - 20000;
+      blocks = blocks.filter(function (e) { if (e.src.ts < cut) { delete byHash[e.hash]; return false; } return true; });
+      blocks.sort(function (a, b) { return a.src.ts - b.src.ts; });
+      // lanes ranked: the miners of the selected chain nearest the front, then by blocks in the window
+      var score = {}; blocks.forEach(function (e) { var m = e.src.miner || '?'; score[m] = (score[m] || 0) + 1 + (e.src.chain ? 3 : 0); });
+      var ids = Object.keys(score).sort(function (a, b) { return score[b] - score[a] || (a < b ? -1 : 1); }); rank = {}; ids.forEach(function (id, i) { rank[id] = i; });
+      cps = (d.finality && d.finality.checkpoints) || [];
+      L.kick();
+    }
+    function project(e) {
+      // the selected chain is the front lane; the other blocks sit one step deeper per miner rank, the many small miners sharing the back
+      var W = dims.W, H = dims.H, r = rank[e.src.miner || '?'] || 0, z = e.src.chain ? 0 : (1 + (r % (DEPTH - 1))) / DEPTH;
+      var SX = stepX(), SY = stepY();
+      var x = 40 + (W - 80 - DEPTH * SX) * (1 - (vnow() - e.src.ts) / (windowS * 1000)) + z * DEPTH * SX;
+      var y = H * 0.74 - z * DEPTH * SY;
+      return { x: x, y: y, z: z };
+    }
+    function draw(t) {
+      var W = dims.W, H = dims.H; T = F.theme();
+      ctx.clearRect(0, 0, W, H);
+      // the ground plane: three faint isometric rails
+      ctx.strokeStyle = F.rgba(T.line, 0.9); ctx.lineWidth = 1;
+      for (var k = 0; k <= DEPTH; k += 2) { var yy = H * 0.74 - k * stepY(), xx = k * stepX(); ctx.beginPath(); ctx.moveTo(xx, yy); ctx.lineTo(W, yy); ctx.stroke(); }
+      var pos = {}; blocks.forEach(function (e) { pos[e.hash] = project(e); });
+      // threads, back to front
+      var ordered = blocks.slice().sort(function (a, b) { return pos[b.hash].z - pos[a.hash].z; });
+      ordered.forEach(function (e) {
+        var p = pos[e.hash]; if (p.x < -20) return;
+        (e.src.parents || []).forEach(function (h) { var q = byHash[h]; if (!q) return; var pq = pos[h]; var spine = e.src.chain && q.src.chain;
+          ctx.strokeStyle = spine ? F.rgba(T.ember, 0.9) : F.rgba(T.ash, e.word === 'excluded' ? 0.1 : 0.2); ctx.lineWidth = spine ? 2.2 : 1;
+          ctx.beginPath(); ctx.moveTo(p.x, p.y); ctx.lineTo(pq.x, pq.y); ctx.stroke();
+          if (spine) { ctx.strokeStyle = F.rgba(T.ember, 0.16); ctx.lineWidth = 8; ctx.beginPath(); ctx.moveTo(p.x, p.y); ctx.lineTo(pq.x, pq.y); ctx.stroke(); } });
+      });
+      // checkpoint rings around the spine
+      cps.forEach(function (c) {
+        var ref = null, best = Infinity; blocks.forEach(function (e) { if (!e.src.chain || e.src.blue_score === null) return; var dd = Math.abs(e.src.blue_score - c.blue_score); if (dd < best) { best = dd; ref = e; } });
+        if (!ref || best > 3) return; var p = pos[ref.hash]; if (p.x < 0 || p.x > W) return;
+        var locked = c.state === 'locked', age = (performance.now() - ref.born) / 1000, close = locked ? Math.min(1, age / 1.5) : 0.35;
+        ctx.strokeStyle = F.rgba(T.ember, locked ? 0.85 : 0.35); ctx.lineWidth = locked ? 1.8 : 1; ctx.setLineDash(locked ? [] : [3, 5]);
+        ctx.beginPath(); ctx.ellipse(p.x, p.y, 22 - 8 * close, 9 - 3 * close, 0, 0, Math.PI * 2); ctx.stroke(); ctx.setLineDash([]);
+        if (locked && !opts.compact) { ctx.fillStyle = T.ash; ctx.font = '500 10px IBM Plex Mono, monospace'; ctx.textAlign = 'center'; ctx.textBaseline = 'alphabetic'; ctx.fillText(Math.round((c.fraction_total || 0) * 100) + '%', p.x, p.y - 16); }
+      });
+      // blocks: small isometric tiles, lit by word
+      ordered.forEach(function (e) {
+        var p = pos[e.hash]; if (p.x < -20 || p.x > W + 20) return; var w = e.word, age = (t - e.born) / 1000;
+        var col = w === 'proven' ? T.bone : (w === 'included' || w === 'locked') ? T.ember : w === 'excluded' ? T.ash : T.molten;
+        var s = e.src.chain ? 6 : 4.5, a = w === 'excluded' ? 0.45 : 1 - p.z * 0.35;
+        if (age < 1.4) { var gl = 1 - age / 1.4; var rg = ctx.createRadialGradient(p.x, p.y, 0, p.x, p.y, 20); rg.addColorStop(0, F.rgba(T.ember, 0.45 * gl)); rg.addColorStop(1, F.rgba(T.ember, 0)); ctx.fillStyle = rg; ctx.beginPath(); ctx.arc(p.x, p.y, 20, 0, Math.PI * 2); ctx.fill(); }
+        ctx.globalAlpha = a; ctx.fillStyle = w === 'pending' ? T.row : col; ctx.strokeStyle = col; ctx.lineWidth = 1.2;
+        ctx.beginPath(); ctx.moveTo(p.x, p.y - s); ctx.lineTo(p.x + s * 1.3, p.y); ctx.lineTo(p.x, p.y + s); ctx.lineTo(p.x - s * 1.3, p.y); ctx.closePath(); ctx.fill(); ctx.stroke();
+        ctx.globalAlpha = 1;
+      });
+    }
+    var L = F.loop(draw, canvas); L.kick();
+    return { push: push, redraw: L.kick };
+  }
+  root.IgneumLattice = { mount: mount };
+})(window);
diff --git a/site/scenes/pulse.js b/site/scenes/pulse.js
new file mode 100644
index 000000000..06b10faff
--- /dev/null
+++ b/site/scenes/pulse.js
@@ -0,0 +1,60 @@
+/* Scene C, Pulse. A radial view: the tip at the centre, time outward in rings, each miner a ray. A block is a bead on its
+   miner's ray at the radius of its age; a proven bead fills; a locked checkpoint is a ring that hardens from dashed to
+   solid at the radius where it locked. Beads drift outward as time passes. */
+(function (root) {
+  'use strict';
+  var F = root.IgneumFeed;
+  function mount(canvas, opts) {
+    opts = opts || {};
+    var ctx = canvas.getContext('2d'), size = F.sizer(canvas, ctx), dims = size(), T = F.theme();
+    var blocks = [], byHash = {}, rays = {}, rayN = 0, cps = [], windowS = opts.window || 120;
+    root.addEventListener('resize', function () { dims = size(); L.kick(); });
+    function vnow() { return Date.now() - 2500; }
+    function ray(id) { if (!(id in rays)) rays[id] = rayN++; return rays[id]; }
+    function push(d) {
+      var now = performance.now();
+      d.blocks.forEach(function (b) { var e = byHash[b.hash]; if (e) { e.src = b; e.word = F.word(b); return; } e = { hash: b.hash, src: b, word: F.word(b), ray: ray(b.miner || '?'), born: now }; byHash[b.hash] = e; blocks.push(e); });
+      var cut = vnow() - windowS * 1000 - 20000;
+      blocks = blocks.filter(function (e) { if (e.src.ts < cut) { delete byHash[e.hash]; return false; } return true; });
+      cps = (d.finality && d.finality.checkpoints) || [];
+      L.kick();
+    }
+    function polar(e) { var R = Math.min(dims.W, dims.H) / 2 - 14, cx = dims.W / 2, cy = dims.H / 2; var r = 10 + (R - 10) * ((vnow() - e.src.ts) / (windowS * 1000)); var ang = ((e.ray * 0.618034) % 1) * Math.PI * 2 - Math.PI / 2; return { x: cx + Math.cos(ang) * r, y: cy + Math.sin(ang) * r, r: r, ang: ang }; }
+    function draw(t) {
+      var W = dims.W, H = dims.H; T = F.theme(); var cx = W / 2, cy = H / 2, R = Math.min(W, H) / 2 - 14;
+      ctx.clearRect(0, 0, W, H);
+      // time rings every 30 s
+      ctx.strokeStyle = F.rgba(T.line, 0.9); ctx.lineWidth = 1;
+      for (var s = 30; s < windowS; s += 30) { var rr = 10 + (R - 10) * (s / windowS); ctx.beginPath(); ctx.arc(cx, cy, rr, 0, Math.PI * 2); ctx.stroke(); }
+      // the tip
+      var pulse = 0.5 + 0.5 * Math.sin(t / 900); var tg = ctx.createRadialGradient(cx, cy, 0, cx, cy, 26); tg.addColorStop(0, F.rgba(T.ember, 0.35 + 0.2 * pulse)); tg.addColorStop(1, F.rgba(T.ember, 0)); ctx.fillStyle = tg; ctx.beginPath(); ctx.arc(cx, cy, 26, 0, Math.PI * 2); ctx.fill();
+      ctx.fillStyle = T.ember; ctx.beginPath(); ctx.arc(cx, cy, 3.5, 0, Math.PI * 2); ctx.fill();
+      // checkpoint rings, hardening when locked
+      cps.forEach(function (c) {
+        var ref = null, best = Infinity; blocks.forEach(function (e) { if (e.src.blue_score === null) return; var dd = Math.abs(e.src.blue_score - c.blue_score); if (dd < best) { best = dd; ref = e; } });
+        if (!ref || best > 3) return; var p = polar(ref); if (p.r > R) return; var locked = c.state === 'locked', age = (performance.now() - ref.born) / 1000, hard = locked ? Math.min(1, age / 2) : 0;
+        ctx.strokeStyle = F.rgba(T.ember, locked ? 0.35 + 0.5 * hard : 0.3); ctx.lineWidth = locked ? 1 + hard : 1; ctx.setLineDash(locked && hard > 0.9 ? [] : [3, 6]);
+        ctx.beginPath(); ctx.arc(cx, cy, p.r, 0, Math.PI * 2); ctx.stroke(); ctx.setLineDash([]);
+      });
+      // the selected chain as a soft spiral thread through its beads
+      var chain = blocks.filter(function (e) { return e.src.chain; }).sort(function (a, b) { return a.src.ts - b.src.ts; });
+      // the selected chain as short arcs between consecutive chain beads (the arc follows the ring between the two radii, never a chord through the centre)
+      if (chain.length > 1) { ctx.strokeStyle = F.rgba(T.ember, 0.28); ctx.lineWidth = 1; for (var i = 1; i < chain.length; i++) { var p0 = polar(chain[i - 1]), p1 = polar(chain[i]); if (p0.r > R || p1.r > R) continue; var a0 = p0.ang, a1 = p1.ang, da = ((a1 - a0 + Math.PI * 3) % (Math.PI * 2)) - Math.PI; var steps = 10; ctx.beginPath(); for (var k = 0; k <= steps; k++) { var f = k / steps, rr = p0.r + (p1.r - p0.r) * f, aa = a0 + da * f; var x = cx + Math.cos(aa) * rr, y = cy + Math.sin(aa) * rr; if (k) ctx.lineTo(x, y); else ctx.moveTo(x, y); } ctx.stroke(); } }
+      // beads
+      blocks.forEach(function (e) {
+        var p = polar(e); if (p.r > R + 6) return; var w = e.word, age = (t - e.born) / 1000;
+        var col = w === 'proven' ? T.bone : (w === 'included' || w === 'locked') ? T.ember : w === 'excluded' ? T.ash : T.molten;
+        var rad = e.src.chain ? 4 : 3;
+        if (age < 1.2) { var gl = 1 - age / 1.2; var rg = ctx.createRadialGradient(p.x, p.y, 0, p.x, p.y, 16); rg.addColorStop(0, F.rgba(T.ember, 0.5 * gl)); rg.addColorStop(1, F.rgba(T.ember, 0)); ctx.fillStyle = rg; ctx.beginPath(); ctx.arc(p.x, p.y, 16, 0, Math.PI * 2); ctx.fill(); }
+        ctx.globalAlpha = w === 'excluded' ? 0.45 : 1;
+        ctx.beginPath(); ctx.arc(p.x, p.y, rad, 0, Math.PI * 2);
+        if (w === 'proven' || w === 'included' || w === 'locked') { ctx.fillStyle = col; ctx.fill(); } else { ctx.fillStyle = T.row; ctx.fill(); ctx.strokeStyle = col; ctx.lineWidth = 1.2; ctx.stroke(); }
+        if (w === 'locked') { ctx.strokeStyle = F.rgba(T.ember, 0.9); ctx.lineWidth = 1.5; ctx.beginPath(); ctx.arc(p.x, p.y, rad + 4, 0, Math.PI * 2); ctx.stroke(); }
+        ctx.globalAlpha = 1;
+      });
+    }
+    var L = F.loop(draw, canvas); L.kick();
+    return { push: push, redraw: L.kick };
+  }
+  root.IgneumPulse = { mount: mount };
+})(window);
diff --git a/site/scrub.mjs b/site/scrub.mjs
index 64acd3161..45890e9ed 100644
--- a/site/scrub.mjs
+++ b/site/scrub.mjs
@@ -8,7 +8,11 @@ import { fileURLToPath } from 'node:url';
 const here = dirname(fileURLToPath(import.meta.url));
 const utc = (h, m, s) => `${String((Number(h) + 23) % 24).padStart(2, '0')}:${m}${s || ''} UTC`;
 const RULES = [
-  // machines: model names only
+  // machines: model names only (6 October 2026, site audit: the two Windows machines are described, never numbered)
+  [/\bPC 1's\b/g, "the three-card Windows rig's"],
+  [/\bPC 1\b/g, 'the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT)'],
+  [/\bPC 2's\b/g, "the RTX 5090 Windows rig's"],
+  [/\bPC 2\b/g, 'the RTX 5090 Windows rig'],
   [/the PC node at 192\.168\.[0-9.]+/g, 'the RTX 5090 node on the LAN'],
   [/\bthe PC node\b/g, 'the RTX 5090 node'],
   [/\bWindows PC\b/g, 'an RTX 5090 on Windows'],
@@ -33,6 +37,12 @@ const RULES = [
   [/dl\.igneum\.network[^ )`]*/g, 'the downloads host'],
   [/,? ?log intake id \d+/g, ''],
   [/\bintake id \d+\b/g, 'intake'],
+  // the site audit's page-leak shapes (6 October 2026): process ids, listen addresses, config paths, the node's listen flag
+  [/\bpid \d+\b/g, 'pid <n>'],
+  [/0\.0\.0\.0:\d+/g, '<listen address>'],
+  [/--rpclisten=\S*/g, 'the RPC listen flag'],
+  [/~\/\.config\/[A-Za-z0-9_./-]*/g, '<config path>'],
+  [/~\/\.config/g, '<config path>'],
   [/~\/Desktop\//g, '`'], [/``/g, '`'],
   [/~\/\.cargo\/bin\/cargo/g, 'cargo'],
   [/\/Users\/[A-Za-z0-9_.-]+/g, '~'],
diff --git a/site/site.css b/site/site.css
new file mode 100644
index 000000000..3500f2c5e
--- /dev/null
+++ b/site/site.css
@@ -0,0 +1,230 @@
+/* Igneum site: one design system for every page (docs/plans/site-ui-3.md, 6 October 2026).
