cert-machine · the concept, the instruments, the record

The machine

Independent exact certification of machine-generated mathematics — exact arithmetic, no code shared with the claimant, refusal as a verdict. This page is the whole of it: what the machine is, what was built to make it true, and the live record underneath. Every number below was read off a record when this page was built, and every battery it reports green was executed during that build.

objects generated
819,152
Across 11 families, one engine.
certified exactly
16,951
Interval enclosures and exact rational decisions — no digit matching.
closed forms refuted
54,647,599
54,648,476 tested = 54,647,578 refuted by disjointness (every candidate an exact rational or an enclosure; see the erratum of 2026-10-09 below) + 21 refuted exactly in BigInt at the full digit length + 877 with the form already on the OEIS record + 0 open + 0 surviving; 7,595 rational-power forms refused, not tested. A refutation here is proved, not unlikely.
batteries green
197 / 197
Executed during this build; every red control must fire.

Published, not peer-reviewed. Every claim below is rerunnable from the public repository (the kit is /reports/rerun.html); independent reruns recorded so far: 7 (5 with no code of ours), read from corpus/external-reruns.json. Enclosures are proofs-of-object pending that independent verification of the rest.

§0 · the concept

What the machine is

Generation is crowded. Judgement is not. This machine decides mathematical claims — other people's and its own — in exact arithmetic, and publishes the refusals beside the verdicts. Five rules do all the work — the first is the one everything else pays for — and each is a measurement rather than a promise.

It is one system with two faces. The same certifiers feed the reports — 96 pages, each re-deriving its record at build, refused by the gates below when a number moves — and the instruments — 24 pages where the same arithmetic runs in the reader's tab and every mark says what decided it; 11 of those run a battery in this build's test as well. Neither face illustrates the other; both are read off the records this page counts.

the sentence that costs the most

Absence of proof is never evidence of absence. A refusal here is terminal — never retried at lower rigour, never converted into a probability, never quietly dropped from the record — and that is the property a motivated party would not build.

§1 · the innovations

What was built to make that true

the ideawhat it ismeasuredwhere
The grade is the proofA reward channel with no answer key: a model proposes an exact object, the grader re-derives it from whole numbers and returns CERTIFIED, REFUTED with the violated equation, or REFUSED. Nothing to leak, nothing to game.364 real-model proposals graded, 115 certified/oracle/
Refusal, counted by kindThe third verdict published as a rate with a denominator, and never merged across kinds — an instrument declining is not a claimant publishing nothing is not a budget running out.13.0% of 301 submitted claims refused/reports/refusals.html
A certified enclosure is a canary factoryIf a quantity is pinned to width w and a grader accepts anything within tol of a stored decimal, every value in the surrounding band is provably not the quantity AND passes. Adversarial submissions are minted from certificates instead of written by hand.tolerance grader accepts 89.5%, certificate grader 0.0%/reports/envs.html
An environment that rewards breaking thingsThe model is shown a grader and asked to break it. Ground truth is free because a certified enclosure decides both halves — and some rungs cannot be broken at all, so an auditor that always finds something fails half the ladder.3 of 7 rungs unbreakable by construction/reports/envs.html
Evidence, not verdictsA bare verdict scores zero however correct it is: HOLDS must ship a tiling whose every cell verifies, FAILS must ship a witness. Dressing a sampling grid as a tiling scores worse than abstaining.the bluffing solver scores -6.00, below abstention/reports/envs.html
Calibration before claimAn instrument may not state a new result until it has re-derived a published one at every run. The rule is enforced in code, not in discipline.Mercer's λ(3) and this lab's λ(4) closed forms re-derived before any λ(5) claim/reports/lambda5.html
Forgeries as measured soundness"The grader is sound" converted from an assertion into a number: planted near-misses that must fail, in every battery, on every build.34 planted in the environments, 0 leaked · 21 in the audit lanes, all rejected/reports/methods-note.html
Certificates that detachA result travels without the machine that produced it: a JSON of exact numbers plus a verifier in the Python standard library, which must refute a deliberately forged value before it exits green.3 stdlib verifiers, no dependencies, ~1 second each/machine/log.html#certificates
Pages born from recordsNo page here is written; every one is generated from the certificates it cites and re-derives its own numbers at build. A build that drifts refuses to ship.this page, and every other/reports/
One rule, one moduleA rule defined twice will diverge. The covering check that several theorems stand on lives in one module with four consumers, after it was written twice and disagreed.instruments/covering · 4 consumers/reports/
The claims deskSomewhere for a claim to go, with the verdict published whichever way it falls — and the submitted count published while it is still zero.139 decided, 0 submitted by others/reports/claims.html

None of these is a new species on its own. Exact arithmetic is the validated-numerics tradition; verifiable-reward environments are a category; kernel-checked proof systems have had no answer key for years. What has no neighbour is the composite — exact, independent of the claimant, re-runnable without the engine, refusal-bearing, and pointed at machine-generated claims. The one property in that list a lab cannot build for itself is independence, because it is the author of the claim.

§2 · what is being built

Not built yet — and stated so

Nothing in this section exists. It carries no numbers because there are none, and it is here so that the difference between what this machine does and what it intends is legible without asking. Each line moves into the table above on the day it has a record behind it.

why this section is allowed to exist

A site that only ever shows finished work invites the reader to guess at the direction, and guessing is what this machine exists to replace. The fence is the price: no numbers, no screenshots, no dates, and no claim that any of it works — until it does, at which point it moves up one section and brings its record with it.

§3 · the loop

How a claim becomes a certificate

the machine
Generate at scale, screen in float, certify the survivors exactly. Select any node for what it does — every count is read off ledger.json at build time.
CHOWLA-COSINE 400,000 generated ERDOS852-CONSTANTS 4 generated HENON-CENSUS 328 generated HENON-ORBITS 3,936 generated HOLMES-CENSUS 124 generated KELLER-AUDIT 11 generated KELLER-FIBERS 9 generated NEWMAN-MINMOD 400,000 generated OEIS-CLOSEDFORM 14,677 generated RAMANUJAN-AUDIT 52 generated STRASSEN-AUDIT 11 generated ENUMERATE 819,152 objects SCREEN · FLOAT 17,749 pass CERTIFY · EXACT 16,951 decided CERTIFIED 2,274 REFUTED · PROVED 14,604 REFUSED · IN THE LOOP 73 LEDGER ledger.json CLOSED-FORM HUNT 54,648,476 tested REFUTED EXACTLY 54,647,578 SURVIVORS · OPEN ∅ none open THE GATES 197/197 batteries THE CONTROL PAGE /machine/log.html INTERVAL · KRAWCZYK outward-rounded TRIGMIN certified minima CENSUS exact counts SOS · RATIONAL lower bounds dedup by key only certificates
The loop this repository runs. Families supply objects and mathematics; the engine supplies scale and bookkeeping; the instruments alone decide. REFUTED and REFUSED are terminal by design — only a certificate reaches the ledger, the gates run on every build, and every page is rebuilt from the ledger alone. A step's outline is what the step is: the float screen dashed, the exact steps solid, a refusal the void.
decided
exact arithmetic backs it
computed
float, or a number someone printed; nothing decided it
refused
no mark — the void is drawn
§4 · the families

What the engine is enumerating

familywhat a certified object satisfiesgeneratedscreeneddecided → certifiedrefutedrefusedstop
chowla-cosinea finite integer set whose certified Chowla merit c = -min f_A / sqrt|A| falls below 1400,0001,5791579 → 1508071exhausted
erdos852-constantsa constant holding up the conjectured asymptotic h(x) ~ c0 log x on Erdős #852, replaced by a certified interval enclosure — and its published decimal decided exactly against that enclosure444 → 310exhausted
henon-censusa parameter pair (a,b) and period p for which the number of period-p points of the Hénon map is determined EXACTLY: every fixed point of H^p enclosed in a certified uniqueness box, the rest of the plane excluded by interval arithmetic328328328 → 32800exhausted
henon-orbitsa parameter pair (a,b) and an explicit box in which the Hénon map provably has a periodic orbit of period p, and exactly one3,9361,023228 → 22800exhausted
holmes-censusa parameter pair (d,b) and period p for which the number of period-p points of the Holmes cubic Hénon map is determined EXACTLY: every fixed point of H^p enclosed in a certified uniqueness box, the rest of the plane excluded by interval arithmetic124124124 → 12400exhausted
keller-auditan explicit polynomial map C^n -> C^n whose Jacobian determinant is proved constant by symbolic expansion over exact rationals, with certified distinct rational points sharing one image — the Jacobian conjecture refuted in dimension n, decided here and not trusted111111 → 1100exhausted
keller-fibersa Keller map and a rational target with AT LEAST k certified preimages — pairwise-disjoint Krawczyk boxes found by blind multistart Newton on the exact map; k >= 2 re-proves non-injectivity with no witnesses consumed999 → 702exhausted
newman-minmodan n-term Newman polynomial whose certified min|f|² on |z|=1 lies wholly above the recorded envelope of the best sets with fewer terms (instruments/trigmin/envelope.js: literature anchors and adopted box maxima, re-certified at load)400,00074 → 400exhausted
oeis-closedforma published OEIS constant whose record — name AND fetched formula/comment fields — states no closed form, while its digits are consistent with a small closed form and every other form in the vocabulary is refuted14,67714,60114601 → 014,6010exhausted
ramanujan-audita published Ramanujan Machine conjecture re-evaluated as a rigorous enclosure and decided against the claimed closed form — survival certified to the enclosure width, refutation proved (and, for their corpus, a discovery)525252 → 5110exhausted
strassen-audita claimed fast matrix-multiplication algorithm — a rank-r decomposition of the (n,m,p) tensor — whose defining identity (nm·mp·np exact equations) is VERIFIED over the claimed ring with r strictly below the naive nmp; the C-layout convention is detected and recorded, never assumed111111 → 1010exhausted

The screen is float and may only ever prune; nothing is admitted without an exact certificate. A family plugs in by supplying six functions — enumerate, value, interesting, certify, key, statement — and inherits the loop, the scale and the dedup.

§5 · certified conjectures

The objects that survived

familyobjectcertified enclosurewidthclosed forms refuted
chowla-cosine[1,2,4,6,7,8][0.649862827152, 0.649862827152]5.55e-16372 / 372
chowla-cosine[1,2,3,5,6,7,8][0.715658879606, 0.715658879606]5.55e-16373 / 373
chowla-cosine[1,2,3,5,7,8,9,10][0.715967581851, 0.715967581851]5.55e-16373 / 373
chowla-cosine[1,2,4,6,8,9,10][0.725127302045, 0.725127302045]5.55e-16375 / 375
chowla-cosine[1,2,3,5,6,8,9,10,11][0.725987311197, 0.725987311197]5.55e-16375 / 375
chowla-cosine[1,3,4,5,6,9,10][0.742177616900, 0.742177616900]5.55e-16375 / 375
chowla-cosine[1,4,5,6,9,10][0.742222719215, 0.742222719215]5.55e-16375 / 375
chowla-cosine[1,2,4,5,6,9,10,11][0.750810171748, 0.750810171748]6.66e-16375 / 375
chowla-cosine[1,2,3,4,6,8,9,10,11,12][0.759444373892, 0.759444373892]5.55e-16374 / 374
chowla-cosine[1,2,3,5,8,10,11,12,13][0.759942805134, 0.759942805134]6.66e-16374 / 374
chowla-cosine[1,2,3,4,8,10,11,12,13,14][0.763617416452, 0.763617416452]5.55e-16374 / 374
chowla-cosine[1,3,4,7,8,10,11][0.763698607335, 0.763698607335]8.88e-16374 / 374
erdos852-constants[erdos852-c0-enclosure][1.323228276864, 1.323228276864]2.22e-16376 / 376
erdos852-constants[erdos852-c0-digits][1.323228276864, 1.323228276864]2.22e-16376 / 376
erdos852-constants[erdos852-cstar-enclosure][0.075240386178, 0.075240386178]3.33e-16360 / 360
henon-census[1.4|0.3|8][64.000000000000, 64.000000000000]0.00e+00 / 0
henon-census[1.34|0.3|8][48.000000000000, 48.000000000000]0.00e+00 / 0
henon-census[1.36|0.3|8][48.000000000000, 48.000000000000]0.00e+00 / 0
henon-census[1.38|0.3|8][48.000000000000, 48.000000000000]0.00e+00 / 0
henon-census[1.14|0.3|8][32.000000000000, 32.000000000000]0.00e+00 / 0
henon-census[1.16|0.3|8][32.000000000000, 32.000000000000]0.00e+00 / 0
henon-census[1.18|0.3|8][32.000000000000, 32.000000000000]0.00e+00 / 0
henon-census[1.2|0.3|8][32.000000000000, 32.000000000000]0.00e+00 / 0
henon-census[1.22|0.3|8][32.000000000000, 32.000000000000]0.00e+00 / 0
henon-census[1.24|0.3|8][32.000000000000, 32.000000000000]0.00e+00 / 0
henon-census[1.26|0.3|8][32.000000000000, 32.000000000000]0.00e+00 / 0
henon-census[1.28|0.3|8][32.000000000000, 32.000000000000]0.00e+00 / 0
henon-orbits[0.6|0.3|1|0.833333333][0.833333333333, 0.833333333333]2.01e-130 / 0
henon-orbits[0.62|0.3|1|0.825297414][0.825297414485, 0.825297414485]2.01e-130 / 0
henon-orbits[0.64|0.3|1|0.817519468][0.817519468482, 0.817519468482]2.01e-130 / 0
henon-orbits[0.66|0.3|1|0.809985304][0.809985304012, 0.809985304012]2.01e-130 / 0
henon-orbits[0.68|0.3|1|0.802681828][0.802681828468, 0.802681828468]2.01e-130 / 0
henon-orbits[0.7|0.3|1|0.795596939][0.795596939087, 0.795596939087]2.01e-130 / 0
henon-orbits[0.72|0.3|1|0.788719427][0.788719427131, 0.788719427131]2.01e-130 / 0
henon-orbits[0.74|0.3|1|0.782038893][0.782038893311, 0.782038893311]2.01e-130 / 0
henon-orbits[0.76|0.3|1|0.775545673][0.775545672898, 0.775545672899]2.02e-130 / 0
henon-orbits[0.78|0.3|1|0.769230769][0.769230769231, 0.769230769231]2.01e-130 / 0
henon-orbits[0.8|0.3|1|0.763085795][0.763085794519, 0.763085794519]2.02e-130 / 0
henon-orbits[0.82|0.3|1|0.757102917][0.757102917009, 0.757102917009]2.01e-130 / 0
holmes-census[2.7|0.2|4][49.000000000000, 49.000000000000]0.00e+00 / 0
holmes-census[2.775|0.2|4][49.000000000000, 49.000000000000]0.00e+00 / 0
holmes-census[2.85|0.2|4][49.000000000000, 49.000000000000]0.00e+00 / 0
holmes-census[2.55|0.2|4][33.000000000000, 33.000000000000]0.00e+00 / 0
holmes-census[2.625|0.2|4][33.000000000000, 33.000000000000]0.00e+00 / 0
holmes-census[1.95|0.2|4][17.000000000000, 17.000000000000]0.00e+00 / 0
holmes-census[2.025|0.2|4][17.000000000000, 17.000000000000]0.00e+00 / 0
holmes-census[2.1|0.2|4][17.000000000000, 17.000000000000]0.00e+00 / 0
holmes-census[2.175|0.2|4][17.000000000000, 17.000000000000]0.00e+00 / 0
holmes-census[2.25|0.2|4][17.000000000000, 17.000000000000]0.00e+00 / 0
holmes-census[2.325|0.2|4][17.000000000000, 17.000000000000]0.00e+00 / 0
holmes-census[2.4|0.2|4][17.000000000000, 17.000000000000]0.00e+00 / 0
keller-audit[Meng–Yang arXiv:2607.22198|5][128.000000000000, 128.000000000000]0.00e+00 / 0
keller-audit[Gallagher zenodo.21479195 d=2|3][1.000000000000, 1.000000000000]0.00e+00 / 0
keller-audit[Gallagher zenodo.21479195 d=3|3][1.000000000000, 1.000000000000]0.00e+00 / 0
keller-audit[Gallagher zenodo.21479195 d=4|3][1.000000000000, 1.000000000000]0.00e+00 / 0
keller-audit[Gallagher zenodo.21479195 d=5|3][1.000000000000, 1.000000000000]0.00e+00 / 0
keller-audit[Gallagher zenodo.21479195 distinct member (w-2w^3)|3][-1.000000000000, -1.000000000000]0.00e+00 / 0
keller-audit[Alpöge 2026-07-19|3][-2.000000000000, -2.000000000000]0.00e+00 / 0
keller-audit[Alpöge 2026-07-19|8][-2.000000000000, -2.000000000000]0.00e+00 / 0
keller-audit[tangent-sweep d=3 (new curve through the published mechanism)|3][-2.000000000000, -2.000000000000]0.00e+00 / 0
keller-audit[tangent-sweep d=4 (new curve through the published mechanism)|3][-2.000000000000, -2.000000000000]0.00e+00 / 0
keller-audit[tangent-sweep d=5 (new curve through the published mechanism)|3][-2.000000000000, -2.000000000000]0.00e+00 / 0
keller-fibers[fiber|alpoge][3.000000000000, 3.000000000000]0.00e+00 / 0
keller-fibers[fiber|alpoge-own-target][3.000000000000, 3.000000000000]0.00e+00 / 0
keller-fibers[fiber|sweep-d3][3.000000000000, 3.000000000000]0.00e+00 / 0
keller-fibers[fiber|gallagher-d2][3.000000000000, 3.000000000000]0.00e+00 / 0
keller-fibers[fiber|gallagher-d3][3.000000000000, 3.000000000000]0.00e+00 / 0
keller-fibers[fiber|sweep-d4][2.000000000000, 2.000000000000]0.00e+00 / 0
keller-fibers[fiber|gallagher-distinct][2.000000000000, 2.000000000000]0.00e+00 / 0
newman-minmod[0,2,4,5,8,9,10,11,12][1.362373178133, 1.362373178133]4.44e-16377 / 377
newman-minmod[0,6,8,12,13,15,16,17][1.254933139031, 1.254933139031]6.66e-16376 / 376
newman-minmod[0,3,8,12,13,14][1.013007454017, 1.013007454017]6.66e-16351 / 351
newman-minmod[0,2,7,8,11,12][1.009230830699, 1.009230830699]4.44e-16346 / 346
ramanujan-audit[rm-cat-22][21.310733573145, 21.310733573145]7.11e-15376 / 376
ramanujan-audit[rm-z2-new8][18.190787907439, 18.190787907439]1.07e-14376 / 376
ramanujan-audit[rm-cat-21][17.310693507032, 17.310693507032]7.11e-15377 / 377
ramanujan-audit[rm-cat-18][13.966059953644, 13.966059953644]3.55e-15372 / 372
ramanujan-audit[rm-z2-new7][13.382476033966, 13.382476033966]3.55e-15376 / 376
ramanujan-audit[rm-zo-z5z3c][12.993891508980, 12.993891508980]3.55e-15361 / 361
ramanujan-audit[rm-cat-19][12.735713658946, 12.735713658946]5.33e-15376 / 376
ramanujan-audit[rm-z2-new4][12.382476033966, 12.382476033966]7.11e-15377 / 377
ramanujan-audit[rm-cat-17][11.704592362598, 11.704592362598]5.33e-15362 / 362
ramanujan-audit[rm-cat-20][11.126365014738, 11.126365014738]7.11e-15377 / 377
ramanujan-audit[rm-z2-new9][9.627705192345, 9.627705192345]3.55e-15376 / 376
ramanujan-audit[rm-z2-new5][8.557960170974, 8.557960170974]7.11e-15377 / 377
strassen-audit[mm|alphatensor-f2-5x5x5][96.000000000000, 96.000000000000]0.00e+00 / 0
strassen-audit[mm|alphatensor-q-4x5x5][76.000000000000, 76.000000000000]0.00e+00 / 0
strassen-audit[mm|strassen-squared-4x4x4][49.000000000000, 49.000000000000]0.00e+00 / 0
strassen-audit[mm|alphatensor-q-4x4x4][49.000000000000, 49.000000000000]0.00e+00 / 0
strassen-audit[mm|alphaevolve-48-4x4x4][48.000000000000, 48.000000000000]0.00e+00 / 0
strassen-audit[mm|alphatensor-q-3x4x5][47.000000000000, 47.000000000000]0.00e+00 / 0
strassen-audit[mm|alphatensor-f2-4x4x4][47.000000000000, 47.000000000000]0.00e+00 / 0
strassen-audit[mm|alphatensor-q-3x3x3][23.000000000000, 23.000000000000]0.00e+00 / 0
strassen-audit[mm|strassen-1969][7.000000000000, 7.000000000000]0.00e+00 / 0
strassen-audit[mm|alphatensor-q-2x2x2][7.000000000000, 7.000000000000]0.00e+00 / 0

Each row is an exact enclosure, not a measurement. The last column is the engine asking whether the value has a small closed form: every candidate lying outside the enclosure is refuted exactly. The Ramanujan Machine matches truncated decimals and argues from collision probability; this decides.

§6 · closed forms

What survived the enclosure test

Nothing survived, and that is the result

54,648,476 candidate closed forms were tested against certified enclosures around 1e−15 wide, and 54,647,578 were refuted exactly — the value provably lies outside. Zero survivors means these objects have no small closed form of the shapes searched: a proved negative, not a failed search.

The count decomposes with nothing folded in: 54,648,476 tested = 54,647,578 refuted by disjointness (every candidate an exact rational or an enclosure; see the erratum of 2026-10-09 below) + 21 refuted exactly in BigInt at the full digit length + 877 with the form already on the OEIS record + 0 open + 0 surviving; 7,595 rational-power forms refused, not tested. Forms the 17-digit double screen could not separate were re-decided at the full published digit length in BigInt; forms OEIS already states are the record check working, not discoveries; the subtraction closes to zero and the engine refuses to write a ledger where it does not.

§7 · erratum

What this page said before 2026-10-09, and what it says now

Until 2026-10-09 the closed-form hunt compared FLOAT candidates — Math.sqrt(p/q), a midpoint times a rational, Math.pow, Math.exp — against the certified enclosure and counted a miss as a refutation: exact for p/q (round-to-nearest is monotone), not for the rest. The engine also counted REJECT — "did not clear the bar", straddling enclosures included — as a decision, and the Newman family compared a candidate's lower end with the champion's lower end. tools/test-engine.js:60-64 records that the float mechanism once refuted sqrt(2) as a closed form for the decimal expansion of sqrt(2); it was repaired then at the enclosure (17 digits, 4 ulps outward), not at the comparison. This erratum repairs the comparison. Every candidate is now an exact rational or an enclosure and a form is refuted only on disjointness; one verdict module (instruments/verdict.js) splits REJECT into REFUTED and REFUSED and refuses an unknown word; the Newman bar is the champion enclosure. The numbers before are pinned to commit be82e126bc6b and to the page bytes 8e3bf2355b28d971… (certs/erratum-2026-10-09.json); the numbers now are this build's.

countbeforenow
closed forms refuted54,628,275 "refuted in double" + 21 exactly54,647,578 by disjointness + 21 exactly; 7,595 rational-power forms refused
closed forms tested54,629,17354,648,476
surviving candidates00
the Newman statementan n-term Newman polynomial whose certified min|f| on |z|=1 exceeds every value achievable with fewer termsan n-term Newman polynomial whose certified min|f|² on |z|=1 lies wholly above the recorded envelope of the best sets with fewer terms (instruments/trigmin/envelope.js: literature anchors and adopted box maxima, re-certified at load)
familybefore: hit · rejected · refusednow: certified · refuted · refused
chowla-cosine1,508 hit · 71 rejected · 0 refused1,508 certified · 0 refuted · 71 refused
erdos852-constants3 hit · 1 rejected · 0 refused3 certified · 1 refuted · 0 refused
henon-census328 hit · 0 rejected · 0 refused328 certified · 0 refuted · 0 refused
henon-orbits228 hit · 0 rejected · 0 refused228 certified · 0 refuted · 0 refused
holmes-census124 hit · 0 rejected · 0 refused124 certified · 0 refuted · 0 refused
keller-audit11 hit · 0 rejected · 0 refused11 certified · 0 refuted · 0 refused
keller-fibers7 hit · 1 rejected · 1 refused7 certified · 0 refuted · 2 refused
newman-minmod4 hit · 0 rejected · 0 refused4 certified · 0 refuted · 0 refused
oeis-closedform0 hit · 14,593 rejected · 0 refused0 certified · 14,601 refuted · 0 refused
ramanujan-audit51 hit · 1 rejected · 0 refused51 certified · 1 refuted · 0 refused
strassen-audit10 hit · 1 rejected · 0 refused10 certified · 1 refuted · 0 refused

The kernel changed, so every record that pins the certifier modules' digests was re-derived by the new bytes and compared with the record it replaced:

recordfields that moveddecisions
certs/design-table-audit.jsongenerated, codeidentical (rows and summary)
certs/hseva-ledger.jsongenerated, secondsidentical (buoys, ww3, printed, scipy, findings, quick; timing fields aside)
certs/hseva-atlas.jsongenerated, code, secondsidentical: 2,589 of 2,589 cells and the stat section
apps/contraprova/data/gate-ledger.jsonmodules (the interval.js pin)identical: every field but the module pins (battery 24 checks, 9 reds; reference agreement at 176 inputs)
apps/decidivel/data/decidivel-ledger.jsonengine (the interval.js pin)identical: 2,160 tasks, every field but the engine pin; headline RECUSADO as before
§7 · the envelope

What a Newman hit has to beat

barcertified min|f| to beatsource
bar(6)1.000000000000000literature / lab
bar(7)1.065285891134415literature / lab
bar(8)1.101882938486186literature / lab
bar(9)1.311101302872326literature / lab
bar(10)1.378187726393090literature / lab
bar(17)1.899892237678303literature / lab
bar(18)1.899892237678303literature / lab
bar(19)1.899892237678303literature / lab
bar(20)2.018174563075912literature / lab

Anchors from the literature and the source lab, plus objects this lab certified and then adopted. Both stored as witness sets and re-certified at load, so no value is transcribed. Frozen at load — the bar never moves under a running campaign, or a candidate's verdict would depend on when it was proposed.

The bars at n = 10 and n = 17 MOVED in August 2026 — bar(10) to 1.3782 past Boyd's 1986 witness, bar(17) to 1.8999 via the certified n = 13 box champion — because the exhaustive box30 sweeps behind certs/mu-table.json certified minima exceeding what the literature and the source lab held. A returning reader's remembered bar is stale because the mathematics improved, not because anything drifted; the rows tagged "adopted here" are exactly those promotions.

Staleness audit: clean — nothing certified sits above the envelope unadopted.

