diff --git a/docs/analysis/class-v6/1p5x/lab/proving-live.md b/docs/analysis/class-v6/1p5x/lab/proving-live.md
new file mode 100644
index 000000000..b76dfad1b
--- /dev/null
+++ b/docs/analysis/class-v6/1p5x/lab/proving-live.md
@@ -0,0 +1,45 @@
+# Proving live on Devnet 4: the on-chain record (9 October 2026)
+
+The 1.5x scoreboard's phase B row reads "a GPU earns the proving share of the block reward and a hash chip cannot". This page is the evidence that the proving share is paid on the live devnet to GPUs proving beside their miners, read from the chain and nothing else. One epoch is 3,600 DAA; Devnet 4's DAA runs at 1.0 per second (63,577 at 11:59:15Z to 63,902 at 12:04:30Z), so an epoch is one hour.
+
+## The rule being exercised, by file and line (node 27f54124, the 2.0.3 line)
+
+| what | where |
+|---|---|
+| 20 percent of every block subsidy to the proving pool, 80 to the producer | consensus/core/src/igneum.rs:44 (`PROVING_POOL_SHARE_PERCENT`), :87 (`proving_pool_share`) |
+| a carried record pays its shard part of the pool credit to the record's payout address when valid, verified and first | igneum/exec/src/proving.rs:551 (`carried_payouts`) |
+| a v1 segment (8 chain blocks, 8 shards + one aggregation) pays as one record, 1,000 bps of the credit to the aggregator | consensus/core/src/proving.rs:638 (`split_pool_credit`); igneum/exec/src/proving.rs `segment_status` Proven |
+| fees v1 from DAA 0 on the devnet (the shard is the calibrated v1 size, 30,000 pgas, never the prototype) | consensus/core/src/config/params.rs:2307 (`DEVNET_PARAMS.fees_v1_activation_daa: 0`); the node reports `fees.v1ActivationDaa 0`, `shardBudget 0x7530` |
+| what a prover reads and submits | `igneum_getProvingStatus`, `igneum_getAssignedShards`, `igneum_submitProofRecord`, `igneum_submitSegmentRecord`, `igneum_getSegmentRecords` (igneum/exec/src/rpc.rs:1342, :1443, :1628) |
+
+## What proves today
+
+The fleet's prover stack on rented RunPod and Vast boxes: `tools/fleet/box-prover.py` (one loop per box, beside the box's kit-2 miner, MINER=none so the miner is never paused) driving the served 0317 prover pair (`igneum-prove-host` sha256 71bc2438…, `igneum-prove-export` 263bf4ce…, SP1 6.8.1, shard program id 0x2b1a81cb…, aggregator id 0x474678f3…, the pair the node pins) and the SP1 GPU server. The same binaries are what the 2.0.3.1 HiveOS package wraps; the Mac and Windows apps carry the same prover, on by default at 23,552 MiB or more (app/igneum-app/src/provedefault.rs:23-24). Cards: RTX 4090 (24,564 MiB), RTX 3090 (24,576), L40S and RTX 6000 Ada (48 GB) as aggregators. Measured on a 4090 beside its miner: one 8-block segment in 117 to 185 s end to end (shards 48 to 52 s, aggregation 57 to 61 s), peak 13,523 to 14,899 MiB; a 16 GB card cannot hold the shard (the LAB's floor rows).
+
+## Baseline before the restart (read 11:50:22Z, lp-4090-02's node, chain id 4465, executed tip 31,719, DAA 62,833)
+
+| counter | value |
+|---|---|
+| paid v1 segment records since genesis | 663 = 653.93 IGN |
+| distinct prover keys paid | 30 (median 4 segments a key, maximum 230) |
+| payout addresses | 3 (the fleet's wallets) |
+| paid v0 shard records (the pre-segment path) | 6,474 = 7,196 IGN |
+| proving pool balance | 27,706 IGN |
+| carried records refused as duplicates ("segment already paid") | 952 of 2,199 carried |
+| carried records refused as late ("unproven", after the 600 DAA deadline) | 461 |
+
+Evidence file: build-1:/srv/artefacts/proving-live/prov-ledger-4465-tip31719-115022Z.json (sha256 bd3f53c18c3ffa20354ea62ade9fd5e7a5794202a71c3c369a5be71484f7143a), every segment from genesis with its paid row and carried records.
+
+Why payments had stopped at 11:15Z: Devnet 4's finality paused at 11:15:57Z under the hub roll (signing weight 4 to 25 percent of the frozen table), and every fleet prover gates on a finality pause (the 8 October build claims only below the finality-settled block; the V6-08 build holds after 600 s). The gate is the prover's own policy; payment never depended on finality (`carried_payouts`). The provers were restarted as generation 2 at 11:59Z with the gate lifted and the chain paid again from 12:02Z.
+
+## The epoch of evidence (12:02Z to EPOCH_END)
+
+EPOCH_TABLE
+
+## The sentence the row carries
+
+EPOCH_SENTENCE
+
+## Access to proving work (main's question of 13:1x UK)
+
+Segments are allocated by first valid record: 8 assignees per shard drawn from the keys in the record window hold a 10 DAA exclusive window (consensus/core/src/proving.rs:26, :30, :255, :305), after which any key may prove and the first valid record carried is paid; no stake, no queue; leases are off on the live nodes. A newcomer competes equally from its first record; a prover on a synced node claims within one 15-second pass (lp-4090-02 claimed 15 s after its restart). With about 227 segments an hour on this devnet and 120 to 185 s a proof, 8 to 11 provers saturate the work and every prover past that dilutes the fixed 20 percent as 1/N; about a third of carried records today are duplicate proofs. The rule change is docs/design/proving-claim-order.md (node change after 2.0.3; nothing on the chain today).
diff --git a/docs/analysis/class-v6/1p5x/lab/table.md b/docs/analysis/class-v6/1p5x/lab/table.md
index c985c27e7..d2c5be04c 100644
--- a/docs/analysis/class-v6/1p5x/lab/table.md
+++ b/docs/analysis/class-v6/1p5x/lab/table.md
@@ -170,6 +170,28 @@ on Windows and Mac where a 32 GB NVIDIA card is present, NOT LIVE on the 24 GB t
   the 4090's), 45.37 MH/s full against 39.71 for the twin (19.73 / 17.75 on the 4090). The F2 row re-run on the same pinned core:
   10.440 ms per warp for the signing object at 2^30, 5.134 for the class v4 calibration (frozen-v6/f2-verifier-build5.txt).
 
+- CONTROLS' done line (13:0x to 13:1x UK): the four controls and the ledger rows staged under build-1:/srv/artefacts/lab/controls/
+  with SHA256SUMS (frozen-v6 with tlb/, coop-arx, progpow-094, fishhash, sector-read, etchash, autolykos; 25 MB). Autolykos2 landed
+  in-house and bit-exact (hashlib reference against the CUDA harness at N = 65,536 and at Ergo's live N = 227,251,815, 7.27 GB;
+  216.2 / 201.8 MH/s full / twin on the rented 4090; the live-block end-to-end row owed). coop-arx's OpenCL text F1-complete on two
+  OpenCL platforms at all five chain lengths (the AMD tier runs the moment a card is reachable; Metal owed). Open on that lane: the
+  knee rows (every rented pod refuses the lock; COHORT's VM-host lock hunt reports by 14:30), the Metal text, the Ergo live-block row.
+- ADVERSARY (12:5x to 13:0x): phase B tier rows on the on-chain read (commit 82330b04c; 47f16b86f with Etchash on the mirror): the
+  24 GB-and-up NVIDIA tier on Windows and Mac LIVE on Devnet 4 and out-earning the board chip in phase B (the GPU's contribution per
+  TH after electricity 0.341 against the chip's 0.288 after its recurring cost at ten cents on the flat path); HiveOS NOT LIVE until
+  the 2.0.3.1 package; the 16 GB tier never (mining share only, 0.046 per TH behind the chip). ctl-etchash as a control (64 x 128 B
+  reads over about 3.3 GB) with the calibration line: the modelled DRAM board 765 nJ per hash against the shipped Antminer E9 Pro's
+  598 (3,680 MH/s at 2,200 W, the public figure as the ledger lane quotes it): the model 1.28x pessimistic for the chip, a witness.
+  Phase A and B for Ravencoin, Ethereum Classic and Iron Fish in their own units (commit d7db3e596, README section 14): no fleet
+  recovers a board chip's spend on any of the three on any path (each chain's 24-month mining emission under one design cost: RVN
+  about USD 2.9 M, IRON 1.4 M, ETC 83 M at a 10,000-board fleet); phase B with no prover income: on Ravencoin the chip's operating
+  advantage stands in full at USD 0.123 per TH; on ETC the mining revenue per TH (0.0087) is below the board's recurring cost (0.031)
+  and the E9 Pro's electricity alone (0.017), a loss on both sides at ten cents. The reading: on every chain in the set the board
+  chip's phase B advantage is real and its phase A recovery is not at today's emissions; the proving share is the one term that lets
+  Igneum's live GPU tier out-earn the chip in phase B.
+- The boxes (the build steward, 13:1x): the lab's ended box runs' pid files removed as stale after each pid's command line was read
+  dead; the steward's defaults on build-4, build-5 and build-6 stand until a lane claims with a live pid file.
+
 ## Open rows (NOT RUN)
 
 | row | owner | clock |
diff --git a/docs/analysis/class-v6/1p5x/ledger/README.md b/docs/analysis/class-v6/1p5x/ledger/README.md
new file mode 100644
index 000000000..be6de15e7
--- /dev/null
+++ b/docs/analysis/class-v6/1p5x/ledger/README.md
@@ -0,0 +1,157 @@
+# The GPU network ledger (the 1.5x laboratory, LEDGER lane, 9 October 2026)
+
+Every live GPU-mined chain the lab could pin, measured the same way on the same rented cards in the same sessions, with the same
+adversary method applied to each, ranked on (a) the same-node chip-to-GPU energy edge under the lab's convention, (b) the same
+under ProgPoW's own premise, and (c) the two-phase economics with each chain's ACTUAL reward split (only Igneum pays a share of
+every block to provers). Every number is MEASURED or WITNESS with its source on the row; a number that does not exist yet reads
+"pending" with the lane that owes it, never blank; a chain the lab could not run in-house reads NOT RUN with the reason.
+
+The data lives in `ledger.json` beside this file; every table here, on the public page (`docs/ledger/gpu-ledger.md`, served at
+/gpu-ledger) and in the reproduction kit is rendered from it by `tools/ledger/render.mjs`, so no two copies of a row can drift.
+The public page carries the same tables with less of the lane bookkeeping.
+
+<!-- ledger:stamp:start -->
+Data: ledger.json, stamp 2026-10-09, adversarial set v3 (build-1:/srv/artefacts/lab/adv/ (README.md, design-notes/adversarial-sets-v1-v2-v3.md, rows/, SHA256SUMS); set v3 commit b2b9ee0b9 on class-v6-adversary).
+<!-- ledger:stamp:end -->
+
+## 1. The method (the same for every chain)
+
+1. **The object.** Each chain's proof of work as its own pinned reference code, built in-house from source (the in-house rule: no
+   downloaded miner binary; the CONTROLS lane's pins with commit ids and sha256s on build-1 under /srv/artefacts/lab/controls/).
+   Igneum: the frozen class v6 at the live 4 GiB dataset. Ravencoin: the official ProgPoW 0.9.4 reference kernel (KAWPOW is
+   ProgPoW 0.9.4 with Ravencoin's constants, so the official kernel at Raven's DAG size is a labelled PROXY). Firo: the same row
+   (FiroPoW differs from KAWPOW in its constants only). Iron Fish: the FishHash reference library and a bit-exact CUDA port. Ethereum
+   Classic: the ethash hashimoto of the pinned chfast/ethash library at ETC's current epoch. Ergo: NOT RUN (the reason on the row).
+2. **The card rows** (the COHORT lane, the lab's measurement recipe, interface section 1): one rented RTX 4090 and one rented RTX
+   5090, both on uncapped hosts, every chain back to back in ONE session per card at stock; board power from `nvidia-smi` at 1 Hz
+   (the mean from 8 s in to the end, idle not subtracted); the rate from the harness's own counter; nJ per hash = W / MH/s x 1,000;
+   three timed runs per cell, the median served with the spread; `clocks_sm_median` and the dataset size on every row; the
+   read-only twin (the same reads, the arithmetic cut) where the harness has one, giving f = J_twin / J_full, the card's memory
+   share. Rented containers refuse clock locks, so every row is stock; the Igneum knee rows exist only in the record.
+3. **The chip rows** (the ADVERSARY lane, adversarial set v3): for each chain the cheapest credible specialist on the same node, a
+   complete machine (die, memory, board, PSU and host terms), modelled and labelled WITNESS; the same-node DRAM board is the energy
+   row, the SRAM die the residual (coexistence) row. Two conventions beside every ratio: **ours** (the cheapest programmable core,
+   fused where the work allows, register file sized to the work, instruction convention) and **ProgPoW's premise** (the chip must
+   keep a GPU-class datapath, so its edge is the compute term's 1.1x to 1.2x weighted by the card's measured memory share f).
+4. **The real chip.** Ethereum Classic is the one chain on the ledger with a chip on the market, the Antminer E9 Pro; its public
+   rate and power go on the row as a WITNESS and the modelled DRAM board for Etchash goes beside it as the model's calibration
+   line: the row says how close the model's ratio sits to the ratio from the public figures.
+5. **The two phases** (the lab's rulings 8c.5 and 8c.11): phase A, can a chip maker recover its spend before investment under
+   growing, flat and falling price paths; phase B, with the spend sunk, who exits first on operating cost, with the chain's actual
+   reward split: a GPU on Igneum earns the mining share plus the proving share (80 / 20 ratified), a hash chip the mining share
+   only; on every other chain the GPU's share is mining only (100 / 0), so the second-income term is zero by construction.
+6. **The ranking rule.** Rank (a) ascending on the same-node DRAM board ratio under our convention at the WORSE of the two cards
+   (the lower ratio is the smaller chip edge); (b) ascending on the ProgPoW-premise ratio at the same cell; (c) phase B: whether
+   the chain's GPUs earn an income a hash chip cannot. A chain with any pending or proxy cell in a column is ranked provisionally
+   in that column and says so; a NOT RUN chain is unranked. PASS is never written; the ranking is the rows' order, nothing more.
+
+## 2. The card rows (MEASURED; board power; stock)
+
+<!-- ledger:cards:start -->
+| chain | algorithm | dataset on the row | reward split (mining / proving) | RTX 4090 stock: nJ per hash (MH/s, W, f) | RTX 5090 stock: nJ per hash (MH/s, W, f) | twin | sources |
+|---|---|---|---|---|---|---|---|---|
+| Igneum | class v6, the live signing object 0x2a1d6caab4c24564 (2.0 devnet, chain id 4465) | 4.29 GB (4,294,967,296 bytes); 2^30 words, the live policy (70a6c703); 256 random 4-byte reads per hash, 62,120 instructions per hash (instruction convention) | 80 / 20 (the Token Value volume on master (D04, token-value/README.md: the 80/20 emission allocation); PROVING_POOL_SHARE_PERCENT) | 8,369 MEASURED (30.67 MH/s, 256.7 W, f 0.848; spread 0.67%; vast 55009211, driver 580; stock (the pod refused -lgc); clocks_sm_median pending the ledger session) | 5,597 MEASURED (68.66 MH/s, 384.3 W, f 0.811; spread 2.11%; vast 55006481, driver 580; stock (the pod refused -lgc); the host cap 500 W, the card drew 384) | yes (the same address stream, the arithmetic cut) | RTX 4090: build-1:/srv/artefacts/lab/ctl-v6/vast-55009211/ (rows.jsonl, SHA256SUMS); the cohort table build-1:/srv/artefacts/lab/cohort/TABLE.md; RTX 5090: build-1:/srv/artefacts/lab/ctl-v6/vast-55006481/; the cohort table build-1:/srv/artefacts/lab/cohort/TABLE.md |
+| Ravencoin | KAWPOW (ProgPoW 0.9.4 with Ravencoin's kiss99 constants, 7,500-block epochs and a 512-parent DAG; live since block 1,219,736, 6 May 2020) | 6.18 GB (6,182,403,712 bytes); KAWPOW's current DAG size at Ravencoin height 4,573,707 (epoch 609, read 13:0x UK): the official ProgPoW 0.9.4 kernel built at Ethash block 18,270,000 (epoch 609, the same byte count), harness progpow-094/gpu/pp_harness_18270000; KAWPOW's own constants NOT applied, so the row is 'ProgPoW 0.9.4 official at KAWPOW's DAG size (proxy)'; 64 coalesced 256-byte reads per hash; F1 GPU = CPU on both nonces (cpu/vectors-094-kawpow-size-18270000.txt) | 100 / 0 (Ravencoin's block reward goes to the miner in full (no second income to GPUs)) | 6,920 MEASURED (prior row: kawpowminer, not the pinned kernel; a PROXY until the ledger session's pinned-kernel row lands) (58.95 MH/s, 409.0 W, f none; spread none; RunPod, the comparative lane a2ed5c31; stock) | pending: pending (COHORT, the ledger session) | yes, by construction (progpow-094/gpu/pp_twin 18270000 26 250: the 64 dependent entry reads per 16-lane hash) | RTX 4090: build-1:/srv/artefacts/lab/adv/rows/rows.md (the ctl-progpow-094 section, card rows) |
+| Firo | FiroPoW (ProgPoW 0.9.4 with Firo's constants; live since block 419,264, 26 October 2021) | = Ravencoin's row | 100 / 0 | = Ravencoin's row | = Ravencoin's row | as Ravencoin | as KAWPOW: the pinned ProgPoW 0.9.4 reference; FiroPoW differs from KAWPOW only in its constants and DAG schedule, so the lab serves ONE row for both and says so |
+| Iron Fish | FishHash (live since hardfork 1, April 2024) | 4.83 GB (4,831,835,776 bytes); 37,748,717 items of 128 bytes, FIXED (no epochs); 96 random 128-byte reads per hash, 9,856 lane-instructions | 100 / 0 (Iron Fish's block reward is mining only) | pending: pending (COHORT, the ledger session); CONTROLS' rate-only read 19.73 MH/s at stock, no sampler (rate only 19.73 MH/s) | pending: pending (COHORT, the ledger session); CONTROLS' rate-only sm_120 read 45.37 MH/s full, 39.71 twin, F1 PASS (rate only 45.37 MH/s) | yes (a trace replay of the kernel's own item indexes; its energy read as a bound: the twin runs 10 percent slower than the full kernel) | RTX 4090: build-1:/srv/artefacts/lab/controls/fishhash/gpu/bench-4090.log; RTX 5090: build-1:/srv/artefacts/lab/controls/fishhash/ (fishhash.md) |
+| Ethereum Classic | Etchash (Ethash with ECIP-1099's 60,000-block epochs; live since block 11,700,000, November 2020) | 4.64 GB (4,638,898,816 bytes); ETC height 25,502,946 (read 12:5x UK) = Etchash epoch 425 (ECIP-1099: height / 60,000), the harness's block argument 12,750,000 (the Ethash epoch with the same size table index); 64 coalesced 128-byte reads per hash (two 64-byte half-mixes); CONTROLS' rate-only read on a 4090 at stock 29.90 MH/s full and 29.90 twin (memory-bound) | 100 / 0 (ETC's block reward is mining only) | pending: pending (COHORT, the ledger session; the harness staged 13:0x UK); CONTROLS' rate-only read 29.90 MH/s (rate only 29.90 MH/s) | pending: pending (COHORT, the ledger session; the sm_120 build from etchash/src) | yes, by construction | RTX 4090: build-1:/srv/artefacts/lab/controls/etchash/ (etchash.md) |
+| Ergo | Autolykos2 (k = 32, n = 26, Blake2b-256; the table grows 5 percent every 51,200 blocks) | 7.27 GB (7,272,058,080 bytes); the live table at Ergo height 1,890,820 (api.ergoplatform.com, 13:0x UK): N = 227,251,815 elements of 32 bytes (+5 percent at height 1,894,400; the row names its height); 33 random 32-byte reads per hash; the table builds on the device in 1.5 s; CONTROLS' rate-only read on a 4090 at stock 216.2 MH/s full, 201.8 twin | 100 / 0 (Ergo's block reward is mining only) | pending: pending (COHORT, the ledger session; the harness staged 13:1x UK); CONTROLS' rate-only read 216.2 MH/s full, 201.8 twin (rate only 216.20 MH/s) | pending: pending (COHORT, the ledger session; the sm_120 build from src) | yes (a trace replay) | RTX 4090: build-1:/srv/artefacts/lab/controls/autolykos/ (autolykos.md) |
+<!-- ledger:cards:end -->
+
+## 3. The chip-to-GPU edge, both conventions (WITNESS chip rows over MEASURED card rows)
+
+<!-- ledger:edge:start -->
+| chain | the cheapest credible same-node DRAM board (set v3, nJ per hash, band) | ratio at the RTX 4090 stock (ours) | ratio at the RTX 5090 stock (ours) | ProgPoW-premise ratio at the RTX 4090 | ProgPoW-premise ratio at the RTX 5090 | the die as the residual (nJ; ratio at the worse card) | real chip on the market | source |
+|---|---|---|---|---|---|---|---|---|
+| Igneum | 1,542 (1,329 to 1,941); GDDR7 board + register file sized to the work + fused operations, N5; split memory 527 / ALU 166 / tax 849; WITNESS (modelled, complete machine, instruction convention) | 5.43x (4.31 to 6.30) | 3.63x (2.88 to 4.21) | 1.01x to 1.03x (f 0.853 measured) | 1.02x to 1.03x (f 0.811 measured on the stock pod) | 335 (N2 full-SRAM die, the coexistence row); 25.0x | none on the market | docs/analysis/class-v6/1p5x/lab/adv/v3/ledger-rows.md and ledger-rows.json (class-v6-adversary 47f16b86f); build-1:/srv/artefacts/lab/adv/rows/ctl-v6.json and rows.md (set v3, 2026-10-09T11:33Z); the die 12.0x at the 5090 knee, USD 0.77 per MH/s |
+| Ravencoin | 1,757 (1,453 to 2,147); GDDR7 board + register file sized to the work + fused operations, N5; bandwidth-bound at 16 KB per hash (93 MH/s per board); split memory 647 / ALU and tax per rows.md; WITNESS (modelled on the kawpowminer census as the work proxy until CONTROLS' trace replaces it) | 3.94x (3.22 to 4.76) | pending | 1.10x to 1.20x (the premise's own figure; no measured twin on this kernel yet) | 1.10x to 1.20x (the premise's own figure; the twin row makes it measured) | 697 (N2 full-SRAM die, the coexistence row (USD 1.89 per MH/s); the cheapest specialist of any kind is near-memory base dies at 669 nJ); 9.9x | none on the market | docs/analysis/class-v6/1p5x/lab/adv/v3/ledger-rows.md and ledger-rows.json (class-v6-adversary 47f16b86f); build-1:/srv/artefacts/lab/adv/rows/ctl-progpow-094.json (set v3) |
+| Firo (= Ravencoin's row) | 1,757 (1,453 to 2,147); GDDR7 board + register file sized to the work + fused operations, N5; bandwidth-bound at 16 KB per hash (93 MH/s per board); split memory 647 / ALU and tax per rows.md; WITNESS (modelled on the kawpowminer census as the work proxy until CONTROLS' trace replaces it) | 3.94x (3.22 to 4.76) | pending | 1.10x to 1.20x (the premise's own figure; no measured twin on this kernel yet) | 1.10x to 1.20x (the premise's own figure; the twin row makes it measured) | 697 (N2 full-SRAM die, the coexistence row (USD 1.89 per MH/s); the cheapest specialist of any kind is near-memory base dies at 669 nJ); 9.9x | none on the market | = Ravencoin's row |
+| Iron Fish | 1,051 (881 to 1,257); GDDR7 board + register file sized to the work + fused operations, N5; bandwidth-bound at 124 MH/s per board; 95 percent of the board's energy is the memory path; split memory 529 / ALU 46 / tax 503; WITNESS (modelled; the card's cell pending, so the ratio is pending) | pending | pending | pending (needs the measured f from the twin) | pending | 170 (full SRAM dies (three N2 reticles) + sized + fused operations); pending | none on the market | build-1:/srv/artefacts/lab/adv/rows/ctl-fishhash.json and rows.md (set v3) |
+| Ethereum Classic | 765 (638 to 919); GDDR7 board + register file sized to the work + fused operations, N5; USD 3.25 per MH/s; split per ledger-rows.md; WITNESS (modelled; the card cells pending, so the ratios are pending) | pending | pending | 1.10x to 1.20x (the premise's own figure; the twin row makes it measured) | 1.10x to 1.20x (the premise's own figure) | 177 (N2 full-SRAM die, the coexistence row); pending | Bitmain Antminer E9 Pro: 3,680 MH/s at 2,200 W = 598 nJ per hash, WITNESS (a manufacturer's published figure, not measured by the lab); Bitmain's stated figures as listed on minerstat's hardware page (https://minerstat.com/hardware/antminer-e9-pro): 3.68 GH/s on Ethash at 2,200 W, release 2023-02; 2,200 W / 3,680 MH/s = 0.598 J per MH = 598 nJ per hash | docs/analysis/class-v6/1p5x/lab/adv/v3/ledger-rows.md and ledger-rows.json (class-v6-adversary 47f16b86f, wording 82330b04c) |
+| Ergo | pending: pending (ADVERSARY: the chip rows from CONTROLS' trace; default 15:00 UK, else pending (adversary)) | pending | pending | pending | pending | pending | none on the market | pending |
+<!-- ledger:edge:end -->
+
+## 4. The two phases with each chain's actual split
+
+<!-- ledger:phases:start -->
+| chain | split | phase A (before investment) | phase B (spend sunk) | an income a hash chip cannot earn | source |
+|---|---|---|---|---|---|
+| Igneum | 80 / 20 | before investment (24 months, the mining share 80 percent of the year-1 subsidy): the same-node board maker recovers its spend on NO fleet from 100 to 100 M boards on the growing or flat price path (100,000 boards: net USD -55.4 M on 58.8 M revenue growing; -37.6 M on 76.6 M flat); only the falling path pays it; the N2 die recovers on no path | spend sunk, flat path at USD 0.10 per kWh, the chip at 10 percent of the hash: mining revenue USD 0.354 per TH; the GPU's proving income at the ratified 20 percent share USD 0.098 per TH against the board chip's operating advantage USD 0.046 per TH (GPU electricity 0.111 less the chip's electricity, hosting and maintenance 0.066): the GPU out-earns the built board chip; the cancelling proving share 9 percent (board), 13 (hybrid), 20 (die) | yes by rule (the proving share of every block, 20 percent ratified); LIVE ON DEVNET with on-chain paid records (663 paid v1 segment records to 30 prover keys on chain 4465, the PROVING LIVE lane's file bd3f53c1 on build-1), not yet in a shipped package | build-1:/srv/artefacts/lab/adv/rows/rows.md (the two-phase section), ADVERSARY commit 545f3f8a0; ctl-v6-coexistence.json; WITNESS; phase B NOT LIVE until a shipped package runs a prover |
+| Ravencoin | 100 / 0 | before investment: no fleet from 100 to 100 M machines recovers a board chip's spend on any path, because Ravencoin's whole mining emission over 24 months (about USD 2.9 M at the public price) sits below one USD 35 M design cost; 10,000 boards would take 56 percent of the 721 GH/s network and earn USD 1.6 M to 2.4 M against a USD 44 M spend | spend sunk, mining only: mining revenue USD 0.064 per TH of the chain's own hashes; the board chip's recurring cost USD 0.069 per TH at ten cents; the chip's operating advantage over the RTX 4090 at stock (6,920 nJ) USD 0.123 per TH (the GPU's electricity 0.192 less the chip's 0.069) stands in full, no prover income | no (the block reward is mining only) | docs/analysis/class-v6/1p5x/lab/adv/v3/ctl-progpow-094-coexistence.json (rows[].phase_a, rows[].phase_b_split; method lab/adv/README.md section 14), ADVERSARY commit d7db3e596 on class-v6-adversary; WITNESS, the chain's own units, the 100/0 split, the same 24-month life, design cost and fleet rule as v6, the three price paths (flat at the public price, x2 growing, x0.5 falling, the hash held); the public lines on the row |
+| Firo | 100 / 0 | as KAWPOW | as KAWPOW | no | as KAWPOW; = KAWPOW's row at a 100/0 split |
+| Iron Fish | 100 / 0 | before investment: no fleet from 100 to 100 M machines recovers a board chip's spend on any path; Iron Fish's whole mining emission over 24 months is about USD 1.4 M at the public price (10,000 boards would take 84 percent of the hash for USD 1.1 M to 1.6 M) | spend sunk, mining only: mining revenue USD 0.086 per TH of the chain's own hashes; the board chip's recurring cost USD 0.043 per TH at ten cents; the GPU side NOT RUN until the card cell lands; no prover income by construction | no | docs/analysis/class-v6/1p5x/lab/adv/v3/ctl-fishhash-coexistence.json, ADVERSARY commit d7db3e596 on class-v6-adversary; WITNESS, the chain's own units, the 100/0 split, the same life, design cost, fleet rule and price paths as v6; the GPU side of phase B NOT RUN until COHORT's card rows |
+| Ethereum Classic | 100 / 0 | before investment: no fleet from 100 to 100 M machines recovers a board chip's spend on any path; ETC's whole mining emission over 24 months is about USD 83 M at the public price, but 10,000 boards are 2 percent of 120.9 TH/s and earn USD 1.0 M to 1.5 M, and 100,000 boards (13 percent) USD 9 M to 13 M against a USD 150 M spend | spend sunk, mining only: mining revenue USD 0.0087 per TH of the chain's own hashes, below even the modelled board's recurring cost (USD 0.031 per TH) and below the E9 Pro's own electricity at ten cents (598 nJ = USD 0.017 per TH): at the public figures nobody mines ETC at a profit at ten cents and phase B is a loss on both sides; the GPU side NOT RUN until the card cell lands | no | docs/analysis/class-v6/1p5x/lab/adv/v3/ctl-etchash-coexistence.json, ADVERSARY commit d7db3e596 on class-v6-adversary; WITNESS, the chain's own units, the 100/0 split, the same life, design cost, fleet rule and price paths as v6; the GPU side of phase B NOT RUN until COHORT's card rows |
+| Ergo | 100 / 0 | pending (ADVERSARY) | pending (ADVERSARY); no prover income by construction | no | pending; pending (ADVERSARY at the 100/0 split, the public line on the row) |
+<!-- ledger:phases:end -->
+
+## 5. The ranking
+
+<!-- ledger:ranking:start -->
+**(a) Ours, the same-node DRAM board at the worse card (the smaller chip edge first):**
+No order in this column yet: a cross-chain comparison is made only between cells from the same card, state and session, and the measured cells today come from 2 sessions (lab-cohort-ctl-v6 (COHORT, 11:49 to 12:30 UK, one chain); comparative-lane a2ed5c31 (RunPod, one chain, an earlier session)); the ledger session (both cards, every chain back to back) fills it. Each chain's own number, same card and state, as it stands:
+- Igneum: RTX 4090 stock 5.43x (4.31 to 6.30); RTX 5090 stock 3.63x (2.88 to 4.21)
+- Ravencoin: RTX 4090 stock 3.94x (3.22 to 4.76); RTX 5090 stock pending (a pending or proxy cell in this row)
+- Iron Fish: unranked in this column (no measured card cell yet)
+- Ethereum Classic: unranked in this column (no measured card cell yet)
+- Ergo: unranked in this column (no measured card cell yet)
+
+**(b) ProgPoW's premise (the chip keeps a GPU-class datapath):**
+- Igneum: RTX 4090 1.01x to 1.03x (f 0.853 measured); RTX 5090 1.02x to 1.03x (f 0.811 measured on the stock pod)
+- Ravencoin: RTX 4090 1.10x to 1.20x (the premise's own figure; no measured twin on this kernel yet); RTX 5090 1.10x to 1.20x (the premise's own figure; the twin row makes it measured)
+- Iron Fish: RTX 4090 pending (needs the measured f from the twin); RTX 5090 pending
+- Ethereum Classic: RTX 4090 1.10x to 1.20x (the premise's own figure; the twin row makes it measured); RTX 5090 1.10x to 1.20x (the premise's own figure)
+- Ergo: RTX 4090 pending; RTX 5090 pending
+
+**(c) Phase B, an income a hash chip cannot earn:**
+- Igneum: yes by rule (the proving share of every block, 20 percent ratified); LIVE ON DEVNET with on-chain paid records (663 paid v1 segment records to 30 prover keys on chain 4465, the PROVING LIVE lane's file bd3f53c1 on build-1), not yet in a shipped package
+- Ravencoin: no (the block reward is mining only)
+- Firo: no
+- Iron Fish: no
+- Ethereum Classic: no
+- Ergo: no
+<!-- ledger:ranking:end -->
+
+## 6. The claim under test, clause by clause
+
+The sentence the ledger was ordered to carry, in exactly these words and nothing stronger, is served as the claim UNDER TEST with
+each clause labelled by its state on the current rows; it reads as established only when every clause is SUPPORTED. The fifth
+review's ruling stands (interface 8c.9): a comparative sentence needs the comparative row, and this ledger is that row.
+
+<!-- ledger:claim:start -->
+**The headline, built from the supported clauses only:** under ProgPoW's own convention, the lowest measured chip-to-GPU edge of the chains on this ledger; and the only chain on this ledger whose GPUs are paid, by rule, an income a hash chip cannot earn (LIVE ON DEVNET, on-chain records (the PROVING LIVE lane, read 11:50:22Z 9 October 2026): on chain id 4465 (the Igneum 2.0 devnet) 663 paid v1 segment records (8 shards plus aggregation each) = 653.93 IGN paid from the proving pool to 30 distinct prover keys across chain blocks 3,000 to 30,687 (tip 31,719 at the read), plus 6,474 paid v0 shard records = 7,196 IGN; read by igneum_getProvingStatus, igneum_getSegmentRecords (3,965 segments) and igneum_getSegment; evidence build-1:/srv/artefacts/proving-live/prov-ledger-4465-tip31719-115022Z.json sha256 bd3f53c18c3ffa20354ea62ade9fd5e7a5794202a71c3c369a5be71484f7143a. NOT YET LIVE IN A SHIPPED PACKAGE: the payees are the fleet's prover stack (the same binaries the 2.0.3.1 HiveOS package wraps, cut 18:00 UK); the apps' prover is on by default on 24 GB cards but no app-proved record is on the record yet; a full-epoch line follows by 16:00 UK).
+
+The sentence as ordered, served as the claim under test: "the lowest measured chip-to-GPU edge of any live GPU network under a published method, on both conventions, and the only one whose GPUs earn income a chip cannot"
+
+Rule: the headline reads only what the like-for-like rows support, clause by clause (main's ruling, 13:2x UK 9 October 2026); under the ledger's own convention the measured edge per chain on the same card and state is stated as numbers, with no ranking word until the rows say so after the ledger session.
+
+| clause | convention | state on the current rows | why |
+|---|---|---|---|
+| under ProgPoW's own convention, the lowest measured chip-to-GPU edge of the chains on this ledger | ProgPoW's premise (a chip that keeps a GPU-class datapath) | SUPPORTED on the current rows | Igneum v6 1.01x to 1.03x (its measured f 0.81 to 0.85) against ProgPoW's own 1.10x to 1.20x for KAWPOW and FiroPoW; FishHash and Etchash pending their twins |
+| under the ledger's convention (the cheapest credible programmable specialist, adversarial set v3), each chain's measured edge on the same card and state, as numbers | ours | NUMBERS ONLY; no ranking until the ledger session (COHORT, both cards, every chain back to back, the pinned 0.9.4 kernel, twins; 14:45 UK) | the current cells come from different sessions (the lab's cohort pods for v6, the comparative lane's pod for KAWPOW) and a cross-chain comparison is made only between cells from the same card, state and session; at the RTX 4090 at stock the cells read v6 5.4x (5.67x on the second pod) and KAWPOW 3.9x (a proxy row from an earlier session); FishHash and Etchash pending |
+| and the only chain on this ledger whose GPUs are paid, by rule, an income a hash chip cannot earn | phase B, each chain's actual reward split | LABELLED BY THE PROVING LIVE LANE | the proving share (20 percent ratified) is paid to GPUs for work a hash chip cannot do; every other chain on the ledger pays mining only; the live state of that income is the PROVING LIVE lane's evidence line |
+
+Withdrawn: the earlier line 'KAWPOW and FiroPoW read 5 to 6x on the measured 4090 rows and v6 reads 2.35x' is withdrawn: it compared v6 at the 5090's 1,300 MHz knee with KAWPOW at the 4090 at stock, two cards and two states; the like-for-like cells are the ones on this ledger.
+
+The last clause's label from the PROVING LIVE lane: LIVE ON DEVNET, on-chain records (the PROVING LIVE lane, read 11:50:22Z 9 October 2026): on chain id 4465 (the Igneum 2.0 devnet) 663 paid v1 segment records (8 shards plus aggregation each) = 653.93 IGN paid from the proving pool to 30 distinct prover keys across chain blocks 3,000 to 30,687 (tip 31,719 at the read), plus 6,474 paid v0 shard records = 7,196 IGN; read by igneum_getProvingStatus, igneum_getSegmentRecords (3,965 segments) and igneum_getSegment; evidence build-1:/srv/artefacts/proving-live/prov-ledger-4465-tip31719-115022Z.json sha256 bd3f53c18c3ffa20354ea62ade9fd5e7a5794202a71c3c369a5be71484f7143a. NOT YET LIVE IN A SHIPPED PACKAGE: the payees are the fleet's prover stack (the same binaries the 2.0.3.1 HiveOS package wraps, cut 18:00 UK); the apps' prover is on by default on 24 GB cards but no app-proved record is on the record yet; a full-epoch line follows by 16:00 UK
+<!-- ledger:claim:end -->
+
+## 7. The reproduction kit
+
+build-1:/srv/artefacts/ledger/<stamp>/ (the stamp and the sha256 of the kit on the row below when it lands): the pinned controls
+(the frozen v6 pack and twin, the ProgPoW 0.9.4 reference harness, the FishHash harness, the Etchash harness when staged), the
+gen-6 Igneum worker, the lab's sampler and session script, the chain references by commit and sha, SHA256SUMS, and a README with
+one command per card and the expected rows within their bands (ROWS.md, rendered from ledger.json). Anyone with a 4090 can run it.
+
+| item | state |
+|---|---|
+| the kit on build-1 | pending (16:30 UK clock) |
+| the kit's sha256 | pending |
+| the public page | pending (17:30 UK clock; /gpu-ledger) |
+
+## 8. Faults and corrections (reported once)
+
+| when (UK) | what | state |
+|---|---|---|
+| 13:1x | the brief's "Ravencoin's own 1.5x claim" has no source in the pinned ProgPoW text (the README states 1.1x to 1.2x); the row carries the README's figure and the brief's figure as NOT FOUND | on the row |
+| 13:1x | the earlier like-for-like line ("KAWPOW 5 to 6x against v6 2.35x") compared v6 at the 5090 knee with KAWPOW at the 4090 stock; at the same cell (4090 stock, set v3) the rows read v6 5.4x against KAWPOW 3.9x (proxy), so clause (a) of the claim is NOT SUPPORTED on today's rows | reported to main 13:1x; the ledger session's pinned-kernel rows decide |
+| 13:0x | the lab's cohort cells stand in for the ledger session's cells until COHORT's back-to-back rows land (clock 14:45) | pending |
diff --git a/docs/analysis/class-v6/1p5x/ledger/ledger.json b/docs/analysis/class-v6/1p5x/ledger/ledger.json
new file mode 100644
index 000000000..88677dae5
--- /dev/null
+++ b/docs/analysis/class-v6/1p5x/ledger/ledger.json
@@ -0,0 +1,195 @@
+{
+  "title": "The GPU network ledger",
+  "stamp": "2026-10-09",
+  "adversarial_set": "v3",
+  "adversarial_set_source": "build-1:/srv/artefacts/lab/adv/ (README.md, design-notes/adversarial-sets-v1-v2-v3.md, rows/, SHA256SUMS); set v3 commit b2b9ee0b9 on class-v6-adversary",
+  "cards": [
+    {"id": "4090", "name": "RTX 4090", "state": "stock", "note": "uncapped host (450 of 450 W)"},
+    {"id": "5090", "name": "RTX 5090", "state": "stock", "note": "uncapped host (575 or 600 W at default)"}
+  ],
+  "ranking_rule": "Rank (a) ascending on the same-node DRAM board ratio under the ledger's convention at the WORSE of the two cards (the lower ratio is the smaller chip edge); (b) ascending on the ProgPoW-premise ratio at the same cell; (c) phase B: whether the chain's GPUs earn an income a hash chip cannot. A cross-chain comparison is made only between cells from the SAME card, the SAME state and the SAME session (main's ruling, 13:2x UK 9 October 2026); until the ledger session's cells exist the (a) column shows each chain's own number and no order. A chain with any pending or proxy cell in a column is ranked provisionally in that column and says so; a NOT RUN chain is unranked.",
+  "mechanism": {
+    "title": "Why the two honest-convention edges differ: the shape of the memory traffic",
+    "rows": [
+      {"chain": "Igneum v6", "traffic": "256 dependent random reads of one 32-byte sector each per hash over 4 GiB (8 KB moved, 1 KB consumed); the card is activation-bound: 7.86 G sector reads per second on the 4090 at its tFAW form, 17.6 G on the 5090", "card_cost": "27 to 31 nJ per random sector read all-in on the 4090 at stock (X7 and the sector-read rows); the ALU runs in the reads' shadow (f 0.85)", "chip_cost": "about 2.1 nJ per read on the chip's own GDDR7 board (1.2 on HBM3, 0.7 beside the bank): s = 12.8", "consequence": "the chip's edge on random reads is the largest of any term in the model; a read-dominated object carries it in full"},
+      {"chain": "Ravencoin KAWPOW (and FiroPoW)", "traffic": "64 coalesced 256-byte DAG entries per 16-lane hash = 16 KB streamed per hash; the card is bandwidth-bound (1.03 TB/s at 62.6 MH/s on the 4090; 93 MH/s per modelled board)", "card_cost": "a coalesced 256-byte read costs the card far less per byte than a scattered sector (modelled 35 nJ per 256-byte entry against 27 nJ per 32-byte sector)", "chip_cost": "the chip streams the same bytes at the same DRAM bandwidth bound; its gain is on the per-byte energy and the 18 random-math ops per loop (a GPU-class datapath on the premise, fused lanes under ours)", "consequence": "a smaller memory-term gap, so a smaller honest-convention edge at the same card; the price is a DAG that grows (8.38 GB at Ethereum's epoch 871 for the control) and a 16 KB stream per hash"},
+      {"chain": "Iron Fish FishHash", "traffic": "96 random 128-byte lines per hash over a fixed 4.83 GB (12 KB per hash, every byte consumed): between the two shapes (four sectors per activation)", "card_cost": "pending the measured cell (CONTROLS' rate-only read 242 GB/s of lines at 19.73 MH/s on the 4090)", "chip_cost": "95 percent of the modelled board's energy is its memory path", "consequence": "the ratio is pending its card cell"},
+      {"chain": "Ethereum Classic Etchash", "traffic": "64 loops of two 64-byte half-mixes = 128-byte coalesced reads per hash over the epoch DAG; bandwidth-bound", "card_cost": "pending", "chip_cost": "the one chip that exists (the E9 Pro) on this shape", "consequence": "the calibration line"}
+    ],
+    "note": "Stated as the mechanism, not as a mitigation: the lab's X7 verdict is that no read-dominated design reaches a small edge against a chip with its own memory on the same node, and the ledger shows the shape of each chain's traffic beside its ratio so a reader sees where each number comes from."
+  },
+  "chains": [
+    {
+      "id": "igneum-v6",
+      "chain": "Igneum",
+      "algorithm": "class v6, the live signing object 0x2a1d6caab4c24564 (2.0 devnet, chain id 4465)",
+      "control": "ctl-v6",
+      "pin": "tree 1a938abe4; pack x1-ctrl-ds30.tgz sha256 7606c13d92546e44feef485fde25716a206643e6466ef5d5251d41354eee9532; read-only twin x1-ctrl-ds30-readonly.tgz 7629ed9598c0297533c03d4a9cbd83338d47a7693a26dc8b86566f3f0982174b; worker igneum-worker-cuda-gen6 804a6f7fea10a62e07cf6cd01e99331de5149e683112b5870fc25d1e11e199bd (COHORT's rows on worker f5f3846c, kit bf9b85d6); build-1:/srv/artefacts/lab/controls/frozen-v6/",
+      "dataset_bytes": 4294967296,
+      "dataset_note": "2^30 words, the live policy (70a6c703); 256 random 4-byte reads per hash, 62,120 instructions per hash (instruction convention)",
+      "twin": "yes (the same address stream, the arithmetic cut)",
+      "split": {"mining": 80, "proving": 20, "source": "the Token Value volume on master (D04, token-value/README.md: the 80/20 emission allocation); PROVING_POOL_SHARE_PERCENT"},
+      "own_claim": "none published as a number; the lab's X0 record: the same-node DRAM board 2.35x at the 5090 knee (set v0), 2.60x (set v3)",
+      "cells": {
+        "4090": {"status": "MEASURED", "session": "lab-cohort-ctl-v6 (COHORT, 11:49 to 12:30 UK, one chain)", "nj": 8368.9, "mhs": 30.673, "w": 256.7, "f": 0.848, "twin_nj": 7098.9, "spread_pct": 0.67, "clock": "stock (the pod refused -lgc); clocks_sm_median pending the ledger session", "pod": "vast 55009211, driver 580", "source": "build-1:/srv/artefacts/lab/ctl-v6/vast-55009211/ (rows.jsonl, SHA256SUMS); the cohort table build-1:/srv/artefacts/lab/cohort/TABLE.md", "note": "the lab's cohort cell (median of three); the second uncapped 4090 (vast 55006526) read 8,751; the ledger session's own row replaces this cell when it lands"},
+        "5090": {"status": "MEASURED", "session": "lab-cohort-ctl-v6 (COHORT, 11:49 to 12:30 UK, one chain)", "nj": 5597.1, "mhs": 68.661, "w": 384.3, "f": 0.811, "twin_nj": 4537.6, "spread_pct": 2.11, "clock": "stock (the pod refused -lgc); the host cap 500 W, the card drew 384", "pod": "vast 55006481, driver 580", "source": "build-1:/srv/artefacts/lab/ctl-v6/vast-55006481/; the cohort table build-1:/srv/artefacts/lab/cohort/TABLE.md", "note": "the lab's cohort cell; the ledger session's uncapped-host row replaces it when it lands"}
+      },
+      "adversary": {
+        "status": "WITNESS (modelled, complete machine, instruction convention)",
+        "board": {"low": 1329, "nominal": 1542, "high": 1941, "design": "GDDR7 board + register file sized to the work + fused operations, N5", "split_nj": "memory 527 / ALU 166 / tax 849"},
+        "die": {"nominal": 335, "design": "N2 full-SRAM die, the coexistence row"},
+        "premise": {"4090": "1.01x to 1.03x (f 0.853 measured)", "5090": "1.02x to 1.03x (f 0.811 measured on the stock pod)"},
+        "source": "docs/analysis/class-v6/1p5x/lab/adv/v3/ledger-rows.md and ledger-rows.json (class-v6-adversary 47f16b86f); build-1:/srv/artefacts/lab/adv/rows/ctl-v6.json and rows.md (set v3, 2026-10-09T11:33Z); the die 12.0x at the 5090 knee, USD 0.77 per MH/s"
+      },
+      "real_chip": null,
+      "phases": {
+        "status": "WITNESS; phase B NOT LIVE until a shipped package runs a prover",
+        "A": "before investment (24 months, the mining share 80 percent of the year-1 subsidy): the same-node board maker recovers its spend on NO fleet from 100 to 100 M boards on the growing or flat price path (100,000 boards: net USD -55.4 M on 58.8 M revenue growing; -37.6 M on 76.6 M flat); only the falling path pays it; the N2 die recovers on no path",
+        "B": "spend sunk, flat path at USD 0.10 per kWh, the chip at 10 percent of the hash: mining revenue USD 0.354 per TH; the GPU's proving income at the ratified 20 percent share USD 0.098 per TH against the board chip's operating advantage USD 0.046 per TH (GPU electricity 0.111 less the chip's electricity, hosting and maintenance 0.066): the GPU out-earns the built board chip; the cancelling proving share 9 percent (board), 13 (hybrid), 20 (die)",
+        "income_a_chip_cannot_earn": "yes by rule (the proving share of every block, 20 percent ratified); LIVE ON DEVNET with on-chain paid records (663 paid v1 segment records to 30 prover keys on chain 4465, the PROVING LIVE lane's file bd3f53c1 on build-1), not yet in a shipped package",
+        "source": "build-1:/srv/artefacts/lab/adv/rows/rows.md (the two-phase section), ADVERSARY commit 545f3f8a0; ctl-v6-coexistence.json"
+      }
+    },
+    {
+      "id": "rvn-kawpow",
+      "chain": "Ravencoin",
+      "algorithm": "KAWPOW (ProgPoW 0.9.4 with Ravencoin's kiss99 constants, 7,500-block epochs and a 512-parent DAG; live since block 1,219,736, 6 May 2020)",
+      "control": "ctl-progpow-094",
+      "pin": "ifdefelse/ProgPOW d035ae56536d2e6fc71aad609ac5085c9785d1b3, the reference's own CUDA kernel text, DAG generator and light cache (256 parents as the code implements); harness progpow-094/gpu/pp_harness_<block>, CPU reference cpu/pp094_ref; build-1:/srv/artefacts/lab/controls/progpow-094/ (SHA256SUMS)",
+      "dataset_bytes": 6182403712,
+      "dataset_note": "KAWPOW's current DAG size at Ravencoin height 4,573,707 (epoch 609, read 13:0x UK): the official ProgPoW 0.9.4 kernel built at Ethash block 18,270,000 (epoch 609, the same byte count), harness progpow-094/gpu/pp_harness_18270000; KAWPOW's own constants NOT applied, so the row is 'ProgPoW 0.9.4 official at KAWPOW's DAG size (proxy)'; 64 coalesced 256-byte reads per hash; F1 GPU = CPU on both nonces (cpu/vectors-094-kawpow-size-18270000.txt)",
+      "twin": "yes, by construction (progpow-094/gpu/pp_twin 18270000 26 250: the 64 dependent entry reads per 16-lane hash)",
+      "split": {"mining": 100, "proving": 0, "source": "Ravencoin's block reward goes to the miner in full (no second income to GPUs)"},
+      "public": {"block_reward": "1,250 RVN", "block_time": "60 s", "network_hash": "721.3 GH/s", "price_usd": "0.0022", "source": "minerstat.com/coin/RVN, read 9 October 2026 13:3x UK (public figures, not measured by the lab)"},
+      "own_claim": "the ProgPoW README (the pinned commit) states a specialised chip gains 1.1x to 1.2x on ProgPoW's premise (the chip keeps a GPU-class datapath). The figure 1.5x quoted in the ledger's brief as Ravencoin's own claim has no source in the pinned text or on the record: NOT FOUND; the row carries the README's 1.1x to 1.2x",
+      "cells": {
+        "4090": {"status": "MEASURED (prior row: kawpowminer, not the pinned kernel; a PROXY until the ledger session's pinned-kernel row lands)", "session": "comparative-lane a2ed5c31 (RunPod, one chain, an earlier session)", "nj": 6920, "mhs": 58.95, "w": 409, "f": null, "twin_nj": null, "spread_pct": null, "clock": "stock", "pod": "RunPod, the comparative lane a2ed5c31", "source": "build-1:/srv/artefacts/lab/adv/rows/rows.md (the ctl-progpow-094 section, card rows)", "note": "407 to 411 W at 58.95 MH/s; the ledger session re-measures with the pinned official kernel at Raven's DAG size (CONTROLS' rate-only read on a 4090 at stock: 58.95 MH/s full, the twin 60.99), board power sampled, median of three, the twin beside it"},
+        "5090": {"status": "pending (COHORT, the ledger session)", "session": "pending", "nj": null, "mhs": null, "w": null, "f": null, "twin_nj": null, "spread_pct": null, "clock": "stock", "pod": "pending", "source": "pending", "note": ""}
+      },
+      "adversary": {
+        "status": "WITNESS (modelled on the kawpowminer census as the work proxy until CONTROLS' trace replaces it)",
+        "board": {"low": 1453, "nominal": 1757, "high": 2147, "design": "GDDR7 board + register file sized to the work + fused operations, N5; bandwidth-bound at 16 KB per hash (93 MH/s per board)", "split_nj": "memory 647 / ALU and tax per rows.md"},
+        "die": {"nominal": 697, "design": "N2 full-SRAM die, the coexistence row (USD 1.89 per MH/s); the cheapest specialist of any kind is near-memory base dies at 669 nJ"},
+        "premise": {"4090": "1.10x to 1.20x (the premise's own figure; no measured twin on this kernel yet)", "5090": "1.10x to 1.20x (the premise's own figure; the twin row makes it measured)"},
+        "source": "docs/analysis/class-v6/1p5x/lab/adv/v3/ledger-rows.md and ledger-rows.json (class-v6-adversary 47f16b86f); build-1:/srv/artefacts/lab/adv/rows/ctl-progpow-094.json (set v3)"
+      },
+      "real_chip": null,
+      "phases": {
+        "status": "WITNESS, the chain's own units, the 100/0 split, the same 24-month life, design cost and fleet rule as v6, the three price paths (flat at the public price, x2 growing, x0.5 falling, the hash held); the public lines on the row",
+        "A": "before investment: no fleet from 100 to 100 M machines recovers a board chip's spend on any path, because Ravencoin's whole mining emission over 24 months (about USD 2.9 M at the public price) sits below one USD 35 M design cost; 10,000 boards would take 56 percent of the 721 GH/s network and earn USD 1.6 M to 2.4 M against a USD 44 M spend",
+        "B": "spend sunk, mining only: mining revenue USD 0.064 per TH of the chain's own hashes; the board chip's recurring cost USD 0.069 per TH at ten cents; the chip's operating advantage over the RTX 4090 at stock (6,920 nJ) USD 0.123 per TH (the GPU's electricity 0.192 less the chip's 0.069) stands in full, no prover income",
+        "income_a_chip_cannot_earn": "no (the block reward is mining only)",
+        "source": "docs/analysis/class-v6/1p5x/lab/adv/v3/ctl-progpow-094-coexistence.json (rows[].phase_a, rows[].phase_b_split; method lab/adv/README.md section 14), ADVERSARY commit d7db3e596 on class-v6-adversary"
+      }
+    },
+    {
+      "id": "firo-firopow",
+      "chain": "Firo",
+      "algorithm": "FiroPoW (ProgPoW 0.9.4 with Firo's constants; live since block 419,264, 26 October 2021)",
+      "control": "ctl-progpow-094 (the same row as KAWPOW)",
+      "pin": "as KAWPOW: the pinned ProgPoW 0.9.4 reference; FiroPoW differs from KAWPOW only in its constants and DAG schedule, so the lab serves ONE row for both and says so",
+      "dataset_bytes": null,
+      "dataset_note": "= KAWPOW's row (its own DAG schedule is not measured separately)",
+      "twin": "as KAWPOW",
+      "split": {"mining": 100, "proving": 0, "source": "Firo's block reward splits between miners, masternodes and the development fund; the GPU's share is mining only (no proving income)"},
+      "own_claim": "as ProgPoW's: 1.1x to 1.2x on its premise",
+      "same_row_as": "rvn-kawpow",
+      "cells": {},
+      "adversary": {"status": "= KAWPOW's row", "board": null, "die": null, "premise": {}, "source": "as KAWPOW"},
+      "real_chip": null,
+      "phases": {"status": "= KAWPOW's row at a 100/0 split", "A": "as KAWPOW", "B": "as KAWPOW", "income_a_chip_cannot_earn": "no", "source": "as KAWPOW"}
+    },
+    {
+      "id": "ironfish-fishhash",
+      "chain": "Iron Fish",
+      "algorithm": "FishHash (live since hardfork 1, April 2024)",
+      "control": "ctl-fishhash",
+      "pin": "iron-fish/fish-hash 823531c002e78259759f8b1f36ac9121c32059b1 (cpp/FishHash.cpp; the spec FishHash.pdf sha256 869870b9...); the lab's CUDA implementation bit-exact with the library on 64 items and 256 hashes, fingerprint f841605125ce375e; gpu/fh_cuda, cpu/fh_cli; build-1:/srv/artefacts/lab/controls/fishhash/ (SHA256SUMS)",
+      "dataset_bytes": 4831835776,
+      "dataset_note": "37,748,717 items of 128 bytes, FIXED (no epochs); 96 random 128-byte reads per hash, 9,856 lane-instructions",
+      "twin": "yes (a trace replay of the kernel's own item indexes; its energy read as a bound: the twin runs 10 percent slower than the full kernel)",
+      "split": {"mining": 100, "proving": 0, "source": "Iron Fish's block reward is mining only"},
+      "public": {"block_reward": "17.25 IRON", "block_time": "61 s", "network_hash": "229.5 GH/s", "price_usd": "0.07", "source": "minerstat.com/coin/IRON, read 9 October 2026 13:3x UK (public figures, not measured by the lab)"},
+      "own_claim": "none as a chip-edge number; the Trail of Bits review (Iron Fish blog, 14 May 2024) is the published outside check",
+      "cells": {
+        "4090": {"status": "pending (COHORT, the ledger session); CONTROLS' rate-only read 19.73 MH/s at stock, no sampler", "nj": null, "mhs": 19.73, "w": null, "f": null, "twin_nj": null, "spread_pct": null, "clock": "stock", "pod": "CONTROLS' rented 4090 (rate only)", "source": "build-1:/srv/artefacts/lab/controls/fishhash/gpu/bench-4090.log", "note": "242 GB/s of 128-byte lines at that rate"},
+        "5090": {"status": "pending (COHORT, the ledger session); CONTROLS' rate-only sm_120 read 45.37 MH/s full, 39.71 twin, F1 PASS", "nj": null, "mhs": 45.37, "w": null, "f": null, "twin_nj": null, "spread_pct": null, "clock": "stock", "pod": "CONTROLS' rented 5090 (rate only)", "source": "build-1:/srv/artefacts/lab/controls/fishhash/ (fishhash.md)", "note": ""}
+      },
+      "adversary": {
+        "status": "WITNESS (modelled; the card's cell pending, so the ratio is pending)",
+        "board": {"low": 881, "nominal": 1051, "high": 1257, "design": "GDDR7 board + register file sized to the work + fused operations, N5; bandwidth-bound at 124 MH/s per board; 95 percent of the board's energy is the memory path", "split_nj": "memory 529 / ALU 46 / tax 503"},
+        "die": {"nominal": 170, "design": "full SRAM dies (three N2 reticles) + sized + fused operations"},
+        "premise": {"4090": "pending (needs the measured f from the twin)", "5090": "pending"},
+        "source": "build-1:/srv/artefacts/lab/adv/rows/ctl-fishhash.json and rows.md (set v3)"
+      },
+      "real_chip": null,
+      "phases": {"status": "WITNESS, the chain's own units, the 100/0 split, the same life, design cost, fleet rule and price paths as v6; the GPU side of phase B NOT RUN until COHORT's card rows", "A": "before investment: no fleet from 100 to 100 M machines recovers a board chip's spend on any path; Iron Fish's whole mining emission over 24 months is about USD 1.4 M at the public price (10,000 boards would take 84 percent of the hash for USD 1.1 M to 1.6 M)", "B": "spend sunk, mining only: mining revenue USD 0.086 per TH of the chain's own hashes; the board chip's recurring cost USD 0.043 per TH at ten cents; the GPU side NOT RUN until the card cell lands; no prover income by construction", "income_a_chip_cannot_earn": "no", "source": "docs/analysis/class-v6/1p5x/lab/adv/v3/ctl-fishhash-coexistence.json, ADVERSARY commit d7db3e596 on class-v6-adversary"}
+    },
+    {
+      "id": "etc-etchash",
+      "chain": "Ethereum Classic",
+      "algorithm": "Etchash (Ethash with ECIP-1099's 60,000-block epochs; live since block 11,700,000, November 2020)",
+      "control": "ctl-etchash (new for the ledger)",
+      "pin": "a CUDA hashimoto over the pinned chfast/ethash v0.8.0 library's light cache and the ProgPOW repo's reference DAG generator (libethash objects), checked against ethash::hash on the CPU at block 0 and at the live epoch (F1: GPU = CPU on both nonces); gpu/etchash_cuda (`check <block> <nonces>`, `bench <block> 22 250`, `bench <block> 22 250 twin`), cpu/etc_ref; build-1:/srv/artefacts/lab/controls/etchash/ (SHA256SUMS; etchash.md)",
+      "dataset_bytes": 4638898816,
+      "dataset_note": "ETC height 25,502,946 (read 12:5x UK) = Etchash epoch 425 (ECIP-1099: height / 60,000), the harness's block argument 12,750,000 (the Ethash epoch with the same size table index); 64 coalesced 128-byte reads per hash (two 64-byte half-mixes); CONTROLS' rate-only read on a 4090 at stock 29.90 MH/s full and 29.90 twin (memory-bound)",
+      "twin": "yes, by construction",
+      "split": {"mining": 100, "proving": 0, "source": "ETC's block reward is mining only"},
+      "public": {"block_reward": "2.048 ETC", "block_time": "16 s", "network_hash": "120.9 TH/s", "price_usd": "8.24", "source": "minerstat.com/coin/ETC, read 9 October 2026 13:3x UK (public figures, not measured by the lab)"},
+      "own_claim": "none; the chain accepts chips (the Antminer E9 Pro mines it)",
+      "cells": {
+        "4090": {"status": "pending (COHORT, the ledger session; the harness staged 13:0x UK); CONTROLS' rate-only read 29.90 MH/s", "nj": null, "mhs": 29.90, "w": null, "f": null, "twin_nj": null, "spread_pct": null, "clock": "stock", "pod": "CONTROLS' rented 4090 (rate only)", "source": "build-1:/srv/artefacts/lab/controls/etchash/ (etchash.md)", "note": ""},
+        "5090": {"status": "pending (COHORT, the ledger session; the sm_120 build from etchash/src)", "nj": null, "mhs": null, "w": null, "f": null, "twin_nj": null, "spread_pct": null, "clock": "stock", "pod": "pending", "source": "pending", "note": ""}
+      },
+      "adversary": {
+        "status": "WITNESS (modelled; the card cells pending, so the ratios are pending)",
+        "board": {"low": 638, "nominal": 765, "high": 919, "design": "GDDR7 board + register file sized to the work + fused operations, N5; USD 3.25 per MH/s", "split_nj": "per ledger-rows.md"},
+        "die": {"nominal": 177, "design": "N2 full-SRAM die, the coexistence row"},
+        "premise": {"4090": "1.10x to 1.20x (the premise's own figure; the twin row makes it measured)", "5090": "1.10x to 1.20x (the premise's own figure)"},
+        "source": "docs/analysis/class-v6/1p5x/lab/adv/v3/ledger-rows.md and ledger-rows.json (class-v6-adversary 47f16b86f, wording 82330b04c)",
+        "calibration": "the modelled same-node DRAM board 765 nJ per hash against the Antminer E9 Pro's 598 from its public figures: the model reads 1.28x PESSIMISTIC for the chip (it gives the chip more energy than the one real chip spends); a witness, never a ceiling"
+      },
+      "real_chip": {
+        "name": "Bitmain Antminer E9 Pro",
+        "mhs": 3680,
+        "w": 2200,
+        "nj": 597.8,
+        "status": "WITNESS (a manufacturer's published figure, not measured by the lab)",
+        "source": "Bitmain's stated figures as listed on minerstat's hardware page (https://minerstat.com/hardware/antminer-e9-pro): 3.68 GH/s on Ethash at 2,200 W, release 2023-02; 2,200 W / 3,680 MH/s = 0.598 J per MH = 598 nJ per hash",
+        "note": "the ONE live GPU-mined chain with a chip on the market; the modelled board (765 nJ) sits beside it: 1.28x pessimistic for the chip"
+      },
+      "phases": {"status": "WITNESS, the chain's own units, the 100/0 split, the same life, design cost, fleet rule and price paths as v6; the GPU side of phase B NOT RUN until COHORT's card rows", "A": "before investment: no fleet from 100 to 100 M machines recovers a board chip's spend on any path; ETC's whole mining emission over 24 months is about USD 83 M at the public price, but 10,000 boards are 2 percent of 120.9 TH/s and earn USD 1.0 M to 1.5 M, and 100,000 boards (13 percent) USD 9 M to 13 M against a USD 150 M spend", "B": "spend sunk, mining only: mining revenue USD 0.0087 per TH of the chain's own hashes, below even the modelled board's recurring cost (USD 0.031 per TH) and below the E9 Pro's own electricity at ten cents (598 nJ = USD 0.017 per TH): at the public figures nobody mines ETC at a profit at ten cents and phase B is a loss on both sides; the GPU side NOT RUN until the card cell lands", "income_a_chip_cannot_earn": "no", "source": "docs/analysis/class-v6/1p5x/lab/adv/v3/ctl-etchash-coexistence.json, ADVERSARY commit d7db3e596 on class-v6-adversary"}
+    },
+    {
+      "id": "ergo-autolykos2",
+      "chain": "Ergo",
+      "algorithm": "Autolykos2 (k = 32, n = 26, Blake2b-256; the table grows 5 percent every 51,200 blocks)",
+      "control": "ctl-autolykos (new for the ledger, landed 13:1x UK)",
+      "pin": "the published text ergoplatform/ergo master 3a6b00d3, AutolykosPowScheme.scala (sha256 330ae870...; the copy in src/), implemented in-house: CPU reference src/autolykos_ref.py (hashlib's Blake2b, lazy elements), GPU gpu/autolykos_cuda (`check <height> <N> <count> < fixtures`, `bench <height> <N> 20 250`, `bench ... twin`; sm_89, the sm_120 build from src); F1 at N = 65,536 and at the live table: elements 0 and last, 64 hits and the 256-hit fingerprints equal the reference's (f3cf1fd34d1002fa small, b6d07a7b15956179 live); build-1:/srv/artefacts/lab/controls/autolykos/ (SHA256SUMS; autolykos.md). CAVEAT on the row: the fixtures are the lab's own from an independent implementation of the published text (the reference repository has no known-answer v2 hit vector); the end-to-end check against a live Ergo block is owed, not claimed",
+      "dataset_bytes": 7272058080,
+      "dataset_note": "the live table at Ergo height 1,890,820 (api.ergoplatform.com, 13:0x UK): N = 227,251,815 elements of 32 bytes (+5 percent at height 1,894,400; the row names its height); 33 random 32-byte reads per hash; the table builds on the device in 1.5 s; CONTROLS' rate-only read on a 4090 at stock 216.2 MH/s full, 201.8 twin",
+      "twin": "yes (a trace replay)",
+      "split": {"mining": 100, "proving": 0, "source": "Ergo's block reward is mining only"},
+      "public": {"block_reward": "3.009 ERG", "block_time": "120 s", "network_hash": "569.1 GH/s", "price_usd": "0.29", "source": "minerstat.com/coin/ERG, read 9 October 2026 13:4x UK (public figures, not measured by the lab)"},
+      "own_claim": "none on the record as a chip-edge number",
+      "cells": {
+        "4090": {"status": "pending (COHORT, the ledger session; the harness staged 13:1x UK); CONTROLS' rate-only read 216.2 MH/s full, 201.8 twin", "session": "pending", "nj": null, "mhs": 216.2, "w": null, "f": null, "twin_nj": null, "spread_pct": null, "clock": "stock", "pod": "CONTROLS' rented 4090 (rate only)", "source": "build-1:/srv/artefacts/lab/controls/autolykos/ (autolykos.md)", "note": ""},
+        "5090": {"status": "pending (COHORT, the ledger session; the sm_120 build from src)", "session": "pending", "nj": null, "mhs": null, "w": null, "f": null, "twin_nj": null, "spread_pct": null, "clock": "stock", "pod": "pending", "source": "pending", "note": ""}
+      },
+      "adversary": {"status": "pending (ADVERSARY: the chip rows from CONTROLS' trace; default 15:00 UK, else pending (adversary))", "board": null, "die": null, "premise": {"4090": "pending", "5090": "pending"}, "source": "pending"},
+      "real_chip": null,
+      "phases": {"status": "pending (ADVERSARY at the 100/0 split, the public line on the row)", "A": "pending (ADVERSARY)", "B": "pending (ADVERSARY); no prover income by construction", "income_a_chip_cannot_earn": "no", "source": "pending"}
+    }
+  ],
+  "claim": {
+    "ordered_sentence": "the lowest measured chip-to-GPU edge of any live GPU network under a published method, on both conventions, and the only one whose GPUs earn income a chip cannot",
+    "headline_rule": "the headline reads only what the like-for-like rows support, clause by clause (main's ruling, 13:2x UK 9 October 2026); under the ledger's own convention the measured edge per chain on the same card and state is stated as numbers, with no ranking word until the rows say so after the ledger session",
+    "clauses": [
+      {"text": "under ProgPoW's own convention, the lowest measured chip-to-GPU edge of the chains on this ledger", "convention": "ProgPoW's premise (a chip that keeps a GPU-class datapath)", "state": "SUPPORTED on the current rows", "why": "Igneum v6 1.01x to 1.03x (its measured f 0.81 to 0.85) against ProgPoW's own 1.10x to 1.20x for KAWPOW and FiroPoW; FishHash and Etchash pending their twins"},
+      {"text": "under the ledger's convention (the cheapest credible programmable specialist, adversarial set v3), each chain's measured edge on the same card and state, as numbers", "convention": "ours", "state": "NUMBERS ONLY; no ranking until the ledger session (COHORT, both cards, every chain back to back, the pinned 0.9.4 kernel, twins; 14:45 UK)", "why": "the current cells come from different sessions (the lab's cohort pods for v6, the comparative lane's pod for KAWPOW) and a cross-chain comparison is made only between cells from the same card, state and session; at the RTX 4090 at stock the cells read v6 5.4x (5.67x on the second pod) and KAWPOW 3.9x (a proxy row from an earlier session); FishHash and Etchash pending"},
+      {"text": "and the only chain on this ledger whose GPUs are paid, by rule, an income a hash chip cannot earn", "convention": "phase B, each chain's actual reward split", "state": "LABELLED BY THE PROVING LIVE LANE", "why": "the proving share (20 percent ratified) is paid to GPUs for work a hash chip cannot do; every other chain on the ledger pays mining only; the live state of that income is the PROVING LIVE lane's evidence line"}
+    ],
+    "withdrawn": "the earlier line 'KAWPOW and FiroPoW read 5 to 6x on the measured 4090 rows and v6 reads 2.35x' is withdrawn: it compared v6 at the 5090's 1,300 MHz knee with KAWPOW at the 4090 at stock, two cards and two states; the like-for-like cells are the ones on this ledger",
+    "proving_live_label": "LIVE ON DEVNET, on-chain records (the PROVING LIVE lane, read 11:50:22Z 9 October 2026): on chain id 4465 (the Igneum 2.0 devnet) 663 paid v1 segment records (8 shards plus aggregation each) = 653.93 IGN paid from the proving pool to 30 distinct prover keys across chain blocks 3,000 to 30,687 (tip 31,719 at the read), plus 6,474 paid v0 shard records = 7,196 IGN; read by igneum_getProvingStatus, igneum_getSegmentRecords (3,965 segments) and igneum_getSegment; evidence build-1:/srv/artefacts/proving-live/prov-ledger-4465-tip31719-115022Z.json sha256 bd3f53c18c3ffa20354ea62ade9fd5e7a5794202a71c3c369a5be71484f7143a. NOT YET LIVE IN A SHIPPED PACKAGE: the payees are the fleet's prover stack (the same binaries the 2.0.3.1 HiveOS package wraps, cut 18:00 UK); the apps' prover is on by default on 24 GB cards but no app-proved record is on the record yet; a full-epoch line follows by 16:00 UK"
+  }
+}
diff --git a/docs/design/proving-claim-order.md b/docs/design/proving-claim-order.md
new file mode 100644
index 000000000..73e20bafe
--- /dev/null
+++ b/docs/design/proving-claim-order.md
@@ -0,0 +1,44 @@
+# Proving claim order (9 October 2026)
+
+How segments are allocated among provers today, what it wastes, and the rule change proposed for the node after 2.0.3. Nothing in this document changes the chain today. Approved as a design item by main at 13:2x UK on 9 October 2026, after the PROVING LIVE lane's on-chain read.
+
+## The rule today, by file and line (node 27f54124, release-2.0.3 line)
+
+| step | rule | where |
+|---|---|---|
+| assignment | 8 assignees per shard, drawn deterministically from the distinct prover keys seen in the record window (`assign(epoch_seed, block, shard, window)`) | consensus/core/src/proving.rs:26, :255 |
+| exclusive window | inside the first 10 DAA after a segment only an assignee's record is paid; after that every key may prove it | consensus/core/src/proving.rs:30, :305 |
+| payment | the first valid record carried in a block is paid; every later record for the same segment is refused "segment already paid" | igneum/exec/src/proving.rs:551 to :572 (`carried_payouts`), `segment_status` Proven |
+| pool share | 20 percent of every block subsidy, split over the segment's shards with 1,000 bps to the aggregator | consensus/core/src/igneum.rs:44, :87; consensus/core/src/proving.rs:638 (`split_pool_credit`) |
+| leases | V6-08 leases (300 DAA, three abandons an hour, 120 DAA penalty) exist in the node but are node-local and OFF on the live nodes (`igneum_getProvingStatus` reports `leases: null`; `IGNEUM_PROVING_LEASES` unset) | igneum/exec/src/proving.rs:110, :129 |
+| the prover's pick | every whole, open, unpaid segment of the last 600 chain blocks whose deadline (last DAA + 600) is at least 240 DAA ahead, ranked by FNV-1a(first, key): a per-key random order | tools/fleet/box-prover.py `candidates()` |
+
+No stake, no queue, no price. A new key is not an assignee until its first record is carried (10 seconds of exclusivity it cannot use, nothing more); from then on it competes at first-valid-record-wins with the same random order as every other key.
+
+## What it costs, measured on Devnet 4 (chain id 4465)
+
+Read on 9 October 2026 at 11:50:22Z from lp-4090-02's node (`igneum_getSegmentRecords` for every one of 3,965 v1 segments from genesis to chain block 31,719; the file is build-1:/srv/artefacts/proving-live/prov-ledger-4465-tip31719-115022Z.json, sha256 bd3f53c18c3ffa20354ea62ade9fd5e7a5794202a71c3c369a5be71484f7143a).
+
+| carried segment records | count | share |
+|---|---|---|
+| paid (first valid record) | 663 | 30 percent |
+| refused "segment already paid" (a duplicate proof of a paid segment) | 952 | 43 percent |
+| refused "unproven" (carried after the segment's deadline) | 461 | 21 percent |
+| refused "block ... is not chain block N on this chain" (proved on a fork) | 77 | 4 percent |
+| refused on the chain link ("segment ... does not chain to ...") | 46 | 2 percent |
+| total carried | 2,199 | |
+
+In the morning's run alone (chain blocks 28,000 to 30,999, about 06:00 to 11:00Z, 30 to 40 provers on one chain): 148 segments paid, 369 duplicate records refused, 109 late records refused. Two and a half duplicate proofs for every paid one: with 30 to 40 provers over about 22 claimable segments at a time (the margin window is 360 DAA wide at 2 DAA per chain block and 8 blocks per segment), the per-key random order collides by chance, and every collision is a 120-second GPU proof thrown away.
+
+Capacity: 3,600 DAA an epoch = about 1,817 chain blocks = about 227 segments an hour at 0.505 chain blocks per DAA; one 4090 proves a segment in 120 to 185 seconds beside its miner, so the work saturates at 8 to 11 provers and every prover past that dilutes the fixed 20 percent as 1/N. The 663 paid segments went to 30 keys with a median of 4 and a maximum of 230 per key; the skew is uptime (which boxes were on the chain when), not the rule.
+
+## The proposal (node change after 2.0.3; nothing on the chain today)
+
+Two consensus-free changes, both node-local, both deterministic from data every node already holds:
+
+1. Template side (the producer): when a template is built and the pool holds more than one verified record for a segment, carry the record of the key whose FNV-1a(first, key) is smallest, not the first received. A duplicate still costs the prover its proof, but the pick no longer depends on network arrival order, so a prover that ranks itself can predict whether its proof will be the one carried.
+2. Prover side (box-prover.py and the app's prover): claim a segment only when the key's rank by FNV-1a(first, key) among the keys in the record window is below ceil(K / M), with K the number of keys in the window and M the number of claimable segments in the margin; otherwise take the next segment in its own order. With the template rule above this makes the carried record and the claimed record the same one in expectation, and the duplicate rate falls to the rate of keys that join or leave inside one margin window.
+
+Default: the prover side ships first (a script change, no node release); the template side rides the first node cut after 2.0.3 with a fast-time case (two provers, one segment, the lower rank carried). Measured target: duplicates under 10 percent of carried records over an epoch, read the same way as the table above.
+
+What this is not: not a lease (leases are node-local and cannot order claims across boxes), not a stake, not a queue a newcomer waits in. A new key's rank is as random as any other's from its first record.
diff --git a/docs/ledger/gpu-ledger.md b/docs/ledger/gpu-ledger.md
new file mode 100644
index 000000000..a19355996
--- /dev/null
+++ b/docs/ledger/gpu-ledger.md
@@ -0,0 +1,136 @@
+# The GPU network ledger
+
+Every live GPU-mined chain we could pin, measured the same way on the same rented cards in the same sessions, with the same
+chip-design method applied to each, and ranked. Igneum sits in the table as one row among the others, under the same rules. Every
+number is measured or a labelled model with its source; a number that does not exist yet says "pending" and names who owes it; a
+chain we could not run in-house says NOT RUN and why. The full record with the lane bookkeeping is in the repository at
+docs/analysis/class-v6/1p5x/ledger/ (README.md and ledger.json); this page is rendered from the same data file.
+
+<!-- ledger:stamp:start -->
+Data: ledger.json, stamp 2026-10-09, adversarial set v3 (build-1:/srv/artefacts/lab/adv/ (README.md, design-notes/adversarial-sets-v1-v2-v3.md, rows/, SHA256SUMS); set v3 commit b2b9ee0b9 on class-v6-adversary).
+<!-- ledger:stamp:end -->
+
+## The method, the same for every chain
+
+1. **The object.** Each chain's proof of work as its own pinned reference code, built from source (no downloaded miner binaries):
+   Igneum's frozen class v6 at its live 4 GiB dataset; the official ProgPoW 0.9.4 reference kernel for Ravencoin's KAWPOW (which is
+   ProgPoW 0.9.4 with Ravencoin's constants, so the row is a labelled proxy) and the same row for Firo's FiroPoW; Iron Fish's
+   FishHash reference library with a bit-exact CUDA port; the pinned chfast/ethash library's hashimoto at Ethereum Classic's
+   current epoch; Ergo's Autolykos2 NOT RUN (the reason on the row).
+2. **The card rows.** One rented RTX 4090 and one rented RTX 5090 on uncapped hosts, every chain back to back in one session per
+   card at stock clocks; board power sampled at 1 Hz (idle not subtracted); nJ per hash = watts over MH/s; three runs, the median
+   with its spread; the dataset size and the card's clock on every row; a read-only twin (the same memory reads, the arithmetic
+   cut) where the harness has one, giving the card's memory share f.
+3. **The chip rows.** For each chain, the cheapest credible specialist chip on the same process node as the card, as a complete
+   machine, modelled and labelled as a model (never measured): the DRAM-board chip is the energy row, the full-SRAM die the
+   residual. Two conventions beside every ratio: ours (the cheapest programmable core, fused where the work allows) and ProgPoW's
+   own premise (the chip must keep a GPU-class datapath, so its edge is 1.1x to 1.2x on the compute term, weighted by f).
+4. **The real chip.** Ethereum Classic is the one chain here with a chip on the market, the Antminer E9 Pro; its published rate
+   and power sit on the row, and our modelled chip for Etchash sits beside it as the calibration of the model.
+5. **The two phases.** Before investment: can a chip maker recover its spend under growing, flat and falling prices. After, with
+   the spend sunk: who exits first on operating cost, with each chain's actual reward split. On Igneum a GPU earns the mining share
+   plus the proving share (80 / 20); a hash chip earns the mining share only. On every other chain here the GPU earns mining only,
+   so the second-income term is zero by construction.
+6. **The ranking.** (a) ascending on the DRAM-board ratio under our convention at the worse of the two cards (the lower ratio is
+   the smaller chip edge); (b) the same under ProgPoW's premise; (c) whether the chain's GPUs earn an income a hash chip cannot. A
+   chain with a pending or proxy cell is ranked provisionally and says so; a NOT RUN chain is unranked.
+
+## The card rows (measured, board power, stock)
+
+<!-- ledger:cards:start -->
+| chain | algorithm | dataset on the row | reward split (mining / proving) | RTX 4090 stock: nJ per hash (MH/s, W, f) | RTX 5090 stock: nJ per hash (MH/s, W, f) | twin | sources |
+|---|---|---|---|---|---|---|---|---|
+| Igneum | class v6, the live signing object 0x2a1d6caab4c24564 (2.0 devnet, chain id 4465) | 4.29 GB (4,294,967,296 bytes); 2^30 words, the live policy (70a6c703); 256 random 4-byte reads per hash, 62,120 instructions per hash (instruction convention) | 80 / 20 (the Token Value volume on master (D04, token-value/README.md: the 80/20 emission allocation); PROVING_POOL_SHARE_PERCENT) | 8,369 MEASURED (30.67 MH/s, 256.7 W, f 0.848; spread 0.67%; vast 55009211, driver 580; stock (the pod refused -lgc); clocks_sm_median pending the ledger session) | 5,597 MEASURED (68.66 MH/s, 384.3 W, f 0.811; spread 2.11%; vast 55006481, driver 580; stock (the pod refused -lgc); the host cap 500 W, the card drew 384) | yes (the same address stream, the arithmetic cut) | RTX 4090: build-1:/srv/artefacts/lab/ctl-v6/vast-55009211/ (rows.jsonl, SHA256SUMS); the cohort table build-1:/srv/artefacts/lab/cohort/TABLE.md; RTX 5090: build-1:/srv/artefacts/lab/ctl-v6/vast-55006481/; the cohort table build-1:/srv/artefacts/lab/cohort/TABLE.md |
+| Ravencoin | KAWPOW (ProgPoW 0.9.4 with Ravencoin's kiss99 constants, 7,500-block epochs and a 512-parent DAG; live since block 1,219,736, 6 May 2020) | 6.18 GB (6,182,403,712 bytes); KAWPOW's current DAG size at Ravencoin height 4,573,707 (epoch 609, read 13:0x UK): the official ProgPoW 0.9.4 kernel built at Ethash block 18,270,000 (epoch 609, the same byte count), harness progpow-094/gpu/pp_harness_18270000; KAWPOW's own constants NOT applied, so the row is 'ProgPoW 0.9.4 official at KAWPOW's DAG size (proxy)'; 64 coalesced 256-byte reads per hash; F1 GPU = CPU on both nonces (cpu/vectors-094-kawpow-size-18270000.txt) | 100 / 0 (Ravencoin's block reward goes to the miner in full (no second income to GPUs)) | 6,920 MEASURED (prior row: kawpowminer, not the pinned kernel; a PROXY until the ledger session's pinned-kernel row lands) (58.95 MH/s, 409.0 W, f none; spread none; RunPod, the comparative lane a2ed5c31; stock) | pending: pending (COHORT, the ledger session) | yes, by construction (progpow-094/gpu/pp_twin 18270000 26 250: the 64 dependent entry reads per 16-lane hash) | RTX 4090: build-1:/srv/artefacts/lab/adv/rows/rows.md (the ctl-progpow-094 section, card rows) |
+| Firo | FiroPoW (ProgPoW 0.9.4 with Firo's constants; live since block 419,264, 26 October 2021) | = Ravencoin's row | 100 / 0 | = Ravencoin's row | = Ravencoin's row | as Ravencoin | as KAWPOW: the pinned ProgPoW 0.9.4 reference; FiroPoW differs from KAWPOW only in its constants and DAG schedule, so the lab serves ONE row for both and says so |
+| Iron Fish | FishHash (live since hardfork 1, April 2024) | 4.83 GB (4,831,835,776 bytes); 37,748,717 items of 128 bytes, FIXED (no epochs); 96 random 128-byte reads per hash, 9,856 lane-instructions | 100 / 0 (Iron Fish's block reward is mining only) | pending: pending (COHORT, the ledger session); CONTROLS' rate-only read 19.73 MH/s at stock, no sampler (rate only 19.73 MH/s) | pending: pending (COHORT, the ledger session); CONTROLS' rate-only sm_120 read 45.37 MH/s full, 39.71 twin, F1 PASS (rate only 45.37 MH/s) | yes (a trace replay of the kernel's own item indexes; its energy read as a bound: the twin runs 10 percent slower than the full kernel) | RTX 4090: build-1:/srv/artefacts/lab/controls/fishhash/gpu/bench-4090.log; RTX 5090: build-1:/srv/artefacts/lab/controls/fishhash/ (fishhash.md) |
+| Ethereum Classic | Etchash (Ethash with ECIP-1099's 60,000-block epochs; live since block 11,700,000, November 2020) | 4.64 GB (4,638,898,816 bytes); ETC height 25,502,946 (read 12:5x UK) = Etchash epoch 425 (ECIP-1099: height / 60,000), the harness's block argument 12,750,000 (the Ethash epoch with the same size table index); 64 coalesced 128-byte reads per hash (two 64-byte half-mixes); CONTROLS' rate-only read on a 4090 at stock 29.90 MH/s full and 29.90 twin (memory-bound) | 100 / 0 (ETC's block reward is mining only) | pending: pending (COHORT, the ledger session; the harness staged 13:0x UK); CONTROLS' rate-only read 29.90 MH/s (rate only 29.90 MH/s) | pending: pending (COHORT, the ledger session; the sm_120 build from etchash/src) | yes, by construction | RTX 4090: build-1:/srv/artefacts/lab/controls/etchash/ (etchash.md) |
+| Ergo | Autolykos2 (k = 32, n = 26, Blake2b-256; the table grows 5 percent every 51,200 blocks) | 7.27 GB (7,272,058,080 bytes); the live table at Ergo height 1,890,820 (api.ergoplatform.com, 13:0x UK): N = 227,251,815 elements of 32 bytes (+5 percent at height 1,894,400; the row names its height); 33 random 32-byte reads per hash; the table builds on the device in 1.5 s; CONTROLS' rate-only read on a 4090 at stock 216.2 MH/s full, 201.8 twin | 100 / 0 (Ergo's block reward is mining only) | pending: pending (COHORT, the ledger session; the harness staged 13:1x UK); CONTROLS' rate-only read 216.2 MH/s full, 201.8 twin (rate only 216.20 MH/s) | pending: pending (COHORT, the ledger session; the sm_120 build from src) | yes (a trace replay) | RTX 4090: build-1:/srv/artefacts/lab/controls/autolykos/ (autolykos.md) |
+<!-- ledger:cards:end -->
+
+## The chip-to-GPU edge, both conventions
+
+<!-- ledger:edge:start -->
+| chain | the cheapest credible same-node DRAM board (set v3, nJ per hash, band) | ratio at the RTX 4090 stock (ours) | ratio at the RTX 5090 stock (ours) | ProgPoW-premise ratio at the RTX 4090 | ProgPoW-premise ratio at the RTX 5090 | the die as the residual (nJ; ratio at the worse card) | real chip on the market | source |
+|---|---|---|---|---|---|---|---|---|
+| Igneum | 1,542 (1,329 to 1,941); GDDR7 board + register file sized to the work + fused operations, N5; split memory 527 / ALU 166 / tax 849; WITNESS (modelled, complete machine, instruction convention) | 5.43x (4.31 to 6.30) | 3.63x (2.88 to 4.21) | 1.01x to 1.03x (f 0.853 measured) | 1.02x to 1.03x (f 0.811 measured on the stock pod) | 335 (N2 full-SRAM die, the coexistence row); 25.0x | none on the market | docs/analysis/class-v6/1p5x/lab/adv/v3/ledger-rows.md and ledger-rows.json (class-v6-adversary 47f16b86f); build-1:/srv/artefacts/lab/adv/rows/ctl-v6.json and rows.md (set v3, 2026-10-09T11:33Z); the die 12.0x at the 5090 knee, USD 0.77 per MH/s |
+| Ravencoin | 1,757 (1,453 to 2,147); GDDR7 board + register file sized to the work + fused operations, N5; bandwidth-bound at 16 KB per hash (93 MH/s per board); split memory 647 / ALU and tax per rows.md; WITNESS (modelled on the kawpowminer census as the work proxy until CONTROLS' trace replaces it) | 3.94x (3.22 to 4.76) | pending | 1.10x to 1.20x (the premise's own figure; no measured twin on this kernel yet) | 1.10x to 1.20x (the premise's own figure; the twin row makes it measured) | 697 (N2 full-SRAM die, the coexistence row (USD 1.89 per MH/s); the cheapest specialist of any kind is near-memory base dies at 669 nJ); 9.9x | none on the market | docs/analysis/class-v6/1p5x/lab/adv/v3/ledger-rows.md and ledger-rows.json (class-v6-adversary 47f16b86f); build-1:/srv/artefacts/lab/adv/rows/ctl-progpow-094.json (set v3) |
+| Firo (= Ravencoin's row) | 1,757 (1,453 to 2,147); GDDR7 board + register file sized to the work + fused operations, N5; bandwidth-bound at 16 KB per hash (93 MH/s per board); split memory 647 / ALU and tax per rows.md; WITNESS (modelled on the kawpowminer census as the work proxy until CONTROLS' trace replaces it) | 3.94x (3.22 to 4.76) | pending | 1.10x to 1.20x (the premise's own figure; no measured twin on this kernel yet) | 1.10x to 1.20x (the premise's own figure; the twin row makes it measured) | 697 (N2 full-SRAM die, the coexistence row (USD 1.89 per MH/s); the cheapest specialist of any kind is near-memory base dies at 669 nJ); 9.9x | none on the market | = Ravencoin's row |
+| Iron Fish | 1,051 (881 to 1,257); GDDR7 board + register file sized to the work + fused operations, N5; bandwidth-bound at 124 MH/s per board; 95 percent of the board's energy is the memory path; split memory 529 / ALU 46 / tax 503; WITNESS (modelled; the card's cell pending, so the ratio is pending) | pending | pending | pending (needs the measured f from the twin) | pending | 170 (full SRAM dies (three N2 reticles) + sized + fused operations); pending | none on the market | build-1:/srv/artefacts/lab/adv/rows/ctl-fishhash.json and rows.md (set v3) |
+| Ethereum Classic | 765 (638 to 919); GDDR7 board + register file sized to the work + fused operations, N5; USD 3.25 per MH/s; split per ledger-rows.md; WITNESS (modelled; the card cells pending, so the ratios are pending) | pending | pending | 1.10x to 1.20x (the premise's own figure; the twin row makes it measured) | 1.10x to 1.20x (the premise's own figure) | 177 (N2 full-SRAM die, the coexistence row); pending | Bitmain Antminer E9 Pro: 3,680 MH/s at 2,200 W = 598 nJ per hash, WITNESS (a manufacturer's published figure, not measured by the lab); Bitmain's stated figures as listed on minerstat's hardware page (https://minerstat.com/hardware/antminer-e9-pro): 3.68 GH/s on Ethash at 2,200 W, release 2023-02; 2,200 W / 3,680 MH/s = 0.598 J per MH = 598 nJ per hash | docs/analysis/class-v6/1p5x/lab/adv/v3/ledger-rows.md and ledger-rows.json (class-v6-adversary 47f16b86f, wording 82330b04c) |
+| Ergo | pending: pending (ADVERSARY: the chip rows from CONTROLS' trace; default 15:00 UK, else pending (adversary)) | pending | pending | pending | pending | pending | none on the market | pending |
+<!-- ledger:edge:end -->
+
+## The two phases with each chain's actual split
+
+<!-- ledger:phases:start -->
+| chain | split | phase A (before investment) | phase B (spend sunk) | an income a hash chip cannot earn | source |
+|---|---|---|---|---|---|
+| Igneum | 80 / 20 | before investment (24 months, the mining share 80 percent of the year-1 subsidy): the same-node board maker recovers its spend on NO fleet from 100 to 100 M boards on the growing or flat price path (100,000 boards: net USD -55.4 M on 58.8 M revenue growing; -37.6 M on 76.6 M flat); only the falling path pays it; the N2 die recovers on no path | spend sunk, flat path at USD 0.10 per kWh, the chip at 10 percent of the hash: mining revenue USD 0.354 per TH; the GPU's proving income at the ratified 20 percent share USD 0.098 per TH against the board chip's operating advantage USD 0.046 per TH (GPU electricity 0.111 less the chip's electricity, hosting and maintenance 0.066): the GPU out-earns the built board chip; the cancelling proving share 9 percent (board), 13 (hybrid), 20 (die) | yes by rule (the proving share of every block, 20 percent ratified); LIVE ON DEVNET with on-chain paid records (663 paid v1 segment records to 30 prover keys on chain 4465, the PROVING LIVE lane's file bd3f53c1 on build-1), not yet in a shipped package | build-1:/srv/artefacts/lab/adv/rows/rows.md (the two-phase section), ADVERSARY commit 545f3f8a0; ctl-v6-coexistence.json; WITNESS; phase B NOT LIVE until a shipped package runs a prover |
+| Ravencoin | 100 / 0 | before investment: no fleet from 100 to 100 M machines recovers a board chip's spend on any path, because Ravencoin's whole mining emission over 24 months (about USD 2.9 M at the public price) sits below one USD 35 M design cost; 10,000 boards would take 56 percent of the 721 GH/s network and earn USD 1.6 M to 2.4 M against a USD 44 M spend | spend sunk, mining only: mining revenue USD 0.064 per TH of the chain's own hashes; the board chip's recurring cost USD 0.069 per TH at ten cents; the chip's operating advantage over the RTX 4090 at stock (6,920 nJ) USD 0.123 per TH (the GPU's electricity 0.192 less the chip's 0.069) stands in full, no prover income | no (the block reward is mining only) | docs/analysis/class-v6/1p5x/lab/adv/v3/ctl-progpow-094-coexistence.json (rows[].phase_a, rows[].phase_b_split; method lab/adv/README.md section 14), ADVERSARY commit d7db3e596 on class-v6-adversary; WITNESS, the chain's own units, the 100/0 split, the same 24-month life, design cost and fleet rule as v6, the three price paths (flat at the public price, x2 growing, x0.5 falling, the hash held); the public lines on the row |
+| Firo | 100 / 0 | as KAWPOW | as KAWPOW | no | as KAWPOW; = KAWPOW's row at a 100/0 split |
+| Iron Fish | 100 / 0 | before investment: no fleet from 100 to 100 M machines recovers a board chip's spend on any path; Iron Fish's whole mining emission over 24 months is about USD 1.4 M at the public price (10,000 boards would take 84 percent of the hash for USD 1.1 M to 1.6 M) | spend sunk, mining only: mining revenue USD 0.086 per TH of the chain's own hashes; the board chip's recurring cost USD 0.043 per TH at ten cents; the GPU side NOT RUN until the card cell lands; no prover income by construction | no | docs/analysis/class-v6/1p5x/lab/adv/v3/ctl-fishhash-coexistence.json, ADVERSARY commit d7db3e596 on class-v6-adversary; WITNESS, the chain's own units, the 100/0 split, the same life, design cost, fleet rule and price paths as v6; the GPU side of phase B NOT RUN until COHORT's card rows |
+| Ethereum Classic | 100 / 0 | before investment: no fleet from 100 to 100 M machines recovers a board chip's spend on any path; ETC's whole mining emission over 24 months is about USD 83 M at the public price, but 10,000 boards are 2 percent of 120.9 TH/s and earn USD 1.0 M to 1.5 M, and 100,000 boards (13 percent) USD 9 M to 13 M against a USD 150 M spend | spend sunk, mining only: mining revenue USD 0.0087 per TH of the chain's own hashes, below even the modelled board's recurring cost (USD 0.031 per TH) and below the E9 Pro's own electricity at ten cents (598 nJ = USD 0.017 per TH): at the public figures nobody mines ETC at a profit at ten cents and phase B is a loss on both sides; the GPU side NOT RUN until the card cell lands | no | docs/analysis/class-v6/1p5x/lab/adv/v3/ctl-etchash-coexistence.json, ADVERSARY commit d7db3e596 on class-v6-adversary; WITNESS, the chain's own units, the 100/0 split, the same life, design cost, fleet rule and price paths as v6; the GPU side of phase B NOT RUN until COHORT's card rows |
+| Ergo | 100 / 0 | pending (ADVERSARY) | pending (ADVERSARY); no prover income by construction | no | pending; pending (ADVERSARY at the 100/0 split, the public line on the row) |
+<!-- ledger:phases:end -->
+
+## The ranking
+
+<!-- ledger:ranking:start -->
+**(a) Ours, the same-node DRAM board at the worse card (the smaller chip edge first):**
+No order in this column yet: a cross-chain comparison is made only between cells from the same card, state and session, and the measured cells today come from 2 sessions (lab-cohort-ctl-v6 (COHORT, 11:49 to 12:30 UK, one chain); comparative-lane a2ed5c31 (RunPod, one chain, an earlier session)); the ledger session (both cards, every chain back to back) fills it. Each chain's own number, same card and state, as it stands:
+- Igneum: RTX 4090 stock 5.43x (4.31 to 6.30); RTX 5090 stock 3.63x (2.88 to 4.21)
+- Ravencoin: RTX 4090 stock 3.94x (3.22 to 4.76); RTX 5090 stock pending (a pending or proxy cell in this row)
+- Iron Fish: unranked in this column (no measured card cell yet)
+- Ethereum Classic: unranked in this column (no measured card cell yet)
+- Ergo: unranked in this column (no measured card cell yet)
+
+**(b) ProgPoW's premise (the chip keeps a GPU-class datapath):**
+- Igneum: RTX 4090 1.01x to 1.03x (f 0.853 measured); RTX 5090 1.02x to 1.03x (f 0.811 measured on the stock pod)
+- Ravencoin: RTX 4090 1.10x to 1.20x (the premise's own figure; no measured twin on this kernel yet); RTX 5090 1.10x to 1.20x (the premise's own figure; the twin row makes it measured)
+- Iron Fish: RTX 4090 pending (needs the measured f from the twin); RTX 5090 pending
+- Ethereum Classic: RTX 4090 1.10x to 1.20x (the premise's own figure; the twin row makes it measured); RTX 5090 1.10x to 1.20x (the premise's own figure)
+- Ergo: RTX 4090 pending; RTX 5090 pending
+
+**(c) Phase B, an income a hash chip cannot earn:**
+- Igneum: yes by rule (the proving share of every block, 20 percent ratified); LIVE ON DEVNET with on-chain paid records (663 paid v1 segment records to 30 prover keys on chain 4465, the PROVING LIVE lane's file bd3f53c1 on build-1), not yet in a shipped package
+- Ravencoin: no (the block reward is mining only)
+- Firo: no
+- Iron Fish: no
+- Ethereum Classic: no
+- Ergo: no
+<!-- ledger:ranking:end -->
+
+## The claim under test, clause by clause
+
+The sentence below is served as a claim under test, each clause labelled by its state on the rows above. It reads as established
+only when every clause is supported; today it is not, and the table says which clause and why.
+
+<!-- ledger:claim:start -->
+**The headline, built from the supported clauses only:** under ProgPoW's own convention, the lowest measured chip-to-GPU edge of the chains on this ledger; and the only chain on this ledger whose GPUs are paid, by rule, an income a hash chip cannot earn (LIVE ON DEVNET, on-chain records (the PROVING LIVE lane, read 11:50:22Z 9 October 2026): on chain id 4465 (the Igneum 2.0 devnet) 663 paid v1 segment records (8 shards plus aggregation each) = 653.93 IGN paid from the proving pool to 30 distinct prover keys across chain blocks 3,000 to 30,687 (tip 31,719 at the read), plus 6,474 paid v0 shard records = 7,196 IGN; read by igneum_getProvingStatus, igneum_getSegmentRecords (3,965 segments) and igneum_getSegment; evidence build-1:/srv/artefacts/proving-live/prov-ledger-4465-tip31719-115022Z.json sha256 bd3f53c18c3ffa20354ea62ade9fd5e7a5794202a71c3c369a5be71484f7143a. NOT YET LIVE IN A SHIPPED PACKAGE: the payees are the fleet's prover stack (the same binaries the 2.0.3.1 HiveOS package wraps, cut 18:00 UK); the apps' prover is on by default on 24 GB cards but no app-proved record is on the record yet; a full-epoch line follows by 16:00 UK).
+
+The sentence as ordered, served as the claim under test: "the lowest measured chip-to-GPU edge of any live GPU network under a published method, on both conventions, and the only one whose GPUs earn income a chip cannot"
+
+Rule: the headline reads only what the like-for-like rows support, clause by clause (main's ruling, 13:2x UK 9 October 2026); under the ledger's own convention the measured edge per chain on the same card and state is stated as numbers, with no ranking word until the rows say so after the ledger session.
+
+| clause | convention | state on the current rows | why |
+|---|---|---|---|
+| under ProgPoW's own convention, the lowest measured chip-to-GPU edge of the chains on this ledger | ProgPoW's premise (a chip that keeps a GPU-class datapath) | SUPPORTED on the current rows | Igneum v6 1.01x to 1.03x (its measured f 0.81 to 0.85) against ProgPoW's own 1.10x to 1.20x for KAWPOW and FiroPoW; FishHash and Etchash pending their twins |
+| under the ledger's convention (the cheapest credible programmable specialist, adversarial set v3), each chain's measured edge on the same card and state, as numbers | ours | NUMBERS ONLY; no ranking until the ledger session (COHORT, both cards, every chain back to back, the pinned 0.9.4 kernel, twins; 14:45 UK) | the current cells come from different sessions (the lab's cohort pods for v6, the comparative lane's pod for KAWPOW) and a cross-chain comparison is made only between cells from the same card, state and session; at the RTX 4090 at stock the cells read v6 5.4x (5.67x on the second pod) and KAWPOW 3.9x (a proxy row from an earlier session); FishHash and Etchash pending |
+| and the only chain on this ledger whose GPUs are paid, by rule, an income a hash chip cannot earn | phase B, each chain's actual reward split | LABELLED BY THE PROVING LIVE LANE | the proving share (20 percent ratified) is paid to GPUs for work a hash chip cannot do; every other chain on the ledger pays mining only; the live state of that income is the PROVING LIVE lane's evidence line |
+
+Withdrawn: the earlier line 'KAWPOW and FiroPoW read 5 to 6x on the measured 4090 rows and v6 reads 2.35x' is withdrawn: it compared v6 at the 5090's 1,300 MHz knee with KAWPOW at the 4090 at stock, two cards and two states; the like-for-like cells are the ones on this ledger.
+
+The last clause's label from the PROVING LIVE lane: LIVE ON DEVNET, on-chain records (the PROVING LIVE lane, read 11:50:22Z 9 October 2026): on chain id 4465 (the Igneum 2.0 devnet) 663 paid v1 segment records (8 shards plus aggregation each) = 653.93 IGN paid from the proving pool to 30 distinct prover keys across chain blocks 3,000 to 30,687 (tip 31,719 at the read), plus 6,474 paid v0 shard records = 7,196 IGN; read by igneum_getProvingStatus, igneum_getSegmentRecords (3,965 segments) and igneum_getSegment; evidence build-1:/srv/artefacts/proving-live/prov-ledger-4465-tip31719-115022Z.json sha256 bd3f53c18c3ffa20354ea62ade9fd5e7a5794202a71c3c369a5be71484f7143a. NOT YET LIVE IN A SHIPPED PACKAGE: the payees are the fleet's prover stack (the same binaries the 2.0.3.1 HiveOS package wraps, cut 18:00 UK); the apps' prover is on by default on 24 GB cards but no app-proved record is on the record yet; a full-epoch line follows by 16:00 UK
+<!-- ledger:claim:end -->
+
+## Reproduce it tonight
+
+The reproduction kit (the pinned references, the harnesses, the sampler, the session script, SHA256SUMS and the expected rows with
+their bands) is published from the build host when it lands; the link and its sha256 go here. One command per card; a 4090 at
+stock on an uncapped host reproduces the Igneum row inside its band in under ten minutes after the dataset builds.
+
+| item | state |
+|---|---|
+| the kit | pending |
+| the kit's sha256 | pending |
diff --git a/docs/plans/igneum-2.0-test-registry.json b/docs/plans/igneum-2.0-test-registry.json
index 8a32a3037..c5c2cf27b 100644
--- a/docs/plans/igneum-2.0-test-registry.json
+++ b/docs/plans/igneum-2.0-test-registry.json
@@ -20434,7 +20434,7 @@
           "plan_status": "NOT RUN",
           "run_id": "lab-20261009-01",
           "evidence_path": "docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md",
-          "updated": "2026-10-09T12:04:23.606Z",
+          "updated": "2026-10-09T12:15:20.071Z",
           "evidence_record": {
             "requirement_id": "R15-01",
             "decision": "NOT RUN",
@@ -20455,8 +20455,8 @@
             },
             "claim_impact": "none",
             "reviewer": "",
-            "at": "2026-10-09T12:04:23.606Z",
-            "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."
+            "at": "2026-10-09T12:15:20.071Z",
+            "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. 13:1x UK: CONTROLS' done line (the four controls, Etchash and Autolykos2 staged bit-exact with SUMS); ADVERSARY's cross-chain phase A and B (no chain's emission recovers a board chip; the proving share the one term) and the E9 Pro calibration (1.28x pessimistic); the first founder bundle 985afee6. Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."
           },
           "evidence_records": {
             "lab:candidate": {
@@ -20479,8 +20479,8 @@
               },
               "claim_impact": "none",
               "reviewer": "",
-              "at": "2026-10-09T12:04:23.606Z",
-              "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."
+              "at": "2026-10-09T12:15:20.071Z",
+              "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. 13:1x UK: CONTROLS' done line (the four controls, Etchash and Autolykos2 staged bit-exact with SUMS); ADVERSARY's cross-chain phase A and B (no chain's emission recovers a board chip; the proving share the one term) and the E9 Pro calibration (1.28x pessimistic); the first founder bundle 985afee6. Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."
             }
           },
           "in_progress_since": "2026-10-09T10:48:54.646Z",
@@ -21144,7 +21144,7 @@
           "plan_status": "NOT RUN",
           "run_id": "lab-20261009-01",
           "evidence_path": "docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md",
-          "updated": "2026-10-09T12:04:23.606Z",
+          "updated": "2026-10-09T12:15:20.071Z",
           "evidence_record": {
             "requirement_id": "R15-08",
             "decision": "NOT RUN",
@@ -21165,8 +21165,8 @@
             },
             "claim_impact": "none",
             "reviewer": "",
-            "at": "2026-10-09T12:04:23.606Z",
-            "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."
+            "at": "2026-10-09T12:15:20.071Z",
+            "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. 13:1x UK: CONTROLS' done line (the four controls, Etchash and Autolykos2 staged bit-exact with SUMS); ADVERSARY's cross-chain phase A and B (no chain's emission recovers a board chip; the proving share the one term) and the E9 Pro calibration (1.28x pessimistic); the first founder bundle 985afee6. Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."
           },
           "evidence_records": {
             "lab:candidate": {
@@ -21189,8 +21189,8 @@
               },
               "claim_impact": "none",
               "reviewer": "",
-              "at": "2026-10-09T12:04:23.606Z",
-              "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."
+              "at": "2026-10-09T12:15:20.071Z",
+              "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. 13:1x UK: CONTROLS' done line (the four controls, Etchash and Autolykos2 staged bit-exact with SUMS); ADVERSARY's cross-chain phase A and B (no chain's emission recovers a board chip; the proving share the one term) and the E9 Pro calibration (1.28x pessimistic); the first founder bundle 985afee6. Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."
             }
           },
           "in_progress_since": "2026-10-09T10:48:54.646Z",
@@ -21234,7 +21234,7 @@
           "plan_status": "NOT RUN",
           "run_id": "lab-20261009-01",
           "evidence_path": "docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md",
-          "updated": "2026-10-09T12:04:23.606Z",
+          "updated": "2026-10-09T12:15:20.071Z",
           "evidence_record": {
             "requirement_id": "R15-09",
             "decision": "NOT RUN",
@@ -21255,8 +21255,8 @@
             },
             "claim_impact": "none",
             "reviewer": "",
-            "at": "2026-10-09T12:04:23.606Z",
-            "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."
+            "at": "2026-10-09T12:15:20.071Z",
+            "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. 13:1x UK: CONTROLS' done line (the four controls, Etchash and Autolykos2 staged bit-exact with SUMS); ADVERSARY's cross-chain phase A and B (no chain's emission recovers a board chip; the proving share the one term) and the E9 Pro calibration (1.28x pessimistic); the first founder bundle 985afee6. Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."
           },
           "evidence_records": {
             "lab:candidate": {
@@ -21279,8 +21279,8 @@
               },
               "claim_impact": "none",
               "reviewer": "",
-              "at": "2026-10-09T12:04:23.606Z",
-              "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."
+              "at": "2026-10-09T12:15:20.071Z",
+              "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. 13:1x UK: CONTROLS' done line (the four controls, Etchash and Autolykos2 staged bit-exact with SUMS); ADVERSARY's cross-chain phase A and B (no chain's emission recovers a board chip; the proving share the one term) and the E9 Pro calibration (1.28x pessimistic); the first founder bundle 985afee6. Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."
             }
           },
           "in_progress_since": "2026-10-09T10:48:54.646Z",
diff --git a/site/404.html b/site/404.html
index 71c3126ff..898162924 100644
--- a/site/404.html
+++ b/site/404.html
@@ -120,6 +120,7 @@ main{flex:1}
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -160,6 +161,7 @@ main{flex:1}
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -268,6 +270,7 @@ main{flex:1}
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/acceptance.html b/site/acceptance.html
index b103fb51e..5cbe5e592 100644
--- a/site/acceptance.html
+++ b/site/acceptance.html
@@ -4,13 +4,13 @@
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
 <title>Igneum Test and Acceptance Standard: every case, shown as it passes</title>
-<meta name="description" content="The Igneum 2.0 Test and Acceptance Standard, 262 cases in 20 suites, case by case: each case in the standard’s words, the five gates, the profiles and the fixtures. A checklist, never a completion dashboard.">
+<meta name="description" content="The Igneum 2.0 Test and Acceptance Standard, 272 cases in 21 suites, case by case: each case in the standard’s words, the five gates, the profiles and the fixtures. A checklist, never a completion dashboard.">
 <link rel="canonical" href="https://igneum.network/acceptance">
 <!-- share:start -->
 <meta property="og:type" content="website">
 <meta property="og:site_name" content="Igneum">
 <meta property="og:title" content="Igneum Test and Acceptance Standard: every case, shown as it passes">
-<meta property="og:description" content="The Igneum 2.0 Test and Acceptance Standard, 262 cases in 20 suites, case by case: each case in the standard’s words, the five gates, the profiles and the fixtures. A checklist, never a completion dashboard.">
+<meta property="og:description" content="The Igneum 2.0 Test and Acceptance Standard, 272 cases in 21 suites, case by case: each case in the standard’s words, the five gates, the profiles and the fixtures. A checklist, never a completion dashboard.">
 <meta property="og:url" content="https://igneum.network/acceptance">
 <meta property="og:image" content="https://igneum.network/og/home.png?v=5">
 <meta property="og:image:type" content="image/png">
@@ -24,7 +24,7 @@
 <meta property="og:image:alt" content="The GPU-mined chain that proves every block. igneum.network">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Igneum Test and Acceptance Standard: every case, shown as it passes">
-<meta name="twitter:description" content="The Igneum 2.0 Test and Acceptance Standard, 262 cases in 20 suites, case by case: each case in the standard’s words, the five gates, the profiles and the fixtures. A checklist, never a completion dashboard.">
+<meta name="twitter:description" content="The Igneum 2.0 Test and Acceptance Standard, 272 cases in 21 suites, case by case: each case in the standard’s words, the five gates, the profiles and the fixtures. A checklist, never a completion dashboard.">
 <meta name="twitter:image" content="https://igneum.network/og/home.png?v=5">
 <meta name="twitter:image:alt" content="The GPU-mined chain that proves every block. igneum.network">
 <!-- share:end -->
@@ -263,6 +263,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance" aria-current="page"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -303,6 +304,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance" aria-current="page"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -368,8 +370,8 @@
 <!-- nav:end -->
 <main id="main">
 <!-- acceptance:start -->
-<div id="acc-root"><section class="page-hero acc-hero"><div class="container"><div class="eyebrow"><span class="line"></span>Igneum 2.0 acceptance</div><h1 class="acc-title">Test and Acceptance Standard 1.0</h1><p class="lead">Every case of the standard, shown as it is run, in the standard’s own words. A checklist, never a completion score: a gate passes only when every case it depends on has passed.</p><p class="acc-basis"><span>Basis</span> IGNEUM_2.0_Plan.pdf, 37 pages, 8 October 2026. The standard runs to 73 pages. Registry dated 8 October 2026.</p><div class="acc-tally" id="acc-tally"><div class="acc-words"><span class="acc-word approved">APPROVED AS PROPOSED 8 OCTOBER 2026</span><span class="acc-word deferred">P13 DEFERRED</span></div><p class="acc-line">Test and Acceptance Standard 1.0: APPROVED AS PROPOSED by the founder, 8 October 2026; P13 (maintenance continuity) DEFERRED; 262 cases: 8 passed under the standard, 0 running with team evidence, 7 failed, 247 not run, 0 deferred</p><div class="acc-bar" role="img" aria-label="262 cases: 8 passed under the standard, 0 running with team evidence, 7 failed, 247 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:8" title="8 PASS"></span><span class="seg g-fail" style="flex-grow:7" title="7 FAIL"></span><span class="seg g-notrun" style="flex-grow:247" title="247 NOT RUN"></span></div><ul class="acc-legend"><li><i class="sw g-pass" aria-hidden="true"></i><b>8</b> pass</li><li><i class="sw g-fail" aria-hidden="true"></i><b>7</b> fail</li><li><i class="sw g-blocked" aria-hidden="true"></i><b>0</b> blocked</li><li><i class="sw g-running" aria-hidden="true"></i><b>0</b> running</li><li><i class="sw g-notrun" aria-hidden="true"></i><b>247</b> not run</li><li><i class="sw g-deferred" aria-hidden="true"></i><b>0</b> deferred</li></ul></div></div></section><nav class="acc-jump container" aria-label="Suites"><a href="#gates">Gates</a><a href="#suite-GOV">GOV</a><a href="#suite-GPU">GPU</a><a href="#suite-POW">POW</a><a href="#suite-ADV">ADV</a><a href="#suite-ROT">ROT</a><a href="#suite-ECO">ECO</a><a href="#suite-EVM">EVM</a><a href="#suite-ZKP">ZKP</a><a href="#suite-CAP">CAP</a><a href="#suite-INC">INC</a><a href="#suite-FIN">FIN</a><a href="#suite-VER">VER</a><a href="#suite-OPS">OPS</a><a href="#suite-UX">UX</a><a href="#suite-COM">COM</a><a href="#suite-LEAD">LEAD</a><a href="#suite-REV">REV</a><a href="#suite-INT">INT</a><a href="#suite-VR">VR</a><a href="#suite-TV">TV</a><a href="#profiles">Profiles</a><a href="#fixtures">Fixtures</a></nav><section class="section acc-gates-sec" id="gates"><div class="container"><div class="eyebrow"><span class="line"></span>The gates</div><h2>Five gates, and the freeze before them.</h2><p class="acc-sub">A gate reads NOT RUN until every case it depends on has run, RUNNING while any is running, BLOCKED if any is blocked, FAIL if any fails, and PASS only when every case passes. No gate is weighted into an average.</p><div class="acc-g0"><article class="acc-gate st-notrun small" id="gate-G0" data-gate-state="NOT RUN"><div class="acc-gate-top"><span class="acc-gate-id">G0</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div><h3>Freeze</h3><p class="acc-gate-d">Release identity</p><p class="acc-gate-c">No formal run or public pass before approval.</p><div class="acc-bar" role="img" aria-label="Freeze: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><p class="acc-gate-n">8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article></div><div class="acc-five"><article class="acc-gate st-notrun" id="gate-G1" data-gate-state="NOT RUN"><div class="acc-gate-top"><span class="acc-gate-id">G1</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div><h3>Baseline</h3><p class="acc-gate-d">D1</p><p class="acc-gate-c">No validated hardware claim without reproduction.</p><div class="acc-bar" role="img" aria-label="Baseline: 16 cases: 1 passed under the standard, 0 running with team evidence, 15 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:1" title="1 PASS"></span><span class="seg g-notrun" style="flex-grow:15" title="15 NOT RUN"></span></div><p class="acc-gate-n">16 cases: 1 passed under the standard, 0 running with team evidence, 15 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-GPU">GPU</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article><article class="acc-gate st-fail" id="gate-G2" data-gate-state="FAIL"><div class="acc-gate-top"><span class="acc-gate-id">G2</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div><h3>Experiments</h3><p class="acc-gate-d">D2</p><p class="acc-gate-c">No improvement claim from a negative hypothesis.</p><div class="acc-bar" role="img" aria-label="Experiments: 32 cases: 1 passed under the standard, 0 running with team evidence, 2 failed, 29 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:1" title="1 PASS"></span><span class="seg g-fail" style="flex-grow:2" title="2 FAIL"></span><span class="seg g-notrun" style="flex-grow:29" title="29 NOT RUN"></span></div><p class="acc-gate-n">32 cases: 1 passed under the standard, 0 running with team evidence, 2 failed, 29 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-GPU">GPU</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-POW">POW</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-ROT">ROT</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article><article class="acc-gate st-notrun" id="gate-G3" data-gate-state="NOT RUN"><div class="acc-gate-top"><span class="acc-gate-id">G3</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div><h3>Adversary</h3><p class="acc-gate-d">D3</p><p class="acc-gate-c">No broad resistance claim from one weak design.</p><div class="acc-bar" role="img" aria-label="Adversary: 16 cases: 0 passed under the standard, 0 running with team evidence, 16 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:16" title="16 NOT RUN"></span></div><p class="acc-gate-n">16 cases: 0 passed under the standard, 0 running with team evidence, 16 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ADV">ADV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article><article class="acc-gate st-fail" id="gate-G4" data-gate-state="FAIL"><div class="acc-gate-top"><span class="acc-gate-id">G4</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div><h3>Coexistence</h3><p class="acc-gate-d">D4</p><p class="acc-gate-c">No durability claim based on assumed chip expiry.</p><div class="acc-bar" role="img" aria-label="Coexistence: 24 cases: 0 passed under the standard, 0 running with team evidence, 1 failed, 23 not run, 0 deferred"><span class="seg g-fail" style="flex-grow:1" title="1 FAIL"></span><span class="seg g-notrun" style="flex-grow:23" title="23 NOT RUN"></span></div><p class="acc-gate-n">24 cases: 0 passed under the standard, 0 running with team evidence, 1 failed, 23 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ECO">ECO</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-INC">INC</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article><article class="acc-gate st-notrun" id="gate-G5" data-gate-state="NOT RUN"><div class="acc-gate-top"><span class="acc-gate-id">G5</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div><h3>No rescue</h3><p class="acc-gate-d">D5</p><p class="acc-gate-c">No no-rescue claim from a founder-supported demo.</p><div class="acc-bar" role="img" aria-label="No rescue: 56 cases: 5 passed under the standard, 0 running with team evidence, 51 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:5" title="5 PASS"></span><span class="seg g-notrun" style="flex-grow:51" title="51 NOT RUN"></span></div><p class="acc-gate-n">56 cases: 5 passed under the standard, 0 running with team evidence, 51 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ROT">ROT</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ZKP">ZKP</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-INC">INC</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-FIN">FIN</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-OPS">OPS</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-UX">UX</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article></div><h3 class="acc-tracks-h">The three named gates</h3><div class="acc-tracks"><article class="acc-gate st-fail small" id="gate-TR" data-gate-state="FAIL"><div class="acc-gate-top"><span class="acc-gate-id"></span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div><h3>Technical readiness</h3><p class="acc-gate-d">Execution control</p><p class="acc-gate-c">No mainnet-ready claim with missing enforcement or safety.</p><div class="acc-bar" role="img" aria-label="Technical readiness: 64 cases: 6 passed under the standard, 0 running with team evidence, 5 failed, 53 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:6" title="6 PASS"></span><span class="seg g-fail" style="flex-grow:5" title="5 FAIL"></span><span class="seg g-notrun" style="flex-grow:53" title="53 NOT RUN"></span></div><p class="acc-gate-n">64 cases: 6 passed under the standard, 0 running with team evidence, 5 failed, 53 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-POW">POW</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-EVM">EVM</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ZKP">ZKP</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-CAP">CAP</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-FIN">FIN</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-VER">VER</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-UX">UX</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article><article class="acc-gate st-notrun small" id="gate-CE" data-gate-state="NOT RUN"><div class="acc-gate-top"><span class="acc-gate-id"></span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div><h3>Commercial evidence</h3><p class="acc-gate-d">Execution control</p><p class="acc-gate-c">Devnet activity is insufficient.</p><div class="acc-bar" role="img" aria-label="Commercial evidence: 24 cases: 0 passed under the standard, 0 running with team evidence, 24 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:24" title="24 NOT RUN"></span></div><p class="acc-gate-n">24 cases: 0 passed under the standard, 0 running with team evidence, 24 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-CAP">CAP</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-COM">COM</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article><article class="acc-gate st-fail small" id="gate-CD" data-gate-state="FAIL"><div class="acc-gate-top"><span class="acc-gate-id"></span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div><h3>Leadership-contender decision</h3><p class="acc-gate-d">Execution control</p><p class="acc-gate-c">Supports a scoped contention assessment, not a guaranteed rank.</p><div class="acc-bar" role="img" aria-label="Leadership-contender decision: 262 cases: 8 passed under the standard, 0 running with team evidence, 7 failed, 247 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:8" title="8 PASS"></span><span class="seg g-fail" style="flex-grow:7" title="7 FAIL"></span><span class="seg g-notrun" style="flex-grow:247" title="247 NOT RUN"></span></div><p class="acc-gate-n">262 cases: 8 passed under the standard, 0 running with team evidence, 7 failed, 247 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-GPU">GPU</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-POW">POW</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-ADV">ADV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ROT">ROT</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ECO">ECO</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-EVM">EVM</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ZKP">ZKP</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-CAP">CAP</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-INC">INC</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-FIN">FIN</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-VER">VER</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-OPS">OPS</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-UX">UX</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-COM">COM</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-LEAD">LEAD</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-REV">REV</a><span class="acc-gs-n">44 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-INT">INT</a><span class="acc-gs-n">18 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-VR">VR</a><span class="acc-gs-n">40 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-TV">TV</a><span class="acc-gs-n">32 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article></div></div></section><section class="section acc-suite" id="suite-GOV"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">01</span>GOV</div><div class="acc-suite-t"><h2>Release identity and evidence</h2><p class="acc-sub">Prevent a favourable result from being attached to the wrong code, assumptions or public claim.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Release lead + independent assurance</dd></div><div><dt>Gate</dt><dd>G0 / all gates <span class="acc-gl"><a href="#gate-G0">G0</a> <a href="#gate-G1">G1</a> <a href="#gate-G2">G2</a> <a href="#gate-G3">G3</a> <a href="#gate-G4">G4</a> <a href="#gate-G5">G5</a></span></dd></div><div><dt>Fixtures</dt><dd>F0 manifest; F1 source/build archives; F9 evidence vault</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="GOV: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-GOV-01" data-case="GOV-01" data-state="NOT RUN"><summary><span class="c-id">GOV-01</span><span class="c-title">Freeze the release and its claims</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:43 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Candidate source, binaries, public documentation and the 2.0 plan are available; no run is yet accepted.</p><h4>Steps</h4><ol><li>Record exact commits, binary hashes, dependencies, genesis/network identity, mining class, datasets, execution fork, verifier IDs and fee rules in F0.</li><li>Map every promised capability and plan requirement to a test ID; distinguish supported mining, proving and wallet combinations.</li><li>Sign the manifest with protocol, product and independent review owners before confirmatory runs.</li></ol><h4>Accept</h4><p>Every material rule and claim has an unambiguous version and test. Conflicts or unknown activation rules produce BLOCKED, not an inferred default. Changes create a new manifest and invalidate affected results.</p><h4>Evidence the case requires</h4><p>Signed F0; source-to-test map; claim inventory; unresolved-field register.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Run</dt><dd>f0-signing-20261008-2330</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>18</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-02" data-case="GOV-02" data-state="NOT RUN"><summary><span class="c-id">GOV-02</span><span class="c-title">Approve thresholds before results</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/igneum-2.0-test-registry.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>This manual supplies proposed test thresholds, not source-approved protocol parameters.</p><h4>Steps</h4><ol><li>Approve or replace every P-profile before confirmatory testing; give each change a rationale and independent approver.</li><li>Register hardware cohorts, mandatory economic worlds, customer workloads, peer dimensions and exclusion rules.</li><li>Lock the profile hash and hold out seeds/workloads from the developers doing optimisation.</li></ol><h4>Accept</h4><p>No decision-critical field is TBD. Numeric limits are frozen, commercially meaningful and not chosen from observed results. A weakened limit after failure requires a new protocol, full affected rerun and explicit claim downgrade review.</p><h4>Evidence the case requires</h4><p>Approved profile register; timestamped holdout commitments; change log.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>CI steward (a2ecfa95d3206016c)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>18</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-03" data-case="GOV-03" data-state="NOT RUN"><summary><span class="c-id">GOV-03</span><span class="c-title">Reproduce builds outside the founding team</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00, P02</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide public source and documented build instructions to three unaffiliated operators.</p><h4>Steps</h4><ol><li>Build on clean declared environments without private files, tokens or founder assistance.</li><li>Compare reproducible payload hashes; isolate signatures, notarisation and permitted non-deterministic wrappers.</li><li>Run reference vectors and restart a node using only documented artifacts.</li></ol><h4>Accept</h4><p>All independent builds reproduce the same consensus payload or an independently explained, pre-approved wrapper difference; reference outputs match exactly. Missing private prerequisites block release.</p><h4>Evidence the case requires</h4><p>Build logs; dependency lockfiles; binary comparison; operator attestations.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent reproduction</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>build-server lane (a352e49ff4613df86)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>18</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-04" data-case="GOV-04" data-state="NOT RUN"><summary><span class="c-id">GOV-04</span><span class="c-title">Preserve raw and negative evidence</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Enable append-only storage for run outputs and a separate analysis workspace.</p><h4>Steps</h4><ol><li>Capture failed, aborted and successful runs with timestamps, seeds and environment hashes.</li><li>Recompute one published figure from raw records on a clean machine.</li><li>Modify a retained artifact deliberately and test integrity verification.</li></ol><h4>Accept</h4><p>Every headline can be regenerated; tampering is detected; exclusions have pre-registered reasons. Failed or missing runs remain visible and are never replaced silently by a successful retry.</p><h4>Evidence the case requires</h4><p>Artifact manifest; hashes; reproduction script; exclusion ledger; negative-run archive.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>CI steward (a2ecfa95d3206016c)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>19</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-05" data-case="GOV-05" data-state="NOT RUN"><summary><span class="c-id">GOV-05</span><span class="c-title">Prove the test oracle detects broken behaviour</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 19:28 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Create controlled defective variants on an isolated network only.</p><h4>Steps</h4><ol><li>Disable proof verification, change one reward, accept an expired authority set and alter one hash output in separate mutants.</li><li>Run the corresponding ZKP, INC, FIN and POW tests without telling the runner which mutant is active.</li><li>Confirm the baseline still accepts authorised valid cases.</li></ol><h4>Accept</h4><p>Every deliberately introduced fault is caught by its mapped test; valid controls pass. Any undetected critical mutant blocks acceptance of that test family until the oracle is repaired.</p><h4>Evidence the case requires</h4><p>Mutation catalogue; blinded run results; baseline controls; oracle review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fast-time lane (a8be71a0db962911c)</dd></div><div><dt>Run</dt><dd>200-417c4a57-b2</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>19</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-06" data-case="GOV-06" data-state="NOT RUN"><summary><span class="c-id">GOV-06</span><span class="c-title">Enforce scope and optional-feature discipline</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:36 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Inventory FP32 experiments, receipts/oracles and all retained or excluded mining levers.</p><h4>Steps</h4><ol><li>Mark each capability CORE, CLAIMED-OPTIONAL or EXCLUDED before release testing.</li><li>For excluded code, check binaries, protocol activation and product copy for accidental enablement or implied availability.</li><li>For each claimed option, require the complete associated test set rather than a demonstration.</li></ol><h4>Accept</h4><p>Every core and claimed-option obligation passes. Excluded items are shown as EXCLUDED, never PASS and never counted as achievements. Removing a failed core requirement prevents an all-2.0-pass claim.</p><h4>Evidence the case requires</h4><p>Scope manifest; activation scan; product-copy comparison; exclusions register.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>CI steward (a2ecfa95d3206016c)</dd></div><div><dt>Run</dt><dd>site-gate-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>19</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-07" data-case="GOV-07" data-state="NOT RUN"><summary><span class="c-id">GOV-07</span><span class="c-title">Independent review and finding closure</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Nominate reviewers with declared conflicts and scopes covering cryptography, consensus and hardware.</p><h4>Steps</h4><ol><li>Provide pinned code, raw data, adversarial models and prior failures, including negative results.</li><li>Track each finding to remediation and an independent retest; do not use the author as sole approver.</li><li>Have reviewers state unreviewed surfaces and model limitations in their signed conclusions.</li></ol><h4>Accept</h4><p>No unresolved critical or high-severity finding affects the claimed release. A finite review is described by scope, not as proof of universal security. Independent reproduction and review are both evidenced.</p><h4>Evidence the case requires</h4><p>Signed scoped reports; conflict declarations; finding/retest ledger.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent specialist review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>20</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-08" data-case="GOV-08" data-state="NOT RUN"><summary><span class="c-id">GOV-08</span><span class="c-title">Invalidate stale evidence and control public status</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Create a simulated post-test change to a verifier, mining class, dataset and fee rule.</p><h4>Steps</h4><ol><li>Calculate affected test dependencies and invalidate their former PASS statuses.</li><li>Regenerate public status pages from F0 and the evidence register.</li><li>Attempt to publish a rank-one, guaranteed-profit or automatic-chip-death claim without the required evidence.</li></ol><h4>Accept</h4><p>Affected gates return to NOT RUN or BLOCKED. Public claims retain version, limits and date; unsupported claims are withheld. No stale result remains attached to a different release.</p><h4>Evidence the case requires</h4><p>Dependency impact report; regenerated status page; rejected claim examples.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>CI steward (a2ecfa95d3206016c)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>20</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-GPU"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">02</span>GPU</div><div class="acc-suite-t"><h2>Whole-system GPU measurements</h2><p class="acc-sub">Close the pending measurements and evaluate the actual configuration, including costs hidden by kernel-only results.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>GPU lead + three independent operators</dd></div><div><dt>Gate</dt><dd>G1 / G2 <span class="acc-gl"><a href="#gate-G1">G1</a> <a href="#gate-G2">G2</a></span></dd></div><div><dt>Fixtures</dt><dd>F2 retail-hardware cohort; F3 paired benchmark workloads; F9 calibrated evidence</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="GPU: 8 cases: 1 passed under the standard, 0 running with team evidence, 7 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:1" title="1 PASS"></span><span class="seg g-notrun" style="flex-grow:7" title="7 NOT RUN"></span></div><span>8 cases: 1 passed under the standard, 0 running with team evidence, 7 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-GPU-01" data-case="GPU-01" data-state="NOT RUN"><summary><span class="c-id">GPU-01</span><span class="c-title">Cover the declared commodity population</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:49 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze the P02 cohort, supported role matrix and the final v6 configuration.</p><h4>Steps</h4><ol><li>Inventory physical SKU, usable memory, driver, operating system, firmware, cooling and acquisition channel.</li><li>Run mining on every supported cohort cell and proving on every separately advertised prover cell.</li><li>Include lower-memory, used-generation and all advertised vendor cases; retain unsupported results separately.</li></ol><h4>Accept</h4><p>All declared cells are tested, with no after-the-fact removal of weak cards. At least the P02 minimum coverage is met. Mining-only support is never reported as proof-generation support.</p><h4>Evidence the case requires</h4><p>Cohort manifest; compatibility matrix; raw results by SKU and role.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>p02-fleet-pods-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>21</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-02" data-case="GPU-02" data-state="PASS"><summary><span class="c-id">GPU-02</span><span class="c-title">Reproduce Ember clock-lock savings</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02, P03</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 04:58 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use paired stock and tuned runs on the same board, host, workload and ambient conditions.</p><h4>Steps</h4><ol><li>Warm to stability; randomise stock/tuned order and run P02 repeated sessions.</li><li>Measure accepted work, calibrated wall energy, device telemetry and rejected work.</li><li>Calculate paired energy and rate changes with run-level uncertainty, retaining failed tuning attempts.</li></ol><h4>Accept</h4><p>Tuning preserves correctness and meets approved P03 operating limits. The historical 34-41% saving and under-2% rate-loss statement is reproduced only for qualifying configurations; otherwise that claim is corrected. Existing savings are not counted twice.</p><h4>Evidence the case requires</h4><p>Raw power/time series; paired analysis; tuning settings; claim-by-SKU table.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>hash-lane-20261009-batch4</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>21</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-03" data-case="GPU-03" data-state="NOT RUN"><summary><span class="c-id">GPU-03</span><span class="c-title">Measure the real 64-register GPU cost</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02, P03</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 04:58 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Build the baseline and window variant with identical dataset, reads and semantic workload.</p><h4>Steps</h4><ol><li>Inspect compiled register allocation, spills, occupancy and memory traffic on each supported backend.</li><li>Measure paired complete-system energy and accepted throughput, including host work.</li><li>Repeat during proving coexistence and expose any memory or scheduling cliff.</li></ol><h4>Accept</h4><p>Any production window meets P03 budgets for every mandatory SKU; no hidden spills or correctness changes. Zero GPU cost is claimed only where measurement supports it within uncertainty. Results feed the redesigned adversary, not an old core estimate.</p><h4>Evidence the case requires</h4><p>Compiler reports; allocation traces; paired energy/rate data; coexistence runs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>hash-lane-20261009-batch4</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>21</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-04" data-case="GPU-04" data-state="NOT RUN"><summary><span class="c-id">GPU-04</span><span class="c-title">Find the memory-clock operating ladder</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P02</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/floor/sm-sparse.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:00 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use safe vendor-supported settings only; record operator permission and original settings.</p><h4>Steps</h4><ol><li>Sweep approved core and memory operating points while holding workload constant.</li><li>Measure error rate, accepted throughput, wall energy and thermal equilibrium.</li><li>Repeat the selected knee after reboot and restore defaults after a failed or interrupted tuning session.</li></ol><h4>Accept</h4><p>Selected profiles are stable, reproducible and not dependent on unsafe clocks. Every accepted hash remains correct; saved settings restore predictably. Tuning failure leaves a working safe configuration.</p><h4>Evidence the case requires</h4><p>Clock ladder; safe bounds; thermal/error logs; reboot and rollback record.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>22</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-05" data-case="GPU-05" data-state="NOT RUN"><summary><span class="c-id">GPU-05</span><span class="c-title">Test dataset fit and support-horizon costs</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P02, P06</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 04:58 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Test 5.5, 8.5 and 11.5 GiB only as source-proposed candidates; F0 determines activated sizes.</p><h4>Steps</h4><ol><li>Measure allocation plus driver, display, prover and OS headroom on the 8 GB and other cohort tiers.</li><li>Run near-full-memory, fragmentation, restart and next-epoch construction scenarios.</li><li>Compare time-sharing/eviction with concurrent mining/proving, including reload cost.</li></ol><h4>Accept</h4><p>Every advertised combination completes without OOM or silent corruption. Unsupported future sizes are identified before activation. GPU exclusions and lost proving capacity appear in ECO evaluation; retirement of a tier is not a success metric.</p><h4>Evidence the case requires</h4><p>Memory budget per SKU; OOM traces; support horizon; concurrency cost table.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>hash-lane-20261009-batch4</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>22</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-06" data-case="GPU-06" data-state="NOT RUN"><summary><span class="c-id">GPU-06</span><span class="c-title">Measure accepted work under ordinary connectivity</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the same hardware against clean, delayed, lossy and intermittent links in F4.</p><h4>Steps</h4><ol><li>Measure kernel rate and accepted work separately under home and datacentre link profiles.</li><li>Include reconnects, template changes, expired submissions and pool failover.</li><li>Attribute loss to network, local software, validation and protocol causes.</li></ol><h4>Accept</h4><p>Results use accepted work, never kernel rate alone. Ordinary-link incremental rejection stays within P10; all losses remain priced in ECO. Unreachable links may pause but must not claim paid work.</p><h4>Evidence the case requires</h4><p>Per-submission ledger; network trace; rejection reasons; accepted-work comparison.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>22</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-07" data-case="GPU-07" data-state="NOT RUN"><summary><span class="c-id">GPU-07</span><span class="c-title">Survive sustained thermal and power operation</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P02, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/floor/sm-sparse.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:00 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Run the selected profile on actual reference machines for the P02 soak period.</p><h4>Steps</h4><ol><li>Track wall power, temperatures, clocks, memory and accepted work continuously.</li><li>Inject safe power interruptions, process restarts and normal competing desktop load.</li><li>Check restored settings and compare late-run efficiency with the first stable period.</li></ol><h4>Accept</h4><p>No invalid work or unsafe persistent settings; P02/P10 stability limits hold. Thermal throttling, crashes and recovery time remain in throughput and energy denominators. A crash-free short benchmark cannot substitute for the soak.</p><h4>Evidence the case requires</h4><p>Seven-day time series; crash reports; settings-restoration checks; drift analysis.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>23</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-08" data-case="GPU-08" data-state="NOT RUN"><summary><span class="c-id">GPU-08</span><span class="c-title">Reproduce the full baseline independently</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Three unaffiliated operators receive F0, F2 and F3, including the final miner/prover build.</p><h4>Steps</h4><ol><li>Repeat identical-SKU paired runs with documented meter calibration and environment differences.</li><li>Recompute joules and total cost per accepted work from the shared raw schema.</li><li>Investigate divergence before accepting a pooled headline or uncertainty band.</li></ol><h4>Accept</h4><p>Reproductions meet P02 tolerance and exact correctness. No unexplained divergence or selectively missing low-end cell remains. Report manufactured GPU measurements separately from modelled specialist estimates.</p><h4>Evidence the case requires</h4><p>Three signed reproduction packs; reconciliation report; final baseline table.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent reproduction</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>23</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-POW"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">03</span>POW</div><div class="acc-suite-t"><h2>Proof-of-work correctness and coupling</h2><p class="acc-sub">Find semantic disagreements and structural shortcuts before treating a harder-looking program as a stronger defence.</p></div><div class="acc-suite-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Cryptography + GPU lead</dd></div><div><dt>Gate</dt><dd>G2 / technical readiness <span class="acc-gl"><a href="#gate-G2">G2</a></span></dd></div><div><dt>Fixtures</dt><dd>F0 rule set; F3 independent CPU/GPU oracles; F5 mutation corpus</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="POW: 8 cases: 0 passed under the standard, 0 running with team evidence, 2 failed, 6 not run, 0 deferred"><span class="seg g-fail" style="flex-grow:2" title="2 FAIL"></span><span class="seg g-notrun" style="flex-grow:6" title="6 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 2 failed, 6 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-POW-01" data-case="POW-01" data-state="NOT RUN"><summary><span class="c-id">POW-01</span><span class="c-title">Match independent execution across every backend</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 06:16 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Implement an independently written reference evaluator, not a wrapper around the production GPU path.</p><h4>Steps</h4><ol><li>Execute the P01 corpus across every family, boundary seed and supported backend.</li><li>Exercise zero, maximum, sign, shift, rotate, overflow and unaligned-address cases allowed by the spec.</li><li>Minimise every mismatch and rerun it on clean builds.</li></ol><h4>Accept</h4><p>Bit-for-bit agreement for all valid cases and identical rejection for invalid cases. One unexplained mismatch is a blocker. Large sample counts are evidence of testing, not proof that unseen disagreements cannot exist.</p><h4>Evidence the case requires</h4><p>Reference implementation review; seeds/vectors; backend matrix; mismatch archive.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>same-work-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>24</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-02" data-case="POW-02" data-state="NOT RUN"><summary><span class="c-id">POW-02</span><span class="c-title">Validate generated programs and index folding</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the frozen grammar, opcode semantics and index-fold rule; include boundary and malformed programs.</p><h4>Steps</h4><ol><li>Enumerate small constrained programs and fuzz the full generator at P01 depth.</li><li>Check bounds, valid dependencies, address distribution and forbidden encodings.</li><li>Compare source-level operations with optimised compiled code for removed or altered work.</li></ol><h4>Accept</h4><p>No accepted program violates semantics, termination or memory bounds. Distribution claims have predeclared tests and effect-size limits; passing randomness checks is not treated as a cryptographic proof.</p><h4>Evidence the case requires</h4><p>Generator/fuzzer logs; reduced counterexamples; disassembly comparison; index tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>24</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-03" data-case="POW-03" data-state="FAIL"><summary><span class="c-id">POW-03</span><span class="c-title">Test whether live state is unavoidable</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P03, P04</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:32 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Take the 64-register candidate and the cheapest independently proposed storage organisations.</p><h4>Steps</h4><ol><li>Trace value liveness across dependent reads and final output, distinguishing distinct information from duplicated values.</li><li>Try banking, compression, recomputation, fewer ports and time-multiplexed contexts.</li><li>Quantify the best complete-system cost/throughput trade-off rather than the reference register count.</li></ol><h4>Accept</h4><p>Production selection is supported by measured or physically modelled penalties after these alternatives. G2 requires the P03 improvement; an attractive source-level register count alone does not pass.</p><h4>Evidence the case requires</h4><p>Liveness traces; alternative implementations; Pareto table; reviewer analysis.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Experiment + independent hardware review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261009-placed-32lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>24</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-04" data-case="POW-04" data-state="NOT RUN"><summary><span class="c-id">POW-04</span><span class="c-title">Evaluate connected-resource restructuring</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P03, P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:32 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use a candidate initially matched to baseline instruction count, read count and dataset size.</p><h4>Steps</h4><ol><li>Connect state, addresses, arithmetic and lane communication according to the written hypothesis.</li><li>Measure GPU cost and allow the specialist reviewer to redesign the entire core.</li><li>Repeat on held-out program seeds and compare the worst supported adversary, not only the original design.</li></ol><h4>Accept</h4><p>The selected upgrade meets P03 and improves the adversarial result outside declared uncertainty. A negative experiment remains a negative outcome; adopting a different design requires a new frozen comparison.</p><h4>Evidence the case requires</h4><p>Matched workloads; GPU runs; redesigned core estimates; held-out results.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Controlled experiment</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261009-placed-32lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>25</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-05" data-case="POW-05" data-state="NOT RUN"><summary><span class="c-id">POW-05</span><span class="c-title">Prevent amortised cheap winning attempts</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Prepare valid templates, nonces, intermediate-state captures and independent acceptance checks.</p><h4>Steps</h4><ol><li>Vary nonce, payout identity, transactions, roots and other committed fields after expensive work.</li><li>Try replay, precomputation, shared prefixes, partial evaluation and many cheap suffix candidates.</li><li>Price any valid strategy against fresh evaluation; independently review all bindings.</li></ol><h4>Accept</h4><p>Invalid modifications are rejected. Any valid cost-saving strategy is incorporated into ADV and must still meet P04/ECO gates. No unresolved shortcut is hidden behind passing reference vectors.</p><h4>Evidence the case requires</h4><p>Attack implementations; valid/invalid controls; work-cost analysis; binding review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>pool design seat (a3832b1c3b274b310)</dd></div><div><dt>Run</dt><dd>binding-review-2026-10-08-a05</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>25</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-06" data-case="POW-06" data-state="NOT RUN"><summary><span class="c-id">POW-06</span><span class="c-title">Bound verifier work and malformed-input cost</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 19:28 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use ordinary CPU validators with a manifest-defined resource budget and untrusted submissions.</p><h4>Steps</h4><ol><li>Submit shortest/longest programs, malformed encodings and adversarial memory references.</li><li>Measure verification time, peak memory and work amplification across valid and invalid inputs.</li><li>Sustain the approved hostile request rate while ordinary valid traffic continues.</li></ol><h4>Accept</h4><p>All semantics remain correct and P09 resource budgets hold. Invalid traffic cannot cause unbounded allocation, crashes or disproportionate free work. Rate limits must not replace consensus validation.</p><h4>Evidence the case requires</h4><p>CPU profiles; adversarial corpus; allocation traces; valid-traffic latency.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>p01-partb-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>25</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-07" data-case="POW-07" data-state="FAIL"><summary><span class="c-id">POW-07</span><span class="c-title">Constrain any mixed-resource or FP32 branch</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00, P01, P03</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:00 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>If this branch is excluded, verify that it is unreachable and not claimed; if included, use a separate frozen candidate.</p><h4>Steps</h4><ol><li>Specify exact rounding, fusion, special values and backend behaviour before compiling.</li><li>Differentially test all supported architectures and allow numerical-domain simplification in the specialist model.</li><li>Include verifier cost and candidate energy in P03/P04, not just arithmetic-unit area.</li></ol><h4>Accept</h4><p>Included branches achieve exact agreed semantics and all hardware budgets. An excluded branch earns no performance credit. No approximate operation or unspecified compiler choice enters consensus.</p><h4>Evidence the case requires</h4><p>Scope decision; semantic specification; vectors; simplified datapath model.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Conditional implementation test</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>kills-20261008</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>26</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-08" data-case="POW-08" data-state="NOT RUN"><summary><span class="c-id">POW-08</span><span class="c-title">Keep rejected mechanisms out of the shipped claim</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P00, P03</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 04:58 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Inventory long programs, select trees, SM gating, wider reads, sealed classes, random epoch lengths, per-tier scoring and VRF draws.</p><h4>Steps</h4><ol><li>Retain their historic negative tests and realistic SRAM instruction-memory control.</li><li>Inspect the release for reintroduction through renamed settings or hidden paths.</li><li>Require a new written hypothesis and complete adversarial retest for any proposed return.</li></ol><h4>Accept</h4><p>Excluded levers remain excluded unless separately approved and retested. Flip-flop instruction-memory area is never presented as the cost of a realistic SRAM implementation.</p><h4>Evidence the case requires</h4><p>Decision register; binary/config scan; negative-control results.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>hash-lane-20261009-batch4</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>26</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-ADV"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">04</span>ADV</div><div class="acc-suite-t"><h2>Programmable specialist adversaries</h2><p class="acc-sub">Give the opponent permission to adapt, share resources and remain operational; test cost rather than imagined chip death.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Independent hardware team</dd></div><div><dt>Gate</dt><dd>G3 <span class="acc-gl"><a href="#gate-G3">G3</a></span></dd></div><div><dt>Fixtures</dt><dd>F2 reference GPUs; F6 RTL/physical models; all published families</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="ADV: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-ADV-01" data-case="ADV-01" data-state="NOT RUN"><summary><span class="c-id">ADV-01</span><span class="c-title">Build a multi-family programmable opponent</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P01, P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/multi-family-adversary.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:32 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide the complete published family bank and future known parameter schedule to the reviewer.</p><h4>Steps</h4><ol><li>Design one programmable architecture that supports all retained families, including firmware and emulation paths.</li><li>Optimise clocks, lanes, ports and pipelines without requiring a graphics-card layout.</li><li>Verify its outputs against POW vectors before measuring any advantage.</li></ol><h4>Accept</h4><p>At least the P04 design diversity is evaluated; every estimated competitive design is functionally validated. Inability of one narrow design to adapt is not evidence that all chips expire.</p><h4>Evidence the case requires</h4><p>Architecture reports; functional simulations; adaptation matrix; reviewer signature.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent hardware study</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261009-placed-32lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>27</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-02" data-case="ADV-02" data-state="NOT RUN"><summary><span class="c-id">ADV-02</span><span class="c-title">Price shared, reduced and reconstructed memory</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/multi-family-adversary.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:41 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Allow multiple engines to share a dataset and to store selected fractions rather than a complete per-engine copy.</p><h4>Steps</h4><ol><li>Sweep sharing factors, memory fractions, caches and recomputation depth across many simultaneous hashes.</li><li>Include construction/update amortisation, bandwidth contention and retained state.</li><li>Take the most favourable feasible point for the specialist into the complete-board model.</li></ol><h4>Accept</h4><p>No omitted feasible trade-off materially lowers the accepted cost estimate. Any winning alternative is included in P04 and ECO; capacity alone is not accepted as an energy bound.</p><h4>Evidence the case requires</h4><p>Sweep definitions; energy/bandwidth data; best-feasible envelope; excluded-design reasons.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Model + adversarial implementation</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261008-placed-8lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>27</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-03" data-case="ADV-03" data-state="NOT RUN"><summary><span class="c-id">ADV-03</span><span class="c-title">Attack with data-local and hybrid execution</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/multi-family-adversary.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:32 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Permit distributed memories, state migration and companion CPU/GPU/FPGA components.</p><h4>Steps</h4><ol><li>Compare moving computation, intermediate state or fetched data to each read location.</li><li>Test specialised mining alongside outsourced proof generation rather than assuming one physical GPU does both.</li><li>Include interconnect, host, synchronisation, idle and conversion costs.</li></ol><h4>Accept</h4><p>The cheapest feasible combined system is included in the adversarial envelope and economic model. A worker identity or account is never treated as proof of a single physical device.</p><h4>Evidence the case requires</h4><p>Hybrid architecture diagrams; traffic traces; system cost and energy ledger.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent system modelling</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261009-placed-32lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>27</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-04" data-case="ADV-04" data-state="NOT RUN"><summary><span class="c-id">ADV-04</span><span class="c-title">Measure profitable selective participation</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/multi-family-adversary.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:41 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use all declared families plus held-out generated programs and the protocol difficulty rule.</p><h4>Steps</h4><ol><li>Identify favourable execution paths and add cheap fallbacks for other periods.</li><li>Simulate entry/exit around profitable periods, including idle time, compilation and re-entry costs.</li><li>Evaluate revenue and costs across the full schedule, not just average program energy.</li></ol><h4>Accept</h4><p>Intermittent specialists meet P04/ECO limits when evaluated on full-period economics. A weak tail cannot be concealed by a favourable mean; known valid shortcuts must be priced.</p><h4>Evidence the case requires</h4><p>Per-program advantage distribution; policy simulator; full-period returns.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261008-placed-8lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>28</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-05" data-case="ADV-05" data-state="NOT RUN"><summary><span class="c-id">ADV-05</span><span class="c-title">Validate physical and complete-board costs</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:32 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use feasible process/library assumptions and documented component boundaries; no fabricated foundry access.</p><h4>Steps</h4><ol><li>Model SRAM macros, ports, wiring, clocking, memory PHYs, external memory, host and power conversion.</li><li>Run place-and-route where available; mark unmodelled items as uncertainty rather than zero.</li><li>Compare against a calibrated existing hardware block or equivalent validation case.</li></ol><h4>Accept</h4><p>No decision-critical cost is omitted. Physically unvalidated or proprietary estimates are labelled and independently bounded; synthesis alone cannot earn a manufactured-chip claim.</p><h4>Evidence the case requires</h4><p>Netlist/physical reports; macro assumptions; bill of materials; model calibration.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent physical-design review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>k lane (a3c9601a6d4686fe1)</dd></div><div><dt>Run</dt><dd>adversary-20261009-placed-32lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>28</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-06" data-case="ADV-06" data-state="NOT RUN"><summary><span class="c-id">ADV-06</span><span class="c-title">Separate process advantage from specialisation</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/floor/shadow-k.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:09 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Evaluate same-node, one-node-ahead and two-node-ahead scenarios with explicit technology definitions.</p><h4>Steps</h4><ol><li>Use independently justified process factors, voltages, memory and packaging assumptions for each design.</li><li>Allow reusable IP and modular revisions; credit GPU improvement consistently.</li><li>Evaluate measurement confidence and model-parameter sensitivity separately.</li></ol><h4>Accept</h4><p>P04 primary limits hold for all competitive-reference cells; two-node futures are reported and pass the predeclared economic stress envelope. A model range is never labelled a statistical confidence interval without justification.</p><h4>Evidence the case requires</h4><p>Node-specific reports; factor provenance; uncertainty and sensitivity tables.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>k lane (a3c9601a6d4686fe1)</dd></div><div><dt>Run</dt><dd>floor-k-20261008-rows-repeat</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>28</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-07" data-case="ADV-07" data-state="NOT RUN"><summary><span class="c-id">ADV-07</span><span class="c-title">Evaluate lifetime without forced obsolescence</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:32 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Assume multi-year productive survival and known schedule support before testing optional retirement penalties.</p><h4>Steps</h4><ol><li>Price firmware, emulation, memory expansion, companion hardware and incremental redesign.</li><li>Include 1-, 3- and 5-year productive lifetimes plus idle/resale possibilities.</li><li>Grant a retirement credit only if all feasible cheaper adaptations lose competitiveness.</li></ol><h4>Accept</h4><p>The primary case does not require chip death or a fresh full development bill per family. Every retirement credit has a documented adaptation comparison; incompatible and unprofitable are reported separately.</p><h4>Evidence the case requires</h4><p>Lifetime/adaptation ledger; revision costs; feasible-alternative analysis.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261009-placed-32lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>29</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-08" data-case="ADV-08" data-state="NOT RUN"><summary><span class="c-id">ADV-08</span><span class="c-title">Independently challenge the best-cost envelope</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/multi-family-adversary.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:32 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Publish the non-sensitive model and negative results; commission an unaffiliated second hardware reviewer.</p><h4>Steps</h4><ol><li>Reward cheaper valid designs and reproduced shortcuts, not confirmation of the preferred number.</li><li>Re-run P04 with the strongest submitted feasible design, including a low-cost funded-development case.</li><li>Record unresolved modelling disagreements and future technology exclusions.</li></ol><h4>Accept</h4><p>Both reviews accept the scoped envelope or all material disagreements are resolved transparently. Passing supports only evaluated designs and conditions, never a universal bound on all future silicon.</p><h4>Evidence the case requires</h4><p>Two review reports; challenge log; final envelope; unresolved-limit statement.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent challenge/review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261009-placed-32lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>29</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-ROT"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">05</span>ROT</div><div class="acc-suite-t"><h2>Epochs, seeds and memory transitions</h2><p class="acc-sub">Transitions must agree across nodes and remain usable during failures; crossing a boundary is not a chip-retirement test.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Consensus + GPU leads</dd></div><div><dt>Gate</dt><dd>G5 / G2 <span class="acc-gl"><a href="#gate-G5">G5</a> <a href="#gate-G2">G2</a></span></dd></div><div><dt>Fixtures</dt><dd>F0 activation rules; F4 fault network; F5 historical and boundary vectors</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="ROT: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-ROT-01" data-case="ROT-01" data-state="NOT RUN"><summary><span class="c-id">ROT-01</span><span class="c-title">Agree across every hourly boundary</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/review-2026-10-08-b/f10/emu-test.log" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:07 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use real nodes, CPU/GPU miners and independent clocks around successive program boundaries.</p><h4>Steps</h4><ol><li>Submit valid work immediately before, at and after the activation boundary under clock skew and delayed delivery.</li><li>Restart nodes from both sides and replay the same headers.</li><li>Compare selected seed, program, validity, rewards and local wall-clock dependence.</li></ol><h4>Accept</h4><p>All honest nodes derive identical consensus outcomes from the frozen rule. Late work is handled exactly as specified; no wall-clock ambiguity or cross-backend split occurs.</p><h4>Evidence the case requires</h4><p>Boundary vectors; node/miner traces; acceptance and reward matrix.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fast-time lane (a8be71a0db962911c)</dd></div><div><dt>Run</dt><dd>f10-worker-20261008</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>30</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-02" data-case="ROT-02" data-state="NOT RUN"><summary><span class="c-id">ROT-02</span><span class="c-title">Cross weekly and family boundaries together</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P03, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the retained schedule in F0, including coincident program, parameter and family changes.</p><h4>Steps</h4><ol><li>Run every known family transition and all coincident-boundary combinations on production code.</li><li>Interrupt downloads, compilation and restart during activation; include mixed old/new clients.</li><li>Repeat selected cases under real elapsed time and the remainder under disclosed accelerated time.</li></ol><h4>Accept</h4><p>Deterministic activation, documented old-client behaviour and no unsafe fallback. Compilation/setup costs satisfy P03; accelerated runs are not reported as years of operating history.</p><h4>Evidence the case requires</h4><p>Transition matrix; code-path evidence; compile timing; old-client logs.</p></blockquote><h4>Evidence record of the run</h4><dl class="acc-meta acc-rec"><div><dt>What was run</dt><dd>the class v6 object crossing at its floor on 617cb441</dd></div><div><dt>Run by</dt><dd>fast-time lane (a8be71a0db962911c)</dd></div><div><dt>Under the standard</dt><dd>no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one</dd></div><div><dt>Pass or fail today</dt><dd>not judged under the standard yet</dd></div></dl><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fast-time lane (a8be71a0db962911c)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>30</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-03" data-case="ROT-03" data-state="NOT RUN"><summary><span class="c-id">ROT-03</span><span class="c-title">Test miner-voted bring-forward governance</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00, P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze eligibility, threshold, windows and activation semantics before testing; do not invent a no-veto rule.</p><h4>Steps</h4><ol><li>Attempt threshold-minus-one, threshold, conflicting proposals, duplicate votes and coalition withholding.</li><li>Partition voters, restore them and test vote-key substitution through pools.</li><li>Verify adoption and refusal behaviour of already running nodes.</li></ol><h4>Accept</h4><p>The actual mechanism enforces F0, with authenticated voting and no conflicting activation. Any coalition capable of blocking or manipulating changes is disclosed; labels such as no veto do not override arithmetic.</p><h4>Evidence the case requires</h4><p>Executable governance model; signed-vote corpus; coalition/partition results.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>30</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-04" data-case="ROT-04" data-state="NOT RUN"><summary><span class="c-id">ROT-04</span><span class="c-title">Resist seed selection and faster evaluators</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00, P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide the specified seed pipeline and delay proof implementation plus independently parameterised fast-adversary models.</p><h4>Steps</h4><ol><li>Try withholding candidate seeds, grinding alternatives, replaying delay proofs and biased checkpoint selection.</li><li>Vary adversarial speed advantage and outage duration; trace influence on program choice.</li><li>Validate inputs, parameters and proofs against independent vectors.</li></ol><h4>Accept</h4><p>No invalid seed or proof is accepted; selection advantage stays within the approved threat-model bound. Missing bounds block this gate. A delay mechanism is not credited as generic ASIC resistance.</p><h4>Evidence the case requires</h4><p>Seed/grinding simulations; speed sensitivity; proof vectors; threat-model signoff.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>31</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-05" data-case="ROT-05" data-state="NOT RUN"><summary><span class="c-id">ROT-05</span><span class="c-title">Continue or pause correctly when finality stops</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Stop checkpoint signing while mining continues, then cross seed and family boundaries.</p><h4>Steps</h4><ol><li>Remove the required signing weight and observe the documented fallback or safe pause.</li><li>Prevent access to any founder seed service; restart from persisted state.</li><li>Restore the stated fault assumptions and verify deterministic recovery.</li></ol><h4>Accept</h4><p>Mining/seed behaviour matches F0 without manufacturing certificates or reinterpreting finality. Safety holds during the outage; liveness is required only after its stated assumptions return.</p><h4>Evidence the case requires</h4><p>Fault timeline; seed/certificate history; node-state comparison; recovery log.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>31</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-06" data-case="ROT-06" data-state="NOT RUN"><summary><span class="c-id">ROT-06</span><span class="c-title">Activate datasets without hidden exclusions</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P06</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze memory sizes, support horizon and sync/update procedure; test all advertised roles.</p><h4>Steps</h4><ol><li>Construct the next dataset while current work remains active; test slow disks, low free memory and interruption.</li><li>Try stale-state/dataset submissions and maliciously expensive state growth where coupling exists.</li><li>Measure data transfer, restart and excluded-card costs before approving progression.</li></ol><h4>Accept</h4><p>No invalid stale work is accepted, no supported card silently fails, and P06 is met. Hardware retirement and sync burden are included in the economic decision, not treated as automatic chip protection.</p><h4>Evidence the case requires</h4><p>Dataset hashes; memory/update traces; stale-work tests; exclusion decision.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>31</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-07" data-case="ROT-07" data-state="NOT RUN"><summary><span class="c-id">ROT-07</span><span class="c-title">Ablate redundant rotation layers</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P03, P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/family-gate.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:49 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use matched baseline and ablated variants in the lab; do not change a running public network.</p><h4>Steps</h4><ol><li>Remove each weekly/family component independently and measure adversarial cost, GPU setup and verifier complexity.</li><li>Include favourable-period specialists and all retained known families.</li><li>Keep a layer only with a distinct, independently supported benefit or a documented non-resistance purpose.</li></ol><h4>Accept</h4><p>Every retained layer has explicit justification and full boundary coverage. Redundant complexity is removed or its rationale recorded; the security model does not double-count the same versatility cost.</p><h4>Evidence the case requires</h4><p>Ablation report; decision log; complexity/cost comparison.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>lane D family gate (a07a99a3788566af2)</dd></div><div><dt>Run</dt><dd>family-gate-20261008c</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>32</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-08" data-case="ROT-08" data-state="NOT RUN"><summary><span class="c-id">ROT-08</span><span class="c-title">Pass the no-new-rules counterfactual</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/family-gate.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:49 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze the complete published rule bank and known schedule for the five-year evaluation.</p><h4>Steps</h4><ol><li>Allow a programmable adversary to know and survive all planned changes.</li><li>Remove assumed future emergency instructions and manual retirement actions from the model.</li><li>Run the required ECO scenarios and link them to independent network-transition tests.</li></ol><h4>Accept</h4><p>Competitiveness survives the approved envelope without future rescue assumptions. Any result that needs unannounced changes fails this claim; ordinary bug maintenance is distinguished from anti-chip intervention.</p><h4>Evidence the case requires</h4><p>Frozen-rule model; scenario results; excluded-rescue audit; G5 evidence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Run</dt><dd>family-gate-20261008c</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>32</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-ECO"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">06</span>ECO</div><div class="acc-suite-t"><h2>Five-year coexistence economics</h2><p class="acc-sub">Test the world after specialised hardware exists, including new entrants and an already-funded competitor.</p></div><div class="acc-suite-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Economics lead + independent reviewer</dd></div><div><dt>Gate</dt><dd>G4 <span class="acc-gl"><a href="#gate-G4">G4</a></span></dd></div><div><dt>Fixtures</dt><dd>F6 adversarial costs; F7 scenario model; F2 operator costs</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="ECO: 8 cases: 0 passed under the standard, 0 running with team evidence, 1 failed, 7 not run, 0 deferred"><span class="seg g-fail" style="flex-grow:1" title="1 FAIL"></span><span class="seg g-notrun" style="flex-grow:7" title="7 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 1 failed, 7 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-ECO-01" data-case="ECO-01" data-state="NOT RUN"><summary><span class="c-id">ECO-01</span><span class="c-title">Reconcile complete cost per accepted work</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/sim/economy/coexist/README.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:07 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use benchmark outputs, current-source cost inputs recorded at execution time and separate reference scenarios.</p><h4>Steps</h4><ol><li>Calculate hardware annualisation, electricity, host, cooling/hosting, failures, fees, downtime and residual value.</li><li>Use actual accepted work and independently verify units and period conversions.</li><li>Cross-check formulas using hand-worked fixtures, edge cases and a second implementation.</li></ol><h4>Accept</h4><p>All material costs and rejected-work effects appear once; model totals reconcile to raw inputs. No GPU upgrade is free, development cost is not double-counted, and burn is not mislabelled operator income.</p><h4>Evidence the case requires</h4><p>Versioned model; unit fixtures; independent reconciliation; input sources.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco05-20261008-02</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>33</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-02" data-case="ECO-02" data-state="NOT RUN"><summary><span class="c-id">ECO-02</span><span class="c-title">Separate existing-owner and new-entrant viability</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use both installed hardware and purchasable replacement hardware in every mandatory cohort.</p><h4>Steps</h4><ol><li>Evaluate marginal operation separately from recovery of a new purchase.</li><li>Stress resale at zero, hardware failures, financing and replacement cycles.</li><li>Report break-even power price and total cost relative to the strongest feasible specialist.</li></ol><h4>Accept</h4><p>P12 competitiveness conditions hold for the predeclared cohorts in required sustainable worlds. Existing-owner profitability cannot substitute for viable new entry; cards outside the envelope remain visible.</p><h4>Evidence the case requires</h4><p>Owner/entrant curves; price-date records; break-even tables; cohort outcomes.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>33</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-03" data-case="ECO-03" data-state="NOT RUN"><summary><span class="c-id">ECO-03</span><span class="c-title">Let the specialist keep its sunk development</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use three development cases: fully funded elsewhere, source-range low and source-range high.</p><h4>Steps</h4><ol><li>Evaluate private mining, public hardware sales and a hybrid business model.</li><li>Allow shared IP, incremental revisions, multi-year survival and resale where justified.</li><li>Re-evaluate GPU entry after the specialist fleet is already installed.</li></ol><h4>Accept</h4><p>The coexistence claim does not depend on recovering the original chip research bill. Required P12 cases meet the approved envelope even at zero incremental development cost; failures cannot be hidden by the $23M/$340M source thresholds.</p><h4>Evidence the case requires</h4><p>Business-model variants; sunk-cost case; full cash-flow and adaptation records.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>33</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-04" data-case="ECO-04" data-state="NOT RUN"><summary><span class="c-id">ECO-04</span><span class="c-title">Model entry, exit and difficulty response</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use independently reviewed dynamic operator policies, not fixed market shares.</p><h4>Steps</h4><ol><li>Let agents buy, sell, switch off, re-enter and choose tasks based on declared costs and expected income.</li><li>Apply the actual difficulty/reward rules and test optimistic and adversarial liquidity/capital availability.</li><li>Compare equilibrium and transient outcomes across independent starting conditions.</li></ol><h4>Accept</h4><p>Mandatory worlds satisfy P12 without an imposed GPU share or artificial specialist capacity limit. Concentration, oscillations and excluded regions are reported; model behaviour matches unit and conservation checks.</p><h4>Evidence the case requires</h4><p>Agent policies; sensitivity seeds; market-share paths; independent model review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>34</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-05" data-case="ECO-05" data-state="FAIL"><summary><span class="c-id">ECO-05</span><span class="c-title">Stress success, contraction and cheap electricity</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/eco-05-results.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:07 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze mandatory scenarios before results: revenue bands, tariff range, lifetimes and demand states.</p><h4>Steps</h4><ol><li>Run the P12 factorial grid plus adversarial combinations selected by the independent reviewer.</li><li>Test a large successful network as well as weak-revenue and heterogeneous-tariff cases.</li><li>Distinguish feasible sustained-entry worlds from collapse scenarios with no rational profitable operator.</li></ol><h4>Accept</h4><p>No small-network or token-appreciation assumption props up the primary claim. Required viable worlds pass the envelope; collapse worlds show honest contraction and safety, not fabricated profits. Failure regions are explicit.</p><h4>Evidence the case requires</h4><p>Scenario register; full result cube; boundary plots; failed-world explanations.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco05-20261008-02</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>34</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-06" data-case="ECO-06" data-state="NOT RUN"><summary><span class="c-id">ECO-06</span><span class="c-title">Fund security and proving as issuance falls</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the frozen supply, halving, fee, burn and reward rules rather than source prose assumptions.</p><h4>Steps</h4><ol><li>Reconcile revenue reaching miners, internal provers, developers and burns over the full horizon.</li><li>Test flat/declining fees and no external proving income; separately introduce external demand.</li><li>Calculate capacity and security-provider coverage after each reward transition.</li></ol><h4>Accept</h4><p>Recurring compensation is explicit and internally consistent; mandatory sustainable scenarios meet P12. Burned amounts are never counted as payments, and external operator income is not assumed to fund internal work automatically.</p><h4>Evidence the case requires</h4><p>Issuance/fee ledger; scenario cash flows; funding-shortfall report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>34</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-07" data-case="ECO-07" data-state="NOT RUN"><summary><span class="c-id">ECO-07</span><span class="c-title">Price memory growth and honest-card displacement</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P06, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use GPU-05 and ROT-06 costs with the cheapest specialist adaptation.</p><h4>Steps</h4><ol><li>For each dataset increment, compare specialist cost increases with excluded cards and lost proving capacity.</li><li>Include ordinary-owner replacement, resale and reloading expenses.</li><li>Run alternate bounded schedules without assigning automatic chip death.</li></ol><h4>Accept</h4><p>The retained schedule meets P06/P12 and has an evidence-backed net competitiveness benefit. A schedule that mainly harms accessible GPUs fails; excluded tiers and mitigations are documented before activation.</p><h4>Evidence the case requires</h4><p>Per-step cost/retention table; alternative schedules; approval record.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>35</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-08" data-case="ECO-08" data-state="NOT RUN"><summary><span class="c-id">ECO-08</span><span class="c-title">Reproduce and adversarially audit the model</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/sim/economy/coexist/README.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:07 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Give an independent economist or qualified analyst the code, inputs and frozen success criteria.</p><h4>Steps</h4><ol><li>Recalculate required worlds and perturb favourable assumptions against the team.</li><li>Check dependence on discounts, utilisation, capital limits, artificial prices and future upgrades.</li><li>Publish the sensitivity range and state which conclusions are conditional.</li></ol><h4>Accept</h4><p>Material results reproduce, required scenarios pass and no unacknowledged assumption dominates the claim. The model supports a bounded coexistence conclusion, not a percentage probability that no chip will appear.</p><h4>Evidence the case requires</h4><p>Independent report; rerun outputs; model limitations; approved claim envelope.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent economic review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco05-20261008-02</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>35</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-EVM"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">07</span>EVM</div><div class="acc-suite-t"><h2>Execution and developer compatibility</h2><p class="acc-sub">Keep familiar applications while making every difference and metering rule explicit and reproducible.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Execution lead + independent implementer</dd></div><div><dt>Gate</dt><dd>Technical readiness</dd></div><div><dt>Fixtures</dt><dd>F0 execution-fork semantics; F5 transactions/contracts; F4 multi-node network</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="EVM: 8 cases: 1 passed under the standard, 0 running with team evidence, 7 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:1" title="1 PASS"></span><span class="seg g-notrun" style="flex-grow:7" title="7 NOT RUN"></span></div><span>8 cases: 1 passed under the standard, 0 running with team evidence, 7 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-EVM-01" data-case="EVM-01" data-state="NOT RUN"><summary><span class="c-id">EVM-01</span><span class="c-title">Match the selected EVM semantics</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/build/compatibility.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Pin the intended execution fork, revm version and all Igneum deviations in F0.</p><h4>Steps</h4><ol><li>Run the applicable upstream execution/state fixtures plus independently written deviation tests.</li><li>Execute identical blocks on multiple nodes and compare roots, receipts, logs, gas and failure outcomes.</li><li>Minimise mismatches and distinguish intended differences from implementation defects.</li></ol><h4>Accept</h4><p>All applicable vectors match; every deviation has a documented test and developer consequence. No claim of universal Ethereum equivalence or Ethereum settlement security is inferred.</p><h4>Evidence the case requires</h4><p>Fixture/version inventory; root/receipt diffs; deviation matrix.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>36</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-02" data-case="EVM-02" data-state="NOT RUN"><summary><span class="c-id">EVM-02</span><span class="c-title">Preserve transaction binding and replay protection</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use signed transfers, contract calls and deployment transactions with boundary field values.</p><h4>Steps</h4><ol><li>Alter chain identity, nonce, signature, fee caps and recipient after signing.</li><li>Replay across nodes, forks and distinct test networks; resubmit around reorganisation.</li><li>Check mempool admission and final consensus execution independently.</li></ol><h4>Accept</h4><p>Unauthorised, wrong-network or duplicate spends are rejected according to F0. Valid replacements follow the declared rule; mempool filtering alone is not evidence of consensus enforcement.</p><h4>Evidence the case requires</h4><p>Signed corpus; admission/execution outcomes; account-state reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>36</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-03" data-case="EVM-03" data-state="NOT RUN"><summary><span class="c-id">EVM-03</span><span class="c-title">Test two-dimensional fees and proving limits</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/compat/results.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:13 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze fee dimensions, estimator rules, abort behaviour and refund policy.</p><h4>Steps</h4><ol><li>Run workloads near and beyond execution and proving budgets, including state-heavy pathological cases.</li><li>Compare estimated fees with charged fees and validate rollback/receipt status on abort.</li><li>Mutate a block producer to omit or undercharge expensive work.</li></ol><h4>Accept</h4><p>Deterministic metering, charged amounts and aborted state agree across nodes and proofs. Resource bounds hold; fee estimates meet P09 for accepted supported cases. Undercharged invalid blocks cannot bypass consensus.</p><h4>Evidence the case requires</h4><p>Metering traces; fee fixtures; estimator errors; invalid-block rejection.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1744-evm</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>36</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-04" data-case="EVM-04" data-state="NOT RUN"><summary><span class="c-id">EVM-04</span><span class="c-title">Exercise block context and randomness assumptions</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/compat/results.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:13 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use contracts sensitive to timestamp, height/context, randomness and ordering.</p><h4>Steps</h4><ol><li>Compare the declared Igneum semantics with developers' documented expectations.</li><li>Test boundary transitions, miner-influenced inputs and adversarial ordering in the isolated network.</li><li>Run dependency reviews for applications using these values for economic decisions.</li></ol><h4>Accept</h4><p>Semantics match F0 and differences are surfaced in compatibility documentation. No source of miner influence is marketed as unbiased randomness; incompatible applications are not included in the compatibility claim.</p><h4>Evidence the case requires</h4><p>Context-contract results; threat notes; compatibility exclusions.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1744-evm</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>37</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-05" data-case="EVM-05" data-state="NOT RUN"><summary><span class="c-id">EVM-05</span><span class="c-title">Run representative contract integration journeys</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/compat/results.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:13 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use versioned transfer/token, NFT, multisignature, exchange and upgrade-pattern fixtures where supported.</p><h4>Steps</h4><ol><li>Deploy, initialise, transact, revert and upgrade each contract using ordinary tooling.</li><li>Exercise events, logs, balances, storage and call traces across node restart/reorganisation.</li><li>Compare expected application invariants with native execution and proved results.</li></ol><h4>Accept</h4><p>Supported journeys preserve their stated invariants; all deviations are documented. Example deployment success alone cannot stand in for application-level correctness or financial audit.</p><h4>Evidence the case requires</h4><p>Contract fixture hashes; transaction journeys; invariant and state comparisons.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1744-evm</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>37</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-06" data-case="EVM-06" data-state="NOT RUN"><summary><span class="c-id">EVM-06</span><span class="c-title">Validate wallets, RPC and indexers</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/compat/results.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:13 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Pin supported RPC methods and response semantics; use normal developer clients and an independent indexer.</p><h4>Steps</h4><ol><li>Test fee estimation, pending/final states, subscriptions, pagination and reconnects.</li><li>Reindex from genesis or the documented trust anchor after pruning and restart.</li><li>Compare logs, receipts and balances with independently validated chain state.</li></ol><h4>Accept</h4><p>No missing/duplicate canonical records; unsupported methods are explicit. UI states distinguish included, executed, proven and finalised. Malformed RPC input cannot crash validators or leak secrets.</p><h4>Evidence the case requires</h4><p>RPC conformance report; reindex comparison; reconnect/edge-case logs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1744-evm</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>37</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-07" data-case="EVM-07" data-state="NOT RUN"><summary><span class="c-id">EVM-07</span><span class="c-title">Handle execution denial-of-service workloads</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Create bounded pathological bytecode, calls, state growth, storage and precompile inputs.</p><h4>Steps</h4><ol><li>Measure CPU, memory, disk and proving cost against charged budgets.</li><li>Saturate admission with invalid/expensive requests while valid workloads continue.</li><li>Restart mid-execution and verify atomic state recovery.</li></ol><h4>Accept</h4><p>P09 limits hold with no unbounded free work or divergent rollback. State remains consistent after crash; availability under overload follows the declared admission policy, not silent dropping of accepted transactions.</p><h4>Evidence the case requires</h4><p>Resource profiles; adversarial corpus; state recovery comparisons.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>38</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-08" data-case="EVM-08" data-state="PASS"><summary><span class="c-id">EVM-08</span><span class="c-title">Verify controlled execution and verifier upgrades</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08, P09</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/proving-enforcement/cache-history-2.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 23:24 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Prepare two authorised versions and malicious, stale or unknown versions.</p><h4>Steps</h4><ol><li>Cross activation with mixed clients, queued transactions and proofs from both versions.</li><li>Bind each accepted proof to the correct execution semantics and program identity.</li><li>Exercise a failed software distribution without altering consensus activation.</li></ol><h4>Accept</h4><p>No unknown or wrong-version execution is accepted. Pre/post-boundary handling is deterministic and documented; software delivery cannot silently redefine transaction semantics or proof acceptance.</p><h4>Evidence the case requires</h4><p>Upgrade vectors; mixed-version traces; manifest/version bindings.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>enforced-proving-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>38</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-ZKP"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">08</span>ZKP</div><div class="acc-suite-t"><h2>Consensus-enforced proof validity</h2><p class="acc-sub">The validator, not merely the official producer, must reject unauthorised or invalid proof records and rewards.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Proving + protocol leads; independent cryptography review</dd></div><div><dt>Gate</dt><dd>Technical readiness / G5 <span class="acc-gl"><a href="#gate-G5">G5</a></span></dd></div><div><dt>Fixtures</dt><dd>F0 pinned programs/verifiers; F5 valid and hostile proof corpus; unmodified validators</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="ZKP: 8 cases: 4 passed under the standard, 0 running with team evidence, 4 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:4" title="4 PASS"></span><span class="seg g-notrun" style="flex-grow:4" title="4 NOT RUN"></span></div><span>8 cases: 4 passed under the standard, 0 running with team evidence, 4 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-ZKP-01" data-case="ZKP-01" data-state="NOT RUN"><summary><span class="c-id">ZKP-01</span><span class="c-title">Reject missing and invalid proofs</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Start from a native-correct statement and an independently verified valid proof.</p><h4>Steps</h4><ol><li>Submit the statement with no proof, truncated bytes, random bytes and targeted proof mutations using a modified producer.</li><li>Submit the genuine proof as a positive control through ordinary network paths.</li><li>Inspect block acceptance and resulting reward/state on unmodified validators.</li></ol><h4>Accept</h4><p>Every invalid proof record is rejected and earns no reward; valid controls succeed. A producer-side filter is not sufficient. Record rejection semantics exactly as defined by F0.</p><h4>Evidence the case requires</h4><p>Hostile record corpus; validator decisions; before/after balances; positive controls.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>39</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-02" data-case="ZKP-02" data-state="PASS"><summary><span class="c-id">ZKP-02</span><span class="c-title">Bind program, verifier and security parameters</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/proving-enforcement/cache-history-2.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 23:24 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use valid proofs from authorised and unauthorised programs and parameter sets.</p><h4>Steps</h4><ol><li>Swap program digest, verifier version, security settings and verification key where applicable.</li><li>Attempt downgrade through configuration, serialized metadata or an old node path.</li><li>Test authorised boundary transitions and unsupported future identities.</li></ol><h4>Accept</h4><p>Only explicitly authorised combinations are accepted in the correct epoch. No implicit trust in producer-supplied metadata or lower-security fallback; all accepted settings have scoped soundness review.</p><h4>Evidence the case requires</h4><p>Identity/parameter matrix; rejection traces; cryptographic review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>enforced-proving-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>39</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-03" data-case="ZKP-03" data-state="NOT RUN"><summary><span class="c-id">ZKP-03</span><span class="c-title">Bind network, epoch, job and state roots</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Prepare valid proofs for distinct chains, epochs, jobs and initial/final states.</p><h4>Steps</h4><ol><li>Replay each proof under another network, job, epoch, shard range or state commitment.</li><li>Alter public inputs while retaining the proof and test valid-but-wrong-context statements.</li><li>Check duplicated and reordered records across forks and replayed sync data.</li></ol><h4>Accept</h4><p>Every misbound proof is rejected; valid authorised replays follow only explicitly allowed semantics and never create extra rewards. Native reexecution cannot conceal missing proof-context binding.</p><h4>Evidence the case requires</h4><p>Binding matrix; public-input hashes; replay traces; reward reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>39</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-04" data-case="ZKP-04" data-state="PASS"><summary><span class="c-id">ZKP-04</span><span class="c-title">Prevent reward and payout substitution</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/proving-enforcement/cache-history-2.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 23:24 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use proofs that commit to authorisation and all reward-relevant fields required by F0.</p><h4>Steps</h4><ol><li>Alter payout key, amount, beneficiary, source work or fee allocation independently.</li><li>Supply correct execution over malicious producer-provided consensus/reward inputs.</li><li>Compare consensus-derived rewards with the proved/publicly authenticated derivation.</li></ol><h4>Accept</h4><p>Unauthorised payout changes and incorrect consensus inputs are rejected; no statement accepted merely because execution over supplied inputs is internally correct. Legitimate authorisations are preserved.</p><h4>Evidence the case requires</h4><p>Mutation cases; reward derivation trace; signature/proof binding review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>enforced-proving-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>40</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-05" data-case="ZKP-05" data-state="PASS"><summary><span class="c-id">ZKP-05</span><span class="c-title">Make proof payment idempotent across races</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/proving-enforcement/cache-history-2.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 23:24 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use competing provers submitting valid results for the same work and simulate retries/reorganisations.</p><h4>Steps</h4><ol><li>Submit simultaneous duplicates, reordered receipts and repeated messages after disconnects.</li><li>Crash validators between validation and reward application, then recover.</li><li>Reconcile canonical payouts against the exact F0 duplicate policy.</li></ol><h4>Accept</h4><p>Only the authorised total payment is made; no double payout, lost accepted entitlement or fork-retained balance. Transactions and payout records recover atomically.</p><h4>Evidence the case requires</h4><p>Concurrency schedule; canonical payment ledger; crash/recovery evidence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>enforced-proving-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>40</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-06" data-case="ZKP-06" data-state="NOT RUN"><summary><span class="c-id">ZKP-06</span><span class="c-title">Verify aggregation coverage and completeness</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Build valid multi-shard workloads plus omitted, duplicated, overlapping and misordered shard sets.</p><h4>Steps</h4><ol><li>Attempt an aggregate with a correct outer proof but wrong coverage/public-input construction.</li><li>Alter shard ranges, roots and aggregation-program identity.</li><li>Verify native execution, aggregate validity and coverage commitments independently.</li></ol><h4>Accept</h4><p>Only complete, correctly ordered authorised coverage is accepted. No valid proof of the wrong computation becomes an accepted chain result; aggregation failures do not fabricate successful delivery.</p><h4>Evidence the case requires</h4><p>Coverage corpus; aggregate/public-input verification; rejection ledger.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>40</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-07" data-case="ZKP-07" data-state="NOT RUN"><summary><span class="c-id">ZKP-07</span><span class="c-title">Review soundness and verifier resource limits</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide proof-system code, parameters, patches and the pinned verification path to an independent specialist.</p><h4>Steps</h4><ol><li>Review soundness assumptions, parameter margins and consequences of performance patches.</li><li>Fuzz deserialization and adversarial proofs; measure verification CPU and memory under load.</li><li>Cross-check an independent verifier or reference path and test crash containment.</li></ol><h4>Accept</h4><p>P09 review and resource requirements pass with no unresolved critical/high finding. Random proof rejection counts are not described as evidence of a particular cryptographic security level.</p><h4>Evidence the case requires</h4><p>Scoped soundness review; parameter sheet; fuzzer corpus; verifier profiles.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent cryptographic review + testing</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>41</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-08" data-case="ZKP-08" data-state="PASS"><summary><span class="c-id">ZKP-08</span><span class="c-title">Preserve authority and audit all acceptance paths</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P07, P08</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/proving-enforcement/cache-history-2.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 23:24 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Inspect block import, sync, RPC, light verification, database restoration and fast paths.</p><h4>Steps</h4><ol><li>Try bypassing validation via each path with a proof rejected by the normal path.</li><li>Remove the dominant prover/aggregator and have independent replacements process available inputs.</li><li>Attempt to use proof-production status as ordering, voting or finality authority.</li></ol><h4>Accept</h4><p>No bypass accepts invalid work; proofs alone confer no unauthorised consensus control. Replacement and pause behaviour meet F0/P07/P08 without privileged keys or a trusted aggregator shortcut.</p><h4>Evidence the case requires</h4><p>Path coverage report; bypass corpus; replacement run; authority checks.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>enforced-proving-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>41</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-CAP"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">09</span>CAP</div><div class="acc-suite-t"><h2>Sustained proving and delivery</h2><p class="acc-sub">A correct fast shard is only one stage; capacity, latency, payment and retries must work together.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Proving lead + independent operators</dd></div><div><dt>Gate</dt><dd>Technical readiness / commercial track</dd></div><div><dt>Fixtures</dt><dd>F3 meaningful workload catalogue; F4 network; F8 external job harness</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="CAP: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-CAP-01" data-case="CAP-01" data-state="NOT RUN"><summary><span class="c-id">CAP-01</span><span class="c-title">Reproduce the historical consumer-shard result</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02, P07</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Recover the exact source-era workload/build if available; keep it separate from the release-candidate workload.</p><h4>Steps</h4><ol><li>Attempt independent reproduction of the 4,717,439-cycle workload and reported 3060/4060/4070 results.</li><li>Record proof format, memory, energy, host and whether aggregation/compression are included.</li><li>Repeat on the final release and label all configuration changes.</li></ol><h4>Accept</h4><p>Historical figures are either reproduced within P02 tolerance or corrected/labelled non-reproduced. Release acceptance uses the current complete workload, never an unmatched historical time or a smaller substituted shard.</p><h4>Evidence the case requires</h4><p>Historical/current manifests; proof verification; timing and memory records.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>42</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-02" data-case="CAP-02" data-state="NOT RUN"><summary><span class="c-id">CAP-02</span><span class="c-title">Prove on the actual mining configuration</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P06, P07</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/floor-memory-profile-2026-10-08.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 23:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use final dataset sizes, registers, clocks, drivers and proof pipeline on every advertised proving tier.</p><h4>Steps</h4><ol><li>Run mining alone, proving alone, concurrent execution and supported time-sharing.</li><li>Measure wall energy, memory headroom, reloads, proof latency and forgone accepted mining work.</li><li>Induce memory pressure and GPU task failure without losing wallet control.</li></ol><h4>Accept</h4><p>Every advertised mode completes correctly and meets P06/P07. Net output includes opportunity cost; unsupported concurrency is not claimed. Mining-only vendor support remains separately labelled.</p><h4>Evidence the case requires</h4><p>Four-mode results; OOM/failure logs; memory and opportunity-cost ledger.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Run</dt><dd>v607-floor-memory-20261008T2059Z</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>42</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-03" data-case="CAP-03" data-state="NOT RUN"><summary><span class="c-id">CAP-03</span><span class="c-title">Measure the entire request-to-payment path</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P07</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Assign a unique job ID and immutable timestamps to every stage of F3/F8 jobs.</p><h4>Steps</h4><ol><li>Record request, input availability, assignment, execution, shard proof, aggregation, verification, delivery and payment.</li><li>Compare monotonic elapsed time with any protocol/DAA clock and document their relationship.</li><li>Reconcile failed, censored, retried and abandoned jobs with the original request denominator.</li></ol><h4>Accept</h4><p>No hidden stage or missing job; latency distributions and cost cover the complete path. Delivery, finality and payment are reported separately; protocol seconds are not silently relabelled wall-clock seconds.</p><h4>Evidence the case requires</h4><p>Stage event ledger; clock calibration; end-to-end latency/cost report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>42</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-04" data-case="CAP-04" data-state="NOT RUN"><summary><span class="c-id">CAP-04</span><span class="c-title">Sustain meaningful load without queue growth</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P07</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze W: payload mix, input sizes, execution work and per-hour demand; prohibit tiny-workload substitution.</p><h4>Steps</h4><ol><li>Run 72 hours at W and a separate 24 hours at 1.2W on the declared fleet.</li><li>Measure arrival/completion counts, backlog trend, oldest-job age, deadlines and all retries.</li><li>Use held-out workloads and an independent observer to detect discarded or delayed requests.</li></ol><h4>Accept</h4><p>P07 completion, tail-latency and bounded-backlog criteria hold. Capacity is stated for the tested W/fleet, not as universal TPS. A queue that grows indefinitely or shrinks through silent loss fails.</p><h4>Evidence the case requires</h4><p>Request/completion reconciliation; backlog series; held-out results; observer report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>43</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-05" data-case="CAP-05" data-state="NOT RUN"><summary><span class="c-id">CAP-05</span><span class="c-title">Overload and recover without false acceptance</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P07</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Start at W and inject 2W for 15 minutes with valid and invalid jobs, then return to W.</p><h4>Steps</h4><ol><li>Observe admission, explicit backpressure, reservations and deadline estimates.</li><li>Track accepted jobs to valid completion or the pre-agreed failure/refund outcome.</li><li>Measure recovery time and ensure ordinary users are not silently starved.</li></ol><h4>Accept</h4><p>P07 overload policy and recovery limits hold; no accepted job vanishes or earns an invalid reward. Rejected demand is reported separately from delivery success, preventing denominator manipulation.</p><h4>Evidence the case requires</h4><p>Overload timeline; admission/refund logs; backlog-drain proof.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>43</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-06" data-case="CAP-06" data-state="NOT RUN"><summary><span class="c-id">CAP-06</span><span class="c-title">Calibrate assignment windows to paid completion</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P07, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use a heterogeneous proving fleet, including the slowest advertised consumer tier.</p><h4>Steps</h4><ol><li>Measure actual completion distributions with network delay, competing load and failed attempts.</li><li>Test the chosen exclusive window, open claiming and faster challengers after expiry.</li><li>Compare assignment frequency, paid completions and wasted work by tier.</li></ol><h4>Accept</h4><p>P07 fairness and wasted-work limits hold for advertised tiers. A provisional 10-DAA-second window is not treated as approved. Fair assignment counts alone cannot pass; payment outcomes and operator margins matter.</p><h4>Evidence the case requires</h4><p>Window sweep; paid-completion distribution; wasted-work and margin report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>43</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-07" data-case="CAP-07" data-state="NOT RUN"><summary><span class="c-id">CAP-07</span><span class="c-title">Reassign work when inputs or providers disappear</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P07, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Remove input providers, assigned provers and the dominant aggregator independently and together.</p><h4>Steps</h4><ol><li>Have replacement operators retrieve authenticated inputs without founder files.</li><li>Retry expired assignments while preserving idempotent reward and customer outcomes.</li><li>Restore providers and test late submissions racing with replacements.</li></ol><h4>Accept</h4><p>P07/P08 replacement deadlines hold when availability assumptions permit. Otherwise a truthful bounded pause/refund occurs; no fake proof, double payment or hidden privileged input source is used.</p><h4>Evidence the case requires</h4><p>Failure schedule; input hashes; reassignment and payout ledger; recovery trace.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>44</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-08" data-case="CAP-08" data-state="NOT RUN"><summary><span class="c-id">CAP-08</span><span class="c-title">Deliver customer-verifiable output at scale</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P07, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Run the external workload using a customer-controlled verifier and independently operated workers.</p><h4>Steps</h4><ol><li>Verify every delivered proof against the contracted program and input commitment.</li><li>Reject wrong-format, stale and partial deliveries; test customer retry and delivery failure.</li><li>Reconcile delivery, acceptance, payment and refund records without exposing private inputs publicly.</li></ol><h4>Accept</h4><p>P07 delivery performance and exact validity hold. Payment depends on the contracted correct result; a valid proof for the wrong job is not a successful delivery.</p><h4>Evidence the case requires</h4><p>Customer verification log; proof-format contract; settlement reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>44</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-INC"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">10</span>INC</div><div class="acc-suite-t"><h2>Rewards, incentives and selfish operators</h2><p class="acc-sub">Assume operators optimise their own returns. Do not depend on the official client choosing a less profitable task.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Protocol economics + proving leads</dd></div><div><dt>Gate</dt><dd>G4 / G5 <span class="acc-gl"><a href="#gate-G4">G4</a> <a href="#gate-G5">G5</a></span></dd></div><div><dt>Fixtures</dt><dd>F0 fee/reward rules; F4 adversarial operators; F7 incentive models</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="INC: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-INC-01" data-case="INC-01" data-state="NOT RUN"><summary><span class="c-id">INC-01</span><span class="c-title">Reconcile issuance, fees, burns and recipients</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use a deterministic short chain containing all reward types, fee paths and rounding cases.</p><h4>Steps</h4><ol><li>Calculate balances, total supply changes, burns and distributions independently.</li><li>Execute identical blocks natively and through the proving path.</li><li>Test zero, minimum, maximum and transition-boundary values plus malformed producer accounting.</li></ol><h4>Accept</h4><p>Conservation and recipient rules match F0 exactly; no inflation, rounding leakage or duplicate reward. Fee-table and prose discrepancies are resolved before the run, not guessed by the tester.</p><h4>Evidence the case requires</h4><p>Independent accounting ledger; balance/supply diffs; boundary vectors.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>45</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-02" data-case="INC-02" data-state="NOT RUN"><summary><span class="c-id">INC-02</span><span class="c-title">Keep revenue streams and claims separate</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P12, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Prepare jobs and blocks producing mining income, internal proof rewards and external payments.</p><h4>Steps</h4><ol><li>Trace money from source to operator, protocol, developer and any burn.</li><li>Compare node records, settlement records and Ember displays.</li><li>Attempt to classify testnet rewards, reimbursed purchases or token appreciation as external customer revenue.</li></ol><h4>Accept</h4><p>Every stream reconciles and is labelled correctly. No double-counted revenue or fabricated protocol demand; mining subsidy and external service income remain distinct in dashboards and ECO.</p><h4>Evidence the case requires</h4><p>Money-flow register; UI reconciliation; rejected classifications.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>45</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-03" data-case="INC-03" data-state="NOT RUN"><summary><span class="c-id">INC-03</span><span class="c-title">Let a modified client choose the most profitable task</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P07, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Permit independent schedulers to mine, prove internally, prove externally or switch off.</p><h4>Steps</h4><ol><li>Publish common costs and vary relative task rewards, memory pressure and switching costs.</li><li>Run clients that ignore the official scheduling recommendation.</li><li>Measure realised operator margin, internal capacity and network progress.</li></ol><h4>Accept</h4><p>Required P12 sustainable worlds maintain paid essential capacity without compelled altruism. Profitability and availability are based on realised outcomes, including switching and wasted work.</p><h4>Evidence the case requires</h4><p>Scheduler source/policies; switching traces; capacity and margin series.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>45</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-04" data-case="INC-04" data-state="NOT RUN"><summary><span class="c-id">INC-04</span><span class="c-title">Survive external-demand spikes and token declines</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P07, P08, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use F7 scenarios with 10x external job offers and token-denominated mining-income shocks.</p><h4>Steps</h4><ol><li>Allow miners/provers to switch freely under the declared reward and difficulty rules.</li><li>Observe hash participation, proof backlog, fees and recovery without an administrator.</li><li>Repeat with external demand dropping to zero and with a dominant operator withdrawn.</li></ol><h4>Accept</h4><p>Mandatory viable worlds meet P07/P12; stressed nonviable worlds fail or pause safely with truthful status. No emergency rule, fabricated demand or unofficial subsidy is inserted to force a pass.</p><h4>Evidence the case requires</h4><p>Shock timeline; fee/hash/capacity paths; failure-region report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>46</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-05" data-case="INC-05" data-state="NOT RUN"><summary><span class="c-id">INC-05</span><span class="c-title">Contain job reservation and identity-splitting abuse</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P07, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze the actual assignment/payment mechanism; do not assume unimplemented collateral or identity controls.</p><h4>Steps</h4><ol><li>Create many worker identities, reserve jobs, withhold proofs and submit late results.</li><li>Attempt free option-taking, duplicate work rewards and displacement of honest assignments.</li><li>Price attacker costs and observe honest completion under the approved abuse load.</li></ol><h4>Accept</h4><p>F0 rules and P07 service limits hold under the declared adversary. Identity splitting does not create unauthorised rewards or control; any unmitigated starvation path blocks the permissionless-service claim.</p><h4>Evidence the case requires</h4><p>Attack clients; assignment trace; cost-to-disrupt analysis; honest-user outcomes.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>46</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-06" data-case="INC-06" data-state="NOT RUN"><summary><span class="c-id">INC-06</span><span class="c-title">Test difficulty and timestamp manipulation</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the actual adjustment algorithm and consensus timestamp rule with independent miners.</p><h4>Steps</h4><ol><li>Inject large hashrate arrivals/departures, periodic selective mining and boundary-timed bursts.</li><li>Try allowed and invalid timestamp skew, withheld blocks and replayed work.</li><li>Observe block intervals, reward allocation and recovery after hashrate stabilises.</li></ol><h4>Accept</h4><p>Invalid inputs are rejected; valid adversarial strategies remain within F0/P08 bounds and are priced in ECO. No unexplained reward amplification, permanent stall or conflicting accepted work.</p><h4>Evidence the case requires</h4><p>Difficulty trace; timestamp corpus; revenue analysis; independent rule review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>46</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-07" data-case="INC-07" data-state="NOT RUN"><summary><span class="c-id">INC-07</span><span class="c-title">Resist self-dealing fees and fake proving demand</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P12, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use self-funded operators and related customer identities in the isolated economic model/network.</p><h4>Steps</h4><ol><li>Cycle funds through jobs, tips, developer shares and rebates to seek net reward extraction.</li><li>Attempt to inflate external-demand metrics without genuine unrelated customer expenditure.</li><li>Reconcile all counterparties and net cash contribution rather than gross transaction volume.</li></ol><h4>Accept</h4><p>No unauthorised subsidy extraction or metric inflation passes. Related-party volume is disclosed/excluded from P14; net external cash and legitimate protocol incentives are reported separately.</p><h4>Evidence the case requires</h4><p>Circular-flow tests; ownership/conflict review; net-cash reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>47</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-08" data-case="INC-08" data-state="NOT RUN"><summary><span class="c-id">INC-08</span><span class="c-title">Quantify provider and supplier failure concentration</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P08, P11, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Model control of hashing, signing, proving, aggregation and hardware supply separately.</p><h4>Steps</h4><ol><li>Remove each largest operational dependency and combine correlated failures.</li><li>Measure replacement cost/time and whether essential roles share hidden ownership.</li><li>Compare results with the approved fault model and no-rescue exercise.</li></ol><h4>Accept</h4><p>No hidden single dependency defeats the claimed independence; within-tolerance withdrawals recover under P08/P11. Hardware supply concentration is disclosed without equating vendor sales to operator voting control.</p><h4>Evidence the case requires</h4><p>Role/ownership map; dependency removals; recovery and concentration report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>47</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-FIN"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">11</span>FIN</div><div class="acc-suite-t"><h2>Consensus safety and recovery</h2><p class="acc-sub">Test safety under the stated fault bounds. Demand liveness only when synchrony and participation assumptions actually hold.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Consensus lead + independent formal/security review</dd></div><div><dt>Gate</dt><dd>G5 / technical readiness <span class="acc-gl"><a href="#gate-G5">G5</a></span></dd></div><div><dt>Fixtures</dt><dd>F0 exact fault model; F4 real-node partitions; F5 certificates and historical failures</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="FIN: 8 cases: 1 passed under the standard, 0 running with team evidence, 7 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:1" title="1 PASS"></span><span class="seg g-notrun" style="flex-grow:7" title="7 NOT RUN"></span></div><span>8 cases: 1 passed under the standard, 0 running with team evidence, 7 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-FIN-01" data-case="FIN-01" data-state="NOT RUN"><summary><span class="c-id">FIN-01</span><span class="c-title">Agree on ordering, work and executed state</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use real fork-choice/DAG handling and independent miners, not only a simplified simulator.</p><h4>Steps</h4><ol><li>Generate concurrent branches, delayed blocks, duplicates and invalid work with deterministic seeds.</li><li>Compare selected ordering, accumulated work, transaction execution and state roots after delivery converges.</li><li>Replay from independent checkpoints and from genesis where practical.</li></ol><h4>Accept</h4><p>Honest nodes converge under F0 assumptions with exact roots and rewards. No duplicated work accounting or undocumented ordering dependence; simulator-only success cannot substitute.</p><h4>Evidence the case requires</h4><p>Block/ordering corpus; root/work diffs; real-node replay logs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fast-time lane (a8be71a0db962911c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>48</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-02" data-case="FIN-02" data-state="PASS"><summary><span class="c-id">FIN-02</span><span class="c-title">Attack finality with split honest populations</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/sim/finality-attacks-results/native-2026-10-09/s203-1c.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 02:02 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the source-discussed 40/40/20 weight split, plus threshold-boundary splits under F0.</p><h4>Steps</h4><ol><li>Let the 20% adversarial group sign conflicting histories while honest groups are partitioned.</li><li>Delay messages and eligibility updates independently; keep total historical weights auditable.</li><li>Try to form two certificates and reconnect nodes to observe accepted final history.</li></ol><h4>Accept</h4><p>No conflicting final certificates are accepted within the declared fault bound. A safe pause is valid when quorum is unavailable; making progress on both sides is not required.</p><h4>Evidence the case requires</h4><p>Signed votes; certificate attempts; voter-table snapshots; safety checker output.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>fin-203-20261009T0127Z</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>48</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-03" data-case="FIN-03" data-state="NOT RUN"><summary><span class="c-id">FIN-03</span><span class="c-title">Cross authority expiry in a long partition</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Recover historical expiry failures where available; use the actual current authority-transition rules.</p><h4>Steps</h4><ol><li>Partition for 31, 35, 60 and 90 logical days and around every retention/expiry boundary.</li><li>Attempt independently renewed authority sets and conflicting checkpoint locks.</li><li>Repeat selected boundary cases on real nodes with accelerated timers explicitly labelled.</li></ol><h4>Accept</h4><p>Authority continuity remains authenticated and no conflicting final history appears within F0 assumptions. A timeout is not accepted as proof absent voters ceased to exist. Compressed time is not multi-month field evidence.</p><h4>Evidence the case requires</h4><p>Expiry timeline; table/certificate history; historical regression tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>48</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-04" data-case="FIN-04" data-state="NOT RUN"><summary><span class="c-id">FIN-04</span><span class="c-title">Stop signing while mining continues</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Remove enough signing participation to invalidate the liveness assumption without forging votes.</p><h4>Steps</h4><ol><li>Continue mining and execution, cross seed boundaries and monitor proof queues.</li><li>Check which user-visible states advance and which remain unfinalised.</li><li>Restore eligible weight and bounded message delay, then verify recovery.</li></ol><h4>Accept</h4><p>No false finality or fabricated authority. Behaviour matches F0 during the pause and P08 after assumptions return; unfinished transactions are not displayed as irreversible.</p><h4>Evidence the case requires</h4><p>Signing/mining trace; UI/RPC states; recovery roots and timing.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>49</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-05" data-case="FIN-05" data-state="NOT RUN"><summary><span class="c-id">FIN-05</span><span class="c-title">Authenticate voter-set changes and pooled keys</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use normal transitions, pool members retaining keys and malicious substitution attempts.</p><h4>Steps</h4><ol><li>Alter voter weights, membership proofs, miner/pool identity bindings and prior-certificate links.</li><li>Race updates across boundaries and replay old signed changes.</li><li>Have a new node verify the authority chain from its declared trust anchor.</li></ol><h4>Accept</h4><p>Only correctly authenticated changes are accepted; weights cannot be double-counted or redirected by a pool. All honest nodes agree on the active authority set for each certified point.</p><h4>Evidence the case requires</h4><p>Authority-chain fixtures; substitution attacks; new-node verification log.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>49</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-06" data-case="FIN-06" data-state="NOT RUN"><summary><span class="c-id">FIN-06</span><span class="c-title">Analyse old-key compromise and long-range histories</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze assumptions about key erasure, retained weights, trust anchors and offline recovery.</p><h4>Steps</h4><ol><li>Use previously eligible keys to build alternative histories after their operators disappear.</li><li>Present these histories to recently offline and newly joining clients.</li><li>Test replayed certificates, stale anchors and compromised signer subsets.</li></ol><h4>Accept</h4><p>Acceptance matches the explicit security model with no hidden trusted recovery step. Any reliance on a recent trusted anchor is disclosed and tested; hashpower assumptions cannot replace old-key analysis.</p><h4>Evidence the case requires</h4><p>Long-range corpus; trust-anchor policy; key-compromise review; client results.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>49</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-07" data-case="FIN-07" data-state="NOT RUN"><summary><span class="c-id">FIN-07</span><span class="c-title">Recover deterministically after reconnection and crash</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 02:02 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Combine partitions with node crash, partial writes, restarts and proof backlog.</p><h4>Steps</h4><ol><li>Reconnect networks under bounded latency and restore required honest participation.</li><li>Verify fork choice, unfinalised reorganisation, finality, reward rollback and proof reassignments.</li><li>Compare all honest nodes and customer-visible receipts after recovery.</li></ol><h4>Accept</h4><p>P08 recovery holds without reversing a previously valid final guarantee. Only permitted unfinalised state is reorganised; no duplicate rewards or inconsistent receipt statuses survive.</p><h4>Evidence the case requires</h4><p>Recovery timelines; roots/certificates; payout rollback; customer-state reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>fin-203-20261009T0127Z</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>50</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-08" data-case="FIN-08" data-state="NOT RUN"><summary><span class="c-id">FIN-08</span><span class="c-title">Combine boundaries, faults and adversarial scheduling</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/sim/results_v2.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 02:02 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use an independent model checker/scheduler and production-node scenarios from F4.</p><h4>Steps</h4><ol><li>Combine epoch changes, authority transitions, mining churn, data delays and prover/aggregator loss.</li><li>Explore bounded adversarial message schedules and minimise any counterexample.</li><li>Replay model findings on real code and have an independent reviewer assess uncovered states.</li></ol><h4>Accept</h4><p>No unresolved safety failure; liveness claims hold only within declared assumptions and P08. Model bounds and untested schedules are published, not described as proof over every possible execution.</p><h4>Evidence the case requires</h4><p>Model/spec artifacts; schedule corpus; replay evidence; independent assessment.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Model checking + real-node testing</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fast-time lane (a8be71a0db962911c)</dd></div><div><dt>Run</dt><dd>fin-203-20261009T0127Z</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>50</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-VER"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">12</span>VER</div><div class="acc-suite-t"><h2>Wallets, receipts and data availability</h2><p class="acc-sub">Verify the exact property shown to the user. An inclusion proof, execution proof and finality certificate are not interchangeable.