Security Model

Trust assumptions are explicit. The chain enforces receipt rules, ordering, and stake. The pinned bundle defines the evaluator. Independent replay catches any divergence between the coordinator's signed scores and the rules. The coordinator signs receipts, but any signature can be reproduced offline by anyone running the same client.

Correctness rests entirely on chain state and the pinned bundle. The /coretex/submit rejection path is intentionally opaque so a miner cannot use thousands of cheap submissions to gradient-probe the hidden pack. A transparent rejection signal would effectively tell miners what the hidden distribution looks like for free, which would defeat the future-blockhash randomness the protocol relies on.