§8 · the instruments

What certifies, and whether it runs

batterycoversthis build
funnel machine14 items · 19 red controlsgreen
detach11 checksgreen
interval · eqcertfalsifier-required certificatesgreen
interval · arithmetic16 000 ops vs exact rationalsgreen
interval · transcendentalsound exp/log/sin/cosgreen
trigmin certifier47 checks · 2 red controlsgreen
newman box sweepGoddard's 1992 box re-closed every run, cross-lab counts pinned; 100% kill audit · 7 red controlsgreen
lambda sweepMercer's proved closed forms computed, never remembered; the wrong-endpoint bar refused by name and shown fatal · 4 red controlsgreen
lambda4 campaignMercer's lambda(2) and lambda(3) proofs re-derived mechanically at every run — exception families DISCOVERED, thresholds DERIVED; the Section-5 generic case with its 14 exceptions matched against the hand-written list; the worklist measured at NINE families · 8 red controlsgreen
envs (grader QA + the gyms)the three environments over one idea — a certified enclosure is a canary factory: the fact corpus still matches the records it was read from (drift refuses), no minted canary lands inside its own enclosure, the certificate grader is sound on the whole suite while tolerance checking is broken by it, a bluffed tiling scores worse than abstaining, and the attacker ladder keeps rungs that cannot be broken · 5 red controls, including the accept-everything and reject-everything graders that must both score zerogreen
lambda56 campaignthe lambda(5)/(6) non-monotonicity campaign: lambda(4) generic re-derived as the calibration gate, both new generic cases certified (8 and 10 exception families DISCOVERED), the double-sum-core theorem re-proved with the Fejer-Riesz comb weight, extremizer walls counted, the record walked · 5 red controlsgreen
sublevel (tao 179)certified sublevel measures for root-constrained monic polynomials (Tao's #179 supremum conjecture on Erdős #1038): the 2*sqrt(2) witness enclosed, the box bound equal to the measure on thin boxes, and the degree-3 theorem plus degree-4 localization RE-PROVED at every run · 3 red controlsgreen
mercer mu5 laddermu(5) <= 1 + pi/m certified m = 5..20; Mercer's Tables 5-7 reproduced, the source-lab m=6 record matched, every case point re-proved · 5 red controlsgreen
census (henon + holmes)closed-form calibration, two maps · 5 red controlsgreen
keller audit + sweepsymbolic det over Q, generator calibrated on Alpöge · 4 red controlsgreen
cf auditall seven Ramanujan Machine sheets — 51 printed rows + the certified correction (e, pi, zeta(3), Catalan, pi^2, ln 2, mixed zeta orders) · 10 red controlsgreen
entropy coveringcertified h_top lower bounds; ln 2 calibration at the full horseshoe · 4 red controlsgreen
strassen auditfast-matmul tensor identities over Q and F2; Strassen 1969 calibrates · 3 red controlsgreen
bigfloat layerdirected-rounding big-float intervals; pi/ln2/e to 50 literature digits · 5 red controlsgreen
ivspecial (Γ + Bessel)interval Γ (Spouge) and Bessel J_ν at fractional and NEGATIVE order — the spectral-geometry instrument: half-integer closed forms, Γ cross-derived on bigfloat against (2n)!/(4ⁿn!)·√π, J against exact-rational series brackets at dyadic points, the pinned frontier source re-hashed, fat-interval orders falsified for the band program · 6 red controlsgreen
hotspots (ember chain)the certified hot-spots theorem for the trapezoid outside every proven class: 8 stage records walked (inputs = upstream outputs, no hand copies), I₀ = 5/48 and C_tr and the cell partition re-decided LIVE in exact rationals/bigfloat, a collar kill re-proved live, witnesses proved to sit in tip disks · 7 red controls (mutated vertex, inflated defect, forged I₀, inflated flux sup vs the reflection layer, sign-flipped ladder, witness moved into the core, the bench's unsound tip-skip rule caught)green
erdos852 constantscertified c0 and C* enclosures; pi^2/8 product calibration · 5 red controlsgreen
evtol energymission-energy feasibility verdicts cross-proved by 256-corner exact sweeps; dyadic closed-form calibration · 4 red controlsgreen
pu (Tesouro Direto prices)PU Verificado: the pins re-hashed, both deciders on the methodology's worked examples, the ledger's counts re-summed, the convention census consistent, the Python cross-check whole, the feed's growth rule, the LFT index and projection, and the row module the ledger and /instruments/pu share (instruments/pu/rows.js: the three worked examples pasted as rows REPRODUCED, two centavos off CONSISTENT, the page inlining the module byte for byte) · 13 red controls (a corrupted pin, a planted holiday, a shifted settlement, A-14 for T-14, a straddle refused, rounding the centavos, a disagreeing second decider, a Selic day altered, three ways a published file may fail to grow, and a price far outside the rate box OFF)green
curveseeds (NIST seeds)the NIST curve-seeds audit: the eleven pins re-hashed, the published parameters read from the pinned FIPS 186-2 text and OpenSSL table and the two sources agreeing, both deciders calibrated on FIPS's own printed c and normal-basis b, the 34 claim rows (14 seeds, 14 derivations, 6 base points) re-decided and equal to the ledger, the Python and JS deciders field-identical · 15 red controls (a timestamp one second off, a candidate one off, lrand48 >> 22, the binary clock not halved, mrand48 for lrand48, a flipped seed byte against c and against the congruence, SHA-1(seed − i), the prime chain without the leftmost bit cleared, a LIP seed one off, NBITS 30, no outputs skipped, the Python reds, a corrupted pin, one differing field)green
forecast instrumentconformal coverage proved by exact rank-lemma enumeration; Winkler scores hand-computed in rationals; the ledger refuses backdating, tampering, premature and double scoring; the admission prune rule decided by exact binomial tail · 5 red controlsgreen
covering (one module, four consumers)the check that several theorems here quantified over a region actually stand on: do the pieces TILE it. Written once after being written twice — 1D ladders (endpoints must MATCH, relative comparison for ladders spanning decades) and 2D area accounting for adaptive box maps, with the honest limit that area proves covering almost everywhere and not everywhere. Zero-width pieces are reported and excluded, never allowed to bridge a hole · 12 red controlsgreen
ember band (P3a, the family audit)the hot-spots theorem on a positive-measure family c in [0.845,0.85]: an INDEPENDENT auditor re-derives the two covering ladders (17 chunks tiling the interval, 738 sigma-cells tiling [-1,0] in every stage) and every band-wide value from per-cell data, sharing no code with the producer. Eight RED CONTROLS each break the band a different realistic way — removed chunk, endpoint nudged 1e-5, one missing sigma-cell of 738, one margin at -1e-9, an escaped collar survivor, a dropped stage, tip C losing its certified sign, a ladder tiling the wrong interval · 8 red controlsgreen
lemniscate (erdős 1038 infimum)the #1038 infimum bracket walked and its fence enforced: five RED CONTROLS are genuine source mutations that must make a certificate refuse — the atom mass below the exact level, a displaced support endpoint, THE δ-MECHANISM (the family level defect on the wrong side, which provably kills small ε), the sliver constant below 1, and a forcing record claiming a cap its boxes do not tile · 5 red controlsgreen
interval kernel vs Arbthe interval kernel (the four operations, square, abs, integer powers, exp, log, sin, cos, tanh, the two platform-pad helpers, lnΓ, ψ, ψ′, P(a, z) and Φ) run on a seeded sample of random and adversarial inputs — full-mantissa doubles, subnormals, near-overflow and near-underflow arguments, boxes straddling critical points — and every enclosure required to contain the exact result or range that Arb (python-flint) computes at 256 bits and up; every malformed input (NaN, an inverted interval, division through zero, a non-integer or overflowing power, log at or below zero) required to be refused · 2 red controls (a planted round-to-nearest addition and a planted Math.exp, each of which Arb must catch); the full run is certs/kernel-arb-audit.jsongreen
site links and redirectsno URL of the site can 404 from inside it: vercel.json keeps trailingSlash on (a folder URL without its slash once resolved relative links one level up, 2026-10-27), every legacy redirect keeps its slashed and bare twins, and every internal href/src of site/ resolves to a file, a folder index or a redirect · 4 red controls (a config without trailingSlash, a redirect without its twin, a pattern without its bare twin, a relative link to a missing file)green
interval kernel vs ITF1788the interval kernel run on ITF1788 (the IEEE Std 1788-2015 test suite, pinned at b6ee1e24): every test of an operation it implements run, each result required to contain the tightest expected interval, every refusal classed, every inapplicable test counted by reason; the two membership violations at ±∞ declared as an open finding · 2 red controls (a planted round-to-nearest addition and a planted Math.exp, each caught); the record is certs/kernel-itf1788.jsongreen
cert-machine vs dRealdReal 4 (the δ-complete decider) run 40522733573 re-derived from corpus/dreal-compare/run-40522733573: every word, agreement, receipt and total; the claims regenerated byte for byte from pinned sources; the flow-line gate re-decided live against its ledger; refuses on drift · record certs/dreal-compare.jsongreen
the registry's C_1c and C_1d replayedthe registry's C_1c (rozetyp, K = 6144 and the earlier K = 3072) and C_1d (the 300-cell signed function of #224) re-decided exactly by the JavaScript BigInt decider and compared with the record, which holds the Python direct-sum decider's identical fractions too; the bounds read from the registry's pinned pages; the C_1d printed bound, below its own certificate's value, REFUTED as printed and its rounded-up repair CERTIFIED; four RED CONTROLS that must come out wrong — a C_1c bound above the value and a C_1d bound below it (refuted), a negative weight and a zero integral (refused)green
the registry's newer C_1c and C_1d rows replayedthree newer family-1 rows of the optimization-constants registry — C_1c [Kos2026] (K = 24576), C_1d [STEPS2026] (600 cells) and C_1d [AER2026] under both readings, decimal and binary64 — re-decided exactly by the JavaScript BigInt decider and compared with the record, which holds the Python direct-sum decider's identical fractions too; every digest the pages print checked against the pinned bytes; [SCIEL2026] recorded NEEDS DATA (restricted bytes); five RED CONTROLS that must come out wrong — a bound above and a bound below the exact values and a doubled cell (refuted), a negative weight and a zero integral (refused)green
the registry's C_86 certificate replayedthe registry's C_86 <= 1.8117251 (R. Pinho, #227, the Schur–Siegel–Smyth trace constant): the six finite conditions of the certificate — a 629-cell step measure and eleven integer polynomials — re-decided by the JavaScript decider (exact BigInt rationals; outward-rounded intervals with a series logarithm for the two conditions that need one, the second-order Taylor form on boxes for f >= 0 on the support) and compared with the record, which holds the Python decider's identical verdict; six RED CONTROLS that must come out wrong — densities scaled 0.98 (f < 0 found), weights scaled 1.3, extra mass near 1/20, a tampered bound, a reducible polynomial, a polynomial with complex rootsgreen
the registry's C_89b and C_89c graphons replayedthe registry's C_89b <= 0.0016870052 (K5) and C_89c <= 0.7422548616·2^-14 (K6), J. SK's step-graphon certificates (pull requests 277 and 279): the monochromatic densities decided as exact rationals by two implementations sharing no code with each other or with the claimant's evaluators (Python Fraction; JavaScript modular counting + CRT and the Z_2^10 reduction in BigInt), both equal to the fractions the pages state and at or below the printed bounds; the pins re-hashed, the K6 value and five controls re-derived at every rungreen
the registry's C_16 enclosure replayedmaximusrufus's C_16 enclosure (#246) decided from the pinned certificates by two implementations sharing no code (tools/replay-c16.js, instruments/optq/c16.py), their checkers never run: the lower end CERTIFIED exactly, the upper end PARTIAL (the finite core — the tiling, all 84 boxes against the printed digits, g(D0) — certified; the analytic steps read) · 5 red controls (the supported bound minus one unit refused, the lower bound plus one unit refuted, a lowered box bound refuted, a coverage gap refuted, a tail-dropped mutant caught); the record is certs/c16-replay.jsongreen
the registry's C_89 (K4) graphon replayedthe registry's C_89 (K4) Ramsey-multiplicity bound (#255, merged asterisked) decided twice from the pinned 3840-block step graphon: the C kernel's per-block residues (nine primes, every block, no symmetry; run on a RunPod pod, imported verbatim into certs/graphon-k4-blocks.txt) re-lifted by CRT, the seven block automorphisms of the exact second implementation re-verified, block 0 and its perturbation re-derived without symmetry, the stated fraction and the printed bound re-compared · red controls (a perturbed block value moves the density; a printed bound one unit below fails); the record is certs/graphon-k4.jsongreen
the registry's C_82 rows replayedthe registry's two asterisked C_82 upper bounds (the Zhang–Zagier essential minimum: R. Pinho's certificate, #229, and Épi's construction) — Doche's limit-point bound B decided from the pinned constructions: exact integrality, monic denominators, deg A < deg Q and coprimality; every root of every composed factor certified by Gershgorin on exact Weierstrass corrections; the integral on dyadic panels by a second-order Taylor form · 3 controls (Doche 2001 and Grinsztajn reproduce their bounds; the claimant's planted failure refuted) and 6 red controls (a bar below B refuted; a shared factor, a non-monic denominator, deg A >= deg Q, a repeated root and a float exponent refused) · the JavaScript decider re-derives every case and compares with certs/c82-replay.json, which holds both implementationsgreen
the registry's step functions replayedthe four step functions behind the optimization-constants registry's C_1a and C_1b rows of 2026-10-18 (Atris and EinsteinArena's AgentDiscover and CodexProLong) re-decided exactly by the JavaScript BigInt decider and compared with the record, which holds the Python decider's identical fractions too; every input against its pin, the bounds read from the registry's pinned pages, five RED CONTROLS that must come out wrong — a bound below the exact value and a doubled height (refuted), a negative height, a height above one and CodexProLong's heights as published (refused)green
the method evaluated (planted claims)claims whose truth is known by construction, decided by the system's own deciders: on E8 and D4 a duplicated row, a doubled row, the sum of two contact vectors and the zero vector (all false, all must be refuted), the configuration negated and its coordinates permuted (true, must certify), ragged rows (must be refused); on the registry's three entropy certificates the bound claimed just above the ratio (false), the law translated (true), a weight moved off a probability law and a base that breaks the digit map's injectivity (must be refused) — no false acceptance, no true claim refused; the record is certs/method-eval.jsongreen
selfaudit: concordance (phase 4)the self-audit of cert-machine, phase 4: every register row whose record was decided by two or more programs — the gnnw verifier against its JavaScript second implementation, fei.py against verify_fei.js, the exact-double tensor audit against its BigInt audit on every mc100 tensor row, the kissing certify against the mc100 full pass and both claimbox checkers, the standard-library verifiers of the rerun kit against the records they re-derive — compared field by field (the word, the witness or count, the enclosure) and read from the records, nothing re-run; and the 416 kernel challenges carried in as the hosted profile as recorded, never merged, never re-run; the check regenerates and compares · 0 red controls (a comparison of records, held to its inputs by sha256)green
selfaudit: the mutations (phase 3)the self-audit of cert-machine, phase 3: for every register row of a built family, mutants derived from the row's pinned record entry by one named transformation of the pre-registration's class table — FALSE ones witnessed by a standard-library script that shares no code with the decider (the violated condition printed), TRUE ones by an invariance, MALFORMED ones by shape — each decided by the row's own decider and by a double-precision checker at τ = 1e-6, 1e-9, 1e-12; outcomes (as required, FALSE CERTIFICATION, FALSE REFUTATION, refused, DISCARDED, not as required) derived from truth, witness and word; the witness's red controls every run (no violation on any original or TRUE mutant, one on every coefficient-plus-one mutant); the check holds the record to its pins and re-derives every outcome, total and finding from the stored fields · the red controls are the witness'sgreen
selfaudit: the run (phase 2)the self-audit of cert-machine, phase 2: every command of the rerun kit run on this laptop under /usr/bin/time -l, one process at a time, under two pre-registered profiles — portable (a 60 s wall enforced by the runner; over the cap REFUSED: resources) and extended (no cap) — twice each, cold then warm, never averaged: wall, user+sys CPU, peak resident set, the record's bytes, the exit, the word (the register rebuilt from the re-derived record, its rows compared), the sha256 after, the leaf diff against the pin split into the declared stamps and the rest, cold diffed against warm; every tracked file a run wrote restored to its pin and verified; the check holds the record to the files on disk (the pre-registration, the inventory, the register, the kit, every record pin) and re-derives its totals and findings from the runs · 0 red controls (a measurement, held to its inputs by sha256)green
selfaudit: the inventory (phase 1)the self-audit of cert-machine (pre-registered 2026-10-20, notes/selfaudit-preregistration-2026-10-20.md), phase 1: the inventory of what exists before anything is measured — per register row and per record, the re-derive command, the standard-library verifier and the second implementation from the rerun kit, the kit's measured seconds and whether the re-derivation came back byte-identical, the per-row timing field, and whether the row is mutable under the pre-registration's class table or why not; every field derived from the register, the kit, the kit's run record and the records, the class table the pre-registration's; a register record the table does not name refuses · 0 red controls (a count, held to the pre-registration by its sha256)green
fei C71 decided twice (planted claims)the registry's C71 > 6.521845710923046575 re-decided from the n = 18 truth table by a second implementation sharing no code with instruments/fei/fei.py (JavaScript BigInt: the spectrum in integers with 52 coefficients re-summed from the definition, I = 261/128 by the spectrum and again by the edge boundary, H in closed form 15379/1024 − (41067/32768) log2 3 − (225/8192) log2 5 − (1089/2048) log2 11 − (33573/32768) log2 19 with the logarithms from the atanh series rounded outward) and compared with the record, which holds fei.py run beside it (its ledger row re-derived field for field, the two signed spectra identical) and an Arb reference at 1024 bits from fei.py's spectrum inside the 512-bit JS enclosure; twelve PLANTED CLAIMS of known truth decided by both — bars one unit above and below the ledger's enclosure (refuted, certified), bars 10^-75 either side of the value (decided at 512 bits, refused at 128 bits and by fei.py's 60 digits), majority of three below 4 (certified) and at 4 (refuted by both), a flipped bit, the same flip re-signed and so unbalanced, a contradicted I, a mask beyond 2^n and a dictator (all refused), a swapped pair breaking monotonicity (refuted) · 9 red controls, 3 true claims that must certifygreen
entropy deciders vs Arbthe entropy deciders' arithmetic — instruments/bigfloat as sumdiff and twolaw.js call it (fromRatio, the four operations, log, ln2, −p ln p, entropy, the ratio, the two-law mix, the printed digits) and Python's decimal as verify_sumdiff.py and verify_twolaw.py (120 digits) and fei.py (60 digits) call it (outward, ln_out, the directed contexts, entropy, ratio, ln_iv, decide) — run through the modules' real functions on a seeded sample of random and adversarial inputs (p in (0, 1] over denominators to 10^3000, p = 1, p near 0 and 1, the log's 3/2 edge, laws in all three certificate encodings, two-law certificates, Boolean functions) and on the registry's own certificates, every enclosure required to contain the exact value Arb (python-flint) computes at 256 bits and up; every malformed input required to be refused and every baseline to decide · 7 red controls (planted nearest-rounded logs, enclosures shrunk by one unit in the last place, each of which Arb must catch) · the declared-findings list is empty since 2026-10-19 (the first run's seventeen, fixed, stay in the record as foundAtPin), so any printed miss or decided malformed input fails; the fei recorder cross-check fails the run outright; the full run is certs/entropy-arb-audit.jsongreen
paper references (check-bib)no reference in the method paper can be invented or go stale unnoticed: every BibTeX entry must carry a DOI, an arXiv identifier or a URL, and must have a row in corpus/bib/ written by a run that resolved it at its source (Crossref, DataCite, the arXiv API or a fetch) with the title the source holds matching the entry's; the offline check refuses an entry with no verified row, an identifier changed since verification, a title changed since verification, or a title the source did not match · 3 red controls (an invented DOI, a title altered after verification, an entry with no identifier)green
claimbox lift (the Riemann records)the fourth companion paper (riemann-finite-layer) reads its numbers from copies of claimbox's records and pinned corpus lifted by LIFT-claimbox.json — the claim-machine put to the 2026 Riemann-hypothesis story: 65 printed sentences, 10 read; the one finite certificate (zeta23's 256 integer enclosures) decided from the bytes; the planted claims; the mathematician's claims; the recall at scale — every copy held byte for byte to PROVENANCE-claimbox.json, which names the claimbox commit, no patch allowed, and the paper's macros regenerated identically by tools/paper-numbers/riemann-finite-layer.js, which re-derives the exact values it prints over BigInt rationals and refuses when a record no longer supports a sentencegreen
kissing ledgerD4 (24) and E8 (240) kissing witnesses re-proved from generated bytes every run — E8's 6,720 exact contacts equal the textbook 240·56/2; the AI-era dimension-11 ladder re-walked from pinned corpus bytes, one Station 604 re-certified LIVE in Z[sqrt2]; the quadratic tower (Z[sqrt3], Q(sqrt2, sqrt3), Z[sqrt5]) with the icosahedron's 12 as its calibration, and Kravatskiy's dimension 18 rebuilt from its pinned JSON with tier B decided against all 8,358 vectors · 18 red controls (the mixed-sign sqrt2 comparator, decimal-literal exactness, a square radicand refused, a forced tie that must throw, a 13th sphere beside the icosahedron, a tier-B sign flipped, a tier-B point turned by 30 degrees, and the dimension-11 forgeries)green
delta3 (the twelve-block theorem)δ₃ = 117/2192, ported from frontier-apps 2026-10-05 and re-decided by a CLEAN-ROOM verifier (written from the theorem note and the file format alone, before the claimant's code entered the tree): φ*, g*, h and its zeros exact; Q(φ*) = −5/137 from block-pair areas; every cell area by two exact routes that must agree; the bathtub constants; the five certificates with S + εI and P proved semidefinite exactly (dyadic Cholesky witness + exact diagonal dominance); the cover of [0, ½]; PSD unit checks (a float-Cholesky-succeeds indefinite matrix refused, zero minors refused) · 40 red controls: raised bounds (1e−3, 1e−6), dropped triangles, θ all 0 or 1, widened slabs, ε zeroed or inflated, grids missing an edge, the inner radius doubled, an overspent budget, dropped multipliers, missing regions, and single planted entries off by 2^−100 (negative μ, κ, ν; a sign-violating or repeated-index triangle; θ outside [0,1]; an unknown form; a malformed rational)green
delta4 (the k = 4 scout)Whether the δ₃ centring carries to 4-term progressions, decided exactly: the functional's decomposition identity; BCG's 36-block value equal to their printed rational; h₄ ≥ 0, zero exactly at the 35 edges; the edge Hessian equal to exact second differences and positive definite (exact LDLᵀ); Lu–Peng's mod-11 quadratic-residue colouring at 1/66 and 37/2662 exactly · 7 red controls: a block length +1, a planted negative h₄ value, a non-stationary colouring, a sign-flipped Hessian entry, the local term without its cubic and quartic parts, a swapped quadratic residue, a pair term at the wrong gapgreen
easota (the SOTA table)The EinsteinArena / Together AI "new SOTA" table re-decided in exact rationals: the reader, every decider on a closed-form calibration, and reds that must fire — an overlapping pair, a box over the perimeter, a collinear triple, a repeated point, a value above 1, a zero row, a negative value; then the shipped ledger walked (20 rows, 16 WITNESSED, 4 REPAIRED, eight improvements decided real, two suprema certified, two hexagon packings certified in interval arithmetic) and one row re-decided live from the pinned bytes.green
ecbench (contour benchmark)The environmental-contour benchmark (Haselsteiner et al. 2021) re-decided in exact plane geometry: the literal reader, the float-filtered orientation predicate with its proved bound and a planted case where float64 gives the wrong sign, a square's edges and corners ON, a concave shape, and reds that must fire — a bowtie, a square traced twice, a fold, a NaN, a column swap, a point 1e-20 off an edge; Table 1's erfc enclosure against reference values; then the shipped ledger walked (167 pins re-hashed, 150 contours, 176 printed numbers: 173 exact, one within the two boundary points, two not the file's) and four contours re-decided live against the pinned hourly data.green
stereo (rig error budget)The error budget of a stereo-video wave rig as enclosures (instruments/stereo/budget.js over the interval library): a 3-4-5 geometry whose cell closes on the true point with the analytic width, the exact cell never narrower than the textbook linearisation, the bound growing with range, the reach a prefix of its grid, and reds that must fire — a zero baseline, a negative lag, a zero range, a disparity box reaching zero (refused, not clamped), an impossible tolerance; then the Leme 2020 rig's facts as the instrument page states them: every observed RMSE of its Table 1 between the best and worst corners of the budget, and the quoted quantization below the best-case cell.green
breaking (Black Sea waves)The Black Sea breaking-wave table (16,369 events; Zenodo 2026) decided in exact rationals — the literal reader, order statistics as the k-th smallest value, average ranks with ties, Pearson and Spearman as exact r² with r enclosed by integer square roots — and, since 2026-09-17, the paper beside it (Guimarães et al., GRL 10.1029/2026GL122293) read number by number: rounding verdicts, fits through the origin, enclosed moments, the Freedman–Diaconis mode, the 4 % tail; reds that must fire — a NaN, a comma decimal, a reversed line's sign, one literal moved by 1e-17, a printed 3 against 1.376, a Table 1 count moved by one, a bin count that straddles an integer; then the shipped ledger walked and the whole table and paper re-decided live.green
hseva (certified return levels)The paper's six wave-height families written once over an abstract arithmetic, with the gamma family (lnΓ, ψ, ψ′ from their asymptotic series with the first omitted term as a proved bound; the regularized incomplete gamma with a geometric tail) checked against closed forms and against Φ; every score against finite differences of its likelihood and every Hessian against its score; the families nesting where they should (the generalized gamma at α = 1 is the Weibull, at c = 1 the gamma, and tends to the lognormal); the four criteria against an independent float computation; the Prentice likelihood's series form against its direct form and at the lognormal (Q = 0) as an ordinary point; reds that must fire — logarithms skewed to the right refuse the generalized gamma at its lognormal limit with ∂ℓ/∂Q proved negative, a 40,000-point generalized gamma at α = 900 is certified beside that limit, a sample from the exponentiated Weibull's Gumbel regime is certified in (k, θ = λ^k, β = θ ln α) where (α, k, λ) runs off, a family stopped at its boundary blocks a ranking, a saddle is not a maximum, an expected count straddling 5 refuses χ², a location above the data leaves them outside the support, overlapping enclosures refuse a ranking; then the shipped ledger walked (the printed marginals and scipy's verdicts included) and its daily, weekly, monthly and annual blocks re-certified live; and the return-level atlas: the code that wrote it equal, module for module, to the code on disk; no certified cell touched by the hindcast's sea-ice field; every cell file against its sha256; every DECIDED choice and every threshold-fitter choice re-checked from its recorded enclosures, and any too close to re-decide from eight printed digits re-derived live; a sample of cells re-derived live and compared with the ledger as JSON, character for character; the report's nodes decided alike by both ledgers; the paper's regional claims re-derived, and the claims' three verdicts checked against brute force over every way the refused cells could fall. Also: a climb in Gumbel coordinates survives a trial step outside the regime, and the Gumbel-coordinate quantile holds past α = 10³⁰⁸.green
printed fits (one decision)THE decision of a fit someone printed (playground/return-level-check/printed.js), one module for the return-level check and the atlas: on the Campos cell's 384 monthly maxima the certified Weibull and GEV printed to four decimals come back REPRODUCED and fifteen digits CONSISTENT, and neither page holds a ladder of its own; the printed design table of Bhaskaran et al. (2023) decided against the atlas's nearest cells, certs/design-table-audit.json, re-derived whole; the red × of an exhibited object (exhibited.js, one list for both pages) placed for every code printed.js returns · 8 red controls (a scale 2% off is OFF THE MAXIMUM, a negative shape NOT A MEMBER OF THE FAMILY, a GEV ending below the record and a location above every value OUTSIDE ITS SUPPORT, digits that are not a plain decimal refused, the table's GEV k read as ξ without its sign change giving another verdict, the record's objects kept in ink on another record's cell, NOT THE CERTIFIED FIT never red)green
design-height handleD14 (2026-10-29), WARRANT's R26: the return-level check's design height H driven in Chrome — before a run a hollow handle and NEEDS DATA; the Campos preset certified on the monthly block in the tab; H typed, dragged with the pointer and stepped from the keyboard, and after every move the decided flip ticks where they were to the hundredth of a pixel while the chosen line and the handle sit at H; every row reads HOLDS exactly at or past its printed flip, the decided family's word changing at holdsFrom and not a centimetre below; the 1000-year wave a new ruler; no sideways scroll at 1440 or 390 · 1 red control (a decided tick moved by hand is caught by the same comparison)green
grammar ε handlethe operator's ruling of 2026-10-30 (D14's grammar, WARRANT's R26): /grammar/'s √x hero with its ε handle driven in Chrome at 1440 and 390 — scripts off, the handle hidden and the hero as built; scripts on, at ε = 0 the hero the static figure byte for byte; ε dragged, stepped across the whole ruler from the keyboard and typed, and after every move no decided mark moved by a hundredth of a pixel, the knob and its line at ε, the word, the ×'s place and its words tools/grammar-hero.js's decide(); HOLDS exactly from the printed flip; no sideways scroll · 1 red control (a decided mark moved by hand is caught)green
sumdiff (registry asterisks)the optimization-constants registry's asterisked sum-difference bounds C3b >= 1.77898884 and C3c >= 1.6747338950414058 decided from their entropy certificates: exact BigInt pushforwards and outward-rounded bigfloat logarithms, calibrated on laws whose ratio is exactly 1, every file re-hashed against its pin, the ledger re-derived and a second implementation in the Python standard library agreeing · 7 red controls (a reader that rounds the 320-digit numerators, weights summing to 1 + 10^-320, a negative weight, a repeated point, a false bound that is the same double as the true one, too few bits to decide, an exact equality)green
fueleu penalty arithmeticRegulation (EU) 2023/1805 intensity limits, Annex IV penalty and blend-flip thresholds in exact rationals — constants transcribed from pinned OJ bytes; the 1e-9 boundary forgery flips the verdict · 4 red controlsgreen
glide bandcertified engine-out reach from interval inputs; geodesy calibrated on the meridian degree and JFK-LAX, 4000-draw containment, and the point-estimate method itself run as a red · 4 red controlsgreen
design system + chartspalette validated against the dataviz checks in BOTH modes and under three CVD simulations; the token block, the figure kit and the escaped-tag scanner · 6 red controlsgreen
wiringthe registries nobody was checking: every report builder reachable from make reports, the two battery lists in agreement, and no built page declaring a font outside the token block · 4 red controlsgreen
machine-claims-100 (pins)the hundred machine claims pre-registered 2026-10-02 (the rerun program's phase 4; corpus/machine-claims-100.json): 100 rows in ten pools chosen by rule, every pinned source re-hashed (the AlphaTensor archives, the AlphaEvolve notebook, the 29 EinsteinArena bests of 2026-10-02, the Station and FunSearch files, the three registry entries, the ten problem pages, the Erdős #513 page), the declared pool sizes held, no verdict field anywhere, and the manifest equal to what the rules rebuild — so no row can be added, dropped or re-chosen by hand after the fact · 0 red controls (a pin that moves refuses by itself)green
