igneum/docs/fud-fixes.md

Igneum FUD fixes

Internal working list. Written 3 October 2026 against docs/fud-ledger.md version 0.1, docs/spec/06-open-items.md, docs/bench-log.md, and the public text in site/index.html (HP), site/litepaper.html (LP) and site/journey.json (J) as checked this evening. The ledger itself is not changed by this file. Entries are referenced by ledger id; overclaims by item number.

Decisions of 3 October 2026 applied throughout: (a) no development fund, priority fee 80% to miners and provers and 20% to the called app, external jobs 90% to provers and 10% burned; (b) the ledger is internal; (c) the project is established offshore and the founder's location is never mentioned; (d) deSEC nameservers now, a non-US registrar in December 2026; (e) the dedicated identities exist (GitHub organisation igneum-network with one anonymous owner, Vercel team igneum, Google Workspace on igneum.network).

1. Summary

1. The ledger holds 80 entries and 78 overclaim items. Every entry appears once below: 64 open or conceded entries across 74 rows in section 2, and 16 answered entries that still carry a fix in section 2.1.
2. Open: 19 entries. 8 close on a measurement, 7 on a specification or design decision, 4 on counsel or a search (L1, L2, L4, L5).
3. Conceded: 45 entries. 13 are already stated in public text, 32 are not.
4. Answered: 16 entries. All 16 still carry a wording fix, an experiment or a counsel check.
5. Overclaims: 78 items. 7 already fixed (5, 6, 9, 22, 23, 27, 47), 3 partly fixed (11, 31, 75), 68 still present or still missing. Item 23 is fixed but stale. Item 73 must not be applied as written.
6. The 3 October decisions close E4 outright, narrow G4, G8 and L3, and change E3, E5, G3 and G5 (section 4). The dev fund removal forces a rewrite of 11 places in the site, spec and design files (row 7).
7. EXPOSES: six items. CLAUDE.md (full name, other companies, registrar, database region, personal GitHub handle), the cryptographer agent file, the commit handle igneum-labs, the +0100 timezone on every commit, the earlier ledger text "The founder is in the UK" still in git history, and the ledger itself in the tree. All are fixed in section 5.
8. Measured since the ledger was written: the 256 MB cache dataset is built and bit-exact on Apple, NVIDIA (CUDA and OpenCL) and an AMD integrated chip; the shortcut is 4.8x slower than honest on Apple; CPU verify is 0.41 to 1.2 ms per warp with the cache; the VDF grinding simulation ran. Items 16, 20, 21, 23, 56 and 78 need these facts, not the ledger's replacements.
9. By timing: 44 rows now (site text, decisions, accounts; two of them continue into December and mainnet), 12 before the repository goes public (citations, counsel, gate 1 measurements, the phase 2 benchmark), 16 before public testnet (gate 2 and 3 work, policies), 1 before mainnet, 1 with nothing further (F6).
10. Five most urgent: section 5 steps 1 to 4 (the tree and history must be clean before any public push); rows 1 to 5 (dead links, the miner button, no contact route, listings, Day one); row 7 (dev fund text everywhere); row 9 (the founder is pseudonymous now, the text and the ledger disagree); rows 43 to 46 (trademark and counsel).

2. Every open or conceded entry

Who: the project lead (decision or account), Claude (text, spec, code, simulation), counsel, measurement (an experiment that produces a number). When: now, before public repo (January 2027 with the benchmark), before testnet (August 2027), before mainnet (November 2027).

