Sheet PXM-G-100
Three gates. One substrate.
Phase 0 closes by evidence, not by assertion. S.01 and S.02 now have operator evidence on real infrastructure. S.03 remains open while Paxiom moves toward its own Ethereum historical-state proof archive: Erigon/Reth for sovereign MPT witness retrieval, encrypted Arweave evidence for durable storage, and AO-assisted proof work where data exposure is acceptable. Load/Ultraviolet remains useful reference work, not a dependency to wait on.
HyperBEAM running locally via rebar3 shell.
Acceptance met: the local HyperBEAM smoke test completed with S01_OK and exit 0. Evidence log: hyperbeam/bringup/logs/smoke-test-20260502T220748Z.log.
Operator command
./hyperbeam/bringup/install.sh
./hyperbeam/bringup/smoke-test.sh
# expected: PASS A-120/S.01
Service A-202 device on a real recent slot.
Acceptance met for the Paxiom service + harness subprocess path: POST /v1/sync-committee/verify returned verified: true with primitive_return_code: 1 for Ethereum mainnet slot 14245526. Evidence file: paxiom/hyperbeam/bringup/evidence/gate-s02-20260503T010547Z.json.
Boundary: this closes the subprocess-dispatch reference implementation. HyperBEAM-hosted third-party device registration via paxiom/hyperbeam/devices/bls-sync-committee/ remains unproven and is a separate gate.
Operator command
# operator-only — runs against a locally-started service; not a public endpoint
# build wasm + harness
cargo build --release \
--target wasm32-unknown-unknown -p bls-verifier
cargo build --release -p bls-device
# subprocess dispatch reference path:
BLS_DEVICE_VIA_SUBPROCESS=1 \
BLS_DEVICE_HARNESS=/path/to/bls-device-harness \
node services/sync-committee/server.mjs
# verify
curl -X POST localhost:8080/v1/sync-committee/verify \
-d @real_slot.json
No unverifiable claims, sharpened into two live-read paths.
Open acceptance target: an Ethereum L1 historical state query verifies end-to-end against a sync-committee-trusted block header. The gate-closing sovereignty path is Erigon/Reth serving local eth_getProof/MPT witnesses. Proof packets and L1 evidence are written to a Paxiom-owned archive: encrypted Arweave storage, Paxiom-controlled indexing and keys, and AO-assisted proof work where the data can safely be revealed.
Evidence
- L1 commitment retained: the substrate target remains Ethereum L1 mainnet data, not a substitute chain surface.
- Erigon/Reth is the institutional path: local witness retrieval with no upstream RPC dependency.
- Helios-on-HyperBEAM remains useful as a verifiable transport experiment, but it is no longer the dependency Paxiom waits on for S.03.
- Load/Ultraviolet remains useful reference work; Paxiom's working path is its own encrypted Arweave proof archive and verification pipeline.
- Next evidence target: verify one Ethereum L1 historical storage query through local Erigon/Reth witnesses against a sync-committee-trusted state root, then write the proof packet to encrypted Arweave storage with a Paxiom index entry.
- Feasibility target: measure Turbo sub-100 KiB item coverage for recent L1 transactions/receipts before committing the evidence-stream format.
Operator command
# Helios path under evaluation
curl https://eth.rpc.rs \
-d '{"method":"eth_getProof",...}'
# sovereignty path target
eth_getProof(address, [slot], block)
# from Erigon/Reth; verify account + storage
# proof against S.02 sync-committee-trusted root
# cold path target
# write proof packet + header + evidence tags
# to encrypted Arweave storage for replay.
Scaffolded — code + tests in companion repo
Operator-pending live verification
Closed
G-200 · Why this page exists
The discipline of evidence.
The build map (PXM-R-100) now distinguishes closed operator evidence from unresolved substrate decisions. This page is the audit trail underneath those flips: each gate names its acceptance criteria, points at the source of evidence, and quotes the exact command or evidence artifact that closes the live side.
S.01 and S.02 are closed by operator evidence. S.03 is deliberately not closed yet: the gate closes only when Paxiom proves a live L1 state query against a sync-committee-trusted root and preserves the evidence trail in the Paxiom-owned archive. Erigon/Reth remains the fallback-free sovereignty path for high-stakes reads.
About the evidence links. The links above point at the companion repos k-luecke/paxiom and k-luecke/bls-verifier or at named local evidence artifacts. They resolve when those repos and evidence paths are published; until then, the public claim is limited to the specific operator artifacts named here.