Ledger verifier

Check the chain yourself.

Re-derived in your browser. Nothing is sent anywhere.

Sample month · rows 53,999 to 54,010 of 75,037

  1. 53,999claude-sonnet-4-5$0.146862—Deriving
  2. 54,000claude-sonnet-4-5$0.145392—Deriving
  3. 54,001claude-sonnet-4-5$0.077398—Deriving
  4. 54,002gpt-4.1-nano$0.000049—Deriving
  5. 54,003claude-sonnet-4-5$0.170979—Deriving
  6. 54,004claude-sonnet-4-5$0.073132—Deriving
  7. 54,005claude-sonnet-4-5$0.189384—Deriving
  8. 54,006claude-sonnet-4-5$0.164490—Deriving
  9. 54,007claude-sonnet-4-5$0.063947—Deriving
  10. 54,008claude-sonnet-4-5$0.075856—Deriving
  11. 54,009claude-sonnet-4-5$0.132441—Deriving
  12. 54,010claude-sonnet-4-5$0.082800—Deriving

Deriving.

The published recovea-chain-v1 recipe over the sample month’s ledger. Field order in the docs.

The refusal

An armed cap refuses the request before it reaches your provider, and answers 402.

Designed to fail open: if the gateway degrades, traffic goes straight to your provider. Armed caps refuse rather than guess; so does a kill switch the gateway can read.

Read the contract
  • Status402
  • Typeinsufficient_quota
  • Codebudget_exceeded

Measured

  • 2026-08-07580 of 580Probes answered 200 while a bad deploy rolled itself back. One drill, one service, not an availability claim.
  • 2026-08-078m 42sTime for a deliberately broken revision to trip the alarm. It rolled back 43 seconds later.
  • 2026-07-2541 rowsProduction receipts exported and re-derived outside our systems. The chain head matched.

Export

Take the ledger and check it without us.

Export the chain and verify it offline, with a tool that has none of our code.

Download the ledger — 75,037 rows. Regenerate the month from seed 20260831, hash it under the recipe, and the head is ed6c…0e57.

The same rows, off our machines.