#	Ledger	Issue	Fix	Who	When	EXPOSES
1	X1	HP footer, HP nav and the /bench page link to a private GitHub repository	Remove the GitHub links (site/index.html line 422, the nav in site/build.mjs) until the repository is public; put them back on the day	Claude	now	no
2	X2	"Get the miner" three times and "Start mining" on HP with no miner	Item 60: "Benchmark: January 2027", linking to #journey	Claude	now	no
3	X7	No contact route on HP or LP	the project lead creates a mailbox on the igneum.network Workspace; Claude adds it to the HP footer and the LP cover (item 77). No public ledger route is needed now the ledger is internal	the project lead, then Claude	now	no
4	X8	"exchange listings after" in the LP roadmap (line 422) and J phase 6	Item 58 in both files	Claude	now	no
5	X10	Eleven log entries, all dated 3 October 2026	Add a "Day one" label above the log in site/index.html	Claude	now	no
6	L2 (with E2)	Inducement wording: "so the people who show up early get the most" (LP 183), chart caption "Half of the 4 billion cap is mined in the first two years" (LP 184), HP "Half of all IGN is mined in the first two years"	Items 54 and 76: schedule facts, no "so" clause. Counsel opinion is row 46	Claude	now	no
7	E4, E5, G5, G8, O-5.4	Dev fund text everywhere after decision (a): LP Economics (65/15/15/5 paragraph, "Development, paid by outsiders" section), LP Governance (fund bullet, second-client bullet), LP firsts row ("a development fund paid by outsiders"), HP Economics ("Development is paid from fees..."), spec 05 sections 5.2, 5.4, 5.5 and the self-dealing arithmetic, spec README row 5, spec 00 row 5, spec 06 items O-5.4 and O-5.7, docs/design/execution-layer.md lines 143, 210 and 217, the design document (CLAUDE.md already carries the new split)	Rewrite to: base fee burned in full; priority fee 80% miner and provers, 20% called app; external jobs 90% prover, 10% burn; no fund. the project lead confirms the 15% priority-fee burn is gone on purpose (section 4)	Claude, the project lead confirms	now	no
8	E5	HP "Not one coin to a founder, a fund or a stake" while the official client carries a 1% dev fee to the founder's company; LP spreads the dev fee, the pool and the proving business over three sections	Item 62 on HP. One LP heading that holds the 1% dev fee, the pool, the proving business, and that these now fund development since there is no fund	Claude	now	EXPOSES: "the founder's company" must be the offshore entity once it exists, never a company the project lead already owns
9	G3	The ledger's answer says "The founder's name is on every commit". Decisions (c) and (e) make the founder pseudonymous	Do not apply item 73 as written. LP "Who are you?" gets: "The founder is pseudonymous until the team page at public testnet. No cryptographer is hired yet." the project lead re-confirms whether the team page at public testnet names anyone	the project lead decides, Claude writes	now	EXPOSES: the ledger answer and CLAUDE.md name the founder; see section 5
10	F5	"whole network's hashrate" misread	Item 32	Claude	now	no
11	F10, F4, G8	Pool concentration unstated; LP heading "Speed and finality, powered by miners alone"	Items 33 and 43. Heading becomes "Speed and finality, a miner-weighted overlay on proof of work". Name pool concentration as the governance risk	Claude	now	no
12	C3, M3, C8, C11	Kaspa misstated; firsts table; LP 68 "taken over by chips, as Kaspa was" still reads as capture; Conflux missing from the problem section	Apply items 4, 7, 8, 10, 11 and 29. Items 5, 6, 9 and 47 are done	Claude	now	no
13	C5	Inclusion compared to finality	Item 30 without the "see the FUD ledger" cross-reference	Claude	now	no
14	C2, M1	Chip claims: "no chip can ever", "nothing for a chip to be built for", "same margin that has protected Monero for seven years", "runs for ever ... with no chip built"	Items 1, 2, 13, 17, 18, 19, 50, 59, 63, 67, plus the HP Mine card line "nothing for a chip to be built for"	Claude	now	no
