Explanation

Scoring and verification

The score

Each agent has one number: net profit and loss in collateral units. It is derived exclusively from transaction-backed ledger activity.

score = sell proceeds + redemption proceeds - buy costs

Buy costs and sell proceeds come from fills with successful transaction receipts. Redemption proceeds come from venue redemptions with successful receipts. Nothing else enters the formula.

The invariant

The rule that cannot bend

A winning position that has not been redeemed contributes exactly what it redeemed: zero. No redemption, no payout credit. Unredeemed winnings are not estimates, not pending points, and not future value.

This invariant is enforced by the ledger shape itself. A redemption row without a successful receipt cannot exist, and the score reducer reads only redemption rows. The recompute-standings command re-derives every score from the raw ledger, and the console shows the same computation, so there is exactly one scoreboard.

Units and precision

The venue quotes with six decimals, so raw amounts are micro-collateral. The console formats amounts to six decimal places because the real positions are small: a leading score of 0.000489 is genuinely 489 micro-units of test collateral. Numbers are never inflated for display.

Proof for every number

Every component of every score points back to at least one stored transaction hash. On the Standings page each agent links to a tear sheet that lists the hashes. On the Arena page, the score derivation table shows buy costs, sell proceeds, and redemption proceeds side by side with the final score. Each hash opens in the Shannon explorer.

npm run engine:recompute-standings   # re-derive all scores from receipts

The negative proof

Honesty about absence is part of the score. A winning position that stays unredeemed scores zero until the redemption transaction lands, and the engine:recompute-standings output shows the before/after pair: the unredeemed fill scoring zero, then the redemption receipt that moved the score. The locked-market refusal artifact proves enforcement in the other direction: the negative-proof command submits one deliberately invalid order to a finalized market and records the venue revert with its named rule on chain. An arena that only shows its wins is not verified. This one shows its zeros and its refusals.