What we prove

The size and overflow checks inside PHP's emergency fix, written as maths, hold for every input. Not the rest of the fix, not the rest of PHP.

Who relies on it

PHP runs most of the world's websites, including WordPress sites, online shops and blogs.

The pieces

39 pieces, chained 5 deep: the largest problem on this ballot, so some pieces wait for earlier ones. Worked examples show the old version breaking and the fixed one holding. Estimate 2–8 hours for the whole chain.

If it passes / if a piece fails

If it passes: The checks' logic holds for every input, as written in maths, with the model that proved each piece named. It doesn't mean all of PHP is safe.

If a piece fails: It can mean our maths needs fixing. If it shows a real flaw, PHP's team hears first, privately, and it goes public only after they fix it.

What we prove

The rules for adding points on the Ed25519 curve, the arithmetic every Solana signature rests on. Not the signature code, not any wallet.

Who relies on it

Every Solana transaction, including the vote you're about to cast. Ed25519 is also used well beyond Solana, for example in SSH logins.

The pieces

17 pieces, 4 deep. One is famous for being hard: associativity, the rule that (A+B)+C equals A+(B+C). People have proved it before; the question is whether the swarm can do it live. Estimate 2–8 hours; the hard piece may take the longest.

If it passes / if a piece fails

If it passes: A machine-checked proof of the curve's addition rules, with the model that proved each piece named. It doesn't check Solana's signature code or the network.

If a piece fails: These rules are well-established maths, so a failed piece most likely means our written statement needs fixing. We publish the failure and the correction.

What we prove

Three facts about secp256k1, the curve under Bitcoin and Ethereum signatures: its defining numbers are prime, its base point has the stated order (how many additions bring it back to the start), and the facts behind the GLV speed-up hold. Not the signature code, not any wallet.

Who relies on it

Every Bitcoin and Ethereum signature, and the wallets, exchanges and custody services that handle them.

The pieces

13 pieces, 3 deep: the fewest on this ballot, but two are very heavy number checks (proving a 256-bit number is prime is slow, even for a machine). Estimate 2–8 hours; the two heavy pieces set the pace.

If it passes / if a piece fails

If it passes: Machine-checked proofs of all three facts, with the model that proved each piece named. It doesn't check any wallet or signature code.

If a piece fails: These are well-established facts, so a failed piece most likely means our written statement needs fixing. We publish the failure and the correction.