+   Tokens, type, the shared components (nav, footer, card, tile, table, button, pill, note, callout, code) and the
+   state words. Each page keeps a short block of its own after this file. Fonts are declared in partials/head.html. */
+
+/* ---------- 1. tokens ---------- */
+:root{
+  --obsidian:#0C0C0E;--graphite:#16161A;--row:#111114;--line:#2A2A30;--line-2:#3A3A42;
+  --ember:#F2541B;--ember-hi:#FF6A2B;--ember-text:#F2541B;--molten:#FFB35C;--molten-text:#FFB35C;
+  --bone:#F4F1EC;--ink-2:#C9C7C2;--ash:#9A9A9E;--ember-ink:#0C0C0E;--ok:#FFB35C;
+  --scrim:rgba(12,12,14,.72);--top-bg:rgba(12,12,14,.86);--shadow:rgba(0,0,0,.6);--hover:rgba(255,255,255,.04);
+  --ember-12:rgba(242,84,27,.12);--ember-40:rgba(242,84,27,.4);--molten-10:rgba(255,179,92,.1);
+  /* the chrome tokens older page blocks still read */
+  --ground:var(--obsidian);--surface:var(--graphite);--surface-2:var(--row);--ink:var(--bone);--quiet:var(--ash);
+  --ui-bg:var(--top-bg);--ui-menu:var(--obsidian);--ui-ink:var(--bone);--ui-ink-2:var(--ink-2);--ui-ash:var(--ash);--ui-line:var(--line);--ui-line-2:var(--line-2);
+  --ui-accent:var(--ember);--ui-accent-ink:var(--ember-ink);--ui-hot:var(--molten);--ui-hover:var(--ember-hi);--ui-tint:var(--ember-12);
+  --code:var(--row);--code-ink:var(--ink-2);
+  /* type */
+  --f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;
+  --f-display:'Unbounded','Unbounded Fallback',sans-serif;
+  --f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
+  --t-xs:11px;--t-sm:12px;--t-base:15px;--t-md:17px;--t-lg:19px;--t-h3:20px;
+  --t-h2:clamp(26px,3.2vw,36px);--t-h1:clamp(32px,5vw,56px);--t-hero:clamp(40px,7vw,76px);--t-num:clamp(26px,3vw,40px);
+  /* space, radius */
+  --s-1:4px;--s-2:8px;--s-3:12px;--s-4:16px;--s-5:24px;--s-6:32px;
+  --gutter:32px;--sec:96px;--max:1120px;--nav-h:64px;
+  --r-card:16px;--r-row:12px;--r-btn:10px;--r-pill:999px;
+  color-scheme:dark;
+}
+@media (prefers-color-scheme:light){:root:not([data-theme="dark"]){
+  --obsidian:#F4F1EC;--graphite:#FFFFFF;--row:#FAF8F5;--line:#E2DED8;--line-2:#CFCAC2;
+  --ember:#D0420D;--ember-hi:#E04A14;--ember-text:#B8390C;--molten:#B8731F;--molten-text:#8F5810;
+  --bone:#16161A;--ink-2:#3C3C42;--ash:#6B6B70;--ember-ink:#FFFFFF;--ok:#B8731F;
+  --scrim:rgba(244,241,236,.72);--top-bg:rgba(244,241,236,.88);--shadow:rgba(0,0,0,.18);--hover:rgba(0,0,0,.04);
+  --ember-12:rgba(224,74,20,.1);--ember-40:rgba(224,74,20,.4);--molten-10:rgba(184,115,31,.1);
+  color-scheme:light;
+}}
+:root[data-theme="light"]{
+  --obsidian:#F4F1EC;--graphite:#FFFFFF;--row:#FAF8F5;--line:#E2DED8;--line-2:#CFCAC2;
+  --ember:#D0420D;--ember-hi:#E04A14;--ember-text:#B8390C;--molten:#B8731F;--molten-text:#8F5810;
+  --bone:#16161A;--ink-2:#3C3C42;--ash:#6B6B70;--ember-ink:#FFFFFF;--ok:#B8731F;
+  --scrim:rgba(244,241,236,.72);--top-bg:rgba(244,241,236,.88);--shadow:rgba(0,0,0,.18);--hover:rgba(0,0,0,.04);
+  --ember-12:rgba(224,74,20,.1);--ember-40:rgba(224,74,20,.4);--molten-10:rgba(184,115,31,.1);
+  color-scheme:light;
+}
+@media (max-width:1000px){:root{--gutter:24px}}
+@media (max-width:720px){:root{--gutter:16px;--sec:64px}}
+
+/* ---------- 2. base ---------- */
+*{box-sizing:border-box}
+html{-webkit-text-size-adjust:100%;scroll-behavior:smooth;scroll-padding-top:calc(var(--nav-h) + 16px)}
+@media (prefers-reduced-motion:reduce){html{scroll-behavior:auto}}
+body{margin:0;background:var(--obsidian);color:var(--bone);font:400 var(--t-md)/1.6 var(--f-sans);-webkit-font-smoothing:antialiased;font-variant-numeric:tabular-nums;overflow-x:hidden}
+h1,h2,h3,h4{font-family:var(--f-display);color:var(--bone);margin:0;text-wrap:balance;letter-spacing:-.01em}
+h1{font-size:var(--t-h1);font-weight:900;line-height:1.05}
+h2{font-size:var(--t-h2);font-weight:700;line-height:1.1}
+h3{font-size:var(--t-h3);font-weight:700;line-height:1.25}
+p,li,dd,figcaption,td{text-wrap:pretty}
+p{margin:0 0 1em}
+a{color:var(--ember-text);text-decoration:none}
+a:hover{text-decoration:underline;text-underline-offset:3px}
+a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible,input:focus-visible{outline:2px solid var(--ember);outline-offset:3px;border-radius:6px}
+::selection{background:var(--ember-40)}
+img,canvas,svg,video{max-width:100%;display:block}
+code,kbd,.mono{font-family:var(--f-mono)}
+hr{border:0;border-top:1px solid var(--line);margin:var(--s-6) 0}
+.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ember);color:var(--ember-ink);padding:10px 14px;border-radius:var(--r-btn);font:600 15px/1.2 var(--f-sans);text-decoration:none}
+.skip:focus{top:12px}
+.wrap{max-width:var(--max);margin:0 auto;padding:0 var(--gutter)}
+.sec{padding:var(--sec) 0}
+.sec+.sec{padding-top:0}
+.sec-head{max-width:68ch;margin-bottom:var(--s-6)}
+.sec-head p{color:var(--ink-2);font-size:var(--t-lg);line-height:1.5;margin:var(--s-3) 0 0}
+.lead{font-size:var(--t-lg);line-height:1.55;color:var(--ink-2);max-width:62ch}
+.eyebrow{font:500 var(--t-sm)/1.4 var(--f-mono);letter-spacing:.16em;text-transform:uppercase;color:var(--ash);margin-bottom:var(--s-3)}
+.eyebrow.ember{color:var(--ember-text)}
+.measure{max-width:68ch}
+.muted{color:var(--ash)}
+.right{text-align:right}
+.visually-hidden{position:absolute!important;width:1px;height:1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap}
+
+/* ---------- 3. nav ---------- */
+.nav{position:sticky;top:0;z-index:40;background:var(--top-bg);backdrop-filter:blur(14px);-webkit-backdrop-filter:blur(14px);border-bottom:1px solid var(--line)}
+.nav .wrap{display:flex;align-items:center;gap:var(--s-5);height:var(--nav-h)}
+.brand{display:inline-flex;align-items:center;gap:10px;color:var(--bone);text-decoration:none}
+.brand:hover{text-decoration:none}
+.brand .mark{width:28px;height:28px;display:grid;place-items:center;border-radius:8px;background:var(--graphite);border:1px solid var(--line)}
+.brand .word{font:900 20px/1 var(--f-display);letter-spacing:.06em}
+.nav .links{display:flex;align-items:center;gap:var(--s-4);margin-left:auto}
+.nav .links a{color:var(--ink-2);font-size:var(--t-base);font-weight:500;padding:8px 2px;border-bottom:2px solid transparent}
+.nav .links a:hover{color:var(--bone);text-decoration:none}
+.nav .links a[aria-current="page"]{color:var(--bone);border-bottom-color:var(--ember)}
+.nav .cta{margin-left:var(--s-3)}
+.burger{display:none;margin-left:auto;width:44px;height:44px;border-radius:var(--r-btn);border:1px solid var(--line);background:var(--graphite);color:var(--bone);cursor:pointer;align-items:center;justify-content:center}
+.burger .bars{display:block;width:18px;height:2px;background:currentColor;position:relative}
+.burger .bars::before,.burger .bars::after{content:"";position:absolute;left:0;width:18px;height:2px;background:currentColor}
+.burger .bars::before{top:-6px}.burger .bars::after{top:6px}
+.nav-sheet{display:none}
+@media (max-width:900px){
+  .nav .links{display:none}
+  .nav .cta{display:none}
+  .burger{display:inline-flex}
+  .nav.open .nav-sheet{display:block;position:fixed;inset:var(--nav-h) 0 0 0;background:var(--obsidian);z-index:39;overflow:auto;padding:var(--s-5) var(--gutter)}
+  .nav-sheet a{display:block;padding:14px 0;border-bottom:1px solid var(--line);color:var(--bone);font-size:var(--t-lg);font-weight:500}
+  .nav-sheet a[aria-current="page"]{color:var(--ember-text)}
+  .nav-sheet .btn{margin-top:var(--s-5);width:100%}
+}
+
+/* ---------- 4. footer ---------- */
+.foot{border-top:1px solid var(--line);padding:var(--s-6) 0 var(--s-5);margin-top:var(--sec);color:var(--ash);font-size:var(--t-base)}
+.foot-grid{display:grid;grid-template-columns:1.4fr 1fr 1fr 1fr;gap:var(--s-6)}
+.foot-brand .brand{margin-bottom:var(--s-3)}
+.foot-brand p{color:var(--ash);margin:0}
+.foot-col .eyebrow{margin-bottom:var(--s-3)}
+.foot-col a{display:block;color:var(--ink-2);padding:5px 0}
+.foot-col a:hover{color:var(--bone)}
+.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:var(--s-3);border-top:1px solid var(--line);margin-top:var(--s-6);padding-top:var(--s-4);font-size:var(--t-sm)}
+.foot-imprint{max-width:60ch;line-height:1.5}
+.theme{display:inline-flex;border:1px solid var(--line);border-radius:var(--r-pill);overflow:hidden}
+.theme button{background:transparent;border:0;color:var(--ash);font:500 var(--t-sm)/1 var(--f-mono);padding:8px 12px;cursor:pointer}
+.theme button[aria-pressed="true"]{background:var(--graphite);color:var(--bone)}
+@media (max-width:900px){.foot-grid{grid-template-columns:1fr 1fr}}
+@media (max-width:500px){.foot-grid{grid-template-columns:1fr}}
+
+/* ---------- 5. components ---------- */
+.card{background:var(--graphite);border:1px solid var(--line);border-radius:var(--r-card);padding:var(--s-5)}
+.card h3{margin-bottom:var(--s-2)}
+.card p:last-child{margin-bottom:0}
+.grid{display:grid;gap:var(--s-4)}
+.grid.c2{grid-template-columns:repeat(2,minmax(0,1fr))}
+.grid.c3{grid-template-columns:repeat(3,minmax(0,1fr))}
+.grid.c4{grid-template-columns:repeat(4,minmax(0,1fr))}
+@media (max-width:900px){.grid.c3,.grid.c4{grid-template-columns:repeat(2,minmax(0,1fr))}}
+@media (max-width:560px){.grid.c2,.grid.c3,.grid.c4{grid-template-columns:minmax(0,1fr)}}
+/* a grid track never grows past the viewport for a long line inside it (the 390 px overflow class, 6 Oct 2026) */
+.grid>*,.tiles>*,.card,.two>*,.split>*,.split2>*,.hero-grid>*,.download>*,.layout>*,.pillars>*,.phases>*,.group>*,.feats>*,.fee>*,.steps>*,.states>*,.ol>*,.cells>*,.strip>*{min-width:0}
+pre{max-width:100%}
+@media (max-width:720px){main table{display:block;overflow-x:auto;max-width:100%;-webkit-overflow-scrolling:touch}.tbl table{display:table}}
+.tiles{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:var(--s-3)}
+@media (max-width:700px){.tiles{grid-template-columns:repeat(2,minmax(0,1fr))}}
+.tile{background:var(--row);border:1px solid var(--line);border-radius:var(--r-row);padding:var(--s-4) var(--s-4) var(--s-3);min-width:0}
