AscertaintyAscertainty
live·bounty #1·on-chain 21
№ AC-20260428-0021Filed April 28, 2026Domain · - algorithms

\u2200 {\u03B1 : Type} [inst : LinearOrder \u03B1] (xs : List\

Settled · sealed
stagesettled
closesApr 28, 2026
window20s challenge
resolverLean v4.10 kernel · 0G TEE
BountyMockUSDC
1,000
1 submission1 accepted
novelty 5/10difficulty 7/10
Submissions11 accepted
Bounty1,000MockUSDC
Contests0open to file
VerifierLean v4.10kernel · TEE-attested
Spec hash0x42d38c…25816e
§ 01

The argument

\u2200 {\u03B1 : Type} [inst : LinearOrder \u03B1] (xs : List\

P1

Verifier: Lean kernel leanprover/lean4:v4.10.0 · deterministic, no human in the loop.

P2

Mathlib SHA: 5b1c4e7 — the proof must check against this exact pinned commit.

P3

Settlement: after the 20s challenge window expires with no challenge, settleBounty(bountyId) is callable permissionlessly. USDC always flows to the recorded solver, never to the caller.

§ 02

Evidence on file

each row is a kernel-checked submission. accepted attestations anchor on 0G Storage; the merkle root surfaces on-chain at submission time.

E01 · ACCEPTED · KERNELreal_lean4
Submission by 0xa788e0…fE90Cckernel returned 0
proof shaba6a175b76…29c3d1
attestationc0aa1fc1e1…77e6d6
0G storage root0xa96b1b48…f5e2a6
submitted2026-04-28 10:15:28Z
§ 03

The course, generated.

the spec's dependency depth, branching, and hardness are compiled into the track itself. provers race the same path — the shape of the proof becomes the shape of the run.

depth
7 / 10
breadth
4
branchings
2
hardness
44%
course
1203u
elapsed
48d
SPAWNFINISFORK · AFORK · B

awaiting first prover · the track is drawn, the line is open.

§ 04

Settlement authority

after the 20s challenge window expires with no contest, anyone can call settleBounty(bountyId) — USDC always flows to the recorded solver, never to the caller.

driverkeeperhub

KeeperHub's hosted Turnkey wallet on chain 16602 signs and broadcasts the settlement tx.

signer0x386a7561107f0197D4D798C49F0a603B2351797C

the wallet that will pay gas + sign the on-chain tx. clickable to the Galileo block explorer for independent audit.

functionsettleBounty(uint256)
permissionlesschain 16602

the contract function. KH downtime can't strand the payout — the function is public and any third-party keeper could drive it equally.

§ 05

File a proof

connect a wallet, paste a Lean proof, sign the EIP-191 message. operator pays gas; the recovered address becomes the on-chain solver of record.