AscertaintyAscertainty
live·bounty #2·on-chain 22
№ AC-20260428-0022Filed April 28, 2026Domain · - mathlib

\u2200 {\u03B9 : Type*} [Fintype \u03B9] (\u03B1 : \u03B9 \u2192\

Settled · sealed
stagesettled
closesApr 28, 2026
window60s challenge
resolverLean v4.10 kernel · 0G TEE
BountyMockUSDC
500
1 submission1 accepted
novelty 5/10difficulty 6/10
Submissions11 accepted
Bounty500MockUSDC
Contests0open to file
VerifierLean v4.10kernel · TEE-attested
Spec hash0x9cadc8…f32abb
§ 01

The argument

\u2200 {\u03B9 : Type*} [Fintype \u03B9] (\u03B1 : \u03B9 \u2192\

P1

Verifier: Lean kernel leanprover/lean4:v4.10.0 · deterministic, no human in the loop.

P2

Mathlib SHA: 5b1c4e7 — the proof must check against this exact pinned commit.

P3

Settlement: after the 60s challenge window expires with no challenge, settleBounty(bountyId) is callable permissionlessly. USDC always flows to the recorded solver, never to the caller.

§ 02

Evidence on file

each row is a kernel-checked submission. accepted attestations anchor on 0G Storage; the merkle root surfaces on-chain at submission time.

E01 · ACCEPTED · KERNELreal_lean4
Submission by 0x6C6626…CEBE34kernel returned 0
proof shaba6a175b76…29c3d1
attestation9a5c0acbff…5f54fd
0G storage root0x8275d53e…a9c629
submitted2026-04-28 10:15:50Z
§ 03

The course, generated.

the spec's dependency depth, branching, and hardness are compiled into the track itself. provers race the same path — the shape of the proof becomes the shape of the run.

depth
6 / 10
breadth
4
branchings
2
hardness
44%
course
1175u
elapsed
46d
SPAWNFINISFORK · AFORK · B

awaiting first prover · the track is drawn, the line is open.

§ 04

Settlement authority

after the 60s challenge window expires with no contest, anyone can call settleBounty(bountyId) — USDC always flows to the recorded solver, never to the caller.

driverkeeperhub

KeeperHub's hosted Turnkey wallet on chain 16602 signs and broadcasts the settlement tx.

signer0x386a7561107f0197D4D798C49F0a603B2351797C

the wallet that will pay gas + sign the on-chain tx. clickable to the Galileo block explorer for independent audit.

functionsettleBounty(uint256)
permissionlesschain 16602

the contract function. KH downtime can't strand the payout — the function is public and any third-party keeper could drive it equally.

§ 05

File a proof

connect a wallet, paste a Lean proof, sign the EIP-191 message. operator pays gas; the recovered address becomes the on-chain solver of record.