Tri-verified.
Bitcoin-anchored.
Every formal proof produced by the Institute is mechanically verified across three independent theorem provers — Lean 4, Coq / Rocq, and Dedukti / λΠ-calculus modulo theory — and immutably timestamped into the Bitcoin ledger via OP_RETURN and OpenTimestamps. The record is auditable, public, and cryptographically irreversible.
Three provers. Independent kernels.
One canonical truth.
Lean 4
Modern dependent type theory with a small trusted kernel. Industry-leading mathlib integration. Proofs are checked by the Lean kernel itself; no metatheoretic shortcuts.
Coq / Rocq
Calculus of Inductive Constructions. Forty years of mature kernel scrutiny. Independent verification provides cross-checking against any single-prover bias.
Dedukti / λΠ
λΠ-calculus modulo theory. Logical-framework rewriting that exposes assumptions other provers leave implicit. The third independent witness.
A theorem earns Tri-Validated status only when all three kernels accept the proof. Any disagreement triggers a return to the Mathetica for revision. This isn't redundancy — it's distributed kernel scrutiny: we do not trust a result until three independent type theories agree it is sound.
Immutable
publication.
Direct OP_RETURN
For Tri-Validated theorems and major framework releases, we publish the SHA-256 root directly to a Bitcoin OP_RETURN output. The transaction itself is the publication. Once mined, the record is physics-locked into the longest chain.
OpenTimestamps
Every individual proof — even minor lemmas — receives an OpenTimestamps receipt. The calendar aggregates submissions across the network and anchors them in batched Bitcoin commits, giving each proof a portable, independently-verifiable timestamp with no fee burden per proof.
opentimestamps.org