A lattice, not a chain.
Every action — a filing, a reading, a transfer — is witnessed the moment it happens, on the customer's hardware. The substrate proves a thing occurred, by whom and when, without revealing the underlying data to anyone they have not named. Detail beyond this page lives in the technical paper, shared under NDA.
Each action is cryptographically witnessed the moment it happens — bottom-up, from the shop floor, not from a quarterly report.
Every witness carries a queryable lineage of custodians. The named auditors verify the chain; operators never re-prove anything.
The substrate proves a thing happened, by whom and when — without revealing the underlying instrument to anyone not named.
A genuine formal-methods corpus — TLA+ specifications and an invariant suite written before the code. We are making a verifiable subset public; the external L1 audit becomes the third-party attestation of code quality.
One human plus an AI agent built this in ~9 months: factory first — CI, tests, and deploy before features — with a human's judgment checking the agent at the moment it wants to declare victory. You are buying the disciplined loop that compounds a demo into a platform, not the demo.