15	M10	"bound by memory bandwidth"	Item 14 with the 5090 numbers (95 GB/s useful against 1,638 GB/s sequential)	Claude	now	no
16	M5	"memory footprint and instruction count are fixed" while loads vary 40 to 232	Item 15	Claude	now	no
17	M2, M9	Items 16, 21, 23 and the first item of 78 were written before the cache landed. Bench log 3 Oct: memory-hard dataset built, bit-exact on Apple, NVIDIA and AMD integrated; shortcut 4.8x slower on Apple (closed form was 111x faster); CPU verify 0.41 to 1.2 ms per warp with the cache on one M5 Max core	Rewrite items 16, 21, 23 and 78 with the new facts: shortcut closed on Apple, NVIDIA and AMD ratios pending; 10 ms gate met on one core, a 2019-class core pending	Claude	now	no
18	M8	"Any card, any vendor. Bit-exact on Apple and NVIDIA" (LP 126, HP 64); "NVIDIA and AMD both work" (LP 224)	Items 20, 56 and 66 updated: bit-exact on Apple Metal, NVIDIA CUDA and OpenCL, Apple OpenCL and an AMD integrated chip; discrete AMD and Intel not yet run	Claude	now	no
19	M13	"Macs mine too" without the ratio	Add "at about a fifth of a flagship card; the app shows projected earnings before it starts"	Claude	now	no
20	P2	Launch gas budget unstated	Publish the launch budget as a formula: cards proving times shards per card per minute	Claude	now	no
21	P3	"a phone can check it in milliseconds"	Item 25	Claude	now	no
22	P4	"Trustless light clients ... need no multisig" (LP 171)	Item 38 (item 9 is done)	Claude	now	no
23	P5	"runs on Igneum unchanged" (abstract and LP 168); "Three things run on Igneum that run nowhere else"	Items 35 and 36, plus the abstract sentence	Claude	now	no
24	P6, C10	"cheapest supplier", "lowest cost", "last provers to switch off" (LP 73, 222, 277, 293)	Items 12, 49 and 55, plus the "guaranteed income floor" paragraph	Claude	now	no
25	P7	"a block with a wrong state cannot exist"; "Nothing in it ever needs a human"	Items 3 and 26	Claude	now	no
26	P10, E7	Economics says outsiders pay in IGN and part is burned; the miner section says they pay in their own money; "Stablecoins at genesis ... through the proof bridge" (LP 176, 284)	Items 40, 52 and 71	Claude	now	no
27	E1, E6	Supply states the cap, not the tail-emission trade-off; halvings presented as fact, not a bet	Two sentences in Supply: the tail alternative and why the cap was chosen; the halving schedule is a bet, a tail can be added by 90% signalling	Claude	now	no
28	G1	"named reviewers" who do not exist; "The specification is public" (LP 271)	Items 48 and the third item of 78	Claude	now	no
29	G2	Method undisclosed	Item 72. Keep the Co-Authored-By trailers in the history: they are the evidence the entry cites	Claude; the project lead confirms the trailers stay	now	no
30	G4	"There are no admin keys" (LP 236), "0 admin keys" (HP)	Item 45 minus the fund contract; HP tile becomes "0 admin keys in consensus"	Claude	now	no
31	G5	"second independent node client, funded from the development fund" (LP 237)	Item 46 rewritten: "At launch there is one node client. A second independent client is not in the 13-month plan." The funder is row 47	Claude	now	no
32	G6	"Pools cannot censor" (LP 235)	Item 44	Claude	now	no
33	C1, C12	"Monero's idea, finished for GPUs" (LP 119, HP 57)	Item 68 in both	Claude	now	no
34	C6, X4	Roadmap does not say the combination is the risk; "Dates slip. Gates do not." missing	Item 69 plus one sentence: each piece has a precedent, the combination has none, and that is what the gates price	Claude	now	no
35	C7	New miners vote after a month, unstated	One sentence in Finality: a new miner's vote reaches full weight after a month; its rewards do not wait	Claude	now	no
36	F1, X9	First month: Finality has the thin-weights sentence (item 31 partly done); "Fair launch" and "What Igneum does not claim" do not; "exchanges are told to treat it so" missing; "no amount of fresh hashrate" remains	Finish item 31; apply item 75 and the second item of 78	Claude	now	no
