The panel's systems verdict · private exhibit · 2026-08-15
Proof That
Travels
one machine, seven disguises
Six reviewers read one engineer's corpus — roughly sixty repositories — asking a single question: is there a master thesis underneath that he might not quite see? There is. It is one architecture, built over and over: verifiable delegation across a forbidden boundary.
first three: portfolio companion, July 2026 — self-labeled "computed estimates" · directory count: 2026-08-15
scroll↓
The problem, stated once
Four names. One problem.
Between the day job and the basement lab, he kept meeting the same object in different clothes.
A ~30-year-old pricing core. It can be run, not read.
Billions of weights. It can be prompted, not inspected.
A member table. It can be modeled, not shown.
Thousands of delegated decisions. They can be used — and must still be proven.
Each is an oracle you cannot inspect, an interior you cannot expose. His answer never varies. Seal the interior. Put a gate at the boundary. Let only a verifiable form cross — deterministic, replayable, receipt-bearing. And where verification cannot confer legitimacy, emit a typed refusal instead of a best guess. Trust is compiled, not asserted.
THE SIGNATURE MOVE Found in the least related places: absence made a first-class, typed, auditable outcome. He architects for the honest boundary of capability.
on the membrane at right: raw interiors press; only distilled forms cross; even the refusal crosses — as a typed record, never a guess
Disguises I–II · data and code
The classifier never sees plaintext.
The model never sees the source.
Synthetic members, sealed crosswalk
- interior
- member data
- crosses
- relationally-intact synthetic rows
Per-cell surrogates seeded by HMAC-SHA256 — re-runs are byte-identical, and a test proves it. A reversible crosswalk stays inside. The k-anonymity gate does not warn when a cohort is too small; it fails the run.
The husk travels, the source stays
- interior
- the source
- crosses
- the diagnosis
Source is "husked" into a different problem domain so a frontier model can judge the architecture without seeing code, secrets, or domain. The invariant: architectural defects are structural, not lexical — so the diagnosis transfers back.
honest status: the load-bearing verifier is specified, not yet built
Disguises III–IV · answers and a migration
Watch it refuse, and say why.
Convergence-gated answers
- interior
- uncertain evidence
- crosses
- cited answers — or an honest refusal
Retrieval that abstains rather than guesses, with a typed reason. The demo is literally watching it refuse, and say why. For a regional payer's knowledge base, a wrong answer is worse than none.
Penny parity, per line of business
- interior
- a black-box legacy core
- crosses
- proven agreement
A dual-path harness: legacy and new price the same claims until they agree to the cent, per line of business, with a per-claim side-by-side explain command. What crosses is not the price — it is the proof of agreement.
agreement to the cent, per line of business — harness contract
Disguises V–VI · receipts and agents
Verifiability without disclosure.
The session stays; the receipt travels
- interior
- the session
- crosses
- the receipt
ed25519-signed receipts. Prompt and output are hashed, not stored — verifiability without disclosure. Four typed verification outcomes, shipped as runnable fixtures.
4 typed outcomes · spec fixtures, verified in source 2026-08-15
A chain of custody for requirements
- interior
- thousands of agent decisions
- crosses
- scored, provenance-tagged work
LLM-as-judge session scoring in which one basement Code Safety score hard-caps a near-perfect composite: aggregation must not launder a bad dimension. His working agreement types the origin of every requirement — and no origin in the record means "origin unknown," never a plausible story.
Disguise VII · meaning
A private tool, built for his son — premised on children "whose ideas may be richer than the routes currently available to express them."
Communication as a control surface for making.
Interior: a mind. Crosses: the made thing.
The panel called it the corpus in miniature. One line is enough.
Interactive · the gate itself
The airlock, playable.
Six payloads. Choose what to send across. The membrane applies the real rule — the real mechanism, the real typed outcome, computed here in the page. The tally is not a scoreboard of failure: every refusal is the machine working.
A relationally-intact member row must reach a classifier that may never see plaintext.
Interactive — requires JavaScript. The cards above describe every rule this panel would apply.
scroll — seven overlays collapse
Seven disguises. One diagram.
The finding
He filed seven projects.
The panel reads one product.
The category, named
Separate repos, for separate audiences — PHI tooling here, an attestation spec there, a migration harness for the day job. Overlaid, they are the same diagram every time: interior sealed, gate at the boundary, verified form crosses, refusal typed. That is not a portfolio garnish. It is one product — trust infrastructure: verifiable judgment under disclosure constraints — and it is a nameable, marketable category.
The strategist's corollary: estate twinning
The payer suite composes into a pipeline: build a zero-PHI synthetic twin of a regulated estate, with swap-seams marking exactly where the twin re-docks to production. Demonstrate anything the real estate forbids; transfer the proof back across the boundary.
the pipeline, not the pilots, is the sellable thing
Honest edges · the dissents, at full weight
Where the membrane leaks.
Self-authored oracles
Penny-parity proves agreement with a legacy simulator he wrote. The flagship masking lane has never touched a live mainframe; the ldb swap-point is a stub that throws. The proofs are internally rigorous and frequently circular. His newest work — capturing real wire bytes from a real subsystem, because four re-decodes of the same capture gave four different answers — is him correcting exactly this.
No counterparty yet
External adopters of the attestation spec: zero. Conversion events: approximately zero, one-sided. The one component never built — by pattern, not oversight — is the handoff: putting the proof in front of a stranger who might believe it, or pay for it.
"A proof machine with no counterparty is a diary." — one panelist
The statistician's dissent
This is an auditor's epistemology, not a statistician's — chain of custody everywhere, not a confidence interval anywhere. The apparatus proves this number came from that process, never this process yields true numbers. The most-repeated headline number — the throughput multiplier — has no measured baseline, and fails his own standard.
The doctrine bends
The fortress has honest cracks: client-side-only masking in one flagship's API; an OAuth id_token decoded without signature verification in a governance tool; runtime LLM calls that quietly bend "LLM at build time only." The membrane is a discipline, not a law of physics.
The method, applied to itself: the panel found 114 tests where a README said 120 — the verifier's own correction, recorded as "minor staleness, not deceptive." (2026-08-15)
Close · the machine leaves home
Since August 1, the same machine
has been escaping its home domain.
domains pointed at since 2026-08-01 · counted 2026-08-15
None of these are payer problems. All of them got the same architecture: seal the interior, gate the boundary, type the refusal. The boundary machine is portable — that was the panel's quiet conclusion, and the reason this page is called what it is. Proof, built to travel.
One component has never been built, and by pattern rather than oversight: the handoff. Every gate on this page faces inward. The last gate faces a stranger.
Trust is compiled, not asserted.
The compiler works.
It is waiting on a reader.