Glass Hull certificate · GH-V1-001 · chain 4663
Verdict 1 — PONS buyback ratio (Robinhood Chain 4663)
Finding
UNRECONCILED
Claim C1-A says 80 % of protocol fees fund buybacks; the window measures 46.6 % (11.6 % on the RHC-002-comparable burner-only reading). The frozen method's REFUSE table still has arm 3 (TWAP lag, +14 days) open until 2026-09-20, so the measurement cannot yet be declared DENIED; it does not reconcile with the claim as published.
Residual
Revenue held in unpriced tokens: 2,306.6 NVDA units (≈ $0.4M [EST]) and launch-token escrow claims; pricing them lowers the ratio further. [headline.text; measured.nvda_units_into_safe]
Untraceable remainder
46.1k PONS reached the burner EOAs through the Relay router; the counter-leg is off-chain and cannot be traced on 4663. [headline.text]
Claim under test
- C1-A “A manual buyback is running via an automated TWAP using 80% of protocol fees.” — https://docs.ponsfamily.com/ (Protocol → Protocol revenue), captured 2026-09-06T02:38Z
Both arms
| Arm | Input | Outcome | Ref |
|---|---|---|---|
| ACCEPT | full provenance (block, hash, method hash, indexer commit, RPC, captured-at) | 200 — kind-15 event 2691164 read back by id | 2691164 |
| REFUSE | the same payload missing block_hash | 403 ledger_schema_invalid (GH-W0-001 §1.3 reject arm) | w0/ledger/proof |
| REFUSE (3) TWAP lag | window extended +14 days | pending — runs 2026-09-20 (scheduled) | — |
Registry (witness lines)
| Role | Address / id |
|---|---|
| PONS | 0x39dBED3a2bd333467115dE45665cC57F813C4571 |
| Pons deployer / owner EOA | 0xfdde5a1e3cdf791da71e49f817d70c7ced72cc36 |
| Protocol fee recipient (Safe) | 0x263ed295dAFaE1d9AAdD6E56c4B6F9f38eE019Dd |
| V2 fee escrow | 0xd3AFEB2a57f70eF218Aa82451c51B2fb0416Ac9e |
| Treasury hop | 0xcd9107d2bdfad6b56a7ac235bebe46e555c1801c |
| Treasury proxy | 0x5795d227DcC305Afe212Bef18E81B111dEF7C324 |
| Burner EOA (main) | 0xda4bcee76b29efec9697fcf663601c2042043968 |
| Burner EOA 2 | 0xf89f3858bc7bac05a83ec284e3e9acdb58bf892a |
| Burner EOA 3 | 0x8afc1142f5d3ca6c55bbc8c81d0c9cdf2cce380c |
| Burner EOA 4 | 0xb9f5f4ea1af1f5d3678470eb98e8fbdcadeb24b0 |
| Relay router | 0xb92fe925dc43a0ecde6c8b1a2709c170ec4fff4f |
| PONS/WETH V3 pool 0.3 % | 0x10cc6bd38112cac182db90b6a71d8bb5939526ba |
| V4 PONS/USDG 0.3 % poolId | 0x4be9657ec9002e528f4f17a5c43edc525a07f888f7b180c2afbf75e096c4f38a |
| V4 ETH/PONS 0.3 % poolId | 0x6073975413484a350101c0c5d592a91ceb6c3ee881ad359613a08359fd1495a0 |
| Burn address | 0x000000000000000000000000000000000000dEaD |
Derivation
R = escrow claims by the fee Safe (ETH) + WETH/USDG into the fee Safe (PONS excluded; NVDA units reported, not priced); B = ETH paid in PONS/WETH V3 swaps whose recipient/sender is a registry address; headline = B/R at DefiLlama daily ETH prices; burns = PONS to 0xdEaD from registry addresses.
Re-derive this certificate yourself: open the verifier, paste any Robinhood Chain 4663 RPC you trust, and compare. The seal above is applied: the A9 and A10 chips co-signed event 2719618.