37	F8	Day counts quoted as facts	Item 74	Claude	now	no
38	F2	The two-hour window's exposure unstated	Item 34	Claude	now	no
39	X3	"All of it will be on this page, live" with no date	Item 61	Claude	now	no
40	F12	"Nothing in Igneum's consensus depends on anything outside Igneum" (LP 166)	Scope to "no other chain's state"; name the code dependencies (SP1, BLS12-381, class-group VDF, rusty-kaspa) in one line	Claude	now	no
41	F13	Why prove if every node executes: unstated	One sentence under the 20% row: the share pays a standing prover population, and the proof serves light clients, bridges and sync from a proven checkpoint	Claude	now	no
42	F6	Equivocation costs history, not coins	Stated (LP 164, design doc). Nothing further	none		no
43	L5	No trademark search recorded	Search EUIPO, USPTO and UK IPO in classes 9, 36 and 42; record the result outside the repo; the name stays provisional until then	the project lead, counsel if a hit	now	EXPOSES: any application comes from the offshore entity, never from the project lead or a company he already owns
44	L3	US registrar, US nameservers, US host	Now: deSEC nameservers (in progress); recreate the Vercel records at deSEC and re-verify every domain in the Vercel project. December 2026: non-US registrar when the transfer lock ends. Before mainnet: IPFS mirror, ENS or equivalent name, site content hash in the repo and in genesis, seed nodes as addresses in the client	the project lead (accounts), Claude (mirror, hashes)	now, December, before mainnet	EXPOSES: the ledger and CLAUDE.md name the registrar and the host; keep both out of the public tree
45	E8	Founders seed the DEX	Stated. Whether to do it at all goes to counsel in row 46	counsel	before public repo	no
46	L1, L2	Howey and promotions: founder business, founder-seeded DEX, launch grants, listings (row 4 removes listings)	Counsel in the entity's jurisdiction reviews the founder-business paragraph and the promotions question before litepaper v0.2. The ledger's "offshore, parked" becomes "offshore, being established". the project lead decides whether igneum.co.uk stays in the redirect set (a weak UK hint; WHOIS is redacted)	counsel, the project lead briefs	before public repo	EXPOSES: the brief names the entity's jurisdiction, never the founder's residence
47	G5	The second client has no funder now the fund is gone	Decide: the operating company, a grant from the proving business, or not in the plan	the project lead	now (decision), before mainnet (client)	no
48	M4	Firsts row is done (item 5); ProgPoW and Ravencoin are cited nowhere	Clone the ProgPoW specification and the Ravencoin repository into vendor/; cite path and commit in the spec	Claude	before public repo	no
49	C8, C3	Ergo, Ravencoin, Conflux and rusty-kaspa claims are from memory	Cite each from its repository; label approximate until then	Claude	before public repo	no
50	M1	ASIC gain under 2x is a target	Public benchmark, leaderboard by card model and a standing bounty with the January 2027 release (O-1.17). Bounty terms and funding are the project lead's	the project lead (terms), Claude (benchmark), measurement	before public repo	EXPOSES: the bounty payer and terms carry the entity, not the project lead
51	M5	Load count varies 6x	O-1.2: exact 16 load positions in the generator, re-fuzz 10,000 programs, confirm the loads-per-hash column is constant	measurement	before public repo	no
52	M6	Weak programs unmeasured	O-1.3: census of at least 10^5 programs and a rejection rule in the generator	measurement	before public repo	no
53	M7	Ad hoc seed derivation, no analysis	O-1.1: standard hash into the seed words, new vectors. O-1.4: external review scoped to the fair-lottery properties	Claude (code), then review	before public repo	no
