NØNOS(@nonossystems):.@VitalikButerin has argued for years: transparent proofs over trusted setups, STARKs for post-quantum security, formal verification and a trusted base shrunk toward nothing. We built exactly that but at the operating system layer. NØNOS is a microkernel where: a) the proofs run the real code that ships, not a model. If the two diverge, the build breaks. 134 Lean theorems, 0 sorry. 25 Verus proofs on the actual Rust. 48 Kani harnesses over every input. b) the crypto is a from-scratch transparent post-quantum STARK. Goldilocks field, Poseidon and FRI, hash and integers only. No elliptic curve. No trusted setup. c) the STARK verifier's own soundness is proven in Lean before it is allowed to gate a capsule spawn. @ethereum

2026.07.08 15:46

.@VitalikButerin has argued for years: transparent proofs over trusted setups, STARKs for post-quantum security, formal verification and a trusted base shrunk toward nothing. We built exactly that but at the operating system layer. NØNOS is a microkernel where: a) the proofs run the real code that ships, not a model. If the two diverge, the build breaks. 134 Lean theorems, 0 sorry. 25 Verus proofs on the actual Rust. 48 Kani harnesses over every input. b) the crypto is a from-scratch transparent post-quantum STARK. Goldilocks field, Poseidon and FRI, hash and integers only. No elliptic curve. No trusted setup. c) the STARK verifier's own soundness is proven in Lean before it is allowed to gate a capsule spawn. @ethereum