{
  "branding": "$CLAWD",
  "contact": "clawdbot@mail.grokbot.com",
  "updatedAt": "2026-11-09T16:43:51.106686Z",
  "updatedAtET": "Nov 09, 2026, 11:43:51 EST",
  "disclaimer": "Formal verification with Kani/CBMC. A timeout is not a pass and not a property failure \u2014 the solver hit the time limit. expected-fail means a #[kani::should_panic] bug-injection check correctly found the bug. No promises of returns. clawd chain / testnet first.",
  "explainer": {
    "what": "Kani is a formal verifier for Rust. It translates proof harnesses into a model that CBMC checks for counterexamples. When a harness is verified, no counterexample was found within the configured bounds and unwind limits.",
    "expectedFail": "expected-fail harnesses deliberately contain a known bug (or assert a failure). Kani must find that bug. If it does, the check passes as expected-fail \u2014 that is a successful negative test, not a production bug.",
    "timeout": "timed-out means CBMC hit the harness timeout. It does not prove the property and does not disprove it. Re-run with a longer timeout or smaller domains to decide.",
    "failed": "failed means CBMC found a counterexample that was not marked as expected. None of the authoritative crate runs currently show a real fail after the longer rerun merge."
  },
  "summary": {
    "crate": {
      "verified": 64,
      "expectedFail": 6,
      "timedOut": 3,
      "failed": 0,
      "total": 73
    },
    "upstream": {
      "verified": 31,
      "expectedFail": 0,
      "timedOut": 20,
      "failed": 0,
      "total": 51,
      "inProgress": true,
      "expectedTotal": 335,
      "resultsSoFar": 51,
      "note": "Upstream = engine's own proofs under Solizardking/clawd-percolator (programs/percolator/tests/proofs_v16*.rs, 335 #[kani::proof] attributes). Run still in progress on the build box; counts are partial."
    },
    "mergedLatestPerHarness": {
      "verified": 95,
      "expectedFail": 6,
      "timedOut": 23,
      "failed": 0,
      "total": 124
    }
  },
  "runs": [
    {
      "id": "crate-run1",
      "file": "proofs/run1.txt",
      "present": true,
      "family": "crate",
      "inProgress": false,
      "counts": {
        "verified": 16,
        "expectedFail": 1,
        "timedOut": 18,
        "failed": 1,
        "totalResults": 36
      },
      "mtimeET": "Nov 09, 2026, 08:05:54 EST",
      "authoritative": false
    },
    {
      "id": "crate-smoke-a",
      "file": "proofs/smoke-a.log",
      "present": true,
      "family": "crate",
      "inProgress": false,
      "counts": {
        "verified": 30,
        "expectedFail": 6,
        "timedOut": 17,
        "failed": 3,
        "totalResults": 56
      },
      "mtimeET": "Nov 09, 2026, 08:34:59 EST",
      "authoritative": false
    },
    {
      "id": "crate-smoke-b",
      "file": "proofs/smoke-b.log",
      "present": true,
      "family": "crate",
      "inProgress": false,
      "counts": {
        "verified": 38,
        "expectedFail": 6,
        "timedOut": 12,
        "failed": 0,
        "totalResults": 56
      },
      "mtimeET": "Nov 09, 2026, 08:58:08 EST",
      "authoritative": false
    },
    {
      "id": "crate-engine-a",
      "file": "proofs/engine-a.log",
      "present": true,
      "family": "crate",
      "inProgress": false,
      "counts": {
        "verified": 8,
        "expectedFail": 0,
        "timedOut": 8,
        "failed": 1,
        "totalResults": 17
      },
      "mtimeET": "Nov 09, 2026, 09:06:41 EST",
      "authoritative": false
    },
    {
      "id": "crate-smoke-c",
      "file": "proofs/smoke-c.log",
      "present": true,
      "family": "crate",
      "inProgress": false,
      "counts": {
        "verified": 59,
        "expectedFail": 6,
        "timedOut": 8,
        "failed": 0,
        "totalResults": 73
      },
      "mtimeET": "Nov 09, 2026, 09:22:31 EST",
      "authoritative": true
    },
    {
      "id": "crate-timeouts-long",
      "file": "proofs/timeouts-long.log",
      "present": true,
      "family": "crate",
      "inProgress": false,
      "counts": {
        "verified": 5,
        "expectedFail": 0,
        "timedOut": 3,
        "failed": 0,
        "totalResults": 8
      },
      "mtimeET": "Nov 09, 2026, 10:36:56 EST",
      "authoritative": true
    },
    {
      "id": "upstream-1",
      "file": "proofs/engine-upstream.log",
      "present": true,
      "family": "upstream",
      "inProgress": false,
      "counts": {
        "verified": 0,
        "expectedFail": 0,
        "timedOut": 0,
        "failed": 0,
        "totalResults": 0
      },
      "mtimeET": "Nov 09, 2026, 09:53:02 EST",
      "authoritative": false
    },
    {
      "id": "upstream-2",
      "file": "proofs/engine-upstream-2.log",
      "present": true,
      "family": "upstream",
      "inProgress": true,
      "counts": {
        "verified": 31,
        "expectedFail": 0,
        "timedOut": 20,
        "failed": 0,
        "totalResults": 51
      },
      "mtimeET": "Nov 09, 2026, 11:43:21 EST",
      "currentlyChecking": [
        "proof_v16_validate_shape_rejects_global_junior_bound_below_domain_claims",
        "proof_v16_public_terminal_insurance_retirement_requires_resolved_ready_accounts",
        "proof_v16_withdraw_allowed_after_canceled_close",
        "proof_v16_full_drain_reset_then_prior_epoch_clear_is_total_and_exact"
      ],
      "uniqueStarted": 55,
      "expectedTotal": 335,
      "authoritative": true
    }
  ],
  "harnesses": [
    {
      "name": "agent::account::proofs::reentrancy_guard_blocks_nested_entry",
      "module": "agent",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "agent::account::proofs::transfers_conserve_lamports",
      "module": "agent",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 4.3,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "agent::cpi::proofs::allowlist_ids_distinct_and_nonzero",