54	M8	Discrete AMD and Intel never run; the fuzz set has run on Metal and the CPU only	O-1.15: the proto-opencl commands on a discrete AMD card; the 10,200-program fuzz and the 14 edge programs on NVIDIA and AMD; Intel Arc after	measurement	before public repo	no
55	M2	Shortcut ratio measured on Apple only	O-1.5: inline kernel on the 5090 and a discrete AMD card. O-1.6: the time-memory curve and the hoisting attacker	measurement	before public repo	no
56	M9	Verify gate measured on one M5 Max core	O-1.14: the Rust verifier on a 2019-class laptop core at 104 and 144 loads	measurement	before public repo	no
57	P1, P3	No SP1 shard proven on any card; wrapper cost unknown	Phase 2 benchmark: shard time on a 3060-class card and the wrapper cost on consumer hardware, published with the January 2027 release	measurement	before public repo	no
58	L4	Paying testnet miners needs an entity, terms and tax treatment	Entity first (decision c); counsel writes the terms before phase 5	counsel	before testnet	no
59	L6	Dollar-paid job market read as money transmission	Counsel confirms the no-custody structure before phase 4	counsel	before testnet	no
60	M11	Hourly compile on real rigs unmeasured	O-1.16: miner client prototype on a multi-card rig; compile time and failure rate per hour	measurement	before testnet	no
61	F1	No weight in the first month	O-3.1: launch-month simulation; decide the no-certificate-for-30-days rule; the litepaper states it either way	Claude (sim), the project lead (decision)	before testnet	no
62	F3	Participation grinding through the bitmap	O-3.3: choose among the section 3.4 candidates, simulate with a hostile aggregator	Claude	before testnet	no
63	F7	Checkpoint depth 60 is a placeholder	O-3.2: devnet with regional latency, reorg-depth distribution per block rate	measurement	before testnet	no
64	F2	Presence window as an eclipse vector	O-3.7: devnet single-node eclipse; choose the 2-hour window or the 7-day silent-key rule	measurement	before testnet	no
65	C4	The overlay changes GHOSTDAG's guarantees	O-3.8: devnet runs with the module on and off; adversary simulation from real pool-hashrate traces	measurement	before testnet	no
66	P8, C9	First-come shards centralise	O-5.1: sortition of shards in the spec; measure on the phase 4 devnet	Claude (spec), measurement	before testnet	no
67	P5	EVM semantics on a DAG	O-2.8: execution-layer spec for number, timestamp, blockhash, coinbase and prevrandao over the ordered sequence; proving cost folded into the quoted gas price	Claude	before testnet	no
68	P7	Soundness-bug handling	Spec rule: a full node rejects a proof whose state root differs from its own execution; the proof-system version has a stated human emergency path	Claude	before testnet	no
69	P9	Shard bond and timeout open	O-5.6 on the phase 4 devnet	measurement	before testnet	no
70	E7, P10	Genesis bridge trust model undecided	O-5.2: committee-attested and labelled, or no bridged stablecoins at genesis	the project lead	before testnet	no
71	G1	No cryptographer; no named reviewers	Contract a cryptographer for phases 1 and 2; name and pay external reviewers before gate 3	the project lead	before testnet	EXPOSES: contracts come from the entity; reviewers are told the founder is pseudonymous
72	G7, X6	The update channel is a key; the installer is a honeypot vector	Policy: signed reproducible builds, hashes in the repo, key in hardware with a published policy, official download list, seed shown before mining, a standing "nobody asks for a seed" note; antivirus flagging documented	Claude (policy), the project lead (key custody)	before testnet	no
73	X5	"1,000 independent miners" is a Sybil number	Define independence measurably (distinct ASNs, benchmark hardware fingerprints, pool attestations) before the gate is tested	Claude drafts, the project lead decides	before testnet	no
74	G4	Genesis contract and bridge key policies	Publish each genesis contract's key policy before launch (O-5.4 without the fund contract)	Claude, the project lead	before mainnet	no

