proof · the claims ledger

Don’t trust it.
Read it.

Every claim this protocol makes, mapped to the exact on-chain read or verified-source fact that checks it. Rows light up green only when the verification is live on Robinhood Chain. Until launch, each row states precisely what evidence exists today (passing fork and invariant suites) and nothing more.

pre-launch · contracts built + fork-tested · zero live numbers until the vault exists

canonical address

not yet published

The only real FLOOR address will be published here and on the pinned X post at launch, nowhere else. The chain is full of verified-but-fake copycats: any “FLOOR” token circulating before this slot fills is not this protocol. Verify the address byte-for-byte against both sources before touching anything.

01

Supply is fixed at 1,000,000,000: no mint, no burn

FLOOR totalSupply() is constant at 1e9 × 1e18 · redeemed FLOOR is locked in the vault, so effectiveSupply() (the redeemable supply) only falls · verified source contains no mint or burn path

Address-gated. effectiveSupply() reads live on this row the moment the canonical address is published. Until then no supply number is shown, because none exists. Pre-deploy evidence: flap-pipeline fork test "the real Flap token has NO burn path: supply cannot be reduced".

at launch
02

The floor never falls

floorPerToken() = vault SGOV balance / effectiveSupply (totalSupply minus vault-locked FLOOR) · every mechanism path can only raise it

Passing today: test/invariant-v2.test.js, "Invariant V2: floorPerToken is monotone under no-burn redemption · holds across 300 randomized operations" (seeded sequences, exact comparison, zero tolerance), and test/flap-pipeline.fork.test.js, "floorPerToken was monotone through the entire pipeline" (create → trade → graduate → convert → redeem against forked Robinhood Chain mainnet state). The live time series starts recording at launch.

tested on fork
03

Liquidity is Flap-locked at graduation

before graduation, trading happens on Flap’s bonding curve · at graduation Flap seeds the DEX pool and locks the liquidity · no operator custody at any point

Passing today: flap-pipeline fork test "graduation: buying through the curve target migrates the token to the DEX", exercised against the real Flap Portal on forked mainnet state. The graduation tx link lands here with the address.

tested on fork
04

A 2% buy / 4% sell tax funds the floor

tax charged only on pool trades; plain wallet transfers untaxed · rates immutable after creation; the tax expires after its set duration (~100 years) · Flap keeps 41% of the collected tax after graduation (60% on the curve); 100% of the remainder is paid to FloorConverterV2

Passing today: flap-pipeline fork test "curve trades accrue WETH tax revenue at the processor", plus the fork probe of the live Flap contracts (scripts/probe-flap.js, artifact flap-probe.json) that pinned the rates, cuts, and ~100-year duration cap used on this site.

tested on fork
05

Redemption pays in-kind SGOV

redeem(amount): FLOOR is locked in the vault forever → receive pro-rata vault SGOV tokens directly, minus 2% fee that stays in the vault · no oracle, no swap in the money path

Passing today: flap-pipeline fork test "redeem locks FLOOR in the vault and pays real SGOV, exactly previewRedeem", an actual SGOV token transfer from the vault on forked mainnet state. Proof tx published at launch.

tested on fork
06

Public buy + sell: no honeypot

anyone can buy and sell through Flap's public curve and, after graduation, the DEX pool · the only trade logic is the disclosed 2%/4% pool-trade tax; plain transfers untaxed · no allow-lists, no pause on transfers

Passing today: the flap-pipeline fork test buys and sells through the real Flap curve and migrates to the DEX ("curve trades accrue WETH tax revenue at the processor", "graduation: buying through the curve target migrates the token to the DEX") on forked mainnet state. Proof tx hashes published at launch.

tested on fork
07

Operator split is exactly 40/60 of converter inflow

operatorFeeBps is immutable, set to 4000 in the FloorConverterV2 constructor · 40% of the ETH the converter receives pays the operator; 60% becomes SGOV in the vault · the permissionless fallback pays the operator nothing

Deploy parameter: operatorFeeBps = 4000 (immutable once deployed). Exercised today by the flap-pipeline fork test "keeper convert splits 40/60 and clears the REAL Chainlink guard". Disclosure, plainly: 40% of the converter's ETH inflow goes to the operator, stated here and everywhere else on this site.

tested on fork
08

No owner on the vault or converter

FloorVaultV2 and FloorConverterV2 have no owner, no setters, no pause, no upgrade path · the token is a Flap contract on Flap’s fixed FlapTaxTokenV3 implementation, never held or controlled by the operator

The absence of owner functions is checkable in verified source the moment the addresses are published. Until then the claim rests on the repository source and the passing V2 unit suites, so this chip stays gold until the chain can confirm it.

at launch
09

Converter cannot be drained

no standing token approvals · oracle post-check: SGOV received ≥ 97% of dual-Chainlink-implied value · keeper-only, 1h min interval · permissionless v4 fallback after 30d keeper silence

Passing today: the "FloorConverterV2 (the fence, with the operator split)" unit suite and the flap-pipeline fork test "keeper convert splits 40/60 and clears the REAL Chainlink guard"; the post-trade value check runs against the real feeds on forked mainnet state.

tested on fork
10

Flap sits in the tax path: disclosed

Flap’s Portal and tax processor are upgradeable contracts Flap controls · Flap could in principle redirect the tax beneficiary away from the converter · the keeper checks the beneficiary every run and this site can read it live · SGOV already in the vault can never be touched by Flap

Probed today against a fork of the live Flap contracts (scripts/probe-flap.js, artifact flap-probe.json): beneficiary routing confirmed end-to-end in the flap-pipeline fork test. This row exists because the dependency is real and permanent; we would rather rank it here than bury it.

tested on fork
11

The trading tax expires by design

Flap taxes carry a fixed duration, immutable after creation · FLOOR’s is set to ~100 years, the probed maximum · after expiry the tax channel stops; exit fees, T-bill yield, and donations continue, and the floor can never fall

Probed today: durations above roughly 100 years revert TaxDurationTooLong on the live Flap Portal (scripts/probe-flap.js, artifact flap-probe.json), so the launch sets the maximum. The exact duration is fixed in the creation tx and readable on-chain from launch.

tested on fork

Chip legend. live verified: an on-chain read shown on this page right now. at launch: the read or proof tx only exists once the canonical address is published; no number is shown before then. tested on fork: a named, passing test suite against forked Robinhood Chain mainnet state: real evidence, but not yet the live chain. Suite names refer to files in the public repository.