</p></div><div class="acc-suite-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Wallet + light-client lead; independent security review</dd></div><div><dt>Gate</dt><dd>Technical readiness / claimed options</dd></div><div><dt>Fixtures</dt><dd>F0 trust/availability model; F5 malformed roots, receipts and authority chains</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="VER: 8 cases: 0 passed under the standard, 0 running with team evidence, 3 failed, 5 not run, 0 deferred"><span class="seg g-fail" style="flex-grow:3" title="3 FAIL"></span><span class="seg g-notrun" style="flex-grow:5" title="5 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 3 failed, 5 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-VER-01" data-case="VER-01" data-state="FAIL"><summary><span class="c-id">VER-01</span><span class="c-title">Authenticate light-client bootstrap</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/ver/evidence/VER-01.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:46 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Give a clean client malicious RPC responses, fabricated voter tables and valid-looking signatures.</p><h4>Steps</h4><ol><li>Start from the approved trust anchor and verify every required link to the advertised state.</li><li>Substitute otherwise well-formed but unauthorised keys, weights and checkpoints.</li><li>Remove the bootstrap service and use another independently operated source.</li></ol><h4>Accept</h4><p>The client rejects unauthorised authority and discloses any trust anchor. Signatures over a node-supplied table do not by themselves pass; missing authentication never silently degrades to trusted RPC.</p><h4>Evidence the case requires</h4><p>Bootstrap corpus; trust-chain trace; fail-closed tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1915-ver</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>51</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-02" data-case="VER-02" data-state="FAIL"><summary><span class="c-id">VER-02</span><span class="c-title">Verify evolving authority and execution statements</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/ver/evidence/VER-01.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:46 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use valid state proofs paired with wrong execution statements or stale authority histories.</p><h4>Steps</h4><ol><li>Cross voter and verifier changes with offline clients returning after long intervals.</li><li>Alter roots, aggregate identity and proof/public-input bindings independently.</li><li>Check local verification rather than merely a server-reported verified flag.</li></ol><h4>Accept</h4><p>All advertised proof checks occur locally or the remaining trust is explicitly disclosed. Wrong roots and unauthenticated authority are rejected; unsupported verification paths are not claimed.</p><h4>Evidence the case requires</h4><p>Client verification trace; corrupted inputs; offline/upgrade results.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1915-ver</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>51</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-03" data-case="VER-03" data-state="NOT RUN"><summary><span class="c-id">VER-03</span><span class="c-title">Prove successful payment rather than inclusion</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/ver/evidence/summary.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:46 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Create successful, reverted, wrong-asset, wrong-recipient and wrong-amount transfers.</p><h4>Steps</h4><ol><li>Generate receipts for included transactions, including failures and replaced/unfinalised transactions.</li><li>Verify execution status plus asset, recipient, amount and canonical-state/receipt commitment.</li><li>Replay the receipt on another chain and after an allowed unfinalised reorganisation.</li></ol><h4>Accept</h4><p>Only the actual successful, correctly bound transfer is labelled payment proof. Inclusion-only receipts are labelled as such; no node-reported success flag substitutes for authenticated outcome.</p><h4>Evidence the case requires</h4><p>Payment fixture corpus; receipt verification; merchant-facing status checks.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1915-ver</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>51</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-04" data-case="VER-04" data-state="NOT RUN"><summary><span class="c-id">VER-04</span><span class="c-title">Bound cross-chain oracle trust and replay</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00, P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/ver/evidence/summary.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:46 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>For a claimed oracle, freeze destination verifier, authority updates, accepted proof types and replay policy.</p><h4>Steps</h4><ol><li>Try deployer-substituted keys, stale certificates, unchecked signatures and wrong source/destination identities.</li><li>Exercise legitimate authority updates and source reorganisations under the approved model.</li><li>Measure gas/cost with realistic header sets and test disabled/unavailable verification.</li></ol><h4>Accept</h4><p>The oracle enforces its declared trust model and fails closed. Deployer privileges and unavailable guarantees are explicit; no trustless-bridge claim exceeds the checks performed. Excluded oracle scope earns no pass credit.</p><h4>Evidence the case requires</h4><p>Oracle code/parameters; attack cases; cost report; privilege disclosure.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Claimed-option verification</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1915-ver</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>52</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-05" data-case="VER-05" data-state="FAIL"><summary><span class="c-id">VER-05</span><span class="c-title">Reconstruct required state without founder storage</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08, P09</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/ver/evidence/VER-05.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:46 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Remove founder archival/input services and start an independent operator from the documented entry point.</p><h4>Steps</h4><ol><li>Fetch authenticated blocks, state/proof inputs and any required witnesses from permitted peers.</li><li>Rebuild the expected state and continue validation/proving.</li><li>Measure bandwidth, disk, time and retention requirements against advertised operator budgets.</li></ol><h4>Accept</h4><p>Required data can be obtained and verified within the declared availability model. Hidden archives or unpublished files block independence. A valid execution proof alone does not satisfy this test.</p><h4>Evidence the case requires</h4><p>Download/reconstruction logs; data hashes; resource costs; dependency inventory.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1915-ver</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>52</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-06" data-case="VER-06" data-state="NOT RUN"><summary><span class="c-id">VER-06</span><span class="c-title">Detect withholding, corruption and stale data</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/ver/evidence/summary.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:46 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Serve valid commitments with missing data, corrupted chunks, stale witnesses and conflicting peer replies.</p><h4>Steps</h4><ol><li>Attempt to make a validator or light client accept an unavailable or incorrect state under F0.</li><li>Test retrieval from independent peers and expiry/retry policy.</li><li>Restore data and check that recovery cannot alter an already verified commitment.</li></ol><h4>Accept</h4><p>No unjustified available/verified status; safety and admission rules match F0. Recovery is bounded where assumptions permit, and unavailable-data states remain visible instead of hidden behind proofs.</p><h4>Evidence the case requires</h4><p>Withholding corpus; peer retrieval traces; availability/status checks.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1915-ver</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>52</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-07" data-case="VER-07" data-state="NOT RUN"><summary><span class="c-id">VER-07</span><span class="c-title">Protect wallet keys, signing and recovery</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use test-only keys, encrypted backups and clean replacement devices; no real user funds.</p><h4>Steps</h4><ol><li>Attempt secret access from proving jobs, logs, crash dumps, clipboard and telemetry paths.</li><li>Verify transaction destination/amount before signing; test backup/restore and wrong-password handling.</li><li>Upgrade and recover without silently changing signing authority or exposing seed material.</li></ol><h4>Accept</h4><p>No unintended secret disclosure or unauthorised signature. Supported recovery restores the correct keys and accounts; users receive explicit risk/backup information. Logs are sanitised without hiding security evidence.</p><h4>Evidence the case requires</h4><p>Security review; canary-secret tests; signing fixtures; restore journey.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>shipper (ae892a8b0f78fe31c)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>53</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-08" data-case="VER-08" data-state="NOT RUN"><summary><span class="c-id">VER-08</span><span class="c-title">Keep every user-facing state truthful</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Create included-only, executed, proven, finalised, reverted, stale and paused examples.</p><h4>Steps</h4><ol><li>Compare explorer, wallet, receipt, RPC and customer API labels against authenticated evidence.</li><li>Interrupt finality and proof services and observe refresh/reconnect behaviour.</li><li>Check statements about privacy, Ethereum security and device support.</li></ol><h4>Accept</h4><p>No stronger state is implied than verified; stale data is marked and failures are actionable. EVM compatibility is not labelled Ethereum security, and ZK technology is not automatically labelled transaction privacy.</p><h4>Evidence the case requires</h4><p>Cross-surface screenshots/logs; state mapping; claim review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>53</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-OPS"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">13</span>OPS</div><div class="acc-suite-t"><h2>Independent operation and release security</h2><p class="acc-sub">A permissionless specification must remain operational without privileged infrastructure or unsafe automatic updates.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Operations + release leads; independent operators</dd></div><div><dt>Gate</dt><dd>G5 <span class="acc-gl"><a href="#gate-G5">G5</a></span></dd></div><div><dt>Fixtures</dt><dd>F4 isolated multi-operator network; F0 signed releases; F9 telemetry</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="OPS: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-OPS-01" data-case="OPS-01" data-state="NOT RUN"><summary><span class="c-id">OPS-01</span><span class="c-title">Run the complete no-founder exercise</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P07, P08, P11</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the P11 independent network, adequate honest participation and enough non-founder capacity for W.</p><h4>Steps</h4><ol><li>Remove founder miners, provers, aggregators, RPC, DNS/bootstrap dependencies and private support access.</li><li>Run the full P11 period while crossing real and separately labelled accelerated boundaries.</li><li>Introduce scheduled faults and have independent operators recover using published instructions.</li></ol><h4>Accept</h4><p>No founder action, secret file, privileged key or emergency anti-chip rule is needed. P07/P08 outcomes hold within assumptions; any intervention is recorded as a failed no-rescue run, not erased.</p><h4>Evidence the case requires</h4><p>Operator roster/conflict checks; dependency removals; full activity/intervention log.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>54</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-02" data-case="OPS-02" data-state="NOT RUN"><summary><span class="c-id">OPS-02</span><span class="c-title">Diversify bootstrap and resist peer isolation</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Start nodes without the default bootstrap host and give others adversarial peer lists.</p><h4>Steps</h4><ol><li>Attempt eclipse through peer concentration, stale discovery, poisoned DNS and repeated identities in an isolated lab.</li><li>Use independent documented discovery paths and validate returned chain data.</li><li>Measure synchronisation, peer diversity and recovery after benign connectivity returns.</li></ol><h4>Accept</h4><p>No unauthenticated history is trusted; bootstrap has no hidden single-provider requirement. Isolation is detected/contained according to F0 and recovery meets P08 when assumptions return.</p><h4>Evidence the case requires</h4><p>Peer/discovery traces; eclipse scenarios; startup and recovery evidence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>build-server lane (a352e49ff4613df86)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>54</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-03" data-case="OPS-03" data-state="NOT RUN"><summary><span class="c-id">OPS-03</span><span class="c-title">Separate update distribution from consensus authority</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use test signing keys and clean desktop/node installations with valid, stale and malicious packages.</p><h4>Steps</h4><ol><li>Offer signed updates with unexpected consensus rules, downgraded binaries and corrupted payloads.</li><li>Test explicit operator acceptance and the published signing-key incident procedure.</li><li>Confirm that distribution-key possession cannot independently activate new consensus rules.</li></ol><h4>Accept</h4><p>Tampering/unauthorised rollback is rejected; updates do not silently transfer authority. Approved acceptance and activation are separate. No test touches production signing material.</p><h4>Evidence the case requires</h4><p>Package corpus; approval/activation traces; compromised-key rehearsal.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>shipper (ae892a8b0f78fe31c)</dd></div><div><dt>Run</dt><dd>site-manifest-20261009-02</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>54</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-04" data-case="OPS-04" data-state="NOT RUN"><summary><span class="c-id">OPS-04</span><span class="c-title">Recover nodes from crash and storage damage</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use production database/snapshot paths with controlled interrupted writes and corrupted test storage.</p><h4>Steps</h4><ol><li>Crash during import, proof acceptance, reward application and snapshot generation.</li><li>Restore from independently verified snapshots or re-sync through documented procedures.</li><li>Compare roots, certificates, balances and processed-job IDs with an unaffected node.</li></ol><h4>Accept</h4><p>No corrupt snapshot is trusted, no duplicate payout and no loss of authenticated final state. Recovery meets P08 where data is available; ambiguous corruption fails closed and is actionable.</p><h4>Evidence the case requires</h4><p>Crash schedule; snapshot hashes; root/balance diffs; recovery timing.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>55</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-05" data-case="OPS-05" data-state="NOT RUN"><summary><span class="c-id">OPS-05</span><span class="c-title">Isolate untrusted proving workloads</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Run hostile test jobs with secret canaries and restrictive worker permissions.</p><h4>Steps</h4><ol><li>Attempt filesystem escape, process spawning, resource exhaustion, network access and key-store reads.</li><li>Crash workers and inspect host, wallet and node availability plus dump/log contents.</li><li>Retry on every supported isolation backend and check dependency vulnerability handling.</li></ol><h4>Accept</h4><p>No secret leakage or unauthorised host action; P09 resource containment holds. Worker failure does not compromise validator/wallet authority; unsupported isolation is not marketed as safe execution.</p><h4>Evidence the case requires</h4><p>Sandbox penetration report; canary logs; resource limits; host-integrity checks.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>build-server lane (a352e49ff4613df86)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>55</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-06" data-case="OPS-06" data-state="NOT RUN"><summary><span class="c-id">OPS-06</span><span class="c-title">Contain malicious network and API traffic</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use an authorised isolated load environment with declared resource and request-rate budgets.</p><h4>Steps</h4><ol><li>Send malformed headers, proofs, oversized messages, floods and invalid peer sequences.</li><li>Measure legitimate traffic, memory/disk growth and validator CPU use.</li><li>Test limit resets, peer reconnect and graceful degradation without disabling validation.</li></ol><h4>Accept</h4><p>P09 abuse budgets hold; no unbounded allocation, persistent crash or invalid acceptance. Backpressure is visible and honest users retain the specified service at admitted load.</p><h4>Evidence the case requires</h4><p>Load/corpus manifests; resource series; valid-traffic metrics; incident traces.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>build-server lane (a352e49ff4613df86)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>55</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-07" data-case="OPS-07" data-state="NOT RUN"><summary><span class="c-id">OPS-07</span><span class="c-title">Detect failures with usable evidence and runbooks</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P09, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Define alerts for invalid acceptance, conflicting finality, backlog, data loss, payout mismatch and stale status.</p><h4>Steps</h4><ol><li>Inject one instance of each monitored failure in the lab.</li><li>Have an unaffiliated operator diagnose it using only emitted evidence and published instructions.</li><li>Test redaction, metric freshness and duplicate-alert suppression without suppressing serious failures.</li></ol><h4>Accept</h4><p>P10 alert/detection limits hold; every blocker produces actionable evidence. Monitoring does not leak secrets or mislabel intentional safe pauses as successful finality.</p><h4>Evidence the case requires</h4><p>Alert matrix; detection timelines; independent runbook exercise.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>build-server lane (a352e49ff4613df86)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>56</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-08" data-case="OPS-08" data-state="NOT RUN"><summary><span class="c-id">OPS-08</span><span class="c-title">Repeat independent operation across releases</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00, P08, P11</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use a clean previous supported version and the final candidate with independent operators.</p><h4>Steps</h4><ol><li>Perform documented rolling upgrade, rollback of non-consensus software where allowed and resynchronisation.</li><li>Cross activation with mixed versions and unavailable founder distribution hosts.</li><li>Re-run affected gates after changes and preserve prior failures and incident lessons.</li></ol><h4>Accept</h4><p>No undocumented privileged migration or automatic consensus rewrite. All affected evidence is refreshed; P11 no-rescue results remain tied to the final release, not an earlier build.</p><h4>Evidence the case requires</h4><p>Upgrade/replay logs; invalidation map; repeated gate signatures.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>build-server lane (a352e49ff4613df86)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>56</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-UX"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">14</span>UX</div><div class="acc-suite-t"><h2>Ember, payouts and operator control</h2><p class="acc-sub">Successful participation must be practical for ordinary owners without hidden custody or loss of consensus authority.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Desktop product + pool leads; independent usability study</dd></div><div><dt>Gate</dt><dd>Operator readiness / G5 <span class="acc-gl"><a href="#gate-G5">G5</a></span></dd></div><div><dt>Fixtures</dt><dd>F2 supported desktops; F8 user study; F4 honest/malicious pools</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="UX: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-UX-01" data-case="UX-01" data-state="NOT RUN"><summary><span class="c-id">UX-01</span><span class="c-title">Onboard ordinary owners on native desktop apps</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/evidence/UX-01-20261008.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:42 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Recruit the P10 first-time user cohort across Windows and macOS using supported physical hardware.</p><h4>Steps</h4><ol><li>Observe install, hardware detection, safety explanation and first accepted work without staff intervention.</li><li>Record download/data preparation separately as well as complete end-to-end time.</li><li>Test unsupported hardware and insufficient memory messaging rather than forcing a failed start.</li></ol><h4>Accept</h4><p>P10 completion/time targets hold with no unsafe default or concealed prerequisite. The product is tested as the actual desktop app, not only a browser preview.</p><h4>Evidence the case requires</h4><p>Consent-based study records; task timings; failure reasons; compatibility outcomes.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent observed user study</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>update-return lane (a22d765a2e0355a9f)</dd></div><div><dt>Run</dt><dd>ux-01-20261008-win-2.0.0</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>57</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-02" data-case="UX-02" data-state="NOT RUN"><summary><span class="c-id">UX-02</span><span class="c-title">Make pause, stop and safe tuning reliable</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Run mining/proving on active desktops under contention and safe thermal stress.</p><h4>Steps</h4><ol><li>Use pause, stop, power limit, task selection and emergency local shutdown controls.</li><li>Crash or restart the UI while workers run and verify ownership of background processes.</li><li>Restore the original hardware settings and test power-saving/low-battery behaviour where supported.</li></ol><h4>Accept</h4><p>P10 control latency and safe-state requirements hold. Stopping does not strand an uncontrolled process; tuning never depends on unsafe settings or silent privilege escalation.</p><h4>Evidence the case requires</h4><p>Control timings; process/settings audit; restart and safety traces.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>shipper (ae892a8b0f78fe31c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>57</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-03" data-case="UX-03" data-state="NOT RUN"><summary><span class="c-id">UX-03</span><span class="c-title">Show net earnings and compatibility honestly</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P10, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use known rewards, fees, energy readings, retries and operator-entered tariffs.</p><h4>Steps</h4><ol><li>Compare mining, internal proof and external proof income with authoritative ledgers.</li><li>Show gross/net estimates, measurement boundaries, tariff assumptions and payout status.</li><li>Test stale data, losses, negative margins and mining-only versus proving-compatible devices.</li></ol><h4>Accept</h4><p>P10 reconciliation limits hold and uncertainty is visible. No guaranteed profits, fabricated fiat price or inferred proving support; provisional earnings are not shown as settled payments.</p><h4>Evidence the case requires</h4><p>UI/ledger comparisons; tariff fixtures; stale/negative examples.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>shipper (ae892a8b0f78fe31c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>57</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-04" data-case="UX-04" data-state="NOT RUN"><summary><span class="c-id">UX-04</span><span class="c-title">Pay small operators without hidden custody</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use ordinary single-card balances and the actual pooling/payment path.</p><h4>Steps</h4><ol><li>Earn, request/receive payment, disconnect and reconnect; include low balances, fees and a pool outage.</li><li>Attempt redirection, delayed accounting and withdrawal of another user's entitlement.</li><li>Reconcile displayed balances with canonical entitlement and actual settlement.</li></ol><h4>Accept</h4><p>P10 payout limits hold for the declared small-operator case. No unauthorised custody, redirection or unexplained loss; thresholds and fees are disclosed rather than masked by larger test balances.</p><h4>Evidence the case requires</h4><p>Single-card payout ledger; pool failure record; custody/authorisation review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>pool design seat (a3832b1c3b274b310)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>58</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-05" data-case="UX-05" data-state="NOT RUN"><summary><span class="c-id">UX-05</span><span class="c-title">Keep voting keys with the miner through pooling</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/pool/pool-pair-2026-10-08.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:48 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use an honest pool and a modified pool that replaces worker identity or voting credentials.</p><h4>Steps</h4><ol><li>Verify the consensus binding from performed work to the miner's retained key.</li><li>Attempt substitution, replay and reassignment without the miner's authorisation.</li><li>Leave the pool and verify retained voting/finality rights under F0.</li></ol><h4>Accept</h4><p>No silent transfer of governance/finality authority. If the protocol cannot establish retained keys, this requirement fails; a pool-protocol name or user-interface promise does not pass.</p><h4>Evidence the case requires</h4><p>Work/key binding vectors; malicious-pool attempts; leave-pool authority check.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>pool design seat (a3832b1c3b274b310)</dd></div><div><dt>Run</dt><dd>pool-2.0-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>58</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-06" data-case="UX-06" data-state="NOT RUN"><summary><span class="c-id">UX-06</span><span class="c-title">Verify actual miner-selected work templates</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide a pool interface with declared job-declaration support and independent miner templates.</p><h4>Steps</h4><ol><li>Submit miner-selected valid transaction templates and verify what is actually hashed and accepted.</li><li>Have a pool substitute or censor templates and test local verification/fallback.</li><li>Measure payout and acceptance consequences without moving authority to the pool.</li></ol><h4>Accept</h4><p>The advertised selection control exists in accepted work, not only configuration. Undisclosed substitution is detected; supported independent operation remains practical under P10.</p><h4>Evidence the case requires</h4><p>Template commitments; accepted-block evidence; malicious-pool/fallback report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>shipper (ae892a8b0f78fe31c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>58</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-07" data-case="UX-07" data-state="NOT RUN"><summary><span class="c-id">UX-07</span><span class="c-title">Expose actionable failures and safe updates</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P09, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Create failed proofs, memory pressure, expired jobs, missing payouts and available software updates.</p><h4>Steps</h4><ol><li>Ask independent users to identify the issue, stop safely and follow the recommended action.</li><li>Test explicit update approval, version visibility and a failed/corrupt update.</li><li>Confirm diagnostic exports remove keys and private inputs while retaining useful evidence.</li></ol><h4>Accept</h4><p>P10 task-success requirements hold; no silent update or false success state. Recovery instructions work on supported desktops and secret canaries never enter exported logs.</p><h4>Evidence the case requires</h4><p>Observed tasks; update traces; sanitised export tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>shipper (ae892a8b0f78fe31c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>59</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-08" data-case="UX-08" data-state="NOT RUN"><summary><span class="c-id">UX-08</span><span class="c-title">Publish competitive accessible software</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:36 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide open documented builds, tuning parameters and known fee conditions for all supported platforms.</p><h4>Steps</h4><ol><li>Compare Ember against independently optimised permissible implementations on identical work.</li><li>Measure efficiency, fees, false rejection, installation and update transparency.</li><li>Scan for hidden developer fees, hardware whitelists, per-address privilege or undisclosed remote controls.</li></ol><h4>Accept</h4><p>P10 relative-efficiency limits hold and all fees/privileges are explicit. No self-reported device tier earns consensus advantage. A superior external implementation triggers investigation, not selective exclusion.</p><h4>Evidence the case requires</h4><p>Matched software comparison; code/config review; fee/privilege inventory.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>site-gate-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>59</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-COM"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">15</span>COM</div><div class="acc-suite-t"><h2>Paid demand and sustainable delivery</h2><p class="acc-sub">Devnet payouts and subsidised pilots demonstrate mechanics, not independent willingness to pay.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Commercial lead + independent financial/customer reviewer</dd></div><div><dt>Gate</dt><dd>Commercial evidence</dd></div><div><dt>Fixtures</dt><dd>F8 real consenting customers; F7 full service costs; private identity proofs</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="COM: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-COM-01" data-case="COM-01" data-state="NOT RUN"><summary><span class="c-id">COM-01</span><span class="c-title">Deliver a genuine contracted proof pilot</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P07, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Select one real external customer with a meaningful fixed workload and no required migration to Igneum.</p><h4>Steps</h4><ol><li>Agree program, inputs, proof format, deadline, price, failure/refund policy and verification method.</li><li>Run paid jobs through ordinary independently operated infrastructure.</li><li>Have the customer verify usefulness, correctness and its reason for choosing the service.</li></ol><h4>Accept</h4><p>The pilot satisfies its actual contract and settles genuine external payment. Trial subsidies are disclosed and cannot satisfy the repeat-demand gate; no invented customer or testimonial.</p><h4>Evidence the case requires</h4><p>Redacted contract; verified jobs; settlement proof; consented customer confirmation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>60</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-02" data-case="COM-02" data-state="NOT RUN"><summary><span class="c-id">COM-02</span><span class="c-title">Establish independent repeat purchasing</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the P14 multi-customer observation period and ownership/conflict checks.</p><h4>Steps</h4><ol><li>Track paid purchases on distinct occasions, including refunds and stopped customers.</li><li>Audit related parties, project reimbursements, token grants and circular funding.</li><li>Reconcile external cash received with correctly delivered meaningful work.</li></ol><h4>Accept</h4><p>P14 buyer, duration and volume minima are met without reimbursement or related-party substitution. Repeat orders are separate buying decisions, not a single payment split into many jobs.</p><h4>Evidence the case requires</h4><p>Anonymised buyer ledger; repeat-order dates; conflict review; net receipts.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>60</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-03" data-case="COM-03" data-state="NOT RUN"><summary><span class="c-id">COM-03</span><span class="c-title">Demonstrate service and operator margins</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Allocate all delivery costs, including aggregation, retries, hardware, power, host, network and support.</p><h4>Steps</h4><ol><li>Calculate gross contribution and fully loaded unit costs for each contracted workload.</li><li>Reconcile a representative operator's realised earnings against metered costs and opportunity cost.</li><li>Repeat under the declared demand and price sensitivities.</li></ol><h4>Accept</h4><p>P14 contribution targets hold and at least the required operator cohort has positive realised contribution. Excluded overhead is visible; token appreciation or unpriced founder labour cannot silently create profitability.</p><h4>Evidence the case requires</h4><p>Unit-economics ledger; metered operator sample; allocation rules; sensitivity report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>60</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-04" data-case="COM-04" data-state="NOT RUN"><summary><span class="c-id">COM-04</span><span class="c-title">Meet the customer service guarantee</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P07, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Observe actual delivery deadlines, validity, failure handling and support over the contracted period.</p><h4>Steps</h4><ol><li>Count all accepted jobs, including failed, retried and abandoned cases.</li><li>Have the customer independently verify results and invoke one authorised refund/failure exercise.</li><li>Compare offered capacity and quoted price with what was actually delivered.</li></ol><h4>Accept</h4><p>P07 and contracted obligations hold; validity has zero accepted exceptions. Failure terms are honoured, and demand beyond capacity is explicitly refused rather than quietly omitted from metrics.</p><h4>Evidence the case requires</h4><p>Customer-verifier records; SLO report; refunds; promised-versus-delivered comparison.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>61</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-05" data-case="COM-05" data-state="NOT RUN"><summary><span class="c-id">COM-05</span><span class="c-title">Compare against the buyer's real alternative</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P14, P15</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Identify a credible alternative supplier or in-house option for the same workload, proof format and security.</p><h4>Steps</h4><ol><li>Obtain comparable quotes or consented measured trials at the evaluation date.</li><li>Include integration, verification, deadlines and all operational costs, not only proof-generation time.</li><li>Document the customer's actual trade-off without inventing unavailable comparator evidence.</li></ol><h4>Accept</h4><p>P15 commercial comparison is satisfied with like-for-like scope and a evidenced purchase reason. Missing alternative data remains MISSING; it is not scored as an Igneum win.</p><h4>Evidence the case requires</h4><p>Dated comparison; workload/security match; customer decision record.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>61</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-06" data-case="COM-06" data-state="NOT RUN"><summary><span class="c-id">COM-06</span><span class="c-title">Retain buyers after the pilot and subsidy period</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Follow all recruited customers through the P14 observation period, including churn.</p><h4>Steps</h4><ol><li>Remove disclosed trial incentives before measuring repeat demand.</li><li>Track renewal, expansion, cancellation reasons, unresolved incidents and buyer concentration.</li><li>Review whether one affiliated or subsidised buyer dominates the apparent market.</li></ol><h4>Accept</h4><p>P14 repeat/concentration conditions hold with honest denominator and churn reporting. Paying demand survives beyond a demonstration; unsatisfied or departed buyers are not removed retrospectively.</p><h4>Evidence the case requires</h4><p>Cohort/renewal ledger; churn notes; concentration and incentive report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>61</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-07" data-case="COM-07" data-state="NOT RUN"><summary><span class="c-id">COM-07</span><span class="c-title">Fund maintenance without assumed appreciation</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P13</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Prepare a costed plan for development, review, infrastructure, support and incident response.</p><h4>Steps</h4><ol><li>Separate committed resources from revenue dependent on adoption or token price.</li><li>Stress lower income and an unexpected security/operations expense.</li><li>Verify responsible owners and continuity arrangements without changing fair-launch promises.</li></ol><h4>Accept</h4><p>P13 committed-runway requirement holds and downside responses are documented. No uncommitted financing, rising token price or burn accounting is presented as available maintenance funding.</p><h4>Evidence the case requires</h4><p>Budget and commitment evidence; downside plan; owner/continuity roster.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>62</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-08" data-case="COM-08" data-state="NOT RUN"><summary><span class="c-id">COM-08</span><span class="c-title">Let independent developers build useful integrations</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P09, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Recruit unaffiliated developers unfamiliar with unpublished implementation details.</p><h4>Steps</h4><ol><li>Use public docs to deploy a supported application or integrate an external proof request and verification flow.</li><li>Record time, undocumented dependencies, workarounds and correctness issues.</li><li>Retest after documentation fixes without founder-written hidden integration code.</li></ol><h4>Accept</h4><p>P14 developer-task minimum passes on the final release; all required public instructions exist. Successful bytecode deployment alone does not count as a working application or service integration.</p><h4>Evidence the case requires</h4><p>Consented developer logs; public examples; issue closure; verified end-to-end journeys.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent integration study</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>62</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-LEAD"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">16</span>LEAD</div><div class="acc-suite-t"><h2>Comparative leadership evidence</h2><p class="acc-sub">A serious contention claim requires comparative outcomes and real adoption evidence, not just an internally green test dashboard.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Independent assessment panel + product/economics reviewers</dd></div><div><dt>Gate</dt><dd>Leadership-contender decision</dd></div><div><dt>Fixtures</dt><dd>F8 peer/customer studies; full signed technical evidence; 90-day observation</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="LEAD: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-LEAD-01" data-case="LEAD-01" data-state="NOT RUN"><summary><span class="c-id">LEAD-01</span><span class="c-title">Register a fair contemporary comparison</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P15</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Choose at least the P15 peer coverage and an evaluation date before collecting confirmatory results.</p><h4>Steps</h4><ol><li>Include the plan's Ravencoin, Ergo and Firo reference set where comparable, then check for other relevant current options.</li><li>Freeze versions, supported hardware, methods, noninferiority margins and commercial alternatives.</li><li>Publish exclusions and prohibit cross-algorithm raw-hashrate comparisons.</li></ol><h4>Accept</h4><p>The protocol covers material alternatives fairly and is signed independently. A missing or non-comparable feature is not scored zero; no arbitrary universal rank is inferred from selected metrics.</p><h4>Evidence the case requires</h4><p>Timestamped peer protocol; source/version records; comparison/exclusion rationale.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Pre-registered comparative study</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>63</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-02" data-case="LEAD-02" data-state="NOT RUN"><summary><span class="c-id">LEAD-02</span><span class="c-title">Demonstrate comparable operator advantages</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02, P10, P15</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use matched user tasks and operating conditions on the selected GPU-first networks.</p><h4>Steps</h4><ol><li>Measure install-to-first-accepted-work, software overhead versus each network's tuned baseline, payout friction and retained control.</li><li>Measure rejection/availability under the same network conditions; report fees separately.</li><li>Use blinded analysis where possible and independent runs for decisive differences.</li></ol><h4>Accept</h4><p>P15 noninferiority and superiority requirements hold on meaningful comparable dimensions. No raw hashes from different algorithms are compared, and transient token price is not labelled engineering superiority.</p><h4>Evidence the case requires</h4><p>Matched task data; uncertainty/effect sizes; independent comparison report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>site lane (a846fd66b5403e35a)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>63</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-03" data-case="LEAD-03" data-state="NOT RUN"><summary><span class="c-id">LEAD-03</span><span class="c-title">Substantiate the specialist-coexistence claim</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04, P12, P15</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Assemble G1-G4 plus frozen rules and all surviving-adversary assumptions.</p><h4>Steps</h4><ol><li>Have independent reviewers trace each public competitiveness statement to its narrowest evidence.</li><li>Separate measured GPUs, modelled silicon and economic scenarios in all summaries.</li><li>Evaluate residual uncertainty, excluded technologies and the no-new-rules counterfactual.</li></ol><h4>Accept</h4><p>All claimed envelopes meet P04/P12 without unsupported universal bounds. Reviewers agree the evidence supports scoped commodity competitiveness even when chips remain compatible; an exact chip-arrival probability is not inferred.</p><h4>Evidence the case requires</h4><p>Claim-to-evidence map; signed envelope review; limitations statement.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>63</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-04" data-case="LEAD-04" data-state="NOT RUN"><summary><span class="c-id">LEAD-04</span><span class="c-title">Observe ordinary-operator retention and margins</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12, P16</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Recruit the P16 independent cohort before observing results; use privacy-preserving evidence.</p><h4>Steps</h4><ol><li>Follow participation, realised margin, hardware changes, failures and reasons for leaving for 90 days.</li><li>Report trial incentives separately and include every initial participant in retention denominators.</li><li>Compare behaviour with matched alternatives where feasible; disclose absence of an actual downturn.</li></ol><h4>Accept</h4><p>P16 retention/margin minima hold with verified independence and no removal of churned users. Simulated downturns cannot be called observed bear-market retention; historical claims stay limited to the period measured.</p><h4>Evidence the case requires</h4><p>Pseudonymous cohort ledger; margin/retention calculations; departure reasons.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>64</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-05" data-case="LEAD-05" data-state="NOT RUN"><summary><span class="c-id">LEAD-05</span><span class="c-title">Measure control and dependency concentration</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P11, P16</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Audit operational control of mining, voting, proving, aggregation, hosting and software distribution separately.</p><h4>Steps</h4><ol><li>Use opt-in attestations, observed dependencies and independent corroboration; disclose uncertain common ownership.</li><li>Compare concentration and provider-removal outcomes to the approved security and availability assumptions.</li><li>Check that pooled payments do not hide authority concentration and hardware vendors are not equated with operators.</li></ol><h4>Accept</h4><p>P11/P16 concentration requirements hold within disclosed uncertainty; unidentified control cannot be counted as independent. No single removable dependency is falsely marketed as decentralised operation.</p><h4>Evidence the case requires</h4><p>Control/failure-domain map; uncertainty notes; concentration/removal results.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>64</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-06" data-case="LEAD-06" data-state="NOT RUN"><summary><span class="c-id">LEAD-06</span><span class="c-title">Complete the reliability observation window</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P16</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Observe the final candidate and approved compatible updates for the full P16 real-time period.</p><h4>Steps</h4><ol><li>Measure promised service availability, invalid acceptance, finality safety, payouts and incident impact.</li><li>Reconcile external probes, customer records and operator logs, including maintenance and exclusions.</li><li>Repeat affected critical tests after every material change; reset observation where comparability breaks.</li></ol><h4>Accept</h4><p>P16 availability and safety criteria hold on live observation; no hidden downtime or compressed-time substitution. This supports the recorded window only, not multi-year operational maturity.</p><h4>Evidence the case requires</h4><p>90-day SLO ledger; independent probes; incident reports; change/retest history.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>64</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-07" data-case="LEAD-07" data-state="NOT RUN"><summary><span class="c-id">LEAD-07</span><span class="c-title">Issue an independent contender assessment</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P00, P15, P16</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide the full evidence packet, commercial results, comparative study and unresolved-limit register to the panel.</p><h4>Steps</h4><ol><li>Check every mandatory and claimed-option test, source requirement and approved threshold.</li><li>Require separate signoffs for hardware/economics, security/operations and customer/operator evidence.</li><li>Document dissent and challenge any inference that passing an internal checklist proves number-one rank.</li></ol><h4>Accept</h4><p>Every required gate is PASS with no unresolved material challenge, critical/high defect or missing comparator/customer evidence. The panel supports a credible leadership-contender conclusion within scope, not a guaranteed rank.</p><h4>Evidence the case requires</h4><p>Signed assessment; full status index; dissent/limitations; approved claim wording.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent final assessment</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>65</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-08" data-case="LEAD-08" data-state="NOT RUN"><summary><span class="c-id">LEAD-08</span><span class="c-title">Keep leadership claims valid after release</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P00, P16</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Define material-change triggers and scheduled reviews before publishing the assessment.</p><h4>Steps</h4><ol><li>Refresh competitor, hardware-cost, demand and security evidence at the P16 cadence.</li><li>Test a newly credible specialist, lost customer, major outage and verifier change against invalidation rules.</li><li>Withdraw or narrow stale claims promptly while publishing the new evidence status.</li></ol><h4>Accept</h4><p>Claims remain dated, scoped and revisable; material contrary evidence reopens the appropriate gate. The network may remain usable while a leadership claim is suspended. No permanent self-awarded certification.</p><h4>Evidence the case requires</h4><p>Review calendar; invalidation drills; versioned public claim register.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>65</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-REV"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">17</span>REV</div><div class="acc-suite-t"><h2>REV: the external review's required regressions</h2><p class="acc-sub">44 regressions from 14 findings; each reads NOT RUN until its owner lane records a run</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>the owner lanes per the dispatch table</dd></div><div><dt>Gate</dt><dd>Review findings closed</dd></div><div><dt>Fixtures</dt><dd>F0,F5</dd></div><div><dt>Plan pages</dt><dd>docs/analysis/review-2026-10-08-b/findings.json and docs/analysis/review-2026-10-08-b/dispatch.md; ids from the master traceability register</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="REV: 44 cases: 1 passed under the standard, 0 running with team evidence, 43 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:1" title="1 PASS"></span><span class="seg g-notrun" style="flex-grow:43" title="43 NOT RUN"></span></div><span>44 cases: 1 passed under the standard, 0 running with team evidence, 43 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-R2-F01-R01" data-case="R2-F01-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F01-R01</span><span class="c-title">Valid proof A, warm cache, carried statement B: refuse exactly as a cold node does.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).</p><h4>Steps</h4><ol><li>Valid proof A, warm cache, carried statement B: refuse exactly as a cold node does.</li></ol><h4>Accept</h4><p>Valid proof A, warm cache, carried statement B: refuse exactly as a cold node does.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, node lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F01</dd></div></dl></div></details><details class="acc-case" id="case-R2-F01-R02" data-case="R2-F01-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F01-R02</span><span class="c-title">Run valid/invalid contexts in both orders, concurrently and across cache eviction/restart.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).</p><h4>Steps</h4><ol><li>Run valid/invalid contexts in both orders, concurrently and across cache eviction/restart.</li></ol><h4>Accept</h4><p>Run valid/invalid contexts in both orders, concurrently and across cache eviction/restart.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, node lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F01</dd></div></dl></div></details><details class="acc-case" id="case-R2-F01-R03" data-case="R2-F01-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F01-R03</span><span class="c-title">Change payout, network, kind, program ID and activation context; no accepted misbinding.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).</p><h4>Steps</h4><ol><li>Change payout, network, kind, program ID and activation context; no accepted misbinding.</li></ol><h4>Accept</h4><p>Change payout, network, kind, program ID and activation context; no accepted misbinding.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, node lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F01</dd></div></dl></div></details><details class="acc-case" id="case-R2-F01-R04" data-case="R2-F01-R04" data-state="NOT RUN"><summary><span class="c-id">R2-F01-R04</span><span class="c-title">A native two-node test must agree on block validity and payouts despite different cache histories.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).</p><h4>Steps</h4><ol><li>A native two-node test must agree on block validity and payouts despite different cache histories.</li></ol><h4>Accept</h4><p>A native two-node test must agree on block validity and payouts despite different cache histories.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, node lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F01</dd></div></dl></div></details><details class="acc-case" id="case-R2-F02-R01" data-case="R2-F02-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F02-R01</span><span class="c-title">Release build cannot activate test bypass.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F02 requires (review R2 finding F02: Proof-rule infrastructure can fail open).</p><h4>Steps</h4><ol><li>Release build cannot activate test bypass.</li></ol><h4>Accept</h4><p>Release build cannot activate test bypass.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, CI steward</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F02</dd></div></dl></div></details><details class="acc-case" id="case-R2-F02-R02" data-case="R2-F02-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F02-R02</span><span class="c-title">Missing oracle or pinned keys prevents service readiness after enforcement activation.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F02 requires (review R2 finding F02: Proof-rule infrastructure can fail open).</p><h4>Steps</h4><ol><li>Missing oracle or pinned keys prevents service readiness after enforcement activation.</li></ol><h4>Accept</h4><p>Missing oracle or pinned keys prevents service readiness after enforcement activation.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, CI steward</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F02</dd></div></dl></div></details><details class="acc-case" id="case-R2-F02-R03" data-case="R2-F02-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F02-R03</span><span class="c-title">Missing proof bytes retry without incorrectly marking a valid block permanently invalid.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F02 requires (review R2 finding F02: Proof-rule infrastructure can fail open).</p><h4>Steps</h4><ol><li>Missing proof bytes retry without incorrectly marking a valid block permanently invalid.</li></ol><h4>Accept</h4><p>Missing proof bytes retry without incorrectly marking a valid block permanently invalid.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, CI steward</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F02</dd></div></dl></div></details><details class="acc-case" id="case-R2-F03-R01" data-case="R2-F03-R01" data-state="PASS"><summary><span class="c-id">R2-F03-R01</span><span class="c-title">Clean build from one manifest, including the pool and workers, with no unpublished vendor tree.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:11 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F03 requires (review R2 finding F03: The bundle contains a v6 candidate, not a demonstrated integrated v6 release).</p><h4>Steps</h4><ol><li>Clean build from one manifest, including the pool and workers, with no unpublished vendor tree.</li></ol><h4>Accept</h4><p>Clean build from one manifest, including the pool and workers, with no unpublished vendor tree.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>CI steward, hash lane (ProgramClass::V6 on freeze), pool lane</dd></div><div><dt>Run</dt><dd>f03-manifest-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F03</dd></div></dl></div></details><details class="acc-case" id="case-R2-F03-R02" data-case="R2-F03-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F03-R02</span><span class="c-title">Same job context produces identical accepted work in node, CPU reference, CUDA, Metal, OpenCL and pool.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 06:08 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F03 requires (review R2 finding F03: The bundle contains a v6 candidate, not a demonstrated integrated v6 release).</p><h4>Steps</h4><ol><li>Same job context produces identical accepted work in node, CPU reference, CUDA, Metal, OpenCL and pool.</li></ol><h4>Accept</h4><p>Same job context produces identical accepted work in node, CPU reference, CUDA, Metal, OpenCL and pool.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>CI steward, hash lane (ProgramClass::V6 on freeze), pool lane</dd></div><div><dt>Run</dt><dd>same-work-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F03</dd></div></dl></div></details><details class="acc-case" id="case-R2-F03-R03" data-case="R2-F03-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F03-R03</span><span class="c-title">Cross every scheduled transition with old/new client behavior documented and identical rule identities.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 06:08 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F03 requires (review R2 finding F03: The bundle contains a v6 candidate, not a demonstrated integrated v6 release).</p><h4>Steps</h4><ol><li>Cross every scheduled transition with old/new client behavior documented and identical rule identities.</li></ol><h4>Accept</h4><p>Cross every scheduled transition with old/new client behavior documented and identical rule identities.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>CI steward, hash lane (ProgramClass::V6 on freeze), pool lane</dd></div><div><dt>Run</dt><dd>same-work-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F03</dd></div></dl></div></details><details class="acc-case" id="case-R2-F04-R01" data-case="R2-F04-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F04-R01</span><span class="c-title">Native multi-node 40/40/20 partition, equivocation and dust-valid mining on both sides past the window.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).</p><h4>Steps</h4><ol><li>Native multi-node 40/40/20 partition, equivocation and dust-valid mining on both sides past the window.</li></ol><h4>Accept</h4><p>Native multi-node 40/40/20 partition, equivocation and dust-valid mining on both sides past the window.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>node lane, reference apps, site (explorer)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F04</dd></div></dl></div></details><details class="acc-case" id="case-R2-F04-R02" data-case="R2-F04-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F04-R02</span><span class="c-title">Proof that the chosen recovery guarantee matches the public finality claim; two valid contradictory certificates are a hard failure for strong finality.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).</p><h4>Steps</h4><ol><li>Proof that the chosen recovery guarantee matches the public finality claim; two valid contradictory certificates are a hard failure for strong finality.</li></ol><h4>Accept</h4><p>Proof that the chosen recovery guarantee matches the public finality claim; two valid contradictory certificates are a hard failure for strong finality.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>node lane, reference apps, site (explorer)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F04</dd></div></dl></div></details><details class="acc-case" id="case-R2-F04-R03" data-case="R2-F04-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F04-R03</span><span class="c-title">Pause-only resume with historical backfill, missing historical data and all old keys returning.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).</p><h4>Steps</h4><ol><li>Pause-only resume with historical backfill, missing historical data and all old keys returning.</li></ol><h4>Accept</h4><p>Pause-only resume with historical backfill, missing historical data and all old keys returning.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>node lane, reference apps, site (explorer)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F04</dd></div></dl></div></details><details class="acc-case" id="case-R2-F04-R04" data-case="R2-F04-R04" data-state="NOT RUN"><summary><span class="c-id">R2-F04-R04</span><span class="c-title">Wallet, receipt and oracle consumers distinguish any weaker recovery state.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).</p><h4>Steps</h4><ol><li>Wallet, receipt and oracle consumers distinguish any weaker recovery state.</li></ol><h4>Accept</h4><p>Wallet, receipt and oracle consumers distinguish any weaker recovery state.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>node lane, reference apps, site (explorer)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F04</dd></div></dl></div></details><details class="acc-case" id="case-R2-F05-R01" data-case="R2-F05-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F05-R01</span><span class="c-title">Native reference-vs-incremental expression equivalence across all source registers and real instruction updates.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F05 requires (review R2 finding F05: reg64 address coupling has an exact incremental alternative).</p><h4>Steps</h4><ol><li>Native reference-vs-incremental expression equivalence across all source registers and real instruction updates.</li></ol><h4>Accept</h4><p>Native reference-vs-incremental expression equivalence across all source registers and real instruction updates.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>hash lane, adversary lane, floor lane 3</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F05</dd></div></dl></div></details><details class="acc-case" id="case-R2-F05-R02" data-case="R2-F05-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F05-R02</span><span class="c-title">Full-kernel output equivalence, registers, spills, wall power and accepted throughput across target GPUs.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F05 requires (review R2 finding F05: reg64 address coupling has an exact incremental alternative).</p><h4>Steps</h4><ol><li>Full-kernel output equivalence, registers, spills, wall power and accepted throughput across target GPUs.</li></ol><h4>Accept</h4><p>Full-kernel output equivalence, registers, spills, wall power and accepted throughput across target GPUs.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>hash lane, adversary lane, floor lane 3</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F05</dd></div></dl></div></details><details class="acc-case" id="case-R2-F05-R03" data-case="R2-F05-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F05-R03</span><span class="c-title">Adversary physical design includes prefix caching/recomputation cost; no assumed full 63-read cost on every load.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F05 requires (review R2 finding F05: reg64 address coupling has an exact incremental alternative).</p><h4>Steps</h4><ol><li>Adversary physical design includes prefix caching/recomputation cost; no assumed full 63-read cost on every load.</li></ol><h4>Accept</h4><p>Adversary physical design includes prefix caching/recomputation cost; no assumed full 63-read cost on every load.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>hash lane, adversary lane, floor lane 3</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F05</dd></div></dl></div></details><details class="acc-case" id="case-R2-F06-R01" data-case="R2-F06-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F06-R01</span><span class="c-title">Acceptance/reference/emitter evaluate the same activated schedule.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F06 requires (review R2 finding F06: The v6 acceptance and census gates are not complete for the final execution).</p><h4>Steps</h4><ol><li>Acceptance/reference/emitter evaluate the same activated schedule.</li></ol><h4>Accept</h4><p>Acceptance/reference/emitter evaluate the same activated schedule.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>hash lane, research lane D</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F06</dd></div></dl></div></details><details class="acc-case" id="case-R2-F06-R02" data-case="R2-F06-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F06-R02</span><span class="c-title">Full live-dataset census on unseen seeds and the complete v6 pack.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F06 requires (review R2 finding F06: The v6 acceptance and census gates are not complete for the final execution).</p><h4>Steps</h4><ol><li>Full live-dataset census on unseen seeds and the complete v6 pack.</li></ol><h4>Accept</h4><p>Full live-dataset census on unseen seeds and the complete v6 pack.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>hash lane, research lane D</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F06</dd></div></dl></div></details><details class="acc-case" id="case-R2-F06-R03" data-case="R2-F06-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F06-R03</span><span class="c-title">A failed experimental rule does not silently exhaust generation or bypass the intended resource requirement.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F06 requires (review R2 finding F06: The v6 acceptance and census gates are not complete for the final execution).</p><h4>Steps</h4><ol><li>A failed experimental rule does not silently exhaust generation or bypass the intended resource requirement.</li></ol><h4>Accept</h4><p>A failed experimental rule does not silently exhaust generation or bypass the intended resource requirement.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>hash lane, research lane D</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F06</dd></div></dl></div></details><details class="acc-case" id="case-R2-F07-R01" data-case="R2-F07-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F07-R01</span><span class="c-title">Same final v6 configuration: mine -&gt; evict -&gt; prove -&gt; aggregate -&gt; submit -&gt; rebuild -&gt; resume; no leaked reservations.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F07 requires (review R2 finding F07: VRAM admission and proving deadlines need one operator-level scheduler).</p><h4>Steps</h4><ol><li>Same final v6 configuration: mine -&gt; evict -&gt; prove -&gt; aggregate -&gt; submit -&gt; rebuild -&gt; resume; no leaked reservations.</li></ol><h4>Accept</h4><p>Same final v6 configuration: mine -&gt; evict -&gt; prove -&gt; aggregate -&gt; submit -&gt; rebuild -&gt; resume; no leaked reservations.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane, fleet lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F07</dd></div></dl></div></details><details class="acc-case" id="case-R2-F07-R02" data-case="R2-F07-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F07-R02</span><span class="c-title">OOM, process crash and stale work recover without losing wallet state or silently consuming power.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F07 requires (review R2 finding F07: VRAM admission and proving deadlines need one operator-level scheduler).</p><h4>Steps</h4><ol><li>OOM, process crash and stale work recover without losing wallet state or silently consuming power.</li></ol><h4>Accept</h4><p>OOM, process crash and stale work recover without losing wallet state or silently consuming power.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane, fleet lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F07</dd></div></dl></div></details><details class="acc-case" id="case-R2-F07-R03" data-case="R2-F07-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F07-R03</span><span class="c-title">16 GB+ simultaneous mode only after measured peak plus next-epoch headroom; smaller-card modes labelled separately.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F07 requires (review R2 finding F07: VRAM admission and proving deadlines need one operator-level scheduler).</p><h4>Steps</h4><ol><li>16 GB+ simultaneous mode only after measured peak plus next-epoch headroom; smaller-card modes labelled separately.</li></ol><h4>Accept</h4><p>16 GB+ simultaneous mode only after measured peak plus next-epoch headroom; smaller-card modes labelled separately.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane, fleet lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F07</dd></div></dl></div></details><details class="acc-case" id="case-R2-F08-R01" data-case="R2-F08-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F08-R01</span><span class="c-title">Report every eligible job outcome, including expired work; a bounded list cannot hide losses.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F08 requires (review R2 finding F08: The proving pipeline reports waste and deadline censoring, not sustained capacity).</p><h4>Steps</h4><ol><li>Report every eligible job outcome, including expired work; a bounded list cannot hide losses.</li></ol><h4>Accept</h4><p>Report every eligible job outcome, including expired work; a bounded list cannot hide losses.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, fleet lane, site (ops page)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F08</dd></div></dl></div></details><details class="acc-case" id="case-R2-F08-R02" data-case="R2-F08-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F08-R02</span><span class="c-title">Consumer tiers complete and receive payment for declared jobs before claims about income.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F08 requires (review R2 finding F08: The proving pipeline reports waste and deadline censoring, not sustained capacity).</p><h4>Steps</h4><ol><li>Consumer tiers complete and receive payment for declared jobs before claims about income.</li></ol><h4>Accept</h4><p>Consumer tiers complete and receive payment for declared jobs before claims about income.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, fleet lane, site (ops page)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F08</dd></div></dl></div></details><details class="acc-case" id="case-R2-F08-R03" data-case="R2-F08-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F08-R03</span><span class="c-title">Sustained real workload across class transitions, with restart/retry and no publisher intervention.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F08 requires (review R2 finding F08: The proving pipeline reports waste and deadline censoring, not sustained capacity).</p><h4>Steps</h4><ol><li>Sustained real workload across class transitions, with restart/retry and no publisher intervention.</li></ol><h4>Accept</h4><p>Sustained real workload across class transitions, with restart/retry and no publisher intervention.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, fleet lane, site (ops page)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F08</dd></div></dl></div></details><details class="acc-case" id="case-R2-F09-R01" data-case="R2-F09-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F09-R01</span><span class="c-title">Generate all pass/fail cells directly from the declared inequalities and inputs.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F09 requires (review R2 finding F09: The economic model explicitly retains a failed specialist case).</p><h4>Steps</h4><ol><li>Generate all pass/fail cells directly from the declared inequalities and inputs.</li></ol><h4>Accept</h4><p>Generate all pass/fail cells directly from the declared inequalities and inputs.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>research lane, floor lane 3, coordinator</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F09</dd></div></dl></div></details><details class="acc-case" id="case-R2-F09-R02" data-case="R2-F09-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F09-R02</span><span class="c-title">Independent feasibility and cost evaluation of the strongest modeled SRAM/hybrid opponent.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F09 requires (review R2 finding F09: The economic model explicitly retains a failed specialist case).</p><h4>Steps</h4><ol><li>Independent feasibility and cost evaluation of the strongest modeled SRAM/hybrid opponent.</li></ol><h4>Accept</h4><p>Independent feasibility and cost evaluation of the strongest modeled SRAM/hybrid opponent.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>research lane, floor lane 3, coordinator</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F09</dd></div></dl></div></details><details class="acc-case" id="case-R2-F09-R03" data-case="R2-F09-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F09-R03</span><span class="c-title">GPU owners and entrants remain viable under the approved scenario envelope without assuming chip absence or death.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F09 requires (review R2 finding F09: The economic model explicitly retains a failed specialist case).</p><h4>Steps</h4><ol><li>GPU owners and entrants remain viable under the approved scenario envelope without assuming chip absence or death.</li></ol><h4>Accept</h4><p>GPU owners and entrants remain viable under the approved scenario envelope without assuming chip absence or death.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>research lane, floor lane 3, coordinator</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F09</dd></div></dl></div></details><details class="acc-case" id="case-R2-F10-R01" data-case="R2-F10-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F10-R01</span><span class="c-title">Compare exact found nonce/hash sets with full-read mode, including all-hit overflow and zero-hit cases.</span><span class="c-pri"><span class="lbl">Priority </span>P2</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F10 requires (review R2 finding F10: CUDA production readback has an existing OpenCL optimization to borrow).</p><h4>Steps</h4><ol><li>Compare exact found nonce/hash sets with full-read mode, including all-hit overflow and zero-hit cases.</li></ol><h4>Accept</h4><p>Compare exact found nonce/hash sets with full-read mode, including all-hit overflow and zero-hit cases.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>worker lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F10</dd></div></dl></div></details><details class="acc-case" id="case-R2-F10-R02" data-case="R2-F10-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F10-R02</span><span class="c-title">Test stale jobs, high-32 rollover, tail batches and asynchronous buffer reuse.</span><span class="c-pri"><span class="lbl">Priority </span>P2</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F10 requires (review R2 finding F10: CUDA production readback has an existing OpenCL optimization to borrow).</p><h4>Steps</h4><ol><li>Test stale jobs, high-32 rollover, tail batches and asynchronous buffer reuse.</li></ol><h4>Accept</h4><p>Test stale jobs, high-32 rollover, tail batches and asynchronous buffer reuse.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>worker lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F10</dd></div></dl></div></details><details class="acc-case" id="case-R2-F10-R03" data-case="R2-F10-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F10-R03</span><span class="c-title">Compare production throughput and wall energy, not only the isolated kernel timer.</span><span class="c-pri"><span class="lbl">Priority </span>P2</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F10 requires (review R2 finding F10: CUDA production readback has an existing OpenCL optimization to borrow).</p><h4>Steps</h4><ol><li>Compare production throughput and wall energy, not only the isolated kernel timer.</li></ol><h4>Accept</h4><p>Compare production throughput and wall energy, not only the isolated kernel timer.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>worker lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F10</dd></div></dl></div></details><details class="acc-case" id="case-R2-F11-R01" data-case="R2-F11-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F11-R01</span><span class="c-title">Goal switch from an efficiency prior can explore higher core/power when policy allows.</span><span class="c-pri"><span class="lbl">Priority </span>P2</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F11 requires (review R2 finding F11: Ember needs workload-aware identity and objective-aware search).</p><h4>Steps</h4><ol><li>Goal switch from an efficiency prior can explore higher core/power when policy allows.</li></ol><h4>Accept</h4><p>Goal switch from an efficiency prior can explore higher core/power when policy allows.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ember lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F11</dd></div></dl></div></details><details class="acc-case" id="case-R2-F11-R02" data-case="R2-F11-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F11-R02</span><span class="c-title">Driver, workload, dataset, compiler and device changes invalidate certification while retaining optional hints.</span><span class="c-pri"><span class="lbl">Priority </span>P2</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F11 requires (review R2 finding F11: Ember needs workload-aware identity and objective-aware search).</p><h4>Steps</h4><ol><li>Driver, workload, dataset, compiler and device changes invalidate certification while retaining optional hints.</li></ol><h4>Accept</h4><p>Driver, workload, dataset, compiler and device changes invalidate certification while retaining optional hints.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ember lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F11</dd></div></dl></div></details><details class="acc-case" id="case-R2-F11-R03" data-case="R2-F11-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F11-R03</span><span class="c-title">Thermal/error/late-share events revert safely, including process or machine crash.</span><span class="c-pri"><span class="lbl">Priority </span>P2</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F11 requires (review R2 finding F11: Ember needs workload-aware identity and objective-aware search).</p><h4>Steps</h4><ol><li>Thermal/error/late-share events revert safely, including process or machine crash.</li></ol><h4>Accept</h4><p>Thermal/error/late-share events revert safely, including process or machine crash.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ember lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F11</dd></div></dl></div></details><details class="acc-case" id="case-R2-F12-R01" data-case="R2-F12-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F12-R01</span><span class="c-title">Crash before/after broadcast, response timeout, restart before snapshot: no duplicate payment or silent debt loss.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F12 requires (review R2 finding F12: Pool payouts have a broadcast-before-durable-intent window).</p><h4>Steps</h4><ol><li>Crash before/after broadcast, response timeout, restart before snapshot: no duplicate payment or silent debt loss.</li></ol><h4>Accept</h4><p>Crash before/after broadcast, response timeout, restart before snapshot: no duplicate payment or silent debt loss.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F12</dd></div></dl></div></details><details class="acc-case" id="case-R2-F12-R02" data-case="R2-F12-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F12-R02</span><span class="c-title">Same signed transaction retried, fee replacement reconciled by intent, not a new payment.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F12 requires (review R2 finding F12: Pool payouts have a broadcast-before-durable-intent window).</p><h4>Steps</h4><ol><li>Same signed transaction retried, fee replacement reconciled by intent, not a new payment.</li></ol><h4>Accept</h4><p>Same signed transaction retried, fee replacement reconciled by intent, not a new payment.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F12</dd></div></dl></div></details><details class="acc-case" id="case-R2-F12-R03" data-case="R2-F12-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F12-R03</span><span class="c-title">Receipt reorg and finality pause leave correct pending obligations.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F12 requires (review R2 finding F12: Pool payouts have a broadcast-before-durable-intent window).</p><h4>Steps</h4><ol><li>Receipt reorg and finality pause leave correct pending obligations.</li></ol><h4>Accept</h4><p>Receipt reorg and finality pause leave correct pending obligations.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F12</dd></div></dl></div></details><details class="acc-case" id="case-R2-F13-R01" data-case="R2-F13-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F13-R01</span><span class="c-title">Repeated authorization rejected or atomically replaces and cleans prior state.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F13 requires (review R2 finding F13: Pool admission and membership need bounded resources).</p><h4>Steps</h4><ol><li>Repeated authorization rejected or atomically replaces and cleans prior state.</li></ol><h4>Accept</h4><p>Repeated authorization rejected or atomically replaces and cleans prior state.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F13</dd></div></dl></div></details><details class="acc-case" id="case-R2-F13-R02" data-case="R2-F13-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F13-R02</span><span class="c-title">Oversized unterminated frame rejected within fixed memory/time budget.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F13 requires (review R2 finding F13: Pool admission and membership need bounded resources).</p><h4>Steps</h4><ol><li>Oversized unterminated frame rejected within fixed memory/time budget.</li></ol><h4>Accept</h4><p>Oversized unterminated frame rejected within fixed memory/time budget.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F13</dd></div></dl></div></details><details class="acc-case" id="case-R2-F13-R03" data-case="R2-F13-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F13-R03</span><span class="c-title">Slow clients and invalid share floods cannot grow unbounded member, nonce or outgoing state.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F13 requires (review R2 finding F13: Pool admission and membership need bounded resources).</p><h4>Steps</h4><ol><li>Slow clients and invalid share floods cannot grow unbounded member, nonce or outgoing state.</li></ol><h4>Accept</h4><p>Slow clients and invalid share floods cannot grow unbounded member, nonce or outgoing state.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F13</dd></div></dl></div></details><details class="acc-case" id="case-R2-F14-R01" data-case="R2-F14-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F14-R01</span><span class="c-title">Public build has no default arbitrary remote execution and a documented least-privilege boundary.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F14 requires (review R2 finding F14: Developer fleet control must not silently become the public client trust model).</p><h4>Steps</h4><ol><li>Public build has no default arbitrary remote execution and a documented least-privilege boundary.</li></ol><h4>Accept</h4><p>Public build has no default arbitrary remote execution and a documented least-privilege boundary.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane, relay lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F14</dd></div></dl></div></details><details class="acc-case" id="case-R2-F14-R02" data-case="R2-F14-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F14-R02</span><span class="c-title">Automatic updates off remains off for urgent manifests until explicit action.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F14 requires (review R2 finding F14: Developer fleet control must not silently become the public client trust model).</p><h4>Steps</h4><ol><li>Automatic updates off remains off for urgent manifests until explicit action.</li></ol><h4>Accept</h4><p>Automatic updates off remains off for urgent manifests until explicit action.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane, relay lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F14</dd></div></dl></div></details><details class="acc-case" id="case-R2-F14-R03" data-case="R2-F14-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F14-R03</span><span class="c-title">A compromised fleet/update signing key cannot silently acquire wallet access or activate a consensus change.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F14 requires (review R2 finding F14: Developer fleet control must not silently become the public client trust model).</p><h4>Steps</h4><ol><li>A compromised fleet/update signing key cannot silently acquire wallet access or activate a consensus change.</li></ol><h4>Accept</h4><p>A compromised fleet/update signing key cannot silently acquire wallet access or activate a consensus change.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane, relay lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F14</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-INT"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">18</span>INT</div><div class="acc-suite-t"><h2>INT: the master edition's integration gates (R1, the full-system review)</h2><p class="acc-sub">18 integration gates; each reads NOT RUN until its owner lane records a run</p></div><div class="acc-suite-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>the owner lanes per the coordinator's crosswalk</dd></div><div><dt>Gate</dt><dd>Integration gates closed</dd></div><div><dt>Fixtures</dt><dd>F0,F5</dd></div><div><dt>Plan pages</dt><dd>docs/plans/igneum-2.0-master/traceability.json integration_gates</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="INT: 18 cases: 0 passed under the standard, 0 running with team evidence, 1 failed, 17 not run, 0 deferred"><span class="seg g-fail" style="flex-grow:1" title="1 FAIL"></span><span class="seg g-notrun" style="flex-grow:17" title="17 NOT RUN"></span></div><span>18 cases: 0 passed under the standard, 0 running with team evidence, 1 failed, 17 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-INT-01" data-case="INT-01" data-state="NOT RUN"><summary><span class="c-id">INT-01</span><span class="c-title">Real proof H cannot authenticate a different statement under a warm cache.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-01 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Real proof H cannot authenticate a different statement under a warm cache.</li></ol><h4>Accept</h4><p>Real proof H cannot authenticate a different statement under a warm cache.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane (a6e8f84588b809d62)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-02" data-case="INT-02" data-state="NOT RUN"><summary><span class="c-id">INT-02</span><span class="c-title">Warm/cold/relay/restart/concurrent cache order does not change block or payout decisions; negative cache isolated.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-02 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Warm/cold/relay/restart/concurrent cache order does not change block or payout decisions; negative cache isolated.</li></ol><h4>Accept</h4><p>Warm/cold/relay/restart/concurrent cache order does not change block or payout decisions; negative cache isolated.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane (a6e8f84588b809d62)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-03" data-case="INT-03" data-state="NOT RUN"><summary><span class="c-id">INT-03</span><span class="c-title">Durable payout outbox survives every crash/RPC boundary without duplicate or lost liabilities.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 00:47 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-03 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Durable payout outbox survives every crash/RPC boundary without duplicate or lost liabilities.</li></ol><h4>Accept</h4><p>Durable payout outbox survives every crash/RPC boundary without duplicate or lost liabilities.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (a1c484c48a62948c2)</dd></div><div><dt>Run</dt><dd>pool-int-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-04" data-case="INT-04" data-state="NOT RUN"><summary><span class="c-id">INT-04</span><span class="c-title">Corrupt existing pool state, disk-full and reorg cause safe recovery, not silent empty balances.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 00:47 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-04 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Corrupt existing pool state, disk-full and reorg cause safe recovery, not silent empty balances.</li></ol><h4>Accept</h4><p>Corrupt existing pool state, disk-full and reorg cause safe recovery, not silent empty balances.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (a1c484c48a62948c2)</dd></div><div><dt>Run</dt><dd>pool-int-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-05" data-case="INT-05" data-state="NOT RUN"><summary><span class="c-id">INT-05</span><span class="c-title">The supplied finality implementation matches the approved anchor rule after &gt;window healing.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-05 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>The supplied finality implementation matches the approved anchor rule after &gt;window healing.</li></ol><h4>Accept</h4><p>The supplied finality implementation matches the approved anchor rule after &gt;window healing.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-06" data-case="INT-06" data-state="NOT RUN"><summary><span class="c-id">INT-06</span><span class="c-title">Recovery tests state and preserve their weaker fault bound; interfaces never label it as a stronger guarantee.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-06 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Recovery tests state and preserve their weaker fault bound; interfaces never label it as a stronger guarantee.</li></ol><h4>Accept</h4><p>Recovery tests state and preserve their weaker fault bound; interfaces never label it as a stronger guarantee.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-07" data-case="INT-07" data-state="FAIL"><summary><span class="c-id">INT-07</span><span class="c-title">One v6 object agrees in node, pool, CPU verifier and each supported GPU host across activation.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:43 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-07 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>One v6 object agrees in node, pool, CPU verifier and each supported GPU host across activation.</li></ol><h4>Accept</h4><p>One v6 object agrees in node, pool, CPU verifier and each supported GPU host across activation.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)</dd></div><div><dt>Run</dt><dd>canary-202-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-08" data-case="INT-08" data-state="NOT RUN"><summary><span class="c-id">INT-08</span><span class="c-title">Census, production acceptance, schedule counters and live-dataset tests use the identical frozen contract.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-08 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Census, production acceptance, schedule counters and live-dataset tests use the identical frozen contract.</li></ol><h4>Accept</h4><p>Census, production acceptance, schedule counters and live-dataset tests use the identical frozen contract.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-09" data-case="INT-09" data-state="NOT RUN"><summary><span class="c-id">INT-09</span><span class="c-title">Eight- and twelve-GiB epoch transitions recover deliberately without relying on repeated OOM/watchdog cycles.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-09 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Eight- and twelve-GiB epoch transitions recover deliberately without relying on repeated OOM/watchdog cycles.</li></ol><h4>Accept</h4><p>Eight- and twelve-GiB epoch transitions recover deliberately without relying on repeated OOM/watchdog cycles.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-10" data-case="INT-10" data-state="NOT RUN"><summary><span class="c-id">INT-10</span><span class="c-title">Metal/CUDA/OpenCL exact dataset geometry agrees; unsupported packs reject before launch.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-10 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Metal/CUDA/OpenCL exact dataset geometry agrees; unsupported packs reject before launch.</li></ol><h4>Accept</h4><p>Metal/CUDA/OpenCL exact dataset geometry agrees; unsupported packs reject before launch.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-11" data-case="INT-11" data-state="NOT RUN"><summary><span class="c-id">INT-11</span><span class="c-title">Only a memory-reserved proving job launches; mining buffers really release when required.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-11 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Only a memory-reserved proving job launches; mining buffers really release when required.</li></ol><h4>Accept</h4><p>Only a memory-reserved proving job launches; mining buffers really release when required.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-12" data-case="INT-12" data-state="NOT RUN"><summary><span class="c-id">INT-12</span><span class="c-title">Transient shard errors can retry safely; expiration, loss and paid work remain distinct durable outcomes.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-12 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Transient shard errors can retry safely; expiration, loss and paid work remain distinct durable outcomes.</li></ol><h4>Accept</h4><p>Transient shard errors can retry safely; expiration, loss and paid work remain distinct durable outcomes.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane (a6e8f84588b809d62) and fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-13" data-case="INT-13" data-state="NOT RUN"><summary><span class="c-id">INT-13</span><span class="c-title">Ember cannot retain a rate-ineligible prior; material workload changes invalidate incompatible profiles.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-13 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Ember cannot retain a rate-ineligible prior; material workload changes invalidate incompatible profiles.</li></ol><h4>Accept</h4><p>Ember cannot retain a rate-ineligible prior; material workload changes invalidate incompatible profiles.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ember lane (a04fe3451877e2ff0) with the app lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-14" data-case="INT-14" data-state="NOT RUN"><summary><span class="c-id">INT-14</span><span class="c-title">Protected helper and per-device leases restore owned settings on normal/abnormal exit; real ACL/security tests.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-14 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Protected helper and per-device leases restore owned settings on normal/abnormal exit; real ACL/security tests.</li></ol><h4>Accept</h4><p>Protected helper and per-device leases restore owned settings on normal/abnormal exit; real ACL/security tests.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ember lane (a04fe3451877e2ff0) with the app lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-15" data-case="INT-15" data-state="NOT RUN"><summary><span class="c-id">INT-15</span><span class="c-title">Public PoP replay is not session authorization; payout/server/network binding enforced.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 00:47 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-15 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Public PoP replay is not session authorization; payout/server/network binding enforced.</li></ol><h4>Accept</h4><p>Public PoP replay is not session authorization; payout/server/network binding enforced.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (a1c484c48a62948c2)</dd></div><div><dt>Run</dt><dd>pool-int-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-16" data-case="INT-16" data-state="NOT RUN"><summary><span class="c-id">INT-16</span><span class="c-title">Pool parsing/queues/connection and crypto budgets remain bounded under controlled adversarial traffic.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 00:47 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-16 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Pool parsing/queues/connection and crypto budgets remain bounded under controlled adversarial traffic.</li></ol><h4>Accept</h4><p>Pool parsing/queues/connection and crypto budgets remain bounded under controlled adversarial traffic.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (a1c484c48a62948c2)</dd></div><div><dt>Run</dt><dd>pool-int-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-17" data-case="INT-17" data-state="NOT RUN"><summary><span class="c-id">INT-17</span><span class="c-title">Missing oracle/keys/mandatory real-proof fixture blocks the applicable production acceptance gate.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-17 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Missing oracle/keys/mandatory real-proof fixture blocks the applicable production acceptance gate.</li></ol><h4>Accept</h4><p>Missing oracle/keys/mandatory real-proof fixture blocks the applicable production acceptance gate.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane (a6e8f84588b809d62)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-18" data-case="INT-18" data-state="NOT RUN"><summary><span class="c-id">INT-18</span><span class="c-title">Whole-system economics pass the strongest feasible adversary, including sunk development and multi-epoch survival.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-18 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Whole-system economics pass the strongest feasible adversary, including sunk development and multi-epoch survival.</li></ol><h4>Accept</h4><p>Whole-system economics pass the strongest feasible adversary, including sunk development and multi-epoch survival.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-VR"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">19</span>VR</div><div class="acc-suite-t"><h2>VR: the token value and network leadership rules (normative, proposed, requiring ratification)</h2><p class="acc-sub">40 normative rules from Igneum 2.0, Token Value &amp; Network Leadership 1.0-proposed (snapshot 2026-10-08); Supplement to original master and 128-case test standard; not a price/rank guarantee</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>founder (ratification); the owner role per rule</dd></div><div><dt>Gate</dt><dd>Ratification by the founder and each rule's owner role</dd></div><div><dt>Fixtures</dt><dd>F0</dd></div><div><dt>Plan pages</dt><dd>docs/plans/igneum-2.0-master/token-value/rules-and-gates.json rules</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="VR: 40 cases: 0 passed under the standard, 0 running with team evidence, 40 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:40" title="40 NOT RUN"></span></div><span>40 cases: 0 passed under the standard, 0 running with team evidence, 40 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-VR-01" data-case="VR-01" data-state="NOT RUN"><summary><span class="c-id">VR-01</span><span class="c-title">One monetary contract</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Ratify one maximum-supply, subsidy and change-policy contract. No unexplained tail escape, automatic emergency mint or price-triggered issuance.</li></ol><h4>Accept</h4><p>Ratify one maximum-supply, subsidy and change-policy contract. No unexplained tail escape, automatic emergency mint or price-triggered issuance.</p><h4>Evidence the case requires</h4><p>D01 decision, normative spec, executable supply tests and consistent public text.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + governance</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-02" data-case="VR-02" data-state="NOT RUN"><summary><span class="c-id">VR-02</span><span class="c-title">Independent supply accounting</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Make circulating, issued, burned, locked and maximum supply independently reproducible. Count bridges and wrappers without creating fictitious native supply.</li></ol><h4>Accept</h4><p>Make circulating, issued, burned, locked and maximum supply independently reproducible. Count bridges and wrappers without creating fictitious native supply.</p><h4>Evidence the case requires</h4><p>Two independent supply calculations with exact integer reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-03" data-case="VR-03" data-state="NOT RUN"><summary><span class="c-id">VR-03</span><span class="c-title">Equal opportunity at launch</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>No premine or privileged devnet conversion under the stated fair-launch policy. Publish efficient software and launch conditions before activation.</li></ol><h4>Accept</h4><p>No premine or privileged devnet conversion under the stated fair-launch policy. Publish efficient software and launch conditions before activation.</p><h4>Evidence the case requires</h4><p>Genesis audit, launch rehearsal, insider disclosures and public release history.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Release + ecosystem</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-04" data-case="VR-04" data-state="NOT RUN"><summary><span class="c-id">VR-04</span><span class="c-title">No artificial return promise</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Do not advertise guaranteed appreciation, passive returns without necessary work, a redemption floor or electricity-backed value.</li></ol><h4>Accept</h4><p>Do not advertise guaranteed appreciation, passive returns without necessary work, a redemption floor or electricity-backed value.</p><h4>Evidence the case requires</h4><p>Product terms, source of rewards and public-claim review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Governance + counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-05" data-case="VR-05" data-state="NOT RUN"><summary><span class="c-id">VR-05</span><span class="c-title">Fund necessary security</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Model miners, internal provers, minimum validators and maintenance separately through declining issuance. No assumption that an external sale automatically funds all roles.</li></ol><h4>Accept</h4><p>Model miners, internal provers, minimum validators and maintenance separately through declining issuance. No assumption that an external sale automatically funds all roles.</p><h4>Evidence the case requires</h4><p>Role-by-role cash flow, adverse scenarios and committed initial resources.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Economics + protocol</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-06" data-case="VR-06" data-state="NOT RUN"><summary><span class="c-id">VR-06</span><span class="c-title">Honest rule change</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Publish rationale, impact, adoption path and compatibility limits before a material monetary change. Do not pretend software can prevent all future voluntary forks.</li></ol><h4>Accept</h4><p>Publish rationale, impact, adoption path and compatibility limits before a material monetary change. Do not pretend software can prevent all future voluntary forks.</p><h4>Evidence the case requires</h4><p>Versioned proposals, reviewer comments, adoption and dissent documentation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + governance</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-07" data-case="VR-07" data-state="NOT RUN"><summary><span class="c-id">VR-07</span><span class="c-title">Transparent fee routing</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Every fee, burn, operator payment and optional Labs charge has an explicit source and recipient. No new team tax hidden in a commercial label.</li></ol><h4>Accept</h4><p>Every fee, burn, operator payment and optional Labs charge has an explicit source and recipient. No new team tax hidden in a commercial label.</p><h4>Evidence the case requires</h4><p>Executable fee tests and reconciliation to invoices/receipts.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Economics + protocol</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-08" data-case="VR-08" data-state="NOT RUN"><summary><span class="c-id">VR-08</span><span class="c-title">Separate value and money flows</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Distinguish job turnover, fees, operator income, Labs income, token holdings and market value. Do not count the same payment or saving twice.</li></ol><h4>Accept</h4><p>Distinguish job turnover, fees, operator income, Labs income, token holdings and market value. Do not count the same payment or saving twice.</p><h4>Evidence the case requires</h4><p>Reconciled flow diagram and reproducible metric definitions.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Economics + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-09" data-case="VR-09" data-state="NOT RUN"><summary><span class="c-id">VR-09</span><span class="c-title">Accessible hardware economics</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Fix the reference cohort and scenarios in advance. Allow the strongest feasible programmable multi-epoch specialist, including sunk development and alternative memory.</li></ol><h4>Accept</h4><p>Fix the reference cohort and scenarios in advance. Allow the strongest feasible programmable multi-epoch specialist, including sunk development and alternative memory.</p><h4>Evidence the case requires</h4><p>Approved original GPU/ADV/ROT/ECO profiles and independent review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>GPU + hardware reviewer</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-10" data-case="VR-10" data-state="NOT RUN"><summary><span class="c-id">VR-10</span><span class="c-title">Mandatory correct proofs</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>All activated proof decisions must bind their actual statement, kind and verifier independent of cache history. Missing trusted infrastructure must not disable enforcement.</li></ol><h4>Accept</h4><p>All activated proof decisions must bind their actual statement, kind and verifier independent of cache history. Missing trusted infrastructure must not disable enforcement.</p><h4>Evidence the case requires</h4><p>Native warm/cold/order/restart tests and positive/negative proof fixtures.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + proving</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-11" data-case="VR-11" data-state="NOT RUN"><summary><span class="c-id">VR-11</span><span class="c-title">Literal finality</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Define fault assumptions, authority continuity and recovery. Never present a weaker recovery certificate as the stronger irreversible guarantee.</li></ol><h4>Accept</h4><p>Define fault assumptions, authority continuity and recovery. Never present a weaker recovery certificate as the stronger irreversible guarantee.</p><h4>Evidence the case requires</h4><p>Native multi-node boundary tests and consumer label checks.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Consensus + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-12" data-case="VR-12" data-state="NOT RUN"><summary><span class="c-id">VR-12</span><span class="c-title">Retained operator authority</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Pooling variance or buying a service does not silently transfer keys, transaction selection or finality/governance control.</li></ol><h4>Accept</h4><p>Pooling variance or buying a service does not silently transfer keys, transaction selection or finality/governance control.</p><h4>Evidence the case requires</h4><p>Key/template substitution tests and explicit delegation contracts.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + pool</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-13" data-case="VR-13" data-state="NOT RUN"><summary><span class="c-id">VR-13</span><span class="c-title">Safe custody and consent</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Private keys, spending limits, signing displays and recovery choices remain under explicit user authority. Defaults must not conceal broad powers.</li></ol><h4>Accept</h4><p>Private keys, spending limits, signing displays and recovery choices remain under explicit user authority. Defaults must not conceal broad powers.</p><h4>Evidence the case requires</h4><p>Wallet security review and independent user/recovery exercises.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Wallet + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-14" data-case="VR-14" data-state="NOT RUN"><summary><span class="c-id">VR-14</span><span class="c-title">Portable verification</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Balances and receipts authenticate their roots, successful outcome and trust anchors. Necessary reconstruction data has a documented availability path.</li></ol><h4>Accept</h4><p>Balances and receipts authenticate their roots, successful outcome and trust anchors. Necessary reconstruction data has a documented availability path.</p><h4>Evidence the case requires</h4><p>Independent receipt/client verification with hostile inputs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Wallet + protocol</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-15" data-case="VR-15" data-state="NOT RUN"><summary><span class="c-id">VR-15</span><span class="c-title">Price real resources</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Bound execution, verification and storage costs. Sponsored transactions have limits. No deliberate congestion solely to increase a token metric.</li></ol><h4>Accept</h4><p>Bound execution, verification and storage costs. Sponsored transactions have limits. No deliberate congestion solely to increase a token metric.</p><h4>Evidence the case requires</h4><p>Minimum-node tests and fee/sponsor-abuse scenarios.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + economics</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-16" data-case="VR-16" data-state="NOT RUN"><summary><span class="c-id">VR-16</span><span class="c-title">No fragile stable-value promise</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Any stable-value product has explicit issuer, reserve/redemption rights, permissions and risks. No native-backed peg used merely to manufacture demand.</li></ol><h4>Accept</h4><p>Any stable-value product has explicit issuer, reserve/redemption rights, permissions and risks. No native-backed peg used merely to manufacture demand.</p><h4>Evidence the case requires</h4><p>Independent diligence, risk limits and legal assessment before release.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Application + counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-17" data-case="VR-17" data-state="NOT RUN"><summary><span class="c-id">VR-17</span><span class="c-title">Optional bounded bridges</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Bridge exposure is separate from core security. No bridge is mandatory for genesis or allowed to redefine base-chain finality after a loss.</li></ol><h4>Accept</h4><p>Bridge exposure is separate from core security. No bridge is mandatory for genesis or allowed to redefine base-chain finality after a loss.</p><h4>Evidence the case requires</h4><p>External security review, loss limits and failure/isolation tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Application + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-18" data-case="VR-18" data-state="NOT RUN"><summary><span class="c-id">VR-18</span><span class="c-title">Open work settlement</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Jobs bind program, inputs, result, verifier, deadline and payment. Gateways are replaceable and Labs approval is not required for ordinary work.</li></ol><h4>Accept</h4><p>Jobs bind program, inputs, result, verifier, deadline and payment. Gateways are replaceable and Labs approval is not required for ordinary work.</p><h4>Evidence the case requires</h4><p>Independent request-to-paid-result test and state reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + ecosystem</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-19" data-case="VR-19" data-state="NOT RUN"><summary><span class="c-id">VR-19</span><span class="c-title">Obligation-based service bonds</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Deposits secure a specific obligation, not consensus influence. Size and failure conditions must preserve small-operator paths and handle collateral decline.</li></ol><h4>Accept</h4><p>Deposits secure a specific obligation, not consensus influence. Size and failure conditions must preserve small-operator paths and handle collateral decline.</p><h4>Evidence the case requires</h4><p>Economic and adversarial reservation/default tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Economics + application</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-20" data-case="VR-20" data-state="NOT RUN"><summary><span class="c-id">VR-20</span><span class="c-title">Independent developer access</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Publish complete standards, fixtures and tooling. Grants reward useful maintained deliverables rather than deployments or price effects.</li></ol><h4>Accept</h4><p>Publish complete standards, fixtures and tooling. Grants reward useful maintained deliverables rather than deployments or price effects.</p><h4>Evidence the case requires</h4><p>Unaffiliated integration and maintenance evidence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Ecosystem</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-21" data-case="VR-21" data-state="NOT RUN"><summary><span class="c-id">VR-21</span><span class="c-title">Committed maintenance</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Essential maintenance and audits need a funded runway with stress accounting, distinct from hoped-for appreciation or fundraising.</li></ol><h4>Accept</h4><p>Essential maintenance and audits need a funded runway with stress accounting, distinct from hoped-for appreciation or fundraising.</p><h4>Evidence the case requires</h4><p>At least approved P13 runway, commitments and role costs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Maintainers + finance</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-22" data-case="VR-22" data-state="NOT RUN"><summary><span class="c-id">VR-22</span><span class="c-title">Founder independence</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Routine block, job, payment and recovery paths must not require a founder credential or undocumented manual action.</li></ol><h4>Accept</h4><p>Routine block, job, payment and recovery paths must not require a founder credential or undocumented manual action.</p><h4>Evidence the case requires</h4><p>Real founder-absence exercises and intervention ledger.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Operations + independent reviewer</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-23" data-case="VR-23" data-state="NOT RUN"><summary><span class="c-id">VR-23</span><span class="c-title">Measure effective control</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Report operator, pool, hosting, service and client dependencies with attribution limits. Keys and addresses are not people.</li></ol><h4>Accept</h4><p>Report operator, pool, hosting, service and client dependencies with attribution limits. Keys and addresses are not people.</p><h4>Evidence the case requires</h4><p>Dependency/control map with uncertainty and removal experiments.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Measurement + operations</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-24" data-case="VR-24" data-state="NOT RUN"><summary><span class="c-id">VR-24</span><span class="c-title">Reproducible secure release</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Pin source, binaries, rules, guests/keys and activation. Provenance is necessary but not sufficient for correctness.</li></ol><h4>Accept</h4><p>Pin source, binaries, rules, guests/keys and activation. Provenance is necessary but not sufficient for correctness.</p><h4>Evidence the case requires</h4><p>Independent builds, artifact verification and scoped review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Release + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-25" data-case="VR-25" data-state="NOT RUN"><summary><span class="c-id">VR-25</span><span class="c-title">Consent-preserving incident response</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Separate public/developer authority. Urgency must not silently override installation or grant arbitrary execution. Disclose material incidents and retest.</li></ol><h4>Accept</h4><p>Separate public/developer authority. Urgency must not silently override installation or grant arbitrary execution. Disclose material incidents and retest.</p><h4>Evidence the case requires</h4><p>Compromised-key, unsafe-update and recovery drills.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Release + operations</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-26" data-case="VR-26" data-state="NOT RUN"><summary><span class="c-id">VR-26</span><span class="c-title">Honest access and liquidity</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Use functional deposits/withdrawals and executable depth, not ticker count or fabricated volume. Never restrict exit to simulate value.</li></ol><h4>Accept</h4><p>Use functional deposits/withdrawals and executable depth, not ticker count or fabricated volume. Never restrict exit to simulate value.</p><h4>Evidence the case requires</h4><p>Independent access-route and two-sided liquidity observations.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Ecosystem + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-27" data-case="VR-27" data-state="NOT RUN"><summary><span class="c-id">VR-27</span><span class="c-title">Transparent treasury relationships</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Disclose material grants, insider holdings, inventory and market-making mandates. No wash trades or hidden price-support promises.</li></ol><h4>Accept</h4><p>Disclose material grants, insider holdings, inventory and market-making mandates. No wash trades or hidden price-support promises.</p><h4>Evidence the case requires</h4><p>Mandate register, reconciled accounts and conflict policy.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Treasury + counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-28" data-case="VR-28" data-state="NOT RUN"><summary><span class="c-id">VR-28</span><span class="c-title">Auditable metrics</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Publish definitions, raw/adjusted views, sampling, attribution uncertainty and missing data. No subsidy-hidden demand or censored failed jobs.</li></ol><h4>Accept</h4><p>Publish definitions, raw/adjusted views, sampling, attribution uncertainty and missing data. No subsidy-hidden demand or censored failed jobs.</p><h4>Evidence the case requires</h4><p>Data lineage, conservation checks and independent replay.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-29" data-case="VR-29" data-state="NOT RUN"><summary><span class="c-id">VR-29</span><span class="c-title">Fair comparison universe</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Define eligible peers and exclusions before observing rankings. Include qualifying new entrants and preserve unknown values.</li></ol><h4>Accept</h4><p>Define eligible peers and exclusions before observing rankings. Include qualifying new entrants and preserve unknown values.</p><h4>Evidence the case requires</h4><p>Independent peer census and versioned comparison protocol.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Measurement + external panel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-30" data-case="VR-30" data-state="NOT RUN"><summary><span class="c-id">VR-30</span><span class="c-title">Scoped claims only</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Every leadership claim names its metric, universe, period and limits. A measured price rank does not certify overall safety or future leadership.</li></ol><h4>Accept</h4><p>Every leadership claim names its metric, universe, period and limits. A measured price rank does not certify overall safety or future leadership.</p><h4>Evidence the case requires</h4><p>Claim register with evidence, expiry and legal signoff.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Governance + counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-31" data-case="VR-31" data-state="NOT RUN"><summary><span class="c-id">VR-31</span><span class="c-title">Evidence before pass</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Pre-register thresholds; missing inputs block gates; corrections preserve failed results. No aggregate score can waive core safety or economic failure.</li></ol><h4>Accept</h4><p>Pre-register thresholds; missing inputs block gates; corrections preserve failed results. No aggregate score can waive core safety or economic failure.</p><h4>Evidence the case requires</h4><p>Frozen test charter and versioned evidence packets.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Independent acceptance panel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-32" data-case="VR-32" data-state="NOT RUN"><summary><span class="c-id">VR-32</span><span class="c-title">Real adoption</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Measure unaffiliated retained users and useful repeat activity with incentives identified. Do not require buying IGN to participate in a study.</li></ol><h4>Accept</h4><p>Measure unaffiliated retained users and useful repeat activity with incentives identified. Do not require buying IGN to participate in a study.</p><h4>Evidence the case requires</h4><p>Cohort definitions, attrition, usage and subsidy audit.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Product + ecosystem</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-33" data-case="VR-33" data-state="NOT RUN"><summary><span class="c-id">VR-33</span><span class="c-title">AI earns admission</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>AI is an optional workload category, not a guaranteed-margin network identity. Price full costs and adverse demand before expansion.</li></ol><h4>Accept</h4><p>AI is an optional workload category, not a guaranteed-margin network identity. Price full costs and adverse demand before expansion.</p><h4>Evidence the case requires</h4><p>Workload-specific benchmark, repeat demand and verification policy.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Compute + economics</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-34" data-case="VR-34" data-state="NOT RUN"><summary><span class="c-id">VR-34</span><span class="c-title">Bound agent spending</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Automated buyers have scoped budgets, permissions, expiry, revocation and logs. Untrusted prompts never alter base permissions.</li></ol><h4>Accept</h4><p>Automated buyers have scoped budgets, permissions, expiry, revocation and logs. Untrusted prompts never alter base permissions.</p><h4>Evidence the case requires</h4><p>Prompt/input adversarial tests and payment-loss caps.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Application + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-35" data-case="VR-35" data-state="NOT RUN"><summary><span class="c-id">VR-35</span><span class="c-title">Cryptographic migration readiness</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Maintain a full algorithm inventory and reviewed transition plan. No quantum-proof claim from one component or speculative attack date.</li></ol><h4>Accept</h4><p>Maintain a full algorithm inventory and reviewed transition plan. No quantum-proof claim from one component or speculative attack date.</p><h4>Evidence the case requires</h4><p>Expert review, downgrade/migration tests and annual refresh.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Cryptography + protocol</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-36" data-case="VR-36" data-state="NOT RUN"><summary><span class="c-id">VR-36</span><span class="c-title">Separate proof, truth and privacy</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Execution validity does not establish real-world input truth, AI answer quality or confidentiality. State trust and data exposure for each service.</li></ol><h4>Accept</h4><p>Execution validity does not establish real-world input truth, AI answer quality or confidentiality. State trust and data exposure for each service.</p><h4>Evidence the case requires</h4><p>Threat model and user-facing guarantee audit.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Security + product</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-37" data-case="VR-37" data-state="NOT RUN"><summary><span class="c-id">VR-37</span><span class="c-title">Scale within verification budgets</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Throughput, data and state growth must preserve the declared minimum-node and reconstruction capabilities. Reprice security after fee compression.</li></ol><h4>Accept</h4><p>Throughput, data and state growth must preserve the declared minimum-node and reconstruction capabilities. Reprice security after fee compression.</p><h4>Evidence the case requires</h4><p>Cold-path capacity, bootstrap, pruning and provider-removal tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + operations</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-38" data-case="VR-38" data-state="NOT RUN"><summary><span class="c-id">VR-38</span><span class="c-title">Honest energy accounting</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Report complete-system energy and role allocation. Avoid double-counting joint work or making unsupported carbon/marginal-transaction claims.</li></ol><h4>Accept</h4><p>Report complete-system energy and role allocation. Avoid double-counting joint work or making unsupported carbon/marginal-transaction claims.</p><h4>Evidence the case requires</h4><p>Calibrated wall tests and documented environmental methodology.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>GPU + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-39" data-case="VR-39" data-state="NOT RUN"><summary><span class="c-id">VR-39</span><span class="c-title">Activity-specific legal approval</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Obtain counsel review for actual audiences and activities. No-presale, fair-launch or decentralised labels are not blanket legal exemptions.</li></ol><h4>Accept</h4><p>Obtain counsel review for actual audiences and activities. No-presale, fair-launch or decentralised labels are not blanket legal exemptions.</p><h4>Evidence the case requires</h4><p>Jurisdiction/activity matrix and approved external communications.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-40" data-case="VR-40" data-state="NOT RUN"><summary><span class="c-id">VR-40</span><span class="c-title">No indispensable administrator</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>A useful company, token holder, pool, AI agent or funding body receives no hidden power over balances, issuance or canonical history.</li></ol><h4>Accept</h4><p>A useful company, token holder, pool, AI agent or funding body receives no hidden power over balances, issuance or canonical history.</p><h4>Evidence the case requires</h4><p>Authority inventory, isolation tests and independent operation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + governance</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-TV"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">20</span>TV</div><div class="acc-suite-t"><h2>TV: the token value and network leadership gates (proposed; no gate executed)</h2><p class="acc-sub">32 gates from Igneum 2.0, Token Value &amp; Network Leadership 1.0-proposed (snapshot 2026-10-08); scope CORE, CAPABILITY IF ENABLED or LEADERSHIP CLAIM as the file gives it; Supplement to original master and 128-case test standard; not a price/rank guarantee</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>the owner role per gate</dd></div><div><dt>Gate</dt><dd>Token value gates closed</dd></div><div><dt>Fixtures</dt><dd>F0</dd></div><div><dt>Plan pages</dt><dd>docs/plans/igneum-2.0-master/token-value/rules-and-gates.json gates</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="TV: 32 cases: 0 passed under the standard, 0 running with team evidence, 32 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:32" title="32 NOT RUN"></span></div><span>32 cases: 0 passed under the standard, 0 running with team evidence, 32 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-TV-01" data-case="TV-01" data-state="NOT RUN"><summary><span class="c-id">TV-01</span><span class="c-title">Resolve and freeze the monetary contract</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Supply, tail, fee and recovery documents plus exact proposed release.</p><h4>Steps</h4><ol><li>Reconcile D01-D06 with protocol/economic/counsel review. Freeze thresholds and all interfaces before confirmatory tests.</li></ol><h4>Accept</h4><p>No conflicting normative policy; every material choice has a signed rationale, version, adoption path and tests. Unresolved core choice is BLOCKED.</p><h4>Evidence the case requires</h4><p>Decision log, signed specification, release manifest, test charter.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Protocol + independent panel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-02" data-case="TV-02" data-state="NOT RUN"><summary><span class="c-id">TV-02</span><span class="c-title">Reproduce complete supply accounting</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Two independent implementations; genesis and representative boundary/reorg fixtures.</p><h4>Steps</h4><ol><li>Recompute issued, paid, burned, locked and outstanding amounts through subsidy transitions, rollback/replay and duplicate records.</li></ol><h4>Accept</h4><p>Exact integer agreement; no unaccounted creation, duplicate supply or cap breach under the ratified policy. Restricted wrappers are not extra native supply.</p><h4>Evidence the case requires</h4><p>Machine-readable ledgers, vectors, independent signoff.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Protocol + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-03" data-case="TV-03" data-state="NOT RUN"><summary><span class="c-id">TV-03</span><span class="c-title">Fair launch and early distribution</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Public binaries, source, mining modes, launch notice and insider inventory.</p><h4>Steps</h4><ol><li>Rehearse from clean outsider machines; audit genesis allocations and devnet balances; simulate arrival times under alternative emission schedules.</li></ol><h4>Accept</h4><p>Zero undisclosed allocation or privileged conversion; approved notice/support window and cohort pass; distribution analysis includes delayed entrants without guaranteeing equal ownership.</p><h4>Evidence the case requires</h4><p>Genesis report, dated releases, disclosure register, simulation inputs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Release + ecosystem</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-04" data-case="TV-04" data-state="NOT RUN"><summary><span class="c-id">TV-04</span><span class="c-title">Security budget without price rescue</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Ratified reward/fee rules; role costs; horizons 1, 5, 10 and 20 years.</p><h4>Steps</h4><ol><li>Model falling issuance, fee volatility and .25x/1x/4x/10x revenue, zero external jobs and -90% price. Separate role receipts and funding.</li></ol><h4>Accept</h4><p>Approved viable scenarios fund minimum required roles without hidden issuance or assumed appreciation; failure regions stated. Collapse scenarios need safe behaviour, not universal profit.</p><h4>Evidence the case requires</h4><p>Reproducible cash-flow model, assumptions, independent review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Economics + protocol</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-05" data-case="TV-05" data-state="NOT RUN"><summary><span class="c-id">TV-05</span><span class="c-title">Strongest surviving specialist</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Pinned candidate/cohort; cheapest supported physical designs including SRAM/hybrid.</p><h4>Steps</h4><ol><li>Apply original ADV/GPU/ECO profiles with multi-epoch survival and development sunk. Reprice alternative state and memory implementations.</li></ol><h4>Accept</h4><p>All approved core energy and total-cost bounds pass with uncertainty; no unresolved feasible dominating design. Unknown feasibility blocks the broad claim.</p><h4>Evidence the case requires</h4><p>Design files, wall results, sensitivity model, two independent hardware opinions.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Hardware reviewer + economics</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-06" data-case="TV-06" data-state="NOT RUN"><summary><span class="c-id">TV-06</span><span class="c-title">Every fee and payment reconciles</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Native rules, payer contract and optional Labs/service invoices.</p><h4>Steps</h4><ol><li>Execute gas, proof, developer, pool, burn, sponsor and refund paths, including rounding, abort, retry and zero-demand cases.</li></ol><h4>Accept</h4><p>No unexplained recipient or double count; statements/invoices match exact contract outcomes. Network turnover never labelled Labs revenue or permanent holding demand.</p><h4>Evidence the case requires</h4><p>Flow ledger, fixtures, invoice examples, reviewed public fee table.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Economics + application</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-07" data-case="TV-07" data-state="NOT RUN"><summary><span class="c-id">TV-07</span><span class="c-title">Ownership-critical engineering closure</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Original master findings mapped to current release with genuine proof fixtures.</p><h4>Steps</h4><ol><li>Run native cache-order, fail-closed activation, payout crash and finality tests; reproduce fixed cases in independent environments.</li></ol><h4>Accept</h4><p>No unresolved critical/high finding or counterexample within the approved guarantee; all applicable original safety gates pass. Reproducing a defect is not closure.</p><h4>Evidence the case requires</h4><p>Native outputs, manifests, scoped audit, issue-by-issue closure.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Protocol + independent security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-08" data-case="TV-08" data-state="NOT RUN"><summary><span class="c-id">TV-08</span><span class="c-title">Custody and recovery usability</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Declared wallet/hardware combinations; 30 new participants, at least 15 non-miners.</p><h4>Steps</h4><ol><li>Perform receive, preview/sign, limit, recovery and revocation tasks with valueless funds; inject wrong network/address and malicious prompts.</li></ol><h4>Accept</h4><p>Zero unauthorised transfer or secret disclosure; at least 90% complete the approved safe task without private help. Report confidence limitations and all failures.</p><h4>Evidence the case requires</h4><p>Task protocol, anonymised results, security review, recovery vectors.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Wallet + independent users</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-09" data-case="TV-09" data-state="NOT RUN"><summary><span class="c-id">TV-09</span><span class="c-title">Independently verifiable settlement</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Proof/receipt client without Labs RPC; normal and recovery certificates.</p><h4>Steps</h4><ol><li>Verify successful/failed transfers, wrong asset/amount, stale roots, fake voter lists, invalid proofs and withheld data.</li></ol><h4>Accept</h4><p>All invalid claims refused; valid ordinary transfers verify within approved resource limits; weaker recovery and unavailable data never shown as stronger finality.</p><h4>Evidence the case requires</h4><p>Offline fixtures, consumer traces and independent implementation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Wallet + consensus</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-10" data-case="TV-10" data-state="NOT RUN"><summary><span class="c-id">TV-10</span><span class="c-title">Minimum-node and sponsored-use limits</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Approved minimum validator and sponsor budgets under final workload.</p><h4>Steps</h4><ol><li>Run cold proof verification, expensive invalid inputs, state growth, paymaster drain attempts and overloaded bursts.</li></ol><h4>Accept</h4><p>Original capacity/security profiles pass; budgets remain bounded; no proof skipped to catch up and no sponsor can spend outside authorised scope.</p><h4>Evidence the case requires</h4><p>Cold-path profiles, stress traces, sponsor negative tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Protocol + application</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-11" data-case="TV-11" data-state="NOT RUN"><summary><span class="c-id">TV-11</span><span class="c-title">Pooled payments without authority loss</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Independent pool/member clients and durable payment state.</p><h4>Steps</h4><ol><li>Inject key/template substitution, reauthorisation, crash/RPC ambiguity, receipt reorg and hostile bounded inputs.</li></ol><h4>Accept</h4><p>No duplicate/lost liability or unauthorised authority change; member can verify delegated powers and change pools. Session resource limits hold.</p><h4>Evidence the case requires</h4><p>Ledger replay, signed work fixtures and pool removal test.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Pool + independent operators</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-12" data-case="TV-12" data-state="NOT RUN"><summary><span class="c-id">TV-12</span><span class="c-title">Reproducible and consented software</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Release manifest, build dependencies, update keys and public installer.</p><h4>Steps</h4><ol><li>Two independent parties build/verify; simulate compromised key, stale package, rollback, urgency and missing fixtures.</li></ol><h4>Accept</h4><p>No hidden consensus variation or arbitrary default remote control; update-off remains respected; mandatory unavailable fixtures block acceptance.</p><h4>Evidence the case requires</h4><p>Attestations, independent hashes, key drill, installer/ACL review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Release + independent security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-13" data-case="TV-13" data-state="NOT RUN"><summary><span class="c-id">TV-13</span><span class="c-title">Committed maintenance coverage</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Costed roles, commitments and monthly cash dates.</p><h4>Steps</h4><ol><li>Audit at least 12 months of approved maintenance coverage; stress IGN-denominated resources and provider withdrawal.</li></ol><h4>Accept</h4><p>Original P13 satisfied without counting future appreciation or unsigned pledges; essential functions have funded substitutes and explicit shortfall response.</p><h4>Evidence the case requires</h4><p>Contracts/grants or funding proof, stress cash flow, responsibility register.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Maintainers + independent finance</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-14" data-case="TV-14" data-state="NOT RUN"><summary><span class="c-id">TV-14</span><span class="c-title">Founder-absent operating exercise</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Independent builds/operators; founder services, keys and manual help removed.</p><h4>Steps</h4><ol><li>Run 30 real days, then satisfy the original 90-day observation programme; cross boundaries, remove major providers and record all interventions.</li></ol><h4>Accept</h4><p>Approved original independence/reliability gates pass; no unpublished founder action or privileged override. Simulated long partitions are labelled separately.</p><h4>Evidence the case requires</h4><p>Dependency map, availability logs, intervention and payer ledger.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Independent operations panel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-15" data-case="TV-15" data-state="NOT RUN"><summary><span class="c-id">TV-15</span><span class="c-title">Governance and authority boundaries</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Every control/activation threshold, treasury power and application admin interface.</p><h4>Steps</h4><ol><li>Exercise hostile coalitions, absent voters, old clients and compromised non-consensus keys; test refusal and recovery.</li></ol><h4>Accept</h4><p>No actor gains undeclared issuance/balance/history authority. Every activation follows the ratified safe procedure; ambiguous threshold or recovery remains BLOCKED.</p><h4>Evidence the case requires</h4><p>Authority model, scenarios, native outcomes and independent review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Protocol + governance</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-16" data-case="TV-16" data-state="NOT RUN"><summary><span class="c-id">TV-16</span><span class="c-title">Two functional independent access routes</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>At least two unaffiliated custody/exchange/payment routes with disclosed shared infrastructure.</p><h4>Steps</h4><ol><li>Complete small controlled deposits, withdrawals, outage and reconciliation tests; identify actual custody and settlement dependencies.</li></ol><h4>Accept</h4><p>Both settle correctly; neither is merely a front end to the same indispensable provider. Gaps and jurisdiction limits visible; no listing assumed from a logo.</p><h4>Evidence the case requires</h4><p>Settlement records, dependency map and third-party confirmation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ecosystem + independent reviewer</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-17" data-case="TV-17" data-state="NOT RUN"><summary><span class="c-id">TV-17</span><span class="c-title">Supply-price-liquidity measurement</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Frozen sources, price filters, circulating/free-float definitions and order-size bands.</p><h4>Steps</h4><ol><li>Collect 90 real days; independently replay supply and prices; measure both buy/sell execution costs and withdrawal availability.</li></ol><h4>Accept</h4><p>At least 95% daily coverage; exact supply reconciliation; no fabricated missing data. Sparse liquidity invalidates broad liquidity claims, not automatically the arithmetic cap.</p><h4>Evidence the case requires</h4><p>Raw snapshots, methodology/code, gap ledger, audit.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Measurement steward</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-18" data-case="TV-18" data-state="NOT RUN"><summary><span class="c-id">TV-18</span><span class="c-title">Real versus incentivised demand</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Customer/job/transaction definitions with privacy-respecting attribution and subsidy data.</p><h4>Steps</h4><ol><li>Reconcile raw/adjusted activity, self-dealing controls and incentives; test whether circular activity earns more than its irrecoverable cost.</li></ol><h4>Accept</h4><p>All subsidies and known related activity separated; useful demand not inferred from gross volume alone; abusive incentive loop closed before scaling rewards.</p><h4>Evidence the case requires</h4><p>Accounting model, filter logic, sensitivity and independent replay.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Economics + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-19" data-case="TV-19" data-state="NOT RUN"><summary><span class="c-id">TV-19</span><span class="c-title">Independent developer adoption</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Public kit and at least five unaffiliated developers with declared tasks.</p><h4>Steps</h4><ol><li>Build useful integrations without private dependencies; have two independent maintainers update the kit; record obstacles and adoption reason.</li></ol><h4>Accept</h4><p>All declared core integration paths work; at least five usable integrations and two maintainer reproductions. Empty subsidised deployments do not qualify.</p><h4>Evidence the case requires</h4><p>Repos, task traces, user evidence and maintenance records.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ecosystem + external developers</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-20" data-case="TV-20" data-state="NOT RUN"><summary><span class="c-id">TV-20</span><span class="c-title">Programmable payment acceptance</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Versioned library, independent application, user/sponsor limits and receipt path.</p><h4>Steps</h4><ol><li>Execute simple/conditional/recurring payments, revocations, expiry, failed outcome and duplicate invoice cases.</li></ol><h4>Accept</h4><p>No unauthorised spend or double settlement; successful transfer independently evidenced; subjective conditions disclose adjudicator/trust.</p><h4>Evidence the case requires</h4><p>Contracts, negative vectors, user task record, security review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Application + wallet</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-21" data-case="TV-21" data-state="NOT RUN"><summary><span class="c-id">TV-21</span><span class="c-title">Useful paid proof demand</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Exact workload and final hardware path; three unrelated buyers and approved COM profile.</p><h4>Steps</h4><ol><li>Observe repeat purchases under original P14/P16 conditions, full job outcomes and operator/service costs.</li></ol><h4>Accept</h4><p>All applicable COM targets met without hidden reimbursement. Queue expiry not counted as success. A monetary-only scope cannot claim this gate passed by exclusion.</p><h4>Evidence the case requires</h4><p>Buyer evidence, cost ledger, all-job traces and independent review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Proving + independent customers</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-22" data-case="TV-22" data-state="NOT RUN"><summary><span class="c-id">TV-22</span><span class="c-title">Replaceable work-market gateway</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Two independent gateway implementations and job/settlement specification.</p><h4>Steps</h4><ol><li>Create jobs, switch providers/gateways, fail one service and deliver the same objective result using public inputs.</li></ol><h4>Accept</h4><p>Correct payment/result without Labs approval; no concealed central dispatcher or irreversible dependency. External-chain receipts labelled separately.</p><h4>Evidence the case requires</h4><p>Gateway traces, escrow reconciliation, dependency-removal run.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Application + independent operators</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-23" data-case="TV-23" data-state="NOT RUN"><summary><span class="c-id">TV-23</span><span class="c-title">Obligation-based deposits</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Proposed bond/default contract and volatile-collateral scenarios.</p><h4>Steps</h4><ol><li>Test reservation abandonment, invalid inputs, network pause, -90% collateral value and malicious claims.</li></ol><h4>Accept</h4><p>No consensus influence bought; default reason objective; compensation limits explicit; viable small-operator participation and approved risk bounds.</p><h4>Evidence the case requires</h4><p>Adversarial model, state tests, risk/legal review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Economics + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-24" data-case="TV-24" data-state="NOT RUN"><summary><span class="c-id">TV-24</span><span class="c-title">AI earns a separate commercial case</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>One bounded model/job, provider hardware, verification tier and licences.</p><h4>Steps</h4><ol><li>Benchmark full delivery vs actual alternatives; test 90% lower unit prices, demand collapse, private-data exposure and substituted models.</li></ol><h4>Accept</h4><p>Approved service economics and buyer gates pass; correctness/truth/privacy distinguished. No native price or perpetual yield assumption.</p><h4>Evidence the case requires</h4><p>End-to-end costs, repeat demand, licence/threat review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Compute + independent reviewer</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-25" data-case="TV-25" data-state="NOT RUN"><summary><span class="c-id">TV-25</span><span class="c-title">Bounded machine purchasing</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Approved account/paymaster permissions and chosen x402/agent interfaces.</p><h4>Steps</h4><ol><li>Inject hostile outputs/prompts, replayed requests, recursive spending, revoked permissions and gateway failure.</li></ol><h4>Accept</h4><p>Spend never exceeds authorised destination/time/amount scope; no instruction changes authority. Draft standard support is described accurately.</p><h4>Evidence the case requires</h4><p>Property tests, loss-cap proof, revocation/audit logs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Application + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-26" data-case="TV-26" data-state="NOT RUN"><summary><span class="c-id">TV-26</span><span class="c-title">Cryptographic migration readiness</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Complete key/proof/transport/update inventory and external cryptographic review.</p><h4>Steps</h4><ol><li>Rehearse versioned signature/proof migration, downgrade/replay, mixed clients, inactive owners and minimum-node overhead.</li></ol><h4>Accept</h4><p>No unreviewed assumption or automatic confiscation; migration can be explained and tested. No absolute quantum-proof claim or attack date inferred.</p><h4>Evidence the case requires</h4><p>Inventory, expert report, migration vectors, annual schedule.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Cryptography + protocol</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-27" data-case="TV-27" data-state="NOT RUN"><summary><span class="c-id">TV-27</span><span class="c-title">Private data and oracle assurance</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Per-product claims, input trust sources, data-retention and execution model.</p><h4>Steps</h4><ol><li>Use forged data, hostile providers, telemetry leakage, unsupported attestation and false-but-correctly-executed AI outputs.</li></ol><h4>Accept</h4><p>No claim exceeds tested guarantee; secrets/data protected to stated model; unauthenticated inputs not represented as objective truth.</p><h4>Evidence the case requires</h4><p>Threat model, exposure tests, labelled user flows.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Security + product</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-28" data-case="TV-28" data-state="NOT RUN"><summary><span class="c-id">TV-28</span><span class="c-title">Stable assets and bridge isolation</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Only if enabled: issuer/bridge design, redemption rights, trust anchors and approved value caps.</p><h4>Steps</h4><ol><li>Test reserve/redemption failure, stale oracle, invalid/recovery certificates, contract compromise and emergency shutdown.</li></ol><h4>Accept</h4><p>No hidden base-chain guarantee or forced reversal of final history; independent audit, conservative exposure and counsel approval.</p><h4>Evidence the case requires</h4><p>Risk dossier, scenarios, disclosure, independent tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Application + security + counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-29" data-case="TV-29" data-state="NOT RUN"><summary><span class="c-id">TV-29</span><span class="c-title">Growth without inaccessible verification</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Declared minimum node, projected data growth and alternative scaling design.</p><h4>Steps</h4><ol><li>Run cold/worst-case validation, state/pruning/bootstrap, censorship and aggregation withdrawal; model 10x/100x growth and fee compression.</li></ol><h4>Accept</h4><p>Original minimum-node/security bounds hold; required data remains obtainable; security funding restated for changed fee routes.</p><h4>Evidence the case requires</h4><p>Capacity/availability results and revised economics.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Protocol + operations</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-30" data-case="TV-30" data-state="NOT RUN"><summary><span class="c-id">TV-30</span><span class="c-title">Energy and claims discipline</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Calibrated whole-system metering and workload allocation protocol.</p><h4>Steps</h4><ol><li>Measure mining, proving, mixed/time-shared operation, setup/recovery and unsuccessful work; review environmental text.</li></ol><h4>Accept</h4><p>No double-counted savings; original meter tolerances satisfied; no marginal-energy/carbon claim beyond method.</p><h4>Evidence the case requires</h4><p>Raw meter traces, job ledger, method and external review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>GPU + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-31" data-case="TV-31" data-state="NOT RUN"><summary><span class="c-id">TV-31</span><span class="c-title">Public-claim and activity review</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Actual jurisdiction, audience, service, token-distribution and promotion plans.</p><h4>Steps</h4><ol><li>Counsel assesses applicable routes and reviews each value/rank/return/security assertion against evidence.</li></ol><h4>Accept</h4><p>Written activity-specific clearance and approved wording; no future-value assertion in a covered MiCA white paper; no blanket exemption inferred from mining.</p><h4>Evidence the case requires</h4><p>Legal decision matrix, claim register, review dates.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Qualified counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-32" data-case="TV-32" data-state="NOT RUN"><summary><span class="c-id">TV-32</span><span class="c-title">Observed leadership, not a roadmap certificate</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:39 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Approved peer universe; all applicable mandatory gates; stable release and 90-day observation.</p><h4>Steps</h4><ol><li>Run original P15/P16 comparisons and independently replay scoped rank data. Test changing peer/exclusion assumptions and missing data.</li></ol><h4>Accept</h4><p>Contender requires original criteria; market-cap first requires highest 90-day median, 95% coverage; sustained daily-first convention also needs 80% of covered days. Never certify overall best from price alone.</p><h4>Evidence the case requires</h4><p>Independent panel report, full methods/data, scope and expiry of claim.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Independent acceptance panel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details></div></div></section><section class="section acc-profiles" id="profiles"><div class="container"><div class="eyebrow"><span class="line"></span>Profiles</div><h2>The numbers each case is held to.</h2><p class="acc-sub">17 profiles, P00 to P16. A profile is frozen before the confirmatory run; weakening a target after a failure creates a different claim.</p><div class="acc-prof-grid"><article class="acc-prof approved" id="profile-P00"><div class="acc-prof-top"><span class="acc-prof-id">P00</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Frozen scope and approval</h3><ol class="acc-req"><li>Approve the release manifest, supported roles, numerical profiles, mandatory scenarios, trust/fault model, workload W, adapters and claims before confirmatory tests. Unknown values are BLOCKED, not defaults.</li><li>Core safety and authentication invariants admit no waiver. Proposed performance or commercial targets may be replaced only before the confirmatory run, with an independent rationale and a versioned public scope.</li><li>After a failure, weakening a target creates a different claim and requires a new assessment. Preserve all failed runs; do not average a blocker away.</li></ol><p class="acc-prof-n">Cited by 148 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P01"><div class="acc-prof-top"><span class="acc-prof-id">P01</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Correctness and negative-test depth</h3><ol class="acc-req"><li>Zero observed invalid acceptance, unauthorised signature, conflicting finality within assumptions, duplicated reward or unexplained cross-backend state/hash disagreement.</li><li>Minimum proposed campaign: 1,000,000 full-hash vectors per supported backend across all families, plus at least 10,000 malformed/boundary cases per relevant parser or binding class. Include exhaustive small-domain cases and historical regressions.</li><li>All prescribed critical mutants must be detected. This sampling target is not a bound on cryptographic failure probability and does not replace independent reasoning about soundness or safety.</li></ol><p class="acc-prof-n">Cited by 69 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P02"><div class="acc-prof-top"><span class="acc-prof-id">P02</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Hardware coverage and reproducibility</h3><ol class="acc-req"><li>At least 12 physical retail configurations: at least 3 NVIDIA, 3 AMD and 2 Apple configurations, at least two discrete-GPU generations, an advertised 8 GB mining tier and 12 GB proving tiers where claimed. Record usable, not nominal, memory.</li><li>Declare a competitive core of at least 6 configurations spanning every advertised vendor and at least two discrete generations before optimisation. The wider cohort remains mandatory for access and economic tests; it cannot be silently dropped.</li><li>Use 5 paired 30-minute steady-state runs per primary cell after at least 15 minutes of warm-up and a stable temperature trend. Calibrated wall meter uncertainty must be at most 2%. Run a 7-day soak on representative low/mid/high tiers.</li><li>Three unaffiliated operators participate; every competitive-core cell is reproduced by at least two. Identical-SKU energy/accepted-work results must agree within 5% after declared environment corrections; unexplained variance blocks the headline.</li></ol><p class="acc-prof-n">Cited by 12 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P03"><div class="acc-prof-top"><span class="acc-prof-id">P03</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Candidate improvement and honest-card budget</h3><ol class="acc-req"><li>For production candidate changes, per mandatory GPU cell: no more than 5% increase in joules per accepted work and no more than 2% decrease in accepted throughput versus the paired tuned baseline. Absolute safety limits always apply.</li><li>G2 requires at least a 10% reduction in the strongest evaluated specialist advantage after redesign, outside the declared measurement/model uncertainty, while meeting those budgets. A failed experiment is not a successful upgrade.</li><li>Existing clock-lock savings belong in the baseline. Long programs cannot pass by adding enough equally costly work to both devices to improve a ratio while materially worsening honest operation.</li></ol><p class="acc-prof-n">Cited by 8 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P04"><div class="acc-prof-top"><span class="acc-prof-id">P04</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Scoped specialist-competition target</h3><ol class="acc-req"><li>Define R_E as GPU wall joules per accepted work divided by the lowest credible complete-system specialist joules for that same work. The proposed target is R_E at most 1.5 for every competitive-core cell at the same node and one node ahead.</li><li>Evaluate at least three materially distinct specialist architectures, with one programmable multi-family design, and a second independent reviewer. Include shared/reduced memory, hybrid execution, selective participation and realistic power/host costs.</li><li>Publish two-node-ahead and modular/reused-IP stress cases; they must satisfy the predeclared P12 economic envelope. No universal ceiling for unknown future hardware is claimed. Report model bounds separately from statistical confidence.</li><li>A lower-bound specialist estimate, not a convenient average or a deliberately constrained reference architecture, drives the conservative comparison. Undefined or unbounded decision-critical assumptions make the result BLOCKED.</li></ol><p class="acc-note"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span> <span>R_E target at most 1.5 at the same node and one node ahead; today's placed bracket 1.5x to 2.1x: FAIL</span></p><p class="acc-prof-n">Cited by 14 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P05"><div class="acc-prof-top"><span class="acc-prof-id">P05</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Measurement and inference protocol</h3><ol class="acc-req"><li>Pre-register primary metrics, cohorts, holdout seeds, run order, exclusions and analysis before confirmation. Keep tuning/training runs separate from holdout runs.</li><li>Use independent runs/operators as measurement units. Report point estimates, two-sided 95% measurement intervals and absolute sample counts; handle time-series dependence with a declared block or run-level method.</li><li>Apply conservative uncertainty to pass decisions. A confidence interval around measured GPU energy does not capture unknown ASIC architectures; model parameter ranges and expert judgement must be reported as such.</li><li>Never compare raw hashes per second across different algorithms. Do not transform a five-year scenario sweep into a probability of chip arrival or a guarantee of future profitability.</li></ol><p class="acc-prof-n">Cited by 0 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P06"><div class="acc-prof-top"><span class="acc-prof-id">P06</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Memory and support policy</h3><ol class="acc-req"><li>All advertised role/configuration combinations must finish without OOM, corruption or unsafe fallback. Publish a component memory budget, including display/OS, driver, miner, prover, aggregation and epoch construction.</li><li>Proposed support horizon: at least 24 months of known schedule compatibility for the advertised entry tier, unless a narrower horizon is prominently approved before sale or launch. Removal changes the claim and must pass ECO-07.</li><li>Treat 5.5 / 8.5 / 11.5 GiB as source candidates, not imposed final rules. Simultaneous operation, eviction and time-sharing are distinct advertised modes with separately measured cost.</li></ol><p class="acc-prof-n">Cited by 4 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P07"><div class="acc-prof-top"><span class="acc-prof-id">P07</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Proof service capacity and fairness</h3><ol class="acc-req"><li>Freeze W as a meaningful workload mix, input sizes, proof format, fleet and requests/hour. Primary proposed target: 72 hours at W, plus 24 hours at 1.2W; at least 99.5% accepted jobs delivered valid within the contracted deadline.</li><li>Default delivery targets for the declared internal reference workload: p95 at most 60 seconds and p99 at most 120 seconds from input-ready assignment through verified delivery. Also publish request-to-delivery including input wait; no claim may omit that delay.</li><li>Request-to-delivery p99 must meet the separately approved customer deadline. Payment p99 must be at most 10 minutes after verified payable eligibility, with chain finality time reported separately. These defaults do not override a stricter contract.</li><li>No statistically supported positive backlog drift at steady load, no silent drops; after 2W for 15 minutes, drain excess backlog within 30 minutes of return to W. Report rejected demand and accepted-job success separately.</li><li>Proposed advertised-tier fairness: at least 90% timely valid assigned completions are paid under the approved rules; avoidable duplicate/retry work is at most 10% of total work. Reassignment policy must bound abandonment without promising every assignment a reward.</li></ol><p class="acc-prof-n">Cited by 15 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P08"><div class="acc-prof-top"><span class="acc-prof-id">P08</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Fault assumptions and recovery</h3><ol class="acc-req"><li>F0 must state the exact safety threshold, quorum and authority-transition rule; the synchrony/participation assumptions for liveness; trusted inputs; and clock/expiry semantics. This manual supplies no substitute consensus rule.</li><li>Exercise threshold-minus/at/plus cases, the 40/40/20 partition fixture, signing outages and 31/35/60/90 logical-day expiry cases. Preserve safety when liveness assumptions fail; do not demand finality from an unavailable quorum.</li><li>After assumptions and input availability are restored: service replacement within 10 minutes and deterministic network convergence within 30 minutes on the reference topology. Different certified bounds must be approved beforehand.</li><li>Accelerated-time simulation and real elapsed operation are separate evidence classes. Recovery may not reverse a guarantee previously represented as final.</li></ol><p class="acc-prof-n">Cited by 25 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P09"><div class="acc-prof-top"><span class="acc-prof-id">P09</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Security and bounded resource requirements</h3><ol class="acc-req"><li>Zero unresolved critical or high-severity security findings on the claimed release. Independent scopes must cover consensus, proof soundness/parameters, implementation bypasses, wallet/isolation and relevant operational controls.</li><li>Review the intended proof-system security level and assumptions explicitly; do not infer a security-bit claim from random rejection tests. Version every verifier, program and parameter set.</li><li>Freeze maximum valid/invalid verification time, memory, disk and admission rates for ordinary validator hardware. At rated valid load plus the approved hostile load, no unbounded growth, invalid acceptance or unrecoverable process failure.</li><li>For supported wallet fee-estimation cases, proposed absolute error at most 5% versus the specified charge when inputs are unchanged; deterministic fee-cap handling and explicit uncertainty otherwise. Customer contracts remain separately binding.</li></ol><p class="acc-prof-n">Cited by 30 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P10"><div class="acc-prof-top"><span class="acc-prof-id">P10</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Ordinary-operator product targets</h3><ol class="acc-req"><li>At least 30 unaffiliated first-time study participants across supported Windows/macOS combinations. At least 90% install, configure safely and submit accepted work without staff help; p90 active setup at most 15 minutes. Publish complete download/dataset time separately.</li><li>Pause/stop acknowledgement within 2 seconds, safe worker stop within 5 seconds where no documented atomic operation prevents it, and reliable restoration of original tuning settings. No hidden custody or silent update.</li><li>Net-energy/fee displays reconcile within 5% under the declared measurement boundary. Incremental rejected-work loss on the normal home-link profile is at most 2 percentage points over the matched datacentre profile.</li><li>Open miner efficiency is within 5% of the best independently tuned permitted implementation on identical work. For the declared single-card payout case, p95 payable-to-payment at most 24 hours and total payout friction at most 2% of earned value.</li><li>Critical alerts are emitted within 60 seconds of detectable evidence. At least 90% of study users can identify the injected failure and follow the published safe action. No control target excuses a security failure.</li></ol><p class="acc-prof-n">Cited by 11 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P11"><div class="acc-prof-top"><span class="acc-prof-id">P11</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>No-founder exercise and independence</h3><ol class="acc-req"><li>At least 10 verified unaffiliated operators, three independently administered network/hosting domains and sufficient honest weight/capacity to satisfy F0 and W after founders are removed.</li><li>Run at least 30 real elapsed days without founder mining, proving, aggregation, bootstrap, required RPC, private files or privileged interventions. Cross all known logical transitions separately without calling accelerated time real history.</li><li>Document control by role and common dependencies; uncertain identities are not counted as independent. Within-assumption withdrawals must satisfy P08; losing more than the assumed quorum may cause a visible safe pause.</li></ol><p class="acc-prof-n">Cited by 4 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P12"><div class="acc-prof-top"><span class="acc-prof-id">P12</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Five-year coexistence envelope</h3><ol class="acc-req"><li>Freeze a sourced revenue reference R and mandatory worlds before results. Sweep 0.25R, R, 4R and 10R; electricity at $0.03/$0.10/$0.25/$0.40 per kWh; 1/3/5-year productive life; zero/$20M/$75M development; private mining and hardware sales; no/normal/spiking external demand.</li><li>Those values are proposed stress inputs, not current prices or forecasts. Declare which worlds have enough funded demand for rational ongoing service before running; retain collapse worlds as explicit safety/exit tests, not profitable successes.</li><li>Proposed matched-tariff new-entry target in every mandatory sustainable world: median GPU/specialist total cost per accepted work at most 1.5, 90th percentile at most 1.75, and no advertised competitive-core cell above 2.0. Publish every cell, including heterogeneous tariffs.</li><li>At least three purchasable GPU configurations across at least two advertised vendors must have positive modelled new-entry economics; at least 75% of the entry cohort must have positive marginal operating economics in those worlds. Report model uncertainty and failure regions.</li><li>Do not impose GPU market share, specialist production limits, token appreciation, full research-cost recovery or automatic chip death to force the result. Any such condition must become an explicit limitation rather than a hidden assumption.</li></ol><p class="acc-prof-n">Cited by 24 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof deferred" id="profile-P13"><div class="acc-prof-top"><span class="acc-prof-id">P13</span><span class="acc-pstate deferred">Deferred by the founder</span></div><h3>Maintenance continuity</h3><ol class="acc-req"><li>Before a readiness claim, document at least 12 months of committed maintenance resources at the approved operating scope. Include engineering, security review, infrastructure, support and incident response.</li><li>Use independently reviewable commitments and downside budgets. Uncommitted future sales, rising token prices, burned fees or assumed fundraising are not available resources.</li><li>This is a proposed governance test, not a directive to change the supply cap, issuance allocation or fair-launch design.</li></ol><p class="acc-prof-n">Cited by 1 case. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P14"><div class="acc-prof-top"><span class="acc-prof-id">P14</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Genuine commercial and developer proof</h3><ol class="acc-req"><li>At least three unrelated paying buyer organisations, each making at least three separate purchase decisions across at least 30 days; at least 1,000 meaningful verified external jobs in aggregate. Split invoices do not create independent demand.</li><li>No project reimbursement, circular funding or undisclosed related party counts. Report customer concentration and churn; proposed maximum largest-buyer share is 70% of qualifying revenue.</li><li>At least 20% aggregate contribution margin after directly attributable delivery costs, retries, refunds and support; publish fully loaded economics separately. At least 75% of sampled eligible operators have positive realised contribution on the declared workload.</li><li>At least five unaffiliated developers complete a useful supported application or proof-service integration using public documentation. Customer confirmation and raw commercial evidence may remain confidential to the reviewer.</li></ol><p class="acc-prof-n">Cited by 10 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P15"><div class="acc-prof-top"><span class="acc-prof-id">P15</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Comparative contention threshold</h3><ol class="acc-req"><li>Pre-register at least three relevant operating GPU-first peers, plus a real proving alternative for customer comparisons. Verify current versions at execution time. The source reference set is a starting point, not a claim about current rankings.</li><li>Require at least three meaningful comparable dimensions with no material inferiority beyond a pre-agreed 10% margin against the best valid comparator, and at least two independently evidenced advantages against at least two peers.</li><li>Advantages must be either a greater-than-10% measured improvement outside uncertainty or a directly tested control/capability difference with demonstrated user value. Non-comparable or missing data is not a win.</li><li>A panel with hardware/economics, security/operations and customer/operator expertise must support the scoped contender conclusion. Passing these judgement-based thresholds does not certify a universal number-one ranking.</li></ol><p class="acc-prof-n">Cited by 5 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P16"><div class="acc-prof-top"><span class="acc-prof-id">P16</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Observed durability and claim freshness</h3><ol class="acc-req"><li>At least 90 real elapsed days on the final compatible release family, at least 30 independently verified operators, and transparent eligibility/churn denominators. Material uncomparable changes reset affected observations.</li><li>Proposed outcomes: at least 60% day-90 operator retention and at least 75% of eligible observed operators with positive measured marginal operation over the period. Report incentives and electricity assumptions; do not claim a downturn was observed if it was not.</li><li>At least 99.9% availability for the declared customer service during eligible operating conditions, with all-in availability also reported; zero accepted invalid proofs or conflicting finality within F0 assumptions. Do not remove real incidents as maintenance to force a pass.</li><li>Run fault injection on isolated infrastructure, not unsuspecting customers. Publish planned test windows separately. Reassess claims at least quarterly and immediately after material hardware, protocol, economics or security changes.</li></ol><p class="acc-prof-n">Cited by 5 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article></div></div></section><section class="section acc-fixtures" id="fixtures"><div class="container"><div class="eyebrow"><span class="line"></span>Fixtures</div><h2>What every run is built on.</h2><div class="acc-fix-grid"><article class="acc-fix" id="fixture-F0"><span class="acc-fix-id">F0</span><h3>Release and assurance manifest</h3><p>Exact commits, binaries, genesis/network ID, mining class, dataset schedule, EVM fork/deviations, program/verifier IDs, fees, supply, quorum/fault rules, trust anchors, activation and supported roles.</p></article><article class="acc-fix" id="fixture-F1"><span class="acc-fix-id">F1</span><h3>Clean build environments</h3><p>Pinned toolchains, dependency locks, clean OS images and documented signing/notarisation boundaries. No production secrets or private founder files.</p></article><article class="acc-fix" id="fixture-F2"><span class="acc-fix-id">F2</span><h3>Hardware and measurement lab</h3><p>Approved physical GPU cohort, calibrated wall meters, stable thermal conditions, driver/OS images and realistic home/datacentre link conditions.</p></article><article class="acc-fix" id="fixture-F3"><span class="acc-fix-id">F3</span><h3>Workload and oracle catalogue</h3><p>Fixed full-hash and EVM/proving jobs, independent reference implementations, real customer-sized payloads, held-out seeds and complete expected results.</p></article><article class="acc-fix" id="fixture-F4"><span class="acc-fix-id">F4</span><h3>Authorised fault network</h3><p>Independent nodes/operators; controllable latency, loss, clocks, partitions, storage faults and role withdrawals. Actual consensus paths plus separately labelled simulators.</p></article><article class="acc-fix" id="fixture-F5"><span class="acc-fix-id">F5</span><h3>Negative and regression corpus</h3><p>Malformed transactions/proofs, wrong roots/IDs, duplicate payments, bad authority tables, historical failures and deliberately faulty code mutants.</p></article><article class="acc-fix" id="fixture-F6"><span class="acc-fix-id">F6</span><h3>Specialist implementation pack</h3><p>Functionally checked architectures, RTL/physical estimates where feasible, memory and board assumptions, cost inputs, adaptation paths and uncertainty ranges.</p></article><article class="acc-fix" id="fixture-F7"><span class="acc-fix-id">F7</span><h3>Economic and incentive models</h3><p>Independently reproducible costs, entry/exit/difficulty policies, scenario grid, operator opportunity costs and money-flow conservation fixtures.</p></article><article class="acc-fix" id="fixture-F8"><span class="acc-fix-id">F8</span><h3>User/customer/peer studies</h3><p>Consenting unaffiliated users, contracted meaningful workloads, private ownership checks, dated competitor methods and independent analysis.</p></article><article class="acc-fix" id="fixture-F9"><span class="acc-fix-id">F9</span><h3>Evidence and status vault</h3><p>Immutable run IDs, raw logs, hashes, analysis code, exclusions, defects, reviewers, signatures, privacy controls and public redacted summaries.</p></article></div></div></section><section class="section acc-foot" id="notes"><div class="container"><div class="acc-foot-card"><div class="eyebrow"><span class="line"></span>What a full pass means</div><p class="acc-allpass">Independent passage of all mandatory and claimed-option gates, including commercial and comparative observation, can support a scoped leadership-contender assessment. It does not prove a universal rank or eliminate unknown future hardware risks.</p><p>Test design, not executed evidence. All numeric additions are proposed, not source-approved protocol rules. Optional claimed features require their tests; excluded features earn no pass credit.</p><h3>Rules in force</h3><ul class="acc-rules"><li>P03: a candidate change pays at most 5 percent of joules per accepted work and loses at most 2 percent of accepted throughput against the paired tuned baseline (replaces the 10 percent budget from 18:2x UK)</li><li>P04: R_E at most 1.5 for every competitive-core cell at the same node and one node ahead against the lowest credible complete-system specialist; today's placed bracket (1.5x to 2.1x same-node) is a FAIL to work against and is served as such</li><li>P12: the matched-tariff median at most 1.5, p90 at most 1.75, no core cell above 2.0</li><li>P02: twelve retail configurations, three unaffiliated operators, the seven-day soak define D1's reproduction</li></ul><p class="acc-never" data-never-served>Never served: guaranteed chip death, a universal ASIC-efficiency ceiling, chip-arrival probabilities, guaranteed profits, Ethereum security by compatibility, privacy from ZK, a numerical rank.</p><p class="acc-src"><b>Source:</b> <code>docs/plans/igneum-2.0-test-registry.json</code>, version 1.0, dated 8 October 2026, plan sha256 <code>418b3b9f68f96a41</code>. <span id="acc-live">This copy was written when the page was built; the page checks the registry on the public git host every 60 seconds.</span></p></div></div></section></div>
-<script type="application/json" id="acceptance-data">{"title":"IGNEUM 2.0 - Test and Acceptance Standard","version":"1.0","date":"2026-10-08","status":"APPROVED 8 October 2026 (the founder, 18:2x UK): \"approve as proposed in the tests, forget P13 for now\"; the test design stands as PROPOSED, NOT EXECUTED until a case runs under it","basis":"IGNEUM_2.0_Plan.pdf, 37 pages, 8 October 2026","suites":[{"code":"GOV","title":"Release identity and evidence","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","fixtures":"F0 manifest; F1 source/build archives; F9 evidence vault","summary":"Prevent a favourable result from being attached to the wrong code, assumptions or public claim.","tests":[{"id":"GOV-01","title":"Freeze the release and its claims","setup":"Candidate source, binaries, public documentation and the 2.0 plan are available; no run is yet accepted.","steps":["Record exact commits, binary hashes, dependencies, genesis/network identity, mining class, datasets, execution fork, verifier IDs and fee rules in F0.","Map every promised capability and plan requirement to a test ID; distinguish supported mining, proving and wallet combinations.","Sign the manifest with protocol, product and independent review owners before confirmatory runs."],"accept":"Every material rule and claim has an unambiguous version and test. Conflicts or unknown activation rules produce BLOCKED, not an inferred default. Changes create a new manifest and invalidate affected results.","evidence":"Signed F0; source-to-test map; claim inventory; unresolved-field register.","priority":"BLOCKER","profile":"P00","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":18,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","evidence_path":"docs/plans/igneum-2.0-f0-manifest.md; build-4:/srv/builds/igneum-wt-ci-steward-202","run_id":"f0-signing-20261008-2330","updated":"2026-10-09T07:43:10.751Z","evidence_record":{"requirement_id":"GOV-01","decision":"NOT RUN","method":"static","cell":"check:freeze","manifest_sha":"1a938abe","run_id":"f0-signing-20261008-2330","evidence":"docs/plans/igneum-2.0-f0-manifest.md; build-4:/srv/builds/igneum-wt-ci-steward-202","in_progress":true,"coverage":"partial: the linked igneum-pow tree's fingerprint must match a listed freeze or the build fails, the binary prints which; the manifest (igneum_getManifest) names the object digest; the signed F0 manifest is the node lane's row tonight","release_identity":{"commit":"2a1d6caab4c24564 (the class v6 freeze candidate's draw of tree 1a938abe4)","lockfile":"","binary":"","network_object":"igneum-devnet-4, chain id 4465 (islands since the epoch-3 cut)","activation":"","profile_hashes":"igneum-pow/src fingerprint 5f4d6dc6199294db89042171004e6420c1e5791e716d4b39b73d375818c10b6f"},"claim_impact":"GOV-01 moves with its page: the F0 manifest carries the signing block (the candidate at its pairing, the same-work and acceptance rows, the 2.0.2 pair gate, the prover row, the canary state); GOV-01 stays NOT RUN in progress until the three roles sign","reviewer":"","at":"2026-10-09T07:43:10.751Z","note":"the signing block is on the page; the freeze itself is unchanged (class v5 1c420786, fingerprint cbc5bd0a); the candidate's row names 2a1d6caab4c24564 of 1a938abe4 | F0's signing block written at 23:3x UK from the lanes' landed lines; the signatures table is the three roles' own landing. The mining-class row's citation moved to the node fork's packaging/pow-freeze.txt and the 202 batches' rule-19 lines (09:0x UK, the review owner's note)."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"check:freeze":{"requirement_id":"GOV-01","decision":"NOT RUN","method":"static","cell":"check:freeze","manifest_sha":"1a938abe","run_id":"f0-signing-20261008-2330","evidence":"docs/plans/igneum-2.0-f0-manifest.md; build-4:/srv/builds/igneum-wt-ci-steward-202","in_progress":true,"coverage":"partial: the linked igneum-pow tree's fingerprint must match a listed freeze or the build fails, the binary prints which; the manifest (igneum_getManifest) names the object digest; the signed F0 manifest is the node lane's row tonight","release_identity":{"commit":"2a1d6caab4c24564 (the class v6 freeze candidate's draw of tree 1a938abe4)","lockfile":"","binary":"","network_object":"igneum-devnet-4, chain id 4465 (islands since the epoch-3 cut)","activation":"","profile_hashes":"igneum-pow/src fingerprint 5f4d6dc6199294db89042171004e6420c1e5791e716d4b39b73d375818c10b6f"},"claim_impact":"GOV-01 moves with its page: the F0 manifest carries the signing block (the candidate at its pairing, the same-work and acceptance rows, the 2.0.2 pair gate, the prover row, the canary state); GOV-01 stays NOT RUN in progress until the three roles sign","reviewer":"","at":"2026-10-09T07:43:10.751Z","note":"the signing block is on the page; the freeze itself is unchanged (class v5 1c420786, fingerprint cbc5bd0a); the candidate's row names 2a1d6caab4c24564 of 1a938abe4 | F0's signing block written at 23:3x UK from the lanes' landed lines; the signatures table is the three roles' own landing. The mining-class row's citation moved to the node fork's packaging/pow-freeze.txt and the 202 batches' rule-19 lines (09:0x UK, the review owner's note)."}}},{"id":"GOV-02","title":"Approve thresholds before results","setup":"This manual supplies proposed test thresholds, not source-approved protocol parameters.","steps":["Approve or replace every P-profile before confirmatory testing; give each change a rationale and independent approver.","Register hardware cohorts, mandatory economic worlds, customer workloads, peer dimensions and exclusion rules.","Lock the profile hash and hold out seeds/workloads from the developers doing optimisation."],"accept":"No decision-critical field is TBD. Numeric limits are frozen, commercially meaningful and not chosen from observed results. A weakened limit after failure requires a new protocol, full affected rerun and explicit claim downgrade review.","evidence":"Approved profile register; timestamped holdout commitments; change log.","priority":"BLOCKER","profile":"P00","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":18,"owner_lane":"CI steward (a2ecfa95d3206016c)","run_status":"NOT RUN","evidence_path":"docs/plans/igneum-2.0-test-registry.json","run_id":"team-2026-10-08","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"the approval is recorded in the registry's approval field; the automated half (thresholds frozen before any run_status) is the gate rule landing by 21:00","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"GOV-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the profiles approved as proposed by the founder at 18:2x UK before any confirmatory run; P13 deferred","run_by":"CI steward (a2ecfa95d3206016c)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"GOV-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/plans/igneum-2.0-test-registry.json","in_progress":true}}},{"id":"GOV-03","title":"Reproduce builds outside the founding team","setup":"Provide public source and documented build instructions to three unaffiliated operators.","steps":["Build on clean declared environments without private files, tokens or founder assistance.","Compare reproducible payload hashes; isolate signatures, notarisation and permitted non-deterministic wrappers.","Run reference vectors and restart a node using only documented artifacts."],"accept":"All independent builds reproduce the same consensus payload or an independently explained, pre-approved wrapper difference; reference outputs match exactly. Missing private prerequisites block release.","evidence":"Build logs; dependency lockfiles; binary comparison; operator attestations.","priority":"BLOCKER","profile":"P00; P02","cadence":"Release candidate; repeat after relevant changes","method":"Independent reproduction","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":18,"owner_lane":"build-server lane (a352e49ff4613df86)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"GOV-04","title":"Preserve raw and negative evidence","setup":"Enable append-only storage for run outputs and a separate analysis workspace.","steps":["Capture failed, aborted and successful runs with timestamps, seeds and environment hashes.","Recompute one published figure from raw records on a clean machine.","Modify a retained artifact deliberately and test integrity verification."],"accept":"Every headline can be regenerated; tampering is detected; exclusions have pre-registered reasons. Failed or missing runs remain visible and are never replaced silently by a successful retry.","evidence":"Artifact manifest; hashes; reproduction script; exclusion ledger; negative-run archive.","priority":"BLOCKER","profile":"P00","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":19,"owner_lane":"CI steward (a2ecfa95d3206016c)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"the evidence vault F9 (raw and negative evidence preserved) is the gate rule landing by 21:00: a PASS must carry its evidence file","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"GOV-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"the evidence vault F9 (raw and negative evidence preserved) is the gate rule landing by 21:00: a PASS must carry its evidence file","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"GOV-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"GOV-05","title":"Prove the test oracle detects broken behaviour","setup":"Create controlled defective variants on an isolated network only.","steps":["Disable proof verification, change one reward, accept an expired authority set and alter one hash output in separate mutants.","Run the corresponding ZKP, INC, FIN and POW tests without telling the runner which mutant is active.","Confirm the baseline still accepts authorised valid cases."],"accept":"Every deliberately introduced fault is caught by its mapped test; valid controls pass. Any undetected critical mutant blocks acceptance of that test family until the oracle is repaired.","evidence":"Mutation catalogue; blinded run results; baseline controls; oracle review.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":19,"owner_lane":"fast-time lane (a8be71a0db962911c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/200-417c4a57-b2/gate/gate-rule26.log","run_id":"200-417c4a57-b2","updated":"2026-10-08T18:28:32.408Z","evidence_record":{"cell":"gate:pre-push","manifest_sha":"417c4a57","coverage":{"GOV-05":"partial: every gate check carries a self-test that fires on a known failure and passes a known success (77 checks); the suites' own oracles are their mutation rows","GOV-06":"partial: the launch-gates, forbidden-strings and scope checks on the served site","UX-08":"partial: the site gate on every served page, plus docs/build/tuning.md (the published tuning and build-settings half, the hash lane's); the open builds and the fee conditions are the shipper's and the site lane's"},"at":"2026-10-08T18:28:32.408Z","method":"native","requirement_id":"GOV-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T18:28:32.408Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"gate:pre-push":{"cell":"gate:pre-push","manifest_sha":"417c4a57","coverage":{"GOV-05":"partial: every gate check carries a self-test that fires on a known failure and passes a known success (77 checks); the suites' own oracles are their mutation rows","GOV-06":"partial: the launch-gates, forbidden-strings and scope checks on the served site","UX-08":"partial: the site gate on every served page, plus docs/build/tuning.md (the published tuning and build-settings half, the hash lane's); the open builds and the fee conditions are the shipper's and the site lane's"},"at":"2026-10-08T18:28:32.408Z","method":"native","requirement_id":"GOV-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"200-417c4a57-b2","evidence":"build-1:/srv/artefacts/tas/200-417c4a57-b2/gate/gate-rule26.log","in_progress":true}}},{"id":"GOV-06","title":"Enforce scope and optional-feature discipline","setup":"Inventory FP32 experiments, receipts/oracles and all retained or excluded mining levers.","steps":["Mark each capability CORE, CLAIMED-OPTIONAL or EXCLUDED before release testing.","For excluded code, check binaries, protocol activation and product copy for accidental enablement or implied availability.","For each claimed option, require the complete associated test set rather than a demonstration."],"accept":"Every core and claimed-option obligation passes. Excluded items are shown as EXCLUDED, never PASS and never counted as achievements. Removing a failed core requirement prevents an all-2.0-pass claim.","evidence":"Scope manifest; activation scan; product-copy comparison; exclusions register.","priority":"BLOCKER","profile":"P00","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":19,"owner_lane":"CI steward (a2ecfa95d3206016c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/site-gate-6a47f1f8/pre-push.log","run_id":"site-gate-20261009-01","updated":"2026-10-09T07:36:07.241Z","evidence_record":{"requirement_id":"GOV-06","decision":"NOT RUN","method":"static","cell":"gate:pre-push","manifest_sha":"6a47f1f8","run_id":"site-gate-20261009-01","evidence":"build-1:/srv/artefacts/tas/site-gate-6a47f1f8/pre-push.log","in_progress":true,"coverage":"partial: the launch-gates, forbidden-strings and scope checks on the served site","release_identity":{"commit":"6a47f1f8","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: the served pages are checked, no claim moves","reviewer":"","at":"2026-10-09T07:36:07.241Z","note":"the site branch's box gate on 6a47f1f8 (build-2, --ci mode): 7 checks GREEN in 41 s, among them the launch-gates, forbidden-strings and scope checks on the served site that the cell's partial coverage names; a gate run is evidence for the cell, not a verdict on the case (the steward's word)"},"in_progress_since":"2026-10-08T18:28:32.408Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"gate:pre-push":{"requirement_id":"GOV-06","decision":"NOT RUN","method":"static","cell":"gate:pre-push","manifest_sha":"6a47f1f8","run_id":"site-gate-20261009-01","evidence":"build-1:/srv/artefacts/tas/site-gate-6a47f1f8/pre-push.log","in_progress":true,"coverage":"partial: the launch-gates, forbidden-strings and scope checks on the served site","release_identity":{"commit":"6a47f1f8","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: the served pages are checked, no claim moves","reviewer":"","at":"2026-10-09T07:36:07.241Z","note":"the site branch's box gate on 6a47f1f8 (build-2, --ci mode): 7 checks GREEN in 41 s, among them the launch-gates, forbidden-strings and scope checks on the served site that the cell's partial coverage names; a gate run is evidence for the cell, not a verdict on the case (the steward's word)"}}},{"id":"GOV-07","title":"Independent review and finding closure","setup":"Nominate reviewers with declared conflicts and scopes covering cryptography, consensus and hardware.","steps":["Provide pinned code, raw data, adversarial models and prior failures, including negative results.","Track each finding to remediation and an independent retest; do not use the author as sole approver.","Have reviewers state unreviewed surfaces and model limitations in their signed conclusions."],"accept":"No unresolved critical or high-severity finding affects the claimed release. A finite review is described by scope, not as proof of universal security. Independent reproduction and review are both evidenced.","evidence":"Signed scoped reports; conflict declarations; finding/retest ledger.","priority":"BLOCKER","profile":"P09","cadence":"Release candidate; repeat after relevant changes","method":"Independent specialist review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":20,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"GOV-08","title":"Invalidate stale evidence and control public status","setup":"Create a simulated post-test change to a verifier, mining class, dataset and fee rule.","steps":["Calculate affected test dependencies and invalidate their former PASS statuses.","Regenerate public status pages from F0 and the evidence register.","Attempt to publish a rank-one, guaranteed-profit or automatic-chip-death claim without the required evidence."],"accept":"Affected gates return to NOT RUN or BLOCKED. Public claims retain version, limits and date; unsupported claims are withheld. No stale result remains attached to a different release.","evidence":"Dependency impact report; regenerated status page; rejected claim examples.","priority":"BLOCKER","profile":"P00","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":20,"owner_lane":"CI steward (a2ecfa95d3206016c)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"the stale-evidence rule (evidence older than the manifest sha reads NOT RUN) is the gate rule landing by 21:00","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"GOV-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"the stale-evidence rule (evidence older than the manifest sha reads NOT RUN) is the gate rule landing by 21:00","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"GOV-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}}]},{"code":"GPU","title":"Whole-system GPU measurements","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","fixtures":"F2 retail-hardware cohort; F3 paired benchmark workloads; F9 calibrated evidence","summary":"Close the pending measurements and evaluate the actual configuration, including costs hidden by kernel-only results.","tests":[{"id":"GPU-01","title":"Cover the declared commodity population","setup":"Freeze the P02 cohort, supported role matrix and the final v6 configuration.","steps":["Inventory physical SKU, usable memory, driver, operating system, firmware, cooling and acquisition channel.","Run mining on every supported cohort cell and proving on every separately advertised prover cell.","Include lower-memory, used-generation and all advertised vendor cases; retain unsupported results separately."],"accept":"All declared cells are tested, with no after-the-fact removal of weak cards. At least the P02 minimum coverage is met. Mining-only support is never reported as proof-generation support.","evidence":"Cohort manifest; compatibility matrix; raw results by SKU and role.","priority":"GATE","profile":"P02","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":21,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt","run_id":"p02-fleet-pods-20261008-01","updated":"2026-10-08T21:49:19.980Z","evidence_record":{"requirement_id":"GPU-01","decision":"NOT RUN","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"417c4a57","run_id":"p02-fleet-pods-20261008-01","evidence":"build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt","in_progress":false,"coverage":"partial: the NVIDIA cells of P02 that RunPod carries","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.980Z"},"in_progress_since":"2026-10-08T19:59:34.316Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"bench:fleet-pods":{"requirement_id":"GPU-01","decision":"NOT RUN","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"417c4a57","run_id":"p02-fleet-pods-20261008-01","evidence":"build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt","in_progress":false,"coverage":"partial: the NVIDIA cells of P02 that RunPod carries","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.980Z"}}},{"id":"GPU-02","title":"Reproduce Ember clock-lock savings","setup":"Use paired stock and tuned runs on the same board, host, workload and ambient conditions.","steps":["Warm to stability; randomise stock/tuned order and run P02 repeated sessions.","Measure accepted work, calibrated wall energy, device telemetry and rejected work.","Calculate paired energy and rate changes with run-level uncertainty, retaining failed tuning attempts."],"accept":"Tuning preserves correctness and meets approved P03 operating limits. The historical 34-41% saving and under-2% rate-loss statement is reproduced only for qualifying configurations; otherwise that claim is corrected. Existing savings are not counted twice.","evidence":"Raw power/time series; paired analysis; tuning settings; claim-by-SKU table.","priority":"GATE","profile":"P02; P03","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":21,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"PASS","evidence_path":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","run_id":"hash-lane-20261009-batch4","updated":"2026-10-09T03:58:33.097Z","evidence_record":{"requirement_id":"GPU-02","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: the paired stock and locked rows on the same board, host and workload (the rate held, 2.37 against 3.26 microjoules per hash on the class v5 pack); the historical 34 to 41 percent claim's full configuration set is owed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"bench:pc1-packs":{"requirement_id":"GPU-02","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: the paired stock and locked rows on the same board, host and workload (the rate held, 2.37 against 3.26 microjoules per hash on the class v5 pack); the historical 34 to 41 percent claim's full configuration set is owed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"}}},{"id":"GPU-03","title":"Measure the real 64-register GPU cost","setup":"Build the baseline and window variant with identical dataset, reads and semantic workload.","steps":["Inspect compiled register allocation, spills, occupancy and memory traffic on each supported backend.","Measure paired complete-system energy and accepted throughput, including host work.","Repeat during proving coexistence and expose any memory or scheduling cliff."],"accept":"Any production window meets P03 budgets for every mandatory SKU; no hidden spills or correctness changes. Zero GPU cost is claimed only where measurement supports it within uncertainty. Results feed the redesigned adversary, not an old core estimate.","evidence":"Compiler reports; allocation traces; paired energy/rate data; coexistence runs.","priority":"GATE","profile":"P02; P03","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":21,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt; docs/analysis/class-v6/amd-intel-energy.md; docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","run_id":"hash-lane-20261009-batch4","updated":"2026-10-09T03:58:33.097Z","evidence_record":{"requirement_id":"GPU-03","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: hl-v6-all against hl-v6-foldrw on the 5090, the window's cost per unit of work, registers and blocks per SM, no spill; the mandatory-SKU set is owed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"},"in_progress_since":"2026-10-08T19:59:34.316Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"bench:fleet-pods":{"requirement_id":"GPU-03","decision":"NOT RUN","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"417c4a57","run_id":"p02-fleet-pods-20261008-01","evidence":"build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt","in_progress":false,"coverage":"partial: the 4090 cell","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.980Z"},"bench:amd-intel-energy":{"requirement_id":"GPU-03","decision":"NOT RUN","method":"GPU","cell":"bench:amd-intel-energy","manifest_sha":"c245d50b9","run_id":"amd-intel-energy-20261008-01","evidence":"docs/analysis/class-v6/amd-intel-energy.md","in_progress":false,"coverage":"partial: the 64-register window on AMD and Intel, rate per unit of work (RX 7600 0 percent, Arc B580 -0.3 percent, kernel throughput, quiet) with the B580 fingerprints equal on both packs and the offline RDNA allocation (160 VGPRs, no spill); energy owed (the 7600 job queued, the B580 counter unsupported unelevated); team-run, not under the standard's paired protocol or a wall meter","release_identity":{"commit":"c245d50b9","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.677Z"},"bench:pc1-packs":{"requirement_id":"GPU-03","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: hl-v6-all against hl-v6-foldrw on the 5090, the window's cost per unit of work, registers and blocks per SM, no spill; the mandatory-SKU set is owed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"}}},{"id":"GPU-04","title":"Find the memory-clock operating ladder","setup":"Use safe vendor-supported settings only; record operator permission and original settings.","steps":["Sweep approved core and memory operating points while holding workload constant.","Measure error rate, accepted throughput, wall energy and thermal equilibrium.","Repeat the selected knee after reboot and restore defaults after a failed or interrupted tuning session."],"accept":"Selected profiles are stable, reproducible and not dependent on unsafe clocks. Every accepted hash remains correct; saved settings restore predictably. Tuning failure leaves a working safe configuration.","evidence":"Clock ladder; safe bounds; thermal/error logs; reboot and rollback record.","priority":"BLOCKER","profile":"P01; P02","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":22,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/floor/sm-sparse.md","run_id":"team-2026-10-08","updated":"2026-10-08T21:00:32.846Z","evidence_record":{"reason":"the memory-clock ladder has no harness tonight: the project's own rig mines nothing under the the earlier devnet off order","at":"2026-10-08T21:00:32.846Z","method":"static","requirement_id":"GPU-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the memory-clock ladder at the lock (floor lane 1, b1b8d833)","run_by":"hash lane (a690540514aa453d7)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"GPU-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/floor/sm-sparse.md","in_progress":true}}},{"id":"GPU-05","title":"Test dataset fit and support-horizon costs","setup":"Test 5.5, 8.5 and 11.5 GiB only as source-proposed candidates; F0 determines activated sizes.","steps":["Measure allocation plus driver, display, prover and OS headroom on the 8 GB and other cohort tiers.","Run near-full-memory, fragmentation, restart and next-epoch construction scenarios.","Compare time-sharing/eviction with concurrent mining/proving, including reload cost."],"accept":"Every advertised combination completes without OOM or silent corruption. Unsupported future sizes are identified before activation. GPU exclusions and lost proving capacity appear in ECO evaluation; retirement of a tier is not a success metric.","evidence":"Memory budget per SKU; OOM traces; support horizon; concurrency cost table.","priority":"BLOCKER","profile":"P01; P02; P06","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":22,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/rows/run-ca3-pc1-amd-cardin-20261008T1703.md; docs/analysis/floor-memory-profile-2026-10-08.md; docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","run_id":"hash-lane-20261009-batch4","updated":"2026-10-09T03:58:33.097Z","evidence_record":{"requirement_id":"GPU-05","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: v3-1g, v3-ds29, v3-ds30, ds55, ds4g-ms complete with their fingerprints, energy per step at stock and at the knee on the 5090 and the 7600; the 8.5 and 11.5 GiB candidates are owed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"},"in_progress_since":"2026-10-08T18:41:01.185Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"bench:pc1-amd":{"cell":"bench:pc1-amd","manifest_sha":"c245d50b9","coverage":{"GPU-01":"partial: the 8 GB AMD cell, fingerprints and rates at 1, 2, 4 and 5.5 GiB; one cell of P02's twelve","GPU-05":"partial: the 8 GB tier's fit rows"},"at":"2026-10-08T18:41:01.185Z","method":"GPU","requirement_id":"GPU-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"c245d50b9","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"hash-lane-20261008-batch1","evidence":"docs/analysis/class-v6/rows/run-ca3-pc1-amd-cardin-20261008T1703.md","in_progress":true},"rows:v607-floor-memory":{"requirement_id":"GPU-05","decision":"NOT RUN","method":"GPU","cell":"rows:v607-floor-memory","manifest_sha":"c411bae9a","run_id":"v607-floor-memory-20261008T2059Z","evidence":"docs/analysis/floor-memory-profile-2026-10-08.md","in_progress":true,"coverage":"partial: the 8 GB and 12 GB tiers' prover headroom on the 5.5 GiB dataset (free memory, the prover's peak alone, the refusal beside the miner); fragmentation, restart and next-epoch construction not run","release_identity":{"commit":"c411bae9a (branch v607-floor-memory off cef5234b5)","lockfile":"proving/igneum-prove/Cargo.lock at cef5234b5","binary":"sp1-gpu-server db37c38b5feabdec5bbfd0298446da89f6a5d144125e399d6ab617f64f9cb61d (igneum-floor-sm8689-v607.tgz 9c02fcc6a3f045d3167c1d9cb6e22c584ea862189d11997754a57cbe1b0d355b); igneum-prove-host-0317 71bc2438856bb141; igneum-prove-host v607 66662219a3630772","network_object":"none (fixture proofs on rented pods, no network)","activation":"none","profile_hashes":"floor patch 9098c3e5979d057031f43588668201d1f7a53ab17e980c1eaf896cd5e6f38575"},"claim_impact":"the 2.0 proving statement's memory condition per tier: a 12 GB card runs the whole segment path alone; an 8 GB card proves shards only (its aggregation fails) and is refused the chain before setup; both time-share beside the 5.5 GiB miner; the 16 GB and 24 GB tiers unmeasured tonight","reviewer":"","at":"2026-10-08T22:22:49.946Z"},"bench:pc1-packs":{"requirement_id":"GPU-05","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: v3-1g, v3-ds29, v3-ds30, ds55, ds4g-ms complete with their fingerprints, energy per step at stock and at the knee on the 5090 and the 7600; the 8.5 and 11.5 GiB candidates are owed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"}}},{"id":"GPU-06","title":"Measure accepted work under ordinary connectivity","setup":"Use the same hardware against clean, delayed, lossy and intermittent links in F4.","steps":["Measure kernel rate and accepted work separately under home and datacentre link profiles.","Include reconnects, template changes, expired submissions and pool failover.","Attribute loss to network, local software, validation and protocol causes."],"accept":"Results use accepted work, never kernel rate alone. Ordinary-link incremental rejection stays within P10; all losses remain priced in ECO. Unreachable links may pause but must not claim paid work.","evidence":"Per-submission ledger; network trace; rejection reasons; accepted-work comparison.","priority":"GATE","profile":"P02; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":22,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"accepted work under ordinary connectivity needs the fault network F4","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"GPU-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"accepted work under ordinary connectivity needs the fault network F4","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"GPU-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"GPU-07","title":"Survive sustained thermal and power operation","setup":"Run the selected profile on actual reference machines for the P02 soak period.","steps":["Track wall power, temperatures, clocks, memory and accepted work continuously.","Inject safe power interruptions, process restarts and normal competing desktop load.","Check restored settings and compare late-run efficiency with the first stable period."],"accept":"No invalid work or unsafe persistent settings; P02/P10 stability limits hold. Thermal throttling, crashes and recovery time remain in throughput and energy denominators. A crash-free short benchmark cannot substitute for the soak.","evidence":"Seven-day time series; crash reports; settings-restoration checks; drift analysis.","priority":"BLOCKER","profile":"P01; P02; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":23,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/floor/sm-sparse.md","run_id":"team-2026-10-08","updated":"2026-10-08T21:00:32.846Z","evidence_record":{"reason":"the sustained thermal and power soak has no harness tonight: the project's own rig mines nothing under the the earlier devnet off order","at":"2026-10-08T21:00:32.846Z","method":"static","requirement_id":"GPU-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the 5090 lock pass, 66 minutes at 1,300 MHz with the four-minute reserve (floor lane 1)","run_by":"hash lane (a690540514aa453d7)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"GPU-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/floor/sm-sparse.md","in_progress":true}}},{"id":"GPU-08","title":"Reproduce the full baseline independently","setup":"Three unaffiliated operators receive F0, F2 and F3, including the final miner/prover build.","steps":["Repeat identical-SKU paired runs with documented meter calibration and environment differences.","Recompute joules and total cost per accepted work from the shared raw schema.","Investigate divergence before accepting a pooled headline or uncertainty band."],"accept":"Reproductions meet P02 tolerance and exact correctness. No unexplained divergence or selectively missing low-end cell remains. Report manufactured GPU measurements separately from modelled specialist estimates.","evidence":"Three signed reproduction packs; reconciliation report; final baseline table.","priority":"GATE","profile":"P02","cadence":"Release candidate; repeat after relevant changes","method":"Independent reproduction","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":23,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}}]},{"code":"POW","title":"Proof-of-work correctness and coupling","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","fixtures":"F0 rule set; F3 independent CPU/GPU oracles; F5 mutation corpus","summary":"Find semantic disagreements and structural shortcuts before treating a harder-looking program as a stronger defence.","tests":[{"id":"POW-01","title":"Match independent execution across every backend","setup":"Implement an independently written reference evaluator, not a wrapper around the production GPU path.","steps":["Execute the P01 corpus across every family, boundary seed and supported backend.","Exercise zero, maximum, sign, shift, rotate, overflow and unaligned-address cases allowed by the spec.","Minimise every mismatch and rerun it on clean builds."],"accept":"Bit-for-bit agreement for all valid cases and identical rejection for invalid cases. One unexplained mismatch is a blocker. Large sample counts are evidence of testing, not proof that unseen disagreements cannot exist.","evidence":"Reference implementation review; seeds/vectors; backend matrix; mismatch archive.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":24,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"docs/analysis/review-2026-10-08-b/f10/emu-test.log; build-1:/srv/artefacts/tas/same-work-20261008-01/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-01/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/opencl-rx7600-take1.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","run_id":"same-work-20261008-01","updated":"2026-10-09T05:16:46.737Z","evidence_record":{"requirement_id":"POW-01","decision":"NOT RUN","method":"GPU","cell":"harness:p01-vectors","manifest_sha":"c30ab32c","run_id":"same-work-20261008-01","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-01/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-01/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/opencl-rx7600-take1.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/opencl-rx7600.report.txt","in_progress":true,"coverage":"the million-vector campaign per backend per pack, bit-for-bit; PASS only when every supported backend reads a million vectors with zero disagreement; the malformed-input half is harness:parser-malformed","release_identity":{"commit":"c30ab32c; the CPU reference class-v6 1a938abe4; the CUDA reader the kit's gen 6 worker 804a6f7f","lockfile":"","binary":"igneum-pow sha256 0d3f3fca...; igneum-worker-cuda sha256 804a6f7f...","network_object":"the frozen class v6 object: pack hl-v6-all (tgz sha256 9131431015e102f4..., re-exported byte for byte from class-v6 1a938abe4 on build-4 at 21:44 UK, every file's sha256 equal), id 0x4de7b836cc40a4ea, epoch seed edc4fa84... (the genesis seeds) over the node1 state stream","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"POW-01's CUDA half across a dataset-day switch on the frozen object: CUDA against the CPU reference bit for bit on three ranges with the day switch at nonce 1572864. NOT same-work evidence: the node engine refuses this seed/stream pair (IgneumEngine::epoch_for's class v5 check wants the stream's block af89be5d... to equal the epoch seed edc4fa84...), so the node and pool readers cannot read it; the coordinator's ruling 22:0x UK keeps it as the CUDA and CPU-only row","reviewer":"","at":"2026-10-09T05:16:46.737Z","note":"the 5090, the 4090 and the 3090 PASS on all three phases of the frozen object across the day switch; OpenCL PASS x3 on the first rig's RX 7600 (the day switch seen; take 1 a job fault); Metal 08:30 UK, the last reader; CPU reference cross-checked against the hash lane's P01 file; in progress | Context 01 at build-1:/srv/artefacts/tas/same-work-20261008-01/job-context.json (sha256 d2540e02...). CPU reference: igneum-pow hash-bound (class-v6 1a938abe4, binary 0d3f3fca...) on build-4, 21:46 to 21:55 UK, ref-D c49fed11... over [0, 1572864), ref-D1 5ae1220d... over [1572864, 3145728); ref-D's first million lines equal the hash lane's P01 reference /srv/artefacts/packs/p01-vectors/hl-v6-all.txt byte for byte. The node1 state stream (block af89be5d...) was written on build-4 at 15:34 UK, before the 20:00 UK split; the cell carries the island label by main's 22:2x UK rule. CUDA: the 5090 PASS on all three phases (the gen 6 worker 804a6f7f, the driver at c8b65a26 or later; 23:16 to 23:20 UK: cuda-5090-1.json 1b36fb8a..., cuda-5090-2.json 70200bff... with the day switch at 1572864 driven through the worker's prepare and both boundary hashes equal to the reference (69abfadf816e767e before, 5b3fb17ad84744fd after), cuda-5090-3.json f2ecf5c7...; 1,048,576 agree each, 0 disagree, 0 missing); the 4090 PASS on all three phases (23:22 to 23:25 UK: cuda-4090-1.json cd0f5aee..., cuda-4090-2.json f864f950... with the day switch at 1572864, cuda-4090-3.json 126bd552...; 1,048,576 agree each, 0 disagree, 0 missing); The 3090 PASS on all three phases (05:07 to 05:10 UK; cuda-3090-{1,2,3}.json afa3d4a4..., 167875f9..., cc956dee...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. Metal and OpenCL are the morning's reads (08:30 UK). The case stays NOT RUN in progress until every reader has read (the coordinator's ruling 23:1x UK: a PASS by inference is forbidden). OPENCL on the first rig's RX 7600: take 1 (05:54 UK, opencl-rx7600-take1.report.txt 7fb1ee95...) was a job fault on the rig, not a reader result (the script matched an older gen-5-stamped pack of the same name in the rig's jobs tree; the worker refused it as class v5 against a class v6 job); take 2 (run-ca3-pc1-samework01-opencl-7600-20261009-b, the packs by exact path, 06:03 to 06:05 UK) reads PASS on all three phases: p1 digest 1517d572..., p2 91d63d8b... across the day switch 20730 to 20731 at 1572864 (the D+1 pack prepared in 486 ms, the boundary block 8,192 of 8,192 lines), p3 e483e82a..., each 1,048,576 of 1,048,576 equal to ref-D's and ref-D1's slices, both pack ids 0x4de7b836cc40a4ea generator 6 in the RESULT lines; 'RESULT verdict all PASS context=same-work-20261008-01 reader=opencl card=rx7600'; the report opencl-rx7600.report.txt (sha256 84683b16..., read back on build-1 at 06:09 UK). So the OpenCL reader on the RX 7600 reads all three contexts equal to the CPU reference across their day switches; Metal is the sixth reader on every context, 08:30 UK.","network_label":"on an island, not a network"},"in_progress_since":"2026-10-08T20:07:26.255Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:cuda-select-check":{"cell":"harness:cuda-select-check","manifest_sha":"964cdf6c1","coverage":{"ROT-01":"partial: the worker's high-32 nonce rollover inside a job (a job from 2^32 - 32) finds the same set on both read-back paths and the boundary nonces hash as igneum-pow; the hourly program boundary itself is the fast-time harness","POW-01":"partial: the CUDA select pass equals the full read line for line (zero hits, partial, the all-hit overflow fallback, a 96-nonce tail with a 32-lane launch, queued jobs, hits then zero, the epoch tag) and 17 sampled hashes equal igneum-pow; the million-vector campaign is harness:p01-vectors"},"at":"2026-10-08T20:07:26.255Z","method":"static","requirement_id":"POW-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"964cdf6c1","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"f10-worker-20261008","evidence":"docs/analysis/review-2026-10-08-b/f10/emu-test.log","in_progress":true},"harness:p01-vectors":{"requirement_id":"POW-01","decision":"NOT RUN","method":"GPU","cell":"harness:p01-vectors","manifest_sha":"c30ab32c","run_id":"same-work-20261008-01","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-01/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-01/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/opencl-rx7600-take1.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/opencl-rx7600.report.txt","in_progress":true,"coverage":"the million-vector campaign per backend per pack, bit-for-bit; PASS only when every supported backend reads a million vectors with zero disagreement; the malformed-input half is harness:parser-malformed","release_identity":{"commit":"c30ab32c; the CPU reference class-v6 1a938abe4; the CUDA reader the kit's gen 6 worker 804a6f7f","lockfile":"","binary":"igneum-pow sha256 0d3f3fca...; igneum-worker-cuda sha256 804a6f7f...","network_object":"the frozen class v6 object: pack hl-v6-all (tgz sha256 9131431015e102f4..., re-exported byte for byte from class-v6 1a938abe4 on build-4 at 21:44 UK, every file's sha256 equal), id 0x4de7b836cc40a4ea, epoch seed edc4fa84... (the genesis seeds) over the node1 state stream","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"POW-01's CUDA half across a dataset-day switch on the frozen object: CUDA against the CPU reference bit for bit on three ranges with the day switch at nonce 1572864. NOT same-work evidence: the node engine refuses this seed/stream pair (IgneumEngine::epoch_for's class v5 check wants the stream's block af89be5d... to equal the epoch seed edc4fa84...), so the node and pool readers cannot read it; the coordinator's ruling 22:0x UK keeps it as the CUDA and CPU-only row","reviewer":"","at":"2026-10-09T05:16:46.737Z","note":"the 5090, the 4090 and the 3090 PASS on all three phases of the frozen object across the day switch; OpenCL PASS x3 on the first rig's RX 7600 (the day switch seen; take 1 a job fault); Metal 08:30 UK, the last reader; CPU reference cross-checked against the hash lane's P01 file; in progress | Context 01 at build-1:/srv/artefacts/tas/same-work-20261008-01/job-context.json (sha256 d2540e02...). CPU reference: igneum-pow hash-bound (class-v6 1a938abe4, binary 0d3f3fca...) on build-4, 21:46 to 21:55 UK, ref-D c49fed11... over [0, 1572864), ref-D1 5ae1220d... over [1572864, 3145728); ref-D's first million lines equal the hash lane's P01 reference /srv/artefacts/packs/p01-vectors/hl-v6-all.txt byte for byte. The node1 state stream (block af89be5d...) was written on build-4 at 15:34 UK, before the 20:00 UK split; the cell carries the island label by main's 22:2x UK rule. CUDA: the 5090 PASS on all three phases (the gen 6 worker 804a6f7f, the driver at c8b65a26 or later; 23:16 to 23:20 UK: cuda-5090-1.json 1b36fb8a..., cuda-5090-2.json 70200bff... with the day switch at 1572864 driven through the worker's prepare and both boundary hashes equal to the reference (69abfadf816e767e before, 5b3fb17ad84744fd after), cuda-5090-3.json f2ecf5c7...; 1,048,576 agree each, 0 disagree, 0 missing); the 4090 PASS on all three phases (23:22 to 23:25 UK: cuda-4090-1.json cd0f5aee..., cuda-4090-2.json f864f950... with the day switch at 1572864, cuda-4090-3.json 126bd552...; 1,048,576 agree each, 0 disagree, 0 missing); The 3090 PASS on all three phases (05:07 to 05:10 UK; cuda-3090-{1,2,3}.json afa3d4a4..., 167875f9..., cc956dee...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. Metal and OpenCL are the morning's reads (08:30 UK). The case stays NOT RUN in progress until every reader has read (the coordinator's ruling 23:1x UK: a PASS by inference is forbidden). OPENCL on the first rig's RX 7600: take 1 (05:54 UK, opencl-rx7600-take1.report.txt 7fb1ee95...) was a job fault on the rig, not a reader result (the script matched an older gen-5-stamped pack of the same name in the rig's jobs tree; the worker refused it as class v5 against a class v6 job); take 2 (run-ca3-pc1-samework01-opencl-7600-20261009-b, the packs by exact path, 06:03 to 06:05 UK) reads PASS on all three phases: p1 digest 1517d572..., p2 91d63d8b... across the day switch 20730 to 20731 at 1572864 (the D+1 pack prepared in 486 ms, the boundary block 8,192 of 8,192 lines), p3 e483e82a..., each 1,048,576 of 1,048,576 equal to ref-D's and ref-D1's slices, both pack ids 0x4de7b836cc40a4ea generator 6 in the RESULT lines; 'RESULT verdict all PASS context=same-work-20261008-01 reader=opencl card=rx7600'; the report opencl-rx7600.report.txt (sha256 84683b16..., read back on build-1 at 06:09 UK). So the OpenCL reader on the RX 7600 reads all three contexts equal to the CPU reference across their day switches; Metal is the sixth reader on every context, 08:30 UK.","network_label":"on an island, not a network"},"suite:miner":{"requirement_id":"POW-01","decision":"NOT RUN","method":"native","cell":"suite:miner","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","in_progress":false,"coverage":"partial: the pack re-check seam against the pack's 96 vectors (recheck_pack); the million-vector campaign is harness:p01-vectors","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; miner on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"POW-02","title":"Validate generated programs and index folding","setup":"Use the frozen grammar, opcode semantics and index-fold rule; include boundary and malformed programs.","steps":["Enumerate small constrained programs and fuzz the full generator at P01 depth.","Check bounds, valid dependencies, address distribution and forbidden encodings.","Compare source-level operations with optimised compiled code for removed or altered work."],"accept":"No accepted program violates semantics, termination or memory bounds. Distribution claims have predeclared tests and effect-size limits; passing randomness checks is not treated as a cryptographic proof.","evidence":"Generator/fuzzer logs; reduced counterexamples; disassembly comparison; index tests.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":24,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"docs/analysis/review-2026-10-08-b/f10/packfile-test.log;docs/analysis/review-2026-10-08-b/f10/geometry-check-mini.log; docs/analysis/class-v6/family-gate.md; docs/analysis/class-v6/rows/chainseed-census-1a938abe4.md; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-pow.