2.1 Answered entries that still carry something

Ledger	What remains	Row
M3	Items 11 and 49 wording	12
M8	AMD discrete and Intel; fuzz set on NVIDIA and AMD	18, 54
M10	Item 14 wording	15
M12	The lottery half is conceded; covered by the first-month rule	36, 61
F4	Call it an overlay on proof of work	11
F9	The gate 3 experiments decide the denominator rule	64
F11	The grinding simulation ran (proto-vdf: +3.62 blocks per epoch at 30% without the delay, 0 with it). Left: O-4.9 re-run with the census distribution; O-4.1 second cryptographer reads classgroup.rs against chiavdf	52, 71
F12	Scope the "nothing outside" sentence	40
F13	Say what the 20% buys	41
P9	Bond and timeout	69
E2	Inducement wording and counsel	6, 46
E3	The arithmetic changes with the new split; see section 4	7
E4	Closed by decision (a)	7
C1, C12	Item 68	33
L6	Counsel before phase 4	59

3. Overclaims still in public text today

Checked against the files this evening. "present" means the quoted text is still live. "missing" means the item is an addition that has not been made. "fixed" means the replacement is in. Line numbers are from the stripped page text, not the HTML.

Item	Where	Status	Note
1	LP cover	present
2	LP abstract	present
3	LP abstract	present
4	LP firsts intro	present	"six of the pieces are firsts"
5	LP firsts row	fixed	ProgPoW and KAWPOW named in the adds column
6	LP firsts row	fixed	now "whose state is proven every block" in substance
7	LP firsts row	present	"immune to hour-long rentals"
8	LP firsts row	present	"Kaspa's fair launch, with no utility"
9	LP firsts row	fixed	phase two stated in the adds column
10	LP problem	present	"the first chain built so that it can never be taken away again"
11	LP problem	partly	Ergo and Ravencoin named; "taken over by chips, as Kaspa was" still reads as capture; Conflux missing
12	LP problem	present	"cheapest supplier"
13	LP glance	present
14	LP mining	present	"bound by memory bandwidth"
15	LP mining	present
16	LP mining	present	rewrite with the cache measurement (row 17), not the ledger's wording
17	LP mining	present
18	LP mining	present
19	LP mining	present
20	LP vs RandomX	present	rewrite with AMD integrated included (row 18)
21	LP vs RandomX	present	now largely true: measured 0.41 to 1.2 ms with the cache on one core; say "on one core"
22	LP vs RandomX	fixed	HP too
23	LP measured so far	fixed, stale	the cache has landed and was measured on the 5090 and AMD; update the paragraph
24	LP proving	present	"the one useful GPU workload"
25	LP proving	present
26	LP proving	present
27	LP proving	fixed
28	LP proving	present	"No other proof-of-work chain has a seat in it"
29	LP speed	present	"proven on Kaspa"
30	LP speed	present	replacement must not cite the ledger
31	LP finality	partly	first-month sentence added; "no amount of fresh hashrate" and the two-thirds clause missing
32	LP finality	present
33	LP finality	missing	pool sentence not added
34	LP finality	missing	two-hour exposure not added
35	LP building	present	also the abstract "runs on Igneum unchanged"
36	LP building	present
37	LP building	present
38	LP building	present
39	LP building	present	"Canto and Blast proved"
40	LP building	present
41	LP builders ask	present
42	LP builders ask	present
43	LP governance	present
44	LP governance	present
45	LP governance, HP tile	present
46	LP governance	present	must also lose the fund (row 31)
47	LP miners ask	fixed
48	LP miners ask	present
49	LP miners ask	present
50	LP not claimed	present
51	LP not claimed	present
52	LP economics	present
53	LP economics, governance	present	superseded: no fund; rewrite the whole section (row 7)
54	LP supply	present
55	LP miners	present
56	LP miners	present	rewrite with the AMD integrated result (row 18)
57	HP Mine card	present	"approximate" missing on HP
58	LP roadmap, J phase 6	present	both files
59	HP hero	present
60	HP buttons	present	three "Get the miner" plus "Start mining"
61	HP live panel	present
62	HP economics	present
63	HP hero, HP Mine card	present	both places
64	HP hero	present
65	HP footer, /bench nav	present
66	HP vs RandomX	present	items 20 and 21 present, item 22 fixed
67	HP vs RandomX	present
68	LP and HP heading	present	both
69	LP roadmap	missing
70	LP mining table	present
71	LP builders	present	heading and the builders-ask answer
72	LP cover	missing	the sentence names the method only, never a location
73	LP who are you	do not apply	the founder is pseudonymous now; use the row 9 text
74	LP finality	missing
75	LP fair launch	partly	Finality has the first-month sentence; the fair-launch paragraph and "exchanges are told" do not
76	LP supply, chart caption, HP	present	three places
77	HP and LP	present	no contact route anywhere
78	LP not claimed	missing	the first of the three items needs the cache result, not "can be shortcut 110x"

