ProvenOff-chain and on-chain agree. The engine’s case selection and the contract’s independent on-chain derivation are machine-checked to match across every structural order combination.
ProvenNo value created or destroyed. Collateral in = out + fee on every settlement — fuzzed against the real Gnosis CTF runtime bytecode, not a mock.
ProvenA set is always fully backed. A mint can’t create a set for less than its worth; a merge can’t pay out more than the set is worth.
ProvenTested end-to-end. 82 matcher + 74 contract tests green; one trade settled against the real CTF bytecode through the production submission path.
PendingIndependent security audit. Pre-audit package prepared; firm selection underway.
PendingPublic deployment. Public testnet next; mainnet follows audit and authorization.