+.tile .v{font:700 var(--t-num)/1 var(--f-display);color:var(--bone);letter-spacing:-.02em;overflow-wrap:anywhere}
+.tile .v.state{font:500 var(--t-base)/1.3 var(--f-mono);color:var(--ash);padding:6px 0}
+.tile .k{font:400 var(--t-sm)/1.4 var(--f-mono);color:var(--ash);margin-top:var(--s-2)}
+.tile.hot .v{color:var(--ember-text)}
+.btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;min-height:44px;padding:10px 20px;border-radius:var(--r-btn);border:1px solid var(--line);background:transparent;color:var(--bone);font:600 var(--t-base)/1.2 var(--f-sans);text-decoration:none;cursor:pointer;white-space:nowrap}
+.btn:hover{text-decoration:none;border-color:var(--line-2);background:var(--hover)}
+.btn.primary{background:var(--ember);border-color:var(--ember);color:var(--ember-ink);font:700 15px/1.2 var(--f-display);letter-spacing:.01em}
+.btn.primary:hover{background:var(--ember-hi);border-color:var(--ember-hi)}
+.btn.small{min-height:36px;padding:6px 14px;font-size:14px}
+.btn[aria-disabled="true"],.btn:disabled{opacity:.5;cursor:default}
+@media (max-width:720px){.cta .btn{width:100%}}
+.cta{display:flex;flex-wrap:wrap;gap:var(--s-3)}
+.pill{display:inline-flex;align-items:center;gap:8px;border:1px solid var(--line);border-radius:var(--r-pill);padding:5px 12px;font:500 var(--t-sm)/1.4 var(--f-mono);color:var(--ink-2);background:var(--row)}
+.dot{width:8px;height:8px;border-radius:50%;background:var(--molten);display:inline-block;flex:none}
+.dot.live{animation:pulse 2s ease-in-out infinite}
+.dot.off{background:var(--ash);animation:none}
+.dot.bad{background:var(--ember);animation:none}
+@keyframes pulse{0%,100%{opacity:1}50%{opacity:.35}}
+@media (prefers-reduced-motion:reduce){.dot.live{animation:none}}
+.note{color:var(--ash);font-size:var(--t-base);line-height:1.55;max-width:80ch;margin:var(--s-4) 0 0}
+.callout{border-left:2px solid var(--ember);background:var(--row);border-radius:0 var(--r-row) var(--r-row) 0;padding:var(--s-4) var(--s-5);margin:var(--s-5) 0;color:var(--ink-2)}
+.callout p:last-child{margin:0}
+pre,.code{background:var(--row);border:1px solid var(--line);border-radius:var(--r-row);padding:var(--s-4);font:400 14px/1.6 var(--f-mono);color:var(--ink-2);overflow:auto;margin:0}
+code{font-size:.92em;background:var(--row);border:1px solid var(--line);border-radius:6px;padding:1px 6px;color:var(--ink-2)}
+pre code{background:none;border:0;padding:0}
+.tbl{overflow-x:auto;-webkit-overflow-scrolling:touch;border:1px solid var(--line);border-radius:var(--r-row);background:var(--graphite);min-width:0;max-width:100%}
+table{border-collapse:collapse;width:100%;font-size:var(--t-base);line-height:1.45}
+th,td{text-align:left;padding:10px 14px;vertical-align:top}
+th{font:500 var(--t-sm)/1.4 var(--f-mono);letter-spacing:.1em;text-transform:uppercase;color:var(--ash);border-bottom:1px solid var(--line);white-space:nowrap}
+td{border-top:1px solid var(--line);color:var(--ink-2)}
+tr:first-child td{border-top:0}
+td.num,th.num{text-align:right;font-variant-numeric:tabular-nums;white-space:nowrap}
+td.id{font-family:var(--f-mono);font-size:14px;overflow-wrap:anywhere}
+@media (max-width:720px){th,td{padding:8px 10px}}
+.kv{display:grid;grid-template-columns:minmax(120px,30%) 1fr;gap:0 var(--s-4)}
+.kv>div{padding:10px 0;border-top:1px solid var(--line);color:var(--ink-2)}
+.kv>div:nth-child(-n+2){border-top:0}
+.kv .k{font:500 var(--t-sm)/1.4 var(--f-mono);letter-spacing:.08em;text-transform:uppercase;color:var(--ash);padding-top:12px}
+details{border-top:1px solid var(--line)}
+details:last-of-type{border-bottom:1px solid var(--line)}
+summary{cursor:pointer;padding:14px 0;color:var(--bone);font-weight:500;list-style:none;display:flex;justify-content:space-between;gap:var(--s-3)}
+summary::-webkit-details-marker{display:none}
+summary::after{content:"+";font-family:var(--f-mono);color:var(--ash)}
+details[open] summary::after{content:"\2212"}
+details>:not(summary){padding-bottom:var(--s-4);color:var(--ink-2)}
+input,select,textarea{font:400 var(--t-md)/1.4 var(--f-sans);color:var(--bone);background:var(--row);border:1px solid var(--line);border-radius:var(--r-btn);padding:10px 12px;width:100%}
+input:focus,select:focus,textarea:focus{border-color:var(--line-2)}
+.field{display:grid;gap:6px;margin-bottom:var(--s-4)}
+.field label{font:500 var(--t-sm)/1.4 var(--f-mono);letter-spacing:.08em;text-transform:uppercase;color:var(--ash)}
+
+/* ---------- 6. states ---------- */
+.state{display:inline-flex;align-items:center;gap:8px;font:500 var(--t-sm)/1.4 var(--f-mono);letter-spacing:.08em;text-transform:uppercase;color:var(--ash)}
+.state.live{color:var(--molten-text)}
+.state.bad{color:var(--ember-text)}
+.empty{color:var(--ash);font-size:var(--t-base);padding:var(--s-5) 0}
+.empty.err{color:var(--ember-text)}
+.spinner{width:24px;height:24px;border-radius:50%;border:2px solid var(--line);border-top-color:var(--ember);animation:spin 1s linear infinite}
+@keyframes spin{to{transform:rotate(360deg)}}
+@media (prefers-reduced-motion:reduce){.spinner{animation:none}}
+
+/* ---------- 7. scenes ---------- */
+.viz{padding:var(--s-4)}
+.viz-head{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:center;gap:10px var(--s-5);margin-bottom:var(--s-3)}
+.viz-stats{display:flex;flex-wrap:wrap;gap:var(--s-3) var(--s-4);font:400 var(--t-sm)/1.4 var(--f-mono);color:var(--ash)}
+.viz-stats b{color:var(--bone);font-weight:500}
+.viz canvas{width:100%;height:340px;border-radius:var(--r-row);background:var(--row);border:1px solid var(--line)}
+@media (max-width:600px){.viz canvas{height:240px}}
+.legend{display:flex;flex-wrap:wrap;gap:var(--s-3) var(--s-4);margin-top:var(--s-4);font-size:14px;color:var(--ink-2)}
+.legend[hidden]{display:none}
+.legend span{display:inline-flex;align-items:center;gap:8px}
+.sw{width:12px;height:12px;border-radius:3px;display:inline-block;flex:none}
+
+/* the engaged scene: a chip in the corner while the wheel zooms */
+.scene canvas.engaged{outline:2px solid var(--ember);outline-offset:-2px}
+.chip-zoom{position:absolute;right:12px;top:12px;display:inline-flex;align-items:center;gap:8px;background:var(--graphite);border:1px solid var(--line-2);border-radius:var(--r-pill);padding:5px 12px;font:500 var(--t-sm)/1.4 var(--f-mono);color:var(--ink-2);pointer-events:none}
+.chip-zoom[hidden]{display:none}
+
+/* ---------- 8. print ---------- */
+@media print{
+  :root{--obsidian:#fff;--graphite:#fff;--row:#f3f3f3;--line:#bbb;--line-2:#999;--bone:#000;--ink-2:#111;--ash:#444;--ember:#B8390C;--ember-text:#B8390C;--molten-text:#8F5810}
+  .nav,.foot,.burger,.skip,.cta,.theme,.no-print{display:none!important}
+  body{font-size:11pt;line-height:1.45;background:#fff;color:#000}
+  .wrap{max-width:none;padding:0}
+  a{color:#000;text-decoration:underline}
+  a[href^="http"]::after{content:" (" attr(href) ")";font-size:9pt;color:#444}
+  .card,.tbl,.callout,pre{break-inside:avoid;border-color:#bbb}
+  h1,h2,h3{break-after:avoid}
+  tr{break-inside:avoid}
+  canvas{display:none}
+}
diff --git a/site/wallet.html b/site/wallet.html
index 5d67e81a3..e8e0f0918 100644
--- a/site/wallet.html
+++ b/site/wallet.html
@@ -31,9 +31,10 @@
 <!-- head:start -->
 <link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="stylesheet" href="/site.css">
 <style>
-/* Shared by every page. Source: site/partials/head.html, injected by site/build.mjs between the head markers. Edit the partial, not the page. */
-/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. */
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
 @font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@@ -45,83 +46,23 @@
 @font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
 @font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
 @font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
-:root{--f-sans:'IBM Plex Sans','Plex Sans Fallback',system-ui,-apple-system,sans-serif;--f-display:'Unbounded','Unbounded Fallback',sans-serif;--f-mono:'IBM Plex Mono','Plex Mono Fallback',ui-monospace,Menlo,monospace;
-/* site chrome tokens (nav, footer, skip link). Dark by default; the litepaper sets light values and resets these in dark mode */
---nav-h:68px;--ui-bg:rgba(12,12,14,.84);--ui-menu:#0C0C0E;--ui-ink:#F4F1EC;--ui-ink-2:#C9C7C2;--ui-ash:#9A9A9E;--ui-line:#2A2A30;--ui-line-2:#3A3A42;--ui-accent:#F2541B;--ui-accent-ink:#0C0C0E;--ui-hot:#FFB35C;--ui-hover:#FF6A2B;--ui-tint:rgba(242,84,27,.12)}
-html{-webkit-text-size-adjust:100%}
-h1,h2,h3{text-wrap:balance}
-p,li,dd,figcaption{text-wrap:pretty}
-a:focus-visible,button:focus-visible,summary:focus-visible,[tabindex]:focus-visible{outline:2px solid var(--ui-accent);outline-offset:3px;border-radius:6px}
-.skip{position:absolute;left:12px;top:-80px;z-index:50;background:var(--ui-accent);color:var(--ui-accent-ink);padding:10px 14px;border-radius:10px;font:600 15px/1.2 var(--f-sans);text-decoration:none}
-.skip:focus{top:12px}
-/* nav: one bar on every page, the mark in its black square, seven links and the miner button, a menu under 941 px (the eight items need 688 px beside the brand at 15 px, so the bar fits from 941 px up without a wrapped label) */
-.nav{position:sticky;top:0;z-index:20;background:var(--ui-bg);-webkit-backdrop-filter:blur(12px);backdrop-filter:blur(12px);border-bottom:1px solid var(--ui-line);color:var(--ui-ink)}
-.nav .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:var(--nav-h)}
-.nav a{color:inherit;text-decoration:none}
-.brand{display:inline-flex;align-items:center;gap:10px;color:var(--ui-ink);text-decoration:none;flex:0 0 auto}
-.brand .mark{display:block;flex:0 0 auto}
-.brand .word{font-family:var(--f-display);font-weight:900;font-size:20px;letter-spacing:.06em;line-height:1}
-.nav .links{display:flex;align-items:center;gap:clamp(14px,2vw,26px);font-size:15px;font-weight:500}
-.nav .links a{color:var(--ui-ink-2);padding:4px 0;border-bottom:2px solid transparent;white-space:nowrap;transition:color .15s ease,border-color .15s ease}