mc100 (the deciding runs)phase 4b of the rerun program: the hundred pre-registered machine claims decided pool by pool, each run its own ledger (certs/mc100-<pool>.json) read by the register. Every ledger held to the manifest (every row the pool's rule named, once, from bytes that hash to the pin); the tensor pools (AlphaTensor over Q and over F2, the AlphaEvolve notebook's part A) re-decided from the ledgers' own entries and re-derived by tools/verify_strassen.py in stdlib Python; one key per AlphaTensor archive re-read live; the notebook reader's three rings, the already-decided rank-48 written byte-identically, the <4,4,8> rebuilt from its printed recipe · red controls: a forged AlphaTensor coefficient (instrument and stdlib verifier), an F2 scheme over Q, the OLD converter refusing <3,4,7> over 0.5*C and every real array, a 0.5*Z entry forged to -0.25, half-integers under a Z heading, a complex array under a 0.5*Z heading, the <4,4,8> rebuild with its blocks crossed. The EinsteinArena wave (kissing through instruments/kissing, the six easota shapes): every one of the pool's 29 rows decided or listed with what it needs; eight rows re-decided LIVE from the pinned bytes; the open rungs cross-checked against the kissing ledger's own measurement; the 605 and 842 decided NOT solutions with the platform's penalty reproduced to every printed digit · red controls: the 594 with a vector repeated, the 605's score moved by 1e-11, a radius grown by 1e-9, an overlap value above 1, a literal JSON.parse would round · 14 red controlsgreen
stale claims (record -> page)every published page/row pair re-read against the record behind it, so a number that moved in a record and not on the page refuses the build. It ran in make test and NOT here until 2026-09-04, which made this list’s own green count a claim over an incomplete set — the defect check-wiring exists to catch, sitting just outside its battery-name pattern.green
render (what a page shows)the gate that looks at the page instead of the source: builder leaks (an array stringified with commas between its elements, a cell reading null, an uninterpolated template literal), every classed mark inside a figure resolving to a paint, and INK — each figure screenshotted and its non-ground pixels counted against design/render-baseline.json. Its first run found 1,337 stray commas, 12 kinds of invisible SVG element and two null cells on live pages; and (2026-10-28) no page may throw while it loads — added when /instruments/rewire and the /instruments/graph editor were found mounting nothing since 2026-09-15, every gate green · 9 red controlsgreen
measure (the layout ruler)the geometry of all 66 built pages driven in headless Chrome at 1440 and 390: how many left edges the content sits on, how far the page scrolls sideways, what leaves the viewport unreachably, and what is clipped inside its own box — compared against design/measure-baseline.json, which only ratchets down · 7 red controls (three planted layouts, a scroll table that must NOT read as an escape, a clean page that must measure one spine, and the ratchet itself attacked three ways)green
copy census (hub vocabulary)the words design/COPY.md keeps off the public hubs and off every report's first 120 words, counted on the built site and compared against design/copy-baseline.json, which only turns down · 3 red controls (a planted hub must count, a kept word must not, a rise must refuse)green
grammar (the dash census)the ink rule, ported from frontier-apps and gated for the first time on 2026-09-05: dash carries STANDING and nothing else, and the patterns a built page may show are the closed list in design/grammar.js. Its first run returned TWENTY-FIVE distinct patterns — playground/warrant.js was deriving the dash from the STROKE WIDTH, so every width minted one, including "1.04 5.460000000000001" in published HTML. It also found the pair 6-4 and 1.6-3.4 live, the exact pair frontier records as the one time dash was used for identity instead of provenance. Drift ratchets against design/grammar-baseline.json and may only shrink; exemptions (arc-length and flow-animation uses of stroke-dasharray) are declared with a reason, never inferredgreen
style (the stylesheet gate)what every built page's CSS is made of, ratcheted against design/style-baseline.json: style attributes (target zero — a datum is an SVG mark, a rhythm is a class), var() names the page cannot resolve (how every report shipped square corners for ten days, 2026-09-05 to -15, with every gate green), literal fallbacks, extra <style> blocks, and literal values where a token exists · 21 red controlsgreen
skyaudit appsegmentation and mission calibration for the pinned ADS-B daygreen
window instrumentoperating windows decided exactly: workability counted by hand on paper-sized series (inclusive limits, gaps UNDETERMINED, months by start time), knots converted exactly (1 kn = 463/900 m/s), the four verdicts (LIBERADA, VETADA with its witness, INDEFINIDA with the flip threshold, SEM DADOS naming what is not forecast) on hand-built bands; the campaign planner (N operations back to back from a start date, every year of a hindcast, order-statistic quantiles) counted by hand and cross-checked against workability.js · 8 red controls (a TR off the step, a float limit, a unit mismatch, a float band edge, an unknown variable, a window with no step, a campaign the record cannot finish left censored, 29 February / a float limit / an off-grid TR refused)green
janela (offshore windows)the operations agree with the Capitania acts they cite (every decided value printed there, every act pinned), DNV Table 4-1 read exactly, the 32-year workability record re-derived from the sha-checked hindcast, the speed enclosure, the berth rule withholding the open-sea Hs, the placar's admission (one trial per target day, looks at 30·2^j, sticky), the regions never folded in, a pruned proposer withheld, the two providers' union (never a flip, only wider), NOAA's ledger rows and the decision-level grading (held, broke, unseen, waiting) · 22 red controlsgreen
swell (the sea of Florianópolis, beach by beach)the public beach app on Janela's engine: every lifted byte of the island model re-hashed against apps/swell/data/PINS.json, the 34 beaches placed with probes to 8.8 m or deeper at every ocean beach (frontier's 14 of 21 could never read more than 2.5 m), the breaking height non-decreasing in the sea's size at every beach (so the measured band maps exactly), Guarda do Embaú refused at the model's edge, the lagoon never decided, the wave limits decided by decide.js, the six rules one table whose words name their limits, and the day re-derived from its written bytes · 6 red controls (a texture one byte off its pin, a wrong-index breaking height that falls, a beach moved inside the edge zone, a band one centimetre over the limit, a breaking height and a band edited in the day)green
contraprova gatethe water-injection gate: nine receipts, a Python decimal second implementation at 176 inputs, nine forgeries refusedgreen
decidivel engine4D detectability decided over whole boxes: a Python decimal second implementation, proved extremes checked inside random boxes, a Monte Carlo PROVADO refusedgreen
abatimento kernelabatement potential decided over whole envelopes of premises (multilinear forms, exact corners in BigInt rationals): eight versions, a Python fractions second implementation, double-counting audits, nine forgeries refusedgreen
bilinear certifierbilinear identities over Q and F2green
slp additive circuitsstraight-line programs, additive costgreen
mfg lab (box certifier)the box certifier for the MFG labgreen
monoflow (monotone, not a gradient)the Lasry–Lions monotone flow of the quadratic MFG at seven certified equilibria: the linearised form returns c/2 from the assembled interval Jacobian on every instance, and at five of them an eigenvalue of the flow Jacobian is enclosed with Im μ away from 0 — not a gradient flow under any metric; the closed-form mode at A = 0 is the control · 5 red controlsgreen
aag (the empty region, painted)Alharbi–Ashrafyan–Gomes §3.2 re-decided live: the vanishing set cut into cells that are OCCUPIED, EMPTY or REFUSED (each refused cell contains one of the three exact roots, refused length 4/K at every budget), the two value functions enclosed and distinct, the contact set with and without exit evaluated as intervals, case 2 positive over a γ box · 5 red controlsgreen
maxval (the maximal value function)Gomes–Üçer Theorem 1.8 drawn on an explicit first-order game with a vacuum, built here: the parabolic-bump pair re-verified cell by cell (HJ and transport residuals enclose 0 on the support, strict subsolution off it), the maximal value function enclosed on every vacuum cell between the free Hopf–Lax value and the cheapest path proved clear of the support, u* ≥ u wherever both are decided · 5 red controlsgreen
frontier (the concentration frontier, measured)the congestion-MFG certifier's refusal frontier re-derived from three sha-pinned data files lifted from the source lab: six monotone σ ladders at N = 14 with bisected A⋆ brackets and named refusals, A⋆ rising 5–10 % from N = 14 to 40, the N-free ceiling A_rec bit-identical across N, ratios below 1; a pin that moves refuses · 5 red controlsgreen
price (the clearing band)Gomes–Saúde price formation (arXiv:1807.07088), linear-quadratic: the clearing price closed in exact rationals on the source lab's supply scenario — Π_n = −Θ and Ξ(T) = x̄₀ + ∫Q as rational identities, a ±15 % forecast box turned into a price band attained at its corners with twenty interior paths inside it, the closed form against an independent Riccati route to 1e−14 — and the lab's finite-difference kernel ported bit for bit and measured: it clears in the controls while 12 % of the day's energy vanishes at its wall; flux clearing conserves and converges at first order · 5 red controlsgreen
agtable (their tables, re-decided)Ashrafyan–Gomes Tables 1 and 2 (arXiv:2403.02785, the semi-Lagrangian price-formation scheme): the two analytic solutions the paper tests against enclosed in interval arithmetic (a new second-order interval jet, instruments/interval/taylor2.js, bounds every integral's remainder), the clearing identity ϖ + a₁ + 2a₂K = −Q decided at 21 times, the scheme written from the paper and run on the paper's meshes: the price column of test 1 reproduced to its two digits at every mesh, test 2 reproduced except where the port does better, the tolerance found to be 39 % of the finest printed number, and the printed initial density shown not to be a density as printed · 5 red controlsgreen
regatlas (the regularization atlas)Ferreira–Gomes–Üçer's p-Laplacian regularization (arXiv:2506.21212, operator (3.1)) on the one-dimensional discounted first-order MFG with H = |p|²/2 − m: a 10 × 5 atlas in (A, ε), every cell a unique classical even solution with positive density enclosed by a radii polynomial in a derivative-weighted ℓ¹ space (a NEW kernel: Sturm–Liouville linearisation, explicit columns to 6N, analytic tail) or refused by name; ε = 0 certifies as far as any ε > 0 — the game is elliptic after eliminating m — and the distance ‖u_ε − u_0‖ is decided as a bracket, ≈ ε at small ε · 5 red controlsgreen
hbar (the effective Hamiltonian band)the one-dimensional effective Hamiltonian H̄(P) of Gomes–Yang's test case (arXiv:1810.03483 §6) enclosed as a band: P₀ = ∫√(2(1 − V)) enclosed around 4/π, the flat part decided exactly, the rotating part bracketed by bisection on a midpoint rule whose remainder a second-order interval jet bounds, the degeneracy at P₀ met as a widening band and one undecided point, the Mather density enclosed where it rotates; Table 1's separable value enclosed below 1e−6 with the quoted Gomes–Oberman 4.4099660 found ABOVE it, Table 2's exact value decided as 1 · 5 red controlsgreen
afg (first-order MFG by the current)Almulla–Ferreira–Gomes (1.1), first order, in the case the paper says has no closed form: the record re-derived live (two Krawczyk boxes on (j, H̄), rigorous quadrature throughout) and compared byte for byte; the b = 0 control must contain the paper's closed form · 6 red controlsgreen
mfg2p lab (two populations)two-population equilibriagreen
mfg-cap census (EXACTLY-n)Krawczyk exhaustion census of the even Galerkin mfg-cap system: EXACTLY 3 solutions at c=-12 re-proved live at N=2 every run, records walked for N=2..5, honest box-bounded truncation scope asserted · 3 red controls (midpoint split refuses at the constant solution’s exact coordinates, starved budget, corrupted kernel)green
erdos290 lean batteryclosed forms equal enumeration exactly for l <= 12; the broken-EGF red must firegreen
critcount (certified peak counts)critical-point counts of even cosine series over an enclosure ball — count derived from CERTIFIED region signs only, outward coefficient products, ball Lipschitz folded into the cell pad; closed-form two/three-harmonic calibrations and the terra record walk · 4 red controls (mutated boundary, zeroed ball pad, degenerate curvature, two critical points in one region — each fires)green
engine + familiesred controls on screen and certifiergreen
transit (one-sided enclosure)a certified enclosure on the planet-to-star radius ratio from Kepler short-cadence photometry, assuming only that the star is a nonnegative brightness profile (and, on the monotone rung, does not brighten outward): feasibility is a hull question, the witness is re-checked bin by bin and the Farkas certificate closed by interval subdivision, so nothing in the optimiser is trusted. The interval is one-sided — light can hide in the core the planet never reaches and cannot un-hide — and the 19 published TrES-2 b values, which disagree by 25x a typical bar, all sit inside it. Ported from frontier-apps 2026-09-05: 36 + 22 cases, 7 reds including the deliberately broken control · 8 red controlsgreen
occultation (convex bracket)what five occultation chords and 23 stations that saw nothing force on the size of 2002 GZ32, assuming only a convex silhouette — the chord-length function is concave, so the floor is a concave hull and the ceiling is concavity read backwards, every area an exact rational: Deq in [168.3, 267.5] km at one sigma, the published ellipse and the radiometric size both inside, no convex body at face value, and the misses worth 309 km of ceiling. Ported from frontier-apps 2026-09-05; 20 cases, 6 reds, the record and the paper figures rebuilt in a scratch copy and matched byte for byte · 7 red controlsgreen
pqc geometry (SVP audit)the SVP-challenge hall of fame audited in exact arithmetic, ported from frontier-apps 2026-09-05 under a charter that says AUDIT ONLY: 37 records decided against 14 determinants proved entry by entry, pi bracketed by Machin, the predicate raised to the n-th power in BigInt — 0 published ratios inconsistent with a true norm that rounds to the printed one, and ONE row (dim 119, seed 0) undecidable from the printed norm. Every offline script re-run in a scratch copy against the pinned outputs; the network fetch is never run; at the tightest record 2904 is admissible and 2905 refused · 1 red controlgreen
interval · transcendental enclosurethe enclosure form of exp/log/sin/cos: every bracket contains the true valuegreen
interval · quadraturethe midpoint rule with its remainder as an interval on [0,1]: ∫x², ∫sin², ∫e^{sin} = I₀(1) contained; the remainder deleted must miss · 3 red controlsgreen
cert-unit port + wiringthe typed wire: a float is refused at a deciding port, a hypothesis mismatch is refused at the boundary, and the two read-only renderers draw the pinned lattice-claims record — 135 rollouts, four refutations · 15 checksgreen
cert-unit reds (6 declared)six declared forgeries the runtime must refuse, each one a real failure the bench madegreen
cert-unit editor = enginethe rewirable editor enforces exactly the rules node test.mjs runs: a refused wire in the page is the same refusal, in the same wordsgreen
cert-unit replay (TERRA 39)every certified sigma-band cell on disk re-derived through the typed runtime: 39 cells identically, 0 disagreed, worst relative difference 0.00e+0; the process exits non-zero on any disagreementgreen
wiring concord (JS vs Python)cert-machine holds TWO independent implementations of the same wiring rules — instruments/cert-unit/graph.mjs in JavaScript and instruments/wiring/lattice_claims/wiring.py in Python, written for different jobs and neither derived from the other. The Python carries the comment 'THE FLOAT FIREBREAK, in the same words the other engine uses', which is a claim, and a claim is the kind of thing this repository checks rather than repeats. So the same violation is planted in both and both must REFUSE, in the same words. The planted wiring is built from the Python CATALOGUE rather than from memory — the first version guessed a port name and got a refusal for the wrong reason, which would have read as disagreement when it was a mistake in the question · 1 red controlgreen
cryptids: arm H, the second implementationgoogle-deepmind/cryptids at commit 664cd039 audited by hand (tools/run-cryptids.py: the finite layer under its Lean proofs — five tables derived from three upstream formats, digests, state and cell counts, the Goldbach embedding, every bootstrap and lockstep checkpoint the producer's checker asserts and the ones it skips — one of three words per claim with the file, its digest and the quote) recomputed in JavaScript by a second implementation sharing no code: the quick rows every run, the ten-million-step replays with --full · 0 red controls (a comparison with the record, held to the pinned bytes)green
cryptids: the benchmark (arm H vs arm C)the cryptids audit run twice — by hand and through claimbox (a reader, the grammar's machine family, the receiver's decider for machines instruments/claimbox/tm.py with tm.js held to it) — compared on the eight pre-registered metrics (notes/cryptids-benchmark-preregistration-2026-10-23.md): claims stated, pins, refusals with a rule, planted-defect recall, concordance over the paired claims, cost, what an outsider must trust, the producer's checker's gaps; recomputed from the two arms' records and refused unless identical · 0 red controls (a comparison of records)green
selfaudit: outside mutantsthe self-audit's outside mutant set (maximusrufus, cert-machine#1): seven boundary mutants of the EinsteinArena circles-rectangle rows, each the smallest nextafter move breaking exactly one constraint under the strict reading, pinned as received and decided by the ledger's circles() path; refuses if any is certified or its target is not located, or if a starting base is not a witnessgreen
foreign zones (pinned bytes)every foreign zone of site/ (design/zones.js; site/machinidae/, another repository's build) holds exactly the bytes its pin records (corpus/zones/<name>.json, written by tools/publish-zone.js): a hand copy, a hand edit or a missing file refuses; a zone not yet published passesgreen
stylesheet re-bake at syncdesign/sheet.js (2026-10-29): the site's part of every page's <style> is written between markers and composed again at sync by design/refresh.js, so a template or grammar stylesheet change is one sync instead of a run of every builder; the self-test renders a page, tampers its site css and must re-bake it back byte for byte, keeps the page's own css, and returns a page without markers untouched · 1 red controlgreen
marks (pointed numbers re-read)D10 (2026-10-29): every printed number that names its record (data-rec, playground/warrant.js W.val) is re-read from the record by design/record.js and printed again by its own format; a page whose text differs, whose pointer no longer resolves, or whose decided value was cut to nearest where an end was needed is refused · 4 red controls (a dangling pointer, an inward-rounded upper end, a wrong digit, a decided value cut to nearest)green
ETH TSavo statement checksthe statement checks of the TSavo bridge replay on the pinned copy corpus/eth-refutation/tsavo/src: the tree against tsavo/pins.json, OpenAI's pinned challenge rebuilt byte for byte from OpenAIStatement.lean (and its 23 statement lines never naming hk), BridgeChallenge.lean exactly Claim → ETHIsFalse with two imports, the Comparator config, the census · one red control per check (26), each refused by the check it targets, and the kept run's as-built lakefile classified with 3 tampered lakefiles refusedgreen
ETH TSavo recordcerts/eth-tsavo-bridge.json is what the kept runs of .github/workflows/eth-tsavo.yml decide (corpus/eth-refutation/tsavo/runs/): the rule re-applied to the facts on disk — the bytes against the pins, Comparator and both kernels, lake build Bridge, the axiom printgreen
ETH Hawkley statement checksthe statement checks of the Hawkley bridge replay on the pinned copy corpus/eth-refutation/hawkley/src (thinkthoughts/math @ d6b79b7d1, a fork of openai/math, RPI-378.3d: ¬ OAI.ParityWL.Complexity.PositiveRateETH → MainResults.ETHIsFalse): the 40-file delta against hawkley/pins.json, both copies of Anthropic's MainResults.lean against the eth pin, the challenge's ParityLifts.lean rebuilt byte for byte from the three pinned OpenAI slices, the challenge text, the config (nanoda off as shipped), the census, OpenAI's pinned lakefile plus the six-line block, the import closure · 32 red controlsgreen
ETH Hawkley recordcerts/eth-hawkley-bridge.json is what the kept runs of .github/workflows/eth-hawkley.yml decide (corpus/eth-refutation/hawkley/runs/): the rule re-applied to the facts on disk — git's facts, the bytes against the pins, lake update against the pinned manifest, Comparator and both kernels, lake build, the axiom printgreen
ETH Hawkley heavy linkcerts/eth-hawkley-heavy.json is what the imported RunPod run of tools/runpod-eth-hawkley.sh decides (corpus/eth-refutation/hawkley/runs/runpod-dumwx3gz82jcvf/): Hawkley's OAI.Bridges.ETH.not_positiveRateETH from OpenAI's original_sat_main — the clone and every file at the pins, lake update moving no dependency, the claimant's build of OpenAI's family-378 proof plus the bridge, #print axioms from our file, nanoda on the exported closure with its negative control, leanchecker --fresh over the modulegreen
black hole: the shadow edge (M87*, Phase 0)the decided layer of the black hole instrument (pre-registered in notes/black-hole-phase0-preregistration-2026-10-31.md before any enclosure): the Kerr critical curve (Bardeen 1973) enclosed in outward-rounded interval arithmetic over every spin a in [0, 0.998] at the camera's 17 degrees (and its mean diameter over 13.9-20.5 degrees; W, H and the mean diameter at the viewer's two views off 17 degrees, 45 and 80 at a = 47/50, Phase 2), the photon-orbit radii by exact rational bisection, b_c = sqrt 27 as an exact double root, theta_g = GM/(c^2 D) per published M87* mass row as an exact rational (one au at one Mpc is one microarcsecond), the predicted shadow in microarcseconds, its ratio to the EHT ring (COMPARED: the ring-to-shadow factor is a GRMHD-calibrated premise) and the ISCO clock in days; certs/bh-shadow.json refused unless it re-derives identically and a second decider with no shared code (instruments/kerr/second.py: Python decimal with directed rounding) agrees on every core quantity · red controls: sqrt 26 for sqrt 27, b^2 = 28 as a double root, a mass moved outside its box, spins 0.999, 1 and 1.2 (REFUSED), two forged diameters, the a -> 0 limit 2 sqrt 27 and the a -> -a mirror, and a tampered mass row must change the recordgreen
black hole: the lensing maps (M87*, Phase 1)the COMPUTED layer of the black hole instrument (pre-registered in the same note, section Phase 1, before any ray was traced): 512 x 512 lensing maps over +-20 M at 17 degrees for spins 0, 1/2, 47/50 and 499/500, and at 45 and 80 degrees for 47/50 (the viewer's views off M87*'s, pre-registered in its Phase 2 section) (corpus/bh-maps/, half floats, sha256 in the manifest), each pixel's Kerr null geodesic traced backward in double precision (instruments/kerr/rays.js: Mino-time Dormand-Prince, bit-reproducible) with the n = 0, 1, 2 equatorial crossings (r_s, phi_s, g for a prograde Keplerian disk cut at the ISCO, ASSUMED) and the fate; certs/bh-maps-check.json refused unless it re-derives identically and the maps AGREE with the decided layer: the pins, a re-traced sample bit-identical, every crossing against Gralla & Lupsasca's closed form (angular Mino time; the master equation with an independent radial quadrature) within 1e-6 M, rays at (1 -+ 1e-6) times points proven on Phase 0's critical curve captured and escaping, the map's captured pixels exactly the inside of the decided curve, Schwarzschild's edge at sqrt 27, and the photon-ring images converging to the curve (e^-pi at a = 0) · red controls: a wrong-spin map, a wrong-inclination map, wrong-spin rays at the decided points, a flipped texture byte, a planted sqrt 26, the 45-degree map against the 80-degree curve and 45-degree rays at the 80-degree decided points must all DISAGREEgreen
WSP weights (two deciders)MIT CSAIL's Weight-Space Programming edit of Qwen3.5-0.8B (reports/weight-space-programming.html) decided from the bytes of the two checkpoints by two implementations sharing no code (tools/wsp-weights.js, instruments/wsp/weights.py; the claimants' scripts read, never run): the tensor sets, the two tensors that differ, the 130,188 bfloat16 entries whose bits differ (the post prints 131,072), their 64 columns per tensor against the run's own manifest, the fraction of four parameter counts as exact rationals (0.016% only over a round 0.8 B), the printed sha256s, and the rank-1 witness checked entry by entry in binary32 with round-to-nearest-even to bfloat16 (REFUSED: the best witness misses 107 entries); the record certs/wsp-weights.json re-derived where the 2.5 GB inputs are cached, its sources checked where not · 2 red controls (a bit flipped in a third tensor, the layer-15 delta doubled)green
WSP second grader (JS)the Weight-Space Programming answers graded a second time by a JavaScript grader (instruments/wsp/grade.js) written from the convention of instruments/wsp/grade.py and sharing no code with it: every (gold, prediction) pair the Python grader graded in certs/wsp-regrade.json and certs/wsp-baseline.json re-graded and the verdict words compared (7,440 pairs over the three baseline conditions and the released answers, 0 disagreements after the one fix of 3 November: "3i" read as 0 + 3i, not as text), the extraction compared on the cached baseline texts; three red controls and a planted flip of one recorded verdict; the record certs/wsp-grade-second.json re-derivedgreen
MacMahon kernel (two kernels)the kernel lane of the MacMahon classification (Jason Davies, 2026-11-01): the repository at the commit the Palomar registry names, built with its own toolchain (Lean v4.35.0, Mathlib v4.35.0) on a GitHub runner and audited by leanprover/comparator v4.35.0 with nanoda on, on the configuration it ships (ten theorems; Challenge.lean importing only Mathlib) — both kernels accept, "Your solution is okay!", our own #print axioms names only propext, Classical.choice, Quot.sound; the statement reading (Challenge.lean against the paper's Theorem 1: MATCHES) kept apart as read; the record certs/macmahon-kernel.json re-read from the pinned artifact copy (corpus/macmahon/kernel-run)green
x^x = y (every bracket re-decided)the x^x = y report (reports/xx.html): the copies LIFT-claimbox.json made into corpus/claimbox-xx re-hashed against PROVENANCE-claimbox.json, then every bracket an AI model proposed and claimbox stated re-decided by one exact integer comparison with code that shares nothing with claimbox or the receiver (p^p against N^q·q^p; at y = k^k, k^k against N), the eight x^x = 64 claims with them (two of them comparisons of 2.6-million-digit integers), and the ledger refused unless certs/xx-ledger.json re-derives identically and claimbox's word agrees on every claim · red controls: the 8 planted wrong brackets and the 2 planted x^x = 64 bounds must be REFUTED, 216 mutants (each certified fraction one unit the wrong way, each whole-number bound made strict) must flip, a forged claimbox word must be caught, a fraction at or below 1 must be refused, cert-machine's own claim that the root of x^x = 64 is transcendental must come out REFUSED, and the Lean proof of the reduction (lean/xx-reduction) must have the bytes certs/xx-reduction-lean.json recorded from its green rungreen
WSP answers re-gradedthe Weight-Space Programming MATH-500 results re-graded exactly (instruments/wsp/grade.py: three-valued, standard library) from the released outputs — every first-sample answer of the post's unedited and 50-pass runs, the 440 released texts re-extracted, every flag re-summed — and compared with the claimants' math-verify flags: 0 disagreements on the decided answers; the record certs/wsp-regrade.json re-derived from the pinned inputsgreen
WSP baseline (Stage 3)the Weight-Space Programming baseline, Stage 3 (notes/wsp-stage3-preregistration-2026-11-02.md, amended 11-03 before any no-edit card-settings token): the unedited Qwen3.5-0.8B generated on MATH-500 under the pre-registered conditions on one rented GPU (tools/runpod-wsp-baseline.sh, vLLM 0.33.0, the inputs refused unless they match corpus/wsp/PINS.json), every text brought to the desk (tools/import-runpod-wsp.js, sha256-verified) and graded by instruments/wsp/grade.py; the record certs/wsp-baseline.json re-derived from the cached texts where present (its pins and grader checked where not), the pre-registered reading applied as writtengreen
WSP side claims (M2-M5)the Weight-Space Programming review's side claims (M2 the dose and its problem sets, M3 Frogger/Freeway, M4 the car network's weights and evaluation, M5 PPO and sycophancy) decided from the authors' released logs alone (RikiyaT/lm_understand-logs @ 4d09ba6d, 190 files pinned; nothing of the claimants' run), the record certs/wsp-side-claims.json re-derivedgreen
Verify Seal (forgeries)Verify Seal (instruments/seal/seal.py, standard library): a salted sha256 commitment to a deterministic archive — SHA256('verify-seal-v1\n' || salt || SHA256(archive)) — opened under 12 planted forgeries (a byte flipped, a wrong, truncated or newline-terminated salt, a file added, removed or renamed, the recorded digest or version edited, a part missing), each REFUTED or REFUSED and none certified; the determinism check (the same contents written another way re-derive the digest), the date rule (an anchor after the claimed date refuses), the unconfirmed-anchor cases and the one-line shell re-derivation; three red controls on a deliberately broken opener; the record certs/seal-battery.json re-derived in a temporary directorygreen
Verify Seal unit teststhe unit tests of instruments/seal/seal.py: the commitment against a hand computation, the strict salt rule (64 lowercase hex and nothing else), the deterministic archive (order, mtimes, modes, owners fixed) and the one-line shell re-derivation against the Python digestgreen
seal registryseals/registry.jsonl, the public second anchor of Verify Seal: every line a digest line (64 lowercase hex, a date, an issue number) and no digest twicegreen
MacMahon witnessesJason Davies's classification of the minimum universal sets of MacMahon cubes (2026-11-01; GPT-6 Astra + Lean 4), the SUFFICIENCY half decided from the released witnesses with our own geometry (instruments/macmahon/check.py, standard library: our 24 proper rotations, our eight corner slots, a perfect matching of cubes to slots; the claimant's rotation indices, slot order, verifier and search ignored or read, never run): the label table lists all 30 varieties once, the ten witnessed sets are the ten two-triangle sets, all 300 witnessed constructions build their target; three red controls (a cube from outside the set, a target with two faces exchanged, reflections admitted); the necessity half (no other 12-multiset, no 11) NOT decided here; the record certs/macmahon-witnesses.json re-derived from corpus/macmahon (pinned)green
AlphaProof Nexus statements (Erdős)Google DeepMind's AlphaProof Nexus: the nine published Erdős proofs' statements re-derived against formal-conjectures at the commit the repository builds against (equal, the answer value included), their fixed definitions verbatim outside the agent's EVOLVE blocks, no shadowing declaration, no kernel-bypassing token, and what formal-conjectures did to each afterwards · 5 red controls (a weakened bound, a flipped answer, a changed definition, a shadowing declaration, a planted axiom)green
claimbox: declared claims (the checker)the declared-claim checker (instruments/claimbox, version 1 of the box): the ten registry-queue claims written as (B, φ) objects — pins, verbatim quote, the printed bar as a rational, the vocabulary read from the kernel audit, the record re-decided against the bar — nine ADMITTED with the records' decisions, one REFUSED on purpose (the claimant's eleven-digit print the record did not decide; the exact value is below it); the one predicate of verdict.js and the checker's Python copy agree on 600 seeded cases · 36 red controls (every refusal kind planted, a forged record with its verdict flipped and with its bar moved, an audit missing an operation) and a green box-domain control; the version-2 YIELD MEASUREMENT re-derives (certs/claimclaimbox-yield.json from the register and instruments/claimbox/yield-table.json: 123 of 132 rows admitted as is, 8 with one named feature, 1 a reading; 0 primitive-expressible); FORMAT 4 (2026-10-30): each input's reading and standing carried into the certificate, the canonical form (one inequality per bar) and its digest, the int64 reading, the Lean kind decided by a kernel lane's pinned record — eight calibration objects (instruments/claimbox/v4: a refusing Lean object, two mutants that must not certify), check.js held to check.py on every object and every format-4 red controlgreen
ledger: sampled replayinstruments/ledger: a watcher's search ledger (hash-chained checkpoints of a Turing machine run, the funnel's chained lines, a claim in the funnel's HIT/RECORD shapes) replayed exactly by two simulators with no shared code (replay.py, replay.js), the word kept only when both decide alike — every stretch replayed CERTIFIES (BB(4) halts at 107, BB(5) runs 200,000 steps; tm.py agrees), a seeded sample never does (REFUSED, the funnel's downgrade, its detection bounds), the recorded decisions re-derived · 14 red controls (a forged row REFUTED with its witness, a row edited without re-chaining, a one-transition mutant, a lazy runner, a hidden halt, two simulators that disagree, …) and the measured detection rate 1 − C(18,5)/C(20,5) on the forgerygreen
AlphaProof Nexus OEIS readingsthe 38 published OEIS statements (44 claimed) as read against their conjectures, re-derived from the pinned readings and translations, with A382590's degeneracy re-computed exactly here (the 2-adic valuation of a(n) from the Lean recurrence)green