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"POW-02","decision":"NOT RUN","method":"native","cell":"suite:pow","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-pow.log","in_progress":false,"coverage":"partial: program derivation, ds55 geometry, the v6 fold, the packs and the spec read-back tests; the independent re-implementation and the index-fold census are the hash lane's harnesses","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; pow on release-2.0.2 77b5acc5 (box4, 226s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T20:07:26.255Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:pack-geometry":{"cell":"harness:pack-geometry","manifest_sha":"964cdf6c1","coverage":{"POW-02":"partial: the dataset geometry rule (exact word count, items, multiply-shift, 64-bit bytes, the floor-log2 and 2^32 refusals, missing leaves) agrees across the CUDA and OpenCL loader and the Metal host on 19 conformance vectors and the two checked-in packs (master review I06, gate INT-10); the rest of POW-02 is suite:pow"},"at":"2026-10-08T20:07:26.255Z","method":"static","requirement_id":"POW-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"964cdf6c1","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"f10-worker-20261008","evidence":"docs/analysis/review-2026-10-08-b/f10/packfile-test.log;docs/analysis/review-2026-10-08-b/f10/geometry-check-mini.log","in_progress":true},"harness:family-gate":{"requirement_id":"POW-02","decision":"NOT RUN","method":"native","cell":"harness:family-gate","manifest_sha":"1a938abe4","run_id":"family-gate-20261008c","evidence":"docs/analysis/class-v6/family-gate.md","in_progress":false,"coverage":"partial: the acceptance rule's measured rates on drawn classes (the per-candidate rejection, the attempt histogram, the exhaustion count against the independent-attempt arithmetic, the (c'') and (c''') floors' refuse rates and the pre-floor ratio spread per width), the per-site largest-bucket and index-bit statistics at the rule's own 2^20 sample with the seven known-failed seeds (p4, p8, p10, p34, p212, p225, p15), and the F8-form census at 2^20 on the F8 seed set where the attack-f8 mirror validates (0 of 96 warps mismatching); the semantics, termination and memory-bound half and the independent re-implementation are the suite's and the hash lane's; the effect-size limits are the family-gate.md thresholds, predeclared in its section 3","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.800Z"},"census:class-v6":{"requirement_id":"POW-02","decision":"PASS","method":"native","cell":"census:class-v6","manifest_sha":"1a938abe4","run_id":"census-v6-chainseed-trace-20261008-2305","evidence":"docs/analysis/class-v6/rows/chainseed-census-1a938abe4.md","in_progress":false,"coverage":"partial: the fold's index statistics and the grammar bounds on 256 seeds plus the F8 set; the malformed programs are owed to harness:parser-malformed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:12:37.378Z"},"suite:pow":{"requirement_id":"POW-02","decision":"NOT RUN","method":"native","cell":"suite:pow","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-pow.log","in_progress":false,"coverage":"partial: program derivation, ds55 geometry, the v6 fold, the packs and the spec read-back tests; the independent re-implementation and the index-fold census are the hash lane's harnesses","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; pow on release-2.0.2 77b5acc5 (box4, 226s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"POW-03","title":"Test whether live state is unavoidable","setup":"Take the 64-register candidate and the cheapest independently proposed storage organisations.","steps":["Trace value liveness across dependent reads and final output, distinguishing distinct information from duplicated values.","Try banking, compression, recomputation, fewer ports and time-multiplexed contexts.","Quantify the best complete-system cost/throughput trade-off rather than the reference register count."],"accept":"Production selection is supported by measured or physically modelled penalties after these alternatives. G2 requires the P03 improvement; an attractive source-level register count alone does not pass.","evidence":"Liveness traces; alternative implementations; Pareto table; reviewer analysis.","priority":"GATE","profile":"P03; P04","cadence":"Release candidate; repeat after relevant changes","method":"Experiment + independent hardware review","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":24,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"FAIL","evidence_path":"docs/analysis/class-v6/connected-state.md; docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261009-placed-32lane","updated":"2026-10-09T07:32:30.503Z","evidence_record":{"requirement_id":"POW-03","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"partial: the live state held in an SRAM macro per 8 lanes with a time-multiplexed single port and operand isolation, the complete-system cost in section 6; the liveness trace itself is the connected-state lane's tool","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the connected-state class KILLED (1.10x against the 1.25x gate; live state costs a clock-gated file nothing)","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"POW-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/connected-state.md","in_progress":true},"experiment:connected-state":{"requirement_id":"POW-03","decision":"FAIL","method":"GPU","cell":"experiment:connected-state","manifest_sha":"7cfa422a","run_id":"kills-20261008","evidence":"docs/analysis/class-v6/connected-state.md","in_progress":false,"coverage":"the experiment ran and its claim failed: live state does not make the work unavoidable for a chip; the master's register row 18 reads FAIL, published, never PASSED","release_identity":{"commit":"7cfa422a","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"the claims the two experiments carried are withdrawn: live state as an ASIC barrier (connected state), a cheaper mixed-FP32 lane","reviewer":"","at":"2026-10-08T21:00:32.906Z"},"adversary:mf-placed":{"requirement_id":"POW-03","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"partial: the live state held in an SRAM macro per 8 lanes with a time-multiplexed single port and operand isolation, the complete-system cost in section 6; the liveness trace itself is the connected-state lane's tool","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"}}},{"id":"POW-04","title":"Evaluate connected-resource restructuring","setup":"Use a candidate initially matched to baseline instruction count, read count and dataset size.","steps":["Connect state, addresses, arithmetic and lane communication according to the written hypothesis.","Measure GPU cost and allow the specialist reviewer to redesign the entire core.","Repeat on held-out program seeds and compare the worst supported adversary, not only the original design."],"accept":"The selected upgrade meets P03 and improves the adversarial result outside declared uncertainty. A negative experiment remains a negative outcome; adopting a different design requires a new frozen comparison.","evidence":"Matched workloads; GPU runs; redesigned core estimates; held-out results.","priority":"GATE","profile":"P03; P04","cadence":"Release candidate; repeat after relevant changes","method":"Controlled experiment","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":25,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/connected-state.md; docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261009-placed-32lane","updated":"2026-10-09T07:32:30.503Z","evidence_record":{"requirement_id":"POW-04","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"partial: the 64-register window's cost on the macro core (sections 4 and 5, agreeing with the k lane's gated-flop row within 5 percent); the restructured candidate's GPU cost is the invention lane's","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the same experiment, D2(a) closed","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"POW-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/connected-state.md","in_progress":true},"adversary:mf-placed":{"requirement_id":"POW-04","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"partial: the 64-register window's cost on the macro core (sections 4 and 5, agreeing with the k lane's gated-flop row within 5 percent); the restructured candidate's GPU cost is the invention lane's","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"}}},{"id":"POW-05","title":"Prevent amortised cheap winning attempts","setup":"Prepare valid templates, nonces, intermediate-state captures and independent acceptance checks.","steps":["Vary nonce, payout identity, transactions, roots and other committed fields after expensive work.","Try replay, precomputation, shared prefixes, partial evaluation and many cheap suffix candidates.","Price any valid strategy against fresh evaluation; independently review all bindings."],"accept":"Invalid modifications are rejected. Any valid cost-saving strategy is incorporated into ADV and must still meet P04/ECO gates. No unresolved shortcut is hidden behind passing reference vectors.","evidence":"Attack implementations; valid/invalid controls; work-cost analysis; binding review.","priority":"BLOCKER","profile":"P01; P04","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":25,"owner_lane":"pool design seat (a3832b1c3b274b310)","run_status":"NOT RUN","evidence_path":"docs/analysis/binding-review-2026-10.md (sections 1 to 5a; master ad5a54c5)","run_id":"binding-review-2026-10-08-a05","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"amortised cheap winning attempts are the attack lanes' grind and era harnesses (tools/attack/f7-era, f9-grind), not in the release matrix; their rows come from those lanes","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"POW-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"status_note":"REVIEWED: fixed by construction (binding), not applicable (final digest); native tests ok on build-2; no change for 2.0","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the binding review: twelve reuse paths, none below the honest cost; five open questions B1 to B5","run_by":"pool design seat (a3832b1c3b274b310)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"POW-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"binding-review-2026-10-08-a05","evidence":"docs/analysis/binding-review-2026-10.md (sections 1 to 5a; master ad5a54c5)","in_progress":false}}},{"id":"POW-06","title":"Bound verifier work and malformed-input cost","setup":"Use ordinary CPU validators with a manifest-defined resource budget and untrusted submissions.","steps":["Submit shortest/longest programs, malformed encodings and adversarial memory references.","Measure verification time, peak memory and work amplification across valid and invalid inputs.","Sustain the approved hostile request rate while ordinary valid traffic continues."],"accept":"All semantics remain correct and P09 resource budgets hold. Invalid traffic cannot cause unbounded allocation, crashes or disproportionate free work. Rate limits must not replace consensus validation.","evidence":"CPU profiles; adversarial corpus; allocation traces; valid-traffic latency.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":25,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/p01-partb-20261008-01/summary.jsonl","run_id":"p01-partb-20261008-01","updated":"2026-10-08T18:28:32.463Z","evidence_record":{"cell":"harness:parser-malformed","manifest_sha":"417c4a57","coverage":{"POW-06":"partial: three parsers of external bytes (the state stream, the igneum_ RPC params, the pool job line), ten thousand seeded malformed cases each, zero panics, every case under 500 ms (the slowest 152 microseconds); 'accepted' counts mutations that left a valid input, not a parser fault; the verifier work bound (the other half of the accept text) is the proving lane's measurement"},"at":"2026-10-08T18:28:32.463Z","method":"static","requirement_id":"POW-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T18:28:32.463Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:parser-malformed":{"cell":"harness:parser-malformed","manifest_sha":"417c4a57","coverage":{"POW-06":"partial: three parsers of external bytes (the state stream, the igneum_ RPC params, the pool job line), ten thousand seeded malformed cases each, zero panics, every case under 500 ms (the slowest 152 microseconds); 'accepted' counts mutations that left a valid input, not a parser fault; the verifier work bound (the other half of the accept text) is the proving lane's measurement"},"at":"2026-10-08T18:28:32.463Z","method":"static","requirement_id":"POW-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"p01-partb-20261008-01","evidence":"build-1:/srv/artefacts/tas/p01-partb-20261008-01/summary.jsonl","in_progress":true}}},{"id":"POW-07","title":"Constrain any mixed-resource or FP32 branch","setup":"If this branch is excluded, verify that it is unreachable and not claimed; if included, use a separate frozen candidate.","steps":["Specify exact rounding, fusion, special values and backend behaviour before compiling.","Differentially test all supported architectures and allow numerical-domain simplification in the specialist model.","Include verifier cost and candidate energy in P03/P04, not just arithmetic-unit area."],"accept":"Included branches achieve exact agreed semantics and all hardware budgets. An excluded branch earns no performance credit. No approximate operation or unspecified compiler choice enters consensus.","evidence":"Scope decision; semantic specification; vectors; simplified datapath model.","priority":"BLOCKER","profile":"P00; P01; P03","cadence":"Release candidate; repeat after relevant changes","method":"Conditional implementation test","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":26,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"FAIL","evidence_path":"docs/analysis/class-v6/rows/pow-07-fp32-unreachable.md; docs/analysis/class-v6/mixed-fp32.md; docs/analysis/class-v6/rows/pow-07-fp32-unreachable.md","run_id":"kills-20261008","updated":"2026-10-08T21:00:32.906Z","evidence_record":{"requirement_id":"POW-07","decision":"FAIL","method":"GPU","cell":"experiment:mixed-fp32","manifest_sha":"7cfa422a","run_id":"kills-20261008","evidence":"docs/analysis/class-v6/mixed-fp32.md; docs/analysis/class-v6/rows/pow-07-fp32-unreachable.md","in_progress":false,"coverage":"the branch ran and its claim failed: the FP32 branch costs the card more energy and widens the chip edge; the master's register row 12 reads FAIL, published; the branch is excluded and unreachable on master (the grep evidence stays)","release_identity":{"commit":"7cfa422a","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"the claims the two experiments carried are withdrawn: live state as an ASIC barrier (connected state), a cheaper mixed-FP32 lane","reviewer":"","at":"2026-10-08T21:00:32.906Z"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:pow":{"cell":"suite:pow","manifest_sha":"b24dfc162","coverage":{"POW-02":"partial: program derivation, ds55 geometry, the v6 fold, the packs and the spec read-back tests; the independent re-implementation and the index-fold census are the hash lane's harnesses","POW-08":"partial: the freeze list and the generator version pin; the public-claim scrub is the site gate's","POW-07":"the mixed FP32 branch is excluded and unreachable: no class flag reaches an FP op in igneum-pow on master (the mixedfp lane's branch is not on master); evidence the grep of the emitters on master, recorded by the hash lane"},"at":"2026-10-08T19:59:34.316Z","method":"native","requirement_id":"POW-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"b24dfc162","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"hash-lane-20261008-batch2","evidence":"docs/analysis/class-v6/rows/pow-07-fp32-unreachable.md","in_progress":true},"experiment:mixed-fp32":{"requirement_id":"POW-07","decision":"FAIL","method":"GPU","cell":"experiment:mixed-fp32","manifest_sha":"7cfa422a","run_id":"kills-20261008","evidence":"docs/analysis/class-v6/mixed-fp32.md; docs/analysis/class-v6/rows/pow-07-fp32-unreachable.md","in_progress":false,"coverage":"the branch ran and its claim failed: the FP32 branch costs the card more energy and widens the chip edge; the master's register row 12 reads FAIL, published; the branch is excluded and unreachable on master (the grep evidence stays)","release_identity":{"commit":"7cfa422a","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"the claims the two experiments carried are withdrawn: live state as an ASIC barrier (connected state), a cheaper mixed-FP32 lane","reviewer":"","at":"2026-10-08T21:00:32.906Z"}}},{"id":"POW-08","title":"Keep rejected mechanisms out of the shipped claim","setup":"Inventory long programs, select trees, SM gating, wider reads, sealed classes, random epoch lengths, per-tier scoring and VRF draws.","steps":["Retain their historic negative tests and realistic SRAM instruction-memory control.","Inspect the release for reintroduction through renamed settings or hidden paths.","Require a new written hypothesis and complete adversarial retest for any proposed return."],"accept":"Excluded levers remain excluded unless separately approved and retested. Flip-flop instruction-memory area is never presented as the cost of a realistic SRAM implementation.","evidence":"Decision register; binary/config scan; negative-control results.","priority":"GATE","profile":"P00; P03","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":26,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-pow.log; build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt; docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","run_id":"hash-lane-20261009-batch4","updated":"2026-10-09T03:58:33.097Z","evidence_record":{"requirement_id":"POW-08","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: rw-w4, rw-w32, rw-w64 and the 1p5x long-program packs as regression controls for the excluded levers","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:pow":{"requirement_id":"POW-08","decision":"NOT RUN","method":"native","cell":"suite:pow","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-pow.log","in_progress":false,"coverage":"partial: the freeze list and the generator version pin; the public-claim scrub is the site gate's","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; pow on release-2.0.2 77b5acc5 (box4, 226s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"bench:fleet-pods":{"requirement_id":"POW-08","decision":"NOT RUN","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"417c4a57","run_id":"p02-fleet-pods-20261008-01","evidence":"build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt","in_progress":false,"coverage":"partial: W = 16 on four cards","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.980Z"},"bench:pc1-packs":{"requirement_id":"POW-08","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: rw-w4, rw-w32, rw-w64 and the 1p5x long-program packs as regression controls for the excluded levers","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"}}}]},{"code":"ADV","title":"Programmable specialist adversaries","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","fixtures":"F2 reference GPUs; F6 RTL/physical models; all published families","summary":"Give the opponent permission to adapt, share resources and remain operational; test cost rather than imagined chip death.","tests":[{"id":"ADV-01","title":"Build a multi-family programmable opponent","setup":"Provide the complete published family bank and future known parameter schedule to the reviewer.","steps":["Design one programmable architecture that supports all retained families, including firmware and emulation paths.","Optimise clocks, lanes, ports and pipelines without requiring a graphics-card layout.","Verify its outputs against POW vectors before measuring any advantage."],"accept":"At least the P04 design diversity is evaluated; every estimated competitive design is functionally validated. Inability of one narrow design to adapt is not evidence that all chips expire.","evidence":"Architecture reports; functional simulations; adaptation matrix; reviewer signature.","priority":"GATE","profile":"P01; P04","cadence":"Release candidate; repeat after relevant changes","method":"Independent hardware study","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":27,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261009-placed-32lane","updated":"2026-10-09T07:32:30.503Z","evidence_record":{"requirement_id":"ADV-01","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the mf core (18 families, SRAM window and imem macros, operand isolation, 5-phase port) placed and routed on ASAP7 with SPEF and a gate-level VCD; k per family and per draw; outputs checked against the RTL simulation's checksums per tag, not yet against the POW vectors (owed)","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the 18-family programmable core placed and routed (9.36 pJ per lane-op, k 0.64 same-node)","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ADV-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true},"adversary:mf-placed":{"requirement_id":"ADV-01","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the mf core (18 families, SRAM window and imem macros, operand isolation, 5-phase port) placed and routed on ASAP7 with SPEF and a gate-level VCD; k per family and per draw; outputs checked against the RTL simulation's checksums per tag, not yet against the POW vectors (owed)","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"}}},{"id":"ADV-02","title":"Price shared, reduced and reconstructed memory","setup":"Allow multiple engines to share a dataset and to store selected fractions rather than a complete per-engine copy.","steps":["Sweep sharing factors, memory fractions, caches and recomputation depth across many simultaneous hashes.","Include construction/update amortisation, bandwidth contention and retained state.","Take the most favourable feasible point for the specialist into the complete-board model."],"accept":"No omitted feasible trade-off materially lowers the accepted cost estimate. Any winning alternative is included in P04 and ECO; capacity alone is not accepted as an energy bound.","evidence":"Sweep definitions; energy/bandwidth data; best-feasible envelope; excluded-design reasons.","priority":"GATE","profile":"P04","cadence":"Release candidate; repeat after relevant changes","method":"Model + adversarial implementation","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":27,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261008-placed-8lane","updated":"2026-10-08T20:41:20.327Z","evidence_record":{"requirement_id":"ADV-02","decision":"NOT RUN","method":"model","cell":"adversary:d2b","manifest_sha":"3a8874fef","run_id":"adversary-20261008-placed-8lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"memory sharing, partial stores at the measured window-layer hit rates (and hit 0.50 with layer 8 off), recomputation and the set-up amortisation on the complete board (section 13); the formal memory model's terms (section 16)","release_identity":{"commit":"3a8874fef","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:41:20.327Z"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"D2(b): the stored-half hybrid, memory sharing, recomputation priced (the placed hybrid 1.93x same-node at the mean hit)","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ADV-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true},"adversary:d2b":{"requirement_id":"ADV-02","decision":"NOT RUN","method":"model","cell":"adversary:d2b","manifest_sha":"3a8874fef","run_id":"adversary-20261008-placed-8lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"memory sharing, partial stores at the measured window-layer hit rates (and hit 0.50 with layer 8 off), recomputation and the set-up amortisation on the complete board (section 13); the formal memory model's terms (section 16)","release_identity":{"commit":"3a8874fef","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:41:20.327Z"}}},{"id":"ADV-03","title":"Attack with data-local and hybrid execution","setup":"Permit distributed memories, state migration and companion CPU/GPU/FPGA components.","steps":["Compare moving computation, intermediate state or fetched data to each read location.","Test specialised mining alongside outsourced proof generation rather than assuming one physical GPU does both.","Include interconnect, host, synchronisation, idle and conversion costs."],"accept":"The cheapest feasible combined system is included in the adversarial envelope and economic model. A worker identity or account is never treated as proof of a single physical device.","evidence":"Hybrid architecture diagrams; traffic traces; system cost and energy ledger.","priority":"GATE","profile":"P04","cadence":"Release candidate; repeat after relevant changes","method":"Independent system modelling","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":27,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261009-placed-32lane","updated":"2026-10-09T07:32:30.503Z","evidence_record":{"requirement_id":"ADV-03","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the data-local, hybrid and companion-host rows of multi-family-adversary.md sections 11, 13 and 14 (bit counts closed-form; the hop and wire energies claimed)","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"data-local execution moves nothing (2,112 bits of live state against an 80-bit read)","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ADV-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true},"adversary:mf-placed":{"requirement_id":"ADV-03","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the data-local, hybrid and companion-host rows of multi-family-adversary.md sections 11, 13 and 14 (bit counts closed-form; the hop and wire energies claimed)","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"}}},{"id":"ADV-04","title":"Measure profitable selective participation","setup":"Use all declared families plus held-out generated programs and the protocol difficulty rule.","steps":["Identify favourable execution paths and add cheap fallbacks for other periods.","Simulate entry/exit around profitable periods, including idle time, compilation and re-entry costs.","Evaluate revenue and costs across the full schedule, not just average program energy."],"accept":"Intermittent specialists meet P04/ECO limits when evaluated on full-period economics. A weak tail cannot be concealed by a favourable mean; known valid shortcuts must be priced.","evidence":"Per-program advantage distribution; policy simulator; full-period returns.","priority":"GATE","profile":"P04; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":28,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261008-placed-8lane","updated":"2026-10-08T20:41:20.327Z","evidence_record":{"requirement_id":"ADV-04","decision":"NOT RUN","method":"model","cell":"adversary:d2b","manifest_sha":"3a8874fef","run_id":"adversary-20261008-placed-8lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"selective participation over 2,000 era draws under the layer 1 band with two reserve families live per epoch, the specialist's revenue against its ratio gain (section 13); downtime and re-entry priced as the DAA window's lag, not simulated against the difficulty rule itself (owed)","release_identity":{"commit":"3a8874fef","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:41:20.327Z"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"selective participation 9 percent spread across 2,000 era draws","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ADV-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true},"adversary:d2b":{"requirement_id":"ADV-04","decision":"NOT RUN","method":"model","cell":"adversary:d2b","manifest_sha":"3a8874fef","run_id":"adversary-20261008-placed-8lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"selective participation over 2,000 era draws under the layer 1 band with two reserve families live per epoch, the specialist's revenue against its ratio gain (section 13); downtime and re-entry priced as the DAA window's lag, not simulated against the difficulty rule itself (owed)","release_identity":{"commit":"3a8874fef","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:41:20.327Z"}}},{"id":"ADV-05","title":"Validate physical and complete-board costs","setup":"Use feasible process/library assumptions and documented component boundaries; no fabricated foundry access.","steps":["Model SRAM macros, ports, wiring, clocking, memory PHYs, external memory, host and power conversion.","Run place-and-route where available; mark unmodelled items as uncertainty rather than zero.","Compare against a calibrated existing hardware block or equivalent validation case."],"accept":"No decision-critical cost is omitted. Physically unvalidated or proprietary estimates are labelled and independently bounded; synthesis alone cannot earn a manufactured-chip claim.","evidence":"Netlist/physical reports; macro assumptions; bill of materials; model calibration.","priority":"GATE","profile":"P04","cadence":"Release candidate; repeat after relevant changes","method":"Independent physical-design review","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":28,"owner_lane":"k lane (a3c9601a6d4686fe1)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md; docs/analysis/class-v6/floor/shadow-k.md; docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261009-placed-32lane","updated":"2026-10-09T07:32:30.503Z","evidence_record":{"requirement_id":"ADV-05","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"partial: the SRAM macros, ports, wiring, clocking and the complete-board terms are modelled in sections 2.3, 5 and 6 with the unmodelled items carried as uncertainty; the calibration against an existing hardware block is the k lane's bare-lane row beside it, owed as a named comparison","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the complete GDDR7 machine 1.5x same-node, 1.8x a node ahead at the placed energy; the honest same-node bracket 1.5x to 2.1x: FAIL against P04 at R_E 1.5, served as such","run_by":"k lane (a3c9601a6d4686fe1)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"FAIL against P04 at R_E 1.5","method":"static","requirement_id":"ADV-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/multi-family-adversary.md; docs/analysis/class-v6/floor/shadow-k.md","in_progress":true},"adversary:mf-placed":{"requirement_id":"ADV-05","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"partial: the SRAM macros, ports, wiring, clocking and the complete-board terms are modelled in sections 2.3, 5 and 6 with the unmodelled items carried as uncertainty; the calibration against an existing hardware block is the k lane's bare-lane row beside it, owed as a named comparison","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"}}},{"id":"ADV-06","title":"Separate process advantage from specialisation","setup":"Evaluate same-node, one-node-ahead and two-node-ahead scenarios with explicit technology definitions.","steps":["Use independently justified process factors, voltages, memory and packaging assumptions for each design.","Allow reusable IP and modular revisions; credit GPU improvement consistently.","Evaluate measurement confidence and model-parameter sensitivity separately."],"accept":"P04 primary limits hold for all competitive-reference cells; two-node futures are reported and pass the predeclared economic stress envelope. A model range is never labelled a statistical confidence interval without justification.","evidence":"Node-specific reports; factor provenance; uncertainty and sensitivity tables.","priority":"GATE","profile":"P04; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":28,"owner_lane":"k lane (a3c9601a6d4686fe1)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/floor/shadow-k.md","run_id":"floor-k-20261008-rows-repeat","updated":"2026-10-08T21:09:38.300Z","evidence_record":{"requirement_id":"ADV-06","decision":"NOT RUN","method":"model","cell":"review:k-lane-shadow-k","manifest_sha":"86e5b0fb","run_id":"floor-k-20261008-rows-repeat","evidence":"docs/analysis/class-v6/floor/shadow-k.md","in_progress":false,"coverage":"partial: the placed gated cores and the adversary's forms are modelled in shadow-k.md; the independent review remains","release_identity":{"commit":"86e5b0fb","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:09:38.300Z"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the node column: same-node and a node ahead kept separate (k 0.78 / 0.56 / 0.40 at N5 / N3 / N2)","run_by":"k lane (a3c9601a6d4686fe1)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ADV-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/floor/shadow-k.md","in_progress":true},"review:k-lane-shadow-k":{"requirement_id":"ADV-06","decision":"NOT RUN","method":"model","cell":"review:k-lane-shadow-k","manifest_sha":"86e5b0fb","run_id":"floor-k-20261008-rows-repeat","evidence":"docs/analysis/class-v6/floor/shadow-k.md","in_progress":false,"coverage":"partial: the placed gated cores and the adversary's forms are modelled in shadow-k.md; the independent review remains","release_identity":{"commit":"86e5b0fb","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:09:38.300Z"}}},{"id":"ADV-07","title":"Evaluate lifetime without forced obsolescence","setup":"Assume multi-year productive survival and known schedule support before testing optional retirement penalties.","steps":["Price firmware, emulation, memory expansion, companion hardware and incremental redesign.","Include 1-, 3- and 5-year productive lifetimes plus idle/resale possibilities.","Grant a retirement credit only if all feasible cheaper adaptations lose competitiveness."],"accept":"The primary case does not require chip death or a fresh full development bill per family. Every retirement credit has a documented adaptation comparison; incompatible and unprofitable are reported separately.","evidence":"Lifetime/adaptation ledger; revision costs; feasible-alternative analysis.","priority":"GATE","profile":"P04; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":29,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md section 14; docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261009-placed-32lane","updated":"2026-10-09T07:32:30.503Z","evidence_record":{"requirement_id":"ADV-07","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the lifetime table and the six-row transition matrix (sections 7 and 14) on the placed rows; the 32-lane genesis comparator placed on adv-g","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the transition matrix: no row loses competitiveness, the three-year life holds, zero obsolescence credit","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ADV-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/multi-family-adversary.md section 14","in_progress":true},"adversary:mf-placed":{"requirement_id":"ADV-07","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the lifetime table and the six-row transition matrix (sections 7 and 14) on the placed rows; the 32-lane genesis comparator placed on adv-g","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"}}},{"id":"ADV-08","title":"Independently challenge the best-cost envelope","setup":"Publish the non-sensitive model and negative results; commission an unaffiliated second hardware reviewer.","steps":["Reward cheaper valid designs and reproduced shortcuts, not confirmation of the preferred number.","Re-run P04 with the strongest submitted feasible design, including a low-cost funded-development case.","Record unresolved modelling disagreements and future technology exclusions."],"accept":"Both reviews accept the scoped envelope or all material disagreements are resolved transparently. Passing supports only evaluated designs and conditions, never a universal bound on all future silicon.","evidence":"Two review reports; challenge log; final envelope; unresolved-limit statement.","priority":"GATE","profile":"P04","cadence":"Release candidate; repeat after relevant changes","method":"Independent challenge/review","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":29,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261009-placed-32lane","updated":"2026-10-09T07:32:30.503Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"adversary:mf-placed":{"requirement_id":"ADV-08","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the best-cost envelope on the complete machine (section 6) and the SRAM-die ticket reconciliation with lane B (section 15); the unaffiliated second reviewer is not this lane's","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"}},"evidence_record":{"requirement_id":"ADV-08","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"aaf3405b","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the best-cost envelope on the complete machine (section 6) and the SRAM-die ticket reconciliation with lane B (section 15); the unaffiliated second reviewer is not this lane's","release_identity":{"commit":"aaf3405b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T07:32:30.503Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"in_progress_since":"2026-10-08T20:41:20.327Z"}]},{"code":"ROT","title":"Epochs, seeds and memory transitions","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","fixtures":"F0 activation rules; F4 fault network; F5 historical and boundary vectors","summary":"Transitions must agree across nodes and remain usable during failures; crossing a boundary is not a chip-retirement test.","tests":[{"id":"ROT-01","title":"Agree across every hourly boundary","setup":"Use real nodes, CPU/GPU miners and independent clocks around successive program boundaries.","steps":["Submit valid work immediately before, at and after the activation boundary under clock skew and delayed delivery.","Restart nodes from both sides and replay the same headers.","Compare selected seed, program, validity, rewards and local wall-clock dependence."],"accept":"All honest nodes derive identical consensus outcomes from the frozen rule. Late work is handled exactly as specified; no wall-clock ambiguity or cross-backend split occurs.","evidence":"Boundary vectors; node/miner traces; acceptance and reward matrix.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":30,"owner_lane":"fast-time lane (a8be71a0db962911c)","run_status":"NOT RUN","evidence_path":"docs/analysis/review-2026-10-08-b/f10/emu-test.log","run_id":"f10-worker-20261008","updated":"2026-10-08T20:07:26.255Z","evidence_record":{"cell":"harness:cuda-select-check","manifest_sha":"964cdf6c1","coverage":{"ROT-01":"partial: the worker's high-32 nonce rollover inside a job (a job from 2^32 - 32) finds the same set on both read-back paths and the boundary nonces hash as igneum-pow; the hourly program boundary itself is the fast-time harness","POW-01":"partial: the CUDA select pass equals the full read line for line (zero hits, partial, the all-hit overflow fallback, a 96-nonce tail with a 32-lane launch, queued jobs, hits then zero, the epoch tag) and 17 sampled hashes equal igneum-pow; the million-vector campaign is harness:p01-vectors"},"at":"2026-10-08T20:07:26.255Z","method":"static","requirement_id":"ROT-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"964cdf6c1","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T20:07:26.255Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:cuda-select-check":{"cell":"harness:cuda-select-check","manifest_sha":"964cdf6c1","coverage":{"ROT-01":"partial: the worker's high-32 nonce rollover inside a job (a job from 2^32 - 32) finds the same set on both read-back paths and the boundary nonces hash as igneum-pow; the hourly program boundary itself is the fast-time harness","POW-01":"partial: the CUDA select pass equals the full read line for line (zero hits, partial, the all-hit overflow fallback, a 96-nonce tail with a 32-lane launch, queued jobs, hits then zero, the epoch tag) and 17 sampled hashes equal igneum-pow; the million-vector campaign is harness:p01-vectors"},"at":"2026-10-08T20:07:26.255Z","method":"static","requirement_id":"ROT-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"964cdf6c1","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"f10-worker-20261008","evidence":"docs/analysis/review-2026-10-08-b/f10/emu-test.log","in_progress":true}}},{"id":"ROT-02","title":"Cross weekly and family boundaries together","setup":"Use the retained schedule in F0, including coincident program, parameter and family changes.","steps":["Run every known family transition and all coincident-boundary combinations on production code.","Interrupt downloads, compilation and restart during activation; include mixed old/new clients.","Repeat selected cases under real elapsed time and the remainder under disclosed accelerated time."],"accept":"Deterministic activation, documented old-client behaviour and no unsafe fallback. Compilation/setup costs satisfy P03; accelerated runs are not reported as years of operating history.","evidence":"Transition matrix; code-path evidence; compile timing; old-client logs.","priority":"BLOCKER","profile":"P01; P03; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":30,"owner_lane":"fast-time lane (a8be71a0db962911c)","run_status":"NOT RUN","evidence_path":"v5-fasttime 92bf6a7f","run_id":"team-2026-10-08","updated":"2026-10-08 18:3x UK","evidence_record":{"what_was_run":"the class v6 object crossing at its floor on 617cb441","run_by":"fast-time lane (a8be71a0db962911c)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ROT-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the class v6 object crossing at its floor on 617cb441","run_by":"fast-time lane (a8be71a0db962911c)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ROT-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"v5-fasttime 92bf6a7f","in_progress":true}}},{"id":"ROT-03","title":"Test miner-voted bring-forward governance","setup":"Freeze eligibility, threshold, windows and activation semantics before testing; do not invent a no-veto rule.","steps":["Attempt threshold-minus-one, threshold, conflicting proposals, duplicate votes and coalition withholding.","Partition voters, restore them and test vote-key substitution through pools.","Verify adoption and refusal behaviour of already running nodes."],"accept":"The actual mechanism enforces F0, with authenticated voting and no conflicting activation. Any coalition capable of blocking or manipulating changes is disclosed; labels such as no veto do not override arithmetic.","evidence":"Executable governance model; signed-vote corpus; coalition/partition results.","priority":"BLOCKER","profile":"P00; P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":30,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","evidence_path":"docs/plans/igneum-2.0.md D5","run_id":"team-2026-10-08","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"miner-voted bring-forward needs a vote harness on the fault network F4","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"ROT-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the bring-forward mechanism specified in the D5 block","run_by":"node lane (a283f5f0d364ceef0)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ROT-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/plans/igneum-2.0.md D5","in_progress":true}}},{"id":"ROT-04","title":"Resist seed selection and faster evaluators","setup":"Provide the specified seed pipeline and delay proof implementation plus independently parameterised fast-adversary models.","steps":["Try withholding candidate seeds, grinding alternatives, replaying delay proofs and biased checkpoint selection.","Vary adversarial speed advantage and outage duration; trace influence on program choice.","Validate inputs, parameters and proofs against independent vectors."],"accept":"No invalid seed or proof is accepted; selection advantage stays within the approved threat-model bound. Missing bounds block this gate. A delay mechanism is not credited as generic ASIC resistance.","evidence":"Seed/grinding simulations; speed sensitivity; proof vectors; threat-model signoff.","priority":"BLOCKER","profile":"P00; P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":31,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"seed-selection resistance is the census harness (the class v6 invention lane), not yet in the matrix","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"ROT-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"seed-selection resistance is the census harness (the class v6 invention lane), not yet in the matrix","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"ROT-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"ROT-05","title":"Continue or pause correctly when finality stops","setup":"Stop checkpoint signing while mining continues, then cross seed and family boundaries.","steps":["Remove the required signing weight and observe the documented fallback or safe pause.","Prevent access to any founder seed service; restart from persisted state.","Restore the stated fault assumptions and verify deterministic recovery."],"accept":"Mining/seed behaviour matches F0 without manufacturing certificates or reinterpreting finality. Safety holds during the outage; liveness is required only after its stated assumptions return.","evidence":"Fault timeline; seed/certificate history; node-state comparison; recovery log.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":31,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"ROT-05","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: the finality-stopped pause tests","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:consensus":{"requirement_id":"ROT-05","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: the finality-stopped pause tests","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"ROT-06","title":"Activate datasets without hidden exclusions","setup":"Freeze memory sizes, support horizon and sync/update procedure; test all advertised roles.","steps":["Construct the next dataset while current work remains active; test slow disks, low free memory and interruption.","Try stale-state/dataset submissions and maliciously expensive state growth where coupling exists.","Measure data transfer, restart and excluded-card costs before approving progression."],"accept":"No invalid stale work is accepted, no supported card silently fails, and P06 is met. Hardware retirement and sync burden are included in the economic decision, not treated as automatic chip protection.","evidence":"Dataset hashes; memory/update traces; stale-work tests; exclusion decision.","priority":"BLOCKER","profile":"P01; P06","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":31,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"ROT-06","decision":"NOT RUN","method":"native","cell":"suite:core","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","in_progress":false,"coverage":"partial: the dataset activation and digest tests; a live activation is the fast-time harness","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; core on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:core":{"requirement_id":"ROT-06","decision":"NOT RUN","method":"native","cell":"suite:core","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","in_progress":false,"coverage":"partial: the dataset activation and digest tests; a live activation is the fast-time harness","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; core on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"ROT-07","title":"Ablate redundant rotation layers","setup":"Use matched baseline and ablated variants in the lab; do not change a running public network.","steps":["Remove each weekly/family component independently and measure adversarial cost, GPU setup and verifier complexity.","Include favourable-period specialists and all retained known families.","Keep a layer only with a distinct, independently supported benefit or a documented non-resistance purpose."],"accept":"Every retained layer has explicit justification and full boundary coverage. Redundant complexity is removed or its rationale recorded; the security model does not double-count the same versatility cost.","evidence":"Ablation report; decision log; complexity/cost comparison.","priority":"GATE","profile":"P03; P04","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":32,"owner_lane":"lane D family gate (a07a99a3788566af2)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/family-gate.md","run_id":"family-gate-20261008c","updated":"2026-10-08T21:49:19.800Z","evidence_record":{"requirement_id":"ROT-07","decision":"NOT RUN","method":"native","cell":"harness:family-gate","manifest_sha":"1a938abe4","run_id":"family-gate-20261008c","evidence":"docs/analysis/class-v6/family-gate.md","in_progress":false,"coverage":"partial: the acceptance-side ablation rows (layer 8 off against the same-crate windowed control: the draw cost, the floors' costs, the hot-set and 1.2x ceiling, the bit-R read; the mixer and shape axes' per-era invisibility and verifier rows), docs/analysis/class-v6/family-gate.md sections 6.4 to 6.12; the adversarial cost and the GPU setup rows per layer are the hash lane's and the adversary lane's","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.800Z"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the family gate's coverage (38,000 eras) and the rotation prototype paused as the no-rescue control","run_by":"lane D family gate (a07a99a3788566af2)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ROT-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/family-gate.md","in_progress":true},"harness:family-gate":{"requirement_id":"ROT-07","decision":"NOT RUN","method":"native","cell":"harness:family-gate","manifest_sha":"1a938abe4","run_id":"family-gate-20261008c","evidence":"docs/analysis/class-v6/family-gate.md","in_progress":false,"coverage":"partial: the acceptance-side ablation rows (layer 8 off against the same-crate windowed control: the draw cost, the floors' costs, the hot-set and 1.2x ceiling, the bit-R read; the mixer and shape axes' per-era invisibility and verifier rows), docs/analysis/class-v6/family-gate.md sections 6.4 to 6.12; the adversarial cost and the GPU setup rows per layer are the hash lane's and the adversary lane's","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.800Z"}}},{"id":"ROT-08","title":"Pass the no-new-rules counterfactual","setup":"Freeze the complete published rule bank and known schedule for the five-year evaluation.","steps":["Allow a programmable adversary to know and survive all planned changes.","Remove assumed future emergency instructions and manual retirement actions from the model.","Run the required ECO scenarios and link them to independent network-transition tests."],"accept":"Competitiveness survives the approved envelope without future rescue assumptions. Any result that needs unannounced changes fails this claim; ordinary bug maintenance is distinguished from anti-chip intervention.","evidence":"Frozen-rule model; scenario results; excluded-rescue audit; G5 evidence.","priority":"GATE","profile":"P04; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":32,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/family-gate.md","run_id":"family-gate-20261008c","updated":"2026-10-08T21:49:19.800Z","evidence_record":{"requirement_id":"ROT-08","decision":"NOT RUN","method":"native","cell":"harness:family-gate","manifest_sha":"1a938abe4","run_id":"family-gate-20261008c","evidence":"docs/analysis/class-v6/family-gate.md","in_progress":false,"coverage":"partial: the no-rescue control document (38,000 drawn eras of the parameter family through the acceptance, the bound arithmetic on the counts, the honest line of what the gate cannot see), family-gate.md sections 1 to 6; the competitiveness envelope and the economic half are ECO's","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.800Z"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:family-gate":{"requirement_id":"ROT-08","decision":"NOT RUN","method":"native","cell":"harness:family-gate","manifest_sha":"1a938abe4","run_id":"family-gate-20261008c","evidence":"docs/analysis/class-v6/family-gate.md","in_progress":false,"coverage":"partial: the no-rescue control document (38,000 drawn eras of the parameter family through the acceptance, the bound arithmetic on the counts, the honest line of what the gate cannot see), family-gate.md sections 1 to 6; the competitiveness envelope and the economic half are ECO's","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.800Z"}}}]},{"code":"ECO","title":"Five-year coexistence economics","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","fixtures":"F6 adversarial costs; F7 scenario model; F2 operator costs","summary":"Test the world after specialised hardware exists, including new entrants and an already-funded competitor.","tests":[{"id":"ECO-01","title":"Reconcile complete cost per accepted work","setup":"Use benchmark outputs, current-source cost inputs recorded at execution time and separate reference scenarios.","steps":["Calculate hardware annualisation, electricity, host, cooling/hosting, failures, fees, downtime and residual value.","Use actual accepted work and independently verify units and period conversions.","Cross-check formulas using hand-worked fixtures, edge cases and a second implementation."],"accept":"All material costs and rejected-work effects appear once; model totals reconcile to raw inputs. No GPU upgrade is free, development cost is not double-counted, and burn is not mislabelled operator income.","evidence":"Versioned model; unit fixtures; independent reconciliation; input sources.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":33,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"sim/economy/coexist/README.md","run_id":"eco05-20261008-02","updated":"2026-10-08T20:07:38.167Z","evidence_record":{"cell":"model:coexist-fixtures","manifest_sha":"3f2050ab","coverage":{"ECO-01":"partial: the hand-worked fixtures and the second implementation; the independent reconciliation of inputs and units remains","ECO-08":"partial: the package runs from the served files (README, inputs with sources and labels, fixtures); the independent report, the rerun and the perturbations remain"},"at":"2026-10-08T20:07:38.167Z","method":"model","requirement_id":"ECO-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"3f2050ab","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T20:07:38.167Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"model:coexist-fixtures":{"cell":"model:coexist-fixtures","manifest_sha":"3f2050ab","coverage":{"ECO-01":"partial: the hand-worked fixtures and the second implementation; the independent reconciliation of inputs and units remains","ECO-08":"partial: the package runs from the served files (README, inputs with sources and labels, fixtures); the independent report, the rerun and the perturbations remain"},"at":"2026-10-08T20:07:38.167Z","method":"model","requirement_id":"ECO-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"3f2050ab","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco05-20261008-02","evidence":"sim/economy/coexist/README.md","in_progress":true}}},{"id":"ECO-02","title":"Separate existing-owner and new-entrant viability","setup":"Use both installed hardware and purchasable replacement hardware in every mandatory cohort.","steps":["Evaluate marginal operation separately from recovery of a new purchase.","Stress resale at zero, hardware failures, financing and replacement cycles.","Report break-even power price and total cost relative to the strongest feasible specialist."],"accept":"P12 competitiveness conditions hold for the predeclared cohorts in required sustainable worlds. Existing-owner profitability cannot substitute for viable new entry; cards outside the envelope remain visible.","evidence":"Owner/entrant curves; price-date records; break-even tables; cohort outcomes.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":33,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"ECO-03","title":"Let the specialist keep its sunk development","setup":"Use three development cases: fully funded elsewhere, source-range low and source-range high.","steps":["Evaluate private mining, public hardware sales and a hybrid business model.","Allow shared IP, incremental revisions, multi-year survival and resale where justified.","Re-evaluate GPU entry after the specialist fleet is already installed."],"accept":"The coexistence claim does not depend on recovering the original chip research bill. Required P12 cases meet the approved envelope even at zero incremental development cost; failures cannot be hidden by the $23M/$340M source thresholds.","evidence":"Business-model variants; sunk-cost case; full cash-flow and adaptation records.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":33,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"ECO-04","title":"Model entry, exit and difficulty response","setup":"Use independently reviewed dynamic operator policies, not fixed market shares.","steps":["Let agents buy, sell, switch off, re-enter and choose tasks based on declared costs and expected income.","Apply the actual difficulty/reward rules and test optimistic and adversarial liquidity/capital availability.","Compare equilibrium and transient outcomes across independent starting conditions."],"accept":"Mandatory worlds satisfy P12 without an imposed GPU share or artificial specialist capacity limit. Concentration, oscillations and excluded regions are reported; model behaviour matches unit and conservation checks.","evidence":"Agent policies; sensitivity seeds; market-share paths; independent model review.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":34,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"ECO-05","title":"Stress success, contraction and cheap electricity","setup":"Freeze mandatory scenarios before results: revenue bands, tariff range, lifetimes and demand states.","steps":["Run the P12 factorial grid plus adversarial combinations selected by the independent reviewer.","Test a large successful network as well as weak-revenue and heterogeneous-tariff cases.","Distinguish feasible sustained-entry worlds from collapse scenarios with no rational profitable operator."],"accept":"No small-network or token-appreciation assumption props up the primary claim. Required viable worlds pass the envelope; collapse worlds show honest contraction and safety, not fabricated profits. Failure regions are explicit.","evidence":"Scenario register; full result cube; boundary plots; failed-world explanations.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":34,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"FAIL","evidence_path":"docs/analysis/class-v6/eco-05-results.md","run_id":"eco05-20261008-02","updated":"2026-10-08T20:07:38.167Z","evidence_record":{"cell":"model:eco05","manifest_sha":"3f2050ab","coverage":{"ECO-05":"full on the frozen register's grid and the eight adversarial rows at the team's reconciled specialist rows; the independent reviewer's own adversarial rows (ECO-08) remain"},"at":"2026-10-08T20:07:38.167Z","method":"model","requirement_id":"ECO-05","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"3f2050ab","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"model:eco05":{"cell":"model:eco05","manifest_sha":"3f2050ab","coverage":{"ECO-05":"full on the frozen register's grid and the eight adversarial rows at the team's reconciled specialist rows; the independent reviewer's own adversarial rows (ECO-08) remain"},"at":"2026-10-08T20:07:38.167Z","method":"model","requirement_id":"ECO-05","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"3f2050ab","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco05-20261008-02","evidence":"docs/analysis/class-v6/eco-05-results.md","in_progress":false}}},{"id":"ECO-06","title":"Fund security and proving as issuance falls","setup":"Use the frozen supply, halving, fee, burn and reward rules rather than source prose assumptions.","steps":["Reconcile revenue reaching miners, internal provers, developers and burns over the full horizon.","Test flat/declining fees and no external proving income; separately introduce external demand.","Calculate capacity and security-provider coverage after each reward transition."],"accept":"Recurring compensation is explicit and internally consistent; mandatory sustainable scenarios meet P12. Burned amounts are never counted as payments, and external operator income is not assumed to fund internal work automatically.","evidence":"Issuance/fee ledger; scenario cash flows; funding-shortfall report.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":34,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"ECO-07","title":"Price memory growth and honest-card displacement","setup":"Use GPU-05 and ROT-06 costs with the cheapest specialist adaptation.","steps":["For each dataset increment, compare specialist cost increases with excluded cards and lost proving capacity.","Include ordinary-owner replacement, resale and reloading expenses.","Run alternate bounded schedules without assigning automatic chip death."],"accept":"The retained schedule meets P06/P12 and has an evidence-backed net competitiveness benefit. A schedule that mainly harms accessible GPUs fails; excluded tiers and mitigations are documented before activation.","evidence":"Per-step cost/retention table; alternative schedules; approval record.","priority":"GATE","profile":"P06; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":35,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"ECO-08","title":"Reproduce and adversarially audit the model","setup":"Give an independent economist or qualified analyst the code, inputs and frozen success criteria.","steps":["Recalculate required worlds and perturb favourable assumptions against the team.","Check dependence on discounts, utilisation, capital limits, artificial prices and future upgrades.","Publish the sensitivity range and state which conclusions are conditional."],"accept":"Material results reproduce, required scenarios pass and no unacknowledged assumption dominates the claim. The model supports a bounded coexistence conclusion, not a percentage probability that no chip will appear.","evidence":"Independent report; rerun outputs; model limitations; approved claim envelope.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Independent economic review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":35,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"sim/economy/coexist/README.md","run_id":"eco05-20261008-02","updated":"2026-10-08T20:07:38.167Z","evidence_record":{"cell":"model:coexist-fixtures","manifest_sha":"3f2050ab","coverage":{"ECO-01":"partial: the hand-worked fixtures and the second implementation; the independent reconciliation of inputs and units remains","ECO-08":"partial: the package runs from the served files (README, inputs with sources and labels, fixtures); the independent report, the rerun and the perturbations remain"},"at":"2026-10-08T20:07:38.167Z","method":"model","requirement_id":"ECO-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"3f2050ab","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T20:07:38.167Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"model:coexist-fixtures":{"cell":"model:coexist-fixtures","manifest_sha":"3f2050ab","coverage":{"ECO-01":"partial: the hand-worked fixtures and the second implementation; the independent reconciliation of inputs and units remains","ECO-08":"partial: the package runs from the served files (README, inputs with sources and labels, fixtures); the independent report, the rerun and the perturbations remain"},"at":"2026-10-08T20:07:38.167Z","method":"model","requirement_id":"ECO-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"3f2050ab","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco05-20261008-02","evidence":"sim/economy/coexist/README.md","in_progress":true}}}]},{"code":"EVM","title":"Execution and developer compatibility","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","fixtures":"F0 execution-fork semantics; F5 transactions/contracts; F4 multi-node network","summary":"Keep familiar applications while making every difference and metering rule explicit and reproducible.","tests":[{"id":"EVM-01","title":"Match the selected EVM semantics","setup":"Pin the intended execution fork, revm version and all Igneum deviations in F0.","steps":["Run the applicable upstream execution/state fixtures plus independently written deviation tests.","Execute identical blocks on multiple nodes and compare roots, receipts, logs, gas and failure outcomes.","Minimise mismatches and distinguish intended differences from implementation defects."],"accept":"All applicable vectors match; every deviation has a documented test and developer consequence. No claim of universal Ethereum equivalence or Ethereum settlement security is inferred.","evidence":"Fixture/version inventory; root/receipt diffs; deviation matrix.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":36,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"docs/build/compatibility.md","run_id":"team-2026-10-08","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"no EVM conformance-vector harness is mapped tonight; the exec suite does not run the reference test vectors","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"EVM-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"/compatibility 20 of 20 rows PASSED on igneum-devnet-4","run_by":"reference-apps lane (a2060899d2a27d31c)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"EVM-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/build/compatibility.md","in_progress":true}}},{"id":"EVM-02","title":"Preserve transaction binding and replay protection","setup":"Use signed transfers, contract calls and deployment transactions with boundary field values.","steps":["Alter chain identity, nonce, signature, fee caps and recipient after signing.","Replay across nodes, forks and distinct test networks; resubmit around reorganisation.","Check mempool admission and final consensus execution independently."],"accept":"Unauthorised, wrong-network or duplicate spends are rejected according to F0. Valid replacements follow the declared rule; mempool filtering alone is not evidence of consensus enforcement.","evidence":"Signed corpus; admission/execution outcomes; account-state reconciliation.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":36,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"EVM-02","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: the replay tests on the day stream; the signature and chain-id binding vectors are an EVM harness still to map","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:exec":{"requirement_id":"EVM-02","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: the replay tests on the day stream; the signature and chain-id binding vectors are an EVM harness still to map","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"EVM-03","title":"Test two-dimensional fees and proving limits","setup":"Freeze fee dimensions, estimator rules, abort behaviour and refund policy.","steps":["Run workloads near and beyond execution and proving budgets, including state-heavy pathological cases.","Compare estimated fees with charged fees and validate rollback/receipt status on abort.","Mutate a block producer to omit or undercharge expensive work."],"accept":"Deterministic metering, charged amounts and aborted state agree across nodes and proofs. Resource bounds hold; fee estimates meet P09 for accepted supported cases. Undercharged invalid blocks cannot bypass consensus.","evidence":"Metering traces; fee fixtures; estimator errors; invalid-block rejection.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":36,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/compat/results.json","run_id":"ra-20261008T1744-evm","updated":"2026-10-08T19:13:20.781Z","evidence_record":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:13:20.781Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-compat":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1744-evm","evidence":"tools/reference-apps/compat/results.json","in_progress":true}}},{"id":"EVM-04","title":"Exercise block context and randomness assumptions","setup":"Use contracts sensitive to timestamp, height/context, randomness and ordering.","steps":["Compare the declared Igneum semantics with developers' documented expectations.","Test boundary transitions, miner-influenced inputs and adversarial ordering in the isolated network.","Run dependency reviews for applications using these values for economic decisions."],"accept":"Semantics match F0 and differences are surfaced in compatibility documentation. No source of miner influence is marketed as unbiased randomness; incompatible applications are not included in the compatibility claim.","evidence":"Context-contract results; threat notes; compatibility exclusions.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":37,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/compat/results.json","run_id":"ra-20261008T1744-evm","updated":"2026-10-08T19:13:20.781Z","evidence_record":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:13:20.781Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-compat":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1744-evm","evidence":"tools/reference-apps/compat/results.json","in_progress":true}}},{"id":"EVM-05","title":"Run representative contract integration journeys","setup":"Use versioned transfer/token, NFT, multisignature, exchange and upgrade-pattern fixtures where supported.","steps":["Deploy, initialise, transact, revert and upgrade each contract using ordinary tooling.","Exercise events, logs, balances, storage and call traces across node restart/reorganisation.","Compare expected application invariants with native execution and proved results."],"accept":"Supported journeys preserve their stated invariants; all deviations are documented. Example deployment success alone cannot stand in for application-level correctness or financial audit.","evidence":"Contract fixture hashes; transaction journeys; invariant and state comparisons.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":37,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/compat/results.json","run_id":"ra-20261008T1744-evm","updated":"2026-10-08T19:13:20.781Z","evidence_record":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:13:20.781Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-compat":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1744-evm","evidence":"tools/reference-apps/compat/results.json","in_progress":true}}},{"id":"EVM-06","title":"Validate wallets, RPC and indexers","setup":"Pin supported RPC methods and response semantics; use normal developer clients and an independent indexer.","steps":["Test fee estimation, pending/final states, subscriptions, pagination and reconnects.","Reindex from genesis or the documented trust anchor after pruning and restart.","Compare logs, receipts and balances with independently validated chain state."],"accept":"No missing/duplicate canonical records; unsupported methods are explicit. UI states distinguish included, executed, proven and finalised. Malformed RPC input cannot crash validators or leak secrets.","evidence":"RPC conformance report; reindex comparison; reconnect/edge-case logs.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":37,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/compat/results.json","run_id":"ra-20261008T1744-evm","updated":"2026-10-08T19:13:20.781Z","evidence_record":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:13:20.781Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-compat":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1744-evm","evidence":"tools/reference-apps/compat/results.json","in_progress":true}}},{"id":"EVM-07","title":"Handle execution denial-of-service workloads","setup":"Create bounded pathological bytecode, calls, state growth, storage and precompile inputs.","steps":["Measure CPU, memory, disk and proving cost against charged budgets.","Saturate admission with invalid/expensive requests while valid workloads continue.","Restart mid-execution and verify atomic state recovery."],"accept":"P09 limits hold with no unbounded free work or divergent rollback. State remains consistent after crash; availability under overload follows the declared admission policy, not silent dropping of accepted transactions.","evidence":"Resource profiles; adversarial corpus; state recovery comparisons.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":38,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"execution DoS workloads need the workload catalogue F3","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"EVM-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"execution DoS workloads need the workload catalogue F3","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"EVM-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"EVM-08","title":"Verify controlled execution and verifier upgrades","setup":"Prepare two authorised versions and malicious, stale or unknown versions.","steps":["Cross activation with mixed clients, queued transactions and proofs from both versions.","Bind each accepted proof to the correct execution semantics and program identity.","Exercise a failed software distribution without altering consensus activation."],"accept":"No unknown or wrong-version execution is accepted. Pre/post-boundary handling is deterministic and documented; software delivery cannot silently redefine transaction semantics or proof acceptance.","evidence":"Upgrade vectors; mixed-version traces; manifest/version bindings.","priority":"BLOCKER","profile":"P01; P08; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":38,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"PASS","evidence_path":"docs/plans/proving-enforcement/cache-history-2.json","run_id":"enforced-proving-20261008-03","updated":"2026-10-08T22:24:23.945Z","evidence_record":{"requirement_id":"EVM-08","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the controlled verifier upgrade as a key succession (both pairs embedded, the window, the start refusal) and its fast-time crossing; the mixed-client crossing on the live network and the failed-distribution step are not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"},"dependency":"the first pin into elf/prior/ (the node lane, key-succession-pin, tonight by 21:00) and the devnet-4 succession height (main, by 22:00 under the floor rule)","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:proving-enforcement":{"requirement_id":"EVM-08","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the controlled verifier upgrade as a key succession (both pairs embedded, the window, the start refusal) and its fast-time crossing; the mixed-client crossing on the live network and the failed-distribution step are not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"}}}]},{"code":"ZKP","title":"Consensus-enforced proof validity","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","fixtures":"F0 pinned programs/verifiers; F5 valid and hostile proof corpus; unmodified validators","summary":"The validator, not merely the official producer, must reject unauthorised or invalid proof records and rewards.","tests":[{"id":"ZKP-01","title":"Reject missing and invalid proofs","setup":"Start from a native-correct statement and an independently verified valid proof.","steps":["Submit the statement with no proof, truncated bytes, random bytes and targeted proof mutations using a modified producer.","Submit the genuine proof as a positive control through ordinary network paths.","Inspect block acceptance and resulting reward/state on unmodified validators."],"accept":"Every invalid proof record is rejected and earns no reward; valid controls succeed. A producer-side filter is not sufficient. Record rejection semantics exactly as defined by F0.","evidence":"Hostile record corpus; validator decisions; before/after balances; positive controls.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":39,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log; docs/plans/proving-enforcement/cache-history-2.json; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"ZKP-01","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: a proof-less or wrong-statement block refused by consensus","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:exec":{"requirement_id":"ZKP-01","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: a real proof verifies, a wrong statement and garbage are refused (nativeverify)","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"harness:proving-enforcement":{"requirement_id":"ZKP-01","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the seven refusals as named tests (no proof never inserted; a wrong proof and another program id invalidate the block; the honest record paid once) and the fast-time crossing with a modified producer; the genuine-proof positive control through ordinary network paths is the testnet's live read, not run here","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"},"suite:consensus":{"requirement_id":"ZKP-01","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: a proof-less or wrong-statement block refused by consensus","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"ZKP-02","title":"Bind program, verifier and security parameters","setup":"Use valid proofs from authorised and unauthorised programs and parameter sets.","steps":["Swap program digest, verifier version, security settings and verification key where applicable.","Attempt downgrade through configuration, serialized metadata or an old node path.","Test authorised boundary transitions and unsupported future identities."],"accept":"Only explicitly authorised combinations are accepted in the correct epoch. No implicit trust in producer-supplied metadata or lower-security fallback; all accepted settings have scoped soundness review.","evidence":"Identity/parameter matrix; rejection traces; cryptographic review.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":39,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"PASS","evidence_path":"docs/plans/proving-enforcement/cache-history-2.json","run_id":"enforced-proving-20261008-03","updated":"2026-10-08T22:24:23.945Z","evidence_record":{"requirement_id":"ZKP-02","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the pinned-id refusal on a real proof, the daemon's start refusal, key succession (the epochs, the accepted ids, a verdict counting only where its pair is accepted, the seven refusals on both sides of the height, the start refusal under a succession, the real-proof refusal of a pair the epoch does not accept) and the fast-time crossing of a scheduled succession with a real proof under each pair; the downgrade through an old node path is not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"},"dependency":"the mixed-pair crossing needs the node lane's first pin into elf/prior/ (key-succession-pin, tonight by 21:00) and the next-pair proof (build-2:/home/build/enforced-fixtures/next-pair-block-56-shard-0-compressed.bin)","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:proving-enforcement":{"requirement_id":"ZKP-02","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the pinned-id refusal on a real proof, the daemon's start refusal, key succession (the epochs, the accepted ids, a verdict counting only where its pair is accepted, the seven refusals on both sides of the height, the start refusal under a succession, the real-proof refusal of a pair the epoch does not accept) and the fast-time crossing of a scheduled succession with a real proof under each pair; the downgrade through an old node path is not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"}}},{"id":"ZKP-03","title":"Bind network, epoch, job and state roots","setup":"Prepare valid proofs for distinct chains, epochs, jobs and initial/final states.","steps":["Replay each proof under another network, job, epoch, shard range or state commitment.","Alter public inputs while retaining the proof and test valid-but-wrong-context statements.","Check duplicated and reordered records across forks and replayed sync data."],"accept":"Every misbound proof is rejected; valid authorised replays follow only explicitly allowed semantics and never create extra rewards. Native reexecution cannot conceal missing proof-context binding.","evidence":"Binding matrix; public-input hashes; replay traces; reward reconciliation.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":39,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log; docs/plans/proving-enforcement/cache-history-2.json","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"ZKP-03","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: a snapshot under another digest refused, the epoch streams bound to the digest","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:exec":{"requirement_id":"ZKP-03","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: a snapshot under another digest refused, the epoch streams bound to the digest","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"harness:proving-enforcement":{"requirement_id":"ZKP-03","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the chain binding (a record signed for another network), the replay, a wrong block, a wrong shard, a stale record outside the window; the fork and replayed-sync steps are not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"}}},{"id":"ZKP-04","title":"Prevent reward and payout substitution","setup":"Use proofs that commit to authorisation and all reward-relevant fields required by F0.","steps":["Alter payout key, amount, beneficiary, source work or fee allocation independently.","Supply correct execution over malicious producer-provided consensus/reward inputs.","Compare consensus-derived rewards with the proved/publicly authenticated derivation."],"accept":"Unauthorised payout changes and incorrect consensus inputs are rejected; no statement accepted merely because execution over supplied inputs is internally correct. Legitimate authorisations are preserved.","evidence":"Mutation cases; reward derivation trace; signature/proof binding review.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":40,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"PASS","evidence_path":"docs/plans/proving-enforcement/cache-history-2.json","run_id":"enforced-proving-20261008-03","updated":"2026-10-08T22:24:23.945Z","evidence_record":{"requirement_id":"ZKP-04","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: an altered payout address (after signing and re-signed), a statement over altered rewards or payouts vetoed natively, the inputs commitment of P22 stage 1 (shard 0 and the aggregator carry the commitment the node recomputes) and the derivation commitment of stage 2 (the payouts derived in the guest from the carried records); the rewards' proved derivation is P22 stage 3, PENDING","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"},"dependency":"the proof side of the derivation (P22 stages 1 to 3) changes both guests' public values and so both program ids, so it ships only through a key succession (docs/design/key-succession.md, key-succession-node 291ee6ae); stage 1 (the inputs commitment carried by shard 0 and the aggregator, vetoed natively) is on branch p22-stage-1 under test since 18:46 UK; the clocks (stage 1 09:00, stage 2 14:00, stage 3's design 18:00 UK on 9 October 2026) stand because the succession's first height is asked of main by 22:00 under the floor rule; without a named height the stages are built and tested on their branch and wait for the succession that carries them","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:proving-enforcement":{"requirement_id":"ZKP-04","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: an altered payout address (after signing and re-signed), a statement over altered rewards or payouts vetoed natively, the inputs commitment of P22 stage 1 (shard 0 and the aggregator carry the commitment the node recomputes) and the derivation commitment of stage 2 (the payouts derived in the guest from the carried records); the rewards' proved derivation is P22 stage 3, PENDING","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"}}},{"id":"ZKP-05","title":"Make proof payment idempotent across races","setup":"Use competing provers submitting valid results for the same work and simulate retries/reorganisations.","steps":["Submit simultaneous duplicates, reordered receipts and repeated messages after disconnects.","Crash validators between validation and reward application, then recover.","Reconcile canonical payouts against the exact F0 duplicate policy."],"accept":"Only the authorised total payment is made; no double payout, lost accepted entitlement or fork-retained balance. Transactions and payout records recover atomically.","evidence":"Concurrency schedule; canonical payment ledger; crash/recovery evidence.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":40,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"PASS","evidence_path":"docs/plans/proving-enforcement/cache-history-2.json","run_id":"enforced-proving-20261008-03","updated":"2026-10-08T22:24:23.945Z","evidence_record":{"requirement_id":"ZKP-05","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: a duplicate of a paid record pays nothing and the honest record pays once; the race, reorder and crash-recover steps are not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:proving-enforcement":{"requirement_id":"ZKP-05","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: a duplicate of a paid record pays nothing and the honest record pays once; the race, reorder and crash-recover steps are not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"}}},{"id":"ZKP-06","title":"Verify aggregation coverage and completeness","setup":"Build valid multi-shard workloads plus omitted, duplicated, overlapping and misordered shard sets.","steps":["Attempt an aggregate with a correct outer proof but wrong coverage/public-input construction.","Alter shard ranges, roots and aggregation-program identity.","Verify native execution, aggregate validity and coverage commitments independently."],"accept":"Only complete, correctly ordered authorised coverage is accepted. No valid proof of the wrong computation becomes an accepted chain result; aggregation failures do not fabricate successful delivery.","evidence":"Coverage corpus; aggregate/public-input verification; rejection ledger.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":40,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-p2p-flows.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"ZKP-06","decision":"NOT RUN","method":"native","cell":"suite:p2p-flows","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-p2p-flows.log","in_progress":false,"coverage":"partial: proof relay coverage tests; aggregation completeness is the proving lane's test set","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; p2p-flows on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:p2p-flows":{"requirement_id":"ZKP-06","decision":"NOT RUN","method":"native","cell":"suite:p2p-flows","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-p2p-flows.log","in_progress":false,"coverage":"partial: proof relay coverage tests; aggregation completeness is the proving lane's test set","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; p2p-flows on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"ZKP-07","title":"Review soundness and verifier resource limits","setup":"Provide proof-system code, parameters, patches and the pinned verification path to an independent specialist.","steps":["Review soundness assumptions, parameter margins and consequences of performance patches.","Fuzz deserialization and adversarial proofs; measure verification CPU and memory under load.","Cross-check an independent verifier or reference path and test crash containment."],"accept":"P09 review and resource requirements pass with no unresolved critical/high finding. Random proof rejection counts are not described as evidence of a particular cryptographic security level.","evidence":"Scoped soundness review; parameter sheet; fuzzer corpus; verifier profiles.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Independent cryptographic review + testing","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":41,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"ZKP-08","title":"Preserve authority and audit all acceptance paths","setup":"Inspect block import, sync, RPC, light verification, database restoration and fast paths.","steps":["Try bypassing validation via each path with a proof rejected by the normal path.","Remove the dominant prover/aggregator and have independent replacements process available inputs.","Attempt to use proof-production status as ordering, voting or finality authority."],"accept":"No bypass accepts invalid work; proofs alone confer no unauthorised consensus control. Replacement and pause behaviour meet F0/P07/P08 without privileged keys or a trusted aggregator shortcut.","evidence":"Path coverage report; bypass corpus; replacement run; authority checks.","priority":"BLOCKER","profile":"P01; P07; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":41,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"PASS","evidence_path":"docs/plans/proving-enforcement/cache-history-2.json","run_id":"enforced-proving-20261008-03","updated":"2026-10-08T22:24:23.945Z","evidence_record":{"requirement_id":"ZKP-08","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the body rule and the payment rule read one floor, a producer with its body rule off still pays nothing on honest nodes (the fast-time crossing); the replacement-prover and authority steps are not run; the proof side of the derivation is P22 stage 3, PENDING","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"},"dependency":"the proof side of the derivation (P22 stages 1 to 3) changes both guests' public values and so both program ids, so it ships only through a key succession (docs/design/key-succession.md, key-succession-node 291ee6ae); stage 1 (the inputs commitment carried by shard 0 and the aggregator, vetoed natively) is on branch p22-stage-1 under test since 18:46 UK; the clocks (stage 1 09:00, stage 2 14:00, stage 3's design 18:00 UK on 9 October 2026) stand because the succession's first height is asked of main by 22:00 under the floor rule; without a named height the stages are built and tested on their branch and wait for the succession that carries them","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:proving-enforcement":{"requirement_id":"ZKP-08","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the body rule and the payment rule read one floor, a producer with its body rule off still pays nothing on honest nodes (the fast-time crossing); the replacement-prover and authority steps are not run; the proof side of the derivation is P22 stage 3, PENDING","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"}}}]},{"code":"CAP","title":"Sustained proving and delivery","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","fixtures":"F3 meaningful workload catalogue; F4 network; F8 external job harness","summary":"A correct fast shard is only one stage; capacity, latency, payment and retries must work together.","tests":[{"id":"CAP-01","title":"Reproduce the historical consumer-shard result","setup":"Recover the exact source-era workload/build if available; keep it separate from the release-candidate workload.","steps":["Attempt independent reproduction of the 4,717,439-cycle workload and reported 3060/4060/4070 results.","Record proof format, memory, energy, host and whether aggregation/compression are included.","Repeat on the final release and label all configuration changes."],"accept":"Historical figures are either reproduced within P02 tolerance or corrected/labelled non-reproduced. Release acceptance uses the current complete workload, never an unmatched historical time or a smaller substituted shard.","evidence":"Historical/current manifests; proof verification; timing and memory records.","priority":"GATE","profile":"P02; P07","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":42,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"the consumer-shard reproduction is the fleet lane's pods","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"the consumer-shard reproduction is the fleet lane's pods","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"CAP-02","title":"Prove on the actual mining configuration","setup":"Use final dataset sizes, registers, clocks, drivers and proof pipeline on every advertised proving tier.","steps":["Run mining alone, proving alone, concurrent execution and supported time-sharing.","Measure wall energy, memory headroom, reloads, proof latency and forgone accepted mining work.","Induce memory pressure and GPU task failure without losing wallet control."],"accept":"Every advertised mode completes correctly and meets P06/P07. Net output includes opportunity cost; unsupported concurrency is not claimed. Mining-only vendor support remains separately labelled.","evidence":"Four-mode results; OOM/failure logs; memory and opportunity-cost ledger.","priority":"BLOCKER","profile":"P01; P06; P07","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":42,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"docs/analysis/floor-memory-profile-2026-10-08.md","run_id":"v607-floor-memory-20261008T2059Z","updated":"2026-10-08T22:22:49.946Z","evidence_record":{"reason":"proving on the mining configuration is the fleet lane's","at":"2026-10-08T22:22:49.946Z","method":"static","requirement_id":"CAP-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"rows:v607-floor-memory":{"requirement_id":"CAP-02","decision":"NOT RUN","method":"GPU","cell":"rows:v607-floor-memory","manifest_sha":"c411bae9a","run_id":"v607-floor-memory-20261008T2059Z","evidence":"docs/analysis/floor-memory-profile-2026-10-08.md","in_progress":true,"coverage":"partial: proving alone (shard and the whole segment path) on the 8 GB and 12 GB tiers on the default job path, the time-share refusal beside the miner with the miner unharmed, memory headroom and proof latency; wall energy only on the 3060 (the 4060 host has no power sensor); induced GPU task failure and wallet control not run; 16 GB and 24 GB tiers not run","release_identity":{"commit":"c411bae9a (branch v607-floor-memory off cef5234b5)","lockfile":"proving/igneum-prove/Cargo.lock at cef5234b5","binary":"sp1-gpu-server db37c38b5feabdec5bbfd0298446da89f6a5d144125e399d6ab617f64f9cb61d (igneum-floor-sm8689-v607.tgz 9c02fcc6a3f045d3167c1d9cb6e22c584ea862189d11997754a57cbe1b0d355b); igneum-prove-host-0317 71bc2438856bb141; igneum-prove-host v607 66662219a3630772","network_object":"none (fixture proofs on rented pods, no network)","activation":"none","profile_hashes":"floor patch 9098c3e5979d057031f43588668201d1f7a53ab17e980c1eaf896cd5e6f38575"},"claim_impact":"the 2.0 proving statement's memory condition per tier: a 12 GB card runs the whole segment path alone; an 8 GB card proves shards only (its aggregation fails) and is refused the chain before setup; both time-share beside the 5.5 GiB miner; the 16 GB and 24 GB tiers unmeasured tonight","reviewer":"","at":"2026-10-08T22:22:49.946Z"}},"in_progress_since":"2026-10-08T22:22:49.946Z"},{"id":"CAP-03","title":"Measure the entire request-to-payment path","setup":"Assign a unique job ID and immutable timestamps to every stage of F3/F8 jobs.","steps":["Record request, input availability, assignment, execution, shard proof, aggregation, verification, delivery and payment.","Compare monotonic elapsed time with any protocol/DAA clock and document their relationship.","Reconcile failed, censored, retried and abandoned jobs with the original request denominator."],"accept":"No hidden stage or missing job; latency distributions and cost cover the complete path. Delivery, finality and payment are reported separately; protocol seconds are not silently relabelled wall-clock seconds.","evidence":"Stage event ledger; clock calibration; end-to-end latency/cost report.","priority":"GATE","profile":"P07","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":42,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"the request-to-payment path is the proving fleet's measurement","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"the request-to-payment path is the proving fleet's measurement","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"CAP-04","title":"Sustain meaningful load without queue growth","setup":"Freeze W: payload mix, input sizes, execution work and per-hour demand; prohibit tiny-workload substitution.","steps":["Run 72 hours at W and a separate 24 hours at 1.2W on the declared fleet.","Measure arrival/completion counts, backlog trend, oldest-job age, deadlines and all retries.","Use held-out workloads and an independent observer to detect discarded or delayed requests."],"accept":"P07 completion, tail-latency and bounded-backlog criteria hold. Capacity is stated for the tested W/fleet, not as universal TPS. A queue that grows indefinitely or shrinks through silent loss fails.","evidence":"Request/completion reconciliation; backlog series; held-out results; observer report.","priority":"GATE","profile":"P07","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":43,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"sustained load is the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"sustained load is the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"CAP-05","title":"Overload and recover without false acceptance","setup":"Start at W and inject 2W for 15 minutes with valid and invalid jobs, then return to W.","steps":["Observe admission, explicit backpressure, reservations and deadline estimates.","Track accepted jobs to valid completion or the pre-agreed failure/refund outcome.","Measure recovery time and ensure ordinary users are not silently starved."],"accept":"P07 overload policy and recovery limits hold; no accepted job vanishes or earns an invalid reward. Rejected demand is reported separately from delivery success, preventing denominator manipulation.","evidence":"Overload timeline; admission/refund logs; backlog-drain proof.","priority":"BLOCKER","profile":"P01; P07","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":43,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"overload and recovery is the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"overload and recovery is the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"CAP-06","title":"Calibrate assignment windows to paid completion","setup":"Use a heterogeneous proving fleet, including the slowest advertised consumer tier.","steps":["Measure actual completion distributions with network delay, competing load and failed attempts.","Test the chosen exclusive window, open claiming and faster challengers after expiry.","Compare assignment frequency, paid completions and wasted work by tier."],"accept":"P07 fairness and wasted-work limits hold for advertised tiers. A provisional 10-DAA-second window is not treated as approved. Fair assignment counts alone cannot pass; payment outcomes and operator margins matter.","evidence":"Window sweep; paid-completion distribution; wasted-work and margin report.","priority":"GATE","profile":"P07; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":43,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"assignment windows are the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"assignment windows are the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"CAP-07","title":"Reassign work when inputs or providers disappear","setup":"Remove input providers, assigned provers and the dominant aggregator independently and together.","steps":["Have replacement operators retrieve authenticated inputs without founder files.","Retry expired assignments while preserving idempotent reward and customer outcomes.","Restore providers and test late submissions racing with replacements."],"accept":"P07/P08 replacement deadlines hold when availability assumptions permit. Otherwise a truthful bounded pause/refund occurs; no fake proof, double payment or hidden privileged input source is used.","evidence":"Failure schedule; input hashes; reassignment and payout ledger; recovery trace.","priority":"BLOCKER","profile":"P01; P07; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":44,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"reassignment is the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"reassignment is the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"CAP-08","title":"Deliver customer-verifiable output at scale","setup":"Run the external workload using a customer-controlled verifier and independently operated workers.","steps":["Verify every delivered proof against the contracted program and input commitment.","Reject wrong-format, stale and partial deliveries; test customer retry and delivery failure.","Reconcile delivery, acceptance, payment and refund records without exposing private inputs publicly."],"accept":"P07 delivery performance and exact validity hold. Payment depends on the contracted correct result; a valid proof for the wrong job is not a successful delivery.","evidence":"Customer verification log; proof-format contract; settlement reconciliation.","priority":"BLOCKER","profile":"P01; P07; P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":44,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"customer-verifiable output is the reference apps plus the fleet","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"customer-verifiable output is the reference apps plus the fleet","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}}]},{"code":"INC","title":"Rewards, incentives and selfish operators","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","fixtures":"F0 fee/reward rules; F4 adversarial operators; F7 incentive models","summary":"Assume operators optimise their own returns. Do not depend on the official client choosing a less profitable task.","tests":[{"id":"INC-01","title":"Reconcile issuance, fees, burns and recipients","setup":"Use a deterministic short chain containing all reward types, fee paths and rounding cases.","steps":["Calculate balances, total supply changes, burns and distributions independently.","Execute identical blocks natively and through the proving path.","Test zero, minimum, maximum and transition-boundary values plus malformed producer accounting."],"accept":"Conservation and recipient rules match F0 exactly; no inflation, rounding leakage or duplicate reward. Fee-table and prose discrepancies are resolved before the run, not guessed by the tester.","evidence":"Independent accounting ledger; balance/supply diffs; boundary vectors.","priority":"BLOCKER","profile":"P01; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":45,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"INC-01","decision":"NOT RUN","method":"native","cell":"suite:core","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","in_progress":false,"coverage":"partial: emission, fee and payout arithmetic tests; the reconciliation over a live chain is the economics lane's","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; core on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:core":{"requirement_id":"INC-01","decision":"NOT RUN","method":"native","cell":"suite:core","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","in_progress":false,"coverage":"partial: emission, fee and payout arithmetic tests; the reconciliation over a live chain is the economics lane's","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; core on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"INC-02","title":"Keep revenue streams and claims separate","setup":"Prepare jobs and blocks producing mining income, internal proof rewards and external payments.","steps":["Trace money from source to operator, protocol, developer and any burn.","Compare node records, settlement records and Ember displays.","Attempt to classify testnet rewards, reimbursed purchases or token appreciation as external customer revenue."],"accept":"Every stream reconciles and is labelled correctly. No double-counted revenue or fabricated protocol demand; mining subsidy and external service income remain distinct in dashboards and ECO.","evidence":"Money-flow register; UI reconciliation; rejected classifications.","priority":"BLOCKER","profile":"P01; P12; P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":45,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"INC-03","title":"Let a modified client choose the most profitable task","setup":"Permit independent schedulers to mine, prove internally, prove externally or switch off.","steps":["Publish common costs and vary relative task rewards, memory pressure and switching costs.","Run clients that ignore the official scheduling recommendation.","Measure realised operator margin, internal capacity and network progress."],"accept":"Required P12 sustainable worlds maintain paid essential capacity without compelled altruism. Profitability and availability are based on realised outcomes, including switching and wasted work.","evidence":"Scheduler source/policies; switching traces; capacity and margin series.","priority":"GATE","profile":"P07; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":45,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"INC-04","title":"Survive external-demand spikes and token declines","setup":"Use F7 scenarios with 10x external job offers and token-denominated mining-income shocks.","steps":["Allow miners/provers to switch freely under the declared reward and difficulty rules.","Observe hash participation, proof backlog, fees and recovery without an administrator.","Repeat with external demand dropping to zero and with a dominant operator withdrawn."],"accept":"Mandatory viable worlds meet P07/P12; stressed nonviable worlds fail or pause safely with truthful status. No emergency rule, fabricated demand or unofficial subsidy is inserted to force a pass.","evidence":"Shock timeline; fee/hash/capacity paths; failure-region report.","priority":"GATE","profile":"P07; P08; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":46,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"INC-05","title":"Contain job reservation and identity-splitting abuse","setup":"Freeze the actual assignment/payment mechanism; do not assume unimplemented collateral or identity controls.","steps":["Create many worker identities, reserve jobs, withhold proofs and submit late results.","Attempt free option-taking, duplicate work rewards and displacement of honest assignments.","Price attacker costs and observe honest completion under the approved abuse load."],"accept":"F0 rules and P07 service limits hold under the declared adversary. Identity splitting does not create unauthorised rewards or control; any unmitigated starvation path blocks the permissionless-service claim.","evidence":"Attack clients; assignment trace; cost-to-disrupt analysis; honest-user outcomes.","priority":"BLOCKER","profile":"P01; P07; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":46,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"reservation abuse needs the capacity harness","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"INC-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"reservation abuse needs the capacity harness","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"INC-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"INC-06","title":"Test difficulty and timestamp manipulation","setup":"Use the actual adjustment algorithm and consensus timestamp rule with independent miners.","steps":["Inject large hashrate arrivals/departures, periodic selective mining and boundary-timed bursts.","Try allowed and invalid timestamp skew, withheld blocks and replayed work.","Observe block intervals, reward allocation and recovery after hashrate stabilises."],"accept":"Invalid inputs are rejected; valid adversarial strategies remain within F0/P08 bounds and are priced in ECO. No unexplained reward amplification, permanent stall or conflicting accepted work.","evidence":"Difficulty trace; timestamp corpus; revenue analysis; independent rule review.","priority":"BLOCKER","profile":"P01; P08; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":46,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"difficulty and timestamp manipulation needs the fault network F4","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"INC-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"difficulty and timestamp manipulation needs the fault network F4","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"INC-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"INC-07","title":"Resist self-dealing fees and fake proving demand","setup":"Use self-funded operators and related customer identities in the isolated economic model/network.","steps":["Cycle funds through jobs, tips, developer shares and rebates to seek net reward extraction.","Attempt to inflate external-demand metrics without genuine unrelated customer expenditure.","Reconcile all counterparties and net cash contribution rather than gross transaction volume."],"accept":"No unauthorised subsidy extraction or metric inflation passes. Related-party volume is disclosed/excluded from P14; net external cash and legitimate protocol incentives are reported separately.","evidence":"Circular-flow tests; ownership/conflict review; net-cash reconciliation.","priority":"BLOCKER","profile":"P01; P12; P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":47,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"self-dealing fees need the economic model and a live window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"INC-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"self-dealing fees need the economic model and a live window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"INC-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"INC-08","title":"Quantify provider and supplier failure concentration","setup":"Model control of hashing, signing, proving, aggregation and hardware supply separately.","steps":["Remove each largest operational dependency and combine correlated failures.","Measure replacement cost/time and whether essential roles share hidden ownership.","Compare results with the approved fault model and no-rescue exercise."],"accept":"No hidden single dependency defeats the claimed independence; within-tolerance withdrawals recover under P08/P11. Hardware supply concentration is disclosed without equating vendor sales to operator voting control.","evidence":"Role/ownership map; dependency removals; recovery and concentration report.","priority":"GATE","profile":"P08; P11; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":47,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}}]},{"code":"FIN","title":"Consensus safety and recovery","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","fixtures":"F0 exact fault model; F4 real-node partitions; F5 certificates and historical failures","summary":"Test safety under the stated fault bounds. Demand liveness only when synchrony and participation assumptions actually hold.","tests":[{"id":"FIN-01","title":"Agree on ordering, work and executed state","setup":"Use real fork-choice/DAG handling and independent miners, not only a simplified simulator.","steps":["Generate concurrent branches, delayed blocks, duplicates and invalid work with deterministic seeds.","Compare selected ordering, accumulated work, transaction execution and state roots after delivery converges.","Replay from independent checkpoints and from genesis where practical."],"accept":"Honest nodes converge under F0 assumptions with exact roots and rewards. No duplicated work accounting or undocumented ordering dependence; simulator-only success cannot substitute.","evidence":"Block/ordering corpus; root/work diffs; real-node replay logs.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":48,"owner_lane":"fast-time lane (a8be71a0db962911c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"FIN-01","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: the finality processes' agreement tests","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:consensus":{"requirement_id":"FIN-01","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: the finality processes' agreement tests","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"suite:core":{"requirement_id":"FIN-01","decision":"NOT RUN","method":"native","cell":"suite:core","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","in_progress":false,"coverage":"partial: the finality field and checkpoint tests on the object; ordering under load is the consensus suite and the sim","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; core on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"FIN-02","title":"Attack finality with split honest populations","setup":"Use the source-discussed 40/40/20 weight split, plus threshold-boundary splits under F0.","steps":["Let the 20% adversarial group sign conflicting histories while honest groups are partitioned.","Delay messages and eligibility updates independently; keep total historical weights auditable.","Try to form two certificates and reconnect nodes to observe accepted final history."],"accept":"No conflicting final certificates are accepted within the declared fault bound. A safe pause is valid when quorum is unavailable; making progress on both sides is not required.","evidence":"Signed votes; certificate attempts; voter-table snapshots; safety checker output.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":48,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"PASS","evidence_path":"sim/finality-attacks-results/native-2026-10-09/s203-1c.md","run_id":"fin-203-20261009T0127Z","updated":"2026-10-09T01:02:16.259Z","evidence_record":{"requirement_id":"FIN-02","decision":"PASS","method":"native","cell":"node:finality-realnode","manifest_sha":"c8d22a85","run_id":"fin-203-20261009T0127Z","evidence":"sim/finality-attacks-results/native-2026-10-09/s203-1c.md","in_progress":false,"coverage":"partial: the real-node half; independent operators and the review remain","release_identity":{"commit":"c8d22a85","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T01:02:16.259Z","note":"the 2.0.3 reruns of rows 1b (e at 0.20 and 0.30) and 1c on finality-2.0.3-kind-and-conflict c8d22a85 (igneumd a37f4b63, build-5 and build-6, 01:27 to 01:45 UK 9 October, lease pool, pid watchers, zero restarts): a received recovery certificate reads lockKind recovery on every node (1b: index 10 recovery on A's, B's and C's nodes; the 2.0.2 line read final on B's), and two valid certificates at one index pause finality on both holders with reason conflict naming the index and no new lock above it (1c: A's and B's nodes at index 11, finalityActive false, no lock after the heal; the 2.0.2 line went on locking reporting active); 0 pre-heal locks moved in every row. Rows: sim/results_v2.md, the 2.0.3 reruns subsection. FIN-02 and FIN-07's real-node half on the fixed node; the independent review remains."},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"node:finality-realnode":{"requirement_id":"FIN-02","decision":"PASS","method":"native","cell":"node:finality-realnode","manifest_sha":"c8d22a85","run_id":"fin-203-20261009T0127Z","evidence":"sim/finality-attacks-results/native-2026-10-09/s203-1c.md","in_progress":false,"coverage":"partial: the real-node half; independent operators and the review remain","release_identity":{"commit":"c8d22a85","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T01:02:16.259Z","note":"the 2.0.3 reruns of rows 1b (e at 0.20 and 0.30) and 1c on finality-2.0.3-kind-and-conflict c8d22a85 (igneumd a37f4b63, build-5 and build-6, 01:27 to 01:45 UK 9 October, lease pool, pid watchers, zero restarts): a received recovery certificate reads lockKind recovery on every node (1b: index 10 recovery on A's, B's and C's nodes; the 2.0.2 line read final on B's), and two valid certificates at one index pause finality on both holders with reason conflict naming the index and no new lock above it (1c: A's and B's nodes at index 11, finalityActive false, no lock after the heal; the 2.0.2 line went on locking reporting active); 0 pre-heal locks moved in every row. Rows: sim/results_v2.md, the 2.0.3 reruns subsection. FIN-02 and FIN-07's real-node half on the fixed node; the independent review remains."}}},{"id":"FIN-03","title":"Cross authority expiry in a long partition","setup":"Recover historical expiry failures where available; use the actual current authority-transition rules.","steps":["Partition for 31, 35, 60 and 90 logical days and around every retention/expiry boundary.","Attempt independently renewed authority sets and conflicting checkpoint locks.","Repeat selected boundary cases on real nodes with accelerated timers explicitly labelled."],"accept":"Authority continuity remains authenticated and no conflicting final history appears within F0 assumptions. A timeout is not accepted as proof absent voters ceased to exist. Compressed time is not multi-month field evidence.","evidence":"Expiry timeline; table/certificate history; historical regression tests.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":48,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"FIN-03","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: rule v4's anchored table and authority expiry tests (bee41b5e)","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:consensus":{"requirement_id":"FIN-03","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: rule v4's anchored table and authority expiry tests (bee41b5e)","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"FIN-04","title":"Stop signing while mining continues","setup":"Remove enough signing participation to invalidate the liveness assumption without forging votes.","steps":["Continue mining and execution, cross seed boundaries and monitor proof queues.","Check which user-visible states advance and which remain unfinalised.","Restore eligible weight and bounded message delay, then verify recovery."],"accept":"No false finality or fabricated authority. Behaviour matches F0 during the pause and P08 after assumptions return; unfinished transactions are not displayed as irreversible.","evidence":"Signing/mining trace; UI/RPC states; recovery roots and timing.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":49,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"FIN-04","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: the frozen table without its time expiry (rule v4)","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:consensus":{"requirement_id":"FIN-04","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: the frozen table without its time expiry (rule v4)","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"FIN-05","title":"Authenticate voter-set changes and pooled keys","setup":"Use normal transitions, pool members retaining keys and malicious substitution attempts.","steps":["Alter voter weights, membership proofs, miner/pool identity bindings and prior-certificate links.","Race updates across boundaries and replay old signed changes.","Have a new node verify the authority chain from its declared trust anchor."],"accept":"Only correctly authenticated changes are accepted; weights cannot be double-counted or redirected by a pool. All honest nodes agree on the active authority set for each certified point.","evidence":"Authority-chain fixtures; substitution attacks; new-node verification log.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":49,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"FIN-05","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: key succession and another scheme's vote refused","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:consensus":{"requirement_id":"FIN-05","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: key succession and another scheme's vote refused","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"FIN-06","title":"Analyse old-key compromise and long-range histories","setup":"Freeze assumptions about key erasure, retained weights, trust anchors and offline recovery.","steps":["Use previously eligible keys to build alternative histories after their operators disappear.","Present these histories to recently offline and newly joining clients.","Test replayed certificates, stale anchors and compromised signer subsets."],"accept":"Acceptance matches the explicit security model with no hidden trusted recovery step. Any reliance on a recent trusted anchor is disclosed and tested; hashpower assumptions cannot replace old-key analysis.","evidence":"Long-range corpus; trust-anchor policy; key-compromise review; client results.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":49,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"NOT RUN","evidence_path":"sim/results_v2.md Rule v4","run_id":"team-2026-10-08","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"old-key compromise analysis is the finality lane's long-range scenario, not yet in the sim","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"FIN-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"bought and stolen keys in the simulator rows","run_by":"finality lane (aca0f5ed924a2a99b)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"FIN-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"sim/results_v2.md Rule v4","in_progress":true}}},{"id":"FIN-07","title":"Recover deterministically after reconnection and crash","setup":"Combine partitions with node crash, partial writes, restarts and proof backlog.","steps":["Reconnect networks under bounded latency and restore required honest participation.","Verify fork choice, unfinalised reorganisation, finality, reward rollback and proof reassignments.","Compare all honest nodes and customer-visible receipts after recovery."],"accept":"P08 recovery holds without reversing a previously valid final guarantee. Only permitted unfinalised state is reorganised; no duplicate rewards or inconsistent receipt statuses survive.","evidence":"Recovery timelines; roots/certificates; payout rollback; customer-state reconciliation.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":50,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"NOT RUN","evidence_path":"sim/finality-attacks-results/native-2026-10-09/s203-1c.md; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","run_id":"fin-203-20261009T0127Z","updated":"2026-10-09T01:02:16.259Z","evidence_record":{"requirement_id":"FIN-07","decision":"PASS","method":"native","cell":"node:finality-realnode","manifest_sha":"c8d22a85","run_id":"fin-203-20261009T0127Z","evidence":"sim/finality-attacks-results/native-2026-10-09/s203-1c.md","in_progress":false,"coverage":"partial: deterministic recovery after reconnection and crash on real nodes (the HEAL reruns)","release_identity":{"commit":"c8d22a85","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T01:02:16.259Z","note":"the 2.0.3 reruns of rows 1b (e at 0.20 and 0.30) and 1c on finality-2.0.3-kind-and-conflict c8d22a85 (igneumd a37f4b63, build-5 and build-6, 01:27 to 01:45 UK 9 October, lease pool, pid watchers, zero restarts): a received recovery certificate reads lockKind recovery on every node (1b: index 10 recovery on A's, B's and C's nodes; the 2.0.2 line read final on B's), and two valid certificates at one index pause finality on both holders with reason conflict naming the index and no new lock above it (1c: A's and B's nodes at index 11, finalityActive false, no lock after the heal; the 2.0.2 line went on locking reporting active); 0 pre-heal locks moved in every row. Rows: sim/results_v2.md, the 2.0.3 reruns subsection. FIN-02 and FIN-07's real-node half on the fixed node; the independent review remains."},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"node:finality-realnode":{"requirement_id":"FIN-07","decision":"PASS","method":"native","cell":"node:finality-realnode","manifest_sha":"c8d22a85","run_id":"fin-203-20261009T0127Z","evidence":"sim/finality-attacks-results/native-2026-10-09/s203-1c.md","in_progress":false,"coverage":"partial: deterministic recovery after reconnection and crash on real nodes (the HEAL reruns)","release_identity":{"commit":"c8d22a85","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T01:02:16.259Z","note":"the 2.0.3 reruns of rows 1b (e at 0.20 and 0.30) and 1c on finality-2.0.3-kind-and-conflict c8d22a85 (igneumd a37f4b63, build-5 and build-6, 01:27 to 01:45 UK 9 October, lease pool, pid watchers, zero restarts): a received recovery certificate reads lockKind recovery on every node (1b: index 10 recovery on A's, B's and C's nodes; the 2.0.2 line read final on B's), and two valid certificates at one index pause finality on both holders with reason conflict naming the index and no new lock above it (1c: A's and B's nodes at index 11, finalityActive false, no lock after the heal; the 2.0.2 line went on locking reporting active); 0 pre-heal locks moved in every row. Rows: sim/results_v2.md, the 2.0.3 reruns subsection. FIN-02 and FIN-07's real-node half on the fixed node; the independent review remains."},"suite:consensus":{"requirement_id":"FIN-07","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: majority-continuity recovery (rule v4)","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"FIN-08","title":"Combine boundaries, faults and adversarial scheduling","setup":"Use an independent model checker/scheduler and production-node scenarios from F4.","steps":["Combine epoch changes, authority transitions, mining churn, data delays and prover/aggregator loss.","Explore bounded adversarial message schedules and minimise any counterexample.","Replay model findings on real code and have an independent reviewer assess uncovered states."],"accept":"No unresolved safety failure; liveness claims hold only within declared assumptions and P08. Model bounds and untested schedules are published, not described as proof over every possible execution.","evidence":"Model/spec artifacts; schedule corpus; replay evidence; independent assessment.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Model checking + real-node testing","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":50,"owner_lane":"fast-time lane (a8be71a0db962911c)","run_status":"NOT RUN","evidence_path":"sim/results_v2.md","run_id":"fin-203-20261009T0127Z","updated":"2026-10-09T01:02:16.259Z","evidence_record":{"requirement_id":"FIN-08","decision":"NOT RUN","method":"native","cell":"harness:finality-sim","manifest_sha":"c8d22a85","run_id":"fin-203-20261009T0127Z","evidence":"sim/results_v2.md","in_progress":true,"coverage":"partial: the combined boundary and fault scenarios in the simulator with adversarial schedules; model checking is the formal review","release_identity":{"commit":"c8d22a85","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T01:02:16.259Z","note":"FIN-08's real-node rows gained the 2.0.3 reruns of rows 1b and 1c on the fixed node (the lock kind read from the chain on every node; two valid certificates at one index pause finality with reason conflict): sim/results_v2.md, the 2.0.3 reruns subsection; the model side remains for PASS"},"in_progress_since":"2026-10-08T19:43:19.697Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:finality-sim":{"requirement_id":"FIN-08","decision":"NOT RUN","method":"native","cell":"harness:finality-sim","manifest_sha":"c8d22a85","run_id":"fin-203-20261009T0127Z","evidence":"sim/results_v2.md","in_progress":true,"coverage":"partial: the combined boundary and fault scenarios in the simulator with adversarial schedules; model checking is the formal review","release_identity":{"commit":"c8d22a85","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T01:02:16.259Z","note":"FIN-08's real-node rows gained the 2.0.3 reruns of rows 1b and 1c on the fixed node (the lock kind read from the chain on every node; two valid certificates at one index pause finality with reason conflict): sim/results_v2.md, the 2.0.3 reruns subsection; the model side remains for PASS"}}}],"notes":[{"at":"2026-10-08T19:32:50.918Z","text":"F04 (Review B), the founder's ruling 8 October 19:57 UK: the recovery lock is kept and is always labelled 'recovery', never 'final', on every surface (the checkpoint field, the explorer, receipts, the light client, the oracle, the site)"},{"at":"2026-10-08T20:10:24.812Z","text":"REC-01 (the master edition's one unresolved interpretation, finality pause-only healing: R1's I03 stale predicate against R2's F04 backfill caveat): closure evidence as the finality and node lanes recorded it on 8 October 2026: rule v4 at release-2.0.0-node 12424341's line, mode recovery by the founder's 19:57 ruling (the lock labelled recovery, never final), both real-node lines PASS tonight by the 6.7 pause criterion, FIN-02 PASS at 0218d6bf1 on the simulator half; status RUNNING until the beyond-window healing case with and without historical data is run natively (the node lane's case tomorrow)."},{"at":"2026-10-09T00:22:15.485Z","text":"FIN-02 and FIN-08: Dated note, 9 October 2026 01:0x UK (the coordinator, from the finality runs lane's native rows 4566eb1e4): a received recovery certificate reads lockKind \"final\" on every node but the forming one (recovery_lock is stamped only in evaluate), and a node holding two certificates at one index reports \"active\" and keeps locking; both ride 2.0.3 with known-failed tests (the node lane's 06:00 line). Recovery kind correct on the forming node only until 2.0.3; conflicting-certificate reporting open. No decision changed by this note."}]},{"code":"VER","title":"Wallets, receipts and data availability","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","fixtures":"F0 trust/availability model; F5 malformed roots, receipts and authority chains","summary":"Verify the exact property shown to the user. An inclusion proof, execution proof and finality certificate are not interchangeable.","tests":[{"id":"VER-01","title":"Authenticate light-client bootstrap","setup":"Give a clean client malicious RPC responses, fabricated voter tables and valid-looking signatures.","steps":["Start from the approved trust anchor and verify every required link to the advertised state.","Substitute otherwise well-formed but unauthorised keys, weights and checkpoints.","Remove the bootstrap service and use another independently operated source."],"accept":"The client rejects unauthorised authority and discloses any trust anchor. Signatures over a node-supplied table do not by themselves pass; missing authentication never silently degrades to trusted RPC.","evidence":"Bootstrap corpus; trust-chain trace; fail-closed tests.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":51,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"FAIL","evidence_path":"tools/reference-apps/ver/evidence/VER-01.json","run_id":"ra-20261008T1915-ver","updated":"2026-10-08T19:46:20.696Z","evidence_record":{"cell":"harness:reference-apps-ver-trust-anchor","manifest_sha":"4cdcc488","coverage":{"VER-01":"fails today, disclosed: the light client authenticates the certificate's signatures and the header path but the voter table is a node-supplied trust anchor named on /light; a forged table signature and a wrong-network certificate are refused","VER-02":"fails today, disclosed: the execution statement's proof is verified by the nodes and the browser verifies the aggregator signature and the post root under it; an in-browser verifier for the permitted proof and a table commitment close it"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-01","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver-trust-anchor":{"cell":"harness:reference-apps-ver-trust-anchor","manifest_sha":"4cdcc488","coverage":{"VER-01":"fails today, disclosed: the light client authenticates the certificate's signatures and the header path but the voter table is a node-supplied trust anchor named on /light; a forged table signature and a wrong-network certificate are refused","VER-02":"fails today, disclosed: the execution statement's proof is verified by the nodes and the browser verifies the aggregator signature and the post root under it; an in-browser verifier for the permitted proof and a table commitment close it"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-01","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/VER-01.json","in_progress":false}}},{"id":"VER-02","title":"Verify evolving authority and execution statements","setup":"Use valid state proofs paired with wrong execution statements or stale authority histories.","steps":["Cross voter and verifier changes with offline clients returning after long intervals.","Alter roots, aggregate identity and proof/public-input bindings independently.","Check local verification rather than merely a server-reported verified flag."],"accept":"All advertised proof checks occur locally or the remaining trust is explicitly disclosed. Wrong roots and unauthenticated authority are rejected; unsupported verification paths are not claimed.","evidence":"Client verification trace; corrupted inputs; offline/upgrade results.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":51,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"FAIL","evidence_path":"tools/reference-apps/ver/evidence/VER-01.json","run_id":"ra-20261008T1915-ver","updated":"2026-10-08T19:46:20.696Z","evidence_record":{"cell":"harness:reference-apps-ver-trust-anchor","manifest_sha":"4cdcc488","coverage":{"VER-01":"fails today, disclosed: the light client authenticates the certificate's signatures and the header path but the voter table is a node-supplied trust anchor named on /light; a forged table signature and a wrong-network certificate are refused","VER-02":"fails today, disclosed: the execution statement's proof is verified by the nodes and the browser verifies the aggregator signature and the post root under it; an in-browser verifier for the permitted proof and a table commitment close it"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-02","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver-trust-anchor":{"cell":"harness:reference-apps-ver-trust-anchor","manifest_sha":"4cdcc488","coverage":{"VER-01":"fails today, disclosed: the light client authenticates the certificate's signatures and the header path but the voter table is a node-supplied trust anchor named on /light; a forged table signature and a wrong-network certificate are refused","VER-02":"fails today, disclosed: the execution statement's proof is verified by the nodes and the browser verifies the aggregator signature and the post root under it; an in-browser verifier for the permitted proof and a table commitment close it"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-02","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/VER-01.json","in_progress":false}}},{"id":"VER-03","title":"Prove successful payment rather than inclusion","setup":"Create successful, reverted, wrong-asset, wrong-recipient and wrong-amount transfers.","steps":["Generate receipts for included transactions, including failures and replaced/unfinalised transactions.","Verify execution status plus asset, recipient, amount and canonical-state/receipt commitment.","Replay the receipt on another chain and after an allowed unfinalised reorganisation."],"accept":"Only the actual successful, correctly bound transfer is labelled payment proof. Inclusion-only receipts are labelled as such; no node-reported success flag substitutes for authenticated outcome.","evidence":"Payment fixture corpus; receipt verification; merchant-facing status checks.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":51,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/ver/evidence/summary.json","run_id":"ra-20261008T1915-ver","updated":"2026-10-08T19:46:20.696Z","evidence_record":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:46:20.696Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/summary.json","in_progress":true}}},{"id":"VER-04","title":"Bound cross-chain oracle trust and replay","setup":"For a claimed oracle, freeze destination verifier, authority updates, accepted proof types and replay policy.","steps":["Try deployer-substituted keys, stale certificates, unchecked signatures and wrong source/destination identities.","Exercise legitimate authority updates and source reorganisations under the approved model.","Measure gas/cost with realistic header sets and test disabled/unavailable verification."],"accept":"The oracle enforces its declared trust model and fails closed. Deployer privileges and unavailable guarantees are explicit; no trustless-bridge claim exceeds the checks performed. Excluded oracle scope earns no pass credit.","evidence":"Oracle code/parameters; attack cases; cost report; privilege disclosure.","priority":"BLOCKER","profile":"P00; P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Claimed-option verification","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":52,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/ver/evidence/summary.json","run_id":"ra-20261008T1915-ver","updated":"2026-10-08T19:46:20.696Z","evidence_record":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:46:20.696Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/summary.json","in_progress":true}}},{"id":"VER-05","title":"Reconstruct required state without founder storage","setup":"Remove founder archival/input services and start an independent operator from the documented entry point.","steps":["Fetch authenticated blocks, state/proof inputs and any required witnesses from permitted peers.","Rebuild the expected state and continue validation/proving.","Measure bandwidth, disk, time and retention requirements against advertised operator budgets."],"accept":"Required data can be obtained and verified within the declared availability model. Hidden archives or unpublished files block independence. A valid execution proof alone does not satisfy this test.","evidence":"Download/reconstruction logs; data hashes; resource costs; dependency inventory.","priority":"BLOCKER","profile":"P01; P08; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":52,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"FAIL","evidence_path":"tools/reference-apps/ver/evidence/VER-05.json","run_id":"ra-20261008T1915-ver","updated":"2026-10-08T19:46:20.696Z","evidence_record":{"cell":"harness:reference-apps-ver-availability","manifest_sha":"4cdcc488","coverage":{"VER-05":"partial: the public read node must report startedFrom genesis (no snapshot) and the reference reader on build-1 executed the 2.0 devnet from genesis with no snapshot; the pages fetch headers, certificates, coinbase bodies and account proofs from the public read RPC only; the archive and availability model beyond the 2,048-block state ring is the OPS no-founder exercise. Run ra-20261008T1915-ver: FAIL, the public node reports startedFrom snapshot (restarted from a snapshot after 17:46 UK); the reader on build-1 still from genesis"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-05","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver-availability":{"cell":"harness:reference-apps-ver-availability","manifest_sha":"4cdcc488","coverage":{"VER-05":"partial: the public read node must report startedFrom genesis (no snapshot) and the reference reader on build-1 executed the 2.0 devnet from genesis with no snapshot; the pages fetch headers, certificates, coinbase bodies and account proofs from the public read RPC only; the archive and availability model beyond the 2,048-block state ring is the OPS no-founder exercise. Run ra-20261008T1915-ver: FAIL, the public node reports startedFrom snapshot (restarted from a snapshot after 17:46 UK); the reader on build-1 still from genesis"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-05","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/VER-05.json","in_progress":false}}},{"id":"VER-06","title":"Detect withholding, corruption and stale data","setup":"Serve valid commitments with missing data, corrupted chunks, stale witnesses and conflicting peer replies.","steps":["Attempt to make a validator or light client accept an unavailable or incorrect state under F0.","Test retrieval from independent peers and expiry/retry policy.","Restore data and check that recovery cannot alter an already verified commitment."],"accept":"No unjustified available/verified status; safety and admission rules match F0. Recovery is bounded where assumptions permit, and unavailable-data states remain visible instead of hidden behind proofs.","evidence":"Withholding corpus; peer retrieval traces; availability/status checks.","priority":"BLOCKER","profile":"P01; P08; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":52,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/ver/evidence/summary.json","run_id":"ra-20261008T1915-ver","updated":"2026-10-08T19:46:20.696Z","evidence_record":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:46:20.696Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/summary.json","in_progress":true}}},{"id":"VER-07","title":"Protect wallet keys, signing and recovery","setup":"Use test-only keys, encrypted backups and clean replacement devices; no real user funds.","steps":["Attempt secret access from proving jobs, logs, crash dumps, clipboard and telemetry paths.","Verify transaction destination/amount before signing; test backup/restore and wrong-password handling.","Upgrade and recover without silently changing signing authority or exposing seed material."],"accept":"No unintended secret disclosure or unauthorised signature. Supported recovery restores the correct keys and accounts; users receive explicit risk/backup information. Logs are sanitised without hiding security evidence.","evidence":"Security review; canary-secret tests; signing fixtures; restore journey.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":53,"owner_lane":"shipper (ae892a8b0f78fe31c)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"wallet key protection is the wallet lane's security row","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"VER-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"wallet key protection is the wallet lane's security row","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"VER-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"VER-08","title":"Keep every user-facing state truthful","setup":"Create included-only, executed, proven, finalised, reverted, stale and paused examples.","steps":["Compare explorer, wallet, receipt, RPC and customer API labels against authenticated evidence.","Interrupt finality and proof services and observe refresh/reconnect behaviour.","Check statements about privacy, Ethereum security and device support."],"accept":"No stronger state is implied than verified; stale data is marked and failures are actionable. EVM compatibility is not labelled Ethereum security, and ZK technology is not automatically labelled transaction privacy.","evidence":"Cross-surface screenshots/logs; state mapping; claim review.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":53,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/ver/evidence/summary.json; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"VER-08","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the app's own state-word tests; the wallet and light client rows are VER-01 to VER-03","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:46:20.696Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/summary.json","in_progress":true},"suite:app":{"requirement_id":"VER-08","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the app's own state-word tests; the wallet and light client rows are VER-01 to VER-03","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}}]},{"code":"OPS","title":"Independent operation and release security","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","fixtures":"F4 isolated multi-operator network; F0 signed releases; F9 telemetry","summary":"A permissionless specification must remain operational without privileged infrastructure or unsafe automatic updates.","tests":[{"id":"OPS-01","title":"Run the complete no-founder exercise","setup":"Use the P11 independent network, adequate honest participation and enough non-founder capacity for W.","steps":["Remove founder miners, provers, aggregators, RPC, DNS/bootstrap dependencies and private support access.","Run the full P11 period while crossing real and separately labelled accelerated boundaries.","Introduce scheduled faults and have independent operators recover using published instructions."],"accept":"No founder action, secret file, privileged key or emergency anti-chip rule is needed. P07/P08 outcomes hold within assumptions; any intervention is recorded as a failed no-rescue run, not erased.","evidence":"Operator roster/conflict checks; dependency removals; full activity/intervention log.","priority":"BLOCKER","profile":"P07; P08; P11","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":54,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"the no-founder exercise is an operations run, not a suite","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"the no-founder exercise is an operations run, not a suite","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"OPS-02","title":"Diversify bootstrap and resist peer isolation","setup":"Start nodes without the default bootstrap host and give others adversarial peer lists.","steps":["Attempt eclipse through peer concentration, stale discovery, poisoned DNS and repeated identities in an isolated lab.","Use independent documented discovery paths and validate returned chain data.","Measure synchronisation, peer diversity and recovery after benign connectivity returns."],"accept":"No unauthenticated history is trusted; bootstrap has no hidden single-provider requirement. Isolation is detected/contained according to F0 and recovery meets P08 when assumptions return.","evidence":"Peer/discovery traces; eclipse scenarios; startup and recovery evidence.","priority":"BLOCKER","profile":"P01; P08; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":54,"owner_lane":"build-server lane (a352e49ff4613df86)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"bootstrap diversity needs the fault network F4","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"bootstrap diversity needs the fault network F4","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"OPS-03","title":"Separate update distribution from consensus authority","setup":"Use test signing keys and clean desktop/node installations with valid, stale and malicious packages.","steps":["Offer signed updates with unexpected consensus rules, downgraded binaries and corrupted payloads.","Test explicit operator acceptance and the published signing-key incident procedure.","Confirm that distribution-key possession cannot independently activate new consensus rules."],"accept":"Tampering/unauthorised rollback is rejected; updates do not silently transfer authority. Approved acceptance and activation are separate. No test touches production signing material.","evidence":"Package corpus; approval/activation traces; compromised-key rehearsal.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":54,"owner_lane":"shipper (ae892a8b0f78fe31c)","run_status":"NOT RUN","evidence_path":"site/release-manifest.json; docs/plans/evidence/UX-01-20261008.md","run_id":"site-manifest-20261009-02","updated":"2026-10-09T08:39:51.032Z","evidence_record":{"requirement_id":"OPS-03","decision":"NOT RUN","method":"static","cell":"site:manifest","manifest_sha":"52b972421","run_id":"site-manifest-20261009-02","evidence":"site/release-manifest.json","in_progress":true,"coverage":"partial: the manifest's versions and network blocks regenerate from their sources; the separation itself is the node suites' (suite:exec, suite:p2p-flows)","release_identity":{"commit":"52b972421","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"the versions block on /release.json, /download and /miner; no claim moves","reviewer":"","at":"2026-10-09T08:39:51.032Z","note":"the manifest under the served-identity guard (9 October 2026, 09:4x UK): its six clock fields read UTC, the zone word is out of the served file; read back at /release.json after the deploy"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"site:manifest":{"requirement_id":"OPS-03","decision":"NOT RUN","method":"static","cell":"site:manifest","manifest_sha":"52b972421","run_id":"site-manifest-20261009-02","evidence":"site/release-manifest.json","in_progress":true,"coverage":"partial: the manifest's versions and network blocks regenerate from their sources; the separation itself is the node suites' (suite:exec, suite:p2p-flows)","release_identity":{"commit":"52b972421","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"the versions block on /release.json, /download and /miner; no claim moves","reviewer":"","at":"2026-10-09T08:39:51.032Z","note":"the manifest under the served-identity guard (9 October 2026, 09:4x UK): its six clock fields read UTC, the zone word is out of the served file; read back at /release.json after the deploy"},"pc:install-update":{"requirement_id":"OPS-03","decision":"NOT RUN","method":"team-reported","cell":"pc:install-update","manifest_sha":"aa354ed5","run_id":"ux-01-20261008-win-2.0.0","evidence":"docs/plans/evidence/UX-01-20261008.md","in_progress":true,"coverage":"partial: the update path's read-back and the signed manifest's verify on the PC (a tampered or rolled-back payload is refused by the engine's manifest check); authority separation is the shipper's review","release_identity":{"commit":"aa354ed5","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:42:25.701Z"}},"in_progress_since":"2026-10-08T20:42:25.701Z"},{"id":"OPS-04","title":"Recover nodes from crash and storage damage","setup":"Use production database/snapshot paths with controlled interrupted writes and corrupted test storage.","steps":["Crash during import, proof acceptance, reward application and snapshot generation.","Restore from independently verified snapshots or re-sync through documented procedures.","Compare roots, certificates, balances and processed-job IDs with an unaffected node."],"accept":"No corrupt snapshot is trusted, no duplicate payout and no loss of authenticated final state. Recovery meets P08 where data is available; ambiguous corruption fails closed and is actionable.","evidence":"Crash schedule; snapshot hashes; root/balance diffs; recovery timing.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":55,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"OPS-04","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: snapshot install, replay and genesis recapture after a crash","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:exec":{"requirement_id":"OPS-04","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: snapshot install, replay and genesis recapture after a crash","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"OPS-05","title":"Isolate untrusted proving workloads","setup":"Run hostile test jobs with secret canaries and restrictive worker permissions.","steps":["Attempt filesystem escape, process spawning, resource exhaustion, network access and key-store reads.","Crash workers and inspect host, wallet and node availability plus dump/log contents.","Retry on every supported isolation backend and check dependency vulnerability handling."],"accept":"No secret leakage or unauthorised host action; P09 resource containment holds. Worker failure does not compromise validator/wallet authority; unsupported isolation is not marketed as safe execution.","evidence":"Sandbox penetration report; canary logs; resource limits; host-integrity checks.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":55,"owner_lane":"build-server lane (a352e49ff4613df86)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"proving workload isolation is the fleet's pod row","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"proving workload isolation is the fleet's pod row","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"OPS-06","title":"Contain malicious network and API traffic","setup":"Use an authorised isolated load environment with declared resource and request-rate budgets.","steps":["Send malformed headers, proofs, oversized messages, floods and invalid peer sequences.","Measure legitimate traffic, memory/disk growth and validator CPU use.","Test limit resets, peer reconnect and graceful degradation without disabling validation."],"accept":"P09 abuse budgets hold; no unbounded allocation, persistent crash or invalid acceptance. Backpressure is visible and honest users retain the specified service at admitted load.","evidence":"Load/corpus manifests; resource series; valid-traffic metrics; incident traces.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":55,"owner_lane":"build-server lane (a352e49ff4613df86)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-p2p-flows.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"OPS-06","decision":"NOT RUN","method":"native","cell":"suite:p2p-flows","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-p2p-flows.log","in_progress":false,"coverage":"partial: malformed relay messages refused; traffic containment under load is an OPS harness","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; p2p-flows on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:p2p-flows":{"requirement_id":"OPS-06","decision":"NOT RUN","method":"native","cell":"suite:p2p-flows","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-p2p-flows.log","in_progress":false,"coverage":"partial: malformed relay messages refused; traffic containment under load is an OPS harness","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; p2p-flows on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"OPS-07","title":"Detect failures with usable evidence and runbooks","setup":"Define alerts for invalid acceptance, conflicting finality, backlog, data loss, payout mismatch and stale status.","steps":["Inject one instance of each monitored failure in the lab.","Have an unaffiliated operator diagnose it using only emitted evidence and published instructions.","Test redaction, metric freshness and duplicate-alert suppression without suppressing serious failures."],"accept":"P10 alert/detection limits hold; every blocker produces actionable evidence. Monitoring does not leak secrets or mislabel intentional safe pauses as successful finality.","evidence":"Alert matrix; detection timelines; independent runbook exercise.","priority":"GATE","profile":"P09; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":56,"owner_lane":"build-server lane (a352e49ff4613df86)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"runbook detection is an operations run","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"runbook detection is an operations run","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"OPS-08","title":"Repeat independent operation across releases","setup":"Use a clean previous supported version and the final candidate with independent operators.","steps":["Perform documented rolling upgrade, rollback of non-consensus software where allowed and resynchronisation.","Cross activation with mixed versions and unavailable founder distribution hosts.","Re-run affected gates after changes and preserve prior failures and incident lessons."],"accept":"No undocumented privileged migration or automatic consensus rewrite. All affected evidence is refreshed; P11 no-rescue results remain tied to the final release, not an earlier build.","evidence":"Upgrade/replay logs; invalidation map; repeated gate signatures.","priority":"BLOCKER","profile":"P00; P08; P11","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":56,"owner_lane":"build-server lane (a352e49ff4613df86)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"repeat independent operation is a cross-release observation","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"repeat independent operation is a cross-release observation","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}}],"notes":[{"at":"2026-10-08T19:32:50.976Z","text":"F14 (Review B), the founder's ruling 8 October 19:57 UK: the public miner ships from 2.0.2 without remote jobs; our own fleet runs the lab build with its own signing root"}]},{"code":"UX","title":"Ember, payouts and operator control","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","fixtures":"F2 supported desktops; F8 user study; F4 honest/malicious pools","summary":"Successful participation must be practical for ordinary owners without hidden custody or loss of consensus authority.","tests":[{"id":"UX-01","title":"Onboard ordinary owners on native desktop apps","setup":"Recruit the P10 first-time user cohort across Windows and macOS using supported physical hardware.","steps":["Observe install, hardware detection, safety explanation and first accepted work without staff intervention.","Record download/data preparation separately as well as complete end-to-end time.","Test unsupported hardware and insufficient memory messaging rather than forcing a failed start."],"accept":"P10 completion/time targets hold with no unsafe default or concealed prerequisite. The product is tested as the actual desktop app, not only a browser preview.","evidence":"Consent-based study records; task timings; failure reasons; compatibility outcomes.","priority":"GATE","profile":"P10","cadence":"Release candidate; repeat after relevant changes","method":"Independent observed user study","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":57,"owner_lane":"update-return lane (a22d765a2e0355a9f)","run_status":"NOT RUN","evidence_path":"docs/plans/evidence/UX-01-20261008.md","run_id":"ux-01-20261008-win-2.0.0","updated":"2026-10-08T20:42:25.701Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"pc:install-update":{"requirement_id":"UX-01","decision":"NOT RUN","method":"team-reported","cell":"pc:install-update","manifest_sha":"aa354ed5","run_id":"ux-01-20261008-win-2.0.0","evidence":"docs/plans/evidence/UX-01-20261008.md","in_progress":true,"coverage":"team-run evidence only (the two PCs taking the Windows entry through the app's own update path with no click and mining on every card); the P10 study is NOT RUN until unaffiliated participants are recruited","release_identity":{"commit":"aa354ed5","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:42:25.701Z"}},"evidence_record":{"requirement_id":"UX-01","decision":"NOT RUN","method":"team-reported","cell":"pc:install-update","manifest_sha":"aa354ed5","run_id":"ux-01-20261008-win-2.0.0","evidence":"docs/plans/evidence/UX-01-20261008.md","in_progress":true,"coverage":"team-run evidence only (the two PCs taking the Windows entry through the app's own update path with no click and mining on every card); the P10 study is NOT RUN until unaffiliated participants are recruited","release_identity":{"commit":"aa354ed5","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:42:25.701Z"},"in_progress_since":"2026-10-08T20:42:25.701Z"},{"id":"UX-02","title":"Make pause, stop and safe tuning reliable","setup":"Run mining/proving on active desktops under contention and safe thermal stress.","steps":["Use pause, stop, power limit, task selection and emergency local shutdown controls.","Crash or restart the UI while workers run and verify ownership of background processes.","Restore the original hardware settings and test power-saving/low-battery behaviour where supported."],"accept":"P10 control latency and safe-state requirements hold. Stopping does not strand an uncontrolled process; tuning never depends on unsafe settings or silent privilege escalation.","evidence":"Control timings; process/settings audit; restart and safety traces.","priority":"BLOCKER","profile":"P01; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":57,"owner_lane":"shipper (ae892a8b0f78fe31c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log; docs/analysis/floor-memory-profile-2026-10-08.md","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"UX-02","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the engine state machine's pause, stop and knob tests; the operator study is UX-01's","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:app":{"requirement_id":"UX-02","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the engine state machine's pause, stop and knob tests; the operator study is UX-01's","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"rows:v607-floor-memory":{"requirement_id":"UX-02","decision":"NOT RUN","method":"GPU","cell":"rows:v607-floor-memory","manifest_sha":"c411bae9a","run_id":"v607-floor-memory-20261008T2059Z","evidence":"docs/analysis/floor-memory-profile-2026-10-08.md","in_progress":true,"coverage":"partial: the prover's safe refusal under memory pressure (exit 78 in one line, the miner's worker unharmed, nothing leaked after the refusal); pause, stop, power limit and the UI's crash ownership are the suite:app cell's","release_identity":{"commit":"c411bae9a (branch v607-floor-memory off cef5234b5)","lockfile":"proving/igneum-prove/Cargo.lock at cef5234b5","binary":"sp1-gpu-server db37c38b5feabdec5bbfd0298446da89f6a5d144125e399d6ab617f64f9cb61d (igneum-floor-sm8689-v607.tgz 9c02fcc6a3f045d3167c1d9cb6e22c584ea862189d11997754a57cbe1b0d355b); igneum-prove-host-0317 71bc2438856bb141; igneum-prove-host v607 66662219a3630772","network_object":"none (fixture proofs on rented pods, no network)","activation":"none","profile_hashes":"floor patch 9098c3e5979d057031f43588668201d1f7a53ab17e980c1eaf896cd5e6f38575"},"claim_impact":"the 2.0 proving statement's memory condition per tier: a 12 GB card runs the whole segment path alone; an 8 GB card proves shards only (its aggregation fails) and is refused the chain before setup; both time-share beside the 5.5 GiB miner; the 16 GB and 24 GB tiers unmeasured tonight","reviewer":"","at":"2026-10-08T22:22:49.946Z"}}},{"id":"UX-03","title":"Show net earnings and compatibility honestly","setup":"Use known rewards, fees, energy readings, retries and operator-entered tariffs.","steps":["Compare mining, internal proof and external proof income with authoritative ledgers.","Show gross/net estimates, measurement boundaries, tariff assumptions and payout status.","Test stale data, losses, negative margins and mining-only versus proving-compatible devices."],"accept":"P10 reconciliation limits hold and uncertainty is visible. No guaranteed profits, fabricated fiat price or inferred proving support; provisional earnings are not shown as settled payments.","evidence":"UI/ledger comparisons; tariff fixtures; stale/negative examples.","priority":"BLOCKER","profile":"P01; P10; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":57,"owner_lane":"shipper (ae892a8b0f78fe31c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"UX-03","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the card and earnings rendering tests; the net-earnings model against real bills is COM/ECO evidence","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:app":{"requirement_id":"UX-03","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the card and earnings rendering tests; the net-earnings model against real bills is COM/ECO evidence","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"UX-04","title":"Pay small operators without hidden custody","setup":"Use ordinary single-card balances and the actual pooling/payment path.","steps":["Earn, request/receive payment, disconnect and reconnect; include low balances, fees and a pool outage.","Attempt redirection, delayed accounting and withdrawal of another user's entitlement.","Reconcile displayed balances with canonical entitlement and actual settlement."],"accept":"P10 payout limits hold for the declared small-operator case. No unauthorised custody, redirection or unexplained loss; thresholds and fees are disclosed rather than masked by larger test balances.","evidence":"Single-card payout ledger; pool failure record; custody/authorisation review.","priority":"BLOCKER","profile":"P01; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":58,"owner_lane":"pool design seat (a3832b1c3b274b310)","run_status":"NOT RUN","evidence_path":"docs/analysis/pool/pool-pair-2026-10-08.md; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"UX-04","decision":"NOT RUN","method":"native","cell":"suite:miner","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","in_progress":false,"coverage":"partial: payout label and share accounting tests; custody is the pool lane's row","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; miner on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:58:33.370Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:pool":{"requirement_id":"UX-04","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"986252e73","run_id":"pool-2.0-20261008-03","evidence":"docs/analysis/pool/pool-pair-2026-10-08.md","in_progress":true,"coverage":"partial: PPLNS distribution tests (fee first, never overpays, late joiner), the payout key file round trip, the signed transfer decode; the live payout path on the devnet-4 pair is the UX-04 batch's evidence; review B F12 and INT-03/INT-04 (8 October 2026): payout::intent_tests (a restart from the pre-broadcast snapshot, a lost send response, a crash on either side of the broadcast, a stuck transaction replaced under the same intent, a reorged receipt and a finality pause, a failed transaction, a ledger that cannot be written: never a duplicate or a lost obligation, finalised only under the chain's final lock) and state::ledger_tests (an unreadable ledger is refused or restored, never emptied); F13/INT-16: frame, admission and pool::share_tests (the frame bound while reading, the bounded outgoing queue, one membership per session, the nonce and in-flight bounds, the share and connection budgets); the devnet-4 pair's class (8 October 2026 21:24 UK): state_provider::tests::an_unsynced_node_hands_the_pool_no_state_and_no_job (no job on a node whose igneum_getExecStatus reads synced false, blocked or re-executing; known-failed first against the 8ff7a0f4 provider; pool-synced-guard-202 f3e99e9c on release-2.0.2, 986252e7 on pool-2.0, 52 of 52 on build-6)","release_identity":{"commit":"986252e73","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:48:42.741Z"},"suite:miner":{"requirement_id":"UX-04","decision":"NOT RUN","method":"native","cell":"suite:miner","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","in_progress":false,"coverage":"partial: payout label and share accounting tests; custody is the pool lane's row","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; miner on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"UX-05","title":"Keep voting keys with the miner through pooling","setup":"Use an honest pool and a modified pool that replaces worker identity or voting credentials.","steps":["Verify the consensus binding from performed work to the miner's retained key.","Attempt substitution, replay and reassignment without the miner's authorisation.","Leave the pool and verify retained voting/finality rights under F0."],"accept":"No silent transfer of governance/finality authority. If the protocol cannot establish retained keys, this requirement fails; a pool-protocol name or user-interface promise does not pass.","evidence":"Work/key binding vectors; malicious-pool attempts; leave-pool authority check.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":58,"owner_lane":"pool design seat (a3832b1c3b274b310)","run_status":"NOT RUN","evidence_path":"docs/analysis/pool/pool-pair-2026-10-08.md","run_id":"pool-2.0-20261008-03","updated":"2026-10-08T20:48:42.741Z","evidence_record":{"reason":"voting keys through pooling is the pool lane's row","at":"2026-10-08T20:48:42.741Z","method":"static","requirement_id":"UX-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:58:33.370Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:pool":{"requirement_id":"UX-05","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"986252e73","run_id":"pool-2.0-20261008-03","evidence":"docs/analysis/pool/pool-pair-2026-10-08.md","in_progress":true,"coverage":"partial: the vote-key commitment on the wire (verify::tests::a_share_under_another_key_is_refused_before_the_hash: known-pass the member's key, known-fail another key on the share and a job naming another key, refused with code vote_key before the hash), the open pool's sidechain::check_key (the claimed key, the header's key and the reveal are one key), the same-nonce-other-template wrong_hash test, the TLS binding test; the malicious-pool run and the leave-and-retain run on the devnet-4 pair are the UX-05 batch's other evidence; review B INT-15 (8 October 2026): server::authorise_tests::a_replayed_proof_of_possession_is_not_an_authorisation (a public PoP replayed into another session, payout, pool or chain, or under another key, refused; only the challenge-bound binding v2 admits on a public network) and the_binding_policy_follows_the_network","release_identity":{"commit":"986252e73","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:48:42.741Z"}}},{"id":"UX-06","title":"Verify actual miner-selected work templates","setup":"Provide a pool interface with declared job-declaration support and independent miner templates.","steps":["Submit miner-selected valid transaction templates and verify what is actually hashed and accepted.","Have a pool substitute or censor templates and test local verification/fallback.","Measure payout and acceptance consequences without moving authority to the pool."],"accept":"The advertised selection control exists in accepted work, not only configuration. Undisclosed substitution is detected; supported independent operation remains practical under P10.","evidence":"Template commitments; accepted-block evidence; malicious-pool/fallback report.","priority":"BLOCKER","profile":"P01; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":58,"owner_lane":"shipper (ae892a8b0f78fe31c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"UX-06","decision":"NOT RUN","method":"native","cell":"suite:miner","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","in_progress":false,"coverage":"partial: the miner's own template selection tests","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; miner on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:miner":{"requirement_id":"UX-06","decision":"NOT RUN","method":"native","cell":"suite:miner","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","in_progress":false,"coverage":"partial: the miner's own template selection tests","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; miner on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"UX-07","title":"Expose actionable failures and safe updates","setup":"Create failed proofs, memory pressure, expired jobs, missing payouts and available software updates.","steps":["Ask independent users to identify the issue, stop safely and follow the recommended action.","Test explicit update approval, version visibility and a failed/corrupt update.","Confirm diagnostic exports remove keys and private inputs while retaining useful evidence."],"accept":"P10 task-success requirements hold; no silent update or false success state. Recovery instructions work on supported desktops and secret canaries never enter exported logs.","evidence":"Observed tasks; update traces; sanitised export tests.","priority":"BLOCKER","profile":"P09; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":59,"owner_lane":"shipper (ae892a8b0f78fe31c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log; docs/plans/evidence/UX-01-20261008.md","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"UX-07","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the refused-update and manifest tests; the update-return lane's install classes are its own rows","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:app":{"requirement_id":"UX-07","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the refused-update and manifest tests; the update-return lane's install classes are its own rows","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"pc:install-update":{"requirement_id":"UX-07","decision":"NOT RUN","method":"team-reported","cell":"pc:install-update","manifest_sha":"aa354ed5","run_id":"ux-01-20261008-win-2.0.0","evidence":"docs/plans/evidence/UX-01-20261008.md","in_progress":true,"coverage":"partial: the install classes (the payload's stop step, the detached installer under a job, the installer refusing a wrong-version name, a stale install flag) and the no-click resume; the recovery-instruction and canary rows are the shipper's","release_identity":{"commit":"aa354ed5","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:42:25.701Z"}}},{"id":"UX-08","title":"Publish competitive accessible software","setup":"Provide open documented builds, tuning parameters and known fee conditions for all supported platforms.","steps":["Compare Ember against independently optimised permissible implementations on identical work.","Measure efficiency, fees, false rejection, installation and update transparency.","Scan for hidden developer fees, hardware whitelists, per-address privilege or undisclosed remote controls."],"accept":"P10 relative-efficiency limits hold and all fees/privileges are explicit. No self-reported device tier earns consensus advantage. A superior external implementation triggers investigation, not selective exclusion.","evidence":"Matched software comparison; code/config review; fee/privilege inventory.","priority":"GATE","profile":"P02; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":59,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/site-gate-6a47f1f8/pre-push.log","run_id":"site-gate-20261009-01","updated":"2026-10-09T07:36:07.241Z","evidence_record":{"requirement_id":"UX-08","decision":"NOT RUN","method":"static","cell":"gate:pre-push","manifest_sha":"6a47f1f8","run_id":"site-gate-20261009-01","evidence":"build-1:/srv/artefacts/tas/site-gate-6a47f1f8/pre-push.log","in_progress":true,"coverage":"partial: the site gate on every served page, plus docs/build/tuning.md (the published tuning and build-settings half, the hash lane's); the open builds and the fee conditions are the shipper's and the site lane's","release_identity":{"commit":"6a47f1f8","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: the served pages are checked, no claim moves","reviewer":"","at":"2026-10-09T07:36:07.241Z","note":"the site branch's box gate on 6a47f1f8 (build-2, --ci mode): 7 checks GREEN in 41 s, among them the launch-gates, forbidden-strings and scope checks on the served site that the cell's partial coverage names; a gate run is evidence for the cell, not a verdict on the case (the steward's word)"},"in_progress_since":"2026-10-08T18:28:32.408Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"gate:pre-push":{"requirement_id":"UX-08","decision":"NOT RUN","method":"static","cell":"gate:pre-push","manifest_sha":"6a47f1f8","run_id":"site-gate-20261009-01","evidence":"build-1:/srv/artefacts/tas/site-gate-6a47f1f8/pre-push.log","in_progress":true,"coverage":"partial: the site gate on every served page, plus docs/build/tuning.md (the published tuning and build-settings half, the hash lane's); the open builds and the fee conditions are the shipper's and the site lane's","release_identity":{"commit":"6a47f1f8","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: the served pages are checked, no claim moves","reviewer":"","at":"2026-10-09T07:36:07.241Z","note":"the site branch's box gate on 6a47f1f8 (build-2, --ci mode): 7 checks GREEN in 41 s, among them the launch-gates, forbidden-strings and scope checks on the served site that the cell's partial coverage names; a gate run is evidence for the cell, not a verdict on the case (the steward's word)"}}}],"notes":[{"at":"2026-10-08T19:32:51.045Z","text":"F14 (Review B), the founder's ruling 8 October 19:57 UK: the public miner ships from 2.0.2 without remote jobs; our own fleet runs the lab build with its own signing root"}]},{"code":"COM","title":"Paid demand and sustainable delivery","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","fixtures":"F8 real consenting customers; F7 full service costs; private identity proofs","summary":"Devnet payouts and subsidised pilots demonstrate mechanics, not independent willingness to pay.","tests":[{"id":"COM-01","title":"Deliver a genuine contracted proof pilot","setup":"Select one real external customer with a meaningful fixed workload and no required migration to Igneum.","steps":["Agree program, inputs, proof format, deadline, price, failure/refund policy and verification method.","Run paid jobs through ordinary independently operated infrastructure.","Have the customer verify usefulness, correctness and its reason for choosing the service."],"accept":"The pilot satisfies its actual contract and settles genuine external payment. Trial subsidies are disclosed and cannot satisfy the repeat-demand gate; no invented customer or testimonial.","evidence":"Redacted contract; verified jobs; settlement proof; consented customer confirmation.","priority":"GATE","profile":"P07; P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":60,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"commercial evidence, no automated harness","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"commercial evidence, no automated harness","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-02","title":"Establish independent repeat purchasing","setup":"Use the P14 multi-customer observation period and ownership/conflict checks.","steps":["Track paid purchases on distinct occasions, including refunds and stopped customers.","Audit related parties, project reimbursements, token grants and circular funding.","Reconcile external cash received with correctly delivered meaningful work."],"accept":"P14 buyer, duration and volume minima are met without reimbursement or related-party substitution. Repeat orders are separate buying decisions, not a single payment split into many jobs.","evidence":"Anonymised buyer ledger; repeat-order dates; conflict review; net receipts.","priority":"GATE","profile":"P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":60,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-03","title":"Demonstrate service and operator margins","setup":"Allocate all delivery costs, including aggregation, retries, hardware, power, host, network and support.","steps":["Calculate gross contribution and fully loaded unit costs for each contracted workload.","Reconcile a representative operator's realised earnings against metered costs and opportunity cost.","Repeat under the declared demand and price sensitivities."],"accept":"P14 contribution targets hold and at least the required operator cohort has positive realised contribution. Excluded overhead is visible; token appreciation or unpriced founder labour cannot silently create profitability.","evidence":"Unit-economics ledger; metered operator sample; allocation rules; sensitivity report.","priority":"GATE","profile":"P12; P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":60,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-04","title":"Meet the customer service guarantee","setup":"Observe actual delivery deadlines, validity, failure handling and support over the contracted period.","steps":["Count all accepted jobs, including failed, retried and abandoned cases.","Have the customer independently verify results and invoke one authorised refund/failure exercise.","Compare offered capacity and quoted price with what was actually delivered."],"accept":"P07 and contracted obligations hold; validity has zero accepted exceptions. Failure terms are honoured, and demand beyond capacity is explicitly refused rather than quietly omitted from metrics.","evidence":"Customer-verifier records; SLO report; refunds; promised-versus-delivered comparison.","priority":"BLOCKER","profile":"P01; P07; P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":61,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-05","title":"Compare against the buyer's real alternative","setup":"Identify a credible alternative supplier or in-house option for the same workload, proof format and security.","steps":["Obtain comparable quotes or consented measured trials at the evaluation date.","Include integration, verification, deadlines and all operational costs, not only proof-generation time.","Document the customer's actual trade-off without inventing unavailable comparator evidence."],"accept":"P15 commercial comparison is satisfied with like-for-like scope and a evidenced purchase reason. Missing alternative data remains MISSING; it is not scored as an Igneum win.","evidence":"Dated comparison; workload/security match; customer decision record.","priority":"GATE","profile":"P14; P15","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":61,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-06","title":"Retain buyers after the pilot and subsidy period","setup":"Follow all recruited customers through the P14 observation period, including churn.","steps":["Remove disclosed trial incentives before measuring repeat demand.","Track renewal, expansion, cancellation reasons, unresolved incidents and buyer concentration.","Review whether one affiliated or subsidised buyer dominates the apparent market."],"accept":"P14 repeat/concentration conditions hold with honest denominator and churn reporting. Paying demand survives beyond a demonstration; unsatisfied or departed buyers are not removed retrospectively.","evidence":"Cohort/renewal ledger; churn notes; concentration and incentive report.","priority":"GATE","profile":"P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":61,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-07","title":"Fund maintenance without assumed appreciation","setup":"Prepare a costed plan for development, review, infrastructure, support and incident response.","steps":["Separate committed resources from revenue dependent on adoption or token price.","Stress lower income and an unexpected security/operations expense.","Verify responsible owners and continuity arrangements without changing fair-launch promises."],"accept":"P13 committed-runway requirement holds and downside responses are documented. No uncommitted financing, rising token price or burn accounting is presented as available maintenance funding.","evidence":"Budget and commitment evidence; downside plan; owner/continuity roster.","priority":"GATE","profile":"P13","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":62,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T20:10:24.556Z","deferral_note":"P13 deferred by the founder (8 October 2026, 18:2x UK: \"forget P13 for now\")","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_record":{"reason":"commercial evidence","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"COM-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"commercial evidence","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"COM-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-08","title":"Let independent developers build useful integrations","setup":"Recruit unaffiliated developers unfamiliar with unpublished implementation details.","steps":["Use public docs to deploy a supported application or integrate an external proof request and verification flow.","Record time, undocumented dependencies, workarounds and correctness issues.","Retest after documentation fixes without founder-written hidden integration code."],"accept":"P14 developer-task minimum passes on the final release; all required public instructions exist. Successful bytecode deployment alone does not count as a working application or service integration.","evidence":"Consented developer logs; public examples; issue closure; verified end-to-end journeys.","priority":"GATE","profile":"P09; P14","cadence":"Release candidate; repeat after relevant changes","method":"Independent integration study","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":62,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}}]},{"code":"LEAD","title":"Comparative leadership evidence","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","fixtures":"F8 peer/customer studies; full signed technical evidence; 90-day observation","summary":"A serious contention claim requires comparative outcomes and real adoption evidence, not just an internally green test dashboard.","tests":[{"id":"LEAD-01","title":"Register a fair contemporary comparison","setup":"Choose at least the P15 peer coverage and an evaluation date before collecting confirmatory results.","steps":["Include the plan's Ravencoin, Ergo and Firo reference set where comparable, then check for other relevant current options.","Freeze versions, supported hardware, methods, noninferiority margins and commercial alternatives.","Publish exclusions and prohibit cross-algorithm raw-hashrate comparisons."],"accept":"The protocol covers material alternatives fairly and is signed independently. A missing or non-comparable feature is not scored zero; no arbitrary universal rank is inferred from selected metrics.","evidence":"Timestamped peer protocol; source/version records; comparison/exclusion rationale.","priority":"GATE","profile":"P15","cadence":"Release candidate; repeat after relevant changes","method":"Pre-registered comparative study","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":63,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"LEAD-02","title":"Demonstrate comparable operator advantages","setup":"Use matched user tasks and operating conditions on the selected GPU-first networks.","steps":["Measure install-to-first-accepted-work, software overhead versus each network's tuned baseline, payout friction and retained control.","Measure rejection/availability under the same network conditions; report fees separately.","Use blinded analysis where possible and independent runs for decisive differences."],"accept":"P15 noninferiority and superiority requirements hold on meaningful comparable dimensions. No raw hashes from different algorithms are compared, and transient token price is not labelled engineering superiority.","evidence":"Matched task data; uncertainty/effect sizes; independent comparison report.","priority":"GATE","profile":"P02; P10; P15","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":63,"owner_lane":"site lane (a846fd66b5403e35a)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"leadership comparison, an observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"leadership comparison, an observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"LEAD-03","title":"Substantiate the specialist-coexistence claim","setup":"Assemble G1-G4 plus frozen rules and all surviving-adversary assumptions.","steps":["Have independent reviewers trace each public competitiveness statement to its narrowest evidence.","Separate measured GPUs, modelled silicon and economic scenarios in all summaries.","Evaluate residual uncertainty, excluded technologies and the no-new-rules counterfactual."],"accept":"All claimed envelopes meet P04/P12 without unsupported universal bounds. Reviewers agree the evidence supports scoped commodity competitiveness even when chips remain compatible; an exact chip-arrival probability is not inferred.","evidence":"Claim-to-evidence map; signed envelope review; limitations statement.","priority":"GATE","profile":"P04; P12; P15","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":63,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"LEAD-04","title":"Observe ordinary-operator retention and margins","setup":"Recruit the P16 independent cohort before observing results; use privacy-preserving evidence.","steps":["Follow participation, realised margin, hardware changes, failures and reasons for leaving for 90 days.","Report trial incentives separately and include every initial participant in retention denominators.","Compare behaviour with matched alternatives where feasible; disclose absence of an actual downturn."],"accept":"P16 retention/margin minima hold with verified independence and no removal of churned users. Simulated downturns cannot be called observed bear-market retention; historical claims stay limited to the period measured.","evidence":"Pseudonymous cohort ledger; margin/retention calculations; departure reasons.","priority":"GATE","profile":"P12; P16","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":64,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"LEAD-05","title":"Measure control and dependency concentration","setup":"Audit operational control of mining, voting, proving, aggregation, hosting and software distribution separately.","steps":["Use opt-in attestations, observed dependencies and independent corroboration; disclose uncertain common ownership.","Compare concentration and provider-removal outcomes to the approved security and availability assumptions.","Check that pooled payments do not hide authority concentration and hardware vendors are not equated with operators."],"accept":"P11/P16 concentration requirements hold within disclosed uncertainty; unidentified control cannot be counted as independent. No single removable dependency is falsely marketed as decentralised operation.","evidence":"Control/failure-domain map; uncertainty notes; concentration/removal results.","priority":"GATE","profile":"P11; P16","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":64,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"LEAD-06","title":"Complete the reliability observation window","setup":"Observe the final candidate and approved compatible updates for the full P16 real-time period.","steps":["Measure promised service availability, invalid acceptance, finality safety, payouts and incident impact.","Reconcile external probes, customer records and operator logs, including maintenance and exclusions.","Repeat affected critical tests after every material change; reset observation where comparability breaks."],"accept":"P16 availability and safety criteria hold on live observation; no hidden downtime or compressed-time substitution. This supports the recorded window only, not multi-year operational maturity.","evidence":"90-day SLO ledger; independent probes; incident reports; change/retest history.","priority":"BLOCKER","profile":"P01; P16","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":64,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"LEAD-07","title":"Issue an independent contender assessment","setup":"Provide the full evidence packet, commercial results, comparative study and unresolved-limit register to the panel.","steps":["Check every mandatory and claimed-option test, source requirement and approved threshold.","Require separate signoffs for hardware/economics, security/operations and customer/operator evidence.","Document dissent and challenge any inference that passing an internal checklist proves number-one rank."],"accept":"Every required gate is PASS with no unresolved material challenge, critical/high defect or missing comparator/customer evidence. The panel supports a credible leadership-contender conclusion within scope, not a guaranteed rank.","evidence":"Signed assessment; full status index; dissent/limitations; approved claim wording.","priority":"GATE","profile":"P00; P15; P16","cadence":"Release candidate; repeat after relevant changes","method":"Independent final assessment","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":65,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"LEAD-08","title":"Keep leadership claims valid after release","setup":"Define material-change triggers and scheduled reviews before publishing the assessment.","steps":["Refresh competitor, hardware-cost, demand and security evidence at the P16 cadence.","Test a newly credible specialist, lost customer, major outage and verifier change against invalidation rules.","Withdraw or narrow stale claims promptly while publishing the new evidence status."],"accept":"Claims remain dated, scoped and revisable; material contrary evidence reopens the appropriate gate. The network may remain usable while a leadership claim is suspended. No permanent self-awarded certification.","evidence":"Review calendar; invalidation drills; versioned public claim register.","priority":"GATE","profile":"P00; P16","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":65,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}}]},{"code":"REV","title":"REV: the external review's required regressions","source":"docs/analysis/review-2026-10-08-b/findings.json and docs/analysis/review-2026-10-08-b/dispatch.md; ids from the master traceability register","gate":"Review findings closed","owner":"the owner lanes per the dispatch table","fixtures":["F0","F5"],"summary":"44 regressions from 14 findings; each reads NOT RUN until its owner lane records a run","tests":[{"id":"R2-F01-R01","title":"Valid proof A, warm cache, carried statement B: refuse exactly as a cold node does.","setup":"The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).","steps":["Valid proof A, warm cache, carried statement B: refuse exactly as a cold node does."],"accept":"Valid proof A, warm cache, carried statement B: refuse exactly as a cold node does.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F01"],"gate":"Review findings closed","owner":"proving lane, node lane","manual_page":null,"finding":"R2-F01","finding_title":"Proof-verdict cache omits the statement being verified","finding_priority":"P0 - public/value-bearing release blocker","owner_lane":"proving lane, node lane","run_status":"NOT RUN","base_test_ids":["ZKP-02","ZKP-03","ZKP-04","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F01-R02","title":"Run valid/invalid contexts in both orders, concurrently and across cache eviction/restart.","setup":"The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).","steps":["Run valid/invalid contexts in both orders, concurrently and across cache eviction/restart."],"accept":"Run valid/invalid contexts in both orders, concurrently and across cache eviction/restart.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F01"],"gate":"Review findings closed","owner":"proving lane, node lane","manual_page":null,"finding":"R2-F01","finding_title":"Proof-verdict cache omits the statement being verified","finding_priority":"P0 - public/value-bearing release blocker","owner_lane":"proving lane, node lane","run_status":"NOT RUN","base_test_ids":["ZKP-02","ZKP-03","ZKP-04","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F01-R03","title":"Change payout, network, kind, program ID and activation context; no accepted misbinding.","setup":"The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).","steps":["Change payout, network, kind, program ID and activation context; no accepted misbinding."],"accept":"Change payout, network, kind, program ID and activation context; no accepted misbinding.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F01"],"gate":"Review findings closed","owner":"proving lane, node lane","manual_page":null,"finding":"R2-F01","finding_title":"Proof-verdict cache omits the statement being verified","finding_priority":"P0 - public/value-bearing release blocker","owner_lane":"proving lane, node lane","run_status":"NOT RUN","base_test_ids":["ZKP-02","ZKP-03","ZKP-04","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F01-R04","title":"A native two-node test must agree on block validity and payouts despite different cache histories.","setup":"The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).","steps":["A native two-node test must agree on block validity and payouts despite different cache histories."],"accept":"A native two-node test must agree on block validity and payouts despite different cache histories.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F01"],"gate":"Review findings closed","owner":"proving lane, node lane","manual_page":null,"finding":"R2-F01","finding_title":"Proof-verdict cache omits the statement being verified","finding_priority":"P0 - public/value-bearing release blocker","owner_lane":"proving lane, node lane","run_status":"NOT RUN","base_test_ids":["ZKP-02","ZKP-03","ZKP-04","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F02-R01","title":"Release build cannot activate test bypass.","setup":"The regression R2-F02 requires (review R2 finding F02: Proof-rule infrastructure can fail open).","steps":["Release build cannot activate test bypass."],"accept":"Release build cannot activate test bypass.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F02"],"gate":"Review findings closed","owner":"proving lane, CI steward","manual_page":null,"finding":"R2-F02","finding_title":"Proof-rule infrastructure can fail open","finding_priority":"P0 - release configuration blocker","owner_lane":"proving lane, CI steward","run_status":"NOT RUN","base_test_ids":["GOV-05","ZKP-01","ZKP-07","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F02 (P0, the external review): the regression's harness is the owner lane's (proving lane, CI steward); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F02-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F02 (P0, the external review): the regression's harness is the owner lane's (proving lane, CI steward); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F02-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F02-R02","title":"Missing oracle or pinned keys prevents service readiness after enforcement activation.","setup":"The regression R2-F02 requires (review R2 finding F02: Proof-rule infrastructure can fail open).","steps":["Missing oracle or pinned keys prevents service readiness after enforcement activation."],"accept":"Missing oracle or pinned keys prevents service readiness after enforcement activation.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F02"],"gate":"Review findings closed","owner":"proving lane, CI steward","manual_page":null,"finding":"R2-F02","finding_title":"Proof-rule infrastructure can fail open","finding_priority":"P0 - release configuration blocker","owner_lane":"proving lane, CI steward","run_status":"NOT RUN","base_test_ids":["GOV-05","ZKP-01","ZKP-07","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F02 (P0, the external review): the regression's harness is the owner lane's (proving lane, CI steward); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F02-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F02 (P0, the external review): the regression's harness is the owner lane's (proving lane, CI steward); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F02-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F02-R03","title":"Missing proof bytes retry without incorrectly marking a valid block permanently invalid.","setup":"The regression R2-F02 requires (review R2 finding F02: Proof-rule infrastructure can fail open).","steps":["Missing proof bytes retry without incorrectly marking a valid block permanently invalid."],"accept":"Missing proof bytes retry without incorrectly marking a valid block permanently invalid.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F02"],"gate":"Review findings closed","owner":"proving lane, CI steward","manual_page":null,"finding":"R2-F02","finding_title":"Proof-rule infrastructure can fail open","finding_priority":"P0 - release configuration blocker","owner_lane":"proving lane, CI steward","run_status":"NOT RUN","base_test_ids":["GOV-05","ZKP-01","ZKP-07","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F02 (P0, the external review): the regression's harness is the owner lane's (proving lane, CI steward); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F02-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F02 (P0, the external review): the regression's harness is the owner lane's (proving lane, CI steward); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F02-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F03-R01","title":"Clean build from one manifest, including the pool and workers, with no unpublished vendor tree.","setup":"The regression R2-F03 requires (review R2 finding F03: The bundle contains a v6 candidate, not a demonstrated integrated v6 release).","steps":["Clean build from one manifest, including the pool and workers, with no unpublished vendor tree."],"accept":"Clean build from one manifest, including the pool and workers, with no unpublished vendor tree.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F03"],"gate":"Review findings closed","owner":"CI steward, hash lane (ProgramClass::V6 on freeze), pool lane","manual_page":null,"finding":"R2-F03","finding_title":"The bundle contains a v6 candidate, not a demonstrated integrated v6 release","finding_priority":"P0 - freeze/integration blocker","owner_lane":"CI steward, hash lane (ProgramClass::V6 on freeze), pool lane","run_status":"PASS","base_test_ids":["GOV-01","GOV-03","POW-01","ROT-02"],"run_id":"f03-manifest-20261008-01","evidence_path":"build-1:/srv/artefacts/tas/f03-manifest-20261008-01/build-from-manifest-c30ab32c-build4.log; build-4:/srv/builds/igneum-wt-f03-201; tools/ci/build-from-manifest.sh; tools/ci/release-manifest-check.sh","updated":"2026-10-08T21:11:46.383Z","evidence_record":{"requirement_id":"R2-F03-R01","decision":"PASS","method":"static","cell":"harness:release-manifest","manifest_sha":"c30ab32c","run_id":"f03-manifest-20261008-01","evidence":"build-1:/srv/artefacts/tas/f03-manifest-20261008-01/build-from-manifest-c30ab32c-build4.log; build-4:/srv/builds/igneum-wt-f03-201; tools/ci/build-from-manifest.sh; tools/ci/release-manifest-check.sh","in_progress":false,"coverage":"full for the components the tree builds (node, miner, pool, app, prove-host from one manifest, no unpublished vendor tree); the GPU workers are the kit's cross-build and read under the shipper's kit-isa line, not this cell","release_identity":{"commit":"c30ab32c","lockfile":"the release tree's Cargo.lock files at c30ab32c","binary":"cargo check only: no binary is claimed by this cell; the fleet binaries are the shipper's kit on aa0e0f45","network_object":"igneum-devnet-4, chain id 4465","activation":"none (a build fact)","profile_hashes":"release-manifest-check: every component's own pin equals packaging/release-manifest.json"},"claim_impact":"F03's first rung: one manifest, one build, no unpublished vendor tree; the same-work rung (R02) and the transition rung (R03) stay NOT RUN until the readers run on the job context","reviewer":"","at":"2026-10-08T21:11:46.383Z"},"evidence_records":{"harness:release-manifest":{"requirement_id":"R2-F03-R01","decision":"PASS","method":"static","cell":"harness:release-manifest","manifest_sha":"c30ab32c","run_id":"f03-manifest-20261008-01","evidence":"build-1:/srv/artefacts/tas/f03-manifest-20261008-01/build-from-manifest-c30ab32c-build4.log; build-4:/srv/builds/igneum-wt-f03-201; tools/ci/build-from-manifest.sh; tools/ci/release-manifest-check.sh","in_progress":false,"coverage":"full for the components the tree builds (node, miner, pool, app, prove-host from one manifest, no unpublished vendor tree); the GPU workers are the kit's cross-build and read under the shipper's kit-isa line, not this cell","release_identity":{"commit":"c30ab32c","lockfile":"the release tree's Cargo.lock files at c30ab32c","binary":"cargo check only: no binary is claimed by this cell; the fleet binaries are the shipper's kit on aa0e0f45","network_object":"igneum-devnet-4, chain id 4465","activation":"none (a build fact)","profile_hashes":"release-manifest-check: every component's own pin equals packaging/release-manifest.json"},"claim_impact":"F03's first rung: one manifest, one build, no unpublished vendor tree; the same-work rung (R02) and the transition rung (R03) stay NOT RUN until the readers run on the job context","reviewer":"","at":"2026-10-08T21:11:46.383Z"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F03-R02","title":"Same job context produces identical accepted work in node, CPU reference, CUDA, Metal, OpenCL and pool.","setup":"The regression R2-F03 requires (review R2 finding F03: The bundle contains a v6 candidate, not a demonstrated integrated v6 release).","steps":["Same job context produces identical accepted work in node, CPU reference, CUDA, Metal, OpenCL and pool."],"accept":"Same job context produces identical accepted work in node, CPU reference, CUDA, Metal, OpenCL and pool.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F03"],"gate":"Review findings closed","owner":"CI steward, hash lane (ProgramClass::V6 on freeze), pool lane","manual_page":null,"finding":"R2-F03","finding_title":"The bundle contains a v6 candidate, not a demonstrated integrated v6 release","finding_priority":"P0 - freeze/integration blocker","owner_lane":"CI steward, hash lane (ProgramClass::V6 on freeze), pool lane","run_status":"NOT RUN","base_test_ids":["GOV-01","GOV-03","POW-01","ROT-02"],"run_id":"same-work-20261008-03","evidence_path":"docs/design/class-v5-stored-state.md; build-1:/srv/artefacts/packs/packs-class-v6-20261008T202808Z.zip; build-1:/srv/builds/_log/v5-class/kits-20261008T202808Z/emu-check.log; build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-03/state-epoch2.igsd1; build-1:/srv/artefacts/tas/same-work-20261008-03/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/README.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/opencl-rx7600.report.txt","updated":"2026-10-09T05:08:21.033Z","evidence_record":{"requirement_id":"R2-F03-R02","decision":"NOT RUN","method":"GPU","cell":"harness:same-work","manifest_sha":"c30ab32c","run_id":"same-work-20261008-03","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-03/state-epoch2.igsd1; build-1:/srv/artefacts/tas/same-work-20261008-03/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/README.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/opencl-rx7600.report.txt","in_progress":true,"coverage":"partial until every reader has run: bit-for-bit agreement per nonce across node, CPU reference, CUDA, OpenCL, Metal and pool on one job context","release_identity":{"commit":"c30ab32c (release-2.0.1; the class v5 freeze 1c420786, fingerprint cbc5bd0a); the CUDA reader the kit's gen 5 worker 9bfcf728","lockfile":"","binary":"igneum-pow sha256 7ba781db... (release-2.0.1 c30ab32c, built on build-4); igneum-worker-cuda gen 5 sha256 9bfcf728...","network_object":"igneum-devnet-4's class v5 object at epoch 2: id 0x81fbfa3aa413173f, epoch seed 3c3fab43... (the epoch-2 seed block, chain block 3423, common to every chain tonight: the split came after it), day 20734, era 0 seed 7c36b833... (class v5 reads no era; the id is the same under era zero), state stream state-epoch2.igsd1 (sha256 f36e6bba..., 21,132 bytes, 224 records, root 0xf798d1d8...) pulled at 22:18 UK from build-1's seed EVM RPC port 27810","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"the same-work test's live-chain half (the coordinator's third row, 22:1x UK): the readers on the chain's own class v5 object at epoch 2 across the day switch 20734 to 20735; the node and pool readers run it on their release-line engines, the row those two can PASS without the class v6 branch","reviewer":"","at":"2026-10-09T05:08:21.033Z","note":"node PASS x3 on the release line (kit 1's pair 94e4c6ba) and PASS x3 on the D1 branch (cc23f9bd); CUDA 5090, 4090 and 3090 PASS x3 on the gen 5 worker; CPU reference written; pool PASS x3 on the 2.0.2 kit as pinned (the share verifier's path); OpenCL PASS x3 on the first rig's RX 7600; Metal 08:30 UK, the sixth reader; in progress | On an island, not a network: build-1's seed is one of devnet-4's islands since the epoch-3 cut (21:34 UK), its stream pulled at 22:18 UK; epoch 2's object predates the split. Context 03 at build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json (sha256 53837a96...). The witness for the id: igneum-miner program-id reads class v5 attempt 0 id 81fbfa3aa413173f under era 7c36b833... and era 00..00 alike, from the miner at same-work-node cc23f9bd on build-2 (the class v5 engine path; the 2.0.1 pair's miner ef0f2ed8 on build-1 has no program-id subcommand), and the node lane's placed (c) read gave the same id; the hand's RPC port port 26870 answered no published state stream for the block at 22:18 UK. Packs v5-epoch2-d20734 and d20735 (both id 0x81fbfa3aa413173f) exported from release-2.0.1's igneum-pow on build-4 at 22:19 UK; the CPU references from release-2.0.1's igneum-pow (binary 7ba781db...) on build-4 under watchers, 22:20 to 00:21 UK (about 210 nonces a second a run; the one slip of the night, reported once), ref-D 873528b1... over [0, 1572864) and ref-D1 7f8e64ae... over [1572864, 3145728), read back on build-1 at 00:22 UK. NODE, two readers, both PASS on all three phases (00:27, 00:31, 00:35 UK; 1,048,576 agree each, 0 disagree, 0 missing; program id 0x81fbfa3aa413173f on every segment equal to the packs'; the day switch at 1572864 with both boundary hashes equal to the reference, 21488c8bc924c342 before and 08d55958274e224d after; genesis day 20734 installed, growth doublings 0): the RELEASE LINE, igneum-miner from kit 1's pair build-1:/srv/artefacts/200-94e4c6ba/node-lane (binary sha256 41cc0a82..., the recheck-vectors commits cherry-picked onto kit1-line 94e4c6ba = release-2.0.2-node without the v6 arm, the class v5 engine the kit ships), node-release-94e4c6ba/node-{1,2,3}.json (ac60f395..., 97f9758e..., bad64c5c...); and the D1 branch, same-work-node cc23f9bd (merged onto class-v6-node-review as fe0fdc59; binary 9d563c41...), node-same-work-node-cc23f9bd/node-{1,2,3}.json (7b1254f1..., a9da16a9..., 09ec9202...), the two readers' hashes equal to each other and to the reference on every nonce. CUDA, the kit's generation 5 worker 9bfcf728 on the driver at c8b65a26 or later: the 5090 PASS on all three phases (00:25 to 00:28 UK, cuda-5090-{1,2,3}.json 7040a0ab..., 86ff7bc4..., 3e3ec63f...) and the 4090 PASS on all three (00:30 to 00:33 UK, cuda-4090-{1,2,3}.json 1cb9efe5..., 6a52d5bb..., 1efffdde...), the day switch driven through the worker's prepare on each; The 3090 PASS on all three phases (05:11 to 05:14 UK; cuda-3090-{1,2,3}.json de68d6d3..., 7f66ee96..., 00840cc9...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. POOL, the 2.0.2 kit as pinned (release-2.0.2 77b5acc5's pool with node 7cfa422a, binary sha256 46e4c440..., on build-6, genesis day 20734 and dataset 2^28 from the pack): PASS on all three phases (00:28, 00:33, 00:38 UK; 1,048,576 agree each, 0 disagree, 0 missing; the boundary switched at 1572864 with one program id on both segments; 64, 128 and 64 of the sampled shares accepted through the share verifier), pool/kit-row/pool-{1,2,3}.json (c77d1276..., b30d4b65..., 957954e7...) with the README; every nonce of 3,145,728 agrees with the reference on the chain's own class v5 object through the kit as pinned. OPENCL, the first rig's RX 7600 (gfx1102) on the generation 6 OpenCL worker 247a8467... (it serves generators 2 to 6): PASS on all three phases (the job run-ca3-pc1-samework03-opencl-7600-20261009, 05:56 to 05:58 UK): phase 1 digest 12430d25..., phase 2 310b2855... across the day switch 20734 to 20735 at 1572864 (the D+1 pack prepared in 853 ms, the worker's 'switched (class v5)' line, the boundary block 8,192 of 8,192 lines), phase 3 8da9e791..., each 1,048,576 of 1,048,576 equal to the reference slices; 'RESULT verdict all PASS context=same-work-20261008-03 reader=opencl card=rx7600'; the report opencl-rx7600.report.txt (sha256 1164d653..., read back on build-1 at 06:00 UK; both pack ids 0x81fbfa3aa413173f generator 5 in its RESULT lines). Metal is the sixth reader, 08:30 UK on the project's macOS machine. The rows stay NOT RUN in progress until every reader has read (the coordinator's ruling 23:1x UK).","network_label":"on an island, not a network"},"evidence_records":{"kit:class-v6-fingerprints":{"requirement_id":"R2-F03-R02","decision":"NOT RUN","method":"GPU","cell":"kit:class-v6-fingerprints","manifest_sha":"ef0f2ed8","run_id":"kit-class-v6-20261008-01","evidence":"docs/design/class-v5-stored-state.md; build-1:/srv/artefacts/packs/packs-class-v6-20261008T202808Z.zip; build-1:/srv/builds/_log/v5-class/kits-20261008T202808Z/emu-check.log","in_progress":true,"coverage":"partial: the worker half (CPU reference, CUDA, Metal, OpenCL) on the same program packs; the node's and the pool's accepted work on the same job context are the CI steward's and the pool lane's cells; PASS only when every listed platform reads one fingerprint and the node and pool halves are green","release_identity":{"commit":"ef0f2ed8","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:18:18.084Z"},"harness:same-work":{"requirement_id":"R2-F03-R02","decision":"NOT RUN","method":"GPU","cell":"harness:same-work","manifest_sha":"c30ab32c","run_id":"same-work-20261008-03","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-03/state-epoch2.igsd1; build-1:/srv/artefacts/tas/same-work-20261008-03/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/README.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/opencl-rx7600.report.txt","in_progress":true,"coverage":"partial until every reader has run: bit-for-bit agreement per nonce across node, CPU reference, CUDA, OpenCL, Metal and pool on one job context","release_identity":{"commit":"c30ab32c (release-2.0.1; the class v5 freeze 1c420786, fingerprint cbc5bd0a); the CUDA reader the kit's gen 5 worker 9bfcf728","lockfile":"","binary":"igneum-pow sha256 7ba781db... (release-2.0.1 c30ab32c, built on build-4); igneum-worker-cuda gen 5 sha256 9bfcf728...","network_object":"igneum-devnet-4's class v5 object at epoch 2: id 0x81fbfa3aa413173f, epoch seed 3c3fab43... (the epoch-2 seed block, chain block 3423, common to every chain tonight: the split came after it), day 20734, era 0 seed 7c36b833... (class v5 reads no era; the id is the same under era zero), state stream state-epoch2.igsd1 (sha256 f36e6bba..., 21,132 bytes, 224 records, root 0xf798d1d8...) pulled at 22:18 UK from build-1's seed EVM RPC port 27810","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"the same-work test's live-chain half (the coordinator's third row, 22:1x UK): the readers on the chain's own class v5 object at epoch 2 across the day switch 20734 to 20735; the node and pool readers run it on their release-line engines, the row those two can PASS without the class v6 branch","reviewer":"","at":"2026-10-09T05:08:21.033Z","note":"node PASS x3 on the release line (kit 1's pair 94e4c6ba) and PASS x3 on the D1 branch (cc23f9bd); CUDA 5090, 4090 and 3090 PASS x3 on the gen 5 worker; CPU reference written; pool PASS x3 on the 2.0.2 kit as pinned (the share verifier's path); OpenCL PASS x3 on the first rig's RX 7600; Metal 08:30 UK, the sixth reader; in progress | On an island, not a network: build-1's seed is one of devnet-4's islands since the epoch-3 cut (21:34 UK), its stream pulled at 22:18 UK; epoch 2's object predates the split. Context 03 at build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json (sha256 53837a96...). The witness for the id: igneum-miner program-id reads class v5 attempt 0 id 81fbfa3aa413173f under era 7c36b833... and era 00..00 alike, from the miner at same-work-node cc23f9bd on build-2 (the class v5 engine path; the 2.0.1 pair's miner ef0f2ed8 on build-1 has no program-id subcommand), and the node lane's placed (c) read gave the same id; the hand's RPC port port 26870 answered no published state stream for the block at 22:18 UK. Packs v5-epoch2-d20734 and d20735 (both id 0x81fbfa3aa413173f) exported from release-2.0.1's igneum-pow on build-4 at 22:19 UK; the CPU references from release-2.0.1's igneum-pow (binary 7ba781db...) on build-4 under watchers, 22:20 to 00:21 UK (about 210 nonces a second a run; the one slip of the night, reported once), ref-D 873528b1... over [0, 1572864) and ref-D1 7f8e64ae... over [1572864, 3145728), read back on build-1 at 00:22 UK. NODE, two readers, both PASS on all three phases (00:27, 00:31, 00:35 UK; 1,048,576 agree each, 0 disagree, 0 missing; program id 0x81fbfa3aa413173f on every segment equal to the packs'; the day switch at 1572864 with both boundary hashes equal to the reference, 21488c8bc924c342 before and 08d55958274e224d after; genesis day 20734 installed, growth doublings 0): the RELEASE LINE, igneum-miner from kit 1's pair build-1:/srv/artefacts/200-94e4c6ba/node-lane (binary sha256 41cc0a82..., the recheck-vectors commits cherry-picked onto kit1-line 94e4c6ba = release-2.0.2-node without the v6 arm, the class v5 engine the kit ships), node-release-94e4c6ba/node-{1,2,3}.json (ac60f395..., 97f9758e..., bad64c5c...); and the D1 branch, same-work-node cc23f9bd (merged onto class-v6-node-review as fe0fdc59; binary 9d563c41...), node-same-work-node-cc23f9bd/node-{1,2,3}.json (7b1254f1..., a9da16a9..., 09ec9202...), the two readers' hashes equal to each other and to the reference on every nonce. CUDA, the kit's generation 5 worker 9bfcf728 on the driver at c8b65a26 or later: the 5090 PASS on all three phases (00:25 to 00:28 UK, cuda-5090-{1,2,3}.json 7040a0ab..., 86ff7bc4..., 3e3ec63f...) and the 4090 PASS on all three (00:30 to 00:33 UK, cuda-4090-{1,2,3}.json 1cb9efe5..., 6a52d5bb..., 1efffdde...), the day switch driven through the worker's prepare on each; The 3090 PASS on all three phases (05:11 to 05:14 UK; cuda-3090-{1,2,3}.json de68d6d3..., 7f66ee96..., 00840cc9...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. POOL, the 2.0.2 kit as pinned (release-2.0.2 77b5acc5's pool with node 7cfa422a, binary sha256 46e4c440..., on build-6, genesis day 20734 and dataset 2^28 from the pack): PASS on all three phases (00:28, 00:33, 00:38 UK; 1,048,576 agree each, 0 disagree, 0 missing; the boundary switched at 1572864 with one program id on both segments; 64, 128 and 64 of the sampled shares accepted through the share verifier), pool/kit-row/pool-{1,2,3}.json (c77d1276..., b30d4b65..., 957954e7...) with the README; every nonce of 3,145,728 agrees with the reference on the chain's own class v5 object through the kit as pinned. OPENCL, the first rig's RX 7600 (gfx1102) on the generation 6 OpenCL worker 247a8467... (it serves generators 2 to 6): PASS on all three phases (the job run-ca3-pc1-samework03-opencl-7600-20261009, 05:56 to 05:58 UK): phase 1 digest 12430d25..., phase 2 310b2855... across the day switch 20734 to 20735 at 1572864 (the D+1 pack prepared in 853 ms, the worker's 'switched (class v5)' line, the boundary block 8,192 of 8,192 lines), phase 3 8da9e791..., each 1,048,576 of 1,048,576 equal to the reference slices; 'RESULT verdict all PASS context=same-work-20261008-03 reader=opencl card=rx7600'; the report opencl-rx7600.report.txt (sha256 1164d653..., read back on build-1 at 06:00 UK; both pack ids 0x81fbfa3aa413173f generator 5 in its RESULT lines). Metal is the sixth reader, 08:30 UK on the project's macOS machine. The rows stay NOT RUN in progress until every reader has read (the coordinator's ruling 23:1x UK).","network_label":"on an island, not a network"}},"in_progress_since":"2026-10-08T21:18:18.084Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F03-R03","title":"Cross every scheduled transition with old/new client behavior documented and identical rule identities.","setup":"The regression R2-F03 requires (review R2 finding F03: The bundle contains a v6 candidate, not a demonstrated integrated v6 release).","steps":["Cross every scheduled transition with old/new client behavior documented and identical rule identities."],"accept":"Cross every scheduled transition with old/new client behavior documented and identical rule identities.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F03"],"gate":"Review findings closed","owner":"CI steward, hash lane (ProgramClass::V6 on freeze), pool lane","manual_page":null,"finding":"R2-F03","finding_title":"The bundle contains a v6 candidate, not a demonstrated integrated v6 release","finding_priority":"P0 - freeze/integration blocker","owner_lane":"CI steward, hash lane (ProgramClass::V6 on freeze), pool lane","run_status":"NOT RUN","base_test_ids":["GOV-01","GOV-03","POW-01","ROT-02"],"run_id":"same-work-20261008-03","evidence_path":"build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/opencl-rx7600.report.txt","updated":"2026-10-09T05:08:21.033Z","evidence_record":{"requirement_id":"R2-F03-R03","decision":"NOT RUN","method":"GPU","cell":"harness:same-work","manifest_sha":"c30ab32c","run_id":"same-work-20261008-03","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/opencl-rx7600.report.txt","in_progress":true,"coverage":"partial: the day-boundary transition in phase 2 (the one transition every live network crosses hourly at 60x); a class rotation is the same test on a research object until a v6 floor is set","release_identity":{"commit":"c30ab32c (release-2.0.1; the class v5 freeze 1c420786, fingerprint cbc5bd0a); the CUDA reader the kit's gen 5 worker 9bfcf728","lockfile":"","binary":"igneum-pow sha256 7ba781db... (release-2.0.1 c30ab32c, built on build-4); igneum-worker-cuda gen 5 sha256 9bfcf728...","network_object":"igneum-devnet-4's class v5 object at epoch 2: id 0x81fbfa3aa413173f, epoch seed 3c3fab43... (the epoch-2 seed block, chain block 3423, common to every chain tonight: the split came after it), day 20734, era 0 seed 7c36b833... (class v5 reads no era; the id is the same under era zero), state stream state-epoch2.igsd1 (sha256 f36e6bba..., 21,132 bytes, 224 records, root 0xf798d1d8...) pulled at 22:18 UK from build-1's seed EVM RPC port 27810","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"the same-work test's live-chain half (the coordinator's third row, 22:1x UK): the readers on the chain's own class v5 object at epoch 2 across the day switch 20734 to 20735; the node and pool readers run it on their release-line engines, the row those two can PASS without the class v6 branch","reviewer":"","at":"2026-10-09T05:08:21.033Z","note":"the day switch 20734 to 20735 at nonce 1572864 on the live object: both node readers, the kit's pool, the 5090 and the 4090 each switched program and dataset there with the program id unchanged and both boundary hashes equal to the reference; OpenCL PASS x3 on the first rig's RX 7600 (the day switch seen); Metal pending (08:30 UK); in progress | On an island, not a network: build-1's seed is one of devnet-4's islands since the epoch-3 cut (21:34 UK), its stream pulled at 22:18 UK; epoch 2's object predates the split. Context 03 at build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json (sha256 53837a96...). The witness for the id: igneum-miner program-id reads class v5 attempt 0 id 81fbfa3aa413173f under era 7c36b833... and era 00..00 alike, from the miner at same-work-node cc23f9bd on build-2 (the class v5 engine path; the 2.0.1 pair's miner ef0f2ed8 on build-1 has no program-id subcommand), and the node lane's placed (c) read gave the same id; the hand's RPC port port 26870 answered no published state stream for the block at 22:18 UK. Packs v5-epoch2-d20734 and d20735 (both id 0x81fbfa3aa413173f) exported from release-2.0.1's igneum-pow on build-4 at 22:19 UK; the CPU references from release-2.0.1's igneum-pow (binary 7ba781db...) on build-4 under watchers, 22:20 to 00:21 UK (about 210 nonces a second a run; the one slip of the night, reported once), ref-D 873528b1... over [0, 1572864) and ref-D1 7f8e64ae... over [1572864, 3145728), read back on build-1 at 00:22 UK. NODE, two readers, both PASS on all three phases (00:27, 00:31, 00:35 UK; 1,048,576 agree each, 0 disagree, 0 missing; program id 0x81fbfa3aa413173f on every segment equal to the packs'; the day switch at 1572864 with both boundary hashes equal to the reference, 21488c8bc924c342 before and 08d55958274e224d after; genesis day 20734 installed, growth doublings 0): the RELEASE LINE, igneum-miner from kit 1's pair build-1:/srv/artefacts/200-94e4c6ba/node-lane (binary sha256 41cc0a82..., the recheck-vectors commits cherry-picked onto kit1-line 94e4c6ba = release-2.0.2-node without the v6 arm, the class v5 engine the kit ships), node-release-94e4c6ba/node-{1,2,3}.json (ac60f395..., 97f9758e..., bad64c5c...); and the D1 branch, same-work-node cc23f9bd (merged onto class-v6-node-review as fe0fdc59; binary 9d563c41...), node-same-work-node-cc23f9bd/node-{1,2,3}.json (7b1254f1..., a9da16a9..., 09ec9202...), the two readers' hashes equal to each other and to the reference on every nonce. CUDA, the kit's generation 5 worker 9bfcf728 on the driver at c8b65a26 or later: the 5090 PASS on all three phases (00:25 to 00:28 UK, cuda-5090-{1,2,3}.json 7040a0ab..., 86ff7bc4..., 3e3ec63f...) and the 4090 PASS on all three (00:30 to 00:33 UK, cuda-4090-{1,2,3}.json 1cb9efe5..., 6a52d5bb..., 1efffdde...), the day switch driven through the worker's prepare on each; The 3090 PASS on all three phases (05:11 to 05:14 UK; cuda-3090-{1,2,3}.json de68d6d3..., 7f66ee96..., 00840cc9...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. POOL, the 2.0.2 kit as pinned (release-2.0.2 77b5acc5's pool with node 7cfa422a, binary sha256 46e4c440..., on build-6, genesis day 20734 and dataset 2^28 from the pack): PASS on all three phases (00:28, 00:33, 00:38 UK; 1,048,576 agree each, 0 disagree, 0 missing; the boundary switched at 1572864 with one program id on both segments; 64, 128 and 64 of the sampled shares accepted through the share verifier), pool/kit-row/pool-{1,2,3}.json (c77d1276..., b30d4b65..., 957954e7...) with the README; every nonce of 3,145,728 agrees with the reference on the chain's own class v5 object through the kit as pinned. OPENCL, the first rig's RX 7600 (gfx1102) on the generation 6 OpenCL worker 247a8467... (it serves generators 2 to 6): PASS on all three phases (the job run-ca3-pc1-samework03-opencl-7600-20261009, 05:56 to 05:58 UK): phase 1 digest 12430d25..., phase 2 310b2855... across the day switch 20734 to 20735 at 1572864 (the D+1 pack prepared in 853 ms, the worker's 'switched (class v5)' line, the boundary block 8,192 of 8,192 lines), phase 3 8da9e791..., each 1,048,576 of 1,048,576 equal to the reference slices; 'RESULT verdict all PASS context=same-work-20261008-03 reader=opencl card=rx7600'; the report opencl-rx7600.report.txt (sha256 1164d653..., read back on build-1 at 06:00 UK; both pack ids 0x81fbfa3aa413173f generator 5 in its RESULT lines). Metal is the sixth reader, 08:30 UK on the project's macOS machine. The rows stay NOT RUN in progress until every reader has read (the coordinator's ruling 23:1x UK).","network_label":"on an island, not a network"},"evidence_records":{"harness:same-work":{"requirement_id":"R2-F03-R03","decision":"NOT RUN","method":"GPU","cell":"harness:same-work","manifest_sha":"c30ab32c","run_id":"same-work-20261008-03","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/opencl-rx7600.report.txt","in_progress":true,"coverage":"partial: the day-boundary transition in phase 2 (the one transition every live network crosses hourly at 60x); a class rotation is the same test on a research object until a v6 floor is set","release_identity":{"commit":"c30ab32c (release-2.0.1; the class v5 freeze 1c420786, fingerprint cbc5bd0a); the CUDA reader the kit's gen 5 worker 9bfcf728","lockfile":"","binary":"igneum-pow sha256 7ba781db... (release-2.0.1 c30ab32c, built on build-4); igneum-worker-cuda gen 5 sha256 9bfcf728...","network_object":"igneum-devnet-4's class v5 object at epoch 2: id 0x81fbfa3aa413173f, epoch seed 3c3fab43... (the epoch-2 seed block, chain block 3423, common to every chain tonight: the split came after it), day 20734, era 0 seed 7c36b833... (class v5 reads no era; the id is the same under era zero), state stream state-epoch2.igsd1 (sha256 f36e6bba..., 21,132 bytes, 224 records, root 0xf798d1d8...) pulled at 22:18 UK from build-1's seed EVM RPC port 27810","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"the same-work test's live-chain half (the coordinator's third row, 22:1x UK): the readers on the chain's own class v5 object at epoch 2 across the day switch 20734 to 20735; the node and pool readers run it on their release-line engines, the row those two can PASS without the class v6 branch","reviewer":"","at":"2026-10-09T05:08:21.033Z","note":"the day switch 20734 to 20735 at nonce 1572864 on the live object: both node readers, the kit's pool, the 5090 and the 4090 each switched program and dataset there with the program id unchanged and both boundary hashes equal to the reference; OpenCL PASS x3 on the first rig's RX 7600 (the day switch seen); Metal pending (08:30 UK); in progress | On an island, not a network: build-1's seed is one of devnet-4's islands since the epoch-3 cut (21:34 UK), its stream pulled at 22:18 UK; epoch 2's object predates the split. Context 03 at build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json (sha256 53837a96...). The witness for the id: igneum-miner program-id reads class v5 attempt 0 id 81fbfa3aa413173f under era 7c36b833... and era 00..00 alike, from the miner at same-work-node cc23f9bd on build-2 (the class v5 engine path; the 2.0.1 pair's miner ef0f2ed8 on build-1 has no program-id subcommand), and the node lane's placed (c) read gave the same id; the hand's RPC port port 26870 answered no published state stream for the block at 22:18 UK. Packs v5-epoch2-d20734 and d20735 (both id 0x81fbfa3aa413173f) exported from release-2.0.1's igneum-pow on build-4 at 22:19 UK; the CPU references from release-2.0.1's igneum-pow (binary 7ba781db...) on build-4 under watchers, 22:20 to 00:21 UK (about 210 nonces a second a run; the one slip of the night, reported once), ref-D 873528b1... over [0, 1572864) and ref-D1 7f8e64ae... over [1572864, 3145728), read back on build-1 at 00:22 UK. NODE, two readers, both PASS on all three phases (00:27, 00:31, 00:35 UK; 1,048,576 agree each, 0 disagree, 0 missing; program id 0x81fbfa3aa413173f on every segment equal to the packs'; the day switch at 1572864 with both boundary hashes equal to the reference, 21488c8bc924c342 before and 08d55958274e224d after; genesis day 20734 installed, growth doublings 0): the RELEASE LINE, igneum-miner from kit 1's pair build-1:/srv/artefacts/200-94e4c6ba/node-lane (binary sha256 41cc0a82..., the recheck-vectors commits cherry-picked onto kit1-line 94e4c6ba = release-2.0.2-node without the v6 arm, the class v5 engine the kit ships), node-release-94e4c6ba/node-{1,2,3}.json (ac60f395..., 97f9758e..., bad64c5c...); and the D1 branch, same-work-node cc23f9bd (merged onto class-v6-node-review as fe0fdc59; binary 9d563c41...), node-same-work-node-cc23f9bd/node-{1,2,3}.json (7b1254f1..., a9da16a9..., 09ec9202...), the two readers' hashes equal to each other and to the reference on every nonce. CUDA, the kit's generation 5 worker 9bfcf728 on the driver at c8b65a26 or later: the 5090 PASS on all three phases (00:25 to 00:28 UK, cuda-5090-{1,2,3}.json 7040a0ab..., 86ff7bc4..., 3e3ec63f...) and the 4090 PASS on all three (00:30 to 00:33 UK, cuda-4090-{1,2,3}.json 1cb9efe5..., 6a52d5bb..., 1efffdde...), the day switch driven through the worker's prepare on each; The 3090 PASS on all three phases (05:11 to 05:14 UK; cuda-3090-{1,2,3}.json de68d6d3..., 7f66ee96..., 00840cc9...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. POOL, the 2.0.2 kit as pinned (release-2.0.2 77b5acc5's pool with node 7cfa422a, binary sha256 46e4c440..., on build-6, genesis day 20734 and dataset 2^28 from the pack): PASS on all three phases (00:28, 00:33, 00:38 UK; 1,048,576 agree each, 0 disagree, 0 missing; the boundary switched at 1572864 with one program id on both segments; 64, 128 and 64 of the sampled shares accepted through the share verifier), pool/kit-row/pool-{1,2,3}.json (c77d1276..., b30d4b65..., 957954e7...) with the README; every nonce of 3,145,728 agrees with the reference on the chain's own class v5 object through the kit as pinned. OPENCL, the first rig's RX 7600 (gfx1102) on the generation 6 OpenCL worker 247a8467... (it serves generators 2 to 6): PASS on all three phases (the job run-ca3-pc1-samework03-opencl-7600-20261009, 05:56 to 05:58 UK): phase 1 digest 12430d25..., phase 2 310b2855... across the day switch 20734 to 20735 at 1572864 (the D+1 pack prepared in 853 ms, the worker's 'switched (class v5)' line, the boundary block 8,192 of 8,192 lines), phase 3 8da9e791..., each 1,048,576 of 1,048,576 equal to the reference slices; 'RESULT verdict all PASS context=same-work-20261008-03 reader=opencl card=rx7600'; the report opencl-rx7600.report.txt (sha256 1164d653..., read back on build-1 at 06:00 UK; both pack ids 0x81fbfa3aa413173f generator 5 in its RESULT lines). Metal is the sixth reader, 08:30 UK on the project's macOS machine. The rows stay NOT RUN in progress until every reader has read (the coordinator's ruling 23:1x UK).","network_label":"on an island, not a network"}},"in_progress_since":"2026-10-09T04:34:04.893Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F04-R01","title":"Native multi-node 40/40/20 partition, equivocation and dust-valid mining on both sides past the window.","setup":"The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).","steps":["Native multi-node 40/40/20 partition, equivocation and dust-valid mining on both sides past the window."],"accept":"Native multi-node 40/40/20 partition, equivocation and dust-valid mining on both sides past the window.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F04"],"gate":"Review findings closed","owner":"node lane, reference apps, site (explorer)","manual_page":null,"finding":"R2-F04","finding_title":"Finality v4 recovery deliberately has a weaker safety boundary","finding_priority":"P0 - finality guarantee decision","owner_lane":"node lane, reference apps, site (explorer)","run_status":"NOT RUN","base_test_ids":["FIN-02","FIN-03","FIN-07","FIN-08","VER-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F04-R02","title":"Proof that the chosen recovery guarantee matches the public finality claim; two valid contradictory certificates are a hard failure for strong finality.","setup":"The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).","steps":["Proof that the chosen recovery guarantee matches the public finality claim; two valid contradictory certificates are a hard failure for strong finality."],"accept":"Proof that the chosen recovery guarantee matches the public finality claim; two valid contradictory certificates are a hard failure for strong finality.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F04"],"gate":"Review findings closed","owner":"node lane, reference apps, site (explorer)","manual_page":null,"finding":"R2-F04","finding_title":"Finality v4 recovery deliberately has a weaker safety boundary","finding_priority":"P0 - finality guarantee decision","owner_lane":"node lane, reference apps, site (explorer)","run_status":"NOT RUN","base_test_ids":["FIN-02","FIN-03","FIN-07","FIN-08","VER-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F04-R03","title":"Pause-only resume with historical backfill, missing historical data and all old keys returning.","setup":"The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).","steps":["Pause-only resume with historical backfill, missing historical data and all old keys returning."],"accept":"Pause-only resume with historical backfill, missing historical data and all old keys returning.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F04"],"gate":"Review findings closed","owner":"node lane, reference apps, site (explorer)","manual_page":null,"finding":"R2-F04","finding_title":"Finality v4 recovery deliberately has a weaker safety boundary","finding_priority":"P0 - finality guarantee decision","owner_lane":"node lane, reference apps, site (explorer)","run_status":"NOT RUN","base_test_ids":["FIN-02","FIN-03","FIN-07","FIN-08","VER-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F04-R04","title":"Wallet, receipt and oracle consumers distinguish any weaker recovery state.","setup":"The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).","steps":["Wallet, receipt and oracle consumers distinguish any weaker recovery state."],"accept":"Wallet, receipt and oracle consumers distinguish any weaker recovery state.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F04"],"gate":"Review findings closed","owner":"node lane, reference apps, site (explorer)","manual_page":null,"finding":"R2-F04","finding_title":"Finality v4 recovery deliberately has a weaker safety boundary","finding_priority":"P0 - finality guarantee decision","owner_lane":"node lane, reference apps, site (explorer)","run_status":"NOT RUN","base_test_ids":["FIN-02","FIN-03","FIN-07","FIN-08","VER-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F05-R01","title":"Native reference-vs-incremental expression equivalence across all source registers and real instruction updates.","setup":"The regression R2-F05 requires (review R2 finding F05: reg64 address coupling has an exact incremental alternative).","steps":["Native reference-vs-incremental expression equivalence across all source registers and real instruction updates."],"accept":"Native reference-vs-incremental expression equivalence across all source registers and real instruction updates.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F05"],"gate":"Review findings closed","owner":"hash lane, adversary lane, floor lane 3","manual_page":null,"finding":"R2-F05","finding_title":"reg64 address coupling has an exact incremental alternative","finding_priority":"P1 - adversarial hardware evaluation","owner_lane":"hash lane, adversary lane, floor lane 3","run_status":"NOT RUN","base_test_ids":["POW-03","POW-04","ADV-03","ADV-05"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F05 (P1, the external review): the regression's harness is the owner lane's (hash lane, adversary lane, floor lane 3); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F05-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F05 (P1, the external review): the regression's harness is the owner lane's (hash lane, adversary lane, floor lane 3); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F05-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F05-R02","title":"Full-kernel output equivalence, registers, spills, wall power and accepted throughput across target GPUs.","setup":"The regression R2-F05 requires (review R2 finding F05: reg64 address coupling has an exact incremental alternative).","steps":["Full-kernel output equivalence, registers, spills, wall power and accepted throughput across target GPUs."],"accept":"Full-kernel output equivalence, registers, spills, wall power and accepted throughput across target GPUs.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F05"],"gate":"Review findings closed","owner":"hash lane, adversary lane, floor lane 3","manual_page":null,"finding":"R2-F05","finding_title":"reg64 address coupling has an exact incremental alternative","finding_priority":"P1 - adversarial hardware evaluation","owner_lane":"hash lane, adversary lane, floor lane 3","run_status":"NOT RUN","base_test_ids":["POW-03","POW-04","ADV-03","ADV-05"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F05 (P1, the external review): the regression's harness is the owner lane's (hash lane, adversary lane, floor lane 3); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F05-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F05 (P1, the external review): the regression's harness is the owner lane's (hash lane, adversary lane, floor lane 3); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F05-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F05-R03","title":"Adversary physical design includes prefix caching/recomputation cost; no assumed full 63-read cost on every load.","setup":"The regression R2-F05 requires (review R2 finding F05: reg64 address coupling has an exact incremental alternative).","steps":["Adversary physical design includes prefix caching/recomputation cost; no assumed full 63-read cost on every load."],"accept":"Adversary physical design includes prefix caching/recomputation cost; no assumed full 63-read cost on every load.