-.nav .links a:hover,.nav .brand:hover{color:var(--ui-hot);text-decoration:none}
-.nav .brand:hover{color:var(--ui-ink)}
-.nav .links a[aria-current="page"]{color:var(--ui-ink);border-bottom-color:var(--ui-accent)}
-.nav .links a.cta{display:inline-flex;align-items:center;justify-content:center;min-height:40px;padding:8px 16px;border-radius:10px;font-weight:600;background:var(--ui-accent);color:var(--ui-accent-ink);border:1px solid var(--ui-accent);transition:background .15s ease,transform .15s ease}
-.nav .links a.cta:hover{background:var(--ui-hover);border-color:var(--ui-hover);color:var(--ui-accent-ink);transform:translateY(-1px)}
-.burger{display:none;background:none;border:1px solid var(--ui-line-2);color:var(--ui-ink);border-radius:10px;width:44px;height:44px;align-items:center;justify-content:center;cursor:pointer;padding:0;flex:0 0 auto}
-.burger .x{display:none}.burger[aria-expanded="true"] .x{display:block}.burger[aria-expanded="true"] .bars{display:none}
-@media (max-width:940px){
-  .nav .links{display:none;position:absolute;left:0;right:0;top:100%;background:var(--ui-menu);border-bottom:1px solid var(--ui-line);box-shadow:0 24px 40px rgba(0,0,0,.35);padding:10px var(--gutter,16px) 18px;flex-direction:column;align-items:stretch;gap:2px}
-  .nav .links a{padding:13px 10px;border-radius:10px;border-bottom:0;font-size:16px}
-  .nav .links a[aria-current="page"]{background:var(--ui-tint)}
-  .nav .links a.cta{margin-top:8px;min-height:48px}
-  .nav .links.open{display:flex}
-  .burger{display:inline-flex}
-}
-/* footer, the same on every page */
-.foot{border-top:1px solid var(--ui-line);color:var(--ui-ink);margin-top:var(--sec,64px)}
-.foot .wrap{padding-block:48px 32px}
-.foot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,200px),1fr));gap:32px}
-.foot-brand{display:flex;flex-direction:column;gap:12px;max-width:34ch}
-.foot-brand .brand{align-self:flex-start}.foot-brand .word{font-size:16px}
-.foot-brand p{color:var(--ui-ash);font-size:14px;margin:0}
-.foot-col{display:flex;flex-direction:column;gap:10px;font-size:15px}
-.foot-col .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ui-ash);margin-bottom:4px}
-.foot-col a{color:var(--ui-ink-2);text-decoration:none;display:inline-flex;align-items:center;gap:6px;align-self:flex-start}
-.foot-col a:hover{color:var(--ui-hot);text-decoration:none}
-.foot-base{display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px 24px;margin-top:36px;padding-top:20px;border-top:1px solid var(--ui-line);font-size:13px;color:var(--ui-ash)}
-.foot-base span{text-wrap:balance}.foot-base .mono{font-family:var(--f-mono)}
-.foot-imprint{flex-basis:100%;text-wrap:pretty}.foot-base a{color:inherit;text-decoration:none}.foot-base a:hover{color:var(--ui-hot)}
-@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
 </style>
+<script>
+/* theme before first paint: the footer control stores "light" or "dark" under igneum-theme; nothing stored means the system setting */
+(function(){try{var t=localStorage.getItem("igneum-theme");if(t==="light"||t==="dark")document.documentElement.setAttribute("data-theme",t);}catch(e){}})();
+</script>
 <!-- head:end -->
 <style>
-:root{--obsidian:#0C0C0E;--graphite:#16161A;--line:#2A2A30;--line-2:#3A3A42;--ember:#F2541B;--molten:#FFB35C;--bone:#F4F1EC;--ash:#9A9A9E;--ink-2:#C9C7C2;--ember-ink:#0C0C0E;
---max:1200px;--gutter:clamp(16px,4vw,32px);--sec:clamp(56px,8vw,96px);--head:clamp(40px,6vw,64px);
+/* page block; tokens, type and components are in /site.css */
 --card-pad:clamp(18px,3vw,28px);--card-r:18px;--tile-pad:18px 20px;--tile-r:14px;--gap:24px;--gap-tile:12px;
 --fs-hero:clamp(32px,5.6vw,56px);--fs-h2:clamp(28px,4.2vw,44px);--fs-h3:clamp(18px,2vw,22px);--fs-tile:clamp(20px,2.2vw,26px)}
-*{box-sizing:border-box}
-html{scroll-behavior:smooth}
-:root{--sm:84px}@media (max-width:900px){:root{--sm:80px}}
 section,[id]{scroll-margin-top:var(--sm)}section[id]{scroll-margin-top:calc(var(--sm) - var(--sec))}
 @media (prefers-reduced-motion:reduce){html{scroll-behavior:auto}}
-body{margin:0;background:var(--obsidian);color:var(--bone);font-family:var(--f-sans);font-size:17px;line-height:1.55;-webkit-font-smoothing:antialiased;overflow-x:hidden}
-a{color:inherit;text-decoration:none}a:hover{color:var(--molten)}
 img,svg{max-width:100%}
-.wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
 .mono{font-family:var(--f-mono)}
-.eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
 .eyebrow.ember{color:var(--ember)}
 h1,h2,h3{font-family:var(--f-display);margin:0;line-height:1.08;text-wrap:balance}
-h1{font-weight:900;font-size:var(--fs-hero);letter-spacing:-.01em}
-h2{font-weight:700;font-size:var(--fs-h2)}
-h3{font-weight:700;font-size:var(--fs-h3)}
-p{margin:0}
-.btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;min-height:48px;padding:12px 22px;border-radius:10px;font-weight:600;font-size:16px;border:1px solid var(--line-2);color:var(--bone);background:transparent;cursor:pointer;transition:transform .15s ease,background .15s ease,border-color .15s ease}
-.btn:hover{transform:translateY(-1px);border-color:var(--ash);color:var(--bone)}
-.btn.primary{background:var(--ember);color:var(--ember-ink);border-color:var(--ember)}
 .btn.primary:hover{background:#FF6A2B;border-color:#FF6A2B;color:var(--ember-ink)}
-.card{background:var(--graphite);border:1px solid var(--line);border-radius:var(--card-r);padding:var(--card-pad);min-width:0}
 .reveal{opacity:0;transform:translateY(18px);transition:opacity .7s ease,transform .7s ease}
 .reveal.in{opacity:1;transform:none}
 @media (prefers-reduced-motion:reduce){.reveal{opacity:1;transform:none;transition:none}}
@@ -132,7 +73,6 @@ section+section{padding-top:0;scroll-margin-top:var(--sm)}
 .pt{font-size:15px;color:var(--ash);max-width:64ch}
 .lp{display:inline-block;margin-top:24px;color:var(--ember);font-weight:600;font-size:15px}
 .cta{display:flex;flex-wrap:wrap;gap:12px}
-
 .hero{position:relative;padding-block:clamp(48px,8vw,96px) clamp(40px,6vw,72px);overflow:hidden}
 .hero::before{content:'';position:absolute;inset:auto -10% -30% 40%;height:70%;background:radial-gradient(closest-side,rgba(242,84,27,.18),rgba(242,84,27,0));pointer-events:none}
 .hero .wrap{position:relative;display:grid;gap:36px;grid-template-columns:1fr;align-items:center}
@@ -140,7 +80,6 @@ section+section{padding-top:0;scroll-margin-top:var(--sm)}
 .hero-copy{display:flex;flex-direction:column;gap:22px}
 .hero p.lead{font-size:clamp(17px,2vw,20px);color:var(--ink-2);max-width:52ch}
 .hero .os{display:flex;flex-wrap:wrap;gap:8px 18px;font-size:14px;color:var(--ash)}
-
 .shot{position:relative;min-width:0}
 .shot::before{content:'';position:absolute;inset:12% -6% -8% -6%;background:radial-gradient(closest-side,rgba(242,84,27,.22),rgba(242,84,27,0));filter:blur(12px);pointer-events:none}
 .frame{position:relative;border:1px solid var(--line-2);border-radius:16px;background:#0C0C0E;box-shadow:0 30px 80px rgba(0,0,0,.55);overflow:hidden}
@@ -149,7 +88,6 @@ section+section{padding-top:0;scroll-margin-top:var(--sm)}
 .frame .bar b{margin-left:auto;font:500 11px/1 var(--f-mono);letter-spacing:.12em;color:var(--ash);text-transform:uppercase}
 .frame img{display:block;width:100%;height:auto}
 .frame figcaption{padding:10px 14px;font-size:13px;color:var(--ash);border-top:1px solid var(--line)}
-
 /* the three finality states */
 .states{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:var(--gap-tile);position:relative}
 .state{border:1px solid var(--line);border-radius:var(--tile-r);padding:var(--tile-pad);background:var(--graphite);display:flex;flex-direction:column;gap:8px;position:relative;min-width:0}
@@ -162,7 +100,6 @@ section+section{padding-top:0;scroll-margin-top:var(--sm)}
 .state::after{content:'';position:absolute;right:-9px;top:50%;width:14px;height:14px;border-top:2px solid var(--line-2);border-right:2px solid var(--line-2);transform:translateY(-50%) rotate(45deg);z-index:1}
 .state:last-child::after{display:none}
 @media (max-width:640px){.states{grid-template-columns:1fr}.state::after{right:auto;left:50%;top:auto;bottom:-9px;transform:translateX(-50%) rotate(135deg)}}
-
 .group{display:grid;gap:var(--gap);grid-template-columns:1fr;margin-bottom:var(--sec)}
 @media (min-width:900px){.group{grid-template-columns:300px minmax(0,1fr);gap:48px}}
 .group:last-child{margin-bottom:0}
@@ -175,24 +112,16 @@ section+section{padding-top:0;scroll-margin-top:var(--sm)}
 .feat p{font-size:14px;color:var(--ash);line-height:1.45}
 .feat .src{font-family:var(--f-mono);font-size:11px;color:var(--ember);margin-top:4px}
 .feat.wide{grid-column:1/-1}
-
-.tbl{overflow-x:auto;border:1px solid var(--line);border-radius:var(--card-r);background:var(--graphite);-webkit-overflow-scrolling:touch}
-table{border-collapse:collapse;width:100%;min-width:560px;font-size:15px}
-th,td{padding:12px 14px;text-align:left;vertical-align:top;border-bottom:1px solid var(--line)}
-th{font-family:var(--f-mono);font-size:12px;letter-spacing:.12em;text-transform:uppercase;color:var(--ash);font-weight:500;background:var(--obsidian)}
-tr:last-child td{border-bottom:0}
 td.num{font-variant-numeric:tabular-nums;white-space:nowrap}
 .ol{counter-reset:s;display:grid;gap:var(--gap-tile);grid-template-columns:repeat(auto-fit,minmax(min(100%,220px),1fr));margin:0;padding:0;list-style:none}
 .ol li{counter-increment:s;background:var(--graphite);border:1px solid var(--line);border-radius:var(--tile-r);padding:var(--tile-pad);font-size:14px;color:var(--ink-2);line-height:1.45;min-width:0}
 .ol li::before{content:counter(s,decimal-leading-zero);display:block;font-family:var(--f-mono);font-size:11px;letter-spacing:.14em;color:var(--ember);margin-bottom:8px}
-
 .band{background:var(--ember);color:var(--ember-ink)}
 .band .wrap{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between;gap:24px;padding-block:56px}
