PQC-gossip Finality Proof Console
Audit console proving that PQCNet batches and proves high-speed activity, anchors finality records into Autheo Layer 1, and clears/settles the finalized batch with the THEO Token. Each claim is verified independently.

Independent proof boundary

Load finality evidence. The console will verify the explicit PQC handshake transcript, PQCNet high-speed batch activity, ZK proof, receipt signatures, quorum finality, the Autheo Layer 1 anchor, and THEO Token settlement/clearing as separate claims.

PQCNet batch activity

Batches high-speed transaction records, ties the measured rate to the counted-TX receipt, and binds the activity root to the ZK transition.

Autheo Layer 1 anchor

Checks that the finality record root, state root, batch root, and block hash were anchored into Autheo Layer 1.

THEO settlement / clearing

Verifies that the anchored finality record is the settlement and clearing receipt for the finalized PQCNet batch using the THEO Token.

Proof path

1. PQCNet receives high-speed payload batches. 2. Counted receipts and ZK state transition prove the activity. 3. Quorum finality is committed as an Autheo Layer 1 anchor record. 4. THEO Token settlement/clearing binds to the same L1 anchor.

Canonical proof JSON

Paste output from pqcnet-layer-zero-load finality-proof --json-out ... using schema pqc_finality_proof_v1.1 or load the demo schema. The optional pqc_handshake block is the only ML-KEM proof source; endpoint badges alone are reported as unavailable.

CLI support

./pqcnet-layer-zero-load finality-proof \
  --endpoint https://custom32.autheolabs.com/pqcnet-gossip \
  --nodes 4 \
  --quorum 3 \
  --tx-record-size 1 \
  --tx-records-per-payload 4096 \
  --payloads 1000 \
  --prove-high-speed-activity \
  --pqc-handshake hybrid-x25519-mlkem768 \
  --sign-kem-transcript \
  --anchor-chain autheo-layer-1 \
  --settlement-asset THEO \
  --json-out ./evidence/finality-proof.json
Expected booleans: explicit PQC handshake transcript, PQCNet high-speed batch proof, payload ACK signature, counted-TX receipt, ZK transition, ledger commitment, consensus quorum, finality certificate, Autheo Layer 1 anchor, and THEO Token settlement/clearing.

Endpoint / node identity

PQC handshake transcript

ML-KEM is marked pass only when kem_verified === true and the transcript fields are present. Current ML-DSA-only exports correctly show unavailable.

Schema v1.1 fields

pqc_handshake: { kem_verified, kem_algorithm, kem_ciphertext_commitment, transcript_hash, session_id, negotiated_group, identity_signature }

Required KEM tests

Assert negotiated group, downgrade rejection, NIST ML-KEM-1024 KAT, interop, ciphertext tamper fail-closed, and missing/forged transcript rejection. Use X25519MLKEM768 for transport hybrid or ML-KEM-1024/Kyber-1024 when the paper profile requires it.

Payload ACK receipt

Counted-TX receipt

Ledger commitment

ZK proof

Finality certificate

Consensus among nodes

Validator signatures

Adversarial regression tests

Slow activity, replay, tamper, stale timestamp, mismatched roots, insufficient quorum, unanchored L1 records, missing/forged KEM transcripts, downgrade attempts, and ciphertext tamper must fail closed.

Verifier transcript