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F05"],"gate":"Review findings closed","owner":"hash lane, adversary lane, floor lane 3","manual_page":null,"finding":"R2-F05","finding_title":"reg64 address coupling has an exact incremental alternative","finding_priority":"P1 - adversarial hardware evaluation","owner_lane":"hash lane, adversary lane, floor lane 3","run_status":"NOT RUN","base_test_ids":["POW-03","POW-04","ADV-03","ADV-05"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F05 (P1, the external review): the regression's harness is the owner lane's (hash lane, adversary lane, floor lane 3); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F05-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F05 (P1, the external review): the regression's harness is the owner lane's (hash lane, adversary lane, floor lane 3); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F05-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F06-R01","title":"Acceptance/reference/emitter evaluate the same activated schedule.","setup":"The regression R2-F06 requires (review R2 finding F06: The v6 acceptance and census gates are not complete for the final execution).","steps":["Acceptance/reference/emitter evaluate the same activated schedule."],"accept":"Acceptance/reference/emitter evaluate the same activated schedule.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F06"],"gate":"Review findings closed","owner":"hash lane, research lane D","manual_page":null,"finding":"R2-F06","finding_title":"The v6 acceptance and census gates are not complete for the final execution","finding_priority":"P1 - freeze blocker","owner_lane":"hash lane, research lane D","run_status":"NOT RUN","base_test_ids":["GOV-05","POW-01","POW-02","POW-06"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F06 (P1, the external review): the regression's harness is the owner lane's (hash lane, research lane D); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F06-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F06 (P1, the external review): the regression's harness is the owner lane's (hash lane, research lane D); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F06-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F06-R02","title":"Full live-dataset census on unseen seeds and the complete v6 pack.","setup":"The regression R2-F06 requires (review R2 finding F06: The v6 acceptance and census gates are not complete for the final execution).","steps":["Full live-dataset census on unseen seeds and the complete v6 pack."],"accept":"Full live-dataset census on unseen seeds and the complete v6 pack.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F06"],"gate":"Review findings closed","owner":"hash lane, research lane D","manual_page":null,"finding":"R2-F06","finding_title":"The v6 acceptance and census gates are not complete for the final execution","finding_priority":"P1 - freeze blocker","owner_lane":"hash lane, research lane D","run_status":"NOT RUN","base_test_ids":["GOV-05","POW-01","POW-02","POW-06"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F06 (P1, the external review): the regression's harness is the owner lane's (hash lane, research lane D); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F06-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F06 (P1, the external review): the regression's harness is the owner lane's (hash lane, research lane D); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F06-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F06-R03","title":"A failed experimental rule does not silently exhaust generation or bypass the intended resource requirement.","setup":"The regression R2-F06 requires (review R2 finding F06: The v6 acceptance and census gates are not complete for the final execution).","steps":["A failed experimental rule does not silently exhaust generation or bypass the intended resource requirement."],"accept":"A failed experimental rule does not silently exhaust generation or bypass the intended resource requirement.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F06"],"gate":"Review findings closed","owner":"hash lane, research lane D","manual_page":null,"finding":"R2-F06","finding_title":"The v6 acceptance and census gates are not complete for the final execution","finding_priority":"P1 - freeze blocker","owner_lane":"hash lane, research lane D","run_status":"NOT RUN","base_test_ids":["GOV-05","POW-01","POW-02","POW-06"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F06 (P1, the external review): the regression's harness is the owner lane's (hash lane, research lane D); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F06-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F06 (P1, the external review): the regression's harness is the owner lane's (hash lane, research lane D); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F06-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F07-R01","title":"Same final v6 configuration: mine -> evict -> prove -> aggregate -> submit -> rebuild -> resume; no leaked reservations.","setup":"The regression R2-F07 requires (review R2 finding F07: VRAM admission and proving deadlines need one operator-level scheduler).","steps":["Same final v6 configuration: mine -> evict -> prove -> aggregate -> submit -> rebuild -> resume; no leaked reservations."],"accept":"Same final v6 configuration: mine -> evict -> prove -> aggregate -> submit -> rebuild -> resume; no leaked reservations.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F07"],"gate":"Review findings closed","owner":"app lane, fleet lane","manual_page":null,"finding":"R2-F07","finding_title":"VRAM admission and proving deadlines need one operator-level scheduler","finding_priority":"P1 - miner economics and reliability","owner_lane":"app lane, fleet lane","run_status":"NOT RUN","base_test_ids":["GPU-05","CAP-02","CAP-05","UX-02"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F07 (P1, the external review): the regression's harness is the owner lane's (app lane, fleet lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F07-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F07 (P1, the external review): the regression's harness is the owner lane's (app lane, fleet lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F07-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F07-R02","title":"OOM, process crash and stale work recover without losing wallet state or silently consuming power.","setup":"The regression R2-F07 requires (review R2 finding F07: VRAM admission and proving deadlines need one operator-level scheduler).","steps":["OOM, process crash and stale work recover without losing wallet state or silently consuming power."],"accept":"OOM, process crash and stale work recover without losing wallet state or silently consuming power.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F07"],"gate":"Review findings closed","owner":"app lane, fleet lane","manual_page":null,"finding":"R2-F07","finding_title":"VRAM admission and proving deadlines need one operator-level scheduler","finding_priority":"P1 - miner economics and reliability","owner_lane":"app lane, fleet lane","run_status":"NOT RUN","base_test_ids":["GPU-05","CAP-02","CAP-05","UX-02"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F07 (P1, the external review): the regression's harness is the owner lane's (app lane, fleet lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F07-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F07 (P1, the external review): the regression's harness is the owner lane's (app lane, fleet lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F07-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F07-R03","title":"16 GB+ simultaneous mode only after measured peak plus next-epoch headroom; smaller-card modes labelled separately.","setup":"The regression R2-F07 requires (review R2 finding F07: VRAM admission and proving deadlines need one operator-level scheduler).","steps":["16 GB+ simultaneous mode only after measured peak plus next-epoch headroom; smaller-card modes labelled separately."],"accept":"16 GB+ simultaneous mode only after measured peak plus next-epoch headroom; smaller-card modes labelled separately.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F07"],"gate":"Review findings closed","owner":"app lane, fleet lane","manual_page":null,"finding":"R2-F07","finding_title":"VRAM admission and proving deadlines need one operator-level scheduler","finding_priority":"P1 - miner economics and reliability","owner_lane":"app lane, fleet lane","run_status":"NOT RUN","base_test_ids":["GPU-05","CAP-02","CAP-05","UX-02"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F07 (P1, the external review): the regression's harness is the owner lane's (app lane, fleet lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F07-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F07 (P1, the external review): the regression's harness is the owner lane's (app lane, fleet lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F07-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F08-R01","title":"Report every eligible job outcome, including expired work; a bounded list cannot hide losses.","setup":"The regression R2-F08 requires (review R2 finding F08: The proving pipeline reports waste and deadline censoring, not sustained capacity).","steps":["Report every eligible job outcome, including expired work; a bounded list cannot hide losses."],"accept":"Report every eligible job outcome, including expired work; a bounded list cannot hide losses.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F08"],"gate":"Review findings closed","owner":"proving lane, fleet lane, site (ops page)","manual_page":null,"finding":"R2-F08","finding_title":"The proving pipeline reports waste and deadline censoring, not sustained capacity","finding_priority":"P1 - proving product gate","owner_lane":"proving lane, fleet lane, site (ops page)","run_status":"NOT RUN","base_test_ids":["CAP-03","CAP-04","CAP-06","CAP-07"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F08 (P1, the external review): the regression's harness is the owner lane's (proving lane, fleet lane, site (ops page)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F08-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F08 (P1, the external review): the regression's harness is the owner lane's (proving lane, fleet lane, site (ops page)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F08-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F08-R02","title":"Consumer tiers complete and receive payment for declared jobs before claims about income.","setup":"The regression R2-F08 requires (review R2 finding F08: The proving pipeline reports waste and deadline censoring, not sustained capacity).","steps":["Consumer tiers complete and receive payment for declared jobs before claims about income."],"accept":"Consumer tiers complete and receive payment for declared jobs before claims about income.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F08"],"gate":"Review findings closed","owner":"proving lane, fleet lane, site (ops page)","manual_page":null,"finding":"R2-F08","finding_title":"The proving pipeline reports waste and deadline censoring, not sustained capacity","finding_priority":"P1 - proving product gate","owner_lane":"proving lane, fleet lane, site (ops page)","run_status":"NOT RUN","base_test_ids":["CAP-03","CAP-04","CAP-06","CAP-07"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F08 (P1, the external review): the regression's harness is the owner lane's (proving lane, fleet lane, site (ops page)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F08-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F08 (P1, the external review): the regression's harness is the owner lane's (proving lane, fleet lane, site (ops page)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F08-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F08-R03","title":"Sustained real workload across class transitions, with restart/retry and no publisher intervention.","setup":"The regression R2-F08 requires (review R2 finding F08: The proving pipeline reports waste and deadline censoring, not sustained capacity).","steps":["Sustained real workload across class transitions, with restart/retry and no publisher intervention."],"accept":"Sustained real workload across class transitions, with restart/retry and no publisher intervention.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F08"],"gate":"Review findings closed","owner":"proving lane, fleet lane, site (ops page)","manual_page":null,"finding":"R2-F08","finding_title":"The proving pipeline reports waste and deadline censoring, not sustained capacity","finding_priority":"P1 - proving product gate","owner_lane":"proving lane, fleet lane, site (ops page)","run_status":"NOT RUN","base_test_ids":["CAP-03","CAP-04","CAP-06","CAP-07"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F08 (P1, the external review): the regression's harness is the owner lane's (proving lane, fleet lane, site (ops page)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F08-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F08 (P1, the external review): the regression's harness is the owner lane's (proving lane, fleet lane, site (ops page)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F08-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F09-R01","title":"Generate all pass/fail cells directly from the declared inequalities and inputs.","setup":"The regression R2-F09 requires (review R2 finding F09: The economic model explicitly retains a failed specialist case).","steps":["Generate all pass/fail cells directly from the declared inequalities and inputs."],"accept":"Generate all pass/fail cells directly from the declared inequalities and inputs.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F09"],"gate":"Review findings closed","owner":"research lane, floor lane 3, coordinator","manual_page":null,"finding":"R2-F09","finding_title":"The economic model explicitly retains a failed specialist case","finding_priority":"P1 - founding claim not yet earned","owner_lane":"research lane, floor lane 3, coordinator","run_status":"NOT RUN","base_test_ids":["ADV-05","ADV-08","ECO-03","ECO-08","LEAD-03"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F09 (P1, the external review): the regression's harness is the owner lane's (research lane, floor lane 3, coordinator); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F09-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F09 (P1, the external review): the regression's harness is the owner lane's (research lane, floor lane 3, coordinator); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F09-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F09-R02","title":"Independent feasibility and cost evaluation of the strongest modeled SRAM/hybrid opponent.","setup":"The regression R2-F09 requires (review R2 finding F09: The economic model explicitly retains a failed specialist case).","steps":["Independent feasibility and cost evaluation of the strongest modeled SRAM/hybrid opponent."],"accept":"Independent feasibility and cost evaluation of the strongest modeled SRAM/hybrid opponent.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F09"],"gate":"Review findings closed","owner":"research lane, floor lane 3, coordinator","manual_page":null,"finding":"R2-F09","finding_title":"The economic model explicitly retains a failed specialist case","finding_priority":"P1 - founding claim not yet earned","owner_lane":"research lane, floor lane 3, coordinator","run_status":"NOT RUN","base_test_ids":["ADV-05","ADV-08","ECO-03","ECO-08","LEAD-03"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F09 (P1, the external review): the regression's harness is the owner lane's (research lane, floor lane 3, coordinator); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F09-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F09 (P1, the external review): the regression's harness is the owner lane's (research lane, floor lane 3, coordinator); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F09-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F09-R03","title":"GPU owners and entrants remain viable under the approved scenario envelope without assuming chip absence or death.","setup":"The regression R2-F09 requires (review R2 finding F09: The economic model explicitly retains a failed specialist case).","steps":["GPU owners and entrants remain viable under the approved scenario envelope without assuming chip absence or death."],"accept":"GPU owners and entrants remain viable under the approved scenario envelope without assuming chip absence or death.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F09"],"gate":"Review findings closed","owner":"research lane, floor lane 3, coordinator","manual_page":null,"finding":"R2-F09","finding_title":"The economic model explicitly retains a failed specialist case","finding_priority":"P1 - founding claim not yet earned","owner_lane":"research lane, floor lane 3, coordinator","run_status":"NOT RUN","base_test_ids":["ADV-05","ADV-08","ECO-03","ECO-08","LEAD-03"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F09 (P1, the external review): the regression's harness is the owner lane's (research lane, floor lane 3, coordinator); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F09-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F09 (P1, the external review): the regression's harness is the owner lane's (research lane, floor lane 3, coordinator); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F09-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F10-R01","title":"Compare exact found nonce/hash sets with full-read mode, including all-hit overflow and zero-hit cases.","setup":"The regression R2-F10 requires (review R2 finding F10: CUDA production readback has an existing OpenCL optimization to borrow).","steps":["Compare exact found nonce/hash sets with full-read mode, including all-hit overflow and zero-hit cases."],"accept":"Compare exact found nonce/hash sets with full-read mode, including all-hit overflow and zero-hit cases.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P2","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F10"],"gate":"Review findings closed","owner":"worker lane (new)","manual_page":null,"finding":"R2-F10","finding_title":"CUDA production readback has an existing OpenCL optimization to borrow","finding_priority":"P2 - byte-preserving performance experiment","owner_lane":"worker lane (new)","run_status":"NOT RUN","base_test_ids":["GPU-06","GPU-08","POW-01","UX-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F10 (P2, the external review): the regression's harness is the owner lane's (worker lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F10-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F10 (P2, the external review): the regression's harness is the owner lane's (worker lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F10-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F10-R02","title":"Test stale jobs, high-32 rollover, tail batches and asynchronous buffer reuse.","setup":"The regression R2-F10 requires (review R2 finding F10: CUDA production readback has an existing OpenCL optimization to borrow).","steps":["Test stale jobs, high-32 rollover, tail batches and asynchronous buffer reuse."],"accept":"Test stale jobs, high-32 rollover, tail batches and asynchronous buffer reuse.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P2","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F10"],"gate":"Review findings closed","owner":"worker lane (new)","manual_page":null,"finding":"R2-F10","finding_title":"CUDA production readback has an existing OpenCL optimization to borrow","finding_priority":"P2 - byte-preserving performance experiment","owner_lane":"worker lane (new)","run_status":"NOT RUN","base_test_ids":["GPU-06","GPU-08","POW-01","UX-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F10 (P2, the external review): the regression's harness is the owner lane's (worker lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F10-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F10 (P2, the external review): the regression's harness is the owner lane's (worker lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F10-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F10-R03","title":"Compare production throughput and wall energy, not only the isolated kernel timer.","setup":"The regression R2-F10 requires (review R2 finding F10: CUDA production readback has an existing OpenCL optimization to borrow).","steps":["Compare production throughput and wall energy, not only the isolated kernel timer."],"accept":"Compare production throughput and wall energy, not only the isolated kernel timer.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P2","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F10"],"gate":"Review findings closed","owner":"worker lane (new)","manual_page":null,"finding":"R2-F10","finding_title":"CUDA production readback has an existing OpenCL optimization to borrow","finding_priority":"P2 - byte-preserving performance experiment","owner_lane":"worker lane (new)","run_status":"NOT RUN","base_test_ids":["GPU-06","GPU-08","POW-01","UX-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F10 (P2, the external review): the regression's harness is the owner lane's (worker lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F10-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F10 (P2, the external review): the regression's harness is the owner lane's (worker lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F10-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F11-R01","title":"Goal switch from an efficiency prior can explore higher core/power when policy allows.","setup":"The regression R2-F11 requires (review R2 finding F11: Ember needs workload-aware identity and objective-aware search).","steps":["Goal switch from an efficiency prior can explore higher core/power when policy allows."],"accept":"Goal switch from an efficiency prior can explore higher core/power when policy allows.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P2","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F11"],"gate":"Review findings closed","owner":"Ember lane (new)","manual_page":null,"finding":"R2-F11","finding_title":"Ember needs workload-aware identity and objective-aware search","finding_priority":"P2 - product performance","owner_lane":"Ember lane (new)","run_status":"NOT RUN","base_test_ids":["GPU-02","GPU-04","UX-02","UX-03"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F11 (P2, the external review): the regression's harness is the owner lane's (Ember lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F11-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F11 (P2, the external review): the regression's harness is the owner lane's (Ember lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F11-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F11-R02","title":"Driver, workload, dataset, compiler and device changes invalidate certification while retaining optional hints.","setup":"The regression R2-F11 requires (review R2 finding F11: Ember needs workload-aware identity and objective-aware search).","steps":["Driver, workload, dataset, compiler and device changes invalidate certification while retaining optional hints."],"accept":"Driver, workload, dataset, compiler and device changes invalidate certification while retaining optional hints.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P2","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F11"],"gate":"Review findings closed","owner":"Ember lane (new)","manual_page":null,"finding":"R2-F11","finding_title":"Ember needs workload-aware identity and objective-aware search","finding_priority":"P2 - product performance","owner_lane":"Ember lane (new)","run_status":"NOT RUN","base_test_ids":["GPU-02","GPU-04","UX-02","UX-03"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F11 (P2, the external review): the regression's harness is the owner lane's (Ember lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F11-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F11 (P2, the external review): the regression's harness is the owner lane's (Ember lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F11-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F11-R03","title":"Thermal/error/late-share events revert safely, including process or machine crash.","setup":"The regression R2-F11 requires (review R2 finding F11: Ember needs workload-aware identity and objective-aware search).","steps":["Thermal/error/late-share events revert safely, including process or machine crash."],"accept":"Thermal/error/late-share events revert safely, including process or machine crash.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P2","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F11"],"gate":"Review findings closed","owner":"Ember lane (new)","manual_page":null,"finding":"R2-F11","finding_title":"Ember needs workload-aware identity and objective-aware search","finding_priority":"P2 - product performance","owner_lane":"Ember lane (new)","run_status":"NOT RUN","base_test_ids":["GPU-02","GPU-04","UX-02","UX-03"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F11 (P2, the external review): the regression's harness is the owner lane's (Ember lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F11-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F11 (P2, the external review): the regression's harness is the owner lane's (Ember lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F11-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F12-R01","title":"Crash before/after broadcast, response timeout, restart before snapshot: no duplicate payment or silent debt loss.","setup":"The regression R2-F12 requires (review R2 finding F12: Pool payouts have a broadcast-before-durable-intent window).","steps":["Crash before/after broadcast, response timeout, restart before snapshot: no duplicate payment or silent debt loss."],"accept":"Crash before/after broadcast, response timeout, restart before snapshot: no duplicate payment or silent debt loss.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F12"],"gate":"Review findings closed","owner":"pool lane (new)","manual_page":null,"finding":"R2-F12","finding_title":"Pool payouts have a broadcast-before-durable-intent window","finding_priority":"P1 - payment integrity","owner_lane":"pool lane (new)","run_status":"NOT RUN","base_test_ids":["ZKP-05","UX-04","OPS-04"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F12 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F12-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F12 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F12-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F12-R02","title":"Same signed transaction retried, fee replacement reconciled by intent, not a new payment.","setup":"The regression R2-F12 requires (review R2 finding F12: Pool payouts have a broadcast-before-durable-intent window).","steps":["Same signed transaction retried, fee replacement reconciled by intent, not a new payment."],"accept":"Same signed transaction retried, fee replacement reconciled by intent, not a new payment.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F12"],"gate":"Review findings closed","owner":"pool lane (new)","manual_page":null,"finding":"R2-F12","finding_title":"Pool payouts have a broadcast-before-durable-intent window","finding_priority":"P1 - payment integrity","owner_lane":"pool lane (new)","run_status":"NOT RUN","base_test_ids":["ZKP-05","UX-04","OPS-04"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F12 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F12-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F12 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F12-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F12-R03","title":"Receipt reorg and finality pause leave correct pending obligations.","setup":"The regression R2-F12 requires (review R2 finding F12: Pool payouts have a broadcast-before-durable-intent window).","steps":["Receipt reorg and finality pause leave correct pending obligations."],"accept":"Receipt reorg and finality pause leave correct pending obligations.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F12"],"gate":"Review findings closed","owner":"pool lane (new)","manual_page":null,"finding":"R2-F12","finding_title":"Pool payouts have a broadcast-before-durable-intent window","finding_priority":"P1 - payment integrity","owner_lane":"pool lane (new)","run_status":"NOT RUN","base_test_ids":["ZKP-05","UX-04","OPS-04"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F12 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F12-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F12 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F12-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F13-R01","title":"Repeated authorization rejected or atomically replaces and cleans prior state.","setup":"The regression R2-F13 requires (review R2 finding F13: Pool admission and membership need bounded resources).","steps":["Repeated authorization rejected or atomically replaces and cleans prior state."],"accept":"Repeated authorization rejected or atomically replaces and cleans prior state.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F13"],"gate":"Review findings closed","owner":"pool lane (new)","manual_page":null,"finding":"R2-F13","finding_title":"Pool admission and membership need bounded resources","finding_priority":"P1 - service resilience","owner_lane":"pool lane (new)","run_status":"NOT RUN","base_test_ids":["OPS-06","UX-04","UX-05","UX-06"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F13 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F13-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F13 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F13-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F13-R02","title":"Oversized unterminated frame rejected within fixed memory/time budget.","setup":"The regression R2-F13 requires (review R2 finding F13: Pool admission and membership need bounded resources).","steps":["Oversized unterminated frame rejected within fixed memory/time budget."],"accept":"Oversized unterminated frame rejected within fixed memory/time budget.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F13"],"gate":"Review findings closed","owner":"pool lane (new)","manual_page":null,"finding":"R2-F13","finding_title":"Pool admission and membership need bounded resources","finding_priority":"P1 - service resilience","owner_lane":"pool lane (new)","run_status":"NOT RUN","base_test_ids":["OPS-06","UX-04","UX-05","UX-06"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F13 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F13-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F13 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F13-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F13-R03","title":"Slow clients and invalid share floods cannot grow unbounded member, nonce or outgoing state.","setup":"The regression R2-F13 requires (review R2 finding F13: Pool admission and membership need bounded resources).","steps":["Slow clients and invalid share floods cannot grow unbounded member, nonce or outgoing state."],"accept":"Slow clients and invalid share floods cannot grow unbounded member, nonce or outgoing state.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F13"],"gate":"Review findings closed","owner":"pool lane (new)","manual_page":null,"finding":"R2-F13","finding_title":"Pool admission and membership need bounded resources","finding_priority":"P1 - service resilience","owner_lane":"pool lane (new)","run_status":"NOT RUN","base_test_ids":["OPS-06","UX-04","UX-05","UX-06"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F13 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F13-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F13 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F13-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F14-R01","title":"Public build has no default arbitrary remote execution and a documented least-privilege boundary.","setup":"The regression R2-F14 requires (review R2 finding F14: Developer fleet control must not silently become the public client trust model).","steps":["Public build has no default arbitrary remote execution and a documented least-privilege boundary."],"accept":"Public build has no default arbitrary remote execution and a documented least-privilege boundary.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F14"],"gate":"Review findings closed","owner":"app lane, relay lane","manual_page":null,"finding":"R2-F14","finding_title":"Developer fleet control must not silently become the public client trust model","finding_priority":"P1 - public client/independence gate","owner_lane":"app lane, relay lane","run_status":"NOT RUN","base_test_ids":["OPS-03","OPS-05","UX-02","UX-07"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F14 (P1, the external review): the regression's harness is the owner lane's (app lane, relay lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F14-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F14 (P1, the external review): the regression's harness is the owner lane's (app lane, relay lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F14-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F14-R02","title":"Automatic updates off remains off for urgent manifests until explicit action.","setup":"The regression R2-F14 requires (review R2 finding F14: Developer fleet control must not silently become the public client trust model).","steps":["Automatic updates off remains off for urgent manifests until explicit action."],"accept":"Automatic updates off remains off for urgent manifests until explicit action.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F14"],"gate":"Review findings closed","owner":"app lane, relay lane","manual_page":null,"finding":"R2-F14","finding_title":"Developer fleet control must not silently become the public client trust model","finding_priority":"P1 - public client/independence gate","owner_lane":"app lane, relay lane","run_status":"NOT RUN","base_test_ids":["OPS-03","OPS-05","UX-02","UX-07"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F14 (P1, the external review): the regression's harness is the owner lane's (app lane, relay lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F14-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F14 (P1, the external review): the regression's harness is the owner lane's (app lane, relay lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F14-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F14-R03","title":"A compromised fleet/update signing key cannot silently acquire wallet access or activate a consensus change.","setup":"The regression R2-F14 requires (review R2 finding F14: Developer fleet control must not silently become the public client trust model).","steps":["A compromised fleet/update signing key cannot silently acquire wallet access or activate a consensus change."],"accept":"A compromised fleet/update signing key cannot silently acquire wallet access or activate a consensus change.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F14"],"gate":"Review findings closed","owner":"app lane, relay lane","manual_page":null,"finding":"R2-F14","finding_title":"Developer fleet control must not silently become the public client trust model","finding_priority":"P1 - public client/independence gate","owner_lane":"app lane, relay lane","run_status":"NOT RUN","base_test_ids":["OPS-03","OPS-05","UX-02","UX-07"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F14 (P1, the external review): the regression's harness is the owner lane's (app lane, relay lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F14-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F14 (P1, the external review): the regression's harness is the owner lane's (app lane, relay lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F14-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}}]},{"code":"INT","title":"INT: the master edition's integration gates (R1, the full-system review)","source":"docs/plans/igneum-2.0-master/traceability.json integration_gates","gate":"Integration gates closed","owner":"the owner lanes per the coordinator's crosswalk","fixtures":["F0","F5"],"summary":"18 integration gates; each reads NOT RUN until its owner lane records a run","tests":[{"id":"INT-01","title":"Real proof H cannot authenticate a different statement under a warm cache.","setup":"Integration gate INT-01 of the master edition (R1 / Additional regression gates).","steps":["Real proof H cannot authenticate a different statement under a warm cache."],"accept":"Real proof H cannot authenticate a different statement under a warm cache.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"proving lane (a6e8f84588b809d62)","manual_page":null,"owner_lane":"proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-01 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-01 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-02","title":"Warm/cold/relay/restart/concurrent cache order does not change block or payout decisions; negative cache isolated.","setup":"Integration gate INT-02 of the master edition (R1 / Additional regression gates).","steps":["Warm/cold/relay/restart/concurrent cache order does not change block or payout decisions; negative cache isolated."],"accept":"Warm/cold/relay/restart/concurrent cache order does not change block or payout decisions; negative cache isolated.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"proving lane (a6e8f84588b809d62)","manual_page":null,"owner_lane":"proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-02 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-02 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-03","title":"Durable payout outbox survives every crash/RPC boundary without duplicate or lost liabilities.","setup":"Integration gate INT-03 of the master edition (R1 / Additional regression gates).","steps":["Durable payout outbox survives every crash/RPC boundary without duplicate or lost liabilities."],"accept":"Durable payout outbox survives every crash/RPC boundary without duplicate or lost liabilities.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"pool lane (a1c484c48a62948c2)","manual_page":null,"owner_lane":"pool lane (a1c484c48a62948c2)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","run_id":"pool-int-20261009-01","evidence_path":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","updated":"2026-10-08T23:47:51.313Z","evidence_record":{"requirement_id":"INT-03","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","in_progress":false,"coverage":"partial: the pool suite's durable payment intent tests (payout::intent_tests: a restart from the pre-broadcast snapshot, a lost send response, a crash on either side of the broadcast, a stuck transaction replaced under the same intent, a reorged receipt and a finality pause, a failed transaction, a ledger that cannot be written: never a duplicate or a lost liability) on every 2.0.2 node sha named 8 to 9 October 2026 (7cfa422a 53, f775c347 53, a284380b 54, d657e490 54, 94e4c6ba 54, 490ebcfe 54, cf32be79 54, all rc 0 at gate priority on build-6); the live-network half (a real payout across a crash on the roll) is the roll's","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z"},"evidence_records":{"suite:pool":{"requirement_id":"INT-03","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","in_progress":false,"coverage":"partial: the pool suite's durable payment intent tests (payout::intent_tests: a restart from the pre-broadcast snapshot, a lost send response, a crash on either side of the broadcast, a stuck transaction replaced under the same intent, a reorged receipt and a finality pause, a failed transaction, a ledger that cannot be written: never a duplicate or a lost liability) on every 2.0.2 node sha named 8 to 9 October 2026 (7cfa422a 53, f775c347 53, a284380b 54, d657e490 54, 94e4c6ba 54, 490ebcfe 54, cf32be79 54, all rc 0 at gate priority on build-6); the live-network half (a real payout across a crash on the roll) is the roll's","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-04","title":"Corrupt existing pool state, disk-full and reorg cause safe recovery, not silent empty balances.","setup":"Integration gate INT-04 of the master edition (R1 / Additional regression gates).","steps":["Corrupt existing pool state, disk-full and reorg cause safe recovery, not silent empty balances."],"accept":"Corrupt existing pool state, disk-full and reorg cause safe recovery, not silent empty balances.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"pool lane (a1c484c48a62948c2)","manual_page":null,"owner_lane":"pool lane (a1c484c48a62948c2)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","run_id":"pool-int-20261009-01","evidence_path":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","updated":"2026-10-08T23:47:51.313Z","evidence_record":{"requirement_id":"INT-04","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","in_progress":false,"coverage":"partial: the pool suite's ledger tests (state::ledger_tests: a corrupt, truncated or digest-failing state.json restores the previous snapshot or refuses to start, never an empty ledger; the migration of pre-intent payments) and the disk-full test (payout::intent_tests::a_ledger_that_cannot_be_written_broadcasts_nothing) on the same seven shas; the live-network half (corruption and a reorg on the roll) is the roll's","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z"},"evidence_records":{"suite:pool":{"requirement_id":"INT-04","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","in_progress":false,"coverage":"partial: the pool suite's ledger tests (state::ledger_tests: a corrupt, truncated or digest-failing state.json restores the previous snapshot or refuses to start, never an empty ledger; the migration of pre-intent payments) and the disk-full test (payout::intent_tests::a_ledger_that_cannot_be_written_broadcasts_nothing) on the same seven shas; the live-network half (corruption and a reorg on the roll) is the roll's","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-05","title":"The supplied finality implementation matches the approved anchor rule after >window healing.","setup":"Integration gate INT-05 of the master edition (R1 / Additional regression gates).","steps":["The supplied finality implementation matches the approved anchor rule after >window healing."],"accept":"The supplied finality implementation matches the approved anchor rule after >window healing.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"node lane (a283f5f0d364ceef0)","manual_page":null,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-05 (R1 integration gate): the gate's harness is the owner lane's (node lane (a283f5f0d364ceef0)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-05 (R1 integration gate): the gate's harness is the owner lane's (node lane (a283f5f0d364ceef0)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-06","title":"Recovery tests state and preserve their weaker fault bound; interfaces never label it as a stronger guarantee.","setup":"Integration gate INT-06 of the master edition (R1 / Additional regression gates).","steps":["Recovery tests state and preserve their weaker fault bound; interfaces never label it as a stronger guarantee."],"accept":"Recovery tests state and preserve their weaker fault bound; interfaces never label it as a stronger guarantee.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"node lane (a283f5f0d364ceef0)","manual_page":null,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-06 (R1 integration gate): the gate's harness is the owner lane's (node lane (a283f5f0d364ceef0)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-06 (R1 integration gate): the gate's harness is the owner lane's (node lane (a283f5f0d364ceef0)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-07","title":"One v6 object agrees in node, pool, CPU verifier and each supported GPU host across activation.","definition":"V6-12 (R1 p. 213): the release manifest is signed and binds lockfile hashes, kernel and host binaries, supported devices and drivers, the prover server patch, memory thresholds and tuner identity, with end-to-end artifact authentication and a clean-install accepted-and-paid test on an independent machine with no unpublished files, symlinks or shell overrides.","setup":"Integration gate INT-07 of the master edition (R1 / Additional regression gates).","steps":["One v6 object agrees in node, pool, CPU verifier and each supported GPU host across activation."],"accept":"One v6 object agrees in node, pool, CPU verifier and each supported GPU host across activation.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)","manual_page":null,"owner_lane":"CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)","run_status":"FAIL","master_status":"PROPOSED / NOT RUN","run_id":"canary-202-20261009-01","evidence_path":"tools/ci/canary/1176efb9.json; build-1:/srv/canary/1176efb9/mini/00-verdict.txt; build-1:/srv/canary/1176efb9/lp-4090-11/fleet-block.json; build-1:/srv/canary/1176efb9/lp-4090-43/00-verdict.txt","updated":"2026-10-09T07:43:10.690Z","evidence_record":{"requirement_id":"INT-07","decision":"FAIL","method":"team-reported","cell":"canary:fresh-install","manifest_sha":"5d53a591","run_id":"canary-202-20261009-01","evidence":"tools/ci/canary/1176efb9.json; build-1:/srv/canary/1176efb9/mini/00-verdict.txt; build-1:/srv/canary/1176efb9/lp-4090-11/fleet-block.json; build-1:/srv/canary/1176efb9/lp-4090-43/00-verdict.txt","in_progress":false,"coverage":"partial: V6-12's clean-install half (one published object installed fresh, synced, mined, proved and paid on one host per artefact); the cross-host agreement half (node, pool, CPU verifier, each GPU host across activation) is harness:same-work's","release_identity":{"commit":"1176efb9 (release-2.0.2 kit 2 tip; node 5d53a591)","lockfile":"","binary":"Igneum-Miner-2.0.2-5d53a591-1176efb9.dmg 66137cd8…","network_object":"igneum-devnet-4, chain id 4465","activation":"","profile_hashes":""},"claim_impact":"INT-07's clean-install half on kit 2 reads FAIL on the fleet canary (the walk bound at the fifth cut); the mac block PASS stands as the Mac entry's evidence; no fleet, hive or windows entry publishes until a record reads PASS on its own block","reviewer":"","at":"2026-10-09T07:43:10.690Z","note":"mac PASS (the Mac entry published on it 02:20 UK); fleet FAIL at sync (lp-4090-11, 04:04 UK: the walk bound at the reference chain's fifth cut under fix 2); hive FAIL (lp-4090-43: the lost-proof loop at the first class v5 cut, 'the proofs of 2 carried records are not held yet'); no windows block (the Windows order's default fired: no push without a proved shard). No fleet, hive or windows 2.0.2 entry publishes on this record. | Kit 2 (tip 1176efb9, node 5d53a591): the mac block PASS under tools/ci/canary-check.sh (the project's macOS machine: synced from empty in 2,016 s, 18 blocks in five minutes at 12.65 MH/s, 0 refusals, shard n/a on Apple silicon, the tip inside ten of the age-adjusted feed, quit in 4 s); the fleet block FAIL at sync (lp-4090-11, 04:04 UK: a fresh 2.0.2 node walls at the reference chain's fifth cut under fix 2's walk bound, 'passed 7200 blocks (2 x epoch_blocks) without meeting a block this executor holds a record of'; the kit ran clean; build-1:/srv/canary/1176efb9/lp-4090-11/fleet-block.json); the hive block reads about 05:30 UK, the windows block on the relay lane's clock. No fleet, hive or windows entry publishes on this record; the Mac entry published on its PASS block at 02:20 UK. Kit 1's 94e4c6ba FAIL (the wedge) stands as that sha's record. The recorder's rule: a measured FAIL on one block is a FAIL on the case. Re-recorded 9 October 2026 04:3x UK with the hive block (lp-4090-43, FAIL at sync on the lost-proof loop) and the re-shaped fleet block (no sync.feed object). Cell note brought up to the record's three blocks at 08:1x UK (the hive landing had re-recorded the batch note only). Re-recorded 9 October 2026 08:2x UK with hive-2, the lp-4090-43 kit-binary block and hive-3 (all FAIL at sync; the sync gate closed the hive run class). Re-recorded 08:3x UK: the record's own verdict FAIL. (The check now refuses a record whose own verdict reads PASS over a FAIL block, 09:0x UK.)","network_label":"on an island, not a network"},"evidence_records":{"canary:fresh-install":{"requirement_id":"INT-07","decision":"FAIL","method":"team-reported","cell":"canary:fresh-install","manifest_sha":"5d53a591","run_id":"canary-202-20261009-01","evidence":"tools/ci/canary/1176efb9.json; build-1:/srv/canary/1176efb9/mini/00-verdict.txt; build-1:/srv/canary/1176efb9/lp-4090-11/fleet-block.json; build-1:/srv/canary/1176efb9/lp-4090-43/00-verdict.txt","in_progress":false,"coverage":"partial: V6-12's clean-install half (one published object installed fresh, synced, mined, proved and paid on one host per artefact); the cross-host agreement half (node, pool, CPU verifier, each GPU host across activation) is harness:same-work's","release_identity":{"commit":"1176efb9 (release-2.0.2 kit 2 tip; node 5d53a591)","lockfile":"","binary":"Igneum-Miner-2.0.2-5d53a591-1176efb9.dmg 66137cd8…","network_object":"igneum-devnet-4, chain id 4465","activation":"","profile_hashes":""},"claim_impact":"INT-07's clean-install half on kit 2 reads FAIL on the fleet canary (the walk bound at the fifth cut); the mac block PASS stands as the Mac entry's evidence; no fleet, hive or windows entry publishes until a record reads PASS on its own block","reviewer":"","at":"2026-10-09T07:43:10.690Z","note":"mac PASS (the Mac entry published on it 02:20 UK); fleet FAIL at sync (lp-4090-11, 04:04 UK: the walk bound at the reference chain's fifth cut under fix 2); hive FAIL (lp-4090-43: the lost-proof loop at the first class v5 cut, 'the proofs of 2 carried records are not held yet'); no windows block (the Windows order's default fired: no push without a proved shard). No fleet, hive or windows 2.0.2 entry publishes on this record. | Kit 2 (tip 1176efb9, node 5d53a591): the mac block PASS under tools/ci/canary-check.sh (the project's macOS machine: synced from empty in 2,016 s, 18 blocks in five minutes at 12.65 MH/s, 0 refusals, shard n/a on Apple silicon, the tip inside ten of the age-adjusted feed, quit in 4 s); the fleet block FAIL at sync (lp-4090-11, 04:04 UK: a fresh 2.0.2 node walls at the reference chain's fifth cut under fix 2's walk bound, 'passed 7200 blocks (2 x epoch_blocks) without meeting a block this executor holds a record of'; the kit ran clean; build-1:/srv/canary/1176efb9/lp-4090-11/fleet-block.json); the hive block reads about 05:30 UK, the windows block on the relay lane's clock. No fleet, hive or windows entry publishes on this record; the Mac entry published on its PASS block at 02:20 UK. Kit 1's 94e4c6ba FAIL (the wedge) stands as that sha's record. The recorder's rule: a measured FAIL on one block is a FAIL on the case. Re-recorded 9 October 2026 04:3x UK with the hive block (lp-4090-43, FAIL at sync on the lost-proof loop) and the re-shaped fleet block (no sync.feed object). Cell note brought up to the record's three blocks at 08:1x UK (the hive landing had re-recorded the batch note only). Re-recorded 9 October 2026 08:2x UK with hive-2, the lp-4090-43 kit-binary block and hive-3 (all FAIL at sync; the sync gate closed the hive run class). Re-recorded 08:3x UK: the record's own verdict FAIL. (The check now refuses a record whose own verdict reads PASS over a FAIL block, 09:0x UK.)","network_label":"on an island, not a network"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-08","title":"Census, production acceptance, schedule counters and live-dataset tests use the identical frozen contract.","setup":"Integration gate INT-08 of the master edition (R1 / Additional regression gates).","steps":["Census, production acceptance, schedule counters and live-dataset tests use the identical frozen contract."],"accept":"Census, production acceptance, schedule counters and live-dataset tests use the identical frozen contract.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)","manual_page":null,"owner_lane":"CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-08 (R1 integration gate): the gate's harness is the owner lane's (CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-08 (R1 integration gate): the gate's harness is the owner lane's (CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-09","title":"Eight- and twelve-GiB epoch transitions recover deliberately without relying on repeated OOM/watchdog cycles.","setup":"Integration gate INT-09 of the master edition (R1 / Additional regression gates).","steps":["Eight- and twelve-GiB epoch transitions recover deliberately without relying on repeated OOM/watchdog cycles."],"accept":"Eight- and twelve-GiB epoch transitions recover deliberately without relying on repeated OOM/watchdog cycles.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"app lane","manual_page":null,"owner_lane":"app lane","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-09 (R1 integration gate): the gate's harness is the owner lane's (app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-09","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-09 (R1 integration gate): the gate's harness is the owner lane's (app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-09","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-10","title":"Metal/CUDA/OpenCL exact dataset geometry agrees; unsupported packs reject before launch.","setup":"Integration gate INT-10 of the master edition (R1 / Additional regression gates).","steps":["Metal/CUDA/OpenCL exact dataset geometry agrees; unsupported packs reject before launch."],"accept":"Metal/CUDA/OpenCL exact dataset geometry agrees; unsupported packs reject before launch.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)","manual_page":null,"owner_lane":"CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-10 (R1 integration gate): the gate's harness is the owner lane's (CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-10","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-10 (R1 integration gate): the gate's harness is the owner lane's (CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-10","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-11","title":"Only a memory-reserved proving job launches; mining buffers really release when required.","setup":"Integration gate INT-11 of the master edition (R1 / Additional regression gates).","steps":["Only a memory-reserved proving job launches; mining buffers really release when required."],"accept":"Only a memory-reserved proving job launches; mining buffers really release when required.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"app lane","manual_page":null,"owner_lane":"app lane","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-11 (R1 integration gate): the gate's harness is the owner lane's (app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-11","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-11 (R1 integration gate): the gate's harness is the owner lane's (app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-11","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-12","title":"Transient shard errors can retry safely; expiration, loss and paid work remain distinct durable outcomes.","setup":"Integration gate INT-12 of the master edition (R1 / Additional regression gates).","steps":["Transient shard errors can retry safely; expiration, loss and paid work remain distinct durable outcomes."],"accept":"Transient shard errors can retry safely; expiration, loss and paid work remain distinct durable outcomes.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"proving lane (a6e8f84588b809d62) and fleet lane (ac055d60427caab99)","manual_page":null,"owner_lane":"proving lane (a6e8f84588b809d62) and fleet lane (ac055d60427caab99)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-12 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62) and fleet lane (ac055d60427caab99)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-12","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-12 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62) and fleet lane (ac055d60427caab99)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-12","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-13","title":"Ember cannot retain a rate-ineligible prior; material workload changes invalidate incompatible profiles.","setup":"Integration gate INT-13 of the master edition (R1 / Additional regression gates).","steps":["Ember cannot retain a rate-ineligible prior; material workload changes invalidate incompatible profiles."],"accept":"Ember cannot retain a rate-ineligible prior; material workload changes invalidate incompatible profiles.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"Ember lane (a04fe3451877e2ff0) with the app lane","manual_page":null,"owner_lane":"Ember lane (a04fe3451877e2ff0) with the app lane","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-13 (R1 integration gate): the gate's harness is the owner lane's (Ember lane (a04fe3451877e2ff0) with the app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-13","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-13 (R1 integration gate): the gate's harness is the owner lane's (Ember lane (a04fe3451877e2ff0) with the app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-13","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-14","title":"Protected helper and per-device leases restore owned settings on normal/abnormal exit; real ACL/security tests.","setup":"Integration gate INT-14 of the master edition (R1 / Additional regression gates).","steps":["Protected helper and per-device leases restore owned settings on normal/abnormal exit; real ACL/security tests."],"accept":"Protected helper and per-device leases restore owned settings on normal/abnormal exit; real ACL/security tests.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"Ember lane (a04fe3451877e2ff0) with the app lane","manual_page":null,"owner_lane":"Ember lane (a04fe3451877e2ff0) with the app lane","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-14 (R1 integration gate): the gate's harness is the owner lane's (Ember lane (a04fe3451877e2ff0) with the app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-14","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-14 (R1 integration gate): the gate's harness is the owner lane's (Ember lane (a04fe3451877e2ff0) with the app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-14","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-15","title":"Public PoP replay is not session authorization; payout/server/network binding enforced.","setup":"Integration gate INT-15 of the master edition (R1 / Additional regression gates).","steps":["Public PoP replay is not session authorization; payout/server/network binding enforced."],"accept":"Public PoP replay is not session authorization; payout/server/network binding enforced.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"pool lane (a1c484c48a62948c2)","manual_page":null,"owner_lane":"pool lane (a1c484c48a62948c2)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","run_id":"pool-int-20261009-01","evidence_path":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","updated":"2026-10-08T23:47:51.313Z","evidence_record":{"requirement_id":"INT-15","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","in_progress":false,"coverage":"partial: the pool suite's binding v2 and session tests (server::authorise_tests: a public PoP replayed into another session, payout, pool or chain, or under another key, refused; the policy follows the network; protocol::tests::the_session_binding_digest_is_the_nodes against consensus-core's session_binding_v2 since node ab489403) on the same seven shas; the live-network half (a 2.0.2 miner's authorize against the rolled pool) is the roll's","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z"},"evidence_records":{"suite:pool":{"requirement_id":"INT-15","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","in_progress":false,"coverage":"partial: the pool suite's binding v2 and session tests (server::authorise_tests: a public PoP replayed into another session, payout, pool or chain, or under another key, refused; the policy follows the network; protocol::tests::the_session_binding_digest_is_the_nodes against consensus-core's session_binding_v2 since node ab489403) on the same seven shas; the live-network half (a 2.0.2 miner's authorize against the rolled pool) is the roll's","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-16","title":"Pool parsing/queues/connection and crypto budgets remain bounded under controlled adversarial traffic.","setup":"Integration gate INT-16 of the master edition (R1 / Additional regression gates).","steps":["Pool parsing/queues/connection and crypto budgets remain bounded under controlled adversarial traffic."],"accept":"Pool parsing/queues/connection and crypto budgets remain bounded under controlled adversarial traffic.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"pool lane (a1c484c48a62948c2)","manual_page":null,"owner_lane":"pool lane (a1c484c48a62948c2)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","run_id":"pool-int-20261009-01","evidence_path":"build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/README.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/README.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/README.json","updated":"2026-10-08T23:47:51.313Z","evidence_record":{"requirement_id":"INT-16","decision":"NOT RUN","method":"native","cell":"harness:same-work","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/README.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/README.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/README.json","in_progress":false,"coverage":"partial: the member-side re-check over the job context (igneum-pool recheck, the pool's own share verifier per nonce against the CPU reference): the d1-pairing row PASS x3 on the class v6 object (context 02, 3,145,728 of 3,145,728, 256 of 256 shares accepted, the boundary switched), the kit row PASS x3 on the class v5 chain-seed object (context 03, the kit as pinned, the same counts), the kit row on 02 BLOCKED by the kit's V5 pins (the reason in each file); the bounded-input half (slow readers, oversized frames, floods under controlled traffic) is the pool suite's frame, admission and share tests, not a network run","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z","network_label":"on an island, not a network"},"evidence_records":{"harness:same-work":{"requirement_id":"INT-16","decision":"NOT RUN","method":"native","cell":"harness:same-work","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/README.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/README.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/README.json","in_progress":false,"coverage":"partial: the member-side re-check over the job context (igneum-pool recheck, the pool's own share verifier per nonce against the CPU reference): the d1-pairing row PASS x3 on the class v6 object (context 02, 3,145,728 of 3,145,728, 256 of 256 shares accepted, the boundary switched), the kit row PASS x3 on the class v5 chain-seed object (context 03, the kit as pinned, the same counts), the kit row on 02 BLOCKED by the kit's V5 pins (the reason in each file); the bounded-input half (slow readers, oversized frames, floods under controlled traffic) is the pool suite's frame, admission and share tests, not a network run","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z","network_label":"on an island, not a network"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-17","title":"Missing oracle/keys/mandatory real-proof fixture blocks the applicable production acceptance gate.","setup":"Integration gate INT-17 of the master edition (R1 / Additional regression gates).","steps":["Missing oracle/keys/mandatory real-proof fixture blocks the applicable production acceptance gate."],"accept":"Missing oracle/keys/mandatory real-proof fixture blocks the applicable production acceptance gate.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"proving lane (a6e8f84588b809d62)","manual_page":null,"owner_lane":"proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-17 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-17","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-17 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-17","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-18","title":"Whole-system economics pass the strongest feasible adversary, including sunk development and multi-epoch survival.","setup":"Integration gate INT-18 of the master edition (R1 / Additional regression gates).","steps":["Whole-system economics pass the strongest feasible adversary, including sunk development and multi-epoch survival."],"accept":"Whole-system economics pass the strongest feasible adversary, including sunk development and multi-epoch survival.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"research lane (ad6a2bd47d4a46105)","manual_page":null,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-18 (R1 integration gate): the gate's harness is the owner lane's (research lane (ad6a2bd47d4a46105)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-18","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-18 (R1 integration gate): the gate's harness is the owner lane's (research lane (ad6a2bd47d4a46105)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-18","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}}],"notes":[{"at":"2026-10-08T20:10:24.874Z","text":"REC-01 (the master edition's one unresolved interpretation, finality pause-only healing: R1's I03 stale predicate against R2's F04 backfill caveat): closure evidence as the finality and node lanes recorded it on 8 October 2026: rule v4 at release-2.0.0-node 12424341's line, mode recovery by the founder's 19:57 ruling (the lock labelled recovery, never final), both real-node lines PASS tonight by the 6.7 pause criterion, FIN-02 PASS at 0218d6bf1 on the simulator half; status RUNNING until the beyond-window healing case with and without historical data is run natively (the node lane's case tomorrow). Applies to INT-05 and INT-06."}]},{"code":"VR","title":"VR: the token value and network leadership rules (normative, proposed, requiring ratification)","source":"docs/plans/igneum-2.0-master/token-value/rules-and-gates.json rules","gate":"Ratification by the founder and each rule's owner role","owner":"founder (ratification); the owner role per rule","fixtures":["F0"],"summary":"40 normative rules from Igneum 2.0 - Token Value & Network Leadership 1.0-proposed (snapshot 2026-10-08); Supplement to original master and 128-case test standard; not a price/rank guarantee","tests":[{"id":"VR-01","title":"One monetary contract","requirement":"Ratify one maximum-supply, subsidy and change-policy contract. No unexplained tail escape, automatic emergency mint or price-triggered issuance.","accept":"Ratify one maximum-supply, subsidy and change-policy contract. No unexplained tail escape, automatic emergency mint or price-triggered issuance.","evidence":"D01 decision, normative spec, executable supply tests and consistent public text.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + governance","owner_role":"Protocol + governance","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-02","title":"Independent supply accounting","requirement":"Make circulating, issued, burned, locked and maximum supply independently reproducible. Count bridges and wrappers without creating fictitious native supply.","accept":"Make circulating, issued, burned, locked and maximum supply independently reproducible. Count bridges and wrappers without creating fictitious native supply.","evidence":"Two independent supply calculations with exact integer reconciliation.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + measurement","owner_role":"Protocol + measurement","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-03","title":"Equal opportunity at launch","requirement":"No premine or privileged devnet conversion under the stated fair-launch policy. Publish efficient software and launch conditions before activation.","accept":"No premine or privileged devnet conversion under the stated fair-launch policy. Publish efficient software and launch conditions before activation.","evidence":"Genesis audit, launch rehearsal, insider disclosures and public release history.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Release + ecosystem","owner_role":"Release + ecosystem","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-04","title":"No artificial return promise","requirement":"Do not advertise guaranteed appreciation, passive returns without necessary work, a redemption floor or electricity-backed value.","accept":"Do not advertise guaranteed appreciation, passive returns without necessary work, a redemption floor or electricity-backed value.","evidence":"Product terms, source of rewards and public-claim review.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Governance + counsel","owner_role":"Governance + counsel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-05","title":"Fund necessary security","requirement":"Model miners, internal provers, minimum validators and maintenance separately through declining issuance. No assumption that an external sale automatically funds all roles.","accept":"Model miners, internal provers, minimum validators and maintenance separately through declining issuance. No assumption that an external sale automatically funds all roles.","evidence":"Role-by-role cash flow, adverse scenarios and committed initial resources.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Economics + protocol","owner_role":"Economics + protocol","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-06","title":"Honest rule change","requirement":"Publish rationale, impact, adoption path and compatibility limits before a material monetary change. Do not pretend software can prevent all future voluntary forks.","accept":"Publish rationale, impact, adoption path and compatibility limits before a material monetary change. Do not pretend software can prevent all future voluntary forks.","evidence":"Versioned proposals, reviewer comments, adoption and dissent documentation.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + governance","owner_role":"Protocol + governance","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-07","title":"Transparent fee routing","requirement":"Every fee, burn, operator payment and optional Labs charge has an explicit source and recipient. No new team tax hidden in a commercial label.","accept":"Every fee, burn, operator payment and optional Labs charge has an explicit source and recipient. No new team tax hidden in a commercial label.","evidence":"Executable fee tests and reconciliation to invoices/receipts.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Economics + protocol","owner_role":"Economics + protocol","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-08","title":"Separate value and money flows","requirement":"Distinguish job turnover, fees, operator income, Labs income, token holdings and market value. Do not count the same payment or saving twice.","accept":"Distinguish job turnover, fees, operator income, Labs income, token holdings and market value. Do not count the same payment or saving twice.","evidence":"Reconciled flow diagram and reproducible metric definitions.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Economics + measurement","owner_role":"Economics + measurement","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-09","title":"Accessible hardware economics","requirement":"Fix the reference cohort and scenarios in advance. Allow the strongest feasible programmable multi-epoch specialist, including sunk development and alternative memory.","accept":"Fix the reference cohort and scenarios in advance. Allow the strongest feasible programmable multi-epoch specialist, including sunk development and alternative memory.","evidence":"Approved original GPU/ADV/ROT/ECO profiles and independent review.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"GPU + hardware reviewer","owner_role":"GPU + hardware reviewer","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-10","title":"Mandatory correct proofs","requirement":"All activated proof decisions must bind their actual statement, kind and verifier independent of cache history. Missing trusted infrastructure must not disable enforcement.","accept":"All activated proof decisions must bind their actual statement, kind and verifier independent of cache history. Missing trusted infrastructure must not disable enforcement.","evidence":"Native warm/cold/order/restart tests and positive/negative proof fixtures.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + proving","owner_role":"Protocol + proving","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-11","title":"Literal finality","requirement":"Define fault assumptions, authority continuity and recovery. Never present a weaker recovery certificate as the stronger irreversible guarantee.","accept":"Define fault assumptions, authority continuity and recovery. Never present a weaker recovery certificate as the stronger irreversible guarantee.","evidence":"Native multi-node boundary tests and consumer label checks.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Consensus + security","owner_role":"Consensus + security","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-12","title":"Retained operator authority","requirement":"Pooling variance or buying a service does not silently transfer keys, transaction selection or finality/governance control.","accept":"Pooling variance or buying a service does not silently transfer keys, transaction selection or finality/governance control.","evidence":"Key/template substitution tests and explicit delegation contracts.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + pool","owner_role":"Protocol + pool","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-13","title":"Safe custody and consent","requirement":"Private keys, spending limits, signing displays and recovery choices remain under explicit user authority. Defaults must not conceal broad powers.","accept":"Private keys, spending limits, signing displays and recovery choices remain under explicit user authority. Defaults must not conceal broad powers.","evidence":"Wallet security review and independent user/recovery exercises.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Wallet + security","owner_role":"Wallet + security","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-14","title":"Portable verification","requirement":"Balances and receipts authenticate their roots, successful outcome and trust anchors. Necessary reconstruction data has a documented availability path.","accept":"Balances and receipts authenticate their roots, successful outcome and trust anchors. Necessary reconstruction data has a documented availability path.","evidence":"Independent receipt/client verification with hostile inputs.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Wallet + protocol","owner_role":"Wallet + protocol","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-15","title":"Price real resources","requirement":"Bound execution, verification and storage costs. Sponsored transactions have limits. No deliberate congestion solely to increase a token metric.","accept":"Bound execution, verification and storage costs. Sponsored transactions have limits. No deliberate congestion solely to increase a token metric.","evidence":"Minimum-node tests and fee/sponsor-abuse scenarios.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + economics","owner_role":"Protocol + economics","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-16","title":"No fragile stable-value promise","requirement":"Any stable-value product has explicit issuer, reserve/redemption rights, permissions and risks. No native-backed peg used merely to manufacture demand.","accept":"Any stable-value product has explicit issuer, reserve/redemption rights, permissions and risks. No native-backed peg used merely to manufacture demand.","evidence":"Independent diligence, risk limits and legal assessment before release.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Application + counsel","owner_role":"Application + counsel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-17","title":"Optional bounded bridges","requirement":"Bridge exposure is separate from core security. No bridge is mandatory for genesis or allowed to redefine base-chain finality after a loss.","accept":"Bridge exposure is separate from core security. No bridge is mandatory for genesis or allowed to redefine base-chain finality after a loss.","evidence":"External security review, loss limits and failure/isolation tests.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Application + security","owner_role":"Application + security","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-18","title":"Open work settlement","requirement":"Jobs bind program, inputs, result, verifier, deadline and payment. Gateways are replaceable and Labs approval is not required for ordinary work.","accept":"Jobs bind program, inputs, result, verifier, deadline and payment. Gateways are replaceable and Labs approval is not required for ordinary work.","evidence":"Independent request-to-paid-result test and state reconciliation.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + ecosystem","owner_role":"Protocol + ecosystem","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-19","title":"Obligation-based service bonds","requirement":"Deposits secure a specific obligation, not consensus influence. Size and failure conditions must preserve small-operator paths and handle collateral decline.","accept":"Deposits secure a specific obligation, not consensus influence. Size and failure conditions must preserve small-operator paths and handle collateral decline.","evidence":"Economic and adversarial reservation/default tests.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Economics + application","owner_role":"Economics + application","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-20","title":"Independent developer access","requirement":"Publish complete standards, fixtures and tooling. Grants reward useful maintained deliverables rather than deployments or price effects.","accept":"Publish complete standards, fixtures and tooling. Grants reward useful maintained deliverables rather than deployments or price effects.","evidence":"Unaffiliated integration and maintenance evidence.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Ecosystem","owner_role":"Ecosystem","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-21","title":"Committed maintenance","requirement":"Essential maintenance and audits need a funded runway with stress accounting, distinct from hoped-for appreciation or fundraising.","accept":"Essential maintenance and audits need a funded runway with stress accounting, distinct from hoped-for appreciation or fundraising.","evidence":"At least approved P13 runway, commitments and role costs.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Maintainers + finance","owner_role":"Maintainers + finance","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-22","title":"Founder independence","requirement":"Routine block, job, payment and recovery paths must not require a founder credential or undocumented manual action.","accept":"Routine block, job, payment and recovery paths must not require a founder credential or undocumented manual action.","evidence":"Real founder-absence exercises and intervention ledger.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Operations + independent reviewer","owner_role":"Operations + independent reviewer","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-23","title":"Measure effective control","requirement":"Report operator, pool, hosting, service and client dependencies with attribution limits. Keys and addresses are not people.","accept":"Report operator, pool, hosting, service and client dependencies with attribution limits. Keys and addresses are not people.","evidence":"Dependency/control map with uncertainty and removal experiments.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Measurement + operations","owner_role":"Measurement + operations","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-24","title":"Reproducible secure release","requirement":"Pin source, binaries, rules, guests/keys and activation. Provenance is necessary but not sufficient for correctness.","accept":"Pin source, binaries, rules, guests/keys and activation. Provenance is necessary but not sufficient for correctness.","evidence":"Independent builds, artifact verification and scoped review.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Release + security","owner_role":"Release + security","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-25","title":"Consent-preserving incident response","requirement":"Separate public/developer authority. Urgency must not silently override installation or grant arbitrary execution. Disclose material incidents and retest.","accept":"Separate public/developer authority. Urgency must not silently override installation or grant arbitrary execution. Disclose material incidents and retest.","evidence":"Compromised-key, unsafe-update and recovery drills.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Release + operations","owner_role":"Release + operations","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-26","title":"Honest access and liquidity","requirement":"Use functional deposits/withdrawals and executable depth, not ticker count or fabricated volume. Never restrict exit to simulate value.","accept":"Use functional deposits/withdrawals and executable depth, not ticker count or fabricated volume. Never restrict exit to simulate value.","evidence":"Independent access-route and two-sided liquidity observations.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Ecosystem + measurement","owner_role":"Ecosystem + measurement","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-27","title":"Transparent treasury relationships","requirement":"Disclose material grants, insider holdings, inventory and market-making mandates. No wash trades or hidden price-support promises.","accept":"Disclose material grants, insider holdings, inventory and market-making mandates. No wash trades or hidden price-support promises.","evidence":"Mandate register, reconciled accounts and conflict policy.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Treasury + counsel","owner_role":"Treasury + counsel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-28","title":"Auditable metrics","requirement":"Publish definitions, raw/adjusted views, sampling, attribution uncertainty and missing data. No subsidy-hidden demand or censored failed jobs.","accept":"Publish definitions, raw/adjusted views, sampling, attribution uncertainty and missing data. No subsidy-hidden demand or censored failed jobs.","evidence":"Data lineage, conservation checks and independent replay.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Measurement","owner_role":"Measurement","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-29","title":"Fair comparison universe","requirement":"Define eligible peers and exclusions before observing rankings. Include qualifying new entrants and preserve unknown values.","accept":"Define eligible peers and exclusions before observing rankings. Include qualifying new entrants and preserve unknown values.","evidence":"Independent peer census and versioned comparison protocol.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Measurement + external panel","owner_role":"Measurement + external panel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-30","title":"Scoped claims only","requirement":"Every leadership claim names its metric, universe, period and limits. A measured price rank does not certify overall safety or future leadership.","accept":"Every leadership claim names its metric, universe, period and limits. A measured price rank does not certify overall safety or future leadership.","evidence":"Claim register with evidence, expiry and legal signoff.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Governance + counsel","owner_role":"Governance + counsel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-31","title":"Evidence before pass","requirement":"Pre-register thresholds; missing inputs block gates; corrections preserve failed results. No aggregate score can waive core safety or economic failure.","accept":"Pre-register thresholds; missing inputs block gates; corrections preserve failed results. No aggregate score can waive core safety or economic failure.","evidence":"Frozen test charter and versioned evidence packets.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Independent acceptance panel","owner_role":"Independent acceptance panel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-32","title":"Real adoption","requirement":"Measure unaffiliated retained users and useful repeat activity with incentives identified. Do not require buying IGN to participate in a study.","accept":"Measure unaffiliated retained users and useful repeat activity with incentives identified. Do not require buying IGN to participate in a study.","evidence":"Cohort definitions, attrition, usage and subsidy audit.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Product + ecosystem","owner_role":"Product + ecosystem","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-33","title":"AI earns admission","requirement":"AI is an optional workload category, not a guaranteed-margin network identity. Price full costs and adverse demand before expansion.","accept":"AI is an optional workload category, not a guaranteed-margin network identity. Price full costs and adverse demand before expansion.","evidence":"Workload-specific benchmark, repeat demand and verification policy.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Compute + economics","owner_role":"Compute + economics","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-34","title":"Bound agent spending","requirement":"Automated buyers have scoped budgets, permissions, expiry, revocation and logs. Untrusted prompts never alter base permissions.","accept":"Automated buyers have scoped budgets, permissions, expiry, revocation and logs. Untrusted prompts never alter base permissions.","evidence":"Prompt/input adversarial tests and payment-loss caps.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Application + security","owner_role":"Application + security","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-35","title":"Cryptographic migration readiness","requirement":"Maintain a full algorithm inventory and reviewed transition plan. No quantum-proof claim from one component or speculative attack date.","accept":"Maintain a full algorithm inventory and reviewed transition plan. No quantum-proof claim from one component or speculative attack date.","evidence":"Expert review, downgrade/migration tests and annual refresh.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Cryptography + protocol","owner_role":"Cryptography + protocol","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-36","title":"Separate proof, truth and privacy","requirement":"Execution validity does not establish real-world input truth, AI answer quality or confidentiality. State trust and data exposure for each service.","accept":"Execution validity does not establish real-world input truth, AI answer quality or confidentiality. State trust and data exposure for each service.","evidence":"Threat model and user-facing guarantee audit.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Security + product","owner_role":"Security + product","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-37","title":"Scale within verification budgets","requirement":"Throughput, data and state growth must preserve the declared minimum-node and reconstruction capabilities. Reprice security after fee compression.","accept":"Throughput, data and state growth must preserve the declared minimum-node and reconstruction capabilities. Reprice security after fee compression.","evidence":"Cold-path capacity, bootstrap, pruning and provider-removal tests.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + operations","owner_role":"Protocol + operations","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-38","title":"Honest energy accounting","requirement":"Report complete-system energy and role allocation. Avoid double-counting joint work or making unsupported carbon/marginal-transaction claims.","accept":"Report complete-system energy and role allocation. Avoid double-counting joint work or making unsupported carbon/marginal-transaction claims.","evidence":"Calibrated wall tests and documented environmental methodology.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"GPU + measurement","owner_role":"GPU + measurement","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-39","title":"Activity-specific legal approval","requirement":"Obtain counsel review for actual audiences and activities. No-presale, fair-launch or decentralised labels are not blanket legal exemptions.","accept":"Obtain counsel review for actual audiences and activities. No-presale, fair-launch or decentralised labels are not blanket legal exemptions.","evidence":"Jurisdiction/activity matrix and approved external communications.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Counsel","owner_role":"Counsel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"},{"id":"VR-40","title":"No indispensable administrator","requirement":"A useful company, token holder, pool, AI agent or funding body receives no hidden power over balances, issuance or canonical history.","accept":"A useful company, token holder, pool, AI agent or funding body receives no hidden power over balances, issuance or canonical history.","evidence":"Authority inventory, isolation tests and independent operation.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + governance","owner_role":"Protocol + governance","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN"}]},{"code":"TV","title":"TV: the token value and network leadership gates (proposed; no gate executed)","source":"docs/plans/igneum-2.0-master/token-value/rules-and-gates.json gates","gate":"Token value gates closed","owner":"the owner role per gate","fixtures":["F0"],"summary":"32 gates from Igneum 2.0 - Token Value & Network Leadership 1.0-proposed (snapshot 2026-10-08); scope CORE, CAPABILITY IF ENABLED or LEADERSHIP CLAIM as the file gives it; Supplement to original master and 128-case test standard; not a price/rank guarantee","tests":[{"id":"TV-01","title":"Resolve and freeze the monetary contract","setup":"Supply, tail, fee and recovery documents plus exact proposed release.","procedure":"Reconcile D01-D06 with protocol/economic/counsel review. Freeze thresholds and all interfaces before confirmatory tests.","accept":"No conflicting normative policy; every material choice has a signed rationale, version, adoption path and tests. Unresolved core choice is BLOCKED.","evidence":"Decision log, signed specification, release manifest, test charter.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Protocol + independent panel","owner_role":"Protocol + independent panel","manual_page":null,"scope":"CORE","inherited_links":["GOV","P00","VR-01","VR-06"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-01 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + independent panel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-02","title":"Reproduce complete supply accounting","setup":"Two independent implementations; genesis and representative boundary/reorg fixtures.","procedure":"Recompute issued, paid, burned, locked and outstanding amounts through subsidy transitions, rollback/replay and duplicate records.","accept":"Exact integer agreement; no unaccounted creation, duplicate supply or cap breach under the ratified policy. Restricted wrappers are not extra native supply.","evidence":"Machine-readable ledgers, vectors, independent signoff.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Protocol + measurement","owner_role":"Protocol + measurement","manual_page":null,"scope":"CORE","inherited_links":["EVM","INC","GOV","VR-02"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-02 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + measurement); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-03","title":"Fair launch and early distribution","setup":"Public binaries, source, mining modes, launch notice and insider inventory.","procedure":"Rehearse from clean outsider machines; audit genesis allocations and devnet balances; simulate arrival times under alternative emission schedules.","accept":"Zero undisclosed allocation or privileged conversion; approved notice/support window and cohort pass; distribution analysis includes delayed entrants without guaranteeing equal ownership.","evidence":"Genesis report, dated releases, disclosure register, simulation inputs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Release + ecosystem","owner_role":"Release + ecosystem","manual_page":null,"scope":"CORE","inherited_links":["GPU","OPS","GOV","VR-03"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-03 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Release + ecosystem); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-04","title":"Security budget without price rescue","setup":"Ratified reward/fee rules; role costs; horizons 1, 5, 10 and 20 years.","procedure":"Model falling issuance, fee volatility and .25x/1x/4x/10x revenue, zero external jobs and -90% price. Separate role receipts and funding.","accept":"Approved viable scenarios fund minimum required roles without hidden issuance or assumed appreciation; failure regions stated. Collapse scenarios need safe behaviour, not universal profit.","evidence":"Reproducible cash-flow model, assumptions, independent review.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Economics + protocol","owner_role":"Economics + protocol","manual_page":null,"scope":"CORE","inherited_links":["ECO","INC","P12","P13","VR-05"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-04 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Economics + protocol); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-05","title":"Strongest surviving specialist","setup":"Pinned candidate/cohort; cheapest supported physical designs including SRAM/hybrid.","procedure":"Apply original ADV/GPU/ECO profiles with multi-epoch survival and development sunk. Reprice alternative state and memory implementations.","accept":"All approved core energy and total-cost bounds pass with uncertainty; no unresolved feasible dominating design. Unknown feasibility blocks the broad claim.","evidence":"Design files, wall results, sensitivity model, two independent hardware opinions.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Hardware reviewer + economics","owner_role":"Hardware reviewer + economics","manual_page":null,"scope":"CORE","inherited_links":["ADV","GPU","ECO","P04","P12","INT-18","VR-09"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-05 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Hardware reviewer + economics); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-06","title":"Every fee and payment reconciles","setup":"Native rules, payer contract and optional Labs/service invoices.","procedure":"Execute gas, proof, developer, pool, burn, sponsor and refund paths, including rounding, abort, retry and zero-demand cases.","accept":"No unexplained recipient or double count; statements/invoices match exact contract outcomes. Network turnover never labelled Labs revenue or permanent holding demand.","evidence":"Flow ledger, fixtures, invoice examples, reviewed public fee table.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Economics + application","owner_role":"Economics + application","manual_page":null,"scope":"CORE","inherited_links":["EVM","INC","COM","VR-07","VR-08"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-06 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Economics + application); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-07","title":"Ownership-critical engineering closure","setup":"Original master findings mapped to current release with genuine proof fixtures.","procedure":"Run native cache-order, fail-closed activation, payout crash and finality tests; reproduce fixed cases in independent environments.","accept":"No unresolved critical/high finding or counterexample within the approved guarantee; all applicable original safety gates pass. Reproducing a defect is not closure.","evidence":"Native outputs, manifests, scoped audit, issue-by-issue closure.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Protocol + independent security","owner_role":"Protocol + independent security","manual_page":null,"scope":"CORE","inherited_links":["ZKP","FIN","OPS","R2:F01-F04","R2:F12","VR-10","VR-11"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-07 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + independent security); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-08","title":"Custody and recovery usability","setup":"Declared wallet/hardware combinations; 30 new participants, at least 15 non-miners.","procedure":"Perform receive, preview/sign, limit, recovery and revocation tasks with valueless funds; inject wrong network/address and malicious prompts.","accept":"Zero unauthorised transfer or secret disclosure; at least 90% complete the approved safe task without private help. Report confidence limitations and all failures.","evidence":"Task protocol, anonymised results, security review, recovery vectors.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Wallet + independent users","owner_role":"Wallet + independent users","manual_page":null,"scope":"CORE","inherited_links":["UX","VER","P10","VR-13"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-08 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Wallet + independent users); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-09","title":"Independently verifiable settlement","setup":"Proof/receipt client without Labs RPC; normal and recovery certificates.","procedure":"Verify successful/failed transfers, wrong asset/amount, stale roots, fake voter lists, invalid proofs and withheld data.","accept":"All invalid claims refused; valid ordinary transfers verify within approved resource limits; weaker recovery and unavailable data never shown as stronger finality.","evidence":"Offline fixtures, consumer traces and independent implementation.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Wallet + consensus","owner_role":"Wallet + consensus","manual_page":null,"scope":"CORE","inherited_links":["VER","FIN","P08","VR-11","VR-14"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-09 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Wallet + consensus); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-10","title":"Minimum-node and sponsored-use limits","setup":"Approved minimum validator and sponsor budgets under final workload.","procedure":"Run cold proof verification, expensive invalid inputs, state growth, paymaster drain attempts and overloaded bursts.","accept":"Original capacity/security profiles pass; budgets remain bounded; no proof skipped to catch up and no sponsor can spend outside authorised scope.","evidence":"Cold-path profiles, stress traces, sponsor negative tests.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Protocol + application","owner_role":"Protocol + application","manual_page":null,"scope":"CORE","inherited_links":["CAP","EVM","ZKP","P07","P09","VR-15","VR-37"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-10 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + application); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-11","title":"Pooled payments without authority loss","setup":"Independent pool/member clients and durable payment state.","procedure":"Inject key/template substitution, reauthorisation, crash/RPC ambiguity, receipt reorg and hostile bounded inputs.","accept":"No duplicate/lost liability or unauthorised authority change; member can verify delegated powers and change pools. Session resource limits hold.","evidence":"Ledger replay, signed work fixtures and pool removal test.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Pool + independent operators","owner_role":"Pool + independent operators","manual_page":null,"scope":"CORE","inherited_links":["INT-03","INT-04","INT-15","INT-16","R2:F12-F13","VR-12"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-11 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Pool + independent operators); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-12","title":"Reproducible and consented software","setup":"Release manifest, build dependencies, update keys and public installer.","procedure":"Two independent parties build/verify; simulate compromised key, stale package, rollback, urgency and missing fixtures.","accept":"No hidden consensus variation or arbitrary default remote control; update-off remains respected; mandatory unavailable fixtures block acceptance.","evidence":"Attestations, independent hashes, key drill, installer/ACL review.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Release + independent security","owner_role":"Release + independent security","manual_page":null,"scope":"CORE","inherited_links":["OPS","GOV","R2:F03","R2:F14","VR-24","VR-25"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-12 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Release + independent security); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-13","title":"Committed maintenance coverage","setup":"Costed roles, commitments and monthly cash dates.","procedure":"Audit at least 12 months of approved maintenance coverage; stress IGN-denominated resources and provider withdrawal.","accept":"Original P13 satisfied without counting future appreciation or unsigned pledges; essential functions have funded substitutes and explicit shortfall response.","evidence":"Contracts/grants or funding proof, stress cash flow, responsibility register.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Maintainers + independent finance","owner_role":"Maintainers + independent finance","manual_page":null,"scope":"CORE","inherited_links":["ECO","OPS","P13","VR-21"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-13 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Maintainers + independent finance); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-14","title":"Founder-absent operating exercise","setup":"Independent builds/operators; founder services, keys and manual help removed.","procedure":"Run 30 real days, then satisfy the original 90-day observation programme; cross boundaries, remove major providers and record all interventions.","accept":"Approved original independence/reliability gates pass; no unpublished founder action or privileged override. Simulated long partitions are labelled separately.","evidence":"Dependency map, availability logs, intervention and payer ledger.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Independent operations panel","owner_role":"Independent operations panel","manual_page":null,"scope":"CORE","inherited_links":["OPS","FIN","LEAD","P11","P16","VR-22","VR-23"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-14 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Independent operations panel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-15","title":"Governance and authority boundaries","setup":"Every control/activation threshold, treasury power and application admin interface.","procedure":"Exercise hostile coalitions, absent voters, old clients and compromised non-consensus keys; test refusal and recovery.","accept":"No actor gains undeclared issuance/balance/history authority. Every activation follows the ratified safe procedure; ambiguous threshold or recovery remains BLOCKED.","evidence":"Authority model, scenarios, native outcomes and independent review.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Protocol + governance","owner_role":"Protocol + governance","manual_page":null,"scope":"CORE","inherited_links":["GOV","FIN","ROT","VR-06","VR-40"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-15 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + governance); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-16","title":"Two functional independent access routes","setup":"At least two unaffiliated custody/exchange/payment routes with disclosed shared infrastructure.","procedure":"Complete small controlled deposits, withdrawals, outage and reconciliation tests; identify actual custody and settlement dependencies.","accept":"Both settle correctly; neither is merely a front end to the same indispensable provider. Gaps and jurisdiction limits visible; no listing assumed from a logo.","evidence":"Settlement records, dependency map and third-party confirmation.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Ecosystem + independent reviewer","owner_role":"Ecosystem + independent reviewer","manual_page":null,"scope":"CORE","inherited_links":["OPS","VER","VR-26"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-16 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Ecosystem + independent reviewer); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-17","title":"Supply-price-liquidity measurement","setup":"Frozen sources, price filters, circulating/free-float definitions and order-size bands.","procedure":"Collect 90 real days; independently replay supply and prices; measure both buy/sell execution costs and withdrawal availability.","accept":"At least 95% daily coverage; exact supply reconciliation; no fabricated missing data. Sparse liquidity invalidates broad liquidity claims, not automatically the arithmetic cap.","evidence":"Raw snapshots, methodology/code, gap ledger, audit.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Measurement steward","owner_role":"Measurement steward","manual_page":null,"scope":"CORE","inherited_links":["LEAD","VR-02","VR-26","VR-28"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-17 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Measurement steward); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-18","title":"Real versus incentivised demand","setup":"Customer/job/transaction definitions with privacy-respecting attribution and subsidy data.","procedure":"Reconcile raw/adjusted activity, self-dealing controls and incentives; test whether circular activity earns more than its irrecoverable cost.","accept":"All subsidies and known related activity separated; useful demand not inferred from gross volume alone; abusive incentive loop closed before scaling rewards.","evidence":"Accounting model, filter logic, sensitivity and independent replay.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Economics + measurement","owner_role":"Economics + measurement","manual_page":null,"scope":"CORE","inherited_links":["COM","INC","VR-08","VR-28","VR-32"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-18 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Economics + measurement); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-19","title":"Independent developer adoption","setup":"Public kit and at least five unaffiliated developers with declared tasks.","procedure":"Build useful integrations without private dependencies; have two independent maintainers update the kit; record obstacles and adoption reason.","accept":"All declared core integration paths work; at least five usable integrations and two maintainer reproductions. Empty subsidised deployments do not qualify.","evidence":"Repos, task traces, user evidence and maintenance records.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Ecosystem + external developers","owner_role":"Ecosystem + external developers","manual_page":null,"scope":"CORE","inherited_links":["EVM","COM","P14","VR-20"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-19 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Ecosystem + external developers); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-20","title":"Programmable payment acceptance","setup":"Versioned library, independent application, user/sponsor limits and receipt path.","procedure":"Execute simple/conditional/recurring payments, revocations, expiry, failed outcome and duplicate invoice cases.","accept":"No unauthorised spend or double settlement; successful transfer independently evidenced; subjective conditions disclose adjudicator/trust.","evidence":"Contracts, negative vectors, user task record, security review.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Application + wallet","owner_role":"Application + wallet","manual_page":null,"scope":"PAYMENT CAPABILITY","inherited_links":["EVM","VER","UX","VR-13","VR-15"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-20 (token value gate, scope PAYMENT CAPABILITY): no gate executed; the harness is the owner role's (Application + wallet); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-21","title":"Useful paid proof demand","setup":"Exact workload and final hardware path; three unrelated buyers and approved COM profile.","procedure":"Observe repeat purchases under original P14/P16 conditions, full job outcomes and operator/service costs.","accept":"All applicable COM targets met without hidden reimbursement. Queue expiry not counted as success. A monetary-only scope cannot claim this gate passed by exclusion.","evidence":"Buyer evidence, cost ledger, all-job traces and independent review.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Proving + independent customers","owner_role":"Proving + independent customers","manual_page":null,"scope":"PAID WORK CAPABILITY","inherited_links":["COM","CAP","P14","P16","R2:F08","VR-18"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-21 (token value gate, scope PAID WORK CAPABILITY): no gate executed; the harness is the owner role's (Proving + independent customers); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-22","title":"Replaceable work-market gateway","setup":"Two independent gateway implementations and job/settlement specification.","procedure":"Create jobs, switch providers/gateways, fail one service and deliver the same objective result using public inputs.","accept":"Correct payment/result without Labs approval; no concealed central dispatcher or irreversible dependency. External-chain receipts labelled separately.","evidence":"Gateway traces, escrow reconciliation, dependency-removal run.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Application + independent operators","owner_role":"Application + independent operators","manual_page":null,"scope":"WORK MARKET CAPABILITY","inherited_links":["OPS","COM","VR-08","VR-18"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-22 (token value gate, scope WORK MARKET CAPABILITY): no gate executed; the harness is the owner role's (Application + independent operators); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-23","title":"Obligation-based deposits","setup":"Proposed bond/default contract and volatile-collateral scenarios.","procedure":"Test reservation abandonment, invalid inputs, network pause, -90% collateral value and malicious claims.","accept":"No consensus influence bought; default reason objective; compensation limits explicit; viable small-operator participation and approved risk bounds.","evidence":"Adversarial model, state tests, risk/legal review.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Economics + security","owner_role":"Economics + security","manual_page":null,"scope":"SERVICE BONDS IF ENABLED","inherited_links":["INC","ECO","VR-19"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-23 (token value gate, scope SERVICE BONDS IF ENABLED): no gate executed; the harness is the owner role's (Economics + security); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-24","title":"AI earns a separate commercial case","setup":"One bounded model/job, provider hardware, verification tier and licences.","procedure":"Benchmark full delivery vs actual alternatives; test 90% lower unit prices, demand collapse, private-data exposure and substituted models.","accept":"Approved service economics and buyer gates pass; correctness/truth/privacy distinguished. No native price or perpetual yield assumption.","evidence":"End-to-end costs, repeat demand, licence/threat review.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Compute + independent reviewer","owner_role":"Compute + independent reviewer","manual_page":null,"scope":"AI IF ENABLED","inherited_links":["COM","CAP","VR-33","VR-36"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-24 (token value gate, scope AI IF ENABLED): no gate executed; the harness is the owner role's (Compute + independent reviewer); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-25","title":"Bounded machine purchasing","setup":"Approved account/paymaster permissions and chosen x402/agent interfaces.","procedure":"Inject hostile outputs/prompts, replayed requests, recursive spending, revoked permissions and gateway failure.","accept":"Spend never exceeds authorised destination/time/amount scope; no instruction changes authority. Draft standard support is described accurately.","evidence":"Property tests, loss-cap proof, revocation/audit logs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Application + security","owner_role":"Application + security","manual_page":null,"scope":"AGENTS IF ENABLED","inherited_links":["EVM","UX","VR-34","VR-40"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-25 (token value gate, scope AGENTS IF ENABLED): no gate executed; the harness is the owner role's (Application + security); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-26","title":"Cryptographic migration readiness","setup":"Complete key/proof/transport/update inventory and external cryptographic review.","procedure":"Rehearse versioned signature/proof migration, downgrade/replay, mixed clients, inactive owners and minimum-node overhead.","accept":"No unreviewed assumption or automatic confiscation; migration can be explained and tested. No absolute quantum-proof claim or attack date inferred.","evidence":"Inventory, expert report, migration vectors, annual schedule.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Cryptography + protocol","owner_role":"Cryptography + protocol","manual_page":null,"scope":"CORE","inherited_links":["ZKP","GOV","OPS","VR-35"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-26 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Cryptography + protocol); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-27","title":"Private data and oracle assurance","setup":"Per-product claims, input trust sources, data-retention and execution model.","procedure":"Use forged data, hostile providers, telemetry leakage, unsupported attestation and false-but-correctly-executed AI outputs.","accept":"No claim exceeds tested guarantee; secrets/data protected to stated model; unauthenticated inputs not represented as objective truth.","evidence":"Threat model, exposure tests, labelled user flows.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Security + product","owner_role":"Security + product","manual_page":null,"scope":"CORE","inherited_links":["VER","ZKP","UX","VR-36"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-27 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Security + product); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-28","title":"Stable assets and bridge isolation","setup":"Only if enabled: issuer/bridge design, redemption rights, trust anchors and approved value caps.","procedure":"Test reserve/redemption failure, stale oracle, invalid/recovery certificates, contract compromise and emergency shutdown.","accept":"No hidden base-chain guarantee or forced reversal of final history; independent audit, conservative exposure and counsel approval.","evidence":"Risk dossier, scenarios, disclosure, independent tests.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Application + security + counsel","owner_role":"Application + security + counsel","manual_page":null,"scope":"STABLE/BRIDGE IF ENABLED","inherited_links":["VER","FIN","VR-16","VR-17"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-28 (token value gate, scope STABLE/BRIDGE IF ENABLED): no gate executed; the harness is the owner role's (Application + security + counsel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-29","title":"Growth without inaccessible verification","setup":"Declared minimum node, projected data growth and alternative scaling design.","procedure":"Run cold/worst-case validation, state/pruning/bootstrap, censorship and aggregation withdrawal; model 10x/100x growth and fee compression.","accept":"Original minimum-node/security bounds hold; required data remains obtainable; security funding restated for changed fee routes.","evidence":"Capacity/availability results and revised economics.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Protocol + operations","owner_role":"Protocol + operations","manual_page":null,"scope":"CORE","inherited_links":["CAP","ECO","VER","VR-37"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-29 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + operations); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-30","title":"Energy and claims discipline","setup":"Calibrated whole-system metering and workload allocation protocol.","procedure":"Measure mining, proving, mixed/time-shared operation, setup/recovery and unsuccessful work; review environmental text.","accept":"No double-counted savings; original meter tolerances satisfied; no marginal-energy/carbon claim beyond method.","evidence":"Raw meter traces, job ledger, method and external review.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"GPU + measurement","owner_role":"GPU + measurement","manual_page":null,"scope":"CORE","inherited_links":["GPU","CAP","P02","VR-38"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-30 (token value gate, scope CORE): no gate executed; the harness is the owner role's (GPU + measurement); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-31","title":"Public-claim and activity review","setup":"Actual jurisdiction, audience, service, token-distribution and promotion plans.","procedure":"Counsel assesses applicable routes and reviews each value/rank/return/security assertion against evidence.","accept":"Written activity-specific clearance and approved wording; no future-value assertion in a covered MiCA white paper; no blanket exemption inferred from mining.","evidence":"Legal decision matrix, claim register, review dates.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Qualified counsel","owner_role":"Qualified counsel","manual_page":null,"scope":"CORE","inherited_links":["GOV","LEAD","VR-30","VR-39"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-31 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Qualified counsel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"},{"id":"TV-32","title":"Observed leadership, not a roadmap certificate","setup":"Approved peer universe; all applicable mandatory gates; stable release and 90-day observation.","procedure":"Run original P15/P16 comparisons and independently replay scoped rank data. Test changing peer/exclusion assumptions and missing data.","accept":"Contender requires original criteria; market-cap first requires highest 90-day median, 95% coverage; sustained daily-first convention also needs 80% of covered days. Never certify overall best from price alone.","evidence":"Independent panel report, full methods/data, scope and expiry of claim.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Independent acceptance panel","owner_role":"Independent acceptance panel","manual_page":null,"scope":"LEADERSHIP CLAIM","inherited_links":["LEAD","P15","P16","VR-29","VR-30","VR-31"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","evidence_record":{"reason":"TV-32 (token value gate, scope LEADERSHIP CLAIM): no gate executed; the harness is the owner role's (Independent acceptance panel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:39:51.032Z"},"updated":"2026-10-09T08:39:51.032Z"}],"notes":[{"at":"2026-10-09T08:13:51.136Z","text":"Counting note (main's order, 9 October 2026, by 11:00 UK): the VR rules (40) and TV gates (32) are a supplemental layer over the master's 128 cases, the 18 integration gates and the 44 review regressions, never added to them as independent evidence; no TV gate has executed; every VR rule is PROPOSED and requires ratification by the founder and its owner role; the decisions D01 to D06 are UNAPPROVED, the founder's."}]}],"profiles":{"P00":{"title":"Frozen scope and approval","requirements":["Approve the release manifest, supported roles, numerical profiles, mandatory scenarios, trust/fault model, workload W, adapters and claims before confirmatory tests. Unknown values are BLOCKED, not defaults.","Core safety and authentication invariants admit no waiver. Proposed performance or commercial targets may be replaced only before the confirmatory run, with an independent rationale and a versioned public scope.","After a failure, weakening a target creates a different claim and requires a new assessment. Preserve all failed runs; do not average a blocker away."],"status":"PROPOSED - REQUIRES APPROVAL"},"P01":{"title":"Correctness and negative-test depth","requirements":["Zero observed invalid acceptance, unauthorised signature, conflicting finality within assumptions, duplicated reward or unexplained cross-backend state/hash disagreement.","Minimum proposed campaign: 1,000,000 full-hash vectors per supported backend across all families, plus at least 10,000 malformed/boundary cases per relevant parser or binding class. Include exhaustive small-domain cases and historical regressions.","All prescribed critical mutants must be detected. This sampling target is not a bound on cryptographic failure probability and does not replace independent reasoning about soundness or safety."],"status":"PROPOSED - REQUIRES APPROVAL"},"P02":{"title":"Hardware coverage and reproducibility","requirements":["At least 12 physical retail configurations: at least 3 NVIDIA, 3 AMD and 2 Apple configurations, at least two discrete-GPU generations, an advertised 8 GB mining tier and 12 GB proving tiers where claimed. Record usable, not nominal, memory.","Declare a competitive core of at least 6 configurations spanning every advertised vendor and at least two discrete generations before optimisation. The wider cohort remains mandatory for access and economic tests; it cannot be silently dropped.","Use 5 paired 30-minute steady-state runs per primary cell after at least 15 minutes of warm-up and a stable temperature trend. Calibrated wall meter uncertainty must be at most 2%. Run a 7-day soak on representative low/mid/high tiers.","Three unaffiliated operators participate; every competitive-core cell is reproduced by at least two. Identical-SKU energy/accepted-work results must agree within 5% after declared environment corrections; unexplained variance blocks the headline."],"status":"PROPOSED - REQUIRES APPROVAL"},"P03":{"title":"Candidate improvement and honest-card budget","requirements":["For production candidate changes, per mandatory GPU cell: no more than 5% increase in joules per accepted work and no more than 2% decrease in accepted throughput versus the paired tuned baseline. Absolute safety limits always apply.","G2 requires at least a 10% reduction in the strongest evaluated specialist advantage after redesign, outside the declared measurement/model uncertainty, while meeting those budgets. A failed experiment is not a successful upgrade.","Existing clock-lock savings belong in the baseline. Long programs cannot pass by adding enough equally costly work to both devices to improve a ratio while materially worsening honest operation."],"status":"PROPOSED - REQUIRES APPROVAL"},"P04":{"title":"Scoped specialist-competition target","requirements":["Define R_E as GPU wall joules per accepted work divided by the lowest credible complete-system specialist joules for that same work. The proposed target is R_E at most 1.5 for every competitive-core cell at the same node and one node ahead.","Evaluate at least three materially distinct specialist architectures, with one programmable multi-family design, and a second independent reviewer. Include shared/reduced memory, hybrid execution, selective participation and realistic power/host costs.","Publish two-node-ahead and modular/reused-IP stress cases; they must satisfy the predeclared P12 economic envelope. No universal ceiling for unknown future hardware is claimed. Report model bounds separately from statistical confidence.","A lower-bound specialist estimate, not a convenient average or a deliberately constrained reference architecture, drives the conservative comparison. Undefined or unbounded decision-critical assumptions make the result BLOCKED."],"status":"PROPOSED - REQUIRES APPROVAL"},"P05":{"title":"Measurement and inference protocol","requirements":["Pre-register primary metrics, cohorts, holdout seeds, run order, exclusions and analysis before confirmation. Keep tuning/training runs separate from holdout runs.","Use independent runs/operators as measurement units. Report point estimates, two-sided 95% measurement intervals and absolute sample counts; handle time-series dependence with a declared block or run-level method.","Apply conservative uncertainty to pass decisions. A confidence interval around measured GPU energy does not capture unknown ASIC architectures; model parameter ranges and expert judgement must be reported as such.","Never compare raw hashes per second across different algorithms. Do not transform a five-year scenario sweep into a probability of chip arrival or a guarantee of future profitability."],"status":"PROPOSED - REQUIRES APPROVAL"},"P06":{"title":"Memory and support policy","requirements":["All advertised role/configuration combinations must finish without OOM, corruption or unsafe fallback. Publish a component memory budget, including display/OS, driver, miner, prover, aggregation and epoch construction.","Proposed support horizon: at least 24 months of known schedule compatibility for the advertised entry tier, unless a narrower horizon is prominently approved before sale or launch. Removal changes the claim and must pass ECO-07.","Treat 5.5 / 8.5 / 11.5 GiB as source candidates, not imposed final rules. Simultaneous operation, eviction and time-sharing are distinct advertised modes with separately measured cost."],"status":"PROPOSED - REQUIRES APPROVAL"},"P07":{"title":"Proof service capacity and fairness","requirements":["Freeze W as a meaningful workload mix, input sizes, proof format, fleet and requests/hour. Primary proposed target: 72 hours at W, plus 24 hours at 1.2W; at least 99.5% accepted jobs delivered valid within the contracted deadline.","Default delivery targets for the declared internal reference workload: p95 at most 60 seconds and p99 at most 120 seconds from input-ready assignment through verified delivery. Also publish request-to-delivery including input wait; no claim may omit that delay.","Request-to-delivery p99 must meet the separately approved customer deadline. Payment p99 must be at most 10 minutes after verified payable eligibility, with chain finality time reported separately. These defaults do not override a stricter contract.","No statistically supported positive backlog drift at steady load, no silent drops; after 2W for 15 minutes, drain excess backlog within 30 minutes of return to W. Report rejected demand and accepted-job success separately.","Proposed advertised-tier fairness: at least 90% timely valid assigned completions are paid under the approved rules; avoidable duplicate/retry work is at most 10% of total work. Reassignment policy must bound abandonment without promising every assignment a reward."],"status":"PROPOSED - REQUIRES APPROVAL"},"P08":{"title":"Fault assumptions and recovery","requirements":["F0 must state the exact safety threshold, quorum and authority-transition rule; the synchrony/participation assumptions for liveness; trusted inputs; and clock/expiry semantics. This manual supplies no substitute consensus rule.","Exercise threshold-minus/at/plus cases, the 40/40/20 partition fixture, signing outages and 31/35/60/90 logical-day expiry cases. Preserve safety when liveness assumptions fail; do not demand finality from an unavailable quorum.","After assumptions and input availability are restored: service replacement within 10 minutes and deterministic network convergence within 30 minutes on the reference topology. Different certified bounds must be approved beforehand.","Accelerated-time simulation and real elapsed operation are separate evidence classes. Recovery may not reverse a guarantee previously represented as final."],"status":"PROPOSED - REQUIRES APPROVAL"},"P09":{"title":"Security and bounded resource requirements","requirements":["Zero unresolved critical or high-severity security findings on the claimed release. Independent scopes must cover consensus, proof soundness/parameters, implementation bypasses, wallet/isolation and relevant operational controls.","Review the intended proof-system security level and assumptions explicitly; do not infer a security-bit claim from random rejection tests. Version every verifier, program and parameter set.","Freeze maximum valid/invalid verification time, memory, disk and admission rates for ordinary validator hardware. At rated valid load plus the approved hostile load, no unbounded growth, invalid acceptance or unrecoverable process failure.","For supported wallet fee-estimation cases, proposed absolute error at most 5% versus the specified charge when inputs are unchanged; deterministic fee-cap handling and explicit uncertainty otherwise. Customer contracts remain separately binding."],"status":"PROPOSED - REQUIRES APPROVAL"},"P10":{"title":"Ordinary-operator product targets","requirements":["At least 30 unaffiliated first-time study participants across supported Windows/macOS combinations. At least 90% install, configure safely and submit accepted work without staff help; p90 active setup at most 15 minutes. Publish complete download/dataset time separately.","Pause/stop acknowledgement within 2 seconds, safe worker stop within 5 seconds where no documented atomic operation prevents it, and reliable restoration of original tuning settings. No hidden custody or silent update.","Net-energy/fee displays reconcile within 5% under the declared measurement boundary. Incremental rejected-work loss on the normal home-link profile is at most 2 percentage points over the matched datacentre profile.","Open miner efficiency is within 5% of the best independently tuned permitted implementation on identical work. For the declared single-card payout case, p95 payable-to-payment at most 24 hours and total payout friction at most 2% of earned value.","Critical alerts are emitted within 60 seconds of detectable evidence. At least 90% of study users can identify the injected failure and follow the published safe action. No control target excuses a security failure."],"status":"PROPOSED - REQUIRES APPROVAL"},"P11":{"title":"No-founder exercise and independence","requirements":["At least 10 verified unaffiliated operators, three independently administered network/hosting domains and sufficient honest weight/capacity to satisfy F0 and W after founders are removed.","Run at least 30 real elapsed days without founder mining, proving, aggregation, bootstrap, required RPC, private files or privileged interventions. Cross all known logical transitions separately without calling accelerated time real history.","Document control by role and common dependencies; uncertain identities are not counted as independent. Within-assumption withdrawals must satisfy P08; losing more than the assumed quorum may cause a visible safe pause."],"status":"PROPOSED - REQUIRES APPROVAL"},"P12":{"title":"Five-year coexistence envelope","requirements":["Freeze a sourced revenue reference R and mandatory worlds before results. Sweep 0.25R, R, 4R and 10R; electricity at $0.03/$0.10/$0.25/$0.40 per kWh; 1/3/5-year productive life; zero/$20M/$75M development; private mining and hardware sales; no/normal/spiking external demand.","Those values are proposed stress inputs, not current prices or forecasts. Declare which worlds have enough funded demand for rational ongoing service before running; retain collapse worlds as explicit safety/exit tests, not profitable successes.","Proposed matched-tariff new-entry target in every mandatory sustainable world: median GPU/specialist total cost per accepted work at most 1.5, 90th percentile at most 1.75, and no advertised competitive-core cell above 2.0. Publish every cell, including heterogeneous tariffs.","At least three purchasable GPU configurations across at least two advertised vendors must have positive modelled new-entry economics; at least 75% of the entry cohort must have positive marginal operating economics in those worlds. Report model uncertainty and failure regions.","Do not impose GPU market share, specialist production limits, token appreciation, full research-cost recovery or automatic chip death to force the result. Any such condition must become an explicit limitation rather than a hidden assumption."],"status":"PROPOSED - REQUIRES APPROVAL"},"P13":{"title":"Maintenance continuity","requirements":["Before a readiness claim, document at least 12 months of committed maintenance resources at the approved operating scope. Include engineering, security review, infrastructure, support and incident response.","Use independently reviewable commitments and downside budgets. Uncommitted future sales, rising token prices, burned fees or assumed fundraising are not available resources.","This is a proposed governance test, not a directive to change the supply cap, issuance allocation or fair-launch design."],"status":"PROPOSED - REQUIRES APPROVAL"},"P14":{"title":"Genuine commercial and developer proof","requirements":["At least three unrelated paying buyer organisations, each making at least three separate purchase decisions across at least 30 days; at least 1,000 meaningful verified external jobs in aggregate. Split invoices do not create independent demand.","No project reimbursement, circular funding or undisclosed related party counts. Report customer concentration and churn; proposed maximum largest-buyer share is 70% of qualifying revenue.","At least 20% aggregate contribution margin after directly attributable delivery costs, retries, refunds and support; publish fully loaded economics separately. At least 75% of sampled eligible operators have positive realised contribution on the declared workload.","At least five unaffiliated developers complete a useful supported application or proof-service integration using public documentation. Customer confirmation and raw commercial evidence may remain confidential to the reviewer."],"status":"PROPOSED - REQUIRES APPROVAL"},"P15":{"title":"Comparative contention threshold","requirements":["Pre-register at least three relevant operating GPU-first peers, plus a real proving alternative for customer comparisons. Verify current versions at execution time. The source reference set is a starting point, not a claim about current rankings.","Require at least three meaningful comparable dimensions with no material inferiority beyond a pre-agreed 10% margin against the best valid comparator, and at least two independently evidenced advantages against at least two peers.","Advantages must be either a greater-than-10% measured improvement outside uncertainty or a directly tested control/capability difference with demonstrated user value. Non-comparable or missing data is not a win.","A panel with hardware/economics, security/operations and customer/operator expertise must support the scoped contender conclusion. Passing these judgement-based thresholds does not certify a universal number-one ranking."],"status":"PROPOSED - REQUIRES APPROVAL"},"P16":{"title":"Observed durability and claim freshness","requirements":["At least 90 real elapsed days on the final compatible release family, at least 30 independently verified operators, and transparent eligibility/churn denominators. Material uncomparable changes reset affected observations.","Proposed outcomes: at least 60% day-90 operator retention and at least 75% of eligible observed operators with positive measured marginal operation over the period. Report incentives and electricity assumptions; do not claim a downturn was observed if it was not.","At least 99.9% availability for the declared customer service during eligible operating conditions, with all-in availability also reported; zero accepted invalid proofs or conflicting finality within F0 assumptions. Do not remove real incidents as maintenance to force a pass.","Run fault injection on isolated infrastructure, not unsuspecting customers. Publish planned test windows separately. Reassess claims at least quarterly and immediately after material hardware, protocol, economics or security changes."],"status":"PROPOSED - REQUIRES APPROVAL"}},"fixtures":[{"id":"F0","title":"Release and assurance manifest","contents":"Exact commits, binaries, genesis/network ID, mining class, dataset schedule, EVM fork/deviations, program/verifier IDs, fees, supply, quorum/fault rules, trust anchors, activation and supported roles."},{"id":"F1","title":"Clean build environments","contents":"Pinned toolchains, dependency locks, clean OS images and documented signing/notarisation boundaries. No production secrets or private founder files."},{"id":"F2","title":"Hardware and measurement lab","contents":"Approved physical GPU cohort, calibrated wall meters, stable thermal conditions, driver/OS images and realistic home/datacentre link conditions."},{"id":"F3","title":"Workload and oracle catalogue","contents":"Fixed full-hash and EVM/proving jobs, independent reference implementations, real customer-sized payloads, held-out seeds and complete expected results."},{"id":"F4","title":"Authorised fault network","contents":"Independent nodes/operators; controllable latency, loss, clocks, partitions, storage faults and role withdrawals. Actual consensus paths plus separately labelled simulators."},{"id":"F5","title":"Negative and regression corpus","contents":"Malformed transactions/proofs, wrong roots/IDs, duplicate payments, bad authority tables, historical failures and deliberately faulty code mutants."},{"id":"F6","title":"Specialist implementation pack","contents":"Functionally checked architectures, RTL/physical estimates where feasible, memory and board assumptions, cost inputs, adaptation paths and uncertainty ranges."},{"id":"F7","title":"Economic and incentive models","contents":"Independently reproducible costs, entry/exit/difficulty policies, scenario grid, operator opportunity costs and money-flow conservation fixtures."},{"id":"F8","title":"User/customer/peer studies","contents":"Consenting unaffiliated users, contracted meaningful workloads, private ownership checks, dated competitor methods and independent analysis."},{"id":"F9","title":"Evidence and status vault","contents":"Immutable run IDs, raw logs, hashes, analysis code, exclusions, defects, reviewers, signatures, privacy controls and public redacted summaries."}],"source_sha256":"418b3b9f68f96a413872fecb16f8508a40063891c70054c65e92e6e5f5fb70b6","scope_note":"Test design, not executed evidence. All numeric additions are proposed, not source-approved protocol rules. Optional claimed features require their tests; excluded features earn no pass credit.","all_pass_note":"Independent passage of all mandatory and claimed-option gates, including commercial and comparative observation, can support a scoped leadership-contender assessment. It does not prove a universal rank or eliminate unknown future hardware risks.","manual_page_count":73,"approval":{"by":"the founder","at":"2026-10-08 18:2x UK","word":"approve as proposed in the tests, forget P13 for now","profiles":{"P00":"APPROVED AS PROPOSED","P01":"APPROVED AS PROPOSED","P02":"APPROVED AS PROPOSED","P03":"APPROVED AS PROPOSED","P04":"APPROVED AS PROPOSED","P05":"APPROVED AS PROPOSED","P06":"APPROVED AS PROPOSED","P07":"APPROVED AS PROPOSED","P08":"APPROVED AS PROPOSED","P09":"APPROVED AS PROPOSED","P10":"APPROVED AS PROPOSED","P11":"APPROVED AS PROPOSED","P12":"APPROVED AS PROPOSED","P13":"DEFERRED by the founder","P14":"APPROVED AS PROPOSED","P15":"APPROVED AS PROPOSED","P16":"APPROVED AS PROPOSED"},"rules_in_force":["P03: a candidate change pays at most 5 percent of joules per accepted work and loses at most 2 percent of accepted throughput against the paired tuned baseline (replaces the 10 percent budget from 18:2x UK)","P04: R_E at most 1.5 for every competitive-core cell at the same node and one node ahead against the lowest credible complete-system specialist; today's placed bracket (1.5x to 2.1x same-node) is a FAIL to work against and is served as such","P12: the matched-tariff median at most 1.5, p90 at most 1.75, no core cell above 2.0","P02: twelve retail configurations, three unaffiliated operators, the seven-day soak define D1's reproduction"]},"live_fields":{"run_status":"NOT RUN | BLOCKED | FAIL | PASS (the master, p. 139; in_progress_since marks work under way; deferral_note a founder deferral)","owner_lane":"the lane that runs the case, with its id","evidence_path":"the file on the box mirror master that holds the evidence record in the standard's template","run_id":"the run that produced the latest status","updated":"the minute the lane last wrote the case"},"notes":[{"at":"2026-10-08T20:10:24.748Z","text":"128 original test cases, 18 additional integration gates, 44 updated-stack closure requirements. These sets overlap and are not 190 independent tests."},{"at":"2026-10-09T08:13:51.193Z","text":"Counting note (9 October 2026): the registry carries 128 master cases, 18 integration gates (INT), 44 review regressions (REV), and the token value layer (VR 40 rules, TV 32 gates) as a supplement that is never counted as independent evidence; the decisions block D01 to D06 is UNAPPROVED."}],"decisions":[{"id":"D01","title":"Cap and tail","required_resolution":"Choose one supply policy and remove the contradictory escape language. A cap is the recommended identity, conditional on adequate security funding.","status":"RATIFIED","owner":"founder","word":"capped issuance, no tail escape clause, no forecast-triggered minting, no ordinary parameter vote that expands the cap; subject to the pre-launch security-funding gate TV-04 (a fail means delay or an open reconsideration, never an undisclosed rescue)","ratified_by":"founder","ratified_at":"2026-10-09T08:13:50.568Z","recorded_against":"its specification, release and acceptance tests before activation (the coordinator's relay of the founder's ratification, 9 October 2026, 09:2x UK)","condition":"subject to TV-04"},{"id":"D02","title":"Emission horizon","required_resolution":"Compare the existing schedule with slower distribution before launch; include delayed ordinary entrants and dilution/security trade-offs.","status":"RATIFIED WITH PARAMETER PENDING","owner":"founder","word":"the same-cap emission comparison is approved (current pacing vs a longer distribution; code-generated figures for years 1, 2, 5, 10, 20 with rounding and terminal behaviour; no founder reserve); the final schedule stays PENDING EVIDENCE, neither alternative frozen","ratified_by":"founder","ratified_at":"2026-10-09T08:13:50.670Z","recorded_against":"its specification, release and acceptance tests before activation (the coordinator's relay of the founder's ratification, 9 October 2026, 09:2x UK)","condition":"the final schedule PENDING EVIDENCE"},{"id":"D03","title":"Security funding","required_resolution":"Define each role's recurring payer, declining subsidy model, maintenance runway and safe contraction behaviour.","status":"RATIFIED","owner":"founder","word":"separate accountable budgets for hashing, internal proving, external work and maintenance, every payment counted once; external prover revenue never counted as miner security, maintenance and Labs profit at once","ratified_by":"founder","ratified_at":"2026-10-09T08:13:50.772Z","recorded_against":"its specification, release and acceptance tests before activation (the coordinator's relay of the founder's ratification, 9 October 2026, 09:2x UK)"},{"id":"D04","title":"Fee/burn routing","required_resolution":"Freeze exact contract routes and distinguish resource fees, service charges and burn. Test pricing rather than maximise burn by slogan.","status":"RATIFIED WITH PARAMETER PENDING","owner":"founder","word":"explicit auditable routing with no hidden company allocation; the 80/20 split is emission allocation only; the external-job fee or burn rate is NOT ratified, comparative pricing tests decide","ratified_by":"founder","ratified_at":"2026-10-09T08:13:50.871Z","recorded_against":"its specification, release and acceptance tests before activation (the coordinator's relay of the founder's ratification, 9 October 2026, 09:2x UK)","condition":"the external-job fee or burn rate not ratified; comparative pricing tests decide"},{"id":"D05","title":"Finality/recovery","required_resolution":"Specify the stronger guarantee and any weaker recovery. Set dependent wallet/oracle behaviour consistently.","status":"RATIFIED","owner":"founder","word":"a recovery certificate is never ordinary finality on any wallet, receipt, API or bridge; labels do not repair an unsafe recovery rule, which still needs its tests","ratified_by":"founder","ratified_at":"2026-10-09T08:13:50.972Z","recorded_against":"its specification, release and acceptance tests before activation (the coordinator's relay of the founder's ratification, 9 October 2026, 09:2x UK)"},{"id":"D06","title":"Leadership scope","required_resolution":"Separate monetary, GPU engineering, paid-work and market-rank claims; decide which capabilities are enabled and which gates apply.","status":"RATIFIED","owner":"founder","word":"separate claims; public wording \"Designed to compete for leadership among GPU-first networks.\"; after testing, the demonstrated advantage is named, never a blanket number one","ratified_by":"founder","ratified_at":"2026-10-09T08:13:51.074Z","recorded_against":"its specification, release and acceptance tests before activation (the coordinator's relay of the founder's ratification, 9 October 2026, 09:2x UK)"}]}</script>
+<div id="acc-root"><section class="page-hero acc-hero"><div class="container"><div class="eyebrow"><span class="line"></span>Igneum 2.0 acceptance</div><h1 class="acc-title">Test and Acceptance Standard 1.0</h1><p class="lead">Every case of the standard, shown as it is run, in the standard’s own words. A checklist, never a completion score: a gate passes only when every case it depends on has passed.</p><p class="acc-basis"><span>Basis</span> IGNEUM_2.0_Plan.pdf, 37 pages, 8 October 2026. The standard runs to 73 pages. Registry dated 8 October 2026.</p><div class="acc-tally" id="acc-tally"><div class="acc-words"><span class="acc-word approved">APPROVED AS PROPOSED 8 OCTOBER 2026</span><span class="acc-word deferred">P13 DEFERRED</span></div><p class="acc-line">Test and Acceptance Standard 1.0: APPROVED AS PROPOSED by the founder, 8 October 2026; P13 (maintenance continuity) DEFERRED; 272 cases: 10 passed under the standard, 0 running with team evidence, 7 failed, 255 not run, 0 deferred</p><div class="acc-bar" role="img" aria-label="272 cases: 10 passed under the standard, 0 running with team evidence, 7 failed, 255 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:10" title="10 PASS"></span><span class="seg g-fail" style="flex-grow:7" title="7 FAIL"></span><span class="seg g-notrun" style="flex-grow:255" title="255 NOT RUN"></span></div><ul class="acc-legend"><li><i class="sw g-pass" aria-hidden="true"></i><b>10</b> pass</li><li><i class="sw g-fail" aria-hidden="true"></i><b>7</b> fail</li><li><i class="sw g-blocked" aria-hidden="true"></i><b>0</b> blocked</li><li><i class="sw g-running" aria-hidden="true"></i><b>0</b> running</li><li><i class="sw g-notrun" aria-hidden="true"></i><b>255</b> not run</li><li><i class="sw g-deferred" aria-hidden="true"></i><b>0</b> deferred</li></ul></div></div></section><nav class="acc-jump container" aria-label="Suites"><a href="#gates">Gates</a><a href="#suite-GOV">GOV</a><a href="#suite-GPU">GPU</a><a href="#suite-POW">POW</a><a href="#suite-ADV">ADV</a><a href="#suite-ROT">ROT</a><a href="#suite-ECO">ECO</a><a href="#suite-EVM">EVM</a><a href="#suite-ZKP">ZKP</a><a href="#suite-CAP">CAP</a><a href="#suite-INC">INC</a><a href="#suite-FIN">FIN</a><a href="#suite-VER">VER</a><a href="#suite-OPS">OPS</a><a href="#suite-UX">UX</a><a href="#suite-COM">COM</a><a href="#suite-LEAD">LEAD</a><a href="#suite-REV">REV</a><a href="#suite-INT">INT</a><a href="#suite-VR">VR</a><a href="#suite-TV">TV</a><a href="#suite-R15">R15</a><a href="#profiles">Profiles</a><a href="#fixtures">Fixtures</a></nav><section class="section acc-gates-sec" id="gates"><div class="container"><div class="eyebrow"><span class="line"></span>The gates</div><h2>Five gates, and the freeze before them.</h2><p class="acc-sub">A gate reads NOT RUN until every case it depends on has run, RUNNING while any is running, BLOCKED if any is blocked, FAIL if any fails, and PASS only when every case passes. No gate is weighted into an average.</p><div class="acc-g0"><article class="acc-gate st-notrun small" id="gate-G0" data-gate-state="NOT RUN"><div class="acc-gate-top"><span class="acc-gate-id">G0</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div><h3>Freeze</h3><p class="acc-gate-d">Release identity</p><p class="acc-gate-c">No formal run or public pass before approval.</p><div class="acc-bar" role="img" aria-label="Freeze: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><p class="acc-gate-n">8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article></div><div class="acc-five"><article class="acc-gate st-notrun" id="gate-G1" data-gate-state="NOT RUN"><div class="acc-gate-top"><span class="acc-gate-id">G1</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div><h3>Baseline</h3><p class="acc-gate-d">D1</p><p class="acc-gate-c">No validated hardware claim without reproduction.</p><div class="acc-bar" role="img" aria-label="Baseline: 16 cases: 2 passed under the standard, 0 running with team evidence, 14 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:2" title="2 PASS"></span><span class="seg g-notrun" style="flex-grow:14" title="14 NOT RUN"></span></div><p class="acc-gate-n">16 cases: 2 passed under the standard, 0 running with team evidence, 14 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-GPU">GPU</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article><article class="acc-gate st-fail" id="gate-G2" data-gate-state="FAIL"><div class="acc-gate-top"><span class="acc-gate-id">G2</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div><h3>Experiments</h3><p class="acc-gate-d">D2</p><p class="acc-gate-c">No improvement claim from a negative hypothesis.</p><div class="acc-bar" role="img" aria-label="Experiments: 32 cases: 2 passed under the standard, 0 running with team evidence, 2 failed, 28 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:2" title="2 PASS"></span><span class="seg g-fail" style="flex-grow:2" title="2 FAIL"></span><span class="seg g-notrun" style="flex-grow:28" title="28 NOT RUN"></span></div><p class="acc-gate-n">32 cases: 2 passed under the standard, 0 running with team evidence, 2 failed, 28 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-GPU">GPU</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-POW">POW</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-ROT">ROT</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article><article class="acc-gate st-notrun" id="gate-G3" data-gate-state="NOT RUN"><div class="acc-gate-top"><span class="acc-gate-id">G3</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div><h3>Adversary</h3><p class="acc-gate-d">D3</p><p class="acc-gate-c">No broad resistance claim from one weak design.</p><div class="acc-bar" role="img" aria-label="Adversary: 16 cases: 0 passed under the standard, 0 running with team evidence, 16 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:16" title="16 NOT RUN"></span></div><p class="acc-gate-n">16 cases: 0 passed under the standard, 0 running with team evidence, 16 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ADV">ADV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article><article class="acc-gate st-fail" id="gate-G4" data-gate-state="FAIL"><div class="acc-gate-top"><span class="acc-gate-id">G4</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div><h3>Coexistence</h3><p class="acc-gate-d">D4</p><p class="acc-gate-c">No durability claim based on assumed chip expiry.</p><div class="acc-bar" role="img" aria-label="Coexistence: 24 cases: 0 passed under the standard, 0 running with team evidence, 1 failed, 23 not run, 0 deferred"><span class="seg g-fail" style="flex-grow:1" title="1 FAIL"></span><span class="seg g-notrun" style="flex-grow:23" title="23 NOT RUN"></span></div><p class="acc-gate-n">24 cases: 0 passed under the standard, 0 running with team evidence, 1 failed, 23 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ECO">ECO</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-INC">INC</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article><article class="acc-gate st-notrun" id="gate-G5" data-gate-state="NOT RUN"><div class="acc-gate-top"><span class="acc-gate-id">G5</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div><h3>No rescue</h3><p class="acc-gate-d">D5</p><p class="acc-gate-c">No no-rescue claim from a founder-supported demo.</p><div class="acc-bar" role="img" aria-label="No rescue: 56 cases: 5 passed under the standard, 0 running with team evidence, 51 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:5" title="5 PASS"></span><span class="seg g-notrun" style="flex-grow:51" title="51 NOT RUN"></span></div><p class="acc-gate-n">56 cases: 5 passed under the standard, 0 running with team evidence, 51 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ROT">ROT</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ZKP">ZKP</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-INC">INC</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-FIN">FIN</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-OPS">OPS</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-UX">UX</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article></div><h3 class="acc-tracks-h">The three named gates</h3><div class="acc-tracks"><article class="acc-gate st-fail small" id="gate-TR" data-gate-state="FAIL"><div class="acc-gate-top"><span class="acc-gate-id"></span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div><h3>Technical readiness</h3><p class="acc-gate-d">Execution control</p><p class="acc-gate-c">No mainnet-ready claim with missing enforcement or safety.</p><div class="acc-bar" role="img" aria-label="Technical readiness: 64 cases: 6 passed under the standard, 0 running with team evidence, 5 failed, 53 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:6" title="6 PASS"></span><span class="seg g-fail" style="flex-grow:5" title="5 FAIL"></span><span class="seg g-notrun" style="flex-grow:53" title="53 NOT RUN"></span></div><p class="acc-gate-n">64 cases: 6 passed under the standard, 0 running with team evidence, 5 failed, 53 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-POW">POW</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-EVM">EVM</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ZKP">ZKP</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-CAP">CAP</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-FIN">FIN</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-VER">VER</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-UX">UX</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article><article class="acc-gate st-notrun small" id="gate-CE" data-gate-state="NOT RUN"><div class="acc-gate-top"><span class="acc-gate-id"></span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div><h3>Commercial evidence</h3><p class="acc-gate-d">Execution control</p><p class="acc-gate-c">Devnet activity is insufficient.</p><div class="acc-bar" role="img" aria-label="Commercial evidence: 24 cases: 0 passed under the standard, 0 running with team evidence, 24 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:24" title="24 NOT RUN"></span></div><p class="acc-gate-n">24 cases: 0 passed under the standard, 0 running with team evidence, 24 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-CAP">CAP</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-COM">COM</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article><article class="acc-gate st-fail small" id="gate-CD" data-gate-state="FAIL"><div class="acc-gate-top"><span class="acc-gate-id"></span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div><h3>Leadership-contender decision</h3><p class="acc-gate-d">Execution control</p><p class="acc-gate-c">Supports a scoped contention assessment, not a guaranteed rank.</p><div class="acc-bar" role="img" aria-label="Leadership-contender decision: 272 cases: 10 passed under the standard, 0 running with team evidence, 7 failed, 255 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:10" title="10 PASS"></span><span class="seg g-fail" style="flex-grow:7" title="7 FAIL"></span><span class="seg g-notrun" style="flex-grow:255" title="255 NOT RUN"></span></div><p class="acc-gate-n">272 cases: 10 passed under the standard, 0 running with team evidence, 7 failed, 255 not run, 0 deferred</p><ul class="acc-gs"><li><a href="#suite-GOV">GOV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-GPU">GPU</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-POW">POW</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-ADV">ADV</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ROT">ROT</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ECO">ECO</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-EVM">EVM</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-ZKP">ZKP</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-CAP">CAP</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-INC">INC</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-FIN">FIN</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-VER">VER</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-OPS">OPS</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-UX">UX</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-COM">COM</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-LEAD">LEAD</a><span class="acc-gs-n">8 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-REV">REV</a><span class="acc-gs-n">44 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-INT">INT</a><span class="acc-gs-n">18 cases</span><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></li><li><a href="#suite-VR">VR</a><span class="acc-gs-n">40 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-TV">TV</a><span class="acc-gs-n">32 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li><li><a href="#suite-R15">R15</a><span class="acc-gs-n">10 cases</span><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></li></ul></article></div></div></section><section class="section acc-suite" id="suite-GOV"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">01</span>GOV</div><div class="acc-suite-t"><h2>Release identity and evidence</h2><p class="acc-sub">Prevent a favourable result from being attached to the wrong code, assumptions or public claim.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Release lead + independent assurance</dd></div><div><dt>Gate</dt><dd>G0 / all gates <span class="acc-gl"><a href="#gate-G0">G0</a> <a href="#gate-G1">G1</a> <a href="#gate-G2">G2</a> <a href="#gate-G3">G3</a> <a href="#gate-G4">G4</a> <a href="#gate-G5">G5</a></span></dd></div><div><dt>Fixtures</dt><dd>F0 manifest; F1 source/build archives; F9 evidence vault</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="GOV: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-GOV-01" data-case="GOV-01" data-state="NOT RUN"><summary><span class="c-id">GOV-01</span><span class="c-title">Freeze the release and its claims</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:43 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Candidate source, binaries, public documentation and the 2.0 plan are available; no run is yet accepted.</p><h4>Steps</h4><ol><li>Record exact commits, binary hashes, dependencies, genesis/network identity, mining class, datasets, execution fork, verifier IDs and fee rules in F0.</li><li>Map every promised capability and plan requirement to a test ID; distinguish supported mining, proving and wallet combinations.</li><li>Sign the manifest with protocol, product and independent review owners before confirmatory runs.</li></ol><h4>Accept</h4><p>Every material rule and claim has an unambiguous version and test. Conflicts or unknown activation rules produce BLOCKED, not an inferred default. Changes create a new manifest and invalidate affected results.</p><h4>Evidence the case requires</h4><p>Signed F0; source-to-test map; claim inventory; unresolved-field register.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Run</dt><dd>f0-signing-20261008-2330</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>18</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-02" data-case="GOV-02" data-state="NOT RUN"><summary><span class="c-id">GOV-02</span><span class="c-title">Approve thresholds before results</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/igneum-2.0-test-registry.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>This manual supplies proposed test thresholds, not source-approved protocol parameters.</p><h4>Steps</h4><ol><li>Approve or replace every P-profile before confirmatory testing; give each change a rationale and independent approver.</li><li>Register hardware cohorts, mandatory economic worlds, customer workloads, peer dimensions and exclusion rules.</li><li>Lock the profile hash and hold out seeds/workloads from the developers doing optimisation.</li></ol><h4>Accept</h4><p>No decision-critical field is TBD. Numeric limits are frozen, commercially meaningful and not chosen from observed results. A weakened limit after failure requires a new protocol, full affected rerun and explicit claim downgrade review.</p><h4>Evidence the case requires</h4><p>Approved profile register; timestamped holdout commitments; change log.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>CI steward (a2ecfa95d3206016c)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>18</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-03" data-case="GOV-03" data-state="NOT RUN"><summary><span class="c-id">GOV-03</span><span class="c-title">Reproduce builds outside the founding team</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00, P02</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide public source and documented build instructions to three unaffiliated operators.</p><h4>Steps</h4><ol><li>Build on clean declared environments without private files, tokens or founder assistance.</li><li>Compare reproducible payload hashes; isolate signatures, notarisation and permitted non-deterministic wrappers.</li><li>Run reference vectors and restart a node using only documented artifacts.</li></ol><h4>Accept</h4><p>All independent builds reproduce the same consensus payload or an independently explained, pre-approved wrapper difference; reference outputs match exactly. Missing private prerequisites block release.</p><h4>Evidence the case requires</h4><p>Build logs; dependency lockfiles; binary comparison; operator attestations.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent reproduction</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>build-server lane (a352e49ff4613df86)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>18</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-04" data-case="GOV-04" data-state="NOT RUN"><summary><span class="c-id">GOV-04</span><span class="c-title">Preserve raw and negative evidence</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Enable append-only storage for run outputs and a separate analysis workspace.</p><h4>Steps</h4><ol><li>Capture failed, aborted and successful runs with timestamps, seeds and environment hashes.</li><li>Recompute one published figure from raw records on a clean machine.</li><li>Modify a retained artifact deliberately and test integrity verification.</li></ol><h4>Accept</h4><p>Every headline can be regenerated; tampering is detected; exclusions have pre-registered reasons. Failed or missing runs remain visible and are never replaced silently by a successful retry.</p><h4>Evidence the case requires</h4><p>Artifact manifest; hashes; reproduction script; exclusion ledger; negative-run archive.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>CI steward (a2ecfa95d3206016c)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>19</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-05" data-case="GOV-05" data-state="NOT RUN"><summary><span class="c-id">GOV-05</span><span class="c-title">Prove the test oracle detects broken behaviour</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 19:28 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Create controlled defective variants on an isolated network only.</p><h4>Steps</h4><ol><li>Disable proof verification, change one reward, accept an expired authority set and alter one hash output in separate mutants.</li><li>Run the corresponding ZKP, INC, FIN and POW tests without telling the runner which mutant is active.</li><li>Confirm the baseline still accepts authorised valid cases.</li></ol><h4>Accept</h4><p>Every deliberately introduced fault is caught by its mapped test; valid controls pass. Any undetected critical mutant blocks acceptance of that test family until the oracle is repaired.</p><h4>Evidence the case requires</h4><p>Mutation catalogue; blinded run results; baseline controls; oracle review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fast-time lane (a8be71a0db962911c)</dd></div><div><dt>Run</dt><dd>200-417c4a57-b2</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>19</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-06" data-case="GOV-06" data-state="NOT RUN"><summary><span class="c-id">GOV-06</span><span class="c-title">Enforce scope and optional-feature discipline</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:36 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Inventory FP32 experiments, receipts/oracles and all retained or excluded mining levers.</p><h4>Steps</h4><ol><li>Mark each capability CORE, CLAIMED-OPTIONAL or EXCLUDED before release testing.</li><li>For excluded code, check binaries, protocol activation and product copy for accidental enablement or implied availability.</li><li>For each claimed option, require the complete associated test set rather than a demonstration.</li></ol><h4>Accept</h4><p>Every core and claimed-option obligation passes. Excluded items are shown as EXCLUDED, never PASS and never counted as achievements. Removing a failed core requirement prevents an all-2.0-pass claim.</p><h4>Evidence the case requires</h4><p>Scope manifest; activation scan; product-copy comparison; exclusions register.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>CI steward (a2ecfa95d3206016c)</dd></div><div><dt>Run</dt><dd>site-gate-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>19</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-07" data-case="GOV-07" data-state="NOT RUN"><summary><span class="c-id">GOV-07</span><span class="c-title">Independent review and finding closure</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Nominate reviewers with declared conflicts and scopes covering cryptography, consensus and hardware.</p><h4>Steps</h4><ol><li>Provide pinned code, raw data, adversarial models and prior failures, including negative results.</li><li>Track each finding to remediation and an independent retest; do not use the author as sole approver.</li><li>Have reviewers state unreviewed surfaces and model limitations in their signed conclusions.</li></ol><h4>Accept</h4><p>No unresolved critical or high-severity finding affects the claimed release. A finite review is described by scope, not as proof of universal security. Independent reproduction and review are both evidenced.</p><h4>Evidence the case requires</h4><p>Signed scoped reports; conflict declarations; finding/retest ledger.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent specialist review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>20</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details><details class="acc-case" id="case-GOV-08" data-case="GOV-08" data-state="NOT RUN"><summary><span class="c-id">GOV-08</span><span class="c-title">Invalidate stale evidence and control public status</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Create a simulated post-test change to a verifier, mining class, dataset and fee rule.</p><h4>Steps</h4><ol><li>Calculate affected test dependencies and invalidate their former PASS statuses.</li><li>Regenerate public status pages from F0 and the evidence register.</li><li>Attempt to publish a rank-one, guaranteed-profit or automatic-chip-death claim without the required evidence.</li></ol><h4>Accept</h4><p>Affected gates return to NOT RUN or BLOCKED. Public claims retain version, limits and date; unsupported claims are withheld. No stale result remains attached to a different release.</p><h4>Evidence the case requires</h4><p>Dependency impact report; regenerated status page; rejected claim examples.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>CI steward (a2ecfa95d3206016c)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>20</dd></div><div><dt>Plan pages</dt><dd>5, 21, 23, 25, 26, 27</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-GPU"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">02</span>GPU</div><div class="acc-suite-t"><h2>Whole-system GPU measurements</h2><p class="acc-sub">Close the pending measurements and evaluate the actual configuration, including costs hidden by kernel-only results.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>GPU lead + three independent operators</dd></div><div><dt>Gate</dt><dd>G1 / G2 <span class="acc-gl"><a href="#gate-G1">G1</a> <a href="#gate-G2">G2</a></span></dd></div><div><dt>Fixtures</dt><dd>F2 retail-hardware cohort; F3 paired benchmark workloads; F9 calibrated evidence</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="GPU: 8 cases: 2 passed under the standard, 0 running with team evidence, 6 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:2" title="2 PASS"></span><span class="seg g-notrun" style="flex-grow:6" title="6 NOT RUN"></span></div><span>8 cases: 2 passed under the standard, 0 running with team evidence, 6 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-GPU-01" data-case="GPU-01" data-state="PASS"><summary><span class="c-id">GPU-01</span><span class="c-title">Cover the declared commodity population</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:08 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze the P02 cohort, supported role matrix and the final v6 configuration.</p><h4>Steps</h4><ol><li>Inventory physical SKU, usable memory, driver, operating system, firmware, cooling and acquisition channel.</li><li>Run mining on every supported cohort cell and proving on every separately advertised prover cell.</li><li>Include lower-memory, used-generation and all advertised vendor cases; retain unsupported results separately.</li></ol><h4>Accept</h4><p>All declared cells are tested, with no after-the-fact removal of weak cards. At least the P02 minimum coverage is met. Mining-only support is never reported as proof-generation support.</p><h4>Evidence the case requires</h4><p>Cohort manifest; compatibility matrix; raw results by SKU and role.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>hash-lane-20261009-batch5</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>21</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-02" data-case="GPU-02" data-state="PASS"><summary><span class="c-id">GPU-02</span><span class="c-title">Reproduce Ember clock-lock savings</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02, P03</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 04:58 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use paired stock and tuned runs on the same board, host, workload and ambient conditions.</p><h4>Steps</h4><ol><li>Warm to stability; randomise stock/tuned order and run P02 repeated sessions.</li><li>Measure accepted work, calibrated wall energy, device telemetry and rejected work.</li><li>Calculate paired energy and rate changes with run-level uncertainty, retaining failed tuning attempts.</li></ol><h4>Accept</h4><p>Tuning preserves correctness and meets approved P03 operating limits. The historical 34-41% saving and under-2% rate-loss statement is reproduced only for qualifying configurations; otherwise that claim is corrected. Existing savings are not counted twice.</p><h4>Evidence the case requires</h4><p>Raw power/time series; paired analysis; tuning settings; claim-by-SKU table.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>hash-lane-20261009-batch4</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>21</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-03" data-case="GPU-03" data-state="NOT RUN"><summary><span class="c-id">GPU-03</span><span class="c-title">Measure the real 64-register GPU cost</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02, P03</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:08 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Build the baseline and window variant with identical dataset, reads and semantic workload.</p><h4>Steps</h4><ol><li>Inspect compiled register allocation, spills, occupancy and memory traffic on each supported backend.</li><li>Measure paired complete-system energy and accepted throughput, including host work.</li><li>Repeat during proving coexistence and expose any memory or scheduling cliff.</li></ol><h4>Accept</h4><p>Any production window meets P03 budgets for every mandatory SKU; no hidden spills or correctness changes. Zero GPU cost is claimed only where measurement supports it within uncertainty. Results feed the redesigned adversary, not an old core estimate.</p><h4>Evidence the case requires</h4><p>Compiler reports; allocation traces; paired energy/rate data; coexistence runs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>hash-lane-20261009-batch5</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>21</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-04" data-case="GPU-04" data-state="NOT RUN"><summary><span class="c-id">GPU-04</span><span class="c-title">Find the memory-clock operating ladder</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P02</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/floor/sm-sparse.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:00 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use safe vendor-supported settings only; record operator permission and original settings.</p><h4>Steps</h4><ol><li>Sweep approved core and memory operating points while holding workload constant.</li><li>Measure error rate, accepted throughput, wall energy and thermal equilibrium.</li><li>Repeat the selected knee after reboot and restore defaults after a failed or interrupted tuning session.</li></ol><h4>Accept</h4><p>Selected profiles are stable, reproducible and not dependent on unsafe clocks. Every accepted hash remains correct; saved settings restore predictably. Tuning failure leaves a working safe configuration.</p><h4>Evidence the case requires</h4><p>Clock ladder; safe bounds; thermal/error logs; reboot and rollback record.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>22</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-05" data-case="GPU-05" data-state="NOT RUN"><summary><span class="c-id">GPU-05</span><span class="c-title">Test dataset fit and support-horizon costs</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P02, P06</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 04:58 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Test 5.5, 8.5 and 11.5 GiB only as source-proposed candidates; F0 determines activated sizes.</p><h4>Steps</h4><ol><li>Measure allocation plus driver, display, prover and OS headroom on the 8 GB and other cohort tiers.</li><li>Run near-full-memory, fragmentation, restart and next-epoch construction scenarios.</li><li>Compare time-sharing/eviction with concurrent mining/proving, including reload cost.</li></ol><h4>Accept</h4><p>Every advertised combination completes without OOM or silent corruption. Unsupported future sizes are identified before activation. GPU exclusions and lost proving capacity appear in ECO evaluation; retirement of a tier is not a success metric.</p><h4>Evidence the case requires</h4><p>Memory budget per SKU; OOM traces; support horizon; concurrency cost table.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>hash-lane-20261009-batch4</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>22</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-06" data-case="GPU-06" data-state="NOT RUN"><summary><span class="c-id">GPU-06</span><span class="c-title">Measure accepted work under ordinary connectivity</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the same hardware against clean, delayed, lossy and intermittent links in F4.</p><h4>Steps</h4><ol><li>Measure kernel rate and accepted work separately under home and datacentre link profiles.</li><li>Include reconnects, template changes, expired submissions and pool failover.</li><li>Attribute loss to network, local software, validation and protocol causes.</li></ol><h4>Accept</h4><p>Results use accepted work, never kernel rate alone. Ordinary-link incremental rejection stays within P10; all losses remain priced in ECO. Unreachable links may pause but must not claim paid work.</p><h4>Evidence the case requires</h4><p>Per-submission ledger; network trace; rejection reasons; accepted-work comparison.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>22</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-07" data-case="GPU-07" data-state="NOT RUN"><summary><span class="c-id">GPU-07</span><span class="c-title">Survive sustained thermal and power operation</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P02, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/floor/sm-sparse.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:00 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Run the selected profile on actual reference machines for the P02 soak period.</p><h4>Steps</h4><ol><li>Track wall power, temperatures, clocks, memory and accepted work continuously.</li><li>Inject safe power interruptions, process restarts and normal competing desktop load.</li><li>Check restored settings and compare late-run efficiency with the first stable period.</li></ol><h4>Accept</h4><p>No invalid work or unsafe persistent settings; P02/P10 stability limits hold. Thermal throttling, crashes and recovery time remain in throughput and energy denominators. A crash-free short benchmark cannot substitute for the soak.</p><h4>Evidence the case requires</h4><p>Seven-day time series; crash reports; settings-restoration checks; drift analysis.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>23</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details><details class="acc-case" id="case-GPU-08" data-case="GPU-08" data-state="NOT RUN"><summary><span class="c-id">GPU-08</span><span class="c-title">Reproduce the full baseline independently</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Three unaffiliated operators receive F0, F2 and F3, including the final miner/prover build.</p><h4>Steps</h4><ol><li>Repeat identical-SKU paired runs with documented meter calibration and environment differences.</li><li>Recompute joules and total cost per accepted work from the shared raw schema.</li><li>Investigate divergence before accepting a pooled headline or uncertainty band.</li></ol><h4>Accept</h4><p>Reproductions meet P02 tolerance and exact correctness. No unexplained divergence or selectively missing low-end cell remains. Report manufactured GPU measurements separately from modelled specialist estimates.</p><h4>Evidence the case requires</h4><p>Three signed reproduction packs; reconciliation report; final baseline table.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent reproduction</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>23</dd></div><div><dt>Plan pages</dt><dd>6, 7, 8, 14, 18, 23</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-POW"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">03</span>POW</div><div class="acc-suite-t"><h2>Proof-of-work correctness and coupling</h2><p class="acc-sub">Find semantic disagreements and structural shortcuts before treating a harder-looking program as a stronger defence.</p></div><div class="acc-suite-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Cryptography + GPU lead</dd></div><div><dt>Gate</dt><dd>G2 / technical readiness <span class="acc-gl"><a href="#gate-G2">G2</a></span></dd></div><div><dt>Fixtures</dt><dd>F0 rule set; F3 independent CPU/GPU oracles; F5 mutation corpus</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="POW: 8 cases: 0 passed under the standard, 0 running with team evidence, 2 failed, 6 not run, 0 deferred"><span class="seg g-fail" style="flex-grow:2" title="2 FAIL"></span><span class="seg g-notrun" style="flex-grow:6" title="6 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 2 failed, 6 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-POW-01" data-case="POW-01" data-state="NOT RUN"><summary><span class="c-id">POW-01</span><span class="c-title">Match independent execution across every backend</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 11:15 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Implement an independently written reference evaluator, not a wrapper around the production GPU path.</p><h4>Steps</h4><ol><li>Execute the P01 corpus across every family, boundary seed and supported backend.</li><li>Exercise zero, maximum, sign, shift, rotate, overflow and unaligned-address cases allowed by the spec.</li><li>Minimise every mismatch and rerun it on clean builds.</li></ol><h4>Accept</h4><p>Bit-for-bit agreement for all valid cases and identical rejection for invalid cases. One unexplained mismatch is a blocker. Large sample counts are evidence of testing, not proof that unseen disagreements cannot exist.</p><h4>Evidence the case requires</h4><p>Reference implementation review; seeds/vectors; backend matrix; mismatch archive.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>mhpow-b3-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>24</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-02" data-case="POW-02" data-state="NOT RUN"><summary><span class="c-id">POW-02</span><span class="c-title">Validate generated programs and index folding</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 11:20 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the frozen grammar, opcode semantics and index-fold rule; include boundary and malformed programs.</p><h4>Steps</h4><ol><li>Enumerate small constrained programs and fuzz the full generator at P01 depth.</li><li>Check bounds, valid dependencies, address distribution and forbidden encodings.</li><li>Compare source-level operations with optimised compiled code for removed or altered work.</li></ol><h4>Accept</h4><p>No accepted program violates semantics, termination or memory bounds. Distribution claims have predeclared tests and effect-size limits; passing randomness checks is not treated as a cryptographic proof.</p><h4>Evidence the case requires</h4><p>Generator/fuzzer logs; reduced counterexamples; disassembly comparison; index tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>1p5x-int8-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>24</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-03" data-case="POW-03" data-state="FAIL"><summary><span class="c-id">POW-03</span><span class="c-title">Test whether live state is unavoidable</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P03, P04</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:25 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Take the 64-register candidate and the cheapest independently proposed storage organisations.</p><h4>Steps</h4><ol><li>Trace value liveness across dependent reads and final output, distinguishing distinct information from duplicated values.</li><li>Try banking, compression, recomputation, fewer ports and time-multiplexed contexts.</li><li>Quantify the best complete-system cost/throughput trade-off rather than the reference register count.</li></ol><h4>Accept</h4><p>Production selection is supported by measured or physically modelled penalties after these alternatives. G2 requires the P03 improvement; an attractive source-level register count alone does not pass.</p><h4>Evidence the case requires</h4><p>Liveness traces; alternative implementations; Pareto table; reviewer analysis.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Experiment + independent hardware review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261009-placed-32lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>24</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-04" data-case="POW-04" data-state="NOT RUN"><summary><span class="c-id">POW-04</span><span class="c-title">Evaluate connected-resource restructuring</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P03, P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:43 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use a candidate initially matched to baseline instruction count, read count and dataset size.</p><h4>Steps</h4><ol><li>Connect state, addresses, arithmetic and lane communication according to the written hypothesis.</li><li>Measure GPU cost and allow the specialist reviewer to redesign the entire core.</li><li>Repeat on held-out program seeds and compare the worst supported adversary, not only the original design.</li></ol><h4>Accept</h4><p>The selected upgrade meets P03 and improves the adversarial result outside declared uncertainty. A negative experiment remains a negative outcome; adopting a different design requires a new frozen comparison.</p><h4>Evidence the case requires</h4><p>Matched workloads; GPU runs; redesigned core estimates; held-out results.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Controlled experiment</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>1p5x-x1-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>25</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-05" data-case="POW-05" data-state="NOT RUN"><summary><span class="c-id">POW-05</span><span class="c-title">Prevent amortised cheap winning attempts</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 11:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Prepare valid templates, nonces, intermediate-state captures and independent acceptance checks.</p><h4>Steps</h4><ol><li>Vary nonce, payout identity, transactions, roots and other committed fields after expensive work.</li><li>Try replay, precomputation, shared prefixes, partial evaluation and many cheap suffix candidates.</li><li>Price any valid strategy against fresh evaluation; independently review all bindings.</li></ol><h4>Accept</h4><p>Invalid modifications are rejected. Any valid cost-saving strategy is incorporated into ADV and must still meet P04/ECO gates. No unresolved shortcut is hidden behind passing reference vectors.</p><h4>Evidence the case requires</h4><p>Attack implementations; valid/invalid controls; work-cost analysis; binding review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>pool design seat (a3832b1c3b274b310)</dd></div><div><dt>Run</dt><dd>mhpow-b2-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>25</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-06" data-case="POW-06" data-state="NOT RUN"><summary><span class="c-id">POW-06</span><span class="c-title">Bound verifier work and malformed-input cost</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 11:15 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use ordinary CPU validators with a manifest-defined resource budget and untrusted submissions.</p><h4>Steps</h4><ol><li>Submit shortest/longest programs, malformed encodings and adversarial memory references.</li><li>Measure verification time, peak memory and work amplification across valid and invalid inputs.</li><li>Sustain the approved hostile request rate while ordinary valid traffic continues.</li></ol><h4>Accept</h4><p>All semantics remain correct and P09 resource budgets hold. Invalid traffic cannot cause unbounded allocation, crashes or disproportionate free work. Rate limits must not replace consensus validation.</p><h4>Evidence the case requires</h4><p>CPU profiles; adversarial corpus; allocation traces; valid-traffic latency.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>mhpow-b3-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>25</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-07" data-case="POW-07" data-state="FAIL"><summary><span class="c-id">POW-07</span><span class="c-title">Constrain any mixed-resource or FP32 branch</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00, P01, P03</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:00 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>If this branch is excluded, verify that it is unreachable and not claimed; if included, use a separate frozen candidate.</p><h4>Steps</h4><ol><li>Specify exact rounding, fusion, special values and backend behaviour before compiling.</li><li>Differentially test all supported architectures and allow numerical-domain simplification in the specialist model.</li><li>Include verifier cost and candidate energy in P03/P04, not just arithmetic-unit area.</li></ol><h4>Accept</h4><p>Included branches achieve exact agreed semantics and all hardware budgets. An excluded branch earns no performance credit. No approximate operation or unspecified compiler choice enters consensus.</p><h4>Evidence the case requires</h4><p>Scope decision; semantic specification; vectors; simplified datapath model.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Conditional implementation test</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>kills-20261008</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>26</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details><details class="acc-case" id="case-POW-08" data-case="POW-08" data-state="NOT RUN"><summary><span class="c-id">POW-08</span><span class="c-title">Keep rejected mechanisms out of the shipped claim</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P00, P03</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:08 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Inventory long programs, select trees, SM gating, wider reads, sealed classes, random epoch lengths, per-tier scoring and VRF draws.</p><h4>Steps</h4><ol><li>Retain their historic negative tests and realistic SRAM instruction-memory control.</li><li>Inspect the release for reintroduction through renamed settings or hidden paths.</li><li>Require a new written hypothesis and complete adversarial retest for any proposed return.</li></ol><h4>Accept</h4><p>Excluded levers remain excluded unless separately approved and retested. Flip-flop instruction-memory area is never presented as the cost of a realistic SRAM implementation.</p><h4>Evidence the case requires</h4><p>Decision register; binary/config scan; negative-control results.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>hash-lane-20261009-batch5</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>26</dd></div><div><dt>Plan pages</dt><dd>7, 9, 10, 23</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-ADV"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">04</span>ADV</div><div class="acc-suite-t"><h2>Programmable specialist adversaries</h2><p class="acc-sub">Give the opponent permission to adapt, share resources and remain operational; test cost rather than imagined chip death.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Independent hardware team</dd></div><div><dt>Gate</dt><dd>G3 <span class="acc-gl"><a href="#gate-G3">G3</a></span></dd></div><div><dt>Fixtures</dt><dd>F2 reference GPUs; F6 RTL/physical models; all published families</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="ADV: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-ADV-01" data-case="ADV-01" data-state="NOT RUN"><summary><span class="c-id">ADV-01</span><span class="c-title">Build a multi-family programmable opponent</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P01, P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/multi-family-adversary.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:25 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide the complete published family bank and future known parameter schedule to the reviewer.</p><h4>Steps</h4><ol><li>Design one programmable architecture that supports all retained families, including firmware and emulation paths.</li><li>Optimise clocks, lanes, ports and pipelines without requiring a graphics-card layout.</li><li>Verify its outputs against POW vectors before measuring any advantage.</li></ol><h4>Accept</h4><p>At least the P04 design diversity is evaluated; every estimated competitive design is functionally validated. Inability of one narrow design to adapt is not evidence that all chips expire.</p><h4>Evidence the case requires</h4><p>Architecture reports; functional simulations; adaptation matrix; reviewer signature.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent hardware study</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261009-placed-32lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>27</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-02" data-case="ADV-02" data-state="NOT RUN"><summary><span class="c-id">ADV-02</span><span class="c-title">Price shared, reduced and reconstructed memory</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:44 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Allow multiple engines to share a dataset and to store selected fractions rather than a complete per-engine copy.</p><h4>Steps</h4><ol><li>Sweep sharing factors, memory fractions, caches and recomputation depth across many simultaneous hashes.</li><li>Include construction/update amortisation, bandwidth contention and retained state.</li><li>Take the most favourable feasible point for the specialist into the complete-board model.</li></ol><h4>Accept</h4><p>No omitted feasible trade-off materially lowers the accepted cost estimate. Any winning alternative is included in P04 and ECO; capacity alone is not accepted as an energy bound.</p><h4>Evidence the case requires</h4><p>Sweep definitions; energy/bandwidth data; best-feasible envelope; excluded-design reasons.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Model + adversarial implementation</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261009-x7</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>27</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-03" data-case="ADV-03" data-state="NOT RUN"><summary><span class="c-id">ADV-03</span><span class="c-title">Attack with data-local and hybrid execution</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/multi-family-adversary.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:25 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Permit distributed memories, state migration and companion CPU/GPU/FPGA components.</p><h4>Steps</h4><ol><li>Compare moving computation, intermediate state or fetched data to each read location.</li><li>Test specialised mining alongside outsourced proof generation rather than assuming one physical GPU does both.</li><li>Include interconnect, host, synchronisation, idle and conversion costs.</li></ol><h4>Accept</h4><p>The cheapest feasible combined system is included in the adversarial envelope and economic model. A worker identity or account is never treated as proof of a single physical device.</p><h4>Evidence the case requires</h4><p>Hybrid architecture diagrams; traffic traces; system cost and energy ledger.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent system modelling</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261009-placed-32lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>27</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-04" data-case="ADV-04" data-state="NOT RUN"><summary><span class="c-id">ADV-04</span><span class="c-title">Measure profitable selective participation</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/multi-family-adversary.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:41 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use all declared families plus held-out generated programs and the protocol difficulty rule.</p><h4>Steps</h4><ol><li>Identify favourable execution paths and add cheap fallbacks for other periods.</li><li>Simulate entry/exit around profitable periods, including idle time, compilation and re-entry costs.</li><li>Evaluate revenue and costs across the full schedule, not just average program energy.</li></ol><h4>Accept</h4><p>Intermittent specialists meet P04/ECO limits when evaluated on full-period economics. A weak tail cannot be concealed by a favourable mean; known valid shortcuts must be priced.</p><h4>Evidence the case requires</h4><p>Per-program advantage distribution; policy simulator; full-period returns.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261008-placed-8lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>28</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-05" data-case="ADV-05" data-state="NOT RUN"><summary><span class="c-id">ADV-05</span><span class="c-title">Validate physical and complete-board costs</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:44 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use feasible process/library assumptions and documented component boundaries; no fabricated foundry access.</p><h4>Steps</h4><ol><li>Model SRAM macros, ports, wiring, clocking, memory PHYs, external memory, host and power conversion.</li><li>Run place-and-route where available; mark unmodelled items as uncertainty rather than zero.</li><li>Compare against a calibrated existing hardware block or equivalent validation case.</li></ol><h4>Accept</h4><p>No decision-critical cost is omitted. Physically unvalidated or proprietary estimates are labelled and independently bounded; synthesis alone cannot earn a manufactured-chip claim.</p><h4>Evidence the case requires</h4><p>Netlist/physical reports; macro assumptions; bill of materials; model calibration.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent physical-design review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>k lane (a3c9601a6d4686fe1)</dd></div><div><dt>Run</dt><dd>adversary-20261009-x7</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>28</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-06" data-case="ADV-06" data-state="NOT RUN"><summary><span class="c-id">ADV-06</span><span class="c-title">Separate process advantage from specialisation</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/floor/shadow-k.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:09 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Evaluate same-node, one-node-ahead and two-node-ahead scenarios with explicit technology definitions.</p><h4>Steps</h4><ol><li>Use independently justified process factors, voltages, memory and packaging assumptions for each design.</li><li>Allow reusable IP and modular revisions; credit GPU improvement consistently.</li><li>Evaluate measurement confidence and model-parameter sensitivity separately.</li></ol><h4>Accept</h4><p>P04 primary limits hold for all competitive-reference cells; two-node futures are reported and pass the predeclared economic stress envelope. A model range is never labelled a statistical confidence interval without justification.</p><h4>Evidence the case requires</h4><p>Node-specific reports; factor provenance; uncertainty and sensitivity tables.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>k lane (a3c9601a6d4686fe1)</dd></div><div><dt>Run</dt><dd>floor-k-20261008-rows-repeat</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>28</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-07" data-case="ADV-07" data-state="NOT RUN"><summary><span class="c-id">ADV-07</span><span class="c-title">Evaluate lifetime without forced obsolescence</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:25 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Assume multi-year productive survival and known schedule support before testing optional retirement penalties.</p><h4>Steps</h4><ol><li>Price firmware, emulation, memory expansion, companion hardware and incremental redesign.</li><li>Include 1-, 3- and 5-year productive lifetimes plus idle/resale possibilities.</li><li>Grant a retirement credit only if all feasible cheaper adaptations lose competitiveness.</li></ol><h4>Accept</h4><p>The primary case does not require chip death or a fresh full development bill per family. Every retirement credit has a documented adaptation comparison; incompatible and unprofitable are reported separately.</p><h4>Evidence the case requires</h4><p>Lifetime/adaptation ledger; revision costs; feasible-alternative analysis.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261009-placed-32lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>29</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details><details class="acc-case" id="case-ADV-08" data-case="ADV-08" data-state="NOT RUN"><summary><span class="c-id">ADV-08</span><span class="c-title">Independently challenge the best-cost envelope</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:44 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Publish the non-sensitive model and negative results; commission an unaffiliated second hardware reviewer.</p><h4>Steps</h4><ol><li>Reward cheaper valid designs and reproduced shortcuts, not confirmation of the preferred number.</li><li>Re-run P04 with the strongest submitted feasible design, including a low-cost funded-development case.</li><li>Record unresolved modelling disagreements and future technology exclusions.</li></ol><h4>Accept</h4><p>Both reviews accept the scoped envelope or all material disagreements are resolved transparently. Passing supports only evaluated designs and conditions, never a universal bound on all future silicon.</p><h4>Evidence the case requires</h4><p>Two review reports; challenge log; final envelope; unresolved-limit statement.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent challenge/review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>adversary lane (a1a9876a88f5a72fc)</dd></div><div><dt>Run</dt><dd>adversary-20261009-x7</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>29</dd></div><div><dt>Plan pages</dt><dd>8, 10, 12, 22, 23</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-ROT"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">05</span>ROT</div><div class="acc-suite-t"><h2>Epochs, seeds and memory transitions</h2><p class="acc-sub">Transitions must agree across nodes and remain usable during failures; crossing a boundary is not a chip-retirement test.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Consensus + GPU leads</dd></div><div><dt>Gate</dt><dd>G5 / G2 <span class="acc-gl"><a href="#gate-G5">G5</a> <a href="#gate-G2">G2</a></span></dd></div><div><dt>Fixtures</dt><dd>F0 activation rules; F4 fault network; F5 historical and boundary vectors</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="ROT: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-ROT-01" data-case="ROT-01" data-state="NOT RUN"><summary><span class="c-id">ROT-01</span><span class="c-title">Agree across every hourly boundary</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/review-2026-10-08-b/f10/emu-test.log" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:07 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use real nodes, CPU/GPU miners and independent clocks around successive program boundaries.</p><h4>Steps</h4><ol><li>Submit valid work immediately before, at and after the activation boundary under clock skew and delayed delivery.</li><li>Restart nodes from both sides and replay the same headers.</li><li>Compare selected seed, program, validity, rewards and local wall-clock dependence.</li></ol><h4>Accept</h4><p>All honest nodes derive identical consensus outcomes from the frozen rule. Late work is handled exactly as specified; no wall-clock ambiguity or cross-backend split occurs.</p><h4>Evidence the case requires</h4><p>Boundary vectors; node/miner traces; acceptance and reward matrix.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fast-time lane (a8be71a0db962911c)</dd></div><div><dt>Run</dt><dd>f10-worker-20261008</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>30</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-02" data-case="ROT-02" data-state="NOT RUN"><summary><span class="c-id">ROT-02</span><span class="c-title">Cross weekly and family boundaries together</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P03, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the retained schedule in F0, including coincident program, parameter and family changes.</p><h4>Steps</h4><ol><li>Run every known family transition and all coincident-boundary combinations on production code.</li><li>Interrupt downloads, compilation and restart during activation; include mixed old/new clients.</li><li>Repeat selected cases under real elapsed time and the remainder under disclosed accelerated time.</li></ol><h4>Accept</h4><p>Deterministic activation, documented old-client behaviour and no unsafe fallback. Compilation/setup costs satisfy P03; accelerated runs are not reported as years of operating history.</p><h4>Evidence the case requires</h4><p>Transition matrix; code-path evidence; compile timing; old-client logs.</p></blockquote><h4>Evidence record of the run</h4><dl class="acc-meta acc-rec"><div><dt>What was run</dt><dd>the class v6 object crossing at its floor on 617cb441</dd></div><div><dt>Run by</dt><dd>fast-time lane (a8be71a0db962911c)</dd></div><div><dt>Under the standard</dt><dd>no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one</dd></div><div><dt>Pass or fail today</dt><dd>not judged under the standard yet</dd></div></dl><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fast-time lane (a8be71a0db962911c)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>30</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-03" data-case="ROT-03" data-state="NOT RUN"><summary><span class="c-id">ROT-03</span><span class="c-title">Test miner-voted bring-forward governance</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00, P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze eligibility, threshold, windows and activation semantics before testing; do not invent a no-veto rule.</p><h4>Steps</h4><ol><li>Attempt threshold-minus-one, threshold, conflicting proposals, duplicate votes and coalition withholding.</li><li>Partition voters, restore them and test vote-key substitution through pools.</li><li>Verify adoption and refusal behaviour of already running nodes.</li></ol><h4>Accept</h4><p>The actual mechanism enforces F0, with authenticated voting and no conflicting activation. Any coalition capable of blocking or manipulating changes is disclosed; labels such as no veto do not override arithmetic.</p><h4>Evidence the case requires</h4><p>Executable governance model; signed-vote corpus; coalition/partition results.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>30</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-04" data-case="ROT-04" data-state="NOT RUN"><summary><span class="c-id">ROT-04</span><span class="c-title">Resist seed selection and faster evaluators</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00, P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide the specified seed pipeline and delay proof implementation plus independently parameterised fast-adversary models.</p><h4>Steps</h4><ol><li>Try withholding candidate seeds, grinding alternatives, replaying delay proofs and biased checkpoint selection.</li><li>Vary adversarial speed advantage and outage duration; trace influence on program choice.</li><li>Validate inputs, parameters and proofs against independent vectors.</li></ol><h4>Accept</h4><p>No invalid seed or proof is accepted; selection advantage stays within the approved threat-model bound. Missing bounds block this gate. A delay mechanism is not credited as generic ASIC resistance.</p><h4>Evidence the case requires</h4><p>Seed/grinding simulations; speed sensitivity; proof vectors; threat-model signoff.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>31</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-05" data-case="ROT-05" data-state="NOT RUN"><summary><span class="c-id">ROT-05</span><span class="c-title">Continue or pause correctly when finality stops</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Stop checkpoint signing while mining continues, then cross seed and family boundaries.</p><h4>Steps</h4><ol><li>Remove the required signing weight and observe the documented fallback or safe pause.</li><li>Prevent access to any founder seed service; restart from persisted state.</li><li>Restore the stated fault assumptions and verify deterministic recovery.</li></ol><h4>Accept</h4><p>Mining/seed behaviour matches F0 without manufacturing certificates or reinterpreting finality. Safety holds during the outage; liveness is required only after its stated assumptions return.</p><h4>Evidence the case requires</h4><p>Fault timeline; seed/certificate history; node-state comparison; recovery log.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>31</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-06" data-case="ROT-06" data-state="NOT RUN"><summary><span class="c-id">ROT-06</span><span class="c-title">Activate datasets without hidden exclusions</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P06</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze memory sizes, support horizon and sync/update procedure; test all advertised roles.</p><h4>Steps</h4><ol><li>Construct the next dataset while current work remains active; test slow disks, low free memory and interruption.</li><li>Try stale-state/dataset submissions and maliciously expensive state growth where coupling exists.</li><li>Measure data transfer, restart and excluded-card costs before approving progression.</li></ol><h4>Accept</h4><p>No invalid stale work is accepted, no supported card silently fails, and P06 is met. Hardware retirement and sync burden are included in the economic decision, not treated as automatic chip protection.</p><h4>Evidence the case requires</h4><p>Dataset hashes; memory/update traces; stale-work tests; exclusion decision.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>31</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-07" data-case="ROT-07" data-state="NOT RUN"><summary><span class="c-id">ROT-07</span><span class="c-title">Ablate redundant rotation layers</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P03, P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/family-gate.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:49 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use matched baseline and ablated variants in the lab; do not change a running public network.</p><h4>Steps</h4><ol><li>Remove each weekly/family component independently and measure adversarial cost, GPU setup and verifier complexity.</li><li>Include favourable-period specialists and all retained known families.</li><li>Keep a layer only with a distinct, independently supported benefit or a documented non-resistance purpose.</li></ol><h4>Accept</h4><p>Every retained layer has explicit justification and full boundary coverage. Redundant complexity is removed or its rationale recorded; the security model does not double-count the same versatility cost.</p><h4>Evidence the case requires</h4><p>Ablation report; decision log; complexity/cost comparison.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>lane D family gate (a07a99a3788566af2)</dd></div><div><dt>Run</dt><dd>family-gate-20261008c</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>32</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details><details class="acc-case" id="case-ROT-08" data-case="ROT-08" data-state="NOT RUN"><summary><span class="c-id">ROT-08</span><span class="c-title">Pass the no-new-rules counterfactual</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/family-gate.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:49 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze the complete published rule bank and known schedule for the five-year evaluation.</p><h4>Steps</h4><ol><li>Allow a programmable adversary to know and survive all planned changes.</li><li>Remove assumed future emergency instructions and manual retirement actions from the model.</li><li>Run the required ECO scenarios and link them to independent network-transition tests.</li></ol><h4>Accept</h4><p>Competitiveness survives the approved envelope without future rescue assumptions. Any result that needs unannounced changes fails this claim; ordinary bug maintenance is distinguished from anti-chip intervention.</p><h4>Evidence the case requires</h4><p>Frozen-rule model; scenario results; excluded-rescue audit; G5 evidence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Run</dt><dd>family-gate-20261008c</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>32</dd></div><div><dt>Plan pages</dt><dd>7, 11, 19, 21</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-ECO"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">06</span>ECO</div><div class="acc-suite-t"><h2>Five-year coexistence economics</h2><p class="acc-sub">Test the world after specialised hardware exists, including new entrants and an already-funded competitor.</p></div><div class="acc-suite-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Economics lead + independent reviewer</dd></div><div><dt>Gate</dt><dd>G4 <span class="acc-gl"><a href="#gate-G4">G4</a></span></dd></div><div><dt>Fixtures</dt><dd>F6 adversarial costs; F7 scenario model; F2 operator costs</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="ECO: 8 cases: 0 passed under the standard, 0 running with team evidence, 1 failed, 7 not run, 0 deferred"><span class="seg g-fail" style="flex-grow:1" title="1 FAIL"></span><span class="seg g-notrun" style="flex-grow:7" title="7 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 1 failed, 7 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-ECO-01" data-case="ECO-01" data-state="NOT RUN"><summary><span class="c-id">ECO-01</span><span class="c-title">Reconcile complete cost per accepted work</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/sim/economy/coexist/README.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:07 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use benchmark outputs, current-source cost inputs recorded at execution time and separate reference scenarios.</p><h4>Steps</h4><ol><li>Calculate hardware annualisation, electricity, host, cooling/hosting, failures, fees, downtime and residual value.</li><li>Use actual accepted work and independently verify units and period conversions.</li><li>Cross-check formulas using hand-worked fixtures, edge cases and a second implementation.</li></ol><h4>Accept</h4><p>All material costs and rejected-work effects appear once; model totals reconcile to raw inputs. No GPU upgrade is free, development cost is not double-counted, and burn is not mislabelled operator income.</p><h4>Evidence the case requires</h4><p>Versioned model; unit fixtures; independent reconciliation; input sources.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco05-20261008-02</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>33</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-02" data-case="ECO-02" data-state="NOT RUN"><summary><span class="c-id">ECO-02</span><span class="c-title">Separate existing-owner and new-entrant viability</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use both installed hardware and purchasable replacement hardware in every mandatory cohort.</p><h4>Steps</h4><ol><li>Evaluate marginal operation separately from recovery of a new purchase.</li><li>Stress resale at zero, hardware failures, financing and replacement cycles.</li><li>Report break-even power price and total cost relative to the strongest feasible specialist.</li></ol><h4>Accept</h4><p>P12 competitiveness conditions hold for the predeclared cohorts in required sustainable worlds. Existing-owner profitability cannot substitute for viable new entry; cards outside the envelope remain visible.</p><h4>Evidence the case requires</h4><p>Owner/entrant curves; price-date records; break-even tables; cohort outcomes.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>33</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-03" data-case="ECO-03" data-state="NOT RUN"><summary><span class="c-id">ECO-03</span><span class="c-title">Let the specialist keep its sunk development</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use three development cases: fully funded elsewhere, source-range low and source-range high.</p><h4>Steps</h4><ol><li>Evaluate private mining, public hardware sales and a hybrid business model.</li><li>Allow shared IP, incremental revisions, multi-year survival and resale where justified.</li><li>Re-evaluate GPU entry after the specialist fleet is already installed.</li></ol><h4>Accept</h4><p>The coexistence claim does not depend on recovering the original chip research bill. Required P12 cases meet the approved envelope even at zero incremental development cost; failures cannot be hidden by the $23M/$340M source thresholds.</p><h4>Evidence the case requires</h4><p>Business-model variants; sunk-cost case; full cash-flow and adaptation records.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>33</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-04" data-case="ECO-04" data-state="NOT RUN"><summary><span class="c-id">ECO-04</span><span class="c-title">Model entry, exit and difficulty response</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use independently reviewed dynamic operator policies, not fixed market shares.</p><h4>Steps</h4><ol><li>Let agents buy, sell, switch off, re-enter and choose tasks based on declared costs and expected income.</li><li>Apply the actual difficulty/reward rules and test optimistic and adversarial liquidity/capital availability.</li><li>Compare equilibrium and transient outcomes across independent starting conditions.</li></ol><h4>Accept</h4><p>Mandatory worlds satisfy P12 without an imposed GPU share or artificial specialist capacity limit. Concentration, oscillations and excluded regions are reported; model behaviour matches unit and conservation checks.</p><h4>Evidence the case requires</h4><p>Agent policies; sensitivity seeds; market-share paths; independent model review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>34</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-05" data-case="ECO-05" data-state="FAIL"><summary><span class="c-id">ECO-05</span><span class="c-title">Stress success, contraction and cheap electricity</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/eco-05-results.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:07 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze mandatory scenarios before results: revenue bands, tariff range, lifetimes and demand states.</p><h4>Steps</h4><ol><li>Run the P12 factorial grid plus adversarial combinations selected by the independent reviewer.</li><li>Test a large successful network as well as weak-revenue and heterogeneous-tariff cases.</li><li>Distinguish feasible sustained-entry worlds from collapse scenarios with no rational profitable operator.</li></ol><h4>Accept</h4><p>No small-network or token-appreciation assumption props up the primary claim. Required viable worlds pass the envelope; collapse worlds show honest contraction and safety, not fabricated profits. Failure regions are explicit.</p><h4>Evidence the case requires</h4><p>Scenario register; full result cube; boundary plots; failed-world explanations.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco05-20261008-02</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>34</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-06" data-case="ECO-06" data-state="NOT RUN"><summary><span class="c-id">ECO-06</span><span class="c-title">Fund security and proving as issuance falls</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the frozen supply, halving, fee, burn and reward rules rather than source prose assumptions.</p><h4>Steps</h4><ol><li>Reconcile revenue reaching miners, internal provers, developers and burns over the full horizon.</li><li>Test flat/declining fees and no external proving income; separately introduce external demand.</li><li>Calculate capacity and security-provider coverage after each reward transition.</li></ol><h4>Accept</h4><p>Recurring compensation is explicit and internally consistent; mandatory sustainable scenarios meet P12. Burned amounts are never counted as payments, and external operator income is not assumed to fund internal work automatically.</p><h4>Evidence the case requires</h4><p>Issuance/fee ledger; scenario cash flows; funding-shortfall report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>34</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-07" data-case="ECO-07" data-state="NOT RUN"><summary><span class="c-id">ECO-07</span><span class="c-title">Price memory growth and honest-card displacement</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P06, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use GPU-05 and ROT-06 costs with the cheapest specialist adaptation.</p><h4>Steps</h4><ol><li>For each dataset increment, compare specialist cost increases with excluded cards and lost proving capacity.</li><li>Include ordinary-owner replacement, resale and reloading expenses.</li><li>Run alternate bounded schedules without assigning automatic chip death.</li></ol><h4>Accept</h4><p>The retained schedule meets P06/P12 and has an evidence-backed net competitiveness benefit. A schedule that mainly harms accessible GPUs fails; excluded tiers and mitigations are documented before activation.</p><h4>Evidence the case requires</h4><p>Per-step cost/retention table; alternative schedules; approval record.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>35</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-ECO-08" data-case="ECO-08" data-state="NOT RUN"><summary><span class="c-id">ECO-08</span><span class="c-title">Reproduce and adversarially audit the model</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/sim/economy/coexist/README.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:07 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Give an independent economist or qualified analyst the code, inputs and frozen success criteria.</p><h4>Steps</h4><ol><li>Recalculate required worlds and perturb favourable assumptions against the team.</li><li>Check dependence on discounts, utilisation, capital limits, artificial prices and future upgrades.</li><li>Publish the sensitivity range and state which conclusions are conditional.</li></ol><h4>Accept</h4><p>Material results reproduce, required scenarios pass and no unacknowledged assumption dominates the claim. The model supports a bounded coexistence conclusion, not a percentage probability that no chip will appear.</p><h4>Evidence the case requires</h4><p>Independent report; rerun outputs; model limitations; approved claim envelope.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent economic review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco05-20261008-02</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>35</dd></div><div><dt>Plan pages</dt><dd>8, 13, 18, 24, 26</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-EVM"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">07</span>EVM</div><div class="acc-suite-t"><h2>Execution and developer compatibility</h2><p class="acc-sub">Keep familiar applications while making every difference and metering rule explicit and reproducible.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Execution lead + independent implementer</dd></div><div><dt>Gate</dt><dd>Technical readiness</dd></div><div><dt>Fixtures</dt><dd>F0 execution-fork semantics; F5 transactions/contracts; F4 multi-node network</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="EVM: 8 cases: 1 passed under the standard, 0 running with team evidence, 7 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:1" title="1 PASS"></span><span class="seg g-notrun" style="flex-grow:7" title="7 NOT RUN"></span></div><span>8 cases: 1 passed under the standard, 0 running with team evidence, 7 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-EVM-01" data-case="EVM-01" data-state="NOT RUN"><summary><span class="c-id">EVM-01</span><span class="c-title">Match the selected EVM semantics</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/build/compatibility.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Pin the intended execution fork, revm version and all Igneum deviations in F0.</p><h4>Steps</h4><ol><li>Run the applicable upstream execution/state fixtures plus independently written deviation tests.</li><li>Execute identical blocks on multiple nodes and compare roots, receipts, logs, gas and failure outcomes.</li><li>Minimise mismatches and distinguish intended differences from implementation defects.</li></ol><h4>Accept</h4><p>All applicable vectors match; every deviation has a documented test and developer consequence. No claim of universal Ethereum equivalence or Ethereum settlement security is inferred.</p><h4>Evidence the case requires</h4><p>Fixture/version inventory; root/receipt diffs; deviation matrix.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>36</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-02" data-case="EVM-02" data-state="NOT RUN"><summary><span class="c-id">EVM-02</span><span class="c-title">Preserve transaction binding and replay protection</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use signed transfers, contract calls and deployment transactions with boundary field values.</p><h4>Steps</h4><ol><li>Alter chain identity, nonce, signature, fee caps and recipient after signing.</li><li>Replay across nodes, forks and distinct test networks; resubmit around reorganisation.</li><li>Check mempool admission and final consensus execution independently.</li></ol><h4>Accept</h4><p>Unauthorised, wrong-network or duplicate spends are rejected according to F0. Valid replacements follow the declared rule; mempool filtering alone is not evidence of consensus enforcement.</p><h4>Evidence the case requires</h4><p>Signed corpus; admission/execution outcomes; account-state reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>36</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-03" data-case="EVM-03" data-state="NOT RUN"><summary><span class="c-id">EVM-03</span><span class="c-title">Test two-dimensional fees and proving limits</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/compat/results.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:13 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze fee dimensions, estimator rules, abort behaviour and refund policy.</p><h4>Steps</h4><ol><li>Run workloads near and beyond execution and proving budgets, including state-heavy pathological cases.</li><li>Compare estimated fees with charged fees and validate rollback/receipt status on abort.</li><li>Mutate a block producer to omit or undercharge expensive work.</li></ol><h4>Accept</h4><p>Deterministic metering, charged amounts and aborted state agree across nodes and proofs. Resource bounds hold; fee estimates meet P09 for accepted supported cases. Undercharged invalid blocks cannot bypass consensus.</p><h4>Evidence the case requires</h4><p>Metering traces; fee fixtures; estimator errors; invalid-block rejection.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1744-evm</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>36</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-04" data-case="EVM-04" data-state="NOT RUN"><summary><span class="c-id">EVM-04</span><span class="c-title">Exercise block context and randomness assumptions</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/compat/results.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:13 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use contracts sensitive to timestamp, height/context, randomness and ordering.</p><h4>Steps</h4><ol><li>Compare the declared Igneum semantics with developers' documented expectations.</li><li>Test boundary transitions, miner-influenced inputs and adversarial ordering in the isolated network.</li><li>Run dependency reviews for applications using these values for economic decisions.</li></ol><h4>Accept</h4><p>Semantics match F0 and differences are surfaced in compatibility documentation. No source of miner influence is marketed as unbiased randomness; incompatible applications are not included in the compatibility claim.</p><h4>Evidence the case requires</h4><p>Context-contract results; threat notes; compatibility exclusions.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1744-evm</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>37</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-05" data-case="EVM-05" data-state="NOT RUN"><summary><span class="c-id">EVM-05</span><span class="c-title">Run representative contract integration journeys</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/compat/results.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:13 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use versioned transfer/token, NFT, multisignature, exchange and upgrade-pattern fixtures where supported.</p><h4>Steps</h4><ol><li>Deploy, initialise, transact, revert and upgrade each contract using ordinary tooling.</li><li>Exercise events, logs, balances, storage and call traces across node restart/reorganisation.</li><li>Compare expected application invariants with native execution and proved results.</li></ol><h4>Accept</h4><p>Supported journeys preserve their stated invariants; all deviations are documented. Example deployment success alone cannot stand in for application-level correctness or financial audit.</p><h4>Evidence the case requires</h4><p>Contract fixture hashes; transaction journeys; invariant and state comparisons.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1744-evm</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>37</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-06" data-case="EVM-06" data-state="NOT RUN"><summary><span class="c-id">EVM-06</span><span class="c-title">Validate wallets, RPC and indexers</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/compat/results.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:13 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Pin supported RPC methods and response semantics; use normal developer clients and an independent indexer.</p><h4>Steps</h4><ol><li>Test fee estimation, pending/final states, subscriptions, pagination and reconnects.</li><li>Reindex from genesis or the documented trust anchor after pruning and restart.</li><li>Compare logs, receipts and balances with independently validated chain state.</li></ol><h4>Accept</h4><p>No missing/duplicate canonical records; unsupported methods are explicit. UI states distinguish included, executed, proven and finalised. Malformed RPC input cannot crash validators or leak secrets.</p><h4>Evidence the case requires</h4><p>RPC conformance report; reindex comparison; reconnect/edge-case logs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1744-evm</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>37</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-07" data-case="EVM-07" data-state="NOT RUN"><summary><span class="c-id">EVM-07</span><span class="c-title">Handle execution denial-of-service workloads</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Create bounded pathological bytecode, calls, state growth, storage and precompile inputs.</p><h4>Steps</h4><ol><li>Measure CPU, memory, disk and proving cost against charged budgets.</li><li>Saturate admission with invalid/expensive requests while valid workloads continue.</li><li>Restart mid-execution and verify atomic state recovery.</li></ol><h4>Accept</h4><p>P09 limits hold with no unbounded free work or divergent rollback. State remains consistent after crash; availability under overload follows the declared admission policy, not silent dropping of accepted transactions.