Polling does not settle again
IdenticalRound 10 was rebuilt twice across 20 assets. Both complete states match.
Loading markets...
Loading markets...
Integrity room · fandaq-integrity-v1
This room separates controls the historical market can prove from live safeguards that still lack timing, identity or operating evidence. Passed means an executable invariant exists. Gated means Fandaq refuses the claim.
English Premier League 2015/16 · 2026-09-13. The checked-in season has 380 fixtures, 38 rounds and 20 clubs.
Polling does not settle again
IdenticalRound 10 was rebuilt twice across 20 assets. Both complete states match.
Correction replaces one event
380 → 3801:Manchester United:Tottenham Hotspur: 1–0 becomes 2–0. Manchester United's final quote rebuilds from ƒ85.35 to ƒ85.67.
Order shape is visible
ƒ0.06 differenceBuying four shares together costs ƒ201.00. Four sequential one-share buys cost ƒ201.06. Both paths use the production AMM quote function.
Control register
Evidence
Historical rooms advance one shared settled matchday. A commissioner pause stops both orders and tape advancement while portfolios and receipts stay visible.
Boundary
A current competition needs a measured source delay and a uniform close/reopen clock.
Evidence
Quotes are rebuilt from the same immutable match set. Re-reading a round does not mutate the economic state.
Boundary
The live feed adapter must preserve the same event identity guarantee.
Evidence
Every admitted EPL season now requires 38 rounds, ten fixtures per round, twenty unique club appearances per round and no duplicate fixture key.
Boundary
A feed with an ambiguous event identity is refused.
Evidence
The lab replaces one fixture under the same stable key and rebuilds from the opening state, rather than appending a second shock.
Boundary
No current feed can activate until source revision order and account treatment are specified.
Evidence
Authenticated orders send asset, side, shares and a request ID. The server locks the asset and trader, then calculates the current quote; a displayed client price cannot become the fill.
Boundary
A delayed live sporting value still requires a published market pause policy.
Evidence
The lab prices both paths through the same AMM function and publishes the difference. Splitting is not assumed economically identical.
Boundary
Impact parameters remain game-economy assumptions and need abuse review before wider live use.
Evidence
Trades use row locks, exact-cent arithmetic and a user-scoped UUID request key. A retry returns the stored receipt; reusing the key for another order is rejected.
Boundary
Periodic production reconciliation remains an operating requirement.
Evidence
Replay rooms start every seat at ƒ1,000, close entry before matchday one and give replacement members the existing seat without a new bankroll.
Boundary
Future grants or corrections require append-only ledger events before activation.
Evidence
No code-only test can prove one human has one account or that coordinated participants are independent.
Boundary
Live-style competition needs identity, monitoring, appeal ownership and observed abuse evidence.
Evidence
The current admitted product is a historical CC0 replay, so it has no truthful live-latency sample.
Boundary
Measure the approved provider end to end before publishing a delay or reopening a live-style market.