VERIFY · IN BUILD
Proof
One invariant decides whether any figure on this site may read Reconciled: the sum of every ledger entry must equal the sum of every balance. Today no job computes it.
Σ entries
84 203 915.0000Σ balances
———Drift cannot be computed until both sides are read by the same job at the same instant. Until then no figure on flashy.network reads Reconciled — by design, not by omission.
Exit criteria · workstream CYG-LED
| Task | Required | Today | Status |
|---|---|---|---|
| CYG-LED-1 | Integer minor units | Partly. Wallet.goldBalanceMinor (BigInt) is written in lockstep by postEntry, with backfill and verify scripts; goldBalance and the GoldLedger amount columns are still Float, so reads have not flipped ClaimYour.Gold · prisma/schema.prisma · SEAM-3 Phase A · read 2026-08-20 | IN BUILD |
| CYG-LED-2 | One write path, CI-enforced | One gate now exists for service-to-service calls (SEAM-4 Phase 1). Direct balance writes have not been counted again since the first audit, and no CI rule forbids them ClaimYour.Gold · SEAM-4 Phase 1 · read 2026-08-20 | IN BUILD |
| CYG-LED-6 | Nightly Σ(entries) = Σ(balances) | No such job. Blocked on CYG-LED-1, since both sides must be read as integers ClaimYour.Gold · .github/workflows/ · read 2026-08-20 | NORTH STAR |
Run history
No runs recorded — which today means the invariant has never run, not that nothing has gone wrong. This table will populate on the first nightly execution and will show every failure it finds, including historical ones. It will not be reset.
What happens when it passes
A passing run is what entitles a figure to read Reconciled, and it is also the gate on the chain. A snapshot only becomes reproducible once the ledger holds integers behind one writer, and a root may only be anchored for a snapshot whose invariant passed — anchoring a ledger that does not reconcile would make the drift permanent instead of merely present. How anchoring works →