7 of 8 declared checks pass. 1 still open, the nearest naming docs/receipts/third-party-recompute.md. One of those files has never been committed to. 4 further items wait behind it in Technical Integration.
Execution is provably attested end-to-end: the on-chip spec, the ed25519 signer, and the forgery test all exist and pass, and a stranger visiting the site can already verify a receipt themselves. The one open piece is that no outside party has yet redone that recomputation and put their name on it — the proof runs, but no one but us has run it.
■ next check: a third party has recomputed one — docs/receipts/third-party-recompute.md
It sits under Ground because everything above it — auditing execution history, the rest of Technical Integration — assumes the execution bound is provable at all; this is the item that makes that assumption load-bearing rather than assumed. It depends on the signer and glossary work already done, and it unlocks the third-party check once someone outside the building actually runs it.
first rung in this list
unlocks A2 🧮 Audit execution history
This isn't a file you write — it's a request you send: get someone outside the building to independently recompute a receipt and record their result, then commit that record to docs/receipts/third-party-recompute.md. Until a named third party runs it and signs off, that file stays empty and the check stays open.
never committed to: docs/receipts/third-party-recompute.md
Read more — why this list exists, its edges, and all 8 checks →
We are replacing trust with deterministic proof. This vector is entirely focused on building the hardware-attested semantic grounding required to isolate and measure AI execution risk. By shipping the trust root and capturing live telemetry on-chip, we transform abstract software behaviour into a mathematically auditable ledger. The terminal state of this track is a frozen, zero-entropy interface where capital can independently verify that our agent remains strictly within its defined operational bounds.
how to read it · Read this track as one chain with no shortcuts: a verdict has to be signed before a run is worth logging, a log has to be quiet before live work is worth measuring, and live work has to be measured before determinism is worth claiming. The A and B phases are already through — the signer exists, the receipts accumulate, the false-alarm rate is sealed with a confidence interval. What is genuinely open here is not code but WITNESS: every market check on this track fails, because nobody outside the building has recomputed a receipt. That single missing artifact is why a track at ninety-something per cent on specification and execution is not finished.
→ legal The measured boundary becomes the covered boundary. Exclusions can only be written against something that is actually observed, so every claim the legal track fences is a claim this track first made checkable.
→ commercial The proof a stranger can run in one command is what makes a pitch survive contact. Without it the commercial track is asking for belief; with it, it is asking someone to check.
✓ Specification on-chip resident spec exists — docs/architecture/pmu-resident-onchip-spec.md
✓ Specification verification gaps are written down, not hidden — docs/architecture/pmu-rust-verification-gaps.md
✓ Specification attestation glossary exists — docs/architecture/pmu-spec-attestation-glossary.md
✓ Execution the in-binary signer exists — packages/thetacog-mcp/pmu-rust/src/attest.rs
✓ Execution it signs with ed25519, not a hash claim — packages/thetacog-mcp/pmu-rust/src/attest.rs
✓ Execution a one-byte forge is caught by a test — tests/pmu-simulator/forge-test.test.mjs
✓ Market a stranger can verify a receipt on the site (the page answers, it does not redirect) — src/app/verify-receipt/page.tsx
○ Market a third party has recomputed one — docs/receipts/third-party-recompute.md
↓ the whole Technical Integration list · ↓ this rung in the sequence · reading written by claude-sonnet-5, after the counts and never inside them