 .band h2{font-weight:900;font-size:clamp(26px,3.5vw,36px)}
 .band p{font-size:16px;max-width:56ch}
 .btn.dark{background:var(--obsidian);color:var(--bone);border-color:var(--obsidian)}
 .btn.dark:hover{background:#222226;color:var(--bone)}
-.foot{margin-top:0}
 </style>
 </head>
 <body>
@@ -201,10 +130,9 @@ td.num{font-variant-numeric:tabular-nums;white-space:nowrap}
 <nav class="nav" aria-label="Main">
   <div class="wrap">
     <a href="/" class="brand" aria-label="Igneum home">
-      <svg class="mark" viewBox="0 0 1024 1024" width="36" height="36" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <svg class="mark" viewBox="0 0 1024 1024" width="28" height="28" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
       <span class="word">IGNEUM</span>
     </a>
-    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-links" aria-label="Menu"><svg class="bars" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 7h16M4 12h16M4 17h16"></path></svg><svg class="x" viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"></path></svg></button>
     <div class="links" id="nav-links">
       <a href="/litepaper" data-nav="litepaper">Litepaper</a>
       <a href="/live" data-nav="live">Live devnet</a>
@@ -213,20 +141,32 @@ td.num{font-variant-numeric:tabular-nums;white-space:nowrap}
       <a href="/wallet" data-nav="wallet" aria-current="page">Wallet</a>
       <a href="/evidence" data-nav="evidence">Evidence</a>
       <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
-      <a href="/miner" class="cta">The miner</a>
+    </div>
+    <a href="/miner#get" class="btn primary small cta">Download the miner</a>
+    <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Menu"><span class="bars"></span></button>
+    <div class="nav-sheet" id="nav-sheet">
+      <a href="/litepaper" data-nav="litepaper">Litepaper</a>
+      <a href="/live" data-nav="live">Live devnet</a>
+      <a href="/bench" data-nav="bench">Engineering log</a>
+      <a href="/miner" data-nav="miner">Miner</a>
+      <a href="/wallet" data-nav="wallet">Wallet</a>
+      <a href="/evidence" data-nav="evidence">Evidence</a>
+      <a href="/explorer">Explorer</a>
+      <a href="/ledger">Ledger</a>
+      <a href="https://github.com/igneum-network/spec" rel="noopener">GitHub</a>
+      <a href="/miner#get" class="btn primary">Download the miner</a>
     </div>
   </div>
 </nav>
 <script>
 (function(){
-  // the menu: open on the button, closed by any link, a tap outside, Escape (focus back on the button) or a resize past 940 px
-  var b=document.getElementById('nav-burger'),l=document.getElementById('nav-links');if(!b||!l)return;
-  function set(o){l.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');}
-  b.addEventListener('click',function(){set(!l.classList.contains('open'));});
-  l.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
-  document.addEventListener('click',function(e){if(l.classList.contains('open')&&!l.contains(e.target)&&!b.contains(e.target))set(false);});
-  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&l.classList.contains('open')){set(false);b.focus();}});
-  var mq=window.matchMedia('(min-width:941px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
+  // the menu: open on the button, closed by any link, Escape (focus back on the button) or a resize past 900 px
+  var n=document.querySelector('.nav'),b=document.getElementById('nav-burger'),s=document.getElementById('nav-sheet');if(!n||!b||!s)return;
+  function set(o){n.classList.toggle('open',o);b.setAttribute('aria-expanded',o?'true':'false');document.documentElement.style.overflow=o?'hidden':'';}
+  b.addEventListener('click',function(){set(!n.classList.contains('open'));});
+  s.addEventListener('click',function(e){if(e.target.closest('a'))set(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('open')){set(false);b.focus();}});
+  var mq=window.matchMedia('(min-width:901px)');if(mq.addEventListener)mq.addEventListener('change',function(){set(false);});
 })();
 </script>
 <!-- nav:end -->
@@ -393,7 +333,7 @@ td.num{font-variant-numeric:tabular-nums;white-space:nowrap}
   <div class="wrap">
     <div class="foot-grid">
       <div class="foot-brand">
-        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="30" height="30" aria-hidden="true"><rect width="1024" height="1024" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
+        <a href="/" class="brand" aria-label="Igneum home"><svg class="mark" viewBox="0 0 1024 1024" width="26" height="26" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span></a>
         <p>Mined by GPUs. Proven by fire.</p>
       </div>
       <nav class="foot-col" aria-label="Read">
@@ -419,9 +359,9 @@ td.num{font-variant-numeric:tabular-nums;white-space:nowrap}
         <a href="/live">Live devnet</a>
         <a href="/explorer">Explorer</a>
         <a href="/#journey">Journey</a>
-        <a href="/wallet">Add Igneum to MetaMask</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
         <a href="https://github.com/igneum-network/spec" rel="noopener"><svg viewBox="0 0 24 24" width="15" height="15" fill="currentColor" aria-hidden="true"><path d="M12 .5C5.7.5.5 5.7.5 12c0 5.1 3.3 9.4 7.9 10.9.6.1.8-.3.8-.6v-2.1c-3.2.7-3.9-1.4-3.9-1.4-.5-1.3-1.3-1.7-1.3-1.7-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.7 1.3 3.4 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.5-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.2 1.2.9-.3 1.9-.4 2.9-.4s2 .1 2.9.4c2.2-1.5 3.2-1.2 3.2-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.2v3.2c0 .3.2.7.8.6 4.6-1.5 7.9-5.8 7.9-10.9C23.5 5.7 18.3.5 12 .5z"></path></svg>GitHub, spec and vectors</a>
-        <a href="/miner#get">Miner downloads: public testnet</a>
+        <a href="/miner#get">Miner downloads: devnet build</a>
         <a href="mailto:hello@igneum.network">Report a flaw: hello@igneum.network</a>
         <a href="https://github.com/igneum-network/spec/issues" rel="noopener">Or open an issue on the spec</a>
       </nav>
@@ -429,10 +369,23 @@ td.num{font-variant-numeric:tabular-nums;white-space:nowrap}
     <div class="foot-base">
       <span class="foot-imprint">Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre · <a href="mailto:hello@igneum.network">hello@igneum.network</a></span>
       <span>© 2026 Igneum. Nothing on this page is an offer to sell anything.</span>
+      <span class="theme" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></span>
       <span class="mono">igneum.network</span>
     </div>
   </div>
 </footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it. The head applied the stored value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  function cur(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function paint(){var c=cur();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}
+    if(v==='system')document.documentElement.removeAttribute('data-theme');else document.documentElement.setAttribute('data-theme',v);paint();});});
+  paint();
+})();
+</script>
 <!-- footer:end -->
 <script>
 (function(){
diff --git a/tools/build-remote.sh b/tools/build-remote.sh
index d6995c495..cee55ccec 100755
--- a/tools/build-remote.sh
+++ b/tools/build-remote.sh
@@ -12,6 +12,17 @@
 #   tools/build-remote.sh --jobs 48 -- check
 #   tools/build-remote.sh --target-dir target-exp -- build --release          another persistent target dir on the box
 #   tools/build-remote.sh --no-fetch -- clippy --all-targets                 nothing comes back (tests, check, clippy)
+#   tools/build-remote.sh --self-test-repro [--full]                         from a fork worktree: igneum-miner built twice a minute
+#                                                                            apart without sccache into one target dir must give one
+#                                                                            sha256, and a per-run target path must not (prost's
+#                                                                            OUT_DIR); --full adds kaspad with libmimalloc-sys
+#                                                                            recompiled between the builds (mimalloc's __DATE__), with
+#                                                                            and without SOURCE_DATE_EPOCH. Takes 2 to 6 min on the box.
+#
+# Sources: HEAD through the bare mirror, uncommitted changes by rsync --checksum, every written file re-stamped with touch in
+# lib.sh's bs_overlay_dir (the copied-sources rule; tools/ci/copied-sources-check.sh reads this file for that word).
+# Reproducible: every command runs with SOURCE_DATE_EPOCH = the commit's author time and TZ=UTC, into ONE fixed target directory per
+# target (lib.sh bs_repro_env; main's rule of 6 October 2026 from the 0.3.14 repro: prost embeds OUT_DIR, mimalloc embeds the date).
 #
 # Defaults by crate: a fork worktree builds `-p kaspad -p igneum-miner --features kaspad/igneum-pow` in release and fetches
 # target/release/{igneumd,igneum-miner} (what packaging/README-ship.md and infra/cross expect); app/igneum-app builds release
@@ -36,7 +47,8 @@ BS_TOOL=build-remote
 # shellcheck source=../infra/build-server/lib.sh
 . "$HERE/../infra/build-server/lib.sh"
 
-JOBS="${JOBS:-90}"; OUT=""; ARTEFACTS=""; TARGET_DIR="target"; FETCH=1; CARGO_ARGS=()
+# JOBS empty = the box decides: 90 alone, 45 beside another slot holder (remote-run.sh, main's ruling 6 Oct 2026)
+JOBS="${JOBS:-}"; OUT=""; ARTEFACTS=""; TARGET_DIR="target"; FETCH=1; CARGO_ARGS=(); SELFTEST=0; FULL=0
 while [ $# -gt 0 ]; do
   case "$1" in
     --jobs) JOBS="$2"; shift 2 ;;
@@ -44,6 +56,8 @@ while [ $# -gt 0 ]; do
     --artefacts) ARTEFACTS="$2"; ARTEFACTS_SET=1; shift 2 ;;
     --target-dir) TARGET_DIR="$2"; shift 2 ;;
     --no-fetch) FETCH=0; shift ;;
+    --self-test-repro) SELFTEST=1; shift ;;
+    --full) FULL=1; shift ;;
     --) shift; CARGO_ARGS=("$@"); break ;;
     -h|--help) sed -n '2,32p' "$0"; exit 0 ;;