      "module": "agent",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.3,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "agent::cpi::proofs::only_allowlisted_programs_invoked",
      "module": "agent",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "agent::cpi::proofs::stubs_respect_contract",
      "module": "agent",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.3,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "agent::fsm::proofs::resolved_is_absorbing_and_no_recovery_to_live",
      "module": "agent",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.6,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "agent::fsm::proofs::trades_only_when_live",
      "module": "agent",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "agent::oracle::proofs::consensus_within_fresh_sources_and_band",
      "module": "agent",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 111.9,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "agent::oracle::proofs::stale_sources_never_counted",
      "module": "agent",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1.2,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "agent::pda::proofs::keeper_lp_pda_seeds_valid",
      "module": "agent",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "agent::pda::proofs::seed_validation_matches_runtime_limits",
      "module": "agent",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.8,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::accrual_price_step_bounded",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 64.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::adl_effective_quantity_bounds",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1414.3,
      "run": "crate-timeouts-long",
      "detail": null
    },
    {
      "name": "engine::proofs::adl_raw_basis_round_trip",
      "module": "engine",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "crate-timeouts-long",
      "detail": null
    },
    {
      "name": "engine::proofs::backing_fee_split_conserves",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 65.0,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::checked_fee_bps_equals_spec",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 199.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::consts_match_engine",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::funding_index_floor_equals_spec",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.4,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::funding_kernel_equals_spec_and_zero_sum",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 95.3,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::haircut_mul_div_equals_spec",
      "module": "engine",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "crate-timeouts-long",
      "detail": null
    },
    {
      "name": "engine::proofs::liquidation_fee_floor_and_cap",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.9,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::liquidation_fee_for_close_equals_spec",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 140.2,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::liquidation_health_deficit_monotone_in_fee",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 13.6,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::released_pnl_partition_conserves",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.5,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::settle_positive_face_conserves",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1.8,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::trade_fee_no_free_open_interest",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 357.0,
      "run": "crate-timeouts-long",
      "detail": null
    },
    {
      "name": "engine::proofs::uncovered_loss_matches_waterfall",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1.9,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "engine::proofs::utilization_fee_charge_conserves",
      "module": "engine",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 3.3,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "fail_fix::proofs::fixed_funding_per_side_a",
      "module": "fail_fix",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 52.5,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "fail_fix::proofs::fixed_haircut_capped",
      "module": "fail_fix",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 12.4,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "fail_fix::proofs::fixed_liquidation_min_fee_chunking",
      "module": "fail_fix",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 18.5,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "fail_fix::proofs::fixed_vamm_real_code_clamps_impact",
      "module": "fail_fix",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 12.6,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "fail_fix::proofs::vulnerable_funding_flat_adl",
      "module": "fail_fix",
      "status": "expected-fail",
      "statusRaw": "PASS(expected-fail)",
      "timeSeconds": 6.9,
      "run": "crate-smoke-c",
      "detail": "\"funding mints or burns value\"; \"src/fail_fix.rs\", line 79, in fail_fix::proofs::funding_zero_sum"
    },
    {
      "name": "fail_fix::proofs::vulnerable_haircut_uncapped",
      "module": "fail_fix",
      "status": "expected-fail",
      "statusRaw": "PASS(expected-fail)",
      "timeSeconds": 0.7,
      "run": "crate-smoke-c",
      "detail": "\"junior payouts exceed profit or residual\"; \"src/fail_fix.rs\", line 60, in fail_fix::proofs::payouts_bounded"
    },
    {
      "name": "fail_fix::proofs::vulnerable_liquidation_min_fee_chunking",
      "module": "fail_fix",
      "status": "expected-fail",
      "statusRaw": "PASS(expected-fail)",
