A REAL-TIME PROOF MACHINE

THE Q.E.D.
BUTTON

One corporate action. Three independent checks. Aristotle writes the proof; an independent Lean compiler decides whether the button may light.

SELECTED WITNESS

DELL TOKEN · CASH DIVIDEND

$0.63 / SHARECOMPLETED · 2026-07-31

PHYSICAL INPUTARMED

PRESS TO READ PUBLIC DATA. NO WALLET. NO TRADE. NO WRITE.

01
OFFICIAL RESTASSET + ACTION
WAITING
02
ROBINHOOD CHAINMULTIPLIER + EVENT
WAITING
03
ARISTOTLE → LEAN 4PROOF + DOUBLE-APPLY GUARD
WAITING
PROOF STATE READY TO TEST The machine has not trusted anything yet.
PUBLIC WITNESS

What the button actually checks

NO RECEIPT YET
ACTION DELL · $0.63 Official completed cash-dividend row
UI MULTIPLIER REST value must equal uiMultiplier()
ADJUSTED SUPPLY Raw supply × multiplier ÷ 1e18
BLOCK Exact hash-bound chain observation
RECEIPT HASH Press the button to generate a receipt.
01 / OBSERVE

Bind every premise.

The receipt hashes the exact official asset row and corporate-action row, then binds the contract state to one block and the multiplier update to one transaction.

02 / PROVE

Compile the arithmetic.

Aristotle fills the proof terms. A separate Lean compiler checks multiplier reconciliation, the ERC-8056 supply formula, and an accidental second application.

03 / REFUSE

No partial green lights.

If a source disappears, a value drifts, an event mismatches, or the proof artifact is not bound to the observed tuple, the machine visibly refuses.

REPRODUCE IT

Trust the kernel, inspect the premises.

Lean proves the encoded invariant—not that an outside API is inherently truthful. That boundary is part of the receipt.