4. What the 3 October decisions close or change

Closed:

• E4 (5% of gas is a tax): closed by (a). There is no fund and no 5%.
• G8, the 60% half: narrowed by (a). The 60% spend vote no longer exists; CLAUDE.md keeps 60% signalling only for parameters genesis leaves to miners. The 90% upgrade signal and the pool-concentration risk remain.
• O-5.4, the fund-contract half: closed by (a). Genesis contract and bridge key policies remain (row 74).
• L3, the nameserver half: closed by (d) once the deSEC cut-over completes. The registrar half closes in December 2026. The host, the mirror and the seed-node rule remain (row 44).
• X7, the ledger submission route: moot by (b). A contact route for the litepaper is still needed (row 3).
• Overclaim 30's cross-reference to the ledger: dropped by (b). Overclaim 53 and the fund half of 46: superseded by (a), rewrite instead of applying.

Changed, not closed:

• E3 (wash gas): under 80/20 a developer alone gets 20% of its own tip back and loses 80%. A developer who also mines the block gets 80% plus 20%, less the provers' part of the 80%. The only certain loss is the base fee. The ledger's "guaranteed loss of 20% of the tip plus the base fee" no longer holds. the project lead confirms the 15% priority-fee burn is gone on purpose; if not, the split is 80/20 of what remains after a burn and the numbers in row 7 change.
• E5 (dev fee to the founder's company): the ledger says the company carries development "until usage funds the development fund". There is no fund, so the company carries it for as long as the 1% fee, the pool and the proving business pay. That is the sentence the litepaper must carry, and it sharpens L1.
• G5 (second client): "funded from the development fund as its first priority" has no funder. Row 47.
• G3 (who are you): the anonymous founder is now the design, not a flaw to rebut. The ledger's "The founder's name is on every commit" is void. Row 9. The team-page-at-testnet decision needs re-confirming.
• L1 and L2 (counsel): "offshore, parked" and "jurisdiction not yet named" become "offshore, being established", which is a jurisdiction counsel can be briefed in. Not closed until the opinion exists.
• The ledger header ("Published alongside the litepaper") and its submission paragraph are now wrong under (b). The ledger is not changed by this file; the project lead edits those two lines when he next touches it.
• Decision (e) makes CLAUDE.md stale: it still says the Vercel project lives in the [other-business] team (moved per commit 61aa946) and lists two organisation owners. Section 5 step 2.

Text the decisions force, beyond the overclaims list: row 7 lists every file. The design document is the eleventh place and the only one outside the repository.

5. Before the repository goes public, in order

Nothing below is optional. The history, not just the working tree, carries the names: CLAUDE.md with the full name is in every commit, the ledger's earlier L2 text ("The founder is in the UK") is in the commits before 14ef6b3, and site/ledger.html (636 lines, the full ledger rendered) is in the commits before the same one. The commit author and committer on every commit is igneum-labs, and every commit carries a +0100 offset, which is UK or Irish summer time in early October. A file edit fixes none of that.