janela second verifier (clean-room)every published Janela decision re-decided by a SECOND program, in the Python standard library, written from instruments/window/verify/SPEC.md by an agent that never read the first decider (decide.js, q.js, criteria.js): hand-computed letters on synthetic days, the real day equal letter for letter, the input pins checked · red controls (a flipped published letter, a record whose bytes leave their pin, a place missing, the total off by one)green
janela noaa (WAVEWATCH III reader)Janela's second forecast provider, NOAA's GEFS-Wave (31 members) and GFS-Wave, read by .idx byte range and decoded to exact packed integers — the standard-library half run with no network: the inventory parsed (lengths from the next offset), the band the order statistics 4 and 28 of 31 with the claim 24/32 = 3/4 exactly, messages cut by their own section-0 length · 14 red controls (an inventory from another run or another step, a field absent, a forged GRIB value no integer reproduces, a negative packed integer, a member missing at the node, 30 members, a message from another day, another run hour, another step or another parameter, a truncated message, a length that disagrees with the inventory, bytes that are not GRIB2)green
janela currents (Copernicus Marine reader)the surface-current reader's standard-library half, run with no network: a stored float32 written as its exact fraction (-0.3828125 = -49/128), the nearest sea node within 3 nodes, the ECMWF run's 29 steps · 2 red controls (a time axis that stops short of +168 h, an axis off the hour — refused, never padded)green
janela currents observed (GlobCurrent truth)the truth the current forecasts will be graded against (Copernicus GlobCurrent, satellite-based, three days late): the days due, each once, from the first forecast that kept the ocean circulation · 1 red control (a day whose last step is not yet published is held, never written short)green
janela providers (which band decides)the providers' evaluation re-measured and compared with certs/janela-providers-eval.json: both providers' 45,987 joined pairs, bands calibrated before 2025-07-01 and judged on 15 held-out months; it must still show the union covering more than ECMWF alone with a lower share of broken LIBERADA at Hs <= 2.0 m — the evidence the deciding rule stands ongreen
janela providers at Sergipe-Alagoasthe same evaluation on the decommissioning region's own two chains (certs/janela-providers-eval-sergipe.json): out of sample the single-provider bands covered under their 9/10 claim (ECMWF 0.872, NOAA 0.867) and the union 0.948 — the evidence the region's union stands ongreen
janela providers: ECMWF AIFS (the third provider)ECMWF's data-driven AIFS Single beside IFS and NOAA, re-measured and compared with certs/janela-providers-eval-aifs.json: every band calibrated before 2026-08-01 and judged on the passes after (providers-eval-aifs-v1, dated before the pairs were judged); the record the decision to grade AIFS without letting it decide stands ongreen
janela post-processing (a correction learned from the satellites)IFS and NOAA combined by least squares per site and lead bin on the calibration passes, then the same conformal band, re-measured and compared with certs/janela-postproc-eval.json (postproc-eval-v1, dated before it was judged): narrower than ECMWF's own band with fewer broken LIBERADA, but not as reliable as the union — recorded as measured, not usedgreen
janela pnboia (the buoys against the hindcast)the Navy's PNBOIA moored buoys as the referee's referee: the QC rule pnboia-qc-v1 (range, position, two-sided spike) and the exact window count on both series, on synthetic series · 2 red controls (a one-sided swell rise is not a spike; a missing sample un-determines a start)green
swell feed (the sea at the island's open edge)Swell's 3-hourly reader, run with no network: the step list (3-hourly to 144 h, 6-hourly to 168 h), the schema of the newest day on disk, every GRIB value an exact fraction, and that day equal to Janela's own ECMWF and NOAA feeds at every lead they share (the same nodes, the same exact values) · 19 red controls (a step missing, a float where an exact fraction belongs, a gust from two parameters, a wrong node, among others)green
janela alpha (DNV Table 4-1 reproduced)the method that made DNV-OS-H101 Table 4-1 (the 2005-07 JIP as reconstructed by Wilcken 2012) re-implemented in the Python standard library: fed the JIP's own error statistics it reproduces 16 of 20 cells within 0.02 · 1 red control (the guidance note read literally must fail the same gate)green
skyaudit stdlib verifierthe pinned ADS-B day re-audited in the Python standard library, no code from the app in the trust pathgreen
tensorlb (lower-bound audit)tensor-rank lower bounds re-decided exactly; the red control must firegreen
kissing wave (Q(sqrt2,sqrt3))the September 2026 kissing wave engine: the vectorized Q(sqrt2, sqrt3) sign against the Python-integer tower on 30,000 elements with Pell near-ties, E8 (6,720 contacts) and D4 (96) through the engine, the Leech shell built from the Golay code the claimants' own owner vectors span (signature checked), a dimension-18 slice decided by every bulk path and by plain integers pair for pair, the balanced-digit path for 10^19-denominator rationals against plain integers, and certs/kissing-wave.json walked (pins, whole decisions, verdict grammar) with dimension 18 re-decided live · 10 red controls (a forced tie raises, a repeated vector, an off-norm vector refused, a GEMM that could round refused, a block routine that drops one contact caught by the spot check, a Golay basis with one bit flipped refused, a repeated vector at denominator 10^19, a pickle that would run os.system read inert, an opcode outside the whitelist, a non-Fraction call)green
kissing gram form (lattice coefficients)a kissing configuration decided in the form a lattice construction states it — integer coefficient rows and the exact Gram matrix, a projection as rows over a common denominator (instruments/kissing/wave/gram.py; the contract a claimant can publish to, offered to the Qiushi Engine 2026-10-12): the Gram matrix proved positive definite by an exact LDL^T, A2 (6 contacts) and E8 over its simple roots (6,720) through a pinned CSV and int8 manifest, the forked tile pool and the float64 path, the 56 roots at inner product 1 with a root projected away from it (7 dimensions, no contact, cos 1/3), and gramcheck.js deciding in BigInt with no code shared · 12 red controls (an indefinite, an asymmetric and a singular Gram matrix, a norm not integral in the scaled units, a partial-sum bound past 2^53, a rows file off its pin, a Cartan matrix with one edge removed, a repeated root, a count of 241 for 240, 7 dimensions claimed as 8, a seventh equal-norm point in the plane caught by the bulk path, by plain Python and by BigInt with the same count)green
mathbench (v0 families)Certified MathBench v0 (attack plan A1, K1): seven construction families a model proposes into — Golomb rulers, cap sets, binary codes, Ramsey witnesses, sum-difference entropy laws, kissing configurations, polynomial-multiplication algorithms over F2 — each decided exactly, every rung's on-record witness certifying, the parser refusing prose and floats, and the harness run end to end offline with its controls first · 20 red controls (near-misses forged from the witnesses: a repeated ruler difference, a completed line, two codewords at distance 2, one circulant distance too many, a law with ratio 1, a duplicated vector, one flipped coefficient)green
certified-mathbench (env)the seven MathBench families packaged as a verifiers environment for the hub (environments/certified_mathbench, 2026-10-02, the rerun program's phase 3): the package reads the repository's families.py and Family/Verdict types — the wheel carries byte-identical copies — and both plus every package file are pinned by sha256; the forgery gate through the package's own preflight (28 green certify, 20 red refute); 46 rungs, 5 beyond the record; the four outcomes told apart (certified, refuted, rejected, malformed); the binding tests under the framework venv when it exists · 3 red controls: a tampered families.py caught by its pin, a ruler with one repeated difference refuted, D4's 24 roots asked for 25 rejected and never certifiedgreen
verify-gym (bracket a constant: the environment and its scorecard)Verify Gym v0 (environments/verify_gym, 2026-10-31, pre-registered in notes/verify-gym-preregistration-2026-10-31.md before any score): the two deciders (verify_gym/exact.py, stdlib; check.js, BigInt, Sturm where the first uses Descartes) and every curriculum entry pinned, the curriculum append-only, the frozen held-out set re-hashed against the pre-registration and every one of its 120 rows regenerated and its prompt re-rendered, the train and val pools disjoint from it, then certs/verify-gym-scorecard.json re-derived: the forgery gate on all 120 held-out rows (2,240 planted answers that must score 0 under their expected verdicts, 240 green controls that must score above 0), five reference policies graded, and every answer and forgery decided by both deciders with 0 disagreements; the README's table read against the record; the two steps built after v0: recheck.py (every paid sample of a training run's rollout log decided again by check.js) agrees with an honest log, and readiness.py (the readiness gate on a base model, 100 val tasks x 8 samples) says GO to a mixed reference policy in its dry run and runs its live path end to end against a local stand-in server, no spend · 17 red controls: the gate must fail under an accept-everything, a reject-everything and an xx-flipped grader, the cross-check must catch a forged result, a changed family, a dropped held-out entry and a tampered decider must be caught by their pins, the re-check must refuse a REFUTED answer paid 1, a reward forged up one step, a reward no answer earns, a paid empty reply, a paid truncated reply, a held-out task in a training log and a split between the deciders, and the readiness gate must say NO-GO to cf and never and refuse a split between the decidersgreen
optq (constants PR queue)the optimization-constants PR-queue deciders: the Kronecker-substitution product equal to schoolbook multiplication on 30 random sequences, the constant step function at autocorrelation ratio exactly 2 and the half-step at overlap exactly 1, the two-law C_3c certificate certifying its claim, the #226 moment computations, the #226 interval deciders against their closed forms (16a at K = 1 encloses 4/π; 70a at n = 2 equals √(t² + 4t + π)/(t + √π)), the Machin π interval · 11 red controls (a negative height, Σh ≠ n/2, a height above 1, a claim below the function's value refuted, a claim above the entropy enclosure refuted, weights not summing to 1 refused, base 50 refused for non-injectivity, Var(X^2) = 8 not 9, δ = 1 not established refused, a 16a claim above the enclosure refuted, a 70a claim above the enclosure refuted)green
registry C_31 (Lueker's automaton replayed)the optimization-constants registry's two asterisked C_31 rows (γ₂ ≤ 0.825101 at h = 9 and ≤ 0.824120 at h = 10, PR #231, Lueker's 2009 method two history lengths past his paper), replayed: Lueker's automaton rebuilt from the paper alone in two implementations that share no code with each other or with the claimant (instruments/lueker/mh.py, the reference; mh.c, held to it — identical full tables at h ≤ 5, sampled states re-derived at h = 8, 9 and 10, the complement symmetry checked), calibrated on Lueker's own table for h = 2..8 (every state count, every λ to nine digits, every bound to six), run with our own witness vectors, the certificate pass under directed rounding (upward per thread, self-tested; once more in round-to-nearest with an explicit inflation), a certified lower bound on the spectral radius beside it, the bound evaluated outward; the check re-runs the reference at h ≤ 4, re-derives every decision from the record's own hex values and holds the pinned sources · 9 red controls (the weights off by one power and the truncation weight not summed both miss Lueker's λ; a claim below the certificate, z = ½, λ = 1, a zero in v, a short v and the all-ones v refused; a claimant λ below the certified lower bound on ρ refuted)green
ramsey graphs (AlphaEvolve)Google's 18 Ramsey lower-bound graphs for AlphaEvolve (google-research 0d94f8c4), held to their pins and decided by an exhaustive clique search written here (instruments/ramsey: clique.c held root by root to the reference clique.py): the 13 small graphs re-searched on both sides, the five large ones re-read from their per-root progress records; a planted triangle and a planted independent set must be found, four malformed matrices refused, 24 random graphs across word boundaries decided identically by both implementationsgreen
ramsey orbital kernelthe orbital reduction (one root by a checked transitive group, one piece per orbit of a checked stabilizer of 0) held to brute force on 720 small circulants, orbital.c held to orbital.py root by root on 78 instances (Paley graphs among them), split = unsplit, resume = unbroken, and the R(3,33) reduction re-derived (31 orbits) · 8 red controls (a planted independent set that must be found, a non-automorphism multiplier that must be rejected, among them)green
EinsteinArena 542, two readingsAlphaEvolve's EinsteinArena solution 542 (26 circles in the unit square) decided under both readings of its pinned bytes — the decimals as printed (3 circles outside, 7 overlapping pairs) and the doubles the platform verified (3 overlapping pairs) — in exact rationals, the doubles reading held to the declared-claim checkers' decision; two red controlsgreen
wowii (Graffiti.pc witnesses)five Written-on-the-Wall-II conjectures and the explicit witnesses filed against them on formal-conjectures: the exact tree DP for the total domination number equal to brute force on 25 random trees, each witness rebuilt from the claimant's Lean tables with the stated order and size, the author's sets total/2-dominating, the disjoint-neighbourhood lower certificates, dist_avg(C,V) = 321/80, gamma_2 = 6 by exhaustion · 7 red controls (the nine forced supports alone fail, two leaves sharing a neighbourhood refused as a lower certificate, the 360 right side without the half, one vertex per clique, the cliques without their bridges, a minimum set minus one, P4)green
aerp (AlphaEvolve community)the community certificates filed against DeepMind's AlphaEvolve repository of problems, decided from the pinned notebooks' definitions in integers: the repository's own sphere-free constructions admissible under BOTH sphere deciders (5-subset determinants and 4-subset hyperplane keys), #4's 36 points with min |det| = 2, the 58-point isosceles-free set, the m = 14 ring-loading instance at 9/8 under k = 1..m and 3/4 under the notebook, bitset sumsets and the integer form of g > c · 9 red controls (five coplanar points, five cospherical points, a point outside the grid, a repeated point, a planted isosceles point, the collinear midpoint, an unattained ring-loading value, u + v > 1, the far-block rule at a size that does not reach the claim)green
bandeira (Farkas certificate)the Qiushi Engine's disproof of Bandeira's Open Problem 0.2(a): Lai-Lim's (5,5) sum-of-squares SDP built here from its definition and the Farkas certificates decided in exact rationals (LDL^T, every pivot) — our own certificate must hold under the sum-of-squares form, the claimant's under the convention its export states and not under either transpose, the scalar and m00 equal under every convention · 5 red controls (one multiplier's sign flipped, y0 moved to 0, the multipliers in reverse order, the wrong number of multipliers refused, the negated certificate not accepted as written)green
countex (AI counterexamples)S. Sra's open library of AI-found counterexamples (arXiv 2608.29595, github.com/suvrit/count-ex-machina @ dbf67374) decided case by case: fourteen standard-library deciders written from the statements and reading the PUBLISHED certificates (the authors' checkers write theirs), every mirrored file re-hashed, the ledger re-derived, and each decider's forge — the certificate changed by the smallest breaking amount — refused · 14 red controlsgreen
turan (the registry's C42)The registry's asterisked C42 decided from its certificate: sin/cos and I_1(1/2) = ln 2 as anchors, the four exact facts re-decided, the ledger's |Y|/D recomputed; the step-profile form reproducing it with one block and deciding PR #184's eight blocks; five forgeries refused — C below |Y|/D, alpha moved past the radius, tau = 1/3, a forged enclosure for K, PR #184 with C below its |Y|/D · 5 red controlsgreen
sumproduct (the registry's C84b)The registry's asterisked C84b decided from the note it cites: zeta(2) and Gamma(1/2) as anchors, the printed regulator value reproduced, the ledger REPAIRED with its ceiling below 0.000719; four forgeries refused — R = 101 at the note's s, the product factor at Y = 1300, a ceiling claimed below the decided one, inf f >= 102 · 4 red controlsgreen
eleicoes2026 (BUs, signatures)The 2026 presidential dossier's instruments: two BU deciders sharing no code agree on a planted file whose sections are scattered, and both catch a section whose votes do not sum to its turnout and one whose turnout plus abstentions is not its registered voters; the ledger re-derives; a signed result with one digit changed is refused by both Ed25519 verifiers · 3 red controlsgreen
fei (the registry's C71)The registry's asterisked C71 lower bound re-decided from the n = 18 truth table (exact Walsh–Hadamard spectrum, I = 261/128, entropy in outward-rounded intervals), the ledger's enclosure recomputed, majority-of-three as an anchor; three words since 2026-10-19 (a failed precondition REFUSED, a bar inside the enclosure REFUSED, a bar at or above its upper end REFUTED), the printed enclosure rounded outward and required to contain the value; seven red controls, each asserting its reason — a flipped truth-table bit (binding), a threshold 1e-40 above the enclosure (refuted), a bar straddling it within 1e-80 (refused), a claimed influence moved by 1/128 (refused), a dictator (refused: I <= 1), majority of three at exactly 4 (refuted, the logarithms of powers of two exact), ln of 0 and of a negative (refused) · 7 red controlsgreen
mc100 (the Python runs)phase 4b of the rerun program, the hundred pre-registered machine claims: the Station's Jacobian construction (station_data_v2 @ a4ae9192) decided through instruments/polymaps — det JF = -6 identically over Q, components of degrees 4, 6, 7 with 16 terms, three distinct rational points onto (1, 7/3, 0): a non-injective Keller map of C^3 — re-derived LIVE from the pinned bytes; the ledger held to the manifest (the pool's other nine rows listed with what they need); the register holding the row · 4 red controls (a coefficient moved, a witness moved, a printed image moved, the printed determinant moved)green
polymaps (Keller maps, Markus–Yamabe fields)Gao's G, F4, F5 and the Markus–Yamabe fields X14, X-hat18 and the cubic Phi re-decided in exact rationals from the pinned TeX (the extraction re-read and compared); the nilpotency indices 14 and 17 (not vacuous); six forgeries refused — a coefficient of G moved by 1e-6, a term of X14 moved between components, a coefficient of X14 moved, a collision witness moved, a printed zero moved, a coefficient of Phi moved · 6 red controlsgreen
gnnw (the G_AI iteration)Gupta–Ndiaye–Norin–Wei's unverified iteration decided on their Theorem 14: the certificate re-decided interval for interval; Lemma 15's hypotheses for F_0.03 (concave, increasing, A < B); the written derivative against central differences, the tail form against the direct slack, Y_f decreasing across its branches; GNNW's own F_0.03 passing in its own region; and five forgeries refused (a linear coefficient past the edge, a wrong slope for M at 0, a lowered sixth coefficient, an M reaching 1, a lying branch proposer) · 5 red controlsgreen
horizonmath (credited discoveries)The discoveries HorizonMath (arXiv 2603.15617v2) credits to frontier models, decided from what its Appendix A prints: the corpus re-hashed and the Ramsey certificate rebuilt from its printed recipe; Erdős 1947 enclosing ln2/2 at e = 1; 99 Erdős–Szekeres pairs and GNNW Lemma 16(1) points never excluded from R; the strip the problem's rule admits, and the certificate's own pair at λ = 1, excluded; two lying float proposers overruled by the interval check; the Kakeya area exact and its forges (a moved printed digit, an all-zero construction, an off-grid intercept) refused · 7 red controlsgreen
oracle claim librarycertify() for AI math search: Strassen calibrates, the characteristic-2 pair reproduced, the sub-float forgery refuted with its exact mechanism; red controls also run at import — a broken grader refuses to exist · 6 red controlsgreen
wiring (graph as submission)the lattice-claims wiring task, ported from frontier-apps 2026-09-05: a model answers with a WIRING rather than a verdict — which instruments, in what order, and what may reach the port that decides — and BUILDING THE GRAPH IS THE GRADING. There is no separate rubric because the two rules that matter are already conditions on a wire: a value that came from floating point may not enter a deciding port, and a deciding port with nothing wired to it cannot produce a verdict. A submission that violates either does not score badly, it does not BUILD, and the message it gets back is the one the engine raises. It mirrors instruments/cert-unit/graph.mjs, so the same rules are stated in two languages and the tests check the same wirings are refused for the same reasons · 8 casesgreen
keller · standalone re-verifierthe detached certificate re-audited from scratch — stdlib fractions, no code from this repo; red control must firegreen
strassen · standalone re-verifierevery matmul identity re-derived in stdlib Python ints; pins re-hashed; red control must firegreen
erdos852 · standalone re-verifierthe C* refutation re-proved in exact stdlib ints (no tail, no rounding); the c0 window re-decided at 130 digits; 4 red controls must firegreen
mfgcap · terra re-certificationthe congestion-MFG peak-splitting enclosures (T1 two peaks, T6 three peaks) re-certified inside cert-machine: validate_g pinned BIT-FOR-BIT to the frozen published verifier on its embedded instance, the stdlib Gauss-Jordan approximate inverse certifying at the identical radius, the record walk, and the A2/A3 data terms — the only new lines — attacked by their own mutations · 5 red controlsgreen
facelaw · face-dimension theoremk = |shared| - cons + z decided against the exact Q null space — 600 live networks every run, the 572-failure origin ensemble replayed from its seed with every failing instance enumerated in the record, the exit-free-cycle family, and the origin instance whose z = 0 made the shortcut look like a law · 3 red controlsgreen
attnflow · attention exact-Qthe decidable attention flow: the reduced flow's DOUBLE zero at c* = -1/beta (multiplicity decided by exact division), denominator SOS, no crossing at any beta > 1 — every pitchfork claim refuted exactly; cross-weights identically zero with the honest p = 1 boundary; the consensus spectrum's beta/p-freeness decided by exact dual-number expansion at n = 3..6; the phantom-bifurcation taxonomy with the locator transient re-demonstrated live · 3 red controls (one of which caught this battery's own detector being decorative)green
sos · global boundstdlib fractions onlygreen
sos · lyapunovstdlib fractions onlygreen
sos · re-verify AI resultstdlib fractions onlygreen
blind-spot (the chip environment)the chip-task environment ported from frontier-apps 2026-09-09 and re-derived on every build: the 27 lifted files re-hashed against their pins, MCY's 400 mutations of a Euclidean-norm comparator checked against the SAT record (348 killable, 51 proved equivalent, the identity found by -mode none — MCY numbers it 1, not 0), EVERY ONE of the 348 recorded witnesses re-run through the actual netlist and required to flip a pin, eight proved-equivalent mutants attacked with all four testbench families (16,000 pairs each) and required to survive, and the 11 planted controls of which THREE MUST SCORE — a suite that fails everything reports perfect coverage, which is the mistake the environment is named for. The SAT labelling itself runs once, on the port, and is a pinned record; the simulation is re-derived · 4 red controls, one of them the vacuous identity query that went quiet in the source lab for a whole sessiongreen
blind-spot inspect (one scorer, two frameworks)blind-spot as an inspect_ai Task (2026-09-21, the METR plan's first deliverable): the scorer is blind_spot.adapters_v0._decide, the function the verifiers rubric calls, applied to Inspect's own messages — nothing re-implemented. Every build: the three rung variants and the mixed task built and their ids checked against the taskset; the Inspect scorer, api.score and taskset.grade scored on EVERY one of the 400 pooled mutants (truthful, UNDECIDED, and the false claim on all 52 proved-equivalent plus 40 killable) and required to agree field for field; every recorded Inspect log re-scored offline with 0 disagreements; the ledger's pins (task.py, baselines.json, every log) re-hashed and its counts re-derived; the README's quoted numbers found in the ledger; the human-baseline attempts re-graded · 4 red controls: a witness with one coordinate changed stops killing under BOTH scorers wherever it stops (MISSED, never SOLVED; on the mutants indifferent to that coordinate it still kills and both say so — the two never split; 25 tried), a killing verdict buried in a reasoning block grades UNDECIDED both ways round (the text-only filter is load-bearing), a coordinate no 3-bit pin can carry is refused rather than maskedgreen
gsm8k (the answer key)GSM8K's answer key re-decided in exact rational arithmetic (2026-09-21, the METR plan's third deliverable): the exact reader calibrated on cases with known answers (the calculator grammar, leading-dot decimals, thousands separators, a percent as a hundredth, mixed numbers, a spaceless fraction as one literal, running chains, unit labels), every one of the 4,282 test and 23,716 train calculator annotations and every readable prose equation evaluated from the expression it prints, the three pinned corpus files re-hashed, the ledger re-derived unchanged, the GSM8K-Platinum join re-counted against its printed 110 / 99 / 10 · 12 red controls: a planted wrong annotation, a value off by more than half a unit in its last place, division by zero, the // operator, a Python name and a power (nothing is ever eval-ed), an annotation without one =, the two test-set witnesses, a wrong step whose answer rests on it, a refused item, a trailing periodgreen
horizon (certified fits)METR's time horizon as a certificate (2026-09-22, the METR plan's deliverable 2 instrument, calibrated on METR's own Time Horizon 1.1 evidence): a Python interval library proved to contain (exp, log, 2^x against 20-digit expansions and 600 random points; a series with its tail bound dropped as a red), the penalised logistic fit certified by the Krawczyk operator on synthetic data with a known law (slope, intercept and the 32-minute horizon recovered), per-run and per-task fits shown to certify the same horizon, METR's weighting rule re-derived, the pinned evidence re-hashed, one agent re-certified live from the pinned per-task file and required to give the ledger's box, the post-2023 doubling time re-read as an enclosure within 5 % of the site's printed value · 6 red controls: division by an interval through zero, a log touching zero, a Taylor series without its remainder, Krawczyk from a far candidate, a slope box through zero asked for a horizon, a printed horizon moved by 1 %green
readings recall (planted defects)how often the openai/math statement readings catch a defect (the referee's S5, 2026-10-19): 24 packets drawn with a seed from the audit's short MATCHES statements, 12 carrying one planted one-line defect (a constant loosened, a domain restricted, a hypothesis added, a conclusion weakened, a sign reversed) and 12 the release's bytes, read blind under lane S's brief by two first readers and, per the protocol, two second readers; every packet file re-hashed against the key, every reader's recorded tool calls audited (no path outside the packets), the score re-derived and compared with certs/reading-recall.json · 5 red controls: the release opened, a climb out of the packets, the key read, the recorded words read (each must be caught by the audit), a plant read as MATCHES (the count must fall)green
openai/math N(6) saved runthe N(6) = 3 saved run published at openai/math 7ef5c0cc read by a records reader written here from VERIFY.md and the manuscript (the release's checker never opened, no C++ compiled): parsing to exact EOF, the invocation schedule, the A shards modulo 4, both B refinements, the batches, the ordered C failures and the fallback, the final C partition, the printed counts and digests · 8 red controls (a dropped shard, a moved record among them); the record is certs/openai-math-mub6-records.json — consistency and coverage, not N(6) = 3green
erdos1 (the effective rate)Erdős #1 made effective for all large n: Lemma 5 (the inverse of a reduced triangular form, so K <= D(2^r - 1)) checked entry by entry on every cached Hermite form, and the table of the effective theorem f(n) <= e·Delta_s for n >= d(d + ceil(log2 d) + s), s = 1..60, re-derived in exact rationals and outward-rounded decimals and compared with certs/erdos1/effective-rate.jsongreen
erdos1 (the buffer's structure)the Hermite basis H_s behind the Erdős #1 buffer, decided against the structural statements of a 2026-10-18 note (its code not run) on the battery's nine (b, s) with s <= 3, b <= 7: H computed by PARI and by FLINT and required identical; the block recursion, the b-independent column supports N_s = 3·2^(s-1) - 1, the DAG depth s, the minimum diagonal, the exact buffer K re-derived and compared with certs/erdos1/buffer-structure.json; four RED CONTROLS (an entry planted outside the support, an unreduced entry, a doubled diagonal block, a moved top-row entry of H_1) must each be caughtgreen
erdos1 (the explicit sets)Erdős #1 made effective, ported from frontier-apps 2026-09-15 and re-derived at every build: the 66 lifted files re-hashed against their pins; Δ_s = |det B_s| exactly on small lattices and for three tilts; the cube property of Λ_1 by exhaustive search for d ≤ 9; the structured strip decision (Lemma 1″) against a brute-force decision of both gadget properties for b ≤ 7 and four tilts, and every (α, b) a certificate uses; verify.py (V0–V7, FLINT) on the two smallest certificates; the ledger’s verified set re-read from the logs shared-nothing, N/2^n and the Siegel bound re-derived from the base weights, siegel.json against the ledger; the detached verifier byte-identical to its generator · 6 red controls: a forged pin, a base weight off by one (V4b), a halved buffer (V5), a Hermite entry off by one (V2), a gadget that violates the cube condition, a verifier log that did not end greengreen
zeta-hankel (the ζ(7) wall)The Hankel-determinant irrationality method ported from frontier-apps 2026-10-05 and re-checked at every build: the 343 lifted files and 6 pinned sources re-hashed against PROVENANCE.json; certs/zeta-hankel-ledger.json re-read by the battery’s own rule (each bench value re-read from its record, agreement recomputed from the ball, margins and headline re-derived, the p-adic accounting recomputed from the v_p profiles, the class reading labelled an extrapolation and the race context unverified); every headline row with h ≤ 14 re-run from the lifted engine (P exact, float bit-identical, inside the ball); crosscheck.py (stdlib, no shared code) equal to the engine on six instances · 6 red controls: a flipped bit in a lifted file, a tampered ledger margin, a bench value that is not the record’s, a perturbed moment, a perturbed node constant, the extrapolation relabelled a theoremgreen
zeta7-anand (a ζ(7) proof, audited)Anand’s “Zeta 7 is Irrational” (Zenodo 22920911) audited at every build: the pinned sources re-hashed; I_out re-derived from the paper’s own formulas under both readings of (71)–(73) and its affine pieces re-verified; the integrator calibrated on Fauzan’s printed 127751/96000 by three routes; finite-K exact sums converging to the R2 value; (121) from (64)–(69); A0 equal to Fauzan’s A*; the (85) bound; U’s ingredients; the 24 margin scenarios for (118); the verdict words; the paper’s own family re-run at n = 1, 2; the Lean grep census · 9 red controls: a forged pin, a forged affine piece, (59)’s constant moved by 10⁻⁶, Fauzan’s constant moved, Table 5’s last row “corrected”, a tampered I_out, (118) relabelled CERTIFIED, the overreach “the theorem is refuted”, a forged fingerprintgreen
navier-stokes probesthe computable checks of OpenAI's 2026-09-08 Navier–Stokes writeup, re-run from the formulas as printed: the similarity-coordinate derivatives of Lemma 4.1, the commutator kernel norm and the Hölder chain of Lemma 10.5, the derivative count (10.12), the viscosity rescaling (10.22)–(10.23), the periodic λ³ rescaling of Corollary 10.6, the exterior q-cancellation, the cutoff bound (10.3), the exact heat exterior against its differential equation (A.37) and its Taylor coefficients (A.35) at 25 digits, and the mechanism the pulses exist for — Lemma 4.5's equivalence of the relaxed cone condition (4.21) with the square-root-free (4.22) on a rational sweep, the stress-coordinate form (4.23), and Proposition 7.5's two squared amplitudes, positive exactly on the reference cone and negative just outside it. Probes of the writeup, never a certification of the theorem, whose authority is the Lean certificate built and asked separately · 7 scripts, 26 red controlsgreen
lattice-claims forgeriesthe ten planted forgeries of the lattice-claims environment, each one a way a grader can be fooled — the rounded norm that does not determine the claim, the overflow canary, the gap named in the model's own schema — and the exact grader must refuse every one · 10 testsgreen
lattice-claims (pins+gate+regrade)the environment ported whole from frontier-apps on 2026-09-05 and gated five ways at every build: every ported file re-hashed against instruments/wiring/PROVENANCE.json, the forgery gate (10 planted, 0 accepted), the exact reference policy at its ceiling (45/45), the two graders of 0.2.0 paying for opposite things (under the answer key the guesser beats the honest policy, under the exact grader the order reverses), and the 135 stored model replies RE-GRADED with this grader — 0 rows may move, which is what makes the pinned record a record of this grader · 1 red controlgreen
llm harness — the eval's dry-run gatea FAKE proposer gates the pipeline, not an LLM result; live model campaigns are separate, in the append-only certs/matmul-eval-ledger.jsonl and on reports/matmul-eval.html · aborts if a red control certifiesgreen