     *) CARGO_ARGS=("$@"); break ;;
@@ -55,6 +69,40 @@ CARGO_ARGS_GIVEN=""; [ "${#CARGO_ARGS[@]}" -gt 0 ] && CARGO_ARGS_GIVEN=1
 bs_host
 bs_context
 
+if [ "$SELFTEST" = 1 ]; then
+  [ "$BS_KIND" = node ] || bs_die "--self-test-repro runs from a fork worktree (igneum-miner and kaspad live there)"
+  bs_toolchain_check; bs_sync_sources; bs_log "sources in place (changed files re-stamped with touch by bs_overlay_dir)"
+  # the remote script: no sccache (RUSTC_WRAPPER empty overrides the box's cargo config), the env from bs_repro_env, one fixed target
+  # dir `target-repro`; between the two builds the generated-code crate (prost, OUT_DIR) is cleaned so it is regenerated, and the
+  # clock is let past the next minute boundary so a __DATE__/__TIME__ stamp would differ
+  # RUSTC_WRAPPER=/usr/bin/env is a true pass-through: cargo treats an EMPTY value as unset and would fall back to the box's
+  # configured sccache, which is what hid both classes in the 0.3.14 repro
+  cmd="$(bs_repro_env)export RUSTC_WRAPPER=/usr/bin/env; set -u
+sha() { sha256sum \"\$1\" | cut -c1-64; }
+wait_minute() { local m0; m0=\$(date +%M); while [ \"\$(date +%M)\" = \"\$m0\" ]; do sleep 2; done; }
+build() { local f=\"\"; [ \"\$2\" = kaspad ] && f=\"--features kaspad/igneum-pow\"; CARGO_TARGET_DIR=\"\$1\" cargo build --release -p \"\$2\" \$f > /tmp/repro-build.log 2>&1 || { echo \"self-test: cargo build -p \$2 into \$1 FAILED:\"; tail -5 /tmp/repro-build.log; exit 1; }; }
+rc=0
+echo \"self-test: SOURCE_DATE_EPOCH=\$SOURCE_DATE_EPOCH TZ=\$TZ, RUSTC_WRAPPER=\$RUSTC_WRAPPER (sccache off), \$(rustc --version)\"
+build target-repro igneum-miner; a=\$(sha target-repro/release/igneum-miner)
+wait_minute; CARGO_TARGET_DIR=target-repro cargo clean -q --release -p kaspa-grpc-core -p igneum-miner; build target-repro igneum-miner; b=\$(sha target-repro/release/igneum-miner)
+if [ \"\$a\" = \"\$b\" ]; then echo \"self-test: igneum-miner twice a minute apart, one target dir: MATCH \$a\"; else echo \"self-test: igneum-miner DIFFERS across a minute: \$a vs \$b\"; rc=1; fi
+build target-repro-\$\$ igneum-miner; c=\$(sha target-repro-\$\$/release/igneum-miner); rm -rf target-repro-\$\$
+if [ \"\$a\" != \"\$c\" ]; then echo \"self-test: a per-run target path gives a different igneum-miner (prost OUT_DIR), as expected: \$c\"; else echo \"self-test: a per-run target path gave the SAME bytes; the OUT_DIR class no longer reproduces (the rule still stands)\"; fi
+if [ $FULL = 1 ]; then
+  build target-repro kaspad; d=\$(sha target-repro/release/igneumd)
+  wait_minute; CARGO_TARGET_DIR=target-repro cargo clean -q --release -p libmimalloc-sys -p kaspad; build target-repro kaspad; e=\$(sha target-repro/release/igneumd)
+  if [ \"\$d\" = \"\$e\" ]; then echo \"self-test: kaspad with mimalloc recompiled a minute later: MATCH \$d\"; else echo \"self-test: kaspad DIFFERS with mimalloc recompiled: \$d vs \$e\"; rc=1; fi
+  unset SOURCE_DATE_EPOCH; wait_minute; CARGO_TARGET_DIR=target-repro cargo clean -q --release -p libmimalloc-sys -p kaspad; build target-repro kaspad; f=\$(sha target-repro/release/igneumd)
+  if [ \"\$d\" != \"\$f\" ]; then echo \"self-test: without SOURCE_DATE_EPOCH kaspad differs a minute later (mimalloc __DATE__), as expected: \$f\"; else echo \"self-test: without SOURCE_DATE_EPOCH kaspad was still identical (mimalloc's stamp did not move this time)\"; fi
+fi
+( exit \$rc )"
+  BR_KIND=check BR_COMMAND="self-test-repro" BR_TARGET=x86_64-unknown-linux-gnu BR_ARTEFACTS=""; export BR_KIND BR_COMMAND BR_TARGET BR_ARTEFACTS
+  set +e; bs_remote_run "$BS_REMOTE_CRATE" "$BS_WT/$BS_CRATE_REL self-test-repro" "$cmd" 2>&1 | grep -E '^self-test:|RESULT' | sed 's/^/    /' >&2; rc=${PIPESTATUS[0]}; set -e
+  bs_wt_unlock
+  [ "$rc" = 0 ] && bs_log "self-test-repro passed" || bs_die "self-test-repro FAILED (rc $rc)"
+  exit 0
+fi
+
 # defaults per crate
 case "$BS_KIND:$BS_CRATE_REL" in
   node:*)
@@ -72,11 +120,11 @@ esac
 case "${CARGO_ARGS[0]}" in build) ;; *) [ -n "${ARTEFACTS_SET:-}" ] || { FETCH=0; ARTEFACTS=""; } ;; esac   # test, check, clippy: nothing to fetch
 [ -n "$OUT" ] || OUT="$BS_CRATE/target-remote"
 
-bs_log "$BS_KIND crate $BS_WT/$BS_CRATE_REL at $BS_SHA ($BS_BRANCH) -> $BS_HOST:$BS_REMOTE_CRATE; cargo ${CARGO_ARGS[*]} -j $JOBS; target dir $TARGET_DIR"
+bs_log "$BS_KIND crate $BS_WT/$BS_CRATE_REL at $BS_SHA ($BS_BRANCH) -> $BS_HOST:$BS_REMOTE_CRATE; cargo ${CARGO_ARGS[*]} -j ${JOBS:-auto}; target dir $TARGET_DIR"
 bs_toolchain_check
 t_sync0=$(date +%s)
 bs_sync_sources
-bs_log "sources in place after $(( $(date +%s) - t_sync0 )) s"
+bs_log "sources in place after $(( $(date +%s) - t_sync0 )) s (every changed file re-stamped with touch by bs_overlay_dir)"
 
 # the fork's kaspa-build-info embeds the commit through a build script that, having once found no branch, emits no
 # rerun-if-changed and is never run again by cargo (release-0.3.11 plan: `cargo clean -p kaspa-build-info` first); so when
@@ -85,7 +133,7 @@ pre=""
 if [ "$BS_KIND" = node ] && [ "${CARGO_ARGS[0]}" = build ]; then
   pre="[ \"\$(cat '.build-remote-sha-$TARGET_DIR' 2>/dev/null)\" = '$BS_SHA' ] || CARGO_TARGET_DIR='$TARGET_DIR' cargo clean -q --release -p kaspa-build-info 2>/dev/null; "
 fi
-cmd="${pre}CARGO_TARGET_DIR='$TARGET_DIR' cargo $(printf '%q ' "${CARGO_ARGS[@]}")-j $JOBS 2>&1 | tee -a '$BS_REMOTE_WT/.build-remote.log'; rc=\${PIPESTATUS[0]}; [ \$rc = 0 ] && echo '$BS_SHA' > '.build-remote-sha-$TARGET_DIR'; ( exit \$rc )"   # a subshell exit: the runner reads \$? and still prints its RESULT line
+cmd="$(bs_repro_env)${pre}CARGO_TARGET_DIR='$TARGET_DIR' cargo $(printf '%q ' "${CARGO_ARGS[@]}")${JOBS:+-j $JOBS} 2>&1 | tee -a '$BS_REMOTE_WT/.build-remote.log'; rc=\${PIPESTATUS[0]}; [ \$rc = 0 ] && echo '$BS_SHA' > '.build-remote-sha-$TARGET_DIR'; ( exit \$rc )"   # a subshell exit: the runner reads \$? and still prints its RESULT line
 label="$BS_WT/$BS_CRATE_REL cargo ${CARGO_ARGS[*]}"
 BR_KIND=$(bs_kind build-remote "${CARGO_ARGS[0]}"); BR_COMMAND="cargo ${CARGO_ARGS[*]}"; BR_TARGET=x86_64-unknown-linux-gnu
 for ((i = 0; i < ${#CARGO_ARGS[@]}; i++)); do [ "${CARGO_ARGS[$i]}" = --target ] && BR_TARGET="${CARGO_ARGS[$((i + 1))]:-}"; done
diff --git a/tools/ci/forbidden-strings.txt b/tools/ci/forbidden-strings.txt
index a1e2bdff1..6a45bbba8 100644
--- a/tools/ci/forbidden-strings.txt
+++ b/tools/ci/forbidden-strings.txt
@@ -21,4 +21,9 @@ intake[_-]?key
 Tailscale
 tailscale
 ts\.net
-\n# 6 October 2026, the public ledger page leak (site audit): config paths, process ids, listen addresses, machine names\n~/\\.config\n\\bpid [0-9]+\\b\n0\\.0\\.0\\.0:[0-9]+\n\\bPC [12]\\b\n--rpclisten=\n
\ No newline at end of file
+
+# 6 October 2026, the public ledger page leak (site audit): the two Windows machines are described, never numbered. The
+# audit's other patterns (config paths, process ids, listen addresses, --rpclisten=) live in site/forbidden-strings.txt:
+# they are for the served pages, and the public export carries simulator schedule logs where a pid is a pid. (The block
+# had been appended as one line with literal \n text, so none of it was active until the evening of 6 October 2026.)
+\bPC [12]\b
diff --git a/tools/ci/identity-check.sh b/tools/ci/identity-check.sh
index cd341f810..5b1b04ea3 100755
--- a/tools/ci/identity-check.sh
+++ b/tools/ci/identity-check.sh
@@ -37,6 +37,8 @@ while IFS= read -r f; do
   [ -n "$f" ] || continue
   perl -pi -e '
     s/the PC node at 192\.168\.[0-9.]+/the RTX 5090 node on the LAN/g;
+    s/\bPC 1\x27s\b/the three-card Windows rig\x27s/g; s/\bPC 1\b/the three-card Windows rig (RTX 5090, RTX 4070, RX 9070 XT)/g;
+    s/\bPC 2\x27s\b/the RTX 5090 Windows rig\x27s/g; s/\bPC 2\b/the RTX 5090 Windows rig/g;
     s/\bthe PC node\b/the RTX 5090 node/g;
     s/\bWindows PC\b/an RTX 5090 on Windows/g;
     s/\bthe PC\x27s\b/the RTX 5090 machine\x27s/g;
@@ -62,4 +64,17 @@ if [ -n "$HITS" ]; then
   printf '%s\n' "$HITS" | sed "s#^$TMP/##" | cut -c1-200
   exit 1
 fi
-echo "identity grep: 0 hits over $(printf '%s\n' "$TEXT_FILES" | grep -c .) files"
+# The served site (6 October 2026, site audit): every file Vercel serves from site/ (the committed pages, the generated
+# pages, the JSON, the manifest, the sitemap), grepped as it is, no scrub, with the export patterns above and the site's
+# own list (site/forbidden-strings.txt, which the build also enforces on the generated pages). The API sources and the
+# build scripts are not served and are not in this pass.
+SITE_FILES="$(find "$REPO/site" -type f \( -name '*.html' -o -name '*.json' -o -name '*.txt' -o -name '*.xml' -o -name '*.webmanifest' -o -name '*.css' -o -name '*.js' \) \
+  -not -path '*/node_modules/*' -not -path '*/.vercel/*' -not -path '*/api/*' -not -name 'forbidden-strings.txt' -print)"
+SITE_PAT="$(printf '%s\n%s\n' "$PAT" "$(grep -vE '^\s*(#|$)' "$REPO/site/forbidden-strings.txt")")"
+SITE_HITS="$(printf '%s\n' "$SITE_FILES" | xargs grep -En -f <(printf '%s\n' "$SITE_PAT") 2>/dev/null || true)"
+if [ -n "$SITE_HITS" ]; then
+  echo "identity grep: HITS in the served site files (site/, unscrubbed):"
+  printf '%s\n' "$SITE_HITS" | sed "s#^$REPO/##" | cut -c1-200
+  exit 1
+fi
+echo "identity grep: 0 hits over $(printf '%s\n' "$TEXT_FILES" | grep -c .) export files and $(printf '%s\n' "$SITE_FILES" | grep -c .) served site files"
diff --git a/tools/ci/ledger-text-check.mjs b/tools/ci/ledger-text-check.mjs
new file mode 100644
index 000000000..0d09aa964
--- /dev/null
+++ b/tools/ci/ledger-text-check.mjs
@@ -0,0 +1,70 @@
+// Ledger text check: every sentence docs/fud-ledger.md requires on a public page must appear on that page verbatim
+// (docs/plans/site-ui-3.md step 6). The list below is the ledger's stated-sentence set as audited on 6 October 2026
+// (docs/plans/site-ui-3-ticklist.md); a new ledger row that states a sentence adds a line here in the same commit.
