Proof
Claims you can try to break.
Claims ledger
| ID | Claim | Enforced by |
|---|---|---|
| I1 | Same inputs always produce the same statement bytes. | packages/kernel/src/statement.ts |
| I2 | Every number traces to a transaction signature or an account read at a slot. | packages/verifier/src/offline.ts ANCHORS_TRACE |
| I3 | A multiplier applies from its effective timestamp inclusive (measured on devnet, case C2). | packages/kernel/src/scaled.ts |
| I4 | Instants outside recovered history resolve to UNKNOWN, never a guess. | packages/kernel/src/scaled.ts multiplierAt |
| I5 | Raw balance is conserved: observed balance minus later deltas. | packages/kernel/src/ledger.ts computeRawBalanceAnchored |
| I9 | Colophon never accepts a key, seed or signature. | apps/web/src/server/json.ts containsSecretShape |
Check a bundle in your browser
Break results: 20 attacks and an untouched control
| Case | Attack | Detected | Reason |
|---|---|---|---|
| B0 | Untouched real bundle verifies | CONTROL PASSES | PASS as expected |
| B1 | Raise the raw balance by one unit | REFUSED | Statement Hash Integrity: FAIL: Statement hash mismatch: expected 66491befdce3e941159aa95ce86b7362a936ad4c7c136650916e80 |
| B2 | Swap the multiplier numerator | REFUSED | Statement Hash Integrity: FAIL: Statement hash mismatch: expected c00dc80232425457615a1f35c57dd136e42fad993daa9eedb37f7f |
| B3 | Change the as-of timestamp by one second | REFUSED | Statement Hash Integrity: FAIL: Statement hash mismatch: expected eb94869c6053b0b89fbef7ff439c29b53125f13fe9f46e52f958c7 |
| B4 | Replace the statement hash with another valid-looking digest | REFUSED | Statement Hash Integrity: FAIL: Statement hash mismatch: expected f101ed3bec85873fd86a233b4943426e446fd4da257de78462d24b |
| B5 | Flip one hex digit of the bundle hash | REFUSED | Proof Bundle Hash Integrity: FAIL: Bundle hash mismatch: expected 9b85ac1c6f4016c02bce3ddd67aeb54155a73a6d61ef099c9aadd9 |
| B6 | Remove all source events and a balance anchor offset | REFUSED | Deterministic Balance Reconstruction: FAIL: Balance divergence: reconstructed 3085521956 vs statement 3085521957 |
| B7 | Delete one source event | REFUSED | verifier threw: bundle has no events to delete; raw balance tamper covers this case |
| B8 | Duplicate a source event | REFUSED | verifier threw: bundle has no events to duplicate |
| B9 | Change a source signature | REFUSED | Source Anchors Traceability (I2): FAIL: 1 source anchors lack valid on-chain coordinates |
| B10 | Zero a source slot | REFUSED | Source Anchors Traceability (I2): FAIL: 1 source anchors lack valid on-chain coordinates |
| B11 | Change the wallet in the statement only | REFUSED | Statement Hash Integrity: FAIL: Statement hash mismatch: expected fcc03e46cab8d0c25bc3bc3e10409f108a18c93fd63baf440c95ba |
| B12 | Change the mint in the statement only | REFUSED | Statement Hash Integrity: FAIL: Statement hash mismatch: expected 3a88958926ad1740db07035e1b9300048bfe58b2aae6d37679f9ff |
| B13 | Substitute the evidence root | REFUSED | Evidence Merkle Tree Root & Path Integrity: FAIL: Statement evidenceRoot mismatch: 2c12e5724daf23c75a798a4a380c2623739a2 |
| B14 | Substitute the statement commitment | REFUSED | Cryptographic Statement Commitment Binding: FAIL: Commitment mismatch: expected a06a798deff5f2f2e5d57078bde46f5c89a35cc7 |
| B15 | Claim COMPLETE with a missing range | REFUSED | Deterministic Completeness State Validation: FAIL: Statement claims COMPLETE but contains 1 missing range(s) |
| B16 | Alter the displayed units only | REFUSED | Statement Hash Integrity: FAIL: Statement hash mismatch: expected 8f7423246d493346b554abd53a44241c19f2150cddbb6e76a65f87 |
| B17 | Change the balance anchor | REFUSED | Deterministic Balance Reconstruction: FAIL: Balance divergence: reconstructed 3085521958 vs statement 3085521957 |
| B18 | Null the block time of an anchor | REFUSED | Source Anchors Traceability (I2): FAIL: 1 source anchors lack valid on-chain coordinates |
| B19 | Replace the manifest bundle id | REFUSED | Proof Bundle Hash Integrity: FAIL: Bundle hash mismatch: expected 96c4220b8c7326366ebbe2d989cb5c37ef61c47058cac5d8367f26 |
| B20 | One-byte tamper of the serialized JSON | REFUSED | Statement Hash Integrity: FAIL: Statement hash mismatch: expected f101ed3bec85873fd86a233b4943426e446fd4da257de78462d24b |
run 2026-10-11T15:28:55.142Z on SPACEX 4j2Y8Pn1dpSqS7JYaMcJjdNUaCg4GryWGuMj2XhvnpA6
Who reads these tokens wrong
| Tool | Token | Reports | Kernel | Verdict | At |
|---|---|---|---|---|---|
| RPC getTokenSupply | OPENAI | 2826.00881516 | 2826.00881516 | AGREES | 2026-10-11T15:50:31Z |
| RPC getTokenSupply | SPACEX | 43712.471506555 | 43712.471506555 | AGREES | 2026-10-11T15:53:50Z |
| RPC getTokenSupply | AAPLx | 154264.8355216 | 154264.8355216 | AGREES | 2026-10-11T15:57:07Z |
| RPC getTokenSupply | NVDAx | 321810.362165 | 321810.362165 | AGREES | 2026-10-11T16:01:08Z |
| RPC getTokenSupply | SPYx | 95774.95984341 | 95774.95984341 | AGREES | 2026-10-11T16:04:40Z |
| RPC getTokenSupply | TSLAx | 229635.6273418 | 229635.6273418 | AGREES | 2026-10-11T16:08:07Z |
| Robinhood Chain totalSupply() | CRM | 165730987340000000000 | 165921300011547413836 | RAW VS SCALED | 2026-10-11T16:11:42Z |
| Robinhood Chain totalSupply() | P | 91571050000000000000 | 91571050000000000000 | AGREES | 2026-10-11T16:11:42Z |
| Robinhood Chain totalSupply() | CIEN | 7321000000000000000 | 7321000000000000000 | AGREES | 2026-10-11T16:11:43Z |
Robinhood Chain
UnitSealGuard
The read side tells you what you held. The guard stops you acting on a stale number: a seal bound to a multiplier that no longer matches is refused with MultiplierMismatch.
0x2518853d8a6799734ded70857f0cffc26a175c14REFUSED ON CHAIN
MultiplierMismatch(1000566080061092435, 1000566080061092436)
sealed 1000566080061092435, chain says 1000566080061092436
tx 0x396b42bff553d378...Solana devnet
Statement anchor program
Anchoring writes the statement hash to a program-derived account that can never be overwritten.
7pPKsqAg9AFZzSEJbygpbqAVKGFgXpaN5AcqNKrwhCe2