</p><h4>Evidence the case requires</h4><p>Resource profiles; adversarial corpus; state recovery comparisons.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>38</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-EVM-08" data-case="EVM-08" data-state="PASS"><summary><span class="c-id">EVM-08</span><span class="c-title">Verify controlled execution and verifier upgrades</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08, P09</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/proving-enforcement/cache-history-2.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 23:24 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Prepare two authorised versions and malicious, stale or unknown versions.</p><h4>Steps</h4><ol><li>Cross activation with mixed clients, queued transactions and proofs from both versions.</li><li>Bind each accepted proof to the correct execution semantics and program identity.</li><li>Exercise a failed software distribution without altering consensus activation.</li></ol><h4>Accept</h4><p>No unknown or wrong-version execution is accepted. Pre/post-boundary handling is deterministic and documented; software delivery cannot silently redefine transaction semantics or proof acceptance.</p><h4>Evidence the case requires</h4><p>Upgrade vectors; mixed-version traces; manifest/version bindings.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>enforced-proving-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>38</dd></div><div><dt>Plan pages</dt><dd>15, 25, 34, 35, 36, 37</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-ZKP"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">08</span>ZKP</div><div class="acc-suite-t"><h2>Consensus-enforced proof validity</h2><p class="acc-sub">The validator, not merely the official producer, must reject unauthorised or invalid proof records and rewards.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Proving + protocol leads; independent cryptography review</dd></div><div><dt>Gate</dt><dd>Technical readiness / G5 <span class="acc-gl"><a href="#gate-G5">G5</a></span></dd></div><div><dt>Fixtures</dt><dd>F0 pinned programs/verifiers; F5 valid and hostile proof corpus; unmodified validators</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="ZKP: 8 cases: 4 passed under the standard, 0 running with team evidence, 4 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:4" title="4 PASS"></span><span class="seg g-notrun" style="flex-grow:4" title="4 NOT RUN"></span></div><span>8 cases: 4 passed under the standard, 0 running with team evidence, 4 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-ZKP-01" data-case="ZKP-01" data-state="NOT RUN"><summary><span class="c-id">ZKP-01</span><span class="c-title">Reject missing and invalid proofs</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Start from a native-correct statement and an independently verified valid proof.</p><h4>Steps</h4><ol><li>Submit the statement with no proof, truncated bytes, random bytes and targeted proof mutations using a modified producer.</li><li>Submit the genuine proof as a positive control through ordinary network paths.</li><li>Inspect block acceptance and resulting reward/state on unmodified validators.</li></ol><h4>Accept</h4><p>Every invalid proof record is rejected and earns no reward; valid controls succeed. A producer-side filter is not sufficient. Record rejection semantics exactly as defined by F0.</p><h4>Evidence the case requires</h4><p>Hostile record corpus; validator decisions; before/after balances; positive controls.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>39</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-02" data-case="ZKP-02" data-state="PASS"><summary><span class="c-id">ZKP-02</span><span class="c-title">Bind program, verifier and security parameters</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/proving-enforcement/cache-history-2.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 23:24 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use valid proofs from authorised and unauthorised programs and parameter sets.</p><h4>Steps</h4><ol><li>Swap program digest, verifier version, security settings and verification key where applicable.</li><li>Attempt downgrade through configuration, serialized metadata or an old node path.</li><li>Test authorised boundary transitions and unsupported future identities.</li></ol><h4>Accept</h4><p>Only explicitly authorised combinations are accepted in the correct epoch. No implicit trust in producer-supplied metadata or lower-security fallback; all accepted settings have scoped soundness review.</p><h4>Evidence the case requires</h4><p>Identity/parameter matrix; rejection traces; cryptographic review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>enforced-proving-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>39</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-03" data-case="ZKP-03" data-state="NOT RUN"><summary><span class="c-id">ZKP-03</span><span class="c-title">Bind network, epoch, job and state roots</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Prepare valid proofs for distinct chains, epochs, jobs and initial/final states.</p><h4>Steps</h4><ol><li>Replay each proof under another network, job, epoch, shard range or state commitment.</li><li>Alter public inputs while retaining the proof and test valid-but-wrong-context statements.</li><li>Check duplicated and reordered records across forks and replayed sync data.</li></ol><h4>Accept</h4><p>Every misbound proof is rejected; valid authorised replays follow only explicitly allowed semantics and never create extra rewards. Native reexecution cannot conceal missing proof-context binding.</p><h4>Evidence the case requires</h4><p>Binding matrix; public-input hashes; replay traces; reward reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>39</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-04" data-case="ZKP-04" data-state="PASS"><summary><span class="c-id">ZKP-04</span><span class="c-title">Prevent reward and payout substitution</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/proving-enforcement/cache-history-2.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 23:24 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use proofs that commit to authorisation and all reward-relevant fields required by F0.</p><h4>Steps</h4><ol><li>Alter payout key, amount, beneficiary, source work or fee allocation independently.</li><li>Supply correct execution over malicious producer-provided consensus/reward inputs.</li><li>Compare consensus-derived rewards with the proved/publicly authenticated derivation.</li></ol><h4>Accept</h4><p>Unauthorised payout changes and incorrect consensus inputs are rejected; no statement accepted merely because execution over supplied inputs is internally correct. Legitimate authorisations are preserved.</p><h4>Evidence the case requires</h4><p>Mutation cases; reward derivation trace; signature/proof binding review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>enforced-proving-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>40</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-05" data-case="ZKP-05" data-state="PASS"><summary><span class="c-id">ZKP-05</span><span class="c-title">Make proof payment idempotent across races</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/proving-enforcement/cache-history-2.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 23:24 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use competing provers submitting valid results for the same work and simulate retries/reorganisations.</p><h4>Steps</h4><ol><li>Submit simultaneous duplicates, reordered receipts and repeated messages after disconnects.</li><li>Crash validators between validation and reward application, then recover.</li><li>Reconcile canonical payouts against the exact F0 duplicate policy.</li></ol><h4>Accept</h4><p>Only the authorised total payment is made; no double payout, lost accepted entitlement or fork-retained balance. Transactions and payout records recover atomically.</p><h4>Evidence the case requires</h4><p>Concurrency schedule; canonical payment ledger; crash/recovery evidence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>enforced-proving-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>40</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-06" data-case="ZKP-06" data-state="NOT RUN"><summary><span class="c-id">ZKP-06</span><span class="c-title">Verify aggregation coverage and completeness</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Build valid multi-shard workloads plus omitted, duplicated, overlapping and misordered shard sets.</p><h4>Steps</h4><ol><li>Attempt an aggregate with a correct outer proof but wrong coverage/public-input construction.</li><li>Alter shard ranges, roots and aggregation-program identity.</li><li>Verify native execution, aggregate validity and coverage commitments independently.</li></ol><h4>Accept</h4><p>Only complete, correctly ordered authorised coverage is accepted. No valid proof of the wrong computation becomes an accepted chain result; aggregation failures do not fabricate successful delivery.</p><h4>Evidence the case requires</h4><p>Coverage corpus; aggregate/public-input verification; rejection ledger.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>40</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-07" data-case="ZKP-07" data-state="NOT RUN"><summary><span class="c-id">ZKP-07</span><span class="c-title">Review soundness and verifier resource limits</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide proof-system code, parameters, patches and the pinned verification path to an independent specialist.</p><h4>Steps</h4><ol><li>Review soundness assumptions, parameter margins and consequences of performance patches.</li><li>Fuzz deserialization and adversarial proofs; measure verification CPU and memory under load.</li><li>Cross-check an independent verifier or reference path and test crash containment.</li></ol><h4>Accept</h4><p>P09 review and resource requirements pass with no unresolved critical/high finding. Random proof rejection counts are not described as evidence of a particular cryptographic security level.</p><h4>Evidence the case requires</h4><p>Scoped soundness review; parameter sheet; fuzzer corpus; verifier profiles.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent cryptographic review + testing</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>41</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details><details class="acc-case" id="case-ZKP-08" data-case="ZKP-08" data-state="PASS"><summary><span class="c-id">ZKP-08</span><span class="c-title">Preserve authority and audit all acceptance paths</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P07, P08</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/proving-enforcement/cache-history-2.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 23:24 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Inspect block import, sync, RPC, light verification, database restoration and fast paths.</p><h4>Steps</h4><ol><li>Try bypassing validation via each path with a proof rejected by the normal path.</li><li>Remove the dominant prover/aggregator and have independent replacements process available inputs.</li><li>Attempt to use proof-production status as ordering, voting or finality authority.</li></ol><h4>Accept</h4><p>No bypass accepts invalid work; proofs alone confer no unauthorised consensus control. Replacement and pause behaviour meet F0/P07/P08 without privileged keys or a trusted aggregator shortcut.</p><h4>Evidence the case requires</h4><p>Path coverage report; bypass corpus; replacement run; authority checks.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>enforced-proving-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>41</dd></div><div><dt>Plan pages</dt><dd>16, 20, 24, 25, 36, 37</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-CAP"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">09</span>CAP</div><div class="acc-suite-t"><h2>Sustained proving and delivery</h2><p class="acc-sub">A correct fast shard is only one stage; capacity, latency, payment and retries must work together.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Proving lead + independent operators</dd></div><div><dt>Gate</dt><dd>Technical readiness / commercial track</dd></div><div><dt>Fixtures</dt><dd>F3 meaningful workload catalogue; F4 network; F8 external job harness</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="CAP: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-CAP-01" data-case="CAP-01" data-state="NOT RUN"><summary><span class="c-id">CAP-01</span><span class="c-title">Reproduce the historical consumer-shard result</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02, P07</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Recover the exact source-era workload/build if available; keep it separate from the release-candidate workload.</p><h4>Steps</h4><ol><li>Attempt independent reproduction of the 4,717,439-cycle workload and reported 3060/4060/4070 results.</li><li>Record proof format, memory, energy, host and whether aggregation/compression are included.</li><li>Repeat on the final release and label all configuration changes.</li></ol><h4>Accept</h4><p>Historical figures are either reproduced within P02 tolerance or corrected/labelled non-reproduced. Release acceptance uses the current complete workload, never an unmatched historical time or a smaller substituted shard.</p><h4>Evidence the case requires</h4><p>Historical/current manifests; proof verification; timing and memory records.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>42</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-02" data-case="CAP-02" data-state="NOT RUN"><summary><span class="c-id">CAP-02</span><span class="c-title">Prove on the actual mining configuration</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P06, P07</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/floor-memory-profile-2026-10-08.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 23:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use final dataset sizes, registers, clocks, drivers and proof pipeline on every advertised proving tier.</p><h4>Steps</h4><ol><li>Run mining alone, proving alone, concurrent execution and supported time-sharing.</li><li>Measure wall energy, memory headroom, reloads, proof latency and forgone accepted mining work.</li><li>Induce memory pressure and GPU task failure without losing wallet control.</li></ol><h4>Accept</h4><p>Every advertised mode completes correctly and meets P06/P07. Net output includes opportunity cost; unsupported concurrency is not claimed. Mining-only vendor support remains separately labelled.</p><h4>Evidence the case requires</h4><p>Four-mode results; OOM/failure logs; memory and opportunity-cost ledger.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Run</dt><dd>v607-floor-memory-20261008T2059Z</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>42</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-03" data-case="CAP-03" data-state="NOT RUN"><summary><span class="c-id">CAP-03</span><span class="c-title">Measure the entire request-to-payment path</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P07</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Assign a unique job ID and immutable timestamps to every stage of F3/F8 jobs.</p><h4>Steps</h4><ol><li>Record request, input availability, assignment, execution, shard proof, aggregation, verification, delivery and payment.</li><li>Compare monotonic elapsed time with any protocol/DAA clock and document their relationship.</li><li>Reconcile failed, censored, retried and abandoned jobs with the original request denominator.</li></ol><h4>Accept</h4><p>No hidden stage or missing job; latency distributions and cost cover the complete path. Delivery, finality and payment are reported separately; protocol seconds are not silently relabelled wall-clock seconds.</p><h4>Evidence the case requires</h4><p>Stage event ledger; clock calibration; end-to-end latency/cost report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>42</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-04" data-case="CAP-04" data-state="NOT RUN"><summary><span class="c-id">CAP-04</span><span class="c-title">Sustain meaningful load without queue growth</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P07</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze W: payload mix, input sizes, execution work and per-hour demand; prohibit tiny-workload substitution.</p><h4>Steps</h4><ol><li>Run 72 hours at W and a separate 24 hours at 1.2W on the declared fleet.</li><li>Measure arrival/completion counts, backlog trend, oldest-job age, deadlines and all retries.</li><li>Use held-out workloads and an independent observer to detect discarded or delayed requests.</li></ol><h4>Accept</h4><p>P07 completion, tail-latency and bounded-backlog criteria hold. Capacity is stated for the tested W/fleet, not as universal TPS. A queue that grows indefinitely or shrinks through silent loss fails.</p><h4>Evidence the case requires</h4><p>Request/completion reconciliation; backlog series; held-out results; observer report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>43</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-05" data-case="CAP-05" data-state="NOT RUN"><summary><span class="c-id">CAP-05</span><span class="c-title">Overload and recover without false acceptance</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P07</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Start at W and inject 2W for 15 minutes with valid and invalid jobs, then return to W.</p><h4>Steps</h4><ol><li>Observe admission, explicit backpressure, reservations and deadline estimates.</li><li>Track accepted jobs to valid completion or the pre-agreed failure/refund outcome.</li><li>Measure recovery time and ensure ordinary users are not silently starved.</li></ol><h4>Accept</h4><p>P07 overload policy and recovery limits hold; no accepted job vanishes or earns an invalid reward. Rejected demand is reported separately from delivery success, preventing denominator manipulation.</p><h4>Evidence the case requires</h4><p>Overload timeline; admission/refund logs; backlog-drain proof.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>43</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-06" data-case="CAP-06" data-state="NOT RUN"><summary><span class="c-id">CAP-06</span><span class="c-title">Calibrate assignment windows to paid completion</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P07, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use a heterogeneous proving fleet, including the slowest advertised consumer tier.</p><h4>Steps</h4><ol><li>Measure actual completion distributions with network delay, competing load and failed attempts.</li><li>Test the chosen exclusive window, open claiming and faster challengers after expiry.</li><li>Compare assignment frequency, paid completions and wasted work by tier.</li></ol><h4>Accept</h4><p>P07 fairness and wasted-work limits hold for advertised tiers. A provisional 10-DAA-second window is not treated as approved. Fair assignment counts alone cannot pass; payment outcomes and operator margins matter.</p><h4>Evidence the case requires</h4><p>Window sweep; paid-completion distribution; wasted-work and margin report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>43</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-07" data-case="CAP-07" data-state="NOT RUN"><summary><span class="c-id">CAP-07</span><span class="c-title">Reassign work when inputs or providers disappear</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P07, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Remove input providers, assigned provers and the dominant aggregator independently and together.</p><h4>Steps</h4><ol><li>Have replacement operators retrieve authenticated inputs without founder files.</li><li>Retry expired assignments while preserving idempotent reward and customer outcomes.</li><li>Restore providers and test late submissions racing with replacements.</li></ol><h4>Accept</h4><p>P07/P08 replacement deadlines hold when availability assumptions permit. Otherwise a truthful bounded pause/refund occurs; no fake proof, double payment or hidden privileged input source is used.</p><h4>Evidence the case requires</h4><p>Failure schedule; input hashes; reassignment and payout ledger; recovery trace.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>44</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-CAP-08" data-case="CAP-08" data-state="NOT RUN"><summary><span class="c-id">CAP-08</span><span class="c-title">Deliver customer-verifiable output at scale</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P07, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Run the external workload using a customer-controlled verifier and independently operated workers.</p><h4>Steps</h4><ol><li>Verify every delivered proof against the contracted program and input commitment.</li><li>Reject wrong-format, stale and partial deliveries; test customer retry and delivery failure.</li><li>Reconcile delivery, acceptance, payment and refund records without exposing private inputs publicly.</li></ol><h4>Accept</h4><p>P07 delivery performance and exact validity hold. Payment depends on the contracted correct result; a valid proof for the wrong job is not a successful delivery.</p><h4>Evidence the case requires</h4><p>Customer verification log; proof-format contract; settlement reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>44</dd></div><div><dt>Plan pages</dt><dd>17, 18, 24, 25</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-INC"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">10</span>INC</div><div class="acc-suite-t"><h2>Rewards, incentives and selfish operators</h2><p class="acc-sub">Assume operators optimise their own returns. Do not depend on the official client choosing a less profitable task.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Protocol economics + proving leads</dd></div><div><dt>Gate</dt><dd>G4 / G5 <span class="acc-gl"><a href="#gate-G4">G4</a> <a href="#gate-G5">G5</a></span></dd></div><div><dt>Fixtures</dt><dd>F0 fee/reward rules; F4 adversarial operators; F7 incentive models</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="INC: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-INC-01" data-case="INC-01" data-state="NOT RUN"><summary><span class="c-id">INC-01</span><span class="c-title">Reconcile issuance, fees, burns and recipients</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use a deterministic short chain containing all reward types, fee paths and rounding cases.</p><h4>Steps</h4><ol><li>Calculate balances, total supply changes, burns and distributions independently.</li><li>Execute identical blocks natively and through the proving path.</li><li>Test zero, minimum, maximum and transition-boundary values plus malformed producer accounting.</li></ol><h4>Accept</h4><p>Conservation and recipient rules match F0 exactly; no inflation, rounding leakage or duplicate reward. Fee-table and prose discrepancies are resolved before the run, not guessed by the tester.</p><h4>Evidence the case requires</h4><p>Independent accounting ledger; balance/supply diffs; boundary vectors.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>45</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-02" data-case="INC-02" data-state="NOT RUN"><summary><span class="c-id">INC-02</span><span class="c-title">Keep revenue streams and claims separate</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P12, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Prepare jobs and blocks producing mining income, internal proof rewards and external payments.</p><h4>Steps</h4><ol><li>Trace money from source to operator, protocol, developer and any burn.</li><li>Compare node records, settlement records and Ember displays.</li><li>Attempt to classify testnet rewards, reimbursed purchases or token appreciation as external customer revenue.</li></ol><h4>Accept</h4><p>Every stream reconciles and is labelled correctly. No double-counted revenue or fabricated protocol demand; mining subsidy and external service income remain distinct in dashboards and ECO.</p><h4>Evidence the case requires</h4><p>Money-flow register; UI reconciliation; rejected classifications.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>45</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-03" data-case="INC-03" data-state="NOT RUN"><summary><span class="c-id">INC-03</span><span class="c-title">Let a modified client choose the most profitable task</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P07, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Permit independent schedulers to mine, prove internally, prove externally or switch off.</p><h4>Steps</h4><ol><li>Publish common costs and vary relative task rewards, memory pressure and switching costs.</li><li>Run clients that ignore the official scheduling recommendation.</li><li>Measure realised operator margin, internal capacity and network progress.</li></ol><h4>Accept</h4><p>Required P12 sustainable worlds maintain paid essential capacity without compelled altruism. Profitability and availability are based on realised outcomes, including switching and wasted work.</p><h4>Evidence the case requires</h4><p>Scheduler source/policies; switching traces; capacity and margin series.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>45</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-04" data-case="INC-04" data-state="NOT RUN"><summary><span class="c-id">INC-04</span><span class="c-title">Survive external-demand spikes and token declines</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P07, P08, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use F7 scenarios with 10x external job offers and token-denominated mining-income shocks.</p><h4>Steps</h4><ol><li>Allow miners/provers to switch freely under the declared reward and difficulty rules.</li><li>Observe hash participation, proof backlog, fees and recovery without an administrator.</li><li>Repeat with external demand dropping to zero and with a dominant operator withdrawn.</li></ol><h4>Accept</h4><p>Mandatory viable worlds meet P07/P12; stressed nonviable worlds fail or pause safely with truthful status. No emergency rule, fabricated demand or unofficial subsidy is inserted to force a pass.</p><h4>Evidence the case requires</h4><p>Shock timeline; fee/hash/capacity paths; failure-region report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>46</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-05" data-case="INC-05" data-state="NOT RUN"><summary><span class="c-id">INC-05</span><span class="c-title">Contain job reservation and identity-splitting abuse</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P07, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze the actual assignment/payment mechanism; do not assume unimplemented collateral or identity controls.</p><h4>Steps</h4><ol><li>Create many worker identities, reserve jobs, withhold proofs and submit late results.</li><li>Attempt free option-taking, duplicate work rewards and displacement of honest assignments.</li><li>Price attacker costs and observe honest completion under the approved abuse load.</li></ol><h4>Accept</h4><p>F0 rules and P07 service limits hold under the declared adversary. Identity splitting does not create unauthorised rewards or control; any unmitigated starvation path blocks the permissionless-service claim.</p><h4>Evidence the case requires</h4><p>Attack clients; assignment trace; cost-to-disrupt analysis; honest-user outcomes.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>46</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-06" data-case="INC-06" data-state="NOT RUN"><summary><span class="c-id">INC-06</span><span class="c-title">Test difficulty and timestamp manipulation</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the actual adjustment algorithm and consensus timestamp rule with independent miners.</p><h4>Steps</h4><ol><li>Inject large hashrate arrivals/departures, periodic selective mining and boundary-timed bursts.</li><li>Try allowed and invalid timestamp skew, withheld blocks and replayed work.</li><li>Observe block intervals, reward allocation and recovery after hashrate stabilises.</li></ol><h4>Accept</h4><p>Invalid inputs are rejected; valid adversarial strategies remain within F0/P08 bounds and are priced in ECO. No unexplained reward amplification, permanent stall or conflicting accepted work.</p><h4>Evidence the case requires</h4><p>Difficulty trace; timestamp corpus; revenue analysis; independent rule review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>46</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-07" data-case="INC-07" data-state="NOT RUN"><summary><span class="c-id">INC-07</span><span class="c-title">Resist self-dealing fees and fake proving demand</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P12, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use self-funded operators and related customer identities in the isolated economic model/network.</p><h4>Steps</h4><ol><li>Cycle funds through jobs, tips, developer shares and rebates to seek net reward extraction.</li><li>Attempt to inflate external-demand metrics without genuine unrelated customer expenditure.</li><li>Reconcile all counterparties and net cash contribution rather than gross transaction volume.</li></ol><h4>Accept</h4><p>No unauthorised subsidy extraction or metric inflation passes. Related-party volume is disclosed/excluded from P14; net external cash and legitimate protocol incentives are reported separately.</p><h4>Evidence the case requires</h4><p>Circular-flow tests; ownership/conflict review; net-cash reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>enforced-proving lane (a6e8f84588b809d62)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>47</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details><details class="acc-case" id="case-INC-08" data-case="INC-08" data-state="NOT RUN"><summary><span class="c-id">INC-08</span><span class="c-title">Quantify provider and supplier failure concentration</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P08, P11, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/class-v6/coexistence-model.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:55 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Model control of hashing, signing, proving, aggregation and hardware supply separately.</p><h4>Steps</h4><ol><li>Remove each largest operational dependency and combine correlated failures.</li><li>Measure replacement cost/time and whether essential roles share hidden ownership.</li><li>Compare results with the approved fault model and no-rescue exercise.</li></ol><h4>Accept</h4><p>No hidden single dependency defeats the claimed independence; within-tolerance withdrawals recover under P08/P11. Hardware supply concentration is disclosed without equating vendor sales to operator voting control.</p><h4>Evidence the case requires</h4><p>Role/ownership map; dependency removals; recovery and concentration report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Run</dt><dd>eco-d4-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>47</dd></div><div><dt>Plan pages</dt><dd>13, 16, 17, 18, 24, 26</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-FIN"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">11</span>FIN</div><div class="acc-suite-t"><h2>Consensus safety and recovery</h2><p class="acc-sub">Test safety under the stated fault bounds. Demand liveness only when synchrony and participation assumptions actually hold.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Consensus lead + independent formal/security review</dd></div><div><dt>Gate</dt><dd>G5 / technical readiness <span class="acc-gl"><a href="#gate-G5">G5</a></span></dd></div><div><dt>Fixtures</dt><dd>F0 exact fault model; F4 real-node partitions; F5 certificates and historical failures</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="FIN: 8 cases: 1 passed under the standard, 0 running with team evidence, 7 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:1" title="1 PASS"></span><span class="seg g-notrun" style="flex-grow:7" title="7 NOT RUN"></span></div><span>8 cases: 1 passed under the standard, 0 running with team evidence, 7 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-FIN-01" data-case="FIN-01" data-state="NOT RUN"><summary><span class="c-id">FIN-01</span><span class="c-title">Agree on ordering, work and executed state</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use real fork-choice/DAG handling and independent miners, not only a simplified simulator.</p><h4>Steps</h4><ol><li>Generate concurrent branches, delayed blocks, duplicates and invalid work with deterministic seeds.</li><li>Compare selected ordering, accumulated work, transaction execution and state roots after delivery converges.</li><li>Replay from independent checkpoints and from genesis where practical.</li></ol><h4>Accept</h4><p>Honest nodes converge under F0 assumptions with exact roots and rewards. No duplicated work accounting or undocumented ordering dependence; simulator-only success cannot substitute.</p><h4>Evidence the case requires</h4><p>Block/ordering corpus; root/work diffs; real-node replay logs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fast-time lane (a8be71a0db962911c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>48</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-02" data-case="FIN-02" data-state="PASS"><summary><span class="c-id">FIN-02</span><span class="c-title">Attack finality with split honest populations</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/sim/finality-attacks-results/native-2026-10-09/s203-1c.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 02:02 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the source-discussed 40/40/20 weight split, plus threshold-boundary splits under F0.</p><h4>Steps</h4><ol><li>Let the 20% adversarial group sign conflicting histories while honest groups are partitioned.</li><li>Delay messages and eligibility updates independently; keep total historical weights auditable.</li><li>Try to form two certificates and reconnect nodes to observe accepted final history.</li></ol><h4>Accept</h4><p>No conflicting final certificates are accepted within the declared fault bound. A safe pause is valid when quorum is unavailable; making progress on both sides is not required.</p><h4>Evidence the case requires</h4><p>Signed votes; certificate attempts; voter-table snapshots; safety checker output.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>fin-203-20261009T0127Z</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>48</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-03" data-case="FIN-03" data-state="NOT RUN"><summary><span class="c-id">FIN-03</span><span class="c-title">Cross authority expiry in a long partition</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Recover historical expiry failures where available; use the actual current authority-transition rules.</p><h4>Steps</h4><ol><li>Partition for 31, 35, 60 and 90 logical days and around every retention/expiry boundary.</li><li>Attempt independently renewed authority sets and conflicting checkpoint locks.</li><li>Repeat selected boundary cases on real nodes with accelerated timers explicitly labelled.</li></ol><h4>Accept</h4><p>Authority continuity remains authenticated and no conflicting final history appears within F0 assumptions. A timeout is not accepted as proof absent voters ceased to exist. Compressed time is not multi-month field evidence.</p><h4>Evidence the case requires</h4><p>Expiry timeline; table/certificate history; historical regression tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>48</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-04" data-case="FIN-04" data-state="NOT RUN"><summary><span class="c-id">FIN-04</span><span class="c-title">Stop signing while mining continues</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Remove enough signing participation to invalidate the liveness assumption without forging votes.</p><h4>Steps</h4><ol><li>Continue mining and execution, cross seed boundaries and monitor proof queues.</li><li>Check which user-visible states advance and which remain unfinalised.</li><li>Restore eligible weight and bounded message delay, then verify recovery.</li></ol><h4>Accept</h4><p>No false finality or fabricated authority. Behaviour matches F0 during the pause and P08 after assumptions return; unfinished transactions are not displayed as irreversible.</p><h4>Evidence the case requires</h4><p>Signing/mining trace; UI/RPC states; recovery roots and timing.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>49</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-05" data-case="FIN-05" data-state="NOT RUN"><summary><span class="c-id">FIN-05</span><span class="c-title">Authenticate voter-set changes and pooled keys</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use normal transitions, pool members retaining keys and malicious substitution attempts.</p><h4>Steps</h4><ol><li>Alter voter weights, membership proofs, miner/pool identity bindings and prior-certificate links.</li><li>Race updates across boundaries and replay old signed changes.</li><li>Have a new node verify the authority chain from its declared trust anchor.</li></ol><h4>Accept</h4><p>Only correctly authenticated changes are accepted; weights cannot be double-counted or redirected by a pool. All honest nodes agree on the active authority set for each certified point.</p><h4>Evidence the case requires</h4><p>Authority-chain fixtures; substitution attacks; new-node verification log.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>49</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-06" data-case="FIN-06" data-state="NOT RUN"><summary><span class="c-id">FIN-06</span><span class="c-title">Analyse old-key compromise and long-range histories</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Freeze assumptions about key erasure, retained weights, trust anchors and offline recovery.</p><h4>Steps</h4><ol><li>Use previously eligible keys to build alternative histories after their operators disappear.</li><li>Present these histories to recently offline and newly joining clients.</li><li>Test replayed certificates, stale anchors and compromised signer subsets.</li></ol><h4>Accept</h4><p>Acceptance matches the explicit security model with no hidden trusted recovery step. Any reliance on a recent trusted anchor is disclosed and tested; hashpower assumptions cannot replace old-key analysis.</p><h4>Evidence the case requires</h4><p>Long-range corpus; trust-anchor policy; key-compromise review; client results.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>team-2026-10-08</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>49</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-07" data-case="FIN-07" data-state="NOT RUN"><summary><span class="c-id">FIN-07</span><span class="c-title">Recover deterministically after reconnection and crash</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 02:02 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Combine partitions with node crash, partial writes, restarts and proof backlog.</p><h4>Steps</h4><ol><li>Reconnect networks under bounded latency and restore required honest participation.</li><li>Verify fork choice, unfinalised reorganisation, finality, reward rollback and proof reassignments.</li><li>Compare all honest nodes and customer-visible receipts after recovery.</li></ol><h4>Accept</h4><p>P08 recovery holds without reversing a previously valid final guarantee. Only permitted unfinalised state is reorganised; no duplicate rewards or inconsistent receipt statuses survive.</p><h4>Evidence the case requires</h4><p>Recovery timelines; roots/certificates; payout rollback; customer-state reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>finality lane (aca0f5ed924a2a99b)</dd></div><div><dt>Run</dt><dd>fin-203-20261009T0127Z</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>50</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details><details class="acc-case" id="case-FIN-08" data-case="FIN-08" data-state="NOT RUN"><summary><span class="c-id">FIN-08</span><span class="c-title">Combine boundaries, faults and adversarial scheduling</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/sim/results_v2.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 02:02 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use an independent model checker/scheduler and production-node scenarios from F4.</p><h4>Steps</h4><ol><li>Combine epoch changes, authority transitions, mining churn, data delays and prover/aggregator loss.</li><li>Explore bounded adversarial message schedules and minimise any counterexample.</li><li>Replay model findings on real code and have an independent reviewer assess uncovered states.</li></ol><h4>Accept</h4><p>No unresolved safety failure; liveness claims hold only within declared assumptions and P08. Model bounds and untested schedules are published, not described as proof over every possible execution.</p><h4>Evidence the case requires</h4><p>Model/spec artifacts; schedule corpus; replay evidence; independent assessment.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Model checking + real-node testing</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>fast-time lane (a8be71a0db962911c)</dd></div><div><dt>Run</dt><dd>fin-203-20261009T0127Z</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>50</dd></div><div><dt>Plan pages</dt><dd>19, 21, 24, 25</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-VER"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">12</span>VER</div><div class="acc-suite-t"><h2>Wallets, receipts and data availability</h2><p class="acc-sub">Verify the exact property shown to the user. An inclusion proof, execution proof and finality certificate are not interchangeable.</p></div><div class="acc-suite-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Wallet + light-client lead; independent security review</dd></div><div><dt>Gate</dt><dd>Technical readiness / claimed options</dd></div><div><dt>Fixtures</dt><dd>F0 trust/availability model; F5 malformed roots, receipts and authority chains</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="VER: 8 cases: 0 passed under the standard, 0 running with team evidence, 3 failed, 5 not run, 0 deferred"><span class="seg g-fail" style="flex-grow:3" title="3 FAIL"></span><span class="seg g-notrun" style="flex-grow:5" title="5 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 3 failed, 5 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-VER-01" data-case="VER-01" data-state="FAIL"><summary><span class="c-id">VER-01</span><span class="c-title">Authenticate light-client bootstrap</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/ver/evidence/VER-01.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:46 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Give a clean client malicious RPC responses, fabricated voter tables and valid-looking signatures.</p><h4>Steps</h4><ol><li>Start from the approved trust anchor and verify every required link to the advertised state.</li><li>Substitute otherwise well-formed but unauthorised keys, weights and checkpoints.</li><li>Remove the bootstrap service and use another independently operated source.</li></ol><h4>Accept</h4><p>The client rejects unauthorised authority and discloses any trust anchor. Signatures over a node-supplied table do not by themselves pass; missing authentication never silently degrades to trusted RPC.</p><h4>Evidence the case requires</h4><p>Bootstrap corpus; trust-chain trace; fail-closed tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1915-ver</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>51</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-02" data-case="VER-02" data-state="FAIL"><summary><span class="c-id">VER-02</span><span class="c-title">Verify evolving authority and execution statements</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/ver/evidence/VER-01.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:46 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use valid state proofs paired with wrong execution statements or stale authority histories.</p><h4>Steps</h4><ol><li>Cross voter and verifier changes with offline clients returning after long intervals.</li><li>Alter roots, aggregate identity and proof/public-input bindings independently.</li><li>Check local verification rather than merely a server-reported verified flag.</li></ol><h4>Accept</h4><p>All advertised proof checks occur locally or the remaining trust is explicitly disclosed. Wrong roots and unauthenticated authority are rejected; unsupported verification paths are not claimed.</p><h4>Evidence the case requires</h4><p>Client verification trace; corrupted inputs; offline/upgrade results.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1915-ver</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>51</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-03" data-case="VER-03" data-state="NOT RUN"><summary><span class="c-id">VER-03</span><span class="c-title">Prove successful payment rather than inclusion</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/ver/evidence/summary.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:46 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Create successful, reverted, wrong-asset, wrong-recipient and wrong-amount transfers.</p><h4>Steps</h4><ol><li>Generate receipts for included transactions, including failures and replaced/unfinalised transactions.</li><li>Verify execution status plus asset, recipient, amount and canonical-state/receipt commitment.</li><li>Replay the receipt on another chain and after an allowed unfinalised reorganisation.</li></ol><h4>Accept</h4><p>Only the actual successful, correctly bound transfer is labelled payment proof. Inclusion-only receipts are labelled as such; no node-reported success flag substitutes for authenticated outcome.</p><h4>Evidence the case requires</h4><p>Payment fixture corpus; receipt verification; merchant-facing status checks.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1915-ver</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>51</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-04" data-case="VER-04" data-state="NOT RUN"><summary><span class="c-id">VER-04</span><span class="c-title">Bound cross-chain oracle trust and replay</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00, P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/ver/evidence/summary.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:46 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>For a claimed oracle, freeze destination verifier, authority updates, accepted proof types and replay policy.</p><h4>Steps</h4><ol><li>Try deployer-substituted keys, stale certificates, unchecked signatures and wrong source/destination identities.</li><li>Exercise legitimate authority updates and source reorganisations under the approved model.</li><li>Measure gas/cost with realistic header sets and test disabled/unavailable verification.</li></ol><h4>Accept</h4><p>The oracle enforces its declared trust model and fails closed. Deployer privileges and unavailable guarantees are explicit; no trustless-bridge claim exceeds the checks performed. Excluded oracle scope earns no pass credit.</p><h4>Evidence the case requires</h4><p>Oracle code/parameters; attack cases; cost report; privilege disclosure.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Claimed-option verification</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1915-ver</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>52</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-05" data-case="VER-05" data-state="FAIL"><summary><span class="c-id">VER-05</span><span class="c-title">Reconstruct required state without founder storage</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08, P09</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/ver/evidence/VER-05.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:46 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Remove founder archival/input services and start an independent operator from the documented entry point.</p><h4>Steps</h4><ol><li>Fetch authenticated blocks, state/proof inputs and any required witnesses from permitted peers.</li><li>Rebuild the expected state and continue validation/proving.</li><li>Measure bandwidth, disk, time and retention requirements against advertised operator budgets.</li></ol><h4>Accept</h4><p>Required data can be obtained and verified within the declared availability model. Hidden archives or unpublished files block independence. A valid execution proof alone does not satisfy this test.</p><h4>Evidence the case requires</h4><p>Download/reconstruction logs; data hashes; resource costs; dependency inventory.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1915-ver</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>52</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-06" data-case="VER-06" data-state="NOT RUN"><summary><span class="c-id">VER-06</span><span class="c-title">Detect withholding, corruption and stale data</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/tools/reference-apps/ver/evidence/summary.json" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:46 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Serve valid commitments with missing data, corrupted chunks, stale witnesses and conflicting peer replies.</p><h4>Steps</h4><ol><li>Attempt to make a validator or light client accept an unavailable or incorrect state under F0.</li><li>Test retrieval from independent peers and expiry/retry policy.</li><li>Restore data and check that recovery cannot alter an already verified commitment.</li></ol><h4>Accept</h4><p>No unjustified available/verified status; safety and admission rules match F0. Recovery is bounded where assumptions permit, and unavailable-data states remain visible instead of hidden behind proofs.</p><h4>Evidence the case requires</h4><p>Withholding corpus; peer retrieval traces; availability/status checks.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>ra-20261008T1915-ver</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>52</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-07" data-case="VER-07" data-state="NOT RUN"><summary><span class="c-id">VER-07</span><span class="c-title">Protect wallet keys, signing and recovery</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use test-only keys, encrypted backups and clean replacement devices; no real user funds.</p><h4>Steps</h4><ol><li>Attempt secret access from proving jobs, logs, crash dumps, clipboard and telemetry paths.</li><li>Verify transaction destination/amount before signing; test backup/restore and wrong-password handling.</li><li>Upgrade and recover without silently changing signing authority or exposing seed material.</li></ol><h4>Accept</h4><p>No unintended secret disclosure or unauthorised signature. Supported recovery restores the correct keys and accounts; users receive explicit risk/backup information. Logs are sanitised without hiding security evidence.</p><h4>Evidence the case requires</h4><p>Security review; canary-secret tests; signing fixtures; restore journey.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>shipper (ae892a8b0f78fe31c)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>53</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details><details class="acc-case" id="case-VER-08" data-case="VER-08" data-state="NOT RUN"><summary><span class="c-id">VER-08</span><span class="c-title">Keep every user-facing state truthful</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Create included-only, executed, proven, finalised, reverted, stale and paused examples.</p><h4>Steps</h4><ol><li>Compare explorer, wallet, receipt, RPC and customer API labels against authenticated evidence.</li><li>Interrupt finality and proof services and observe refresh/reconnect behaviour.</li><li>Check statements about privacy, Ethereum security and device support.</li></ol><h4>Accept</h4><p>No stronger state is implied than verified; stale data is marked and failures are actionable. EVM compatibility is not labelled Ethereum security, and ZK technology is not automatically labelled transaction privacy.</p><h4>Evidence the case requires</h4><p>Cross-surface screenshots/logs; state mapping; claim review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>reference-apps lane (a2060899d2a27d31c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>53</dd></div><div><dt>Plan pages</dt><dd>20, 25, 35, 37</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-OPS"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">13</span>OPS</div><div class="acc-suite-t"><h2>Independent operation and release security</h2><p class="acc-sub">A permissionless specification must remain operational without privileged infrastructure or unsafe automatic updates.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Operations + release leads; independent operators</dd></div><div><dt>Gate</dt><dd>G5 <span class="acc-gl"><a href="#gate-G5">G5</a></span></dd></div><div><dt>Fixtures</dt><dd>F4 isolated multi-operator network; F0 signed releases; F9 telemetry</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="OPS: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-OPS-01" data-case="OPS-01" data-state="NOT RUN"><summary><span class="c-id">OPS-01</span><span class="c-title">Run the complete no-founder exercise</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P07, P08, P11</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the P11 independent network, adequate honest participation and enough non-founder capacity for W.</p><h4>Steps</h4><ol><li>Remove founder miners, provers, aggregators, RPC, DNS/bootstrap dependencies and private support access.</li><li>Run the full P11 period while crossing real and separately labelled accelerated boundaries.</li><li>Introduce scheduled faults and have independent operators recover using published instructions.</li></ol><h4>Accept</h4><p>No founder action, secret file, privileged key or emergency anti-chip rule is needed. P07/P08 outcomes hold within assumptions; any intervention is recorded as a failed no-rescue run, not erased.</p><h4>Evidence the case requires</h4><p>Operator roster/conflict checks; dependency removals; full activity/intervention log.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>54</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-02" data-case="OPS-02" data-state="NOT RUN"><summary><span class="c-id">OPS-02</span><span class="c-title">Diversify bootstrap and resist peer isolation</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Start nodes without the default bootstrap host and give others adversarial peer lists.</p><h4>Steps</h4><ol><li>Attempt eclipse through peer concentration, stale discovery, poisoned DNS and repeated identities in an isolated lab.</li><li>Use independent documented discovery paths and validate returned chain data.</li><li>Measure synchronisation, peer diversity and recovery after benign connectivity returns.</li></ol><h4>Accept</h4><p>No unauthenticated history is trusted; bootstrap has no hidden single-provider requirement. Isolation is detected/contained according to F0 and recovery meets P08 when assumptions return.</p><h4>Evidence the case requires</h4><p>Peer/discovery traces; eclipse scenarios; startup and recovery evidence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>build-server lane (a352e49ff4613df86)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>54</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-03" data-case="OPS-03" data-state="NOT RUN"><summary><span class="c-id">OPS-03</span><span class="c-title">Separate update distribution from consensus authority</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 11:17 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use test signing keys and clean desktop/node installations with valid, stale and malicious packages.</p><h4>Steps</h4><ol><li>Offer signed updates with unexpected consensus rules, downgraded binaries and corrupted payloads.</li><li>Test explicit operator acceptance and the published signing-key incident procedure.</li><li>Confirm that distribution-key possession cannot independently activate new consensus rules.</li></ol><h4>Accept</h4><p>Tampering/unauthorised rollback is rejected; updates do not silently transfer authority. Approved acceptance and activation are separate. No test touches production signing material.</p><h4>Evidence the case requires</h4><p>Package corpus; approval/activation traces; compromised-key rehearsal.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>shipper (ae892a8b0f78fe31c)</dd></div><div><dt>Run</dt><dd>site-manifest-20261009-02</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>54</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-04" data-case="OPS-04" data-state="NOT RUN"><summary><span class="c-id">OPS-04</span><span class="c-title">Recover nodes from crash and storage damage</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P08</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use production database/snapshot paths with controlled interrupted writes and corrupted test storage.</p><h4>Steps</h4><ol><li>Crash during import, proof acceptance, reward application and snapshot generation.</li><li>Restore from independently verified snapshots or re-sync through documented procedures.</li><li>Compare roots, certificates, balances and processed-job IDs with an unaffected node.</li></ol><h4>Accept</h4><p>No corrupt snapshot is trusted, no duplicate payout and no loss of authenticated final state. Recovery meets P08 where data is available; ambiguous corruption fails closed and is actionable.</p><h4>Evidence the case requires</h4><p>Crash schedule; snapshot hashes; root/balance diffs; recovery timing.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>55</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-05" data-case="OPS-05" data-state="NOT RUN"><summary><span class="c-id">OPS-05</span><span class="c-title">Isolate untrusted proving workloads</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Run hostile test jobs with secret canaries and restrictive worker permissions.</p><h4>Steps</h4><ol><li>Attempt filesystem escape, process spawning, resource exhaustion, network access and key-store reads.</li><li>Crash workers and inspect host, wallet and node availability plus dump/log contents.</li><li>Retry on every supported isolation backend and check dependency vulnerability handling.</li></ol><h4>Accept</h4><p>No secret leakage or unauthorised host action; P09 resource containment holds. Worker failure does not compromise validator/wallet authority; unsupported isolation is not marketed as safe execution.</p><h4>Evidence the case requires</h4><p>Sandbox penetration report; canary logs; resource limits; host-integrity checks.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>build-server lane (a352e49ff4613df86)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>55</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-06" data-case="OPS-06" data-state="NOT RUN"><summary><span class="c-id">OPS-06</span><span class="c-title">Contain malicious network and API traffic</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use an authorised isolated load environment with declared resource and request-rate budgets.</p><h4>Steps</h4><ol><li>Send malformed headers, proofs, oversized messages, floods and invalid peer sequences.</li><li>Measure legitimate traffic, memory/disk growth and validator CPU use.</li><li>Test limit resets, peer reconnect and graceful degradation without disabling validation.</li></ol><h4>Accept</h4><p>P09 abuse budgets hold; no unbounded allocation, persistent crash or invalid acceptance. Backpressure is visible and honest users retain the specified service at admitted load.</p><h4>Evidence the case requires</h4><p>Load/corpus manifests; resource series; valid-traffic metrics; incident traces.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>build-server lane (a352e49ff4613df86)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>55</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-07" data-case="OPS-07" data-state="NOT RUN"><summary><span class="c-id">OPS-07</span><span class="c-title">Detect failures with usable evidence and runbooks</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P09, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Define alerts for invalid acceptance, conflicting finality, backlog, data loss, payout mismatch and stale status.</p><h4>Steps</h4><ol><li>Inject one instance of each monitored failure in the lab.</li><li>Have an unaffiliated operator diagnose it using only emitted evidence and published instructions.</li><li>Test redaction, metric freshness and duplicate-alert suppression without suppressing serious failures.</li></ol><h4>Accept</h4><p>P10 alert/detection limits hold; every blocker produces actionable evidence. Monitoring does not leak secrets or mislabel intentional safe pauses as successful finality.</p><h4>Evidence the case requires</h4><p>Alert matrix; detection timelines; independent runbook exercise.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>build-server lane (a352e49ff4613df86)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>56</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-OPS-08" data-case="OPS-08" data-state="NOT RUN"><summary><span class="c-id">OPS-08</span><span class="c-title">Repeat independent operation across releases</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P00, P08, P11</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use a clean previous supported version and the final candidate with independent operators.</p><h4>Steps</h4><ol><li>Perform documented rolling upgrade, rollback of non-consensus software where allowed and resynchronisation.</li><li>Cross activation with mixed versions and unavailable founder distribution hosts.</li><li>Re-run affected gates after changes and preserve prior failures and incident lessons.</li></ol><h4>Accept</h4><p>No undocumented privileged migration or automatic consensus rewrite. All affected evidence is refreshed; P11 no-rescue results remain tied to the final release, not an earlier build.</p><h4>Evidence the case requires</h4><p>Upgrade/replay logs; invalidation map; repeated gate signatures.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>build-server lane (a352e49ff4613df86)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>56</dd></div><div><dt>Plan pages</dt><dd>21, 24, 25, 26</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-UX"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">14</span>UX</div><div class="acc-suite-t"><h2>Ember, payouts and operator control</h2><p class="acc-sub">Successful participation must be practical for ordinary owners without hidden custody or loss of consensus authority.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Desktop product + pool leads; independent usability study</dd></div><div><dt>Gate</dt><dd>Operator readiness / G5 <span class="acc-gl"><a href="#gate-G5">G5</a></span></dd></div><div><dt>Fixtures</dt><dd>F2 supported desktops; F8 user study; F4 honest/malicious pools</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="UX: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-UX-01" data-case="UX-01" data-state="NOT RUN"><summary><span class="c-id">UX-01</span><span class="c-title">Onboard ordinary owners on native desktop apps</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/evidence/UX-01-20261008.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:42 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Recruit the P10 first-time user cohort across Windows and macOS using supported physical hardware.</p><h4>Steps</h4><ol><li>Observe install, hardware detection, safety explanation and first accepted work without staff intervention.</li><li>Record download/data preparation separately as well as complete end-to-end time.</li><li>Test unsupported hardware and insufficient memory messaging rather than forcing a failed start.</li></ol><h4>Accept</h4><p>P10 completion/time targets hold with no unsafe default or concealed prerequisite. The product is tested as the actual desktop app, not only a browser preview.</p><h4>Evidence the case requires</h4><p>Consent-based study records; task timings; failure reasons; compatibility outcomes.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent observed user study</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>update-return lane (a22d765a2e0355a9f)</dd></div><div><dt>Run</dt><dd>ux-01-20261008-win-2.0.0</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>57</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-02" data-case="UX-02" data-state="NOT RUN"><summary><span class="c-id">UX-02</span><span class="c-title">Make pause, stop and safe tuning reliable</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Run mining/proving on active desktops under contention and safe thermal stress.</p><h4>Steps</h4><ol><li>Use pause, stop, power limit, task selection and emergency local shutdown controls.</li><li>Crash or restart the UI while workers run and verify ownership of background processes.</li><li>Restore the original hardware settings and test power-saving/low-battery behaviour where supported.</li></ol><h4>Accept</h4><p>P10 control latency and safe-state requirements hold. Stopping does not strand an uncontrolled process; tuning never depends on unsafe settings or silent privilege escalation.</p><h4>Evidence the case requires</h4><p>Control timings; process/settings audit; restart and safety traces.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>shipper (ae892a8b0f78fe31c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>57</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-03" data-case="UX-03" data-state="NOT RUN"><summary><span class="c-id">UX-03</span><span class="c-title">Show net earnings and compatibility honestly</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P10, P12</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use known rewards, fees, energy readings, retries and operator-entered tariffs.</p><h4>Steps</h4><ol><li>Compare mining, internal proof and external proof income with authoritative ledgers.</li><li>Show gross/net estimates, measurement boundaries, tariff assumptions and payout status.</li><li>Test stale data, losses, negative margins and mining-only versus proving-compatible devices.</li></ol><h4>Accept</h4><p>P10 reconciliation limits hold and uncertainty is visible. No guaranteed profits, fabricated fiat price or inferred proving support; provisional earnings are not shown as settled payments.</p><h4>Evidence the case requires</h4><p>UI/ledger comparisons; tariff fixtures; stale/negative examples.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>shipper (ae892a8b0f78fe31c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>57</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-04" data-case="UX-04" data-state="NOT RUN"><summary><span class="c-id">UX-04</span><span class="c-title">Pay small operators without hidden custody</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use ordinary single-card balances and the actual pooling/payment path.</p><h4>Steps</h4><ol><li>Earn, request/receive payment, disconnect and reconnect; include low balances, fees and a pool outage.</li><li>Attempt redirection, delayed accounting and withdrawal of another user's entitlement.</li><li>Reconcile displayed balances with canonical entitlement and actual settlement.</li></ol><h4>Accept</h4><p>P10 payout limits hold for the declared small-operator case. No unauthorised custody, redirection or unexplained loss; thresholds and fees are disclosed rather than masked by larger test balances.</p><h4>Evidence the case requires</h4><p>Single-card payout ledger; pool failure record; custody/authorisation review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>pool design seat (a3832b1c3b274b310)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>58</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-05" data-case="UX-05" data-state="NOT RUN"><summary><span class="c-id">UX-05</span><span class="c-title">Keep voting keys with the miner through pooling</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P09</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/analysis/pool/pool-pair-2026-10-08.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:48 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use an honest pool and a modified pool that replaces worker identity or voting credentials.</p><h4>Steps</h4><ol><li>Verify the consensus binding from performed work to the miner's retained key.</li><li>Attempt substitution, replay and reassignment without the miner's authorisation.</li><li>Leave the pool and verify retained voting/finality rights under F0.</li></ol><h4>Accept</h4><p>No silent transfer of governance/finality authority. If the protocol cannot establish retained keys, this requirement fails; a pool-protocol name or user-interface promise does not pass.</p><h4>Evidence the case requires</h4><p>Work/key binding vectors; malicious-pool attempts; leave-pool authority check.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>pool design seat (a3832b1c3b274b310)</dd></div><div><dt>Run</dt><dd>pool-2.0-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>58</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-06" data-case="UX-06" data-state="NOT RUN"><summary><span class="c-id">UX-06</span><span class="c-title">Verify actual miner-selected work templates</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide a pool interface with declared job-declaration support and independent miner templates.</p><h4>Steps</h4><ol><li>Submit miner-selected valid transaction templates and verify what is actually hashed and accepted.</li><li>Have a pool substitute or censor templates and test local verification/fallback.</li><li>Measure payout and acceptance consequences without moving authority to the pool.</li></ol><h4>Accept</h4><p>The advertised selection control exists in accepted work, not only configuration. Undisclosed substitution is detected; supported independent operation remains practical under P10.</p><h4>Evidence the case requires</h4><p>Template commitments; accepted-block evidence; malicious-pool/fallback report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>shipper (ae892a8b0f78fe31c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>58</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-07" data-case="UX-07" data-state="NOT RUN"><summary><span class="c-id">UX-07</span><span class="c-title">Expose actionable failures and safe updates</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P09, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 01:33 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Create failed proofs, memory pressure, expired jobs, missing payouts and available software updates.</p><h4>Steps</h4><ol><li>Ask independent users to identify the issue, stop safely and follow the recommended action.</li><li>Test explicit update approval, version visibility and a failed/corrupt update.</li><li>Confirm diagnostic exports remove keys and private inputs while retaining useful evidence.</li></ol><h4>Accept</h4><p>P10 task-success requirements hold; no silent update or false success state. Recovery instructions work on supported desktops and secret canaries never enter exported logs.</p><h4>Evidence the case requires</h4><p>Observed tasks; update traces; sanitised export tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>shipper (ae892a8b0f78fe31c)</dd></div><div><dt>Run</dt><dd>202-5d53a591-1176efb9</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>59</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details><details class="acc-case" id="case-UX-08" data-case="UX-08" data-state="NOT RUN"><summary><span class="c-id">UX-08</span><span class="c-title">Publish competitive accessible software</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02, P10</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 08:36 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide open documented builds, tuning parameters and known fee conditions for all supported platforms.</p><h4>Steps</h4><ol><li>Compare Ember against independently optimised permissible implementations on identical work.</li><li>Measure efficiency, fees, false rejection, installation and update transparency.</li><li>Scan for hidden developer fees, hardware whitelists, per-address privilege or undisclosed remote controls.</li></ol><h4>Accept</h4><p>P10 relative-efficiency limits hold and all fees/privileges are explicit. No self-reported device tier earns consensus advantage. A superior external implementation triggers investigation, not selective exclusion.</p><h4>Evidence the case requires</h4><p>Matched software comparison; code/config review; fee/privilege inventory.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>hash lane (a690540514aa453d7)</dd></div><div><dt>Run</dt><dd>site-gate-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>59</dd></div><div><dt>Plan pages</dt><dd>14, 21, 25, 26</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-COM"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">15</span>COM</div><div class="acc-suite-t"><h2>Paid demand and sustainable delivery</h2><p class="acc-sub">Devnet payouts and subsidised pilots demonstrate mechanics, not independent willingness to pay.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Commercial lead + independent financial/customer reviewer</dd></div><div><dt>Gate</dt><dd>Commercial evidence</dd></div><div><dt>Fixtures</dt><dd>F8 real consenting customers; F7 full service costs; private identity proofs</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="COM: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-COM-01" data-case="COM-01" data-state="NOT RUN"><summary><span class="c-id">COM-01</span><span class="c-title">Deliver a genuine contracted proof pilot</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P07, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Select one real external customer with a meaningful fixed workload and no required migration to Igneum.</p><h4>Steps</h4><ol><li>Agree program, inputs, proof format, deadline, price, failure/refund policy and verification method.</li><li>Run paid jobs through ordinary independently operated infrastructure.</li><li>Have the customer verify usefulness, correctness and its reason for choosing the service.</li></ol><h4>Accept</h4><p>The pilot satisfies its actual contract and settles genuine external payment. Trial subsidies are disclosed and cannot satisfy the repeat-demand gate; no invented customer or testimonial.</p><h4>Evidence the case requires</h4><p>Redacted contract; verified jobs; settlement proof; consented customer confirmation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>60</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-02" data-case="COM-02" data-state="NOT RUN"><summary><span class="c-id">COM-02</span><span class="c-title">Establish independent repeat purchasing</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use the P14 multi-customer observation period and ownership/conflict checks.</p><h4>Steps</h4><ol><li>Track paid purchases on distinct occasions, including refunds and stopped customers.</li><li>Audit related parties, project reimbursements, token grants and circular funding.</li><li>Reconcile external cash received with correctly delivered meaningful work.</li></ol><h4>Accept</h4><p>P14 buyer, duration and volume minima are met without reimbursement or related-party substitution. Repeat orders are separate buying decisions, not a single payment split into many jobs.</p><h4>Evidence the case requires</h4><p>Anonymised buyer ledger; repeat-order dates; conflict review; net receipts.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>60</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-03" data-case="COM-03" data-state="NOT RUN"><summary><span class="c-id">COM-03</span><span class="c-title">Demonstrate service and operator margins</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Allocate all delivery costs, including aggregation, retries, hardware, power, host, network and support.</p><h4>Steps</h4><ol><li>Calculate gross contribution and fully loaded unit costs for each contracted workload.</li><li>Reconcile a representative operator's realised earnings against metered costs and opportunity cost.</li><li>Repeat under the declared demand and price sensitivities.</li></ol><h4>Accept</h4><p>P14 contribution targets hold and at least the required operator cohort has positive realised contribution. Excluded overhead is visible; token appreciation or unpriced founder labour cannot silently create profitability.</p><h4>Evidence the case requires</h4><p>Unit-economics ledger; metered operator sample; allocation rules; sensitivity report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>60</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-04" data-case="COM-04" data-state="NOT RUN"><summary><span class="c-id">COM-04</span><span class="c-title">Meet the customer service guarantee</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P07, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Observe actual delivery deadlines, validity, failure handling and support over the contracted period.</p><h4>Steps</h4><ol><li>Count all accepted jobs, including failed, retried and abandoned cases.</li><li>Have the customer independently verify results and invoke one authorised refund/failure exercise.</li><li>Compare offered capacity and quoted price with what was actually delivered.</li></ol><h4>Accept</h4><p>P07 and contracted obligations hold; validity has zero accepted exceptions. Failure terms are honoured, and demand beyond capacity is explicitly refused rather than quietly omitted from metrics.</p><h4>Evidence the case requires</h4><p>Customer-verifier records; SLO report; refunds; promised-versus-delivered comparison.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>61</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-05" data-case="COM-05" data-state="NOT RUN"><summary><span class="c-id">COM-05</span><span class="c-title">Compare against the buyer's real alternative</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P14, P15</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Identify a credible alternative supplier or in-house option for the same workload, proof format and security.</p><h4>Steps</h4><ol><li>Obtain comparable quotes or consented measured trials at the evaluation date.</li><li>Include integration, verification, deadlines and all operational costs, not only proof-generation time.</li><li>Document the customer's actual trade-off without inventing unavailable comparator evidence.</li></ol><h4>Accept</h4><p>P15 commercial comparison is satisfied with like-for-like scope and a evidenced purchase reason. Missing alternative data remains MISSING; it is not scored as an Igneum win.</p><h4>Evidence the case requires</h4><p>Dated comparison; workload/security match; customer decision record.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>61</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-06" data-case="COM-06" data-state="NOT RUN"><summary><span class="c-id">COM-06</span><span class="c-title">Retain buyers after the pilot and subsidy period</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Follow all recruited customers through the P14 observation period, including churn.</p><h4>Steps</h4><ol><li>Remove disclosed trial incentives before measuring repeat demand.</li><li>Track renewal, expansion, cancellation reasons, unresolved incidents and buyer concentration.</li><li>Review whether one affiliated or subsidised buyer dominates the apparent market.</li></ol><h4>Accept</h4><p>P14 repeat/concentration conditions hold with honest denominator and churn reporting. Paying demand survives beyond a demonstration; unsatisfied or departed buyers are not removed retrospectively.</p><h4>Evidence the case requires</h4><p>Cohort/renewal ledger; churn notes; concentration and incentive report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>61</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-07" data-case="COM-07" data-state="NOT RUN"><summary><span class="c-id">COM-07</span><span class="c-title">Fund maintenance without assumed appreciation</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P13</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Prepare a costed plan for development, review, infrastructure, support and incident response.</p><h4>Steps</h4><ol><li>Separate committed resources from revenue dependent on adoption or token price.</li><li>Stress lower income and an unexpected security/operations expense.</li><li>Verify responsible owners and continuity arrangements without changing fair-launch promises.</li></ol><h4>Accept</h4><p>P13 committed-runway requirement holds and downside responses are documented. No uncommitted financing, rising token price or burn accounting is presented as available maintenance funding.</p><h4>Evidence the case requires</h4><p>Budget and commitment evidence; downside plan; owner/continuity roster.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>62</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-COM-08" data-case="COM-08" data-state="NOT RUN"><summary><span class="c-id">COM-08</span><span class="c-title">Let independent developers build useful integrations</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P09, P14</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Recruit unaffiliated developers unfamiliar with unpublished implementation details.</p><h4>Steps</h4><ol><li>Use public docs to deploy a supported application or integrate an external proof request and verification flow.</li><li>Record time, undocumented dependencies, workarounds and correctness issues.</li><li>Retest after documentation fixes without founder-written hidden integration code.</li></ol><h4>Accept</h4><p>P14 developer-task minimum passes on the final release; all required public instructions exist. Successful bytecode deployment alone does not count as a working application or service integration.</p><h4>Evidence the case requires</h4><p>Consented developer logs; public examples; issue closure; verified end-to-end journeys.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent integration study</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>62</dd></div><div><dt>Plan pages</dt><dd>4, 17, 18, 24, 26, 27, 31, 32, 33</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-LEAD"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">16</span>LEAD</div><div class="acc-suite-t"><h2>Comparative leadership evidence</h2><p class="acc-sub">A serious contention claim requires comparative outcomes and real adoption evidence, not just an internally green test dashboard.</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>Independent assessment panel + product/economics reviewers</dd></div><div><dt>Gate</dt><dd>Leadership-contender decision</dd></div><div><dt>Fixtures</dt><dd>F8 peer/customer studies; full signed technical evidence; 90-day observation</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="LEAD: 8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:8" title="8 NOT RUN"></span></div><span>8 cases: 0 passed under the standard, 0 running with team evidence, 8 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-LEAD-01" data-case="LEAD-01" data-state="NOT RUN"><summary><span class="c-id">LEAD-01</span><span class="c-title">Register a fair contemporary comparison</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P15</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Choose at least the P15 peer coverage and an evaluation date before collecting confirmatory results.</p><h4>Steps</h4><ol><li>Include the plan's Ravencoin, Ergo and Firo reference set where comparable, then check for other relevant current options.</li><li>Freeze versions, supported hardware, methods, noninferiority margins and commercial alternatives.</li><li>Publish exclusions and prohibit cross-algorithm raw-hashrate comparisons.</li></ol><h4>Accept</h4><p>The protocol covers material alternatives fairly and is signed independently. A missing or non-comparable feature is not scored zero; no arbitrary universal rank is inferred from selected metrics.</p><h4>Evidence the case requires</h4><p>Timestamped peer protocol; source/version records; comparison/exclusion rationale.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Pre-registered comparative study</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>63</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-02" data-case="LEAD-02" data-state="NOT RUN"><summary><span class="c-id">LEAD-02</span><span class="c-title">Demonstrate comparable operator advantages</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P02, P10, P15</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Use matched user tasks and operating conditions on the selected GPU-first networks.</p><h4>Steps</h4><ol><li>Measure install-to-first-accepted-work, software overhead versus each network's tuned baseline, payout friction and retained control.</li><li>Measure rejection/availability under the same network conditions; report fees separately.</li><li>Use blinded analysis where possible and independent runs for decisive differences.</li></ol><h4>Accept</h4><p>P15 noninferiority and superiority requirements hold on meaningful comparable dimensions. No raw hashes from different algorithms are compared, and transient token price is not labelled engineering superiority.</p><h4>Evidence the case requires</h4><p>Matched task data; uncertainty/effect sizes; independent comparison report.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>site lane (a846fd66b5403e35a)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>63</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-03" data-case="LEAD-03" data-state="NOT RUN"><summary><span class="c-id">LEAD-03</span><span class="c-title">Substantiate the specialist-coexistence claim</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P04, P12, P15</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Assemble G1-G4 plus frozen rules and all surviving-adversary assumptions.</p><h4>Steps</h4><ol><li>Have independent reviewers trace each public competitiveness statement to its narrowest evidence.</li><li>Separate measured GPUs, modelled silicon and economic scenarios in all summaries.</li><li>Evaluate residual uncertainty, excluded technologies and the no-new-rules counterfactual.</li></ol><h4>Accept</h4><p>All claimed envelopes meet P04/P12 without unsupported universal bounds. Reviewers agree the evidence supports scoped commodity competitiveness even when chips remain compatible; an exact chip-arrival probability is not inferred.</p><h4>Evidence the case requires</h4><p>Claim-to-evidence map; signed envelope review; limitations statement.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>63</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-04" data-case="LEAD-04" data-state="NOT RUN"><summary><span class="c-id">LEAD-04</span><span class="c-title">Observe ordinary-operator retention and margins</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P12, P16</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Recruit the P16 independent cohort before observing results; use privacy-preserving evidence.</p><h4>Steps</h4><ol><li>Follow participation, realised margin, hardware changes, failures and reasons for leaving for 90 days.</li><li>Report trial incentives separately and include every initial participant in retention denominators.</li><li>Compare behaviour with matched alternatives where feasible; disclose absence of an actual downturn.</li></ol><h4>Accept</h4><p>P16 retention/margin minima hold with verified independence and no removal of churned users. Simulated downturns cannot be called observed bear-market retention; historical claims stay limited to the period measured.</p><h4>Evidence the case requires</h4><p>Pseudonymous cohort ledger; margin/retention calculations; departure reasons.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>64</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-05" data-case="LEAD-05" data-state="NOT RUN"><summary><span class="c-id">LEAD-05</span><span class="c-title">Measure control and dependency concentration</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P11, P16</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Audit operational control of mining, voting, proving, aggregation, hosting and software distribution separately.</p><h4>Steps</h4><ol><li>Use opt-in attestations, observed dependencies and independent corroboration; disclose uncertain common ownership.</li><li>Compare concentration and provider-removal outcomes to the approved security and availability assumptions.</li><li>Check that pooled payments do not hide authority concentration and hardware vendors are not equated with operators.</li></ol><h4>Accept</h4><p>P11/P16 concentration requirements hold within disclosed uncertainty; unidentified control cannot be counted as independent. No single removable dependency is falsely marketed as decentralised operation.</p><h4>Evidence the case requires</h4><p>Control/failure-domain map; uncertainty notes; concentration/removal results.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>64</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-06" data-case="LEAD-06" data-state="NOT RUN"><summary><span class="c-id">LEAD-06</span><span class="c-title">Complete the reliability observation window</span><span class="c-pri"><span class="lbl">Priority </span>BLOCKER</span><span class="c-prof"><span class="lbl">Profile </span>P01, P16</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Observe the final candidate and approved compatible updates for the full P16 real-time period.</p><h4>Steps</h4><ol><li>Measure promised service availability, invalid acceptance, finality safety, payouts and incident impact.</li><li>Reconcile external probes, customer records and operator logs, including maintenance and exclusions.</li><li>Repeat affected critical tests after every material change; reset observation where comparability breaks.</li></ol><h4>Accept</h4><p>P16 availability and safety criteria hold on live observation; no hidden downtime or compressed-time substitution. This supports the recorded window only, not multi-year operational maturity.</p><h4>Evidence the case requires</h4><p>90-day SLO ledger; independent probes; incident reports; change/retest history.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>64</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-07" data-case="LEAD-07" data-state="NOT RUN"><summary><span class="c-id">LEAD-07</span><span class="c-title">Issue an independent contender assessment</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P00, P15, P16</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>2026-10-08 18:3x UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Provide the full evidence packet, commercial results, comparative study and unresolved-limit register to the panel.</p><h4>Steps</h4><ol><li>Check every mandatory and claimed-option test, source requirement and approved threshold.</li><li>Require separate signoffs for hardware/economics, security/operations and customer/operator evidence.</li><li>Document dissent and challenge any inference that passing an internal checklist proves number-one rank.</li></ol><h4>Accept</h4><p>Every required gate is PASS with no unresolved material challenge, critical/high defect or missing comparator/customer evidence. The panel supports a credible leadership-contender conclusion within scope, not a guaranteed rank.</p><h4>Evidence the case requires</h4><p>Signed assessment; full status index; dissent/limitations; approved claim wording.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Independent final assessment</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>65</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details><details class="acc-case" id="case-LEAD-08" data-case="LEAD-08" data-state="NOT RUN"><summary><span class="c-id">LEAD-08</span><span class="c-title">Keep leadership claims valid after release</span><span class="c-pri"><span class="lbl">Priority </span>GATE</span><span class="c-prof"><span class="lbl">Profile </span>P00, P16</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 20:22 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Define material-change triggers and scheduled reviews before publishing the assessment.</p><h4>Steps</h4><ol><li>Refresh competitor, hardware-cost, demand and security evidence at the P16 cadence.</li><li>Test a newly credible specialist, lost customer, major outage and verifier change against invalidation rules.</li><li>Withdraw or narrow stale claims promptly while publishing the new evidence status.</li></ol><h4>Accept</h4><p>Claims remain dated, scoped and revisable; material contrary evidence reopens the appropriate gate. The network may remain usable while a leadership claim is suspended. No permanent self-awarded certification.</p><h4>Evidence the case requires</h4><p>Review calendar; invalidation drills; versioned public claim register.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Release candidate; repeat after relevant changes</dd></div><div><dt>Owner</dt><dd>main / the founder</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Standard page</dt><dd>65</dd></div><div><dt>Plan pages</dt><dd>4, 22, 25, 27, 31, 32, 33</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-REV"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">17</span>REV</div><div class="acc-suite-t"><h2>REV: the external review's required regressions</h2><p class="acc-sub">44 regressions from 14 findings; each reads NOT RUN until its owner lane records a run</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>the owner lanes per the dispatch table</dd></div><div><dt>Gate</dt><dd>Review findings closed</dd></div><div><dt>Fixtures</dt><dd>F0,F5</dd></div><div><dt>Plan pages</dt><dd>docs/analysis/review-2026-10-08-b/findings.json and docs/analysis/review-2026-10-08-b/dispatch.md; ids from the master traceability register</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="REV: 44 cases: 2 passed under the standard, 0 running with team evidence, 42 not run, 0 deferred"><span class="seg g-pass" style="flex-grow:2" title="2 PASS"></span><span class="seg g-notrun" style="flex-grow:42" title="42 NOT RUN"></span></div><span>44 cases: 2 passed under the standard, 0 running with team evidence, 42 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-R2-F01-R01" data-case="R2-F01-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F01-R01</span><span class="c-title">Valid proof A, warm cache, carried statement B: refuse exactly as a cold node does.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).</p><h4>Steps</h4><ol><li>Valid proof A, warm cache, carried statement B: refuse exactly as a cold node does.</li></ol><h4>Accept</h4><p>Valid proof A, warm cache, carried statement B: refuse exactly as a cold node does.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, node lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F01</dd></div></dl></div></details><details class="acc-case" id="case-R2-F01-R02" data-case="R2-F01-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F01-R02</span><span class="c-title">Run valid/invalid contexts in both orders, concurrently and across cache eviction/restart.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).</p><h4>Steps</h4><ol><li>Run valid/invalid contexts in both orders, concurrently and across cache eviction/restart.</li></ol><h4>Accept</h4><p>Run valid/invalid contexts in both orders, concurrently and across cache eviction/restart.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, node lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F01</dd></div></dl></div></details><details class="acc-case" id="case-R2-F01-R03" data-case="R2-F01-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F01-R03</span><span class="c-title">Change payout, network, kind, program ID and activation context; no accepted misbinding.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).</p><h4>Steps</h4><ol><li>Change payout, network, kind, program ID and activation context; no accepted misbinding.</li></ol><h4>Accept</h4><p>Change payout, network, kind, program ID and activation context; no accepted misbinding.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, node lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F01</dd></div></dl></div></details><details class="acc-case" id="case-R2-F01-R04" data-case="R2-F01-R04" data-state="NOT RUN"><summary><span class="c-id">R2-F01-R04</span><span class="c-title">A native two-node test must agree on block validity and payouts despite different cache histories.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).</p><h4>Steps</h4><ol><li>A native two-node test must agree on block validity and payouts despite different cache histories.</li></ol><h4>Accept</h4><p>A native two-node test must agree on block validity and payouts despite different cache histories.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, node lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F01</dd></div></dl></div></details><details class="acc-case" id="case-R2-F02-R01" data-case="R2-F02-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F02-R01</span><span class="c-title">Release build cannot activate test bypass.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F02 requires (review R2 finding F02: Proof-rule infrastructure can fail open).</p><h4>Steps</h4><ol><li>Release build cannot activate test bypass.</li></ol><h4>Accept</h4><p>Release build cannot activate test bypass.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, CI steward</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F02</dd></div></dl></div></details><details class="acc-case" id="case-R2-F02-R02" data-case="R2-F02-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F02-R02</span><span class="c-title">Missing oracle or pinned keys prevents service readiness after enforcement activation.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F02 requires (review R2 finding F02: Proof-rule infrastructure can fail open).</p><h4>Steps</h4><ol><li>Missing oracle or pinned keys prevents service readiness after enforcement activation.</li></ol><h4>Accept</h4><p>Missing oracle or pinned keys prevents service readiness after enforcement activation.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, CI steward</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F02</dd></div></dl></div></details><details class="acc-case" id="case-R2-F02-R03" data-case="R2-F02-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F02-R03</span><span class="c-title">Missing proof bytes retry without incorrectly marking a valid block permanently invalid.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F02 requires (review R2 finding F02: Proof-rule infrastructure can fail open).</p><h4>Steps</h4><ol><li>Missing proof bytes retry without incorrectly marking a valid block permanently invalid.</li></ol><h4>Accept</h4><p>Missing proof bytes retry without incorrectly marking a valid block permanently invalid.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, CI steward</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F02</dd></div></dl></div></details><details class="acc-case" id="case-R2-F03-R01" data-case="R2-F03-R01" data-state="PASS"><summary><span class="c-id">R2-F03-R01</span><span class="c-title">Clean build from one manifest, including the pool and workers, with no unpublished vendor tree.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 22:11 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F03 requires (review R2 finding F03: The bundle contains a v6 candidate, not a demonstrated integrated v6 release).</p><h4>Steps</h4><ol><li>Clean build from one manifest, including the pool and workers, with no unpublished vendor tree.</li></ol><h4>Accept</h4><p>Clean build from one manifest, including the pool and workers, with no unpublished vendor tree.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>CI steward, hash lane (ProgramClass::V6 on freeze), pool lane</dd></div><div><dt>Run</dt><dd>f03-manifest-20261008-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F03</dd></div></dl></div></details><details class="acc-case" id="case-R2-F03-R02" data-case="R2-F03-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F03-R02</span><span class="c-title">Same job context produces identical accepted work in node, CPU reference, CUDA, Metal, OpenCL and pool.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:57 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F03 requires (review R2 finding F03: The bundle contains a v6 candidate, not a demonstrated integrated v6 release).</p><h4>Steps</h4><ol><li>Same job context produces identical accepted work in node, CPU reference, CUDA, Metal, OpenCL and pool.</li></ol><h4>Accept</h4><p>Same job context produces identical accepted work in node, CPU reference, CUDA, Metal, OpenCL and pool.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>CI steward, hash lane (ProgramClass::V6 on freeze), pool lane</dd></div><div><dt>Run</dt><dd>same-work-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F03</dd></div></dl></div></details><details class="acc-case" id="case-R2-F03-R03" data-case="R2-F03-R03" data-state="PASS"><summary><span class="c-id">R2-F03-R03</span><span class="c-title">Cross every scheduled transition with old/new client behavior documented and identical rule identities.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-pass" data-state="PASS">PASS</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:57 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F03 requires (review R2 finding F03: The bundle contains a v6 candidate, not a demonstrated integrated v6 release).</p><h4>Steps</h4><ol><li>Cross every scheduled transition with old/new client behavior documented and identical rule identities.</li></ol><h4>Accept</h4><p>Cross every scheduled transition with old/new client behavior documented and identical rule identities.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>CI steward, hash lane (ProgramClass::V6 on freeze), pool lane</dd></div><div><dt>Run</dt><dd>same-work-20261008-03</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F03</dd></div></dl></div></details><details class="acc-case" id="case-R2-F04-R01" data-case="R2-F04-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F04-R01</span><span class="c-title">Native multi-node 40/40/20 partition, equivocation and dust-valid mining on both sides past the window.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).</p><h4>Steps</h4><ol><li>Native multi-node 40/40/20 partition, equivocation and dust-valid mining on both sides past the window.</li></ol><h4>Accept</h4><p>Native multi-node 40/40/20 partition, equivocation and dust-valid mining on both sides past the window.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>node lane, reference apps, site (explorer)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F04</dd></div></dl></div></details><details class="acc-case" id="case-R2-F04-R02" data-case="R2-F04-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F04-R02</span><span class="c-title">Proof that the chosen recovery guarantee matches the public finality claim; two valid contradictory certificates are a hard failure for strong finality.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).</p><h4>Steps</h4><ol><li>Proof that the chosen recovery guarantee matches the public finality claim; two valid contradictory certificates are a hard failure for strong finality.</li></ol><h4>Accept</h4><p>Proof that the chosen recovery guarantee matches the public finality claim; two valid contradictory certificates are a hard failure for strong finality.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>node lane, reference apps, site (explorer)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F04</dd></div></dl></div></details><details class="acc-case" id="case-R2-F04-R03" data-case="R2-F04-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F04-R03</span><span class="c-title">Pause-only resume with historical backfill, missing historical data and all old keys returning.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).</p><h4>Steps</h4><ol><li>Pause-only resume with historical backfill, missing historical data and all old keys returning.</li></ol><h4>Accept</h4><p>Pause-only resume with historical backfill, missing historical data and all old keys returning.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>node lane, reference apps, site (explorer)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F04</dd></div></dl></div></details><details class="acc-case" id="case-R2-F04-R04" data-case="R2-F04-R04" data-state="NOT RUN"><summary><span class="c-id">R2-F04-R04</span><span class="c-title">Wallet, receipt and oracle consumers distinguish any weaker recovery state.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).</p><h4>Steps</h4><ol><li>Wallet, receipt and oracle consumers distinguish any weaker recovery state.</li></ol><h4>Accept</h4><p>Wallet, receipt and oracle consumers distinguish any weaker recovery state.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>node lane, reference apps, site (explorer)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F04</dd></div></dl></div></details><details class="acc-case" id="case-R2-F05-R01" data-case="R2-F05-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F05-R01</span><span class="c-title">Native reference-vs-incremental expression equivalence across all source registers and real instruction updates.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F05 requires (review R2 finding F05: reg64 address coupling has an exact incremental alternative).</p><h4>Steps</h4><ol><li>Native reference-vs-incremental expression equivalence across all source registers and real instruction updates.</li></ol><h4>Accept</h4><p>Native reference-vs-incremental expression equivalence across all source registers and real instruction updates.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>hash lane, adversary lane, floor lane 3</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F05</dd></div></dl></div></details><details class="acc-case" id="case-R2-F05-R02" data-case="R2-F05-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F05-R02</span><span class="c-title">Full-kernel output equivalence, registers, spills, wall power and accepted throughput across target GPUs.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F05 requires (review R2 finding F05: reg64 address coupling has an exact incremental alternative).</p><h4>Steps</h4><ol><li>Full-kernel output equivalence, registers, spills, wall power and accepted throughput across target GPUs.</li></ol><h4>Accept</h4><p>Full-kernel output equivalence, registers, spills, wall power and accepted throughput across target GPUs.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>hash lane, adversary lane, floor lane 3</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F05</dd></div></dl></div></details><details class="acc-case" id="case-R2-F05-R03" data-case="R2-F05-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F05-R03</span><span class="c-title">Adversary physical design includes prefix caching/recomputation cost; no assumed full 63-read cost on every load.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F05 requires (review R2 finding F05: reg64 address coupling has an exact incremental alternative).</p><h4>Steps</h4><ol><li>Adversary physical design includes prefix caching/recomputation cost; no assumed full 63-read cost on every load.</li></ol><h4>Accept</h4><p>Adversary physical design includes prefix caching/recomputation cost; no assumed full 63-read cost on every load.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>hash lane, adversary lane, floor lane 3</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F05</dd></div></dl></div></details><details class="acc-case" id="case-R2-F06-R01" data-case="R2-F06-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F06-R01</span><span class="c-title">Acceptance/reference/emitter evaluate the same activated schedule.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F06 requires (review R2 finding F06: The v6 acceptance and census gates are not complete for the final execution).</p><h4>Steps</h4><ol><li>Acceptance/reference/emitter evaluate the same activated schedule.</li></ol><h4>Accept</h4><p>Acceptance/reference/emitter evaluate the same activated schedule.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>hash lane, research lane D</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F06</dd></div></dl></div></details><details class="acc-case" id="case-R2-F06-R02" data-case="R2-F06-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F06-R02</span><span class="c-title">Full live-dataset census on unseen seeds and the complete v6 pack.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F06 requires (review R2 finding F06: The v6 acceptance and census gates are not complete for the final execution).</p><h4>Steps</h4><ol><li>Full live-dataset census on unseen seeds and the complete v6 pack.</li></ol><h4>Accept</h4><p>Full live-dataset census on unseen seeds and the complete v6 pack.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>hash lane, research lane D</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F06</dd></div></dl></div></details><details class="acc-case" id="case-R2-F06-R03" data-case="R2-F06-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F06-R03</span><span class="c-title">A failed experimental rule does not silently exhaust generation or bypass the intended resource requirement.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F06 requires (review R2 finding F06: The v6 acceptance and census gates are not complete for the final execution).</p><h4>Steps</h4><ol><li>A failed experimental rule does not silently exhaust generation or bypass the intended resource requirement.</li></ol><h4>Accept</h4><p>A failed experimental rule does not silently exhaust generation or bypass the intended resource requirement.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>hash lane, research lane D</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F06</dd></div></dl></div></details><details class="acc-case" id="case-R2-F07-R01" data-case="R2-F07-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F07-R01</span><span class="c-title">Same final v6 configuration: mine -&gt; evict -&gt; prove -&gt; aggregate -&gt; submit -&gt; rebuild -&gt; resume; no leaked reservations.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F07 requires (review R2 finding F07: VRAM admission and proving deadlines need one operator-level scheduler).</p><h4>Steps</h4><ol><li>Same final v6 configuration: mine -&gt; evict -&gt; prove -&gt; aggregate -&gt; submit -&gt; rebuild -&gt; resume; no leaked reservations.</li></ol><h4>Accept</h4><p>Same final v6 configuration: mine -&gt; evict -&gt; prove -&gt; aggregate -&gt; submit -&gt; rebuild -&gt; resume; no leaked reservations.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane, fleet lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F07</dd></div></dl></div></details><details class="acc-case" id="case-R2-F07-R02" data-case="R2-F07-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F07-R02</span><span class="c-title">OOM, process crash and stale work recover without losing wallet state or silently consuming power.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F07 requires (review R2 finding F07: VRAM admission and proving deadlines need one operator-level scheduler).</p><h4>Steps</h4><ol><li>OOM, process crash and stale work recover without losing wallet state or silently consuming power.</li></ol><h4>Accept</h4><p>OOM, process crash and stale work recover without losing wallet state or silently consuming power.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane, fleet lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F07</dd></div></dl></div></details><details class="acc-case" id="case-R2-F07-R03" data-case="R2-F07-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F07-R03</span><span class="c-title">16 GB+ simultaneous mode only after measured peak plus next-epoch headroom; smaller-card modes labelled separately.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F07 requires (review R2 finding F07: VRAM admission and proving deadlines need one operator-level scheduler).</p><h4>Steps</h4><ol><li>16 GB+ simultaneous mode only after measured peak plus next-epoch headroom; smaller-card modes labelled separately.</li></ol><h4>Accept</h4><p>16 GB+ simultaneous mode only after measured peak plus next-epoch headroom; smaller-card modes labelled separately.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane, fleet lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F07</dd></div></dl></div></details><details class="acc-case" id="case-R2-F08-R01" data-case="R2-F08-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F08-R01</span><span class="c-title">Report every eligible job outcome, including expired work; a bounded list cannot hide losses.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F08 requires (review R2 finding F08: The proving pipeline reports waste and deadline censoring, not sustained capacity).</p><h4>Steps</h4><ol><li>Report every eligible job outcome, including expired work; a bounded list cannot hide losses.</li></ol><h4>Accept</h4><p>Report every eligible job outcome, including expired work; a bounded list cannot hide losses.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, fleet lane, site (ops page)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F08</dd></div></dl></div></details><details class="acc-case" id="case-R2-F08-R02" data-case="R2-F08-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F08-R02</span><span class="c-title">Consumer tiers complete and receive payment for declared jobs before claims about income.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F08 requires (review R2 finding F08: The proving pipeline reports waste and deadline censoring, not sustained capacity).</p><h4>Steps</h4><ol><li>Consumer tiers complete and receive payment for declared jobs before claims about income.</li></ol><h4>Accept</h4><p>Consumer tiers complete and receive payment for declared jobs before claims about income.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, fleet lane, site (ops page)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F08</dd></div></dl></div></details><details class="acc-case" id="case-R2-F08-R03" data-case="R2-F08-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F08-R03</span><span class="c-title">Sustained real workload across class transitions, with restart/retry and no publisher intervention.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F08 requires (review R2 finding F08: The proving pipeline reports waste and deadline censoring, not sustained capacity).</p><h4>Steps</h4><ol><li>Sustained real workload across class transitions, with restart/retry and no publisher intervention.</li></ol><h4>Accept</h4><p>Sustained real workload across class transitions, with restart/retry and no publisher intervention.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane, fleet lane, site (ops page)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F08</dd></div></dl></div></details><details class="acc-case" id="case-R2-F09-R01" data-case="R2-F09-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F09-R01</span><span class="c-title">Generate all pass/fail cells directly from the declared inequalities and inputs.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F09 requires (review R2 finding F09: The economic model explicitly retains a failed specialist case).</p><h4>Steps</h4><ol><li>Generate all pass/fail cells directly from the declared inequalities and inputs.</li></ol><h4>Accept</h4><p>Generate all pass/fail cells directly from the declared inequalities and inputs.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>research lane, floor lane 3, coordinator</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F09</dd></div></dl></div></details><details class="acc-case" id="case-R2-F09-R02" data-case="R2-F09-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F09-R02</span><span class="c-title">Independent feasibility and cost evaluation of the strongest modeled SRAM/hybrid opponent.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F09 requires (review R2 finding F09: The economic model explicitly retains a failed specialist case).</p><h4>Steps</h4><ol><li>Independent feasibility and cost evaluation of the strongest modeled SRAM/hybrid opponent.</li></ol><h4>Accept</h4><p>Independent feasibility and cost evaluation of the strongest modeled SRAM/hybrid opponent.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>research lane, floor lane 3, coordinator</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F09</dd></div></dl></div></details><details class="acc-case" id="case-R2-F09-R03" data-case="R2-F09-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F09-R03</span><span class="c-title">GPU owners and entrants remain viable under the approved scenario envelope without assuming chip absence or death.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F09 requires (review R2 finding F09: The economic model explicitly retains a failed specialist case).</p><h4>Steps</h4><ol><li>GPU owners and entrants remain viable under the approved scenario envelope without assuming chip absence or death.</li></ol><h4>Accept</h4><p>GPU owners and entrants remain viable under the approved scenario envelope without assuming chip absence or death.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>research lane, floor lane 3, coordinator</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F09</dd></div></dl></div></details><details class="acc-case" id="case-R2-F10-R01" data-case="R2-F10-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F10-R01</span><span class="c-title">Compare exact found nonce/hash sets with full-read mode, including all-hit overflow and zero-hit cases.</span><span class="c-pri"><span class="lbl">Priority </span>P2</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F10 requires (review R2 finding F10: CUDA production readback has an existing OpenCL optimization to borrow).</p><h4>Steps</h4><ol><li>Compare exact found nonce/hash sets with full-read mode, including all-hit overflow and zero-hit cases.</li></ol><h4>Accept</h4><p>Compare exact found nonce/hash sets with full-read mode, including all-hit overflow and zero-hit cases.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>worker lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F10</dd></div></dl></div></details><details class="acc-case" id="case-R2-F10-R02" data-case="R2-F10-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F10-R02</span><span class="c-title">Test stale jobs, high-32 rollover, tail batches and asynchronous buffer reuse.</span><span class="c-pri"><span class="lbl">Priority </span>P2</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F10 requires (review R2 finding F10: CUDA production readback has an existing OpenCL optimization to borrow).</p><h4>Steps</h4><ol><li>Test stale jobs, high-32 rollover, tail batches and asynchronous buffer reuse.</li></ol><h4>Accept</h4><p>Test stale jobs, high-32 rollover, tail batches and asynchronous buffer reuse.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>worker lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F10</dd></div></dl></div></details><details class="acc-case" id="case-R2-F10-R03" data-case="R2-F10-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F10-R03</span><span class="c-title">Compare production throughput and wall energy, not only the isolated kernel timer.</span><span class="c-pri"><span class="lbl">Priority </span>P2</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F10 requires (review R2 finding F10: CUDA production readback has an existing OpenCL optimization to borrow).</p><h4>Steps</h4><ol><li>Compare production throughput and wall energy, not only the isolated kernel timer.</li></ol><h4>Accept</h4><p>Compare production throughput and wall energy, not only the isolated kernel timer.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>worker lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F10</dd></div></dl></div></details><details class="acc-case" id="case-R2-F11-R01" data-case="R2-F11-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F11-R01</span><span class="c-title">Goal switch from an efficiency prior can explore higher core/power when policy allows.</span><span class="c-pri"><span class="lbl">Priority </span>P2</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F11 requires (review R2 finding F11: Ember needs workload-aware identity and objective-aware search).</p><h4>Steps</h4><ol><li>Goal switch from an efficiency prior can explore higher core/power when policy allows.</li></ol><h4>Accept</h4><p>Goal switch from an efficiency prior can explore higher core/power when policy allows.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ember lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F11</dd></div></dl></div></details><details class="acc-case" id="case-R2-F11-R02" data-case="R2-F11-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F11-R02</span><span class="c-title">Driver, workload, dataset, compiler and device changes invalidate certification while retaining optional hints.</span><span class="c-pri"><span class="lbl">Priority </span>P2</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F11 requires (review R2 finding F11: Ember needs workload-aware identity and objective-aware search).</p><h4>Steps</h4><ol><li>Driver, workload, dataset, compiler and device changes invalidate certification while retaining optional hints.</li></ol><h4>Accept</h4><p>Driver, workload, dataset, compiler and device changes invalidate certification while retaining optional hints.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ember lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F11</dd></div></dl></div></details><details class="acc-case" id="case-R2-F11-R03" data-case="R2-F11-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F11-R03</span><span class="c-title">Thermal/error/late-share events revert safely, including process or machine crash.</span><span class="c-pri"><span class="lbl">Priority </span>P2</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F11 requires (review R2 finding F11: Ember needs workload-aware identity and objective-aware search).</p><h4>Steps</h4><ol><li>Thermal/error/late-share events revert safely, including process or machine crash.</li></ol><h4>Accept</h4><p>Thermal/error/late-share events revert safely, including process or machine crash.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ember lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F11</dd></div></dl></div></details><details class="acc-case" id="case-R2-F12-R01" data-case="R2-F12-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F12-R01</span><span class="c-title">Crash before/after broadcast, response timeout, restart before snapshot: no duplicate payment or silent debt loss.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F12 requires (review R2 finding F12: Pool payouts have a broadcast-before-durable-intent window).</p><h4>Steps</h4><ol><li>Crash before/after broadcast, response timeout, restart before snapshot: no duplicate payment or silent debt loss.</li></ol><h4>Accept</h4><p>Crash before/after broadcast, response timeout, restart before snapshot: no duplicate payment or silent debt loss.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F12</dd></div></dl></div></details><details class="acc-case" id="case-R2-F12-R02" data-case="R2-F12-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F12-R02</span><span class="c-title">Same signed transaction retried, fee replacement reconciled by intent, not a new payment.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F12 requires (review R2 finding F12: Pool payouts have a broadcast-before-durable-intent window).</p><h4>Steps</h4><ol><li>Same signed transaction retried, fee replacement reconciled by intent, not a new payment.</li></ol><h4>Accept</h4><p>Same signed transaction retried, fee replacement reconciled by intent, not a new payment.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F12</dd></div></dl></div></details><details class="acc-case" id="case-R2-F12-R03" data-case="R2-F12-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F12-R03</span><span class="c-title">Receipt reorg and finality pause leave correct pending obligations.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F12 requires (review R2 finding F12: Pool payouts have a broadcast-before-durable-intent window).</p><h4>Steps</h4><ol><li>Receipt reorg and finality pause leave correct pending obligations.</li></ol><h4>Accept</h4><p>Receipt reorg and finality pause leave correct pending obligations.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F12</dd></div></dl></div></details><details class="acc-case" id="case-R2-F13-R01" data-case="R2-F13-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F13-R01</span><span class="c-title">Repeated authorization rejected or atomically replaces and cleans prior state.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F13 requires (review R2 finding F13: Pool admission and membership need bounded resources).</p><h4>Steps</h4><ol><li>Repeated authorization rejected or atomically replaces and cleans prior state.</li></ol><h4>Accept</h4><p>Repeated authorization rejected or atomically replaces and cleans prior state.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F13</dd></div></dl></div></details><details class="acc-case" id="case-R2-F13-R02" data-case="R2-F13-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F13-R02</span><span class="c-title">Oversized unterminated frame rejected within fixed memory/time budget.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F13 requires (review R2 finding F13: Pool admission and membership need bounded resources).</p><h4>Steps</h4><ol><li>Oversized unterminated frame rejected within fixed memory/time budget.</li></ol><h4>Accept</h4><p>Oversized unterminated frame rejected within fixed memory/time budget.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F13</dd></div></dl></div></details><details class="acc-case" id="case-R2-F13-R03" data-case="R2-F13-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F13-R03</span><span class="c-title">Slow clients and invalid share floods cannot grow unbounded member, nonce or outgoing state.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F13 requires (review R2 finding F13: Pool admission and membership need bounded resources).</p><h4>Steps</h4><ol><li>Slow clients and invalid share floods cannot grow unbounded member, nonce or outgoing state.</li></ol><h4>Accept</h4><p>Slow clients and invalid share floods cannot grow unbounded member, nonce or outgoing state.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (new)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F13</dd></div></dl></div></details><details class="acc-case" id="case-R2-F14-R01" data-case="R2-F14-R01" data-state="NOT RUN"><summary><span class="c-id">R2-F14-R01</span><span class="c-title">Public build has no default arbitrary remote execution and a documented least-privilege boundary.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F14 requires (review R2 finding F14: Developer fleet control must not silently become the public client trust model).</p><h4>Steps</h4><ol><li>Public build has no default arbitrary remote execution and a documented least-privilege boundary.</li></ol><h4>Accept</h4><p>Public build has no default arbitrary remote execution and a documented least-privilege boundary.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane, relay lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F14</dd></div></dl></div></details><details class="acc-case" id="case-R2-F14-R02" data-case="R2-F14-R02" data-state="NOT RUN"><summary><span class="c-id">R2-F14-R02</span><span class="c-title">Automatic updates off remains off for urgent manifests until explicit action.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F14 requires (review R2 finding F14: Developer fleet control must not silently become the public client trust model).</p><h4>Steps</h4><ol><li>Automatic updates off remains off for urgent manifests until explicit action.</li></ol><h4>Accept</h4><p>Automatic updates off remains off for urgent manifests until explicit action.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane, relay lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F14</dd></div></dl></div></details><details class="acc-case" id="case-R2-F14-R03" data-case="R2-F14-R03" data-state="NOT RUN"><summary><span class="c-id">R2-F14-R03</span><span class="c-title">A compromised fleet/update signing key cannot silently acquire wallet access or activate a consensus change.</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>The regression R2-F14 requires (review R2 finding F14: Developer fleet control must not silently become the public client trust model).</p><h4>Steps</h4><ol><li>A compromised fleet/update signing key cannot silently acquire wallet access or activate a consensus change.</li></ol><h4>Accept</h4><p>A compromised fleet/update signing key cannot silently acquire wallet access or activate a consensus change.</p><h4>Evidence the case requires</h4><p>The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane, relay lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R2-F14</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-INT"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">18</span>INT</div><div class="acc-suite-t"><h2>INT: the master edition's integration gates (R1, the full-system review)</h2><p class="acc-sub">18 integration gates; each reads NOT RUN until its owner lane records a run</p></div><div class="acc-suite-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>the owner lanes per the coordinator's crosswalk</dd></div><div><dt>Gate</dt><dd>Integration gates closed</dd></div><div><dt>Fixtures</dt><dd>F0,F5</dd></div><div><dt>Plan pages</dt><dd>docs/plans/igneum-2.0-master/traceability.json integration_gates</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="INT: 18 cases: 0 passed under the standard, 0 running with team evidence, 1 failed, 17 not run, 0 deferred"><span class="seg g-fail" style="flex-grow:1" title="1 FAIL"></span><span class="seg g-notrun" style="flex-grow:17" title="17 NOT RUN"></span></div><span>18 cases: 0 passed under the standard, 0 running with team evidence, 1 failed, 17 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-INT-01" data-case="INT-01" data-state="NOT RUN"><summary><span class="c-id">INT-01</span><span class="c-title">Real proof H cannot authenticate a different statement under a warm cache.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-01 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Real proof H cannot authenticate a different statement under a warm cache.</li></ol><h4>Accept</h4><p>Real proof H cannot authenticate a different statement under a warm cache.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane (a6e8f84588b809d62)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-02" data-case="INT-02" data-state="NOT RUN"><summary><span class="c-id">INT-02</span><span class="c-title">Warm/cold/relay/restart/concurrent cache order does not change block or payout decisions; negative cache isolated.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-02 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Warm/cold/relay/restart/concurrent cache order does not change block or payout decisions; negative cache isolated.</li></ol><h4>Accept</h4><p>Warm/cold/relay/restart/concurrent cache order does not change block or payout decisions; negative cache isolated.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane (a6e8f84588b809d62)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-03" data-case="INT-03" data-state="NOT RUN"><summary><span class="c-id">INT-03</span><span class="c-title">Durable payout outbox survives every crash/RPC boundary without duplicate or lost liabilities.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 00:47 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-03 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Durable payout outbox survives every crash/RPC boundary without duplicate or lost liabilities.</li></ol><h4>Accept</h4><p>Durable payout outbox survives every crash/RPC boundary without duplicate or lost liabilities.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (a1c484c48a62948c2)</dd></div><div><dt>Run</dt><dd>pool-int-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-04" data-case="INT-04" data-state="NOT RUN"><summary><span class="c-id">INT-04</span><span class="c-title">Corrupt existing pool state, disk-full and reorg cause safe recovery, not silent empty balances.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 00:47 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-04 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Corrupt existing pool state, disk-full and reorg cause safe recovery, not silent empty balances.</li></ol><h4>Accept</h4><p>Corrupt existing pool state, disk-full and reorg cause safe recovery, not silent empty balances.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (a1c484c48a62948c2)</dd></div><div><dt>Run</dt><dd>pool-int-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-05" data-case="INT-05" data-state="NOT RUN"><summary><span class="c-id">INT-05</span><span class="c-title">The supplied finality implementation matches the approved anchor rule after &gt;window healing.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-05 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>The supplied finality implementation matches the approved anchor rule after &gt;window healing.</li></ol><h4>Accept</h4><p>The supplied finality implementation matches the approved anchor rule after &gt;window healing.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-06" data-case="INT-06" data-state="NOT RUN"><summary><span class="c-id">INT-06</span><span class="c-title">Recovery tests state and preserve their weaker fault bound; interfaces never label it as a stronger guarantee.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-06 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Recovery tests state and preserve their weaker fault bound; interfaces never label it as a stronger guarantee.</li></ol><h4>Accept</h4><p>Recovery tests state and preserve their weaker fault bound; interfaces never label it as a stronger guarantee.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>node lane (a283f5f0d364ceef0)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-07" data-case="INT-07" data-state="FAIL"><summary><span class="c-id">INT-07</span><span class="c-title">One v6 object agrees in node, pool, CPU verifier and each supported GPU host across activation.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:59 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-07 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>One v6 object agrees in node, pool, CPU verifier and each supported GPU host across activation.</li></ol><h4>Accept</h4><p>One v6 object agrees in node, pool, CPU verifier and each supported GPU host across activation.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)</dd></div><div><dt>Run</dt><dd>canary-202-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-08" data-case="INT-08" data-state="NOT RUN"><summary><span class="c-id">INT-08</span><span class="c-title">Census, production acceptance, schedule counters and live-dataset tests use the identical frozen contract.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-08 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Census, production acceptance, schedule counters and live-dataset tests use the identical frozen contract.</li></ol><h4>Accept</h4><p>Census, production acceptance, schedule counters and live-dataset tests use the identical frozen contract.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-09" data-case="INT-09" data-state="NOT RUN"><summary><span class="c-id">INT-09</span><span class="c-title">Eight- and twelve-GiB epoch transitions recover deliberately without relying on repeated OOM/watchdog cycles.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-09 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Eight- and twelve-GiB epoch transitions recover deliberately without relying on repeated OOM/watchdog cycles.</li></ol><h4>Accept</h4><p>Eight- and twelve-GiB epoch transitions recover deliberately without relying on repeated OOM/watchdog cycles.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-10" data-case="INT-10" data-state="NOT RUN"><summary><span class="c-id">INT-10</span><span class="c-title">Metal/CUDA/OpenCL exact dataset geometry agrees; unsupported packs reject before launch.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-10 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Metal/CUDA/OpenCL exact dataset geometry agrees; unsupported packs reject before launch.</li></ol><h4>Accept</h4><p>Metal/CUDA/OpenCL exact dataset geometry agrees; unsupported packs reject before launch.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-11" data-case="INT-11" data-state="NOT RUN"><summary><span class="c-id">INT-11</span><span class="c-title">Only a memory-reserved proving job launches; mining buffers really release when required.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-11 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Only a memory-reserved proving job launches; mining buffers really release when required.</li></ol><h4>Accept</h4><p>Only a memory-reserved proving job launches; mining buffers really release when required.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>app lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-12" data-case="INT-12" data-state="NOT RUN"><summary><span class="c-id">INT-12</span><span class="c-title">Transient shard errors can retry safely; expiration, loss and paid work remain distinct durable outcomes.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-12 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Transient shard errors can retry safely; expiration, loss and paid work remain distinct durable outcomes.</li></ol><h4>Accept</h4><p>Transient shard errors can retry safely; expiration, loss and paid work remain distinct durable outcomes.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane (a6e8f84588b809d62) and fleet lane (ac055d60427caab99)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-13" data-case="INT-13" data-state="NOT RUN"><summary><span class="c-id">INT-13</span><span class="c-title">Ember cannot retain a rate-ineligible prior; material workload changes invalidate incompatible profiles.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-13 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Ember cannot retain a rate-ineligible prior; material workload changes invalidate incompatible profiles.</li></ol><h4>Accept</h4><p>Ember cannot retain a rate-ineligible prior; material workload changes invalidate incompatible profiles.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ember lane (a04fe3451877e2ff0) with the app lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-14" data-case="INT-14" data-state="NOT RUN"><summary><span class="c-id">INT-14</span><span class="c-title">Protected helper and per-device leases restore owned settings on normal/abnormal exit; real ACL/security tests.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-14 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Protected helper and per-device leases restore owned settings on normal/abnormal exit; real ACL/security tests.</li></ol><h4>Accept</h4><p>Protected helper and per-device leases restore owned settings on normal/abnormal exit; real ACL/security tests.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ember lane (a04fe3451877e2ff0) with the app lane</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-15" data-case="INT-15" data-state="NOT RUN"><summary><span class="c-id">INT-15</span><span class="c-title">Public PoP replay is not session authorization; payout/server/network binding enforced.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 00:47 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-15 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Public PoP replay is not session authorization; payout/server/network binding enforced.</li></ol><h4>Accept</h4><p>Public PoP replay is not session authorization; payout/server/network binding enforced.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (a1c484c48a62948c2)</dd></div><div><dt>Run</dt><dd>pool-int-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-16" data-case="INT-16" data-state="NOT RUN"><summary><span class="c-id">INT-16</span><span class="c-title">Pool parsing/queues/connection and crypto budgets remain bounded under controlled adversarial traffic.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 00:47 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-16 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Pool parsing/queues/connection and crypto budgets remain bounded under controlled adversarial traffic.</li></ol><h4>Accept</h4><p>Pool parsing/queues/connection and crypto budgets remain bounded under controlled adversarial traffic.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>pool lane (a1c484c48a62948c2)</dd></div><div><dt>Run</dt><dd>pool-int-20261009-01</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-17" data-case="INT-17" data-state="NOT RUN"><summary><span class="c-id">INT-17</span><span class="c-title">Missing oracle/keys/mandatory real-proof fixture blocks the applicable production acceptance gate.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-17 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Missing oracle/keys/mandatory real-proof fixture blocks the applicable production acceptance gate.</li></ol><h4>Accept</h4><p>Missing oracle/keys/mandatory real-proof fixture blocks the applicable production acceptance gate.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>proving lane (a6e8f84588b809d62)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details><details class="acc-case" id="case-INT-18" data-case="INT-18" data-state="NOT RUN"><summary><span class="c-id">INT-18</span><span class="c-title">Whole-system economics pass the strongest feasible adversary, including sunk development and multi-epoch survival.</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>8 Oct 2026, 21:10 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Integration gate INT-18 of the master edition (R1 / Additional regression gates).</p><h4>Steps</h4><ol><li>Whole-system economics pass the strongest feasible adversary, including sunk development and multi-epoch survival.</li></ol><h4>Accept</h4><p>Whole-system economics pass the strongest feasible adversary, including sunk development and multi-epoch survival.</p><h4>Evidence the case requires</h4><p>The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>research lane (ad6a2bd47d4a46105)</dd></div><div><dt>Design status</dt><dd>NOT RUN</dd></div><div><dt>Plan pages</dt><dd>R1</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-VR"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">19</span>VR</div><div class="acc-suite-t"><h2>VR: the token value and network leadership rules (normative, proposed, requiring ratification)</h2><p class="acc-sub">40 normative rules from Igneum 2.0, Token Value &amp; Network Leadership 1.0-proposed (snapshot 2026-10-08); Supplement to original master and 128-case test standard; not a price/rank guarantee</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>founder (ratification); the owner role per rule</dd></div><div><dt>Gate</dt><dd>Ratification by the founder and each rule's owner role</dd></div><div><dt>Fixtures</dt><dd>F0</dd></div><div><dt>Plan pages</dt><dd>docs/plans/igneum-2.0-master/token-value/rules-and-gates.json rules</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="VR: 40 cases: 0 passed under the standard, 0 running with team evidence, 40 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:40" title="40 NOT RUN"></span></div><span>40 cases: 0 passed under the standard, 0 running with team evidence, 40 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-VR-01" data-case="VR-01" data-state="NOT RUN"><summary><span class="c-id">VR-01</span><span class="c-title">One monetary contract</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Ratify one maximum-supply, subsidy and change-policy contract. No unexplained tail escape, automatic emergency mint or price-triggered issuance.</li></ol><h4>Accept</h4><p>Ratify one maximum-supply, subsidy and change-policy contract. No unexplained tail escape, automatic emergency mint or price-triggered issuance.</p><h4>Evidence the case requires</h4><p>D01 decision, normative spec, executable supply tests and consistent public text.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + governance</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-02" data-case="VR-02" data-state="NOT RUN"><summary><span class="c-id">VR-02</span><span class="c-title">Independent supply accounting</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Make circulating, issued, burned, locked and maximum supply independently reproducible. Count bridges and wrappers without creating fictitious native supply.</li></ol><h4>Accept</h4><p>Make circulating, issued, burned, locked and maximum supply independently reproducible. Count bridges and wrappers without creating fictitious native supply.</p><h4>Evidence the case requires</h4><p>Two independent supply calculations with exact integer reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-03" data-case="VR-03" data-state="NOT RUN"><summary><span class="c-id">VR-03</span><span class="c-title">Equal opportunity at launch</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>No premine or privileged devnet conversion under the stated fair-launch policy. Publish efficient software and launch conditions before activation.</li></ol><h4>Accept</h4><p>No premine or privileged devnet conversion under the stated fair-launch policy. Publish efficient software and launch conditions before activation.</p><h4>Evidence the case requires</h4><p>Genesis audit, launch rehearsal, insider disclosures and public release history.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Release + ecosystem</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-04" data-case="VR-04" data-state="NOT RUN"><summary><span class="c-id">VR-04</span><span class="c-title">No artificial return promise</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Do not advertise guaranteed appreciation, passive returns without necessary work, a redemption floor or electricity-backed value.</li></ol><h4>Accept</h4><p>Do not advertise guaranteed appreciation, passive returns without necessary work, a redemption floor or electricity-backed value.</p><h4>Evidence the case requires</h4><p>Product terms, source of rewards and public-claim review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Governance + counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-05" data-case="VR-05" data-state="NOT RUN"><summary><span class="c-id">VR-05</span><span class="c-title">Fund necessary security</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Model miners, internal provers, minimum validators and maintenance separately through declining issuance. No assumption that an external sale automatically funds all roles.</li></ol><h4>Accept</h4><p>Model miners, internal provers, minimum validators and maintenance separately through declining issuance. No assumption that an external sale automatically funds all roles.</p><h4>Evidence the case requires</h4><p>Role-by-role cash flow, adverse scenarios and committed initial resources.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Economics + protocol</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-06" data-case="VR-06" data-state="NOT RUN"><summary><span class="c-id">VR-06</span><span class="c-title">Honest rule change</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Publish rationale, impact, adoption path and compatibility limits before a material monetary change. Do not pretend software can prevent all future voluntary forks.</li></ol><h4>Accept</h4><p>Publish rationale, impact, adoption path and compatibility limits before a material monetary change. Do not pretend software can prevent all future voluntary forks.</p><h4>Evidence the case requires</h4><p>Versioned proposals, reviewer comments, adoption and dissent documentation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + governance</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-07" data-case="VR-07" data-state="NOT RUN"><summary><span class="c-id">VR-07</span><span class="c-title">Transparent fee routing</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Every fee, burn, operator payment and optional Labs charge has an explicit source and recipient. No new team tax hidden in a commercial label.</li></ol><h4>Accept</h4><p>Every fee, burn, operator payment and optional Labs charge has an explicit source and recipient. No new team tax hidden in a commercial label.</p><h4>Evidence the case requires</h4><p>Executable fee tests and reconciliation to invoices/receipts.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Economics + protocol</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-08" data-case="VR-08" data-state="NOT RUN"><summary><span class="c-id">VR-08</span><span class="c-title">Separate value and money flows</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Distinguish job turnover, fees, operator income, Labs income, token holdings and market value. Do not count the same payment or saving twice.</li></ol><h4>Accept</h4><p>Distinguish job turnover, fees, operator income, Labs income, token holdings and market value. Do not count the same payment or saving twice.</p><h4>Evidence the case requires</h4><p>Reconciled flow diagram and reproducible metric definitions.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Economics + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-09" data-case="VR-09" data-state="NOT RUN"><summary><span class="c-id">VR-09</span><span class="c-title">Accessible hardware economics</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Fix the reference cohort and scenarios in advance. Allow the strongest feasible programmable multi-epoch specialist, including sunk development and alternative memory.</li></ol><h4>Accept</h4><p>Fix the reference cohort and scenarios in advance. Allow the strongest feasible programmable multi-epoch specialist, including sunk development and alternative memory.</p><h4>Evidence the case requires</h4><p>Approved original GPU/ADV/ROT/ECO profiles and independent review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>GPU + hardware reviewer</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-10" data-case="VR-10" data-state="NOT RUN"><summary><span class="c-id">VR-10</span><span class="c-title">Mandatory correct proofs</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>All activated proof decisions must bind their actual statement, kind and verifier independent of cache history. Missing trusted infrastructure must not disable enforcement.</li></ol><h4>Accept</h4><p>All activated proof decisions must bind their actual statement, kind and verifier independent of cache history. Missing trusted infrastructure must not disable enforcement.</p><h4>Evidence the case requires</h4><p>Native warm/cold/order/restart tests and positive/negative proof fixtures.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + proving</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-11" data-case="VR-11" data-state="NOT RUN"><summary><span class="c-id">VR-11</span><span class="c-title">Literal finality</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Define fault assumptions, authority continuity and recovery. Never present a weaker recovery certificate as the stronger irreversible guarantee.</li></ol><h4>Accept</h4><p>Define fault assumptions, authority continuity and recovery. Never present a weaker recovery certificate as the stronger irreversible guarantee.</p><h4>Evidence the case requires</h4><p>Native multi-node boundary tests and consumer label checks.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Consensus + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-12" data-case="VR-12" data-state="NOT RUN"><summary><span class="c-id">VR-12</span><span class="c-title">Retained operator authority</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Pooling variance or buying a service does not silently transfer keys, transaction selection or finality/governance control.</li></ol><h4>Accept</h4><p>Pooling variance or buying a service does not silently transfer keys, transaction selection or finality/governance control.</p><h4>Evidence the case requires</h4><p>Key/template substitution tests and explicit delegation contracts.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + pool</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-13" data-case="VR-13" data-state="NOT RUN"><summary><span class="c-id">VR-13</span><span class="c-title">Safe custody and consent</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Private keys, spending limits, signing displays and recovery choices remain under explicit user authority. Defaults must not conceal broad powers.</li></ol><h4>Accept</h4><p>Private keys, spending limits, signing displays and recovery choices remain under explicit user authority. Defaults must not conceal broad powers.</p><h4>Evidence the case requires</h4><p>Wallet security review and independent user/recovery exercises.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Wallet + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-14" data-case="VR-14" data-state="NOT RUN"><summary><span class="c-id">VR-14</span><span class="c-title">Portable verification</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Balances and receipts authenticate their roots, successful outcome and trust anchors. Necessary reconstruction data has a documented availability path.</li></ol><h4>Accept</h4><p>Balances and receipts authenticate their roots, successful outcome and trust anchors. Necessary reconstruction data has a documented availability path.</p><h4>Evidence the case requires</h4><p>Independent receipt/client verification with hostile inputs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Wallet + protocol</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-15" data-case="VR-15" data-state="NOT RUN"><summary><span class="c-id">VR-15</span><span class="c-title">Price real resources</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Bound execution, verification and storage costs. Sponsored transactions have limits. No deliberate congestion solely to increase a token metric.</li></ol><h4>Accept</h4><p>Bound execution, verification and storage costs. Sponsored transactions have limits. No deliberate congestion solely to increase a token metric.</p><h4>Evidence the case requires</h4><p>Minimum-node tests and fee/sponsor-abuse scenarios.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + economics</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-16" data-case="VR-16" data-state="NOT RUN"><summary><span class="c-id">VR-16</span><span class="c-title">No fragile stable-value promise</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Any stable-value product has explicit issuer, reserve/redemption rights, permissions and risks. No native-backed peg used merely to manufacture demand.</li></ol><h4>Accept</h4><p>Any stable-value product has explicit issuer, reserve/redemption rights, permissions and risks. No native-backed peg used merely to manufacture demand.</p><h4>Evidence the case requires</h4><p>Independent diligence, risk limits and legal assessment before release.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Application + counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-17" data-case="VR-17" data-state="NOT RUN"><summary><span class="c-id">VR-17</span><span class="c-title">Optional bounded bridges</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Bridge exposure is separate from core security. No bridge is mandatory for genesis or allowed to redefine base-chain finality after a loss.</li></ol><h4>Accept</h4><p>Bridge exposure is separate from core security. No bridge is mandatory for genesis or allowed to redefine base-chain finality after a loss.</p><h4>Evidence the case requires</h4><p>External security review, loss limits and failure/isolation tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Application + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-18" data-case="VR-18" data-state="NOT RUN"><summary><span class="c-id">VR-18</span><span class="c-title">Open work settlement</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Jobs bind program, inputs, result, verifier, deadline and payment. Gateways are replaceable and Labs approval is not required for ordinary work.</li></ol><h4>Accept</h4><p>Jobs bind program, inputs, result, verifier, deadline and payment. Gateways are replaceable and Labs approval is not required for ordinary work.</p><h4>Evidence the case requires</h4><p>Independent request-to-paid-result test and state reconciliation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + ecosystem</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-19" data-case="VR-19" data-state="NOT RUN"><summary><span class="c-id">VR-19</span><span class="c-title">Obligation-based service bonds</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Deposits secure a specific obligation, not consensus influence. Size and failure conditions must preserve small-operator paths and handle collateral decline.</li></ol><h4>Accept</h4><p>Deposits secure a specific obligation, not consensus influence. Size and failure conditions must preserve small-operator paths and handle collateral decline.</p><h4>Evidence the case requires</h4><p>Economic and adversarial reservation/default tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Economics + application</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-20" data-case="VR-20" data-state="NOT RUN"><summary><span class="c-id">VR-20</span><span class="c-title">Independent developer access</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Publish complete standards, fixtures and tooling. Grants reward useful maintained deliverables rather than deployments or price effects.</li></ol><h4>Accept</h4><p>Publish complete standards, fixtures and tooling. Grants reward useful maintained deliverables rather than deployments or price effects.</p><h4>Evidence the case requires</h4><p>Unaffiliated integration and maintenance evidence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Ecosystem</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-21" data-case="VR-21" data-state="NOT RUN"><summary><span class="c-id">VR-21</span><span class="c-title">Committed maintenance</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Essential maintenance and audits need a funded runway with stress accounting, distinct from hoped-for appreciation or fundraising.</li></ol><h4>Accept</h4><p>Essential maintenance and audits need a funded runway with stress accounting, distinct from hoped-for appreciation or fundraising.</p><h4>Evidence the case requires</h4><p>At least approved P13 runway, commitments and role costs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Maintainers + finance</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-22" data-case="VR-22" data-state="NOT RUN"><summary><span class="c-id">VR-22</span><span class="c-title">Founder independence</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Routine block, job, payment and recovery paths must not require a founder credential or undocumented manual action.</li></ol><h4>Accept</h4><p>Routine block, job, payment and recovery paths must not require a founder credential or undocumented manual action.</p><h4>Evidence the case requires</h4><p>Real founder-absence exercises and intervention ledger.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Operations + independent reviewer</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-23" data-case="VR-23" data-state="NOT RUN"><summary><span class="c-id">VR-23</span><span class="c-title">Measure effective control</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Report operator, pool, hosting, service and client dependencies with attribution limits. Keys and addresses are not people.</li></ol><h4>Accept</h4><p>Report operator, pool, hosting, service and client dependencies with attribution limits. Keys and addresses are not people.</p><h4>Evidence the case requires</h4><p>Dependency/control map with uncertainty and removal experiments.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Measurement + operations</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-24" data-case="VR-24" data-state="NOT RUN"><summary><span class="c-id">VR-24</span><span class="c-title">Reproducible secure release</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Pin source, binaries, rules, guests/keys and activation. Provenance is necessary but not sufficient for correctness.</li></ol><h4>Accept</h4><p>Pin source, binaries, rules, guests/keys and activation. Provenance is necessary but not sufficient for correctness.</p><h4>Evidence the case requires</h4><p>Independent builds, artifact verification and scoped review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Release + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-25" data-case="VR-25" data-state="NOT RUN"><summary><span class="c-id">VR-25</span><span class="c-title">Consent-preserving incident response</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Separate public/developer authority. Urgency must not silently override installation or grant arbitrary execution. Disclose material incidents and retest.</li></ol><h4>Accept</h4><p>Separate public/developer authority. Urgency must not silently override installation or grant arbitrary execution. Disclose material incidents and retest.</p><h4>Evidence the case requires</h4><p>Compromised-key, unsafe-update and recovery drills.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Release + operations</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-26" data-case="VR-26" data-state="NOT RUN"><summary><span class="c-id">VR-26</span><span class="c-title">Honest access and liquidity</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Use functional deposits/withdrawals and executable depth, not ticker count or fabricated volume. Never restrict exit to simulate value.</li></ol><h4>Accept</h4><p>Use functional deposits/withdrawals and executable depth, not ticker count or fabricated volume. Never restrict exit to simulate value.</p><h4>Evidence the case requires</h4><p>Independent access-route and two-sided liquidity observations.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Ecosystem + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-27" data-case="VR-27" data-state="NOT RUN"><summary><span class="c-id">VR-27</span><span class="c-title">Transparent treasury relationships</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Disclose material grants, insider holdings, inventory and market-making mandates. No wash trades or hidden price-support promises.</li></ol><h4>Accept</h4><p>Disclose material grants, insider holdings, inventory and market-making mandates. No wash trades or hidden price-support promises.</p><h4>Evidence the case requires</h4><p>Mandate register, reconciled accounts and conflict policy.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Treasury + counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-28" data-case="VR-28" data-state="NOT RUN"><summary><span class="c-id">VR-28</span><span class="c-title">Auditable metrics</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Publish definitions, raw/adjusted views, sampling, attribution uncertainty and missing data. No subsidy-hidden demand or censored failed jobs.</li></ol><h4>Accept</h4><p>Publish definitions, raw/adjusted views, sampling, attribution uncertainty and missing data. No subsidy-hidden demand or censored failed jobs.</p><h4>Evidence the case requires</h4><p>Data lineage, conservation checks and independent replay.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-29" data-case="VR-29" data-state="NOT RUN"><summary><span class="c-id">VR-29</span><span class="c-title">Fair comparison universe</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Define eligible peers and exclusions before observing rankings. Include qualifying new entrants and preserve unknown values.</li></ol><h4>Accept</h4><p>Define eligible peers and exclusions before observing rankings. Include qualifying new entrants and preserve unknown values.</p><h4>Evidence the case requires</h4><p>Independent peer census and versioned comparison protocol.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Measurement + external panel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-30" data-case="VR-30" data-state="NOT RUN"><summary><span class="c-id">VR-30</span><span class="c-title">Scoped claims only</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Every leadership claim names its metric, universe, period and limits. A measured price rank does not certify overall safety or future leadership.</li></ol><h4>Accept</h4><p>Every leadership claim names its metric, universe, period and limits. A measured price rank does not certify overall safety or future leadership.</p><h4>Evidence the case requires</h4><p>Claim register with evidence, expiry and legal signoff.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Governance + counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-31" data-case="VR-31" data-state="NOT RUN"><summary><span class="c-id">VR-31</span><span class="c-title">Evidence before pass</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Pre-register thresholds; missing inputs block gates; corrections preserve failed results. No aggregate score can waive core safety or economic failure.</li></ol><h4>Accept</h4><p>Pre-register thresholds; missing inputs block gates; corrections preserve failed results. No aggregate score can waive core safety or economic failure.</p><h4>Evidence the case requires</h4><p>Frozen test charter and versioned evidence packets.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Independent acceptance panel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-32" data-case="VR-32" data-state="NOT RUN"><summary><span class="c-id">VR-32</span><span class="c-title">Real adoption</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Measure unaffiliated retained users and useful repeat activity with incentives identified. Do not require buying IGN to participate in a study.</li></ol><h4>Accept</h4><p>Measure unaffiliated retained users and useful repeat activity with incentives identified. Do not require buying IGN to participate in a study.</p><h4>Evidence the case requires</h4><p>Cohort definitions, attrition, usage and subsidy audit.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Product + ecosystem</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-33" data-case="VR-33" data-state="NOT RUN"><summary><span class="c-id">VR-33</span><span class="c-title">AI earns admission</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>AI is an optional workload category, not a guaranteed-margin network identity. Price full costs and adverse demand before expansion.</li></ol><h4>Accept</h4><p>AI is an optional workload category, not a guaranteed-margin network identity. Price full costs and adverse demand before expansion.</p><h4>Evidence the case requires</h4><p>Workload-specific benchmark, repeat demand and verification policy.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Compute + economics</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-34" data-case="VR-34" data-state="NOT RUN"><summary><span class="c-id">VR-34</span><span class="c-title">Bound agent spending</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Automated buyers have scoped budgets, permissions, expiry, revocation and logs. Untrusted prompts never alter base permissions.</li></ol><h4>Accept</h4><p>Automated buyers have scoped budgets, permissions, expiry, revocation and logs. Untrusted prompts never alter base permissions.</p><h4>Evidence the case requires</h4><p>Prompt/input adversarial tests and payment-loss caps.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Application + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-35" data-case="VR-35" data-state="NOT RUN"><summary><span class="c-id">VR-35</span><span class="c-title">Cryptographic migration readiness</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Maintain a full algorithm inventory and reviewed transition plan. No quantum-proof claim from one component or speculative attack date.</li></ol><h4>Accept</h4><p>Maintain a full algorithm inventory and reviewed transition plan. No quantum-proof claim from one component or speculative attack date.</p><h4>Evidence the case requires</h4><p>Expert review, downgrade/migration tests and annual refresh.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Cryptography + protocol</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-36" data-case="VR-36" data-state="NOT RUN"><summary><span class="c-id">VR-36</span><span class="c-title">Separate proof, truth and privacy</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Execution validity does not establish real-world input truth, AI answer quality or confidentiality. State trust and data exposure for each service.</li></ol><h4>Accept</h4><p>Execution validity does not establish real-world input truth, AI answer quality or confidentiality. State trust and data exposure for each service.</p><h4>Evidence the case requires</h4><p>Threat model and user-facing guarantee audit.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Security + product</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-37" data-case="VR-37" data-state="NOT RUN"><summary><span class="c-id">VR-37</span><span class="c-title">Scale within verification budgets</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Throughput, data and state growth must preserve the declared minimum-node and reconstruction capabilities. Reprice security after fee compression.</li></ol><h4>Accept</h4><p>Throughput, data and state growth must preserve the declared minimum-node and reconstruction capabilities. Reprice security after fee compression.</p><h4>Evidence the case requires</h4><p>Cold-path capacity, bootstrap, pruning and provider-removal tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + operations</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-38" data-case="VR-38" data-state="NOT RUN"><summary><span class="c-id">VR-38</span><span class="c-title">Honest energy accounting</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Report complete-system energy and role allocation. Avoid double-counting joint work or making unsupported carbon/marginal-transaction claims.</li></ol><h4>Accept</h4><p>Report complete-system energy and role allocation. Avoid double-counting joint work or making unsupported carbon/marginal-transaction claims.</p><h4>Evidence the case requires</h4><p>Calibrated wall tests and documented environmental methodology.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>GPU + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-39" data-case="VR-39" data-state="NOT RUN"><summary><span class="c-id">VR-39</span><span class="c-title">Activity-specific legal approval</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>Obtain counsel review for actual audiences and activities. No-presale, fair-launch or decentralised labels are not blanket legal exemptions.</li></ol><h4>Accept</h4><p>Obtain counsel review for actual audiences and activities. No-presale, fair-launch or decentralised labels are not blanket legal exemptions.</p><h4>Evidence the case requires</h4><p>Jurisdiction/activity matrix and approved external communications.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-VR-40" data-case="VR-40" data-state="NOT RUN"><summary><span class="c-id">VR-40</span><span class="c-title">No indispensable administrator</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span><span class="none">none yet</span></span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p></p><h4>Steps</h4><ol><li>A useful company, token holder, pool, AI agent or funding body receives no hidden power over balances, issuance or canonical history.</li></ol><h4>Accept</h4><p>A useful company, token holder, pool, AI agent or funding body receives no hidden power over balances, issuance or canonical history.</p><h4>Evidence the case requires</h4><p>Authority inventory, isolation tests and independent operation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Ratification</dd></div><div><dt>Cadence</dt><dd>Once, at ratification; again on any change of the rule</dd></div><div><dt>Owner</dt><dd>Protocol + governance</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-TV"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">20</span>TV</div><div class="acc-suite-t"><h2>TV: the token value and network leadership gates (proposed; no gate executed)</h2><p class="acc-sub">32 gates from Igneum 2.0, Token Value &amp; Network Leadership 1.0-proposed (snapshot 2026-10-08); scope CORE, CAPABILITY IF ENABLED or LEADERSHIP CLAIM as the file gives it; Supplement to original master and 128-case test standard; not a price/rank guarantee</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>the owner role per gate</dd></div><div><dt>Gate</dt><dd>Token value gates closed</dd></div><div><dt>Fixtures</dt><dd>F0</dd></div><div><dt>Plan pages</dt><dd>docs/plans/igneum-2.0-master/token-value/rules-and-gates.json gates</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="TV: 32 cases: 0 passed under the standard, 0 running with team evidence, 32 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:32" title="32 NOT RUN"></span></div><span>32 cases: 0 passed under the standard, 0 running with team evidence, 32 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-TV-01" data-case="TV-01" data-state="NOT RUN"><summary><span class="c-id">TV-01</span><span class="c-title">Resolve and freeze the monetary contract</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:54 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Supply, tail, fee and recovery documents plus exact proposed release.</p><h4>Steps</h4><ol><li>Reconcile D01-D06 with protocol/economic/counsel review. Freeze thresholds and all interfaces before confirmatory tests.</li></ol><h4>Accept</h4><p>No conflicting normative policy; every material choice has a signed rationale, version, adoption path and tests. Unresolved core choice is BLOCKED.</p><h4>Evidence the case requires</h4><p>Decision log, signed specification, release manifest, test charter.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Protocol + independent panel</dd></div><div><dt>Run</dt><dd>tv-d02-20261009-03</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-02" data-case="TV-02" data-state="NOT RUN"><summary><span class="c-id">TV-02</span><span class="c-title">Reproduce complete supply accounting</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:51 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Two independent implementations; genesis and representative boundary/reorg fixtures.</p><h4>Steps</h4><ol><li>Recompute issued, paid, burned, locked and outstanding amounts through subsidy transitions, rollback/replay and duplicate records.</li></ol><h4>Accept</h4><p>Exact integer agreement; no unaccounted creation, duplicate supply or cap breach under the ratified policy. Restricted wrappers are not extra native supply.</p><h4>Evidence the case requires</h4><p>Machine-readable ledgers, vectors, independent signoff.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Protocol + measurement</dd></div><div><dt>Run</dt><dd>tv-02-20261009-01</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-03" data-case="TV-03" data-state="NOT RUN"><summary><span class="c-id">TV-03</span><span class="c-title">Fair launch and early distribution</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><a href="https://git.igneum.network/igneum-network/igneum/src/branch/master/docs/plans/igneum-2.0-master/token-value/phase0/d02/README.md" rel="noopener">record</a></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:54 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Public binaries, source, mining modes, launch notice and insider inventory.</p><h4>Steps</h4><ol><li>Rehearse from clean outsider machines; audit genesis allocations and devnet balances; simulate arrival times under alternative emission schedules.</li></ol><h4>Accept</h4><p>Zero undisclosed allocation or privileged conversion; approved notice/support window and cohort pass; distribution analysis includes delayed entrants without guaranteeing equal ownership.</p><h4>Evidence the case requires</h4><p>Genesis report, dated releases, disclosure register, simulation inputs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Release + ecosystem</dd></div><div><dt>Run</dt><dd>tv-d02-20261009-03</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-04" data-case="TV-04" data-state="NOT RUN"><summary><span class="c-id">TV-04</span><span class="c-title">Security budget without price rescue</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:54 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Ratified reward/fee rules; role costs; horizons 1, 5, 10 and 20 years.</p><h4>Steps</h4><ol><li>Model falling issuance, fee volatility and .25x/1x/4x/10x revenue, zero external jobs and -90% price. Separate role receipts and funding.</li></ol><h4>Accept</h4><p>Approved viable scenarios fund minimum required roles without hidden issuance or assumed appreciation; failure regions stated. Collapse scenarios need safe behaviour, not universal profit.</p><h4>Evidence the case requires</h4><p>Reproducible cash-flow model, assumptions, independent review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Economics + protocol</dd></div><div><dt>Run</dt><dd>tv-d02-20261009-03</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-05" data-case="TV-05" data-state="NOT RUN"><summary><span class="c-id">TV-05</span><span class="c-title">Strongest surviving specialist</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Pinned candidate/cohort; cheapest supported physical designs including SRAM/hybrid.</p><h4>Steps</h4><ol><li>Apply original ADV/GPU/ECO profiles with multi-epoch survival and development sunk. Reprice alternative state and memory implementations.</li></ol><h4>Accept</h4><p>All approved core energy and total-cost bounds pass with uncertainty; no unresolved feasible dominating design. Unknown feasibility blocks the broad claim.</p><h4>Evidence the case requires</h4><p>Design files, wall results, sensitivity model, two independent hardware opinions.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Hardware reviewer + economics</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-06" data-case="TV-06" data-state="NOT RUN"><summary><span class="c-id">TV-06</span><span class="c-title">Every fee and payment reconciles</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Native rules, payer contract and optional Labs/service invoices.</p><h4>Steps</h4><ol><li>Execute gas, proof, developer, pool, burn, sponsor and refund paths, including rounding, abort, retry and zero-demand cases.</li></ol><h4>Accept</h4><p>No unexplained recipient or double count; statements/invoices match exact contract outcomes. Network turnover never labelled Labs revenue or permanent holding demand.</p><h4>Evidence the case requires</h4><p>Flow ledger, fixtures, invoice examples, reviewed public fee table.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Economics + application</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-07" data-case="TV-07" data-state="NOT RUN"><summary><span class="c-id">TV-07</span><span class="c-title">Ownership-critical engineering closure</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Original master findings mapped to current release with genuine proof fixtures.</p><h4>Steps</h4><ol><li>Run native cache-order, fail-closed activation, payout crash and finality tests; reproduce fixed cases in independent environments.</li></ol><h4>Accept</h4><p>No unresolved critical/high finding or counterexample within the approved guarantee; all applicable original safety gates pass. Reproducing a defect is not closure.</p><h4>Evidence the case requires</h4><p>Native outputs, manifests, scoped audit, issue-by-issue closure.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Protocol + independent security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-08" data-case="TV-08" data-state="NOT RUN"><summary><span class="c-id">TV-08</span><span class="c-title">Custody and recovery usability</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Declared wallet/hardware combinations; 30 new participants, at least 15 non-miners.</p><h4>Steps</h4><ol><li>Perform receive, preview/sign, limit, recovery and revocation tasks with valueless funds; inject wrong network/address and malicious prompts.</li></ol><h4>Accept</h4><p>Zero unauthorised transfer or secret disclosure; at least 90% complete the approved safe task without private help. Report confidence limitations and all failures.</p><h4>Evidence the case requires</h4><p>Task protocol, anonymised results, security review, recovery vectors.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Wallet + independent users</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-09" data-case="TV-09" data-state="NOT RUN"><summary><span class="c-id">TV-09</span><span class="c-title">Independently verifiable settlement</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Proof/receipt client without Labs RPC; normal and recovery certificates.</p><h4>Steps</h4><ol><li>Verify successful/failed transfers, wrong asset/amount, stale roots, fake voter lists, invalid proofs and withheld data.</li></ol><h4>Accept</h4><p>All invalid claims refused; valid ordinary transfers verify within approved resource limits; weaker recovery and unavailable data never shown as stronger finality.</p><h4>Evidence the case requires</h4><p>Offline fixtures, consumer traces and independent implementation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Wallet + consensus</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-10" data-case="TV-10" data-state="NOT RUN"><summary><span class="c-id">TV-10</span><span class="c-title">Minimum-node and sponsored-use limits</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Approved minimum validator and sponsor budgets under final workload.</p><h4>Steps</h4><ol><li>Run cold proof verification, expensive invalid inputs, state growth, paymaster drain attempts and overloaded bursts.</li></ol><h4>Accept</h4><p>Original capacity/security profiles pass; budgets remain bounded; no proof skipped to catch up and no sponsor can spend outside authorised scope.</p><h4>Evidence the case requires</h4><p>Cold-path profiles, stress traces, sponsor negative tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Protocol + application</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-11" data-case="TV-11" data-state="NOT RUN"><summary><span class="c-id">TV-11</span><span class="c-title">Pooled payments without authority loss</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Independent pool/member clients and durable payment state.</p><h4>Steps</h4><ol><li>Inject key/template substitution, reauthorisation, crash/RPC ambiguity, receipt reorg and hostile bounded inputs.</li></ol><h4>Accept</h4><p>No duplicate/lost liability or unauthorised authority change; member can verify delegated powers and change pools. Session resource limits hold.</p><h4>Evidence the case requires</h4><p>Ledger replay, signed work fixtures and pool removal test.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Pool + independent operators</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-12" data-case="TV-12" data-state="NOT RUN"><summary><span class="c-id">TV-12</span><span class="c-title">Reproducible and consented software</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Release manifest, build dependencies, update keys and public installer.</p><h4>Steps</h4><ol><li>Two independent parties build/verify; simulate compromised key, stale package, rollback, urgency and missing fixtures.</li></ol><h4>Accept</h4><p>No hidden consensus variation or arbitrary default remote control; update-off remains respected; mandatory unavailable fixtures block acceptance.</p><h4>Evidence the case requires</h4><p>Attestations, independent hashes, key drill, installer/ACL review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Release + independent security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-13" data-case="TV-13" data-state="NOT RUN"><summary><span class="c-id">TV-13</span><span class="c-title">Committed maintenance coverage</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Costed roles, commitments and monthly cash dates.</p><h4>Steps</h4><ol><li>Audit at least 12 months of approved maintenance coverage; stress IGN-denominated resources and provider withdrawal.</li></ol><h4>Accept</h4><p>Original P13 satisfied without counting future appreciation or unsigned pledges; essential functions have funded substitutes and explicit shortfall response.</p><h4>Evidence the case requires</h4><p>Contracts/grants or funding proof, stress cash flow, responsibility register.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Maintainers + independent finance</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-14" data-case="TV-14" data-state="NOT RUN"><summary><span class="c-id">TV-14</span><span class="c-title">Founder-absent operating exercise</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Independent builds/operators; founder services, keys and manual help removed.</p><h4>Steps</h4><ol><li>Run 30 real days, then satisfy the original 90-day observation programme; cross boundaries, remove major providers and record all interventions.</li></ol><h4>Accept</h4><p>Approved original independence/reliability gates pass; no unpublished founder action or privileged override. Simulated long partitions are labelled separately.</p><h4>Evidence the case requires</h4><p>Dependency map, availability logs, intervention and payer ledger.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Independent operations panel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-15" data-case="TV-15" data-state="NOT RUN"><summary><span class="c-id">TV-15</span><span class="c-title">Governance and authority boundaries</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Every control/activation threshold, treasury power and application admin interface.</p><h4>Steps</h4><ol><li>Exercise hostile coalitions, absent voters, old clients and compromised non-consensus keys; test refusal and recovery.</li></ol><h4>Accept</h4><p>No actor gains undeclared issuance/balance/history authority. Every activation follows the ratified safe procedure; ambiguous threshold or recovery remains BLOCKED.</p><h4>Evidence the case requires</h4><p>Authority model, scenarios, native outcomes and independent review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Protocol + governance</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-16" data-case="TV-16" data-state="NOT RUN"><summary><span class="c-id">TV-16</span><span class="c-title">Two functional independent access routes</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>At least two unaffiliated custody/exchange/payment routes with disclosed shared infrastructure.</p><h4>Steps</h4><ol><li>Complete small controlled deposits, withdrawals, outage and reconciliation tests; identify actual custody and settlement dependencies.</li></ol><h4>Accept</h4><p>Both settle correctly; neither is merely a front end to the same indispensable provider. Gaps and jurisdiction limits visible; no listing assumed from a logo.</p><h4>Evidence the case requires</h4><p>Settlement records, dependency map and third-party confirmation.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ecosystem + independent reviewer</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-17" data-case="TV-17" data-state="NOT RUN"><summary><span class="c-id">TV-17</span><span class="c-title">Supply-price-liquidity measurement</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Frozen sources, price filters, circulating/free-float definitions and order-size bands.</p><h4>Steps</h4><ol><li>Collect 90 real days; independently replay supply and prices; measure both buy/sell execution costs and withdrawal availability.</li></ol><h4>Accept</h4><p>At least 95% daily coverage; exact supply reconciliation; no fabricated missing data. Sparse liquidity invalidates broad liquidity claims, not automatically the arithmetic cap.</p><h4>Evidence the case requires</h4><p>Raw snapshots, methodology/code, gap ledger, audit.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Measurement steward</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-18" data-case="TV-18" data-state="NOT RUN"><summary><span class="c-id">TV-18</span><span class="c-title">Real versus incentivised demand</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Customer/job/transaction definitions with privacy-respecting attribution and subsidy data.</p><h4>Steps</h4><ol><li>Reconcile raw/adjusted activity, self-dealing controls and incentives; test whether circular activity earns more than its irrecoverable cost.</li></ol><h4>Accept</h4><p>All subsidies and known related activity separated; useful demand not inferred from gross volume alone; abusive incentive loop closed before scaling rewards.</p><h4>Evidence the case requires</h4><p>Accounting model, filter logic, sensitivity and independent replay.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Economics + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-19" data-case="TV-19" data-state="NOT RUN"><summary><span class="c-id">TV-19</span><span class="c-title">Independent developer adoption</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Public kit and at least five unaffiliated developers with declared tasks.</p><h4>Steps</h4><ol><li>Build useful integrations without private dependencies; have two independent maintainers update the kit; record obstacles and adoption reason.</li></ol><h4>Accept</h4><p>All declared core integration paths work; at least five usable integrations and two maintainer reproductions. Empty subsidised deployments do not qualify.</p><h4>Evidence the case requires</h4><p>Repos, task traces, user evidence and maintenance records.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Ecosystem + external developers</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-20" data-case="TV-20" data-state="NOT RUN"><summary><span class="c-id">TV-20</span><span class="c-title">Programmable payment acceptance</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Versioned library, independent application, user/sponsor limits and receipt path.</p><h4>Steps</h4><ol><li>Execute simple/conditional/recurring payments, revocations, expiry, failed outcome and duplicate invoice cases.</li></ol><h4>Accept</h4><p>No unauthorised spend or double settlement; successful transfer independently evidenced; subjective conditions disclose adjudicator/trust.</p><h4>Evidence the case requires</h4><p>Contracts, negative vectors, user task record, security review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Application + wallet</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-21" data-case="TV-21" data-state="NOT RUN"><summary><span class="c-id">TV-21</span><span class="c-title">Useful paid proof demand</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Exact workload and final hardware path; three unrelated buyers and approved COM profile.</p><h4>Steps</h4><ol><li>Observe repeat purchases under original P14/P16 conditions, full job outcomes and operator/service costs.</li></ol><h4>Accept</h4><p>All applicable COM targets met without hidden reimbursement. Queue expiry not counted as success. A monetary-only scope cannot claim this gate passed by exclusion.</p><h4>Evidence the case requires</h4><p>Buyer evidence, cost ledger, all-job traces and independent review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Proving + independent customers</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-22" data-case="TV-22" data-state="NOT RUN"><summary><span class="c-id">TV-22</span><span class="c-title">Replaceable work-market gateway</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Two independent gateway implementations and job/settlement specification.</p><h4>Steps</h4><ol><li>Create jobs, switch providers/gateways, fail one service and deliver the same objective result using public inputs.</li></ol><h4>Accept</h4><p>Correct payment/result without Labs approval; no concealed central dispatcher or irreversible dependency. External-chain receipts labelled separately.</p><h4>Evidence the case requires</h4><p>Gateway traces, escrow reconciliation, dependency-removal run.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Application + independent operators</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-23" data-case="TV-23" data-state="NOT RUN"><summary><span class="c-id">TV-23</span><span class="c-title">Obligation-based deposits</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Proposed bond/default contract and volatile-collateral scenarios.</p><h4>Steps</h4><ol><li>Test reservation abandonment, invalid inputs, network pause, -90% collateral value and malicious claims.</li></ol><h4>Accept</h4><p>No consensus influence bought; default reason objective; compensation limits explicit; viable small-operator participation and approved risk bounds.</p><h4>Evidence the case requires</h4><p>Adversarial model, state tests, risk/legal review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Economics + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-24" data-case="TV-24" data-state="NOT RUN"><summary><span class="c-id">TV-24</span><span class="c-title">AI earns a separate commercial case</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>One bounded model/job, provider hardware, verification tier and licences.</p><h4>Steps</h4><ol><li>Benchmark full delivery vs actual alternatives; test 90% lower unit prices, demand collapse, private-data exposure and substituted models.</li></ol><h4>Accept</h4><p>Approved service economics and buyer gates pass; correctness/truth/privacy distinguished. No native price or perpetual yield assumption.</p><h4>Evidence the case requires</h4><p>End-to-end costs, repeat demand, licence/threat review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Compute + independent reviewer</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-25" data-case="TV-25" data-state="NOT RUN"><summary><span class="c-id">TV-25</span><span class="c-title">Bounded machine purchasing</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Approved account/paymaster permissions and chosen x402/agent interfaces.</p><h4>Steps</h4><ol><li>Inject hostile outputs/prompts, replayed requests, recursive spending, revoked permissions and gateway failure.</li></ol><h4>Accept</h4><p>Spend never exceeds authorised destination/time/amount scope; no instruction changes authority. Draft standard support is described accurately.</p><h4>Evidence the case requires</h4><p>Property tests, loss-cap proof, revocation/audit logs.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Application + security</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-26" data-case="TV-26" data-state="NOT RUN"><summary><span class="c-id">TV-26</span><span class="c-title">Cryptographic migration readiness</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Complete key/proof/transport/update inventory and external cryptographic review.</p><h4>Steps</h4><ol><li>Rehearse versioned signature/proof migration, downgrade/replay, mixed clients, inactive owners and minimum-node overhead.</li></ol><h4>Accept</h4><p>No unreviewed assumption or automatic confiscation; migration can be explained and tested. No absolute quantum-proof claim or attack date inferred.</p><h4>Evidence the case requires</h4><p>Inventory, expert report, migration vectors, annual schedule.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Cryptography + protocol</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-27" data-case="TV-27" data-state="NOT RUN"><summary><span class="c-id">TV-27</span><span class="c-title">Private data and oracle assurance</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Per-product claims, input trust sources, data-retention and execution model.</p><h4>Steps</h4><ol><li>Use forged data, hostile providers, telemetry leakage, unsupported attestation and false-but-correctly-executed AI outputs.</li></ol><h4>Accept</h4><p>No claim exceeds tested guarantee; secrets/data protected to stated model; unauthenticated inputs not represented as objective truth.</p><h4>Evidence the case requires</h4><p>Threat model, exposure tests, labelled user flows.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Security + product</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-28" data-case="TV-28" data-state="NOT RUN"><summary><span class="c-id">TV-28</span><span class="c-title">Stable assets and bridge isolation</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Only if enabled: issuer/bridge design, redemption rights, trust anchors and approved value caps.</p><h4>Steps</h4><ol><li>Test reserve/redemption failure, stale oracle, invalid/recovery certificates, contract compromise and emergency shutdown.</li></ol><h4>Accept</h4><p>No hidden base-chain guarantee or forced reversal of final history; independent audit, conservative exposure and counsel approval.</p><h4>Evidence the case requires</h4><p>Risk dossier, scenarios, disclosure, independent tests.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Application + security + counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-29" data-case="TV-29" data-state="NOT RUN"><summary><span class="c-id">TV-29</span><span class="c-title">Growth without inaccessible verification</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Declared minimum node, projected data growth and alternative scaling design.</p><h4>Steps</h4><ol><li>Run cold/worst-case validation, state/pruning/bootstrap, censorship and aggregation withdrawal; model 10x/100x growth and fee compression.</li></ol><h4>Accept</h4><p>Original minimum-node/security bounds hold; required data remains obtainable; security funding restated for changed fee routes.</p><h4>Evidence the case requires</h4><p>Capacity/availability results and revised economics.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Protocol + operations</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-30" data-case="TV-30" data-state="NOT RUN"><summary><span class="c-id">TV-30</span><span class="c-title">Energy and claims discipline</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Calibrated whole-system metering and workload allocation protocol.</p><h4>Steps</h4><ol><li>Measure mining, proving, mixed/time-shared operation, setup/recovery and unsuccessful work; review environmental text.</li></ol><h4>Accept</h4><p>No double-counted savings; original meter tolerances satisfied; no marginal-energy/carbon claim beyond method.</p><h4>Evidence the case requires</h4><p>Raw meter traces, job ledger, method and external review.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>GPU + measurement</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-31" data-case="TV-31" data-state="NOT RUN"><summary><span class="c-id">TV-31</span><span class="c-title">Public-claim and activity review</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Actual jurisdiction, audience, service, token-distribution and promotion plans.</p><h4>Steps</h4><ol><li>Counsel assesses applicable routes and reviews each value/rank/return/security assertion against evidence.</li></ol><h4>Accept</h4><p>Written activity-specific clearance and approved wording; no future-value assertion in a covered MiCA white paper; no blanket exemption inferred from mining.</p><h4>Evidence the case requires</h4><p>Legal decision matrix, claim register, review dates.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Qualified counsel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details><details class="acc-case" id="case-TV-32" data-case="TV-32" data-state="NOT RUN"><summary><span class="c-id">TV-32</span><span class="c-title">Observed leadership, not a roadmap certificate</span><span class="c-pri"><span class="lbl">Priority </span>P1</span><span class="c-prof"><span class="lbl">Profile </span>P00</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 09:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Approved peer universe; all applicable mandatory gates; stable release and 90-day observation.</p><h4>Steps</h4><ol><li>Run original P15/P16 comparisons and independently replay scoped rank data. Test changing peer/exclusion assumptions and missing data.</li></ol><h4>Accept</h4><p>Contender requires original criteria; market-cap first requires highest 90-day median, 95% coverage; sustained daily-first convention also needs 80% of covered days. Never certify overall best from price alone.</p><h4>Evidence the case requires</h4><p>Independent panel report, full methods/data, scope and expiry of claim.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Every release candidate</dd></div><div><dt>Owner</dt><dd>Independent acceptance panel</dd></div><div><dt>Plan pages</dt><dd>TV</dd></div></dl></div></details></div></div></section><section class="section acc-suite" id="suite-R15"><div class="container"><div class="acc-suite-head"><div class="acc-suite-code"><span class="n">21</span>R15</div><div class="acc-suite-t"><h2>R15: the 1.5x Research Programme packages (proposed; every package NOT RUN; the plan claims no pass)</h2><p class="acc-sub">10 packages from IGNEUM, The 1.5x Research Programme (9 October 2026); PROPOSED; every package NOT RUN; the plan claims no pass; the X and B cross-references on each package are the research-landing hand's reading of the plan against the brief's matrix and track B, for the coordinator to confirm; the lanes block names the owner lanes as the coordinator named them on 9 October</p></div><div class="acc-suite-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></div></div><dl class="acc-facts"><div><dt>Owner</dt><dd>the X and B lanes per package; the coordinator confirms the cross-references</dd></div><div><dt>Gate</dt><dd>1.5x programme packages closed</dd></div><div><dt>Fixtures</dt><dd>F0</dd></div><div><dt>Plan pages</dt><dd>docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json (igneum-1p5x-research-plan.md, section 10 'Proposed execution packages' (the table whose rows begin '| R15-'))</dd></div></dl><div class="acc-suite-bar"><div class="acc-bar" role="img" aria-label="R15: 10 cases: 0 passed under the standard, 0 running with team evidence, 10 not run, 0 deferred"><span class="seg g-notrun" style="flex-grow:10" title="10 NOT RUN"></span></div><span>10 cases: 0 passed under the standard, 0 running with team evidence, 10 not run, 0 deferred</span></div><div class="acc-cases"><div class="acc-cases-h" aria-hidden="true"><span>Case</span><span>Title</span><span>Priority</span><span>Profile</span><span>Status</span><span>Evidence</span><span>Last run</span><span></span></div><details class="acc-case" id="case-R15-01" data-case="R15-01" data-state="NOT RUN"><summary><span class="c-id">R15-01</span><span class="c-title">R15-01: Release + measurement</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 12:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Package R15-01 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Latest exact pack, physical assumptions, source manifest, current ratio reconciliation</p><h4>Steps</h4><ol><li>The lane(s) X0 produce the required artefact; the package's gate is read against it by the independent review.</li></ol><h4>Accept</h4><p>No cross-version mixed baseline</p><h4>Evidence the case requires</h4><p>The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Once per programme round</dd></div><div><dt>Owner</dt><dd>X0</dd></div><div><dt>Run</dt><dd>lab-20261009-01</dd></div><div><dt>Plan pages</dt><dd>R15</dd></div></dl></div></details><details class="acc-case" id="case-R15-02" data-case="R15-02" data-state="NOT RUN"><summary><span class="c-id">R15-02</span><span class="c-title">R15-02: GPU + hardware</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 11:06 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Package R15-02 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Component power/traffic model and sensitivity analysis</p><h4>Steps</h4><ol><li>The lane(s) X0, X5 produce the required artefact; the package's gate is read against it by the independent review.</li></ol><h4>Accept</h4><p>No device/whole-machine boundary mismatch</p><h4>Evidence the case requires</h4><p>The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Once per programme round</dd></div><div><dt>Owner</dt><dd>X0, X5</dd></div><div><dt>Run</dt><dd>r15-02-x7-20261009-01</dd></div><div><dt>Plan pages</dt><dd>R15</dd></div></dl></div></details><details class="acc-case" id="case-R15-03" data-case="R15-03" data-state="NOT RUN"><summary><span class="c-id">R15-03</span><span class="c-title">R15-03: GPU + memory analysis</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 11:06 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Package R15-03 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Layer-8-off control and held-out cache curves</p><h4>Steps</h4><ol><li>The lane(s) X1 produce the required artefact; the package's gate is read against it by the independent review.</li></ol><h4>Accept</h4><p>Distinct benefit after best cache adaptation</p><h4>Evidence the case requires</h4><p>The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Once per programme round</dd></div><div><dt>Owner</dt><dd>X1</dd></div><div><dt>Run</dt><dd>r15-int8-20261009-01</dd></div><div><dt>Plan pages</dt><dd>R15</dd></div></dl></div></details><details class="acc-case" id="case-R15-04" data-case="R15-04" data-state="NOT RUN"><summary><span class="c-id">R15-04</span><span class="c-title">R15-04: GPU systems</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 11:23 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Package R15-04 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Compaction, exact-fold alternatives and tuning results</p><h4>Steps</h4><ol><li>The lane(s) X2, X3, X4 produce the required artefact; the package's gate is read against it by the independent review.</li></ol><h4>Accept</h4><p>Byte agreement, real accepted-work savings</p><h4>Evidence the case requires</h4><p>The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Once per programme round</dd></div><div><dt>Owner</dt><dd>X2, X3, X4</dd></div><div><dt>Run</dt><dd>1p5x-x4-20261009</dd></div><div><dt>Plan pages</dt><dd>R15</dd></div></dl></div></details><details class="acc-case" id="case-R15-05" data-case="R15-05" data-state="NOT RUN"><summary><span class="c-id">R15-05</span><span class="c-title">R15-05: Cryptography</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 11:06 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Package R15-05 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Exact published MHPoW control, theorem audit, malicious fixtures</p><h4>Steps</h4><ol><li>The lane(s) B1 produce the required artefact; the package's gate is read against it by the independent review.</li></ol><h4>Accept</h4><p>No improvised sampled-memory soundness</p><h4>Evidence the case requires</h4><p>The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Once per programme round</dd></div><div><dt>Owner</dt><dd>B1</dd></div><div><dt>Run</dt><dd>r15-track-b-20261009-02</dd></div><div><dt>Plan pages</dt><dd>R15</dd></div></dl></div></details><details class="acc-case" id="case-R15-06" data-case="R15-06" data-state="NOT RUN"><summary><span class="c-id">R15-06</span><span class="c-title">R15-06: GPU + cryptography</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:19 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Package R15-06 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Theorem-preserving layout/parallelisation feasibility</p><h4>Steps</h4><ol><li>The lane(s) B3 produce the required artefact; the package's gate is read against it by the independent review.</li></ol><h4>Accept</h4><p>GPU competitiveness and cheap-enough verification</p><h4>Evidence the case requires</h4><p>The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Once per programme round</dd></div><div><dt>Owner</dt><dd>B3</dd></div><div><dt>Plan pages</dt><dd>R15</dd></div></dl></div></details><details class="acc-case" id="case-R15-07" data-case="R15-07" data-state="NOT RUN"><summary><span class="c-id">R15-07</span><span class="c-title">R15-07: Cryptography + hardware</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 11:28 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Package R15-07 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Joint accepted-proof resource frontier with concrete constants</p><h4>Steps</h4><ol><li>The lane(s) B2, B4 produce the required artefact; the package's gate is read against it by the independent review.</li></ol><h4>Accept</h4><p>No invalid theorem composition</p><h4>Evidence the case requires</h4><p>The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Once per programme round</dd></div><div><dt>Owner</dt><dd>B2, B4</dd></div><div><dt>Run</dt><dd>mhpow-b4-20261009-02</dd></div><div><dt>Plan pages</dt><dd>R15</dd></div></dl></div></details><details class="acc-case" id="case-R15-08" data-case="R15-08" data-state="NOT RUN"><summary><span class="c-id">R15-08</span><span class="c-title">R15-08: Independent ASIC team</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 12:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Package R15-08 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Re-optimised SRAM/DRAM/hybrid/recompute/PIM scenarios</p><h4>Steps</h4><ol><li>The lane(s) X5, B5 produce the required artefact; the package's gate is read against it by the independent review.</li></ol><h4>Accept</h4><p>Full-storage adversary not excluded by price</p><h4>Evidence the case requires</h4><p>The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Once per programme round</dd></div><div><dt>Owner</dt><dd>X5, B5</dd></div><div><dt>Run</dt><dd>lab-20261009-01</dd></div><div><dt>Plan pages</dt><dd>R15</dd></div></dl></div></details><details class="acc-case" id="case-R15-09" data-case="R15-09" data-state="NOT RUN"><summary><span class="c-id">R15-09</span><span class="c-title">R15-09: Measurement + economics</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 12:45 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Package R15-09 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Blind cohort confirmation and separate P12 outcomes</p><h4>Steps</h4><ol><li>The lane(s) X6 produce the required artefact; the package's gate is read against it by the independent review.</li></ol><h4>Accept</h4><p>Strongest credible ratio, not average</p><h4>Evidence the case requires</h4><p>The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Once per programme round</dd></div><div><dt>Owner</dt><dd>X6</dd></div><div><dt>Run</dt><dd>lab-20261009-01</dd></div><div><dt>Plan pages</dt><dd>R15</dd></div></dl></div></details><details class="acc-case" id="case-R15-10" data-case="R15-10" data-state="NOT RUN"><summary><span class="c-id">R15-10</span><span class="c-title">R15-10: Protocol/security</span><span class="c-pri"><span class="lbl">Priority </span>P0</span><span class="c-prof"><span class="lbl">Profile </span>P04</span><span class="c-st"><span class="acc-chip s-notrun" data-state="NOT RUN">NOT RUN</span></span><span class="c-ev"><span class="lbl">Evidence </span><span class="none">none yet</span></span><span class="c-run"><span class="lbl">Last run </span>9 Oct 2026, 10:19 UK</span><span class="c-caret" aria-hidden="true"></span></summary><div class="acc-panel"><blockquote><h4>Setup</h4><p>Package R15-10 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Network and pool integration, no-rescue exercise, public evidence</p><h4>Steps</h4><ol><li>The lane(s) B6 produce the required artefact; the package's gate is read against it by the independent review.</li></ol><h4>Accept</h4><p>Correctness and safe operation remain intact</p><h4>Evidence the case requires</h4><p>The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.</p></blockquote><dl class="acc-meta"><div><dt>Method</dt><dd>Automated + independent review</dd></div><div><dt>Cadence</dt><dd>Once per programme round</dd></div><div><dt>Owner</dt><dd>B6</dd></div><div><dt>Plan pages</dt><dd>R15</dd></div></dl></div></details></div></div></section><section class="section acc-profiles" id="profiles"><div class="container"><div class="eyebrow"><span class="line"></span>Profiles</div><h2>The numbers each case is held to.</h2><p class="acc-sub">17 profiles, P00 to P16. A profile is frozen before the confirmatory run; weakening a target after a failure creates a different claim.</p><div class="acc-prof-grid"><article class="acc-prof approved" id="profile-P00"><div class="acc-prof-top"><span class="acc-prof-id">P00</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Frozen scope and approval</h3><ol class="acc-req"><li>Approve the release manifest, supported roles, numerical profiles, mandatory scenarios, trust/fault model, workload W, adapters and claims before confirmatory tests. Unknown values are BLOCKED, not defaults.</li><li>Core safety and authentication invariants admit no waiver. Proposed performance or commercial targets may be replaced only before the confirmatory run, with an independent rationale and a versioned public scope.</li><li>After a failure, weakening a target creates a different claim and requires a new assessment. Preserve all failed runs; do not average a blocker away.</li></ol><p class="acc-prof-n">Cited by 148 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P01"><div class="acc-prof-top"><span class="acc-prof-id">P01</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Correctness and negative-test depth</h3><ol class="acc-req"><li>Zero observed invalid acceptance, unauthorised signature, conflicting finality within assumptions, duplicated reward or unexplained cross-backend state/hash disagreement.</li><li>Minimum proposed campaign: 1,000,000 full-hash vectors per supported backend across all families, plus at least 10,000 malformed/boundary cases per relevant parser or binding class. Include exhaustive small-domain cases and historical regressions.</li><li>All prescribed critical mutants must be detected. This sampling target is not a bound on cryptographic failure probability and does not replace independent reasoning about soundness or safety.</li></ol><p class="acc-prof-n">Cited by 69 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P02"><div class="acc-prof-top"><span class="acc-prof-id">P02</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Hardware coverage and reproducibility</h3><ol class="acc-req"><li>At least 12 physical retail configurations: at least 3 NVIDIA, 3 AMD and 2 Apple configurations, at least two discrete-GPU generations, an advertised 8 GB mining tier and 12 GB proving tiers where claimed. Record usable, not nominal, memory.</li><li>Declare a competitive core of at least 6 configurations spanning every advertised vendor and at least two discrete generations before optimisation. The wider cohort remains mandatory for access and economic tests; it cannot be silently dropped.</li><li>Use 5 paired 30-minute steady-state runs per primary cell after at least 15 minutes of warm-up and a stable temperature trend. Calibrated wall meter uncertainty must be at most 2%. Run a 7-day soak on representative low/mid/high tiers.</li><li>Three unaffiliated operators participate; every competitive-core cell is reproduced by at least two. Identical-SKU energy/accepted-work results must agree within 5% after declared environment corrections; unexplained variance blocks the headline.</li></ol><p class="acc-prof-n">Cited by 12 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P03"><div class="acc-prof-top"><span class="acc-prof-id">P03</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Candidate improvement and honest-card budget</h3><ol class="acc-req"><li>For production candidate changes, per mandatory GPU cell: no more than 5% increase in joules per accepted work and no more than 2% decrease in accepted throughput versus the paired tuned baseline. Absolute safety limits always apply.</li><li>G2 requires at least a 10% reduction in the strongest evaluated specialist advantage after redesign, outside the declared measurement/model uncertainty, while meeting those budgets. A failed experiment is not a successful upgrade.</li><li>Existing clock-lock savings belong in the baseline. Long programs cannot pass by adding enough equally costly work to both devices to improve a ratio while materially worsening honest operation.</li></ol><p class="acc-prof-n">Cited by 8 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P04"><div class="acc-prof-top"><span class="acc-prof-id">P04</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Scoped specialist-competition target</h3><ol class="acc-req"><li>Define R_E as GPU wall joules per accepted work divided by the lowest credible complete-system specialist joules for that same work. The proposed target is R_E at most 1.5 for every competitive-core cell at the same node and one node ahead.</li><li>Evaluate at least three materially distinct specialist architectures, with one programmable multi-family design, and a second independent reviewer. Include shared/reduced memory, hybrid execution, selective participation and realistic power/host costs.</li><li>Publish two-node-ahead and modular/reused-IP stress cases; they must satisfy the predeclared P12 economic envelope. No universal ceiling for unknown future hardware is claimed. Report model bounds separately from statistical confidence.</li><li>A lower-bound specialist estimate, not a convenient average or a deliberately constrained reference architecture, drives the conservative comparison. Undefined or unbounded decision-critical assumptions make the result BLOCKED.</li></ol><p class="acc-note"><span class="acc-chip s-fail" data-state="FAIL">FAIL</span> <span>R_E target at most 1.5 at the same node and one node ahead; today's placed bracket 1.5x to 2.1x: FAIL</span></p><p class="acc-prof-n">Cited by 24 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P05"><div class="acc-prof-top"><span class="acc-prof-id">P05</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Measurement and inference protocol</h3><ol class="acc-req"><li>Pre-register primary metrics, cohorts, holdout seeds, run order, exclusions and analysis before confirmation. Keep tuning/training runs separate from holdout runs.</li><li>Use independent runs/operators as measurement units. Report point estimates, two-sided 95% measurement intervals and absolute sample counts; handle time-series dependence with a declared block or run-level method.</li><li>Apply conservative uncertainty to pass decisions. A confidence interval around measured GPU energy does not capture unknown ASIC architectures; model parameter ranges and expert judgement must be reported as such.</li><li>Never compare raw hashes per second across different algorithms. Do not transform a five-year scenario sweep into a probability of chip arrival or a guarantee of future profitability.</li></ol><p class="acc-prof-n">Cited by 0 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P06"><div class="acc-prof-top"><span class="acc-prof-id">P06</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Memory and support policy</h3><ol class="acc-req"><li>All advertised role/configuration combinations must finish without OOM, corruption or unsafe fallback. Publish a component memory budget, including display/OS, driver, miner, prover, aggregation and epoch construction.</li><li>Proposed support horizon: at least 24 months of known schedule compatibility for the advertised entry tier, unless a narrower horizon is prominently approved before sale or launch. Removal changes the claim and must pass ECO-07.</li><li>Treat 5.5 / 8.5 / 11.5 GiB as source candidates, not imposed final rules. Simultaneous operation, eviction and time-sharing are distinct advertised modes with separately measured cost.</li></ol><p class="acc-prof-n">Cited by 4 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P07"><div class="acc-prof-top"><span class="acc-prof-id">P07</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Proof service capacity and fairness</h3><ol class="acc-req"><li>Freeze W as a meaningful workload mix, input sizes, proof format, fleet and requests/hour. Primary proposed target: 72 hours at W, plus 24 hours at 1.2W; at least 99.5% accepted jobs delivered valid within the contracted deadline.</li><li>Default delivery targets for the declared internal reference workload: p95 at most 60 seconds and p99 at most 120 seconds from input-ready assignment through verified delivery. Also publish request-to-delivery including input wait; no claim may omit that delay.</li><li>Request-to-delivery p99 must meet the separately approved customer deadline. Payment p99 must be at most 10 minutes after verified payable eligibility, with chain finality time reported separately. These defaults do not override a stricter contract.</li><li>No statistically supported positive backlog drift at steady load, no silent drops; after 2W for 15 minutes, drain excess backlog within 30 minutes of return to W. Report rejected demand and accepted-job success separately.</li><li>Proposed advertised-tier fairness: at least 90% timely valid assigned completions are paid under the approved rules; avoidable duplicate/retry work is at most 10% of total work. Reassignment policy must bound abandonment without promising every assignment a reward.</li></ol><p class="acc-prof-n">Cited by 15 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P08"><div class="acc-prof-top"><span class="acc-prof-id">P08</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Fault assumptions and recovery</h3><ol class="acc-req"><li>F0 must state the exact safety threshold, quorum and authority-transition rule; the synchrony/participation assumptions for liveness; trusted inputs; and clock/expiry semantics. This manual supplies no substitute consensus rule.</li><li>Exercise threshold-minus/at/plus cases, the 40/40/20 partition fixture, signing outages and 31/35/60/90 logical-day expiry cases. Preserve safety when liveness assumptions fail; do not demand finality from an unavailable quorum.</li><li>After assumptions and input availability are restored: service replacement within 10 minutes and deterministic network convergence within 30 minutes on the reference topology. Different certified bounds must be approved beforehand.</li><li>Accelerated-time simulation and real elapsed operation are separate evidence classes. Recovery may not reverse a guarantee previously represented as final.</li></ol><p class="acc-prof-n">Cited by 25 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P09"><div class="acc-prof-top"><span class="acc-prof-id">P09</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Security and bounded resource requirements</h3><ol class="acc-req"><li>Zero unresolved critical or high-severity security findings on the claimed release. Independent scopes must cover consensus, proof soundness/parameters, implementation bypasses, wallet/isolation and relevant operational controls.</li><li>Review the intended proof-system security level and assumptions explicitly; do not infer a security-bit claim from random rejection tests. Version every verifier, program and parameter set.</li><li>Freeze maximum valid/invalid verification time, memory, disk and admission rates for ordinary validator hardware. At rated valid load plus the approved hostile load, no unbounded growth, invalid acceptance or unrecoverable process failure.</li><li>For supported wallet fee-estimation cases, proposed absolute error at most 5% versus the specified charge when inputs are unchanged; deterministic fee-cap handling and explicit uncertainty otherwise. Customer contracts remain separately binding.</li></ol><p class="acc-prof-n">Cited by 30 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P10"><div class="acc-prof-top"><span class="acc-prof-id">P10</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Ordinary-operator product targets</h3><ol class="acc-req"><li>At least 30 unaffiliated first-time study participants across supported Windows/macOS combinations. At least 90% install, configure safely and submit accepted work without staff help; p90 active setup at most 15 minutes. Publish complete download/dataset time separately.</li><li>Pause/stop acknowledgement within 2 seconds, safe worker stop within 5 seconds where no documented atomic operation prevents it, and reliable restoration of original tuning settings. No hidden custody or silent update.</li><li>Net-energy/fee displays reconcile within 5% under the declared measurement boundary. Incremental rejected-work loss on the normal home-link profile is at most 2 percentage points over the matched datacentre profile.</li><li>Open miner efficiency is within 5% of the best independently tuned permitted implementation on identical work. For the declared single-card payout case, p95 payable-to-payment at most 24 hours and total payout friction at most 2% of earned value.</li><li>Critical alerts are emitted within 60 seconds of detectable evidence. At least 90% of study users can identify the injected failure and follow the published safe action. No control target excuses a security failure.</li></ol><p class="acc-prof-n">Cited by 11 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P11"><div class="acc-prof-top"><span class="acc-prof-id">P11</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>No-founder exercise and independence</h3><ol class="acc-req"><li>At least 10 verified unaffiliated operators, three independently administered network/hosting domains and sufficient honest weight/capacity to satisfy F0 and W after founders are removed.</li><li>Run at least 30 real elapsed days without founder mining, proving, aggregation, bootstrap, required RPC, private files or privileged interventions. Cross all known logical transitions separately without calling accelerated time real history.</li><li>Document control by role and common dependencies; uncertain identities are not counted as independent. Within-assumption withdrawals must satisfy P08; losing more than the assumed quorum may cause a visible safe pause.</li></ol><p class="acc-prof-n">Cited by 4 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P12"><div class="acc-prof-top"><span class="acc-prof-id">P12</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Five-year coexistence envelope</h3><ol class="acc-req"><li>Freeze a sourced revenue reference R and mandatory worlds before results. Sweep 0.25R, R, 4R and 10R; electricity at $0.03/$0.10/$0.25/$0.40 per kWh; 1/3/5-year productive life; zero/$20M/$75M development; private mining and hardware sales; no/normal/spiking external demand.</li><li>Those values are proposed stress inputs, not current prices or forecasts. Declare which worlds have enough funded demand for rational ongoing service before running; retain collapse worlds as explicit safety/exit tests, not profitable successes.</li><li>Proposed matched-tariff new-entry target in every mandatory sustainable world: median GPU/specialist total cost per accepted work at most 1.5, 90th percentile at most 1.75, and no advertised competitive-core cell above 2.0. Publish every cell, including heterogeneous tariffs.</li><li>At least three purchasable GPU configurations across at least two advertised vendors must have positive modelled new-entry economics; at least 75% of the entry cohort must have positive marginal operating economics in those worlds. Report model uncertainty and failure regions.</li><li>Do not impose GPU market share, specialist production limits, token appreciation, full research-cost recovery or automatic chip death to force the result. Any such condition must become an explicit limitation rather than a hidden assumption.</li></ol><p class="acc-prof-n">Cited by 24 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof deferred" id="profile-P13"><div class="acc-prof-top"><span class="acc-prof-id">P13</span><span class="acc-pstate deferred">Deferred by the founder</span></div><h3>Maintenance continuity</h3><ol class="acc-req"><li>Before a readiness claim, document at least 12 months of committed maintenance resources at the approved operating scope. Include engineering, security review, infrastructure, support and incident response.</li><li>Use independently reviewable commitments and downside budgets. Uncommitted future sales, rising token prices, burned fees or assumed fundraising are not available resources.</li><li>This is a proposed governance test, not a directive to change the supply cap, issuance allocation or fair-launch design.</li></ol><p class="acc-prof-n">Cited by 1 case. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P14"><div class="acc-prof-top"><span class="acc-prof-id">P14</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Genuine commercial and developer proof</h3><ol class="acc-req"><li>At least three unrelated paying buyer organisations, each making at least three separate purchase decisions across at least 30 days; at least 1,000 meaningful verified external jobs in aggregate. Split invoices do not create independent demand.</li><li>No project reimbursement, circular funding or undisclosed related party counts. Report customer concentration and churn; proposed maximum largest-buyer share is 70% of qualifying revenue.</li><li>At least 20% aggregate contribution margin after directly attributable delivery costs, retries, refunds and support; publish fully loaded economics separately. At least 75% of sampled eligible operators have positive realised contribution on the declared workload.</li><li>At least five unaffiliated developers complete a useful supported application or proof-service integration using public documentation. Customer confirmation and raw commercial evidence may remain confidential to the reviewer.</li></ol><p class="acc-prof-n">Cited by 10 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P15"><div class="acc-prof-top"><span class="acc-prof-id">P15</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Comparative contention threshold</h3><ol class="acc-req"><li>Pre-register at least three relevant operating GPU-first peers, plus a real proving alternative for customer comparisons. Verify current versions at execution time. The source reference set is a starting point, not a claim about current rankings.</li><li>Require at least three meaningful comparable dimensions with no material inferiority beyond a pre-agreed 10% margin against the best valid comparator, and at least two independently evidenced advantages against at least two peers.</li><li>Advantages must be either a greater-than-10% measured improvement outside uncertainty or a directly tested control/capability difference with demonstrated user value. Non-comparable or missing data is not a win.</li><li>A panel with hardware/economics, security/operations and customer/operator expertise must support the scoped contender conclusion. Passing these judgement-based thresholds does not certify a universal number-one ranking.</li></ol><p class="acc-prof-n">Cited by 5 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article><article class="acc-prof approved" id="profile-P16"><div class="acc-prof-top"><span class="acc-prof-id">P16</span><span class="acc-pstate approved">Approved as proposed</span></div><h3>Observed durability and claim freshness</h3><ol class="acc-req"><li>At least 90 real elapsed days on the final compatible release family, at least 30 independently verified operators, and transparent eligibility/churn denominators. Material uncomparable changes reset affected observations.</li><li>Proposed outcomes: at least 60% day-90 operator retention and at least 75% of eligible observed operators with positive measured marginal operation over the period. Report incentives and electricity assumptions; do not claim a downturn was observed if it was not.</li><li>At least 99.9% availability for the declared customer service during eligible operating conditions, with all-in availability also reported; zero accepted invalid proofs or conflicting finality within F0 assumptions. Do not remove real incidents as maintenance to force a pass.</li><li>Run fault injection on isolated infrastructure, not unsuspecting customers. Publish planned test windows separately. Reassess claims at least quarterly and immediately after material hardware, protocol, economics or security changes.</li></ol><p class="acc-prof-n">Cited by 5 cases. The profile’s own line in the registry: PROPOSED, REQUIRES APPROVAL.</p></article></div></div></section><section class="section acc-fixtures" id="fixtures"><div class="container"><div class="eyebrow"><span class="line"></span>Fixtures</div><h2>What every run is built on.</h2><div class="acc-fix-grid"><article class="acc-fix" id="fixture-F0"><span class="acc-fix-id">F0</span><h3>Release and assurance manifest</h3><p>Exact commits, binaries, genesis/network ID, mining class, dataset schedule, EVM fork/deviations, program/verifier IDs, fees, supply, quorum/fault rules, trust anchors, activation and supported roles.</p></article><article class="acc-fix" id="fixture-F1"><span class="acc-fix-id">F1</span><h3>Clean build environments</h3><p>Pinned toolchains, dependency locks, clean OS images and documented signing/notarisation boundaries. No production secrets or private founder files.</p></article><article class="acc-fix" id="fixture-F2"><span class="acc-fix-id">F2</span><h3>Hardware and measurement lab</h3><p>Approved physical GPU cohort, calibrated wall meters, stable thermal conditions, driver/OS images and realistic home/datacentre link conditions.</p></article><article class="acc-fix" id="fixture-F3"><span class="acc-fix-id">F3</span><h3>Workload and oracle catalogue</h3><p>Fixed full-hash and EVM/proving jobs, independent reference implementations, real customer-sized payloads, held-out seeds and complete expected results.</p></article><article class="acc-fix" id="fixture-F4"><span class="acc-fix-id">F4</span><h3>Authorised fault network</h3><p>Independent nodes/operators; controllable latency, loss, clocks, partitions, storage faults and role withdrawals. Actual consensus paths plus separately labelled simulators.</p></article><article class="acc-fix" id="fixture-F5"><span class="acc-fix-id">F5</span><h3>Negative and regression corpus</h3><p>Malformed transactions/proofs, wrong roots/IDs, duplicate payments, bad authority tables, historical failures and deliberately faulty code mutants.</p></article><article class="acc-fix" id="fixture-F6"><span class="acc-fix-id">F6</span><h3>Specialist implementation pack</h3><p>Functionally checked architectures, RTL/physical estimates where feasible, memory and board assumptions, cost inputs, adaptation paths and uncertainty ranges.</p></article><article class="acc-fix" id="fixture-F7"><span class="acc-fix-id">F7</span><h3>Economic and incentive models</h3><p>Independently reproducible costs, entry/exit/difficulty policies, scenario grid, operator opportunity costs and money-flow conservation fixtures.</p></article><article class="acc-fix" id="fixture-F8"><span class="acc-fix-id">F8</span><h3>User/customer/peer studies</h3><p>Consenting unaffiliated users, contracted meaningful workloads, private ownership checks, dated competitor methods and independent analysis.</p></article><article class="acc-fix" id="fixture-F9"><span class="acc-fix-id">F9</span><h3>Evidence and status vault</h3><p>Immutable run IDs, raw logs, hashes, analysis code, exclusions, defects, reviewers, signatures, privacy controls and public redacted summaries.</p></article></div></div></section><section class="section acc-foot" id="notes"><div class="container"><div class="acc-foot-card"><div class="eyebrow"><span class="line"></span>What a full pass means</div><p class="acc-allpass">Independent passage of all mandatory and claimed-option gates, including commercial and comparative observation, can support a scoped leadership-contender assessment. It does not prove a universal rank or eliminate unknown future hardware risks.</p><p>Test design, not executed evidence. All numeric additions are proposed, not source-approved protocol rules. Optional claimed features require their tests; excluded features earn no pass credit.</p><h3>Rules in force</h3><ul class="acc-rules"><li>P03: a candidate change pays at most 5 percent of joules per accepted work and loses at most 2 percent of accepted throughput against the paired tuned baseline (replaces the 10 percent budget from 18:2x UK)</li><li>P04: R_E at most 1.5 for every competitive-core cell at the same node and one node ahead against the lowest credible complete-system specialist; today's placed bracket (1.5x to 2.1x same-node) is a FAIL to work against and is served as such</li><li>P12: the matched-tariff median at most 1.5, p90 at most 1.75, no core cell above 2.0</li><li>P02: twelve retail configurations, three unaffiliated operators, the seven-day soak define D1's reproduction</li></ul><p class="acc-never" data-never-served>Never served: guaranteed chip death, a universal ASIC-efficiency ceiling, chip-arrival probabilities, guaranteed profits, Ethereum security by compatibility, privacy from ZK, a numerical rank.</p><p class="acc-src"><b>Source:</b> <code>docs/plans/igneum-2.0-test-registry.json</code>, version 1.0, dated 8 October 2026, plan sha256 <code>418b3b9f68f96a41</code>. <span id="acc-live">This copy was written when the page was built; the page checks the registry on the public git host every 60 seconds.</span></p></div></div></section></div>