+//   node tools/ci/ledger-text-check.mjs        exit 1 listing every missing sentence
+import { readFileSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const site = join(dirname(fileURLToPath(import.meta.url)), '..', '..', 'site');
+const REQUIRED = {
+  'index.html': [
+    ['E5', 'The one payment to the project is the Ember software’s optional 1% dev fee', 'The one payment to the project is the Ember software\'s optional 1% dev fee'],
+    ['G4', 'admin keys in consensus'],
+    ['C2', 'since 2019 (approximate)'],
+    ['M32', 'a chip wired for one program is useless'],
+    ['X2', 'Public testnet: not yet open; the devnet build is here for people who want to look'],
+    ['X3', 'Live rows arrive with the public testnet, August 2027'],
+    ['X7', 'hello@igneum.network'],
+    ['X8', 'No listing is arranged, promised or sought by the project'],
+  ],
+  'litepaper.html': [
+    ['M2', 'computing items on the fly runs 4.8x slower than loading them'],
+    ['M4', 'ProgPoW, as KAWPOW on Ravencoin since 2020'],
+    ['M7', 'The hash is a lottery, not a general-purpose cryptographic hash'],
+    ['M7', 'no analysis of the lottery properties exists yet'],
+    ['M10', 'an RTX 5090 hashes at 95 GB/s of useful 4-byte loads against 1,638 GB/s of sequential writes'],
+    ['M13', 'Macs mine too, at about a fifth of a flagship card'],
+    ['M32', 'every drawn parameter is firmware'],
+    ['M32', 'the defence against it is the latency-shadow work (class v4) and the price per joule, not the schedule'],
+    ['F26', 'No coin is staked. The only thing at stake is 30 days of public work: a vote key’s weight is its blue blocks over the window, and equivocation strips it for 30 days', 'No coin is staked. The only thing at stake is 30 days of public work: a vote key\'s weight is its blue blocks over the window, and equivocation strips it for 30 days'],
+    ['E19', 'external proving is a small second income at launch and the lottery pays the bills'],
+    ['F1', 'In the chain’s first 30 days no checkpoint locks at all', 'In the chain\'s first 30 days no checkpoint locks at all'],
+    ['F5', 'An attacker matching the honest network needs twenty days for a third and never reaches two thirds'],
+    ['F10', 'Pools carry their hashers’ votes, so vote concentration equals pool concentration, and it is public', 'Pools carry their hashers\' votes, so vote concentration equals pool concentration, and it is public'],
+    ['P3', 'the wrapping cost is a phase two measurement'],
+    ['P4', 'The consensus proof that makes the checkpoint self-verifying is phase two'],
+    ['P6', 'a supplier whose marginal cost is close to power'],
+    ['P7', 'Writing new code, including an emergency fix to the proof system, is the one thing that takes a person'],
+    ['P10', 'settlement in IGN with a 10% burn follows'],
+    ['P14', 'pays about 7,300 IGN a year'],
+    ['E5', 'No fund, no foundation, no fee to the team'],
+    ['E5', '1 block in 100 pays the project'],
+    ['E6', 'The schedule is a bet, not a measurement'],
+    ['G1', 'reviewers will be named and paid before gate 3'],
+    ['G2', 'one founder with AI systems'],
+    ['G3', 'there is no team page'],
+    ['G4', 'no admin keys in consensus'],
+    ['G6', 'Pools can be bypassed on transaction choice'],
+    ['C2', 'precedent, not proof'],
+    ['C3', 'Chips arrived, as on Kaspa, whose hash was designed to welcome them'],
+    ['C3', 'Kaspa has run in production since 2021 (approximate)'],
+    ['C5', 'Inclusion is not confirmation on either chain'],
+    ['C6', 'the combination is the risk the gates price'],
+    ['C6', 'Dates slip. Gates do not.'],
+    ['C8', 'Ergo, Ravencoin and Conflux still mine on GPUs at a fraction of the 2022 fleet (approximate)'],
+    ['C10', 'Boundless provers post ZKC and Succinct provers stake PROVE (approximate'],
+    ['C11', 'We know of no chain that combines them'],
+    ['L2', 'Nearly a quarter of all supply is mined in the first year and half in the first two'],
+    ['X1', 'The node, the miner and the wallet are in a private repository until the public testnet'],
+    ['X7', 'hello@igneum.network'],
+    ['X8', 'No listing is arranged, promised or sought by the project'],
+  ],
+};
+const norm = s => s.replace(/\s+/g, ' ').replace(/&#39;|&apos;/g, '\'').replace(/&quot;/g, '"').replace(/&amp;/g, '&');
+let missing = 0, n = 0;
+for (const [page, rows] of Object.entries(REQUIRED)) {
+  const html = norm(readFileSync(join(site, page), 'utf8'));
+  for (const [row, ...variants] of rows) { n++; if (!variants.some(v => html.includes(norm(v)))) { missing++; console.error(`ledger text: ${page} lacks ${row}: "${variants[0]}"`); } }
+}
+console.log(`ledger text check: ${n} sentences, ${missing} missing`);
+process.exit(missing ? 1 : 0);
diff --git a/tools/ci/site-contrast-check.mjs b/tools/ci/site-contrast-check.mjs
new file mode 100644
index 000000000..a32718685
--- /dev/null
+++ b/tools/ci/site-contrast-check.mjs
@@ -0,0 +1,20 @@
+// Site contrast check: every text token on every surface token in site/site.css, dark and light, must reach 4.5:1
+// (the design's rule, docs/plans/site-ui-3.md 2.1). Reads the :root blocks of site.css; no browser.
+//   node tools/ci/site-contrast-check.mjs        exit 1 on any pair under 4.5
+import { readFileSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const css = readFileSync(join(dirname(fileURLToPath(import.meta.url)), '..', '..', 'site', 'site.css'), 'utf8');
+function block(re) { const m = re.exec(css); if (!m) throw new Error('token block not found: ' + re); const out = {}; for (const t of m[1].matchAll(/--([a-z0-9-]+):\s*(#[0-9A-Fa-f]{6})/g)) out[t[1]] = t[2]; return out; }
+const dark = block(/:root\{([\s\S]*?)\n\}/), light = block(/:root\[data-theme="light"\]\{([\s\S]*?)\n\}/);
+const lum = h => { const c = [1, 3, 5].map(i => parseInt(h.slice(i, i + 2), 16) / 255).map(v => v <= 0.03928 ? v / 12.92 : ((v + 0.055) / 1.055) ** 2.4); return 0.2126 * c[0] + 0.7152 * c[1] + 0.0722 * c[2]; };
+const ratio = (a, b) => { const [x, y] = [lum(a), lum(b)].sort((p, q) => q - p); return (x + 0.05) / (y + 0.05); };
+const text = ['bone', 'ink-2', 'ash', 'ember-text', 'molten-text'], surf = ['obsidian', 'graphite', 'row'];
+let bad = 0, n = 0;
+for (const [name, t] of [['dark', dark], ['light', light]]) for (const a of text) for (const b of surf) {
+  if (!t[a] || !t[b]) continue; n++; const r = ratio(t[a], t[b]);
+  if (r < 4.5) { bad++; console.error(`contrast: ${name} --${a} ${t[a]} on --${b} ${t[b]} = ${r.toFixed(2)} (under 4.5)`); }
+}
+for (const [name, t] of [['dark', dark], ['light', light]]) { const r = ratio(t['ember-ink'], t['ember']); n++; if (r < 4.5) { bad++; console.error(`contrast: ${name} --ember-ink on --ember = ${r.toFixed(2)}`); } }
+console.log(`site contrast check: ${n} pairs, ${bad} under 4.5:1`);
+process.exit(bad ? 1 : 0);
diff --git a/tools/ci/site-orphan-check.mjs b/tools/ci/site-orphan-check.mjs
new file mode 100644
index 000000000..5b105e5ea
--- /dev/null
+++ b/tools/ci/site-orphan-check.mjs
@@ -0,0 +1,48 @@
+// Orphan check: no heading on a site page leaves one word alone on its last line at 390 px (copy rule 18, 24 Sep 2026).
+// Renders each page headless at 390 px with Playwright's cached Chromium (never Chrome.app) through tools/site-serve.mjs on
+// a private port, one browser, niced. Skips with a note when the Playwright build is absent (CI without it).
+//   node tools/ci/site-orphan-check.mjs [--port 4181]        exit 1 listing every heading with a one-word last line
+import { createRequire } from 'node:module';
+import { existsSync, readdirSync } from 'node:fs';
+import { spawn } from 'node:child_process';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const here = dirname(fileURLToPath(import.meta.url)), site = join(here, '..', '..', 'site');
+const PW = [process.env.PLAYWRIGHT_CORE, '/Users/joshm/Projects/viva-tracking/node_modules/playwright-core/package.json'].filter(Boolean).find(p => existsSync(p));
+const CHROME = process.env.PLAYWRIGHT_CHROMIUM || `${process.env.HOME}/Library/Caches/ms-playwright/chromium-1234/chrome-mac-arm64/Google Chrome for Testing.app/Contents/MacOS/Google Chrome for Testing`;
+if (!PW || !existsSync(CHROME)) { console.log('orphan check: skipped, no Playwright Chromium on this machine'); process.exit(0); }
+const { chromium } = createRequire(PW)('playwright-core');
+const port = Number((process.argv.find(a => a.startsWith('--port=')) || '').split('=')[1] || 4181);
+const srv = spawn('nice', ['-n', '19', 'node', join(here, '..', 'site-serve.mjs')], { env: { ...process.env, PORT: String(port) }, stdio: 'ignore' });
+await new Promise(r => setTimeout(r, 1200));
+const browser = await chromium.launch({ executablePath: CHROME, args: ['--renderer-process-limit=1'] });
+const page = await browser.newPage({ viewport: { width: 390, height: 844 }, reducedMotion: 'reduce' });
+const pages = readdirSync(site).filter(f => f.endsWith('.html') && f !== '404.html').map(f => '/' + f.replace(/\.html$/, '').replace(/^index$/, ''));
+const bad = []; let n = 0;
+for (const p of pages) {
+  try { await page.goto(`http://127.0.0.1:${port}${p}`, { waitUntil: 'load', timeout: 20000 }); } catch { continue; }
+  const found = await page.evaluate(() => {
+    const out = []; const r = document.createRange();
+    document.querySelectorAll('h1, h2, h3').forEach(h => {
+      if (!h.offsetParent && getComputedStyle(h).position !== 'fixed') return;
+      const words = (h.textContent || '').trim().split(/\s+/); if (words.length < 3) return;
+      // line of the last word vs the line of the word before it
+      const tw = document.createTreeWalker(h, NodeFilter.SHOW_TEXT); const texts = []; let t; while ((t = tw.nextNode())) if (t.textContent.trim()) texts.push(t);
+      if (!texts.length) return; const last = texts[texts.length - 1]; const s = last.textContent; const i = s.trimEnd().lastIndexOf(' ');
+      if (i < 0) return; r.setStart(last, i + 1); r.setEnd(last, s.trimEnd().length); const a = r.getBoundingClientRect();
+      r.setStart(last, Math.max(0, s.lastIndexOf(' ', i - 1) + 1)); r.setEnd(last, i); const b = r.getBoundingClientRect();
+      const lines = Math.round(h.getBoundingClientRect().height / parseFloat(getComputedStyle(h).lineHeight || '1'));
+      if (lines > 1 && a.top > b.top + 2 && a.left <= b.left + 1) out.push((h.textContent || '').trim().slice(0, 80));
+    });
+    return out;
+  });
+  n++; found.forEach(f => bad.push(`${p}: "${f}"`));
+}
+await browser.close(); srv.kill();
+// the engineering log's own entry titles (/bench, generated from docs/bench-log.md) are reported, not failed: they are the
+// log's headings, edited in the log, not site copy
+const gen = bad.filter(b => b.startsWith('/bench:')), fail = bad.filter(b => !b.startsWith('/bench:'));
+gen.forEach(b => console.log('orphan (log title, reported): ' + b));
+fail.forEach(b => console.error('orphan: ' + b));
+console.log(`orphan check: ${n} pages at 390 px, ${fail.length} site headings with a one-word last line, ${gen.length} log titles reported`);
+process.exit(fail.length ? 1 : 0);
diff --git a/tools/cross-remote.sh b/tools/cross-remote.sh
index e5d04fd54..cf5509601 100755
--- a/tools/cross-remote.sh
+++ b/tools/cross-remote.sh
@@ -37,7 +37,7 @@ BS_TOOL=cross-remote
 . "$HERE/../infra/build-server/lib.sh"
 
 TARGET=x86_64-pc-windows-gnu
-JOBS="${JOBS:-90}"; OUT=""; COMPARE=""; TARGET_DIR="target"; CARGO_ARGS=()
+JOBS="${JOBS:-}";   # empty = the box decides: 90 alone, 45 beside another slot holder (remote-run.sh, main's ruling 6 Oct 2026) OUT=""; COMPARE=""; TARGET_DIR="target"; CARGO_ARGS=()
 while [ $# -gt 0 ]; do
   case "$1" in
     --jobs) JOBS="$2"; shift 2 ;;
@@ -65,7 +65,7 @@ esac
 [ -n "$OUT" ] || OUT="$BS_CRATE/target-remote"
 [ -z "$COMPARE" ] && [ -d "$BS_CRATE/target-integration/$TARGET/release" ] && COMPARE="$BS_CRATE/target-integration/$TARGET/release"
 
-bs_log "$BS_KIND crate $BS_WT/$BS_CRATE_REL at $BS_SHA ($BS_BRANCH) -> $BS_HOST:$BS_REMOTE_CRATE; cargo ${CARGO_ARGS[*]} -j $JOBS; target dir $TARGET_DIR"
+bs_log "$BS_KIND crate $BS_WT/$BS_CRATE_REL at $BS_SHA ($BS_BRANCH) -> $BS_HOST:$BS_REMOTE_CRATE; cargo ${CARGO_ARGS[*]} -j ${JOBS:-auto}; target dir $TARGET_DIR"
 bs_toolchain_check
 t_sync0=$(date +%s)
 bs_sync_sources
@@ -81,8 +81,8 @@ export BINDGEN_EXTRA_CLANG_ARGS_x86_64_pc_windows_gnu="--target=x86_64-w64-mingw
 echo "cross-remote: $(x86_64-w64-mingw32-gcc-posix --version | head -1); libclang $LLVM_LIB"'
 pre=""   # the same kaspa-build-info clean on a new commit as build-remote.sh (the Windows target has its own fingerprint)
 [ "$BS_KIND" = node ] && pre="[ \"\$(cat '.cross-remote-sha-$TARGET_DIR' 2>/dev/null)\" = '$BS_SHA' ] || CARGO_TARGET_DIR='$TARGET_DIR' cargo clean -q --release -p kaspa-build-info --target $TARGET 2>/dev/null; "
-cmd="$env_block
-${pre}CARGO_TARGET_DIR='$TARGET_DIR' cargo $(printf '%q ' "${CARGO_ARGS[@]}")-j $JOBS 2>&1 | tee -a '$BS_REMOTE_WT/.cross-remote.log'; rc=\${PIPESTATUS[0]}; [ \$rc = 0 ] && echo '$BS_SHA' > '.cross-remote-sha-$TARGET_DIR'
+cmd="$(bs_repro_env)$env_block
+${pre}CARGO_TARGET_DIR='$TARGET_DIR' cargo $(printf '%q ' "${CARGO_ARGS[@]}")${JOBS:+-j $JOBS} 2>&1 | tee -a '$BS_REMOTE_WT/.cross-remote.log'; rc=\${PIPESTATUS[0]}; [ \$rc = 0 ] && echo '$BS_SHA' > '.cross-remote-sha-$TARGET_DIR'
 for exe in $EXES; do f='$TARGET_DIR/$TARGET/release/'\$exe; [ -f \"\$f\" ] && echo \"cross-remote: DLLS \$exe: \$(x86_64-w64-mingw32-objdump -p \"\$f\" | awk '/DLL Name/ { print \$3 }' | sort -u | tr '\n' ' ')\"; done
 ( exit \$rc )"   # a subshell exit: the runner reads \$? and still prints its RESULT line
 label="$BS_WT/$BS_CRATE_REL cross $TARGET"
diff --git a/tools/ledger-page.mjs b/tools/ledger-page.mjs
index 3cbe7ba4e..6d1eb2f10 100644
--- a/tools/ledger-page.mjs
+++ b/tools/ledger-page.mjs
@@ -154,7 +154,7 @@ a{color:var(--ember);text-decoration:none}a:hover{color:var(--molten)}
 .wrap{max-width:var(--max);margin:0 auto;padding-inline:var(--gutter)}
 .eyebrow{font-family:var(--f-mono);font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--ash)}
 h1{font-family:var(--f-display);font-weight:900;font-size:clamp(30px,5vw,52px);line-height:1.08;margin:10px 0 18px}
-h2{font-family:var(--f-display);font-weight:700;font-size:clamp(22px,3vw,30px);margin:var(--sec) 0 16px;padding-top:8px;border-top:1px solid var(--line);scroll-margin-top:84px}
+main h2{font-family:var(--f-display);font-weight:700;font-size:clamp(20px,2.6vw,28px);text-wrap:balance;margin:var(--sec) 0 16px;padding-top:8px;border-top:1px solid var(--line);scroll-margin-top:84px}
 h3{font-family:var(--f-sans);font-weight:600;font-size:17px;margin:0;flex:1 1 auto;min-width:0}
 .intro{font-size:17px;color:var(--ink-2);max-width:76ch;margin:0 0 24px}
 .tbl{overflow-x:auto;border:1px solid var(--line);border-radius:16px;background:var(--graphite);margin:0 0 20px}
diff --git a/tools/repro/rebuild-release.sh b/tools/repro/rebuild-release.sh
new file mode 100755
index 000000000..6de7f5bd2
--- /dev/null
+++ b/tools/repro/rebuild-release.sh
@@ -0,0 +1,77 @@
+#!/usr/bin/env bash
+# Rebuild a shipped release on igneum-build-1 from a clean checkout and compare the bytes with what shipped (6 October 2026).
