Every performance number on a credential is enforced by a proof, not a promise. Two journeys, end to end: the quant who proves an edge without revealing it, and the allocator who checks that proof on their own machine — taking no one's word for the numbers, including ours.
Open testing since July 2026 · minting free during the window · nothing here is a mockup
New here? The three-minute visual version →
A backtest is graded by the person who ran it, and the statistics that catch a lucky backtest — the Deflated Sharpe Ratio, PBO, and the rest — all lean on one number the person being judged gets to report: how many strategies did you try before this one worked? Understate it, and the correction for luck quietly disappears. The scale is no longer hypothetical: the recent literature finds models reaching 100% accuracy in-sample score roughly 50% out of sample — a coin flip (sources: the evidence page). MIZAN's job is to make that entire evaluation checkable by a stranger.
Within the committed ledger, the trial count is not a number you report. It is a fact the proof counts.
The ledger is forward-only. It counts every trial you committed and cannot be shrunk after the fact — but trials you ran outside it are invisible to it. That is exactly why a same-request N is labeled amber · self-declared on the credential, and the green badge is reserved for pre-registered ledgers: trials committed before the results existed.
A one-shot seal proves immutability, not foresight. Foresight is earned by anchoring the track before its window and extending it forward.
A credential attests a computation over committed history — never live execution, fills, capacity, or the future.
Express the strategy in MIZAN's spec — a weighted ensemble of rules, regime gates, sizing, up to full trend engines. It suits rule-based directional strategies; anything else — ML, stat-arb, discretion — belongs on the sealed path.
Run your model anywhere you like and submit only its decisions — one position per bar-move, each pre-committed behind a salted hash. The circuit proves those exact decisions cleared the gate, and that not one was edited after the fact. Position sizing is provable too: fractional per-bar leverage with an in-circuit cap (local prover).
This is verifiable AI where it counts for finance: the model's performance, proven — not its internals, which stay yours. Verifiable inference remains a research frontier industry-wide; verifiable performance is live here today.
Whoever reads the credential sees the verdict and the metrics. Never the strategy.
Be precise about what transits where. On the hosted paths, MIZAN's prover computes on your submission as a private input — the spec (rules path) or the position stream (sealed path) — and the credential never reveals either; the disclosed metrics themselves don't invert for any real strategy family (a one-rule spec is brute-forceable; three rules ≈ 10²⁰ candidates — the studio warns you and offers PASS/FAIL-only disclosure). If even transit is outside your threat model, the local prover runs the whole engine on your hardware and nothing leaves it but the finished credential, which the studio re-verifies with the pinned era verifier before listing.
Where the product stands: production-grade and complete, in open testing — anyone can sign in and run the full flow; real GPU proof mints are issued on request. The registry, the verifier, and every credential are live.
Datasets are canonical and Merkle-pinned — you pick one, you never upload prices. Sealed and Deflated-Sharpe mints: BTC (4h and daily) and SPY — the SPY series sourced from our US equity data feed (1997→, 7,184 bars). NIFTY and gold are withdrawn until rebuilt from an authoritative exchange source: we pulled our own datasets rather than keep minting on scraper data, and prior credentials verify forever. Rules-path mints add multi-asset majors books, window variants, and a survivorship-free US equity universe inside a ZK-provable pipeline — to our knowledge the first of its kind: a 30-name survivorship-complete, point-in-time panel (2016→) in which delisted names stay in the data instead of vanishing, plus 639 US single-name series — 641 datasets once each series is rebased to its true trading calendar of 248–252 periods per year (research note №07); the picker (and GET /api/*-datasets) is authoritative, with bar counts.
Sealed submissions: a JSON array of integers, one per bar-move, length exactly bars − 1, up to 13,000 positions. Deflated-Sharpe: up to 64 trials per ledger, winner first. Quotas: 3 sealed and 3 DSR mints per account per day, 2 self-serve rules mints. Own-data tier (worldwide markets): a quant in Tokyo, São Paulo, or Riyadh doesn't wait for our canonical menu — the local SDK mints on any market's data they commit, binding their CSV's Merkle root into the proof. (The SDK kit is issued on request — watermarked, under NDA; verifying needs no kit, the public verifier checks any credential.) A checker then verifies with their own copy of that market's history (--any-data): if the roots match, the credential was proven on data identical to the checker's copy — no trust in MIZAN or the submitter required. The verifier labels these submitter-committed, loudly, every run; canonical remains the tier where we vouch for provenance, and the public registry lists canonical credentials only. Want your market at the canonical tier instead? Any asset with a clean authoritative source is ~15–30 min to pin: request a dataset. And the honest boundary: dynamic universe selection (choosing which stocks to hold over time) and tick-level strategies aren't certifiable today — fixed cross-sectional panels are (the PIT-30 universe) — the coverage roadmap says what's next, and HFT is refused permanently.
No sales call, no onboarding meeting; the whole flow is self-serve at studio.mizan.market.
Minting is free during open testing, and a refused mint always costs nothing — you're never charged for a FAIL you didn't get to keep. Verifying is free forever, for everyone: charging to check would corrupt the one thing the standard exists to protect.
When paid tiers switch on: a flat credential fee ($6K/yr per active strategy; $25K/yr institutional tier with the full disclosing report), and you pay for the examination, not the outcome. The fee covers what's alive — chain extensions and registry presence. A minted credential itself verifies free, forever, paid or not.
A manager sends you a credential link. Here is the whole workflow — none of it on trust:
The reference credential on our wall is our own flagship strategy — and it reads NOT SIGNIFICANT at the 95% bar Marcos López de Prado defined. We shipped that failure and left it standing, next to more than forty of our own retracted strategies with the exact bug named on each. A verifier that only ever confirms good news is worth nothing; the credibility is in the refusal.
Everything a credential does not do, in one place: no forecasts, no live-fill attestation, no capacity claims, no operations coverage; off-ledger trials invisible; one-shot seals prove immutability, not foresight; high-frequency strategies refused permanently, because bar data cannot honestly verify them. Every era carries a published status in the append-only era registry, and our findings — including against ourselves — are published. The complete map: The VTR Standard (VTR-1).
That is the whole machine. The fastest way to believe it is to run it.