+<script type="application/json" id="acceptance-data">{"title":"IGNEUM 2.0 - Test and Acceptance Standard","version":"1.0","date":"2026-10-08","status":"APPROVED 8 October 2026 (the founder, 18:2x UK): \"approve as proposed in the tests, forget P13 for now\"; the test design stands as PROPOSED, NOT EXECUTED until a case runs under it","basis":"IGNEUM_2.0_Plan.pdf, 37 pages, 8 October 2026","suites":[{"code":"GOV","title":"Release identity and evidence","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","fixtures":"F0 manifest; F1 source/build archives; F9 evidence vault","summary":"Prevent a favourable result from being attached to the wrong code, assumptions or public claim.","tests":[{"id":"GOV-01","title":"Freeze the release and its claims","setup":"Candidate source, binaries, public documentation and the 2.0 plan are available; no run is yet accepted.","steps":["Record exact commits, binary hashes, dependencies, genesis/network identity, mining class, datasets, execution fork, verifier IDs and fee rules in F0.","Map every promised capability and plan requirement to a test ID; distinguish supported mining, proving and wallet combinations.","Sign the manifest with protocol, product and independent review owners before confirmatory runs."],"accept":"Every material rule and claim has an unambiguous version and test. Conflicts or unknown activation rules produce BLOCKED, not an inferred default. Changes create a new manifest and invalidate affected results.","evidence":"Signed F0; source-to-test map; claim inventory; unresolved-field register.","priority":"BLOCKER","profile":"P00","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":18,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","evidence_path":"docs/plans/igneum-2.0-f0-manifest.md; build-4:/srv/builds/igneum-wt-ci-steward-202","run_id":"f0-signing-20261008-2330","updated":"2026-10-09T07:43:10.751Z","evidence_record":{"requirement_id":"GOV-01","decision":"NOT RUN","method":"static","cell":"check:freeze","manifest_sha":"1a938abe","run_id":"f0-signing-20261008-2330","evidence":"docs/plans/igneum-2.0-f0-manifest.md; build-4:/srv/builds/igneum-wt-ci-steward-202","in_progress":true,"coverage":"partial: the linked igneum-pow tree's fingerprint must match a listed freeze or the build fails, the binary prints which; the manifest (igneum_getManifest) names the object digest; the signed F0 manifest is the node lane's row tonight","release_identity":{"commit":"2a1d6caab4c24564 (the class v6 freeze candidate's draw of tree 1a938abe4)","lockfile":"","binary":"","network_object":"igneum-devnet-4, chain id 4465 (islands since the epoch-3 cut)","activation":"","profile_hashes":"igneum-pow/src fingerprint 5f4d6dc6199294db89042171004e6420c1e5791e716d4b39b73d375818c10b6f"},"claim_impact":"GOV-01 moves with its page: the F0 manifest carries the signing block (the candidate at its pairing, the same-work and acceptance rows, the 2.0.2 pair gate, the prover row, the canary state); GOV-01 stays NOT RUN in progress until the three roles sign","reviewer":"","at":"2026-10-09T07:43:10.751Z","note":"the signing block is on the page; the freeze itself is unchanged (class v5 1c420786, fingerprint cbc5bd0a); the candidate's row names 2a1d6caab4c24564 of 1a938abe4 | F0's signing block written at 23:3x UK from the lanes' landed lines; the signatures table is the three roles' own landing. The mining-class row's citation moved to the node fork's packaging/pow-freeze.txt and the 202 batches' rule-19 lines (09:0x UK, the review owner's note)."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"check:freeze":{"requirement_id":"GOV-01","decision":"NOT RUN","method":"static","cell":"check:freeze","manifest_sha":"1a938abe","run_id":"f0-signing-20261008-2330","evidence":"docs/plans/igneum-2.0-f0-manifest.md; build-4:/srv/builds/igneum-wt-ci-steward-202","in_progress":true,"coverage":"partial: the linked igneum-pow tree's fingerprint must match a listed freeze or the build fails, the binary prints which; the manifest (igneum_getManifest) names the object digest; the signed F0 manifest is the node lane's row tonight","release_identity":{"commit":"2a1d6caab4c24564 (the class v6 freeze candidate's draw of tree 1a938abe4)","lockfile":"","binary":"","network_object":"igneum-devnet-4, chain id 4465 (islands since the epoch-3 cut)","activation":"","profile_hashes":"igneum-pow/src fingerprint 5f4d6dc6199294db89042171004e6420c1e5791e716d4b39b73d375818c10b6f"},"claim_impact":"GOV-01 moves with its page: the F0 manifest carries the signing block (the candidate at its pairing, the same-work and acceptance rows, the 2.0.2 pair gate, the prover row, the canary state); GOV-01 stays NOT RUN in progress until the three roles sign","reviewer":"","at":"2026-10-09T07:43:10.751Z","note":"the signing block is on the page; the freeze itself is unchanged (class v5 1c420786, fingerprint cbc5bd0a); the candidate's row names 2a1d6caab4c24564 of 1a938abe4 | F0's signing block written at 23:3x UK from the lanes' landed lines; the signatures table is the three roles' own landing. The mining-class row's citation moved to the node fork's packaging/pow-freeze.txt and the 202 batches' rule-19 lines (09:0x UK, the review owner's note)."}}},{"id":"GOV-02","title":"Approve thresholds before results","setup":"This manual supplies proposed test thresholds, not source-approved protocol parameters.","steps":["Approve or replace every P-profile before confirmatory testing; give each change a rationale and independent approver.","Register hardware cohorts, mandatory economic worlds, customer workloads, peer dimensions and exclusion rules.","Lock the profile hash and hold out seeds/workloads from the developers doing optimisation."],"accept":"No decision-critical field is TBD. Numeric limits are frozen, commercially meaningful and not chosen from observed results. A weakened limit after failure requires a new protocol, full affected rerun and explicit claim downgrade review.","evidence":"Approved profile register; timestamped holdout commitments; change log.","priority":"BLOCKER","profile":"P00","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":18,"owner_lane":"CI steward (a2ecfa95d3206016c)","run_status":"NOT RUN","evidence_path":"docs/plans/igneum-2.0-test-registry.json","run_id":"team-2026-10-08","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"the approval is recorded in the registry's approval field; the automated half (thresholds frozen before any run_status) is the gate rule landing by 21:00","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"GOV-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the profiles approved as proposed by the founder at 18:2x UK before any confirmatory run; P13 deferred","run_by":"CI steward (a2ecfa95d3206016c)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"GOV-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/plans/igneum-2.0-test-registry.json","in_progress":true}}},{"id":"GOV-03","title":"Reproduce builds outside the founding team","setup":"Provide public source and documented build instructions to three unaffiliated operators.","steps":["Build on clean declared environments without private files, tokens or founder assistance.","Compare reproducible payload hashes; isolate signatures, notarisation and permitted non-deterministic wrappers.","Run reference vectors and restart a node using only documented artifacts."],"accept":"All independent builds reproduce the same consensus payload or an independently explained, pre-approved wrapper difference; reference outputs match exactly. Missing private prerequisites block release.","evidence":"Build logs; dependency lockfiles; binary comparison; operator attestations.","priority":"BLOCKER","profile":"P00; P02","cadence":"Release candidate; repeat after relevant changes","method":"Independent reproduction","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":18,"owner_lane":"build-server lane (a352e49ff4613df86)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"GOV-04","title":"Preserve raw and negative evidence","setup":"Enable append-only storage for run outputs and a separate analysis workspace.","steps":["Capture failed, aborted and successful runs with timestamps, seeds and environment hashes.","Recompute one published figure from raw records on a clean machine.","Modify a retained artifact deliberately and test integrity verification."],"accept":"Every headline can be regenerated; tampering is detected; exclusions have pre-registered reasons. Failed or missing runs remain visible and are never replaced silently by a successful retry.","evidence":"Artifact manifest; hashes; reproduction script; exclusion ledger; negative-run archive.","priority":"BLOCKER","profile":"P00","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":19,"owner_lane":"CI steward (a2ecfa95d3206016c)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"the evidence vault F9 (raw and negative evidence preserved) is the gate rule landing by 21:00: a PASS must carry its evidence file","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"GOV-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"the evidence vault F9 (raw and negative evidence preserved) is the gate rule landing by 21:00: a PASS must carry its evidence file","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"GOV-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"GOV-05","title":"Prove the test oracle detects broken behaviour","setup":"Create controlled defective variants on an isolated network only.","steps":["Disable proof verification, change one reward, accept an expired authority set and alter one hash output in separate mutants.","Run the corresponding ZKP, INC, FIN and POW tests without telling the runner which mutant is active.","Confirm the baseline still accepts authorised valid cases."],"accept":"Every deliberately introduced fault is caught by its mapped test; valid controls pass. Any undetected critical mutant blocks acceptance of that test family until the oracle is repaired.","evidence":"Mutation catalogue; blinded run results; baseline controls; oracle review.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":19,"owner_lane":"fast-time lane (a8be71a0db962911c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/200-417c4a57-b2/gate/gate-rule26.log","run_id":"200-417c4a57-b2","updated":"2026-10-08T18:28:32.408Z","evidence_record":{"cell":"gate:pre-push","manifest_sha":"417c4a57","coverage":{"GOV-05":"partial: every gate check carries a self-test that fires on a known failure and passes a known success (77 checks); the suites' own oracles are their mutation rows","GOV-06":"partial: the launch-gates, forbidden-strings and scope checks on the served site","UX-08":"partial: the site gate on every served page, plus docs/build/tuning.md (the published tuning and build-settings half, the hash lane's); the open builds and the fee conditions are the shipper's and the site lane's"},"at":"2026-10-08T18:28:32.408Z","method":"native","requirement_id":"GOV-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T18:28:32.408Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"gate:pre-push":{"cell":"gate:pre-push","manifest_sha":"417c4a57","coverage":{"GOV-05":"partial: every gate check carries a self-test that fires on a known failure and passes a known success (77 checks); the suites' own oracles are their mutation rows","GOV-06":"partial: the launch-gates, forbidden-strings and scope checks on the served site","UX-08":"partial: the site gate on every served page, plus docs/build/tuning.md (the published tuning and build-settings half, the hash lane's); the open builds and the fee conditions are the shipper's and the site lane's"},"at":"2026-10-08T18:28:32.408Z","method":"native","requirement_id":"GOV-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"200-417c4a57-b2","evidence":"build-1:/srv/artefacts/tas/200-417c4a57-b2/gate/gate-rule26.log","in_progress":true}}},{"id":"GOV-06","title":"Enforce scope and optional-feature discipline","setup":"Inventory FP32 experiments, receipts/oracles and all retained or excluded mining levers.","steps":["Mark each capability CORE, CLAIMED-OPTIONAL or EXCLUDED before release testing.","For excluded code, check binaries, protocol activation and product copy for accidental enablement or implied availability.","For each claimed option, require the complete associated test set rather than a demonstration."],"accept":"Every core and claimed-option obligation passes. Excluded items are shown as EXCLUDED, never PASS and never counted as achievements. Removing a failed core requirement prevents an all-2.0-pass claim.","evidence":"Scope manifest; activation scan; product-copy comparison; exclusions register.","priority":"BLOCKER","profile":"P00","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":19,"owner_lane":"CI steward (a2ecfa95d3206016c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/site-gate-6a47f1f8/pre-push.log","run_id":"site-gate-20261009-01","updated":"2026-10-09T07:36:07.241Z","evidence_record":{"requirement_id":"GOV-06","decision":"NOT RUN","method":"static","cell":"gate:pre-push","manifest_sha":"6a47f1f8","run_id":"site-gate-20261009-01","evidence":"build-1:/srv/artefacts/tas/site-gate-6a47f1f8/pre-push.log","in_progress":true,"coverage":"partial: the launch-gates, forbidden-strings and scope checks on the served site","release_identity":{"commit":"6a47f1f8","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: the served pages are checked, no claim moves","reviewer":"","at":"2026-10-09T07:36:07.241Z","note":"the site branch's box gate on 6a47f1f8 (build-2, --ci mode): 7 checks GREEN in 41 s, among them the launch-gates, forbidden-strings and scope checks on the served site that the cell's partial coverage names; a gate run is evidence for the cell, not a verdict on the case (the steward's word)"},"in_progress_since":"2026-10-08T18:28:32.408Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"gate:pre-push":{"requirement_id":"GOV-06","decision":"NOT RUN","method":"static","cell":"gate:pre-push","manifest_sha":"6a47f1f8","run_id":"site-gate-20261009-01","evidence":"build-1:/srv/artefacts/tas/site-gate-6a47f1f8/pre-push.log","in_progress":true,"coverage":"partial: the launch-gates, forbidden-strings and scope checks on the served site","release_identity":{"commit":"6a47f1f8","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: the served pages are checked, no claim moves","reviewer":"","at":"2026-10-09T07:36:07.241Z","note":"the site branch's box gate on 6a47f1f8 (build-2, --ci mode): 7 checks GREEN in 41 s, among them the launch-gates, forbidden-strings and scope checks on the served site that the cell's partial coverage names; a gate run is evidence for the cell, not a verdict on the case (the steward's word)"}}},{"id":"GOV-07","title":"Independent review and finding closure","setup":"Nominate reviewers with declared conflicts and scopes covering cryptography, consensus and hardware.","steps":["Provide pinned code, raw data, adversarial models and prior failures, including negative results.","Track each finding to remediation and an independent retest; do not use the author as sole approver.","Have reviewers state unreviewed surfaces and model limitations in their signed conclusions."],"accept":"No unresolved critical or high-severity finding affects the claimed release. A finite review is described by scope, not as proof of universal security. Independent reproduction and review are both evidenced.","evidence":"Signed scoped reports; conflict declarations; finding/retest ledger.","priority":"BLOCKER","profile":"P09","cadence":"Release candidate; repeat after relevant changes","method":"Independent specialist review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":20,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"GOV-08","title":"Invalidate stale evidence and control public status","setup":"Create a simulated post-test change to a verifier, mining class, dataset and fee rule.","steps":["Calculate affected test dependencies and invalidate their former PASS statuses.","Regenerate public status pages from F0 and the evidence register.","Attempt to publish a rank-one, guaranteed-profit or automatic-chip-death claim without the required evidence."],"accept":"Affected gates return to NOT RUN or BLOCKED. Public claims retain version, limits and date; unsupported claims are withheld. No stale result remains attached to a different release.","evidence":"Dependency impact report; regenerated status page; rejected claim examples.","priority":"BLOCKER","profile":"P00","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[5,21,23,25,26,27],"gate":"G0 / all gates","owner":"Release lead + independent assurance","manual_page":20,"owner_lane":"CI steward (a2ecfa95d3206016c)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"the stale-evidence rule (evidence older than the manifest sha reads NOT RUN) is the gate rule landing by 21:00","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"GOV-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"the stale-evidence rule (evidence older than the manifest sha reads NOT RUN) is the gate rule landing by 21:00","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"GOV-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}}]},{"code":"GPU","title":"Whole-system GPU measurements","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","fixtures":"F2 retail-hardware cohort; F3 paired benchmark workloads; F9 calibrated evidence","summary":"Close the pending measurements and evaluate the actual configuration, including costs hidden by kernel-only results.","tests":[{"id":"GPU-01","title":"Cover the declared commodity population","setup":"Freeze the P02 cohort, supported role matrix and the final v6 configuration.","steps":["Inventory physical SKU, usable memory, driver, operating system, firmware, cooling and acquisition channel.","Run mining on every supported cohort cell and proving on every separately advertised prover cell.","Include lower-memory, used-generation and all advertised vendor cases; retain unsupported results separately."],"accept":"All declared cells are tested, with no after-the-fact removal of weak cards. At least the P02 minimum coverage is met. Mining-only support is never reported as proof-generation support.","evidence":"Cohort manifest; compatibility matrix; raw results by SKU and role.","priority":"GATE","profile":"P02","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":21,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"PASS","evidence_path":"docs/analysis/class-v6/rows/x0-5090-20261009.md; build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt","run_id":"hash-lane-20261009-batch5","updated":"2026-10-09T09:08:49.974Z","evidence_record":{"requirement_id":"GPU-01","decision":"PASS","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch5","evidence":"docs/analysis/class-v6/rows/x0-5090-20261009.md","in_progress":false,"coverage":"partial: the NVIDIA cells of P02 that RunPod carries","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:08:49.974Z"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"bench:fleet-pods":{"requirement_id":"GPU-01","decision":"PASS","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch5","evidence":"docs/analysis/class-v6/rows/x0-5090-20261009.md","in_progress":false,"coverage":"partial: the NVIDIA cells of P02 that RunPod carries","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:08:49.974Z"},"bench:fleet-pods@p02-fleet-pods-20261008-01":{"requirement_id":"GPU-01","decision":"NOT RUN","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"417c4a57","run_id":"p02-fleet-pods-20261008-01","evidence":"build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt","in_progress":false,"coverage":"partial: the NVIDIA cells of P02 that RunPod carries","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.980Z"}}},{"id":"GPU-02","title":"Reproduce Ember clock-lock savings","setup":"Use paired stock and tuned runs on the same board, host, workload and ambient conditions.","steps":["Warm to stability; randomise stock/tuned order and run P02 repeated sessions.","Measure accepted work, calibrated wall energy, device telemetry and rejected work.","Calculate paired energy and rate changes with run-level uncertainty, retaining failed tuning attempts."],"accept":"Tuning preserves correctness and meets approved P03 operating limits. The historical 34-41% saving and under-2% rate-loss statement is reproduced only for qualifying configurations; otherwise that claim is corrected. Existing savings are not counted twice.","evidence":"Raw power/time series; paired analysis; tuning settings; claim-by-SKU table.","priority":"GATE","profile":"P02; P03","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":21,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"PASS","evidence_path":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","run_id":"hash-lane-20261009-batch4","updated":"2026-10-09T03:58:33.097Z","evidence_record":{"requirement_id":"GPU-02","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: the paired stock and locked rows on the same board, host and workload (the rate held, 2.37 against 3.26 microjoules per hash on the class v5 pack); the historical 34 to 41 percent claim's full configuration set is owed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"bench:pc1-packs":{"requirement_id":"GPU-02","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: the paired stock and locked rows on the same board, host and workload (the rate held, 2.37 against 3.26 microjoules per hash on the class v5 pack); the historical 34 to 41 percent claim's full configuration set is owed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"}}},{"id":"GPU-03","title":"Measure the real 64-register GPU cost","setup":"Build the baseline and window variant with identical dataset, reads and semantic workload.","steps":["Inspect compiled register allocation, spills, occupancy and memory traffic on each supported backend.","Measure paired complete-system energy and accepted throughput, including host work.","Repeat during proving coexistence and expose any memory or scheduling cliff."],"accept":"Any production window meets P03 budgets for every mandatory SKU; no hidden spills or correctness changes. Zero GPU cost is claimed only where measurement supports it within uncertainty. Results feed the redesigned adversary, not an old core estimate.","evidence":"Compiler reports; allocation traces; paired energy/rate data; coexistence runs.","priority":"GATE","profile":"P02; P03","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":21,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/rows/x0-5090-20261009.md; docs/analysis/class-v6/amd-intel-energy.md; docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md; build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt","run_id":"hash-lane-20261009-batch5","updated":"2026-10-09T09:08:49.974Z","evidence_record":{"requirement_id":"GPU-03","decision":"PASS","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch5","evidence":"docs/analysis/class-v6/rows/x0-5090-20261009.md","in_progress":false,"coverage":"partial: the 4090 cell","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:08:49.974Z"},"in_progress_since":"2026-10-08T19:59:34.316Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"bench:fleet-pods":{"requirement_id":"GPU-03","decision":"PASS","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch5","evidence":"docs/analysis/class-v6/rows/x0-5090-20261009.md","in_progress":false,"coverage":"partial: the 4090 cell","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:08:49.974Z"},"bench:amd-intel-energy":{"requirement_id":"GPU-03","decision":"NOT RUN","method":"GPU","cell":"bench:amd-intel-energy","manifest_sha":"c245d50b9","run_id":"amd-intel-energy-20261008-01","evidence":"docs/analysis/class-v6/amd-intel-energy.md","in_progress":false,"coverage":"partial: the 64-register window on AMD and Intel, rate per unit of work (RX 7600 0 percent, Arc B580 -0.3 percent, kernel throughput, quiet) with the B580 fingerprints equal on both packs and the offline RDNA allocation (160 VGPRs, no spill); energy owed (the 7600 job queued, the B580 counter unsupported unelevated); team-run, not under the standard's paired protocol or a wall meter","release_identity":{"commit":"c245d50b9","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.677Z"},"bench:pc1-packs":{"requirement_id":"GPU-03","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: hl-v6-all against hl-v6-foldrw on the 5090, the window's cost per unit of work, registers and blocks per SM, no spill; the mandatory-SKU set is owed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"},"bench:fleet-pods@p02-fleet-pods-20261008-01":{"requirement_id":"GPU-03","decision":"NOT RUN","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"417c4a57","run_id":"p02-fleet-pods-20261008-01","evidence":"build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt","in_progress":false,"coverage":"partial: the 4090 cell","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.980Z"}}},{"id":"GPU-04","title":"Find the memory-clock operating ladder","setup":"Use safe vendor-supported settings only; record operator permission and original settings.","steps":["Sweep approved core and memory operating points while holding workload constant.","Measure error rate, accepted throughput, wall energy and thermal equilibrium.","Repeat the selected knee after reboot and restore defaults after a failed or interrupted tuning session."],"accept":"Selected profiles are stable, reproducible and not dependent on unsafe clocks. Every accepted hash remains correct; saved settings restore predictably. Tuning failure leaves a working safe configuration.","evidence":"Clock ladder; safe bounds; thermal/error logs; reboot and rollback record.","priority":"BLOCKER","profile":"P01; P02","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":22,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/floor/sm-sparse.md","run_id":"team-2026-10-08","updated":"2026-10-08T21:00:32.846Z","evidence_record":{"reason":"the memory-clock ladder has no harness tonight: the project's own rig mines nothing under the the earlier devnet off order","at":"2026-10-08T21:00:32.846Z","method":"static","requirement_id":"GPU-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the memory-clock ladder at the lock (floor lane 1, b1b8d833)","run_by":"hash lane (a690540514aa453d7)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"GPU-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/floor/sm-sparse.md","in_progress":true}}},{"id":"GPU-05","title":"Test dataset fit and support-horizon costs","setup":"Test 5.5, 8.5 and 11.5 GiB only as source-proposed candidates; F0 determines activated sizes.","steps":["Measure allocation plus driver, display, prover and OS headroom on the 8 GB and other cohort tiers.","Run near-full-memory, fragmentation, restart and next-epoch construction scenarios.","Compare time-sharing/eviction with concurrent mining/proving, including reload cost."],"accept":"Every advertised combination completes without OOM or silent corruption. Unsupported future sizes are identified before activation. GPU exclusions and lost proving capacity appear in ECO evaluation; retirement of a tier is not a success metric.","evidence":"Memory budget per SKU; OOM traces; support horizon; concurrency cost table.","priority":"BLOCKER","profile":"P01; P02; P06","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":22,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/rows/run-ca3-pc1-amd-cardin-20261008T1703.md; docs/analysis/floor-memory-profile-2026-10-08.md; docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","run_id":"hash-lane-20261009-batch4","updated":"2026-10-09T03:58:33.097Z","evidence_record":{"requirement_id":"GPU-05","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: v3-1g, v3-ds29, v3-ds30, ds55, ds4g-ms complete with their fingerprints, energy per step at stock and at the knee on the 5090 and the 7600; the 8.5 and 11.5 GiB candidates are owed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"},"in_progress_since":"2026-10-08T18:41:01.185Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"bench:pc1-amd":{"cell":"bench:pc1-amd","manifest_sha":"c245d50b9","coverage":{"GPU-01":"partial: the 8 GB AMD cell, fingerprints and rates at 1, 2, 4 and 5.5 GiB; one cell of P02's twelve","GPU-05":"partial: the 8 GB tier's fit rows"},"at":"2026-10-08T18:41:01.185Z","method":"GPU","requirement_id":"GPU-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"c245d50b9","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"hash-lane-20261008-batch1","evidence":"docs/analysis/class-v6/rows/run-ca3-pc1-amd-cardin-20261008T1703.md","in_progress":true},"rows:v607-floor-memory":{"requirement_id":"GPU-05","decision":"NOT RUN","method":"GPU","cell":"rows:v607-floor-memory","manifest_sha":"c411bae9a","run_id":"v607-floor-memory-20261008T2059Z","evidence":"docs/analysis/floor-memory-profile-2026-10-08.md","in_progress":true,"coverage":"partial: the 8 GB and 12 GB tiers' prover headroom on the 5.5 GiB dataset (free memory, the prover's peak alone, the refusal beside the miner); fragmentation, restart and next-epoch construction not run","release_identity":{"commit":"c411bae9a (branch v607-floor-memory off cef5234b5)","lockfile":"proving/igneum-prove/Cargo.lock at cef5234b5","binary":"sp1-gpu-server db37c38b5feabdec5bbfd0298446da89f6a5d144125e399d6ab617f64f9cb61d (igneum-floor-sm8689-v607.tgz 9c02fcc6a3f045d3167c1d9cb6e22c584ea862189d11997754a57cbe1b0d355b); igneum-prove-host-0317 71bc2438856bb141; igneum-prove-host v607 66662219a3630772","network_object":"none (fixture proofs on rented pods, no network)","activation":"none","profile_hashes":"floor patch 9098c3e5979d057031f43588668201d1f7a53ab17e980c1eaf896cd5e6f38575"},"claim_impact":"the 2.0 proving statement's memory condition per tier: a 12 GB card runs the whole segment path alone; an 8 GB card proves shards only (its aggregation fails) and is refused the chain before setup; both time-share beside the 5.5 GiB miner; the 16 GB and 24 GB tiers unmeasured tonight","reviewer":"","at":"2026-10-08T22:22:49.946Z"},"bench:pc1-packs":{"requirement_id":"GPU-05","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: v3-1g, v3-ds29, v3-ds30, ds55, ds4g-ms complete with their fingerprints, energy per step at stock and at the knee on the 5090 and the 7600; the 8.5 and 11.5 GiB candidates are owed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"}}},{"id":"GPU-06","title":"Measure accepted work under ordinary connectivity","setup":"Use the same hardware against clean, delayed, lossy and intermittent links in F4.","steps":["Measure kernel rate and accepted work separately under home and datacentre link profiles.","Include reconnects, template changes, expired submissions and pool failover.","Attribute loss to network, local software, validation and protocol causes."],"accept":"Results use accepted work, never kernel rate alone. Ordinary-link incremental rejection stays within P10; all losses remain priced in ECO. Unreachable links may pause but must not claim paid work.","evidence":"Per-submission ledger; network trace; rejection reasons; accepted-work comparison.","priority":"GATE","profile":"P02; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":22,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"accepted work under ordinary connectivity needs the fault network F4","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"GPU-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"accepted work under ordinary connectivity needs the fault network F4","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"GPU-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"GPU-07","title":"Survive sustained thermal and power operation","setup":"Run the selected profile on actual reference machines for the P02 soak period.","steps":["Track wall power, temperatures, clocks, memory and accepted work continuously.","Inject safe power interruptions, process restarts and normal competing desktop load.","Check restored settings and compare late-run efficiency with the first stable period."],"accept":"No invalid work or unsafe persistent settings; P02/P10 stability limits hold. Thermal throttling, crashes and recovery time remain in throughput and energy denominators. A crash-free short benchmark cannot substitute for the soak.","evidence":"Seven-day time series; crash reports; settings-restoration checks; drift analysis.","priority":"BLOCKER","profile":"P01; P02; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":23,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/floor/sm-sparse.md","run_id":"team-2026-10-08","updated":"2026-10-08T21:00:32.846Z","evidence_record":{"reason":"the sustained thermal and power soak has no harness tonight: the project's own rig mines nothing under the the earlier devnet off order","at":"2026-10-08T21:00:32.846Z","method":"static","requirement_id":"GPU-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the 5090 lock pass, 66 minutes at 1,300 MHz with the four-minute reserve (floor lane 1)","run_by":"hash lane (a690540514aa453d7)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"GPU-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/floor/sm-sparse.md","in_progress":true}}},{"id":"GPU-08","title":"Reproduce the full baseline independently","setup":"Three unaffiliated operators receive F0, F2 and F3, including the final miner/prover build.","steps":["Repeat identical-SKU paired runs with documented meter calibration and environment differences.","Recompute joules and total cost per accepted work from the shared raw schema.","Investigate divergence before accepting a pooled headline or uncertainty band."],"accept":"Reproductions meet P02 tolerance and exact correctness. No unexplained divergence or selectively missing low-end cell remains. Report manufactured GPU measurements separately from modelled specialist estimates.","evidence":"Three signed reproduction packs; reconciliation report; final baseline table.","priority":"GATE","profile":"P02","cadence":"Release candidate; repeat after relevant changes","method":"Independent reproduction","status":"NOT RUN","source":[6,7,8,14,18,23],"gate":"G1 / G2","owner":"GPU lead + three independent operators","manual_page":23,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}}]},{"code":"POW","title":"Proof-of-work correctness and coupling","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","fixtures":"F0 rule set; F3 independent CPU/GPU oracles; F5 mutation corpus","summary":"Find semantic disagreements and structural shortcuts before treating a harder-looking program as a stronger defence.","tests":[{"id":"POW-01","title":"Match independent execution across every backend","setup":"Implement an independently written reference evaluator, not a wrapper around the production GPU path.","steps":["Execute the P01 corpus across every family, boundary seed and supported backend.","Exercise zero, maximum, sign, shift, rotate, overflow and unaligned-address cases allowed by the spec.","Minimise every mismatch and rerun it on clean builds."],"accept":"Bit-for-bit agreement for all valid cases and identical rejection for invalid cases. One unexplained mismatch is a blocker. Large sample counts are evidence of testing, not proof that unseen disagreements cannot exist.","evidence":"Reference implementation review; seeds/vectors; backend matrix; mismatch archive.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":24,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"docs/analysis/review-2026-10-08-b/f10/emu-test.log; build-1:/srv/artefacts/tas/same-work-20261008-01/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-01/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/opencl-rx7600-take1.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/metal-3.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v5-win.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v5-win.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v5-win.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v6-all.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v6-all.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v6-all.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v6-foldrw.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v6-foldrw.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v6-foldrw.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v6-all-nowin.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v6-all-nowin.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v6-all-nowin.json; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v5-win.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v5-win.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v5-win.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v6-all.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v6-all.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v6-all.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v6-foldrw.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v6-foldrw.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v6-foldrw.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v6-all-nowin.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v6-all-nowin.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v6-all-nowin.json; docs/analysis/mhpow/b3/README.md","run_id":"mhpow-b3-20261009-01","updated":"2026-10-09T10:15:09.175Z","evidence_record":{"requirement_id":"POW-01","decision":"NOT RUN","method":"GPU","cell":"rows:mhpow-b3-gpu-feasibility","manifest_sha":"bc6bfa75e","run_id":"mhpow-b3-20261009-01","evidence":"docs/analysis/mhpow/b3/README.md","in_progress":true,"coverage":"partial: the Track B research candidate's CUDA backend against an independent CPU reference (B1) only; nothing about the shipped v6 evaluator","release_identity":{"commit":"bc6bfa75e","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves; the Track B candidate is not proposed for activation","reviewer":"","at":"2026-10-09T10:15:09.175Z","note":"POW-01 (Track B candidate only, not the shipped v6): an independently written CPU reference (B1, Python) and its C port agree with the CUDA backend byte for byte on every checked instance at n = 8 to 24 on two cards. POW-06 (Track B candidate only): the C-port verifier's time per GPU proof at k = 64 is recorded per row; the proof is about 129 to 180 KB at k = 64 and k is not yet fixed by the theorem's constants (BLOCKED row in the README). The GPU feasibility verdict itself (the README's trap rows) is a research finding for the panel, not a registry case. | Track B B3 (R15-06, the GPU feasibility lane, 9 October 2026): GPU adaptation of the Blocki-Smearsoll TCC 2025 MTP/DRSample MHPoW (eprint 2025/1456, full PDF sha256 13c3646e...) without changing the function: CUDA labelling, Merkle commitment and proof creation, batched at 32, 128 and 512 MiB per instance with the card filled, on a rented RTX 5090 and RTX 4090 at stock clocks (no clock lock on rented pods), board power from nvidia-smi at 1 Hz with idle not subtracted. Correctness oracle: the B1 lane's reference encoding (tools/mhpow/b1 working copy on build-6 09:26Z, not landed) through a C port that reproduces B1's five known-answer fixtures byte for byte, then the GPU byte for byte on labels, every Merkle node, root and proof container, instance 0 equal to B1's own fixture, every GPU proof accepted; the known-failed test (DRSample's long edges deleted on the GPU) fires. A research candidate only: nothing activates, no comparison with the v6 work unit is made (the comparison contract is a BLOCKED row), no PASS is claimed. NOT RUN until the panel reads it."},"in_progress_since":"2026-10-08T20:07:26.255Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:cuda-select-check":{"cell":"harness:cuda-select-check","manifest_sha":"964cdf6c1","coverage":{"ROT-01":"partial: the worker's high-32 nonce rollover inside a job (a job from 2^32 - 32) finds the same set on both read-back paths and the boundary nonces hash as igneum-pow; the hourly program boundary itself is the fast-time harness","POW-01":"partial: the CUDA select pass equals the full read line for line (zero hits, partial, the all-hit overflow fallback, a 96-nonce tail with a 32-lane launch, queued jobs, hits then zero, the epoch tag) and 17 sampled hashes equal igneum-pow; the million-vector campaign is harness:p01-vectors"},"at":"2026-10-08T20:07:26.255Z","method":"static","requirement_id":"POW-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"964cdf6c1","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"f10-worker-20261008","evidence":"docs/analysis/review-2026-10-08-b/f10/emu-test.log","in_progress":true},"harness:p01-vectors":{"requirement_id":"POW-01","decision":"NOT RUN","method":"GPU","cell":"harness:p01-vectors","manifest_sha":"c30ab32c","run_id":"same-work-20261008-01","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-01/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-01/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-01/opencl-rx7600-take1.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-01/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-01/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-01/metal-3.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v5-win.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v5-win.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v5-win.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v6-all.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v6-all.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v6-all.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v6-foldrw.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v6-foldrw.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v6-foldrw.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v6-all-nowin.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v6-all-nowin.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v6-all-nowin.json","in_progress":false,"coverage":"the million-vector campaign per backend per pack, bit-for-bit; PASS only when every supported backend reads a million vectors with zero disagreement; the malformed-input half is harness:parser-malformed","release_identity":{"commit":"c30ab32c; the CPU reference class-v6 1a938abe4; the CUDA reader the kit's gen 6 worker 804a6f7f","lockfile":"","binary":"igneum-pow sha256 0d3f3fca...; igneum-worker-cuda sha256 804a6f7f...","network_object":"the frozen class v6 object: pack hl-v6-all (tgz sha256 9131431015e102f4..., re-exported byte for byte from class-v6 1a938abe4 on build-4 at 21:44 UK, every file's sha256 equal), id 0x4de7b836cc40a4ea, epoch seed edc4fa84... (the genesis seeds) over the node1 state stream","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"POW-01's CUDA half across a dataset-day switch on the frozen object: CUDA against the CPU reference bit for bit on three ranges with the day switch at nonce 1572864. NOT same-work evidence: the node engine refuses this seed/stream pair (IgneumEngine::epoch_for's class v5 check wants the stream's block af89be5d... to equal the epoch seed edc4fa84...), so the node and pool readers cannot read it; the coordinator's ruling 22:0x UK keeps it as the CUDA and CPU-only row","reviewer":"","at":"2026-10-09T08:57:42.332Z","note":"the same-work row on the frozen object is complete: CPU reference, CUDA 5090/4090/3090 x3, OpenCL x3, Metal x3, every nonce equal across the day switch; POW-01 itself is decided by the hash lane's P01 corpus and review, not by this row; the P01 CUDA campaign's evidence is carried here so it stays on the case | Context 01 at build-1:/srv/artefacts/tas/same-work-20261008-01/job-context.json (sha256 d2540e02...). CPU reference: igneum-pow hash-bound (class-v6 1a938abe4, binary 0d3f3fca...) on build-4, 21:46 to 21:55 UK, ref-D c49fed11... over [0, 1572864), ref-D1 5ae1220d... over [1572864, 3145728); ref-D's first million lines equal the hash lane's P01 reference /srv/artefacts/packs/p01-vectors/hl-v6-all.txt byte for byte. The node1 state stream (block af89be5d...) was written on build-4 at 15:34 UK, before the 20:00 UK split; the cell carries the island label by main's 22:2x UK rule. CUDA: the 5090 PASS on all three phases (the gen 6 worker 804a6f7f, the driver at c8b65a26 or later; 23:16 to 23:20 UK: cuda-5090-1.json 1b36fb8a..., cuda-5090-2.json 70200bff... with the day switch at 1572864 driven through the worker's prepare and both boundary hashes equal to the reference (69abfadf816e767e before, 5b3fb17ad84744fd after), cuda-5090-3.json f2ecf5c7...; 1,048,576 agree each, 0 disagree, 0 missing); the 4090 PASS on all three phases (23:22 to 23:25 UK: cuda-4090-1.json cd0f5aee..., cuda-4090-2.json f864f950... with the day switch at 1572864, cuda-4090-3.json 126bd552...; 1,048,576 agree each, 0 disagree, 0 missing); The 3090 PASS on all three phases (05:07 to 05:10 UK; cuda-3090-{1,2,3}.json afa3d4a4..., 167875f9..., cc956dee...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. Metal and OpenCL are the morning's reads (08:30 UK). The case stays NOT RUN in progress until every reader has read (the coordinator's ruling 23:1x UK: a PASS by inference is forbidden). OPENCL on the first rig's RX 7600: take 1 (05:54 UK, opencl-rx7600-take1.report.txt 7fb1ee95...) was a job fault on the rig, not a reader result (the script matched an older gen-5-stamped pack of the same name in the rig's jobs tree; the worker refused it as class v5 against a class v6 job); take 2 (run-ca3-pc1-samework01-opencl-7600-20261009-b, the packs by exact path, 06:03 to 06:05 UK) reads PASS on all three phases: p1 digest 1517d572..., p2 91d63d8b... across the day switch 20730 to 20731 at 1572864 (the D+1 pack prepared in 486 ms, the boundary block 8,192 of 8,192 lines), p3 e483e82a..., each 1,048,576 of 1,048,576 equal to ref-D's and ref-D1's slices, both pack ids 0x4de7b836cc40a4ea generator 6 in the RESULT lines; 'RESULT verdict all PASS context=same-work-20261008-01 reader=opencl card=rx7600'; the report opencl-rx7600.report.txt (sha256 84683b16..., read back on build-1 at 06:09 UK). So the OpenCL reader on the RX 7600 reads all three contexts equal to the CPU reference across their day switches; Metal is the sixth reader on every context, 08:30 UK. METAL, the project's macOS machine (Apple M6) on the serve worker igneum-worker-metal 5aeddcba... (built from class-v6 755c2dbcf by the hash lane), the driver on master with --prepare-first, 08:30 to 08:31 UK: PASS on all three phases, metal-{1,2,3}.json a7ab9fac..., 9be3101a..., b3df42ef... (read back on build-1 at 09:41 UK), 1,048,576 agree each, 0 disagree, 0 missing, the day switch at 1572864 with the boundary hashes 69abfadf816e767e before and 5b3fb17ad84744fd after, equal to every other reader's. So the frozen object reads equal on the CPU reference, CUDA (three cards), OpenCL and Metal across the day switch. This row does not decide POW-01 (its accept covers the full P01 corpus across families, boundary seeds and backends with an independent review: the hash lane's); the record stays NOT RUN for POW-01 and carries the hash lane's P01 campaign evidence (p01-20261008-01) beside this row's, because the recorder keeps one record per cell and this run's record had displaced that batch's on harness:p01-vectors since 22:27 UK.","network_label":"on an island, not a network"},"suite:miner":{"requirement_id":"POW-01","decision":"NOT RUN","method":"native","cell":"suite:miner","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","in_progress":false,"coverage":"partial: the pack re-check seam against the pack's 96 vectors (recheck_pack); the million-vector campaign is harness:p01-vectors","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; miner on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"harness:p01-vectors@p01-20261008-01":{"requirement_id":"POW-01","decision":"NOT RUN","method":"GPU","cell":"harness:p01-vectors","manifest_sha":"417c4a57","run_id":"p01-20261008-01","evidence":"build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v5-win.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v5-win.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v5-win.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v6-all.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v6-all.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v6-all.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v6-foldrw.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v6-foldrw.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v6-foldrw.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-5090-hl-v6-all-nowin.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-4090-hl-v6-all-nowin.json; build-1:/srv/artefacts/p01/p01-20261008-01/cuda-3090-hl-v6-all-nowin.json","in_progress":false,"coverage":"the million-vector campaign per backend per pack, bit-for-bit; PASS only when every supported backend reads a million vectors with zero disagreement; the malformed-input half is harness:parser-malformed","release_identity":{"commit":"417c4a57 (the node pin at the kit's cut); the kit packs-class-v6-20261008T162324Z.zip 098e64c3…; the worker igneum-worker-cuda 9bfcf728","lockfile":"","binary":"bin/linux/igneum-worker-cuda (the kit's)","network_object":"the class v5 freeze 1c420786, pack hl-v5-win e3da3669 id 0x6554474f410f36f3","activation":"igneum-devnet-4 object be5f4068","profile_hashes":""},"claim_impact":"POW-01's CUDA half on the class v5 object and all three class v6 D1 candidates: a million nonces agree bit-for-bit with the CPU reference on three CUDA generations each; OpenCL and Metal remain","reviewer":"","at":"2026-10-09T08:55:05.275Z","note":"P01 part A, the CUDA half, complete at 20:41 UK: four packs (hl-v5-win e3da3669 id 0x6554474f410f36f3 gen 5; hl-v6-all 6df3d430 id 0x4de7b836cc40a4ea gen 6; hl-v6-foldrw f0dc3428 id 0xd7eba30115d26dd4; hl-v6-all-nowin 67ceec05 id 0xbe1d6f48928cef4a) on three CUDA cards (RTX 5090 sm_120, 4090 sm_89, 3090 sm_86), twelve runs, every one driver exit 0, answered 1,000,000, agree 1,000,000, disagree 0, missing 0, 41 to 50 s per million; the kit worker 9bfcf728 for gen 5, the generator-6 worker 804a6f7f for gen 6; the twelve JSONs parsed on build-1 with their sha256s. Remaining for PASS: OpenCL (the project's first rig's RX 7600, the hash lane; no rented AMD card exists tonight) and Metal (the mini, the morning); the case stays NOT RUN in progress until then. (rig names scrubbed for the served registry at 22:2x UK, the steward's identity landing.) Re-recorded at 09:5x UK once the recorder kept records per run: the twelve CUDA evidence files return to POW-01's evidence_path beside the same-work run's record."},"rows:mhpow-b3-gpu-feasibility":{"requirement_id":"POW-01","decision":"NOT RUN","method":"GPU","cell":"rows:mhpow-b3-gpu-feasibility","manifest_sha":"bc6bfa75e","run_id":"mhpow-b3-20261009-01","evidence":"docs/analysis/mhpow/b3/README.md","in_progress":true,"coverage":"partial: the Track B research candidate's CUDA backend against an independent CPU reference (B1) only; nothing about the shipped v6 evaluator","release_identity":{"commit":"bc6bfa75e","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves; the Track B candidate is not proposed for activation","reviewer":"","at":"2026-10-09T10:15:09.175Z","note":"POW-01 (Track B candidate only, not the shipped v6): an independently written CPU reference (B1, Python) and its C port agree with the CUDA backend byte for byte on every checked instance at n = 8 to 24 on two cards. POW-06 (Track B candidate only): the C-port verifier's time per GPU proof at k = 64 is recorded per row; the proof is about 129 to 180 KB at k = 64 and k is not yet fixed by the theorem's constants (BLOCKED row in the README). The GPU feasibility verdict itself (the README's trap rows) is a research finding for the panel, not a registry case. | Track B B3 (R15-06, the GPU feasibility lane, 9 October 2026): GPU adaptation of the Blocki-Smearsoll TCC 2025 MTP/DRSample MHPoW (eprint 2025/1456, full PDF sha256 13c3646e...) without changing the function: CUDA labelling, Merkle commitment and proof creation, batched at 32, 128 and 512 MiB per instance with the card filled, on a rented RTX 5090 and RTX 4090 at stock clocks (no clock lock on rented pods), board power from nvidia-smi at 1 Hz with idle not subtracted. Correctness oracle: the B1 lane's reference encoding (tools/mhpow/b1 working copy on build-6 09:26Z, not landed) through a C port that reproduces B1's five known-answer fixtures byte for byte, then the GPU byte for byte on labels, every Merkle node, root and proof container, instance 0 equal to B1's own fixture, every GPU proof accepted; the known-failed test (DRSample's long edges deleted on the GPU) fires. A research candidate only: nothing activates, no comparison with the v6 work unit is made (the comparison contract is a BLOCKED row), no PASS is claimed. NOT RUN until the panel reads it."}}},{"id":"POW-02","title":"Validate generated programs and index folding","setup":"Use the frozen grammar, opcode semantics and index-fold rule; include boundary and malformed programs.","steps":["Enumerate small constrained programs and fuzz the full generator at P01 depth.","Check bounds, valid dependencies, address distribution and forbidden encodings.","Compare source-level operations with optimised compiled code for removed or altered work."],"accept":"No accepted program violates semantics, termination or memory bounds. Distribution claims have predeclared tests and effect-size limits; passing randomness checks is not treated as a cryptographic proof.","evidence":"Generator/fuzzer logs; reduced counterexamples; disassembly comparison; index tests.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":24,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"docs/analysis/review-2026-10-08-b/f10/packfile-test.log;docs/analysis/review-2026-10-08-b/f10/geometry-check-mini.log; docs/analysis/class-v6/family-gate.md; docs/analysis/class-v6/rows/chainseed-census-1a938abe4.md; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-pow.log; docs/analysis/class-v6/1p5x/x1/README.md; docs/analysis/class-v6/1p5x/x1/rows/cache/cache-ctrl-sign.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/cache-flat-sign.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/canary-ctrl.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/canary-flat.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/draw-timing.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-ctrl-ds28.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-ctrl-ds30.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-flat-ds28.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-flat-ds30.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/gen-timing.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/model-ctrl-256.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/model-flat-256.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-ctrl-seed-p18.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-object-h0.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-object-h4.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p18.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p19.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p20.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p21.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p22.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p23.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p24.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p25.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p26.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p27.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p28.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p29.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p30.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p31.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p32.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p33.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/worker.log; docs/analysis/class-v6/1p5x/x1/rows/suite-a99de07cd.log; tools/1p5x/x1/cache.sh; tools/1p5x/x1/census.sh; tools/1p5x/x1/gpu-pairs.sh; tools/1p5x/x1/gpu-rows.py; tools/1p5x/x1/run.sh; tools/1p5x/x1/summarise.py; docs/analysis/class-v6/1p5x/int8/README.md; docs/analysis/class-v6/1p5x/int8/rows/export-arxr16.txt; docs/analysis/class-v6/1p5x/int8/rows/export-arxr32.txt; docs/analysis/class-v6/1p5x/int8/rows/export-int8w50r32.txt; docs/analysis/class-v6/1p5x/int8/rows/export-int8w75r32.txt; docs/analysis/class-v6/1p5x/int8/rows/export-int8w90r32.txt","run_id":"1p5x-int8-20261009-01","updated":"2026-10-09T10:20:51.148Z","evidence_record":{"requirement_id":"POW-02","decision":"NOT RUN","method":"native","cell":"experiment:1p5x-int8","manifest_sha":"0592e48e8","run_id":"1p5x-int8-20261009-01","evidence":"docs/analysis/class-v6/1p5x/int8/README.md; docs/analysis/class-v6/1p5x/int8/rows/export-arxr16.txt; docs/analysis/class-v6/1p5x/int8/rows/export-arxr32.txt; docs/analysis/class-v6/1p5x/int8/rows/export-int8w50r32.txt; docs/analysis/class-v6/1p5x/int8/rows/export-int8w75r32.txt; docs/analysis/class-v6/1p5x/int8/rows/export-int8w90r32.txt","in_progress":false,"coverage":{},"release_identity":{"commit":"0592e48e8 (branch 1p5x-int8; igneum-pow/src 9e8fb3c4...)","lockfile":"","binary":"","network_object":"none: research flags, closed","activation":"none","profile_hashes":""},"claim_impact":"none: a closed research record; the frozen v6 stays the algorithm","reviewer":"","at":"2026-10-09T10:20:51.148Z","note":"CLOSED by main at 11:1x UK before the suite, the self-test, the census and the GPU rows ran; every cell NOT RUN."},"in_progress_since":"2026-10-08T20:07:26.255Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:pack-geometry":{"cell":"harness:pack-geometry","manifest_sha":"964cdf6c1","coverage":{"POW-02":"partial: the dataset geometry rule (exact word count, items, multiply-shift, 64-bit bytes, the floor-log2 and 2^32 refusals, missing leaves) agrees across the CUDA and OpenCL loader and the Metal host on 19 conformance vectors and the two checked-in packs (master review I06, gate INT-10); the rest of POW-02 is suite:pow"},"at":"2026-10-08T20:07:26.255Z","method":"static","requirement_id":"POW-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"964cdf6c1","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"f10-worker-20261008","evidence":"docs/analysis/review-2026-10-08-b/f10/packfile-test.log;docs/analysis/review-2026-10-08-b/f10/geometry-check-mini.log","in_progress":true},"harness:family-gate":{"requirement_id":"POW-02","decision":"NOT RUN","method":"native","cell":"harness:family-gate","manifest_sha":"1a938abe4","run_id":"family-gate-20261008c","evidence":"docs/analysis/class-v6/family-gate.md","in_progress":false,"coverage":"partial: the acceptance rule's measured rates on drawn classes (the per-candidate rejection, the attempt histogram, the exhaustion count against the independent-attempt arithmetic, the (c'') and (c''') floors' refuse rates and the pre-floor ratio spread per width), the per-site largest-bucket and index-bit statistics at the rule's own 2^20 sample with the seven known-failed seeds (p4, p8, p10, p34, p212, p225, p15), and the F8-form census at 2^20 on the F8 seed set where the attack-f8 mirror validates (0 of 96 warps mismatching); the semantics, termination and memory-bound half and the independent re-implementation are the suite's and the hash lane's; the effect-size limits are the family-gate.md thresholds, predeclared in its section 3","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.800Z"},"census:class-v6":{"requirement_id":"POW-02","decision":"PASS","method":"native","cell":"census:class-v6","manifest_sha":"1a938abe4","run_id":"census-v6-chainseed-trace-20261008-2305","evidence":"docs/analysis/class-v6/rows/chainseed-census-1a938abe4.md","in_progress":false,"coverage":"partial: the fold's index statistics and the grammar bounds on 256 seeds plus the F8 set; the malformed programs are owed to harness:parser-malformed","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:12:37.378Z"},"suite:pow":{"requirement_id":"POW-02","decision":"NOT RUN","method":"native","cell":"suite:pow","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-pow.log","in_progress":false,"coverage":"partial: program derivation, ds55 geometry, the v6 fold, the packs and the spec read-back tests; the independent re-implementation and the index-fold census are the hash lane's harnesses","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; pow on release-2.0.2 77b5acc5 (box4, 226s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"experiment:1p5x-x1":{"requirement_id":"POW-02","decision":"NOT RUN","method":"GPU","cell":"experiment:1p5x-x1","manifest_sha":"a99de07cd","run_id":"1p5x-x1-20261009-01","evidence":"docs/analysis/class-v6/1p5x/x1/README.md; docs/analysis/class-v6/1p5x/x1/rows/cache/cache-ctrl-sign.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/cache-flat-sign.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/canary-ctrl.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/canary-flat.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/draw-timing.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-ctrl-ds28.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-ctrl-ds30.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-flat-ds28.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-flat-ds30.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/gen-timing.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/model-ctrl-256.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/model-flat-256.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-ctrl-seed-p18.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-object-h0.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-object-h4.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p18.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p19.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p20.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p21.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p22.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p23.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p24.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p25.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p26.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p27.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p28.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p29.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p30.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p31.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p32.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p33.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/worker.log; docs/analysis/class-v6/1p5x/x1/rows/suite-a99de07cd.log; tools/1p5x/x1/cache.sh; tools/1p5x/x1/census.sh; tools/1p5x/x1/gpu-pairs.sh; tools/1p5x/x1/gpu-rows.py; tools/1p5x/x1/run.sh; tools/1p5x/x1/summarise.py","in_progress":false,"coverage":{},"release_identity":{"commit":"a99de07cd (branch 1p5x-x1-v7, the candidate +flat over the frozen 1a938abe4; igneum-pow/src b9b5d0d1...; the harness 1p5x-x1-harness fc6bfaf25)","lockfile":"","binary":"igneum-worker-cuda-gen6 804a6f7f...; igneum-pow bin-a99de07cd 78e312e9...; harness bin-h-5264b8152 9dc22b1d..., bin-h-fc6bfaf25 f28049a1...","network_object":"none: a research class behind its own flag; the frozen object keeps layer 8 on (class_v6_family_flags 0xf); every GPU row on an island, not a network","activation":"none","profile_hashes":"packs x1-ctrl-ds28 69e009cd..., x1-ctrl-ds30 7606c13d..., x1-flat-ds28 020dbdc7..., x1-flat-ds30 f25160bd..."},"claim_impact":"none claimed: the candidate's census is flat to the Poisson floor and its card cost is g 0.98 to 1.00 at stock; the window concentration of the frozen object is 56 percent at the half store (61 percent seed mean), not the 72 percent premise, so the cache side bounds the hybrid's a at 1.14 on the signing object; the knee and the specialist side are owed (X5, X6)","reviewer":"","at":"2026-10-09T09:43:07.875Z","note":"Every cell NOT RUN: this lane never writes PASS on its own row; X6 runs blind. BLOCKED inside: the knee rows (rented cards cannot lock, the house rigs unreachable), wall power, the specialist side a (X5)."},"experiment:1p5x-int8":{"requirement_id":"POW-02","decision":"NOT RUN","method":"native","cell":"experiment:1p5x-int8","manifest_sha":"0592e48e8","run_id":"1p5x-int8-20261009-01","evidence":"docs/analysis/class-v6/1p5x/int8/README.md; docs/analysis/class-v6/1p5x/int8/rows/export-arxr16.txt; docs/analysis/class-v6/1p5x/int8/rows/export-arxr32.txt; docs/analysis/class-v6/1p5x/int8/rows/export-int8w50r32.txt; docs/analysis/class-v6/1p5x/int8/rows/export-int8w75r32.txt; docs/analysis/class-v6/1p5x/int8/rows/export-int8w90r32.txt","in_progress":false,"coverage":{},"release_identity":{"commit":"0592e48e8 (branch 1p5x-int8; igneum-pow/src 9e8fb3c4...)","lockfile":"","binary":"","network_object":"none: research flags, closed","activation":"none","profile_hashes":""},"claim_impact":"none: a closed research record; the frozen v6 stays the algorithm","reviewer":"","at":"2026-10-09T10:20:51.148Z","note":"CLOSED by main at 11:1x UK before the suite, the self-test, the census and the GPU rows ran; every cell NOT RUN."}}},{"id":"POW-03","title":"Test whether live state is unavoidable","setup":"Take the 64-register candidate and the cheapest independently proposed storage organisations.","steps":["Trace value liveness across dependent reads and final output, distinguishing distinct information from duplicated values.","Try banking, compression, recomputation, fewer ports and time-multiplexed contexts.","Quantify the best complete-system cost/throughput trade-off rather than the reference register count."],"accept":"Production selection is supported by measured or physically modelled penalties after these alternatives. G2 requires the P03 improvement; an attractive source-level register count alone does not pass.","evidence":"Liveness traces; alternative implementations; Pareto table; reviewer analysis.","priority":"GATE","profile":"P03; P04","cadence":"Release candidate; repeat after relevant changes","method":"Experiment + independent hardware review","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":24,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"FAIL","evidence_path":"docs/analysis/class-v6/connected-state.md; docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261009-placed-32lane","updated":"2026-10-09T09:25:30.463Z","evidence_record":{"requirement_id":"POW-03","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"14939909","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"partial: the live state held in an SRAM macro per 8 lanes with a time-multiplexed single port and operand isolation, the complete-system cost in section 6; the liveness trace itself is the connected-state lane's tool","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.463Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the connected-state class KILLED (1.10x against the 1.25x gate; live state costs a clock-gated file nothing)","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"POW-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/connected-state.md","in_progress":true},"experiment:connected-state":{"requirement_id":"POW-03","decision":"FAIL","method":"GPU","cell":"experiment:connected-state","manifest_sha":"7cfa422a","run_id":"kills-20261008","evidence":"docs/analysis/class-v6/connected-state.md","in_progress":false,"coverage":"the experiment ran and its claim failed: live state does not make the work unavoidable for a chip; the master's register row 18 reads FAIL, published, never PASSED","release_identity":{"commit":"7cfa422a","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"the claims the two experiments carried are withdrawn: live state as an ASIC barrier (connected state), a cheaper mixed-FP32 lane","reviewer":"","at":"2026-10-08T21:00:32.906Z"},"adversary:mf-placed":{"requirement_id":"POW-03","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"14939909","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"partial: the live state held in an SRAM macro per 8 lanes with a time-multiplexed single port and operand isolation, the complete-system cost in section 6; the liveness trace itself is the connected-state lane's tool","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.463Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"}}},{"id":"POW-04","title":"Evaluate connected-resource restructuring","setup":"Use a candidate initially matched to baseline instruction count, read count and dataset size.","steps":["Connect state, addresses, arithmetic and lane communication according to the written hypothesis.","Measure GPU cost and allow the specialist reviewer to redesign the entire core.","Repeat on held-out program seeds and compare the worst supported adversary, not only the original design."],"accept":"The selected upgrade meets P03 and improves the adversarial result outside declared uncertainty. A negative experiment remains a negative outcome; adopting a different design requires a new frozen comparison.","evidence":"Matched workloads; GPU runs; redesigned core estimates; held-out results.","priority":"GATE","profile":"P03; P04","cadence":"Release candidate; repeat after relevant changes","method":"Controlled experiment","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":25,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/connected-state.md; docs/analysis/class-v6/multi-family-adversary.md; docs/analysis/class-v6/1p5x/x1/README.md; docs/analysis/class-v6/1p5x/x1/rows/cache/cache-ctrl-sign.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/cache-flat-sign.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/canary-ctrl.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/canary-flat.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/draw-timing.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-ctrl-ds28.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-ctrl-ds30.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-flat-ds28.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-flat-ds30.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/gen-timing.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/model-ctrl-256.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/model-flat-256.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-ctrl-seed-p18.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-object-h0.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-object-h4.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p18.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p19.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p20.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p21.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p22.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p23.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p24.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p25.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p26.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p27.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p28.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p29.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p30.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p31.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p32.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p33.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/worker.log; docs/analysis/class-v6/1p5x/x1/rows/suite-a99de07cd.log; tools/1p5x/x1/cache.sh; tools/1p5x/x1/census.sh; tools/1p5x/x1/gpu-pairs.sh; tools/1p5x/x1/gpu-rows.py; tools/1p5x/x1/run.sh; tools/1p5x/x1/summarise.py","run_id":"1p5x-x1-20261009-01","updated":"2026-10-09T09:43:07.875Z","evidence_record":{"requirement_id":"POW-04","decision":"NOT RUN","method":"GPU","cell":"experiment:1p5x-x1","manifest_sha":"a99de07cd","run_id":"1p5x-x1-20261009-01","evidence":"docs/analysis/class-v6/1p5x/x1/README.md; docs/analysis/class-v6/1p5x/x1/rows/cache/cache-ctrl-sign.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/cache-flat-sign.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/canary-ctrl.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/canary-flat.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/draw-timing.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-ctrl-ds28.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-ctrl-ds30.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-flat-ds28.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-flat-ds30.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/gen-timing.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/model-ctrl-256.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/model-flat-256.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-ctrl-seed-p18.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-object-h0.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-object-h4.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p18.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p19.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p20.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p21.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p22.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p23.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p24.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p25.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p26.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p27.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p28.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p29.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p30.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p31.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p32.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p33.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/worker.log; docs/analysis/class-v6/1p5x/x1/rows/suite-a99de07cd.log; tools/1p5x/x1/cache.sh; tools/1p5x/x1/census.sh; tools/1p5x/x1/gpu-pairs.sh; tools/1p5x/x1/gpu-rows.py; tools/1p5x/x1/run.sh; tools/1p5x/x1/summarise.py","in_progress":false,"coverage":{},"release_identity":{"commit":"a99de07cd (branch 1p5x-x1-v7, the candidate +flat over the frozen 1a938abe4; igneum-pow/src b9b5d0d1...; the harness 1p5x-x1-harness fc6bfaf25)","lockfile":"","binary":"igneum-worker-cuda-gen6 804a6f7f...; igneum-pow bin-a99de07cd 78e312e9...; harness bin-h-5264b8152 9dc22b1d..., bin-h-fc6bfaf25 f28049a1...","network_object":"none: a research class behind its own flag; the frozen object keeps layer 8 on (class_v6_family_flags 0xf); every GPU row on an island, not a network","activation":"none","profile_hashes":"packs x1-ctrl-ds28 69e009cd..., x1-ctrl-ds30 7606c13d..., x1-flat-ds28 020dbdc7..., x1-flat-ds30 f25160bd..."},"claim_impact":"none claimed: the candidate's census is flat to the Poisson floor and its card cost is g 0.98 to 1.00 at stock; the window concentration of the frozen object is 56 percent at the half store (61 percent seed mean), not the 72 percent premise, so the cache side bounds the hybrid's a at 1.14 on the signing object; the knee and the specialist side are owed (X5, X6)","reviewer":"","at":"2026-10-09T09:43:07.875Z","note":"Every cell NOT RUN: this lane never writes PASS on its own row; X6 runs blind. BLOCKED inside: the knee rows (rented cards cannot lock, the house rigs unreachable), wall power, the specialist side a (X5)."},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the same experiment, D2(a) closed","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"POW-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/connected-state.md","in_progress":true},"adversary:mf-placed":{"requirement_id":"POW-04","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"14939909","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"partial: the 64-register window's cost on the macro core (sections 4 and 5, agreeing with the k lane's gated-flop row within 5 percent); the restructured candidate's GPU cost is the invention lane's","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.463Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"experiment:1p5x-x1":{"requirement_id":"POW-04","decision":"NOT RUN","method":"GPU","cell":"experiment:1p5x-x1","manifest_sha":"a99de07cd","run_id":"1p5x-x1-20261009-01","evidence":"docs/analysis/class-v6/1p5x/x1/README.md; docs/analysis/class-v6/1p5x/x1/rows/cache/cache-ctrl-sign.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/cache-flat-sign.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/canary-ctrl.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/canary-flat.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/draw-timing.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-ctrl-ds28.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-ctrl-ds30.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-flat-ds28.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/export-x1-flat-ds30.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/gen-timing.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/model-ctrl-256.txt; docs/analysis/class-v6/1p5x/x1/rows/cache/model-flat-256.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-ctrl-seed-p18.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-object-h0.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-object-h4.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p18.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p19.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p20.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p21.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p22.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p23.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p24.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p25.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p26.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p27.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p28.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p29.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p30.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p31.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p32.txt; docs/analysis/class-v6/1p5x/x1/rows/census/census-flat-seed-p33.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090b/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g4090c/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090b/worker.log; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/rows.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/session.txt; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/smi.csv; docs/analysis/class-v6/1p5x/x1/rows/gpu/g5090e/worker.log; docs/analysis/class-v6/1p5x/x1/rows/suite-a99de07cd.log; tools/1p5x/x1/cache.sh; tools/1p5x/x1/census.sh; tools/1p5x/x1/gpu-pairs.sh; tools/1p5x/x1/gpu-rows.py; tools/1p5x/x1/run.sh; tools/1p5x/x1/summarise.py","in_progress":false,"coverage":{},"release_identity":{"commit":"a99de07cd (branch 1p5x-x1-v7, the candidate +flat over the frozen 1a938abe4; igneum-pow/src b9b5d0d1...; the harness 1p5x-x1-harness fc6bfaf25)","lockfile":"","binary":"igneum-worker-cuda-gen6 804a6f7f...; igneum-pow bin-a99de07cd 78e312e9...; harness bin-h-5264b8152 9dc22b1d..., bin-h-fc6bfaf25 f28049a1...","network_object":"none: a research class behind its own flag; the frozen object keeps layer 8 on (class_v6_family_flags 0xf); every GPU row on an island, not a network","activation":"none","profile_hashes":"packs x1-ctrl-ds28 69e009cd..., x1-ctrl-ds30 7606c13d..., x1-flat-ds28 020dbdc7..., x1-flat-ds30 f25160bd..."},"claim_impact":"none claimed: the candidate's census is flat to the Poisson floor and its card cost is g 0.98 to 1.00 at stock; the window concentration of the frozen object is 56 percent at the half store (61 percent seed mean), not the 72 percent premise, so the cache side bounds the hybrid's a at 1.14 on the signing object; the knee and the specialist side are owed (X5, X6)","reviewer":"","at":"2026-10-09T09:43:07.875Z","note":"Every cell NOT RUN: this lane never writes PASS on its own row; X6 runs blind. BLOCKED inside: the knee rows (rented cards cannot lock, the house rigs unreachable), wall power, the specialist side a (X5)."}}},{"id":"POW-05","title":"Prevent amortised cheap winning attempts","setup":"Prepare valid templates, nonces, intermediate-state captures and independent acceptance checks.","steps":["Vary nonce, payout identity, transactions, roots and other committed fields after expensive work.","Try replay, precomputation, shared prefixes, partial evaluation and many cheap suffix candidates.","Price any valid strategy against fresh evaluation; independently review all bindings."],"accept":"Invalid modifications are rejected. Any valid cost-saving strategy is incorporated into ADV and must still meet P04/ECO gates. No unresolved shortcut is hidden behind passing reference vectors.","evidence":"Attack implementations; valid/invalid controls; work-cost analysis; binding review.","priority":"BLOCKER","profile":"P01; P04","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":25,"owner_lane":"pool design seat (a3832b1c3b274b310)","run_status":"NOT RUN","evidence_path":"docs/analysis/binding-review-2026-10.md (sections 1 to 5a; master ad5a54c5); docs/analysis/mhpow/b1/README.md; docs/analysis/mhpow/b2/README.md","run_id":"mhpow-b2-20261009-01","updated":"2026-10-09T10:10:43.564Z","evidence_record":{"requirement_id":"POW-05","decision":"NOT RUN","method":"model","cell":"model:mhpow-b2-binding","manifest_sha":"13c3646e","run_id":"mhpow-b2-20261009-01","evidence":"docs/analysis/mhpow/b2/README.md","in_progress":true,"coverage":"partial: the binding obligations for the Track B work unit only; the lottery binding is BLOCKED (B-T3) and the multi-instance bound BLOCKED (B-T5)","release_identity":{"commit":"13c3646e","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves; Track B's construction is not adopted and nothing activates","reviewer":"","at":"2026-10-09T10:10:43.564Z","note":"POW-05: obligations O-06 to O-11 and O-16 (grinding, chosen instance, amortisation, partial evaluation, precomputation); O-07 records two FAIL rules and B-T3 the open question. POW-06: O-11's certificate sizes as functions of DRSample's unproved constant c3 (13.6 to 194.9 MiB at lambda 256), a sensitivity table only; the verifier budget is B6's. | B2, the binding spec lane of the 1.5x programme's Track B (9 October 2026): the canonical instance input for an MTP/DRSample memory-hard proof of work in Igneum's setting (328 bytes, work version 1, draft) and the obligations table O-01 to O-16 read against Blocki and Smearsoll, eprint 2025/1456 (the full PDF, sha256 13c3646e...). Reuse across template, trial, epoch, day, era, network and class object: answered by the paper's per-input soundness plus the layout. The lottery: two candidate rules FAIL with written counter-examples (re-roll through a red sink, about 1.3 x 10^6 draws per labelling at N = 2^24; free screening on chi alone); the replacement and the multi-instance, adaptive-input, constants and energy questions BLOCKED to the B4 theory lane and the node lane. Figures by tools/mhpow/b2/b2_figures.py on build-9. NOT RUN until the panel reads it; this lane writes no PASS."},"status_note":"REVIEWED: fixed by construction (binding), not applicable (final digest); native tests ok on build-2; no change for 2.0","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the binding review: twelve reuse paths, none below the honest cost; five open questions B1 to B5","run_by":"pool design seat (a3832b1c3b274b310)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"POW-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"binding-review-2026-10-08-a05","evidence":"docs/analysis/binding-review-2026-10.md (sections 1 to 5a; master ad5a54c5)","in_progress":false},"model:mhpow-b1-reference":{"requirement_id":"POW-05","decision":"NOT RUN","method":"model","cell":"model:mhpow-b1-reference","manifest_sha":"13c3646e","run_id":"mhpow-b1-20261009-01","evidence":"docs/analysis/mhpow/b1/README.md","in_progress":true,"coverage":"partial: the published primitive's attack fixtures only; the lottery binding and the composed accepted-proof theorem are B2/B4's","release_identity":{"commit":"13c3646e","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves; Track B's construction is not adopted and nothing activates","reviewer":"","at":"2026-10-09T10:06:27.563Z","note":"POW-05: attack fixtures A1 to A6 (tools/mhpow/b1/fixtures/attacks-n10-k16.json): A1 replay and A2 unopened block REFUSED, A3 control-block steering gain 0 with the red-node fallback accepted at (1-1/t)^k, A4 self-similarity saving refused, A5 Attack 1 accepted at (1-|S|/N)^k, A6 many accepted roots per labelling (the lottery binding BLOCKED to B2/B4, rows O-1 and O-8). POW-06: the verifier's named checks refuse malformed containers, wrong positions, skipped parents and wrong tags (test_b1.py); proof bytes and verifier oracle calls per N are exact formulas with measured rows; cold verification at rate BLOCKED to B6 (O-11). | B1 (R15-05), the cryptography lane of the 1.5x programme's Track B (9 October 2026): the exact CPU reference of Blocki and Smearsoll's MTP framework (eprint 2025/1456 as archived, sha256 13c3646e..., Sec 2.2, 3.2, App. C) over DRSample (ABH17 Alg. 1, eprint 2017/443 as archived, sha256 f8e08d36...), its complete verifier (named checks in the paper's order, each with a known-failed test, 17 of 17 OK on build-6), five deterministic known-answer fixtures (n 4 to 20), honest-prover rows n 12 to 24 (CPython, wall time only, no power) and six malicious provers (Dinur-Nadler eprint 2017/497 Sec 4.1, 4.3/5, 8; the paper's Attack 1 and LuckyQuery regrind). Dinur-Nadler's steering and unopened-block attacks are refused; red-node cheats are accepted with the (1-|S|/N)^k probability the paper prices; one labelling yields many accepted roots (F-4). The proven k with ABH17's constant exceeds N to about n 25 (F-3). NOT RUN until the panel reads it; this lane writes no PASS."},"model:mhpow-b2-binding":{"requirement_id":"POW-05","decision":"NOT RUN","method":"model","cell":"model:mhpow-b2-binding","manifest_sha":"13c3646e","run_id":"mhpow-b2-20261009-01","evidence":"docs/analysis/mhpow/b2/README.md","in_progress":true,"coverage":"partial: the binding obligations for the Track B work unit only; the lottery binding is BLOCKED (B-T3) and the multi-instance bound BLOCKED (B-T5)","release_identity":{"commit":"13c3646e","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves; Track B's construction is not adopted and nothing activates","reviewer":"","at":"2026-10-09T10:10:43.564Z","note":"POW-05: obligations O-06 to O-11 and O-16 (grinding, chosen instance, amortisation, partial evaluation, precomputation); O-07 records two FAIL rules and B-T3 the open question. POW-06: O-11's certificate sizes as functions of DRSample's unproved constant c3 (13.6 to 194.9 MiB at lambda 256), a sensitivity table only; the verifier budget is B6's. | B2, the binding spec lane of the 1.5x programme's Track B (9 October 2026): the canonical instance input for an MTP/DRSample memory-hard proof of work in Igneum's setting (328 bytes, work version 1, draft) and the obligations table O-01 to O-16 read against Blocki and Smearsoll, eprint 2025/1456 (the full PDF, sha256 13c3646e...). Reuse across template, trial, epoch, day, era, network and class object: answered by the paper's per-input soundness plus the layout. The lottery: two candidate rules FAIL with written counter-examples (re-roll through a red sink, about 1.3 x 10^6 draws per labelling at N = 2^24; free screening on chi alone); the replacement and the multi-instance, adaptive-input, constants and energy questions BLOCKED to the B4 theory lane and the node lane. Figures by tools/mhpow/b2/b2_figures.py on build-9. NOT RUN until the panel reads it; this lane writes no PASS."}},"in_progress_since":"2026-10-09T10:06:27.563Z"},{"id":"POW-06","title":"Bound verifier work and malformed-input cost","setup":"Use ordinary CPU validators with a manifest-defined resource budget and untrusted submissions.","steps":["Submit shortest/longest programs, malformed encodings and adversarial memory references.","Measure verification time, peak memory and work amplification across valid and invalid inputs.","Sustain the approved hostile request rate while ordinary valid traffic continues."],"accept":"All semantics remain correct and P09 resource budgets hold. Invalid traffic cannot cause unbounded allocation, crashes or disproportionate free work. Rate limits must not replace consensus validation.","evidence":"CPU profiles; adversarial corpus; allocation traces; valid-traffic latency.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":25,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/p01-partb-20261008-01/summary.jsonl; docs/analysis/mhpow/b1/README.md; docs/analysis/mhpow/b2/README.md; docs/analysis/mhpow/b3/README.md","run_id":"mhpow-b3-20261009-01","updated":"2026-10-09T10:15:09.175Z","evidence_record":{"requirement_id":"POW-06","decision":"NOT RUN","method":"GPU","cell":"rows:mhpow-b3-gpu-feasibility","manifest_sha":"bc6bfa75e","run_id":"mhpow-b3-20261009-01","evidence":"docs/analysis/mhpow/b3/README.md","in_progress":true,"coverage":"partial: verifier time per proof for the Track B candidate at k = 64 on one CPU; no malformed-input or rate budget","release_identity":{"commit":"bc6bfa75e","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves; the Track B candidate is not proposed for activation","reviewer":"","at":"2026-10-09T10:15:09.175Z","note":"POW-01 (Track B candidate only, not the shipped v6): an independently written CPU reference (B1, Python) and its C port agree with the CUDA backend byte for byte on every checked instance at n = 8 to 24 on two cards. POW-06 (Track B candidate only): the C-port verifier's time per GPU proof at k = 64 is recorded per row; the proof is about 129 to 180 KB at k = 64 and k is not yet fixed by the theorem's constants (BLOCKED row in the README). The GPU feasibility verdict itself (the README's trap rows) is a research finding for the panel, not a registry case. | Track B B3 (R15-06, the GPU feasibility lane, 9 October 2026): GPU adaptation of the Blocki-Smearsoll TCC 2025 MTP/DRSample MHPoW (eprint 2025/1456, full PDF sha256 13c3646e...) without changing the function: CUDA labelling, Merkle commitment and proof creation, batched at 32, 128 and 512 MiB per instance with the card filled, on a rented RTX 5090 and RTX 4090 at stock clocks (no clock lock on rented pods), board power from nvidia-smi at 1 Hz with idle not subtracted. Correctness oracle: the B1 lane's reference encoding (tools/mhpow/b1 working copy on build-6 09:26Z, not landed) through a C port that reproduces B1's five known-answer fixtures byte for byte, then the GPU byte for byte on labels, every Merkle node, root and proof container, instance 0 equal to B1's own fixture, every GPU proof accepted; the known-failed test (DRSample's long edges deleted on the GPU) fires. A research candidate only: nothing activates, no comparison with the v6 work unit is made (the comparison contract is a BLOCKED row), no PASS is claimed. NOT RUN until the panel reads it."},"in_progress_since":"2026-10-08T18:28:32.463Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:parser-malformed":{"cell":"harness:parser-malformed","manifest_sha":"417c4a57","coverage":{"POW-06":"partial: three parsers of external bytes (the state stream, the igneum_ RPC params, the pool job line), ten thousand seeded malformed cases each, zero panics, every case under 500 ms (the slowest 152 microseconds); 'accepted' counts mutations that left a valid input, not a parser fault; the verifier work bound (the other half of the accept text) is the proving lane's measurement"},"at":"2026-10-08T18:28:32.463Z","method":"static","requirement_id":"POW-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"p01-partb-20261008-01","evidence":"build-1:/srv/artefacts/tas/p01-partb-20261008-01/summary.jsonl","in_progress":true},"model:mhpow-b1-reference":{"requirement_id":"POW-06","decision":"NOT RUN","method":"model","cell":"model:mhpow-b1-reference","manifest_sha":"13c3646e","run_id":"mhpow-b1-20261009-01","evidence":"docs/analysis/mhpow/b1/README.md","in_progress":true,"coverage":"partial: verifier refusals and op counts in CPython; no compiled verifier, no admitted-rate timing","release_identity":{"commit":"13c3646e","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves; Track B's construction is not adopted and nothing activates","reviewer":"","at":"2026-10-09T10:06:27.563Z","note":"POW-05: attack fixtures A1 to A6 (tools/mhpow/b1/fixtures/attacks-n10-k16.json): A1 replay and A2 unopened block REFUSED, A3 control-block steering gain 0 with the red-node fallback accepted at (1-1/t)^k, A4 self-similarity saving refused, A5 Attack 1 accepted at (1-|S|/N)^k, A6 many accepted roots per labelling (the lottery binding BLOCKED to B2/B4, rows O-1 and O-8). POW-06: the verifier's named checks refuse malformed containers, wrong positions, skipped parents and wrong tags (test_b1.py); proof bytes and verifier oracle calls per N are exact formulas with measured rows; cold verification at rate BLOCKED to B6 (O-11). | B1 (R15-05), the cryptography lane of the 1.5x programme's Track B (9 October 2026): the exact CPU reference of Blocki and Smearsoll's MTP framework (eprint 2025/1456 as archived, sha256 13c3646e..., Sec 2.2, 3.2, App. C) over DRSample (ABH17 Alg. 1, eprint 2017/443 as archived, sha256 f8e08d36...), its complete verifier (named checks in the paper's order, each with a known-failed test, 17 of 17 OK on build-6), five deterministic known-answer fixtures (n 4 to 20), honest-prover rows n 12 to 24 (CPython, wall time only, no power) and six malicious provers (Dinur-Nadler eprint 2017/497 Sec 4.1, 4.3/5, 8; the paper's Attack 1 and LuckyQuery regrind). Dinur-Nadler's steering and unopened-block attacks are refused; red-node cheats are accepted with the (1-|S|/N)^k probability the paper prices; one labelling yields many accepted roots (F-4). The proven k with ABH17's constant exceeds N to about n 25 (F-3). NOT RUN until the panel reads it; this lane writes no PASS."},"model:mhpow-b2-binding":{"requirement_id":"POW-06","decision":"NOT RUN","method":"model","cell":"model:mhpow-b2-binding","manifest_sha":"13c3646e","run_id":"mhpow-b2-20261009-01","evidence":"docs/analysis/mhpow/b2/README.md","in_progress":true,"coverage":"partial: certificate size as a formula; no verifier timing, no malformed-input cost","release_identity":{"commit":"13c3646e","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves; Track B's construction is not adopted and nothing activates","reviewer":"","at":"2026-10-09T10:10:43.564Z","note":"POW-05: obligations O-06 to O-11 and O-16 (grinding, chosen instance, amortisation, partial evaluation, precomputation); O-07 records two FAIL rules and B-T3 the open question. POW-06: O-11's certificate sizes as functions of DRSample's unproved constant c3 (13.6 to 194.9 MiB at lambda 256), a sensitivity table only; the verifier budget is B6's. | B2, the binding spec lane of the 1.5x programme's Track B (9 October 2026): the canonical instance input for an MTP/DRSample memory-hard proof of work in Igneum's setting (328 bytes, work version 1, draft) and the obligations table O-01 to O-16 read against Blocki and Smearsoll, eprint 2025/1456 (the full PDF, sha256 13c3646e...). Reuse across template, trial, epoch, day, era, network and class object: answered by the paper's per-input soundness plus the layout. The lottery: two candidate rules FAIL with written counter-examples (re-roll through a red sink, about 1.3 x 10^6 draws per labelling at N = 2^24; free screening on chi alone); the replacement and the multi-instance, adaptive-input, constants and energy questions BLOCKED to the B4 theory lane and the node lane. Figures by tools/mhpow/b2/b2_figures.py on build-9. NOT RUN until the panel reads it; this lane writes no PASS."},"rows:mhpow-b3-gpu-feasibility":{"requirement_id":"POW-06","decision":"NOT RUN","method":"GPU","cell":"rows:mhpow-b3-gpu-feasibility","manifest_sha":"bc6bfa75e","run_id":"mhpow-b3-20261009-01","evidence":"docs/analysis/mhpow/b3/README.md","in_progress":true,"coverage":"partial: verifier time per proof for the Track B candidate at k = 64 on one CPU; no malformed-input or rate budget","release_identity":{"commit":"bc6bfa75e","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves; the Track B candidate is not proposed for activation","reviewer":"","at":"2026-10-09T10:15:09.175Z","note":"POW-01 (Track B candidate only, not the shipped v6): an independently written CPU reference (B1, Python) and its C port agree with the CUDA backend byte for byte on every checked instance at n = 8 to 24 on two cards. POW-06 (Track B candidate only): the C-port verifier's time per GPU proof at k = 64 is recorded per row; the proof is about 129 to 180 KB at k = 64 and k is not yet fixed by the theorem's constants (BLOCKED row in the README). The GPU feasibility verdict itself (the README's trap rows) is a research finding for the panel, not a registry case. | Track B B3 (R15-06, the GPU feasibility lane, 9 October 2026): GPU adaptation of the Blocki-Smearsoll TCC 2025 MTP/DRSample MHPoW (eprint 2025/1456, full PDF sha256 13c3646e...) without changing the function: CUDA labelling, Merkle commitment and proof creation, batched at 32, 128 and 512 MiB per instance with the card filled, on a rented RTX 5090 and RTX 4090 at stock clocks (no clock lock on rented pods), board power from nvidia-smi at 1 Hz with idle not subtracted. Correctness oracle: the B1 lane's reference encoding (tools/mhpow/b1 working copy on build-6 09:26Z, not landed) through a C port that reproduces B1's five known-answer fixtures byte for byte, then the GPU byte for byte on labels, every Merkle node, root and proof container, instance 0 equal to B1's own fixture, every GPU proof accepted; the known-failed test (DRSample's long edges deleted on the GPU) fires. A research candidate only: nothing activates, no comparison with the v6 work unit is made (the comparison contract is a BLOCKED row), no PASS is claimed. NOT RUN until the panel reads it."}}},{"id":"POW-07","title":"Constrain any mixed-resource or FP32 branch","setup":"If this branch is excluded, verify that it is unreachable and not claimed; if included, use a separate frozen candidate.","steps":["Specify exact rounding, fusion, special values and backend behaviour before compiling.","Differentially test all supported architectures and allow numerical-domain simplification in the specialist model.","Include verifier cost and candidate energy in P03/P04, not just arithmetic-unit area."],"accept":"Included branches achieve exact agreed semantics and all hardware budgets. An excluded branch earns no performance credit. No approximate operation or unspecified compiler choice enters consensus.","evidence":"Scope decision; semantic specification; vectors; simplified datapath model.","priority":"BLOCKER","profile":"P00; P01; P03","cadence":"Release candidate; repeat after relevant changes","method":"Conditional implementation test","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":26,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"FAIL","evidence_path":"docs/analysis/class-v6/rows/pow-07-fp32-unreachable.md; docs/analysis/class-v6/mixed-fp32.md; docs/analysis/class-v6/rows/pow-07-fp32-unreachable.md","run_id":"kills-20261008","updated":"2026-10-08T21:00:32.906Z","evidence_record":{"requirement_id":"POW-07","decision":"FAIL","method":"GPU","cell":"experiment:mixed-fp32","manifest_sha":"7cfa422a","run_id":"kills-20261008","evidence":"docs/analysis/class-v6/mixed-fp32.md; docs/analysis/class-v6/rows/pow-07-fp32-unreachable.md","in_progress":false,"coverage":"the branch ran and its claim failed: the FP32 branch costs the card more energy and widens the chip edge; the master's register row 12 reads FAIL, published; the branch is excluded and unreachable on master (the grep evidence stays)","release_identity":{"commit":"7cfa422a","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"the claims the two experiments carried are withdrawn: live state as an ASIC barrier (connected state), a cheaper mixed-FP32 lane","reviewer":"","at":"2026-10-08T21:00:32.906Z"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:pow":{"cell":"suite:pow","manifest_sha":"b24dfc162","coverage":{"POW-02":"partial: program derivation, ds55 geometry, the v6 fold, the packs and the spec read-back tests; the independent re-implementation and the index-fold census are the hash lane's harnesses","POW-08":"partial: the freeze list and the generator version pin; the public-claim scrub is the site gate's","POW-07":"the mixed FP32 branch is excluded and unreachable: no class flag reaches an FP op in igneum-pow on master (the mixedfp lane's branch is not on master); evidence the grep of the emitters on master, recorded by the hash lane"},"at":"2026-10-08T19:59:34.316Z","method":"native","requirement_id":"POW-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"b24dfc162","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"hash-lane-20261008-batch2","evidence":"docs/analysis/class-v6/rows/pow-07-fp32-unreachable.md","in_progress":true},"experiment:mixed-fp32":{"requirement_id":"POW-07","decision":"FAIL","method":"GPU","cell":"experiment:mixed-fp32","manifest_sha":"7cfa422a","run_id":"kills-20261008","evidence":"docs/analysis/class-v6/mixed-fp32.md; docs/analysis/class-v6/rows/pow-07-fp32-unreachable.md","in_progress":false,"coverage":"the branch ran and its claim failed: the FP32 branch costs the card more energy and widens the chip edge; the master's register row 12 reads FAIL, published; the branch is excluded and unreachable on master (the grep evidence stays)","release_identity":{"commit":"7cfa422a","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"the claims the two experiments carried are withdrawn: live state as an ASIC barrier (connected state), a cheaper mixed-FP32 lane","reviewer":"","at":"2026-10-08T21:00:32.906Z"}}},{"id":"POW-08","title":"Keep rejected mechanisms out of the shipped claim","setup":"Inventory long programs, select trees, SM gating, wider reads, sealed classes, random epoch lengths, per-tier scoring and VRF draws.","steps":["Retain their historic negative tests and realistic SRAM instruction-memory control.","Inspect the release for reintroduction through renamed settings or hidden paths.","Require a new written hypothesis and complete adversarial retest for any proposed return."],"accept":"Excluded levers remain excluded unless separately approved and retested. Flip-flop instruction-memory area is never presented as the cost of a realistic SRAM implementation.","evidence":"Decision register; binary/config scan; negative-control results.","priority":"GATE","profile":"P00; P03","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,9,10,23],"gate":"G2 / technical readiness","owner":"Cryptography + GPU lead","manual_page":26,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-pow.log; docs/analysis/class-v6/rows/x0-5090-20261009.md; docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md; build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt","run_id":"hash-lane-20261009-batch5","updated":"2026-10-09T09:08:49.974Z","evidence_record":{"requirement_id":"POW-08","decision":"PASS","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch5","evidence":"docs/analysis/class-v6/rows/x0-5090-20261009.md","in_progress":false,"coverage":"partial: W = 16 on four cards","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:08:49.974Z"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:pow":{"requirement_id":"POW-08","decision":"NOT RUN","method":"native","cell":"suite:pow","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-pow.log","in_progress":false,"coverage":"partial: the freeze list and the generator version pin; the public-claim scrub is the site gate's","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; pow on release-2.0.2 77b5acc5 (box4, 226s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"bench:fleet-pods":{"requirement_id":"POW-08","decision":"PASS","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch5","evidence":"docs/analysis/class-v6/rows/x0-5090-20261009.md","in_progress":false,"coverage":"partial: W = 16 on four cards","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:08:49.974Z"},"bench:pc1-packs":{"requirement_id":"POW-08","decision":"PASS","method":"GPU","cell":"bench:pc1-packs","manifest_sha":"1a938abe4","run_id":"hash-lane-20261009-batch4","evidence":"docs/analysis/class-v6/rows/pc1-l8off-ds2g-20261009.md","in_progress":false,"coverage":"partial: rw-w4, rw-w32, rw-w64 and the 1p5x long-program packs as regression controls for the excluded levers","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T03:58:33.097Z"},"bench:fleet-pods@p02-fleet-pods-20261008-01":{"requirement_id":"POW-08","decision":"NOT RUN","method":"GPU","cell":"bench:fleet-pods","manifest_sha":"417c4a57","run_id":"p02-fleet-pods-20261008-01","evidence":"build-1:/srv/artefacts/tas/p02-rows/p02-rows.txt","in_progress":false,"coverage":"partial: W = 16 on four cards","release_identity":{"commit":"417c4a57","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.980Z"}}}]},{"code":"ADV","title":"Programmable specialist adversaries","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","fixtures":"F2 reference GPUs; F6 RTL/physical models; all published families","summary":"Give the opponent permission to adapt, share resources and remain operational; test cost rather than imagined chip death.","tests":[{"id":"ADV-01","title":"Build a multi-family programmable opponent","setup":"Provide the complete published family bank and future known parameter schedule to the reviewer.","steps":["Design one programmable architecture that supports all retained families, including firmware and emulation paths.","Optimise clocks, lanes, ports and pipelines without requiring a graphics-card layout.","Verify its outputs against POW vectors before measuring any advantage."],"accept":"At least the P04 design diversity is evaluated; every estimated competitive design is functionally validated. Inability of one narrow design to adapt is not evidence that all chips expire.","evidence":"Architecture reports; functional simulations; adaptation matrix; reviewer signature.","priority":"GATE","profile":"P01; P04","cadence":"Release candidate; repeat after relevant changes","method":"Independent hardware study","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":27,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261009-placed-32lane","updated":"2026-10-09T09:25:30.463Z","evidence_record":{"requirement_id":"ADV-01","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"14939909","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the mf core (18 families, SRAM window and imem macros, operand isolation, 5-phase port) placed and routed on ASAP7 with SPEF and a gate-level VCD; k per family and per draw; outputs checked against the RTL simulation's checksums per tag, not yet against the POW vectors (owed)","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.463Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the 18-family programmable core placed and routed (9.36 pJ per lane-op, k 0.64 same-node)","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ADV-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true},"adversary:mf-placed":{"requirement_id":"ADV-01","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"14939909","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the mf core (18 families, SRAM window and imem macros, operand isolation, 5-phase port) placed and routed on ASAP7 with SPEF and a gate-level VCD; k per family and per draw; outputs checked against the RTL simulation's checksums per tag, not yet against the POW vectors (owed)","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.463Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"}}},{"id":"ADV-02","title":"Price shared, reduced and reconstructed memory","setup":"Allow multiple engines to share a dataset and to store selected fractions rather than a complete per-engine copy.","steps":["Sweep sharing factors, memory fractions, caches and recomputation depth across many simultaneous hashes.","Include construction/update amortisation, bandwidth contention and retained state.","Take the most favourable feasible point for the specialist into the complete-board model."],"accept":"No omitted feasible trade-off materially lowers the accepted cost estimate. Any winning alternative is included in P04 and ECO; capacity alone is not accepted as an energy bound.","evidence":"Sweep definitions; energy/bandwidth data; best-feasible envelope; excluded-design reasons.","priority":"GATE","profile":"P04","cadence":"Release candidate; repeat after relevant changes","method":"Model + adversarial implementation","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":27,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md; docs/analysis/class-v6/1p5x/x7/README.md; docs/analysis/class-v6/1p5x/x5/README.md","run_id":"adversary-20261009-x7","updated":"2026-10-09T09:44:18.677Z","evidence_record":{"requirement_id":"ADV-02","decision":"NOT RUN","method":"model","cell":"adversary:x5-sweep","manifest_sha":"85db138c","run_id":"adversary-20261009-x7","evidence":"docs/analysis/class-v6/1p5x/x7/README.md","in_progress":false,"coverage":"the memory fractions 0.25 / 0.5 / 0.75, the full store and recomputation on the complete board; the hit curve per (pack, seed) pair from a trace JSON","release_identity":{"commit":"85db138c","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:44:18.677Z","note":"X7's chip side: s on three memory designs for the frozen object's traffic (WITNESS rows); the bridge reading waits on the hash lane's f"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"D2(b): the stored-half hybrid, memory sharing, recomputation priced (the placed hybrid 1.93x same-node at the mean hit)","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ADV-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true},"adversary:d2b":{"requirement_id":"ADV-02","decision":"NOT RUN","method":"model","cell":"adversary:d2b","manifest_sha":"3a8874fef","run_id":"adversary-20261008-placed-8lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"memory sharing, partial stores at the measured window-layer hit rates (and hit 0.50 with layer 8 off), recomputation and the set-up amortisation on the complete board (section 13); the formal memory model's terms (section 16)","release_identity":{"commit":"3a8874fef","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:41:20.327Z"},"adversary:x5-sweep":{"requirement_id":"ADV-02","decision":"NOT RUN","method":"model","cell":"adversary:x5-sweep","manifest_sha":"85db138c","run_id":"adversary-20261009-x7","evidence":"docs/analysis/class-v6/1p5x/x7/README.md","in_progress":false,"coverage":"the memory fractions 0.25 / 0.5 / 0.75, the full store and recomputation on the complete board; the hit curve per (pack, seed) pair from a trace JSON","release_identity":{"commit":"85db138c","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:44:18.677Z","note":"X7's chip side: s on three memory designs for the frozen object's traffic (WITNESS rows); the bridge reading waits on the hash lane's f"},"adversary:x5-sweep@adversary-20261009-x5":{"requirement_id":"ADV-02","decision":"NOT RUN","method":"model","cell":"adversary:x5-sweep","manifest_sha":"14939909","run_id":"adversary-20261009-x5","evidence":"docs/analysis/class-v6/1p5x/x5/README.md","in_progress":false,"coverage":"the memory fractions 0.25 / 0.5 / 0.75, the full store and recomputation on the complete board; the hit curve per (pack, seed) pair from a trace JSON","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.527Z","note":"the co-optimised opponent sweep's rows on the frozen control (the die retained as the worst credible design, 2.44x same-node); NOT RUN until X6's blind run on held-out pairs; the per-box placements and the X1 trace re-runs land as deltas"}}},{"id":"ADV-03","title":"Attack with data-local and hybrid execution","setup":"Permit distributed memories, state migration and companion CPU/GPU/FPGA components.","steps":["Compare moving computation, intermediate state or fetched data to each read location.","Test specialised mining alongside outsourced proof generation rather than assuming one physical GPU does both.","Include interconnect, host, synchronisation, idle and conversion costs."],"accept":"The cheapest feasible combined system is included in the adversarial envelope and economic model. A worker identity or account is never treated as proof of a single physical device.","evidence":"Hybrid architecture diagrams; traffic traces; system cost and energy ledger.","priority":"GATE","profile":"P04","cadence":"Release candidate; repeat after relevant changes","method":"Independent system modelling","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":27,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261009-placed-32lane","updated":"2026-10-09T09:25:30.463Z","evidence_record":{"requirement_id":"ADV-03","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"14939909","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the data-local, hybrid and companion-host rows of multi-family-adversary.md sections 11, 13 and 14 (bit counts closed-form; the hop and wire energies claimed)","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.463Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"data-local execution moves nothing (2,112 bits of live state against an 80-bit read)","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ADV-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true},"adversary:mf-placed":{"requirement_id":"ADV-03","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"14939909","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the data-local, hybrid and companion-host rows of multi-family-adversary.md sections 11, 13 and 14 (bit counts closed-form; the hop and wire energies claimed)","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.463Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"}}},{"id":"ADV-04","title":"Measure profitable selective participation","setup":"Use all declared families plus held-out generated programs and the protocol difficulty rule.","steps":["Identify favourable execution paths and add cheap fallbacks for other periods.","Simulate entry/exit around profitable periods, including idle time, compilation and re-entry costs.","Evaluate revenue and costs across the full schedule, not just average program energy."],"accept":"Intermittent specialists meet P04/ECO limits when evaluated on full-period economics. A weak tail cannot be concealed by a favourable mean; known valid shortcuts must be priced.","evidence":"Per-program advantage distribution; policy simulator; full-period returns.","priority":"GATE","profile":"P04; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":28,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261008-placed-8lane","updated":"2026-10-08T20:41:20.327Z","evidence_record":{"requirement_id":"ADV-04","decision":"NOT RUN","method":"model","cell":"adversary:d2b","manifest_sha":"3a8874fef","run_id":"adversary-20261008-placed-8lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"selective participation over 2,000 era draws under the layer 1 band with two reserve families live per epoch, the specialist's revenue against its ratio gain (section 13); downtime and re-entry priced as the DAA window's lag, not simulated against the difficulty rule itself (owed)","release_identity":{"commit":"3a8874fef","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:41:20.327Z"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"selective participation 9 percent spread across 2,000 era draws","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ADV-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true},"adversary:d2b":{"requirement_id":"ADV-04","decision":"NOT RUN","method":"model","cell":"adversary:d2b","manifest_sha":"3a8874fef","run_id":"adversary-20261008-placed-8lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"selective participation over 2,000 era draws under the layer 1 band with two reserve families live per epoch, the specialist's revenue against its ratio gain (section 13); downtime and re-entry priced as the DAA window's lag, not simulated against the difficulty rule itself (owed)","release_identity":{"commit":"3a8874fef","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:41:20.327Z"}}},{"id":"ADV-05","title":"Validate physical and complete-board costs","setup":"Use feasible process/library assumptions and documented component boundaries; no fabricated foundry access.","steps":["Model SRAM macros, ports, wiring, clocking, memory PHYs, external memory, host and power conversion.","Run place-and-route where available; mark unmodelled items as uncertainty rather than zero.","Compare against a calibrated existing hardware block or equivalent validation case."],"accept":"No decision-critical cost is omitted. Physically unvalidated or proprietary estimates are labelled and independently bounded; synthesis alone cannot earn a manufactured-chip claim.","evidence":"Netlist/physical reports; macro assumptions; bill of materials; model calibration.","priority":"GATE","profile":"P04","cadence":"Release candidate; repeat after relevant changes","method":"Independent physical-design review","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":28,"owner_lane":"k lane (a3c9601a6d4686fe1)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md; docs/analysis/class-v6/floor/shadow-k.md; docs/analysis/class-v6/multi-family-adversary.md; docs/analysis/class-v6/1p5x/x7/README.md; docs/analysis/class-v6/1p5x/x5/README.md","run_id":"adversary-20261009-x7","updated":"2026-10-09T09:44:18.677Z","evidence_record":{"requirement_id":"ADV-05","decision":"NOT RUN","method":"model","cell":"adversary:x5-sweep","manifest_sha":"85db138c","run_id":"adversary-20261009-x7","evidence":"docs/analysis/class-v6/1p5x/x7/README.md","in_progress":false,"coverage":"partial: the complete-board terms (PSU, VRM, cooling, host, controller) and the placed core's energies; the memory and SRAM figures claimed","release_identity":{"commit":"85db138c","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:44:18.677Z","note":"X7's chip side: s on three memory designs for the frozen object's traffic (WITNESS rows); the bridge reading waits on the hash lane's f"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the complete GDDR7 machine 1.5x same-node, 1.8x a node ahead at the placed energy; the honest same-node bracket 1.5x to 2.1x: FAIL against P04 at R_E 1.5, served as such","run_by":"k lane (a3c9601a6d4686fe1)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"FAIL against P04 at R_E 1.5","method":"static","requirement_id":"ADV-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/multi-family-adversary.md; docs/analysis/class-v6/floor/shadow-k.md","in_progress":true},"adversary:mf-placed":{"requirement_id":"ADV-05","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"14939909","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"partial: the SRAM macros, ports, wiring, clocking and the complete-board terms are modelled in sections 2.3, 5 and 6 with the unmodelled items carried as uncertainty; the calibration against an existing hardware block is the k lane's bare-lane row beside it, owed as a named comparison","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.463Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"adversary:x5-sweep":{"requirement_id":"ADV-05","decision":"NOT RUN","method":"model","cell":"adversary:x5-sweep","manifest_sha":"85db138c","run_id":"adversary-20261009-x7","evidence":"docs/analysis/class-v6/1p5x/x7/README.md","in_progress":false,"coverage":"partial: the complete-board terms (PSU, VRM, cooling, host, controller) and the placed core's energies; the memory and SRAM figures claimed","release_identity":{"commit":"85db138c","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:44:18.677Z","note":"X7's chip side: s on three memory designs for the frozen object's traffic (WITNESS rows); the bridge reading waits on the hash lane's f"},"adversary:x5-sweep@adversary-20261009-x5":{"requirement_id":"ADV-05","decision":"NOT RUN","method":"model","cell":"adversary:x5-sweep","manifest_sha":"14939909","run_id":"adversary-20261009-x5","evidence":"docs/analysis/class-v6/1p5x/x5/README.md","in_progress":false,"coverage":"partial: the complete-board terms (PSU, VRM, cooling, host, controller) and the placed core's energies; the memory and SRAM figures claimed","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.527Z","note":"the co-optimised opponent sweep's rows on the frozen control (the die retained as the worst credible design, 2.44x same-node); NOT RUN until X6's blind run on held-out pairs; the per-box placements and the X1 trace re-runs land as deltas"}}},{"id":"ADV-06","title":"Separate process advantage from specialisation","setup":"Evaluate same-node, one-node-ahead and two-node-ahead scenarios with explicit technology definitions.","steps":["Use independently justified process factors, voltages, memory and packaging assumptions for each design.","Allow reusable IP and modular revisions; credit GPU improvement consistently.","Evaluate measurement confidence and model-parameter sensitivity separately."],"accept":"P04 primary limits hold for all competitive-reference cells; two-node futures are reported and pass the predeclared economic stress envelope. A model range is never labelled a statistical confidence interval without justification.","evidence":"Node-specific reports; factor provenance; uncertainty and sensitivity tables.","priority":"GATE","profile":"P04; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":28,"owner_lane":"k lane (a3c9601a6d4686fe1)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/floor/shadow-k.md","run_id":"floor-k-20261008-rows-repeat","updated":"2026-10-08T21:09:38.300Z","evidence_record":{"requirement_id":"ADV-06","decision":"NOT RUN","method":"model","cell":"review:k-lane-shadow-k","manifest_sha":"86e5b0fb","run_id":"floor-k-20261008-rows-repeat","evidence":"docs/analysis/class-v6/floor/shadow-k.md","in_progress":false,"coverage":"partial: the placed gated cores and the adversary's forms are modelled in shadow-k.md; the independent review remains","release_identity":{"commit":"86e5b0fb","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:09:38.300Z"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the node column: same-node and a node ahead kept separate (k 0.78 / 0.56 / 0.40 at N5 / N3 / N2)","run_by":"k lane (a3c9601a6d4686fe1)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ADV-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/floor/shadow-k.md","in_progress":true},"review:k-lane-shadow-k":{"requirement_id":"ADV-06","decision":"NOT RUN","method":"model","cell":"review:k-lane-shadow-k","manifest_sha":"86e5b0fb","run_id":"floor-k-20261008-rows-repeat","evidence":"docs/analysis/class-v6/floor/shadow-k.md","in_progress":false,"coverage":"partial: the placed gated cores and the adversary's forms are modelled in shadow-k.md; the independent review remains","release_identity":{"commit":"86e5b0fb","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:09:38.300Z"}}},{"id":"ADV-07","title":"Evaluate lifetime without forced obsolescence","setup":"Assume multi-year productive survival and known schedule support before testing optional retirement penalties.","steps":["Price firmware, emulation, memory expansion, companion hardware and incremental redesign.","Include 1-, 3- and 5-year productive lifetimes plus idle/resale possibilities.","Grant a retirement credit only if all feasible cheaper adaptations lose competitiveness."],"accept":"The primary case does not require chip death or a fresh full development bill per family. Every retirement credit has a documented adaptation comparison; incompatible and unprofitable are reported separately.","evidence":"Lifetime/adaptation ledger; revision costs; feasible-alternative analysis.","priority":"GATE","profile":"P04; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":29,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md section 14; docs/analysis/class-v6/multi-family-adversary.md","run_id":"adversary-20261009-placed-32lane","updated":"2026-10-09T09:25:30.463Z","evidence_record":{"requirement_id":"ADV-07","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"14939909","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the lifetime table and the six-row transition matrix (sections 7 and 14) on the placed rows; the 32-lane genesis comparator placed on adv-g","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.463Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the transition matrix: no row loses competitiveness, the three-year life holds, zero obsolescence credit","run_by":"adversary lane (a1a9876a88f5a72fc)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ADV-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/multi-family-adversary.md section 14","in_progress":true},"adversary:mf-placed":{"requirement_id":"ADV-07","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"14939909","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the lifetime table and the six-row transition matrix (sections 7 and 14) on the placed rows; the 32-lane genesis comparator placed on adv-g","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.463Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"}}},{"id":"ADV-08","title":"Independently challenge the best-cost envelope","setup":"Publish the non-sensitive model and negative results; commission an unaffiliated second hardware reviewer.","steps":["Reward cheaper valid designs and reproduced shortcuts, not confirmation of the preferred number.","Re-run P04 with the strongest submitted feasible design, including a low-cost funded-development case.","Record unresolved modelling disagreements and future technology exclusions."],"accept":"Both reviews accept the scoped envelope or all material disagreements are resolved transparently. Passing supports only evaluated designs and conditions, never a universal bound on all future silicon.","evidence":"Two review reports; challenge log; final envelope; unresolved-limit statement.","priority":"GATE","profile":"P04","cadence":"Release candidate; repeat after relevant changes","method":"Independent challenge/review","status":"NOT RUN","source":[8,10,12,22,23],"gate":"G3","owner":"Independent hardware team","manual_page":29,"owner_lane":"adversary lane (a1a9876a88f5a72fc)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/multi-family-adversary.md; docs/analysis/class-v6/1p5x/x7/README.md; docs/analysis/class-v6/1p5x/x5/README.md","run_id":"adversary-20261009-x7","updated":"2026-10-09T09:44:18.677Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"adversary:mf-placed":{"requirement_id":"ADV-08","decision":"NOT RUN","method":"model","cell":"adversary:mf-placed","manifest_sha":"14939909","run_id":"adversary-20261009-placed-32lane","evidence":"docs/analysis/class-v6/multi-family-adversary.md","in_progress":true,"coverage":"the best-cost envelope on the complete machine (section 6) and the SRAM-die ticket reconciliation with lane B (section 15); the unaffiliated second reviewer is not this lane's","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.463Z","note":"section 5: the 32-lane genesis core placed with SPEF, the 32-lane 18-family core placed and globally routed (estimate calibrated within 1 percent of SPEF); the SPEF row of the full core follows"},"adversary:x5-sweep":{"requirement_id":"ADV-08","decision":"NOT RUN","method":"model","cell":"adversary:x5-sweep","manifest_sha":"85db138c","run_id":"adversary-20261009-x7","evidence":"docs/analysis/class-v6/1p5x/x7/README.md","in_progress":false,"coverage":"the worst credible design retained as the specialist side a with its capital gate; X6 re-runs it blind on held-out pairs","release_identity":{"commit":"85db138c","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:44:18.677Z","note":"X7's chip side: s on three memory designs for the frozen object's traffic (WITNESS rows); the bridge reading waits on the hash lane's f"},"adversary:x5-sweep@adversary-20261009-x5":{"requirement_id":"ADV-08","decision":"NOT RUN","method":"model","cell":"adversary:x5-sweep","manifest_sha":"14939909","run_id":"adversary-20261009-x5","evidence":"docs/analysis/class-v6/1p5x/x5/README.md","in_progress":false,"coverage":"the worst credible design retained as the specialist side a with its capital gate; X6 re-runs it blind on held-out pairs","release_identity":{"commit":"14939909","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:25:30.527Z","note":"the co-optimised opponent sweep's rows on the frozen control (the die retained as the worst credible design, 2.44x same-node); NOT RUN until X6's blind run on held-out pairs; the per-box placements and the X1 trace re-runs land as deltas"}},"evidence_record":{"requirement_id":"ADV-08","decision":"NOT RUN","method":"model","cell":"adversary:x5-sweep","manifest_sha":"85db138c","run_id":"adversary-20261009-x7","evidence":"docs/analysis/class-v6/1p5x/x7/README.md","in_progress":false,"coverage":"the worst credible design retained as the specialist side a with its capital gate; X6 re-runs it blind on held-out pairs","release_identity":{"commit":"85db138c","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T09:44:18.677Z","note":"X7's chip side: s on three memory designs for the frozen object's traffic (WITNESS rows); the bridge reading waits on the hash lane's f"},"in_progress_since":"2026-10-08T20:41:20.327Z"}]},{"code":"ROT","title":"Epochs, seeds and memory transitions","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","fixtures":"F0 activation rules; F4 fault network; F5 historical and boundary vectors","summary":"Transitions must agree across nodes and remain usable during failures; crossing a boundary is not a chip-retirement test.","tests":[{"id":"ROT-01","title":"Agree across every hourly boundary","setup":"Use real nodes, CPU/GPU miners and independent clocks around successive program boundaries.","steps":["Submit valid work immediately before, at and after the activation boundary under clock skew and delayed delivery.","Restart nodes from both sides and replay the same headers.","Compare selected seed, program, validity, rewards and local wall-clock dependence."],"accept":"All honest nodes derive identical consensus outcomes from the frozen rule. Late work is handled exactly as specified; no wall-clock ambiguity or cross-backend split occurs.","evidence":"Boundary vectors; node/miner traces; acceptance and reward matrix.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":30,"owner_lane":"fast-time lane (a8be71a0db962911c)","run_status":"NOT RUN","evidence_path":"docs/analysis/review-2026-10-08-b/f10/emu-test.log","run_id":"f10-worker-20261008","updated":"2026-10-08T20:07:26.255Z","evidence_record":{"cell":"harness:cuda-select-check","manifest_sha":"964cdf6c1","coverage":{"ROT-01":"partial: the worker's high-32 nonce rollover inside a job (a job from 2^32 - 32) finds the same set on both read-back paths and the boundary nonces hash as igneum-pow; the hourly program boundary itself is the fast-time harness","POW-01":"partial: the CUDA select pass equals the full read line for line (zero hits, partial, the all-hit overflow fallback, a 96-nonce tail with a 32-lane launch, queued jobs, hits then zero, the epoch tag) and 17 sampled hashes equal igneum-pow; the million-vector campaign is harness:p01-vectors"},"at":"2026-10-08T20:07:26.255Z","method":"static","requirement_id":"ROT-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"964cdf6c1","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T20:07:26.255Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:cuda-select-check":{"cell":"harness:cuda-select-check","manifest_sha":"964cdf6c1","coverage":{"ROT-01":"partial: the worker's high-32 nonce rollover inside a job (a job from 2^32 - 32) finds the same set on both read-back paths and the boundary nonces hash as igneum-pow; the hourly program boundary itself is the fast-time harness","POW-01":"partial: the CUDA select pass equals the full read line for line (zero hits, partial, the all-hit overflow fallback, a 96-nonce tail with a 32-lane launch, queued jobs, hits then zero, the epoch tag) and 17 sampled hashes equal igneum-pow; the million-vector campaign is harness:p01-vectors"},"at":"2026-10-08T20:07:26.255Z","method":"static","requirement_id":"ROT-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"964cdf6c1","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"f10-worker-20261008","evidence":"docs/analysis/review-2026-10-08-b/f10/emu-test.log","in_progress":true}}},{"id":"ROT-02","title":"Cross weekly and family boundaries together","setup":"Use the retained schedule in F0, including coincident program, parameter and family changes.","steps":["Run every known family transition and all coincident-boundary combinations on production code.","Interrupt downloads, compilation and restart during activation; include mixed old/new clients.","Repeat selected cases under real elapsed time and the remainder under disclosed accelerated time."],"accept":"Deterministic activation, documented old-client behaviour and no unsafe fallback. Compilation/setup costs satisfy P03; accelerated runs are not reported as years of operating history.","evidence":"Transition matrix; code-path evidence; compile timing; old-client logs.","priority":"BLOCKER","profile":"P01; P03; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":30,"owner_lane":"fast-time lane (a8be71a0db962911c)","run_status":"NOT RUN","evidence_path":"v5-fasttime 92bf6a7f","run_id":"team-2026-10-08","updated":"2026-10-08 18:3x UK","evidence_record":{"what_was_run":"the class v6 object crossing at its floor on 617cb441","run_by":"fast-time lane (a8be71a0db962911c)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ROT-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the class v6 object crossing at its floor on 617cb441","run_by":"fast-time lane (a8be71a0db962911c)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ROT-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"v5-fasttime 92bf6a7f","in_progress":true}}},{"id":"ROT-03","title":"Test miner-voted bring-forward governance","setup":"Freeze eligibility, threshold, windows and activation semantics before testing; do not invent a no-veto rule.","steps":["Attempt threshold-minus-one, threshold, conflicting proposals, duplicate votes and coalition withholding.","Partition voters, restore them and test vote-key substitution through pools.","Verify adoption and refusal behaviour of already running nodes."],"accept":"The actual mechanism enforces F0, with authenticated voting and no conflicting activation. Any coalition capable of blocking or manipulating changes is disclosed; labels such as no veto do not override arithmetic.","evidence":"Executable governance model; signed-vote corpus; coalition/partition results.","priority":"BLOCKER","profile":"P00; P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":30,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","evidence_path":"docs/plans/igneum-2.0.md D5","run_id":"team-2026-10-08","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"miner-voted bring-forward needs a vote harness on the fault network F4","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"ROT-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the bring-forward mechanism specified in the D5 block","run_by":"node lane (a283f5f0d364ceef0)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ROT-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/plans/igneum-2.0.md D5","in_progress":true}}},{"id":"ROT-04","title":"Resist seed selection and faster evaluators","setup":"Provide the specified seed pipeline and delay proof implementation plus independently parameterised fast-adversary models.","steps":["Try withholding candidate seeds, grinding alternatives, replaying delay proofs and biased checkpoint selection.","Vary adversarial speed advantage and outage duration; trace influence on program choice.","Validate inputs, parameters and proofs against independent vectors."],"accept":"No invalid seed or proof is accepted; selection advantage stays within the approved threat-model bound. Missing bounds block this gate. A delay mechanism is not credited as generic ASIC resistance.","evidence":"Seed/grinding simulations; speed sensitivity; proof vectors; threat-model signoff.","priority":"BLOCKER","profile":"P00; P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":31,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"seed-selection resistance is the census harness (the class v6 invention lane), not yet in the matrix","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"ROT-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"seed-selection resistance is the census harness (the class v6 invention lane), not yet in the matrix","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"ROT-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"ROT-05","title":"Continue or pause correctly when finality stops","setup":"Stop checkpoint signing while mining continues, then cross seed and family boundaries.","steps":["Remove the required signing weight and observe the documented fallback or safe pause.","Prevent access to any founder seed service; restart from persisted state.","Restore the stated fault assumptions and verify deterministic recovery."],"accept":"Mining/seed behaviour matches F0 without manufacturing certificates or reinterpreting finality. Safety holds during the outage; liveness is required only after its stated assumptions return.","evidence":"Fault timeline; seed/certificate history; node-state comparison; recovery log.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":31,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"ROT-05","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: the finality-stopped pause tests","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:consensus":{"requirement_id":"ROT-05","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: the finality-stopped pause tests","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"ROT-06","title":"Activate datasets without hidden exclusions","setup":"Freeze memory sizes, support horizon and sync/update procedure; test all advertised roles.","steps":["Construct the next dataset while current work remains active; test slow disks, low free memory and interruption.","Try stale-state/dataset submissions and maliciously expensive state growth where coupling exists.","Measure data transfer, restart and excluded-card costs before approving progression."],"accept":"No invalid stale work is accepted, no supported card silently fails, and P06 is met. Hardware retirement and sync burden are included in the economic decision, not treated as automatic chip protection.","evidence":"Dataset hashes; memory/update traces; stale-work tests; exclusion decision.","priority":"BLOCKER","profile":"P01; P06","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":31,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"ROT-06","decision":"NOT RUN","method":"native","cell":"suite:core","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","in_progress":false,"coverage":"partial: the dataset activation and digest tests; a live activation is the fast-time harness","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; core on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:core":{"requirement_id":"ROT-06","decision":"NOT RUN","method":"native","cell":"suite:core","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","in_progress":false,"coverage":"partial: the dataset activation and digest tests; a live activation is the fast-time harness","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; core on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"ROT-07","title":"Ablate redundant rotation layers","setup":"Use matched baseline and ablated variants in the lab; do not change a running public network.","steps":["Remove each weekly/family component independently and measure adversarial cost, GPU setup and verifier complexity.","Include favourable-period specialists and all retained known families.","Keep a layer only with a distinct, independently supported benefit or a documented non-resistance purpose."],"accept":"Every retained layer has explicit justification and full boundary coverage. Redundant complexity is removed or its rationale recorded; the security model does not double-count the same versatility cost.","evidence":"Ablation report; decision log; complexity/cost comparison.","priority":"GATE","profile":"P03; P04","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":32,"owner_lane":"lane D family gate (a07a99a3788566af2)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/family-gate.md","run_id":"family-gate-20261008c","updated":"2026-10-08T21:49:19.800Z","evidence_record":{"requirement_id":"ROT-07","decision":"NOT RUN","method":"native","cell":"harness:family-gate","manifest_sha":"1a938abe4","run_id":"family-gate-20261008c","evidence":"docs/analysis/class-v6/family-gate.md","in_progress":false,"coverage":"partial: the acceptance-side ablation rows (layer 8 off against the same-crate windowed control: the draw cost, the floors' costs, the hot-set and 1.2x ceiling, the bit-R read; the mixer and shape axes' per-era invisibility and verifier rows), docs/analysis/class-v6/family-gate.md sections 6.4 to 6.12; the adversarial cost and the GPU setup rows per layer are the hash lane's and the adversary lane's","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.800Z"},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"the family gate's coverage (38,000 eras) and the rotation prototype paused as the no-rescue control","run_by":"lane D family gate (a07a99a3788566af2)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"ROT-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/analysis/class-v6/family-gate.md","in_progress":true},"harness:family-gate":{"requirement_id":"ROT-07","decision":"NOT RUN","method":"native","cell":"harness:family-gate","manifest_sha":"1a938abe4","run_id":"family-gate-20261008c","evidence":"docs/analysis/class-v6/family-gate.md","in_progress":false,"coverage":"partial: the acceptance-side ablation rows (layer 8 off against the same-crate windowed control: the draw cost, the floors' costs, the hot-set and 1.2x ceiling, the bit-R read; the mixer and shape axes' per-era invisibility and verifier rows), docs/analysis/class-v6/family-gate.md sections 6.4 to 6.12; the adversarial cost and the GPU setup rows per layer are the hash lane's and the adversary lane's","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.800Z"}}},{"id":"ROT-08","title":"Pass the no-new-rules counterfactual","setup":"Freeze the complete published rule bank and known schedule for the five-year evaluation.","steps":["Allow a programmable adversary to know and survive all planned changes.","Remove assumed future emergency instructions and manual retirement actions from the model.","Run the required ECO scenarios and link them to independent network-transition tests."],"accept":"Competitiveness survives the approved envelope without future rescue assumptions. Any result that needs unannounced changes fails this claim; ordinary bug maintenance is distinguished from anti-chip intervention.","evidence":"Frozen-rule model; scenario results; excluded-rescue audit; G5 evidence.","priority":"GATE","profile":"P04; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[7,11,19,21],"gate":"G5 / G2","owner":"Consensus + GPU leads","manual_page":32,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/family-gate.md","run_id":"family-gate-20261008c","updated":"2026-10-08T21:49:19.800Z","evidence_record":{"requirement_id":"ROT-08","decision":"NOT RUN","method":"native","cell":"harness:family-gate","manifest_sha":"1a938abe4","run_id":"family-gate-20261008c","evidence":"docs/analysis/class-v6/family-gate.md","in_progress":false,"coverage":"partial: the no-rescue control document (38,000 drawn eras of the parameter family through the acceptance, the bound arithmetic on the counts, the honest line of what the gate cannot see), family-gate.md sections 1 to 6; the competitiveness envelope and the economic half are ECO's","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.800Z"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:family-gate":{"requirement_id":"ROT-08","decision":"NOT RUN","method":"native","cell":"harness:family-gate","manifest_sha":"1a938abe4","run_id":"family-gate-20261008c","evidence":"docs/analysis/class-v6/family-gate.md","in_progress":false,"coverage":"partial: the no-rescue control document (38,000 drawn eras of the parameter family through the acceptance, the bound arithmetic on the counts, the honest line of what the gate cannot see), family-gate.md sections 1 to 6; the competitiveness envelope and the economic half are ECO's","release_identity":{"commit":"1a938abe4","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:49:19.800Z"}}}]},{"code":"ECO","title":"Five-year coexistence economics","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","fixtures":"F6 adversarial costs; F7 scenario model; F2 operator costs","summary":"Test the world after specialised hardware exists, including new entrants and an already-funded competitor.","tests":[{"id":"ECO-01","title":"Reconcile complete cost per accepted work","setup":"Use benchmark outputs, current-source cost inputs recorded at execution time and separate reference scenarios.","steps":["Calculate hardware annualisation, electricity, host, cooling/hosting, failures, fees, downtime and residual value.","Use actual accepted work and independently verify units and period conversions.","Cross-check formulas using hand-worked fixtures, edge cases and a second implementation."],"accept":"All material costs and rejected-work effects appear once; model totals reconcile to raw inputs. No GPU upgrade is free, development cost is not double-counted, and burn is not mislabelled operator income.","evidence":"Versioned model; unit fixtures; independent reconciliation; input sources.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":33,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"sim/economy/coexist/README.md","run_id":"eco05-20261008-02","updated":"2026-10-08T20:07:38.167Z","evidence_record":{"cell":"model:coexist-fixtures","manifest_sha":"3f2050ab","coverage":{"ECO-01":"partial: the hand-worked fixtures and the second implementation; the independent reconciliation of inputs and units remains","ECO-08":"partial: the package runs from the served files (README, inputs with sources and labels, fixtures); the independent report, the rerun and the perturbations remain"},"at":"2026-10-08T20:07:38.167Z","method":"model","requirement_id":"ECO-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"3f2050ab","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T20:07:38.167Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"model:coexist-fixtures":{"cell":"model:coexist-fixtures","manifest_sha":"3f2050ab","coverage":{"ECO-01":"partial: the hand-worked fixtures and the second implementation; the independent reconciliation of inputs and units remains","ECO-08":"partial: the package runs from the served files (README, inputs with sources and labels, fixtures); the independent report, the rerun and the perturbations remain"},"at":"2026-10-08T20:07:38.167Z","method":"model","requirement_id":"ECO-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"3f2050ab","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco05-20261008-02","evidence":"sim/economy/coexist/README.md","in_progress":true}}},{"id":"ECO-02","title":"Separate existing-owner and new-entrant viability","setup":"Use both installed hardware and purchasable replacement hardware in every mandatory cohort.","steps":["Evaluate marginal operation separately from recovery of a new purchase.","Stress resale at zero, hardware failures, financing and replacement cycles.","Report break-even power price and total cost relative to the strongest feasible specialist."],"accept":"P12 competitiveness conditions hold for the predeclared cohorts in required sustainable worlds. Existing-owner profitability cannot substitute for viable new entry; cards outside the envelope remain visible.","evidence":"Owner/entrant curves; price-date records; break-even tables; cohort outcomes.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":33,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"ECO-03","title":"Let the specialist keep its sunk development","setup":"Use three development cases: fully funded elsewhere, source-range low and source-range high.","steps":["Evaluate private mining, public hardware sales and a hybrid business model.","Allow shared IP, incremental revisions, multi-year survival and resale where justified.","Re-evaluate GPU entry after the specialist fleet is already installed."],"accept":"The coexistence claim does not depend on recovering the original chip research bill. Required P12 cases meet the approved envelope even at zero incremental development cost; failures cannot be hidden by the $23M/$340M source thresholds.","evidence":"Business-model variants; sunk-cost case; full cash-flow and adaptation records.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":33,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"ECO-04","title":"Model entry, exit and difficulty response","setup":"Use independently reviewed dynamic operator policies, not fixed market shares.","steps":["Let agents buy, sell, switch off, re-enter and choose tasks based on declared costs and expected income.","Apply the actual difficulty/reward rules and test optimistic and adversarial liquidity/capital availability.","Compare equilibrium and transient outcomes across independent starting conditions."],"accept":"Mandatory worlds satisfy P12 without an imposed GPU share or artificial specialist capacity limit. Concentration, oscillations and excluded regions are reported; model behaviour matches unit and conservation checks.","evidence":"Agent policies; sensitivity seeds; market-share paths; independent model review.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":34,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"ECO-05","title":"Stress success, contraction and cheap electricity","setup":"Freeze mandatory scenarios before results: revenue bands, tariff range, lifetimes and demand states.","steps":["Run the P12 factorial grid plus adversarial combinations selected by the independent reviewer.","Test a large successful network as well as weak-revenue and heterogeneous-tariff cases.","Distinguish feasible sustained-entry worlds from collapse scenarios with no rational profitable operator."],"accept":"No small-network or token-appreciation assumption props up the primary claim. Required viable worlds pass the envelope; collapse worlds show honest contraction and safety, not fabricated profits. Failure regions are explicit.","evidence":"Scenario register; full result cube; boundary plots; failed-world explanations.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":34,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"FAIL","evidence_path":"docs/analysis/class-v6/eco-05-results.md","run_id":"eco05-20261008-02","updated":"2026-10-08T20:07:38.167Z","evidence_record":{"cell":"model:eco05","manifest_sha":"3f2050ab","coverage":{"ECO-05":"full on the frozen register's grid and the eight adversarial rows at the team's reconciled specialist rows; the independent reviewer's own adversarial rows (ECO-08) remain"},"at":"2026-10-08T20:07:38.167Z","method":"model","requirement_id":"ECO-05","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"3f2050ab","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"model:eco05":{"cell":"model:eco05","manifest_sha":"3f2050ab","coverage":{"ECO-05":"full on the frozen register's grid and the eight adversarial rows at the team's reconciled specialist rows; the independent reviewer's own adversarial rows (ECO-08) remain"},"at":"2026-10-08T20:07:38.167Z","method":"model","requirement_id":"ECO-05","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"3f2050ab","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco05-20261008-02","evidence":"docs/analysis/class-v6/eco-05-results.md","in_progress":false}}},{"id":"ECO-06","title":"Fund security and proving as issuance falls","setup":"Use the frozen supply, halving, fee, burn and reward rules rather than source prose assumptions.","steps":["Reconcile revenue reaching miners, internal provers, developers and burns over the full horizon.","Test flat/declining fees and no external proving income; separately introduce external demand.","Calculate capacity and security-provider coverage after each reward transition."],"accept":"Recurring compensation is explicit and internally consistent; mandatory sustainable scenarios meet P12. Burned amounts are never counted as payments, and external operator income is not assumed to fund internal work automatically.","evidence":"Issuance/fee ledger; scenario cash flows; funding-shortfall report.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":34,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"ECO-07","title":"Price memory growth and honest-card displacement","setup":"Use GPU-05 and ROT-06 costs with the cheapest specialist adaptation.","steps":["For each dataset increment, compare specialist cost increases with excluded cards and lost proving capacity.","Include ordinary-owner replacement, resale and reloading expenses.","Run alternate bounded schedules without assigning automatic chip death."],"accept":"The retained schedule meets P06/P12 and has an evidence-backed net competitiveness benefit. A schedule that mainly harms accessible GPUs fails; excluded tiers and mitigations are documented before activation.","evidence":"Per-step cost/retention table; alternative schedules; approval record.","priority":"GATE","profile":"P06; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":35,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"ECO-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"ECO-08","title":"Reproduce and adversarially audit the model","setup":"Give an independent economist or qualified analyst the code, inputs and frozen success criteria.","steps":["Recalculate required worlds and perturb favourable assumptions against the team.","Check dependence on discounts, utilisation, capital limits, artificial prices and future upgrades.","Publish the sensitivity range and state which conclusions are conditional."],"accept":"Material results reproduce, required scenarios pass and no unacknowledged assumption dominates the claim. The model supports a bounded coexistence conclusion, not a percentage probability that no chip will appear.","evidence":"Independent report; rerun outputs; model limitations; approved claim envelope.","priority":"GATE","profile":"P12","cadence":"Release candidate; repeat after relevant changes","method":"Independent economic review","status":"NOT RUN","source":[8,13,18,24,26],"gate":"G4","owner":"Economics lead + independent reviewer","manual_page":35,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"sim/economy/coexist/README.md","run_id":"eco05-20261008-02","updated":"2026-10-08T20:07:38.167Z","evidence_record":{"cell":"model:coexist-fixtures","manifest_sha":"3f2050ab","coverage":{"ECO-01":"partial: the hand-worked fixtures and the second implementation; the independent reconciliation of inputs and units remains","ECO-08":"partial: the package runs from the served files (README, inputs with sources and labels, fixtures); the independent report, the rerun and the perturbations remain"},"at":"2026-10-08T20:07:38.167Z","method":"model","requirement_id":"ECO-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"3f2050ab","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T20:07:38.167Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"model:coexist-fixtures":{"cell":"model:coexist-fixtures","manifest_sha":"3f2050ab","coverage":{"ECO-01":"partial: the hand-worked fixtures and the second implementation; the independent reconciliation of inputs and units remains","ECO-08":"partial: the package runs from the served files (README, inputs with sources and labels, fixtures); the independent report, the rerun and the perturbations remain"},"at":"2026-10-08T20:07:38.167Z","method":"model","requirement_id":"ECO-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"3f2050ab","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco05-20261008-02","evidence":"sim/economy/coexist/README.md","in_progress":true}}}]},{"code":"EVM","title":"Execution and developer compatibility","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","fixtures":"F0 execution-fork semantics; F5 transactions/contracts; F4 multi-node network","summary":"Keep familiar applications while making every difference and metering rule explicit and reproducible.","tests":[{"id":"EVM-01","title":"Match the selected EVM semantics","setup":"Pin the intended execution fork, revm version and all Igneum deviations in F0.","steps":["Run the applicable upstream execution/state fixtures plus independently written deviation tests.","Execute identical blocks on multiple nodes and compare roots, receipts, logs, gas and failure outcomes.","Minimise mismatches and distinguish intended differences from implementation defects."],"accept":"All applicable vectors match; every deviation has a documented test and developer consequence. No claim of universal Ethereum equivalence or Ethereum settlement security is inferred.","evidence":"Fixture/version inventory; root/receipt diffs; deviation matrix.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":36,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"docs/build/compatibility.md","run_id":"team-2026-10-08","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"no EVM conformance-vector harness is mapped tonight; the exec suite does not run the reference test vectors","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"EVM-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"/compatibility 20 of 20 rows PASSED on igneum-devnet-4","run_by":"reference-apps lane (a2060899d2a27d31c)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"EVM-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"docs/build/compatibility.md","in_progress":true}}},{"id":"EVM-02","title":"Preserve transaction binding and replay protection","setup":"Use signed transfers, contract calls and deployment transactions with boundary field values.","steps":["Alter chain identity, nonce, signature, fee caps and recipient after signing.","Replay across nodes, forks and distinct test networks; resubmit around reorganisation.","Check mempool admission and final consensus execution independently."],"accept":"Unauthorised, wrong-network or duplicate spends are rejected according to F0. Valid replacements follow the declared rule; mempool filtering alone is not evidence of consensus enforcement.","evidence":"Signed corpus; admission/execution outcomes; account-state reconciliation.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":36,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"EVM-02","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: the replay tests on the day stream; the signature and chain-id binding vectors are an EVM harness still to map","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:exec":{"requirement_id":"EVM-02","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: the replay tests on the day stream; the signature and chain-id binding vectors are an EVM harness still to map","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"EVM-03","title":"Test two-dimensional fees and proving limits","setup":"Freeze fee dimensions, estimator rules, abort behaviour and refund policy.","steps":["Run workloads near and beyond execution and proving budgets, including state-heavy pathological cases.","Compare estimated fees with charged fees and validate rollback/receipt status on abort.","Mutate a block producer to omit or undercharge expensive work."],"accept":"Deterministic metering, charged amounts and aborted state agree across nodes and proofs. Resource bounds hold; fee estimates meet P09 for accepted supported cases. Undercharged invalid blocks cannot bypass consensus.","evidence":"Metering traces; fee fixtures; estimator errors; invalid-block rejection.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":36,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/compat/results.json","run_id":"ra-20261008T1744-evm","updated":"2026-10-08T19:13:20.781Z","evidence_record":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:13:20.781Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-compat":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1744-evm","evidence":"tools/reference-apps/compat/results.json","in_progress":true}}},{"id":"EVM-04","title":"Exercise block context and randomness assumptions","setup":"Use contracts sensitive to timestamp, height/context, randomness and ordering.","steps":["Compare the declared Igneum semantics with developers' documented expectations.","Test boundary transitions, miner-influenced inputs and adversarial ordering in the isolated network.","Run dependency reviews for applications using these values for economic decisions."],"accept":"Semantics match F0 and differences are surfaced in compatibility documentation. No source of miner influence is marketed as unbiased randomness; incompatible applications are not included in the compatibility claim.","evidence":"Context-contract results; threat notes; compatibility exclusions.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":37,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/compat/results.json","run_id":"ra-20261008T1744-evm","updated":"2026-10-08T19:13:20.781Z","evidence_record":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:13:20.781Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-compat":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1744-evm","evidence":"tools/reference-apps/compat/results.json","in_progress":true}}},{"id":"EVM-05","title":"Run representative contract integration journeys","setup":"Use versioned transfer/token, NFT, multisignature, exchange and upgrade-pattern fixtures where supported.","steps":["Deploy, initialise, transact, revert and upgrade each contract using ordinary tooling.","Exercise events, logs, balances, storage and call traces across node restart/reorganisation.","Compare expected application invariants with native execution and proved results."],"accept":"Supported journeys preserve their stated invariants; all deviations are documented. Example deployment success alone cannot stand in for application-level correctness or financial audit.","evidence":"Contract fixture hashes; transaction journeys; invariant and state comparisons.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":37,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/compat/results.json","run_id":"ra-20261008T1744-evm","updated":"2026-10-08T19:13:20.781Z","evidence_record":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:13:20.781Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-compat":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1744-evm","evidence":"tools/reference-apps/compat/results.json","in_progress":true}}},{"id":"EVM-06","title":"Validate wallets, RPC and indexers","setup":"Pin supported RPC methods and response semantics; use normal developer clients and an independent indexer.","steps":["Test fee estimation, pending/final states, subscriptions, pagination and reconnects.","Reindex from genesis or the documented trust anchor after pruning and restart.","Compare logs, receipts and balances with independently validated chain state."],"accept":"No missing/duplicate canonical records; unsupported methods are explicit. UI states distinguish included, executed, proven and finalised. Malformed RPC input cannot crash validators or leak secrets.","evidence":"RPC conformance report; reindex comparison; reconnect/edge-case logs.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":37,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/compat/results.json","run_id":"ra-20261008T1744-evm","updated":"2026-10-08T19:13:20.781Z","evidence_record":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:13:20.781Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-compat":{"cell":"harness:reference-apps-compat","manifest_sha":"4cdcc488","coverage":{"EVM-02":"partial: a transaction signed for the previous devnet's chain id is refused and a signed transaction sent twice is refused on the live devnet; the F0 replacement rule and the mempool-independent evidence are the exec suite's","EVM-03":"partial: fee quotes, eth_estimateGas against gasUsed for a transfer and a call, the documented 21,000 local-limit difference and the pgas receipt fields on the live devnet; determinism across nodes and proofs and the P09 bounds are the proving-limit harness (not run)","EVM-04":"partial: block.number, timestamp, chainid, basefee, blockhash(number-1), CREATE2 address, block.coinbase and block.prevrandao read against the chain and the documented differences; conformance vectors for F0 are EVM-01's","EVM-05":"partial: ERC-20 deploy, transfer, approve/transferFrom, a probe contract, a persisting counter, a revert with reason and an out-of-gas call on the live devnet; application-level invariants of the DEX integration set are the DEX lane's","EVM-06":"partial: receipt fields and logsBloom recompute, the block's receipts trie root rebuilds, eth_getLogs by address/topic/range, eth_getBlockByNumber with full transactions and eth_getBlockReceipts; wallet UI states (included, executed, proven, finalised) and the indexer's canonical-record check are the wallet and explorer lanes' rows"},"at":"2026-10-08T19:13:20.781Z","method":"static","requirement_id":"EVM-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1744-evm","evidence":"tools/reference-apps/compat/results.json","in_progress":true}}},{"id":"EVM-07","title":"Handle execution denial-of-service workloads","setup":"Create bounded pathological bytecode, calls, state growth, storage and precompile inputs.","steps":["Measure CPU, memory, disk and proving cost against charged budgets.","Saturate admission with invalid/expensive requests while valid workloads continue.","Restart mid-execution and verify atomic state recovery."],"accept":"P09 limits hold with no unbounded free work or divergent rollback. State remains consistent after crash; availability under overload follows the declared admission policy, not silent dropping of accepted transactions.","evidence":"Resource profiles; adversarial corpus; state recovery comparisons.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":38,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"execution DoS workloads need the workload catalogue F3","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"EVM-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"execution DoS workloads need the workload catalogue F3","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"EVM-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"EVM-08","title":"Verify controlled execution and verifier upgrades","setup":"Prepare two authorised versions and malicious, stale or unknown versions.","steps":["Cross activation with mixed clients, queued transactions and proofs from both versions.","Bind each accepted proof to the correct execution semantics and program identity.","Exercise a failed software distribution without altering consensus activation."],"accept":"No unknown or wrong-version execution is accepted. Pre/post-boundary handling is deterministic and documented; software delivery cannot silently redefine transaction semantics or proof acceptance.","evidence":"Upgrade vectors; mixed-version traces; manifest/version bindings.","priority":"BLOCKER","profile":"P01; P08; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[15,25,34,35,36,37],"gate":"Technical readiness","owner":"Execution lead + independent implementer","manual_page":38,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"PASS","evidence_path":"docs/plans/proving-enforcement/cache-history-2.json","run_id":"enforced-proving-20261008-03","updated":"2026-10-08T22:24:23.945Z","evidence_record":{"requirement_id":"EVM-08","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the controlled verifier upgrade as a key succession (both pairs embedded, the window, the start refusal) and its fast-time crossing; the mixed-client crossing on the live network and the failed-distribution step are not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"},"dependency":"the first pin into elf/prior/ (the node lane, key-succession-pin, tonight by 21:00) and the devnet-4 succession height (main, by 22:00 under the floor rule)","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:proving-enforcement":{"requirement_id":"EVM-08","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the controlled verifier upgrade as a key succession (both pairs embedded, the window, the start refusal) and its fast-time crossing; the mixed-client crossing on the live network and the failed-distribution step are not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"}}}]},{"code":"ZKP","title":"Consensus-enforced proof validity","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","fixtures":"F0 pinned programs/verifiers; F5 valid and hostile proof corpus; unmodified validators","summary":"The validator, not merely the official producer, must reject unauthorised or invalid proof records and rewards.","tests":[{"id":"ZKP-01","title":"Reject missing and invalid proofs","setup":"Start from a native-correct statement and an independently verified valid proof.","steps":["Submit the statement with no proof, truncated bytes, random bytes and targeted proof mutations using a modified producer.","Submit the genuine proof as a positive control through ordinary network paths.","Inspect block acceptance and resulting reward/state on unmodified validators."],"accept":"Every invalid proof record is rejected and earns no reward; valid controls succeed. A producer-side filter is not sufficient. Record rejection semantics exactly as defined by F0.","evidence":"Hostile record corpus; validator decisions; before/after balances; positive controls.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":39,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log; docs/plans/proving-enforcement/cache-history-2.json; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"ZKP-01","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: a proof-less or wrong-statement block refused by consensus","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:exec":{"requirement_id":"ZKP-01","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: a real proof verifies, a wrong statement and garbage are refused (nativeverify)","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"harness:proving-enforcement":{"requirement_id":"ZKP-01","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the seven refusals as named tests (no proof never inserted; a wrong proof and another program id invalidate the block; the honest record paid once) and the fast-time crossing with a modified producer; the genuine-proof positive control through ordinary network paths is the testnet's live read, not run here","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"},"suite:consensus":{"requirement_id":"ZKP-01","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: a proof-less or wrong-statement block refused by consensus","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"ZKP-02","title":"Bind program, verifier and security parameters","setup":"Use valid proofs from authorised and unauthorised programs and parameter sets.","steps":["Swap program digest, verifier version, security settings and verification key where applicable.","Attempt downgrade through configuration, serialized metadata or an old node path.","Test authorised boundary transitions and unsupported future identities."],"accept":"Only explicitly authorised combinations are accepted in the correct epoch. No implicit trust in producer-supplied metadata or lower-security fallback; all accepted settings have scoped soundness review.","evidence":"Identity/parameter matrix; rejection traces; cryptographic review.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":39,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"PASS","evidence_path":"docs/plans/proving-enforcement/cache-history-2.json","run_id":"enforced-proving-20261008-03","updated":"2026-10-08T22:24:23.945Z","evidence_record":{"requirement_id":"ZKP-02","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the pinned-id refusal on a real proof, the daemon's start refusal, key succession (the epochs, the accepted ids, a verdict counting only where its pair is accepted, the seven refusals on both sides of the height, the start refusal under a succession, the real-proof refusal of a pair the epoch does not accept) and the fast-time crossing of a scheduled succession with a real proof under each pair; the downgrade through an old node path is not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"},"dependency":"the mixed-pair crossing needs the node lane's first pin into elf/prior/ (key-succession-pin, tonight by 21:00) and the next-pair proof (build-2:/home/build/enforced-fixtures/next-pair-block-56-shard-0-compressed.bin)","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:proving-enforcement":{"requirement_id":"ZKP-02","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the pinned-id refusal on a real proof, the daemon's start refusal, key succession (the epochs, the accepted ids, a verdict counting only where its pair is accepted, the seven refusals on both sides of the height, the start refusal under a succession, the real-proof refusal of a pair the epoch does not accept) and the fast-time crossing of a scheduled succession with a real proof under each pair; the downgrade through an old node path is not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"}}},{"id":"ZKP-03","title":"Bind network, epoch, job and state roots","setup":"Prepare valid proofs for distinct chains, epochs, jobs and initial/final states.","steps":["Replay each proof under another network, job, epoch, shard range or state commitment.","Alter public inputs while retaining the proof and test valid-but-wrong-context statements.","Check duplicated and reordered records across forks and replayed sync data."],"accept":"Every misbound proof is rejected; valid authorised replays follow only explicitly allowed semantics and never create extra rewards. Native reexecution cannot conceal missing proof-context binding.","evidence":"Binding matrix; public-input hashes; replay traces; reward reconciliation.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":39,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log; docs/plans/proving-enforcement/cache-history-2.json","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"ZKP-03","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: a snapshot under another digest refused, the epoch streams bound to the digest","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:exec":{"requirement_id":"ZKP-03","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: a snapshot under another digest refused, the epoch streams bound to the digest","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"harness:proving-enforcement":{"requirement_id":"ZKP-03","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the chain binding (a record signed for another network), the replay, a wrong block, a wrong shard, a stale record outside the window; the fork and replayed-sync steps are not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"}}},{"id":"ZKP-04","title":"Prevent reward and payout substitution","setup":"Use proofs that commit to authorisation and all reward-relevant fields required by F0.","steps":["Alter payout key, amount, beneficiary, source work or fee allocation independently.","Supply correct execution over malicious producer-provided consensus/reward inputs.","Compare consensus-derived rewards with the proved/publicly authenticated derivation."],"accept":"Unauthorised payout changes and incorrect consensus inputs are rejected; no statement accepted merely because execution over supplied inputs is internally correct. Legitimate authorisations are preserved.","evidence":"Mutation cases; reward derivation trace; signature/proof binding review.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":40,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"PASS","evidence_path":"docs/plans/proving-enforcement/cache-history-2.json","run_id":"enforced-proving-20261008-03","updated":"2026-10-08T22:24:23.945Z","evidence_record":{"requirement_id":"ZKP-04","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: an altered payout address (after signing and re-signed), a statement over altered rewards or payouts vetoed natively, the inputs commitment of P22 stage 1 (shard 0 and the aggregator carry the commitment the node recomputes) and the derivation commitment of stage 2 (the payouts derived in the guest from the carried records); the rewards' proved derivation is P22 stage 3, PENDING","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"},"dependency":"the proof side of the derivation (P22 stages 1 to 3) changes both guests' public values and so both program ids, so it ships only through a key succession (docs/design/key-succession.md, key-succession-node 291ee6ae); stage 1 (the inputs commitment carried by shard 0 and the aggregator, vetoed natively) is on branch p22-stage-1 under test since 18:46 UK; the clocks (stage 1 09:00, stage 2 14:00, stage 3's design 18:00 UK on 9 October 2026) stand because the succession's first height is asked of main by 22:00 under the floor rule; without a named height the stages are built and tested on their branch and wait for the succession that carries them","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:proving-enforcement":{"requirement_id":"ZKP-04","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: an altered payout address (after signing and re-signed), a statement over altered rewards or payouts vetoed natively, the inputs commitment of P22 stage 1 (shard 0 and the aggregator carry the commitment the node recomputes) and the derivation commitment of stage 2 (the payouts derived in the guest from the carried records); the rewards' proved derivation is P22 stage 3, PENDING","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"}}},{"id":"ZKP-05","title":"Make proof payment idempotent across races","setup":"Use competing provers submitting valid results for the same work and simulate retries/reorganisations.","steps":["Submit simultaneous duplicates, reordered receipts and repeated messages after disconnects.","Crash validators between validation and reward application, then recover.","Reconcile canonical payouts against the exact F0 duplicate policy."],"accept":"Only the authorised total payment is made; no double payout, lost accepted entitlement or fork-retained balance. Transactions and payout records recover atomically.","evidence":"Concurrency schedule; canonical payment ledger; crash/recovery evidence.","priority":"BLOCKER","profile":"P01","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":40,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"PASS","evidence_path":"docs/plans/proving-enforcement/cache-history-2.json","run_id":"enforced-proving-20261008-03","updated":"2026-10-08T22:24:23.945Z","evidence_record":{"requirement_id":"ZKP-05","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: a duplicate of a paid record pays nothing and the honest record pays once; the race, reorder and crash-recover steps are not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:proving-enforcement":{"requirement_id":"ZKP-05","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: a duplicate of a paid record pays nothing and the honest record pays once; the race, reorder and crash-recover steps are not run","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"}}},{"id":"ZKP-06","title":"Verify aggregation coverage and completeness","setup":"Build valid multi-shard workloads plus omitted, duplicated, overlapping and misordered shard sets.","steps":["Attempt an aggregate with a correct outer proof but wrong coverage/public-input construction.","Alter shard ranges, roots and aggregation-program identity.","Verify native execution, aggregate validity and coverage commitments independently."],"accept":"Only complete, correctly ordered authorised coverage is accepted. No valid proof of the wrong computation becomes an accepted chain result; aggregation failures do not fabricate successful delivery.","evidence":"Coverage corpus; aggregate/public-input verification; rejection ledger.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":40,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-p2p-flows.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"ZKP-06","decision":"NOT RUN","method":"native","cell":"suite:p2p-flows","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-p2p-flows.log","in_progress":false,"coverage":"partial: proof relay coverage tests; aggregation completeness is the proving lane's test set","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; p2p-flows on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:p2p-flows":{"requirement_id":"ZKP-06","decision":"NOT RUN","method":"native","cell":"suite:p2p-flows","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-p2p-flows.log","in_progress":false,"coverage":"partial: proof relay coverage tests; aggregation completeness is the proving lane's test set","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; p2p-flows on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"ZKP-07","title":"Review soundness and verifier resource limits","setup":"Provide proof-system code, parameters, patches and the pinned verification path to an independent specialist.","steps":["Review soundness assumptions, parameter margins and consequences of performance patches.","Fuzz deserialization and adversarial proofs; measure verification CPU and memory under load.","Cross-check an independent verifier or reference path and test crash containment."],"accept":"P09 review and resource requirements pass with no unresolved critical/high finding. Random proof rejection counts are not described as evidence of a particular cryptographic security level.","evidence":"Scoped soundness review; parameter sheet; fuzzer corpus; verifier profiles.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Independent cryptographic review + testing","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":41,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"ZKP-08","title":"Preserve authority and audit all acceptance paths","setup":"Inspect block import, sync, RPC, light verification, database restoration and fast paths.","steps":["Try bypassing validation via each path with a proof rejected by the normal path.","Remove the dominant prover/aggregator and have independent replacements process available inputs.","Attempt to use proof-production status as ordering, voting or finality authority."],"accept":"No bypass accepts invalid work; proofs alone confer no unauthorised consensus control. Replacement and pause behaviour meet F0/P07/P08 without privileged keys or a trusted aggregator shortcut.","evidence":"Path coverage report; bypass corpus; replacement run; authority checks.","priority":"BLOCKER","profile":"P01; P07; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[16,20,24,25,36,37],"gate":"Technical readiness / G5","owner":"Proving + protocol leads; independent cryptography review","manual_page":41,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"PASS","evidence_path":"docs/plans/proving-enforcement/cache-history-2.json","run_id":"enforced-proving-20261008-03","updated":"2026-10-08T22:24:23.945Z","evidence_record":{"requirement_id":"ZKP-08","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the body rule and the payment rule read one floor, a producer with its body rule off still pays nothing on honest nodes (the fast-time crossing); the replacement-prover and authority steps are not run; the proof side of the derivation is P22 stage 3, PENDING","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"},"dependency":"the proof side of the derivation (P22 stages 1 to 3) changes both guests' public values and so both program ids, so it ships only through a key succession (docs/design/key-succession.md, key-succession-node 291ee6ae); stage 1 (the inputs commitment carried by shard 0 and the aggregator, vetoed natively) is on branch p22-stage-1 under test since 18:46 UK; the clocks (stage 1 09:00, stage 2 14:00, stage 3's design 18:00 UK on 9 October 2026) stand because the succession's first height is asked of main by 22:00 under the floor rule; without a named height the stages are built and tested on their branch and wait for the succession that carries them","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:proving-enforcement":{"requirement_id":"ZKP-08","decision":"PASS","method":"native","cell":"harness:proving-enforcement","manifest_sha":"c591e63b","run_id":"enforced-proving-20261008-03","evidence":"docs/plans/proving-enforcement/cache-history-2.json","in_progress":false,"coverage":"partial: the body rule and the payment rule read one floor, a producer with its body rule off still pays nothing on honest nodes (the fast-time crossing); the replacement-prover and authority steps are not run; the proof side of the derivation is P22 stage 3, PENDING","release_identity":{"commit":"c591e63b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T22:24:23.945Z"}}}]},{"code":"CAP","title":"Sustained proving and delivery","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","fixtures":"F3 meaningful workload catalogue; F4 network; F8 external job harness","summary":"A correct fast shard is only one stage; capacity, latency, payment and retries must work together.","tests":[{"id":"CAP-01","title":"Reproduce the historical consumer-shard result","setup":"Recover the exact source-era workload/build if available; keep it separate from the release-candidate workload.","steps":["Attempt independent reproduction of the 4,717,439-cycle workload and reported 3060/4060/4070 results.","Record proof format, memory, energy, host and whether aggregation/compression are included.","Repeat on the final release and label all configuration changes."],"accept":"Historical figures are either reproduced within P02 tolerance or corrected/labelled non-reproduced. Release acceptance uses the current complete workload, never an unmatched historical time or a smaller substituted shard.","evidence":"Historical/current manifests; proof verification; timing and memory records.","priority":"GATE","profile":"P02; P07","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":42,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"the consumer-shard reproduction is the fleet lane's pods","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"the consumer-shard reproduction is the fleet lane's pods","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"CAP-02","title":"Prove on the actual mining configuration","setup":"Use final dataset sizes, registers, clocks, drivers and proof pipeline on every advertised proving tier.","steps":["Run mining alone, proving alone, concurrent execution and supported time-sharing.","Measure wall energy, memory headroom, reloads, proof latency and forgone accepted mining work.","Induce memory pressure and GPU task failure without losing wallet control."],"accept":"Every advertised mode completes correctly and meets P06/P07. Net output includes opportunity cost; unsupported concurrency is not claimed. Mining-only vendor support remains separately labelled.","evidence":"Four-mode results; OOM/failure logs; memory and opportunity-cost ledger.","priority":"BLOCKER","profile":"P01; P06; P07","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":42,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"docs/analysis/floor-memory-profile-2026-10-08.md","run_id":"v607-floor-memory-20261008T2059Z","updated":"2026-10-08T22:22:49.946Z","evidence_record":{"reason":"proving on the mining configuration is the fleet lane's","at":"2026-10-08T22:22:49.946Z","method":"static","requirement_id":"CAP-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"rows:v607-floor-memory":{"requirement_id":"CAP-02","decision":"NOT RUN","method":"GPU","cell":"rows:v607-floor-memory","manifest_sha":"c411bae9a","run_id":"v607-floor-memory-20261008T2059Z","evidence":"docs/analysis/floor-memory-profile-2026-10-08.md","in_progress":true,"coverage":"partial: proving alone (shard and the whole segment path) on the 8 GB and 12 GB tiers on the default job path, the time-share refusal beside the miner with the miner unharmed, memory headroom and proof latency; wall energy only on the 3060 (the 4060 host has no power sensor); induced GPU task failure and wallet control not run; 16 GB and 24 GB tiers not run","release_identity":{"commit":"c411bae9a (branch v607-floor-memory off cef5234b5)","lockfile":"proving/igneum-prove/Cargo.lock at cef5234b5","binary":"sp1-gpu-server db37c38b5feabdec5bbfd0298446da89f6a5d144125e399d6ab617f64f9cb61d (igneum-floor-sm8689-v607.tgz 9c02fcc6a3f045d3167c1d9cb6e22c584ea862189d11997754a57cbe1b0d355b); igneum-prove-host-0317 71bc2438856bb141; igneum-prove-host v607 66662219a3630772","network_object":"none (fixture proofs on rented pods, no network)","activation":"none","profile_hashes":"floor patch 9098c3e5979d057031f43588668201d1f7a53ab17e980c1eaf896cd5e6f38575"},"claim_impact":"the 2.0 proving statement's memory condition per tier: a 12 GB card runs the whole segment path alone; an 8 GB card proves shards only (its aggregation fails) and is refused the chain before setup; both time-share beside the 5.5 GiB miner; the 16 GB and 24 GB tiers unmeasured tonight","reviewer":"","at":"2026-10-08T22:22:49.946Z"}},"in_progress_since":"2026-10-08T22:22:49.946Z"},{"id":"CAP-03","title":"Measure the entire request-to-payment path","setup":"Assign a unique job ID and immutable timestamps to every stage of F3/F8 jobs.","steps":["Record request, input availability, assignment, execution, shard proof, aggregation, verification, delivery and payment.","Compare monotonic elapsed time with any protocol/DAA clock and document their relationship.","Reconcile failed, censored, retried and abandoned jobs with the original request denominator."],"accept":"No hidden stage or missing job; latency distributions and cost cover the complete path. Delivery, finality and payment are reported separately; protocol seconds are not silently relabelled wall-clock seconds.","evidence":"Stage event ledger; clock calibration; end-to-end latency/cost report.","priority":"GATE","profile":"P07","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":42,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"the request-to-payment path is the proving fleet's measurement","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"the request-to-payment path is the proving fleet's measurement","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"CAP-04","title":"Sustain meaningful load without queue growth","setup":"Freeze W: payload mix, input sizes, execution work and per-hour demand; prohibit tiny-workload substitution.","steps":["Run 72 hours at W and a separate 24 hours at 1.2W on the declared fleet.","Measure arrival/completion counts, backlog trend, oldest-job age, deadlines and all retries.","Use held-out workloads and an independent observer to detect discarded or delayed requests."],"accept":"P07 completion, tail-latency and bounded-backlog criteria hold. Capacity is stated for the tested W/fleet, not as universal TPS. A queue that grows indefinitely or shrinks through silent loss fails.","evidence":"Request/completion reconciliation; backlog series; held-out results; observer report.","priority":"GATE","profile":"P07","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":43,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"sustained load is the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"sustained load is the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"CAP-05","title":"Overload and recover without false acceptance","setup":"Start at W and inject 2W for 15 minutes with valid and invalid jobs, then return to W.","steps":["Observe admission, explicit backpressure, reservations and deadline estimates.","Track accepted jobs to valid completion or the pre-agreed failure/refund outcome.","Measure recovery time and ensure ordinary users are not silently starved."],"accept":"P07 overload policy and recovery limits hold; no accepted job vanishes or earns an invalid reward. Rejected demand is reported separately from delivery success, preventing denominator manipulation.","evidence":"Overload timeline; admission/refund logs; backlog-drain proof.","priority":"BLOCKER","profile":"P01; P07","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":43,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"overload and recovery is the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"overload and recovery is the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"CAP-06","title":"Calibrate assignment windows to paid completion","setup":"Use a heterogeneous proving fleet, including the slowest advertised consumer tier.","steps":["Measure actual completion distributions with network delay, competing load and failed attempts.","Test the chosen exclusive window, open claiming and faster challengers after expiry.","Compare assignment frequency, paid completions and wasted work by tier."],"accept":"P07 fairness and wasted-work limits hold for advertised tiers. A provisional 10-DAA-second window is not treated as approved. Fair assignment counts alone cannot pass; payment outcomes and operator margins matter.","evidence":"Window sweep; paid-completion distribution; wasted-work and margin report.","priority":"GATE","profile":"P07; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":43,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"assignment windows are the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"assignment windows are the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"CAP-07","title":"Reassign work when inputs or providers disappear","setup":"Remove input providers, assigned provers and the dominant aggregator independently and together.","steps":["Have replacement operators retrieve authenticated inputs without founder files.","Retry expired assignments while preserving idempotent reward and customer outcomes.","Restore providers and test late submissions racing with replacements."],"accept":"P07/P08 replacement deadlines hold when availability assumptions permit. Otherwise a truthful bounded pause/refund occurs; no fake proof, double payment or hidden privileged input source is used.","evidence":"Failure schedule; input hashes; reassignment and payout ledger; recovery trace.","priority":"BLOCKER","profile":"P01; P07; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":44,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"reassignment is the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"reassignment is the proving fleet's","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"CAP-08","title":"Deliver customer-verifiable output at scale","setup":"Run the external workload using a customer-controlled verifier and independently operated workers.","steps":["Verify every delivered proof against the contracted program and input commitment.","Reject wrong-format, stale and partial deliveries; test customer retry and delivery failure.","Reconcile delivery, acceptance, payment and refund records without exposing private inputs publicly."],"accept":"P07 delivery performance and exact validity hold. Payment depends on the contracted correct result; a valid proof for the wrong job is not a successful delivery.","evidence":"Customer verification log; proof-format contract; settlement reconciliation.","priority":"BLOCKER","profile":"P01; P07; P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[17,18,24,25],"gate":"Technical readiness / commercial track","owner":"Proving lead + independent operators","manual_page":44,"owner_lane":"fleet lane (ac055d60427caab99)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"customer-verifiable output is the reference apps plus the fleet","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"customer-verifiable output is the reference apps plus the fleet","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"CAP-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}}]},{"code":"INC","title":"Rewards, incentives and selfish operators","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","fixtures":"F0 fee/reward rules; F4 adversarial operators; F7 incentive models","summary":"Assume operators optimise their own returns. Do not depend on the official client choosing a less profitable task.","tests":[{"id":"INC-01","title":"Reconcile issuance, fees, burns and recipients","setup":"Use a deterministic short chain containing all reward types, fee paths and rounding cases.","steps":["Calculate balances, total supply changes, burns and distributions independently.","Execute identical blocks natively and through the proving path.","Test zero, minimum, maximum and transition-boundary values plus malformed producer accounting."],"accept":"Conservation and recipient rules match F0 exactly; no inflation, rounding leakage or duplicate reward. Fee-table and prose discrepancies are resolved before the run, not guessed by the tester.","evidence":"Independent accounting ledger; balance/supply diffs; boundary vectors.","priority":"BLOCKER","profile":"P01; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":45,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"INC-01","decision":"NOT RUN","method":"native","cell":"suite:core","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","in_progress":false,"coverage":"partial: emission, fee and payout arithmetic tests; the reconciliation over a live chain is the economics lane's","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; core on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:core":{"requirement_id":"INC-01","decision":"NOT RUN","method":"native","cell":"suite:core","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","in_progress":false,"coverage":"partial: emission, fee and payout arithmetic tests; the reconciliation over a live chain is the economics lane's","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; core on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"INC-02","title":"Keep revenue streams and claims separate","setup":"Prepare jobs and blocks producing mining income, internal proof rewards and external payments.","steps":["Trace money from source to operator, protocol, developer and any burn.","Compare node records, settlement records and Ember displays.","Attempt to classify testnet rewards, reimbursed purchases or token appreciation as external customer revenue."],"accept":"Every stream reconciles and is labelled correctly. No double-counted revenue or fabricated protocol demand; mining subsidy and external service income remain distinct in dashboards and ECO.","evidence":"Money-flow register; UI reconciliation; rejected classifications.","priority":"BLOCKER","profile":"P01; P12; P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":45,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"INC-03","title":"Let a modified client choose the most profitable task","setup":"Permit independent schedulers to mine, prove internally, prove externally or switch off.","steps":["Publish common costs and vary relative task rewards, memory pressure and switching costs.","Run clients that ignore the official scheduling recommendation.","Measure realised operator margin, internal capacity and network progress."],"accept":"Required P12 sustainable worlds maintain paid essential capacity without compelled altruism. Profitability and availability are based on realised outcomes, including switching and wasted work.","evidence":"Scheduler source/policies; switching traces; capacity and margin series.","priority":"GATE","profile":"P07; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":45,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"INC-04","title":"Survive external-demand spikes and token declines","setup":"Use F7 scenarios with 10x external job offers and token-denominated mining-income shocks.","steps":["Allow miners/provers to switch freely under the declared reward and difficulty rules.","Observe hash participation, proof backlog, fees and recovery without an administrator.","Repeat with external demand dropping to zero and with a dominant operator withdrawn."],"accept":"Mandatory viable worlds meet P07/P12; stressed nonviable worlds fail or pause safely with truthful status. No emergency rule, fabricated demand or unofficial subsidy is inserted to force a pass.","evidence":"Shock timeline; fee/hash/capacity paths; failure-region report.","priority":"GATE","profile":"P07; P08; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":46,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}},{"id":"INC-05","title":"Contain job reservation and identity-splitting abuse","setup":"Freeze the actual assignment/payment mechanism; do not assume unimplemented collateral or identity controls.","steps":["Create many worker identities, reserve jobs, withhold proofs and submit late results.","Attempt free option-taking, duplicate work rewards and displacement of honest assignments.","Price attacker costs and observe honest completion under the approved abuse load."],"accept":"F0 rules and P07 service limits hold under the declared adversary. Identity splitting does not create unauthorised rewards or control; any unmitigated starvation path blocks the permissionless-service claim.","evidence":"Attack clients; assignment trace; cost-to-disrupt analysis; honest-user outcomes.","priority":"BLOCKER","profile":"P01; P07; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":46,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"reservation abuse needs the capacity harness","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"INC-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"reservation abuse needs the capacity harness","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"INC-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"INC-06","title":"Test difficulty and timestamp manipulation","setup":"Use the actual adjustment algorithm and consensus timestamp rule with independent miners.","steps":["Inject large hashrate arrivals/departures, periodic selective mining and boundary-timed bursts.","Try allowed and invalid timestamp skew, withheld blocks and replayed work.","Observe block intervals, reward allocation and recovery after hashrate stabilises."],"accept":"Invalid inputs are rejected; valid adversarial strategies remain within F0/P08 bounds and are priced in ECO. No unexplained reward amplification, permanent stall or conflicting accepted work.","evidence":"Difficulty trace; timestamp corpus; revenue analysis; independent rule review.","priority":"BLOCKER","profile":"P01; P08; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":46,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"difficulty and timestamp manipulation needs the fault network F4","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"INC-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"difficulty and timestamp manipulation needs the fault network F4","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"INC-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"INC-07","title":"Resist self-dealing fees and fake proving demand","setup":"Use self-funded operators and related customer identities in the isolated economic model/network.","steps":["Cycle funds through jobs, tips, developer shares and rebates to seek net reward extraction.","Attempt to inflate external-demand metrics without genuine unrelated customer expenditure.","Reconcile all counterparties and net cash contribution rather than gross transaction volume."],"accept":"No unauthorised subsidy extraction or metric inflation passes. Related-party volume is disclosed/excluded from P14; net external cash and legitimate protocol incentives are reported separately.","evidence":"Circular-flow tests; ownership/conflict review; net-cash reconciliation.","priority":"BLOCKER","profile":"P01; P12; P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":47,"owner_lane":"enforced-proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"self-dealing fees need the economic model and a live window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"INC-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"self-dealing fees need the economic model and a live window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"INC-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"INC-08","title":"Quantify provider and supplier failure concentration","setup":"Model control of hashing, signing, proving, aggregation and hardware supply separately.","steps":["Remove each largest operational dependency and combine correlated failures.","Measure replacement cost/time and whether essential roles share hidden ownership.","Compare results with the approved fault model and no-rescue exercise."],"accept":"No hidden single dependency defeats the claimed independence; within-tolerance withdrawals recover under P08/P11. Hardware supply concentration is disclosed without equating vendor sales to operator voting control.","evidence":"Role/ownership map; dependency removals; recovery and concentration report.","priority":"GATE","profile":"P08; P11; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[13,16,17,18,24,26],"gate":"G4 / G5","owner":"Protocol economics + proving leads","manual_page":47,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","evidence_path":"docs/analysis/class-v6/coexistence-model.md","run_id":"eco-d4-20261008-01","updated":"2026-10-08T19:55:03.336Z","evidence_record":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:55:03.336Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:economics-model":{"cell":"harness:economics-model","manifest_sha":"db424d20","coverage":{"ECO-02":"partial: the existing-owner and new-entrant tests per class at three tariffs, MSRP and street, with resale (reference-population.md); resale at zero, failures and financing not yet stressed","ECO-03":"partial: the sunk-development case first with low and high ranges, private mining, hardware sales and the hybrid, GPU re-entry after the fleet (coexistence-model.md sections 2, 8a, 12 to 12c; the surface in floor/sram-and-floor.md 4.4); the source thresholds retired to coexistence-workbook.md","ECO-04":"partial: a per-class supply curve with the installed base as a cap and re-entry (coexistence-model.md), the market-structure axis (8a), the operator simulation (operator-simulation.md); dynamic agent policies beyond the single-rule reaction are the simulation second cut","ECO-06":"partial: the recipients and burns reconciled on the chain block-one split (docs/design/proving-payment.md), proving demand as an income axis at none, launch and spike (coexistence-model.md); the full-horizon issuance ledger owed","ECO-07":"partial: each dataset size scored by adversary burden against commodity burden on measured card rows and modelled chip tickets (docs/design/class-v6-rotating-family.md 10.0u); the 8.5 and 11.5 GiB knee costs expected, not measured","INC-02":"partial: the income streams kept separate in the model (mining subsidy, internal proving, external jobs; burns never counted as payment); the node-record and Ember reconciliation are the node and app lanes","INC-03":"partial: the profit-maximising operator simulation first run (mine, internal prove, external prove, off); per-card agents and switching costs are the second cut","INC-04":"partial: the four shocks in the operator simulation (the demand spike, the price fall, the largest provers leaving, the entrants), restored or not and in how many periods","INC-08":"partial: the supplier and operator dependence table (coexistence-model.md 8a); the signing, proving and aggregation roles are the node lane"},"at":"2026-10-08T19:55:03.336Z","method":"model","requirement_id":"INC-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"db424d20","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"eco-d4-20261008-01","evidence":"docs/analysis/class-v6/coexistence-model.md","in_progress":true}}}]},{"code":"FIN","title":"Consensus safety and recovery","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","fixtures":"F0 exact fault model; F4 real-node partitions; F5 certificates and historical failures","summary":"Test safety under the stated fault bounds. Demand liveness only when synchrony and participation assumptions actually hold.","tests":[{"id":"FIN-01","title":"Agree on ordering, work and executed state","setup":"Use real fork-choice/DAG handling and independent miners, not only a simplified simulator.","steps":["Generate concurrent branches, delayed blocks, duplicates and invalid work with deterministic seeds.","Compare selected ordering, accumulated work, transaction execution and state roots after delivery converges.","Replay from independent checkpoints and from genesis where practical."],"accept":"Honest nodes converge under F0 assumptions with exact roots and rewards. No duplicated work accounting or undocumented ordering dependence; simulator-only success cannot substitute.","evidence":"Block/ordering corpus; root/work diffs; real-node replay logs.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":48,"owner_lane":"fast-time lane (a8be71a0db962911c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"FIN-01","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: the finality processes' agreement tests","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:consensus":{"requirement_id":"FIN-01","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: the finality processes' agreement tests","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"suite:core":{"requirement_id":"FIN-01","decision":"NOT RUN","method":"native","cell":"suite:core","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-core.log","in_progress":false,"coverage":"partial: the finality field and checkpoint tests on the object; ordering under load is the consensus suite and the sim","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; core on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"FIN-02","title":"Attack finality with split honest populations","setup":"Use the source-discussed 40/40/20 weight split, plus threshold-boundary splits under F0.","steps":["Let the 20% adversarial group sign conflicting histories while honest groups are partitioned.","Delay messages and eligibility updates independently; keep total historical weights auditable.","Try to form two certificates and reconnect nodes to observe accepted final history."],"accept":"No conflicting final certificates are accepted within the declared fault bound. A safe pause is valid when quorum is unavailable; making progress on both sides is not required.","evidence":"Signed votes; certificate attempts; voter-table snapshots; safety checker output.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":48,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"PASS","evidence_path":"sim/finality-attacks-results/native-2026-10-09/s203-1c.md","run_id":"fin-203-20261009T0127Z","updated":"2026-10-09T01:02:16.259Z","evidence_record":{"requirement_id":"FIN-02","decision":"PASS","method":"native","cell":"node:finality-realnode","manifest_sha":"c8d22a85","run_id":"fin-203-20261009T0127Z","evidence":"sim/finality-attacks-results/native-2026-10-09/s203-1c.md","in_progress":false,"coverage":"partial: the real-node half; independent operators and the review remain","release_identity":{"commit":"c8d22a85","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T01:02:16.259Z","note":"the 2.0.3 reruns of rows 1b (e at 0.20 and 0.30) and 1c on finality-2.0.3-kind-and-conflict c8d22a85 (igneumd a37f4b63, build-5 and build-6, 01:27 to 01:45 UK 9 October, lease pool, pid watchers, zero restarts): a received recovery certificate reads lockKind recovery on every node (1b: index 10 recovery on A's, B's and C's nodes; the 2.0.2 line read final on B's), and two valid certificates at one index pause finality on both holders with reason conflict naming the index and no new lock above it (1c: A's and B's nodes at index 11, finalityActive false, no lock after the heal; the 2.0.2 line went on locking reporting active); 0 pre-heal locks moved in every row. Rows: sim/results_v2.md, the 2.0.3 reruns subsection. FIN-02 and FIN-07's real-node half on the fixed node; the independent review remains."},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"node:finality-realnode":{"requirement_id":"FIN-02","decision":"PASS","method":"native","cell":"node:finality-realnode","manifest_sha":"c8d22a85","run_id":"fin-203-20261009T0127Z","evidence":"sim/finality-attacks-results/native-2026-10-09/s203-1c.md","in_progress":false,"coverage":"partial: the real-node half; independent operators and the review remain","release_identity":{"commit":"c8d22a85","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T01:02:16.259Z","note":"the 2.0.3 reruns of rows 1b (e at 0.20 and 0.30) and 1c on finality-2.0.3-kind-and-conflict c8d22a85 (igneumd a37f4b63, build-5 and build-6, 01:27 to 01:45 UK 9 October, lease pool, pid watchers, zero restarts): a received recovery certificate reads lockKind recovery on every node (1b: index 10 recovery on A's, B's and C's nodes; the 2.0.2 line read final on B's), and two valid certificates at one index pause finality on both holders with reason conflict naming the index and no new lock above it (1c: A's and B's nodes at index 11, finalityActive false, no lock after the heal; the 2.0.2 line went on locking reporting active); 0 pre-heal locks moved in every row. Rows: sim/results_v2.md, the 2.0.3 reruns subsection. FIN-02 and FIN-07's real-node half on the fixed node; the independent review remains."}}},{"id":"FIN-03","title":"Cross authority expiry in a long partition","setup":"Recover historical expiry failures where available; use the actual current authority-transition rules.","steps":["Partition for 31, 35, 60 and 90 logical days and around every retention/expiry boundary.","Attempt independently renewed authority sets and conflicting checkpoint locks.","Repeat selected boundary cases on real nodes with accelerated timers explicitly labelled."],"accept":"Authority continuity remains authenticated and no conflicting final history appears within F0 assumptions. A timeout is not accepted as proof absent voters ceased to exist. Compressed time is not multi-month field evidence.","evidence":"Expiry timeline; table/certificate history; historical regression tests.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":48,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"FIN-03","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: rule v4's anchored table and authority expiry tests (bee41b5e)","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:consensus":{"requirement_id":"FIN-03","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: rule v4's anchored table and authority expiry tests (bee41b5e)","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"FIN-04","title":"Stop signing while mining continues","setup":"Remove enough signing participation to invalidate the liveness assumption without forging votes.","steps":["Continue mining and execution, cross seed boundaries and monitor proof queues.","Check which user-visible states advance and which remain unfinalised.","Restore eligible weight and bounded message delay, then verify recovery."],"accept":"No false finality or fabricated authority. Behaviour matches F0 during the pause and P08 after assumptions return; unfinished transactions are not displayed as irreversible.","evidence":"Signing/mining trace; UI/RPC states; recovery roots and timing.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":49,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"FIN-04","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: the frozen table without its time expiry (rule v4)","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:consensus":{"requirement_id":"FIN-04","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: the frozen table without its time expiry (rule v4)","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"FIN-05","title":"Authenticate voter-set changes and pooled keys","setup":"Use normal transitions, pool members retaining keys and malicious substitution attempts.","steps":["Alter voter weights, membership proofs, miner/pool identity bindings and prior-certificate links.","Race updates across boundaries and replay old signed changes.","Have a new node verify the authority chain from its declared trust anchor."],"accept":"Only correctly authenticated changes are accepted; weights cannot be double-counted or redirected by a pool. All honest nodes agree on the active authority set for each certified point.","evidence":"Authority-chain fixtures; substitution attacks; new-node verification log.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":49,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"FIN-05","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: key succession and another scheme's vote refused","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:consensus":{"requirement_id":"FIN-05","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: key succession and another scheme's vote refused","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"FIN-06","title":"Analyse old-key compromise and long-range histories","setup":"Freeze assumptions about key erasure, retained weights, trust anchors and offline recovery.","steps":["Use previously eligible keys to build alternative histories after their operators disappear.","Present these histories to recently offline and newly joining clients.","Test replayed certificates, stale anchors and compromised signer subsets."],"accept":"Acceptance matches the explicit security model with no hidden trusted recovery step. Any reliance on a recent trusted anchor is disclosed and tested; hashpower assumptions cannot replace old-key analysis.","evidence":"Long-range corpus; trust-anchor policy; key-compromise review; client results.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":49,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"NOT RUN","evidence_path":"sim/results_v2.md Rule v4","run_id":"team-2026-10-08","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"old-key compromise analysis is the finality lane's long-range scenario, not yet in the sim","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"FIN-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"what_was_run":"bought and stolen keys in the simulator rows","run_by":"finality lane (aca0f5ed924a2a99b)","under_the_standard":"no: team-run before the standard's procedure; the status is RUNNING until the case is re-run under its steps with the profile's numbers and an independent run where the profile asks one","pass_or_fail_today":"not judged under the standard yet","method":"static","requirement_id":"FIN-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"team-2026-10-08","evidence":"sim/results_v2.md Rule v4","in_progress":true}}},{"id":"FIN-07","title":"Recover deterministically after reconnection and crash","setup":"Combine partitions with node crash, partial writes, restarts and proof backlog.","steps":["Reconnect networks under bounded latency and restore required honest participation.","Verify fork choice, unfinalised reorganisation, finality, reward rollback and proof reassignments.","Compare all honest nodes and customer-visible receipts after recovery."],"accept":"P08 recovery holds without reversing a previously valid final guarantee. Only permitted unfinalised state is reorganised; no duplicate rewards or inconsistent receipt statuses survive.","evidence":"Recovery timelines; roots/certificates; payout rollback; customer-state reconciliation.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":50,"owner_lane":"finality lane (aca0f5ed924a2a99b)","run_status":"NOT RUN","evidence_path":"sim/finality-attacks-results/native-2026-10-09/s203-1c.md; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","run_id":"fin-203-20261009T0127Z","updated":"2026-10-09T01:02:16.259Z","evidence_record":{"requirement_id":"FIN-07","decision":"PASS","method":"native","cell":"node:finality-realnode","manifest_sha":"c8d22a85","run_id":"fin-203-20261009T0127Z","evidence":"sim/finality-attacks-results/native-2026-10-09/s203-1c.md","in_progress":false,"coverage":"partial: deterministic recovery after reconnection and crash on real nodes (the HEAL reruns)","release_identity":{"commit":"c8d22a85","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T01:02:16.259Z","note":"the 2.0.3 reruns of rows 1b (e at 0.20 and 0.30) and 1c on finality-2.0.3-kind-and-conflict c8d22a85 (igneumd a37f4b63, build-5 and build-6, 01:27 to 01:45 UK 9 October, lease pool, pid watchers, zero restarts): a received recovery certificate reads lockKind recovery on every node (1b: index 10 recovery on A's, B's and C's nodes; the 2.0.2 line read final on B's), and two valid certificates at one index pause finality on both holders with reason conflict naming the index and no new lock above it (1c: A's and B's nodes at index 11, finalityActive false, no lock after the heal; the 2.0.2 line went on locking reporting active); 0 pre-heal locks moved in every row. Rows: sim/results_v2.md, the 2.0.3 reruns subsection. FIN-02 and FIN-07's real-node half on the fixed node; the independent review remains."},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"node:finality-realnode":{"requirement_id":"FIN-07","decision":"PASS","method":"native","cell":"node:finality-realnode","manifest_sha":"c8d22a85","run_id":"fin-203-20261009T0127Z","evidence":"sim/finality-attacks-results/native-2026-10-09/s203-1c.md","in_progress":false,"coverage":"partial: deterministic recovery after reconnection and crash on real nodes (the HEAL reruns)","release_identity":{"commit":"c8d22a85","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T01:02:16.259Z","note":"the 2.0.3 reruns of rows 1b (e at 0.20 and 0.30) and 1c on finality-2.0.3-kind-and-conflict c8d22a85 (igneumd a37f4b63, build-5 and build-6, 01:27 to 01:45 UK 9 October, lease pool, pid watchers, zero restarts): a received recovery certificate reads lockKind recovery on every node (1b: index 10 recovery on A's, B's and C's nodes; the 2.0.2 line read final on B's), and two valid certificates at one index pause finality on both holders with reason conflict naming the index and no new lock above it (1c: A's and B's nodes at index 11, finalityActive false, no lock after the heal; the 2.0.2 line went on locking reporting active); 0 pre-heal locks moved in every row. Rows: sim/results_v2.md, the 2.0.3 reruns subsection. FIN-02 and FIN-07's real-node half on the fixed node; the independent review remains."},"suite:consensus":{"requirement_id":"FIN-07","decision":"NOT RUN","method":"native","cell":"suite:consensus","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-consensus.log","in_progress":false,"coverage":"partial: majority-continuity recovery (rule v4)","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; consensus on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"FIN-08","title":"Combine boundaries, faults and adversarial scheduling","setup":"Use an independent model checker/scheduler and production-node scenarios from F4.","steps":["Combine epoch changes, authority transitions, mining churn, data delays and prover/aggregator loss.","Explore bounded adversarial message schedules and minimise any counterexample.","Replay model findings on real code and have an independent reviewer assess uncovered states."],"accept":"No unresolved safety failure; liveness claims hold only within declared assumptions and P08. Model bounds and untested schedules are published, not described as proof over every possible execution.","evidence":"Model/spec artifacts; schedule corpus; replay evidence; independent assessment.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Model checking + real-node testing","status":"NOT RUN","source":[19,21,24,25],"gate":"G5 / technical readiness","owner":"Consensus lead + independent formal/security review","manual_page":50,"owner_lane":"fast-time lane (a8be71a0db962911c)","run_status":"NOT RUN","evidence_path":"sim/results_v2.md","run_id":"fin-203-20261009T0127Z","updated":"2026-10-09T01:02:16.259Z","evidence_record":{"requirement_id":"FIN-08","decision":"NOT RUN","method":"native","cell":"harness:finality-sim","manifest_sha":"c8d22a85","run_id":"fin-203-20261009T0127Z","evidence":"sim/results_v2.md","in_progress":true,"coverage":"partial: the combined boundary and fault scenarios in the simulator with adversarial schedules; model checking is the formal review","release_identity":{"commit":"c8d22a85","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T01:02:16.259Z","note":"FIN-08's real-node rows gained the 2.0.3 reruns of rows 1b and 1c on the fixed node (the lock kind read from the chain on every node; two valid certificates at one index pause finality with reason conflict): sim/results_v2.md, the 2.0.3 reruns subsection; the model side remains for PASS"},"in_progress_since":"2026-10-08T19:43:19.697Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:finality-sim":{"requirement_id":"FIN-08","decision":"NOT RUN","method":"native","cell":"harness:finality-sim","manifest_sha":"c8d22a85","run_id":"fin-203-20261009T0127Z","evidence":"sim/results_v2.md","in_progress":true,"coverage":"partial: the combined boundary and fault scenarios in the simulator with adversarial schedules; model checking is the formal review","release_identity":{"commit":"c8d22a85","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T01:02:16.259Z","note":"FIN-08's real-node rows gained the 2.0.3 reruns of rows 1b and 1c on the fixed node (the lock kind read from the chain on every node; two valid certificates at one index pause finality with reason conflict): sim/results_v2.md, the 2.0.3 reruns subsection; the model side remains for PASS"}}}],"notes":[{"at":"2026-10-08T19:32:50.918Z","text":"F04 (Review B), the founder's ruling 8 October 19:57 UK: the recovery lock is kept and is always labelled 'recovery', never 'final', on every surface (the checkpoint field, the explorer, receipts, the light client, the oracle, the site)"},{"at":"2026-10-08T20:10:24.812Z","text":"REC-01 (the master edition's one unresolved interpretation, finality pause-only healing: R1's I03 stale predicate against R2's F04 backfill caveat): closure evidence as the finality and node lanes recorded it on 8 October 2026: rule v4 at release-2.0.0-node 12424341's line, mode recovery by the founder's 19:57 ruling (the lock labelled recovery, never final), both real-node lines PASS tonight by the 6.7 pause criterion, FIN-02 PASS at 0218d6bf1 on the simulator half; status RUNNING until the beyond-window healing case with and without historical data is run natively (the node lane's case tomorrow)."},{"at":"2026-10-09T00:22:15.485Z","text":"FIN-02 and FIN-08: Dated note, 9 October 2026 01:0x UK (the coordinator, from the finality runs lane's native rows 4566eb1e4): a received recovery certificate reads lockKind \"final\" on every node but the forming one (recovery_lock is stamped only in evaluate), and a node holding two certificates at one index reports \"active\" and keeps locking; both ride 2.0.3 with known-failed tests (the node lane's 06:00 line). Recovery kind correct on the forming node only until 2.0.3; conflicting-certificate reporting open. No decision changed by this note."}]},{"code":"VER","title":"Wallets, receipts and data availability","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","fixtures":"F0 trust/availability model; F5 malformed roots, receipts and authority chains","summary":"Verify the exact property shown to the user. An inclusion proof, execution proof and finality certificate are not interchangeable.","tests":[{"id":"VER-01","title":"Authenticate light-client bootstrap","setup":"Give a clean client malicious RPC responses, fabricated voter tables and valid-looking signatures.","steps":["Start from the approved trust anchor and verify every required link to the advertised state.","Substitute otherwise well-formed but unauthorised keys, weights and checkpoints.","Remove the bootstrap service and use another independently operated source."],"accept":"The client rejects unauthorised authority and discloses any trust anchor. Signatures over a node-supplied table do not by themselves pass; missing authentication never silently degrades to trusted RPC.","evidence":"Bootstrap corpus; trust-chain trace; fail-closed tests.