+#   tools/repro/rebuild-release.sh 0.3.14                                   pins from docs/plans/release-0.3.14.md, shipped hashes from the public downloads
+#   tools/repro/rebuild-release.sh 0.3.14 --node-commit <sha> --app-commit <sha>   explicit pins (the plan is not read)
+#   tools/repro/rebuild-release.sh 0.3.14 --shipped igneumd.exe=<sha256>   add or override a shipped hash (the plan's bold hashes are also read)
+#   --passes N (default 2), --no-public (shipped hashes from the plan and --shipped only), --node-branch <name>
+# Where the pins live (docs/plans/release-0.3.14.md): the section heading "## 3. Builds and artefacts (node <sha>, app <sha>)";
+# the shipped hashes are the bold sha256 values in that table (the Linux row "The seed's Linux node", the Windows row "The
+# Windows node exes") and, token-free, inside the public downloads (packaging/README-ship.md "The public downloads path":
+# igneum-hive-<v>.tar.gz carries igneumd and igneum-miner, Igneum-Miner-Setup-<v>.exe carries the two exes).
+# The work runs on the box (infra/build-server/repro/rebuild-on-box.sh, under build slots through remote-run.sh); this script
+# makes sure the mirrors hold both commits (pushes them from this Mac's checkouts when they do not), ships the two scripts to
+# /srv/builds/_bin, runs the rebuild, and fetches the evidence into docs/evidence/reproduced/<version>.md of THIS worktree.
+set -euo pipefail
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"; ROOT="$(cd "$HERE/../.." && pwd)"
+MAIN_REPO="${IGNEUM_MAIN_REPO:-/Users/joshm/Projects/igneum}"
+# shellcheck disable=SC2034
+BS_TOOL=repro
+# shellcheck source=../../infra/build-server/lib.sh
+. "$ROOT/infra/build-server/lib.sh"
+VERSION="${1:-}"; shift || true
+[ -n "$VERSION" ] || bs_die "usage: tools/repro/rebuild-release.sh <version> [--node-commit sha] [--app-commit sha] [--shipped name=sha256]... [--passes N] [--no-public]"
+NODE_SHA=""; APP_SHA=""; NODE_BRANCH=""; PASSES=2; PUBLIC=1; REUSE=""; SHIPPED=()
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --node-commit) NODE_SHA="$2"; shift 2 ;; --app-commit) APP_SHA="$2"; shift 2 ;; --node-branch) NODE_BRANCH="$2"; shift 2 ;;
+    --shipped) SHIPPED+=(--shipped "$2"); shift 2 ;; --passes) PASSES="$2"; shift 2 ;; --no-public) PUBLIC=0; shift ;; --reuse) REUSE=--reuse; shift ;;
+    *) bs_die "unknown argument $1" ;;
+  esac
+done
+PLAN="$ROOT/docs/plans/release-$VERSION.md"
+if [ -z "$NODE_SHA" ] || [ -z "$APP_SHA" ]; then
+  [ -f "$PLAN" ] || bs_die "no $PLAN and no --node-commit/--app-commit"
+  pins=$(grep -m1 -oE '\(node [0-9a-f]{7,40}, app [0-9a-f]{7,40}\)' "$PLAN" || true)
+  [ -n "$pins" ] || bs_die "no '(node <sha>, app <sha>)' heading in $PLAN; pass --node-commit and --app-commit"
+  [ -n "$NODE_SHA" ] || NODE_SHA=$(sed -E 's/.*node ([0-9a-f]+),.*/\1/' <<<"$pins")
+  [ -n "$APP_SHA" ] || APP_SHA=$(sed -E 's/.*app ([0-9a-f]+)\).*/\1/' <<<"$pins")
+  bs_log "pins from $PLAN: node $NODE_SHA, app $APP_SHA"
+  # the plan's bold hashes as a second source (full ones only; the Windows row names igneumd.exe, the Linux row igneumd)
+  lin=$(grep -m1 -E "^\| The seed's Linux node" "$PLAN" | grep -oE 'igneumd \*\*[0-9a-f]{64}\*\*' | grep -oE '[0-9a-f]{64}' || true)
+  win=$(grep -m1 -E '^\| The Windows node exes' "$PLAN" | grep -oE 'igneumd\.exe \*\*[0-9a-f]{64}\*\*' | grep -oE '[0-9a-f]{64}' || true)
+  linm=$(grep -m1 -E "^\| The seed's Linux node" "$PLAN" | grep -oE 'igneum-miner [0-9a-f]{8}\.\.\.' | grep -oE '[0-9a-f]{8}' || true)
+  winm=$(grep -m1 -E '^\| The Windows node exes' "$PLAN" | grep -oE 'igneum-miner\.exe [0-9a-f]{8}\.\.\.' | grep -oE '[0-9a-f]{8}' || true)
+  # the plan's hashes always travel; a public artefact that unpacks overrides them on the box (prefix-only ones compare as prefixes)
+  [ -n "$lin" ] && SHIPPED+=(--shipped "igneumd=$lin"); [ -n "$linm" ] && SHIPPED+=(--shipped "igneum-miner=$linm")
+  [ -n "$win" ] && SHIPPED+=(--shipped "igneumd.exe=$win"); [ -n "$winm" ] && SHIPPED+=(--shipped "igneum-miner.exe=$winm")
+  [ -n "$lin$win" ] && bs_log "plan hashes: igneumd ${lin:0:16}... igneum-miner ${linm}... igneumd.exe ${win:0:16}... igneum-miner.exe ${winm}... (a public artefact that unpacks wins)"
+fi
+[ -n "$NODE_BRANCH" ] || NODE_BRANCH="release-$VERSION-node"
+bs_host
+# the mirrors must hold both commits; push them from the Mac's checkouts when they do not (a ref per repro, never master)
+ensure_commit() {   # <local repo> <mirror> <sha> <label>
+  local repo="$1" mirror="$2" sha="$3" label="$4" full
+  if bs_ssh "git -C '$mirror' cat-file -e '$sha^{commit}' 2>/dev/null"; then bs_log "$label: $sha is on $mirror"; return; fi
+  full=$(git -C "$repo" rev-parse --verify "$sha^{commit}" 2>/dev/null) || bs_die "$label: $sha is neither on the box's $mirror nor in $repo"
+  GIT_SSH_COMMAND="$BS_SSH_CMD" git -C "$repo" push -q "$BS_HOST:$mirror" "$full:refs/heads/repro-$VERSION-$label" || bs_die "$label: push of $sha to $mirror failed"
+  bs_log "$label: pushed $full to $mirror as repro-$VERSION-$label"
+}
+ensure_commit "$MAIN_REPO" "$BS_MIRROR_REPO" "$APP_SHA" app
+ensure_commit "$MAIN_REPO/vendor/igneum-node" "$BS_MIRROR_NODE" "$NODE_SHA" node
+bs_ssh 'mkdir -p /srv/builds/_bin'
+bs_rsync -q "$ROOT/infra/build-server/repro/rebuild-on-box.sh" "$ROOT/infra/build-server/remote-run.sh" "$BS_HOST:/srv/builds/_bin/"
+bs_ssh 'chmod +x /srv/builds/_bin/*.sh'
+args=(--version "$VERSION" --node-commit "$NODE_SHA" --app-commit "$APP_SHA" --node-branch "$NODE_BRANCH" --passes "$PASSES"); [ "$PUBLIC" = 1 ] && args+=(--public); [ -n "$REUSE" ] && args+=("$REUSE")
+bs_log "rebuilding on the box: ${args[*]}"
+t0=$(date +%s)
+# bash 3.2 on the Mac treats an empty array as unbound under set -u (run-from-mac.sh met it): expand it only when it has members
+[ "${#SHIPPED[@]}" -gt 0 ] && args+=("${SHIPPED[@]}")
+set +e
+bs_ssh "IGNEUM_AGENT=${IGNEUM_AGENT:-repro} /srv/builds/_bin/rebuild-on-box.sh $(printf '%q ' "${args[@]}")" 2>&1 | grep -v '^#\|^|\|^$\|^Full box\|^Reading'
+rc=${PIPESTATUS[0]}
+set -e
+[ "$rc" = 0 ] || bs_die "the rebuild on the box failed (rc $rc); its log: ssh build@box cat /srv/builds/_repro/$VERSION/rebuild.log"
+mkdir -p "$ROOT/docs/evidence/reproduced"
+bs_rsync -q "$BS_HOST:/srv/builds/_repro/$VERSION/$VERSION.md" "$ROOT/docs/evidence/reproduced/$VERSION.md"
+bs_log "done in $(bs_fmt_secs $(( $(date +%s) - t0 ))): docs/evidence/reproduced/$VERSION.md"
+grep -E '^\| (igneumd|igneum-miner)' "$ROOT/docs/evidence/reproduced/$VERSION.md" | cut -c1-200
diff --git a/tools/workers-remote.sh b/tools/workers-remote.sh
index b97bdc052..3cee0acd6 100755
--- a/tools/workers-remote.sh
+++ b/tools/workers-remote.sh
@@ -28,7 +28,7 @@ BS_LOCAL_DIRS="proto-cuda proto-opencl"; BS_VENDOR_REPOS=""
 bs_log "workers from $BS_WT at $BS_SHA ($BS_BRANCH) -> $BS_HOST:$BS_REMOTE_WT (proto-cuda, proto-opencl)"
 bs_sync_sources
 PLACEHOLDER=proto-cuda/packs/igneum-devnet-v4-epoch0   # the OpenCL worker's compile-time pack, as build-workers-linux.sh
-cmd='. /etc/profile.d/igneum-build.sh
+cmd="$(bs_repro_env)"'. /etc/profile.d/igneum-build.sh
 CUDA=$(ls -d /usr/local/cuda-12.* 2>/dev/null | sort -V | tail -1); [ -n "$CUDA" ] || { echo "no CUDA headers under /usr/local/cuda-12.*: provision.sh step_cuda"; exit 2; }
 [ -f /usr/include/CL/cl.h ] || { echo "no /usr/include/CL/cl.h: apt opencl-c-headers"; exit 2; }
 mkdir -p out-workers-box