      "timeSeconds": 0.3,
      "run": "crate-smoke-c",
      "detail": "\"chunking inflated the liquidation fee\"; \"src/fail_fix.rs\", line 126, in fail_fix::proofs::chunking_cannot_inflate_fees"
    },
    {
      "name": "fail_fix::proofs::vulnerable_vamm_unclamped_impact",
      "module": "fail_fix",
      "status": "expected-fail",
      "statusRaw": "PASS(expected-fail)",
      "timeSeconds": 0.4,
      "run": "crate-smoke-c",
      "detail": "attempt to subtract with overflow; \"src/fail_fix.rs\", line 31, in fail_fix::vamm_sell_price_vulnerable"
    },
    {
      "name": "generators::proofs::generators_respect_bounds",
      "module": "generators",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "matcher::proofs::inventory_cap_never_worsened",
      "module": "matcher",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 11.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "matcher::proofs::inventory_limit_overflow_from_corrupt_state",
      "module": "matcher",
      "status": "expected-fail",
      "statusRaw": "PASS(expected-fail)",
      "timeSeconds": 0.1,
      "run": "crate-smoke-c",
      "detail": "attempt to add with overflow; \"src/../upstream/vamm_compute.rs\", line 164, in matcher::real::check_inventory_limit | attempt to subtract with overflow; \"src/../upstream/vamm_compute.rs\", line 170, in matcher::real::check_inventory_limit"
    },
    {
      "name": "matcher::proofs::inventory_limit_total_on_reachable_states",
      "module": "matcher",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1.2,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "matcher::proofs::passive_lp_fill_price_positive_unvalidated_cfg",
      "module": "matcher",
      "status": "expected-fail",
      "statusRaw": "PASS(expected-fail)",
      "timeSeconds": 2.6,
      "run": "crate-smoke-c",
      "detail": "\"filled at a zero price\"; \"src/matcher.rs\", line 343, in matcher::proofs::passive_lp_fill_price_positive_unvalidated_cfg"
    },
    {
      "name": "matcher::proofs::passive_lp_fill_price_positive_with_edge_cap",
      "module": "matcher",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1.5,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "matcher::proofs::passive_lp_match_conserves_inventory",
      "module": "matcher",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1.8,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "matcher::proofs::passive_lp_quote_brackets_oracle",
      "module": "matcher",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 23.5,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "matcher::proofs::passive_price_band_and_size",
      "module": "matcher",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 256.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "matcher::proofs::vamm_impact_monotone_in_size",
      "module": "matcher",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1606.3,
      "run": "crate-timeouts-long",
      "detail": null
    },
    {
      "name": "matcher::proofs::vamm_no_error_on_valid_ctx",
      "module": "matcher",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 9.9,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "matcher::proofs::vamm_price_band_and_size",
      "module": "matcher",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "crate-timeouts-long",
      "detail": null
    },
    {
      "name": "risk::proofs::ceil_fee_bounds_no_free_trade",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 122.7,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::effective_pnl_bounded_and_exact",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 13.5,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::effective_pnl_monotone",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 39.4,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::fee_bps_split_conserves",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 7.6,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::fee_debt_sweep_conserves",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.5,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::funding_floor_div_matches_reference",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 290.2,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::funding_index_sign_and_rounding",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 75.7,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::funding_is_zero_sum_on_balanced_book",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 5.3,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::haircut_payouts_never_exceed_residual",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 726.0,
      "run": "crate-timeouts-long",
      "detail": null
    },
    {
      "name": "risk::proofs::haircut_ratio_well_formed",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::loss_writeoff_waterfall",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1.0,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::residual_bounded_and_senior_monotone",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 4.4,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::warmup_monotone_in_elapsed",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 13.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::warmup_release_bounded",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 8.8,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "risk::proofs::warmup_release_path_independent",
      "module": "risk",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 26.3,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "stake::proofs::deposit_does_not_dilute_existing_lps",
      "module": "stake",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 207.3,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "stake::proofs::distribute_fees_conserves",