Lifted from the source lab: 137 files, 7 patched on the way in, each patch declared. Drift now: 0 unchanged · 0 source moved · 6 local edited · 137 source gone. The source lab (sin-mfg) is read-only, permanently — read anything, never write, and report an error there rather than repair it.

§10 · the shelf

Every certificate, and what it holds

certificatewhat it holdsre-verify
erdos852-certificate.jsonBoth Erdős #852 constants as exact data: the c0 window re-decidable at 130 digits, the C∗ refutation as strict integer inequalities with no tail bound.verify_erdos852.py
erdos1-ledger.jsonErdős #1 made effective: every explicit sum-distinct set built from the GPT-6 Astra construction with the one ineffective step made explicit — b, s, the tilt α, the buffer K, and per instance n, N/2^n as an exact rational recomputed from the base weights, the exact Bohman comparison and the Siegel bound 2^{k(d−1)}/max a — entered by ONE rule from the independent verifier’s logs on this machine (tools/run-erdos1-ledger.js); the certificates themselves (Hermite basis, buffer, base weights per k) are certs/erdos1/cert-*.json[.gz], re-verified by instruments/erdos1/verify.py (V0–V7, FLINT) and cross-checked by the battery’s planted forgeries at every build.battery-gated the report
delta3-ledger.jsonδ₃ = 117/2192 — Graham’s $100 question, the case k = 3 of Erdős #1186: the five certificates of the claimant’s proof (one inner, zero gap; four slabs) re-decided by instruments/delta3/verify.js, a second verifier written under a clean-room rule, sharing no code with the claimant’s generators or verifier: per certificate its sha256, region, cell count, pair and form counts, the exact recomputed bound (equal to the file’s claim) and verdict; the φ* facts (Q = −5/137, ∫h = 5/137, the eleven zeros and their slopes); the cover of [0, ½]; the verifier files’ own hashes, so a page can refuse a record from a different verifier.battery-gated the report
delta3-lemmas.jsonThe paper-proved steps of the δ₃ proof, TESTED exactly (tests, not proofs): the centring identity and the symmetry on 1,400 step functions, the discretisation lemma E ≥ L on 4,200 from seven generators (the gap exactly 0 on breakpoint flips and single cells), the bathtub at its exact minimiser on 4,416 cases — and the single-piece reading of the bathtub constant refuted on 1,358 of 2,432; plus the exact count of monochromatic progressions of the twelve-block colouring to n = 35,072 (V = 117n²/2192 − n/2 at multiples of 1096). Written by instruments/delta3/lemmas.js.battery-gated the report
delta3-mutations.jsonThe mutation pass over the clean-room δ₃ verifier: 24 one-line edits (h flipped, R mirrored, ε dropped, an optimistic cut bound, skipped sign and range checks, a trusted float Cholesky, an accepted zero pivot …), each run against the genuine certificates and the battery; 23 caught, the one survivor removing a rule enforced twice. Written by instruments/delta3/mutate.js against the verifier files whose hashes it records.battery-gated the report
delta4-probe.jsonδ₄ scout (Erdős #1186, k = 4), exact: the continuum functional for monochromatic 4-term progressions (constant, five pair forms with their regions, the quartic term), the decomposition checked against brute-force counts; Butler–Costello–Graham’s 36-block value re-decided equal to their printed rational; h₄ ≥ 0 with zeros exactly at the 35 edges; the edge Hessian positive definite, λ_min ∈ [411/5000, 823/10000] — a strict local minimiser that still loses by 19.3% to Lu–Peng’s 1/72 arithmetic colouring, re-verified here. Verdict: the δ₃ centring is BLOCKED for k = 4 (the quartic term defeats any PRS-type reduction). Written by instruments/delta4/probe.js; red-controlled by instruments/delta4/battery.js.battery-gated
the remaining 194 of 200
certificatewhat it holdsre-verify
erdos852-h-records.jsonEvery record run of pairwise-distinct consecutive prime gaps the scan has closed — index, opening prime and length. The head reproduces OEIS A078515/A079889 term for term; the tail passes them. Each record beyond the published terms is re-proved at build by an independent Miller–Rabin verifier.battery-gated
ai-claims-summary.jsonThe six-lane AI-claim audit as the build recorded it: every lane’s verdict, scope, check count and mutation-control count, written by the report builder from a live run of all six verifiers. Not a certificate — a record of what the verifiers said, so the shelf card and the page cannot quote different numbers.battery-gated
erratum-2026-10-09.jsonThe erratum of 2026-10-09, pinned: the numbers the machine page carried before the repair (54,628,275 closed forms “refuted in double” by a float comparison; REJECT covering both a proved failure and a straddling enclosure; the Newman bar at the champion’s lower end) with the commit and the page sha256 that carried them, the mechanisms, the repair, and the three records re-derived by the new kernel bytes with their decisions compared field by field (all identical). Not a certificate — the correction as a record, so the page’s §7 and this shelf cannot quote different numbers.battery-gated
keller-certificate.jsonThe Jacobian/Hessian counterexample corpus — every polynomial as explicit exact rational monomials; determinants and collisions re-derivable from the file alone.verify_keller.py
erdos1038-inf.jsonErdős #1038, the INFIMUM side: the certified bracket 1.828 ≤ inf ≤ 1.8344304971959906 with both ends unconditional, Tao’s model Problem 4.1 answered affirmatively for every ε ∈ (0, 0.1] (624,275 chunks + a sliver lemma), and the thread’s three posted dual measures certified. Rebuilt live at every report build; the record carries the claim fence naming all three claimed proofs.battery-gated
erdos1038-forcing-1.828.jsonThe forcing certificate behind inf ≥ 1.828 — every a₀-box with its comb, per-b-box frozen LP weights and certified margins. Re-checked by instruments/lemniscate/verify-forcing.js, which shares no code with the certifier and also hunts counterexamples in doubles.battery-gated
ember-band.jsonTHE EMBER BAND: the hot-spots theorem extended from one trapezoid to every c in [0.845, 0.85] — 17 chunks tiling the interval with shared endpoints, 738 σ-cells inside them, μ₁ ≥ 11.85157 and μ₂ ≥ 13.90774 uniformly. An AUDIT record, not a re-derivation: the chain ran on the bench, and instruments/emberband/verify-band.js re-derives both covering ladders and every band-wide value from per-cell data, sharing no code with the producer.battery-gated
kissing-ledger.jsonThe kissing ledger: every public record configuration for K(11) — AlphaEvolve’s 593, the EinsteinArena rung winner’s 594, the Station’s three exact 604s, EinsteinArena’s headline 604 (NEEDS DATA from 2026-09-03 until its coordinates were published on request on 2026-09-07, then certified), the classical 582 shell and the D₁₂ lift — re-decided in exact Z[√2] BigInt arithmetic from sha-pinned claimant bytes, shared-nothing with every producer’s own verifier; contact counts exact; the two platforms’ 604s decided CONGRUENT (a signed coordinate permutation, certificate in kissing-congruence.json); the three open rungs measured as distances. Rebuilt by tools/run-kissing-ledger.js at every report build.battery-gated
kissing-wave.jsonThe September 2026 wave of kissing lower bounds — Kravatskiy (dimensions 18, 25–31), Takhanov–Yun (25), the Qiushi Engine (25, 27) — every published configuration rebuilt from bytes pinned by commit and sha256 (corpus/kissing/wave.meta.json) and EVERY PAIR decided exactly over Q(√2, √3): about 2·10¹⁰ pairs a row, integer Gram components from BLAS under a checked 2²⁴/2⁵³ bound, signs in the tower Q(√2)(√3), a plain-integer spot check that re-runs the bulk block code; the whole Leech shell and E8 as calibrations; NEEDS DATA rows for the dimensions published as counts; the hunt’s float proposals beside it. Rebuilt by tools/run-kissing-wave.py (about 25 minutes on a laptop); re-checked by run-kissing-ledger.js, which re-decides dimension 18 live in JavaScript.battery-gated
kissing-congruence.jsonThe congruence certificate between EinsteinArena’s 604 and the Station’s configuration 1: a bijection π of the 604 vectors and an orthogonal matrix T over Q(√2) with T·2aᵢ = b_π(i) for every i — a signed permutation of the eleven coordinates. Re-verified exactly at every build by instruments/kissing/battery.js without repeating the search that found it.battery-gated
easota-ledger.jsonThe EinsteinArena / Together AI "new SOTA" table re-decided: twenty published constructions on eight problems (circles in a rectangle, Heilbronn in a convex region, min distance ratio, Erdős minimum overlap, edges vs triangles, the first autocorrelation inequality, the degree-69 flat polynomial with its supremum certified, twelve hexagons in a hexagon decided in certified interval arithmetic) read as exact rationals from sha-pinned bytes — the exact objective, every constraint’s slack, the printed digits checked against the exact value, repairs where a construction is a witness only within a verifier’s tolerance (whose, and when, in each row’s platformRule), and every improvement over the previous best decided as an exact sign. Rebuilt by tools/run-easota-ledger.js at every report build.battery-gated
ecbench-ledger.jsonThe environmental-contour benchmark (Haselsteiner et al. 2021, Exercise 1) re-decided: all 150 submitted contours as exact polygons (closed? simple? self-crossings, the implicit closing edge, the maximum along each), every hourly observation of the twelve pinned datasets classified INSIDE / OUTSIDE / ON under the even-odd rule the benchmark used with nonzero winding beside it, the preprint’s 176 printed counts read against the exact ones, Table 1’s expected numbers certified (erfc by Laplace’s continued fraction, β by certain-sign bisection), and the out-of-sample counts on the retained years. Rebuilt by tools/run-ecbench-ledger.js; the datasets are fetched from the pinned commit by tools/fetch-ec-benchmark.js.battery-gated
breaking-ledger.jsonThe Black Sea breaking-wave table (Zenodo 10.5281/zenodo.18408002; 16,369 events in 20 stereo-video records) decided in exact arithmetic against the references its own scripts draw — Duncan (1981)’s inclination band and aspect ratio event by event, the three self-similarity ratios as exact order statistics with spread factors, the breaking speed over the peak phase speed with π enclosed, Spearman and Pearson correlations as exact rationals — and, in its paper block, every number printed in Guimarães, Stringari, Filipot, Leckler, Benetazzo, Chapron (GRL, 2026-09-16, 10.1029/2026GL122293) read against the table: Table 1 cell by cell, the fits through the origin, the enclosed moments, the 4 % self-similar tail, the range of θ; plus the per-record stratification the paper leaves undone. Rebuilt by tools/run-breaking-ledger.js in three seconds.battery-gated
hseva-ledger.jsonThe return-level table as a certificate: the six families of Reis, Guimarães, Farina et al. (Ocean Eng. 2026) — normal, lognormal, Weibull, exponentiated Weibull, generalized gamma, Gumbel — fitted by maximum likelihood to the hourly series and the daily, weekly, monthly and annual maxima of NDBC buoys A, B and C (and to the paper's own WAVEWATCH III hindcast at the grid points of corpus/ww3-points), every fit certified by the Krawczyk operator as the unique zero of its score in a box, with the Hessian proved negative definite over it, or refused — the generalized gamma with the proof that its likelihood peaks at its lognormal limit, where it does; the paper's four criteria (Anderson–Darling, Kolmogorov–Smirnov, χ² on Sturges bins, MSE) and the 10- to 1000-year levels enclosed over the box; each criterion's choice DECIDED or REFUSED; the Hs marginals the contour benchmark's teams printed, and scipy's fits of the same series (certs/hseva-scipy.json), decided against the same data; beside the six, never ranked among them, the generalized extreme value law certified as a seventh family (its regular maximum, ξ above −0.5) and Anderson–Darling's choice among the seven; and, apart and labelled STATISTICAL, the delta method's 95% intervals on the levels. Rebuilt by tools/run-hseva-ledger.js.battery-gated
hseva-atlas.jsonThe return-level atlas: the method of Reis, Guimarães et al. (Ocean Eng. 2026) certified at every open-sea cell of its own WAVEWATCH III hindcast on a 4° globe, a 1° Brazilian margin and the report's nodes (corpus/ww3-grid — cells that the hindcast's own sea-ice field ever touches are listed and not certified): per cell, the daily, weekly and monthly maxima under six families, each fit the likelihood's one maximum in a box or refused with its reason (the exponentiated Weibull in its Gumbel coordinates where its α runs off), the four criteria and the 100- and 1000-year levels as enclosures printed outward, each criterion's choice DECIDED or REFUSED, and what a threshold fitter would choose; beside the six, the generalized extreme value law certified as a seventh family with Anderson–Darling's choice among the seven; in a separate section labelled STATISTICAL, the delta method's 95% intervals on the decided family's levels and on the GEV's ξ, and the extremal index of the daily maxima; the sha256 of every module that certified it. Written by tools/run-hseva-atlas.js; any cell is certified again in the reader's tab at /instruments/return-level-atlas/ and compared with its record by sha256.battery-gated
design-table-audit.jsonA printed design table decided against the nearest cells of the return-level atlas: the annual-maximum Hs fits Bhaskaran et al. (Energies 16, 6935, 2023, CC BY) print for five South Atlantic offshore-wind lease areas (Gumbel by least squares, maximum likelihood and moments; GEV by maximum likelihood, its k read as ξ with the sign changed), from a commercial hindcast, each decided at the two nearest open-sea cells of the paper's public hindcast by THE decision of a printed fit (playground/return-level-check/printed.js) against the Gumbel and GEV certified there on the calendar-year maxima, with the printed and certified 100-year waves and the certified fit's statistical 95% interval beside them. A verdict says whether the digits are that record's maximum-likelihood fit, not whether the table is right on its own data. Written by tools/run-design-table-audit.js (--check re-derives it).battery-gated
mathbench-ledger.jsonlCertified MathBench v0, append-only: one row per decision — the dumb baseline's construction and each model's proposal for every rung of seven construction families (instruments/mathbench/families.py), each certified, refuted, malformed or recorded as budget-exhausted, with the tokens and dollars of the call that produced it. Pre-registered in notes/mathbench-v0-preregistration-2026-09-29.md before the first call; written by tools/run-mathbench.py under a campaign ceiling.battery-gated
polymaps-ledger.jsonPolynomial maps two 2026 papers print, decided in exact rational arithmetic: Gao's five counterexamples to the Jacobian conjecture (arXiv 2608.00222; constant determinant expanded symbolically, two or three rational points with one image, F6 and F7 rebuilt from the printed construction) and the weak Markus–Yamabe fields in dimensions 14 and 18 with the cubic Phi (arXiv 2608.05392; (JX + I)^N = 0 as an identity, the printed zeros). Per claim: the verdict, every check, and the witnesses. Written by tools/run-polymaps-ledger.py (--check re-derives it).battery-gated
gnnw-chain-certificate.jsonSix rounds of Gupta–Ndiaye–Norin–Wei's Theorem 14, each decided on all of (0, 1] in the region the round before establishes (the first in F_0.03's): the remark's G_AI, then five degree-9 corrections proposed by this program's float optimiser, with their witnesses M; bases 3.78233 → 3.77213, the last R(k, k) <= 3.7721307629…^(k+o(k)). Decided by verify/verify_gnnw_gai.py and, apart, by instruments/gnnw/second.js (JavaScript, bigfloat, monotone bounds), whose record is kept with the sha256 of its code. Written by tools/run-gnnw-ledger.py (--check re-derives it).verify_gnnw_gai.py
gnnw-certificate.jsonGupta–Ndiaye–Norin–Wei's "preliminary, unverified" iteration (arXiv 2407.19026v2; G_AI, proposed by ChatGPT 5.6 Sol) decided: the polynomial as printed, the continuous witness M chosen here (101 rational nodes), and the decision that Theorem 14's inequality holds on all of (0, 1] with Y from Lemma 15 for the proved F_0.03 — so R(k, k) <= 3.78232877553…^(k+o(k)) — with the interval counts and the smallest certified margins. Written by tools/run-gnnw-ledger.py (--check re-derives it); verify/verify_gnnw_gai.py re-decides it with the standard library alone.verify_gnnw_gai.py
horizonmath-ledger.jsonThe discoveries HorizonMath (arXiv 2603.15617v2; github.com/ewang26/HorizonMath @ 4ef0b61a) credits to GPT-5.4 Pro and GPT-5.6 Sol Max, decided from what its Appendix A prints: the diagonal-Ramsey certificate REFUTED (its pair at λ = 1 outside Gupta–Ndiaye–Norin–Wei's region R, with the Erdős 1947 witness (e, p) for each excluded point and the rational s for each pair the problem's bound does not place), the Kakeya union area CERTIFIED as an exact rational, three closed forms NEEDS DATA; the benchmark's own validator outputs kept as observations. Written by tools/run-horizonmath-ledger.py (--check re-derives it).battery-gated
rerun-kit-run.jsonThe rerun kit executed: every command of corpus/rerun-kit.json (the re-derivation of each record the claims register is derived from, the standard-library verifiers, the second implementations) run from this repository and timed, with the machine named and the register's rows compared before and after — a row that moves refuses the page. Written by tools/build-report-rerun.js --run; /reports/rerun.html reads every runtime from here.battery-gated
pu-ledger.jsonPU Verificado, phase A: every fixed-rate Tesouro Direto price (LTN, NTN-F; both sides) in the pinned public history (Tesouro Transparente, ODbL) re-decided from the STN methodology's Tabela 3 (= ANBIMA 2021 §22) in exact arithmetic — rate T-6, exponent T-14, flows A-9, PU T-6; the one irrational step an enclosure at 10^-48 — under the pre-registered settlement hypotheses (buy D+1, sell D+0, D+1x skipping 24/31 December) and printed readings (TRUNC-2, ROUND-2); the convention census; every OFF and REFUSED row with its exact value; a Python decimal decider sharing no code re-deriving every exception and a seeded sample. Written by tools/run-pu-ledger.js; battery instruments/pu/battery.js.battery-gated the report
curveseeds-ledger.jsonThe NIST curve-seeds audit: Anthropic's 2026-10-16 claim that the fourteen NIST / ANSI X9.62 curve seeds are lrand48 candidates seeded from 1997–98 Unix timestamps (prime curves: twenty bytes of lrand48() >> 23 per candidate; binary curves: five 31-bit words from a halved clock) and that six base points (P-192, prime192v2/v3, prime239v1–v3) come from FreeLIP's generator — every checkable row re-decided from the POSIX drand48 specification, ANSI X9.62's SHA-1 derivation as FIPS 186-2 prints its intermediates (c for the prime curves, the normal-basis b for the binary ones) and FreeLIP's lip.c, by two deciders sharing no code (instruments/curveseeds/decide.py, stdlib; decide.js, BigInt), the published values read from the pinned FIPS text layer and OpenSSL table; the claimant's code pinned and never run; the readings beyond the checkable core listed with what would decide each. Written by tools/run-curveseeds-ledger.js; battery instruments/curveseeds/battery.js.battery-gated the report
optq-ledger.jsonThe open pull-request queue of teorth/optimizationproblems on 2026-10-15 (#210, #217, #221, #225, #226), decided where a finite exact object exists: the two Atris step functions (65,536 and 114,688 steps) decided exactly by Kronecker-substitution products for C_1a and C_1b; Jaswal's two-law entropy certificate for C_3c decided with the sumdiff instrument and a rational mixture after checking the digit map injective; Patankar's 20a and 20c by exact moments, 23b read, 16a and 70a not attempted; OpenAI's BorsukNine for 28a by the earlier kernel record; Mosaic's de Bruijn--Newman package inventoried file by file and REFUSED for evidence not in the submission. Written by tools/run-optq-ledger.py; battery instruments/optq/battery.py.battery-gated the report
wowii-ledger.jsonFive Written-on-the-Wall-II (Graffiti.pc) conjectures — 353, 360, 373 on total domination in trees, 395b and 396 on 2-domination in connected graphs, open in DeLaViña's archive since 2009/2010 — and the explicit counterexamples filed against them on google-deepmind/formal-conjectures on 2026-10-14, each witness rebuilt from the claimant's Lean tables (read as text; the fork rewrote the cited commits the same evening) and both sides of each inequality computed exactly: gamma_t by a tree DP sandwiched by certificates, gamma_2 by exhaustion or the private-vertex argument, averages as rationals. All five refute their conjectures; the Lean statements read against the archive (395b's added hypothesis; dd_mode on a unique mode). Written by tools/run-wowii-ledger.py; battery instruments/wowii/battery.py.battery-gated the report
aerp-ledger.jsonThe community certificates filed against google-deepmind/alphaevolve_repository_of_problems (issues #4-#12, 2026-06 to 2026-10, none answered by the owners), decided from the pinned notebooks' definitions in exact integers and rationals: sphere-free grid sets from four contributors (n = 13 to 40, every 4-subset keyed by its exact hyperplane, the 5-subset determinants cross-checking the smaller sets), the two 58-point isosceles-free sets at n = 32, the ring-loading instances at 47/42 and 9/8 under both k-ranges the thread and the notebook use, the far-block sum-difference set rebuilt from its rule, the 23,646-integer strong-form counterexample; the 3-D sofa and the 86-digit-modulus instance REFUSED for want of a finite object. Written by tools/run-aerp-ledger.py; battery instruments/aerp/battery.py.battery-gated the report
bandeira-ledger.jsonThe Qiushi Engine's disproof of Bandeira's Open Problem 0.2(a) at n = 5 (Oxelra-AI/Bandeira-0.2a-open-source @ c4137344, MIT), audited: Lai--Lim's (5,5) sum-of-squares SDP built from its definition in exact rationals and decided infeasible at lambda = 120 by OUR OWN Farkas certificate (corpus/bandeira/certificate-cm.json, y0 = -1, denominators <= 10^4), the claimant's certificate decided under three transpose conventions (it holds for the SDP its builder wrote, without the basis transposes, and not for the sum-of-squares form), their Lean read at the pins (it proves (-M) PSD for their matrices and IsEmpty of structures that assume the pairing; no SDP is defined in Lean), the equivalence and the headline read with the Positivstellensatz step cited; every pivot re-decided by a BigInt JavaScript second implementation. Written by tools/run-bandeira-ledger.py; battery instruments/bandeira/battery.py.battery-gated the report
countex-ledger.jsonS. Sra's open library of AI-found counterexamples (arXiv 2608.29595; github.com/suvrit/count-ex-machina @ dbf67374, Apache-2.0), decided case by case: for each of fourteen cases the verdict of a standard-library decider written from the case's statement and reading its published certificate, the register verdict (CERTIFIED, or PARTIAL with what rests on a cited theorem, an all-m argument or one of two readings named), the number of checks, and what the authors' own checker does. Written by tools/run-countex-ledger.py (--check re-derives it).battery-gated
openai-math-kernel-7ef5c0cc.jsonLane K of the openai/math audit at the release's second pin, 7ef5c0cc (2026-10-26): the 20 Comparator challenges ADDED or CHANGED since the audited pin, re-run on GitHub-hosted runners under pre-registration amendment 17 with nanoda switched on, each row decided by the words fixed before the run; kept apart from the fd4aeeb2 ledger. Written by tools/record-openai-math-kernel.js --pin.battery-gated
openai-math-hodge-statement.jsonA READING of the Hodge challenge at openai/math 7ef5c0cc (READ: sources fetched at the pin, parsed and sha256-pinned; nothing built, nothing run): the challenge states HodgeCM.hodge_conjecture_for_cm_abelian_varieties with its own definitions, the solution with the release's own copies of them (IsProjective, HasComplexMultiplication, hodgeClasses, algebraicCycleClassSpan); the two import closures (259 and 33,170 modules) share no modules, so Comparator's statement comparison (Compare.lean 84-85 at d03acab1) cannot pass. What was not checked is listed in the record, the copies' faithfulness and any run reaching the comparison first. Written, and re-derived with --check, by tools/record-openai-hodge-statement.js.battery-gated
openai-math-mub6-records.jsonThe N(6) = 3 saved run published with openai/math 7ef5c0cc, read by an independent records reader (tools/check-openai-math-mub6.py, written from VERIFY.md and the manuscript; the release's checker never run, no C++ compiled): CERTIFIED as the records' consistency and coverage only — it does not decide N(6) = 3. 311 files pinned in corpus/openai-math/mub6-7ef5c0cc/.battery-gated
openai-math-kernel.jsonLane K of the openai/math audit (github.com/openai/math @ fd4aeeb2, Apache-2.0; pre-registered in corpus/openai-math/preregistration.json): each of the release's 416 Comparator challenges re-run on GitHub's Linux runners with nanoda, the independent Rust kernel, switched on (the release enabled it for 2), the config and statement bytes sha256-checked against the census first; for the 10 configs that declare definition holes, a second run with the holes emptied, deciding whether the solution's definitions are the bodies the challenge displays. Per challenge: CERTIFIED (both kernels accept), REFUTED (Comparator rejects, reproduced by a second run) or REFUSED (no decision, the stage and reason recorded), every run kept. Written by tools/record-openai-math-kernel.js from the runs' artifacts (corpus/openai-math/kernel-runs/).battery-gated
openai-math-statements.jsonLane S of the openai/math audit: the Comparator statements of each of the 242 families that have one, READ against the headline OpenAI wrote for the family, the abstracts and OpenAI's scope note — MATCHES, NARROWER (declared, unlinked or undeclared), DIFFERENT or SUPPORT-ONLY, clause by clause with verbatim evidence; every family whose first word was not MATCHES or NARROWER — DECLARED read again by a second reader, a disagreement recording the less severe word and showing both. A reading, not a certificate. Written by tools/record-openai-math-statements.js from corpus/openai-math/readings/.battery-gated
reading-recall.jsonHow often the openai/math statement readings catch a defect, measured: 12 one-line defects planted in the audit's short MATCHES statements beside 12 unaltered controls, read blind under the pre-registered brief by fresh AI readers with the protocol's second reading — all 12 flagged at the planted line by both pipelines, 11 with the key's word (the twelfth read as declared, the case the key marks arguable), no control flagged; recall at least 0.735 at 95% on twelve plants, for short statements and an alert brief only. The packets, key, readings and every reader's tool calls are in corpus/openai-math/recall-2026-10-19. Written by tools/score-reading-recall.py.battery-gated
openai-math-finite.jsonLane F of the openai/math audit: the finite cores a census of all 719 abstracts named before any was decided (corpus/openai-math/f-lane.json, 66 rows), each decided by a standard-library exact decider written here from the paper before the authors' code was read (instruments/openaimath/finite/), reading the release's own bytes with their sha256 recorded, with forged variants that must not certify; per row the verdict, whether it decides the whole headline or a finite component, every check, and NEEDS DATA where the witness is asserted but not published. Written by tools/run-openai-math-finite.py (--check re-derives it).battery-gated
turan-ledger.jsonThe registry's asterisked C42 <= 0.6906538 (Turán's pure power sums), decided from the certificate it cites (S. Griego, v1.0.0; parameters and printed enclosures transcribed): |1 - alpha| < C, |eta| < C, tau > 1/3 exactly, and the limiting inequality |Y| < C D with K, A1, A2, D as series in a complex exponent summed with their tail bounds in Decimal intervals. PARTIAL: the asymptotic reduction is the note's prose. Written by tools/run-turan-ledger.py (--check re-derives it).battery-gated
sumproduct-ledger.jsonThe registry's asterisked C84b <= 1.999281 (the real sum–product exponent), decided from the note it cites: the note's chain with its own constant 0.0007 holds (zeta by Euler–Maclaurin, Gamma by Stirling, each with its remainder; the regulator estimate at the note's s; the product and additive factors; the size bound), and for every s, X, Y the same chain gives c <= 0.0007151 < 0.000719. REPAIRED to 1.9993. Written by tools/run-sumproduct-ledger.py (--check re-derives it).battery-gated
fei-ledger.jsonThe registry's asterisked C71 > 6.521845710923046575 (Fourier entropy–influence), decided from the cited n = 18 truth table (Numaro, Zenodo 21497769, CC BY 4.0): the sha256 binding, balance, Parseval, I = 261/128 exactly, H in outward-rounded Decimal intervals, H/(I-1) enclosed to 44 digits, and the function logic-monotone. Written by tools/run-fei-ledger.py (--check re-derives it).battery-gated
fei-second.jsonThe registry's C71 > 6.521845710923046575 decided a second time from the n = 18 truth table by tools/verify_fei.js (JavaScript BigInt, no code shared with instruments/fei/fei.py or the claimant): H in closed form, 15379/1024 − (41067/32768) log2 3 − (225/8192) log2 5 − (1089/2048) log2 11 − (33573/32768) log2 19, I = 261/128 by the spectrum and by the edge boundary, H/(I−1) enclosed to under 10^-151 and CERTIFIED, inside the ledger's enclosure and around an Arb ball from fei.py's own spectrum; twelve planted claims of known truth decided by both, every one as expected; found at 470fe0b2 and fixed the same day (findingsAtPin): the ledger's printed upper end was a truncation below the value, and fei.py's two-word verdict printed REFUTED on six claims the three words REFUSE (one of them true); fei.py now has the three words and its own word equals the reading on all twelve.battery-gated
sumdiff-ledger.jsonTwo asterisked lower bounds of the optimization-constants registry (teorth/optimizationproblems), decided from the entropy certificates it cites: C3b >= 1.77898884 (a 13-point law) and C3c >= 1.6747338950414058 (a 147-point law with 320-digit denominators), and the 95-point C3c bound it superseded — each ratio enclosed to 40 digits by exact pushforwards and outward-rounded logarithms, with the certificates' own longer strings, the printed improvement, and the observation that the 147-point certificate's checker compares in doubles. Written by tools/run-sumdiff-ledger.js (--check re-derives it).verify_sumdiff.py
kernel-arb-audit.jsonThe interval kernel checked against Arb, an arbitrary-precision ball library written by other people (python-flint): about 946,000 seeded random and adversarial cases across 19 operations — the four operations, powers, exp, log, sin, cos, tanh, the platform-pad helpers and the special functions of the likelihood certifier — each enclosure required to contain the exact result or range computed in Arb at 256 bits and up, every malformed input required to be refused, and two planted wrong kernels required to be caught. Written by tools/audit-kernel-arb.js with tools/audit-kernel-arb.py; --check is the battery's smaller sample.battery-gated
kernel-itf1788.jsonThe interval kernel run on ITF1788, the IEEE Std 1788-2015 interval test suite (oheim/ITF1788 at b6ee1e24, every file pinned): each test of an operation the kernel implements, each result required to contain the tightest expected interval, refusals classed, not-applicable tests counted by reason, two planted wrong kernels caught; 1,891 tests run, no enclosure violation, two membership answers at ±∞ declared as an open finding. Written by tools/audit-kernel-itf1788.js (--check re-derives it).battery-gated
dreal-compare.jsoncert-machine and dReal 4, a δ-complete decider written by other people, on the same claims: the flow-line gate's 32 claims and nine receipts and the benchmark's entropy family, each claim put to dReal as two satisfiability queries on a GitHub-hosted runner (run 40522733573, the wheel pinned by sha256) at δ = 10⁻³ and 10⁻⁹. No contradiction either way; dReal weaker on the ten entropy claims whose gap to the bar is below one double; it has no shape check. Written by tools/dreal-compare.js (--check re-derives it from the run's pinned artifacts).battery-gated
entropy-arb-audit.jsonThe entropy deciders' arithmetic checked against Arb, an arbitrary-precision ball library written by other people (python-flint): about 299,000 seeded random and adversarial cases across 29 arithmetic operations of instruments/bigfloat (as instruments/sumdiff and instruments/optq/twolaw.js call it) and of the Python standard library's decimal (as tools/verify_sumdiff.py, tools/verify_twolaw.py and instruments/fei/fei.py call it), plus the registry's own certificates and the enclosures the ledgers record — no arithmetic enclosure misses its exact value, every printed enclosure contains it and every malformed certificate is refused; the first run (2026-10-19, commit 470fe0b2) found seventeen defects — printed enclosures cut toward zero (fei.decide, the verify_* printouts, certs/fei-ledger.json, the rhoPython of certs/optq-ledger.json) and Python doors that decided malformed certificates — fixed the same day and kept in the record as foundAtPin with their witnesses and fixes; seven planted wrong functions required to be caught. Written by tools/audit-entropy-arb.js with tools/audit-entropy-arb.py; --check is the battery's smaller sample.battery-gated
method-eval.jsonThe method evaluated as a decision procedure: planted claims whose truth is known by construction (on E8 and D4, and on the registry's three entropy certificates) decided by the system's own deciders — false ones refuted, true ones certified, malformed ones refused — beside what the other records measured: the kernel against Arb, the conventional checks that failed on the same objects, the refusals a stronger method could convert, and the red controls the control build runs. Written by tools/run-method-eval.js.battery-gated
selfaudit-outside.jsonThe self-audit's first outside mutant set: 7 boundary mutants of the EinsteinArena circles-rectangle rows built by maximusrufus (GitHub) (cert-machine#1), each the smallest nextafter move breaking exactly one constraint under the strict reading, pinned as received and decided by the ledger's circles() path: 0 certified, 7 located at their target, both starting bases witnessed. Written by tools/run-selfaudit-outside.js.battery-gated
selfaudit-concord.jsonThe self-audit of cert-machine (pre-registered 2026-10-20, notes/selfaudit-preregistration-2026-10-20.md), phase 4 — concordance: every register row whose record was decided by two or more programs, compared field by field — the word, the witness or the violating-pair count where one exists, the enclosure where one exists — read from the records (the gnnw second implementation's run, the fei second decision, the BigInt audit beside the exact-double one on every mc100 tensor row, the mc100 full pass and both claimbox checkers beside the kissing certify, the rerun kit's standard-library verifiers), nothing re-run; and the 416 kernel challenges of the openai-math audit carried in as the hosted profile exactly as recorded (GitHub's Linux runners, two kernels per run), never merged into the laptop table. Written by tools/run-selfaudit-concord.js; --check in make test.battery-gated
selfaudit-mutations.jsonThe self-audit of cert-machine (pre-registered 2026-10-20, notes/selfaudit-preregistration-2026-10-20.md), phase 3 — the mutation campaign, M1 and M5: for every register row of a built family, mutants derived from the row's pinned record entry by one named transformation of the pre-registration's class table, each FALSE one witnessed by a standard-library script that shares no code with the decider (the violated condition printed), each decided by the row's own decider — FALSE must be REFUTED, TRUE CERTIFIED, MALFORMED REFUSED — and by a double-precision checker at three tolerances (the conventional check's accept rate on witnessed FALSE mutants); false certifications, false refutations, refusals and discards counted per family; every mutant pinned by the sha256 of its canonical JSON, regenerable from the pinned record by its class; the families still to build listed as pending while the record is partial. Written by tools/run-selfaudit-mutations.js; --check in make test.battery-gated
selfaudit-run.jsonThe self-audit of cert-machine (pre-registered 2026-10-20, notes/selfaudit-preregistration-2026-10-20.md), phase 2 — the runner: every command of the rerun kit (the re-derive command, the standard-library verifier, the second implementation where they exist) run on this laptop under /usr/bin/time -l, one process at a time, under the two pre-registered profiles — portable, a 60 s wall enforced by the runner (over the cap REFUSED: resources, the row not covered), and extended, no cap — twice each, cold then warm, reported separately and never averaged: wall seconds, user+sys CPU seconds, peak resident set in bytes, the record's bytes, the exit, the word (the register rebuilt from the re-derived record and its rows compared — the kit's rowsMoved rule), the sha256 after, the leaf diff between the pinned record and the re-derived one split into the declared stamps and the rest, the per-row timing the record carries, the cold run diffed against the warm one (the pre-registration's kill switch); every tracked file a run wrote restored to its pin and the restore verified. Reproducible = differs from the pin only at the declared stamps and moves no row. Written by tools/run-selfaudit.js; --check in make test.battery-gated
selfaudit-inventory.jsonThe self-audit of cert-machine (pre-registered 2026-10-20, notes/selfaudit-preregistration-2026-10-20.md), phase 1 — the inventory: per register row and per record, what exists before anything is measured — the command that re-derives the record, the standard-library verifier and the second implementation from the rerun kit, the kit's measured seconds for every command (the whole kit run once on the 132-row register), whether the re-derivation writes the record or only checks it and whether a written record came back byte-identical to its pin, the per-row timing field, and whether the row is mutable under the pre-registration's class table or why not. Every field derived from the register, the kit, the kit's run record and the records; the class table is the pre-registration's, pinned by sha256. Written by tools/run-selfaudit-inventory.js; --check in make test.battery-gated
stepfun-replay.jsonThe four step functions behind the optimization-constants registry's C_1a and C_1b rows of 2026-10-18 — Atris's 65,536- and 114,688-step functions and EinsteinArena's AgentDiscover (C_1a) and CodexProLong (C_1b) — decided exactly by two implementations that share no code (Python Fraction, JavaScript BigInt; the products by Kronecker substitution), against the bounds the registry prints: all four CERTIFIED with the same fraction in both, five red controls refuted or refused in both. CodexProLong's heights as published sum to n/2 + 1.9e-13 and are refused; the bound is decided for them scaled to Σh = n/2.battery-gated
