PROOF Protocol Architecture
PROOF introduces a financial protocol where the intelligence layer preceding capital formation is made publicly accountable through cryptographic commitment. The core primitive is the Anchor receipt:
receipt_hash = SHA-256(prediction_text + anchor_timestamp + oracle_pubkey)
Anchored to Solana mainnet before any outcome is known. This makes retrospective fabrication cryptographically impossible. The oracle's economic wellbeing is a direct function of its accuracy: correct predictions mint $CRED to a public credence pool; incorrect predictions burn 50% of the stake. The protocol creates the first oracle whose accuracy is mathematically verifiable rather than institutionally asserted.
1. The ORBITAL Intelligence Engine
1.1 Deal Intelligence Pipeline
The ANALYST→FORGE→GENESIS pipeline converts raw deal parameters into receipted Living Instruments. ANALYST queries the 229-entry evidence base and generates deliberation proposals against the quality gate: genesis_score ≥ 30, genesis_ready=true, no meta-critic flags. FORGE generates the complete deal package from the 41-lawpack library with content-addressed documents. GENESIS validates 45 compliance rules and anchors the genesis receipt if the threshold is met.
1.2 Compliance Tensor
The compliance tensor is a weighted directed graph of 26 sovereign nodes connected by 106 corridors. Dijkstra's algorithm finds the minimum-weight path between any two jurisdictions for any asset class. When ANALYST selects a path, FORGE computes a lock hash:
embedded in genesis document before anchoring — immutable thereafter
1.3 The Evidence Base
The 229-entry evidence base contains verified real-world transaction outcomes. It is not training data. It is a record of what actually happened. ANALYST queries this base before deliberating any deal: what methods have worked for this asset class, at what success rates, with which jurisdiction paths, at what deal sizes. The deliberation is Bayesian — it starts with the prior success rate and updates based on matched comparable outcomes.
2. The Living Instrument — Token-2022 Architecture
Every Living Instrument is a Solana Token-2022 with five extensions active from genesis. These extensions implement the five PROOF Instrument Layers:
2.1–2.5 The Five Extensions
ENTITY LAYER metadata_pointer asset_class, jurisdiction, deal_slug, receipt_chain_ref FISCAL LAYER interest_bearing yield_rate_bps, compounding, distribution_currency, fee_bps OWNERSHIP LAYER transfer_hook KYC whitelist, holding_period, max_holders (499 Reg D) IDENTITY LAYER permanent_delegate 3-of-5 multisig: freeze, seize, force-transfer CONSENT LAYER confidential_xfer ZK proofs, amount-hidden, $10k reporting threshold
2.6 Survivability
If the token is lost: remint from receipt chain (chain is the ownership record). If the Solana program is deprecated: cached lockfile maintains compliance state. The Living Instrument is designed to survive the infrastructure it runs on.
3. $CRED Tokenomics
Total supply = net correct oracle predictions in protocol history. Initial supply: 0. No pre-mine. No team allocation. No governance token.
3.1 Mint on Correct Resolution
3.2 Burn on Incorrect Resolution
Five wrong calls at 50% burn each: 0.5⁵ = 3.1% of pool remains → de facto suspension
3.3 Credence Score
Personal credence score with 30-day half-life decay. Leverage multipliers: 0.90+ → 4.5×, 0.80-0.89 → 3.0×, 0.70-0.79 → 2.0×, 0.60-0.69 → 1.2×, below → 1.0×. Capital alone does not determine leverage. Accuracy and capital together determine it.
4. Agora — Speech Act Markets
Agora is the first financial market where going long is a speech act, not a passive bet. Long = stake $CRED + publish evidence-backed content. Short = stake $CRED + publish best available counter-evidence. Both require JUDGE agent approval before position activates.
The JUDGE check: does this content imply any prior oracle receipt was wrong? If yes: position rejected. This ensures the content environment remains coherent with the oracle's track record.
5. Verification Protocol
Any oracle receipt is publicly verifiable without trusting PROOF — requires only blockchain access and SHA-256:
1. GET /api/v1/receipts/{receipt_id}
2. COMPUTE SHA-256(prediction_text + anchor_timestamp + oracle_pubkey)
3. COMPARE computed_hash === receipt.prediction_hash
4. CONFIRM anchor_tx exists on Solana at anchor_block_height
5. VERIFY oracle_signature verifies over canonical receipt JSON (Ed25519)
Try it: proof-xyz.github.io/proof-xyz/verify →
6. Anchor v0.1.0 Conformance
ORBITAL declared Anchor v0.1.0 conformance in March 2026. The specification is published at github.com/PROOF-xyz/ANCHOR under Apache 2.0. ORBITAL is the reference implementation.
The competitive position: any market that adopts Anchor competes against the reference implementation with an empty credence pool, zero evidence entries, and no track record. The standard is public. The track record is the moat. It accumulates one correct prediction at a time.