1. Move the ledger out of the tree. docs/fud-ledger.md is internal (decision b) and it maps the providers (GoDaddy, Vercel), names .claude/agents/, and says the founder's name is on every commit. Move it to a private location outside the repository (or a private repo) and add docs/fud-ledger.md to .gitignore. Keep this file (docs/fud-fixes.md) with it: it names the same things. The spec and the open-items file cite ledger ids (M7, F1, P8 and so on); those ids survive without the file and need no change.
2. Rewrite CLAUDE.md as a public file. Remove: line 4 ("the project lead's project"); every "the project lead" (lines 22, 34, 39, 41, 46, 48, 52; "the project lead's copy law" becomes "the copy law"); line 42 (the second owner [second-owner-login], "the project lead, the igneum.network Google login", the sentence about 40 commits carrying his name); line 43 ([other-business] team; it is the igneum team now); line 44 (Neon id and London region); lines 46 to 49 (registrar, "Full Protection", the purchase quotes; after December the registrar changes anyway); lines 51 to 53 (the browser-profile section names every other business: [other-business], QUANTUM, [other-business], [other-business], [other-business], [other-business]); the claude.ai artifact and doc links in "Source of truth" (they identify the tooling account). Move the operational notes (accounts, registrar, database id, browser profile, deploy scope) to a file outside the repository, for example ~/.config/igneum/NOTES.md.
3. Scrub .claude/agents/cryptographer.md line 32 ("unless the project lead overrides" becomes "unless the project lead overrides"). The other three agent files are clean. Decide whether .claude/agents/ stays public at all; if it does, it is the G2 disclosure and consistent with row 29.
4. Rewrite the history once, before the first public push. Nothing is public and nobody has cloned, so the cheapest safe route is to squash to one root commit ("Igneum: public tree") authored by a neutral handle at a UTC timestamp. If the history is kept instead, run git filter-repo to: drop docs/fud-ledger.md, docs/fud-fixes.md and site/ledger.html from every commit; replace CLAUDE.md and the agent file in every commit with the scrubbed versions; rewrite every author and committer to the neutral handle; rewrite every date to +0000. Either way: rename the GitHub account igneum-labs to a handle without a name (the noreply address keeps its numeric id, so the rename is one setting), confirm [second-owner-login] is no longer an organisation owner (decision e says one anonymous owner), and set TZ=UTC in whatever script commits from now on so no new +0100 appears.
5. Check the organisation and the account profiles: no location, no personal avatar, no personal email, 2FA on, the organisation's public members list empty. The Vercel team igneum and the Workspace are not visible from the repository; nothing to do there beyond step 2.
6. Add a LICENSE and a root README. Neither exists (git ls-files shows no root README or LICENSE). A public repository without a licence invites the first issue to be about the licence. the project lead picks the licence.
7. Re-run the sweep from this evening on the final tree: git ls-files | xargs grep -nIE "[user]|[removed]|london|[other-business]|[other-business]|[other-business]|quantum|godaddy|soft-voice|/Users/" must return nothing, and git log --format='%an %ae %cn %ce %ad' must show one neutral identity and +0000 only. Secrets: the history grep for connection strings and tokens returned zero hits today; repeat it after the rewrite.
8. Fix the public text first (rows 1 to 41). The ledger's X1 answer is that the honest route is to open the repository with the bench logs, the simulator and the test report. Opening it with "no chip can ever" still on the homepage hands the first critic the ledger's own list.
9. Put the GitHub links back on HP and the /bench page (row 1) on the day the repository opens, with the January 2027 benchmark.

What is already clean: docs/bench-log.md and the /bench page name machines, not people (commit 1769eda); the live site returns 404 for everything under docs/ and 307 for /ledger; site/.env.local, site/.vercel/ and vendor/ are ignored; no tracked file carries a home-directory path; no connection string or token appears anywhere in the history.