autocorr-replay-next.jsonThree newer family-1 rows of the optimization-constants registry replayed as the second party (2026-11-02): C_1c [Kos2026] (K = 24576, #261), C_1d [STEPS2026] (600 cells, #247) and C_1d [AER2026] (#248) under both readings, decimal and binary64 — each re-decided exactly by two implementations sharing no code (instruments/optq/autocorr.py: Fraction direct sums; the JavaScript BigInt decider) and compared with the page's own fractions: 4 CERTIFIED, 1 NEEDS DATA ([SCIEL2026]: a restricted Zenodo record, no public bytes); AER's binary64 reading is 1.45998904690538324… where the page prints 1.4599890469053831… (the bound holds); every digest the pages print checked against the pinned bytes; 5 red controls fired in both. Written by tools/replay-autocorr-next.js; --check re-derives it.battery-gated the report
autocorr-replay.jsonThe registry's C_1c (Barnard–Steinerberger, rozetyp's integer step function) and C_1d (the signed third autocorrelation, a 300-cell function given in a pull request) decided exactly by two implementations that share no code (Python direct sums; JavaScript BigInt Kronecker products): C_1c >= 0.4103287 CERTIFIED with the claimant's fraction, whose decimal the page misprints; the C_1d bound as printed, 1.463071582607559, is below its own certificate's exact value 1.46307158260755932… and is REFUTED as printed, the certificate showing C_1d <= 1.4630715826075594 (CERTIFIED); four red controls refuted or refused in both.battery-gated
hseva-scipy.jsonWhat scipy.stats printed for the same series the return-level ledger certifies — the claimant's record, not a certificate: for each NDBC buoy and block, four of the paper's families fitted by scipy's fit routine with the location fixed at zero and as the default call leaves it (location free), the parameters as printed and the 100- and 1000-year levels its ppf gives, with the scipy, numpy and Python versions. Written by tools/run-hseva-scipy.py (instruments/hseva/.venv); each printed fit is decided in certs/hseva-ledger.json by its 100-year level and its likelihood (the 1000-year levels are recorded, not decided).battery-gated
c86-replay.jsonThe registry's C_86 <= 1.8117251 (R. Pinho, #227, the Schur–Siegel–Smyth trace constant): the certificate's six finite conditions — a 629-cell step measure on [1/20, 1037/200] and eleven integer polynomials with rational weights, the hypotheses of Smith's sufficiency criterion and the bound's arithmetic — decided by two implementations that share no code with each other or with the claimant's checker (Python Fraction with its own outward-rounded series logarithm; JavaScript BigInt rationals and eqcert intervals): exact where the data is rational, sound enclosures where a logarithm enters, the support inequality proved on 3,658 boxes by a second-order Taylor form; CERTIFIED in both, the bound 144938007612277893/79999999999994000 the certificate's own fraction; six red controls refuted in both. The step from the conditions to the bound is Smith's theorem, read and not re-derived.battery-gated
c16-replay.jsonThe registry's C_16 enclosure 2.1562247706 ≤ C_16 ≤ 2.1562256466 (maximusrufus, pull request #246, merged asterisked) decided as the second party from the pinned certificates by two implementations sharing no code, the claimant's checkers read as text and never run: the lower end CERTIFIED exactly (the trial polynomial's value 2.15622477064423579…); the upper end PARTIAL — its finite core certified on all 84 boxes against the printed digits (the boxes support 2.1562256458), its analytic steps (a weighted Cauchy–Schwarz bound, the tail bounds, the asymptotic g) read and re-derived by hand; five red controls. Written by tools/replay-c16.js with instruments/optq/c16.py (--check re-derives it).battery-gated
graphon-k4.jsonThe registry's C_89 (K4) Ramsey-multiplicity upper bound 0.0301388794 ([SK2026], pull request #255, merged asterisked) decided as the second party from the pinned 3840-block step graphon: its monochromatic K4 density, an exact rational, by instruments/optq/graphon_k4.c (C, every block, no symmetry, nine primes, run on a RunPod pod) and instruments/optq/graphon-k4-second.js (JavaScript, exact integers, one term per orbit of block pairs under seven exactly verified block permutations), agreeing on both integers and on every block: CERTIFIED, the fraction the page states, printed rounded up. Written by tools/replay-graphon-k4.js (--check re-lifts the residues and re-derives block 0).battery-gated
graphon-k4-pod.jsonThe RunPod run behind the C_89 (K4) replay's first implementation: the pod, the commit the kernel was fetched at, the build line (the kernel and the certificate by sha256, the compiler, the CPU), the selftest and the kernel time; imported by tools/import-runpod-graphon-k4.js beside the verbatim per-block residues in certs/graphon-k4-blocks.txt.battery-gated
graphon-k4-automorphisms.jsonThe seven block permutations of the C_89 (K4) step graphon that the second implementation folds by (proposed by instruments/optq/graphon_k4_aut.py, each verified exactly against all 3840 × 3840 block values by tools/replay-graphon-k4.js before it is used).battery-gated
graphon-replay.jsonThe registry's C_89b <= 0.0016870052 (K5; a 192-block step graphon, J. SK, pull request 277) and C_89c <= 0.7422548616 * 2^-14 (K6; a step graphon on Z_2^10, pull request 279): each monochromatic density decided as an exact rational by two implementations sharing no code with each other or with the claimant's evaluators (instruments/optq/graphon_k5.py + graphon_k6.py, Python Fraction; instruments/optq/graphon-second.js, JavaScript modular counting + CRT and the Z_2^10 reduction in BigInt) — CERTIFIED and CERTIFIED, both implementations agreeing with the fractions the pages state; the printed K5 bound is the value rounded up, the K6 one up/nearest. Controls: both perturbations move both values, a printed bound one unit low fails, W = 1/2 gives 2^-9 and 2^-14, the PPSS graph gives its published 2320651/1358954496. The step from a graphon's density to the constant is the standard argument, read.battery-gated
claimbox-decisions.jsonThe four claimbox objects decided from the claimant's bytes alone by instruments/claimbox/check.py (the generic exact evaluator over the finite quantifier): C_1d's ratio over the 300 cells of PR 224 (REFUTED as printed, the repair CERTIFIED; the value equals the autocorr record's fraction digit for digit), AlphaEvolve's 593 vectors (K(11) >= 593 CERTIFIED), EinsteinArena's 605 vectors (REFUTED, 9,510 violating pairs under the register's decimal-digits reading) — each with its witness, count, time and the object's sha256; the battery re-derives the light one and holds the heavy ones to this record unless CLAIMBOX_FULL=1battery-gated
c82-replay.jsonThe registry's two asterisked C_82 upper bounds (the essential minimum of the Zhang–Zagier height; R. Pinho's certificate, #229, 0.2534449, and Épi's construction, 0.2535744749068227): Doche's limit-point bound B decided from the pinned constructions by two implementations sharing no code (JavaScript: Gaussian integers and eqcert intervals; Python: integers and a priori rounding-error bounds) — every root of every composed factor certified by Gershgorin's theorem on exact Weierstrass corrections, the integral bounded on dyadic panels; both rows CERTIFIED in both (B = 0.25344468725… and 0.25356893…), with three controls and six red controls. Doche's theorem is read, not re-derived. Written by tools/replay-c82.js with instruments/optq/c82.py.battery-gated
lueker-replay.jsonThe optimization-constants registry's two asterisked C_31 rows (the binary Chvátal–Sankoff constant; L. Jack's PR #231: Lueker's 2009 automaton method at h = 9 and h = 10, γ₂ ≤ 0.825101 and ≤ 0.824120), replayed: the automaton rebuilt from Lueker's paper alone in two implementations that share no code with each other or with the claimant (instruments/lueker/mh.py, the reference; mh.c, held to it), calibrated on Lueker's Table II for h = 2..8 (7/7 reproduced: every state count, every λ to nine digits, every bound to six), run with witness vectors of our own, the certificate pass under directed rounding, the bound evaluated outward. h = 9: 51,425,006 states, λ ≤ 0.364708361168896, γ₂ ≤ 0.8251002730 against the printed 0.825101 — CERTIFIED; h = 10: 400,253,317 states, λ ≤ 0.385532597279844, γ₂ ≤ 0.8241195407 against the printed 0.824120 — CERTIFIED. 9/9 red controls. Written by tools/run-lueker.py.battery-gated
cryptids-audit.jsongoogle-deepmind/cryptids at commit 664cd039, audited BY HAND (arm H of the benchmark pre-registered in notes/cryptids-benchmark-preregistration-2026-10-23.md): one lane for the source with its own parsers and simulator — the five tables derived from three upstream formats, the digests, the state and cell counts, the Goldbach embedding under the write-up's own map, every bootstrap and lockstep checkpoint the producer's checker asserts and the ones it skips (the ten-million-step ZF correspondence, riemann_120 not halting within its printed 89,775,610-step bootstrap) — 152 claims, each with the file, its digest, the quote where there is one, and one of three words: 143 CERTIFIED, 1 REFUTED (the ZF write-up's transition counts are the non-halting cells plus one), 8 REFUSED with the rule. Written by tools/run-cryptids.py; recomputed by tools/run-cryptids.js.battery-gated
ea542-readings.jsonAlphaEvolve's EinsteinArena solution 542 (26 circles in the unit square, score 2.6359830849176076) under both readings of its own bytes, in exact rationals: the decimals as printed — REFUTED, 3 circles outside the square, 7 overlapping pairs — and the doubles the platform verified — REFUTED, 3 overlapping pairs, the same three the declared-claim checkers find. Written by tools/run-ea542-readings.py; shown on /reports/easota.html §5.battery-gated
verify-gym-scorecard.jsonVerify Gym v0 (under development): the reference policies on the frozen held-out set (sha256 789cead61a5c…), every answer decided exactly twice, by environments/verify_gym's Python decider and its JavaScript twin, sharing no code; the reward is certified decimals, 0 if refuted, malformed or unchecked. 5 reference policies and 7 open-weights model rows (120 tasks x 8 samples each, every reply stored and graded by both deciders). Pre-registered in notes/verify-gym-preregistration-2026-10-31.md; re-derived by environments/verify_gym/scorecard.py --check.battery-gated
verify-gym-filter.jsonVerify Gym, the verifier in the loop: for each of the 7 model rows, the 8 stored replies per held-out task turned into one answer three ways (the first, the majority, and only the replies both deciders call CERTIFIED, the tightest), nothing new sampled. The CERTIFIED-only filter lets through 0 false brackets on every row, counted; 2,451 distinct answers decided twice. Pre-registered as deviation 7 in notes/verify-gym-preregistration-2026-10-31.md; re-derived by environments/verify_gym/filter.py --check.battery-gated
ramsey-ledger.jsonGoogle's 18 Ramsey lower-bound graphs for AlphaEvolve (arXiv 2603.09172; google-research 0d94f8c4, pinned in corpus/ramsey/alphaevolve), each decided by an exhaustive clique search written here from the definition: a file R(s, t) >= m is CERTIFIED when its graph on m − 1 vertices has no s-clique and no independent t-set, both searched to the end. instruments/ramsey: clique.py the reference, clique.c the threaded kernel held to it root by root (graphs up to 250 vertices searched by both). 17 CERTIFIED, 1 REFUSED (R(8, 18) >= 1052: independent-set side undefined/undefined roots). Long searches keep every finished root in corpus/ramsey/runs. Written by tools/run-ramsey-ledger.py; --check re-searches the small graphs and re-reads the long ones.battery-gated
wsp-regrade.jsonMIT CSAIL's Weight-Space Programming MATH-500 results re-graded exactly from the released outputs (RikiyaT/lm_understand-logs 4d09ba6d; the model card's re-run d1671a17; MATH-500 6e4ed1a2): every first-sample answer of the post's unedited and 50-pass runs (1000) graded by instruments/wsp/grade.py (three-valued, exact, standard library: CORRECT / WRONG / REFUSED) and compared with the claimants' math-verify flags — 980 decided, 20 refused, 0 disagreements; the 400 released texts re-extracted (the last \boxed{}) with 0 differences; every flag re-summed to the printed accuracies. The unedited model finishes 35 of 500 first samples, all 35 correct; the edited one 303, 241 correct: the gain is termination. Written by tools/wsp-regrade.py; --check re-derives it.battery-gated the report
wsp-grade-second.jsonThe Weight-Space Programming answers graded a second time by a JavaScript grader (instruments/wsp/grade.js), written from the convention of instruments/wsp/grade.py and sharing no code with it: every (gold, prediction) pair the Python grader graded in wsp-regrade.json and wsp-baseline.json — 7440 pairs — re-graded and the verdict words compared, 0 disagreements; the last closed box re-read on the cached baseline texts with every extraction equal; three red controls and a planted flip of one recorded verdict. Its first run found two disagreements ("3i" and "-3i" read as text by the Python grader and REFUSED against a complex gold where the convention says WRONG), fixed 3 November and both records re-derived. Written by tools/wsp-grade-second.js; --check re-derives it.battery-gated the report
seal-battery.jsonThe Verify Seal battery (instruments/seal/battery.py, standard library): the commitment SHA256('verify-seal-v1\n' || salt || SHA256(archive)) opened under 12 planted forgeries (a byte flipped; a wrong, truncated or newline-terminated salt; a file added, removed or renamed; the recorded digest or version edited; a part missing) — 0 certified; 23 cases in all with the determinism check, the date rule (an anchor after the claimed date refuses), the unconfirmed-anchor cases and the one-line shell re-derivation; 3 red controls on a deliberately broken opener. Not a certificate of any seal: the record that the opener refuses what it must. Re-run by --check in a temporary directory.battery-gated
macmahon-witnesses.jsonThe ten minimum universal sets of MacMahon cubes (Jason Davies, 2026-11-01; Johnson–Roldán Conjectures 4 and 8; GPT-6 Astra + Lean 4): the SUFFICIENCY half CERTIFIED from the released witnesses with our own geometry — the label table lists all 30 varieties once, the 10 witnessed sets are the ten two-triangle sets, 300 of 300 witnessed constructions build their target under our 24 rotations and eight slots; 3 red controls. The necessity half (no other 12-multiset, no 11-multiset) is not decided here. Written by instruments/macmahon/check.py; --check re-derives it from corpus/macmahon (pinned at 7561f6d63b64).battery-gated the report
macmahon-kernel.jsonThe kernel lane of the MacMahon classification (Jason Davies, 2026-11-01): the claim at the commit the Palomar registry names, built with its own toolchain on a GitHub runner and audited by leanprover/comparator v4.35.0 with nanoda on, on the configuration it ships — 10 theorems, CERTIFIED: Lean default kernel accepts the solution; nanoda kernel accepts the solution; our own #print axioms names only the three standard axioms. The statement reading (Challenge.lean against the paper's Theorem 1) is kept apart as MATCHES. With certs/macmahon-witnesses.json (the sufficiency half from the released witnesses, our own geometry), the classification is decided twice here with no code shared with the claimant. Written by tools/record-macmahon-kernel.js from the run's artifact; --check re-reads it.battery-gated the report
wsp-baseline.jsonThe Weight-Space Programming baseline (Stage 3): the unedited Qwen/Qwen3.5-0.8B @ 2fc06364 generated on the 500 MATH-500 problems @ 6e4ed1a2 under the pre-registered conditions (C1, C2, C3: the post's own settings as the control, the model card's thinking-mode and non-thinking text settings) on one rented GPU (NVIDIA H200, vLLM 0.33.0), 6,000 texts brought back sha256-verified and every one graded by instruments/wsp/grade.py (three-valued, exact): per condition the first-sample and all-sample accuracy on the decided subset and as a floor, the boxed share, the cut share; the pre-registered reading (Amendment 1 of 11-03: stop rule A on the control, the bands) applied as written — mostly a settings effect: a no-edit arm recovers most of 48.1: C2 22.2%, C3 45.6%. Written by python3 -I tools/wsp-baseline.py; --check re-derives it where the texts are cached.battery-gated the report
wsp-side-claims.jsonThe Weight-Space Programming side claims — the viral critic's checkable ones — decided from the authors' released logs alone (RikiyaT/lm_understand-logs @ 4d09ba6d; 190 files pinned; nothing of the claimants' run): M2 REFUTED; M3 CERTIFIED; M4a CERTIFIED; M4b CERTIFIED (one level) · REFUTED (one run replayed); M5a CERTIFIED (20x over PPO) · CERTIFIED (lost in two other games) · REFUSED (PPO weak: a judgement, no released criterion); M5b CERTIFIED. M2: the dose (6) was chosen over 3,680 answers scored on PRACTICE problems (GSM8K train, MATH train), none a MATH-500 problem by id or by text — "thousands" yes, "test" no. Written by python3 -I tools/wsp-side-claims.py; --check re-derives it.battery-gated the report
wsp-weights.jsonMIT CSAIL's Weight-Space Programming edit of Qwen3.5-0.8B (GPT-6 Astra, no training; the post of 2026-11-02) decided from the bytes of Qwen/Qwen3.5-0.8B @ 2fc06364 and RikiyaT/Qwen3.5-0.8B-weight-space-programming @ d1671a17 by two implementations sharing no code (tools/wsp-weights.js, instruments/wsp/weights.py; the claimants' scripts read, never run), the sub-claims stated first in corpus/wsp/claims.json: the same 488 tensors; exactly 2 differ (layers 15 and 19 mlp.down_proj), sha256 as printed; 130,188 bfloat16 entries differ (the post prints 131,072, the 131,072 entries of the 64 columns per tensor it addressed); the fraction as exact rationals over four counts (0.015% of the release's 873,438,784 parameters, 0.017% of the language model, 0.016% only over a round 0.8 B); the columns the run's manifest names; a rank-1 witness checked entry by entry in binary32 with round-to-nearest-even to bfloat16, REFUSED (the best found misses 107 of 131,072 entries, each at a near-cancelled value); the proposer's reading of the dose (6: W' = W − 6u(uᵀW)) kept beside it, computed. Two red controls caught; the deciders agree on every fact. Written by node tools/wsp-weights.js; --check re-derives it where the 2.5 GB inputs are cached (corpus/wsp/PINS.json).battery-gated the report
xx-ledger.jsonThe real root of x^x = y: every fraction bracket an AI model (claude-opus-5-5) proposed and claimbox stated, for 105 roots (y = 2..100, 255..257, 3124..3126), re-decided here from the copies LIFT-claimbox.json made (corpus/claimbox-xx, claimbox 850213d) by one exact integer comparison per side, x > p/q iff p^p < N^q·q^p, with code that shares nothing with claimbox or the receiver: 210 of 218 CERTIFIED, the 8 planted wrong brackets REFUTED, the four whole-number roots pinned from both sides, and the eight x^x = 64 claims (6 certified, 2 planted refuted; two sides of 2.6 million digits); claimbox's word agrees on every claim; 216 of 216 mutants flipped. The reduction (x^x increasing above 1, exactly one positive root, the comparison deciding the bracket) is proved in Lean (certs/xx-reduction-lean.json, re-hashed here); the negative-base convention is read. cert-machine's own claim that the root of x^x = 64 is transcendental goes through the same decider and is REFUSED (1 of 1), its reason and what would decide it written beside it. Written by tools/run-xx-ledger.py; --check re-hashes and re-decides everything.battery-gated the report
bh-shadow.jsonM87*'s decided layer (Phase 0, pre-registered): the Kerr critical curve (Bardeen 1973) enclosed in outward-rounded interval arithmetic over every spin in [0, 0.998] at 17° (d̄ ∈ [9.670896, 10.392772] M for every spin in the range), its extents at the viewer's views of 45° and 80°, θg per published mass row as an exact rational, the predicted shadow in µas, its ratio to the EHT ring (COMPARED, never a verdict) and the ISCO clock in days; a second decider with no shared code agrees on 57 quantities; 22 claims (15 CERTIFIED, 1 REFUSED, 6 REFUTED). Written by tools/run-bh-shadow.js; --check re-derives it. Shown at /instruments/black-hole/.battery-gated
bh-maps-check.jsonM87*'s lensing maps (Phases 1–2, COMPUTED): 24 files in corpus/bh-maps/, rays traced backward through the Kerr metric in double precision at four spins at 17° and two views off it, graded against the decided curve and Gralla & Lupsasca's closed form: AGREES on every check, 8 red controls as named. Written by tools/run-bh-maps.js; --check re-derives it. Shaded at /instruments/black-hole/.battery-gated
xx-reduction-lean.jsonThe x^x reduction proved in Lean 4 with Mathlib (lean/xx-reduction, Lean v4.34.1, Mathlib d13f23b7): x^x <= 1 on (0, 1], strictly increasing on [1, oo); for N >= 2 exactly one positive real root; for whole numbers 1 <= q <= p, p/q < x iff p^p < N^q·q^p and the other three comparisons, with the whole-number bounds at q = 1. 15 theorems PROVED: lake build exit 0, only the three standard axioms, no sorry, each replayed by Lean's kernel inside Comparator and by nanoda (run 41221355209). Positive reals only: the negative-base convention stays a reading. Written by tools/record-xx-reduction.js from a green run of .github/workflows/xx-reduction.yml; tools/run-xx-ledger.py re-hashes the Lean file against it.battery-gated the report
cryptids-recall-h.jsonThe twelve pre-registered plants applied to copies of the cryptids corpus and run through arm H (the hand lane): 10 of 11 caught, the miss a proof file no source pins; the green control (a trailing comment) moved nothing. Written by tools/run-cryptids-recall.py.battery-gated
claimbox-cryptids-decisions.jsonArm C of the cryptids benchmark: the claimbox objects its reader wrote from the same sources (corpus/claimbox-cryptids/objects, copied from claimbox by LIFT-claimbox.json), decided by the receiver's decider for small Turing machines, instruments/claimbox/tm.py — digests, counts, derivations, configurations after a number of steps, entries, lockstep tapes, stage entries, the embedding — 97 objects: 95 CERTIFIED, 2 REFUTED. The checker (check.py) holds each object's record to these rows.battery-gated
claimbox-cryptids-decisions-js.jsonThe same objects decided by instruments/claimbox/tm.js, the second implementation of tm.py sharing no code: the benchmark builder counts the disagreements (0).battery-gated
cryptids-benchmark.jsonThe cryptids audit run twice, compared on the eight pre-registered metrics: claims stated (152 by hand, 107 through claimbox + 22 refused by the grammar), pins, refusals with a rule, planted-defect recall (10/11 and 9/11), concordance (124 of 128 paired claims agree), cost, what an outsider must trust, and the 8 gaps of the producer's checker. Written by tools/build-cryptids-benchmark.js from the two arms' records; --check refuses when it would differ.battery-gated
cryptids-kernel.jsonThe kernel lane of the cryptids audit: the repository at its pin built with its own toolchain (Lean v4.35.0-rc4, the Mathlib cache) and audited by leanprover/comparator at the matching release using the configurations it ships — all (22 theorems, 3 permitted axioms): CERTIFIED, Lean's kernel and nanoda; constructive (10 theorems, 2 permitted axioms): CERTIFIED, Lean's kernel and nanoda. A concordance with the repository's own CI, never a verification of the mathematics. Written by tools/record-cryptids-kernel.js from .github/workflows/cryptids-kernel.yml's artifacts.battery-gated
apn-statements.jsonGoogle DeepMind's AlphaProof Nexus (Science 2026): the nine published Erdős proofs' statements equal formal-conjectures' at the commit the repository builds against, definitions verbatim, nothing shadowed, no kernel-bypassing token; nine statements over seven problem numbers; erdos_741.parts.i demoted to a variant by formal-conjectures afterwards. Written by tools/apn-statements.py (5 red controls).battery-gated
apn-kernel.jsonAlphaProof Nexus's nine Erdős proofs and the corrected #741(i), each checked by Comparator against formal-conjectures' own statement and replayed through Lean's kernel and nanoda on hosted runners: all ten CERTIFIED; two red controls (a weakened challenge, a sorry) rejected. Written by tools/record-apn-kernel.js from the runs of .github/workflows/apn-kernel.yml.battery-gated
apn-oeis.jsonAlphaProof Nexus's OEIS results: 38 published of 44 claimed; every definition reproduces the OEIS terms; 32 statements match, 3 narrower, 1 stronger, 2 degenerate (A382590 counts prime factors with multiplicity; A237271 defined by an already-proved characterization); three conjectures already proved on record before the preprint (A325046, A382590, A237271). A reading by an AI agent, re-checked. Written by tools/apn-oeis.py.battery-gated
blind-spot-inspect-ledger.jsonThe blind-spot chip task under a second framework: every inspect eval log re-scored sample by sample with the package's own grader (adapters_v0._decide — the function the verifiers rubric calls; a KILL simulated on the netlist, EQUIVALENT against the SAT proof, no answer key), the per-rung counts derived from that re-score rather than from Inspect's metrics, the three reference policies run through the whole pipeline as controls (sat 1.000, abstain 0.000, never −0.556 on the 36-task draw), anthropic/claude-haiku-4-5-20251001, anthropic/claude-opus-5, anthropic/claude-sonnet-5 run end to end, and the human-baselines file (NO DATA yet) pinned by sha256. Written by the ledger runner inspect/ledger.py beside the environment; the first deliverable of the METR plan.battery-gated
gsm8k-ledger.jsonGSM8K's answer key (Cobbe et al. 2021; 1,319 test and 7,473 train items) re-decided in exact rational arithmetic: every calculator annotation and every readable prose equation evaluated from the expression it prints and compared with the value it prints, the #### answer read against the last computed value, each item classed REPRODUCED / ANSWER_IN_PROSE / ANSWER_UNDERIVED / ROUNDED_STEP / PRINTED_STEP_WRONG / NO_STEPS / REFUSED with its witness; and every test item's mechanical verdict set beside GSM8K-Platinum's human one (Vendrow et al. 2025), joined by question text. Rebuilt by tools/run-gsm8k-ledger.py in three seconds; the harnesses' scoring rules (inspect_evals, lm-eval) pinned by commit and read against the key's forms.battery-gated
horizon-ledger.jsonMETR's Time Horizon 1.1 re-decided as certificates: for each of 23 agents, in the raw runs of METR's analysis repository (March 2026) and in the per-task file behind the live metr.org chart (May 2026), the penalised logistic fit of success on log2 human minutes proved by the Krawczyk operator to hold exactly one zero of its score in a box (outward-rounded interval arithmetic, exp and log from certified series), the 50 % and 80 % horizons as enclosures over the box, METR's printed coefficients and horizons read against them, and the post-2023 doubling time as an exact least-squares line through the certified horizons — an interval. Rebuilt by tools/run-horizon-ledger.py in two minutes. The instrument that will decide this machine's own time-horizon number once its runs exist.battery-gated
zeta-hankel-ledger.jsonThe Fauzan/Calegari Hankel-determinant irrationality method measured past ζ(5): per instance the exact content-normalised integer polynomial P (sha256 fingerprint), its content, and log P(ξ)/h² as an arb ball, re-run on this machine from the lifted engine (instruments/zetahankel, pinned in PROVENANCE.json) beside the bench’s value — the four headline families (ζ(3), ζ(5), ζ(7), Catalan G) at every recorded h, Calegari’s K = 12n family to h = 99, the v_p profiles behind the k = 5 → 7 arithmetic cost, test2’s quadrature log, and a stdlib cross-check sharing no code; the 323-family wall is carried as lifted records under a reading the ledger labels an extrapolation, and the race context as unverified. Written by instruments/zetahankel/rerun.py; re-read and red-controlled by instruments/zetahankel/battery.py at every build.battery-gated the report
zeta7-anand-audit.jsonP. Anand’s “Zeta 7 is Irrational” (Zenodo 22920911 v1) audited, with issue #1 on gmDevi/zeta-7-21-lean (huntrontrakkr, a third party) decided: I_out recomputed exactly from the paper’s (54), (58), (59), (62) under both readings of (71)–(73) (453803/288000, 445163/288000; the printed −11002997/720000 is Table 5’s integral), calibrated on Fauzan’s 127751/96000, cross-checked by finite-K integer and arb prime sums; (121) from (64)–(69); A0 = Fauzan’s A*; the (85) tail bound; U’s ingredients in arb; 24 margin scenarios for (118), positive in every one that takes I_out from the paper’s formulas (the smallest decided +2.256), no cutoff rescuing it; the paper’s own family measured exactly at n = 1–3 (certs/zeta7-anand/measure.json); a grep census of the Lean repository. REFUTED: the proof route, not the theorem. Written by instruments/zeta7audit/decide.py; re-derived and red-controlled by instruments/zeta7audit/battery.py at every build.battery-gated the report
mc100-alphatensor-q.jsonPhase 4b of the hundred pre-registered machine claims, the alphatensor-q pool: the 12 AlphaTensor keys over Q named by the pre-registration’s rule (corpus/machine-claims-100.json), each a decomposition of the matrix-multiplication tensor decided equation by equation in exact arithmetic (instruments/strassen + a BigInt re-check) and re-derived by verify_strassen.py; 12 CERTIFIED. Rebuilt by tools/run-mc100-tensors.js; read into the claims register by run-claims-ledger.js.battery-gated
mc100-alphatensor-f2.jsonThe alphatensor-f2 pool of the hundred: the 8 AlphaTensor keys over F2 named by the rule, each decided over F2 (CERTIFIED) and also over Q, where every one fails — the ring the scheme lives in is part of the claim. Rebuilt by tools/run-mc100-tensors.js.battery-gated
mc100-alphaevolve-nb-matmul.jsonThe AlphaEvolve results notebook’s part A in the hundred: 15 matrix-multiplication decompositions over Z, 0.5·Z and 0.5·C read as exact rationals by convert_alphaevolve.js (which learned the 0.5·C ring for this run, its old refusal kept as a red control) and decided as exact tensor identities, the <4,4,8> rank 96 rebuilt from its printed recipe; 15 CERTIFIED. Rebuilt by tools/run-mc100-tensors.js.battery-gated
mc100-einstein-arena.jsonThe EinsteinArena pool of the hundred, wave 1: 10 of the platform’s 29 current bests decided from the sha-pinned API bytes — the kissing rungs (594, 841, and the open 605 / 842 decided NOT kissing configurations, the penalty reproduced to every printed digit, the exact worst-pair excess as rationals) and the packing-shaped rows through instruments/easota, the score agreement judged at the platform’s own minImprovement; 9 CERTIFIED, 1 REPAIRED; the other 19 listed with what would decide them. Rebuilt by tools/run-mc100-einstein.js.battery-gated
mc100-station-v2.jsonThe Station pool of the hundred, wave 1: the three-dimensional Keller map CERTIFIED non-injective with constant Jacobian determinant −6 (16 terms, degrees 4, 6, 7; three rational points onto (1, 7/3, 0)) through instruments/polymaps; the pool’s nine other rows listed with what they need. Rebuilt by tools/run-mc100-station.py.battery-gated
strassen-certificate.json10 fast matrix-multiplication algorithms as exact tensor identities over Q and F2 — including AlphaTensor’s rank-47, decided both ways.verify_strassen.py
bilinear-certificate.json9 bilinear algorithms for POLYNOMIAL multiplication over F2 — full, truncated and cyclic products — each found by the generation front’s free flip-graph walk and decided by instruments/bilinear, which rebuilds the target tensor from its name rather than trusting the scheme handed to it. Every entry stores its scheme in full, so any reader can re-decide it; the published bounds each one is measured against live in corpus/bilinear-bounds.json and are not results of this repository.battery-gated the report
lambda4-audit.jsonThe adversarial audit of the lambda(4) proof: an independent clause walk sharing no code with the engine — inner products by direct trigonometric summation, family and subfamily membership by plain integer arithmetic, thresholds read from the campaign record, finite-clause sets re-certified fresh by the calibrated instrument. Every gcd-reduced 4-set in the box must be reached by an explicit clause of the proof (generic, family dot, closure, finite, delegated, or the definitional witness); a set with no clause is a hole and aborts. Also carries the full theorem sweep of the box: zero refuters.battery-gated
claims-ledger.jsonThe claims desk ledger: every externally published mathematical claim this machine has decided, one row per claim, each DERIVED from the record that decided it — a claim with no record gets no row. Origin is tracked separately from verdict, because everything decided so far was self-initiated and the submitted count stays published even while it is zero.battery-gated
grader-pilot.jsonThe environment run against real models, and the reference policies run on the SAME seeds so the columns are the same tasks rather than a comparable sample: 360 calls at $1.92 of a $4.00 cap, worst case reserved before every one. Every row is scored by the shipped Python package — tools/run-grader-pilot.js picks tasks and pays for calls and decides nothing. Truncations and model refusals are recorded and excluded from the rates, because a harness artifact is not a model outcome.battery-gated
gym-record.jsonThe shipped environment, measured by RUNNING it: the difficulty dial (band size against the tolerance multiple, with the point below which no representable double fits), the corpus it draws on, the mix of a 2,000-task sample, and the two standing answers with how much of the ladder each one loses. Produced by tools/run-gym-record.js, which executes the Python package the way a buyer would rather than describing it.battery-gated
envs-record.jsonThe environments record: the fact corpus (every entry read out of a record in certs/ and sha256-pinned to it, because a canary asserts “provably wrong” and that may not rest on a re-typed decimal), the grader QA measurement across four reference grader shapes and three tolerances, the uniformity gym’s solver table, and the attacker ladder with the rungs that cannot be broken. Written by running the environments offline — no model is called and the harness refuses the network unless explicitly switched on.battery-gated
envs-ledger.jsonlThe append-only environments ledger: one row per (environment, rung, model, k) cell with pass rate, Wilson interval, wrong/refused split and the forgery-gate result for the run. Rows so far are reference and stub solvers only; a row produced by a real model is a decision, not a default.battery-gated
lambda5-audit.jsonThe independent audit of the lambda(5) theorem: a second walk sharing no code with the symbolic engine — inner products by direct trigonometric summation, condition membership by plain integer arithmetic on the record’s own condition vectors, and every set the float screen prunes sampled and re-certified exactly, so the screen is audited rather than trusted. It decides three things and says so: the THEOREM (every gcd-reduced 5-set in the box dips strictly below L(1,2,4,5,6), except the extremizer, which attains it — a set that did not would be a refuter and aborts), the FIRST LEVEL of the reduction (the engine’s symbolic model says an inner product is its base plus the deltas of the active conditions, and direct summation must agree at every set in the box; every set the generic argument does not close must satisfy one of the eight recorded family conditions), and the OBSTRUCTION by its mechanism rather than by search (on the double-sum core the cosines cancel identically on S(e, pi), so no nonnegative weight can start, and the comb closes every core point where no positive condition is active). It does NOT walk the interior of the eight closure trees; the lambda(4) audit does that for lambda(4).battery-gated
lambda4-campaign.jsonThe lambda(4) campaign record. Phase 0: Mercer's Section-5 strategy (INTEGERS 19 (2019) #A4) executed mechanically — lambda(2) and the whole lambda(3) proof re-derived with exception families discovered and thresholds derived, not transcribed; the lambda(4) generic case with its 14 exception conditions discovered and matched against the paper's hand-written list; the measured reduction: five of the fourteen carry strictly negative delta, so NINE families remain. Phase 1, in progress: each family closed so far carries its full derivation here — second-level dot theorem, subfamily cones, derived thresholds, decided finite parts. d = 2c is CLOSED. Re-derived symbolically at every build by the lambda4 battery; finite parts pinned here and sampled at every run.battery-gated
sublevel-tao179.jsonThe Tao #179 sublevel campaign (Erdős #1038, supremum side): rational-weight discrete measures on [-1,1] are monic root-constrained polynomials via |q| < 1, and this record holds certified sublevel measures — the 2√2 witness, grid champions including the interior cubic champion near 2.7542 and the quintic transition peak near 2.8011 — plus per-degree branch-and-bound THEOREMS: odd degrees strictly below 2.82 < 2√2, even degrees localized to [2√2, 2.82845] with (x²−1)^{N/2} attaining the left end. Every measure an outward enclosure from BigInt Sturm isolation; the box bound calibrated to equal the measure on thin boxes.battery-gated
mercer-mu5.jsonThe mu(5) ladder, mu(5) ≤ 1 + π/m rung by rung to m = 20 — every exceptional tuple closed by one exact rational evaluation.battery-gated
mu-table.jsonThe Newman min-modulus table: every set in the named boxes exhausted, champions certified, orbits classified, conservation per row.battery-gated
mu-table-40.jsonThe wider-box extension of the mu table — billions of sets exhausted, the narrow-box crowding artifacts corrected.battery-gated
lambda-table.jsonThe lambda table: the source lab’s rows reproduced exactly, plus rows that lab’s record does not hold and no table this lab has read holds — a claim about the certificates, not about priority.battery-gated
census-high-periods.jsonThe Hénon high-period census, p = 13..16: every period point of the classical map found and counted exactly, the plane exhausted box by box, each row re-checked with zero unmatched — the proving ground the interval instruments were calibrated on.battery-gated
entropy-henon.jsonThe certified entropy lower bound for the classical Hénon map: h-sets, covering relations, and the exact spectral argument.battery-gated
erdos290-tail-ext.jsonThe Erdős #290 sweep extension: degrees closed beyond the cited page, the constant’s enclosure tightened degree by degree.battery-gated
mfg2p-regime-map.jsonThe TWO-population regime map: every cell of the coupling plane with its verdict and its exact witness — the symmetric cross-coupling s against the attack-defense asymmetry d, two disjoint enclosures where uniqueness provably fails, the Lasry-Lions monotone strip where it does not, and the refusal reason everywhere else. There is no single-file certifier for this map: it is decided by labs/mfg2p/box2p.js and re-gated by that lab’s battery at every build of its report.battery-gated the report