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":51,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"FAIL","evidence_path":"tools/reference-apps/ver/evidence/VER-01.json","run_id":"ra-20261008T1915-ver","updated":"2026-10-08T19:46:20.696Z","evidence_record":{"cell":"harness:reference-apps-ver-trust-anchor","manifest_sha":"4cdcc488","coverage":{"VER-01":"fails today, disclosed: the light client authenticates the certificate's signatures and the header path but the voter table is a node-supplied trust anchor named on /light; a forged table signature and a wrong-network certificate are refused","VER-02":"fails today, disclosed: the execution statement's proof is verified by the nodes and the browser verifies the aggregator signature and the post root under it; an in-browser verifier for the permitted proof and a table commitment close it"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-01","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver-trust-anchor":{"cell":"harness:reference-apps-ver-trust-anchor","manifest_sha":"4cdcc488","coverage":{"VER-01":"fails today, disclosed: the light client authenticates the certificate's signatures and the header path but the voter table is a node-supplied trust anchor named on /light; a forged table signature and a wrong-network certificate are refused","VER-02":"fails today, disclosed: the execution statement's proof is verified by the nodes and the browser verifies the aggregator signature and the post root under it; an in-browser verifier for the permitted proof and a table commitment close it"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-01","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/VER-01.json","in_progress":false}}},{"id":"VER-02","title":"Verify evolving authority and execution statements","setup":"Use valid state proofs paired with wrong execution statements or stale authority histories.","steps":["Cross voter and verifier changes with offline clients returning after long intervals.","Alter roots, aggregate identity and proof/public-input bindings independently.","Check local verification rather than merely a server-reported verified flag."],"accept":"All advertised proof checks occur locally or the remaining trust is explicitly disclosed. Wrong roots and unauthenticated authority are rejected; unsupported verification paths are not claimed.","evidence":"Client verification trace; corrupted inputs; offline/upgrade results.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":51,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"FAIL","evidence_path":"tools/reference-apps/ver/evidence/VER-01.json","run_id":"ra-20261008T1915-ver","updated":"2026-10-08T19:46:20.696Z","evidence_record":{"cell":"harness:reference-apps-ver-trust-anchor","manifest_sha":"4cdcc488","coverage":{"VER-01":"fails today, disclosed: the light client authenticates the certificate's signatures and the header path but the voter table is a node-supplied trust anchor named on /light; a forged table signature and a wrong-network certificate are refused","VER-02":"fails today, disclosed: the execution statement's proof is verified by the nodes and the browser verifies the aggregator signature and the post root under it; an in-browser verifier for the permitted proof and a table commitment close it"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-02","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver-trust-anchor":{"cell":"harness:reference-apps-ver-trust-anchor","manifest_sha":"4cdcc488","coverage":{"VER-01":"fails today, disclosed: the light client authenticates the certificate's signatures and the header path but the voter table is a node-supplied trust anchor named on /light; a forged table signature and a wrong-network certificate are refused","VER-02":"fails today, disclosed: the execution statement's proof is verified by the nodes and the browser verifies the aggregator signature and the post root under it; an in-browser verifier for the permitted proof and a table commitment close it"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-02","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/VER-01.json","in_progress":false}}},{"id":"VER-03","title":"Prove successful payment rather than inclusion","setup":"Create successful, reverted, wrong-asset, wrong-recipient and wrong-amount transfers.","steps":["Generate receipts for included transactions, including failures and replaced/unfinalised transactions.","Verify execution status plus asset, recipient, amount and canonical-state/receipt commitment.","Replay the receipt on another chain and after an allowed unfinalised reorganisation."],"accept":"Only the actual successful, correctly bound transfer is labelled payment proof. Inclusion-only receipts are labelled as such; no node-reported success flag substitutes for authenticated outcome.","evidence":"Payment fixture corpus; receipt verification; merchant-facing status checks.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":51,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/ver/evidence/summary.json","run_id":"ra-20261008T1915-ver","updated":"2026-10-08T19:46:20.696Z","evidence_record":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:46:20.696Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/summary.json","in_progress":true}}},{"id":"VER-04","title":"Bound cross-chain oracle trust and replay","setup":"For a claimed oracle, freeze destination verifier, authority updates, accepted proof types and replay policy.","steps":["Try deployer-substituted keys, stale certificates, unchecked signatures and wrong source/destination identities.","Exercise legitimate authority updates and source reorganisations under the approved model.","Measure gas/cost with realistic header sets and test disabled/unavailable verification."],"accept":"The oracle enforces its declared trust model and fails closed. Deployer privileges and unavailable guarantees are explicit; no trustless-bridge claim exceeds the checks performed. Excluded oracle scope earns no pass credit.","evidence":"Oracle code/parameters; attack cases; cost report; privilege disclosure.","priority":"BLOCKER","profile":"P00; P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Claimed-option verification","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":52,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/ver/evidence/summary.json","run_id":"ra-20261008T1915-ver","updated":"2026-10-08T19:46:20.696Z","evidence_record":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:46:20.696Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/summary.json","in_progress":true}}},{"id":"VER-05","title":"Reconstruct required state without founder storage","setup":"Remove founder archival/input services and start an independent operator from the documented entry point.","steps":["Fetch authenticated blocks, state/proof inputs and any required witnesses from permitted peers.","Rebuild the expected state and continue validation/proving.","Measure bandwidth, disk, time and retention requirements against advertised operator budgets."],"accept":"Required data can be obtained and verified within the declared availability model. Hidden archives or unpublished files block independence. A valid execution proof alone does not satisfy this test.","evidence":"Download/reconstruction logs; data hashes; resource costs; dependency inventory.","priority":"BLOCKER","profile":"P01; P08; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":52,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"FAIL","evidence_path":"tools/reference-apps/ver/evidence/VER-05.json","run_id":"ra-20261008T1915-ver","updated":"2026-10-08T19:46:20.696Z","evidence_record":{"cell":"harness:reference-apps-ver-availability","manifest_sha":"4cdcc488","coverage":{"VER-05":"partial: the public read node must report startedFrom genesis (no snapshot) and the reference reader on build-1 executed the 2.0 devnet from genesis with no snapshot; the pages fetch headers, certificates, coinbase bodies and account proofs from the public read RPC only; the archive and availability model beyond the 2,048-block state ring is the OPS no-founder exercise. Run ra-20261008T1915-ver: FAIL, the public node reports startedFrom snapshot (restarted from a snapshot after 17:46 UK); the reader on build-1 still from genesis"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-05","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver-availability":{"cell":"harness:reference-apps-ver-availability","manifest_sha":"4cdcc488","coverage":{"VER-05":"partial: the public read node must report startedFrom genesis (no snapshot) and the reference reader on build-1 executed the 2.0 devnet from genesis with no snapshot; the pages fetch headers, certificates, coinbase bodies and account proofs from the public read RPC only; the archive and availability model beyond the 2,048-block state ring is the OPS no-founder exercise. Run ra-20261008T1915-ver: FAIL, the public node reports startedFrom snapshot (restarted from a snapshot after 17:46 UK); the reader on build-1 still from genesis"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-05","decision":"FAIL","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/VER-05.json","in_progress":false}}},{"id":"VER-06","title":"Detect withholding, corruption and stale data","setup":"Serve valid commitments with missing data, corrupted chunks, stale witnesses and conflicting peer replies.","steps":["Attempt to make a validator or light client accept an unavailable or incorrect state under F0.","Test retrieval from independent peers and expiry/retry policy.","Restore data and check that recovery cannot alter an already verified commitment."],"accept":"No unjustified available/verified status; safety and admission rules match F0. Recovery is bounded where assumptions permit, and unavailable-data states remain visible instead of hidden behind proofs.","evidence":"Withholding corpus; peer retrieval traces; availability/status checks.","priority":"BLOCKER","profile":"P01; P08; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":52,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/ver/evidence/summary.json","run_id":"ra-20261008T1915-ver","updated":"2026-10-08T19:46:20.696Z","evidence_record":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:46:20.696Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/summary.json","in_progress":true}}},{"id":"VER-07","title":"Protect wallet keys, signing and recovery","setup":"Use test-only keys, encrypted backups and clean replacement devices; no real user funds.","steps":["Attempt secret access from proving jobs, logs, crash dumps, clipboard and telemetry paths.","Verify transaction destination/amount before signing; test backup/restore and wrong-password handling.","Upgrade and recover without silently changing signing authority or exposing seed material."],"accept":"No unintended secret disclosure or unauthorised signature. Supported recovery restores the correct keys and accounts; users receive explicit risk/backup information. Logs are sanitised without hiding security evidence.","evidence":"Security review; canary-secret tests; signing fixtures; restore journey.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":53,"owner_lane":"shipper (ae892a8b0f78fe31c)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"wallet key protection is the wallet lane's security row","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"VER-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"wallet key protection is the wallet lane's security row","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"VER-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"VER-08","title":"Keep every user-facing state truthful","setup":"Create included-only, executed, proven, finalised, reverted, stale and paused examples.","steps":["Compare explorer, wallet, receipt, RPC and customer API labels against authenticated evidence.","Interrupt finality and proof services and observe refresh/reconnect behaviour.","Check statements about privacy, Ethereum security and device support."],"accept":"No stronger state is implied than verified; stale data is marked and failures are actionable. EVM compatibility is not labelled Ethereum security, and ZK technology is not automatically labelled transaction privacy.","evidence":"Cross-surface screenshots/logs; state mapping; claim review.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[20,25,35,37],"gate":"Technical readiness / claimed options","owner":"Wallet + light-client lead; independent security review","manual_page":53,"owner_lane":"reference-apps lane (a2060899d2a27d31c)","run_status":"NOT RUN","evidence_path":"tools/reference-apps/ver/evidence/summary.json; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"VER-08","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the app's own state-word tests; the wallet and light client rows are VER-01 to VER-03","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:46:20.696Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"harness:reference-apps-ver":{"cell":"harness:reference-apps-ver","manifest_sha":"4cdcc488","coverage":{"VER-03":"partial: a payment receipt is labelled payment only when the receipt is proven against the segment statement's receipts commitment under the finality certificate, inclusion-only receipts read inclusion, a tampered receipt and a flipped status fail; run on the the earlier devnet fixtures, the 2.0 devnet re-run waits for its first paid segment whose last block carries a transaction; Review B F04: a receipt claiming lock_state final under a certificate the node reports as a recovery lock is refused, a recovery lock prints as recovery lock, not final (Node and browser negative cases on the fixtures; the field is not live on devnet-4 tonight, so no live recovery lock was seen)","VER-04":"partial: the oracle's trust() names the deployer-installed table and the unchecked aggregator signature, a second hash at a stored certificate index is refused, a root claim at an unknown index is refused, another chain id is refused (tools/reference-apps/oracle/test.mjs on Sepolia); Review B F04: the Sepolia verifiers apply the two-thirds rule only, carry no lock-kind field, and an under-threshold (recovery-rule) certificate fails closed in submitCertificate, so no stored root is a recovery lock (the DEX lane's docs/bridge/light-client-bridge.md paragraph); the claimed-option review of the trust model is the reviewer's","VER-06":"partial: the read service never serves a certificate from another network, a withheld header in the path and a corrupted proof node are detected, stale data prints its lock age beside every balance, and a client told no certificate never falls back to a trusted RPC balance; detection on the fault network F4 is not run","VER-08":"partial: every served state on /light, /receipt and /oracle uses one of included, executed, proven, finalised from the shared definition block, the lock line serves the live DAA before the first certificate, and the trust assumptions are listed on each page; the wallet and explorer surfaces are their lanes' rows; Review B F04: /light, /receipt, the receipt file and the one-file verifier show a node-reported recovery lock as recovery lock, not final, /oracle says recovery locks are not accepted by its verifier, the terms block defines the recovery lock"},"at":"2026-10-08T19:46:20.696Z","method":"static","requirement_id":"VER-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"4cdcc488","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"ra-20261008T1915-ver","evidence":"tools/reference-apps/ver/evidence/summary.json","in_progress":true},"suite:app":{"requirement_id":"VER-08","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the app's own state-word tests; the wallet and light client rows are VER-01 to VER-03","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}}]},{"code":"OPS","title":"Independent operation and release security","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","fixtures":"F4 isolated multi-operator network; F0 signed releases; F9 telemetry","summary":"A permissionless specification must remain operational without privileged infrastructure or unsafe automatic updates.","tests":[{"id":"OPS-01","title":"Run the complete no-founder exercise","setup":"Use the P11 independent network, adequate honest participation and enough non-founder capacity for W.","steps":["Remove founder miners, provers, aggregators, RPC, DNS/bootstrap dependencies and private support access.","Run the full P11 period while crossing real and separately labelled accelerated boundaries.","Introduce scheduled faults and have independent operators recover using published instructions."],"accept":"No founder action, secret file, privileged key or emergency anti-chip rule is needed. P07/P08 outcomes hold within assumptions; any intervention is recorded as a failed no-rescue run, not erased.","evidence":"Operator roster/conflict checks; dependency removals; full activity/intervention log.","priority":"BLOCKER","profile":"P07; P08; P11","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":54,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"the no-founder exercise is an operations run, not a suite","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"the no-founder exercise is an operations run, not a suite","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"OPS-02","title":"Diversify bootstrap and resist peer isolation","setup":"Start nodes without the default bootstrap host and give others adversarial peer lists.","steps":["Attempt eclipse through peer concentration, stale discovery, poisoned DNS and repeated identities in an isolated lab.","Use independent documented discovery paths and validate returned chain data.","Measure synchronisation, peer diversity and recovery after benign connectivity returns."],"accept":"No unauthenticated history is trusted; bootstrap has no hidden single-provider requirement. Isolation is detected/contained according to F0 and recovery meets P08 when assumptions return.","evidence":"Peer/discovery traces; eclipse scenarios; startup and recovery evidence.","priority":"BLOCKER","profile":"P01; P08; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":54,"owner_lane":"build-server lane (a352e49ff4613df86)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"bootstrap diversity needs the fault network F4","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"bootstrap diversity needs the fault network F4","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"OPS-03","title":"Separate update distribution from consensus authority","setup":"Use test signing keys and clean desktop/node installations with valid, stale and malicious packages.","steps":["Offer signed updates with unexpected consensus rules, downgraded binaries and corrupted payloads.","Test explicit operator acceptance and the published signing-key incident procedure.","Confirm that distribution-key possession cannot independently activate new consensus rules."],"accept":"Tampering/unauthorised rollback is rejected; updates do not silently transfer authority. Approved acceptance and activation are separate. No test touches production signing material.","evidence":"Package corpus; approval/activation traces; compromised-key rehearsal.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":54,"owner_lane":"shipper (ae892a8b0f78fe31c)","run_status":"NOT RUN","evidence_path":"site/release-manifest.json; docs/plans/evidence/UX-01-20261008.md","run_id":"site-manifest-20261009-02","updated":"2026-10-09T10:17:55.884Z","evidence_record":{"requirement_id":"OPS-03","decision":"NOT RUN","method":"static","cell":"site:manifest","manifest_sha":"52b972421","run_id":"site-manifest-20261009-02","evidence":"site/release-manifest.json","in_progress":true,"coverage":"partial: the manifest's versions and network blocks regenerate from their sources; the separation itself is the node suites' (suite:exec, suite:p2p-flows)","release_identity":{"commit":"52b972421","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"the versions block on /release.json, /download and /miner; no claim moves","reviewer":"","at":"2026-10-09T10:17:55.884Z","note":"the manifest under the served-identity guard (9 October 2026, 09:4x UK): its six clock fields read UTC, the zone word is out of the served file; read back at /release.json after the deploy"},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"site:manifest":{"requirement_id":"OPS-03","decision":"NOT RUN","method":"static","cell":"site:manifest","manifest_sha":"52b972421","run_id":"site-manifest-20261009-02","evidence":"site/release-manifest.json","in_progress":true,"coverage":"partial: the manifest's versions and network blocks regenerate from their sources; the separation itself is the node suites' (suite:exec, suite:p2p-flows)","release_identity":{"commit":"52b972421","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"the versions block on /release.json, /download and /miner; no claim moves","reviewer":"","at":"2026-10-09T10:17:55.884Z","note":"the manifest under the served-identity guard (9 October 2026, 09:4x UK): its six clock fields read UTC, the zone word is out of the served file; read back at /release.json after the deploy"},"pc:install-update":{"requirement_id":"OPS-03","decision":"NOT RUN","method":"team-reported","cell":"pc:install-update","manifest_sha":"aa354ed5","run_id":"ux-01-20261008-win-2.0.0","evidence":"docs/plans/evidence/UX-01-20261008.md","in_progress":true,"coverage":"partial: the update path's read-back and the signed manifest's verify on the PC (a tampered or rolled-back payload is refused by the engine's manifest check); authority separation is the shipper's review","release_identity":{"commit":"aa354ed5","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:42:25.701Z"},"site:manifest@site-manifest-20261009-01":{"requirement_id":"OPS-03","decision":"NOT RUN","method":"static","cell":"site:manifest","manifest_sha":"a13f727ed","run_id":"site-manifest-20261009-01","evidence":"site/release-manifest.json","in_progress":false,"coverage":"partial: the manifest's versions and network blocks regenerate from their sources; the separation itself is the node suites' (suite:exec, suite:p2p-flows)","release_identity":{"commit":"a13f727ed","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"the versions block on /release.json, /download and /miner; no claim moves","reviewer":"","at":"2026-10-09T01:34:42.557Z","note":"the manifest and the download index refreshed for 2.0.2 on Mac (02:20 UK, 9 October 2026; Windows and HiveOS stay on 2.0.1); read back at /release.json after the deploy"}},"in_progress_since":"2026-10-08T20:42:25.701Z"},{"id":"OPS-04","title":"Recover nodes from crash and storage damage","setup":"Use production database/snapshot paths with controlled interrupted writes and corrupted test storage.","steps":["Crash during import, proof acceptance, reward application and snapshot generation.","Restore from independently verified snapshots or re-sync through documented procedures.","Compare roots, certificates, balances and processed-job IDs with an unaffected node."],"accept":"No corrupt snapshot is trusted, no duplicate payout and no loss of authenticated final state. Recovery meets P08 where data is available; ambiguous corruption fails closed and is actionable.","evidence":"Crash schedule; snapshot hashes; root/balance diffs; recovery timing.","priority":"BLOCKER","profile":"P01; P08","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":55,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"OPS-04","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: snapshot install, replay and genesis recapture after a crash","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:exec":{"requirement_id":"OPS-04","decision":"NOT RUN","method":"native","cell":"suite:exec","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-exec.log","in_progress":false,"coverage":"partial: snapshot install, replay and genesis recapture after a crash","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; exec on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 24s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"OPS-05","title":"Isolate untrusted proving workloads","setup":"Run hostile test jobs with secret canaries and restrictive worker permissions.","steps":["Attempt filesystem escape, process spawning, resource exhaustion, network access and key-store reads.","Crash workers and inspect host, wallet and node availability plus dump/log contents.","Retry on every supported isolation backend and check dependency vulnerability handling."],"accept":"No secret leakage or unauthorised host action; P09 resource containment holds. Worker failure does not compromise validator/wallet authority; unsupported isolation is not marketed as safe execution.","evidence":"Sandbox penetration report; canary logs; resource limits; host-integrity checks.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":55,"owner_lane":"build-server lane (a352e49ff4613df86)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"proving workload isolation is the fleet's pod row","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"proving workload isolation is the fleet's pod row","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"OPS-06","title":"Contain malicious network and API traffic","setup":"Use an authorised isolated load environment with declared resource and request-rate budgets.","steps":["Send malformed headers, proofs, oversized messages, floods and invalid peer sequences.","Measure legitimate traffic, memory/disk growth and validator CPU use.","Test limit resets, peer reconnect and graceful degradation without disabling validation."],"accept":"P09 abuse budgets hold; no unbounded allocation, persistent crash or invalid acceptance. Backpressure is visible and honest users retain the specified service at admitted load.","evidence":"Load/corpus manifests; resource series; valid-traffic metrics; incident traces.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":55,"owner_lane":"build-server lane (a352e49ff4613df86)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-p2p-flows.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"OPS-06","decision":"NOT RUN","method":"native","cell":"suite:p2p-flows","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-p2p-flows.log","in_progress":false,"coverage":"partial: malformed relay messages refused; traffic containment under load is an OPS harness","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; p2p-flows on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:p2p-flows":{"requirement_id":"OPS-06","decision":"NOT RUN","method":"native","cell":"suite:p2p-flows","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-p2p-flows.log","in_progress":false,"coverage":"partial: malformed relay messages refused; traffic containment under load is an OPS harness","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; p2p-flows on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"OPS-07","title":"Detect failures with usable evidence and runbooks","setup":"Define alerts for invalid acceptance, conflicting finality, backlog, data loss, payout mismatch and stale status.","steps":["Inject one instance of each monitored failure in the lab.","Have an unaffiliated operator diagnose it using only emitted evidence and published instructions.","Test redaction, metric freshness and duplicate-alert suppression without suppressing serious failures."],"accept":"P10 alert/detection limits hold; every blocker produces actionable evidence. Monitoring does not leak secrets or mislabel intentional safe pauses as successful finality.","evidence":"Alert matrix; detection timelines; independent runbook exercise.","priority":"GATE","profile":"P09; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":56,"owner_lane":"build-server lane (a352e49ff4613df86)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"runbook detection is an operations run","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"runbook detection is an operations run","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"OPS-08","title":"Repeat independent operation across releases","setup":"Use a clean previous supported version and the final candidate with independent operators.","steps":["Perform documented rolling upgrade, rollback of non-consensus software where allowed and resynchronisation.","Cross activation with mixed versions and unavailable founder distribution hosts.","Re-run affected gates after changes and preserve prior failures and incident lessons."],"accept":"No undocumented privileged migration or automatic consensus rewrite. All affected evidence is refreshed; P11 no-rescue results remain tied to the final release, not an earlier build.","evidence":"Upgrade/replay logs; invalidation map; repeated gate signatures.","priority":"BLOCKER","profile":"P00; P08; P11","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[21,24,25,26],"gate":"G5","owner":"Operations + release leads; independent operators","manual_page":56,"owner_lane":"build-server lane (a352e49ff4613df86)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"repeat independent operation is a cross-release observation","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"repeat independent operation is a cross-release observation","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"OPS-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}}],"notes":[{"at":"2026-10-08T19:32:50.976Z","text":"F14 (Review B), the founder's ruling 8 October 19:57 UK: the public miner ships from 2.0.2 without remote jobs; our own fleet runs the lab build with its own signing root"}]},{"code":"UX","title":"Ember, payouts and operator control","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","fixtures":"F2 supported desktops; F8 user study; F4 honest/malicious pools","summary":"Successful participation must be practical for ordinary owners without hidden custody or loss of consensus authority.","tests":[{"id":"UX-01","title":"Onboard ordinary owners on native desktop apps","setup":"Recruit the P10 first-time user cohort across Windows and macOS using supported physical hardware.","steps":["Observe install, hardware detection, safety explanation and first accepted work without staff intervention.","Record download/data preparation separately as well as complete end-to-end time.","Test unsupported hardware and insufficient memory messaging rather than forcing a failed start."],"accept":"P10 completion/time targets hold with no unsafe default or concealed prerequisite. The product is tested as the actual desktop app, not only a browser preview.","evidence":"Consent-based study records; task timings; failure reasons; compatibility outcomes.","priority":"GATE","profile":"P10","cadence":"Release candidate; repeat after relevant changes","method":"Independent observed user study","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":57,"owner_lane":"update-return lane (a22d765a2e0355a9f)","run_status":"NOT RUN","evidence_path":"docs/plans/evidence/UX-01-20261008.md","run_id":"ux-01-20261008-win-2.0.0","updated":"2026-10-08T20:42:25.701Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"pc:install-update":{"requirement_id":"UX-01","decision":"NOT RUN","method":"team-reported","cell":"pc:install-update","manifest_sha":"aa354ed5","run_id":"ux-01-20261008-win-2.0.0","evidence":"docs/plans/evidence/UX-01-20261008.md","in_progress":true,"coverage":"team-run evidence only (the two PCs taking the Windows entry through the app's own update path with no click and mining on every card); the P10 study is NOT RUN until unaffiliated participants are recruited","release_identity":{"commit":"aa354ed5","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:42:25.701Z"}},"evidence_record":{"requirement_id":"UX-01","decision":"NOT RUN","method":"team-reported","cell":"pc:install-update","manifest_sha":"aa354ed5","run_id":"ux-01-20261008-win-2.0.0","evidence":"docs/plans/evidence/UX-01-20261008.md","in_progress":true,"coverage":"team-run evidence only (the two PCs taking the Windows entry through the app's own update path with no click and mining on every card); the P10 study is NOT RUN until unaffiliated participants are recruited","release_identity":{"commit":"aa354ed5","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:42:25.701Z"},"in_progress_since":"2026-10-08T20:42:25.701Z"},{"id":"UX-02","title":"Make pause, stop and safe tuning reliable","setup":"Run mining/proving on active desktops under contention and safe thermal stress.","steps":["Use pause, stop, power limit, task selection and emergency local shutdown controls.","Crash or restart the UI while workers run and verify ownership of background processes.","Restore the original hardware settings and test power-saving/low-battery behaviour where supported."],"accept":"P10 control latency and safe-state requirements hold. Stopping does not strand an uncontrolled process; tuning never depends on unsafe settings or silent privilege escalation.","evidence":"Control timings; process/settings audit; restart and safety traces.","priority":"BLOCKER","profile":"P01; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":57,"owner_lane":"shipper (ae892a8b0f78fe31c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log; docs/analysis/floor-memory-profile-2026-10-08.md","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"UX-02","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the engine state machine's pause, stop and knob tests; the operator study is UX-01's","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:app":{"requirement_id":"UX-02","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the engine state machine's pause, stop and knob tests; the operator study is UX-01's","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"rows:v607-floor-memory":{"requirement_id":"UX-02","decision":"NOT RUN","method":"GPU","cell":"rows:v607-floor-memory","manifest_sha":"c411bae9a","run_id":"v607-floor-memory-20261008T2059Z","evidence":"docs/analysis/floor-memory-profile-2026-10-08.md","in_progress":true,"coverage":"partial: the prover's safe refusal under memory pressure (exit 78 in one line, the miner's worker unharmed, nothing leaked after the refusal); pause, stop, power limit and the UI's crash ownership are the suite:app cell's","release_identity":{"commit":"c411bae9a (branch v607-floor-memory off cef5234b5)","lockfile":"proving/igneum-prove/Cargo.lock at cef5234b5","binary":"sp1-gpu-server db37c38b5feabdec5bbfd0298446da89f6a5d144125e399d6ab617f64f9cb61d (igneum-floor-sm8689-v607.tgz 9c02fcc6a3f045d3167c1d9cb6e22c584ea862189d11997754a57cbe1b0d355b); igneum-prove-host-0317 71bc2438856bb141; igneum-prove-host v607 66662219a3630772","network_object":"none (fixture proofs on rented pods, no network)","activation":"none","profile_hashes":"floor patch 9098c3e5979d057031f43588668201d1f7a53ab17e980c1eaf896cd5e6f38575"},"claim_impact":"the 2.0 proving statement's memory condition per tier: a 12 GB card runs the whole segment path alone; an 8 GB card proves shards only (its aggregation fails) and is refused the chain before setup; both time-share beside the 5.5 GiB miner; the 16 GB and 24 GB tiers unmeasured tonight","reviewer":"","at":"2026-10-08T22:22:49.946Z"}}},{"id":"UX-03","title":"Show net earnings and compatibility honestly","setup":"Use known rewards, fees, energy readings, retries and operator-entered tariffs.","steps":["Compare mining, internal proof and external proof income with authoritative ledgers.","Show gross/net estimates, measurement boundaries, tariff assumptions and payout status.","Test stale data, losses, negative margins and mining-only versus proving-compatible devices."],"accept":"P10 reconciliation limits hold and uncertainty is visible. No guaranteed profits, fabricated fiat price or inferred proving support; provisional earnings are not shown as settled payments.","evidence":"UI/ledger comparisons; tariff fixtures; stale/negative examples.","priority":"BLOCKER","profile":"P01; P10; P12","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":57,"owner_lane":"shipper (ae892a8b0f78fe31c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"UX-03","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the card and earnings rendering tests; the net-earnings model against real bills is COM/ECO evidence","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:app":{"requirement_id":"UX-03","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the card and earnings rendering tests; the net-earnings model against real bills is COM/ECO evidence","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"UX-04","title":"Pay small operators without hidden custody","setup":"Use ordinary single-card balances and the actual pooling/payment path.","steps":["Earn, request/receive payment, disconnect and reconnect; include low balances, fees and a pool outage.","Attempt redirection, delayed accounting and withdrawal of another user's entitlement.","Reconcile displayed balances with canonical entitlement and actual settlement."],"accept":"P10 payout limits hold for the declared small-operator case. No unauthorised custody, redirection or unexplained loss; thresholds and fees are disclosed rather than masked by larger test balances.","evidence":"Single-card payout ledger; pool failure record; custody/authorisation review.","priority":"BLOCKER","profile":"P01; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":58,"owner_lane":"pool design seat (a3832b1c3b274b310)","run_status":"NOT RUN","evidence_path":"docs/analysis/pool/pool-pair-2026-10-08.md; build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"UX-04","decision":"NOT RUN","method":"native","cell":"suite:miner","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","in_progress":false,"coverage":"partial: payout label and share accounting tests; custody is the pool lane's row","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; miner on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:58:33.370Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:pool":{"requirement_id":"UX-04","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"986252e73","run_id":"pool-2.0-20261008-03","evidence":"docs/analysis/pool/pool-pair-2026-10-08.md","in_progress":true,"coverage":"partial: PPLNS distribution tests (fee first, never overpays, late joiner), the payout key file round trip, the signed transfer decode; the live payout path on the devnet-4 pair is the UX-04 batch's evidence; review B F12 and INT-03/INT-04 (8 October 2026): payout::intent_tests (a restart from the pre-broadcast snapshot, a lost send response, a crash on either side of the broadcast, a stuck transaction replaced under the same intent, a reorged receipt and a finality pause, a failed transaction, a ledger that cannot be written: never a duplicate or a lost obligation, finalised only under the chain's final lock) and state::ledger_tests (an unreadable ledger is refused or restored, never emptied); F13/INT-16: frame, admission and pool::share_tests (the frame bound while reading, the bounded outgoing queue, one membership per session, the nonce and in-flight bounds, the share and connection budgets); the devnet-4 pair's class (8 October 2026 21:24 UK): state_provider::tests::an_unsynced_node_hands_the_pool_no_state_and_no_job (no job on a node whose igneum_getExecStatus reads synced false, blocked or re-executing; known-failed first against the 8ff7a0f4 provider; pool-synced-guard-202 f3e99e9c on release-2.0.2, 986252e7 on pool-2.0, 52 of 52 on build-6)","release_identity":{"commit":"986252e73","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:48:42.741Z"},"suite:miner":{"requirement_id":"UX-04","decision":"NOT RUN","method":"native","cell":"suite:miner","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","in_progress":false,"coverage":"partial: payout label and share accounting tests; custody is the pool lane's row","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; miner on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"UX-05","title":"Keep voting keys with the miner through pooling","setup":"Use an honest pool and a modified pool that replaces worker identity or voting credentials.","steps":["Verify the consensus binding from performed work to the miner's retained key.","Attempt substitution, replay and reassignment without the miner's authorisation.","Leave the pool and verify retained voting/finality rights under F0."],"accept":"No silent transfer of governance/finality authority. If the protocol cannot establish retained keys, this requirement fails; a pool-protocol name or user-interface promise does not pass.","evidence":"Work/key binding vectors; malicious-pool attempts; leave-pool authority check.","priority":"BLOCKER","profile":"P01; P09","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":58,"owner_lane":"pool design seat (a3832b1c3b274b310)","run_status":"NOT RUN","evidence_path":"docs/analysis/pool/pool-pair-2026-10-08.md","run_id":"pool-2.0-20261008-03","updated":"2026-10-08T20:48:42.741Z","evidence_record":{"reason":"voting keys through pooling is the pool lane's row","at":"2026-10-08T20:48:42.741Z","method":"static","requirement_id":"UX-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"in_progress_since":"2026-10-08T19:58:33.370Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:pool":{"requirement_id":"UX-05","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"986252e73","run_id":"pool-2.0-20261008-03","evidence":"docs/analysis/pool/pool-pair-2026-10-08.md","in_progress":true,"coverage":"partial: the vote-key commitment on the wire (verify::tests::a_share_under_another_key_is_refused_before_the_hash: known-pass the member's key, known-fail another key on the share and a job naming another key, refused with code vote_key before the hash), the open pool's sidechain::check_key (the claimed key, the header's key and the reveal are one key), the same-nonce-other-template wrong_hash test, the TLS binding test; the malicious-pool run and the leave-and-retain run on the devnet-4 pair are the UX-05 batch's other evidence; review B INT-15 (8 October 2026): server::authorise_tests::a_replayed_proof_of_possession_is_not_an_authorisation (a public PoP replayed into another session, payout, pool or chain, or under another key, refused; only the challenge-bound binding v2 admits on a public network) and the_binding_policy_follows_the_network","release_identity":{"commit":"986252e73","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:48:42.741Z"}}},{"id":"UX-06","title":"Verify actual miner-selected work templates","setup":"Provide a pool interface with declared job-declaration support and independent miner templates.","steps":["Submit miner-selected valid transaction templates and verify what is actually hashed and accepted.","Have a pool substitute or censor templates and test local verification/fallback.","Measure payout and acceptance consequences without moving authority to the pool."],"accept":"The advertised selection control exists in accepted work, not only configuration. Undisclosed substitution is detected; supported independent operation remains practical under P10.","evidence":"Template commitments; accepted-block evidence; malicious-pool/fallback report.","priority":"BLOCKER","profile":"P01; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":58,"owner_lane":"shipper (ae892a8b0f78fe31c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"UX-06","decision":"NOT RUN","method":"native","cell":"suite:miner","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","in_progress":false,"coverage":"partial: the miner's own template selection tests","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; miner on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:miner":{"requirement_id":"UX-06","decision":"NOT RUN","method":"native","cell":"suite:miner","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/node-5d53a591/box4-miner.log","in_progress":false,"coverage":"partial: the miner's own template selection tests","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; miner on release-2.0.2-node 5d53a591 with the key-succession parent and the class v5 freeze igneum-pow (box4, 25s) | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."}}},{"id":"UX-07","title":"Expose actionable failures and safe updates","setup":"Create failed proofs, memory pressure, expired jobs, missing payouts and available software updates.","steps":["Ask independent users to identify the issue, stop safely and follow the recommended action.","Test explicit update approval, version visibility and a failed/corrupt update.","Confirm diagnostic exports remove keys and private inputs while retaining useful evidence."],"accept":"P10 task-success requirements hold; no silent update or false success state. Recovery instructions work on supported desktops and secret canaries never enter exported logs.","evidence":"Observed tasks; update traces; sanitised export tests.","priority":"BLOCKER","profile":"P09; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":59,"owner_lane":"shipper (ae892a8b0f78fe31c)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log; docs/plans/evidence/UX-01-20261008.md","run_id":"202-5d53a591-1176efb9","updated":"2026-10-09T00:33:39.243Z","evidence_record":{"requirement_id":"UX-07","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the refused-update and manifest tests; the update-return lane's install classes are its own rows","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"in_progress_since":"2026-10-08T19:32:50.856Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"suite:app":{"requirement_id":"UX-07","decision":"NOT RUN","method":"native","cell":"suite:app","manifest_sha":"5d53a591","run_id":"202-5d53a591-1176efb9","evidence":"build-1:/srv/artefacts/tas/202-5d53a591-1176efb9/miner-77b5acc5/box4-app.log","in_progress":false,"coverage":"partial: the refused-update and manifest tests; the update-return lane's install classes are its own rows","release_identity":{"commit":"5d53a591","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T00:33:39.243Z","note":"suite GREEN (rc 0, every test passed); the cell covers its cases partially, so the case reads NOT RUN in progress with this evidence until its own acceptance is exercised; app on release-2.0.2 77b5acc5 (box4, 39s); 77b5acc5..1176efb9 moves no crate, so the cell covers the tip by content | 2.0.2 pair gate on build-4, 00:26 UTC: kit 2: release-manifest-check green on 1176efb9 (node block kit2b-line 5d53a591); 77b5acc5..1176efb9 moves pool/ and packaging only; 5d53a591 = fix 2 + the wedge fix on kit 1's tree (cf32be79, the record-store fold, read red on the fresh-sync read at 00:55 and rides 2.0.3); kit 2 carries the roll and the entries on its own four-block rule-33 record, kit 1 re-cut 490ebcfe/5db25637 the clean fallback Every suite cell maps its cases partially, so the green suites read NOT RUN in progress with their logs as evidence, never PASS by inference. Kit 2's rule-33 record (four blocks) lands with the entries; INT-07's FAIL on 94e4c6ba stands until then."},"pc:install-update":{"requirement_id":"UX-07","decision":"NOT RUN","method":"team-reported","cell":"pc:install-update","manifest_sha":"aa354ed5","run_id":"ux-01-20261008-win-2.0.0","evidence":"docs/plans/evidence/UX-01-20261008.md","in_progress":true,"coverage":"partial: the install classes (the payload's stop step, the detached installer under a job, the installer refusing a wrong-version name, a stale install flag) and the no-click resume; the recovery-instruction and canary rows are the shipper's","release_identity":{"commit":"aa354ed5","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T20:42:25.701Z"}}},{"id":"UX-08","title":"Publish competitive accessible software","setup":"Provide open documented builds, tuning parameters and known fee conditions for all supported platforms.","steps":["Compare Ember against independently optimised permissible implementations on identical work.","Measure efficiency, fees, false rejection, installation and update transparency.","Scan for hidden developer fees, hardware whitelists, per-address privilege or undisclosed remote controls."],"accept":"P10 relative-efficiency limits hold and all fees/privileges are explicit. No self-reported device tier earns consensus advantage. A superior external implementation triggers investigation, not selective exclusion.","evidence":"Matched software comparison; code/config review; fee/privilege inventory.","priority":"GATE","profile":"P02; P10","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[14,21,25,26],"gate":"Operator readiness / G5","owner":"Desktop product + pool leads; independent usability study","manual_page":59,"owner_lane":"hash lane (a690540514aa453d7)","run_status":"NOT RUN","evidence_path":"build-1:/srv/artefacts/tas/site-gate-6a47f1f8/pre-push.log","run_id":"site-gate-20261009-01","updated":"2026-10-09T07:36:07.241Z","evidence_record":{"requirement_id":"UX-08","decision":"NOT RUN","method":"static","cell":"gate:pre-push","manifest_sha":"6a47f1f8","run_id":"site-gate-20261009-01","evidence":"build-1:/srv/artefacts/tas/site-gate-6a47f1f8/pre-push.log","in_progress":true,"coverage":"partial: the site gate on every served page, plus docs/build/tuning.md (the published tuning and build-settings half, the hash lane's); the open builds and the fee conditions are the shipper's and the site lane's","release_identity":{"commit":"6a47f1f8","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: the served pages are checked, no claim moves","reviewer":"","at":"2026-10-09T07:36:07.241Z","note":"the site branch's box gate on 6a47f1f8 (build-2, --ci mode): 7 checks GREEN in 41 s, among them the launch-gates, forbidden-strings and scope checks on the served site that the cell's partial coverage names; a gate run is evidence for the cell, not a verdict on the case (the steward's word)"},"in_progress_since":"2026-10-08T18:28:32.408Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"gate:pre-push":{"requirement_id":"UX-08","decision":"NOT RUN","method":"static","cell":"gate:pre-push","manifest_sha":"6a47f1f8","run_id":"site-gate-20261009-01","evidence":"build-1:/srv/artefacts/tas/site-gate-6a47f1f8/pre-push.log","in_progress":true,"coverage":"partial: the site gate on every served page, plus docs/build/tuning.md (the published tuning and build-settings half, the hash lane's); the open builds and the fee conditions are the shipper's and the site lane's","release_identity":{"commit":"6a47f1f8","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: the served pages are checked, no claim moves","reviewer":"","at":"2026-10-09T07:36:07.241Z","note":"the site branch's box gate on 6a47f1f8 (build-2, --ci mode): 7 checks GREEN in 41 s, among them the launch-gates, forbidden-strings and scope checks on the served site that the cell's partial coverage names; a gate run is evidence for the cell, not a verdict on the case (the steward's word)"}}}],"notes":[{"at":"2026-10-08T19:32:51.045Z","text":"F14 (Review B), the founder's ruling 8 October 19:57 UK: the public miner ships from 2.0.2 without remote jobs; our own fleet runs the lab build with its own signing root"}]},{"code":"COM","title":"Paid demand and sustainable delivery","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","fixtures":"F8 real consenting customers; F7 full service costs; private identity proofs","summary":"Devnet payouts and subsidised pilots demonstrate mechanics, not independent willingness to pay.","tests":[{"id":"COM-01","title":"Deliver a genuine contracted proof pilot","setup":"Select one real external customer with a meaningful fixed workload and no required migration to Igneum.","steps":["Agree program, inputs, proof format, deadline, price, failure/refund policy and verification method.","Run paid jobs through ordinary independently operated infrastructure.","Have the customer verify usefulness, correctness and its reason for choosing the service."],"accept":"The pilot satisfies its actual contract and settles genuine external payment. Trial subsidies are disclosed and cannot satisfy the repeat-demand gate; no invented customer or testimonial.","evidence":"Redacted contract; verified jobs; settlement proof; consented customer confirmation.","priority":"GATE","profile":"P07; P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":60,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"commercial evidence, no automated harness","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"commercial evidence, no automated harness","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-02","title":"Establish independent repeat purchasing","setup":"Use the P14 multi-customer observation period and ownership/conflict checks.","steps":["Track paid purchases on distinct occasions, including refunds and stopped customers.","Audit related parties, project reimbursements, token grants and circular funding.","Reconcile external cash received with correctly delivered meaningful work."],"accept":"P14 buyer, duration and volume minima are met without reimbursement or related-party substitution. Repeat orders are separate buying decisions, not a single payment split into many jobs.","evidence":"Anonymised buyer ledger; repeat-order dates; conflict review; net receipts.","priority":"GATE","profile":"P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":60,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-03","title":"Demonstrate service and operator margins","setup":"Allocate all delivery costs, including aggregation, retries, hardware, power, host, network and support.","steps":["Calculate gross contribution and fully loaded unit costs for each contracted workload.","Reconcile a representative operator's realised earnings against metered costs and opportunity cost.","Repeat under the declared demand and price sensitivities."],"accept":"P14 contribution targets hold and at least the required operator cohort has positive realised contribution. Excluded overhead is visible; token appreciation or unpriced founder labour cannot silently create profitability.","evidence":"Unit-economics ledger; metered operator sample; allocation rules; sensitivity report.","priority":"GATE","profile":"P12; P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":60,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-04","title":"Meet the customer service guarantee","setup":"Observe actual delivery deadlines, validity, failure handling and support over the contracted period.","steps":["Count all accepted jobs, including failed, retried and abandoned cases.","Have the customer independently verify results and invoke one authorised refund/failure exercise.","Compare offered capacity and quoted price with what was actually delivered."],"accept":"P07 and contracted obligations hold; validity has zero accepted exceptions. Failure terms are honoured, and demand beyond capacity is explicitly refused rather than quietly omitted from metrics.","evidence":"Customer-verifier records; SLO report; refunds; promised-versus-delivered comparison.","priority":"BLOCKER","profile":"P01; P07; P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":61,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-05","title":"Compare against the buyer's real alternative","setup":"Identify a credible alternative supplier or in-house option for the same workload, proof format and security.","steps":["Obtain comparable quotes or consented measured trials at the evaluation date.","Include integration, verification, deadlines and all operational costs, not only proof-generation time.","Document the customer's actual trade-off without inventing unavailable comparator evidence."],"accept":"P15 commercial comparison is satisfied with like-for-like scope and a evidenced purchase reason. Missing alternative data remains MISSING; it is not scored as an Igneum win.","evidence":"Dated comparison; workload/security match; customer decision record.","priority":"GATE","profile":"P14; P15","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":61,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-06","title":"Retain buyers after the pilot and subsidy period","setup":"Follow all recruited customers through the P14 observation period, including churn.","steps":["Remove disclosed trial incentives before measuring repeat demand.","Track renewal, expansion, cancellation reasons, unresolved incidents and buyer concentration.","Review whether one affiliated or subsidised buyer dominates the apparent market."],"accept":"P14 repeat/concentration conditions hold with honest denominator and churn reporting. Paying demand survives beyond a demonstration; unsatisfied or departed buyers are not removed retrospectively.","evidence":"Cohort/renewal ledger; churn notes; concentration and incentive report.","priority":"GATE","profile":"P14","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":61,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"commercial evidence","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"COM-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-07","title":"Fund maintenance without assumed appreciation","setup":"Prepare a costed plan for development, review, infrastructure, support and incident response.","steps":["Separate committed resources from revenue dependent on adoption or token price.","Stress lower income and an unexpected security/operations expense.","Verify responsible owners and continuity arrangements without changing fair-launch promises."],"accept":"P13 committed-runway requirement holds and downside responses are documented. No uncommitted financing, rising token price or burn accounting is presented as available maintenance funding.","evidence":"Budget and commitment evidence; downside plan; owner/continuity roster.","priority":"GATE","profile":"P13","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":62,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T20:10:24.556Z","deferral_note":"P13 deferred by the founder (8 October 2026, 18:2x UK: \"forget P13 for now\")","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_record":{"reason":"commercial evidence","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"COM-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"commercial evidence","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"COM-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"COM-08","title":"Let independent developers build useful integrations","setup":"Recruit unaffiliated developers unfamiliar with unpublished implementation details.","steps":["Use public docs to deploy a supported application or integrate an external proof request and verification flow.","Record time, undocumented dependencies, workarounds and correctness issues.","Retest after documentation fixes without founder-written hidden integration code."],"accept":"P14 developer-task minimum passes on the final release; all required public instructions exist. Successful bytecode deployment alone does not count as a working application or service integration.","evidence":"Consented developer logs; public examples; issue closure; verified end-to-end journeys.","priority":"GATE","profile":"P09; P14","cadence":"Release candidate; repeat after relevant changes","method":"Independent integration study","status":"NOT RUN","source":[4,17,18,24,26,27,31,32,33],"gate":"Commercial evidence","owner":"Commercial lead + independent financial/customer reviewer","manual_page":62,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}}]},{"code":"LEAD","title":"Comparative leadership evidence","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","fixtures":"F8 peer/customer studies; full signed technical evidence; 90-day observation","summary":"A serious contention claim requires comparative outcomes and real adoption evidence, not just an internally green test dashboard.","tests":[{"id":"LEAD-01","title":"Register a fair contemporary comparison","setup":"Choose at least the P15 peer coverage and an evaluation date before collecting confirmatory results.","steps":["Include the plan's Ravencoin, Ergo and Firo reference set where comparable, then check for other relevant current options.","Freeze versions, supported hardware, methods, noninferiority margins and commercial alternatives.","Publish exclusions and prohibit cross-algorithm raw-hashrate comparisons."],"accept":"The protocol covers material alternatives fairly and is signed independently. A missing or non-comparable feature is not scored zero; no arbitrary universal rank is inferred from selected metrics.","evidence":"Timestamped peer protocol; source/version records; comparison/exclusion rationale.","priority":"GATE","profile":"P15","cadence":"Release candidate; repeat after relevant changes","method":"Pre-registered comparative study","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":63,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"LEAD-02","title":"Demonstrate comparable operator advantages","setup":"Use matched user tasks and operating conditions on the selected GPU-first networks.","steps":["Measure install-to-first-accepted-work, software overhead versus each network's tuned baseline, payout friction and retained control.","Measure rejection/availability under the same network conditions; report fees separately.","Use blinded analysis where possible and independent runs for decisive differences."],"accept":"P15 noninferiority and superiority requirements hold on meaningful comparable dimensions. No raw hashes from different algorithms are compared, and transient token price is not labelled engineering superiority.","evidence":"Matched task data; uncertainty/effect sizes; independent comparison report.","priority":"GATE","profile":"P02; P10; P15","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":63,"owner_lane":"site lane (a846fd66b5403e35a)","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"leadership comparison, an observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"leadership comparison, an observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"LEAD-03","title":"Substantiate the specialist-coexistence claim","setup":"Assemble G1-G4 plus frozen rules and all surviving-adversary assumptions.","steps":["Have independent reviewers trace each public competitiveness statement to its narrowest evidence.","Separate measured GPUs, modelled silicon and economic scenarios in all summaries.","Evaluate residual uncertainty, excluded technologies and the no-new-rules counterfactual."],"accept":"All claimed envelopes meet P04/P12 without unsupported universal bounds. Reviewers agree the evidence supports scoped commodity competitiveness even when chips remain compatible; an exact chip-arrival probability is not inferred.","evidence":"Claim-to-evidence map; signed envelope review; limitations statement.","priority":"GATE","profile":"P04; P12; P15","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":63,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"LEAD-04","title":"Observe ordinary-operator retention and margins","setup":"Recruit the P16 independent cohort before observing results; use privacy-preserving evidence.","steps":["Follow participation, realised margin, hardware changes, failures and reasons for leaving for 90 days.","Report trial incentives separately and include every initial participant in retention denominators.","Compare behaviour with matched alternatives where feasible; disclose absence of an actual downturn."],"accept":"P16 retention/margin minima hold with verified independence and no removal of churned users. Simulated downturns cannot be called observed bear-market retention; historical claims stay limited to the period measured.","evidence":"Pseudonymous cohort ledger; margin/retention calculations; departure reasons.","priority":"GATE","profile":"P12; P16","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":64,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"LEAD-05","title":"Measure control and dependency concentration","setup":"Audit operational control of mining, voting, proving, aggregation, hosting and software distribution separately.","steps":["Use opt-in attestations, observed dependencies and independent corroboration; disclose uncertain common ownership.","Compare concentration and provider-removal outcomes to the approved security and availability assumptions.","Check that pooled payments do not hide authority concentration and hardware vendors are not equated with operators."],"accept":"P11/P16 concentration requirements hold within disclosed uncertainty; unidentified control cannot be counted as independent. No single removable dependency is falsely marketed as decentralised operation.","evidence":"Control/failure-domain map; uncertainty notes; concentration/removal results.","priority":"GATE","profile":"P11; P16","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":64,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"LEAD-06","title":"Complete the reliability observation window","setup":"Observe the final candidate and approved compatible updates for the full P16 real-time period.","steps":["Measure promised service availability, invalid acceptance, finality safety, payouts and incident impact.","Reconcile external probes, customer records and operator logs, including maintenance and exclusions.","Repeat affected critical tests after every material change; reset observation where comparability breaks."],"accept":"P16 availability and safety criteria hold on live observation; no hidden downtime or compressed-time substitution. This supports the recorded window only, not multi-year operational maturity.","evidence":"90-day SLO ledger; independent probes; incident reports; change/retest history.","priority":"BLOCKER","profile":"P01; P16","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":64,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}},{"id":"LEAD-07","title":"Issue an independent contender assessment","setup":"Provide the full evidence packet, commercial results, comparative study and unresolved-limit register to the panel.","steps":["Check every mandatory and claimed-option test, source requirement and approved threshold.","Require separate signoffs for hardware/economics, security/operations and customer/operator evidence.","Document dissent and challenge any inference that passing an internal checklist proves number-one rank."],"accept":"Every required gate is PASS with no unresolved material challenge, critical/high defect or missing comparator/customer evidence. The panel supports a credible leadership-contender conclusion within scope, not a guaranteed rank.","evidence":"Signed assessment; full status index; dissent/limitations; approved claim wording.","priority":"GATE","profile":"P00; P15; P16","cadence":"Release candidate; repeat after relevant changes","method":"Independent final assessment","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":65,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08 18:3x UK","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"LEAD-08","title":"Keep leadership claims valid after release","setup":"Define material-change triggers and scheduled reviews before publishing the assessment.","steps":["Refresh competitor, hardware-cost, demand and security evidence at the P16 cadence.","Test a newly credible specialist, lost customer, major outage and verifier change against invalidation rules.","Withdraw or narrow stale claims promptly while publishing the new evidence status."],"accept":"Claims remain dated, scoped and revisable; material contrary evidence reopens the appropriate gate. The network may remain usable while a leadership claim is suspended. No permanent self-awarded certification.","evidence":"Review calendar; invalidation drills; versioned public claim register.","priority":"GATE","profile":"P00; P16","cadence":"Release candidate; repeat after relevant changes","method":"Automated + independent review","status":"NOT RUN","source":[4,22,25,27,31,32,33],"gate":"Leadership-contender decision","owner":"Independent assessment panel + product/economics reviewers","manual_page":65,"owner_lane":"main / the founder","run_status":"NOT RUN","evidence_path":"","run_id":"","updated":"2026-10-08T19:22:31.798Z","evidence_record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null},"evidence_records":{"record":{"reason":"observation window","at":"2026-10-08T19:22:31.798Z","method":"static","requirement_id":"LEAD-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"run_id":"","evidence":"","in_progress":false}}}]},{"code":"REV","title":"REV: the external review's required regressions","source":"docs/analysis/review-2026-10-08-b/findings.json and docs/analysis/review-2026-10-08-b/dispatch.md; ids from the master traceability register","gate":"Review findings closed","owner":"the owner lanes per the dispatch table","fixtures":["F0","F5"],"summary":"44 regressions from 14 findings; each reads NOT RUN until its owner lane records a run","tests":[{"id":"R2-F01-R01","title":"Valid proof A, warm cache, carried statement B: refuse exactly as a cold node does.","setup":"The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).","steps":["Valid proof A, warm cache, carried statement B: refuse exactly as a cold node does."],"accept":"Valid proof A, warm cache, carried statement B: refuse exactly as a cold node does.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F01"],"gate":"Review findings closed","owner":"proving lane, node lane","manual_page":null,"finding":"R2-F01","finding_title":"Proof-verdict cache omits the statement being verified","finding_priority":"P0 - public/value-bearing release blocker","owner_lane":"proving lane, node lane","run_status":"NOT RUN","base_test_ids":["ZKP-02","ZKP-03","ZKP-04","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F01-R02","title":"Run valid/invalid contexts in both orders, concurrently and across cache eviction/restart.","setup":"The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).","steps":["Run valid/invalid contexts in both orders, concurrently and across cache eviction/restart."],"accept":"Run valid/invalid contexts in both orders, concurrently and across cache eviction/restart.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F01"],"gate":"Review findings closed","owner":"proving lane, node lane","manual_page":null,"finding":"R2-F01","finding_title":"Proof-verdict cache omits the statement being verified","finding_priority":"P0 - public/value-bearing release blocker","owner_lane":"proving lane, node lane","run_status":"NOT RUN","base_test_ids":["ZKP-02","ZKP-03","ZKP-04","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F01-R03","title":"Change payout, network, kind, program ID and activation context; no accepted misbinding.","setup":"The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).","steps":["Change payout, network, kind, program ID and activation context; no accepted misbinding."],"accept":"Change payout, network, kind, program ID and activation context; no accepted misbinding.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F01"],"gate":"Review findings closed","owner":"proving lane, node lane","manual_page":null,"finding":"R2-F01","finding_title":"Proof-verdict cache omits the statement being verified","finding_priority":"P0 - public/value-bearing release blocker","owner_lane":"proving lane, node lane","run_status":"NOT RUN","base_test_ids":["ZKP-02","ZKP-03","ZKP-04","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F01-R04","title":"A native two-node test must agree on block validity and payouts despite different cache histories.","setup":"The regression R2-F01 requires (review R2 finding F01: Proof-verdict cache omits the statement being verified).","steps":["A native two-node test must agree on block validity and payouts despite different cache histories."],"accept":"A native two-node test must agree on block validity and payouts despite different cache histories.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F01"],"gate":"Review findings closed","owner":"proving lane, node lane","manual_page":null,"finding":"R2-F01","finding_title":"Proof-verdict cache omits the statement being verified","finding_priority":"P0 - public/value-bearing release blocker","owner_lane":"proving lane, node lane","run_status":"NOT RUN","base_test_ids":["ZKP-02","ZKP-03","ZKP-04","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F01 (P0, the external review): the regression's harness is the owner lane's (proving lane, node lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F01-R04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F02-R01","title":"Release build cannot activate test bypass.","setup":"The regression R2-F02 requires (review R2 finding F02: Proof-rule infrastructure can fail open).","steps":["Release build cannot activate test bypass."],"accept":"Release build cannot activate test bypass.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F02"],"gate":"Review findings closed","owner":"proving lane, CI steward","manual_page":null,"finding":"R2-F02","finding_title":"Proof-rule infrastructure can fail open","finding_priority":"P0 - release configuration blocker","owner_lane":"proving lane, CI steward","run_status":"NOT RUN","base_test_ids":["GOV-05","ZKP-01","ZKP-07","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F02 (P0, the external review): the regression's harness is the owner lane's (proving lane, CI steward); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F02-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F02 (P0, the external review): the regression's harness is the owner lane's (proving lane, CI steward); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F02-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F02-R02","title":"Missing oracle or pinned keys prevents service readiness after enforcement activation.","setup":"The regression R2-F02 requires (review R2 finding F02: Proof-rule infrastructure can fail open).","steps":["Missing oracle or pinned keys prevents service readiness after enforcement activation."],"accept":"Missing oracle or pinned keys prevents service readiness after enforcement activation.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F02"],"gate":"Review findings closed","owner":"proving lane, CI steward","manual_page":null,"finding":"R2-F02","finding_title":"Proof-rule infrastructure can fail open","finding_priority":"P0 - release configuration blocker","owner_lane":"proving lane, CI steward","run_status":"NOT RUN","base_test_ids":["GOV-05","ZKP-01","ZKP-07","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F02 (P0, the external review): the regression's harness is the owner lane's (proving lane, CI steward); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F02-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F02 (P0, the external review): the regression's harness is the owner lane's (proving lane, CI steward); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F02-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F02-R03","title":"Missing proof bytes retry without incorrectly marking a valid block permanently invalid.","setup":"The regression R2-F02 requires (review R2 finding F02: Proof-rule infrastructure can fail open).","steps":["Missing proof bytes retry without incorrectly marking a valid block permanently invalid."],"accept":"Missing proof bytes retry without incorrectly marking a valid block permanently invalid.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F02"],"gate":"Review findings closed","owner":"proving lane, CI steward","manual_page":null,"finding":"R2-F02","finding_title":"Proof-rule infrastructure can fail open","finding_priority":"P0 - release configuration blocker","owner_lane":"proving lane, CI steward","run_status":"NOT RUN","base_test_ids":["GOV-05","ZKP-01","ZKP-07","ZKP-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F02 (P0, the external review): the regression's harness is the owner lane's (proving lane, CI steward); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F02-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F02 (P0, the external review): the regression's harness is the owner lane's (proving lane, CI steward); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F02-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F03-R01","title":"Clean build from one manifest, including the pool and workers, with no unpublished vendor tree.","setup":"The regression R2-F03 requires (review R2 finding F03: The bundle contains a v6 candidate, not a demonstrated integrated v6 release).","steps":["Clean build from one manifest, including the pool and workers, with no unpublished vendor tree."],"accept":"Clean build from one manifest, including the pool and workers, with no unpublished vendor tree.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F03"],"gate":"Review findings closed","owner":"CI steward, hash lane (ProgramClass::V6 on freeze), pool lane","manual_page":null,"finding":"R2-F03","finding_title":"The bundle contains a v6 candidate, not a demonstrated integrated v6 release","finding_priority":"P0 - freeze/integration blocker","owner_lane":"CI steward, hash lane (ProgramClass::V6 on freeze), pool lane","run_status":"PASS","base_test_ids":["GOV-01","GOV-03","POW-01","ROT-02"],"run_id":"f03-manifest-20261008-01","evidence_path":"build-1:/srv/artefacts/tas/f03-manifest-20261008-01/build-from-manifest-c30ab32c-build4.log; build-4:/srv/builds/igneum-wt-f03-201; tools/ci/build-from-manifest.sh; tools/ci/release-manifest-check.sh","updated":"2026-10-08T21:11:46.383Z","evidence_record":{"requirement_id":"R2-F03-R01","decision":"PASS","method":"static","cell":"harness:release-manifest","manifest_sha":"c30ab32c","run_id":"f03-manifest-20261008-01","evidence":"build-1:/srv/artefacts/tas/f03-manifest-20261008-01/build-from-manifest-c30ab32c-build4.log; build-4:/srv/builds/igneum-wt-f03-201; tools/ci/build-from-manifest.sh; tools/ci/release-manifest-check.sh","in_progress":false,"coverage":"full for the components the tree builds (node, miner, pool, app, prove-host from one manifest, no unpublished vendor tree); the GPU workers are the kit's cross-build and read under the shipper's kit-isa line, not this cell","release_identity":{"commit":"c30ab32c","lockfile":"the release tree's Cargo.lock files at c30ab32c","binary":"cargo check only: no binary is claimed by this cell; the fleet binaries are the shipper's kit on aa0e0f45","network_object":"igneum-devnet-4, chain id 4465","activation":"none (a build fact)","profile_hashes":"release-manifest-check: every component's own pin equals packaging/release-manifest.json"},"claim_impact":"F03's first rung: one manifest, one build, no unpublished vendor tree; the same-work rung (R02) and the transition rung (R03) stay NOT RUN until the readers run on the job context","reviewer":"","at":"2026-10-08T21:11:46.383Z"},"evidence_records":{"harness:release-manifest":{"requirement_id":"R2-F03-R01","decision":"PASS","method":"static","cell":"harness:release-manifest","manifest_sha":"c30ab32c","run_id":"f03-manifest-20261008-01","evidence":"build-1:/srv/artefacts/tas/f03-manifest-20261008-01/build-from-manifest-c30ab32c-build4.log; build-4:/srv/builds/igneum-wt-f03-201; tools/ci/build-from-manifest.sh; tools/ci/release-manifest-check.sh","in_progress":false,"coverage":"full for the components the tree builds (node, miner, pool, app, prove-host from one manifest, no unpublished vendor tree); the GPU workers are the kit's cross-build and read under the shipper's kit-isa line, not this cell","release_identity":{"commit":"c30ab32c","lockfile":"the release tree's Cargo.lock files at c30ab32c","binary":"cargo check only: no binary is claimed by this cell; the fleet binaries are the shipper's kit on aa0e0f45","network_object":"igneum-devnet-4, chain id 4465","activation":"none (a build fact)","profile_hashes":"release-manifest-check: every component's own pin equals packaging/release-manifest.json"},"claim_impact":"F03's first rung: one manifest, one build, no unpublished vendor tree; the same-work rung (R02) and the transition rung (R03) stay NOT RUN until the readers run on the job context","reviewer":"","at":"2026-10-08T21:11:46.383Z"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F03-R02","title":"Same job context produces identical accepted work in node, CPU reference, CUDA, Metal, OpenCL and pool.","setup":"The regression R2-F03 requires (review R2 finding F03: The bundle contains a v6 candidate, not a demonstrated integrated v6 release).","steps":["Same job context produces identical accepted work in node, CPU reference, CUDA, Metal, OpenCL and pool."],"accept":"Same job context produces identical accepted work in node, CPU reference, CUDA, Metal, OpenCL and pool.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F03"],"gate":"Review findings closed","owner":"CI steward, hash lane (ProgramClass::V6 on freeze), pool lane","manual_page":null,"finding":"R2-F03","finding_title":"The bundle contains a v6 candidate, not a demonstrated integrated v6 release","finding_priority":"P0 - freeze/integration blocker","owner_lane":"CI steward, hash lane (ProgramClass::V6 on freeze), pool lane","run_status":"NOT RUN","base_test_ids":["GOV-01","GOV-03","POW-01","ROT-02"],"run_id":"same-work-20261008-03","evidence_path":"docs/design/class-v5-stored-state.md; build-1:/srv/artefacts/packs/packs-class-v6-20261008T202808Z.zip; build-1:/srv/builds/_log/v5-class/kits-20261008T202808Z/emu-check.log; build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-03/state-epoch2.igsd1; build-1:/srv/artefacts/tas/same-work-20261008-03/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/README.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-3.json; docs/design/class-v5-stored-state.md; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node.log; build-1:/srv/artefacts/tas/same-work-20261008-02/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/README.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-1.json; docs/design/class-v5-stored-state.md; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/opencl-rx7600-take2.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-3.json","updated":"2026-10-09T08:57:42.458Z","evidence_record":{"requirement_id":"R2-F03-R02","decision":"PASS","method":"GPU","cell":"harness:same-work","manifest_sha":"c30ab32c","run_id":"same-work-20261008-03","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-03/state-epoch2.igsd1; build-1:/srv/artefacts/tas/same-work-20261008-03/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/README.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-3.json; docs/design/class-v5-stored-state.md","in_progress":false,"coverage":"partial until every reader has run: bit-for-bit agreement per nonce across node, CPU reference, CUDA, OpenCL, Metal and pool on one job context","release_identity":{"commit":"c30ab32c (release-2.0.1; the class v5 freeze 1c420786, fingerprint cbc5bd0a); the CUDA reader the kit's gen 5 worker 9bfcf728","lockfile":"","binary":"igneum-pow sha256 7ba781db... (release-2.0.1 c30ab32c, built on build-4); igneum-worker-cuda gen 5 sha256 9bfcf728...","network_object":"igneum-devnet-4's class v5 object at epoch 2: id 0x81fbfa3aa413173f, epoch seed 3c3fab43... (the epoch-2 seed block, chain block 3423, common to every chain tonight: the split came after it), day 20734, era 0 seed 7c36b833... (class v5 reads no era; the id is the same under era zero), state stream state-epoch2.igsd1 (sha256 f36e6bba..., 21,132 bytes, 224 records, root 0xf798d1d8...) pulled at 22:18 UK from build-1's seed EVM RPC port 27810","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"R2-F03-R02 and R03 on the live chain's class v5 object 0x81fbfa3aa413173f at epoch 2: node (the release line, kit 1's pair 94e4c6ba, and the D1 branch), CPU reference, CUDA (5090, 4090, 3090), OpenCL (RX 7600), Metal (Apple M6) and the pool on the 2.0.2 kit as pinned produce identical accepted work on every nonce of three 2^20 phases with the dataset-day switch 20734 to 20735 at one nonce; the readers are the shipped binaries. Context 02 (build-1:/srv/artefacts/tas/same-work-20261008-02, the class v6 object) reads the same on all six readers with the pool on the D1 pairing; this record names its evidence too because the recorder keys one record per cell","reviewer":"","at":"2026-10-09T08:57:42.458Z","note":"PASS: node x3 on the release line and x3 on the D1 branch, pool x3 on the 2.0.2 kit as pinned, CPU reference, CUDA 5090/4090/3090 x3 each, OpenCL x3, Metal x3, every nonce equal; context 02 likewise (its files cited beside) | On an island, not a network: build-1's seed is one of devnet-4's islands since the epoch-3 cut (21:34 UK), its stream pulled at 22:18 UK; epoch 2's object predates the split. Context 03 at build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json (sha256 53837a96...). The witness for the id: igneum-miner program-id reads class v5 attempt 0 id 81fbfa3aa413173f under era 7c36b833... and era 00..00 alike, from the miner at same-work-node cc23f9bd on build-2 (the class v5 engine path; the 2.0.1 pair's miner ef0f2ed8 on build-1 has no program-id subcommand), and the node lane's placed (c) read gave the same id; the hand's RPC port port 26870 answered no published state stream for the block at 22:18 UK. Packs v5-epoch2-d20734 and d20735 (both id 0x81fbfa3aa413173f) exported from release-2.0.1's igneum-pow on build-4 at 22:19 UK; the CPU references from release-2.0.1's igneum-pow (binary 7ba781db...) on build-4 under watchers, 22:20 to 00:21 UK (about 210 nonces a second a run; the one slip of the night, reported once), ref-D 873528b1... over [0, 1572864) and ref-D1 7f8e64ae... over [1572864, 3145728), read back on build-1 at 00:22 UK. NODE, two readers, both PASS on all three phases (00:27, 00:31, 00:35 UK; 1,048,576 agree each, 0 disagree, 0 missing; program id 0x81fbfa3aa413173f on every segment equal to the packs'; the day switch at 1572864 with both boundary hashes equal to the reference, 21488c8bc924c342 before and 08d55958274e224d after; genesis day 20734 installed, growth doublings 0): the RELEASE LINE, igneum-miner from kit 1's pair build-1:/srv/artefacts/200-94e4c6ba/node-lane (binary sha256 41cc0a82..., the recheck-vectors commits cherry-picked onto kit1-line 94e4c6ba = release-2.0.2-node without the v6 arm, the class v5 engine the kit ships), node-release-94e4c6ba/node-{1,2,3}.json (ac60f395..., 97f9758e..., bad64c5c...); and the D1 branch, same-work-node cc23f9bd (merged onto class-v6-node-review as fe0fdc59; binary 9d563c41...), node-same-work-node-cc23f9bd/node-{1,2,3}.json (7b1254f1..., a9da16a9..., 09ec9202...), the two readers' hashes equal to each other and to the reference on every nonce. CUDA, the kit's generation 5 worker 9bfcf728 on the driver at c8b65a26 or later: the 5090 PASS on all three phases (00:25 to 00:28 UK, cuda-5090-{1,2,3}.json 7040a0ab..., 86ff7bc4..., 3e3ec63f...) and the 4090 PASS on all three (00:30 to 00:33 UK, cuda-4090-{1,2,3}.json 1cb9efe5..., 6a52d5bb..., 1efffdde...), the day switch driven through the worker's prepare on each; The 3090 PASS on all three phases (05:11 to 05:14 UK; cuda-3090-{1,2,3}.json de68d6d3..., 7f66ee96..., 00840cc9...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. POOL, the 2.0.2 kit as pinned (release-2.0.2 77b5acc5's pool with node 7cfa422a, binary sha256 46e4c440..., on build-6, genesis day 20734 and dataset 2^28 from the pack): PASS on all three phases (00:28, 00:33, 00:38 UK; 1,048,576 agree each, 0 disagree, 0 missing; the boundary switched at 1572864 with one program id on both segments; 64, 128 and 64 of the sampled shares accepted through the share verifier), pool/kit-row/pool-{1,2,3}.json (c77d1276..., b30d4b65..., 957954e7...) with the README; every nonce of 3,145,728 agrees with the reference on the chain's own class v5 object through the kit as pinned. OPENCL, the first rig's RX 7600 (gfx1102) on the generation 6 OpenCL worker 247a8467... (it serves generators 2 to 6): PASS on all three phases (the job run-ca3-pc1-samework03-opencl-7600-20261009, 05:56 to 05:58 UK): phase 1 digest 12430d25..., phase 2 310b2855... across the day switch 20734 to 20735 at 1572864 (the D+1 pack prepared in 853 ms, the worker's 'switched (class v5)' line, the boundary block 8,192 of 8,192 lines), phase 3 8da9e791..., each 1,048,576 of 1,048,576 equal to the reference slices; 'RESULT verdict all PASS context=same-work-20261008-03 reader=opencl card=rx7600'; the report opencl-rx7600.report.txt (sha256 1164d653..., read back on build-1 at 06:00 UK; both pack ids 0x81fbfa3aa413173f generator 5 in its RESULT lines). The rows stay NOT RUN in progress until every reader has read (the coordinator's ruling 23:1x UK). METAL, the project's macOS machine (Apple M6) on the serve worker igneum-worker-metal 5aeddcba... (built from class-v6 755c2dbcf by the hash lane), the driver on master with --prepare-first, 08:30 to 08:31 UK: PASS on all three phases, metal-{1,2,3}.json 56eee459..., 1e7610a6..., 2b4f04d7... (read back on build-1 at 09:41 UK), 1,048,576 agree each, 0 disagree, 0 missing, the day switch at 1572864 with the boundary hashes 21488c8bc924c342 before and 08d55958274e224d after, equal to every other reader's. Every one of the six readers has read every nonce of the three phases and agrees bit for bit with the CPU reference and with each other, the day switch seen at one nonce by all (the coordinator's ruling 23:1x UK: the rows turn when the sixth reader reads).","network_label":"on an island, not a network"},"evidence_records":{"kit:class-v6-fingerprints":{"requirement_id":"R2-F03-R02","decision":"NOT RUN","method":"GPU","cell":"kit:class-v6-fingerprints","manifest_sha":"ef0f2ed8","run_id":"kit-class-v6-20261008-01","evidence":"docs/design/class-v5-stored-state.md; build-1:/srv/artefacts/packs/packs-class-v6-20261008T202808Z.zip; build-1:/srv/builds/_log/v5-class/kits-20261008T202808Z/emu-check.log","in_progress":true,"coverage":"partial: the worker half (CPU reference, CUDA, Metal, OpenCL) on the same program packs; the node's and the pool's accepted work on the same job context are the CI steward's and the pool lane's cells; PASS only when every listed platform reads one fingerprint and the node and pool halves are green","release_identity":{"commit":"ef0f2ed8","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-08T21:18:18.084Z"},"harness:same-work":{"requirement_id":"R2-F03-R02","decision":"PASS","method":"GPU","cell":"harness:same-work","manifest_sha":"c30ab32c","run_id":"same-work-20261008-03","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-03/state-epoch2.igsd1; build-1:/srv/artefacts/tas/same-work-20261008-03/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/README.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-3.json; docs/design/class-v5-stored-state.md","in_progress":false,"coverage":"partial until every reader has run: bit-for-bit agreement per nonce across node, CPU reference, CUDA, OpenCL, Metal and pool on one job context","release_identity":{"commit":"c30ab32c (release-2.0.1; the class v5 freeze 1c420786, fingerprint cbc5bd0a); the CUDA reader the kit's gen 5 worker 9bfcf728","lockfile":"","binary":"igneum-pow sha256 7ba781db... (release-2.0.1 c30ab32c, built on build-4); igneum-worker-cuda gen 5 sha256 9bfcf728...","network_object":"igneum-devnet-4's class v5 object at epoch 2: id 0x81fbfa3aa413173f, epoch seed 3c3fab43... (the epoch-2 seed block, chain block 3423, common to every chain tonight: the split came after it), day 20734, era 0 seed 7c36b833... (class v5 reads no era; the id is the same under era zero), state stream state-epoch2.igsd1 (sha256 f36e6bba..., 21,132 bytes, 224 records, root 0xf798d1d8...) pulled at 22:18 UK from build-1's seed EVM RPC port 27810","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"R2-F03-R02 and R03 on the live chain's class v5 object 0x81fbfa3aa413173f at epoch 2: node (the release line, kit 1's pair 94e4c6ba, and the D1 branch), CPU reference, CUDA (5090, 4090, 3090), OpenCL (RX 7600), Metal (Apple M6) and the pool on the 2.0.2 kit as pinned produce identical accepted work on every nonce of three 2^20 phases with the dataset-day switch 20734 to 20735 at one nonce; the readers are the shipped binaries. Context 02 (build-1:/srv/artefacts/tas/same-work-20261008-02, the class v6 object) reads the same on all six readers with the pool on the D1 pairing; this record names its evidence too because the recorder keys one record per cell","reviewer":"","at":"2026-10-09T08:57:42.458Z","note":"PASS: node x3 on the release line and x3 on the D1 branch, pool x3 on the 2.0.2 kit as pinned, CPU reference, CUDA 5090/4090/3090 x3 each, OpenCL x3, Metal x3, every nonce equal; context 02 likewise (its files cited beside) | On an island, not a network: build-1's seed is one of devnet-4's islands since the epoch-3 cut (21:34 UK), its stream pulled at 22:18 UK; epoch 2's object predates the split. Context 03 at build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json (sha256 53837a96...). The witness for the id: igneum-miner program-id reads class v5 attempt 0 id 81fbfa3aa413173f under era 7c36b833... and era 00..00 alike, from the miner at same-work-node cc23f9bd on build-2 (the class v5 engine path; the 2.0.1 pair's miner ef0f2ed8 on build-1 has no program-id subcommand), and the node lane's placed (c) read gave the same id; the hand's RPC port port 26870 answered no published state stream for the block at 22:18 UK. Packs v5-epoch2-d20734 and d20735 (both id 0x81fbfa3aa413173f) exported from release-2.0.1's igneum-pow on build-4 at 22:19 UK; the CPU references from release-2.0.1's igneum-pow (binary 7ba781db...) on build-4 under watchers, 22:20 to 00:21 UK (about 210 nonces a second a run; the one slip of the night, reported once), ref-D 873528b1... over [0, 1572864) and ref-D1 7f8e64ae... over [1572864, 3145728), read back on build-1 at 00:22 UK. NODE, two readers, both PASS on all three phases (00:27, 00:31, 00:35 UK; 1,048,576 agree each, 0 disagree, 0 missing; program id 0x81fbfa3aa413173f on every segment equal to the packs'; the day switch at 1572864 with both boundary hashes equal to the reference, 21488c8bc924c342 before and 08d55958274e224d after; genesis day 20734 installed, growth doublings 0): the RELEASE LINE, igneum-miner from kit 1's pair build-1:/srv/artefacts/200-94e4c6ba/node-lane (binary sha256 41cc0a82..., the recheck-vectors commits cherry-picked onto kit1-line 94e4c6ba = release-2.0.2-node without the v6 arm, the class v5 engine the kit ships), node-release-94e4c6ba/node-{1,2,3}.json (ac60f395..., 97f9758e..., bad64c5c...); and the D1 branch, same-work-node cc23f9bd (merged onto class-v6-node-review as fe0fdc59; binary 9d563c41...), node-same-work-node-cc23f9bd/node-{1,2,3}.json (7b1254f1..., a9da16a9..., 09ec9202...), the two readers' hashes equal to each other and to the reference on every nonce. CUDA, the kit's generation 5 worker 9bfcf728 on the driver at c8b65a26 or later: the 5090 PASS on all three phases (00:25 to 00:28 UK, cuda-5090-{1,2,3}.json 7040a0ab..., 86ff7bc4..., 3e3ec63f...) and the 4090 PASS on all three (00:30 to 00:33 UK, cuda-4090-{1,2,3}.json 1cb9efe5..., 6a52d5bb..., 1efffdde...), the day switch driven through the worker's prepare on each; The 3090 PASS on all three phases (05:11 to 05:14 UK; cuda-3090-{1,2,3}.json de68d6d3..., 7f66ee96..., 00840cc9...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. POOL, the 2.0.2 kit as pinned (release-2.0.2 77b5acc5's pool with node 7cfa422a, binary sha256 46e4c440..., on build-6, genesis day 20734 and dataset 2^28 from the pack): PASS on all three phases (00:28, 00:33, 00:38 UK; 1,048,576 agree each, 0 disagree, 0 missing; the boundary switched at 1572864 with one program id on both segments; 64, 128 and 64 of the sampled shares accepted through the share verifier), pool/kit-row/pool-{1,2,3}.json (c77d1276..., b30d4b65..., 957954e7...) with the README; every nonce of 3,145,728 agrees with the reference on the chain's own class v5 object through the kit as pinned. OPENCL, the first rig's RX 7600 (gfx1102) on the generation 6 OpenCL worker 247a8467... (it serves generators 2 to 6): PASS on all three phases (the job run-ca3-pc1-samework03-opencl-7600-20261009, 05:56 to 05:58 UK): phase 1 digest 12430d25..., phase 2 310b2855... across the day switch 20734 to 20735 at 1572864 (the D+1 pack prepared in 853 ms, the worker's 'switched (class v5)' line, the boundary block 8,192 of 8,192 lines), phase 3 8da9e791..., each 1,048,576 of 1,048,576 equal to the reference slices; 'RESULT verdict all PASS context=same-work-20261008-03 reader=opencl card=rx7600'; the report opencl-rx7600.report.txt (sha256 1164d653..., read back on build-1 at 06:00 UK; both pack ids 0x81fbfa3aa413173f generator 5 in its RESULT lines). The rows stay NOT RUN in progress until every reader has read (the coordinator's ruling 23:1x UK). METAL, the project's macOS machine (Apple M6) on the serve worker igneum-worker-metal 5aeddcba... (built from class-v6 755c2dbcf by the hash lane), the driver on master with --prepare-first, 08:30 to 08:31 UK: PASS on all three phases, metal-{1,2,3}.json 56eee459..., 1e7610a6..., 2b4f04d7... (read back on build-1 at 09:41 UK), 1,048,576 agree each, 0 disagree, 0 missing, the day switch at 1572864 with the boundary hashes 21488c8bc924c342 before and 08d55958274e224d after, equal to every other reader's. Every one of the six readers has read every nonce of the three phases and agrees bit for bit with the CPU reference and with each other, the day switch seen at one nonce by all (the coordinator's ruling 23:1x UK: the rows turn when the sixth reader reads).","network_label":"on an island, not a network"},"harness:same-work@same-work-20261008-02":{"requirement_id":"R2-F03-R02","decision":"PASS","method":"GPU","cell":"harness:same-work","manifest_sha":"c30ab32c","run_id":"same-work-20261008-02","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node.log; build-1:/srv/artefacts/tas/same-work-20261008-02/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/README.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-1.json; docs/design/class-v5-stored-state.md; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-4090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-4090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/opencl-rx7600-take2.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-3.json","in_progress":false,"coverage":"partial until every reader has run: bit-for-bit agreement per nonce across node, CPU reference, CUDA, OpenCL, Metal and pool on one job context","release_identity":{"commit":"c30ab32c (packaging/release-manifest.json on release-2.0.1; node 7cfa422a); the readers: node same-work-node cc23f9bd (igneum-node, off class-v6-node-review e8773ff5, paired with class-v6 1a938abe4), CPU reference class-v6 1a938abe4, CUDA the kit's gen 6 worker 804a6f7f, pool pool-recheck-202 00c7e1db over class-v6-node-review e8773ff5","lockfile":"","binary":"igneum-miner recheck-vectors sha256 9d563c41...; igneum-pow sha256 0d3f3fca...; igneum-worker-cuda sha256 804a6f7f...; igneum-pool sha256 b9fb3a60... (D1 pairing) and 2f6378e4... (kit)","network_object":"the chain-seed class v6 object: epoch seed af89be5d... (the node1 state stream's block 159357, root 1c583d35..., stream sha256 abb58003...) with the genesis era seed edc4fa84..., generator 6, id 0x2a1d6caab4c24564 (the hash lane's 22:00 UK ruling; their independent export hl-v6-all-cs a4742bfe... equals packs/chain-seed-d20730 file by file)","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"R2-F03-R02 and R03 on the chain-seed class v6 object 0x2a1d6caab4c24564: node, CPU reference, CUDA (5090, 4090, 3090), OpenCL (RX 7600), Metal (Apple M6) and pool produce identical accepted work on every nonce of three 2^20 phases with the dataset-day switch at one nonce. The pool reader is the pool's own share verifier on the D1 pairing (pool-recheck-202 over class-v6-node-review e8773ff5); the 2.0.2 kit's pool as pinned is BLOCKED on this object because its node names no class v6 (the F03 fact, in pool/kit-row/), so this row is the D1 object's integration, not a shipped kit's","reviewer":"","at":"2026-10-09T08:57:42.397Z","note":"PASS: node x3, pool (D1 pairing) x3, CPU reference, CUDA 5090/4090/3090 x3 each, OpenCL x3, Metal x3, every nonce equal; the 2.0.2 kit's pool BLOCKED on class v6 by its pins (the F03 fact) | The same-work run (the coordinator's ruling 22:0x UK: six readers on one context; the frozen-object context 01 is the CUDA and CPU-only row). The node1 state stream (block af89be5d..., written on build-4 at 15:34 UK, before the 20:00 UK split) keys every item; every cell carries the island label by main's 22:2x UK rule. Day D = 20730 (bytes ...2ffa50), D+1 = 20731 (...2ffb50); phase 2 switches at 1572864 (the midpoint, 32-aligned); genesis day index 20730 and dataset 2^28 words for the engine's growth rule (doublings 0 on both days). CPU reference: igneum-pow hash-bound (class-v6 1a938abe4, binary 0d3f3fca...) on build-4, 21:48 to 21:57 UK, ref-D 7c7be9b5... over [0, 1572864), ref-D1 cad7849f... over [1572864, 3145728); the hash lane's independent million-nonce reference hl-v6-all-cs.txt (b77c61d8..., 22:03 UK) equals ref-D's first million lines byte for byte. Node reader: PASS on all three phases (22:17, 22:21, 22:25 UK; 1,048,576 agree each, 0 disagree, 0 missing; the boundary switched: d28fcfd70ba70a64 before, 45905ff3d608dc12 after, both equal to the reference; the program id unchanged across the day). Reader faults recorded, not disagreements (the coordinator's ruling 22:1x UK): the node reader's first phase 1 at 22:10 UK read FAIL on every nonce with the program id equal because the standalone engine held the genesis day at 0 and the growth rule doubled the cache fourteen times (fixed at cc23f9bd: install_pow_genesis from the context and the pack, the live miner's own call); the pool lane's D1-pairing run at 22:17 UK hit the same class (its nonce 0 and 1 hashes equal the pre-fix node hashes byte for byte), fix sent 22:18 UK; the rerun on the fixed reader (pool-recheck-202 909ae65b, binary 10425cc9... on build-4, the pack geometry installed) reads PASS on every phase at 22:32, 22:38 and 22:44 UK: 1,048,576 agree each, 0 disagree, 0 missing, the boundary switched at 1572864 with one program id on both segments, 64, 128 and 64 of the sampled shares accepted through verify::check; every nonce of 3,145,728 agrees with the reference (pool/d1-pairing/pool-{1,2,3}.json, sha256 d6d6105f..., 611c7e75..., 44820ff8..., read back on build-1 at 22:45 UK; the README keeps the first run's FAIL and its cause). The pool on the 2.0.2 kit as pinned (release-2.0.2 00c7e1db, node 7cfa422a) is BLOCKED: its node's ProgramClass enum ends at V5, so a class=v6 job line is unnameable (pool/kit-row/pool-{1,2,3}.json carry that refusal in the driver's shape). CUDA (the gen 6 worker 804a6f7f on the pods, the driver from same-work-harness 76cb1f7c6 and later): the 5090 phase 1 PASS (22:53 UK, cuda-5090-1.json 654ddddb...) and phase 2 PASS (22:55 UK, cuda-5090-2.json 898b1cb3...: the day switch at 1572864 driven through the worker's prepare, both boundary hashes equal to the reference); the 4090 phase 1 PASS (22:57 UK, cuda-4090-1.json c91d9e16...) and phase 2 PASS (22:59 UK, cuda-4090-2.json 82a2f5e6...); phase 3 PASS on both after the driver fix (23:09 UK cuda-5090-3.json ee42763d..., 23:11 UK cuda-4090-3.json 91924119...: day D+1 prepared through the worker, 1,048,576 agree each); The 3090 PASS on all three phases (05:00 to 05:06 UK; cuda-3090-{1,2,3}.json eef41f88..., 9344eec0..., c3ea7029...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. Two driver faults on the way, neither a disagreement: the driver's silent wait for the prepared line deadlocked against a worker that loads a finished prepare only between stdin lines (22:26 to 22:47 UK on the 5090; fixed at 76cb1f7c6: day D jobs keep flowing and the worker is polled with a line a second), and phase 3 on a worker started on the day D pack had every day D+1 job refused as a day-seed mismatch (22:56 UK, cuda-5090-3.json and cuda-4090-3.json: missing 1,048,576, the program id equal; fixed in the commit after b464021f8: the pack the worker holds is read from its ready line and every other segment is prepared); the phase 3 reruns on the fixed driver read PASS. Rule 24 on same-work-node cc23f9bd on build-2: crate check rc 0, igneum-miner suite 30 passed 0 failed. OPENCL, the first rig's RX 7600 (gfx1102, device 1) on the generation 6 OpenCL worker (247a8467..., cross-built from class-v6 755c2dbcf on build-1; the kit's zips 3 and 4 carry generator-6 OpenCL exes 45a77647... and be169903...): PASS on all three phases (take 3, the job run-ca3-pc1-samework-opencl-7600-20261009-c, 05:45 to 05:48 UK, the worker driven line by line): phase 1 1,048,576 of 1,048,576 with the derived digest fd6350b7... equal to ref-D's first 2^20 lines; phase 2 1,048,576 of 1,048,576 with digest d272590e... across the day switch at 1572864 (the D+1 pack prepared in 492 ms, the worker's 'switched to the prepared pair (class v6)' line, the boundary block 8,192 of 8,192 lines over nonces 1568768 to 1576959); phase 3 1,048,576 of 1,048,576 with digest 6365f181... equal to ref-D1's last 2^20 lines; 'RESULT verdict all PASS context=same-work-20261008-02 reader=opencl card=rx7600'; the closing report opencl-rx7600.report.txt (sha256 6c9ef5c8..., 187 lines, read back on build-1 at 05:49 UK; the pack files' sha256s and both pack ids 0x2a1d6caab4c24564 in its RESULT lines). Two earlier takes, both faults on the rig's side and not reader results, in the reports beside it: take 1 (03:46 UK) ran zip 2's OpenCL exe left in a stale fetch directory and refused generator 6; take 2 (04:54 UK, opencl-rx7600-take2.report.txt) read phase 1 and the day-D half of phase 2 right, then piped the day D+1 jobs before the worker's prepared line (the same class as the driver's 22:26 UK deadlock). METAL, the project's macOS machine (Apple M6) on the serve worker igneum-worker-metal 5aeddcba... (built from class-v6 755c2dbcf by the hash lane), the driver on master with --prepare-first, 08:30 to 08:31 UK: PASS on all three phases, metal-{1,2,3}.json d87f5995..., 01c84a5c..., f4699083... (read back on build-1 at 09:41 UK), 1,048,576 agree each, 0 disagree, 0 missing, the day switch at 1572864 with the boundary hashes d28fcfd70ba70a64 before and 45905ff3d608dc12 after, equal to every other reader's. Every one of the six readers has read every nonce of the three phases and agrees bit for bit with the CPU reference and with each other, the day switch seen at one nonce by all (the coordinator's ruling 23:1x UK: the rows turn when the sixth reader reads).","network_label":"on an island, not a network"}},"in_progress_since":"2026-10-08T21:18:18.084Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F03-R03","title":"Cross every scheduled transition with old/new client behavior documented and identical rule identities.","setup":"The regression R2-F03 requires (review R2 finding F03: The bundle contains a v6 candidate, not a demonstrated integrated v6 release).","steps":["Cross every scheduled transition with old/new client behavior documented and identical rule identities."],"accept":"Cross every scheduled transition with old/new client behavior documented and identical rule identities.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F03"],"gate":"Review findings closed","owner":"CI steward, hash lane (ProgramClass::V6 on freeze), pool lane","manual_page":null,"finding":"R2-F03","finding_title":"The bundle contains a v6 candidate, not a demonstrated integrated v6 release","finding_priority":"P0 - freeze/integration blocker","owner_lane":"CI steward, hash lane (ProgramClass::V6 on freeze), pool lane","run_status":"PASS","base_test_ids":["GOV-01","GOV-03","POW-01","ROT-02"],"run_id":"same-work-20261008-03","evidence_path":"build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node.log; build-1:/srv/artefacts/tas/same-work-20261008-02/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-3.json","updated":"2026-10-09T08:57:42.458Z","evidence_record":{"requirement_id":"R2-F03-R03","decision":"PASS","method":"GPU","cell":"harness:same-work","manifest_sha":"c30ab32c","run_id":"same-work-20261008-03","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-2.json","in_progress":false,"coverage":"partial: the day-boundary transition in phase 2 (the one transition every live network crosses hourly at 60x); a class rotation is the same test on a research object until a v6 floor is set","release_identity":{"commit":"c30ab32c (release-2.0.1; the class v5 freeze 1c420786, fingerprint cbc5bd0a); the CUDA reader the kit's gen 5 worker 9bfcf728","lockfile":"","binary":"igneum-pow sha256 7ba781db... (release-2.0.1 c30ab32c, built on build-4); igneum-worker-cuda gen 5 sha256 9bfcf728...","network_object":"igneum-devnet-4's class v5 object at epoch 2: id 0x81fbfa3aa413173f, epoch seed 3c3fab43... (the epoch-2 seed block, chain block 3423, common to every chain tonight: the split came after it), day 20734, era 0 seed 7c36b833... (class v5 reads no era; the id is the same under era zero), state stream state-epoch2.igsd1 (sha256 f36e6bba..., 21,132 bytes, 224 records, root 0xf798d1d8...) pulled at 22:18 UK from build-1's seed EVM RPC port 27810","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"R2-F03-R02 and R03 on the live chain's class v5 object 0x81fbfa3aa413173f at epoch 2: node (the release line, kit 1's pair 94e4c6ba, and the D1 branch), CPU reference, CUDA (5090, 4090, 3090), OpenCL (RX 7600), Metal (Apple M6) and the pool on the 2.0.2 kit as pinned produce identical accepted work on every nonce of three 2^20 phases with the dataset-day switch 20734 to 20735 at one nonce; the readers are the shipped binaries. Context 02 (build-1:/srv/artefacts/tas/same-work-20261008-02, the class v6 object) reads the same on all six readers with the pool on the D1 pairing; this record names its evidence too because the recorder keys one record per cell","reviewer":"","at":"2026-10-09T08:57:42.458Z","note":"PASS: every reader switched program and dataset at nonce 1572864 (day 20734 to 20735) with the program id unchanged and both boundary hashes equal to the reference; context 02's switch likewise | On an island, not a network: build-1's seed is one of devnet-4's islands since the epoch-3 cut (21:34 UK), its stream pulled at 22:18 UK; epoch 2's object predates the split. Context 03 at build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json (sha256 53837a96...). The witness for the id: igneum-miner program-id reads class v5 attempt 0 id 81fbfa3aa413173f under era 7c36b833... and era 00..00 alike, from the miner at same-work-node cc23f9bd on build-2 (the class v5 engine path; the 2.0.1 pair's miner ef0f2ed8 on build-1 has no program-id subcommand), and the node lane's placed (c) read gave the same id; the hand's RPC port port 26870 answered no published state stream for the block at 22:18 UK. Packs v5-epoch2-d20734 and d20735 (both id 0x81fbfa3aa413173f) exported from release-2.0.1's igneum-pow on build-4 at 22:19 UK; the CPU references from release-2.0.1's igneum-pow (binary 7ba781db...) on build-4 under watchers, 22:20 to 00:21 UK (about 210 nonces a second a run; the one slip of the night, reported once), ref-D 873528b1... over [0, 1572864) and ref-D1 7f8e64ae... over [1572864, 3145728), read back on build-1 at 00:22 UK. NODE, two readers, both PASS on all three phases (00:27, 00:31, 00:35 UK; 1,048,576 agree each, 0 disagree, 0 missing; program id 0x81fbfa3aa413173f on every segment equal to the packs'; the day switch at 1572864 with both boundary hashes equal to the reference, 21488c8bc924c342 before and 08d55958274e224d after; genesis day 20734 installed, growth doublings 0): the RELEASE LINE, igneum-miner from kit 1's pair build-1:/srv/artefacts/200-94e4c6ba/node-lane (binary sha256 41cc0a82..., the recheck-vectors commits cherry-picked onto kit1-line 94e4c6ba = release-2.0.2-node without the v6 arm, the class v5 engine the kit ships), node-release-94e4c6ba/node-{1,2,3}.json (ac60f395..., 97f9758e..., bad64c5c...); and the D1 branch, same-work-node cc23f9bd (merged onto class-v6-node-review as fe0fdc59; binary 9d563c41...), node-same-work-node-cc23f9bd/node-{1,2,3}.json (7b1254f1..., a9da16a9..., 09ec9202...), the two readers' hashes equal to each other and to the reference on every nonce. CUDA, the kit's generation 5 worker 9bfcf728 on the driver at c8b65a26 or later: the 5090 PASS on all three phases (00:25 to 00:28 UK, cuda-5090-{1,2,3}.json 7040a0ab..., 86ff7bc4..., 3e3ec63f...) and the 4090 PASS on all three (00:30 to 00:33 UK, cuda-4090-{1,2,3}.json 1cb9efe5..., 6a52d5bb..., 1efffdde...), the day switch driven through the worker's prepare on each; The 3090 PASS on all three phases (05:11 to 05:14 UK; cuda-3090-{1,2,3}.json de68d6d3..., 7f66ee96..., 00840cc9...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. POOL, the 2.0.2 kit as pinned (release-2.0.2 77b5acc5's pool with node 7cfa422a, binary sha256 46e4c440..., on build-6, genesis day 20734 and dataset 2^28 from the pack): PASS on all three phases (00:28, 00:33, 00:38 UK; 1,048,576 agree each, 0 disagree, 0 missing; the boundary switched at 1572864 with one program id on both segments; 64, 128 and 64 of the sampled shares accepted through the share verifier), pool/kit-row/pool-{1,2,3}.json (c77d1276..., b30d4b65..., 957954e7...) with the README; every nonce of 3,145,728 agrees with the reference on the chain's own class v5 object through the kit as pinned. OPENCL, the first rig's RX 7600 (gfx1102) on the generation 6 OpenCL worker 247a8467... (it serves generators 2 to 6): PASS on all three phases (the job run-ca3-pc1-samework03-opencl-7600-20261009, 05:56 to 05:58 UK): phase 1 digest 12430d25..., phase 2 310b2855... across the day switch 20734 to 20735 at 1572864 (the D+1 pack prepared in 853 ms, the worker's 'switched (class v5)' line, the boundary block 8,192 of 8,192 lines), phase 3 8da9e791..., each 1,048,576 of 1,048,576 equal to the reference slices; 'RESULT verdict all PASS context=same-work-20261008-03 reader=opencl card=rx7600'; the report opencl-rx7600.report.txt (sha256 1164d653..., read back on build-1 at 06:00 UK; both pack ids 0x81fbfa3aa413173f generator 5 in its RESULT lines). The rows stay NOT RUN in progress until every reader has read (the coordinator's ruling 23:1x UK). METAL, the project's macOS machine (Apple M6) on the serve worker igneum-worker-metal 5aeddcba... (built from class-v6 755c2dbcf by the hash lane), the driver on master with --prepare-first, 08:30 to 08:31 UK: PASS on all three phases, metal-{1,2,3}.json 56eee459..., 1e7610a6..., 2b4f04d7... (read back on build-1 at 09:41 UK), 1,048,576 agree each, 0 disagree, 0 missing, the day switch at 1572864 with the boundary hashes 21488c8bc924c342 before and 08d55958274e224d after, equal to every other reader's. Every one of the six readers has read every nonce of the three phases and agrees bit for bit with the CPU reference and with each other, the day switch seen at one nonce by all (the coordinator's ruling 23:1x UK: the rows turn when the sixth reader reads).","network_label":"on an island, not a network"},"evidence_records":{"harness:same-work":{"requirement_id":"R2-F03-R03","decision":"PASS","method":"GPU","cell":"harness:same-work","manifest_sha":"c30ab32c","run_id":"same-work-20261008-03","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-release-94e4c6ba/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/node-same-work-node-cc23f9bd/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-03/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-03/metal-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-2.json","in_progress":false,"coverage":"partial: the day-boundary transition in phase 2 (the one transition every live network crosses hourly at 60x); a class rotation is the same test on a research object until a v6 floor is set","release_identity":{"commit":"c30ab32c (release-2.0.1; the class v5 freeze 1c420786, fingerprint cbc5bd0a); the CUDA reader the kit's gen 5 worker 9bfcf728","lockfile":"","binary":"igneum-pow sha256 7ba781db... (release-2.0.1 c30ab32c, built on build-4); igneum-worker-cuda gen 5 sha256 9bfcf728...","network_object":"igneum-devnet-4's class v5 object at epoch 2: id 0x81fbfa3aa413173f, epoch seed 3c3fab43... (the epoch-2 seed block, chain block 3423, common to every chain tonight: the split came after it), day 20734, era 0 seed 7c36b833... (class v5 reads no era; the id is the same under era zero), state stream state-epoch2.igsd1 (sha256 f36e6bba..., 21,132 bytes, 224 records, root 0xf798d1d8...) pulled at 22:18 UK from build-1's seed EVM RPC port 27810","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"R2-F03-R02 and R03 on the live chain's class v5 object 0x81fbfa3aa413173f at epoch 2: node (the release line, kit 1's pair 94e4c6ba, and the D1 branch), CPU reference, CUDA (5090, 4090, 3090), OpenCL (RX 7600), Metal (Apple M6) and the pool on the 2.0.2 kit as pinned produce identical accepted work on every nonce of three 2^20 phases with the dataset-day switch 20734 to 20735 at one nonce; the readers are the shipped binaries. Context 02 (build-1:/srv/artefacts/tas/same-work-20261008-02, the class v6 object) reads the same on all six readers with the pool on the D1 pairing; this record names its evidence too because the recorder keys one record per cell","reviewer":"","at":"2026-10-09T08:57:42.458Z","note":"PASS: every reader switched program and dataset at nonce 1572864 (day 20734 to 20735) with the program id unchanged and both boundary hashes equal to the reference; context 02's switch likewise | On an island, not a network: build-1's seed is one of devnet-4's islands since the epoch-3 cut (21:34 UK), its stream pulled at 22:18 UK; epoch 2's object predates the split. Context 03 at build-1:/srv/artefacts/tas/same-work-20261008-03/job-context.json (sha256 53837a96...). The witness for the id: igneum-miner program-id reads class v5 attempt 0 id 81fbfa3aa413173f under era 7c36b833... and era 00..00 alike, from the miner at same-work-node cc23f9bd on build-2 (the class v5 engine path; the 2.0.1 pair's miner ef0f2ed8 on build-1 has no program-id subcommand), and the node lane's placed (c) read gave the same id; the hand's RPC port port 26870 answered no published state stream for the block at 22:18 UK. Packs v5-epoch2-d20734 and d20735 (both id 0x81fbfa3aa413173f) exported from release-2.0.1's igneum-pow on build-4 at 22:19 UK; the CPU references from release-2.0.1's igneum-pow (binary 7ba781db...) on build-4 under watchers, 22:20 to 00:21 UK (about 210 nonces a second a run; the one slip of the night, reported once), ref-D 873528b1... over [0, 1572864) and ref-D1 7f8e64ae... over [1572864, 3145728), read back on build-1 at 00:22 UK. NODE, two readers, both PASS on all three phases (00:27, 00:31, 00:35 UK; 1,048,576 agree each, 0 disagree, 0 missing; program id 0x81fbfa3aa413173f on every segment equal to the packs'; the day switch at 1572864 with both boundary hashes equal to the reference, 21488c8bc924c342 before and 08d55958274e224d after; genesis day 20734 installed, growth doublings 0): the RELEASE LINE, igneum-miner from kit 1's pair build-1:/srv/artefacts/200-94e4c6ba/node-lane (binary sha256 41cc0a82..., the recheck-vectors commits cherry-picked onto kit1-line 94e4c6ba = release-2.0.2-node without the v6 arm, the class v5 engine the kit ships), node-release-94e4c6ba/node-{1,2,3}.json (ac60f395..., 97f9758e..., bad64c5c...); and the D1 branch, same-work-node cc23f9bd (merged onto class-v6-node-review as fe0fdc59; binary 9d563c41...), node-same-work-node-cc23f9bd/node-{1,2,3}.json (7b1254f1..., a9da16a9..., 09ec9202...), the two readers' hashes equal to each other and to the reference on every nonce. CUDA, the kit's generation 5 worker 9bfcf728 on the driver at c8b65a26 or later: the 5090 PASS on all three phases (00:25 to 00:28 UK, cuda-5090-{1,2,3}.json 7040a0ab..., 86ff7bc4..., 3e3ec63f...) and the 4090 PASS on all three (00:30 to 00:33 UK, cuda-4090-{1,2,3}.json 1cb9efe5..., 6a52d5bb..., 1efffdde...), the day switch driven through the worker's prepare on each; The 3090 PASS on all three phases (05:11 to 05:14 UK; cuda-3090-{1,2,3}.json de68d6d3..., 7f66ee96..., 00840cc9...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. POOL, the 2.0.2 kit as pinned (release-2.0.2 77b5acc5's pool with node 7cfa422a, binary sha256 46e4c440..., on build-6, genesis day 20734 and dataset 2^28 from the pack): PASS on all three phases (00:28, 00:33, 00:38 UK; 1,048,576 agree each, 0 disagree, 0 missing; the boundary switched at 1572864 with one program id on both segments; 64, 128 and 64 of the sampled shares accepted through the share verifier), pool/kit-row/pool-{1,2,3}.json (c77d1276..., b30d4b65..., 957954e7...) with the README; every nonce of 3,145,728 agrees with the reference on the chain's own class v5 object through the kit as pinned. OPENCL, the first rig's RX 7600 (gfx1102) on the generation 6 OpenCL worker 247a8467... (it serves generators 2 to 6): PASS on all three phases (the job run-ca3-pc1-samework03-opencl-7600-20261009, 05:56 to 05:58 UK): phase 1 digest 12430d25..., phase 2 310b2855... across the day switch 20734 to 20735 at 1572864 (the D+1 pack prepared in 853 ms, the worker's 'switched (class v5)' line, the boundary block 8,192 of 8,192 lines), phase 3 8da9e791..., each 1,048,576 of 1,048,576 equal to the reference slices; 'RESULT verdict all PASS context=same-work-20261008-03 reader=opencl card=rx7600'; the report opencl-rx7600.report.txt (sha256 1164d653..., read back on build-1 at 06:00 UK; both pack ids 0x81fbfa3aa413173f generator 5 in its RESULT lines). The rows stay NOT RUN in progress until every reader has read (the coordinator's ruling 23:1x UK). METAL, the project's macOS machine (Apple M6) on the serve worker igneum-worker-metal 5aeddcba... (built from class-v6 755c2dbcf by the hash lane), the driver on master with --prepare-first, 08:30 to 08:31 UK: PASS on all three phases, metal-{1,2,3}.json 56eee459..., 1e7610a6..., 2b4f04d7... (read back on build-1 at 09:41 UK), 1,048,576 agree each, 0 disagree, 0 missing, the day switch at 1572864 with the boundary hashes 21488c8bc924c342 before and 08d55958274e224d after, equal to every other reader's. Every one of the six readers has read every nonce of the three phases and agrees bit for bit with the CPU reference and with each other, the day switch seen at one nonce by all (the coordinator's ruling 23:1x UK: the rows turn when the sixth reader reads).","network_label":"on an island, not a network"},"harness:same-work@same-work-20261008-02":{"requirement_id":"R2-F03-R03","decision":"PASS","method":"GPU","cell":"harness:same-work","manifest_sha":"c30ab32c","run_id":"same-work-20261008-02","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/node/node.log; build-1:/srv/artefacts/tas/same-work-20261008-02/references/ref-D.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/references/ref-D1.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/job-context.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/pool-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-5090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-4090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/cuda-3090-3.json; build-1:/srv/artefacts/tas/same-work-20261008-02/opencl-rx7600.report.txt; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-1.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-2.json; build-1:/srv/artefacts/tas/same-work-20261008-02/metal-3.json","in_progress":false,"coverage":"partial: the day-boundary transition in phase 2 (the one transition every live network crosses hourly at 60x); a class rotation is the same test on a research object until a v6 floor is set","release_identity":{"commit":"c30ab32c (packaging/release-manifest.json on release-2.0.1; node 7cfa422a); the readers: node same-work-node cc23f9bd (igneum-node, off class-v6-node-review e8773ff5, paired with class-v6 1a938abe4), CPU reference class-v6 1a938abe4, CUDA the kit's gen 6 worker 804a6f7f, pool pool-recheck-202 00c7e1db over class-v6-node-review e8773ff5","lockfile":"","binary":"igneum-miner recheck-vectors sha256 9d563c41...; igneum-pow sha256 0d3f3fca...; igneum-worker-cuda sha256 804a6f7f...; igneum-pool sha256 b9fb3a60... (D1 pairing) and 2f6378e4... (kit)","network_object":"the chain-seed class v6 object: epoch seed af89be5d... (the node1 state stream's block 159357, root 1c583d35..., stream sha256 abb58003...) with the genesis era seed edc4fa84..., generator 6, id 0x2a1d6caab4c24564 (the hash lane's 22:00 UK ruling; their independent export hl-v6-all-cs a4742bfe... equals packs/chain-seed-d20730 file by file)","activation":"none (a re-check of hashes against one job context, no chain state changes)","profile_hashes":""},"claim_impact":"R2-F03-R02 and R03 on the chain-seed class v6 object 0x2a1d6caab4c24564: node, CPU reference, CUDA (5090, 4090, 3090), OpenCL (RX 7600), Metal (Apple M6) and pool produce identical accepted work on every nonce of three 2^20 phases with the dataset-day switch at one nonce. The pool reader is the pool's own share verifier on the D1 pairing (pool-recheck-202 over class-v6-node-review e8773ff5); the 2.0.2 kit's pool as pinned is BLOCKED on this object because its node names no class v6 (the F03 fact, in pool/kit-row/), so this row is the D1 object's integration, not a shipped kit's","reviewer":"","at":"2026-10-09T08:57:42.397Z","note":"PASS: every reader (node, pool D1 pairing, CUDA three cards, OpenCL, Metal) switched program and dataset at nonce 1572864 with the program id unchanged and both boundary hashes equal to the reference | The same-work run (the coordinator's ruling 22:0x UK: six readers on one context; the frozen-object context 01 is the CUDA and CPU-only row). The node1 state stream (block af89be5d..., written on build-4 at 15:34 UK, before the 20:00 UK split) keys every item; every cell carries the island label by main's 22:2x UK rule. Day D = 20730 (bytes ...2ffa50), D+1 = 20731 (...2ffb50); phase 2 switches at 1572864 (the midpoint, 32-aligned); genesis day index 20730 and dataset 2^28 words for the engine's growth rule (doublings 0 on both days). CPU reference: igneum-pow hash-bound (class-v6 1a938abe4, binary 0d3f3fca...) on build-4, 21:48 to 21:57 UK, ref-D 7c7be9b5... over [0, 1572864), ref-D1 cad7849f... over [1572864, 3145728); the hash lane's independent million-nonce reference hl-v6-all-cs.txt (b77c61d8..., 22:03 UK) equals ref-D's first million lines byte for byte. Node reader: PASS on all three phases (22:17, 22:21, 22:25 UK; 1,048,576 agree each, 0 disagree, 0 missing; the boundary switched: d28fcfd70ba70a64 before, 45905ff3d608dc12 after, both equal to the reference; the program id unchanged across the day). Reader faults recorded, not disagreements (the coordinator's ruling 22:1x UK): the node reader's first phase 1 at 22:10 UK read FAIL on every nonce with the program id equal because the standalone engine held the genesis day at 0 and the growth rule doubled the cache fourteen times (fixed at cc23f9bd: install_pow_genesis from the context and the pack, the live miner's own call); the pool lane's D1-pairing run at 22:17 UK hit the same class (its nonce 0 and 1 hashes equal the pre-fix node hashes byte for byte), fix sent 22:18 UK; the rerun on the fixed reader (pool-recheck-202 909ae65b, binary 10425cc9... on build-4, the pack geometry installed) reads PASS on every phase at 22:32, 22:38 and 22:44 UK: 1,048,576 agree each, 0 disagree, 0 missing, the boundary switched at 1572864 with one program id on both segments, 64, 128 and 64 of the sampled shares accepted through verify::check; every nonce of 3,145,728 agrees with the reference (pool/d1-pairing/pool-{1,2,3}.json, sha256 d6d6105f..., 611c7e75..., 44820ff8..., read back on build-1 at 22:45 UK; the README keeps the first run's FAIL and its cause). The pool on the 2.0.2 kit as pinned (release-2.0.2 00c7e1db, node 7cfa422a) is BLOCKED: its node's ProgramClass enum ends at V5, so a class=v6 job line is unnameable (pool/kit-row/pool-{1,2,3}.json carry that refusal in the driver's shape). CUDA (the gen 6 worker 804a6f7f on the pods, the driver from same-work-harness 76cb1f7c6 and later): the 5090 phase 1 PASS (22:53 UK, cuda-5090-1.json 654ddddb...) and phase 2 PASS (22:55 UK, cuda-5090-2.json 898b1cb3...: the day switch at 1572864 driven through the worker's prepare, both boundary hashes equal to the reference); the 4090 phase 1 PASS (22:57 UK, cuda-4090-1.json c91d9e16...) and phase 2 PASS (22:59 UK, cuda-4090-2.json 82a2f5e6...); phase 3 PASS on both after the driver fix (23:09 UK cuda-5090-3.json ee42763d..., 23:11 UK cuda-4090-3.json 91924119...: day D+1 prepared through the worker, 1,048,576 agree each); The 3090 PASS on all three phases (05:00 to 05:06 UK; cuda-3090-{1,2,3}.json eef41f88..., 9344eec0..., c3ea7029...; 1,048,576 agree each, 0 disagree, 0 missing; the day switch at 1572864 with the same boundary hashes as every other reader): the fleet lane's first run on that pod at 00:35 UK never ran a phase (its verify rule demanded two reference files where a context carries one, then its put failed on the pod's flapping ssh; a runner fault, reported once), the rerun from 04:57 UK ran detached on the pod under a pid file with a collector pulling each JSON. So the CUDA cell reads three cards on this context. Two driver faults on the way, neither a disagreement: the driver's silent wait for the prepared line deadlocked against a worker that loads a finished prepare only between stdin lines (22:26 to 22:47 UK on the 5090; fixed at 76cb1f7c6: day D jobs keep flowing and the worker is polled with a line a second), and phase 3 on a worker started on the day D pack had every day D+1 job refused as a day-seed mismatch (22:56 UK, cuda-5090-3.json and cuda-4090-3.json: missing 1,048,576, the program id equal; fixed in the commit after b464021f8: the pack the worker holds is read from its ready line and every other segment is prepared); the phase 3 reruns on the fixed driver read PASS. Rule 24 on same-work-node cc23f9bd on build-2: crate check rc 0, igneum-miner suite 30 passed 0 failed. OPENCL, the first rig's RX 7600 (gfx1102, device 1) on the generation 6 OpenCL worker (247a8467..., cross-built from class-v6 755c2dbcf on build-1; the kit's zips 3 and 4 carry generator-6 OpenCL exes 45a77647... and be169903...): PASS on all three phases (take 3, the job run-ca3-pc1-samework-opencl-7600-20261009-c, 05:45 to 05:48 UK, the worker driven line by line): phase 1 1,048,576 of 1,048,576 with the derived digest fd6350b7... equal to ref-D's first 2^20 lines; phase 2 1,048,576 of 1,048,576 with digest d272590e... across the day switch at 1572864 (the D+1 pack prepared in 492 ms, the worker's 'switched to the prepared pair (class v6)' line, the boundary block 8,192 of 8,192 lines over nonces 1568768 to 1576959); phase 3 1,048,576 of 1,048,576 with digest 6365f181... equal to ref-D1's last 2^20 lines; 'RESULT verdict all PASS context=same-work-20261008-02 reader=opencl card=rx7600'; the closing report opencl-rx7600.report.txt (sha256 6c9ef5c8..., 187 lines, read back on build-1 at 05:49 UK; the pack files' sha256s and both pack ids 0x2a1d6caab4c24564 in its RESULT lines). Two earlier takes, both faults on the rig's side and not reader results, in the reports beside it: take 1 (03:46 UK) ran zip 2's OpenCL exe left in a stale fetch directory and refused generator 6; take 2 (04:54 UK, opencl-rx7600-take2.report.txt) read phase 1 and the day-D half of phase 2 right, then piped the day D+1 jobs before the worker's prepared line (the same class as the driver's 22:26 UK deadlock). METAL, the project's macOS machine (Apple M6) on the serve worker igneum-worker-metal 5aeddcba... (built from class-v6 755c2dbcf by the hash lane), the driver on master with --prepare-first, 08:30 to 08:31 UK: PASS on all three phases, metal-{1,2,3}.json d87f5995..., 01c84a5c..., f4699083... (read back on build-1 at 09:41 UK), 1,048,576 agree each, 0 disagree, 0 missing, the day switch at 1572864 with the boundary hashes d28fcfd70ba70a64 before and 45905ff3d608dc12 after, equal to every other reader's. Every one of the six readers has read every nonce of the three phases and agrees bit for bit with the CPU reference and with each other, the day switch seen at one nonce by all (the coordinator's ruling 23:1x UK: the rows turn when the sixth reader reads).","network_label":"on an island, not a network"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F04-R01","title":"Native multi-node 40/40/20 partition, equivocation and dust-valid mining on both sides past the window.","setup":"The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).","steps":["Native multi-node 40/40/20 partition, equivocation and dust-valid mining on both sides past the window."],"accept":"Native multi-node 40/40/20 partition, equivocation and dust-valid mining on both sides past the window.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F04"],"gate":"Review findings closed","owner":"node lane, reference apps, site (explorer)","manual_page":null,"finding":"R2-F04","finding_title":"Finality v4 recovery deliberately has a weaker safety boundary","finding_priority":"P0 - finality guarantee decision","owner_lane":"node lane, reference apps, site (explorer)","run_status":"NOT RUN","base_test_ids":["FIN-02","FIN-03","FIN-07","FIN-08","VER-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F04-R02","title":"Proof that the chosen recovery guarantee matches the public finality claim; two valid contradictory certificates are a hard failure for strong finality.","setup":"The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).","steps":["Proof that the chosen recovery guarantee matches the public finality claim; two valid contradictory certificates are a hard failure for strong finality."],"accept":"Proof that the chosen recovery guarantee matches the public finality claim; two valid contradictory certificates are a hard failure for strong finality.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F04"],"gate":"Review findings closed","owner":"node lane, reference apps, site (explorer)","manual_page":null,"finding":"R2-F04","finding_title":"Finality v4 recovery deliberately has a weaker safety boundary","finding_priority":"P0 - finality guarantee decision","owner_lane":"node lane, reference apps, site (explorer)","run_status":"NOT RUN","base_test_ids":["FIN-02","FIN-03","FIN-07","FIN-08","VER-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F04-R03","title":"Pause-only resume with historical backfill, missing historical data and all old keys returning.","setup":"The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).","steps":["Pause-only resume with historical backfill, missing historical data and all old keys returning."],"accept":"Pause-only resume with historical backfill, missing historical data and all old keys returning.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F04"],"gate":"Review findings closed","owner":"node lane, reference apps, site (explorer)","manual_page":null,"finding":"R2-F04","finding_title":"Finality v4 recovery deliberately has a weaker safety boundary","finding_priority":"P0 - finality guarantee decision","owner_lane":"node lane, reference apps, site (explorer)","run_status":"NOT RUN","base_test_ids":["FIN-02","FIN-03","FIN-07","FIN-08","VER-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F04-R04","title":"Wallet, receipt and oracle consumers distinguish any weaker recovery state.","setup":"The regression R2-F04 requires (review R2 finding F04: Finality v4 recovery deliberately has a weaker safety boundary).","steps":["Wallet, receipt and oracle consumers distinguish any weaker recovery state."],"accept":"Wallet, receipt and oracle consumers distinguish any weaker recovery state.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F04"],"gate":"Review findings closed","owner":"node lane, reference apps, site (explorer)","manual_page":null,"finding":"R2-F04","finding_title":"Finality v4 recovery deliberately has a weaker safety boundary","finding_priority":"P0 - finality guarantee decision","owner_lane":"node lane, reference apps, site (explorer)","run_status":"NOT RUN","base_test_ids":["FIN-02","FIN-03","FIN-07","FIN-08","VER-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F04 (P0, the external review): the regression's harness is the owner lane's (node lane, reference apps, site (explorer)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F04-R04","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F05-R01","title":"Native reference-vs-incremental expression equivalence across all source registers and real instruction updates.","setup":"The regression R2-F05 requires (review R2 finding F05: reg64 address coupling has an exact incremental alternative).","steps":["Native reference-vs-incremental expression equivalence across all source registers and real instruction updates."],"accept":"Native reference-vs-incremental expression equivalence across all source registers and real instruction updates.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F05"],"gate":"Review findings closed","owner":"hash lane, adversary lane, floor lane 3","manual_page":null,"finding":"R2-F05","finding_title":"reg64 address coupling has an exact incremental alternative","finding_priority":"P1 - adversarial hardware evaluation","owner_lane":"hash lane, adversary lane, floor lane 3","run_status":"NOT RUN","base_test_ids":["POW-03","POW-04","ADV-03","ADV-05"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F05 (P1, the external review): the regression's harness is the owner lane's (hash lane, adversary lane, floor lane 3); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F05-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F05 (P1, the external review): the regression's harness is the owner lane's (hash lane, adversary lane, floor lane 3); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F05-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F05-R02","title":"Full-kernel output equivalence, registers, spills, wall power and accepted throughput across target GPUs.","setup":"The regression R2-F05 requires (review R2 finding F05: reg64 address coupling has an exact incremental alternative).","steps":["Full-kernel output equivalence, registers, spills, wall power and accepted throughput across target GPUs."],"accept":"Full-kernel output equivalence, registers, spills, wall power and accepted throughput across target GPUs.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F05"],"gate":"Review findings closed","owner":"hash lane, adversary lane, floor lane 3","manual_page":null,"finding":"R2-F05","finding_title":"reg64 address coupling has an exact incremental alternative","finding_priority":"P1 - adversarial hardware evaluation","owner_lane":"hash lane, adversary lane, floor lane 3","run_status":"NOT RUN","base_test_ids":["POW-03","POW-04","ADV-03","ADV-05"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F05 (P1, the external review): the regression's harness is the owner lane's (hash lane, adversary lane, floor lane 3); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F05-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F05 (P1, the external review): the regression's harness is the owner lane's (hash lane, adversary lane, floor lane 3); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F05-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F05-R03","title":"Adversary physical design includes prefix caching/recomputation cost; no assumed full 63-read cost on every load.","setup":"The regression R2-F05 requires (review R2 finding F05: reg64 address coupling has an exact incremental alternative).","steps":["Adversary physical design includes prefix caching/recomputation cost; no assumed full 63-read cost on every load."],"accept":"Adversary physical design includes prefix caching/recomputation cost; no assumed full 63-read cost on every load.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F05"],"gate":"Review findings closed","owner":"hash lane, adversary lane, floor lane 3","manual_page":null,"finding":"R2-F05","finding_title":"reg64 address coupling has an exact incremental alternative","finding_priority":"P1 - adversarial hardware evaluation","owner_lane":"hash lane, adversary lane, floor lane 3","run_status":"NOT RUN","base_test_ids":["POW-03","POW-04","ADV-03","ADV-05"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F05 (P1, the external review): the regression's harness is the owner lane's (hash lane, adversary lane, floor lane 3); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F05-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F05 (P1, the external review): the regression's harness is the owner lane's (hash lane, adversary lane, floor lane 3); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F05-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F06-R01","title":"Acceptance/reference/emitter evaluate the same activated schedule.","setup":"The regression R2-F06 requires (review R2 finding F06: The v6 acceptance and census gates are not complete for the final execution).","steps":["Acceptance/reference/emitter evaluate the same activated schedule."],"accept":"Acceptance/reference/emitter evaluate the same activated schedule.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F06"],"gate":"Review findings closed","owner":"hash lane, research lane D","manual_page":null,"finding":"R2-F06","finding_title":"The v6 acceptance and census gates are not complete for the final execution","finding_priority":"P1 - freeze blocker","owner_lane":"hash lane, research lane D","run_status":"NOT RUN","base_test_ids":["GOV-05","POW-01","POW-02","POW-06"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F06 (P1, the external review): the regression's harness is the owner lane's (hash lane, research lane D); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F06-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F06 (P1, the external review): the regression's harness is the owner lane's (hash lane, research lane D); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F06-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F06-R02","title":"Full live-dataset census on unseen seeds and the complete v6 pack.","setup":"The regression R2-F06 requires (review R2 finding F06: The v6 acceptance and census gates are not complete for the final execution).","steps":["Full live-dataset census on unseen seeds and the complete v6 pack."],"accept":"Full live-dataset census on unseen seeds and the complete v6 pack.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F06"],"gate":"Review findings closed","owner":"hash lane, research lane D","manual_page":null,"finding":"R2-F06","finding_title":"The v6 acceptance and census gates are not complete for the final execution","finding_priority":"P1 - freeze blocker","owner_lane":"hash lane, research lane D","run_status":"NOT RUN","base_test_ids":["GOV-05","POW-01","POW-02","POW-06"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F06 (P1, the external review): the regression's harness is the owner lane's (hash lane, research lane D); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F06-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F06 (P1, the external review): the regression's harness is the owner lane's (hash lane, research lane D); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F06-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F06-R03","title":"A failed experimental rule does not silently exhaust generation or bypass the intended resource requirement.","setup":"The regression R2-F06 requires (review R2 finding F06: The v6 acceptance and census gates are not complete for the final execution).","steps":["A failed experimental rule does not silently exhaust generation or bypass the intended resource requirement."],"accept":"A failed experimental rule does not silently exhaust generation or bypass the intended resource requirement.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F06"],"gate":"Review findings closed","owner":"hash lane, research lane D","manual_page":null,"finding":"R2-F06","finding_title":"The v6 acceptance and census gates are not complete for the final execution","finding_priority":"P1 - freeze blocker","owner_lane":"hash lane, research lane D","run_status":"NOT RUN","base_test_ids":["GOV-05","POW-01","POW-02","POW-06"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F06 (P1, the external review): the regression's harness is the owner lane's (hash lane, research lane D); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F06-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F06 (P1, the external review): the regression's harness is the owner lane's (hash lane, research lane D); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F06-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F07-R01","title":"Same final v6 configuration: mine -> evict -> prove -> aggregate -> submit -> rebuild -> resume; no leaked reservations.","setup":"The regression R2-F07 requires (review R2 finding F07: VRAM admission and proving deadlines need one operator-level scheduler).","steps":["Same final v6 configuration: mine -> evict -> prove -> aggregate -> submit -> rebuild -> resume; no leaked reservations."],"accept":"Same final v6 configuration: mine -> evict -> prove -> aggregate -> submit -> rebuild -> resume; no leaked reservations.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F07"],"gate":"Review findings closed","owner":"app lane, fleet lane","manual_page":null,"finding":"R2-F07","finding_title":"VRAM admission and proving deadlines need one operator-level scheduler","finding_priority":"P1 - miner economics and reliability","owner_lane":"app lane, fleet lane","run_status":"NOT RUN","base_test_ids":["GPU-05","CAP-02","CAP-05","UX-02"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F07 (P1, the external review): the regression's harness is the owner lane's (app lane, fleet lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F07-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F07 (P1, the external review): the regression's harness is the owner lane's (app lane, fleet lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F07-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F07-R02","title":"OOM, process crash and stale work recover without losing wallet state or silently consuming power.","setup":"The regression R2-F07 requires (review R2 finding F07: VRAM admission and proving deadlines need one operator-level scheduler).","steps":["OOM, process crash and stale work recover without losing wallet state or silently consuming power."],"accept":"OOM, process crash and stale work recover without losing wallet state or silently consuming power.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F07"],"gate":"Review findings closed","owner":"app lane, fleet lane","manual_page":null,"finding":"R2-F07","finding_title":"VRAM admission and proving deadlines need one operator-level scheduler","finding_priority":"P1 - miner economics and reliability","owner_lane":"app lane, fleet lane","run_status":"NOT RUN","base_test_ids":["GPU-05","CAP-02","CAP-05","UX-02"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F07 (P1, the external review): the regression's harness is the owner lane's (app lane, fleet lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F07-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F07 (P1, the external review): the regression's harness is the owner lane's (app lane, fleet lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F07-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F07-R03","title":"16 GB+ simultaneous mode only after measured peak plus next-epoch headroom; smaller-card modes labelled separately.","setup":"The regression R2-F07 requires (review R2 finding F07: VRAM admission and proving deadlines need one operator-level scheduler).","steps":["16 GB+ simultaneous mode only after measured peak plus next-epoch headroom; smaller-card modes labelled separately."],"accept":"16 GB+ simultaneous mode only after measured peak plus next-epoch headroom; smaller-card modes labelled separately.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F07"],"gate":"Review findings closed","owner":"app lane, fleet lane","manual_page":null,"finding":"R2-F07","finding_title":"VRAM admission and proving deadlines need one operator-level scheduler","finding_priority":"P1 - miner economics and reliability","owner_lane":"app lane, fleet lane","run_status":"NOT RUN","base_test_ids":["GPU-05","CAP-02","CAP-05","UX-02"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F07 (P1, the external review): the regression's harness is the owner lane's (app lane, fleet lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F07-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F07 (P1, the external review): the regression's harness is the owner lane's (app lane, fleet lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F07-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F08-R01","title":"Report every eligible job outcome, including expired work; a bounded list cannot hide losses.","setup":"The regression R2-F08 requires (review R2 finding F08: The proving pipeline reports waste and deadline censoring, not sustained capacity).","steps":["Report every eligible job outcome, including expired work; a bounded list cannot hide losses."],"accept":"Report every eligible job outcome, including expired work; a bounded list cannot hide losses.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F08"],"gate":"Review findings closed","owner":"proving lane, fleet lane, site (ops page)","manual_page":null,"finding":"R2-F08","finding_title":"The proving pipeline reports waste and deadline censoring, not sustained capacity","finding_priority":"P1 - proving product gate","owner_lane":"proving lane, fleet lane, site (ops page)","run_status":"NOT RUN","base_test_ids":["CAP-03","CAP-04","CAP-06","CAP-07"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F08 (P1, the external review): the regression's harness is the owner lane's (proving lane, fleet lane, site (ops page)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F08-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F08 (P1, the external review): the regression's harness is the owner lane's (proving lane, fleet lane, site (ops page)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F08-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F08-R02","title":"Consumer tiers complete and receive payment for declared jobs before claims about income.","setup":"The regression R2-F08 requires (review R2 finding F08: The proving pipeline reports waste and deadline censoring, not sustained capacity).","steps":["Consumer tiers complete and receive payment for declared jobs before claims about income."],"accept":"Consumer tiers complete and receive payment for declared jobs before claims about income.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F08"],"gate":"Review findings closed","owner":"proving lane, fleet lane, site (ops page)","manual_page":null,"finding":"R2-F08","finding_title":"The proving pipeline reports waste and deadline censoring, not sustained capacity","finding_priority":"P1 - proving product gate","owner_lane":"proving lane, fleet lane, site (ops page)","run_status":"NOT RUN","base_test_ids":["CAP-03","CAP-04","CAP-06","CAP-07"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F08 (P1, the external review): the regression's harness is the owner lane's (proving lane, fleet lane, site (ops page)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F08-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F08 (P1, the external review): the regression's harness is the owner lane's (proving lane, fleet lane, site (ops page)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F08-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F08-R03","title":"Sustained real workload across class transitions, with restart/retry and no publisher intervention.","setup":"The regression R2-F08 requires (review R2 finding F08: The proving pipeline reports waste and deadline censoring, not sustained capacity).","steps":["Sustained real workload across class transitions, with restart/retry and no publisher intervention."],"accept":"Sustained real workload across class transitions, with restart/retry and no publisher intervention.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F08"],"gate":"Review findings closed","owner":"proving lane, fleet lane, site (ops page)","manual_page":null,"finding":"R2-F08","finding_title":"The proving pipeline reports waste and deadline censoring, not sustained capacity","finding_priority":"P1 - proving product gate","owner_lane":"proving lane, fleet lane, site (ops page)","run_status":"NOT RUN","base_test_ids":["CAP-03","CAP-04","CAP-06","CAP-07"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F08 (P1, the external review): the regression's harness is the owner lane's (proving lane, fleet lane, site (ops page)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F08-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F08 (P1, the external review): the regression's harness is the owner lane's (proving lane, fleet lane, site (ops page)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F08-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F09-R01","title":"Generate all pass/fail cells directly from the declared inequalities and inputs.","setup":"The regression R2-F09 requires (review R2 finding F09: The economic model explicitly retains a failed specialist case).","steps":["Generate all pass/fail cells directly from the declared inequalities and inputs."],"accept":"Generate all pass/fail cells directly from the declared inequalities and inputs.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F09"],"gate":"Review findings closed","owner":"research lane, floor lane 3, coordinator","manual_page":null,"finding":"R2-F09","finding_title":"The economic model explicitly retains a failed specialist case","finding_priority":"P1 - founding claim not yet earned","owner_lane":"research lane, floor lane 3, coordinator","run_status":"NOT RUN","base_test_ids":["ADV-05","ADV-08","ECO-03","ECO-08","LEAD-03"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F09 (P1, the external review): the regression's harness is the owner lane's (research lane, floor lane 3, coordinator); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F09-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F09 (P1, the external review): the regression's harness is the owner lane's (research lane, floor lane 3, coordinator); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F09-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F09-R02","title":"Independent feasibility and cost evaluation of the strongest modeled SRAM/hybrid opponent.","setup":"The regression R2-F09 requires (review R2 finding F09: The economic model explicitly retains a failed specialist case).","steps":["Independent feasibility and cost evaluation of the strongest modeled SRAM/hybrid opponent."],"accept":"Independent feasibility and cost evaluation of the strongest modeled SRAM/hybrid opponent.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F09"],"gate":"Review findings closed","owner":"research lane, floor lane 3, coordinator","manual_page":null,"finding":"R2-F09","finding_title":"The economic model explicitly retains a failed specialist case","finding_priority":"P1 - founding claim not yet earned","owner_lane":"research lane, floor lane 3, coordinator","run_status":"NOT RUN","base_test_ids":["ADV-05","ADV-08","ECO-03","ECO-08","LEAD-03"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F09 (P1, the external review): the regression's harness is the owner lane's (research lane, floor lane 3, coordinator); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F09-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F09 (P1, the external review): the regression's harness is the owner lane's (research lane, floor lane 3, coordinator); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F09-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F09-R03","title":"GPU owners and entrants remain viable under the approved scenario envelope without assuming chip absence or death.","setup":"The regression R2-F09 requires (review R2 finding F09: The economic model explicitly retains a failed specialist case).","steps":["GPU owners and entrants remain viable under the approved scenario envelope without assuming chip absence or death."],"accept":"GPU owners and entrants remain viable under the approved scenario envelope without assuming chip absence or death.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F09"],"gate":"Review findings closed","owner":"research lane, floor lane 3, coordinator","manual_page":null,"finding":"R2-F09","finding_title":"The economic model explicitly retains a failed specialist case","finding_priority":"P1 - founding claim not yet earned","owner_lane":"research lane, floor lane 3, coordinator","run_status":"NOT RUN","base_test_ids":["ADV-05","ADV-08","ECO-03","ECO-08","LEAD-03"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F09 (P1, the external review): the regression's harness is the owner lane's (research lane, floor lane 3, coordinator); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F09-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F09 (P1, the external review): the regression's harness is the owner lane's (research lane, floor lane 3, coordinator); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F09-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F10-R01","title":"Compare exact found nonce/hash sets with full-read mode, including all-hit overflow and zero-hit cases.","setup":"The regression R2-F10 requires (review R2 finding F10: CUDA production readback has an existing OpenCL optimization to borrow).","steps":["Compare exact found nonce/hash sets with full-read mode, including all-hit overflow and zero-hit cases."],"accept":"Compare exact found nonce/hash sets with full-read mode, including all-hit overflow and zero-hit cases.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P2","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F10"],"gate":"Review findings closed","owner":"worker lane (new)","manual_page":null,"finding":"R2-F10","finding_title":"CUDA production readback has an existing OpenCL optimization to borrow","finding_priority":"P2 - byte-preserving performance experiment","owner_lane":"worker lane (new)","run_status":"NOT RUN","base_test_ids":["GPU-06","GPU-08","POW-01","UX-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F10 (P2, the external review): the regression's harness is the owner lane's (worker lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F10-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F10 (P2, the external review): the regression's harness is the owner lane's (worker lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F10-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F10-R02","title":"Test stale jobs, high-32 rollover, tail batches and asynchronous buffer reuse.","setup":"The regression R2-F10 requires (review R2 finding F10: CUDA production readback has an existing OpenCL optimization to borrow).","steps":["Test stale jobs, high-32 rollover, tail batches and asynchronous buffer reuse."],"accept":"Test stale jobs, high-32 rollover, tail batches and asynchronous buffer reuse.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P2","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F10"],"gate":"Review findings closed","owner":"worker lane (new)","manual_page":null,"finding":"R2-F10","finding_title":"CUDA production readback has an existing OpenCL optimization to borrow","finding_priority":"P2 - byte-preserving performance experiment","owner_lane":"worker lane (new)","run_status":"NOT RUN","base_test_ids":["GPU-06","GPU-08","POW-01","UX-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F10 (P2, the external review): the regression's harness is the owner lane's (worker lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F10-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F10 (P2, the external review): the regression's harness is the owner lane's (worker lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F10-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F10-R03","title":"Compare production throughput and wall energy, not only the isolated kernel timer.","setup":"The regression R2-F10 requires (review R2 finding F10: CUDA production readback has an existing OpenCL optimization to borrow).","steps":["Compare production throughput and wall energy, not only the isolated kernel timer."],"accept":"Compare production throughput and wall energy, not only the isolated kernel timer.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P2","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F10"],"gate":"Review findings closed","owner":"worker lane (new)","manual_page":null,"finding":"R2-F10","finding_title":"CUDA production readback has an existing OpenCL optimization to borrow","finding_priority":"P2 - byte-preserving performance experiment","owner_lane":"worker lane (new)","run_status":"NOT RUN","base_test_ids":["GPU-06","GPU-08","POW-01","UX-08"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F10 (P2, the external review): the regression's harness is the owner lane's (worker lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F10-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F10 (P2, the external review): the regression's harness is the owner lane's (worker lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F10-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F11-R01","title":"Goal switch from an efficiency prior can explore higher core/power when policy allows.","setup":"The regression R2-F11 requires (review R2 finding F11: Ember needs workload-aware identity and objective-aware search).","steps":["Goal switch from an efficiency prior can explore higher core/power when policy allows."],"accept":"Goal switch from an efficiency prior can explore higher core/power when policy allows.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P2","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F11"],"gate":"Review findings closed","owner":"Ember lane (new)","manual_page":null,"finding":"R2-F11","finding_title":"Ember needs workload-aware identity and objective-aware search","finding_priority":"P2 - product performance","owner_lane":"Ember lane (new)","run_status":"NOT RUN","base_test_ids":["GPU-02","GPU-04","UX-02","UX-03"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F11 (P2, the external review): the regression's harness is the owner lane's (Ember lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F11-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F11 (P2, the external review): the regression's harness is the owner lane's (Ember lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F11-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F11-R02","title":"Driver, workload, dataset, compiler and device changes invalidate certification while retaining optional hints.","setup":"The regression R2-F11 requires (review R2 finding F11: Ember needs workload-aware identity and objective-aware search).","steps":["Driver, workload, dataset, compiler and device changes invalidate certification while retaining optional hints."],"accept":"Driver, workload, dataset, compiler and device changes invalidate certification while retaining optional hints.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P2","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F11"],"gate":"Review findings closed","owner":"Ember lane (new)","manual_page":null,"finding":"R2-F11","finding_title":"Ember needs workload-aware identity and objective-aware search","finding_priority":"P2 - product performance","owner_lane":"Ember lane (new)","run_status":"NOT RUN","base_test_ids":["GPU-02","GPU-04","UX-02","UX-03"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F11 (P2, the external review): the regression's harness is the owner lane's (Ember lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F11-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F11 (P2, the external review): the regression's harness is the owner lane's (Ember lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F11-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F11-R03","title":"Thermal/error/late-share events revert safely, including process or machine crash.","setup":"The regression R2-F11 requires (review R2 finding F11: Ember needs workload-aware identity and objective-aware search).","steps":["Thermal/error/late-share events revert safely, including process or machine crash."],"accept":"Thermal/error/late-share events revert safely, including process or machine crash.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P2","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F11"],"gate":"Review findings closed","owner":"Ember lane (new)","manual_page":null,"finding":"R2-F11","finding_title":"Ember needs workload-aware identity and objective-aware search","finding_priority":"P2 - product performance","owner_lane":"Ember lane (new)","run_status":"NOT RUN","base_test_ids":["GPU-02","GPU-04","UX-02","UX-03"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F11 (P2, the external review): the regression's harness is the owner lane's (Ember lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F11-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F11 (P2, the external review): the regression's harness is the owner lane's (Ember lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F11-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F12-R01","title":"Crash before/after broadcast, response timeout, restart before snapshot: no duplicate payment or silent debt loss.","setup":"The regression R2-F12 requires (review R2 finding F12: Pool payouts have a broadcast-before-durable-intent window).","steps":["Crash before/after broadcast, response timeout, restart before snapshot: no duplicate payment or silent debt loss."],"accept":"Crash before/after broadcast, response timeout, restart before snapshot: no duplicate payment or silent debt loss.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F12"],"gate":"Review findings closed","owner":"pool lane (new)","manual_page":null,"finding":"R2-F12","finding_title":"Pool payouts have a broadcast-before-durable-intent window","finding_priority":"P1 - payment integrity","owner_lane":"pool lane (new)","run_status":"NOT RUN","base_test_ids":["ZKP-05","UX-04","OPS-04"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F12 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F12-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F12 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F12-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F12-R02","title":"Same signed transaction retried, fee replacement reconciled by intent, not a new payment.","setup":"The regression R2-F12 requires (review R2 finding F12: Pool payouts have a broadcast-before-durable-intent window).","steps":["Same signed transaction retried, fee replacement reconciled by intent, not a new payment."],"accept":"Same signed transaction retried, fee replacement reconciled by intent, not a new payment.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F12"],"gate":"Review findings closed","owner":"pool lane (new)","manual_page":null,"finding":"R2-F12","finding_title":"Pool payouts have a broadcast-before-durable-intent window","finding_priority":"P1 - payment integrity","owner_lane":"pool lane (new)","run_status":"NOT RUN","base_test_ids":["ZKP-05","UX-04","OPS-04"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F12 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F12-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F12 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F12-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F12-R03","title":"Receipt reorg and finality pause leave correct pending obligations.","setup":"The regression R2-F12 requires (review R2 finding F12: Pool payouts have a broadcast-before-durable-intent window).","steps":["Receipt reorg and finality pause leave correct pending obligations."],"accept":"Receipt reorg and finality pause leave correct pending obligations.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F12"],"gate":"Review findings closed","owner":"pool lane (new)","manual_page":null,"finding":"R2-F12","finding_title":"Pool payouts have a broadcast-before-durable-intent window","finding_priority":"P1 - payment integrity","owner_lane":"pool lane (new)","run_status":"NOT RUN","base_test_ids":["ZKP-05","UX-04","OPS-04"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F12 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F12-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F12 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F12-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F13-R01","title":"Repeated authorization rejected or atomically replaces and cleans prior state.","setup":"The regression R2-F13 requires (review R2 finding F13: Pool admission and membership need bounded resources).","steps":["Repeated authorization rejected or atomically replaces and cleans prior state."],"accept":"Repeated authorization rejected or atomically replaces and cleans prior state.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F13"],"gate":"Review findings closed","owner":"pool lane (new)","manual_page":null,"finding":"R2-F13","finding_title":"Pool admission and membership need bounded resources","finding_priority":"P1 - service resilience","owner_lane":"pool lane (new)","run_status":"NOT RUN","base_test_ids":["OPS-06","UX-04","UX-05","UX-06"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F13 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F13-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F13 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F13-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F13-R02","title":"Oversized unterminated frame rejected within fixed memory/time budget.","setup":"The regression R2-F13 requires (review R2 finding F13: Pool admission and membership need bounded resources).","steps":["Oversized unterminated frame rejected within fixed memory/time budget."],"accept":"Oversized unterminated frame rejected within fixed memory/time budget.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F13"],"gate":"Review findings closed","owner":"pool lane (new)","manual_page":null,"finding":"R2-F13","finding_title":"Pool admission and membership need bounded resources","finding_priority":"P1 - service resilience","owner_lane":"pool lane (new)","run_status":"NOT RUN","base_test_ids":["OPS-06","UX-04","UX-05","UX-06"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F13 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F13-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F13 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F13-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F13-R03","title":"Slow clients and invalid share floods cannot grow unbounded member, nonce or outgoing state.","setup":"The regression R2-F13 requires (review R2 finding F13: Pool admission and membership need bounded resources).","steps":["Slow clients and invalid share floods cannot grow unbounded member, nonce or outgoing state."],"accept":"Slow clients and invalid share floods cannot grow unbounded member, nonce or outgoing state.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F13"],"gate":"Review findings closed","owner":"pool lane (new)","manual_page":null,"finding":"R2-F13","finding_title":"Pool admission and membership need bounded resources","finding_priority":"P1 - service resilience","owner_lane":"pool lane (new)","run_status":"NOT RUN","base_test_ids":["OPS-06","UX-04","UX-05","UX-06"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F13 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F13-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F13 (P1, the external review): the regression's harness is the owner lane's (pool lane (new)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F13-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F14-R01","title":"Public build has no default arbitrary remote execution and a documented least-privilege boundary.","setup":"The regression R2-F14 requires (review R2 finding F14: Developer fleet control must not silently become the public client trust model).","steps":["Public build has no default arbitrary remote execution and a documented least-privilege boundary."],"accept":"Public build has no default arbitrary remote execution and a documented least-privilege boundary.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F14"],"gate":"Review findings closed","owner":"app lane, relay lane","manual_page":null,"finding":"R2-F14","finding_title":"Developer fleet control must not silently become the public client trust model","finding_priority":"P1 - public client/independence gate","owner_lane":"app lane, relay lane","run_status":"NOT RUN","base_test_ids":["OPS-03","OPS-05","UX-02","UX-07"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F14 (P1, the external review): the regression's harness is the owner lane's (app lane, relay lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F14-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F14 (P1, the external review): the regression's harness is the owner lane's (app lane, relay lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F14-R01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F14-R02","title":"Automatic updates off remains off for urgent manifests until explicit action.","setup":"The regression R2-F14 requires (review R2 finding F14: Developer fleet control must not silently become the public client trust model).","steps":["Automatic updates off remains off for urgent manifests until explicit action."],"accept":"Automatic updates off remains off for urgent manifests until explicit action.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F14"],"gate":"Review findings closed","owner":"app lane, relay lane","manual_page":null,"finding":"R2-F14","finding_title":"Developer fleet control must not silently become the public client trust model","finding_priority":"P1 - public client/independence gate","owner_lane":"app lane, relay lane","run_status":"NOT RUN","base_test_ids":["OPS-03","OPS-05","UX-02","UX-07"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F14 (P1, the external review): the regression's harness is the owner lane's (app lane, relay lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F14-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F14 (P1, the external review): the regression's harness is the owner lane's (app lane, relay lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F14-R02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R2-F14-R03","title":"A compromised fleet/update signing key cannot silently acquire wallet access or activate a consensus change.","setup":"The regression R2-F14 requires (review R2 finding F14: Developer fleet control must not silently become the public client trust model).","steps":["A compromised fleet/update signing key cannot silently acquire wallet access or activate a consensus change."],"accept":"A compromised fleet/update signing key cannot silently acquire wallet access or activate a consensus change.","evidence":"The run record of the regression as its owner lane records it through tools/ci/test-record.mjs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R2-F14"],"gate":"Review findings closed","owner":"app lane, relay lane","manual_page":null,"finding":"R2-F14","finding_title":"Developer fleet control must not silently become the public client trust model","finding_priority":"P1 - public client/independence gate","owner_lane":"app lane, relay lane","run_status":"NOT RUN","base_test_ids":["OPS-03","OPS-05","UX-02","UX-07"],"updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"R2-F14 (P1, the external review): the regression's harness is the owner lane's (app lane, relay lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F14-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R2-F14 (P1, the external review): the regression's harness is the owner lane's (app lane, relay lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"R2-F14-R03","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}}]},{"code":"INT","title":"INT: the master edition's integration gates (R1, the full-system review)","source":"docs/plans/igneum-2.0-master/traceability.json integration_gates","gate":"Integration gates closed","owner":"the owner lanes per the coordinator's crosswalk","fixtures":["F0","F5"],"summary":"18 integration gates; each reads NOT RUN until its owner lane records a run","tests":[{"id":"INT-01","title":"Real proof H cannot authenticate a different statement under a warm cache.","setup":"Integration gate INT-01 of the master edition (R1 / Additional regression gates).","steps":["Real proof H cannot authenticate a different statement under a warm cache."],"accept":"Real proof H cannot authenticate a different statement under a warm cache.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"proving lane (a6e8f84588b809d62)","manual_page":null,"owner_lane":"proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-01 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-01 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-01","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-02","title":"Warm/cold/relay/restart/concurrent cache order does not change block or payout decisions; negative cache isolated.","setup":"Integration gate INT-02 of the master edition (R1 / Additional regression gates).","steps":["Warm/cold/relay/restart/concurrent cache order does not change block or payout decisions; negative cache isolated."],"accept":"Warm/cold/relay/restart/concurrent cache order does not change block or payout decisions; negative cache isolated.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"proving lane (a6e8f84588b809d62)","manual_page":null,"owner_lane":"proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-02 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-02 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-02","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-03","title":"Durable payout outbox survives every crash/RPC boundary without duplicate or lost liabilities.","setup":"Integration gate INT-03 of the master edition (R1 / Additional regression gates).","steps":["Durable payout outbox survives every crash/RPC boundary without duplicate or lost liabilities."],"accept":"Durable payout outbox survives every crash/RPC boundary without duplicate or lost liabilities.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"pool lane (a1c484c48a62948c2)","manual_page":null,"owner_lane":"pool lane (a1c484c48a62948c2)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","run_id":"pool-int-20261009-01","evidence_path":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","updated":"2026-10-08T23:47:51.313Z","evidence_record":{"requirement_id":"INT-03","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","in_progress":false,"coverage":"partial: the pool suite's durable payment intent tests (payout::intent_tests: a restart from the pre-broadcast snapshot, a lost send response, a crash on either side of the broadcast, a stuck transaction replaced under the same intent, a reorged receipt and a finality pause, a failed transaction, a ledger that cannot be written: never a duplicate or a lost liability) on every 2.0.2 node sha named 8 to 9 October 2026 (7cfa422a 53, f775c347 53, a284380b 54, d657e490 54, 94e4c6ba 54, 490ebcfe 54, cf32be79 54, all rc 0 at gate priority on build-6); the live-network half (a real payout across a crash on the roll) is the roll's","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z"},"evidence_records":{"suite:pool":{"requirement_id":"INT-03","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","in_progress":false,"coverage":"partial: the pool suite's durable payment intent tests (payout::intent_tests: a restart from the pre-broadcast snapshot, a lost send response, a crash on either side of the broadcast, a stuck transaction replaced under the same intent, a reorged receipt and a finality pause, a failed transaction, a ledger that cannot be written: never a duplicate or a lost liability) on every 2.0.2 node sha named 8 to 9 October 2026 (7cfa422a 53, f775c347 53, a284380b 54, d657e490 54, 94e4c6ba 54, 490ebcfe 54, cf32be79 54, all rc 0 at gate priority on build-6); the live-network half (a real payout across a crash on the roll) is the roll's","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-04","title":"Corrupt existing pool state, disk-full and reorg cause safe recovery, not silent empty balances.","setup":"Integration gate INT-04 of the master edition (R1 / Additional regression gates).","steps":["Corrupt existing pool state, disk-full and reorg cause safe recovery, not silent empty balances."],"accept":"Corrupt existing pool state, disk-full and reorg cause safe recovery, not silent empty balances.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"pool lane (a1c484c48a62948c2)","manual_page":null,"owner_lane":"pool lane (a1c484c48a62948c2)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","run_id":"pool-int-20261009-01","evidence_path":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","updated":"2026-10-08T23:47:51.313Z","evidence_record":{"requirement_id":"INT-04","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","in_progress":false,"coverage":"partial: the pool suite's ledger tests (state::ledger_tests: a corrupt, truncated or digest-failing state.json restores the previous snapshot or refuses to start, never an empty ledger; the migration of pre-intent payments) and the disk-full test (payout::intent_tests::a_ledger_that_cannot_be_written_broadcasts_nothing) on the same seven shas; the live-network half (corruption and a reorg on the roll) is the roll's","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z"},"evidence_records":{"suite:pool":{"requirement_id":"INT-04","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","in_progress":false,"coverage":"partial: the pool suite's ledger tests (state::ledger_tests: a corrupt, truncated or digest-failing state.json restores the previous snapshot or refuses to start, never an empty ledger; the migration of pre-intent payments) and the disk-full test (payout::intent_tests::a_ledger_that_cannot_be_written_broadcasts_nothing) on the same seven shas; the live-network half (corruption and a reorg on the roll) is the roll's","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-05","title":"The supplied finality implementation matches the approved anchor rule after >window healing.","setup":"Integration gate INT-05 of the master edition (R1 / Additional regression gates).","steps":["The supplied finality implementation matches the approved anchor rule after >window healing."],"accept":"The supplied finality implementation matches the approved anchor rule after >window healing.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"node lane (a283f5f0d364ceef0)","manual_page":null,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-05 (R1 integration gate): the gate's harness is the owner lane's (node lane (a283f5f0d364ceef0)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-05 (R1 integration gate): the gate's harness is the owner lane's (node lane (a283f5f0d364ceef0)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-06","title":"Recovery tests state and preserve their weaker fault bound; interfaces never label it as a stronger guarantee.","setup":"Integration gate INT-06 of the master edition (R1 / Additional regression gates).","steps":["Recovery tests state and preserve their weaker fault bound; interfaces never label it as a stronger guarantee."],"accept":"Recovery tests state and preserve their weaker fault bound; interfaces never label it as a stronger guarantee.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"node lane (a283f5f0d364ceef0)","manual_page":null,"owner_lane":"node lane (a283f5f0d364ceef0)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-06 (R1 integration gate): the gate's harness is the owner lane's (node lane (a283f5f0d364ceef0)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-06 (R1 integration gate): the gate's harness is the owner lane's (node lane (a283f5f0d364ceef0)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-07","title":"One v6 object agrees in node, pool, CPU verifier and each supported GPU host across activation.","definition":"V6-12 (R1 p. 213): the release manifest is signed and binds lockfile hashes, kernel and host binaries, supported devices and drivers, the prover server patch, memory thresholds and tuner identity, with end-to-end artifact authentication and a clean-install accepted-and-paid test on an independent machine with no unpublished files, symlinks or shell overrides.","setup":"Integration gate INT-07 of the master edition (R1 / Additional regression gates).","steps":["One v6 object agrees in node, pool, CPU verifier and each supported GPU host across activation."],"accept":"One v6 object agrees in node, pool, CPU verifier and each supported GPU host across activation.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)","manual_page":null,"owner_lane":"CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)","run_status":"FAIL","master_status":"PROPOSED / NOT RUN","run_id":"canary-202-20261009-01","evidence_path":"tools/ci/canary/1176efb9.json; build-1:/srv/canary/1176efb9/mini/00-verdict.txt; build-1:/srv/canary/1176efb9/lp-4090-11/fleet-block.json; build-1:/srv/canary/1176efb9/lp-4090-43/00-verdict.txt","updated":"2026-10-09T08:59:17.558Z","evidence_record":{"requirement_id":"INT-07","decision":"FAIL","method":"team-reported","cell":"canary:fresh-install","manifest_sha":"5d53a591","run_id":"canary-202-20261009-01","evidence":"tools/ci/canary/1176efb9.json; build-1:/srv/canary/1176efb9/mini/00-verdict.txt; build-1:/srv/canary/1176efb9/lp-4090-11/fleet-block.json; build-1:/srv/canary/1176efb9/lp-4090-43/00-verdict.txt","in_progress":false,"coverage":"partial: V6-12's clean-install half (one published object installed fresh, synced, mined, proved and paid on one host per artefact); the cross-host agreement half (node, pool, CPU verifier, each GPU host across activation) is harness:same-work's","release_identity":{"commit":"1176efb9 (release-2.0.2 kit 2 tip; node 5d53a591)","lockfile":"","binary":"Igneum-Miner-2.0.2-5d53a591-1176efb9.dmg 66137cd8…","network_object":"igneum-devnet-4, chain id 4465","activation":"","profile_hashes":""},"claim_impact":"INT-07's clean-install half on kit 2 reads FAIL on the fleet canary (the walk bound at the fifth cut); the mac block PASS stands as the Mac entry's evidence; no fleet, hive or windows entry publishes until a record reads PASS on its own block","reviewer":"","at":"2026-10-09T08:59:17.558Z","note":"mac PASS (the Mac entry published on it 02:20 UK); fleet FAIL at sync (lp-4090-11, 04:04 UK: the walk bound at the reference chain's fifth cut under fix 2); hive FAIL (lp-4090-43: the lost-proof loop at the first class v5 cut, 'the proofs of 2 carried records are not held yet'); no windows block (the Windows order's default fired: no push without a proved shard). No fleet, hive or windows 2.0.2 entry publishes on this record. | Kit 2 (tip 1176efb9, node 5d53a591): the mac block PASS under tools/ci/canary-check.sh (the project's macOS machine: synced from empty in 2,016 s, 18 blocks in five minutes at 12.65 MH/s, 0 refusals, shard n/a on Apple silicon, the tip inside ten of the age-adjusted feed, quit in 4 s); the fleet block FAIL at sync (lp-4090-11, 04:04 UK: a fresh 2.0.2 node walls at the reference chain's fifth cut under fix 2's walk bound, 'passed 7200 blocks (2 x epoch_blocks) without meeting a block this executor holds a record of'; the kit ran clean; build-1:/srv/canary/1176efb9/lp-4090-11/fleet-block.json); the hive block reads about 05:30 UK, the windows block on the relay lane's clock. No fleet, hive or windows entry publishes on this record; the Mac entry published on its PASS block at 02:20 UK. Kit 1's 94e4c6ba FAIL (the wedge) stands as that sha's record. The recorder's rule: a measured FAIL on one block is a FAIL on the case. Re-recorded 9 October 2026 04:3x UK with the hive block (lp-4090-43, FAIL at sync on the lost-proof loop) and the re-shaped fleet block (no sync.feed object). Cell note brought up to the record's three blocks at 08:1x UK (the hive landing had re-recorded the batch note only). Re-recorded 9 October 2026 08:2x UK with hive-2, the lp-4090-43 kit-binary block and hive-3 (all FAIL at sync; the sync gate closed the hive run class). Re-recorded 08:3x UK: the record's own verdict FAIL. (The check now refuses a record whose own verdict reads PASS over a FAIL block, 09:0x UK.) Re-recorded 09:3x UK with the mini's recovery legs on the mac block. Re-recorded 09:5x UK: the reboot leg PASS.","network_label":"on an island, not a network"},"evidence_records":{"canary:fresh-install":{"requirement_id":"INT-07","decision":"FAIL","method":"team-reported","cell":"canary:fresh-install","manifest_sha":"5d53a591","run_id":"canary-202-20261009-01","evidence":"tools/ci/canary/1176efb9.json; build-1:/srv/canary/1176efb9/mini/00-verdict.txt; build-1:/srv/canary/1176efb9/lp-4090-11/fleet-block.json; build-1:/srv/canary/1176efb9/lp-4090-43/00-verdict.txt","in_progress":false,"coverage":"partial: V6-12's clean-install half (one published object installed fresh, synced, mined, proved and paid on one host per artefact); the cross-host agreement half (node, pool, CPU verifier, each GPU host across activation) is harness:same-work's","release_identity":{"commit":"1176efb9 (release-2.0.2 kit 2 tip; node 5d53a591)","lockfile":"","binary":"Igneum-Miner-2.0.2-5d53a591-1176efb9.dmg 66137cd8…","network_object":"igneum-devnet-4, chain id 4465","activation":"","profile_hashes":""},"claim_impact":"INT-07's clean-install half on kit 2 reads FAIL on the fleet canary (the walk bound at the fifth cut); the mac block PASS stands as the Mac entry's evidence; no fleet, hive or windows entry publishes until a record reads PASS on its own block","reviewer":"","at":"2026-10-09T08:59:17.558Z","note":"mac PASS (the Mac entry published on it 02:20 UK); fleet FAIL at sync (lp-4090-11, 04:04 UK: the walk bound at the reference chain's fifth cut under fix 2); hive FAIL (lp-4090-43: the lost-proof loop at the first class v5 cut, 'the proofs of 2 carried records are not held yet'); no windows block (the Windows order's default fired: no push without a proved shard). No fleet, hive or windows 2.0.2 entry publishes on this record. | Kit 2 (tip 1176efb9, node 5d53a591): the mac block PASS under tools/ci/canary-check.sh (the project's macOS machine: synced from empty in 2,016 s, 18 blocks in five minutes at 12.65 MH/s, 0 refusals, shard n/a on Apple silicon, the tip inside ten of the age-adjusted feed, quit in 4 s); the fleet block FAIL at sync (lp-4090-11, 04:04 UK: a fresh 2.0.2 node walls at the reference chain's fifth cut under fix 2's walk bound, 'passed 7200 blocks (2 x epoch_blocks) without meeting a block this executor holds a record of'; the kit ran clean; build-1:/srv/canary/1176efb9/lp-4090-11/fleet-block.json); the hive block reads about 05:30 UK, the windows block on the relay lane's clock. No fleet, hive or windows entry publishes on this record; the Mac entry published on its PASS block at 02:20 UK. Kit 1's 94e4c6ba FAIL (the wedge) stands as that sha's record. The recorder's rule: a measured FAIL on one block is a FAIL on the case. Re-recorded 9 October 2026 04:3x UK with the hive block (lp-4090-43, FAIL at sync on the lost-proof loop) and the re-shaped fleet block (no sync.feed object). Cell note brought up to the record's three blocks at 08:1x UK (the hive landing had re-recorded the batch note only). Re-recorded 9 October 2026 08:2x UK with hive-2, the lp-4090-43 kit-binary block and hive-3 (all FAIL at sync; the sync gate closed the hive run class). Re-recorded 08:3x UK: the record's own verdict FAIL. (The check now refuses a record whose own verdict reads PASS over a FAIL block, 09:0x UK.) Re-recorded 09:3x UK with the mini's recovery legs on the mac block. Re-recorded 09:5x UK: the reboot leg PASS.","network_label":"on an island, not a network"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-08","title":"Census, production acceptance, schedule counters and live-dataset tests use the identical frozen contract.","setup":"Integration gate INT-08 of the master edition (R1 / Additional regression gates).","steps":["Census, production acceptance, schedule counters and live-dataset tests use the identical frozen contract."],"accept":"Census, production acceptance, schedule counters and live-dataset tests use the identical frozen contract.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)","manual_page":null,"owner_lane":"CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-08 (R1 integration gate): the gate's harness is the owner lane's (CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-08 (R1 integration gate): the gate's harness is the owner lane's (CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-09","title":"Eight- and twelve-GiB epoch transitions recover deliberately without relying on repeated OOM/watchdog cycles.","setup":"Integration gate INT-09 of the master edition (R1 / Additional regression gates).","steps":["Eight- and twelve-GiB epoch transitions recover deliberately without relying on repeated OOM/watchdog cycles."],"accept":"Eight- and twelve-GiB epoch transitions recover deliberately without relying on repeated OOM/watchdog cycles.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"app lane","manual_page":null,"owner_lane":"app lane","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-09 (R1 integration gate): the gate's harness is the owner lane's (app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-09","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-09 (R1 integration gate): the gate's harness is the owner lane's (app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-09","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-10","title":"Metal/CUDA/OpenCL exact dataset geometry agrees; unsupported packs reject before launch.","setup":"Integration gate INT-10 of the master edition (R1 / Additional regression gates).","steps":["Metal/CUDA/OpenCL exact dataset geometry agrees; unsupported packs reject before launch."],"accept":"Metal/CUDA/OpenCL exact dataset geometry agrees; unsupported packs reject before launch.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)","manual_page":null,"owner_lane":"CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-10 (R1 integration gate): the gate's harness is the owner lane's (CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-10","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-10 (R1 integration gate): the gate's harness is the owner lane's (CI steward with the hash lane (a690540514aa453d7) and the worker lane (a9e87343f008e0edd)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-10","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-11","title":"Only a memory-reserved proving job launches; mining buffers really release when required.","setup":"Integration gate INT-11 of the master edition (R1 / Additional regression gates).","steps":["Only a memory-reserved proving job launches; mining buffers really release when required."],"accept":"Only a memory-reserved proving job launches; mining buffers really release when required.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"app lane","manual_page":null,"owner_lane":"app lane","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-11 (R1 integration gate): the gate's harness is the owner lane's (app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-11","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-11 (R1 integration gate): the gate's harness is the owner lane's (app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-11","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-12","title":"Transient shard errors can retry safely; expiration, loss and paid work remain distinct durable outcomes.","setup":"Integration gate INT-12 of the master edition (R1 / Additional regression gates).","steps":["Transient shard errors can retry safely; expiration, loss and paid work remain distinct durable outcomes."],"accept":"Transient shard errors can retry safely; expiration, loss and paid work remain distinct durable outcomes.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"proving lane (a6e8f84588b809d62) and fleet lane (ac055d60427caab99)","manual_page":null,"owner_lane":"proving lane (a6e8f84588b809d62) and fleet lane (ac055d60427caab99)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-12 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62) and fleet lane (ac055d60427caab99)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-12","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-12 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62) and fleet lane (ac055d60427caab99)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-12","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-13","title":"Ember cannot retain a rate-ineligible prior; material workload changes invalidate incompatible profiles.","setup":"Integration gate INT-13 of the master edition (R1 / Additional regression gates).","steps":["Ember cannot retain a rate-ineligible prior; material workload changes invalidate incompatible profiles."],"accept":"Ember cannot retain a rate-ineligible prior; material workload changes invalidate incompatible profiles.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"Ember lane (a04fe3451877e2ff0) with the app lane","manual_page":null,"owner_lane":"Ember lane (a04fe3451877e2ff0) with the app lane","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-13 (R1 integration gate): the gate's harness is the owner lane's (Ember lane (a04fe3451877e2ff0) with the app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-13","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-13 (R1 integration gate): the gate's harness is the owner lane's (Ember lane (a04fe3451877e2ff0) with the app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-13","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-14","title":"Protected helper and per-device leases restore owned settings on normal/abnormal exit; real ACL/security tests.","setup":"Integration gate INT-14 of the master edition (R1 / Additional regression gates).","steps":["Protected helper and per-device leases restore owned settings on normal/abnormal exit; real ACL/security tests."],"accept":"Protected helper and per-device leases restore owned settings on normal/abnormal exit; real ACL/security tests.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"Ember lane (a04fe3451877e2ff0) with the app lane","manual_page":null,"owner_lane":"Ember lane (a04fe3451877e2ff0) with the app lane","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-14 (R1 integration gate): the gate's harness is the owner lane's (Ember lane (a04fe3451877e2ff0) with the app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-14","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-14 (R1 integration gate): the gate's harness is the owner lane's (Ember lane (a04fe3451877e2ff0) with the app lane); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-14","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-15","title":"Public PoP replay is not session authorization; payout/server/network binding enforced.","setup":"Integration gate INT-15 of the master edition (R1 / Additional regression gates).","steps":["Public PoP replay is not session authorization; payout/server/network binding enforced."],"accept":"Public PoP replay is not session authorization; payout/server/network binding enforced.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"pool lane (a1c484c48a62948c2)","manual_page":null,"owner_lane":"pool lane (a1c484c48a62948c2)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","run_id":"pool-int-20261009-01","evidence_path":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","updated":"2026-10-08T23:47:51.313Z","evidence_record":{"requirement_id":"INT-15","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","in_progress":false,"coverage":"partial: the pool suite's binding v2 and session tests (server::authorise_tests: a public PoP replayed into another session, payout, pool or chain, or under another key, refused; the policy follows the network; protocol::tests::the_session_binding_digest_is_the_nodes against consensus-core's session_binding_v2 since node ab489403) on the same seven shas; the live-network half (a 2.0.2 miner's authorize against the rolled pool) is the roll's","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z"},"evidence_records":{"suite:pool":{"requirement_id":"INT-15","decision":"NOT RUN","method":"native","cell":"suite:pool","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/pool-review-b-20261008-01/pool-suite-build-6.log; build-6:/srv/builds/_log/builds.jsonl","in_progress":false,"coverage":"partial: the pool suite's binding v2 and session tests (server::authorise_tests: a public PoP replayed into another session, payout, pool or chain, or under another key, refused; the policy follows the network; protocol::tests::the_session_binding_digest_is_the_nodes against consensus-core's session_binding_v2 since node ab489403) on the same seven shas; the live-network half (a 2.0.2 miner's authorize against the rolled pool) is the roll's","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-16","title":"Pool parsing/queues/connection and crypto budgets remain bounded under controlled adversarial traffic.","setup":"Integration gate INT-16 of the master edition (R1 / Additional regression gates).","steps":["Pool parsing/queues/connection and crypto budgets remain bounded under controlled adversarial traffic."],"accept":"Pool parsing/queues/connection and crypto budgets remain bounded under controlled adversarial traffic.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"pool lane (a1c484c48a62948c2)","manual_page":null,"owner_lane":"pool lane (a1c484c48a62948c2)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","run_id":"pool-int-20261009-01","evidence_path":"build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/README.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/README.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/README.json","updated":"2026-10-08T23:47:51.313Z","evidence_record":{"requirement_id":"INT-16","decision":"NOT RUN","method":"native","cell":"harness:same-work","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/README.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/README.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/README.json","in_progress":false,"coverage":"partial: the member-side re-check over the job context (igneum-pool recheck, the pool's own share verifier per nonce against the CPU reference): the d1-pairing row PASS x3 on the class v6 object (context 02, 3,145,728 of 3,145,728, 256 of 256 shares accepted, the boundary switched), the kit row PASS x3 on the class v5 chain-seed object (context 03, the kit as pinned, the same counts), the kit row on 02 BLOCKED by the kit's V5 pins (the reason in each file); the bounded-input half (slow readers, oversized frames, floods under controlled traffic) is the pool suite's frame, admission and share tests, not a network run","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z","network_label":"on an island, not a network"},"evidence_records":{"harness:same-work":{"requirement_id":"INT-16","decision":"NOT RUN","method":"native","cell":"harness:same-work","manifest_sha":"490ebcfe","run_id":"pool-int-20261009-01","evidence":"build-1:/srv/artefacts/tas/same-work-20261008-02/pool/kit-row/README.json; build-1:/srv/artefacts/tas/same-work-20261008-02/pool/d1-pairing/README.json; build-1:/srv/artefacts/tas/same-work-20261008-03/pool/kit-row/README.json","in_progress":false,"coverage":"partial: the member-side re-check over the job context (igneum-pool recheck, the pool's own share verifier per nonce against the CPU reference): the d1-pairing row PASS x3 on the class v6 object (context 02, 3,145,728 of 3,145,728, 256 of 256 shares accepted, the boundary switched), the kit row PASS x3 on the class v5 chain-seed object (context 03, the kit as pinned, the same counts), the kit row on 02 BLOCKED by the kit's V5 pins (the reason in each file); the bounded-input half (slow readers, oversized frames, floods under controlled traffic) is the pool suite's frame, admission and share tests, not a network run","release_identity":{"commit":"release-2.0.2 5db25637 (pool tree = pool-recheck-202 909ae65b + the INT-15 switch ef98ba93); pool-2.0 587cb565 the same tree","lockfile":"pool/Cargo.lock at 5db25637","binary":"igneum-pool on build-6: 2f6378e4e0023ba0 (the kit row on 02, 00c7e1db's tree), 46e4c44080d87db3 (the kit row on 03, 909ae65b's tree); on build-4 10425cc9e216a66f (the d1-pairing row: igneum-pow 1a938abe + vendored class-v6-node-review e8773ff5)","network_object":"the suites: none (a crate suite); the same-work rows: context 02 the chain-seed class v6 object 0x2a1d6caab4c24564 over node1-state.igsd1 (abb58003), context 03 devnet-4's class v5 object at epoch 2, 0x81fbfa3aa413173f, over state-epoch2.igsd1 (f36e6bba)","activation":"none","profile_hashes":""},"claim_impact":"INT-03/04/15: the pool's payment integrity, ledger recovery and session authorisation hold by construction in the crate on every 2.0.2 node sha named tonight; the live-network halves ride the roll. INT-16: the pool's share verdict equals the CPU reference per nonce on two live objects across a day rotation; the bounded-input half is the suite's, not a network run","reviewer":"","at":"2026-10-08T23:47:51.313Z","network_label":"on an island, not a network"}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-17","title":"Missing oracle/keys/mandatory real-proof fixture blocks the applicable production acceptance gate.","setup":"Integration gate INT-17 of the master edition (R1 / Additional regression gates).","steps":["Missing oracle/keys/mandatory real-proof fixture blocks the applicable production acceptance gate."],"accept":"Missing oracle/keys/mandatory real-proof fixture blocks the applicable production acceptance gate.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"proving lane (a6e8f84588b809d62)","manual_page":null,"owner_lane":"proving lane (a6e8f84588b809d62)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-17 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-17","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-17 (R1 integration gate): the gate's harness is the owner lane's (proving lane (a6e8f84588b809d62)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-17","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"INT-18","title":"Whole-system economics pass the strongest feasible adversary, including sunk development and multi-epoch survival.","setup":"Integration gate INT-18 of the master edition (R1 / Additional regression gates).","steps":["Whole-system economics pass the strongest feasible adversary, including sunk development and multi-epoch survival."],"accept":"Whole-system economics pass the strongest feasible adversary, including sunk development and multi-epoch survival.","evidence":"The run record of the gate as its owner lane records it through tools/ci/test-record.mjs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","status":"NOT RUN","source":["R1"],"gate":"Integration gates closed","owner":"research lane (ad6a2bd47d4a46105)","manual_page":null,"owner_lane":"research lane (ad6a2bd47d4a46105)","run_status":"NOT RUN","master_status":"PROPOSED / NOT RUN","updated":"2026-10-08T20:10:24.556Z","evidence_record":{"reason":"INT-18 (R1 integration gate): the gate's harness is the owner lane's (research lane (ad6a2bd47d4a46105)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-18","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"INT-18 (R1 integration gate): the gate's harness is the owner lane's (research lane (ad6a2bd47d4a46105)); not yet named in the map","at":"2026-10-08T20:10:24.556Z","method":"static","requirement_id":"INT-18","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}}],"notes":[{"at":"2026-10-08T20:10:24.874Z","text":"REC-01 (the master edition's one unresolved interpretation, finality pause-only healing: R1's I03 stale predicate against R2's F04 backfill caveat): closure evidence as the finality and node lanes recorded it on 8 October 2026: rule v4 at release-2.0.0-node 12424341's line, mode recovery by the founder's 19:57 ruling (the lock labelled recovery, never final), both real-node lines PASS tonight by the 6.7 pause criterion, FIN-02 PASS at 0218d6bf1 on the simulator half; status RUNNING until the beyond-window healing case with and without historical data is run natively (the node lane's case tomorrow). Applies to INT-05 and INT-06."}]},{"code":"VR","title":"VR: the token value and network leadership rules (normative, proposed, requiring ratification)","source":"docs/plans/igneum-2.0-master/token-value/rules-and-gates.json rules","gate":"Ratification by the founder and each rule's owner role","owner":"founder (ratification); the owner role per rule","fixtures":["F0"],"summary":"40 normative rules from Igneum 2.0 - Token Value & Network Leadership 1.0-proposed (snapshot 2026-10-08); Supplement to original master and 128-case test standard; not a price/rank guarantee","tests":[{"id":"VR-01","title":"One monetary contract","requirement":"Ratify one maximum-supply, subsidy and change-policy contract. No unexplained tail escape, automatic emergency mint or price-triggered issuance.","accept":"Ratify one maximum-supply, subsidy and change-policy contract. No unexplained tail escape, automatic emergency mint or price-triggered issuance.","evidence":"D01 decision, normative spec, executable supply tests and consistent public text.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + governance","owner_role":"Protocol + governance","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-02","title":"Independent supply accounting","requirement":"Make circulating, issued, burned, locked and maximum supply independently reproducible. Count bridges and wrappers without creating fictitious native supply.","accept":"Make circulating, issued, burned, locked and maximum supply independently reproducible. Count bridges and wrappers without creating fictitious native supply.","evidence":"Two independent supply calculations with exact integer reconciliation.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + measurement","owner_role":"Protocol + measurement","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-03","title":"Equal opportunity at launch","requirement":"No premine or privileged devnet conversion under the stated fair-launch policy. Publish efficient software and launch conditions before activation.","accept":"No premine or privileged devnet conversion under the stated fair-launch policy. Publish efficient software and launch conditions before activation.","evidence":"Genesis audit, launch rehearsal, insider disclosures and public release history.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Release + ecosystem","owner_role":"Release + ecosystem","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-04","title":"No artificial return promise","requirement":"Do not advertise guaranteed appreciation, passive returns without necessary work, a redemption floor or electricity-backed value.","accept":"Do not advertise guaranteed appreciation, passive returns without necessary work, a redemption floor or electricity-backed value.","evidence":"Product terms, source of rewards and public-claim review.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Governance + counsel","owner_role":"Governance + counsel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-05","title":"Fund necessary security","requirement":"Model miners, internal provers, minimum validators and maintenance separately through declining issuance. No assumption that an external sale automatically funds all roles.","accept":"Model miners, internal provers, minimum validators and maintenance separately through declining issuance. No assumption that an external sale automatically funds all roles.","evidence":"Role-by-role cash flow, adverse scenarios and committed initial resources.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Economics + protocol","owner_role":"Economics + protocol","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-06","title":"Honest rule change","requirement":"Publish rationale, impact, adoption path and compatibility limits before a material monetary change. Do not pretend software can prevent all future voluntary forks.","accept":"Publish rationale, impact, adoption path and compatibility limits before a material monetary change. Do not pretend software can prevent all future voluntary forks.","evidence":"Versioned proposals, reviewer comments, adoption and dissent documentation.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + governance","owner_role":"Protocol + governance","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-07","title":"Transparent fee routing","requirement":"Every fee, burn, operator payment and optional Labs charge has an explicit source and recipient. No new team tax hidden in a commercial label.","accept":"Every fee, burn, operator payment and optional Labs charge has an explicit source and recipient. No new team tax hidden in a commercial label.","evidence":"Executable fee tests and reconciliation to invoices/receipts.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Economics + protocol","owner_role":"Economics + protocol","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-08","title":"Separate value and money flows","requirement":"Distinguish job turnover, fees, operator income, Labs income, token holdings and market value. Do not count the same payment or saving twice.","accept":"Distinguish job turnover, fees, operator income, Labs income, token holdings and market value. Do not count the same payment or saving twice.","evidence":"Reconciled flow diagram and reproducible metric definitions.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Economics + measurement","owner_role":"Economics + measurement","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-09","title":"Accessible hardware economics","requirement":"Fix the reference cohort and scenarios in advance. Allow the strongest feasible programmable multi-epoch specialist, including sunk development and alternative memory.","accept":"Fix the reference cohort and scenarios in advance. Allow the strongest feasible programmable multi-epoch specialist, including sunk development and alternative memory.","evidence":"Approved original GPU/ADV/ROT/ECO profiles and independent review.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"GPU + hardware reviewer","owner_role":"GPU + hardware reviewer","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-10","title":"Mandatory correct proofs","requirement":"All activated proof decisions must bind their actual statement, kind and verifier independent of cache history. Missing trusted infrastructure must not disable enforcement.","accept":"All activated proof decisions must bind their actual statement, kind and verifier independent of cache history. Missing trusted infrastructure must not disable enforcement.","evidence":"Native warm/cold/order/restart tests and positive/negative proof fixtures.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + proving","owner_role":"Protocol + proving","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-11","title":"Literal finality","requirement":"Define fault assumptions, authority continuity and recovery. Never present a weaker recovery certificate as the stronger irreversible guarantee.","accept":"Define fault assumptions, authority continuity and recovery. Never present a weaker recovery certificate as the stronger irreversible guarantee.","evidence":"Native multi-node boundary tests and consumer label checks.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Consensus + security","owner_role":"Consensus + security","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-12","title":"Retained operator authority","requirement":"Pooling variance or buying a service does not silently transfer keys, transaction selection or finality/governance control.","accept":"Pooling variance or buying a service does not silently transfer keys, transaction selection or finality/governance control.","evidence":"Key/template substitution tests and explicit delegation contracts.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + pool","owner_role":"Protocol + pool","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-13","title":"Safe custody and consent","requirement":"Private keys, spending limits, signing displays and recovery choices remain under explicit user authority. Defaults must not conceal broad powers.","accept":"Private keys, spending limits, signing displays and recovery choices remain under explicit user authority. Defaults must not conceal broad powers.","evidence":"Wallet security review and independent user/recovery exercises.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Wallet + security","owner_role":"Wallet + security","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-14","title":"Portable verification","requirement":"Balances and receipts authenticate their roots, successful outcome and trust anchors. Necessary reconstruction data has a documented availability path.","accept":"Balances and receipts authenticate their roots, successful outcome and trust anchors. Necessary reconstruction data has a documented availability path.","evidence":"Independent receipt/client verification with hostile inputs.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Wallet + protocol","owner_role":"Wallet + protocol","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-15","title":"Price real resources","requirement":"Bound execution, verification and storage costs. Sponsored transactions have limits. No deliberate congestion solely to increase a token metric.","accept":"Bound execution, verification and storage costs. Sponsored transactions have limits. No deliberate congestion solely to increase a token metric.","evidence":"Minimum-node tests and fee/sponsor-abuse scenarios.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + economics","owner_role":"Protocol + economics","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-16","title":"No fragile stable-value promise","requirement":"Any stable-value product has explicit issuer, reserve/redemption rights, permissions and risks. No native-backed peg used merely to manufacture demand.","accept":"Any stable-value product has explicit issuer, reserve/redemption rights, permissions and risks. No native-backed peg used merely to manufacture demand.","evidence":"Independent diligence, risk limits and legal assessment before release.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Application + counsel","owner_role":"Application + counsel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-17","title":"Optional bounded bridges","requirement":"Bridge exposure is separate from core security. No bridge is mandatory for genesis or allowed to redefine base-chain finality after a loss.","accept":"Bridge exposure is separate from core security. No bridge is mandatory for genesis or allowed to redefine base-chain finality after a loss.","evidence":"External security review, loss limits and failure/isolation tests.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Application + security","owner_role":"Application + security","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-18","title":"Open work settlement","requirement":"Jobs bind program, inputs, result, verifier, deadline and payment. Gateways are replaceable and Labs approval is not required for ordinary work.","accept":"Jobs bind program, inputs, result, verifier, deadline and payment. Gateways are replaceable and Labs approval is not required for ordinary work.","evidence":"Independent request-to-paid-result test and state reconciliation.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + ecosystem","owner_role":"Protocol + ecosystem","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-19","title":"Obligation-based service bonds","requirement":"Deposits secure a specific obligation, not consensus influence. Size and failure conditions must preserve small-operator paths and handle collateral decline.","accept":"Deposits secure a specific obligation, not consensus influence. Size and failure conditions must preserve small-operator paths and handle collateral decline.","evidence":"Economic and adversarial reservation/default tests.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Economics + application","owner_role":"Economics + application","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-20","title":"Independent developer access","requirement":"Publish complete standards, fixtures and tooling. Grants reward useful maintained deliverables rather than deployments or price effects.","accept":"Publish complete standards, fixtures and tooling. Grants reward useful maintained deliverables rather than deployments or price effects.","evidence":"Unaffiliated integration and maintenance evidence.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Ecosystem","owner_role":"Ecosystem","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-21","title":"Committed maintenance","requirement":"Essential maintenance and audits need a funded runway with stress accounting, distinct from hoped-for appreciation or fundraising.","accept":"Essential maintenance and audits need a funded runway with stress accounting, distinct from hoped-for appreciation or fundraising.","evidence":"At least approved P13 runway, commitments and role costs.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Maintainers + finance","owner_role":"Maintainers + finance","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-22","title":"Founder independence","requirement":"Routine block, job, payment and recovery paths must not require a founder credential or undocumented manual action.","accept":"Routine block, job, payment and recovery paths must not require a founder credential or undocumented manual action.","evidence":"Real founder-absence exercises and intervention ledger.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Operations + independent reviewer","owner_role":"Operations + independent reviewer","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-23","title":"Measure effective control","requirement":"Report operator, pool, hosting, service and client dependencies with attribution limits. Keys and addresses are not people.","accept":"Report operator, pool, hosting, service and client dependencies with attribution limits. Keys and addresses are not people.","evidence":"Dependency/control map with uncertainty and removal experiments.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Measurement + operations","owner_role":"Measurement + operations","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-24","title":"Reproducible secure release","requirement":"Pin source, binaries, rules, guests/keys and activation. Provenance is necessary but not sufficient for correctness.","accept":"Pin source, binaries, rules, guests/keys and activation. Provenance is necessary but not sufficient for correctness.","evidence":"Independent builds, artifact verification and scoped review.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Release + security","owner_role":"Release + security","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-25","title":"Consent-preserving incident response","requirement":"Separate public/developer authority. Urgency must not silently override installation or grant arbitrary execution. Disclose material incidents and retest.","accept":"Separate public/developer authority. Urgency must not silently override installation or grant arbitrary execution. Disclose material incidents and retest.","evidence":"Compromised-key, unsafe-update and recovery drills.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Release + operations","owner_role":"Release + operations","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-26","title":"Honest access and liquidity","requirement":"Use functional deposits/withdrawals and executable depth, not ticker count or fabricated volume. Never restrict exit to simulate value.","accept":"Use functional deposits/withdrawals and executable depth, not ticker count or fabricated volume. Never restrict exit to simulate value.","evidence":"Independent access-route and two-sided liquidity observations.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Ecosystem + measurement","owner_role":"Ecosystem + measurement","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-27","title":"Transparent treasury relationships","requirement":"Disclose material grants, insider holdings, inventory and market-making mandates. No wash trades or hidden price-support promises.","accept":"Disclose material grants, insider holdings, inventory and market-making mandates. No wash trades or hidden price-support promises.","evidence":"Mandate register, reconciled accounts and conflict policy.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Treasury + counsel","owner_role":"Treasury + counsel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-28","title":"Auditable metrics","requirement":"Publish definitions, raw/adjusted views, sampling, attribution uncertainty and missing data. No subsidy-hidden demand or censored failed jobs.","accept":"Publish definitions, raw/adjusted views, sampling, attribution uncertainty and missing data. No subsidy-hidden demand or censored failed jobs.","evidence":"Data lineage, conservation checks and independent replay.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Measurement","owner_role":"Measurement","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-29","title":"Fair comparison universe","requirement":"Define eligible peers and exclusions before observing rankings. Include qualifying new entrants and preserve unknown values.","accept":"Define eligible peers and exclusions before observing rankings. Include qualifying new entrants and preserve unknown values.","evidence":"Independent peer census and versioned comparison protocol.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Measurement + external panel","owner_role":"Measurement + external panel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-30","title":"Scoped claims only","requirement":"Every leadership claim names its metric, universe, period and limits. A measured price rank does not certify overall safety or future leadership.","accept":"Every leadership claim names its metric, universe, period and limits. A measured price rank does not certify overall safety or future leadership.","evidence":"Claim register with evidence, expiry and legal signoff.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Governance + counsel","owner_role":"Governance + counsel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-31","title":"Evidence before pass","requirement":"Pre-register thresholds; missing inputs block gates; corrections preserve failed results. No aggregate score can waive core safety or economic failure.","accept":"Pre-register thresholds; missing inputs block gates; corrections preserve failed results. No aggregate score can waive core safety or economic failure.","evidence":"Frozen test charter and versioned evidence packets.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Independent acceptance panel","owner_role":"Independent acceptance panel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-32","title":"Real adoption","requirement":"Measure unaffiliated retained users and useful repeat activity with incentives identified. Do not require buying IGN to participate in a study.","accept":"Measure unaffiliated retained users and useful repeat activity with incentives identified. Do not require buying IGN to participate in a study.","evidence":"Cohort definitions, attrition, usage and subsidy audit.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Product + ecosystem","owner_role":"Product + ecosystem","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-33","title":"AI earns admission","requirement":"AI is an optional workload category, not a guaranteed-margin network identity. Price full costs and adverse demand before expansion.","accept":"AI is an optional workload category, not a guaranteed-margin network identity. Price full costs and adverse demand before expansion.","evidence":"Workload-specific benchmark, repeat demand and verification policy.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Compute + economics","owner_role":"Compute + economics","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-34","title":"Bound agent spending","requirement":"Automated buyers have scoped budgets, permissions, expiry, revocation and logs. Untrusted prompts never alter base permissions.","accept":"Automated buyers have scoped budgets, permissions, expiry, revocation and logs. Untrusted prompts never alter base permissions.","evidence":"Prompt/input adversarial tests and payment-loss caps.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Application + security","owner_role":"Application + security","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-35","title":"Cryptographic migration readiness","requirement":"Maintain a full algorithm inventory and reviewed transition plan. No quantum-proof claim from one component or speculative attack date.","accept":"Maintain a full algorithm inventory and reviewed transition plan. No quantum-proof claim from one component or speculative attack date.","evidence":"Expert review, downgrade/migration tests and annual refresh.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Cryptography + protocol","owner_role":"Cryptography + protocol","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-36","title":"Separate proof, truth and privacy","requirement":"Execution validity does not establish real-world input truth, AI answer quality or confidentiality. State trust and data exposure for each service.","accept":"Execution validity does not establish real-world input truth, AI answer quality or confidentiality. State trust and data exposure for each service.","evidence":"Threat model and user-facing guarantee audit.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Security + product","owner_role":"Security + product","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-37","title":"Scale within verification budgets","requirement":"Throughput, data and state growth must preserve the declared minimum-node and reconstruction capabilities. Reprice security after fee compression.","accept":"Throughput, data and state growth must preserve the declared minimum-node and reconstruction capabilities. Reprice security after fee compression.","evidence":"Cold-path capacity, bootstrap, pruning and provider-removal tests.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + operations","owner_role":"Protocol + operations","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-38","title":"Honest energy accounting","requirement":"Report complete-system energy and role allocation. Avoid double-counting joint work or making unsupported carbon/marginal-transaction claims.","accept":"Report complete-system energy and role allocation. Avoid double-counting joint work or making unsupported carbon/marginal-transaction claims.","evidence":"Calibrated wall tests and documented environmental methodology.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"GPU + measurement","owner_role":"GPU + measurement","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-39","title":"Activity-specific legal approval","requirement":"Obtain counsel review for actual audiences and activities. No-presale, fair-launch or decentralised labels are not blanket legal exemptions.","accept":"Obtain counsel review for actual audiences and activities. No-presale, fair-launch or decentralised labels are not blanket legal exemptions.","evidence":"Jurisdiction/activity matrix and approved external communications.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Counsel","owner_role":"Counsel","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"VR-40","title":"No indispensable administrator","requirement":"A useful company, token holder, pool, AI agent or funding body receives no hidden power over balances, issuance or canonical history.","accept":"A useful company, token holder, pool, AI agent or funding body receives no hidden power over balances, issuance or canonical history.","evidence":"Authority inventory, isolation tests and independent operation.","priority":"P0","profile":"P00","cadence":"Once, at ratification; again on any change of the rule","method":"Ratification","source":["TV"],"gate":"Ratified","owner":"Protocol + governance","owner_role":"Protocol + governance","manual_page":null,"rule_status":"PROPOSED - REQUIRES RATIFICATION","run_status":"NOT RUN","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}}]},{"code":"TV","title":"TV: the token value and network leadership gates (proposed; no gate executed)","source":"docs/plans/igneum-2.0-master/token-value/rules-and-gates.json gates","gate":"Token value gates closed","owner":"the owner role per gate","fixtures":["F0"],"summary":"32 gates from Igneum 2.0 - Token Value & Network Leadership 1.0-proposed (snapshot 2026-10-08); scope CORE, CAPABILITY IF ENABLED or LEADERSHIP CLAIM as the file gives it; Supplement to original master and 128-case test standard; not a price/rank guarantee","tests":[{"id":"TV-01","title":"Resolve and freeze the monetary contract","setup":"Supply, tail, fee and recovery documents plus exact proposed release.","procedure":"Reconcile D01-D06 with protocol/economic/counsel review. Freeze thresholds and all interfaces before confirmatory tests.","accept":"No conflicting normative policy; every material choice has a signed rationale, version, adoption path and tests. Unresolved core choice is BLOCKED.","evidence":"Decision log, signed specification, release manifest, test charter.