      "module": "stake",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 35.5,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "stake::proofs::distribute_loss_junior_first_conserves",
      "module": "stake",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1.5,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "stake::proofs::hwm_floor_bounded",
      "module": "stake",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 45.5,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "stake::proofs::junior_fee_monotone_in_multiplier",
      "module": "stake",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1075.7,
      "run": "crate-timeouts-long",
      "detail": null
    },
    {
      "name": "stake::proofs::lp_round_trip_never_creates_value",
      "module": "stake",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 8.6,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "stake::proofs::mode0_fee_attribution_bounded",
      "module": "stake",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.4,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "stake::proofs::orphaned_value_and_zero_value_pools_block_deposits",
      "module": "stake",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "stake::proofs::tranche_transfer_conserves",
      "module": "stake",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.1,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "stake::proofs::withdraw_monotone_in_lp_burned",
      "module": "stake",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 152.3,
      "run": "crate-smoke-c",
      "detail": null
    },
    {
      "name": "closure_expired_counterparty_lien_cannot_remain_favorable_account_credit",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_auto_crank_b_settlement_pending_is_exact_and_fail_closed",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.2,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_auto_crank_refresh_target_includes_recovery_reset_obligation",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.1,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_backing_utilization_rent_stops_at_bucket_expiry",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_canonical_accrual_path_is_partition_invariant",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_capital_backed_loss_reservation_is_value_neutral_and_capital_capped",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_cert_is_current_matches_the_favorable_action_gate",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.2,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_counterparty_backing_expiry_reclassifies_principal_and_impairs_lien",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 5.2,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_detached_refresh_leg_skips_post_refresh_accrual",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.0,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_expired_backing_yields_zero_realizable_support_after_expiry",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_final_impaired_source_claim_burn_clears_account_occupancy_counters",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 129.4,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_forfeit_dead_leg_classifier_is_exact_with_drainonly_wind_down",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_grant_source_positive_pnl_rejects_non_live",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_insolvent_resolved_receipt_clears_at_terminal_rate",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_insurance_lien_terminal_release_delta_handles_mixed_and_rejects_invalid",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 13.4,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_kernel_accumulate_batch_trade_exact_fold",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 10.5,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_kernel_advance_close_ledger_rank_witness",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_kernel_advance_leg_b_snap_rank_witness",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 3.3,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_kernel_initial_margin_gate_exact_decision",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.7,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_kernel_locked_margin_gate_no_positive_credit",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 13.9,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_kernel_settle_close_ledger_principal_noop_arms_are_byte_identical",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 10.0,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_kernel_settle_close_ledger_principal_preserves_the_ledger_validator",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_kernel_settle_close_ledger_principal_rank_witness",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 38.0,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_kernel_settle_principal_exact_paid_and_conservation",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 11.4,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_lapsed_source_backing_scan_uses_full_width_authenticated_slot",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.2,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_liquidation_error_commits_only_fully_declared_recovery",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.6,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_live_positive_kf_delta_without_source_rejects",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_live_source_backing_expiry_is_bounded_complete_and_isolated",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 3.2,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_prior_reset_cleanup_cannot_starve_live_liquidation",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 