mfg-regime-map.jsonThe mean-field-game regime map: every cell of the coupling–potential plane with its verdict and its exact witness — two disjoint enclosures where uniqueness provably fails, the monotone enclosure where it does not, and the refusal reason everywhere else.mfg-certify.js
matmul-eval-ledger.jsonlThe matmul eval’s append-only ledger — every campaign row, every verdict, every tag; the leaderboard is built from this file.battery-gated
chowla-records.jsonCertified Chowla merits c(A) = -min_x sum cos(ax) / sqrt|A|, one row per set size n, each an exact UPPER bound proved by instruments/trigmin for the set stored beside it. THIS FILE MAKES NO CLAIM ABOUT CHOWLA’S COSINE PROBLEM. Chowla’s question is asymptotic — whether c can be driven to 0 as n grows — and a low c at one n is a fact about that n. The measured trend here RISES with n (0.6558 at n=10 to 0.8205 at n=30), which is consistent with Chowla’s conjecture that the order is sharp, i.e. evidence against the direction, not for it. Explicit sets with small c are occupied literature (Mercer, INTEGERS 2019; Bedert, arXiv:2509.05260); these rows beat only the classical families recomputed here beside them.battery-gated
matmul-eval-corrections.jsonCorrections to rows already written in the matmul eval ledger. The ledger is append-only and is never rewritten, so a row that turns out to be MISLABELLED is corrected here and the correction is applied when the report displays it — currently one: 90 rows tagged v4-effort-low ran at the API’s DEFAULT effort, because the harness dropped its --effort argument in campaign mode. A correction naming a tag no row carries, or claiming a row count the ledger does not hold, refuses the report build.battery-gated
matmul-loop-ledger.jsonlThe verifier-in-the-loop ledger — every trajectory round with its verdict and the exact feedback sent; the loop report is built from this file.battery-gated
skyaudit-forecast-ledger.jsonlThe prediction ledger — interval FORECASTS committed before their target day (sha-pinned, append-only) and scored after in exact rationals; coverage claims are conformal counting theorems, never model faith. Wrong forecasts stay forever.battery-gated
forecast-gym-ledger.jsonlThe Forecast Gym’s append-only ledger — every proposer’s forecast sha-committed before its outcome exists, every score an exact Winkler rational; the gym report and its admission board are built from this file.battery-gated
lambda56-campaign.jsonThe lambda(5)/lambda(6) campaign record (Chowla’s cosine dip, the non-monotonicity program): lambda(5) = −L(1,2,4,5,6) closed in full — the generic case certified, all eight exception families closed with derived thresholds, 1725 finite sets decided, the extremizer walled — and lambda(6) in progress with nine of its ten families closed in this record. The double-sum-core obstruction theorem (no classical weight works on b+c = a+d = e) and the Fejér–Riesz comb weight that beats it are re-proved by the battery at every run.battery-gated
terra-sigmastar.jsonThe exact crossover of the MFG splitting program: σ* = 1/(8π²), discount-free, DECIDED IN EXACT RATIONALS — the crossover polynomial factors, the γ-coefficient is identically zero (checked k = 2..12), the band-pass identity and both harmonic windows are exact, π enters only as a Machin bracket of width 1.3e-44.battery-gated the report
terra-bracket-table.jsonThe bracket table under the splitting theorems: seven certified rows straddling both predicted thresholds — negatives below the amplitude threshold and past the crossover, replications, and the threshold pin r_c ∈ [0.13, 0.14] with the exact-rational prediction landing inside. Honest counting lives here: two theorems plus a table, never eight.battery-gated the report
frontier-measurement.jsonThe concentration frontier of the congestion-MFG enclosure as a MEASUREMENT over data lifted and sha-pinned from the source lab: six monotone σ ladders at N = 14 (certified up to a bisected A⋆, refused beyond, first refusal always Z1 ≥ 1), A⋆ rising 5–10 % from N = 14 to 40 so the fixed-N boundary is a lower bound on the method's frontier, and the N-free ceiling A_rec — where the one N-independent coefficient of the tail bound reaches 1 — bit-identical across N. The a-axis unevaluated; the kernel not re-run here.battery-gated the report
price-band.jsonThe clearing price of the Gomes–Saúde price-formation model (arXiv:1807.07088 §6, linear-quadratic with a set-point potential) closed in exact rationals on the source lab's supply scenario: Π_n = −Θ at every grid time and Ξ(T) = x̄₀ + ∫Q as rational identities, the price affine in the supply with non-positive coefficients, so a ±15 % forecast box becomes a price band attained at its corners (twenty interior paths inside it, exactly; three η values). The lab's finite-difference kernel ported bit for bit and MEASURED: cleared in the controls to 1e−14 while 12 % of the day's energy vanishes at its wall; state-constraint walls halve the loss, flux clearing removes it and converges to the closed form at first order. Certificates carry five falsifiers.battery-gated the report
agtable-redecided.jsonTables 1 and 2 of Ashrafyan–Gomes (arXiv:2403.02785, the fully-discrete semi-Lagrangian price-formation scheme) re-decided: both analytic test solutions enclosed in interval arithmetic (prices to 1e−13, the value function's constant to 1e−7 by a midpoint rule whose remainder a second-order interval jet bounds), the clearing identity decided at 21 times, the scheme written from the paper and run on its four meshes at its tolerance and at 1e−8, every printed relative error met by an interval: 13 of 24 cells REPRODUCED to their two digits, 5 within 15 %, 6 differ; the tolerance is 39 % of the finest printed price error; the printed initial density, read literally, is not a density. Verdict MEASURED.battery-gated the report
regatlas.jsonThe p-Laplacian regularization of Ferreira–Gomes–Üçer (arXiv:2506.21212, operator (3.1)) on the one-dimensional discounted first-order MFG with H = |p|²/2 − m and V = A cos 2πx: a 10 × 5 atlas in (A, ε) with every cell PROVED (a unique classical even solution with positive density, by a radii polynomial in a derivative-weighted ℓ¹ space) or REFUSED by name (Z1 ≥ 1 where the principal coefficient varies too much for a diagonal tail); ε = 0 certifies as far as any ε > 0 and further than ε = 1, because after eliminating m the game is a second-order elliptic equation in u; the distance ‖u_ε − u_0‖_2 decided as a bracket at every doubly-proved cell, ≈ ε at small ε and sublinear beyond.battery-gated the report
hbar-band.jsonThe effective Hamiltonian H̄(P) of the one-dimensional cell problem with H = p²/2 + V (Gomes–Yang arXiv:1810.03483 §6) enclosed as a band: P₀ = ∫√(2(max V − V)) enclosed around the closed form 4/π for sin, cos and −sin; FLAT values decided exactly; ROTATING values bracketed by bisection on a rigorously enclosed integral, the bracket widening toward the degeneracy and the point P = 4/π left UNDECIDED; the projected Mather density enclosed at two rotating P. Their Table 1 (separable 2-D cosine, P = (1.5, 2.5)) enclosed below 1e−6, the quoted Gomes–Oberman 4.4099660 ABOVE the enclosure, the paper's own k-sequence BELOW it as an entropy penalization must be; Table 2's exact value decided as 1 with the printed 0.96476 a penalization gap of 0.035.battery-gated the report
maxval-cylinder.jsonThe maximal value function of Gomes–Üçer (arXiv:2606.28378, Theorem 1.8) drawn on an explicit first-order time-dependent game with a vacuum, built here: a parabolic bump of shrinking support in closed form, verified as an MFG solution cell by cell (HJ and transport residuals enclose 0 on the support, the strict subsolution inequality holds off it, u(T) = u_T), and the maximal solution u* enclosed on every vacuum cell between the free Hopf–Lax value and the cheapest path proved clear of the support; u* ≥ u wherever both are decided, with the gap proved positive on most of the vacuum.battery-gated the report
monoflow-spectrum.jsonThe Lasry–Lions monotone flow of the quadratic stationary MFG at seven certified equilibria: the linearised form c∫δm² + ∫m(δu′)² returned from the assembled interval Jacobian on every instance, and at five equilibria (three monotone, two on the herding branch) a Krawczyk-enclosed eigenvalue with Im μ away from zero — the flow is not a gradient flow under any Riemannian metric there. Two instances NOT DECIDED and recorded as such.battery-gated the report
aag-empty-region.jsonAlharbi–Ashrafyan–Gomes §3.2 (AMO 2026), the one-dimensional first-order MFG with an entry and a relaxed exit: the empty region {V < 0} decided cell by cell with the cells holding the three exact roots REFUSED at every budget of a ladder, the two value functions enclosed and distinct, the contact-set complementarity evaluated as intervals (contact without exit at j₀ = 0, with exit at j₀ = 1/10), case 2 certified for every γ in [−0.5, −0.3].battery-gated the report
afg-enclosure.jsonThe first-order stationary mean-field game of Almulla–Ferreira–Gomes (DGA 2017) in the case the paper says has no closed form (b = cos² 2πx, ∫b = 1/2): the game reduced through its constant current to two scalars (j, H̄), enclosed in a Krawczyk box with every integral a rigorous midpoint quadrature — a classical solution exists, is locally unique, its density is certified positive; the paper's b = 0 closed form is the control and is hit. Global uniqueness cited (their Lemma 2.3), not re-proved.battery-gated the report
mfg-cap-multiplicity.jsonCertified multiplicity for the ergodic quadratic MFG past its pitchfork: at each of six couplings, at least THREE distinct exact solutions enclosed in pairwise disjoint uniqueness balls with certified positive density — exactly where Lasry–Lions monotonicity is silent. The c = −9.5 monotone-regime boundary, where the branch collapses and no claim is made, is recorded too.battery-gated the report
attnflow-theorems.jsonThe attention-wing theorems: a rational-kernel token flow chosen so equilibrium and stability are DECIDABLE in exact ℚ — the consensus spectrum proved β- and p-free by exact dual-number expansion, the two-cluster cross-weights identically zero with the honest p = 1 boundary, the reduced flow’s double zero decided by exact division (every pitchfork claim refuted), and the phantom-bifurcation taxonomy with its live artifact.battery-gated the report
facelaw-theorem.jsonThe face-dimension law k = |shared| − cons + z, decided against the exact ℚ null space on two seeded 4,000-network ensembles; every instance where the natural shortcut fails (precisely the z > 0 cases) is ENUMERATED here so any reader can re-run any one.battery-gated the report
janela-workability.jsonJanela's month: at six basin nodes of the Ifremer WAVEWATCH III hindcast (1993–2024, 3-hourly), for every Hs limit and window length, the exact count of start times that hold a whole window under the limit (OPLIM), under DNV-OS-H101 Table 4-1's forecast limit (OPWF = α × OPLIM) and under the site alpha's, per month and the year, with the mean wait to the next window; integers from instruments/window/workability.js, nothing fitted. the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
janela-bands.jsonJanela's calibrated forecast band for the ECMWF open-data forecast at the eight open-sea sites of 2026-10-06 (ledger proposer calibrated-v1, pinned by this file's sha256 in apps/janela/audit/commit.js — a rebuilt record is a NEW proposer version, never a silent swap): per site and lead bin, split-conformal bounds on observed ÷ forecast significant wave height and on the wind difference, claiming 9/10 coverage, from forecast × satellite-altimeter matchups; each cell CERTIFIED-COVERAGE as an exact counting statement or refused for too few pairs. the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
janela-bands-noaa.jsonJanela's calibrated forecast band for NOAA WAVEWATCH III (GFS-Wave) at the same sites (ledger proposer calibrated-noaa-v1, pinned by this file's sha256 in apps/janela/audit/commit.js — a rebuilt record is a NEW proposer version, never a silent swap): per site and lead bin, split-conformal bounds on observed ÷ forecast significant wave height and on the wind difference, claiming 9/10 coverage, from forecast × satellite-altimeter matchups; each cell CERTIFIED-COVERAGE as an exact counting statement or refused for too few pairs. Two calibrated bands decide on their union (providers-v1). the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
janela-bands-sergipe.jsonJanela's calibrated forecast band for ECMWF at the Sergipe-Alagoas region (ledger proposer calibrated-sergipe-v1, pinned by this file's sha256 in apps/janela/audit/commit.js — a rebuilt record is a NEW proposer version, never a silent swap): per site and lead bin, split-conformal bounds on observed ÷ forecast significant wave height and on the wind difference, claiming 9/10 coverage, from forecast × satellite-altimeter matchups; each cell CERTIFIED-COVERAGE as an exact counting statement or refused for too few pairs. The node is 5 km off the coast and the passes see the sea 40–100 km out, so the band carries the shelf gradient and leans high for the platforms — stated on every card. the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
janela-bands-noaa-sergipe.jsonJanela's calibrated forecast band for NOAA WAVEWATCH III at the Sergipe-Alagoas region (ledger proposer calibrated-noaa-sergipe-v1, pinned by this file's sha256 in apps/janela/audit/commit.js — a rebuilt record is a NEW proposer version, never a silent swap): per site and lead bin, split-conformal bounds on observed ÷ forecast significant wave height and on the wind difference, claiming 9/10 coverage, from forecast × satellite-altimeter matchups; each cell CERTIFIED-COVERAGE as an exact counting statement or refused for too few pairs. the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
janela-alpha.jsonDNV-OS-H101's alpha factor re-derived by the method that made Table 4-1 (the JIP as reconstructed by Wilcken 2012, gated on reproducing at least 16 of the table's 20 cells within 0.02 before any Brazilian pair is read) on the ECMWF × altimeter pairs: per site, design Hs and TPOP, the site alpha, its 90% day-bootstrap interval, the table's alpha and the reading (above, below, contains), with exact exceedance counts. A STATISTICAL estimate, not an enclosure; the 1-in-10,000 tail is a model extrapolation. the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
janela-alpha-sergipe.jsonThe same site-alpha estimate for the Sergipe-Alagoas region, where it sits at or under Table 4-1 (the opposite of the offshore basins). the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
janela-providers-eval.jsonWhich band decides, measured before it decided (providers-eval-v1): ECMWF's band, NOAA's, their mean and their union, each calibrated on the pairs before the split date and judged on the pairs after, which none of them saw — coverage, width, and at each Hs limit how many windows each would clear and how many of those the sea broke; reliability by wave regime and season. Written by apps/janela/audit/providers.py; a battery re-measures it. the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
janela-providers-eval-sergipe.jsonThe same held-out measurement for the Sergipe-Alagoas region, where each single-provider band under-covered out of sample and the union held. the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
janela-bands-aifs.jsonJanela's calibrated forecast band for ECMWF's data-driven AIFS Single (open data from the 2026-05-13 run) at the eight open-sea sites (ledger proposer calibrated-aifs-v1, pinned by this file's sha256 in apps/janela/audit/commit.js — a rebuilt record is a NEW proposer version, never a silent swap): per site and lead bin, split-conformal bounds on observed ÷ forecast significant wave height and on the wind difference, claiming 9/10 coverage, from forecast × satellite-altimeter matchups; each cell CERTIFIED-COVERAGE as an exact counting statement or refused for too few pairs. Graded, never deciding: kept out of the bands the product decides with (providers-eval-aifs-v1). the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
janela-providers-eval-aifs.jsonWhether ECMWF's data-driven AIFS earns a place beside IFS and NOAA (providers-eval-aifs-v1, dated before the pairs were judged): every band calibrated before 2026-08-01 and judged on the passes after — IFS, NOAA, AIFS, IFS on AIFS's short window, their mean and unions; the deterministic forecasts' bias and RMS by lead. Written by apps/janela/audit/providers_aifs.py; a battery re-measures it. the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
janela-postproc-eval.jsonA correction learned from the satellites, judged on months it never saw (postproc-eval-v1, dated before judging): IFS and NOAA combined by least squares per site and lead bin, then the same conformal band, beside ECMWF's band and the deciding union — recorded as measured, not used. Written by apps/janela/audit/postproc.py; a battery re-measures it. the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
eth-kernel.jsonThe kernel lane of the check of the two claimed refutations of the Exponential Time Hypothesis (OpenAI's openai/math family 378 and Anthropic's formal-math eth/), at pinned commits on one RunPod CPU pod: Comparator on each claim's own challenge, Lean's kernel and nanoda, #print axioms from our own file, leanchecker --fresh. CERTIFIED means the Lean theorem states exactly the claim's own challenge statement, uses only the three standard axioms, and two independently written kernels accept it; it does NOT mean the Lean statement is the paper's theorem nor that ETH is false (corpus/eth-refutation/readings/). Written by tools/record-eth-kernel.js from tools/import-runpod-eth.js.battery-gated
eth-bridge.jsonThe bridge lane of the same check: the textbook ETH (Impagliazzo–Paturi: s_k > 0 for every k ≥ 3) stated once in Lean over an abstract model, instantiated with each claimant's own machine model and input encoding, and a Lean proof that each claimant's own statement implies it is false there (OpenAI: exact_count_and_sat → ¬ETH for PrimitiveMachines on encodeCNF; Anthropic: ETHIsFalse → ¬ETH for FinTM2 on encClauses, its definitions shown equal to the generic ones), and the same for the counting hypothesis #ETH (SharpETH; Anthropic's on the formulas MainTheorem speaks of). PROVED means lake build exit 0 on the claim's own Lean and Mathlib, only the three standard axioms, no sorry; since 2026-10-29 every theorem is also replayed by Lean's kernel inside Comparator and by nanoda (kernels per theorem in the record). The cross-model simulations (to a word RAM) and the encodings' polynomial rewriting stay prose. Written by tools/record-eth-bridge.js from a green run of .github/workflows/eth-bridge.yml.battery-gated
eth-tsavo-bridge.jsonThe replay of a third party's bridge between the two claims: TSavo's Bridge.ethIsFalse_of_claim (github.com/TSavo/eth-bridge @ 34f9ca20), OpenAI's challenge statement as a proposition implies Anthropic's MainResults.ETHIsFalse, built inside Anthropic's eth project as its README says, on a GitHub-hosted runner. Our own statement checks first (OpenAI's pinned challenge rebuilt byte for byte from TSavo's copy; Anthropic's MainResults at its pin; the challenge file exactly Claim → ETHIsFalse; a census; red controls), then Comparator on TSavo's config with Lean's kernel and nanoda at the eth-kernel lane's versions, lake build Bridge and #print axioms from our own file. CERTIFIED means two independently written kernels accept the implication between the two labs' own statements, with only the three standard axioms; it does NOT mean ETH is false, and the gaps lead the record (the README's lakefile, the Lean and Mathlib versions between the lanes). Written by tools/record-eth-tsavo.js from a run of .github/workflows/eth-tsavo.yml.battery-gated
eth-hawkley-bridge.jsonThe replay of a third party's bridge between the two claims in the other direction from TSavo's: Daniel Hawkley's not_positiveRateETH_implies_ethIsFalse (namespace OAI.Bridges.AnthropicETH) (github.com/thinkthoughts/math @ d6b79b7d1, a fork of openai/math; RPI-378.3d), OpenAI ParityLifts' ETH predicate, negated, implies Anthropic's MainResults.ETHIsFalse, built inside OpenAI's lean/ project at 7ef5c0cc, decided from a GitHub-hosted run (.github/workflows/eth-hawkley.yml) by tools/record-eth-hawkley.js: CERTIFIED — the statements the two labs' own bytes, Comparator okay, Lean's kernel and nanoda accept, only the three standard axioms. NOT a decision on ETH, nor on OpenAI's checked theorem: the hypothesis is ParityLifts' predicate, whose link to OpenAI's theorem is the claimant's separate, heavier theorem, replayed on a pod when its record exists (the gaps lead the record).battery-gated
flashprove-check.jsonThe outside check of anthropics/FlashProve @ 9e2bdd8f (notes/flashprove-preregistration-2026-11-04.md), written by tools/record-flashprove.js from the hosted runner (routes 1 and 2, the CPU suite), the Lean pod (build, the two verifiers, nanoda on a public lean4export of sound_of_verify_at: 207,461 declarations), the GPU pod (quickstart-gpu.sh on an H100), the two blind readings and the exact numbers (corpus/flashprove/exact.json): 15 steps CERTIFIED, 4 REFUSED (the CPU suite's one failed row with no screen kept; Lake's segfault at 37,583/37,650 jobs and the two steps behind it), 2 NOT RUN (our own header parse; the GPU proof's re-check, our script's wrong paths); no tampered input accepted; five gaps both readers found, each already in the claimant's ledger. Not a review of the cryptography.battery-gated
eth-c1.jsonC1 of the ETH model-gap lane (notes/eth-model-gap-preregistration-2026-11-04.md): claimbox lean/eth-bridge @ 68a063bb, EthBridge.WordRAM.not_eth_ram — ETH is false on the word RAM at logarithmic word size (one fixed additive-basis program decides 3-SAT in c·⌈2^(δ·n)⌉·(L+1)^e + c instructions at every word size ≥ k·(⌊log₂ L⌋+1)), the statement written by hand and the proof by an AI agent — decided from one RunPod run (tools/runpod-eth-c1.sh; cpu3m 4 vCPU) by tools/record-eth-c1.js: CERTIFIED — the trusted statement byte-equal to the pin (corpus/eth-refutation/c1/statement.lean), the three standard axioms for the theorem and its three helpers from our file, nanoda accepting all 49,735 declarations beneath it and refusing both planted exports (sorry, a new axiom), leanchecker --fresh, and the planted changed statement refused by the statement check. Built on complexitylib's native counter (polynomial work space), not on either lab's statement; same operator as claimbox, so a separation of roles, not a second party.battery-gated
eth-chain.jsonThe Anthropic chain in one environment (claimbox lean/eth-bridge @ c1442b1): anthropics/formal-math eth/ at 16a5ce41 ported to Lean v4.36.0-rc2 (809 files, 762 byte-identical, 47 modified, every change in PORT.md) proves MainResults.ethIsFalse against the vendored MainResults.lean, and EthBridge.AnthropicChain.not_eth : ¬ETH follows through C2 — decided from one RunPod run (tools/runpod-eth-chain.sh; cpu5m 8 vCPU) by tools/record-eth-chain.js: CERTIFIED — the statement byte-equal to the pin, MainResults equal to Anthropic's, the three standard axioms, nanoda accepting all 77,276 declarations and refusing both planted exports, leanchecker --fresh, the planted changed statement refused, and lake comparator --paranoid accepting with all six checkers (run without its sandbox, recorded). It closes the second version seam for Anthropic's chain only; the port is a modified copy, said so.battery-gated
eth-comparator.jsonLean's own judge, lake comparator --paranoid (Lean's kernel, leanchecker-paranoid, lean4lean, nanoda, con-leche, con-ron), on C1 and C2 of the ETH model-gap lane, against challenges written from cert-machine's statement pins (tools/runpod-eth-comparator.sh; written by tools/record-eth-comparator.js): CERTIFIED — both accepted by all six checkers, both planted changed statements rejected for a mismatch; run without the judge's sandbox (bubblewrap cannot start on RunPod), recorded; the first run (6c6qd1lla7mtt5) a platform failure.battery-gated
eth-c2.jsonC2 of the ETH model-gap lane (notes/eth-model-gap-preregistration-2026-11-04.md): claimbox lean/eth-bridge @ 235fbfa, EthBridge.Anthropic.not_eth_of_ethIsFalse — Anthropic's ETHIsFalse (Mathlib FinTM2 on encClauses, vendored byte for byte, sha256 47f78a95…) implies complexitylib's ¬ETH on cslib's multitape Turing machine with encCNF, the statement written by hand and the proof by an AI agent (a degree-one certificate for one TM2 step of any program, the run as a fold over a unary clock, a padding reduction) — decided from one RunPod run (tools/runpod-eth-c2.sh; cpu3m 4 vCPU) by tools/record-eth-c2.js: CERTIFIED — the statement byte-equal to the pin (corpus/eth-refutation/c2/statement.lean), MainResults.lean equal to Anthropic's pin, the three standard axioms for the theorem and five helpers from our file, nanoda accepting all 23,430 declarations beneath it and refusing both planted exports, leanchecker --fresh, and the planted changed statement refused. The version seam (Anthropic's Lean v4.33.1 against v4.36.0-rc2 here) is read, not decided; same operator as claimbox, so a separation of roles, not a second party.battery-gated
eth-cslib-d1.jsonD1 of the ETH model-gap lane (notes/eth-model-gap-preregistration-2026-11-04.md): cslib-community/complexitylib @ 1b7d62a8, an AI-agent-built library, its native re-proof that ETH and SETH are false on cslib's deterministic multitape Turing machine with the binary encoding encCNF (PR #1338) and its word-RAM simulation of multitape machines (PR #2027), decided from one RunPod run (tools/runpod-cslib-eth.sh; cpu3m 8 vCPU / 64 GB) by tools/record-eth-cslib-d1.js: CERTIFIED — the build from source over Mathlib's cache exit 0, #print axioms from our file only the three standard ones for every headline, nanoda accepting the exported closures of not_eth (49,025 declarations), exact_count and executes_simProgram, leanchecker --fresh replaying the abstract module. A native re-proof of OpenAI's Proposition 6.4 route, not a bridge from either lab's statement; no nanoda negative control in this run (the gaps lead).battery-gated
eth-hawkley-heavy.jsonThe heavy link of Daniel Hawkley's ETH bridge: OAI.Bridges.ETH.not_positiveRateETH (¬ OAI.ParityWL.Complexity.PositiveRateETH, proved from OpenAI's original_sat_main inside thinkthoughts/math @ d6b79b7d1, a fork of openai/math at 7ef5c0cc), decided from one RunPod run (tools/runpod-eth-hawkley.sh; cpu3m 16 vCPU / 128 GB, peak 99 GB) by tools/record-eth-hawkley-heavy.js: CERTIFIED — his tree at the pin with OpenAI's 3,985 pinned files unchanged but the lakefile's six-line block, lake update moving no dependency, lake build of OpenAI's whole family-378 proof plus the bridge exit 0 (11,600 jobs, 39 min), #print axioms from our file only the three standard ones for his theorem and OpenAI's, nanoda accepting the theorem's 2.4 GB exported closure (348 s) and rejecting the negative control, leanchecker --fresh replaying the module into an empty environment (44 min). With certs/eth-hawkley-bridge.json this kernel-checks the chain from OpenAI's accepted theorem to Anthropic's ETHIsFalse inside OpenAI's Lean and Mathlib; the version seam to Anthropic's own environment is read, not decided (the gaps lead).battery-gated
eth-seam.jsonThe version seam in the third party's join, measured: OpenAI's statement as TSavo's bridge reads it on Anthropic's Lean v4.33.1 and Mathlib 0df444a3, against OpenAI's own on Lean v4.34.1 and Mathlib d13f23b7, each exported with every definition it reaches as kernel terms and compared, and each side's terms read back in the other environment by Lean's kernel. DIFFERENT: the statement is the same kernel term up to a binder name and all 74 OpenAI definitions are identical, but ℝ's +, ×, ≤, <, 0, 1, inverse and natural power are different terms in the two Mathlibs (the monoid hierarchy refactor, moved files), so no single kernel has checked that the two statements are one proposition. Written by tools/record-eth-seam.js from a green run of .github/workflows/eth-seam.yml.battery-gated
swell-island-boussinesq.jsonSwell's island model beside frontier-apps's Boussinesq model (Celeris; Madsen & Sørensen): the breaking height for a 1 m swell, case by case at the 12 beaches both cover (556 cases), overall, by period, by beach and on swells of 11 s and longer. A comparison in the grammar of design/WARRANT.md (v2.1, models as premises): a check of the island model's simplifications against fuller physics, not a validation against the sea. Written by apps/swell/sim/compare.js, which calls model/surf.js; Swell's battery re-derives it.battery-gated
janela-pnboia-check.jsonThe Brazilian Navy's PNBOIA moored buoys (GOOS-Brasil public archive) against the Ifremer WAVEWATCH III hindcast at each buoy's nearest node: pairs under the QC rule pnboia-qc-v1, bias, RMS, scatter index, a pointwise table at each Hs limit and the exact window counts on both series (mostly undetermined: the buoys report every few hours). Written by apps/janela/audit/pnboia.py. the Janela build (apps/janela/build.js) reads it through apps/janela/numbers.js and refuses a record that lost its shape; the method page is /janela/metodo/.battery-gated
terra-recert-t1.jsonThe T1 enclosure of the congestion-MFG splitting program: a radii-polynomial certificate around the stored candidate — exact instance parameters, certified ℓ¹_ν ball radius, contraction bound Z₁, closure margin, and density floor — re-certified here against the frozen published verifier extended with the data terms; nine falsifiers fire per instance at every battery run.battery-gated the report
terra-peakcount-t1.jsonThe certified peak count for T1: the exact number of strict maxima of EVERY density in the T1 enclosure ball, derived from CERTIFIED region signs only (instruments/critcount) — outward coefficient products, ball Lipschitz folded into the cell pad, never a float sign.battery-gated the report
terra-recert-t2.jsonThe T2 enclosure of the congestion-MFG splitting program: a radii-polynomial certificate around the stored candidate — exact instance parameters, certified ℓ¹_ν ball radius, contraction bound Z₁, closure margin, and density floor — re-certified here against the frozen published verifier extended with the data terms; nine falsifiers fire per instance at every battery run.battery-gated the report
terra-peakcount-t2.jsonThe certified peak count for T2: the exact number of strict maxima of EVERY density in the T2 enclosure ball, derived from CERTIFIED region signs only (instruments/critcount) — outward coefficient products, ball Lipschitz folded into the cell pad, never a float sign.battery-gated the report
terra-recert-t3.jsonThe T3 enclosure of the congestion-MFG splitting program: a radii-polynomial certificate around the stored candidate — exact instance parameters, certified ℓ¹_ν ball radius, contraction bound Z₁, closure margin, and density floor — re-certified here against the frozen published verifier extended with the data terms; nine falsifiers fire per instance at every battery run.battery-gated the report
terra-peakcount-t3.jsonThe certified peak count for T3: the exact number of strict maxima of EVERY density in the T3 enclosure ball, derived from CERTIFIED region signs only (instruments/critcount) — outward coefficient products, ball Lipschitz folded into the cell pad, never a float sign.battery-gated the report
terra-recert-t4.jsonThe T4 enclosure of the congestion-MFG splitting program: a radii-polynomial certificate around the stored candidate — exact instance parameters, certified ℓ¹_ν ball radius, contraction bound Z₁, closure margin, and density floor — re-certified here against the frozen published verifier extended with the data terms; nine falsifiers fire per instance at every battery run.battery-gated the report
terra-peakcount-t4.jsonThe certified peak count for T4: the exact number of strict maxima of EVERY density in the T4 enclosure ball, derived from CERTIFIED region signs only (instruments/critcount) — outward coefficient products, ball Lipschitz folded into the cell pad, never a float sign.battery-gated the report
terra-recert-t5.jsonThe T5 enclosure of the congestion-MFG splitting program: a radii-polynomial certificate around the stored candidate — exact instance parameters, certified ℓ¹_ν ball radius, contraction bound Z₁, closure margin, and density floor — re-certified here against the frozen published verifier extended with the data terms; nine falsifiers fire per instance at every battery run.battery-gated the report
terra-peakcount-t5.jsonThe certified peak count for T5: the exact number of strict maxima of EVERY density in the T5 enclosure ball, derived from CERTIFIED region signs only (instruments/critcount) — outward coefficient products, ball Lipschitz folded into the cell pad, never a float sign.battery-gated the report
terra-recert-t6.jsonThe T6 enclosure of the congestion-MFG splitting program: a radii-polynomial certificate around the stored candidate — exact instance parameters, certified ℓ¹_ν ball radius, contraction bound Z₁, closure margin, and density floor — re-certified here against the frozen published verifier extended with the data terms; nine falsifiers fire per instance at every battery run.battery-gated the report
terra-peakcount-t6.jsonThe certified peak count for T6: the exact number of strict maxima of EVERY density in the T6 enclosure ball, derived from CERTIFIED region signs only (instruments/critcount) — outward coefficient products, ball Lipschitz folded into the cell pad, never a float sign.battery-gated the report
terra-recert-t7.jsonThe T7 enclosure of the congestion-MFG splitting program: a radii-polynomial certificate around the stored candidate — exact instance parameters, certified ℓ¹_ν ball radius, contraction bound Z₁, closure margin, and density floor — re-certified here against the frozen published verifier extended with the data terms; nine falsifiers fire per instance at every battery run.battery-gated the report
terra-peakcount-t7.jsonThe certified peak count for T7: the exact number of strict maxima of EVERY density in the T7 enclosure ball, derived from CERTIFIED region signs only (instruments/critcount) — outward coefficient products, ball Lipschitz folded into the cell pad, never a float sign.battery-gated the report
terra-recert-t8.jsonThe T8 enclosure of the congestion-MFG splitting program: a radii-polynomial certificate around the stored candidate — exact instance parameters, certified ℓ¹_ν ball radius, contraction bound Z₁, closure margin, and density floor — re-certified here against the frozen published verifier extended with the data terms; nine falsifiers fire per instance at every battery run.battery-gated the report
terra-peakcount-t8.jsonThe certified peak count for T8: the exact number of strict maxima of EVERY density in the T8 enclosure ball, derived from CERTIFIED region signs only (instruments/critcount) — outward coefficient products, ball Lipschitz folded into the cell pad, never a float sign.battery-gated the report
mfg-cap-census-N2-c-12.jsonThe Krawczyk exhaustion census at Galerkin level N = 2: every subbox of the printed box eliminated by interval residual or Krawczyk exclusion, each survivor isolated by K(X) ⊂ int(X) — EXACTLY three solutions of the truncated even system at c = −12, matched one-to-one to the candidates. Box-bounded, truncation-level; the PDE-level count is the stated open problem.battery-gated the report
mfg-cap-census-N3-c-12.jsonThe Krawczyk exhaustion census at Galerkin level N = 3: every subbox of the printed box eliminated by interval residual or Krawczyk exclusion, each survivor isolated by K(X) ⊂ int(X) — EXACTLY three solutions of the truncated even system at c = −12, matched one-to-one to the candidates. Box-bounded, truncation-level; the PDE-level count is the stated open problem.battery-gated the report
mfg-cap-census-N4-c-12.jsonThe Krawczyk exhaustion census at Galerkin level N = 4: every subbox of the printed box eliminated by interval residual or Krawczyk exclusion, each survivor isolated by K(X) ⊂ int(X) — EXACTLY three solutions of the truncated even system at c = −12, matched one-to-one to the candidates. Box-bounded, truncation-level; the PDE-level count is the stated open problem.battery-gated the report
mfg-cap-census-N5-c-12.jsonThe Krawczyk exhaustion census at Galerkin level N = 5: every subbox of the printed box eliminated by interval residual or Krawczyk exclusion, each survivor isolated by K(X) ⊂ int(X) — EXACTLY three solutions of the truncated even system at c = −12, matched one-to-one to the candidates. Box-bounded, truncation-level; the PDE-level count is the stated open problem.battery-gated the report
ember-spectrum.jsonStage 1 of the hot-spots chain: two-sided spectrum localization for the trapezoid — interval Galerkin Rayleigh–Ritz uppers (floats only pick the subspace), exact-rational Crouzeix–Raviart assembly with interval LDLᵀ inertia counts and Liu’s framework for the lowers; the certified gap makes μ₁ SIMPLE. The rectangle regression encloses π² at every run.battery-gated the report
ember-defect.jsonStage 2: the frozen Helmholtz trial’s boundary defect — order-2 interval Taylor jets along every edge with Bessel-ODE closure, a certified midpoint-Taylor cell rule, value AND derivative bridges against an independent float evaluation, and the exact trial coefficients frozen for every downstream stage.battery-gated the report
ember-eigenpair.jsonStage 3: the eigenpair certificate — the boundary-residual identity with the rational star-shaped trace constant and the CR localization tightens μ₁ by a factor of ~105 and encloses the eigenfunction in L²; also the H¹ error and the δλ bound the pointwise machinery consumes.battery-gated the report
ember-pointwise.jsonStage 4: the solid-mean pointwise machinery — kernel norm I₀ = 5/48 DERIVED in exact rationals, witness balls decided inside Ω in exact rationals, and every CORE cell of the 1/100 grid (corner-min depth ≥ 3/40, exact by concavity) killed on both sides with zero survivors.battery-gated the report
ember-collar.jsonStage 5: the collar sweep — every sub-core cell killed by the value argument with REFLECTED pointwise bounds across its nearest open edge (the single layer bounded by the certified per-edge flux sups), kill-or-refine to 1/800, ZERO residual cells.battery-gated the report
ember-corner.jsonStage 6: the four corner-tip certificates — Bessel–Fourier coefficients certified by annulus L² extraction AND re-extracted at a second annulus (the enclosures must intersect — a condition of entry), value kills at B/C/D, radial monotonicity at A, and the ladder-identity wedge bound at C where the boundary minimum lives.battery-gated the report
ember-cross.jsonThe independent cross-derivations: I₀ = 5/48 in exact rationals, the trace constant re-derived on directed dyadic big-floats from the exact-rational star geometry, μ₁ bounded above on an independent conforming P1 basis, and the two-annulus corner condition re-asserted.battery-gated the report
ember-theorem.jsonThe assembled hot-spots theorem: cross-record chain consistency (every stage’s inputs equal the upstream outputs), the interior partition RE-DECIDED IN EXACT RATIONALS, every sweep and tip verdict re-checked, the honest framing with its fence list, and the sha256 of every input record.battery-gated the report