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Protocol + independent panel","owner_role":"Protocol + independent panel","manual_page":null,"scope":"CORE","inherited_links":["GOV","P00","VR-01","VR-06"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","run_id":"tv-d02-20261009-03","evidence_path":"docs/plans/igneum-2.0-master/token-value/phase0/tv-01/supply-spec.json; docs/plans/igneum-2.0-master/token-value/phase0/tv-01/supply-spec.md; tools/token-value/tv-01/check-spec.py; tools/token-value/tv-01/code-dump/schedule-bf60948a.jsonl; docs/plans/igneum-2.0-master/token-value/phase0/d02/README.md","updated":"2026-10-09T09:54:18.545Z","evidence_record":{"requirement_id":"TV-01","decision":"NOT RUN","method":"model","cell":"model:tv-d02-emission","manifest_sha":"a284380b","run_id":"tv-d02-20261009-03","evidence":"docs/plans/igneum-2.0-master/token-value/phase0/d02/README.md","in_progress":true,"coverage":"partial: the D02 evidence only; the other five decisions and the signed specification are other lanes'","release_identity":{"commit":"a284380b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves and no schedule is chosen","reviewer":"","at":"2026-10-09T09:54:18.545Z","note":"TV-01: the D02 comparison the decision register asks for, schedule A reconciled with TV-01's supply spec and TV-04's emission to the base unit; open BLOCKED rows B0 (the founder's pick), B2 (the role costs, TV-04's panel cells), B3 (TV-03's cohort inputs). TV-03: issuance timing under alternative same-cap schedules and the subsidy a delayed entrant sees at 10 blocks/s (tables 1, 4, 5). TV-04: falling issuance at horizons 1, 5, 10 and 20 and the year fees must exceed the subsidy to hold one BU at each of TV-04's multiples, the fee series a parameter (table 6). | D02 third version (the D02 lane, 9 October 2026, 11:0x UK): fee dependence now in TV-04's frame (the baseline of one BU, the current schedule's whole year-1 paid subsidy, at TV-04's 0.1x, 0.25x, 1x, 4x and 10x multiples), replacing the lane's 1 percent yardstick; TV-04's emission.csv reconciled (20 years) beside TV-01's spec, 52 of 52 rows exact (README section 9). Run on build-3: 9 tests OK, --check byte-identical (evidence/box-generate.log). No schedule is picked. NOT RUN until the independent panel reads it."},"evidence_records":{"token-value:tv-01":{"requirement_id":"TV-01","decision":"NOT RUN","method":"static","cell":"token-value:tv-01","manifest_sha":"6824d49cc","run_id":"tv-01-20261009-01","evidence":"docs/plans/igneum-2.0-master/token-value/phase0/tv-01/supply-spec.json; docs/plans/igneum-2.0-master/token-value/phase0/tv-01/supply-spec.md; tools/token-value/tv-01/check-spec.py; tools/token-value/tv-01/code-dump/schedule-bf60948a.jsonl","in_progress":true,"coverage":"partial: the supply specification and its static check against the code; the other decisions' evidence and the signed specification are other lanes'","release_identity":{"commit":"6824d49cc","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: nothing activates; the litepaper sentences named in the conflicts table are the site lane's to correct","reviewer":"","at":"2026-10-09T09:19:24.923Z","note":"Phase 0 supply spec (TV-01): the cap 4,000,000,000 IGN held as the invariant under D01 (capped issuance, subject to TV-04), the litepaper's year-five tail-vote sentence superseded; two schedule profiles generated in exact integers and equal on every field to the consensus code's own dump on bf60948a (release-2.0.2-node a284380b byte-identical for every cited file); total + shortfall = cap exactly; 13 litepaper-versus-code rows, 4 BLOCKED on the founder's questions (C04 block rate, C08 per-block crediting, C09 mainnet genesis clock, C11 pool custody). A document and its checks, not a verdict; the panel reads it. |  Recorded by the CI steward at 10:1x UK from docs/plans/igneum-2.0-master/token-value/phase0/tv-01/registry-batch-tv-01-20261009-01.json (master 163c9e3c, sha256 0bcb89a9...), with the map cell requested in the batch (the recorder's new form)."},"model:tv-d02-emission":{"requirement_id":"TV-01","decision":"NOT RUN","method":"model","cell":"model:tv-d02-emission","manifest_sha":"a284380b","run_id":"tv-d02-20261009-03","evidence":"docs/plans/igneum-2.0-master/token-value/phase0/d02/README.md","in_progress":true,"coverage":"partial: the D02 evidence only; the other five decisions and the signed specification are other lanes'","release_identity":{"commit":"a284380b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves and no schedule is chosen","reviewer":"","at":"2026-10-09T09:54:18.545Z","note":"TV-01: the D02 comparison the decision register asks for, schedule A reconciled with TV-01's supply spec and TV-04's emission to the base unit; open BLOCKED rows B0 (the founder's pick), B2 (the role costs, TV-04's panel cells), B3 (TV-03's cohort inputs). TV-03: issuance timing under alternative same-cap schedules and the subsidy a delayed entrant sees at 10 blocks/s (tables 1, 4, 5). TV-04: falling issuance at horizons 1, 5, 10 and 20 and the year fees must exceed the subsidy to hold one BU at each of TV-04's multiples, the fee series a parameter (table 6). | D02 third version (the D02 lane, 9 October 2026, 11:0x UK): fee dependence now in TV-04's frame (the baseline of one BU, the current schedule's whole year-1 paid subsidy, at TV-04's 0.1x, 0.25x, 1x, 4x and 10x multiples), replacing the lane's 1 percent yardstick; TV-04's emission.csv reconciled (20 years) beside TV-01's spec, 52 of 52 rows exact (README section 9). Run on build-3: 9 tests OK, --check byte-identical (evidence/box-generate.log). No schedule is picked. NOT RUN until the independent panel reads it."}},"in_progress_since":"2026-10-09T09:00:20.590Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-02","title":"Reproduce complete supply accounting","setup":"Two independent implementations; genesis and representative boundary/reorg fixtures.","procedure":"Recompute issued, paid, burned, locked and outstanding amounts through subsidy transitions, rollback/replay and duplicate records.","accept":"Exact integer agreement; no unaccounted creation, duplicate supply or cap breach under the ratified policy. Restricted wrappers are not extra native supply.","evidence":"Machine-readable ledgers, vectors, independent signoff.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Protocol + measurement","owner_role":"Protocol + measurement","manual_page":null,"scope":"CORE","inherited_links":["EVM","INC","GOV","VR-02"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","run_id":"tv-02-20261009-01","evidence_path":"docs/plans/igneum-2.0-master/token-value/phase0/tv-02/README.md; build-1:/srv/artefacts/token-value/tv-02/build-5/compare-rules-v0.1-genesis-rule.log; build-1:/srv/artefacts/token-value/tv-02/build-5/compare-rules-v0-litepaper.log; build-1:/srv/artefacts/token-value/tv-02/build-5/a-*.csv; build-1:/srv/artefacts/token-value/tv-02/build-6/b-*.csv; build-1:/srv/artefacts/token-value/tv-02/build-5/compare-rules-tv01-spec.log; build-1:/srv/artefacts/token-value/tv-02/build-6/b-rules-tv01-spec-*.csv","updated":"2026-10-09T09:51:36.502Z","evidence_record":{"requirement_id":"TV-02","decision":"NOT RUN","method":"native","cell":"native:tv-02","manifest_sha":"426c7c85","run_id":"tv-02-20261009-01","evidence":"docs/plans/igneum-2.0-master/token-value/phase0/tv-02/README.md; build-1:/srv/artefacts/token-value/tv-02/build-5/compare-rules-v0.1-genesis-rule.log; build-1:/srv/artefacts/token-value/tv-02/build-5/compare-rules-v0-litepaper.log; build-1:/srv/artefacts/token-value/tv-02/build-5/a-*.csv; build-1:/srv/artefacts/token-value/tv-02/build-6/b-*.csv; build-1:/srv/artefacts/token-value/tv-02/build-5/compare-rules-tv01-spec.log; build-1:/srv/artefacts/token-value/tv-02/build-6/b-rules-tv01-spec-*.csv","in_progress":true,"coverage":"partial: scheduled issuance on a straight chain and its reorg, two independent implementations EQUAL to the integer on devnet-4, mainnet and the TV-01 spec; paid, burned, locked, outstanding, DAG reds, the EVM ledger and duplicate records open; the independent panel has not read it","release_identity":{"commit":"426c7c85 (master, the first TV-02 landing) and the spec-run landing after it (branch tv-02-supply-replay)","lockfile":"tools/token-value/tv-02/replay-node/Cargo.lock","binary":"tv02-replay-node sha256 ef3af79157947584... (the run), 25ff78695bd9d972... (rebuilt from af2c23bc, outputs byte-identical)","network_object":"the compiled objects of igneum-node bf60948a read by A (devnet4_params, MAINNET_PARAMS, DEVNET_PARAMS); no chain state read or written","activation":"none (Phase 0 lands documents and tests only)","profile_hashes":"igneum-node bf60948a (emission.rs, igneum.rs, coinbase.rs, params.rs, window.rs, difficulty.rs byte-identical in release-2.0.2-node a284380b); rules-and-gates.json 10ce3073...; B rules v0 67707b09..., v0.1 d72d5578...; replay_spec.py acd68e1b...; the TV-01 supply-spec.json at 9cd09130 sha256 3ffdd308...; replay_spec.py on the spec c07aba10..."},"claim_impact":"none: no served figure moves; the supply ever issued on the 2.0 objects is 3,963,038,999.61 IGN under the 4,000,000,000 cap, with nothing after the terminal block","reviewer":"","at":"2026-10-09T09:51:36.502Z","note":"two supply replays, A (Rust on the node's issuance code at bf60948a, build-5) and B (Python from the rules in words, build-6), no shared code: with rule set v0.1 (the words plus the genesis rule, window.rs 176-179) EQUAL to the integer, byte-identical CSVs, at every transition's before/at/after, the terminal and one step past, on the devnet-4 (1 bps, 18 decimals), mainnet (10 bps, 18) and devnet (8) objects, and on two hand-written reorg fixtures with the no-undo ledger refused; with the words alone (v0) DIFFER at genesis (A 0, B 3168808781000000000 on devnet-4), a one-block shift with the terminal total unchanged (3963038999610200483289816000 base units on devnet-4); on the TV-01 supply spec (9cd09130) EQUAL on devnet-4 and mainnet and both fixtures, A's terminal rows equal to the spec's stated terminal supplies; paid/burned/locked accounting, the mainnet genesis DAA score (C09), DAG reds and independent signoff are open rows; NOT RUN until the independent panel reads it | recorded by the CI steward from docs/plans/igneum-2.0-master/token-value/phase0/tv-02/registry-batch-tv-02.json (sha256 1cae5953d438ef96..., the TV-02 lane, 10:25 UK); the cell native:tv-02 carried in map_cell_requested"},"evidence_records":{"native:tv-02":{"requirement_id":"TV-02","decision":"NOT RUN","method":"native","cell":"native:tv-02","manifest_sha":"426c7c85","run_id":"tv-02-20261009-01","evidence":"docs/plans/igneum-2.0-master/token-value/phase0/tv-02/README.md; build-1:/srv/artefacts/token-value/tv-02/build-5/compare-rules-v0.1-genesis-rule.log; build-1:/srv/artefacts/token-value/tv-02/build-5/compare-rules-v0-litepaper.log; build-1:/srv/artefacts/token-value/tv-02/build-5/a-*.csv; build-1:/srv/artefacts/token-value/tv-02/build-6/b-*.csv; build-1:/srv/artefacts/token-value/tv-02/build-5/compare-rules-tv01-spec.log; build-1:/srv/artefacts/token-value/tv-02/build-6/b-rules-tv01-spec-*.csv","in_progress":true,"coverage":"partial: scheduled issuance on a straight chain and its reorg, two independent implementations EQUAL to the integer on devnet-4, mainnet and the TV-01 spec; paid, burned, locked, outstanding, DAG reds, the EVM ledger and duplicate records open; the independent panel has not read it","release_identity":{"commit":"426c7c85 (master, the first TV-02 landing) and the spec-run landing after it (branch tv-02-supply-replay)","lockfile":"tools/token-value/tv-02/replay-node/Cargo.lock","binary":"tv02-replay-node sha256 ef3af79157947584... (the run), 25ff78695bd9d972... (rebuilt from af2c23bc, outputs byte-identical)","network_object":"the compiled objects of igneum-node bf60948a read by A (devnet4_params, MAINNET_PARAMS, DEVNET_PARAMS); no chain state read or written","activation":"none (Phase 0 lands documents and tests only)","profile_hashes":"igneum-node bf60948a (emission.rs, igneum.rs, coinbase.rs, params.rs, window.rs, difficulty.rs byte-identical in release-2.0.2-node a284380b); rules-and-gates.json 10ce3073...; B rules v0 67707b09..., v0.1 d72d5578...; replay_spec.py acd68e1b...; the TV-01 supply-spec.json at 9cd09130 sha256 3ffdd308...; replay_spec.py on the spec c07aba10..."},"claim_impact":"none: no served figure moves; the supply ever issued on the 2.0 objects is 3,963,038,999.61 IGN under the 4,000,000,000 cap, with nothing after the terminal block","reviewer":"","at":"2026-10-09T09:51:36.502Z","note":"two supply replays, A (Rust on the node's issuance code at bf60948a, build-5) and B (Python from the rules in words, build-6), no shared code: with rule set v0.1 (the words plus the genesis rule, window.rs 176-179) EQUAL to the integer, byte-identical CSVs, at every transition's before/at/after, the terminal and one step past, on the devnet-4 (1 bps, 18 decimals), mainnet (10 bps, 18) and devnet (8) objects, and on two hand-written reorg fixtures with the no-undo ledger refused; with the words alone (v0) DIFFER at genesis (A 0, B 3168808781000000000 on devnet-4), a one-block shift with the terminal total unchanged (3963038999610200483289816000 base units on devnet-4); on the TV-01 supply spec (9cd09130) EQUAL on devnet-4 and mainnet and both fixtures, A's terminal rows equal to the spec's stated terminal supplies; paid/burned/locked accounting, the mainnet genesis DAA score (C09), DAG reds and independent signoff are open rows; NOT RUN until the independent panel reads it | recorded by the CI steward from docs/plans/igneum-2.0-master/token-value/phase0/tv-02/registry-batch-tv-02.json (sha256 1cae5953d438ef96..., the TV-02 lane, 10:25 UK); the cell native:tv-02 carried in map_cell_requested"}},"in_progress_since":"2026-10-09T09:51:36.502Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-03","title":"Fair launch and early distribution","setup":"Public binaries, source, mining modes, launch notice and insider inventory.","procedure":"Rehearse from clean outsider machines; audit genesis allocations and devnet balances; simulate arrival times under alternative emission schedules.","accept":"Zero undisclosed allocation or privileged conversion; approved notice/support window and cohort pass; distribution analysis includes delayed entrants without guaranteeing equal ownership.","evidence":"Genesis report, dated releases, disclosure register, simulation inputs.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Release + ecosystem","owner_role":"Release + ecosystem","manual_page":null,"scope":"CORE","inherited_links":["GPU","OPS","GOV","VR-03"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","run_id":"tv-d02-20261009-03","evidence_path":"docs/plans/igneum-2.0-master/token-value/phase0/d02/README.md","updated":"2026-10-09T09:54:18.545Z","evidence_record":{"requirement_id":"TV-03","decision":"NOT RUN","method":"model","cell":"model:tv-d02-emission","manifest_sha":"a284380b","run_id":"tv-d02-20261009-03","evidence":"docs/plans/igneum-2.0-master/token-value/phase0/d02/README.md","in_progress":true,"coverage":"partial: issuance timing and per-block subsidy for delayed entrants under three same-cap schedules; no genesis audit, no outsider rehearsal, no cohort","release_identity":{"commit":"a284380b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves and no schedule is chosen","reviewer":"","at":"2026-10-09T09:54:18.545Z","note":"TV-01: the D02 comparison the decision register asks for, schedule A reconciled with TV-01's supply spec and TV-04's emission to the base unit; open BLOCKED rows B0 (the founder's pick), B2 (the role costs, TV-04's panel cells), B3 (TV-03's cohort inputs). TV-03: issuance timing under alternative same-cap schedules and the subsidy a delayed entrant sees at 10 blocks/s (tables 1, 4, 5). TV-04: falling issuance at horizons 1, 5, 10 and 20 and the year fees must exceed the subsidy to hold one BU at each of TV-04's multiples, the fee series a parameter (table 6). | D02 third version (the D02 lane, 9 October 2026, 11:0x UK): fee dependence now in TV-04's frame (the baseline of one BU, the current schedule's whole year-1 paid subsidy, at TV-04's 0.1x, 0.25x, 1x, 4x and 10x multiples), replacing the lane's 1 percent yardstick; TV-04's emission.csv reconciled (20 years) beside TV-01's spec, 52 of 52 rows exact (README section 9). Run on build-3: 9 tests OK, --check byte-identical (evidence/box-generate.log). No schedule is picked. NOT RUN until the independent panel reads it."},"evidence_records":{"model:tv-d02-emission":{"requirement_id":"TV-03","decision":"NOT RUN","method":"model","cell":"model:tv-d02-emission","manifest_sha":"a284380b","run_id":"tv-d02-20261009-03","evidence":"docs/plans/igneum-2.0-master/token-value/phase0/d02/README.md","in_progress":true,"coverage":"partial: issuance timing and per-block subsidy for delayed entrants under three same-cap schedules; no genesis audit, no outsider rehearsal, no cohort","release_identity":{"commit":"a284380b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves and no schedule is chosen","reviewer":"","at":"2026-10-09T09:54:18.545Z","note":"TV-01: the D02 comparison the decision register asks for, schedule A reconciled with TV-01's supply spec and TV-04's emission to the base unit; open BLOCKED rows B0 (the founder's pick), B2 (the role costs, TV-04's panel cells), B3 (TV-03's cohort inputs). TV-03: issuance timing under alternative same-cap schedules and the subsidy a delayed entrant sees at 10 blocks/s (tables 1, 4, 5). TV-04: falling issuance at horizons 1, 5, 10 and 20 and the year fees must exceed the subsidy to hold one BU at each of TV-04's multiples, the fee series a parameter (table 6). | D02 third version (the D02 lane, 9 October 2026, 11:0x UK): fee dependence now in TV-04's frame (the baseline of one BU, the current schedule's whole year-1 paid subsidy, at TV-04's 0.1x, 0.25x, 1x, 4x and 10x multiples), replacing the lane's 1 percent yardstick; TV-04's emission.csv reconciled (20 years) beside TV-01's spec, 52 of 52 rows exact (README section 9). Run on build-3: 9 tests OK, --check byte-identical (evidence/box-generate.log). No schedule is picked. NOT RUN until the independent panel reads it."}},"in_progress_since":"2026-10-09T09:00:20.590Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-04","title":"Security budget without price rescue","setup":"Ratified reward/fee rules; role costs; horizons 1, 5, 10 and 20 years.","procedure":"Model falling issuance, fee volatility and .25x/1x/4x/10x revenue, zero external jobs and -90% price. Separate role receipts and funding.","accept":"Approved viable scenarios fund minimum required roles without hidden issuance or assumed appreciation; failure regions stated. Collapse scenarios need safe behaviour, not universal profit.","evidence":"Reproducible cash-flow model, assumptions, independent review.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Economics + protocol","owner_role":"Economics + protocol","manual_page":null,"scope":"CORE","inherited_links":["ECO","INC","P12","P13","VR-05"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","run_id":"tv-d02-20261009-03","evidence_path":"docs/plans/igneum-2.0-master/token-value/phase0/tv-04/README.md; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/budget.csv; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/emission.csv; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/fee-replacement.csv; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/parameters.csv; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/blocked.csv; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/tv01-reconcile.csv; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/RUNS.md; tools/token-value/tv-04/tv04_budget.py; tools/token-value/tv-04/test_tv04.py; tools/token-value/tv-04/inputs.json; build-9:/home/build/tv-04/runs/ea14c332-red/run.log; build-9:/home/build/tv-04/runs/53d47721-green/run.log; build-9:/home/build/tv-04/runs/53d47721-known-failed/run.log; build-9:/home/build/tv-04/runs/53d47721-generate/run.log; build-9:/home/build/tv-04/runs/a3d79901-check/run.log; docs/plans/igneum-2.0-master/token-value/phase0/d02/README.md","updated":"2026-10-09T09:54:18.545Z","evidence_record":{"requirement_id":"TV-04","decision":"NOT RUN","method":"model","cell":"model:tv-d02-emission","manifest_sha":"a284380b","run_id":"tv-d02-20261009-03","evidence":"docs/plans/igneum-2.0-master/token-value/phase0/d02/README.md","in_progress":true,"coverage":"partial: the subsidy's decline and the fee-dependence year at the four multiples; no role costs, fee volatility or zero-external-job scenario","release_identity":{"commit":"a284380b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves and no schedule is chosen","reviewer":"","at":"2026-10-09T09:54:18.545Z","note":"TV-01: the D02 comparison the decision register asks for, schedule A reconciled with TV-01's supply spec and TV-04's emission to the base unit; open BLOCKED rows B0 (the founder's pick), B2 (the role costs, TV-04's panel cells), B3 (TV-03's cohort inputs). TV-03: issuance timing under alternative same-cap schedules and the subsidy a delayed entrant sees at 10 blocks/s (tables 1, 4, 5). TV-04: falling issuance at horizons 1, 5, 10 and 20 and the year fees must exceed the subsidy to hold one BU at each of TV-04's multiples, the fee series a parameter (table 6). | D02 third version (the D02 lane, 9 October 2026, 11:0x UK): fee dependence now in TV-04's frame (the baseline of one BU, the current schedule's whole year-1 paid subsidy, at TV-04's 0.1x, 0.25x, 1x, 4x and 10x multiples), replacing the lane's 1 percent yardstick; TV-04's emission.csv reconciled (20 years) beside TV-01's spec, 52 of 52 rows exact (README section 9). Run on build-3: 9 tests OK, --check byte-identical (evidence/box-generate.log). No schedule is picked. NOT RUN until the independent panel reads it."},"evidence_records":{"model:tv-04":{"requirement_id":"TV-04","decision":"NOT RUN","method":"model","cell":"model:tv-04","manifest_sha":"53d47721","run_id":"tv-04-20261009-02","evidence":"docs/plans/igneum-2.0-master/token-value/phase0/tv-04/README.md; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/budget.csv; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/emission.csv; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/fee-replacement.csv; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/parameters.csv; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/blocked.csv; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/tv01-reconcile.csv; docs/plans/igneum-2.0-master/token-value/phase0/tv-04/RUNS.md; tools/token-value/tv-04/tv04_budget.py; tools/token-value/tv-04/test_tv04.py; tools/token-value/tv-04/inputs.json; build-9:/home/build/tv-04/runs/ea14c332-red/run.log; build-9:/home/build/tv-04/runs/53d47721-green/run.log; build-9:/home/build/tv-04/runs/53d47721-known-failed/run.log; build-9:/home/build/tv-04/runs/53d47721-generate/run.log; build-9:/home/build/tv-04/runs/a3d79901-check/run.log","in_progress":false,"coverage":"partial: the model computes each role's budget from the ratified rules; the verdict waits on the independent panel filling the role costs and declaring the viable and collapse cells; no price figure","release_identity":{"commit":"53d47721 (the generator, inputs and tests this model ran from, with master 163c9e3c merged: the TV-01 supply spec 3ffdd308 in the tree; branch tv-04-security-budget)","lockfile":"","binary":"","network_object":"none: a model of the ratified rules, no chain state read or written","activation":"none (Phase 0 lands documents and tests only)","profile_hashes":"the node's release-2.0.2-node a284380b emission.rs 07b39c41..., igneum.rs 6c859d42..., params.rs 0c07ddcf..., fees.rs 5e7a319c..., exec config.rs fdc4ba56..., executor.rs ff12ef5f...; rules-and-gates.json 10ce3073...; the TV-01 supply spec 3ffdd308..."},"claim_impact":"none: the security budget as a reproducible cash-flow model of the ratified rules (D01, D03, D04 with the external-job rate unratified, D05, VR-05) on the mainnet per-block schedule reconciled to TV-01's spec (27 of 27 checks), with the fleet's measured unit costs and the hub rate as cost inputs in USD and coverage as a formula over V, the panel's USD value of one BU; no per-coin figure anywhere; every verdict NOT RUN","reviewer":"","at":"2026-10-09T09:28:45.393Z","note":"NOT RUN: the miners' and internal provers' budgets fall to 25.96, 6.49 and 0.20 percent of year 1 at years 5, 10 and 20; validators and maintenance receive nothing from the protocol; the miner and prover costs wait on the required capacities, every coverage cell on V | Second cut. Known-failed first (ea14c332 red, exit 1); on 53d47721: green 10 of 10, every one of 6 mutants caught (a tail mint, rising purchasing power, external-job income, a per-coin price line, a burn as a receipt, a ramp against the TV-01 spec), two generations byte-identical, the committed files equal to a fresh generation. BLOCKED by name: the minimum network hashrate the security model requires; the proof records per year at the minimum workload; the minimum hub count (the founder's); committed maintenance (people-hours or USD per month); V (the panel's); the viable or collapse declarations; C04 the block-rate step (the founder's). TV-01 resolved C10 (the code: no tip to provers), C01 (the tail vote superseded), C12 (the testnet tail testnet-only), each confirmed by the node lane by line."},"model:tv-d02-emission":{"requirement_id":"TV-04","decision":"NOT RUN","method":"model","cell":"model:tv-d02-emission","manifest_sha":"a284380b","run_id":"tv-d02-20261009-03","evidence":"docs/plans/igneum-2.0-master/token-value/phase0/d02/README.md","in_progress":true,"coverage":"partial: the subsidy's decline and the fee-dependence year at the four multiples; no role costs, fee volatility or zero-external-job scenario","release_identity":{"commit":"a284380b","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"claim_impact":"none: no public figure moves and no schedule is chosen","reviewer":"","at":"2026-10-09T09:54:18.545Z","note":"TV-01: the D02 comparison the decision register asks for, schedule A reconciled with TV-01's supply spec and TV-04's emission to the base unit; open BLOCKED rows B0 (the founder's pick), B2 (the role costs, TV-04's panel cells), B3 (TV-03's cohort inputs). TV-03: issuance timing under alternative same-cap schedules and the subsidy a delayed entrant sees at 10 blocks/s (tables 1, 4, 5). TV-04: falling issuance at horizons 1, 5, 10 and 20 and the year fees must exceed the subsidy to hold one BU at each of TV-04's multiples, the fee series a parameter (table 6). | D02 third version (the D02 lane, 9 October 2026, 11:0x UK): fee dependence now in TV-04's frame (the baseline of one BU, the current schedule's whole year-1 paid subsidy, at TV-04's 0.1x, 0.25x, 1x, 4x and 10x multiples), replacing the lane's 1 percent yardstick; TV-04's emission.csv reconciled (20 years) beside TV-01's spec, 52 of 52 rows exact (README section 9). Run on build-3: 9 tests OK, --check byte-identical (evidence/box-generate.log). No schedule is picked. NOT RUN until the independent panel reads it."}},"in_progress_since":"2026-10-09T08:46:41.597Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-05","title":"Strongest surviving specialist","setup":"Pinned candidate/cohort; cheapest supported physical designs including SRAM/hybrid.","procedure":"Apply original ADV/GPU/ECO profiles with multi-epoch survival and development sunk. Reprice alternative state and memory implementations.","accept":"All approved core energy and total-cost bounds pass with uncertainty; no unresolved feasible dominating design. Unknown feasibility blocks the broad claim.","evidence":"Design files, wall results, sensitivity model, two independent hardware opinions.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Hardware reviewer + economics","owner_role":"Hardware reviewer + economics","manual_page":null,"scope":"CORE","inherited_links":["ADV","GPU","ECO","P04","P12","INT-18","VR-09"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-05 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Hardware reviewer + economics); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-05 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Hardware reviewer + economics); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-05","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-06","title":"Every fee and payment reconciles","setup":"Native rules, payer contract and optional Labs/service invoices.","procedure":"Execute gas, proof, developer, pool, burn, sponsor and refund paths, including rounding, abort, retry and zero-demand cases.","accept":"No unexplained recipient or double count; statements/invoices match exact contract outcomes. Network turnover never labelled Labs revenue or permanent holding demand.","evidence":"Flow ledger, fixtures, invoice examples, reviewed public fee table.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Economics + application","owner_role":"Economics + application","manual_page":null,"scope":"CORE","inherited_links":["EVM","INC","COM","VR-07","VR-08"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-06 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Economics + application); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-06 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Economics + application); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-07","title":"Ownership-critical engineering closure","setup":"Original master findings mapped to current release with genuine proof fixtures.","procedure":"Run native cache-order, fail-closed activation, payout crash and finality tests; reproduce fixed cases in independent environments.","accept":"No unresolved critical/high finding or counterexample within the approved guarantee; all applicable original safety gates pass. Reproducing a defect is not closure.","evidence":"Native outputs, manifests, scoped audit, issue-by-issue closure.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Protocol + independent security","owner_role":"Protocol + independent security","manual_page":null,"scope":"CORE","inherited_links":["ZKP","FIN","OPS","R2:F01-F04","R2:F12","VR-10","VR-11"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-07 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + independent security); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-07 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + independent security); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-07","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-08","title":"Custody and recovery usability","setup":"Declared wallet/hardware combinations; 30 new participants, at least 15 non-miners.","procedure":"Perform receive, preview/sign, limit, recovery and revocation tasks with valueless funds; inject wrong network/address and malicious prompts.","accept":"Zero unauthorised transfer or secret disclosure; at least 90% complete the approved safe task without private help. Report confidence limitations and all failures.","evidence":"Task protocol, anonymised results, security review, recovery vectors.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Wallet + independent users","owner_role":"Wallet + independent users","manual_page":null,"scope":"CORE","inherited_links":["UX","VER","P10","VR-13"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-08 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Wallet + independent users); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-08 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Wallet + independent users); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-08","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-09","title":"Independently verifiable settlement","setup":"Proof/receipt client without Labs RPC; normal and recovery certificates.","procedure":"Verify successful/failed transfers, wrong asset/amount, stale roots, fake voter lists, invalid proofs and withheld data.","accept":"All invalid claims refused; valid ordinary transfers verify within approved resource limits; weaker recovery and unavailable data never shown as stronger finality.","evidence":"Offline fixtures, consumer traces and independent implementation.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Wallet + consensus","owner_role":"Wallet + consensus","manual_page":null,"scope":"CORE","inherited_links":["VER","FIN","P08","VR-11","VR-14"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-09 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Wallet + consensus); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-09","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-09 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Wallet + consensus); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-09","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-10","title":"Minimum-node and sponsored-use limits","setup":"Approved minimum validator and sponsor budgets under final workload.","procedure":"Run cold proof verification, expensive invalid inputs, state growth, paymaster drain attempts and overloaded bursts.","accept":"Original capacity/security profiles pass; budgets remain bounded; no proof skipped to catch up and no sponsor can spend outside authorised scope.","evidence":"Cold-path profiles, stress traces, sponsor negative tests.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Protocol + application","owner_role":"Protocol + application","manual_page":null,"scope":"CORE","inherited_links":["CAP","EVM","ZKP","P07","P09","VR-15","VR-37"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-10 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + application); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-10","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-10 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + application); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-10","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-11","title":"Pooled payments without authority loss","setup":"Independent pool/member clients and durable payment state.","procedure":"Inject key/template substitution, reauthorisation, crash/RPC ambiguity, receipt reorg and hostile bounded inputs.","accept":"No duplicate/lost liability or unauthorised authority change; member can verify delegated powers and change pools. Session resource limits hold.","evidence":"Ledger replay, signed work fixtures and pool removal test.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Pool + independent operators","owner_role":"Pool + independent operators","manual_page":null,"scope":"CORE","inherited_links":["INT-03","INT-04","INT-15","INT-16","R2:F12-F13","VR-12"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-11 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Pool + independent operators); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-11","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-11 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Pool + independent operators); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-11","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-12","title":"Reproducible and consented software","setup":"Release manifest, build dependencies, update keys and public installer.","procedure":"Two independent parties build/verify; simulate compromised key, stale package, rollback, urgency and missing fixtures.","accept":"No hidden consensus variation or arbitrary default remote control; update-off remains respected; mandatory unavailable fixtures block acceptance.","evidence":"Attestations, independent hashes, key drill, installer/ACL review.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Release + independent security","owner_role":"Release + independent security","manual_page":null,"scope":"CORE","inherited_links":["OPS","GOV","R2:F03","R2:F14","VR-24","VR-25"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-12 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Release + independent security); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-12","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-12 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Release + independent security); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-12","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-13","title":"Committed maintenance coverage","setup":"Costed roles, commitments and monthly cash dates.","procedure":"Audit at least 12 months of approved maintenance coverage; stress IGN-denominated resources and provider withdrawal.","accept":"Original P13 satisfied without counting future appreciation or unsigned pledges; essential functions have funded substitutes and explicit shortfall response.","evidence":"Contracts/grants or funding proof, stress cash flow, responsibility register.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Maintainers + independent finance","owner_role":"Maintainers + independent finance","manual_page":null,"scope":"CORE","inherited_links":["ECO","OPS","P13","VR-21"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-13 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Maintainers + independent finance); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-13","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-13 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Maintainers + independent finance); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-13","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-14","title":"Founder-absent operating exercise","setup":"Independent builds/operators; founder services, keys and manual help removed.","procedure":"Run 30 real days, then satisfy the original 90-day observation programme; cross boundaries, remove major providers and record all interventions.","accept":"Approved original independence/reliability gates pass; no unpublished founder action or privileged override. Simulated long partitions are labelled separately.","evidence":"Dependency map, availability logs, intervention and payer ledger.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Independent operations panel","owner_role":"Independent operations panel","manual_page":null,"scope":"CORE","inherited_links":["OPS","FIN","LEAD","P11","P16","VR-22","VR-23"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-14 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Independent operations panel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-14","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-14 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Independent operations panel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-14","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-15","title":"Governance and authority boundaries","setup":"Every control/activation threshold, treasury power and application admin interface.","procedure":"Exercise hostile coalitions, absent voters, old clients and compromised non-consensus keys; test refusal and recovery.","accept":"No actor gains undeclared issuance/balance/history authority. Every activation follows the ratified safe procedure; ambiguous threshold or recovery remains BLOCKED.","evidence":"Authority model, scenarios, native outcomes and independent review.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Protocol + governance","owner_role":"Protocol + governance","manual_page":null,"scope":"CORE","inherited_links":["GOV","FIN","ROT","VR-06","VR-40"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-15 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + governance); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-15","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-15 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + governance); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-15","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-16","title":"Two functional independent access routes","setup":"At least two unaffiliated custody/exchange/payment routes with disclosed shared infrastructure.","procedure":"Complete small controlled deposits, withdrawals, outage and reconciliation tests; identify actual custody and settlement dependencies.","accept":"Both settle correctly; neither is merely a front end to the same indispensable provider. Gaps and jurisdiction limits visible; no listing assumed from a logo.","evidence":"Settlement records, dependency map and third-party confirmation.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Ecosystem + independent reviewer","owner_role":"Ecosystem + independent reviewer","manual_page":null,"scope":"CORE","inherited_links":["OPS","VER","VR-26"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-16 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Ecosystem + independent reviewer); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-16","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-16 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Ecosystem + independent reviewer); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-16","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-17","title":"Supply-price-liquidity measurement","setup":"Frozen sources, price filters, circulating/free-float definitions and order-size bands.","procedure":"Collect 90 real days; independently replay supply and prices; measure both buy/sell execution costs and withdrawal availability.","accept":"At least 95% daily coverage; exact supply reconciliation; no fabricated missing data. Sparse liquidity invalidates broad liquidity claims, not automatically the arithmetic cap.","evidence":"Raw snapshots, methodology/code, gap ledger, audit.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Measurement steward","owner_role":"Measurement steward","manual_page":null,"scope":"CORE","inherited_links":["LEAD","VR-02","VR-26","VR-28"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-17 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Measurement steward); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-17","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-17 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Measurement steward); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-17","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-18","title":"Real versus incentivised demand","setup":"Customer/job/transaction definitions with privacy-respecting attribution and subsidy data.","procedure":"Reconcile raw/adjusted activity, self-dealing controls and incentives; test whether circular activity earns more than its irrecoverable cost.","accept":"All subsidies and known related activity separated; useful demand not inferred from gross volume alone; abusive incentive loop closed before scaling rewards.","evidence":"Accounting model, filter logic, sensitivity and independent replay.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Economics + measurement","owner_role":"Economics + measurement","manual_page":null,"scope":"CORE","inherited_links":["COM","INC","VR-08","VR-28","VR-32"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-18 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Economics + measurement); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-18","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-18 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Economics + measurement); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-18","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-19","title":"Independent developer adoption","setup":"Public kit and at least five unaffiliated developers with declared tasks.","procedure":"Build useful integrations without private dependencies; have two independent maintainers update the kit; record obstacles and adoption reason.","accept":"All declared core integration paths work; at least five usable integrations and two maintainer reproductions. Empty subsidised deployments do not qualify.","evidence":"Repos, task traces, user evidence and maintenance records.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Ecosystem + external developers","owner_role":"Ecosystem + external developers","manual_page":null,"scope":"CORE","inherited_links":["EVM","COM","P14","VR-20"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-19 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Ecosystem + external developers); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-19","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-19 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Ecosystem + external developers); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-19","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-20","title":"Programmable payment acceptance","setup":"Versioned library, independent application, user/sponsor limits and receipt path.","procedure":"Execute simple/conditional/recurring payments, revocations, expiry, failed outcome and duplicate invoice cases.","accept":"No unauthorised spend or double settlement; successful transfer independently evidenced; subjective conditions disclose adjudicator/trust.","evidence":"Contracts, negative vectors, user task record, security review.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Application + wallet","owner_role":"Application + wallet","manual_page":null,"scope":"PAYMENT CAPABILITY","inherited_links":["EVM","VER","UX","VR-13","VR-15"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-20 (token value gate, scope PAYMENT CAPABILITY): no gate executed; the harness is the owner role's (Application + wallet); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-20","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-20 (token value gate, scope PAYMENT CAPABILITY): no gate executed; the harness is the owner role's (Application + wallet); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-20","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-21","title":"Useful paid proof demand","setup":"Exact workload and final hardware path; three unrelated buyers and approved COM profile.","procedure":"Observe repeat purchases under original P14/P16 conditions, full job outcomes and operator/service costs.","accept":"All applicable COM targets met without hidden reimbursement. Queue expiry not counted as success. A monetary-only scope cannot claim this gate passed by exclusion.","evidence":"Buyer evidence, cost ledger, all-job traces and independent review.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Proving + independent customers","owner_role":"Proving + independent customers","manual_page":null,"scope":"PAID WORK CAPABILITY","inherited_links":["COM","CAP","P14","P16","R2:F08","VR-18"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-21 (token value gate, scope PAID WORK CAPABILITY): no gate executed; the harness is the owner role's (Proving + independent customers); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-21","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-21 (token value gate, scope PAID WORK CAPABILITY): no gate executed; the harness is the owner role's (Proving + independent customers); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-21","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-22","title":"Replaceable work-market gateway","setup":"Two independent gateway implementations and job/settlement specification.","procedure":"Create jobs, switch providers/gateways, fail one service and deliver the same objective result using public inputs.","accept":"Correct payment/result without Labs approval; no concealed central dispatcher or irreversible dependency. External-chain receipts labelled separately.","evidence":"Gateway traces, escrow reconciliation, dependency-removal run.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Application + independent operators","owner_role":"Application + independent operators","manual_page":null,"scope":"WORK MARKET CAPABILITY","inherited_links":["OPS","COM","VR-08","VR-18"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-22 (token value gate, scope WORK MARKET CAPABILITY): no gate executed; the harness is the owner role's (Application + independent operators); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-22","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-22 (token value gate, scope WORK MARKET CAPABILITY): no gate executed; the harness is the owner role's (Application + independent operators); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-22","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-23","title":"Obligation-based deposits","setup":"Proposed bond/default contract and volatile-collateral scenarios.","procedure":"Test reservation abandonment, invalid inputs, network pause, -90% collateral value and malicious claims.","accept":"No consensus influence bought; default reason objective; compensation limits explicit; viable small-operator participation and approved risk bounds.","evidence":"Adversarial model, state tests, risk/legal review.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Economics + security","owner_role":"Economics + security","manual_page":null,"scope":"SERVICE BONDS IF ENABLED","inherited_links":["INC","ECO","VR-19"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-23 (token value gate, scope SERVICE BONDS IF ENABLED): no gate executed; the harness is the owner role's (Economics + security); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-23","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-23 (token value gate, scope SERVICE BONDS IF ENABLED): no gate executed; the harness is the owner role's (Economics + security); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-23","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-24","title":"AI earns a separate commercial case","setup":"One bounded model/job, provider hardware, verification tier and licences.","procedure":"Benchmark full delivery vs actual alternatives; test 90% lower unit prices, demand collapse, private-data exposure and substituted models.","accept":"Approved service economics and buyer gates pass; correctness/truth/privacy distinguished. No native price or perpetual yield assumption.","evidence":"End-to-end costs, repeat demand, licence/threat review.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Compute + independent reviewer","owner_role":"Compute + independent reviewer","manual_page":null,"scope":"AI IF ENABLED","inherited_links":["COM","CAP","VR-33","VR-36"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-24 (token value gate, scope AI IF ENABLED): no gate executed; the harness is the owner role's (Compute + independent reviewer); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-24","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-24 (token value gate, scope AI IF ENABLED): no gate executed; the harness is the owner role's (Compute + independent reviewer); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-24","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-25","title":"Bounded machine purchasing","setup":"Approved account/paymaster permissions and chosen x402/agent interfaces.","procedure":"Inject hostile outputs/prompts, replayed requests, recursive spending, revoked permissions and gateway failure.","accept":"Spend never exceeds authorised destination/time/amount scope; no instruction changes authority. Draft standard support is described accurately.","evidence":"Property tests, loss-cap proof, revocation/audit logs.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Application + security","owner_role":"Application + security","manual_page":null,"scope":"AGENTS IF ENABLED","inherited_links":["EVM","UX","VR-34","VR-40"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-25 (token value gate, scope AGENTS IF ENABLED): no gate executed; the harness is the owner role's (Application + security); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-25","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-25 (token value gate, scope AGENTS IF ENABLED): no gate executed; the harness is the owner role's (Application + security); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-25","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-26","title":"Cryptographic migration readiness","setup":"Complete key/proof/transport/update inventory and external cryptographic review.","procedure":"Rehearse versioned signature/proof migration, downgrade/replay, mixed clients, inactive owners and minimum-node overhead.","accept":"No unreviewed assumption or automatic confiscation; migration can be explained and tested. No absolute quantum-proof claim or attack date inferred.","evidence":"Inventory, expert report, migration vectors, annual schedule.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Cryptography + protocol","owner_role":"Cryptography + protocol","manual_page":null,"scope":"CORE","inherited_links":["ZKP","GOV","OPS","VR-35"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-26 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Cryptography + protocol); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-26","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-26 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Cryptography + protocol); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-26","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-27","title":"Private data and oracle assurance","setup":"Per-product claims, input trust sources, data-retention and execution model.","procedure":"Use forged data, hostile providers, telemetry leakage, unsupported attestation and false-but-correctly-executed AI outputs.","accept":"No claim exceeds tested guarantee; secrets/data protected to stated model; unauthenticated inputs not represented as objective truth.","evidence":"Threat model, exposure tests, labelled user flows.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Security + product","owner_role":"Security + product","manual_page":null,"scope":"CORE","inherited_links":["VER","ZKP","UX","VR-36"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-27 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Security + product); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-27","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-27 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Security + product); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-27","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-28","title":"Stable assets and bridge isolation","setup":"Only if enabled: issuer/bridge design, redemption rights, trust anchors and approved value caps.","procedure":"Test reserve/redemption failure, stale oracle, invalid/recovery certificates, contract compromise and emergency shutdown.","accept":"No hidden base-chain guarantee or forced reversal of final history; independent audit, conservative exposure and counsel approval.","evidence":"Risk dossier, scenarios, disclosure, independent tests.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Application + security + counsel","owner_role":"Application + security + counsel","manual_page":null,"scope":"STABLE/BRIDGE IF ENABLED","inherited_links":["VER","FIN","VR-16","VR-17"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-28 (token value gate, scope STABLE/BRIDGE IF ENABLED): no gate executed; the harness is the owner role's (Application + security + counsel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-28","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-28 (token value gate, scope STABLE/BRIDGE IF ENABLED): no gate executed; the harness is the owner role's (Application + security + counsel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-28","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-29","title":"Growth without inaccessible verification","setup":"Declared minimum node, projected data growth and alternative scaling design.","procedure":"Run cold/worst-case validation, state/pruning/bootstrap, censorship and aggregation withdrawal; model 10x/100x growth and fee compression.","accept":"Original minimum-node/security bounds hold; required data remains obtainable; security funding restated for changed fee routes.","evidence":"Capacity/availability results and revised economics.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Protocol + operations","owner_role":"Protocol + operations","manual_page":null,"scope":"CORE","inherited_links":["CAP","ECO","VER","VR-37"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-29 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + operations); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-29","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-29 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Protocol + operations); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-29","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-30","title":"Energy and claims discipline","setup":"Calibrated whole-system metering and workload allocation protocol.","procedure":"Measure mining, proving, mixed/time-shared operation, setup/recovery and unsuccessful work; review environmental text.","accept":"No double-counted savings; original meter tolerances satisfied; no marginal-energy/carbon claim beyond method.","evidence":"Raw meter traces, job ledger, method and external review.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"GPU + measurement","owner_role":"GPU + measurement","manual_page":null,"scope":"CORE","inherited_links":["GPU","CAP","P02","VR-38"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-30 (token value gate, scope CORE): no gate executed; the harness is the owner role's (GPU + measurement); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-30","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-30 (token value gate, scope CORE): no gate executed; the harness is the owner role's (GPU + measurement); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-30","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-31","title":"Public-claim and activity review","setup":"Actual jurisdiction, audience, service, token-distribution and promotion plans.","procedure":"Counsel assesses applicable routes and reviews each value/rank/return/security assertion against evidence.","accept":"Written activity-specific clearance and approved wording; no future-value assertion in a covered MiCA white paper; no blanket exemption inferred from mining.","evidence":"Legal decision matrix, claim register, review dates.","priority":"P0","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Qualified counsel","owner_role":"Qualified counsel","manual_page":null,"scope":"CORE","inherited_links":["GOV","LEAD","VR-30","VR-39"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-31 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Qualified counsel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-31","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-31 (token value gate, scope CORE): no gate executed; the harness is the owner role's (Qualified counsel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-31","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"TV-32","title":"Observed leadership, not a roadmap certificate","setup":"Approved peer universe; all applicable mandatory gates; stable release and 90-day observation.","procedure":"Run original P15/P16 comparisons and independently replay scoped rank data. Test changing peer/exclusion assumptions and missing data.","accept":"Contender requires original criteria; market-cap first requires highest 90-day median, 95% coverage; sustained daily-first convention also needs 80% of covered days. Never certify overall best from price alone.","evidence":"Independent panel report, full methods/data, scope and expiry of claim.","priority":"P1","profile":"P00","cadence":"Every release candidate","method":"Automated + independent review","source":["TV"],"gate":"Token value gates closed","owner":"Independent acceptance panel","owner_role":"Independent acceptance panel","manual_page":null,"scope":"LEADERSHIP CLAIM","inherited_links":["LEAD","P15","P16","VR-29","VR-30","VR-31"],"threshold_status":"PROPOSED - FREEZE BEFORE TEST","run_status":"NOT RUN","master_status":"NOT RUN","updated":"2026-10-09T08:45:39.119Z","evidence_record":{"reason":"TV-32 (token value gate, scope LEADERSHIP CLAIM): no gate executed; the harness is the owner role's (Independent acceptance panel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-32","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"TV-32 (token value gate, scope LEADERSHIP CLAIM): no gate executed; the harness is the owner role's (Independent acceptance panel); a supplemental layer, never counted as independent evidence; not yet named in the map","at":"2026-10-09T08:45:39.119Z","method":"static","requirement_id":"TV-32","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}}],"notes":[{"at":"2026-10-09T08:13:51.136Z","text":"Counting note (main's order, 9 October 2026, by 11:00 UK): the VR rules (40) and TV gates (32) are a supplemental layer over the master's 128 cases, the 18 integration gates and the 44 review regressions, never added to them as independent evidence; no TV gate has executed; every VR rule is PROPOSED and requires ratification by the founder and its owner role; the decisions D01 to D06 are UNAPPROVED, the founder's."}]},{"code":"R15","title":"R15: the 1.5x Research Programme packages (proposed; every package NOT RUN; the plan claims no pass)","source":"docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json (igneum-1p5x-research-plan.md, section 10 'Proposed execution packages' (the table whose rows begin '| R15-'))","gate":"1.5x programme packages closed","owner":"the X and B lanes per package; the coordinator confirms the cross-references","fixtures":["F0"],"summary":"10 packages from IGNEUM - The 1.5x Research Programme (9 October 2026); PROPOSED; every package NOT RUN; the plan claims no pass; the X and B cross-references on each package are the research-landing hand's reading of the plan against the brief's matrix and track B, for the coordinator to confirm; the lanes block names the owner lanes as the coordinator named them on 9 October","tests":[{"id":"R15-01","title":"R15-01: Release + measurement","owner_capability":"Release + measurement","required_artefact":"Latest exact pack, physical assumptions, source manifest, current ratio reconciliation","accept":"No cross-version mixed baseline","setup":"Package R15-01 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Latest exact pack, physical assumptions, source manifest, current ratio reconciliation","procedure":"The lane(s) X0 produce the required artefact; the package's gate is read against it by the independent review.","evidence":"The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.","priority":"P0","profile":"P04","cadence":"Once per programme round","method":"Automated + independent review","source":["R15"],"gate":"1.5x programme package closed","owner":"the X0 decider (hash lane) baseline batch","owner_lane":"X0","lanes":["X0"],"cross_reference":[{"lane":"X0","batch":"the X0 decider (hash lane) baseline batch"}],"manual_page":null,"run_status":"NOT RUN","plan_status":"NOT RUN","run_id":"lab-20261009-01","evidence_path":"docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md","updated":"2026-10-09T11:45:28.201Z","evidence_record":{"requirement_id":"R15-01","decision":"NOT RUN","method":"model","cell":"lab:candidate","manifest_sha":"1a938abe4","run_id":"lab-20261009-01","evidence":"docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md","in_progress":true,"coverage":"partial: the frozen control's pins and the record's numerator carried into the table; the cross-version rule (no spliced baseline) enforced by the pair rule; the exact pack and physical-assumption manifest remain X0's","release_identity":{"commit":"class-v6 1a938abe4 (the frozen control's generator tree; the lab's interface document on master at this landing)","lockfile":"","binary":"","network_object":"none: documents only; no chain state read or written; nothing on the devnet touched","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T11:45:28.201Z","note":"The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."},"evidence_records":{"lab:candidate":{"requirement_id":"R15-01","decision":"NOT RUN","method":"model","cell":"lab:candidate","manifest_sha":"1a938abe4","run_id":"lab-20261009-01","evidence":"docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md","in_progress":true,"coverage":"partial: the frozen control's pins and the record's numerator carried into the table; the cross-version rule (no spliced baseline) enforced by the pair rule; the exact pack and physical-assumption manifest remain X0's","release_identity":{"commit":"class-v6 1a938abe4 (the frozen control's generator tree; the lab's interface document on master at this landing)","lockfile":"","binary":"","network_object":"none: documents only; no chain state read or written; nothing on the devnet touched","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T11:45:28.201Z","note":"The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."}},"in_progress_since":"2026-10-09T10:48:54.646Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R15-02","title":"R15-02: GPU + hardware","owner_capability":"GPU + hardware","required_artefact":"Component power/traffic model and sensitivity analysis","accept":"No device/whole-machine boundary mismatch","setup":"Package R15-02 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Component power/traffic model and sensitivity analysis","procedure":"The lane(s) X0, X5 produce the required artefact; the package's gate is read against it by the independent review.","evidence":"The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.","priority":"P0","profile":"P04","cadence":"Once per programme round","method":"Automated + independent review","source":["R15"],"gate":"1.5x programme package closed","owner":"the X0 decider (hash lane) baseline batch; the X5 lane (co-optimised opponents) batch","owner_lane":"X0, X5","lanes":["X0","X5"],"cross_reference":[{"lane":"X0","batch":"the X0 decider (hash lane) baseline batch"},{"lane":"X5","batch":"the X5 lane (co-optimised opponents) batch"}],"manual_page":null,"run_status":"NOT RUN","plan_status":"NOT RUN","run_id":"r15-02-x7-20261009-01","evidence_path":"docs/analysis/class-v6/1p5x/x7/README.md; tools/ci/batches/adversary-20261009-x7.json","updated":"2026-10-09T10:06:27.649Z","evidence_record":{"requirement_id":"R15-02","decision":"NOT RUN","method":"model","cell":"model:x7-memory-route","manifest_sha":"6ba3f01b","run_id":"r15-02-x7-20261009-01","evidence":"docs/analysis/class-v6/1p5x/x7/README.md; tools/ci/batches/adversary-20261009-x7.json","in_progress":true,"coverage":"partial: the memory route's f and s only; the component power and traffic model and its sensitivity are X0's and X5's rows","release_identity":{"commit":"master 6ba3f01b (the X7 README; the verdict commit ca2fb6b2 and X8's rows e64eb265 cited when the landing hand lands them)","lockfile":"","binary":"","network_object":"none: documents and models only, no chain state read or written","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T10:06:27.649Z","note":"BOUND-side negative control (X7): f = 0.854 on the 4090 at stock, the frozen object at 8,077 nJ per hash against its read-only twin at 6,899 at the same rate (the hash lane's row, fk-x7-4090, 10:44 UK); s = 13 to 39 on the chip's GDDR7, HBM3 and near-memory (the adversary lane's X7 rows): no read-dominated design reaches 1.5x or 1.25x at any f, because the card's random-read path is its least efficient part against a chip. The chip figures are modelled (BOUND); the card figure is a WITNESS on a named rented card. X8's chip side (every int8 mix raising the ratio against a systolic array; the dp4a-only cells stopping at 1.54x) is the tensor route's first witness row set, pending the hash lane's measured card rows; recorded here when e64eb265 lands. R15-02 (no device or whole-machine boundary mismatch) stays NOT RUN until read | main's order through the coordinator (11:0x UK, 9 October 2026): X7's memory-route verdict recorded as a BOUND-side negative control under R15-02, NOT RUN; X8's tensor-route chip rows join when they land and the hash lane's measured card rows arrive"},"evidence_records":{"model:x7-memory-route":{"requirement_id":"R15-02","decision":"NOT RUN","method":"model","cell":"model:x7-memory-route","manifest_sha":"6ba3f01b","run_id":"r15-02-x7-20261009-01","evidence":"docs/analysis/class-v6/1p5x/x7/README.md; tools/ci/batches/adversary-20261009-x7.json","in_progress":true,"coverage":"partial: the memory route's f and s only; the component power and traffic model and its sensitivity are X0's and X5's rows","release_identity":{"commit":"master 6ba3f01b (the X7 README; the verdict commit ca2fb6b2 and X8's rows e64eb265 cited when the landing hand lands them)","lockfile":"","binary":"","network_object":"none: documents and models only, no chain state read or written","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T10:06:27.649Z","note":"BOUND-side negative control (X7): f = 0.854 on the 4090 at stock, the frozen object at 8,077 nJ per hash against its read-only twin at 6,899 at the same rate (the hash lane's row, fk-x7-4090, 10:44 UK); s = 13 to 39 on the chip's GDDR7, HBM3 and near-memory (the adversary lane's X7 rows): no read-dominated design reaches 1.5x or 1.25x at any f, because the card's random-read path is its least efficient part against a chip. The chip figures are modelled (BOUND); the card figure is a WITNESS on a named rented card. X8's chip side (every int8 mix raising the ratio against a systolic array; the dp4a-only cells stopping at 1.54x) is the tensor route's first witness row set, pending the hash lane's measured card rows; recorded here when e64eb265 lands. R15-02 (no device or whole-machine boundary mismatch) stays NOT RUN until read | main's order through the coordinator (11:0x UK, 9 October 2026): X7's memory-route verdict recorded as a BOUND-side negative control under R15-02, NOT RUN; X8's tensor-route chip rows join when they land and the hash lane's measured card rows arrive"}},"in_progress_since":"2026-10-09T10:06:27.649Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R15-03","title":"R15-03: GPU + memory analysis","owner_capability":"GPU + memory analysis","required_artefact":"Layer-8-off control and held-out cache curves","accept":"Distinct benefit after best cache adaptation","setup":"Package R15-03 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Layer-8-off control and held-out cache curves","procedure":"The lane(s) X1 produce the required artefact; the package's gate is read against it by the independent review.","evidence":"The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.","priority":"P0","profile":"P04","cadence":"Once per programme round","method":"Automated + independent review","source":["R15"],"gate":"1.5x programme package closed","owner":"the X1 lane (window-free control) batch","owner_lane":"X1","lanes":["X1"],"cross_reference":[{"lane":"X1","batch":"the X1 lane (window-free control) batch"}],"manual_page":null,"run_status":"NOT RUN","plan_status":"NOT RUN","run_id":"r15-int8-20261009-01","evidence_path":"docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json; docs/analysis/class-v6/1p5x/x1/README.md","updated":"2026-10-09T10:06:27.734Z","evidence_record":{"requirement_id":"R15-03","decision":"NOT RUN","method":"model","cell":"class:int8","manifest_sha":"d799c086","run_id":"r15-int8-20261009-01","evidence":"docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json; docs/analysis/class-v6/1p5x/x1/README.md","in_progress":true,"coverage":"partial: the held-out cache curves of each weight against the frozen control; the layer-8-off control is X1's row","release_identity":{"commit":"master d799c086; the class is cut by the research lane behind a research flag, not in any release","lockfile":"","binary":"","network_object":"none: documents and models only, no chain state read or written","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T10:06:27.734Z","note":"opened, nothing measured yet: the int8-dominated class behind a research flag at three weights (int8-50, int8-75, int8-90) and the ARX-only points (arx-16, arx-32); the research lane cuts the class, the hash lane measures the card rows, the adversary lane the chip rows, the census instruments read it; R15-03 (layer-8-off control and held-out cache curves) and R15-04 (compaction, exact-fold alternatives, tuning) take their rows from those batches | main's order through the coordinator (11:0x UK, 9 October 2026): the cells for the int8-dominated class opened, every row NOT RUN until read; the lanes land their own batches on these cells with map_cell_requested"},"evidence_records":{"class:int8":{"requirement_id":"R15-03","decision":"NOT RUN","method":"model","cell":"class:int8","manifest_sha":"d799c086","run_id":"r15-int8-20261009-01","evidence":"docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json; docs/analysis/class-v6/1p5x/x1/README.md","in_progress":true,"coverage":"partial: the held-out cache curves of each weight against the frozen control; the layer-8-off control is X1's row","release_identity":{"commit":"master d799c086; the class is cut by the research lane behind a research flag, not in any release","lockfile":"","binary":"","network_object":"none: documents and models only, no chain state read or written","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T10:06:27.734Z","note":"opened, nothing measured yet: the int8-dominated class behind a research flag at three weights (int8-50, int8-75, int8-90) and the ARX-only points (arx-16, arx-32); the research lane cuts the class, the hash lane measures the card rows, the adversary lane the chip rows, the census instruments read it; R15-03 (layer-8-off control and held-out cache curves) and R15-04 (compaction, exact-fold alternatives, tuning) take their rows from those batches | main's order through the coordinator (11:0x UK, 9 October 2026): the cells for the int8-dominated class opened, every row NOT RUN until read; the lanes land their own batches on these cells with map_cell_requested"}},"in_progress_since":"2026-10-09T10:06:27.734Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R15-04","title":"R15-04: GPU systems","owner_capability":"GPU systems","required_artefact":"Compaction, exact-fold alternatives and tuning results","accept":"Byte agreement, real accepted-work savings","setup":"Package R15-04 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Compaction, exact-fold alternatives and tuning results","procedure":"The lane(s) X2, X3, X4 produce the required artefact; the package's gate is read against it by the independent review.","evidence":"The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.","priority":"P0","profile":"P04","cadence":"Once per programme round","method":"Automated + independent review","source":["R15"],"gate":"1.5x programme package closed","owner":"the X2 lane (compaction) batch; the X3 lane (Ember tuning) batch; the X4 lane (reg64 alternatives) batch","owner_lane":"X2, X3, X4","lanes":["X2","X3","X4"],"cross_reference":[{"lane":"X2","batch":"the X2 lane (compaction) batch"},{"lane":"X3","batch":"the X3 lane (Ember tuning) batch"},{"lane":"X4","batch":"the X4 lane (reg64 alternatives) batch"}],"manual_page":null,"run_status":"NOT RUN","plan_status":"NOT RUN","run_id":"1p5x-x4-20261009","evidence_path":"docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json; docs/analysis/class-v6/1p5x/x1/README.md; docs/analysis/class-v6/1p5x/x4/README.md; build-1:/srv/artefacts/1p5x/x4/x4-packs.tgz; build-1:/srv/artefacts/1p5x/x4/x4-differential.tgz","updated":"2026-10-09T10:23:23.719Z","evidence_record":{"requirement_id":"R15-04","decision":"NOT RUN","method":"GPU","cell":"rows:1p5x-x4","manifest_sha":"83a2cd21","run_id":"1p5x-x4-20261009","evidence":"docs/analysis/class-v6/1p5x/x4/README.md; build-1:/srv/artefacts/1p5x/x4/x4-packs.tgz; build-1:/srv/artefacts/1p5x/x4/x4-differential.tgz","in_progress":true,"coverage":"partial: byte agreement of the three forms (CPU differential, GPU self-test and fingerprint) and the 4090 pairs at stock; the compaction (X2) and the tuning (X3) rows are theirs; the knee NOT RUN","release_identity":{"commit":"b51d8c04b (branch 1p5x-x4 off master a7f81d9a9)","lockfile":"","binary":"igneum-pow ccb1bf0efebce4bb (build-9 release build of b51d8c04b); igneum-worker-cuda-gen6 804a6f7fea10a62e","network_object":"none (packs exported from the frozen object, program id 0x4de7b836cc40a4ea; no network)","activation":"none","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T10:23:23.719Z","note":"X4 of the 1.5x programme: three byte-identical reg64c address-mix forms (direct, generated, prefix). Equivalence measured: CPU differential EQUIVALENT (rows/VERDICT; the known-failed form refused first) and GPU self-test plus fingerprint e8f4f3289c6ee1fc on all forms. GPU pairs: RTX 4090 at stock only, g 0.959 to 0.969 at equal rate, with an occupancy confound. Chip rows modelled: 10 to 52 nJ per hash for the cheapest form. Arithmetic from 2.0x: r_new 1.86 to 1.99. No pass claimed. NOT RUN by the brief's rule (rows stay NOT RUN until the steward's X6). The knee, the 5090 and the occupancy control are BLOCKED or NOT RUN (README section 6). Island: the 4090 rows are on an island, not a network. | recorded by the CI steward from docs/analysis/class-v6/1p5x/x4/registry-batch-1p5x-x4-20261009.json (the X4 lane, master 83a2cd21); the cell rows:1p5x-x4 carried in map_cell_requested on R15-04 (packages.json names X4 as its lane)"},"evidence_records":{"class:int8":{"requirement_id":"R15-04","decision":"NOT RUN","method":"model","cell":"class:int8","manifest_sha":"d799c086","run_id":"r15-int8-20261009-01","evidence":"docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json; docs/analysis/class-v6/1p5x/x1/README.md","in_progress":true,"coverage":"partial: byte agreement and accepted-work savings of each weight's fold; X2 to X4's rows carry the rest","release_identity":{"commit":"master d799c086; the class is cut by the research lane behind a research flag, not in any release","lockfile":"","binary":"","network_object":"none: documents and models only, no chain state read or written","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T10:06:27.734Z","note":"opened, nothing measured yet: the int8-dominated class behind a research flag at three weights (int8-50, int8-75, int8-90) and the ARX-only points (arx-16, arx-32); the research lane cuts the class, the hash lane measures the card rows, the adversary lane the chip rows, the census instruments read it; R15-03 (layer-8-off control and held-out cache curves) and R15-04 (compaction, exact-fold alternatives, tuning) take their rows from those batches | main's order through the coordinator (11:0x UK, 9 October 2026): the cells for the int8-dominated class opened, every row NOT RUN until read; the lanes land their own batches on these cells with map_cell_requested"},"rows:1p5x-x4":{"requirement_id":"R15-04","decision":"NOT RUN","method":"GPU","cell":"rows:1p5x-x4","manifest_sha":"83a2cd21","run_id":"1p5x-x4-20261009","evidence":"docs/analysis/class-v6/1p5x/x4/README.md; build-1:/srv/artefacts/1p5x/x4/x4-packs.tgz; build-1:/srv/artefacts/1p5x/x4/x4-differential.tgz","in_progress":true,"coverage":"partial: byte agreement of the three forms (CPU differential, GPU self-test and fingerprint) and the 4090 pairs at stock; the compaction (X2) and the tuning (X3) rows are theirs; the knee NOT RUN","release_identity":{"commit":"b51d8c04b (branch 1p5x-x4 off master a7f81d9a9)","lockfile":"","binary":"igneum-pow ccb1bf0efebce4bb (build-9 release build of b51d8c04b); igneum-worker-cuda-gen6 804a6f7fea10a62e","network_object":"none (packs exported from the frozen object, program id 0x4de7b836cc40a4ea; no network)","activation":"none","profile_hashes":""},"claim_impact":"","reviewer":"","at":"2026-10-09T10:23:23.719Z","note":"X4 of the 1.5x programme: three byte-identical reg64c address-mix forms (direct, generated, prefix). Equivalence measured: CPU differential EQUIVALENT (rows/VERDICT; the known-failed form refused first) and GPU self-test plus fingerprint e8f4f3289c6ee1fc on all forms. GPU pairs: RTX 4090 at stock only, g 0.959 to 0.969 at equal rate, with an occupancy confound. Chip rows modelled: 10 to 52 nJ per hash for the cheapest form. Arithmetic from 2.0x: r_new 1.86 to 1.99. No pass claimed. NOT RUN by the brief's rule (rows stay NOT RUN until the steward's X6). The knee, the 5090 and the occupancy control are BLOCKED or NOT RUN (README section 6). Island: the 4090 rows are on an island, not a network. | recorded by the CI steward from docs/analysis/class-v6/1p5x/x4/registry-batch-1p5x-x4-20261009.json (the X4 lane, master 83a2cd21); the cell rows:1p5x-x4 carried in map_cell_requested on R15-04 (packages.json names X4 as its lane)"}},"in_progress_since":"2026-10-09T10:06:27.734Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R15-05","title":"R15-05: Cryptography","owner_capability":"Cryptography","required_artefact":"Exact published MHPoW control, theorem audit, malicious fixtures","accept":"No improvised sampled-memory soundness","setup":"Package R15-05 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Exact published MHPoW control, theorem audit, malicious fixtures","procedure":"The lane(s) B1 produce the required artefact; the package's gate is read against it by the independent review.","evidence":"The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.","priority":"P0","profile":"P04","cadence":"Once per programme round","method":"Automated + independent review","source":["R15"],"gate":"1.5x programme package closed","owner":"track B1 (the exact published MHPoW control)","owner_lane":"B1","lanes":["B1"],"cross_reference":[{"lane":"B1","batch":"track B1 (the exact published MHPoW control)"}],"manual_page":null,"run_status":"NOT RUN","plan_status":"NOT RUN","run_id":"r15-track-b-20261009-02","evidence_path":"docs/analysis/mhpow/b1/README.md; tools/mhpow/b1/fixtures/attacks-n10-k16.json; tools/mhpow/b1/fixtures/SHA256SUMS","updated":"2026-10-09T10:06:27.821Z","evidence_record":{"requirement_id":"R15-05","decision":"NOT RUN","method":"model","cell":"theory:r15-05-track-b","manifest_sha":"0f370527","run_id":"r15-track-b-20261009-02","evidence":"docs/analysis/mhpow/b1/README.md; tools/mhpow/b1/fixtures/attacks-n10-k16.json; tools/mhpow/b1/fixtures/SHA256SUMS","in_progress":true,"coverage":"partial: the published primitive's reference, attacks and verifier refusals; the lottery binding (B2), the composed theorem (B4) and the panel's reading open","release_identity":{"commit":"master 0f370527 (B1 e9f94df6 landed)","lockfile":"","binary":"","network_object":"none: documents and models only, no chain state read or written","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T10:06:27.821Z","note":"BOUND (B1, F-3): with ABH17's proven constant the paper's challenge count k exceeds N at lambda 256 and N 2^20 (to about n 25): no practical parameter in the proven regime. FINDING (B1, F-4): one labelling yields 193 to 200 accepted roots in 200 tries at 26 oracle calls per try, so a lottery over tau is not bound to the labelling cost (fixture A6, attacks-n10-k16.json, run on build-6). The package R15-05 (no improvised sampled-memory soundness) stays NOT RUN until the independent panel reads the reference and its verifier (17 of 17 named checks with known-failed tests) | the coordinator's order (10:4x UK, 9 October 2026): Track B's reproduction findings as BOUND rows, NOT RUN, no pass or fail claimed for the package"},"evidence_records":{"theory:r15-05-track-b":{"requirement_id":"R15-05","decision":"NOT RUN","method":"model","cell":"theory:r15-05-track-b","manifest_sha":"0f370527","run_id":"r15-track-b-20261009-02","evidence":"docs/analysis/mhpow/b1/README.md; tools/mhpow/b1/fixtures/attacks-n10-k16.json; tools/mhpow/b1/fixtures/SHA256SUMS","in_progress":true,"coverage":"partial: the published primitive's reference, attacks and verifier refusals; the lottery binding (B2), the composed theorem (B4) and the panel's reading open","release_identity":{"commit":"master 0f370527 (B1 e9f94df6 landed)","lockfile":"","binary":"","network_object":"none: documents and models only, no chain state read or written","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T10:06:27.821Z","note":"BOUND (B1, F-3): with ABH17's proven constant the paper's challenge count k exceeds N at lambda 256 and N 2^20 (to about n 25): no practical parameter in the proven regime. FINDING (B1, F-4): one labelling yields 193 to 200 accepted roots in 200 tries at 26 oracle calls per try, so a lottery over tau is not bound to the labelling cost (fixture A6, attacks-n10-k16.json, run on build-6). The package R15-05 (no improvised sampled-memory soundness) stays NOT RUN until the independent panel reads the reference and its verifier (17 of 17 named checks with known-failed tests) | the coordinator's order (10:4x UK, 9 October 2026): Track B's reproduction findings as BOUND rows, NOT RUN, no pass or fail claimed for the package"}},"in_progress_since":"2026-10-09T10:06:27.821Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R15-06","title":"R15-06: GPU + cryptography","owner_capability":"GPU + cryptography","required_artefact":"Theorem-preserving layout/parallelisation feasibility","accept":"GPU competitiveness and cheap-enough verification","setup":"Package R15-06 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Theorem-preserving layout/parallelisation feasibility","procedure":"The lane(s) B3 produce the required artefact; the package's gate is read against it by the independent review.","evidence":"The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.","priority":"P0","profile":"P04","cadence":"Once per programme round","method":"Automated + independent review","source":["R15"],"gate":"1.5x programme package closed","owner":"track B3 (theorem-preserving GPU feasibility)","owner_lane":"B3","lanes":["B3"],"cross_reference":[{"lane":"B3","batch":"track B3 (theorem-preserving GPU feasibility)"}],"manual_page":null,"run_status":"NOT RUN","plan_status":"NOT RUN","updated":"2026-10-09T09:19:24.923Z","evidence_record":{"reason":"R15-06 (1.5x programme package): no package executed; the harness is the lane's (B3); its batch names the case when it lands; not yet named in the map","at":"2026-10-09T09:19:24.923Z","method":"static","requirement_id":"R15-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R15-06 (1.5x programme package): no package executed; the harness is the lane's (B3); its batch names the case when it lands; not yet named in the map","at":"2026-10-09T09:19:24.923Z","method":"static","requirement_id":"R15-06","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R15-07","title":"R15-07: Cryptography + hardware","owner_capability":"Cryptography + hardware","required_artefact":"Joint accepted-proof resource frontier with concrete constants","accept":"No invalid theorem composition","setup":"Package R15-07 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Joint accepted-proof resource frontier with concrete constants","procedure":"The lane(s) B2, B4 produce the required artefact; the package's gate is read against it by the independent review.","evidence":"The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.","priority":"P0","profile":"P04","cadence":"Once per programme round","method":"Automated + independent review","source":["R15"],"gate":"1.5x programme package closed","owner":"track B2; track B4 (the accepted-proof resource frontier)","owner_lane":"B2, B4","lanes":["B2","B4"],"cross_reference":[{"lane":"B2","batch":"track B2"},{"lane":"B4","batch":"track B4 (the accepted-proof resource frontier)"}],"manual_page":null,"run_status":"NOT RUN","plan_status":"NOT RUN","run_id":"mhpow-b4-20261009-02","evidence_path":"docs/analysis/mhpow/b4/README.md; docs/analysis/mhpow/b4/requirements.md; docs/analysis/mhpow/b4/requirements-tensor.md; docs/analysis/mhpow/b4/params.txt; docs/analysis/mhpow/b4/RUNS.md; tools/mhpow/b4/params.py; docs/analysis/mhpow/b2/README.md; docs/analysis/mhpow/b4/README.md; docs/analysis/mhpow/b4/params.txt; docs/analysis/mhpow/b4/RUNS.md; tools/mhpow/b4/params.py; docs/analysis/mhpow/b4/README.md; docs/analysis/mhpow/b4/params.txt; docs/analysis/mhpow/b4/RUNS.md; tools/mhpow/b4/params.py","updated":"2026-10-09T10:28:00.350Z","evidence_record":{"requirement_id":"R15-07","decision":"NOT RUN","method":"model","cell":"theory:mhpow-b4","manifest_sha":"12822bf5","run_id":"mhpow-b4-20261009-02","evidence":"docs/analysis/mhpow/b4/README.md; docs/analysis/mhpow/b4/requirements.md; docs/analysis/mhpow/b4/requirements-tensor.md; docs/analysis/mhpow/b4/params.txt; docs/analysis/mhpow/b4/RUNS.md; tools/mhpow/b4/params.py","in_progress":true,"coverage":"partial: the composed theorem's statement and the losses on the published constants; terms 2 and 3's amortisation open theorems; L BLOCKED; the panel has not read it","release_identity":{"commit":"mhpow-b4 e13877ec3 (the evidence below at that sha)","lockfile":"","binary":"","network_object":"none: a theorem statement and an audit of published papers, no chain state read or written","activation":"none (Track B lands documents and tests only)","profile_hashes":"R1 2025/1456 13c3646e...; R2 2018/221 2a466b97...; R3 2017/225 29c5a9c0...; R4 2026/1024 aa6caa39...; R16 arXiv 2207.11519 ac273393...; params.py 46e38da0..., params.txt d4871b8f..."},"claim_impact":"none: the composed accepted-proof statement stays a draft with named proof obligations; the control stands (no 1.5x certificate from published constants: generic route at most 0.151 of honest, red-blue at least 341x); new: the tensor-dominated class cannot be proved at or below 1.5x on today's rows (additive bridge r >= min(s) = 2.35x); every row NOT RUN until the panel reads it","reviewer":"","at":"2026-10-09T10:28:00.350Z","note":"NOT RUN: statement, losses and the lottery obligation (B4-OB-LOT) written; the tensor-class requirements T1 to T5 with R-T2 and R-T3 BLOCKED; terms 2 and 3 and their amortisation open; L BLOCKED; X5, X7, X8 rows stay WITNESS (E_D) | Recorded by the B4 lane at 11:2x UK under the registry evidence rule (the row moves with its evidence: params.py section 9, params.txt, RUNS.md, README 5b corrected per B2 O-17, requirements.md superseded, requirements-tensor.md new). Supersedes run mhpow-b4-20261009-01 for this cell; NOT RUN, no pass or fail claimed."},"evidence_records":{"theory:mhpow-b4":{"requirement_id":"R15-07","decision":"NOT RUN","method":"model","cell":"theory:mhpow-b4","manifest_sha":"12822bf5","run_id":"mhpow-b4-20261009-02","evidence":"docs/analysis/mhpow/b4/README.md; docs/analysis/mhpow/b4/requirements.md; docs/analysis/mhpow/b4/requirements-tensor.md; docs/analysis/mhpow/b4/params.txt; docs/analysis/mhpow/b4/RUNS.md; tools/mhpow/b4/params.py","in_progress":true,"coverage":"partial: the composed theorem's statement and the losses on the published constants; terms 2 and 3's amortisation open theorems; L BLOCKED; the panel has not read it","release_identity":{"commit":"mhpow-b4 e13877ec3 (the evidence below at that sha)","lockfile":"","binary":"","network_object":"none: a theorem statement and an audit of published papers, no chain state read or written","activation":"none (Track B lands documents and tests only)","profile_hashes":"R1 2025/1456 13c3646e...; R2 2018/221 2a466b97...; R3 2017/225 29c5a9c0...; R4 2026/1024 aa6caa39...; R16 arXiv 2207.11519 ac273393...; params.py 46e38da0..., params.txt d4871b8f..."},"claim_impact":"none: the composed accepted-proof statement stays a draft with named proof obligations; the control stands (no 1.5x certificate from published constants: generic route at most 0.151 of honest, red-blue at least 341x); new: the tensor-dominated class cannot be proved at or below 1.5x on today's rows (additive bridge r >= min(s) = 2.35x); every row NOT RUN until the panel reads it","reviewer":"","at":"2026-10-09T10:28:00.350Z","note":"NOT RUN: statement, losses and the lottery obligation (B4-OB-LOT) written; the tensor-class requirements T1 to T5 with R-T2 and R-T3 BLOCKED; terms 2 and 3 and their amortisation open; L BLOCKED; X5, X7, X8 rows stay WITNESS (E_D) | Recorded by the B4 lane at 11:2x UK under the registry evidence rule (the row moves with its evidence: params.py section 9, params.txt, RUNS.md, README 5b corrected per B2 O-17, requirements.md superseded, requirements-tensor.md new). Supersedes run mhpow-b4-20261009-01 for this cell; NOT RUN, no pass or fail claimed."},"theory:r15-07-track-b":{"requirement_id":"R15-07","decision":"NOT RUN","method":"model","cell":"theory:r15-07-track-b","manifest_sha":"067dca70","run_id":"r15-track-b-20261009-01","evidence":"docs/analysis/mhpow/b2/README.md; docs/analysis/mhpow/b4/README.md; docs/analysis/mhpow/b4/params.txt; docs/analysis/mhpow/b4/RUNS.md; tools/mhpow/b4/params.py","in_progress":true,"coverage":"partial: the statement, the obligations and the losses on published constants; the proof of terms 2 and 3, the amortisation and the panel's reading open","release_identity":{"commit":"master 067dca70 (B2 eb999f0e, B4 12822bf5, B6 1ab735be landed); B1 e9f94df6 and B3 land by 11:45 UK and are recorded then under R15-05 and R15-06","lockfile":"","binary":"","network_object":"none: documents and tests only, no chain state read or written","activation":"none","profile_hashes":"R1 2025/1456 13c3646e...; params.py 7ac7fd48...; params.txt a98ac460..."},"claim_impact":"none","reviewer":"","at":"2026-10-09T10:10:43.747Z","note":"BOUND (B4): no 1.5x certificate is reachable from the published constants; the generic route at most 0.151 of the honest prover's energy at log2 N = 22, the red-blue route losing at least 341x at rho 0.25 (docs/analysis/mhpow/b4/README.md, params.txt). FINDING (B2, obligation O-07): the two naive lottery rules FAIL with written counter-examples (the sink re-roll at log2 N + 1 calls, about 1.3 million draws per labelling at N = 2^24; free screening on chi alone), the replacement BLOCKED to B4 (B-T3) (docs/analysis/mhpow/b2/README.md). The package R15-07 (no invalid theorem composition) stays NOT RUN until the independent panel reads the composed statement; terms 2 and 3's amortisation are open theorems; L BLOCKED | the coordinator's order (10:4x UK, 9 October 2026): Track B's reproduction findings recorded as BOUND rows, NOT RUN, no pass or fail claimed for any package; every chip figure WITNESS or BOUND by the R15 suite rule"},"theory:mhpow-b4@mhpow-b4-20261009-01":{"requirement_id":"R15-07","decision":"NOT RUN","method":"model","cell":"theory:mhpow-b4","manifest_sha":"12822bf5","run_id":"mhpow-b4-20261009-01","evidence":"docs/analysis/mhpow/b4/README.md; docs/analysis/mhpow/b4/params.txt; docs/analysis/mhpow/b4/RUNS.md; tools/mhpow/b4/params.py","in_progress":true,"coverage":"partial: the composed theorem's statement and the losses on the published constants; terms 2 and 3's amortisation open theorems; L BLOCKED; the panel has not read it","release_identity":{"commit":"branch mhpow-b4 12822bf5, landed on master at 067dca70 (the typeset docs: docs/analysis/mhpow/b4)","lockfile":"","binary":"","network_object":"none: a theorem statement and an audit of published papers, no chain state read or written","activation":"none (Track B lands documents and tests only)","profile_hashes":"R1 2025/1456 13c3646e...; R2 2018/221 2a466b97...; R3 2017/225 29c5a9c0...; R4 2026/1024 aa6caa39...; R16 arXiv 2207.11519 ac273393...; params.py 7ac7fd48..., params.txt a98ac460..."},"claim_impact":"none: the composed accepted-proof energy statement is a draft with named proof obligations; the published constants cannot carry a 1.5x certificate (loss at least 6.6x on the generic route, at least 341x on the red-blue route); every row NOT RUN until the panel reads it","reviewer":"","at":"2026-10-09T10:10:43.656Z","note":"NOT RUN: statement and losses written; terms 2 (transfers) and the amortisation of terms 2 and 3 are open theorems; L is BLOCKED (no lower-bound certificate for any technology coefficient); X5 rows stay WITNESS (E_D) | recorded by the CI steward on the coordinator's order (10:4x UK, 9 October 2026): Track B's findings as BOUND and NOT RUN rows; the cell theory:mhpow-b4 carried in map_cell_requested. NOT RUN by this lane: the steward records it only if the coordinator asks, with the cell added to the map. BLOCKED rows B4-B01 to B4-B10 in README section 12."}},"in_progress_since":"2026-10-09T10:10:43.656Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R15-08","title":"R15-08: Independent ASIC team","owner_capability":"Independent ASIC team","required_artefact":"Re-optimised SRAM/DRAM/hybrid/recompute/PIM scenarios","accept":"Full-storage adversary not excluded by price","setup":"Package R15-08 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Re-optimised SRAM/DRAM/hybrid/recompute/PIM scenarios","procedure":"The lane(s) X5, B5 produce the required artefact; the package's gate is read against it by the independent review.","evidence":"The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.","priority":"P0","profile":"P04","cadence":"Once per programme round","method":"Automated + independent review","source":["R15"],"gate":"1.5x programme package closed","owner":"the X5 lane (co-optimised opponents) batch; track B5 (re-optimised opponents on fresh state and PIM)","owner_lane":"X5, B5","lanes":["X5","B5"],"cross_reference":[{"lane":"X5","batch":"the X5 lane (co-optimised opponents) batch"},{"lane":"B5","batch":"track B5 (re-optimised opponents on fresh state and PIM)"}],"manual_page":null,"run_status":"NOT RUN","plan_status":"NOT RUN","run_id":"lab-20261009-01","evidence_path":"docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md","updated":"2026-10-09T11:45:28.201Z","evidence_record":{"requirement_id":"R15-08","decision":"NOT RUN","method":"model","cell":"lab:candidate","manifest_sha":"1a938abe4","run_id":"lab-20261009-01","evidence":"docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md","in_progress":true,"coverage":"partial: the re-optimised opponent set per candidate (DRAM, hybrids, full SRAM, recompute, HBM3, near-memory, arrays) as the adversary interface; the full-storage adversary is never excluded by price in the score","release_identity":{"commit":"class-v6 1a938abe4 (the frozen control's generator tree; the lab's interface document on master at this landing)","lockfile":"","binary":"","network_object":"none: documents only; no chain state read or written; nothing on the devnet touched","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T11:45:28.201Z","note":"The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."},"evidence_records":{"lab:candidate":{"requirement_id":"R15-08","decision":"NOT RUN","method":"model","cell":"lab:candidate","manifest_sha":"1a938abe4","run_id":"lab-20261009-01","evidence":"docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md","in_progress":true,"coverage":"partial: the re-optimised opponent set per candidate (DRAM, hybrids, full SRAM, recompute, HBM3, near-memory, arrays) as the adversary interface; the full-storage adversary is never excluded by price in the score","release_identity":{"commit":"class-v6 1a938abe4 (the frozen control's generator tree; the lab's interface document on master at this landing)","lockfile":"","binary":"","network_object":"none: documents only; no chain state read or written; nothing on the devnet touched","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T11:45:28.201Z","note":"The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."}},"in_progress_since":"2026-10-09T10:48:54.646Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R15-09","title":"R15-09: Measurement + economics","owner_capability":"Measurement + economics","required_artefact":"Blind cohort confirmation and separate P12 outcomes","accept":"Strongest credible ratio, not average","setup":"Package R15-09 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Blind cohort confirmation and separate P12 outcomes","procedure":"The lane(s) X6 produce the required artefact; the package's gate is read against it by the independent review.","evidence":"The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.","priority":"P0","profile":"P04","cadence":"Once per programme round","method":"Automated + independent review","source":["R15"],"gate":"1.5x programme package closed","owner":"the X6 blind run (CI steward) batch","owner_lane":"X6","lanes":["X6"],"cross_reference":[{"lane":"X6","batch":"the X6 blind run (CI steward) batch"}],"manual_page":null,"run_status":"NOT RUN","plan_status":"NOT RUN","run_id":"lab-20261009-01","evidence_path":"docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md","updated":"2026-10-09T11:45:28.201Z","evidence_record":{"requirement_id":"R15-09","decision":"NOT RUN","method":"model","cell":"lab:candidate","manifest_sha":"1a938abe4","run_id":"lab-20261009-01","evidence":"docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md","in_progress":true,"coverage":"partial: the worst-cohort score with its band per candidate, same node and one node ahead; the blind confirmation and the P12 outcomes remain the steward's X6","release_identity":{"commit":"class-v6 1a938abe4 (the frozen control's generator tree; the lab's interface document on master at this landing)","lockfile":"","binary":"","network_object":"none: documents only; no chain state read or written; nothing on the devnet touched","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T11:45:28.201Z","note":"The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."},"evidence_records":{"lab:candidate":{"requirement_id":"R15-09","decision":"NOT RUN","method":"model","cell":"lab:candidate","manifest_sha":"1a938abe4","run_id":"lab-20261009-01","evidence":"docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md","in_progress":true,"coverage":"partial: the worst-cohort score with its band per candidate, same node and one node ahead; the blind confirmation and the P12 outcomes remain the steward's X6","release_identity":{"commit":"class-v6 1a938abe4 (the frozen control's generator tree; the lab's interface document on master at this landing)","lockfile":"","binary":"","network_object":"none: documents only; no chain state read or written; nothing on the devnet touched","activation":"none","profile_hashes":""},"claim_impact":"none","reviewer":"","at":"2026-10-09T11:45:28.201Z","note":"The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. | The 1.5x adversarial comparison laboratory (the founder's order, 9 October 2026, 11:4x UK): one evaluation for every control and candidate (the measurement recipe with the read-only twin for the memory share, the adversary interface returning the lowest credible specialist energy per design as a complete machine with WITNESS or BOUND labels, the score as the worst comparison over the required cohort same node and one node ahead, the rejection filters F1 to F6, the regression set REG-01 to REG-08 from the 8 and 9 October failures). Every row NOT RUN until the panel reads it; the first measured score (the frozen v6 control on the cohort against adversarial set v1) lands as a later batch under this cell. Amended 11:5x UK: X10, the full-sector fold candidate of the founder's third review, added as cand-x10 with the scoped same-node board claim (the die and node-ahead chips as coexistence rows); the AMD and Intel tiers NOT RUN on every candidate (no rented card; the house rigs unreachable by software) until a card is found."}},"in_progress_since":"2026-10-09T10:48:54.646Z","approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}},{"id":"R15-10","title":"R15-10: Protocol/security","owner_capability":"Protocol/security","required_artefact":"Network and pool integration, no-rescue exercise, public evidence","accept":"Correctness and safe operation remain intact","setup":"Package R15-10 of the 1.5x Research Programme (docs/plans/igneum-2.0-master/1p5x/research-plan/packages.json); the required artefact: Network and pool integration, no-rescue exercise, public evidence","procedure":"The lane(s) B6 produce the required artefact; the package's gate is read against it by the independent review.","evidence":"The run record of the package's lane(s) as recorded through tools/ci/test-record.mjs; every chip figure labelled WITNESS or BOUND; no raw hashes-per-second comparison without an approved equivalence.","priority":"P0","profile":"P04","cadence":"Once per programme round","method":"Automated + independent review","source":["R15"],"gate":"1.5x programme package closed","owner":"track B6 (network, pool and verification budgets)","owner_lane":"B6","lanes":["B6"],"cross_reference":[{"lane":"B6","batch":"track B6 (network, pool and verification budgets)"}],"manual_page":null,"run_status":"NOT RUN","plan_status":"NOT RUN","updated":"2026-10-09T09:19:24.923Z","evidence_record":{"reason":"R15-10 (1.5x programme package): no package executed; the harness is the lane's (B6); its batch names the case when it lands; not yet named in the map","at":"2026-10-09T09:19:24.923Z","method":"static","requirement_id":"R15-10","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""}},"evidence_records":{"record":{"reason":"R15-10 (1.5x programme package): no package executed; the harness is the lane's (B6); its batch names the case when it lands; not yet named in the map","at":"2026-10-09T09:19:24.923Z","method":"static","requirement_id":"R15-10","decision":"NOT RUN","reviewer":"","claim_impact":"","release_identity":{"commit":"","lockfile":"","binary":"","network_object":"","activation":"","profile_hashes":""},"in_progress":false}},"approvals":{"scope_approved":null,"implementation_complete":null,"evidence_reproduced":null,"claim_authorised":null}}],"notes":[{"at":"2026-10-09T09:17:00.668Z","text":"Two rules for every R15 row (main's order, 9 October 2026, by 12:30 UK): (1) every chip figure is labelled WITNESS (a measured or placed figure on a named device or model with its evidence path) or BOUND (a modelled limit with its assumptions named), never a bare number; (2) no work unit is compared by raw hashes per second without an approved equivalence (the accepted-work equivalence the independent review approves for the pair of objects compared). The ten packages cross-reference their X and B lanes; the lane's batch names the case when it lands; the plan claims no pass and every package reads NOT RUN until its gate is read against the required artefact."}]}],"profiles":{"P00":{"title":"Frozen scope and approval","requirements":["Approve the release manifest, supported roles, numerical profiles, mandatory scenarios, trust/fault model, workload W, adapters and claims before confirmatory tests. Unknown values are BLOCKED, not defaults.","Core safety and authentication invariants admit no waiver. Proposed performance or commercial targets may be replaced only before the confirmatory run, with an independent rationale and a versioned public scope.","After a failure, weakening a target creates a different claim and requires a new assessment. Preserve all failed runs; do not average a blocker away."],"status":"PROPOSED - REQUIRES APPROVAL"},"P01":{"title":"Correctness and negative-test depth","requirements":["Zero observed invalid acceptance, unauthorised signature, conflicting finality within assumptions, duplicated reward or unexplained cross-backend state/hash disagreement.","Minimum proposed campaign: 1,000,000 full-hash vectors per supported backend across all families, plus at least 10,000 malformed/boundary cases per relevant parser or binding class. Include exhaustive small-domain cases and historical regressions.","All prescribed critical mutants must be detected. This sampling target is not a bound on cryptographic failure probability and does not replace independent reasoning about soundness or safety."],"status":"PROPOSED - REQUIRES APPROVAL"},"P02":{"title":"Hardware coverage and reproducibility","requirements":["At least 12 physical retail configurations: at least 3 NVIDIA, 3 AMD and 2 Apple configurations, at least two discrete-GPU generations, an advertised 8 GB mining tier and 12 GB proving tiers where claimed. Record usable, not nominal, memory.","Declare a competitive core of at least 6 configurations spanning every advertised vendor and at least two discrete generations before optimisation. The wider cohort remains mandatory for access and economic tests; it cannot be silently dropped.","Use 5 paired 30-minute steady-state runs per primary cell after at least 15 minutes of warm-up and a stable temperature trend. Calibrated wall meter uncertainty must be at most 2%. Run a 7-day soak on representative low/mid/high tiers.","Three unaffiliated operators participate; every competitive-core cell is reproduced by at least two. Identical-SKU energy/accepted-work results must agree within 5% after declared environment corrections; unexplained variance blocks the headline."],"status":"PROPOSED - REQUIRES APPROVAL"},"P03":{"title":"Candidate improvement and honest-card budget","requirements":["For production candidate changes, per mandatory GPU cell: no more than 5% increase in joules per accepted work and no more than 2% decrease in accepted throughput versus the paired tuned baseline. Absolute safety limits always apply.","G2 requires at least a 10% reduction in the strongest evaluated specialist advantage after redesign, outside the declared measurement/model uncertainty, while meeting those budgets. A failed experiment is not a successful upgrade.","Existing clock-lock savings belong in the baseline. Long programs cannot pass by adding enough equally costly work to both devices to improve a ratio while materially worsening honest operation."],"status":"PROPOSED - REQUIRES APPROVAL"},"P04":{"title":"Scoped specialist-competition target","requirements":["Define R_E as GPU wall joules per accepted work divided by the lowest credible complete-system specialist joules for that same work. The proposed target is R_E at most 1.5 for every competitive-core cell at the same node and one node ahead.","Evaluate at least three materially distinct specialist architectures, with one programmable multi-family design, and a second independent reviewer. Include shared/reduced memory, hybrid execution, selective participation and realistic power/host costs.","Publish two-node-ahead and modular/reused-IP stress cases; they must satisfy the predeclared P12 economic envelope. No universal ceiling for unknown future hardware is claimed. Report model bounds separately from statistical confidence.","A lower-bound specialist estimate, not a convenient average or a deliberately constrained reference architecture, drives the conservative comparison. Undefined or unbounded decision-critical assumptions make the result BLOCKED."],"status":"PROPOSED - REQUIRES APPROVAL"},"P05":{"title":"Measurement and inference protocol","requirements":["Pre-register primary metrics, cohorts, holdout seeds, run order, exclusions and analysis before confirmation. Keep tuning/training runs separate from holdout runs.","Use independent runs/operators as measurement units. Report point estimates, two-sided 95% measurement intervals and absolute sample counts; handle time-series dependence with a declared block or run-level method.","Apply conservative uncertainty to pass decisions. A confidence interval around measured GPU energy does not capture unknown ASIC architectures; model parameter ranges and expert judgement must be reported as such.","Never compare raw hashes per second across different algorithms. Do not transform a five-year scenario sweep into a probability of chip arrival or a guarantee of future profitability."],"status":"PROPOSED - REQUIRES APPROVAL"},"P06":{"title":"Memory and support policy","requirements":["All advertised role/configuration combinations must finish without OOM, corruption or unsafe fallback. Publish a component memory budget, including display/OS, driver, miner, prover, aggregation and epoch construction.","Proposed support horizon: at least 24 months of known schedule compatibility for the advertised entry tier, unless a narrower horizon is prominently approved before sale or launch. Removal changes the claim and must pass ECO-07.","Treat 5.5 / 8.5 / 11.5 GiB as source candidates, not imposed final rules. Simultaneous operation, eviction and time-sharing are distinct advertised modes with separately measured cost."],"status":"PROPOSED - REQUIRES APPROVAL"},"P07":{"title":"Proof service capacity and fairness","requirements":["Freeze W as a meaningful workload mix, input sizes, proof format, fleet and requests/hour. Primary proposed target: 72 hours at W, plus 24 hours at 1.2W; at least 99.5% accepted jobs delivered valid within the contracted deadline.","Default delivery targets for the declared internal reference workload: p95 at most 60 seconds and p99 at most 120 seconds from input-ready assignment through verified delivery. Also publish request-to-delivery including input wait; no claim may omit that delay.","Request-to-delivery p99 must meet the separately approved customer deadline. Payment p99 must be at most 10 minutes after verified payable eligibility, with chain finality time reported separately. These defaults do not override a stricter contract.","No statistically supported positive backlog drift at steady load, no silent drops; after 2W for 15 minutes, drain excess backlog within 30 minutes of return to W. Report rejected demand and accepted-job success separately.","Proposed advertised-tier fairness: at least 90% timely valid assigned completions are paid under the approved rules; avoidable duplicate/retry work is at most 10% of total work. Reassignment policy must bound abandonment without promising every assignment a reward."],"status":"PROPOSED - REQUIRES APPROVAL"},"P08":{"title":"Fault assumptions and recovery","requirements":["F0 must state the exact safety threshold, quorum and authority-transition rule; the synchrony/participation assumptions for liveness; trusted inputs; and clock/expiry semantics. This manual supplies no substitute consensus rule.","Exercise threshold-minus/at/plus cases, the 40/40/20 partition fixture, signing outages and 31/35/60/90 logical-day expiry cases. Preserve safety when liveness assumptions fail; do not demand finality from an unavailable quorum.","After assumptions and input availability are restored: service replacement within 10 minutes and deterministic network convergence within 30 minutes on the reference topology. Different certified bounds must be approved beforehand.","Accelerated-time simulation and real elapsed operation are separate evidence classes. Recovery may not reverse a guarantee previously represented as final."],"status":"PROPOSED - REQUIRES APPROVAL"},"P09":{"title":"Security and bounded resource requirements","requirements":["Zero unresolved critical or high-severity security findings on the claimed release. Independent scopes must cover consensus, proof soundness/parameters, implementation bypasses, wallet/isolation and relevant operational controls.","Review the intended proof-system security level and assumptions explicitly; do not infer a security-bit claim from random rejection tests. Version every verifier, program and parameter set.","Freeze maximum valid/invalid verification time, memory, disk and admission rates for ordinary validator hardware. At rated valid load plus the approved hostile load, no unbounded growth, invalid acceptance or unrecoverable process failure.","For supported wallet fee-estimation cases, proposed absolute error at most 5% versus the specified charge when inputs are unchanged; deterministic fee-cap handling and explicit uncertainty otherwise. Customer contracts remain separately binding."],"status":"PROPOSED - REQUIRES APPROVAL"},"P10":{"title":"Ordinary-operator product targets","requirements":["At least 30 unaffiliated first-time study participants across supported Windows/macOS combinations. At least 90% install, configure safely and submit accepted work without staff help; p90 active setup at most 15 minutes. Publish complete download/dataset time separately.","Pause/stop acknowledgement within 2 seconds, safe worker stop within 5 seconds where no documented atomic operation prevents it, and reliable restoration of original tuning settings. No hidden custody or silent update.","Net-energy/fee displays reconcile within 5% under the declared measurement boundary. Incremental rejected-work loss on the normal home-link profile is at most 2 percentage points over the matched datacentre profile.","Open miner efficiency is within 5% of the best independently tuned permitted implementation on identical work. For the declared single-card payout case, p95 payable-to-payment at most 24 hours and total payout friction at most 2% of earned value.","Critical alerts are emitted within 60 seconds of detectable evidence. At least 90% of study users can identify the injected failure and follow the published safe action. No control target excuses a security failure."],"status":"PROPOSED - REQUIRES APPROVAL"},"P11":{"title":"No-founder exercise and independence","requirements":["At least 10 verified unaffiliated operators, three independently administered network/hosting domains and sufficient honest weight/capacity to satisfy F0 and W after founders are removed.","Run at least 30 real elapsed days without founder mining, proving, aggregation, bootstrap, required RPC, private files or privileged interventions. Cross all known logical transitions separately without calling accelerated time real history.","Document control by role and common dependencies; uncertain identities are not counted as independent. Within-assumption withdrawals must satisfy P08; losing more than the assumed quorum may cause a visible safe pause."],"status":"PROPOSED - REQUIRES APPROVAL"},"P12":{"title":"Five-year coexistence envelope","requirements":["Freeze a sourced revenue reference R and mandatory worlds before results. Sweep 0.25R, R, 4R and 10R; electricity at $0.03/$0.10/$0.25/$0.40 per kWh; 1/3/5-year productive life; zero/$20M/$75M development; private mining and hardware sales; no/normal/spiking external demand.","Those values are proposed stress inputs, not current prices or forecasts. Declare which worlds have enough funded demand for rational ongoing service before running; retain collapse worlds as explicit safety/exit tests, not profitable successes.","Proposed matched-tariff new-entry target in every mandatory sustainable world: median GPU/specialist total cost per accepted work at most 1.5, 90th percentile at most 1.75, and no advertised competitive-core cell above 2.0. Publish every cell, including heterogeneous tariffs.","At least three purchasable GPU configurations across at least two advertised vendors must have positive modelled new-entry economics; at least 75% of the entry cohort must have positive marginal operating economics in those worlds. Report model uncertainty and failure regions.","Do not impose GPU market share, specialist production limits, token appreciation, full research-cost recovery or automatic chip death to force the result. Any such condition must become an explicit limitation rather than a hidden assumption."],"status":"PROPOSED - REQUIRES APPROVAL"},"P13":{"title":"Maintenance continuity","requirements":["Before a readiness claim, document at least 12 months of committed maintenance resources at the approved operating scope. Include engineering, security review, infrastructure, support and incident response.","Use independently reviewable commitments and downside budgets. Uncommitted future sales, rising token prices, burned fees or assumed fundraising are not available resources.","This is a proposed governance test, not a directive to change the supply cap, issuance allocation or fair-launch design."],"status":"PROPOSED - REQUIRES APPROVAL"},"P14":{"title":"Genuine commercial and developer proof","requirements":["At least three unrelated paying buyer organisations, each making at least three separate purchase decisions across at least 30 days; at least 1,000 meaningful verified external jobs in aggregate. Split invoices do not create independent demand.","No project reimbursement, circular funding or undisclosed related party counts. Report customer concentration and churn; proposed maximum largest-buyer share is 70% of qualifying revenue.","At least 20% aggregate contribution margin after directly attributable delivery costs, retries, refunds and support; publish fully loaded economics separately. At least 75% of sampled eligible operators have positive realised contribution on the declared workload.","At least five unaffiliated developers complete a useful supported application or proof-service integration using public documentation. Customer confirmation and raw commercial evidence may remain confidential to the reviewer."],"status":"PROPOSED - REQUIRES APPROVAL"},"P15":{"title":"Comparative contention threshold","requirements":["Pre-register at least three relevant operating GPU-first peers, plus a real proving alternative for customer comparisons. Verify current versions at execution time. The source reference set is a starting point, not a claim about current rankings.","Require at least three meaningful comparable dimensions with no material inferiority beyond a pre-agreed 10% margin against the best valid comparator, and at least two independently evidenced advantages against at least two peers.","Advantages must be either a greater-than-10% measured improvement outside uncertainty or a directly tested control/capability difference with demonstrated user value. Non-comparable or missing data is not a win.","A panel with hardware/economics, security/operations and customer/operator expertise must support the scoped contender conclusion. Passing these judgement-based thresholds does not certify a universal number-one ranking."],"status":"PROPOSED - REQUIRES APPROVAL"},"P16":{"title":"Observed durability and claim freshness","requirements":["At least 90 real elapsed days on the final compatible release family, at least 30 independently verified operators, and transparent eligibility/churn denominators. Material uncomparable changes reset affected observations.","Proposed outcomes: at least 60% day-90 operator retention and at least 75% of eligible observed operators with positive measured marginal operation over the period. Report incentives and electricity assumptions; do not claim a downturn was observed if it was not.","At least 99.9% availability for the declared customer service during eligible operating conditions, with all-in availability also reported; zero accepted invalid proofs or conflicting finality within F0 assumptions. Do not remove real incidents as maintenance to force a pass.","Run fault injection on isolated infrastructure, not unsuspecting customers. Publish planned test windows separately. Reassess claims at least quarterly and immediately after material hardware, protocol, economics or security changes."],"status":"PROPOSED - REQUIRES APPROVAL"}},"fixtures":[{"id":"F0","title":"Release and assurance manifest","contents":"Exact commits, binaries, genesis/network ID, mining class, dataset schedule, EVM fork/deviations, program/verifier IDs, fees, supply, quorum/fault rules, trust anchors, activation and supported roles."},{"id":"F1","title":"Clean build environments","contents":"Pinned toolchains, dependency locks, clean OS images and documented signing/notarisation boundaries. No production secrets or private founder files."},{"id":"F2","title":"Hardware and measurement lab","contents":"Approved physical GPU cohort, calibrated wall meters, stable thermal conditions, driver/OS images and realistic home/datacentre link conditions."},{"id":"F3","title":"Workload and oracle catalogue","contents":"Fixed full-hash and EVM/proving jobs, independent reference implementations, real customer-sized payloads, held-out seeds and complete expected results."},{"id":"F4","title":"Authorised fault network","contents":"Independent nodes/operators; controllable latency, loss, clocks, partitions, storage faults and role withdrawals. Actual consensus paths plus separately labelled simulators."},{"id":"F5","title":"Negative and regression corpus","contents":"Malformed transactions/proofs, wrong roots/IDs, duplicate payments, bad authority tables, historical failures and deliberately faulty code mutants."},{"id":"F6","title":"Specialist implementation pack","contents":"Functionally checked architectures, RTL/physical estimates where feasible, memory and board assumptions, cost inputs, adaptation paths and uncertainty ranges."},{"id":"F7","title":"Economic and incentive models","contents":"Independently reproducible costs, entry/exit/difficulty policies, scenario grid, operator opportunity costs and money-flow conservation fixtures."},{"id":"F8","title":"User/customer/peer studies","contents":"Consenting unaffiliated users, contracted meaningful workloads, private ownership checks, dated competitor methods and independent analysis."},{"id":"F9","title":"Evidence and status vault","contents":"Immutable run IDs, raw logs, hashes, analysis code, exclusions, defects, reviewers, signatures, privacy controls and public redacted summaries."}],"source_sha256":"418b3b9f68f96a413872fecb16f8508a40063891c70054c65e92e6e5f5fb70b6","scope_note":"Test design, not executed evidence. All numeric additions are proposed, not source-approved protocol rules. Optional claimed features require their tests; excluded features earn no pass credit.","all_pass_note":"Independent passage of all mandatory and claimed-option gates, including commercial and comparative observation, can support a scoped leadership-contender assessment. It does not prove a universal rank or eliminate unknown future hardware risks.","manual_page_count":73,"approval":{"by":"the founder","at":"2026-10-08 18:2x UK","word":"approve as proposed in the tests, forget P13 for now","profiles":{"P00":"APPROVED AS PROPOSED","P01":"APPROVED AS PROPOSED","P02":"APPROVED AS PROPOSED","P03":"APPROVED AS PROPOSED","P04":"APPROVED AS PROPOSED","P05":"APPROVED AS PROPOSED","P06":"APPROVED AS PROPOSED","P07":"APPROVED AS PROPOSED","P08":"APPROVED AS PROPOSED","P09":"APPROVED AS PROPOSED","P10":"APPROVED AS PROPOSED","P11":"APPROVED AS PROPOSED","P12":"APPROVED AS PROPOSED","P13":"DEFERRED by the founder","P14":"APPROVED AS PROPOSED","P15":"APPROVED AS PROPOSED","P16":"APPROVED AS PROPOSED"},"rules_in_force":["P03: a candidate change pays at most 5 percent of joules per accepted work and loses at most 2 percent of accepted throughput against the paired tuned baseline (replaces the 10 percent budget from 18:2x UK)","P04: R_E at most 1.5 for every competitive-core cell at the same node and one node ahead against the lowest credible complete-system specialist; today's placed bracket (1.5x to 2.1x same-node) is a FAIL to work against and is served as such","P12: the matched-tariff median at most 1.5, p90 at most 1.75, no core cell above 2.0","P02: twelve retail configurations, three unaffiliated operators, the seven-day soak define D1's reproduction"]},"live_fields":{"run_status":"NOT RUN | BLOCKED | FAIL | PASS (the master, p. 139; in_progress_since marks work under way; deferral_note a founder deferral)","owner_lane":"the lane that runs the case, with its id","evidence_path":"the file on the box mirror master that holds the evidence record in the standard's template","run_id":"the run that produced the latest status","updated":"the minute the lane last wrote the case"},"notes":[{"at":"2026-10-08T20:10:24.748Z","text":"128 original test cases, 18 additional integration gates, 44 updated-stack closure requirements. These sets overlap and are not 190 independent tests."},{"at":"2026-10-09T08:13:51.193Z","text":"Counting note (9 October 2026): the registry carries 128 master cases, 18 integration gates (INT), 44 review regressions (REV), and the token value layer (VR 40 rules, TV 32 gates) as a supplement that is never counted as independent evidence; the decisions block D01 to D06 is UNAPPROVED."}],"decisions":[{"id":"D01","title":"Cap and tail","required_resolution":"Choose one supply policy and remove the contradictory escape language. A cap is the recommended identity, conditional on adequate security funding.","status":"RATIFIED","owner":"founder","word":"capped issuance, no tail escape clause, no forecast-triggered minting, no ordinary parameter vote that expands the cap; subject to the pre-launch security-funding gate TV-04 (a fail means delay or an open reconsideration, never an undisclosed rescue)","ratified_at":"2026-10-09T08:13:50.568Z","ratified_by":"founder","recorded_against":"its specification, release and acceptance tests before activation (the coordinator's relay of the founder's ratification, 9 October 2026, 09:2x UK)","condition":"subject to TV-04"},{"id":"D02","title":"Emission horizon","required_resolution":"Compare the existing schedule with slower distribution before launch; include delayed ordinary entrants and dilution/security trade-offs.","status":"RATIFIED WITH PARAMETER PENDING","owner":"founder","word":"the same-cap emission comparison is approved (current pacing vs a longer distribution; code-generated figures for years 1, 2, 5, 10, 20 with rounding and terminal behaviour; no founder reserve); the final schedule stays PENDING EVIDENCE, neither alternative frozen","ratified_at":"2026-10-09T08:13:50.670Z","ratified_by":"founder","recorded_against":"its specification, release and acceptance tests before activation (the coordinator's relay of the founder's ratification, 9 October 2026, 09:2x UK)","condition":"the final schedule PENDING EVIDENCE"},{"id":"D03","title":"Security funding","required_resolution":"Define each role's recurring payer, declining subsidy model, maintenance runway and safe contraction behaviour.","status":"RATIFIED","owner":"founder","word":"separate accountable budgets for hashing, internal proving, external work and maintenance, every payment counted once; external prover revenue never counted as miner security, maintenance and Labs profit at once","ratified_at":"2026-10-09T08:13:50.772Z","ratified_by":"founder","recorded_against":"its specification, release and acceptance tests before activation (the coordinator's relay of the founder's ratification, 9 October 2026, 09:2x UK)"},{"id":"D04","title":"Fee/burn routing","required_resolution":"Freeze exact contract routes and distinguish resource fees, service charges and burn. Test pricing rather than maximise burn by slogan.","status":"RATIFIED WITH PARAMETER PENDING","owner":"founder","word":"explicit auditable routing with no hidden company allocation; the 80/20 split is emission allocation only; the external-job fee or burn rate is NOT ratified, comparative pricing tests decide","ratified_at":"2026-10-09T08:13:50.871Z","ratified_by":"founder","recorded_against":"its specification, release and acceptance tests before activation (the coordinator's relay of the founder's ratification, 9 October 2026, 09:2x UK)","condition":"the external-job fee or burn rate not ratified; comparative pricing tests decide"},{"id":"D05","title":"Finality/recovery","required_resolution":"Specify the stronger guarantee and any weaker recovery. Set dependent wallet/oracle behaviour consistently.","status":"RATIFIED","owner":"founder","word":"a recovery certificate is never ordinary finality on any wallet, receipt, API or bridge; labels do not repair an unsafe recovery rule, which still needs its tests","ratified_at":"2026-10-09T08:13:50.972Z","ratified_by":"founder","recorded_against":"its specification, release and acceptance tests before activation (the coordinator's relay of the founder's ratification, 9 October 2026, 09:2x UK)"},{"id":"D06","title":"Leadership scope","required_resolution":"Separate monetary, GPU engineering, paid-work and market-rank claims; decide which capabilities are enabled and which gates apply.","status":"RATIFIED","owner":"founder","word":"separate claims; public wording \"Designed to compete for leadership among GPU-first networks.\"; after testing, the demonstrated advantage is named, never a blanket number one","ratified_at":"2026-10-09T08:13:51.074Z","ratified_by":"founder","recorded_against":"its specification, release and acceptance tests before activation (the coordinator's relay of the founder's ratification, 9 October 2026, 09:2x UK)"}]}</script>
 <script>
 /* /acceptance runtime: printed at build from site/lib/acceptance-render.mjs (one source for both renders) */
 (function(){
@@ -784,6 +786,7 @@ if (document.readyState === "loading") document.addEventListener("DOMContentLoad
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/address.html b/site/address.html
index fc17837fe..4f28d3a1f 100644
--- a/site/address.html
+++ b/site/address.html
@@ -160,6 +160,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -200,6 +201,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -325,6 +327,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/app.html b/site/app.html
index 2f650c2ca..3f78e2990 100644
--- a/site/app.html
+++ b/site/app.html
@@ -128,6 +128,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -168,6 +169,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -506,6 +508,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/audit.html b/site/audit.html
index 6e1a381a1..a67ebb0a7 100644
--- a/site/audit.html
+++ b/site/audit.html
@@ -133,6 +133,7 @@ table{min-width:560px}
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit" aria-current="page"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -173,6 +174,7 @@ table{min-width:560px}
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit" aria-current="page"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -299,6 +301,7 @@ table{min-width:560px}
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/block.html b/site/block.html
index 6e29496d9..fd29eda8f 100644
--- a/site/block.html
+++ b/site/block.html
@@ -160,6 +160,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -200,6 +201,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -318,6 +320,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/build.html b/site/build.html
index 398187124..e3b0c64a7 100644
--- a/site/build.html
+++ b/site/build.html
@@ -133,6 +133,7 @@ table{min-width:560px}
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -173,6 +174,7 @@ table{min-width:560px}
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -331,6 +333,7 @@ console.log(r.verified, r.signers, 'of', r.voters, 'voters', r.ms, 'ms');</pre>
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/build.mjs b/site/build.mjs
index a3fc86eaf..ce83b1d29 100644
--- a/site/build.mjs
+++ b/site/build.mjs
@@ -232,6 +232,7 @@ for (const [src, file, title, desc, heading, lead, eyebrow] of [
   ['build/grants.md', 'grants.html', 'Igneum grants: tooling, reference apps, infrastructure, research', 'The Igneum grants programme: four tiers, what a grant is, how to apply with an issue on the git host, the weekly review, and the lines that stay honest about value, amounts and dates.', 'Grants', 'Paid in IGN from the dev fee fund, on delivery, on the Igneum 2.0 devnet first. Four tiers. One issue to apply. A weekly review.', 'The programme'],
   ['build/compatibility.md', 'compatibility.html', 'Igneum compatibility, measured: every row a test run against the devnet', 'Compatibility as a product deliverable: representative contracts, wallet fee estimation, indexing, failed transactions, receipts, application assumptions and the measured differences (block context, randomness, two-dimensional fees), each a test with its evidence. Devnet, no value.', 'Compatibility, measured', 'Every row is a test that ran against the devnet, with its evidence; a row that could not run says why.', 'Build · compatibility'],
   ['site/audit-2.0.md', 'audit.html', 'Igneum site audit, 2.0', 'Every served page of igneum.network read against the Igneum 2.0 reset: what changed, what was rewritten, what still carries pre-2.0 copy, the label of each claim and what is open.', 'Site audit', 'Every served page, what the reset changed, what was rewritten, what still carries pre-2.0 copy, the label of each claim, and what is open. Main reads it against the live site.', 'Learn · audit'],
+  ['ledger/gpu-ledger.md', 'gpu-ledger.html', 'The GPU network ledger: every live GPU-mined chain measured the same way', 'Every live GPU-mined chain the lab could pin, measured on the same rented cards in the same sessions with the same chip-design method, ranked on the chip-to-GPU edge under two conventions and on the two-phase economics with each chain\'s actual reward split. Every number measured or a labelled model with its source; pending never blank.', 'The GPU network ledger', 'Every live GPU-mined chain we could pin, measured the same way on the same cards, with the same chip method, and ranked. Igneum is one row among the others, under the same rules.', 'Learn · ledger'],
   ['build/tuning.md', 'tuning.html', 'Igneum tuning: how Ember reaches a good operating point', 'The knee rule with its measured rows, the ladders and priors, the safe defaults per class, the worker flags and their costs, the compiler settings and the fingerprint check: the published optimisation work.', 'Tuning', 'How Ember reaches a good operating point without third-party software, every figure a dated measured row or marked approximate.', 'Learn · audit'],
 ]) {
   const mdp = join(docs, src);
diff --git a/site/claims.html b/site/claims.html
index 52f7317a6..286fc0b6a 100644
--- a/site/claims.html
+++ b/site/claims.html
@@ -132,6 +132,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims" aria-current="page"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -172,6 +173,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims" aria-current="page"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -303,6 +305,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/compatibility.html b/site/compatibility.html
index 94b8d0727..13486f9af 100644
--- a/site/compatibility.html
+++ b/site/compatibility.html
@@ -133,6 +133,7 @@ table{min-width:560px}
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -173,6 +174,7 @@ table{min-width:560px}
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -323,6 +325,7 @@ table{min-width:560px}
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/dev-fee.html b/site/dev-fee.html
index b6aae3bfc..9e9b6cc4b 100644
--- a/site/dev-fee.html
+++ b/site/dev-fee.html
@@ -132,6 +132,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -172,6 +173,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -308,6 +310,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/docs.html b/site/docs.html
index d764ff672..1490a52dc 100644
--- a/site/docs.html
+++ b/site/docs.html
@@ -106,6 +106,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs" aria-current="page"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -146,6 +147,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs" aria-current="page"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -277,6 +279,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/download.html b/site/download.html
index b309d5987..04dd038e6 100644
--- a/site/download.html
+++ b/site/download.html
@@ -122,6 +122,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -162,6 +163,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -349,6 +351,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/economics.html b/site/economics.html
index 4016615b2..47d833723 100644
--- a/site/economics.html
+++ b/site/economics.html
@@ -106,6 +106,7 @@
           <a href="/economics" data-nav="economics" aria-current="page"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -146,6 +147,7 @@
         <a href="/economics" data-nav="economics" aria-current="page"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -341,6 +343,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/evidence.html b/site/evidence.html
index 15c16e760..a9f26994a 100644
--- a/site/evidence.html
+++ b/site/evidence.html
@@ -143,6 +143,7 @@ td.mono{font-family:var(--f-mono);font-size:12.5px;min-width:180px}td.iv{color:v
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -183,6 +184,7 @@ td.mono{font-family:var(--f-mono);font-size:12.5px;min-width:180px}td.iv{color:v
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -321,6 +323,7 @@ td.mono{font-family:var(--f-mono);font-size:12.5px;min-width:180px}td.iv{color:v
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/explorer.html b/site/explorer.html
index 5fd41147b..2ed442678 100644
--- a/site/explorer.html
+++ b/site/explorer.html
@@ -159,6 +159,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -199,6 +200,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -360,6 +362,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/faucet.html b/site/faucet.html
index 093b41ebd..974f45fe9 100644
--- a/site/faucet.html
+++ b/site/faucet.html
@@ -136,6 +136,7 @@ dt{color:var(--ash)}dd{margin:0;font-family:var(--f-mono);font-size:14px;overflo
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -176,6 +177,7 @@ dt{color:var(--ash)}dd{margin:0;font-family:var(--f-mono);font-size:14px;overflo
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -307,6 +309,7 @@ dt{color:var(--ash)}dd{margin:0;font-family:var(--f-mono);font-size:14px;overflo
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/gpu-ledger.html b/site/gpu-ledger.html
new file mode 100644
index 000000000..fe275bfd3
--- /dev/null
+++ b/site/gpu-ledger.html
@@ -0,0 +1,385 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
+<title>The GPU network ledger: every live GPU-mined chain measured the same way</title>
+<meta name="description" content="Every live GPU-mined chain the lab could pin, measured on the same rented cards in the same sessions with the same chip-design method, ranked on the chip-to-GPU edge under two conventions and on the two-phase economics with each chain's actual reward split. Every number measured or a labelled model with its source; pending never blank.">
+<link rel="canonical" href="https://igneum.network/gpu-ledger">
+<meta name="theme-color" content="#0C0C0E">
+<!-- share:start -->
+<meta property="og:type" content="website">
+<meta property="og:site_name" content="Igneum">
+<meta property="og:title" content="The GPU network ledger: every live GPU-mined chain measured the same way">
+<meta property="og:description" content="Every live GPU-mined chain the lab could pin, measured on the same rented cards in the same sessions with the same chip-design method, ranked on the chip-to-GPU edge under two conventions and on the two-phase economics with each chain's actual reward split. Every number measured or a labelled model with its source; pending never blank.">
+<meta property="og:url" content="https://igneum.network/gpu-ledger">
+<meta property="og:image" content="https://igneum.network/og/home.png?v=5">
+<meta property="og:image:type" content="image/png">
+<meta property="og:image:width" content="1200">
+<meta property="og:image:height" content="630">
+<meta property="og:image:alt" content="The GPU-mined chain that proves every block. igneum.network">
+<meta property="og:image" content="https://igneum.network/og/home-square.png?v=5">
+<meta property="og:image:type" content="image/png">
+<meta property="og:image:width" content="1200">
+<meta property="og:image:height" content="1200">
+<meta property="og:image:alt" content="The GPU-mined chain that proves every block. igneum.network">
+<meta name="twitter:card" content="summary_large_image">
+<meta name="twitter:title" content="The GPU network ledger: every live GPU-mined chain measured the same way">
+<meta name="twitter:description" content="Every live GPU-mined chain the lab could pin, measured on the same rented cards in the same sessions with the same chip-design method, ranked on the chip-to-GPU edge under two conventions and on the two-phase economics with each chain's actual reward split. Every number measured or a labelled model with its source; pending never blank.">
+<meta name="twitter:image" content="https://igneum.network/og/home.png?v=5">
+<meta name="twitter:image:alt" content="The GPU-mined chain that proves every block. igneum.network">
+<!-- share:end -->
+<link rel="icon" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 1024 1024'%3E%3Crect width='1024' height='1024' fill='%230C0C0E'/%3E%3Cg transform='translate(166.95 166.95) scale(6.901)'%3E%3Cpolygon points='50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34' fill='%23F2541B'/%3E%3Cpolygon points='50,42 59,58 50,82 41,58' fill='%230C0C0E'/%3E%3C/g%3E%3C/svg%3E" type="image/svg+xml">
+<link rel="icon" href="/favicon.ico" sizes="48x48">
+<link rel="icon" href="/favicon-32.png" type="image/png" sizes="32x32">
+<link rel="icon" href="/icon-192.png" type="image/png" sizes="192x192">
+<link rel="icon" href="/icon-512.png" type="image/png" sizes="512x512">
+<link rel="apple-touch-icon" href="/apple-touch-icon.png" sizes="180x180">
+<link rel="manifest" href="/site.webmanifest">
+<!-- head:start -->
+<link rel="preload" href="/fonts/unbounded-900.woff2" as="font" type="font/woff2" crossorigin>
+<link rel="preload" href="/fonts/plex-sans-400.woff2" as="font" type="font/woff2" crossorigin>
+<meta name="color-scheme" content="dark light">
+<link rel="stylesheet" href="/site.css">
+<style>
+/* Shared by every page: the head partial, injected by the build between the head markers. Edit the partial, not the page. */
+/* Fonts, self-hosted (latin subsets, OFL): Unbounded 500/700/900, IBM Plex Sans 400/500/600, IBM Plex Mono 400/500. Fallbacks carry size and ascent overrides so the swap does not move the layout. The tokens, type and components are in /site.css (docs/plans/site-ui-3.md). */
+@font-face{font-family:'Unbounded';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/unbounded-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'Unbounded';font-style:normal;font-weight:700;font-display:swap;src:url(/fonts/unbounded-700.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'Unbounded';font-style:normal;font-weight:900;font-display:swap;src:url(/fonts/unbounded-900.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'IBM Plex Sans';font-style:normal;font-weight:400;font-display:swap;src:url(/fonts/plex-sans-400.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'IBM Plex Sans';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/plex-sans-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'IBM Plex Sans';font-style:normal;font-weight:600;font-display:swap;src:url(/fonts/plex-sans-600.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'IBM Plex Mono';font-style:normal;font-weight:400;font-display:swap;src:url(/fonts/plex-mono-400.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'IBM Plex Mono';font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/plex-mono-500.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
+@font-face{font-family:'Unbounded Fallback';src:local('Arial Black'),local('Arial-Black'),local('Impact');size-adjust:114%;ascent-override:87.5%;descent-override:21.5%;line-gap-override:0%}
+@font-face{font-family:'Plex Sans Fallback';src:local('Arial'),local('Helvetica Neue'),local('Helvetica');size-adjust:100.5%;ascent-override:102%;descent-override:27.4%;line-gap-override:0%}
+@font-face{font-family:'Plex Mono Fallback';src:local('Courier New'),local('Menlo');size-adjust:100%;ascent-override:102.5%;descent-override:27.5%;line-gap-override:0%}
+</style>
+<script>
+/* theme before first paint: ?theme=light|dark for one view (the capture tool), else the stored choice under igneum-theme, else the system setting; ?motion=off marks the page data-motion=off so every .reveal is drawn at once (a headless render never scrolls) */
+(function(){var t=null;try{t=new URLSearchParams(location.search).get("theme");}catch(e){}if(t!=="light"&&t!=="dark"){try{t=localStorage.getItem("igneum-theme");}catch(e){t=null;}}if(t!=="light"&&t!=="dark")t=window.matchMedia&&window.matchMedia("(prefers-color-scheme: light)").matches?"light":"dark";document.documentElement.setAttribute("data-theme",t);try{if(new URLSearchParams(location.search).get("motion")==="off")document.documentElement.setAttribute("data-motion","off");}catch(e){}})();
+</script>
+<!-- head:end -->
+<style>
+/* generated-page block (the bench table, the provenance table): the page hero, the contents rail, the sections; tokens, type and components are in /site.css */
+[id]{scroll-margin-top:120px}
+article h1{display:none}
+article{color:var(--ink-2)}
+article h2{font-size:var(--t-h3);margin:0 0 12px}
+article h3{font-size:16px;margin:26px 0 8px}
+article h4{font:600 15px/1.4 var(--f-sans);margin:20px 0 6px;color:var(--bone)}
+article p{margin:0 0 14px}article ul,article ol{margin:0 0 14px;padding-left:22px}article li{margin-bottom:6px}
+article p,article li,article h2,article h3{overflow-wrap:anywhere}
+article pre{margin:0 0 var(--s-4)}
+.doc-section:last-child{border-bottom:0}
+.doc-section[hidden]{display:none}
+.tbl{margin:var(--s-4) 0 var(--s-5)}
+table{min-width:560px}
+.gen{color:var(--ash);font-size:13px;margin:40px 0 0;max-width:72ch}
+.doc-tools{margin:0 0 var(--s-5)}
+.doc-tools .searchbar{max-width:560px}
+</style>
+</head>
+<body>
+<!-- nav:start -->
+<a class="skip" href="#main">Skip to content</a>
+<nav class="nav" aria-label="Main" data-nav-version="5">
+  <div class="container nav-row">
+    <a href="/" class="logo" aria-label="Igneum home">
+      <svg class="brand-mark" viewBox="0 0 1024 1024" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg>
+      <span class="word">IGNEUM</span>
+    </a>
+    <span class="devnet" id="nav-devnet" title="igneum-devnet-4, the Igneum 2.0 devnet, chain id 4465. Coins have no value. The chain may reset."><span class="dot off" id="foot-dot"></span><span id="foot-state" data-devnet-state="live">Devnet live</span></span>
+    <div class="nav-groups" id="nav-groups" role="list">
+      <div class="nav-group" role="listitem"><button type="button" class="group-btn" id="nav-btn-mine" data-group="mine" aria-expanded="false" aria-controls="nav-panel-mine" aria-haspopup="true">Mine<svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><path d="m7 10 5 5 5-5"/></svg></button></div>
+      <div class="nav-group" role="listitem"><button type="button" class="group-btn" id="nav-btn-network" data-group="network" aria-expanded="false" aria-controls="nav-panel-network" aria-haspopup="true">Network<svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><path d="m7 10 5 5 5-5"/></svg></button></div>
+      <div class="nav-group" role="listitem"><button type="button" class="group-btn" id="nav-btn-learn" data-group="learn" data-active aria-expanded="false" aria-controls="nav-panel-learn" aria-haspopup="true">Learn<svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><path d="m7 10 5 5 5-5"/></svg></button></div>
+      <div class="nav-group" role="listitem"><button type="button" class="group-btn" id="nav-btn-build" data-group="build" aria-expanded="false" aria-controls="nav-panel-build" aria-haspopup="true">Build<svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><path d="m7 10 5 5 5-5"/></svg></button></div>
+    </div>
+    <div class="nav-controls">
+      <button class="btn icon-btn" type="button" data-theme-toggle aria-label="Switch to light theme"><svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><circle cx="12" cy="12" r="4"/><path d="M12 2v2m0 16v2M2 12h2m16 0h2M5 5l1 1m12 12 1 1M5 19l1-1M18 6l1-1"/></svg></button>
+      <a href="/download" class="btn primary small cta" data-nav="download">Download</a>
+      <button class="burger" id="nav-burger" type="button" aria-expanded="false" aria-controls="nav-sheet" aria-label="Open the menu" aria-haspopup="true"><svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><path class="bars" d="M4 6h16M4 12h16M4 18h16"/><path class="cross" d="m6 6 12 12M6 18 18 6"/></svg></button>
+    </div>
+  </div>
+  <div class="panels" id="nav-panels">
+    <div class="panel-wrap container">
+      <div class="nav-panel" id="nav-panel-mine" data-group="mine" role="region" aria-labelledby="nav-btn-mine" hidden>
+        <div class="panel-list">
+          <a href="/miner" data-nav="miner"><b>Ember, the miner</b><span>One click installs the node, the miner and the prover.</span></a>
+          <a href="/download" data-nav="download"><b>Download</b><span>Windows, macOS, Linux and HiveOS.</span></a>
+          <a href="/app" data-nav="app"><b>The app</b><span>What you see while the card mines.</span></a>
+          <a href="/wallet" data-nav="wallet"><b>The wallet</b><span>Your coins. Final means final.</span></a>
+          <a href="/miners" data-nav="miners"><b>GPU bench table</b><span>Measured rates, card by card.</span></a>
+          <a href="/tuning" data-nav="tuning"><b>Tuning</b><span>The knee rule, the priors, the flags and the compiler settings, every figure measured.</span></a><a href="/dev-fee" data-nav="dev-fee"><b>The dev fee</b><span>The optional one, in full view, off with one flag.</span></a>
+          <a href="/metamask" data-nav="metamask"><b>Add to MetaMask</b><span>Igneum as a network in your wallet.</span></a>
+        </div>
+      </div>
+      <div class="nav-panel" id="nav-panel-network" data-group="network" role="region" aria-labelledby="nav-btn-network" hidden>
+        <div class="panel-list">
+          <a href="/live" data-nav="live"><b>Live devnet</b><span>The chain as it grows, one lane per miner.</span></a>
+          <a href="/explorer" data-nav="explorer"><b>Explorer</b><span>Look a block or an address up.</span></a>
+          <a href="/evidence" data-nav="evidence"><b>Evidence</b><span>Every claim and how far it is tested.</span></a>
+          <a href="/light" data-nav="light"><b>Light wallet</b><span>A balance your browser proves, trusting no node.</span></a>
+          <a href="/receipt" data-nav="receipt"><b>Payment receipt</b><span>A receipt any third party re-verifies offline.</span></a>
+          <a href="/oracle" data-nav="oracle"><b>State oracle on Sepolia</b><span>Balances on the devnet, read from another chain.</span></a>
+        </div>
+      </div>
+      <div class="nav-panel" id="nav-panel-learn" data-group="learn" role="region" aria-labelledby="nav-btn-learn" hidden>
+        <div class="panel-list">
+          <a href="/litepaper" data-nav="litepaper"><b>Litepaper</b><span>The design, as published.</span></a>
+          <a href="/income" data-nav="income"><b>Income</b><span>What your card would mine, from the live network.</span></a>
+          <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
+          <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
+          <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger" aria-current="page"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
+          <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
+          <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
+        </div>
+      </div>
+      <div class="nav-panel" id="nav-panel-build" data-group="build" role="region" aria-labelledby="nav-btn-build" hidden>
+        <div class="panel-list">
+          <a href="/build" data-nav="build"><b>Build on Igneum</b><span>Chain ids, RPC, a contract in five minutes.</span></a>
+          <a href="/faucet" data-nav="faucet"><b>Devnet faucet</b><span>10 IGN of devnet coin, once a day.</span></a>
+          <a href="/swap" data-nav="swap"><b>Swap</b><span>Test tokens on the devnet; every swap is a proven block.</span></a>
+          <a href="/grants" data-nav="grants"><b>Grants</b><span>Tooling, apps, infrastructure, research.</span></a>
+        <a href="/compatibility" data-nav="compatibility"><b>Compatibility</b><span>Every row a test run against the devnet.</span></a>
+        </div>
+      </div>
+    </div>
+  </div>
+  <div class="nav-sheet" id="nav-sheet" role="dialog" aria-modal="true" aria-label="Menu" hidden>
+    <div class="sheet-scroll">
+      <div class="sheet-group"><div class="sheet-head">Mine</div>
+        <a href="/miner" data-nav="miner"><b>Ember, the miner</b><span>One click installs the node, the miner and the prover.</span></a>
+        <a href="/download" data-nav="download"><b>Download</b><span>Windows, macOS, Linux and HiveOS.</span></a>
+        <a href="/app" data-nav="app"><b>The app</b><span>What you see while the card mines.</span></a>
+        <a href="/wallet" data-nav="wallet"><b>The wallet</b><span>Your coins. Final means final.</span></a>
+        <a href="/miners" data-nav="miners"><b>GPU bench table</b><span>Measured rates, card by card.</span></a>
+        <a href="/tuning" data-nav="tuning"><b>Tuning</b><span>The knee rule, the priors, the flags and the compiler settings, every figure measured.</span></a><a href="/dev-fee" data-nav="dev-fee"><b>The dev fee</b><span>The optional one, in full view, off with one flag.</span></a>
+        <a href="/metamask" data-nav="metamask"><b>Add to MetaMask</b><span>Igneum as a network in your wallet.</span></a>
+      </div>
+      <div class="sheet-group"><div class="sheet-head">Network</div>
+        <a href="/live" data-nav="live"><b>Live devnet</b><span>The chain as it grows, one lane per miner.</span></a>
+        <a href="/explorer" data-nav="explorer"><b>Explorer</b><span>Look a block or an address up.</span></a>
+        <a href="/evidence" data-nav="evidence"><b>Evidence</b><span>Every claim and how far it is tested.</span></a>
+        <a href="/light" data-nav="light"><b>Light wallet</b><span>A balance your browser proves, trusting no node.</span></a>
+        <a href="/receipt" data-nav="receipt"><b>Payment receipt</b><span>A receipt any third party re-verifies offline.</span></a>
+        <a href="/oracle" data-nav="oracle"><b>State oracle on Sepolia</b><span>Balances on the devnet, read from another chain.</span></a>
+      </div>
+      <div class="sheet-group"><div class="sheet-head">Learn</div>
+        <a href="/litepaper" data-nav="litepaper"><b>Litepaper</b><span>The design, as published.</span></a>
+        <a href="/income" data-nav="income"><b>Income</b><span>What your card would mine, from the live network.</span></a>
+        <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
+        <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
+        <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger" aria-current="page"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
+        <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
+        <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
+      </div>
+      <div class="sheet-group"><div class="sheet-head">Build</div>
+        <a href="/build" data-nav="build"><b>Build on Igneum</b><span>Chain ids, RPC, a contract in five minutes.</span></a>
+        <a href="/faucet" data-nav="faucet"><b>Devnet faucet</b><span>10 IGN of devnet coin, once a day.</span></a>
+        <a href="/swap" data-nav="swap"><b>Swap</b><span>Test tokens on the devnet; every swap is a proven block.</span></a>
+        <a href="/grants" data-nav="grants"><b>Grants</b><span>Tooling, apps, infrastructure, research.</span></a>
+        <a href="/compatibility" data-nav="compatibility"><b>Compatibility</b><span>Every row a test run against the devnet.</span></a>
+      </div>
+      <div class="sheet-foot">
+        <a href="/download" class="btn primary big" data-nav="download">Download</a>
+        <div class="sheet-social"><a href="https://discord.gg/igneum" target="_blank" rel="noopener">Discord</a><a href="https://git.igneum.network/igneum-network/spec" target="_blank" rel="noopener">Source</a><a href="https://www.reddit.com/user/Igneum_network/" target="_blank" rel="noopener">Reddit</a></div>
+      </div>
+    </div>
+  </div>
+</nav>
+<script>
+(function(){
+  // the slim bar (site-ui-5, 7 Oct 2026): three group buttons open one panel each; the burger opens the sheet on phones.
+  // Keyboard: Enter or Space opens a group, Escape closes it and returns focus to its button, arrows move between the
+  // group buttons, Tab walks the open panel's links, a click outside closes. The theme toggle flips data-theme and stores it.
+  var n=document.querySelector('.nav');if(!n)return;
+  var btns=[].slice.call(n.querySelectorAll('.group-btn')),panels=[].slice.call(n.querySelectorAll('.nav-panel')),wrap=n.querySelector('.panels');
+  var burger=document.getElementById('nav-burger'),sheet=document.getElementById('nav-sheet');
+  function panelOf(g){return panels.filter(function(p){return p.getAttribute('data-group')===g;})[0];}
+  function closeAll(focusBack){var was=null;btns.forEach(function(b){if(b.getAttribute('aria-expanded')==='true')was=b;b.setAttribute('aria-expanded','false');});panels.forEach(function(p){p.hidden=true;});n.classList.remove('panel-open');if(focusBack&&was)was.focus();}
+  function open(g){closeAll(false);var b=btns.filter(function(x){return x.getAttribute('data-group')===g;})[0],p=panelOf(g);if(!b||!p)return;b.setAttribute('aria-expanded','true');p.hidden=false;n.classList.add('panel-open');anchor(b,p);}
+  // the panel sits under its button; a panel that would run past the container's right edge aligns its right edge to the button's right edge instead (never past the viewport)
+  function anchor(b,p){var pw=n.querySelector('.panel-wrap');if(!pw)return;var cr=pw.getBoundingClientRect(),br=b.getBoundingClientRect(),w=p.offsetWidth,left=br.left-cr.left;if(left+w>cr.width)left=(br.right-cr.left)-w;if(left<0)left=0;p.style.setProperty('--panel-left',Math.round(left)+'px');}
+  window.addEventListener('resize',function(){var o=btns.filter(function(x){return x.getAttribute('aria-expanded')==='true';})[0];if(o)anchor(o,panelOf(o.getAttribute('data-group')));});  btns.forEach(function(b,i){
+    b.addEventListener('click',function(){var on=b.getAttribute('aria-expanded')==='true';if(on)closeAll(false);else open(b.getAttribute('data-group'));});
+    b.addEventListener('keydown',function(e){
+      var k=e.key;
+      if(k==='ArrowRight'||k==='ArrowLeft'){e.preventDefault();var j=(i+(k==='ArrowRight'?1:btns.length-1))%btns.length;btns[j].focus();if(n.classList.contains('panel-open'))open(btns[j].getAttribute('data-group'));}
+      else if(k==='ArrowDown'){e.preventDefault();open(b.getAttribute('data-group'));var f=panelOf(b.getAttribute('data-group')).querySelector('a');if(f)f.focus();}
+      else if(k==='Escape'){closeAll(true);}
+    });
+  });
+  if(wrap)wrap.addEventListener('keydown',function(e){if(e.key==='Escape'){e.stopPropagation();closeAll(true);}});
+  document.addEventListener('click',function(e){if(!n.classList.contains('panel-open'))return;if(e.target.closest('.group-btn')||e.target.closest('.nav-panel'))return;closeAll(false);});
+  document.addEventListener('focusin',function(e){if(!n.classList.contains('panel-open'))return;if(n.contains(e.target))return;closeAll(false);});
+  document.addEventListener('keydown',function(e){if(e.key==='Escape'&&n.classList.contains('panel-open'))closeAll(true);});
+  // the sheet on phones
+  function setSheet(o){if(!burger||!sheet)return;n.classList.toggle('open',o);sheet.hidden=!o;burger.setAttribute('aria-expanded',o?'true':'false');burger.setAttribute('aria-label',o?'Close the menu':'Open the menu');document.documentElement.classList.toggle('nav-locked',o);if(o){var f=sheet.querySelector('a');if(f)f.focus();}}
+  if(burger&&sheet){
+    burger.addEventListener('click',function(){setSheet(!n.classList.contains('open'));});
+    sheet.addEventListener('click',function(e){if(e.target.closest('a'))setSheet(false);});
+    sheet.addEventListener('keydown',function(e){
+      if(e.key==='Escape'){setSheet(false);burger.focus();return;}
+      if(e.key!=='Tab')return;var f=sheet.querySelectorAll('a,button');if(!f.length)return;var first=f[0],last=f[f.length-1];
+      if(e.shiftKey&&document.activeElement===first){e.preventDefault();burger.focus();}else if(!e.shiftKey&&document.activeElement===last){e.preventDefault();burger.focus();}
+    });
+    burger.addEventListener('keydown',function(e){if(e.key==='Tab'&&!e.shiftKey&&n.classList.contains('open')){e.preventDefault();var f=sheet.querySelector('a');if(f)f.focus();}});
+    var mq=window.matchMedia('(min-width:861px)');if(mq.addEventListener)mq.addEventListener('change',function(){setSheet(false);});
+  }
+  // the theme toggle
+  var t=n.querySelector('[data-theme-toggle]');
+  function paintToggle(){var dark=document.documentElement.getAttribute('data-theme')!=='light';t.setAttribute('aria-label',dark?'Switch to light theme':'Switch to dark theme');t.innerHTML=dark?'<svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><circle cx="12" cy="12" r="4"/><path d="M12 2v2m0 16v2M2 12h2m16 0h2M5 5l1 1m12 12 1 1M5 19l1-1M18 6l1-1"/></svg>':'<svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><path d="M20.7 13.3A8.5 8.5 0 0 1 10.7 3.3 8.5 8.5 0 1 0 20.7 13.3Z"/></svg>';}
+  if(t){t.addEventListener('click',function(){var v=document.documentElement.getAttribute('data-theme')==='light'?'dark':'light';document.documentElement.setAttribute('data-theme',v);try{localStorage.setItem('igneum-theme',v);}catch(e){}document.dispatchEvent(new CustomEvent('igneum-theme'));});paintToggle();document.addEventListener('igneum-theme',paintToggle);}
+})();
+</script>
+<!-- nav:end -->
+<main id="main">
+<section class="page-hero">
+<div class="container">
+<div class="breadcrumb"><a href="/">Igneum</a><span>/</span><span>The GPU network ledger</span></div>
+<div class="page-heading"><div><div class="eyebrow"><span class="line"></span>Learn · ledger</div>
+<h1>The GPU network ledger</h1>
+<p class="lead">Every live GPU-mined chain we could pin, measured the same way on the same cards, with the same chip method, and ranked. Igneum is one row among the others, under the same rules.</p></div></div>
+</div>
+</section>
+<section class="section compact"><div class="container">
+
+<div class="docs-layout">
+<nav class="doc-nav" aria-label="Contents"><div class="eyebrow">Contents</div><a href="#the-method-the-same-for-every-chain">The method, the same for every chain</a><a href="#the-card-rows-measured-board-power-stock">The card rows (measured, board power, stock)</a><a href="#the-chip-to-gpu-edge-both-conventions">The chip-to-GPU edge, both conventions</a><a href="#the-two-phases-with-each-chain-s-actual-split">The two phases with each chain's actual split</a><a href="#the-ranking">The ranking</a><a href="#the-claim-under-test-clause-by-clause">The claim under test, clause by clause</a><a href="#reproduce-it-tonight">Reproduce it tonight</a></nav>
+<article class="doc-body" data-filter-list="gpu-ledger"><section class="doc-section"><h1 id="the-gpu-network-ledger">The GPU network ledger</h1>
+<p>Every live GPU-mined chain we could pin, measured the same way on the same rented cards in the same sessions, with the same chip-design method applied to each, and ranked. Igneum sits in the table as one row among the others, under the same rules. Every number is measured or a labelled model with its source; a number that does not exist yet says "pending" and names who owes it; a chain we could not run in-house says NOT RUN and why. The full record with the lane bookkeeping is in the repository at docs/analysis/class-v6/1p5x/ledger/ (README.md and ledger.json); this page is rendered from the same data file.</p>
+<p>&lt;!-- ledger:stamp:start --&gt; Data: ledger.json, stamp 2026-10-09, adversarial set v3 (build-1:/srv/artefacts/lab/adv/ (README.md, design-notes/adversarial-sets-v1-v2-v3.md, rows/, SHA256SUMS); set v3 commit b2b9ee0b9 on class-v6-adversary). &lt;!-- ledger:stamp:end --&gt;</p>
+</section>
+<section class="doc-section"><h2 id="the-method-the-same-for-every-chain">The method, the same for every chain</h2>
+<ol><li><strong>The object.</strong> Each chain's proof of work as its own pinned reference code, built from source (no downloaded miner binaries):</li></ol>
+<p>   Igneum's frozen class v6 at its live 4 GiB dataset; the official ProgPoW 0.9.4 reference kernel for Ravencoin's KAWPOW (which is    ProgPoW 0.9.4 with Ravencoin's constants, so the row is a labelled proxy) and the same row for Firo's FiroPoW; Iron Fish's    FishHash reference library with a bit-exact CUDA port; the pinned chfast/ethash library's hashimoto at Ethereum Classic's    current epoch; Ergo's Autolykos2 NOT RUN (the reason on the row).</p>
+<ol><li><strong>The card rows.</strong> One rented RTX 4090 and one rented RTX 5090 on uncapped hosts, every chain back to back in one session per</li></ol>
+<p>   card at stock clocks; board power sampled at 1 Hz (idle not subtracted); nJ per hash = watts over MH/s; three runs, the median    with its spread; the dataset size and the card's clock on every row; a read-only twin (the same memory reads, the arithmetic    cut) where the harness has one, giving the card's memory share f.</p>
+<ol><li><strong>The chip rows.</strong> For each chain, the cheapest credible specialist chip on the same process node as the card, as a complete</li></ol>
+<p>   machine, modelled and labelled as a model (never measured): the DRAM-board chip is the energy row, the full-SRAM die the    residual. Two conventions beside every ratio: ours (the cheapest programmable core, fused where the work allows) and ProgPoW's    own premise (the chip must keep a GPU-class datapath, so its edge is 1.1x to 1.2x on the compute term, weighted by f).</p>
+<ol><li><strong>The real chip.</strong> Ethereum Classic is the one chain here with a chip on the market, the Antminer E9 Pro; its published rate</li></ol>
+<p>   and power sit on the row, and our modelled chip for Etchash sits beside it as the calibration of the model.</p>
+<ol><li><strong>The two phases.</strong> Before investment: can a chip maker recover its spend under growing, flat and falling prices. After, with</li></ol>
+<p>   the spend sunk: who exits first on operating cost, with each chain's actual reward split. On Igneum a GPU earns the mining share    plus the proving share (80 / 20); a hash chip earns the mining share only. On every other chain here the GPU earns mining only,    so the second-income term is zero by construction.</p>
+<ol><li><strong>The ranking.</strong> (a) ascending on the DRAM-board ratio under our convention at the worse of the two cards (the lower ratio is</li></ol>
+<p>   the smaller chip edge); (b) the same under ProgPoW's premise; (c) whether the chain's GPUs earn an income a hash chip cannot. A    chain with a pending or proxy cell is ranked provisionally and says so; a NOT RUN chain is unranked.</p>
+</section>
+<section class="doc-section"><h2 id="the-card-rows-measured-board-power-stock">The card rows (measured, board power, stock)</h2>
+<p>&lt;!-- ledger:cards:start --&gt;</p>
+<div class="tbl"><table><thead><tr><th>chain</th><th>algorithm</th><th>dataset on the row</th><th>reward split (mining / proving)</th><th>RTX 4090 stock: nJ per hash (MH/s, W, f)</th><th>RTX 5090 stock: nJ per hash (MH/s, W, f)</th><th>twin</th><th>sources</th></tr></thead><tbody><tr><td>Igneum</td><td>class v6, the live signing object 0x2a1d6caab4c24564 (2.0 devnet, chain id 4465)</td><td>4.29 GB (4,294,967,296 bytes); 2^30 words, the live policy (70a6c703); 256 random 4-byte reads per hash, 62,120 instructions per hash (instruction convention)</td><td>80 / 20 (the Token Value volume on master (D04, token-value/README.md: the 80/20 emission allocation); PROVING_POOL_SHARE_PERCENT)</td><td>8,369 MEASURED (30.67 MH/s, 256.7 W, f 0.848; spread 0.67%; vast 55009211, driver 580; stock (the pod refused -lgc); clocks_sm_median pending the ledger session)</td><td>5,597 MEASURED (68.66 MH/s, 384.3 W, f 0.811; spread 2.11%; vast 55006481, driver 580; stock (the pod refused -lgc); the host cap 500 W, the card drew 384)</td><td>yes (the same address stream, the arithmetic cut)</td><td>RTX 4090: build-1:/srv/artefacts/lab/ctl-v6/vast-55009211/ (rows.jsonl, SHA256SUMS); the cohort table build-1:/srv/artefacts/lab/cohort/TABLE.md; RTX 5090: build-1:/srv/artefacts/lab/ctl-v6/vast-55006481/; the cohort table build-1:/srv/artefacts/lab/cohort/TABLE.md</td></tr><tr><td>Ravencoin</td><td>KAWPOW (ProgPoW 0.9.4 with Ravencoin's kiss99 constants, 7,500-block epochs and a 512-parent DAG; live since block 1,219,736, 6 May 2020)</td><td>6.18 GB (6,182,403,712 bytes); KAWPOW's current DAG size at Ravencoin height 4,573,707 (epoch 609, read 13:0x UK): the official ProgPoW 0.9.4 kernel built at Ethash block 18,270,000 (epoch 609, the same byte count), harness progpow-094/gpu/pp_harness_18270000; KAWPOW's own constants NOT applied, so the row is 'ProgPoW 0.9.4 official at KAWPOW's DAG size (proxy)'; 64 coalesced 256-byte reads per hash; F1 GPU = CPU on both nonces (cpu/vectors-094-kawpow-size-18270000.txt)</td><td>100 / 0 (Ravencoin's block reward goes to the miner in full (no second income to GPUs))</td><td>6,920 MEASURED (prior row: kawpowminer, not the pinned kernel; a PROXY until the ledger session's pinned-kernel row lands) (58.95 MH/s, 409.0 W, f none; spread none; RunPod, the comparative lane a2ed5c31; stock)</td><td>pending: pending (COHORT, the ledger session)</td><td>yes, by construction (progpow-094/gpu/pp_twin 18270000 26 250: the 64 dependent entry reads per 16-lane hash)</td><td>RTX 4090: build-1:/srv/artefacts/lab/adv/rows/rows.md (the ctl-progpow-094 section, card rows)</td></tr><tr><td>Firo</td><td>FiroPoW (ProgPoW 0.9.4 with Firo's constants; live since block 419,264, 26 October 2021)</td><td>= Ravencoin's row</td><td>100 / 0</td><td>= Ravencoin's row</td><td>= Ravencoin's row</td><td>as Ravencoin</td><td>as KAWPOW: the pinned ProgPoW 0.9.4 reference; FiroPoW differs from KAWPOW only in its constants and DAG schedule, so the lab serves ONE row for both and says so</td></tr><tr><td>Iron Fish</td><td>FishHash (live since hardfork 1, April 2024)</td><td>4.83 GB (4,831,835,776 bytes); 37,748,717 items of 128 bytes, FIXED (no epochs); 96 random 128-byte reads per hash, 9,856 lane-instructions</td><td>100 / 0 (Iron Fish's block reward is mining only)</td><td>pending: pending (COHORT, the ledger session); CONTROLS' rate-only read 19.73 MH/s at stock, no sampler (rate only 19.73 MH/s)</td><td>pending: pending (COHORT, the ledger session); CONTROLS' rate-only sm_120 read 45.37 MH/s full, 39.71 twin, F1 PASS (rate only 45.37 MH/s)</td><td>yes (a trace replay of the kernel's own item indexes; its energy read as a bound: the twin runs 10 percent slower than the full kernel)</td><td>RTX 4090: build-1:/srv/artefacts/lab/controls/fishhash/gpu/bench-4090.log; RTX 5090: build-1:/srv/artefacts/lab/controls/fishhash/ (fishhash.md)</td></tr><tr><td>Ethereum Classic</td><td>Etchash (Ethash with ECIP-1099's 60,000-block epochs; live since block 11,700,000, November 2020)</td><td>4.64 GB (4,638,898,816 bytes); ETC height 25,502,946 (read 12:5x UK) = Etchash epoch 425 (ECIP-1099: height / 60,000), the harness's block argument 12,750,000 (the Ethash epoch with the same size table index); 64 coalesced 128-byte reads per hash (two 64-byte half-mixes); CONTROLS' rate-only read on a 4090 at stock 29.90 MH/s full and 29.90 twin (memory-bound)</td><td>100 / 0 (ETC's block reward is mining only)</td><td>pending: pending (COHORT, the ledger session; the harness staged 13:0x UK); CONTROLS' rate-only read 29.90 MH/s (rate only 29.90 MH/s)</td><td>pending: pending (COHORT, the ledger session; the sm_120 build from etchash/src)</td><td>yes, by construction</td><td>RTX 4090: build-1:/srv/artefacts/lab/controls/etchash/ (etchash.md)</td></tr><tr><td>Ergo</td><td>Autolykos2 (k = 32, n = 26, Blake2b-256; the table grows 5 percent every 51,200 blocks)</td><td>7.27 GB (7,272,058,080 bytes); the live table at Ergo height 1,890,820 (api.ergoplatform.com, 13:0x UK): N = 227,251,815 elements of 32 bytes (+5 percent at height 1,894,400; the row names its height); 33 random 32-byte reads per hash; the table builds on the device in 1.5 s; CONTROLS' rate-only read on a 4090 at stock 216.2 MH/s full, 201.8 twin</td><td>100 / 0 (Ergo's block reward is mining only)</td><td>pending: pending (COHORT, the ledger session; the harness staged 13:1x UK); CONTROLS' rate-only read 216.2 MH/s full, 201.8 twin (rate only 216.20 MH/s)</td><td>pending: pending (COHORT, the ledger session; the sm_120 build from src)</td><td>yes (a trace replay)</td><td>RTX 4090: build-1:/srv/artefacts/lab/controls/autolykos/ (autolykos.md)</td></tr></tbody></table></div>
+<p>&lt;!-- ledger:cards:end --&gt;</p>
+</section>
+<section class="doc-section"><h2 id="the-chip-to-gpu-edge-both-conventions">The chip-to-GPU edge, both conventions</h2>
+<p>&lt;!-- ledger:edge:start --&gt;</p>
+<div class="tbl"><table><thead><tr><th>chain</th><th>the cheapest credible same-node DRAM board (set v3, nJ per hash, band)</th><th>ratio at the RTX 4090 stock (ours)</th><th>ratio at the RTX 5090 stock (ours)</th><th>ProgPoW-premise ratio at the RTX 4090</th><th>ProgPoW-premise ratio at the RTX 5090</th><th>the die as the residual (nJ; ratio at the worse card)</th><th>real chip on the market</th><th>source</th></tr></thead><tbody><tr><td>Igneum</td><td>1,542 (1,329 to 1,941); GDDR7 board + register file sized to the work + fused operations, N5; split memory 527 / ALU 166 / tax 849; WITNESS (modelled, complete machine, instruction convention)</td><td>5.43x (4.31 to 6.30)</td><td>3.63x (2.88 to 4.21)</td><td>1.01x to 1.03x (f 0.853 measured)</td><td>1.02x to 1.03x (f 0.811 measured on the stock pod)</td><td>335 (N2 full-SRAM die, the coexistence row); 25.0x</td><td>none on the market</td><td>docs/analysis/class-v6/1p5x/lab/adv/v3/ledger-rows.md and ledger-rows.json (class-v6-adversary 47f16b86f); build-1:/srv/artefacts/lab/adv/rows/ctl-v6.json and rows.md (set v3, 2026-10-09T11:33Z); the die 12.0x at the 5090 knee, USD 0.77 per MH/s</td></tr><tr><td>Ravencoin</td><td>1,757 (1,453 to 2,147); GDDR7 board + register file sized to the work + fused operations, N5; bandwidth-bound at 16 KB per hash (93 MH/s per board); split memory 647 / ALU and tax per rows.md; WITNESS (modelled on the kawpowminer census as the work proxy until CONTROLS' trace replaces it)</td><td>3.94x (3.22 to 4.76)</td><td>pending</td><td>1.10x to 1.20x (the premise's own figure; no measured twin on this kernel yet)</td><td>1.10x to 1.20x (the premise's own figure; the twin row makes it measured)</td><td>697 (N2 full-SRAM die, the coexistence row (USD 1.89 per MH/s); the cheapest specialist of any kind is near-memory base dies at 669 nJ); 9.9x</td><td>none on the market</td><td>docs/analysis/class-v6/1p5x/lab/adv/v3/ledger-rows.md and ledger-rows.json (class-v6-adversary 47f16b86f); build-1:/srv/artefacts/lab/adv/rows/ctl-progpow-094.json (set v3)</td></tr><tr><td>Firo (= Ravencoin's row)</td><td>1,757 (1,453 to 2,147); GDDR7 board + register file sized to the work + fused operations, N5; bandwidth-bound at 16 KB per hash (93 MH/s per board); split memory 647 / ALU and tax per rows.md; WITNESS (modelled on the kawpowminer census as the work proxy until CONTROLS' trace replaces it)</td><td>3.94x (3.22 to 4.76)</td><td>pending</td><td>1.10x to 1.20x (the premise's own figure; no measured twin on this kernel yet)</td><td>1.10x to 1.20x (the premise's own figure; the twin row makes it measured)</td><td>697 (N2 full-SRAM die, the coexistence row (USD 1.89 per MH/s); the cheapest specialist of any kind is near-memory base dies at 669 nJ); 9.9x</td><td>none on the market</td><td>= Ravencoin's row</td></tr><tr><td>Iron Fish</td><td>1,051 (881 to 1,257); GDDR7 board + register file sized to the work + fused operations, N5; bandwidth-bound at 124 MH/s per board; 95 percent of the board's energy is the memory path; split memory 529 / ALU 46 / tax 503; WITNESS (modelled; the card's cell pending, so the ratio is pending)</td><td>pending</td><td>pending</td><td>pending (needs the measured f from the twin)</td><td>pending</td><td>170 (full SRAM dies (three N2 reticles) + sized + fused operations); pending</td><td>none on the market</td><td>build-1:/srv/artefacts/lab/adv/rows/ctl-fishhash.json and rows.md (set v3)</td></tr><tr><td>Ethereum Classic</td><td>765 (638 to 919); GDDR7 board + register file sized to the work + fused operations, N5; USD 3.25 per MH/s; split per ledger-rows.md; WITNESS (modelled; the card cells pending, so the ratios are pending)</td><td>pending</td><td>pending</td><td>1.10x to 1.20x (the premise's own figure; the twin row makes it measured)</td><td>1.10x to 1.20x (the premise's own figure)</td><td>177 (N2 full-SRAM die, the coexistence row); pending</td><td>Bitmain Antminer E9 Pro: 3,680 MH/s at 2,200 W = 598 nJ per hash, WITNESS (a manufacturer's published figure, not measured by the lab); Bitmain's stated figures as listed on minerstat's hardware page (https://minerstat.com/hardware/antminer-e9-pro): 3.68 GH/s on Ethash at 2,200 W, release 2023-02; 2,200 W / 3,680 MH/s = 0.598 J per MH = 598 nJ per hash</td><td>docs/analysis/class-v6/1p5x/lab/adv/v3/ledger-rows.md and ledger-rows.json (class-v6-adversary 47f16b86f, wording 82330b04c)</td></tr><tr><td>Ergo</td><td>pending: pending (ADVERSARY: the chip rows from CONTROLS' trace; default 15:00 UK, else pending (adversary))</td><td>pending</td><td>pending</td><td>pending</td><td>pending</td><td>pending</td><td>none on the market</td><td>pending</td></tr></tbody></table></div>
+<p>&lt;!-- ledger:edge:end --&gt;</p>
+</section>
+<section class="doc-section"><h2 id="the-two-phases-with-each-chain-s-actual-split">The two phases with each chain's actual split</h2>
+<p>&lt;!-- ledger:phases:start --&gt;</p>
+<div class="tbl"><table><thead><tr><th>chain</th><th>split</th><th>phase A (before investment)</th><th>phase B (spend sunk)</th><th>an income a hash chip cannot earn</th><th>source</th></tr></thead><tbody><tr><td>Igneum</td><td>80 / 20</td><td>before investment (24 months, the mining share 80 percent of the year-1 subsidy): the same-node board maker recovers its spend on NO fleet from 100 to 100 M boards on the growing or flat price path (100,000 boards: net USD -55.4 M on 58.8 M revenue growing; -37.6 M on 76.6 M flat); only the falling path pays it; the N2 die recovers on no path</td><td>spend sunk, flat path at USD 0.10 per kWh, the chip at 10 percent of the hash: mining revenue USD 0.354 per TH; the GPU's proving income at the ratified 20 percent share USD 0.098 per TH against the board chip's operating advantage USD 0.046 per TH (GPU electricity 0.111 less the chip's electricity, hosting and maintenance 0.066): the GPU out-earns the built board chip; the cancelling proving share 9 percent (board), 13 (hybrid), 20 (die)</td><td>yes by rule (the proving share of every block, 20 percent ratified); LIVE ON DEVNET with on-chain paid records (663 paid v1 segment records to 30 prover keys on chain 4465, the PROVING LIVE lane's file bd3f53c1 on build-1), not yet in a shipped package</td><td>build-1:/srv/artefacts/lab/adv/rows/rows.md (the two-phase section), ADVERSARY commit 545f3f8a0; ctl-v6-coexistence.json; WITNESS; phase B NOT LIVE until a shipped package runs a prover</td></tr><tr><td>Ravencoin</td><td>100 / 0</td><td>before investment: no fleet from 100 to 100 M machines recovers a board chip's spend on any path, because Ravencoin's whole mining emission over 24 months (about USD 2.9 M at the public price) sits below one USD 35 M design cost; 10,000 boards would take 56 percent of the 721 GH/s network and earn USD 1.6 M to 2.4 M against a USD 44 M spend</td><td>spend sunk, mining only: mining revenue USD 0.064 per TH of the chain's own hashes; the board chip's recurring cost USD 0.069 per TH at ten cents; the chip's operating advantage over the RTX 4090 at stock (6,920 nJ) USD 0.123 per TH (the GPU's electricity 0.192 less the chip's 0.069) stands in full, no prover income</td><td>no (the block reward is mining only)</td><td>docs/analysis/class-v6/1p5x/lab/adv/v3/ctl-progpow-094-coexistence.json (rows[].phase_a, rows[].phase_b_split; method lab/adv/README.md section 14), ADVERSARY commit d7db3e596 on class-v6-adversary; WITNESS, the chain's own units, the 100/0 split, the same 24-month life, design cost and fleet rule as v6, the three price paths (flat at the public price, x2 growing, x0.5 falling, the hash held); the public lines on the row</td></tr><tr><td>Firo</td><td>100 / 0</td><td>as KAWPOW</td><td>as KAWPOW</td><td>no</td><td>as KAWPOW; = KAWPOW's row at a 100/0 split</td></tr><tr><td>Iron Fish</td><td>100 / 0</td><td>before investment: no fleet from 100 to 100 M machines recovers a board chip's spend on any path; Iron Fish's whole mining emission over 24 months is about USD 1.4 M at the public price (10,000 boards would take 84 percent of the hash for USD 1.1 M to 1.6 M)</td><td>spend sunk, mining only: mining revenue USD 0.086 per TH of the chain's own hashes; the board chip's recurring cost USD 0.043 per TH at ten cents; the GPU side NOT RUN until the card cell lands; no prover income by construction</td><td>no</td><td>docs/analysis/class-v6/1p5x/lab/adv/v3/ctl-fishhash-coexistence.json, ADVERSARY commit d7db3e596 on class-v6-adversary; WITNESS, the chain's own units, the 100/0 split, the same life, design cost, fleet rule and price paths as v6; the GPU side of phase B NOT RUN until COHORT's card rows</td></tr><tr><td>Ethereum Classic</td><td>100 / 0</td><td>before investment: no fleet from 100 to 100 M machines recovers a board chip's spend on any path; ETC's whole mining emission over 24 months is about USD 83 M at the public price, but 10,000 boards are 2 percent of 120.9 TH/s and earn USD 1.0 M to 1.5 M, and 100,000 boards (13 percent) USD 9 M to 13 M against a USD 150 M spend</td><td>spend sunk, mining only: mining revenue USD 0.0087 per TH of the chain's own hashes, below even the modelled board's recurring cost (USD 0.031 per TH) and below the E9 Pro's own electricity at ten cents (598 nJ = USD 0.017 per TH): at the public figures nobody mines ETC at a profit at ten cents and phase B is a loss on both sides; the GPU side NOT RUN until the card cell lands</td><td>no</td><td>docs/analysis/class-v6/1p5x/lab/adv/v3/ctl-etchash-coexistence.json, ADVERSARY commit d7db3e596 on class-v6-adversary; WITNESS, the chain's own units, the 100/0 split, the same life, design cost, fleet rule and price paths as v6; the GPU side of phase B NOT RUN until COHORT's card rows</td></tr><tr><td>Ergo</td><td>100 / 0</td><td>pending (ADVERSARY)</td><td>pending (ADVERSARY); no prover income by construction</td><td>no</td><td>pending; pending (ADVERSARY at the 100/0 split, the public line on the row)</td></tr></tbody></table></div>
+<p>&lt;!-- ledger:phases:end --&gt;</p>
+</section>
+<section class="doc-section"><h2 id="the-ranking">The ranking</h2>
+<p>&lt;!-- ledger:ranking:start --&gt; <strong>(a) Ours, the same-node DRAM board at the worse card (the smaller chip edge first):</strong> No order in this column yet: a cross-chain comparison is made only between cells from the same card, state and session, and the measured cells today come from 2 sessions (lab-cohort-ctl-v6 (COHORT, 11:49 to 12:30 UK, one chain); comparative-lane a2ed5c31 (RunPod, one chain, an earlier session)); the ledger session (both cards, every chain back to back) fills it. Each chain's own number, same card and state, as it stands:</p>
+<ul><li>Igneum: RTX 4090 stock 5.43x (4.31 to 6.30); RTX 5090 stock 3.63x (2.88 to 4.21)</li><li>Ravencoin: RTX 4090 stock 3.94x (3.22 to 4.76); RTX 5090 stock pending (a pending or proxy cell in this row)</li><li>Iron Fish: unranked in this column (no measured card cell yet)</li><li>Ethereum Classic: unranked in this column (no measured card cell yet)</li><li>Ergo: unranked in this column (no measured card cell yet)</li></ul>
+<p><strong>(b) ProgPoW's premise (the chip keeps a GPU-class datapath):</strong></p>
+<ul><li>Igneum: RTX 4090 1.01x to 1.03x (f 0.853 measured); RTX 5090 1.02x to 1.03x (f 0.811 measured on the stock pod)</li><li>Ravencoin: RTX 4090 1.10x to 1.20x (the premise's own figure; no measured twin on this kernel yet); RTX 5090 1.10x to 1.20x (the premise's own figure; the twin row makes it measured)</li><li>Iron Fish: RTX 4090 pending (needs the measured f from the twin); RTX 5090 pending</li><li>Ethereum Classic: RTX 4090 1.10x to 1.20x (the premise's own figure; the twin row makes it measured); RTX 5090 1.10x to 1.20x (the premise's own figure)</li><li>Ergo: RTX 4090 pending; RTX 5090 pending</li></ul>
+<p><strong>(c) Phase B, an income a hash chip cannot earn:</strong></p>
+<ul><li>Igneum: yes by rule (the proving share of every block, 20 percent ratified); LIVE ON DEVNET with on-chain paid records (663 paid v1 segment records to 30 prover keys on chain 4465, the PROVING LIVE lane's file bd3f53c1 on build-1), not yet in a shipped package</li><li>Ravencoin: no (the block reward is mining only)</li><li>Firo: no</li><li>Iron Fish: no</li><li>Ethereum Classic: no</li><li>Ergo: no</li></ul>
+<p>&lt;!-- ledger:ranking:end --&gt;</p>
+</section>
+<section class="doc-section"><h2 id="the-claim-under-test-clause-by-clause">The claim under test, clause by clause</h2>
+<p>The sentence below is served as a claim under test, each clause labelled by its state on the rows above. It reads as established only when every clause is supported; today it is not, and the table says which clause and why.</p>
+<p>&lt;!-- ledger:claim:start --&gt; <strong>The headline, built from the supported clauses only:</strong> under ProgPoW's own convention, the lowest measured chip-to-GPU edge of the chains on this ledger; and the only chain on this ledger whose GPUs are paid, by rule, an income a hash chip cannot earn (LIVE ON DEVNET, on-chain records (the PROVING LIVE lane, read 11:50:22Z 9 October 2026): on chain id 4465 (the Igneum 2.0 devnet) 663 paid v1 segment records (8 shards plus aggregation each) = 653.93 IGN paid from the proving pool to 30 distinct prover keys across chain blocks 3,000 to 30,687 (tip 31,719 at the read), plus 6,474 paid v0 shard records = 7,196 IGN; read by igneum_getProvingStatus, igneum_getSegmentRecords (3,965 segments) and igneum_getSegment; evidence build-1:/srv/artefacts/proving-live/prov-ledger-4465-tip31719-115022Z.json sha256 bd3f53c18c3ffa20354ea62ade9fd5e7a5794202a71c3c369a5be71484f7143a. NOT YET LIVE IN A SHIPPED PACKAGE: the payees are the fleet's prover stack (the same binaries the 2.0.3.1 HiveOS package wraps, cut 18:00 UK); the apps' prover is on by default on 24 GB cards but no app-proved record is on the record yet; a full-epoch line follows by 16:00 UK).</p>
+<p>The sentence as ordered, served as the claim under test: "the lowest measured chip-to-GPU edge of any live GPU network under a published method, on both conventions, and the only one whose GPUs earn income a chip cannot"</p>
+<p>Rule: the headline reads only what the like-for-like rows support, clause by clause (main's ruling, 13:2x UK 9 October 2026); under the ledger's own convention the measured edge per chain on the same card and state is stated as numbers, with no ranking word until the rows say so after the ledger session.</p>
+<div class="tbl"><table><thead><tr><th>clause</th><th>convention</th><th>state on the current rows</th><th>why</th></tr></thead><tbody><tr><td>under ProgPoW's own convention, the lowest measured chip-to-GPU edge of the chains on this ledger</td><td>ProgPoW's premise (a chip that keeps a GPU-class datapath)</td><td>SUPPORTED on the current rows</td><td>Igneum v6 1.01x to 1.03x (its measured f 0.81 to 0.85) against ProgPoW's own 1.10x to 1.20x for KAWPOW and FiroPoW; FishHash and Etchash pending their twins</td></tr><tr><td>under the ledger's convention (the cheapest credible programmable specialist, adversarial set v3), each chain's measured edge on the same card and state, as numbers</td><td>ours</td><td>NUMBERS ONLY; no ranking until the ledger session (COHORT, both cards, every chain back to back, the pinned 0.9.4 kernel, twins; 14:45 UK)</td><td>the current cells come from different sessions (the lab's cohort pods for v6, the comparative lane's pod for KAWPOW) and a cross-chain comparison is made only between cells from the same card, state and session; at the RTX 4090 at stock the cells read v6 5.4x (5.67x on the second pod) and KAWPOW 3.9x (a proxy row from an earlier session); FishHash and Etchash pending</td></tr><tr><td>and the only chain on this ledger whose GPUs are paid, by rule, an income a hash chip cannot earn</td><td>phase B, each chain's actual reward split</td><td>LABELLED BY THE PROVING LIVE LANE</td><td>the proving share (20 percent ratified) is paid to GPUs for work a hash chip cannot do; every other chain on the ledger pays mining only; the live state of that income is the PROVING LIVE lane's evidence line</td></tr></tbody></table></div>
+<p>Withdrawn: the earlier line 'KAWPOW and FiroPoW read 5 to 6x on the measured 4090 rows and v6 reads 2.35x' is withdrawn: it compared v6 at the 5090's 1,300 MHz knee with KAWPOW at the 4090 at stock, two cards and two states; the like-for-like cells are the ones on this ledger.</p>
+<p>The last clause's label from the PROVING LIVE lane: LIVE ON DEVNET, on-chain records (the PROVING LIVE lane, read 11:50:22Z 9 October 2026): on chain id 4465 (the Igneum 2.0 devnet) 663 paid v1 segment records (8 shards plus aggregation each) = 653.93 IGN paid from the proving pool to 30 distinct prover keys across chain blocks 3,000 to 30,687 (tip 31,719 at the read), plus 6,474 paid v0 shard records = 7,196 IGN; read by igneum_getProvingStatus, igneum_getSegmentRecords (3,965 segments) and igneum_getSegment; evidence build-1:/srv/artefacts/proving-live/prov-ledger-4465-tip31719-115022Z.json sha256 bd3f53c18c3ffa20354ea62ade9fd5e7a5794202a71c3c369a5be71484f7143a. NOT YET LIVE IN A SHIPPED PACKAGE: the payees are the fleet's prover stack (the same binaries the 2.0.3.1 HiveOS package wraps, cut 18:00 UK); the apps' prover is on by default on 24 GB cards but no app-proved record is on the record yet; a full-epoch line follows by 16:00 UK &lt;!-- ledger:claim:end --&gt;</p>
+</section>
+<section class="doc-section"><h2 id="reproduce-it-tonight">Reproduce it tonight</h2>
+<p>The reproduction kit (the pinned references, the harnesses, the sampler, the session script, SHA256SUMS and the expected rows with their bands) is published from the build host when it lands; the link and its sha256 go here. One command per card; a 4090 at stock on an uncapped host reproduces the Igneum row inside its band in under ten minutes after the dataset builds.</p>
+<div class="tbl"><table><thead><tr><th>item</th><th>state</th></tr></thead><tbody><tr><td>the kit</td><td>pending</td></tr><tr><td>the kit's sha256</td><td>pending</td></tr></tbody></table></div></section></article>
+</div>
+<p class="gen">Generated from docs/ledger/gpu-ledger.md in the repository at build time. Times are UTC.</p>
+</div></section>
+</main>
+<!-- footer:start -->
+<footer class="site-footer">
+  <div class="container">
+    <p class="positioning">A GPU-secured network for Ethereum-compatible applications and verifiable computation.</p>
+    <div class="footer-grid">
+      <div class="footer-brand">
+        <a href="/" class="logo" aria-label="Igneum home"><svg class="brand-mark" viewBox="0 0 1024 1024" aria-hidden="true"><rect width="1024" height="1024" rx="160" fill="#0C0C0E"></rect><g transform="translate(166.95 166.95) scale(6.901)"><polygon points="50,4 74,34 67,58 80,54 61,96 39,96 20,54 33,58 26,34" fill="#F2541B"></polygon><polygon points="50,42 59,58 50,82 41,58" fill="#0C0C0E"></polygon></g></svg><span class="word">IGNEUM</span><span class="stop">.</span></a>
+        <p>Mined by GPUs. Proven by fire.</p>
+        <div class="social" aria-label="Igneum elsewhere">
+          <a href="https://discord.gg/igneum" target="_blank" rel="noopener" aria-label="The Igneum Discord"><svg viewBox="0 0 24 24" width="22" height="22" fill="currentColor" aria-hidden="true"><path d="M19.6 5.3A17 17 0 0 0 15.4 4l-.2.4a15.6 15.6 0 0 1 3.9 1.9 13.6 13.6 0 0 0-14.2 0A15.6 15.6 0 0 1 8.8 4.4L8.6 4a17 17 0 0 0-4.2 1.3C1.8 9.2 1.1 13 1.4 16.7a17.1 17.1 0 0 0 5.2 2.6l1.1-1.8a10.8 10.8 0 0 1-1.7-.8l.4-.3a12.2 12.2 0 0 0 11.2 0l.4.3-1.7.8 1.1 1.8a17 17 0 0 0 5.2-2.6c.4-4.3-.7-8-3-11.4zM8.7 14.4c-1 0-1.8-.9-1.8-2.1s.8-2.1 1.8-2.1 1.9 1 1.8 2.1c0 1.2-.8 2.1-1.8 2.1zm6.6 0c-1 0-1.8-.9-1.8-2.1s.8-2.1 1.8-2.1 1.9 1 1.8 2.1c0 1.2-.8 2.1-1.8 2.1z"></path></svg></a>
+          <a href="https://git.igneum.network/igneum-network/spec" target="_blank" rel="noopener" aria-label="Igneum source: the spec, the vectors and the issues"><svg viewBox="0 0 24 24" width="22" height="22" fill="currentColor" aria-hidden="true"><path d="M8.6 17.6 3 12l5.6-5.6 1.4 1.4L5.8 12l4.2 4.2zm6.8 0-1.4-1.4L18.2 12 14 7.8l1.4-1.4L21 12z"></path></svg></a>
+          <a data-social="reddit" href="https://www.reddit.com/user/Igneum_network/" target="_blank" rel="noopener" aria-label="Igneum on Reddit"><svg viewBox="0 0 24 24" width="22" height="22" fill="currentColor" aria-hidden="true"><path d="M22 12.1a2.2 2.2 0 0 0-3.7-1.6 10.8 10.8 0 0 0-5.8-1.8l1-4.6 3.2.7a1.5 1.5 0 1 0 .2-.9l-3.6-.8a.5.5 0 0 0-.5.4l-1.1 5.2a10.8 10.8 0 0 0-5.9 1.8A2.2 2.2 0 1 0 3.4 14a4.3 4.3 0 0 0 0 .7c0 3.4 3.9 6.1 8.6 6.1s8.6-2.7 8.6-6.1a4.3 4.3 0 0 0 0-.7 2.2 2.2 0 0 0 1.4-1.9zM7 13.6a1.5 1.5 0 1 1 1.5 1.5A1.5 1.5 0 0 1 7 13.6zm8.6 4.1a5.7 5.7 0 0 1-3.6 1.1 5.7 5.7 0 0 1-3.6-1.1.4.4 0 0 1 .6-.6 4.9 4.9 0 0 0 3 .9 4.9 4.9 0 0 0 3-.9.4.4 0 0 1 .6.6zm-.3-2.6a1.5 1.5 0 1 1 1.5-1.5 1.5 1.5 0 0 1-1.5 1.5z"></path></svg></a>
+          <a href="mailto:hello@igneum.network" aria-label="Email hello@igneum.network"><svg viewBox="0 0 24 24" width="22" height="22" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="3" y="5" width="18" height="14" rx="2"></rect><path d="m3.5 6.5 8.5 6.5 8.5-6.5"></path></svg></a>
+        </div>
+        <div class="footer-dl" aria-label="Download Ember"><a href="/download#windows"><span class="osmark mini" data-os="windows" title="Windows"><svg viewBox="0 0 24 24" width="22" height="22" aria-hidden="true" focusable="false" fill="currentColor"><path d="M3 5.6l7.3-1v7.1H3zM11.4 4.4L21 3v8.7h-9.6zM3 12.3h7.3v7.1L3 18.4zM11.4 12.3H21V21l-9.6-1.4z"/></svg></span>Windows</a><a href="/download#mac"><span class="osmark mini" data-os="mac" title="macOS"><svg viewBox="0 0 24 24" width="22" height="22" aria-hidden="true" focusable="false" fill="currentColor"><path d="M16.4 12.6c0-2.5 2-3.6 2.1-3.7-1.2-1.7-3-1.9-3.6-2-1.5-.2-3 .9-3.8.9-.8 0-2-.9-3.3-.8-1.7 0-3.2 1-4.1 2.5-1.8 3-.5 7.6 1.3 10.1.9 1.2 1.9 2.6 3.2 2.5 1.3 0 1.8-.8 3.3-.8 1.6 0 2 .8 3.3.8 1.4 0 2.3-1.2 3.1-2.5 1-1.4 1.4-2.8 1.4-2.9 0 0-2.7-1-2.9-4.1zM13.9 5.3c.7-.8 1.2-2 1-3.2-1 0-2.2.7-2.9 1.5-.6.7-1.2 1.9-1 3 1.1.1 2.2-.5 2.9-1.3z"/></svg></span>macOS</a><a href="/download#linux"><span class="osmark mini" data-os="linux" title="Linux"><svg viewBox="0 0 24 24" width="22" height="22" aria-hidden="true" focusable="false" fill="currentColor"><path d="M12 2c-2.4 0-4 1.9-4 4.6 0 1.2.2 2 0 2.8-.6 1.4-2.1 2.9-2.6 4.9-.3 1.1-.1 2 .3 2.6-.6.4-1.3 1-1.1 1.7.3 1 2.1 1.2 3.2 1.8.7.4 1.5.6 2.1.1.6.2 1.3.3 2.1.3s1.5-.1 2.1-.3c.6.5 1.4.3 2.1-.1 1.1-.6 2.9-.8 3.2-1.8.2-.7-.5-1.3-1.1-1.7.4-.6.6-1.5.3-2.6-.5-2-2-3.5-2.6-4.9-.2-.8 0-1.6 0-2.8C16 3.9 14.4 2 12 2zm-1.4 4.2c.5 0 .8.5.8 1.2s-.3 1.2-.8 1.2-.8-.5-.8-1.2.3-1.2.8-1.2zm2.8 0c.5 0 .8.5.8 1.2s-.3 1.2-.8 1.2-.8-.5-.8-1.2.3-1.2.8-1.2zM12 9.3c.9 0 1.9.5 1.9 1s-1 1.2-1.9 1.2-1.9-.7-1.9-1.2 1-1 1.9-1zm0 3.4c2.2 0 3.6 2.6 3.6 4.4 0 1.5-1.6 2.3-3.6 2.3s-3.6-.8-3.6-2.3c0-1.8 1.4-4.4 3.6-4.4z"/></svg></span>Linux</a><a href="/download#hive"><span class="osmark mini" data-os="hive" title="HiveOS"><svg viewBox="0 0 24 24" width="22" height="22" aria-hidden="true" focusable="false" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linejoin="round" stroke-linecap="round"><path d="M12 2.6 20.2 7.3v9.4L12 21.4 3.8 16.7V7.3z"/><path d="M12 7.4 16 9.7v4.6L12 16.6 8 14.3V9.7z"/><path d="M12 7.4V2.6M16 9.7l4.2-2.4M16 14.3l4.2 2.4M12 16.6v4.8M8 14.3l-4.2 2.4M8 9.7 3.8 7.3"/></svg></span>HiveOS</a></div>
+        <a href="https://git.igneum.network/igneum-network/spec" target="_blank" rel="noopener" class="text-link">Specification and test vectors<svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><path d="M6 18 18 6M6 6h12v12"/></svg></a>
+      </div>
+      <div class="footer-column"><h4>Run</h4><div>
+        <a href="/download">Download Ember</a>
+        <a href="/miner">The miner</a>
+        <a href="/app">The app</a>
+        <a href="/wallet">The wallet</a>
+        <a href="/miners">GPU bench table</a>
+        <a href="/dev-fee">The dev fee</a>
+        <a href="/faucet">Devnet faucet</a>
+        <a href="/metamask">Add Igneum to MetaMask</a>
+      </div></div>
+      <div class="footer-column"><h4>Read</h4><div>
+        <a href="/litepaper">Litepaper</a>
+        <a href="/evidence">Evidence</a>
+        <a href="/ledger">Ledger: every criticism</a>
+        <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
+        <a href="/randomx">Igneum vs RandomX</a>
+        <a href="/provenance">Built on the shoulders</a>
+      </div></div>
+      <div class="footer-column"><h4>Explore</h4><div>
+        <a href="/live">Live devnet</a>
+        <a href="/explorer">Explorer</a>
+        <a href="/build">Build on Igneum</a>
+        <a href="/swap">Swap</a>
+        <a href="/grants">Grants</a>
+        <a href="/download">Downloads: devnet build</a>
+        <a href="https://discord.gg/igneum" target="_blank" rel="noopener">Community Discord</a>
+        <a href="mailto:hello@igneum.network">hello@igneum.network</a>
+        <a href="https://git.igneum.network/igneum-network/spec/issues" rel="noopener">An issue on the spec</a>
+      </div></div>
+    </div>
+    <div class="footer-bottom">
+      <p>Igneum Labs LTD · Unit IH-00-01-01-OF-01, Level 01, Innovation One, Dubai International Financial Centre. Experimental software. Nothing on this site is an offer to sell anything.<br>Report a flaw by email or by an issue on the spec. Nobody from Igneum will ask for your seed. © 2026 Igneum · not an offer to sell anything</p>
+      <div class="theme-group" role="group" aria-label="Theme"><button type="button" data-theme-set="system" aria-pressed="true">System</button><button type="button" data-theme-set="light" aria-pressed="false">Light</button><button type="button" data-theme-set="dark" aria-pressed="false">Dark</button></div>
+    </div>
+  </div>
+</footer>
+
+<script>
+(function(){
+  // theme control: stores light or dark under igneum-theme; system clears it and follows the OS. The head applied the value before paint.
+  var bs=document.querySelectorAll('[data-theme-set]');if(!bs.length)return;
+  var media=window.matchMedia('(prefers-color-scheme: light)');
+  function stored(){try{var t=localStorage.getItem('igneum-theme');return t==='light'||t==='dark'?t:'system';}catch(e){return 'system';}}
+  function apply(){var c=stored();document.documentElement.setAttribute('data-theme',c==='system'?(media.matches?'light':'dark'):c);bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});document.dispatchEvent(new CustomEvent('igneum-theme'));}
+  bs.forEach(function(b){b.addEventListener('click',function(){var v=b.getAttribute('data-theme-set');try{if(v==='system')localStorage.removeItem('igneum-theme');else localStorage.setItem('igneum-theme',v);}catch(e){}apply();});});
+  if(media.addEventListener)media.addEventListener('change',function(){if(stored()==='system')apply();});
+  document.addEventListener('igneum-theme',function(){var c=stored();bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===c?'true':'false');});});
+  bs.forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-theme-set')===stored()?'true':'false');});
+  // the network state word in the status bar: one read of the observer per page view
+  var fs=document.getElementById('foot-state'),fd=document.getElementById('foot-dot');if(fs&&fd&&fs.getAttribute('data-devnet-state')==='live'){fetch('/api/live?window=30',{cache:'no-store'}).then(function(r){return r.json();}).then(function(d){var on=d&&d.ok&&d.state&&!d.state.stale;fs.textContent=on?'devnet live':'devnet, observer stale';fd.className='dot '+(on?'live':'off');}).catch(function(){fs.textContent='devnet';});}
+})();
+</script>
+<!-- footer:end -->
+<script src="/ui.js" defer></script>
+</body>
+</html>
\ No newline at end of file
diff --git a/site/grants.html b/site/grants.html
index 2573f33a1..50caf03fe 100644
--- a/site/grants.html
+++ b/site/grants.html
@@ -133,6 +133,7 @@ table{min-width:560px}
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -173,6 +174,7 @@ table{min-width:560px}
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -307,6 +309,7 @@ table{min-width:560px}
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/income.html b/site/income.html
index 7b8d6a9c0..36c23c5d2 100644
--- a/site/income.html
+++ b/site/income.html
@@ -106,6 +106,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -146,6 +147,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -257,6 +259,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/index.html b/site/index.html
index 734544bbc..0ac7c0757 100644
--- a/site/index.html
+++ b/site/index.html
@@ -124,6 +124,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -164,6 +165,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -330,6 +332,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/ledger.html b/site/ledger.html
index 4899df433..e8cc8aa84 100644
--- a/site/ledger.html
+++ b/site/ledger.html
@@ -137,6 +137,7 @@ blockquote{margin:10px 0;padding:10px 14px;border-left:3px solid var(--line-2);c
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger" aria-current="page"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -177,6 +178,7 @@ blockquote{margin:10px 0;padding:10px 14px;border-left:3px solid var(--line-2);c
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger" aria-current="page"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -484,6 +486,7 @@ blockquote{margin:10px 0;padding:10px 14px;border-left:3px solid var(--line-2);c
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/light.html b/site/light.html
index e7c461870..80f73730c 100644
--- a/site/light.html
+++ b/site/light.html
@@ -140,6 +140,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -180,6 +181,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -333,6 +335,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/litepaper.html b/site/litepaper.html
index 6e2822a3a..bd48a243e 100644
--- a/site/litepaper.html
+++ b/site/litepaper.html
@@ -189,6 +189,7 @@ body.all .pager{display:none}
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -229,6 +230,7 @@ body.all .pager{display:none}
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -909,6 +911,7 @@ body.all .pager{display:none}
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/live.html b/site/live.html
index 97a61c01d..1f5642e35 100644
--- a/site/live.html
+++ b/site/live.html
@@ -273,6 +273,7 @@ details.tablebar summary{display:flex;align-items:center}
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -313,6 +314,7 @@ details.tablebar summary{display:flex;align-items:center}
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -548,6 +550,7 @@ details.tablebar summary{display:flex;align-items:center}
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/metamask.html b/site/metamask.html
index 646b7bb7f..555134327 100644
--- a/site/metamask.html
+++ b/site/metamask.html
@@ -134,6 +134,7 @@ ol{margin:0 0 14px;padding-left:22px}li{margin-bottom:6px}
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -174,6 +175,7 @@ ol{margin:0 0 14px;padding-left:22px}li{margin-bottom:6px}
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -323,6 +325,7 @@ ol{margin:0 0 14px;padding-left:22px}li{margin-bottom:6px}
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/miner.html b/site/miner.html
index 15e9ce154..1ca8d07b4 100644
--- a/site/miner.html
+++ b/site/miner.html
@@ -129,6 +129,7 @@ pre b{color:var(--molten-text);font-weight:500}
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -169,6 +170,7 @@ pre b{color:var(--molten-text);font-weight:500}
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -494,6 +496,7 @@ pre b{color:var(--molten-text);font-weight:500}
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/miners.html b/site/miners.html
index de0cec237..37e56c1e7 100644
--- a/site/miners.html
+++ b/site/miners.html
@@ -133,6 +133,7 @@ table{min-width:560px}
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -173,6 +174,7 @@ table{min-width:560px}
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -362,6 +364,7 @@ table.bench2 tr.detail .d{display:block;margin:0 0 4px}table.bench2 tr.detail b{
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/oracle.html b/site/oracle.html
index 0ca2ecbcf..3147c1e82 100644
--- a/site/oracle.html
+++ b/site/oracle.html
@@ -140,6 +140,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -180,6 +181,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -335,6 +337,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/partials/footer.html b/site/partials/footer.html
index 4c0a93353..ecd1dd756 100644
--- a/site/partials/footer.html
+++ b/site/partials/footer.html
@@ -29,6 +29,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/partials/nav.html b/site/partials/nav.html
index afbe2ad07..ad2945381 100644
--- a/site/partials/nav.html
+++ b/site/partials/nav.html
@@ -48,6 +48,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -88,6 +89,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
diff --git a/site/prize.html b/site/prize.html
index 66c8d0501..e36c51ad7 100644
--- a/site/prize.html
+++ b/site/prize.html
@@ -106,6 +106,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize" aria-current="page"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -146,6 +147,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize" aria-current="page"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -265,6 +267,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/provenance.html b/site/provenance.html
index 563a326da..f78ac3cce 100644
--- a/site/provenance.html
+++ b/site/provenance.html
@@ -133,6 +133,7 @@ table{min-width:560px}
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance" aria-current="page"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -173,6 +174,7 @@ table{min-width:560px}
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance" aria-current="page"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -306,6 +308,7 @@ table{min-width:560px}
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/proving.html b/site/proving.html
index d84858b84..8f32e3f8d 100644
--- a/site/proving.html
+++ b/site/proving.html
@@ -159,6 +159,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -199,6 +200,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -337,6 +339,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/randomx.html b/site/randomx.html
index c3302c682..7148f41d5 100644
--- a/site/randomx.html
+++ b/site/randomx.html
@@ -132,6 +132,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx" aria-current="page"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -172,6 +173,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx" aria-current="page"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -297,6 +299,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/receipt.html b/site/receipt.html
index f7c965d2c..816223a2b 100644
--- a/site/receipt.html
+++ b/site/receipt.html
@@ -138,6 +138,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -178,6 +179,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -332,6 +334,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/scenes.html b/site/scenes.html
index 7fcdaad07..d2d17e1b0 100644
--- a/site/scenes.html
+++ b/site/scenes.html
@@ -124,6 +124,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -164,6 +165,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -299,6 +301,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/scorecard.html b/site/scorecard.html
index f3403598f..611e07924 100644
--- a/site/scorecard.html
+++ b/site/scorecard.html
@@ -106,6 +106,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard" aria-current="page"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -146,6 +147,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard" aria-current="page"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -274,6 +276,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/sitemap.xml b/site/sitemap.xml
index d136c7bb9..40c0c6be0 100644
--- a/site/sitemap.xml
+++ b/site/sitemap.xml
@@ -16,6 +16,7 @@
   <url><loc>https://igneum.network/oracle</loc><lastmod>2026-10-08</lastmod><changefreq>weekly</changefreq><priority>0.6</priority></url>
   <url><loc>https://igneum.network/miners</loc><lastmod>2026-10-07</lastmod><changefreq>weekly</changefreq><priority>0.6</priority></url>
   <url><loc>https://igneum.network/claims</loc><lastmod>2026-10-07</lastmod><changefreq>monthly</changefreq><priority>0.5</priority></url>
+  <url><loc>https://igneum.network/gpu-ledger</loc><lastmod>2026-10-09</lastmod><changefreq>weekly</changefreq><priority>0.6</priority></url>
   <url><loc>https://igneum.network/randomx</loc><lastmod>2026-10-07</lastmod><changefreq>monthly</changefreq><priority>0.5</priority></url>
   <url><loc>https://igneum.network/provenance</loc><lastmod>2026-10-07</lastmod><changefreq>monthly</changefreq><priority>0.4</priority></url>
   <url><loc>https://igneum.network/dev-fee</loc><lastmod>2026-10-07</lastmod><changefreq>monthly</changefreq><priority>0.4</priority></url>
diff --git a/site/swap.html b/site/swap.html
index 422f8e1a3..25c126c48 100644
--- a/site/swap.html
+++ b/site/swap.html
@@ -143,6 +143,7 @@ dt{color:var(--ash)}dd{margin:0;font-family:var(--f-mono);font-size:13px;overflo
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -183,6 +184,7 @@ dt{color:var(--ash)}dd{margin:0;font-family:var(--f-mono);font-size:13px;overflo
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -357,6 +359,7 @@ dt{color:var(--ash)}dd{margin:0;font-family:var(--f-mono);font-size:13px;overflo
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/tuning.html b/site/tuning.html
index 93f2f4d87..2c9419777 100644
--- a/site/tuning.html
+++ b/site/tuning.html
@@ -133,6 +133,7 @@ table{min-width:560px}
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -173,6 +174,7 @@ table{min-width:560px}
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -317,6 +319,7 @@ table{min-width:560px}
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/tx.html b/site/tx.html
index 7e5e9d643..e6fd48f01 100644
--- a/site/tx.html
+++ b/site/tx.html
@@ -160,6 +160,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -200,6 +201,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -313,6 +315,7 @@ main{padding-bottom:100px}.card{background:var(--row);border:1px solid var(--lin
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/site/wallet.html b/site/wallet.html
index 1d800b116..d40cb87dd 100644
--- a/site/wallet.html
+++ b/site/wallet.html
@@ -142,6 +142,7 @@
           <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
           <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
           <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+          <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
           <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
           <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
         </div>
@@ -182,6 +183,7 @@
         <a href="/economics" data-nav="economics"><b>Economics</b><span>The emission, the split and the fees, each with its line in the node.</span></a><a href="/scorecard" data-nav="scorecard"><b>Scorecard</b><span>The twelve acceptance gates, their evidence and where each stands.</span></a><a href="/prize" data-nav="prize"><b>Prize</b><span>A better adversary or a reproduced shortcut, never a confirmation: the terms.</span></a><a href="/acceptance" data-nav="acceptance"><b>Acceptance</b><span>The Test and Acceptance Standard, case by case, as each one passes.</span></a><a href="/audit" data-nav="audit"><b>Site audit</b><span>Every page, what the reset changed and what is open.</span></a><a href="/docs" data-nav="docs"><b>Documents</b><span>The plan, the standard, the specifications and the evidence files, by path.</span></a>
         <a href="/ledger" data-nav="ledger"><b>Ledger</b><span>Every criticism, answered or conceded.</span></a>
         <a href="/claims" data-nav="claims"><b>What Igneum does not claim</b><span>The limits, stated first.</span></a>
+        <a href="/gpu-ledger" data-nav="gpu-ledger"><b>GPU network ledger</b><span>Every GPU-mined chain, measured the same way.</span></a>
         <a href="/randomx" data-nav="randomx"><b>Igneum vs RandomX</b><span>What was kept and what was rebuilt for GPUs.</span></a>
         <a href="/provenance" data-nav="provenance"><b>Built on the shoulders</b><span>Every borrowed part, credited.</span></a>
       </div>
@@ -431,6 +433,7 @@
         <a href="/evidence">Evidence</a>
         <a href="/ledger">Ledger: every criticism</a>
         <a href="/claims">What Igneum does not claim</a>
+        <a href="/gpu-ledger">GPU network ledger</a>
         <a href="/randomx">Igneum vs RandomX</a>
         <a href="/provenance">Built on the shoulders</a>
       </div></div>
diff --git a/tools/ci/batches/lab-20261009-01.json b/tools/ci/batches/lab-20261009-01.json
index 37be513e1..75f2f0a59 100644
--- a/tools/ci/batches/lab-20261009-01.json
+++ b/tools/ci/batches/lab-20261009-01.json
@@ -26,7 +26,7 @@
    "in_progress": true,
    "method": "model",
    "evidence": "docs/analysis/class-v6/1p5x/lab/README.md; docs/analysis/class-v6/1p5x/lab/table.md",
-   "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read.",
+   "note": "The lab's interface and the candidate table at the fan-out: the frozen v6 control carried from the record (the house 5090 at its knee 4,011 nJ per hash, board power; the X0 amendment 5b rows: the DRAM board 2.35x same node WITNESS, the N2 die 7.8x the worst credible), the cohort rows for the 3090, the 5080 and the AMD and Intel tiers NOT RUN, adversarial set v1 pending; the three other controls (ProgPoW 0.9.4 reference, FishHash, the cooperative ARX candidate) NOT RUN with their clocks. No score is the lab's until the cohort and the adversary rows are in; R15-01, R15-08 and R15-09 stay NOT RUN until read. X10 (cand-x10) joins the table NOT RUN with its per-lane assignments and clocks; COHORT's ctl-v6 denominator set is in flight on eight rented pods. 12:1x UK: adversarial set v1 on the table (the frozen v6's same-node board 2.57x, 2.04 to 3.00, the fused tail CLAIMED until the routed lanes land; the die 11.4x as a coexistence row); the coexistence table (interface section 8b) added as the scoreboard's headline; SEARCH's first screen recorded as SCREEN rejections. Still NOT RUN: no cohort score until COHORT's eight rows are read back. 12:2x UK: set v2 (the routed fused-ARX lanes) makes the v6 board 2.60x a WITNESS; the ctl-v6 coexistence table (the board holds at every price; the N2 die pushes the GPU owner out above 14,300 dies at USD 0.10) is the headline; X10 SCREEN with the card modelled (the board 3.00x at 118 loads). Still NOT RUN: the cohort rows in their timed runs. 12:3x UK: the first cohort cells (ctl-v6 at stock on rented 5090, 5080 and 3090 pods: the worst cell the 3090 at 8,429 nJ = 5.46x on set v2's same-node board, PARTIAL, the dataset size under decision after CONTROLS measured the live 4 GiB object at 2.4x the 1 GiB research pack's rate); X10's first measured cell (cand-x10b on the 4090 at stock 3,653 nJ per lane-work = 5.8x on the board; the fold buys nothing); set v3 (routed 64-register and multiply-xor lanes); the fourth to sixth review rulings (8c); the 4 GiB rule (8e). Every row still NOT RUN until read. 12:4x UK: ctl-v6's first full score over the NVIDIA cohort at stock (the worst cell the RTX 4090 uncapped 8,751 nJ = 5.67x on set v2's same-node board; every cell at 4 GiB, the earlier 2.4x reading an instrument artefact, corrected once); the two-phase rows (ADVERSARY 545f3f8a0, 36d17b15c): phase B NOT LIVE until a shipped package proves, the shipping row open; SEARCH's twenty candidates on set v3 none under 1.5x on any cell (SCREEN). Every row still NOT RUN until read. 13:0x UK: the decider closed on both cards (the 4 GiB object costs 2.0 to 2.9 percent of rate against its 1 GiB export; the 2.4x reading withdrawn as a contention fault); the read-headroom row answered (both cards at their activation limit); the uncapped 5090 cell 5,980 nJ = 3.88x on the board; the shipping row's facts by file and line with the Devnet 4 correction (a 24 GB card proves the v1 shard now; the proving row NOT LIVE until the epoch record by 16:00); the 4 GiB cap defined as the mining dataset floor only; the founder's ledger order (8f) applied. Every row still NOT RUN until read. 13:1x UK: CONTROLS' done line (the four controls, Etchash and Autolykos2 staged bit-exact with SUMS); ADVERSARY's cross-chain phase A and B (no chain's emission recovers a board chip; the proving share the one term) and the E9 Pro calibration (1.28x pessimistic); the first founder bundle 985afee6. Every row still NOT RUN until read.",
    "claim_impact": "none"
   }
  ],
diff --git a/tools/ci/site-nav-check.mjs b/tools/ci/site-nav-check.mjs
index 77d17ea98..7dbc68280 100644
--- a/tools/ci/site-nav-check.mjs
+++ b/tools/ci/site-nav-check.mjs
@@ -15,7 +15,7 @@ const here = dirname(fileURLToPath(import.meta.url));
 const GROUPS = {
   mine: ['/miner', '/download', '/app', '/wallet', '/miners', '/tuning', '/dev-fee', '/metamask'],
   network: ['/live', '/explorer', '/evidence', '/light', '/receipt', '/oracle'],
-  learn: ['/litepaper', '/income', '/economics', '/scorecard', '/prize', '/audit', '/docs', '/ledger', '/claims', '/randomx', '/provenance', '/acceptance'],
+  learn: ['/litepaper', '/income', '/economics', '/scorecard', '/prize', '/audit', '/docs', '/ledger', '/claims', '/gpu-ledger', '/randomx', '/provenance', '/acceptance'],
   build: ['/build', '/faucet', '/swap', '/grants', '/compatibility'],   // the builder programme (8 October 2026): the developer entry page, the Devnet 3 faucet, the swap, the grants
 };
 const ROUTES = Object.values(GROUPS).flat();
diff --git a/tools/ledger/render.mjs b/tools/ledger/render.mjs
new file mode 100644
index 000000000..4a828ddad
--- /dev/null
+++ b/tools/ledger/render.mjs
@@ -0,0 +1,155 @@
+// The GPU network ledger: one data file, every table rendered from it (the record README, the public page, the kit's README),
+// so no two copies of a row can drift. Run from the repository root:
+//   node tools/ledger/render.mjs            rewrite the marked blocks of the record and the page from ledger.json
+//   node tools/ledger/render.mjs --check    exit 1 if either file is out of step with ledger.json (the gate's form)
+//   node tools/ledger/render.mjs --kit <dir>   also write <dir>/ROWS.md (the expected rows and their bands) for a reproduction kit
+// Every block sits between <!-- ledger:<name>:start --> and <!-- ledger:<name>:end --> in the markdown; the text outside is hand-written.
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const here = dirname(fileURLToPath(import.meta.url));
+const repo = join(here, '..', '..');
+const DATA = join(repo, 'docs/analysis/class-v6/1p5x/ledger/ledger.json');
+const RECORD = join(repo, 'docs/analysis/class-v6/1p5x/ledger/README.md');
+const PAGE = join(repo, 'docs/ledger/gpu-ledger.md');
+const L = JSON.parse(readFileSync(DATA, 'utf8'));
+
+const n = (x, d = 0) => x == null ? 'pending' : Number(x).toLocaleString('en-GB', { minimumFractionDigits: d, maximumFractionDigits: d });
+const gb = b => b == null ? 'pending' : `${(b / 1e9).toFixed(2)} GB (${n(b)} bytes)`;
+const chainOf = id => L.chains.find(c => c.id === id);
+const cellOf = (c, card) => (c.same_row_as ? chainOf(c.same_row_as) : c).cells[card];
+const advOf = c => (c.same_row_as ? chainOf(c.same_row_as) : c).adversary;
+const x = (v, d = 2) => v == null ? 'pending' : `${v.toFixed(d)}x`;
+
+// the ratio of a measured card cell over a modelled chip row, with the chip's band (a lower chip energy is a larger ratio)
+function ratio(cell, chip) {
+  if (!cell || cell.nj == null || !chip || chip.nominal == null) return null;
+  const r = { nominal: cell.nj / chip.nominal };
+  if (chip.low != null && chip.high != null) { r.low = cell.nj / chip.high; r.high = cell.nj / chip.low; }
+  return r;
+}
+const band = r => r == null ? 'pending' : (r.low != null ? `${x(r.nominal)} (${r.low.toFixed(2)} to ${r.high.toFixed(2)})` : x(r.nominal));
+const provisional = c => {
+  const cells = L.cards.map(k => cellOf(c, k.id));
+  return cells.some(cell => !cell || cell.nj == null || /proxy|prior row/i.test(cell.status || ''));
+};
+
+function tableCards() {
+  const head = '| chain | algorithm | dataset on the row | reward split (mining / proving) | ' + L.cards.map(k => `${k.name} ${k.state}: nJ per hash (MH/s, W, f)`).join(' | ') + ' | twin | sources |';
+  const sep = '|' + '---|'.repeat(5 + L.cards.length) + '---|---|';
+  const rows = L.chains.map(c => {
+    if (c.not_run) return `| ${c.chain} | ${c.algorithm} | NOT RUN | ${c.split.mining} / ${c.split.proving} | ${L.cards.map(() => 'NOT RUN').join(' | ')} | NOT RUN | ${c.not_run} |`;
+    if (c.same_row_as) return `| ${c.chain} | ${c.algorithm} | = ${chainOf(c.same_row_as).chain}'s row | ${c.split.mining} / ${c.split.proving} | ${L.cards.map(() => `= ${chainOf(c.same_row_as).chain}'s row`).join(' | ')} | as ${chainOf(c.same_row_as).chain} | ${c.pin} |`;
+    const cells = L.cards.map(k => {
+      const cell = c.cells[k.id];
+      if (!cell || cell.nj == null) return `pending: ${cell ? cell.status : 'no cell'}${cell && cell.mhs != null ? ` (rate only ${n(cell.mhs, 2)} MH/s)` : ''}`;
+      return `${n(cell.nj)} ${cell.status} (${n(cell.mhs, 2)} MH/s, ${n(cell.w, 1)} W, f ${cell.f == null ? 'none' : cell.f.toFixed(3)}; spread ${cell.spread_pct == null ? 'none' : cell.spread_pct + '%'}; ${cell.pod}; ${cell.clock})`;
+    });
+    const src = L.cards.map(k => c.cells[k.id] && c.cells[k.id].source && c.cells[k.id].source !== 'pending' ? `${k.name}: ${c.cells[k.id].source}` : null).filter(Boolean).join('; ') || 'pending';
+    return `| ${c.chain} | ${c.algorithm} | ${gb(c.dataset_bytes)}; ${c.dataset_note} | ${c.split.mining} / ${c.split.proving} (${c.split.source}) | ${cells.join(' | ')} | ${c.twin} | ${src} |`;
+  });
+  return [head, sep, ...rows].join('\n');
+}
+
+function tableEdge() {
+  const head = '| chain | the cheapest credible same-node DRAM board (set ' + L.adversarial_set + ', nJ per hash, band) | ' + L.cards.map(k => `ratio at the ${k.name} ${k.state} (ours)`).join(' | ') + ' | ' + L.cards.map(k => `ProgPoW-premise ratio at the ${k.name}`).join(' | ') + ' | the die as the residual (nJ; ratio at the worse card) | real chip on the market | source |';
+  const sep = '|' + '---|'.repeat(2 + 2 * L.cards.length) + '---|---|---|';
+  const rows = L.chains.map(c => {
+    if (c.not_run) return `| ${c.chain} | NOT RUN | ${L.cards.map(() => 'NOT RUN').join(' | ')} | ${L.cards.map(() => 'NOT RUN').join(' | ')} | NOT RUN | none | NOT RUN |`;
+    const a = advOf(c);
+    const boardCell = a.board ? `${n(a.board.nominal)} (${n(a.board.low)} to ${n(a.board.high)}); ${a.board.design}; split ${a.board.split_nj}; ${a.status}` : `pending: ${a.status}`;
+    const ours = L.cards.map(k => band(ratio(cellOf(c, k.id), a.board)));
+    const prem = L.cards.map(k => (a.premise && a.premise[k.id]) || 'pending');
+    const worst = L.cards.map(k => ratio(cellOf(c, k.id), a.die ? { nominal: a.die.nominal } : null)).filter(Boolean).sort((p, q) => q.nominal - p.nominal)[0];
+    const die = a.die ? `${n(a.die.nominal)} (${a.die.design}); ${worst ? x(worst.nominal, 1) : 'pending'}` : 'pending';
+    const chip = c.real_chip ? `${c.real_chip.name}: ${n(c.real_chip.mhs)} MH/s at ${n(c.real_chip.w)} W = ${n(c.real_chip.nj)} nJ per hash, ${c.real_chip.status}; ${c.real_chip.source}` : 'none on the market';
+    const src = c.same_row_as ? `= ${chainOf(c.same_row_as).chain}'s row` : a.source;
+    return `| ${c.chain}${c.same_row_as ? ` (= ${chainOf(c.same_row_as).chain}'s row)` : ''} | ${boardCell} | ${ours.join(' | ')} | ${prem.join(' | ')} | ${die} | ${chip} | ${src} |`;
+  });
+  return [head, sep, ...rows].join('\n');
+}
+
+function tablePhases() {
+  const head = '| chain | split | phase A (before investment) | phase B (spend sunk) | an income a hash chip cannot earn | source |';
+  const sep = '|---|---|---|---|---|---|';
+  const rows = L.chains.map(c => `| ${c.chain} | ${c.split.mining} / ${c.split.proving} | ${c.phases.A} | ${c.phases.B} | ${c.phases.income_a_chip_cannot_earn} | ${c.phases.source}; ${c.phases.status} |`);
+  return [head, sep, ...rows].join('\n');
+}
+
+function mechanism() {
+  const m = L.mechanism; if (!m) return '';
+  const lines = [`**${m.title}**`, '', '| chain | the memory traffic per hash | what it costs the card | what it costs the chip | consequence for the ratio |', '|---|---|---|---|---|'];
+  for (const r of m.rows) lines.push(`| ${r.chain} | ${r.traffic} | ${r.card_cost} | ${r.chip_cost} | ${r.consequence} |`);
+  lines.push('', m.note);
+  return lines.join('\n');
+}
+
+function ranking() {
+  const scored = L.chains.filter(c => !c.not_run && !c.same_row_as).map(c => {
+    const a = advOf(c);
+    const cells = L.cards.map(k => cellOf(c, k.id));
+    const rs = cells.map(cell => ratio(cell, a.board)).filter(Boolean);
+    const worst = rs.length ? Math.max(...rs.map(r => r.nominal)) : null;
+    const sessions = cells.filter(cell => cell && cell.nj != null).map(cell => cell.session || 'unstated');
+    return { c, worst, rs, sessions, prov: provisional(c) || rs.length < L.cards.length };
+  });
+  // a cross-chain ORDER exists only when every compared cell comes from one session on the same card and state (main's ruling)
+  const measured = scored.filter(s => s.worst != null);
+  const allSessions = new Set(measured.flatMap(s => s.sessions));
+  const lines = ['**(a) Ours, the same-node DRAM board at the worse card (the smaller chip edge first):**'];
+  if (measured.length >= 2 && allSessions.size === 1 && measured.every(s => !s.prov)) {
+    measured.sort((p, q) => p.worst - q.worst).forEach((s, i) => lines.push(`${i + 1}. ${s.c.chain}: ${x(s.worst)}`));
+  } else {
+    lines.push(`No order in this column yet: a cross-chain comparison is made only between cells from the same card, state and session, and the measured cells today come from ${allSessions.size} sessions (${[...allSessions].join('; ')}); the ledger session (both cards, every chain back to back) fills it. Each chain's own number, same card and state, as it stands:`);
+    for (const s of measured) lines.push(`- ${s.c.chain}: ${L.cards.map((k, i) => `${k.name} ${k.state} ${band(ratio(cellOf(s.c, k.id), advOf(s.c).board))}`).join('; ')}${s.prov ? ' (a pending or proxy cell in this row)' : ''}`);
+  }
+  scored.filter(s => s.worst == null).forEach(s => lines.push(`- ${s.c.chain}: unranked in this column (no measured card cell yet)`));
+  lines.push('', '**(b) ProgPoW\'s premise (the chip keeps a GPU-class datapath):**');
+  for (const c of L.chains.filter(c => !c.not_run && !c.same_row_as)) lines.push(`- ${c.chain}: ${L.cards.map(k => `${k.name} ${(advOf(c).premise && advOf(c).premise[k.id]) || 'pending'}`).join('; ')}`);
+  lines.push('', '**(c) Phase B, an income a hash chip cannot earn:**');
+  for (const c of L.chains) lines.push(`- ${c.chain}: ${c.phases.income_a_chip_cannot_earn}${c.not_run ? ' (NOT RUN)' : ''}`);
+  return lines.join('\n');
+}
+
+function claim() {
+  const k = L.claim;
+  const supported = k.clauses.filter(c => /^SUPPORTED/.test(c.state)).map(c => c.text);
+  const lines = ['**The headline, built from the supported clauses only:** ' + (supported.length ? supported.join('; ') + '; ' : '') + `${k.clauses[k.clauses.length - 1].text} (${k.proving_live_label}).`, '',
+    `The sentence as ordered, served as the claim under test: "${k.ordered_sentence}"`, '', `Rule: ${k.headline_rule}.`, '',
+    '| clause | convention | state on the current rows | why |', '|---|---|---|---|'];
+  for (const c of k.clauses) lines.push(`| ${c.text} | ${c.convention} | ${c.state} | ${c.why} |`);
+  lines.push('', `Withdrawn: ${k.withdrawn}.`, '', `The last clause's label from the PROVING LIVE lane: ${k.proving_live_label}`);
+  return lines.join('\n');
+}
+
+const BLOCKS = { cards: tableCards(), edge: tableEdge(), phases: tablePhases(), ranking: ranking(), mechanism: mechanism(), claim: claim(), stamp: `Data: ledger.json, stamp ${L.stamp}, adversarial set ${L.adversarial_set} (${L.adversarial_set_source}).` };
+
+function fill(path) {
+  let s = readFileSync(path, 'utf8'); let changed = false;
+  for (const [name, body] of Object.entries(BLOCKS)) {
+    const re = new RegExp(`(<!-- ledger:${name}:start -->)[\\s\\S]*?(<!-- ledger:${name}:end -->)`);
+    if (!re.test(s)) continue;
+    const next = s.replace(re, `$1\n${body}\n$2`);
+    if (next !== s) { s = next; changed = true; }
+  }
+  return { s, changed };
+}
+
+const args = process.argv.slice(2);
+const check = args.includes('--check');
+const kitAt = args.indexOf('--kit') >= 0 ? args[args.indexOf('--kit') + 1] : null;
+let red = 0;
+for (const p of [RECORD, PAGE]) {
+  if (!existsSync(p)) continue;
+  const { s, changed } = fill(p);
+  if (check) { if (changed) { console.log(`ledger: ${p} is out of step with ledger.json`); red = 1; } }
+  else if (changed) { writeFileSync(p, s); console.log(`ledger: wrote ${p}`); }
+}
+if (kitAt) {
+  mkdirSync(kitAt, { recursive: true });
+  const rows = ['# Expected rows (the ledger, stamp ' + L.stamp + ')', '', 'A reproduction on the same card class at stock passes when its nJ per hash sits inside the band below (the spread of the lab\'s own repeats, 5 percent either side of the median; a board power cap or a locked clock puts the row outside the method).', '', '| chain | card | expected nJ per hash | band (pass) | the lab\'s cell |', '|---|---|---|---|---|'];
+  for (const c of L.chains) for (const k of L.cards) { const cell = cellOf(c, k.id); if (cell && cell.nj != null) rows.push(`| ${c.chain} | ${k.name} ${k.state} | ${n(cell.nj)} | ${n(cell.nj * 0.95)} to ${n(cell.nj * 1.05)} | ${cell.pod}; ${cell.source} |`); else if (!c.same_row_as) rows.push(`| ${c.chain} | ${k.name} ${k.state} | pending | pending | ${cell ? cell.status : 'NOT RUN'} |`); }
+  writeFileSync(join(kitAt, 'ROWS.md'), rows.join('\n') + '\n'); console.log(`ledger: wrote ${join(kitAt, 'ROWS.md')}`);
+}
+process.exit(red);