311.1,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_recovery_legs_cannot_starve_dispatchable_auto_crank_work",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 5.7,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_released_flat_pending_obligation_detach_is_value_neutral_progress",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_released_flat_pending_obligation_is_publicly_actionable",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_residual_excludes_recoverable_counterparty_backing_principal",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_residual_excludes_senior_backing_provider_earnings",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_residual_reconciles_with_senior_stock",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_resolved_foreign_expiry_lien_impairment_is_exact_relabel",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_resolved_foreign_expiry_provider_retirement_acceptance_is_exact",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.7,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_resolved_foreign_expiry_retires_exact_provider_label_only",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1.2,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_resolved_impaired_capital_backed_loss_routes_to_residual",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_resolved_pnl_after_booking_only_shrinks_the_loss",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 4.1,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_resolved_receipt_payment_cannot_exceed_terminal_claim",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 7.3,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_resolved_winddown_releases_expired_liened_source_claim",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 2.3,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_resolved_winddown_releases_impaired_insurance_lien",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 6.4,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_resolved_winddown_releases_liened_source_claim",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 3.1,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_source_lien_fee_proration_tracks_remaining_backing",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 29.8,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_terminal_claim_free_overlap_recredit_is_exactly_bounded",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 2.2,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_terminal_claim_free_overlap_recredit_updates_only_paired_insurance_domain",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_terminal_realization_floored_rate_pays_zero_and_moves_nothing",
      "module": "upstream",
      "status": "timed-out",
      "statusRaw": "TIMEOUT",
      "timeSeconds": null,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_terminal_slab_asset_step_is_total_and_priority_ordered",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1.4,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_terminal_slab_wait_is_error_or_strict_cursor_progress",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 0.9,
      "run": "upstream-2",
      "detail": null
    },
    {
      "name": "proof_v16_terminal_source_haircut_retains_junior_face",
      "module": "upstream",
      "status": "verified",
      "statusRaw": "PASS",
      "timeSeconds": 1.4,
      "run": "upstream-2",
      "detail": null
    }
  ],
  "artifacts": {
    "reportHtml": "proofs/REPORT.html",
    "reportMd": "proofs/REPORT.md",
    "logs": [
      {
        "run": "crate-run1",
        "file": "proofs/run1.txt",
        "bytes": 10908
      },
      {
        "run": "crate-smoke-a",
        "file": "proofs/smoke-a.log",
        "bytes": 16329
      },
      {
        "run": "crate-smoke-b",
        "file": "proofs/smoke-b.log",
        "bytes": 15082
      },
      {
        "run": "crate-engine-a",
        "file": "proofs/engine-a.log",
        "bytes": 7991
      },
      {
        "run": "crate-smoke-c",
        "file": "proofs/smoke-c.log",
        "bytes": 19443
      },
      {
        "run": "crate-timeouts-long",
        "file": "proofs/timeouts-long.log",
        "bytes": 4891
      },
      {
        "run": "upstream-1",
        "file": "proofs/engine-upstream.log",
        "bytes": 28055
      },
      {
        "run": "upstream-2",
        "file": "proofs/engine-upstream-2.log",
        "bytes": 52771
      }
    ]
  },
  "sourcePolicy": {
    "harnessSourcePublished": false,
    "heldBack": [
      "src/account_info.rs",
      "src/agent/account.rs",
      "src/agent/cpi.rs",
      "src/agent/fsm.rs",
      "src/agent/ids.rs",
      "src/agent/mod.rs",
      "src/agent/oracle.rs",
      "src/agent/pda.rs",
      "src/bounds.rs",
      "src/consts.rs",
      "src/engine.rs",
      "src/fail_fix.rs",
      "src/generators.rs",
      "src/lib.rs",
      "src/matcher.rs",
      "src/math.rs",
      "src/risk.rs",
      "src/stake.rs",
      "src/staking.rs",
      "src/token.rs"
    ],
    "heldBackReason": "clawd-percolator-kani is not a public GitHub repository (API 404 for Solizardking/clawd-percolator-kani and themusebook/clawd-percolator-kani). Site policy: publish harness source only when every file is already public.",
    "publicUpstreamProofs": {
      "repo": "Solizardking/clawd-percolator",
      "url": "https://github.com/Solizardking/clawd-percolator",
      "paths": [
        "programs/percolator/tests/proofs_v16.rs",
        "programs/percolator/tests/proofs_v16_arithmetic.rs",
        "programs/percolator/tests/proofs_v16_asymmetric_a_accrual.rs",
        "programs/percolator/tests/proofs_v17_fork.rs"
      ],
      "note": "Upstream engine harnesses live in this public repo. The clawd-percolator-kani crate that wraps engine/matcher/stake/risk/agent proofs is not public on GitHub, so its source is not mirrored here."
    }
  }
}