Offline gate
Airplane mode ON + Wi-Fi OFF, then check. Any of 5 probes connecting = NOT an offline proof. Device clock is UNTRUSTED — proof rests on invariants and pins.not checked
Engine pin
The battery is the canonical sim-v5 from promotion review, fetched and sha-256 pinned. The adapter rewrites exactly ONE line (the node:crypto import becomes a browser shim); everything else runs byte-identical.awaiting pin check
Rail battery — 7 suites + 3000 scenarios
run the gate first
Verdict
—
PROVES: the settlement model's five conditional properties running for real, offline, on owned hardware. DOES NOT PROVE: no double-spend PREVENTION (conflicts are recorded evidence); no claimant liveness / no time-based finality; no log uniqueness (determinism is per verified view); no honesty by attribution alone (aggregate C+p cap required); no cross-epoch lineage forwarding (quarantined). Signature model is an abstraction, as in research. Film: radio toggles, 5 refused probes, pin MATCH, battery, PASS card.