Three of these carry a detached verifier — standard library Python, nothing to install, zero code shared with the engine, and each one must refute a deliberately forged value before it will exit green. The rest are gated by a battery instead: re-derived at every build, with planted forgeries that must fire. A record with neither is not on this list, because the build refuses when certs/ holds a file this table cannot describe.

§9 · the pictures

A decided number still has to be drawn

Everything above decides. Nothing above shows — and a chart is an assertion too. Charts and graders both assert things, and neither distinguishes what the data forces from what the renderer or the tolerance chose. The same sentence covers both halves of this machine, which is why the second half is not a side project.

Nine instruments carry it. Two of them draw a certificate from the shelf in §8 at its own resolution — the covering that forced an Erdős lower bound, shaded so the bright seams are where the argument nearly ran out, and the weights the linear programme chose inside those boxes. Five decide their headline number in exact integer or rational arithmetic. One is floats throughout and leads with that.

The grammar they are drawn in is four standings on a lattice — refused < chosen < computed < decided — combining by minimum, so a mark’s standing is the weakest standing on its path to the pixel. Three consequences follow and none is a judgement call: the arithmetic demotes and never the author, so a float step takes decided to computed automatically; refused is absorbing; and an argmax over a non-unique optimum yields chosen. Stroke carries it, never colour, so it survives greyscale — and where a figure’s marks all share a standing the channel is free, which is a rule found by porting four pages rather than by reasoning.

the honest fence

This is not a confidence encoding and must not be read as one: a value can be known to fourteen decimals and still be undecided, and certified with a wide bracket. It is narrowed against uncertainty visualization (Padilla, Kay & Hullman), provenance visualization (Ragan et al.), imputed-value encoding (Song & Szafir), verifiable visualization (Kirby & Silva) and the lineup protocol (Buja et al. 2009) — all scouted, all recorded in corpus/targets.json, and the last of them is a method one of those pages reinvented before it knew the name. There is no user study, which is stated up front rather than left for a reviewer to find.

contact

Write to Carlos

Sent by Web3Forms to Carlos’s inbox; nothing stored here.

Or write to carlos@carlostoledo.co, or open the public pilot form on GitHub.