Reconciliation as open work
Every input an observer uses is public. Anyone can run one, and anyone can check one. Boli runs an observer of its own and holds no position the others do not.
Boli runs no chain of its own. Assets settle on the major networks they already live on — EVM, Solana, Stellar and Canton. Tenzro sits between them as a double-accounting layer and a buffer. Pilots read live mainnet contracts on Ethereum, Arbitrum and Solana, and two independent observers sign each epoch.
Four steps, all of them repeatable.
An observer reads public chain state and public attestations, nets the declared bridge routes, and publishes the difference. Every step uses inputs anyone can reach.
Where identity comes from →Report circulating supply for each registered representation, at a pinned block, so a third party repeating the query gets the same answer.
Subtract the declared lockbox or burn at the source. A unit that crossed a bridge exists on both sides of it and is counted once.
Reconcile the netted total against the reserve attested for that asset, and compute what capacity is left.
Publish the epoch when the figures agree, and raise a challenge when they diverge. Where no reserve has been attested, publish that.
Bonding attaches to measurement.
Supply observers post no collateral. A reading names the contract, the address and the block it was taken at. Anyone repeats the query and gets the same answer.
Attested measurement is where collateral belongs. A Ground reading happened once, at a place you were not. Agents producing those readings are paid from the treasury and bond against what they report.
Every read names the block it was taken at. The same query at the same block returns the same number to everyone.
Each epoch is committed as it is produced. A dispute argues with a record that already existed.
A challenge needs no account and no stake. Anyone holding the thing a figure values can act on it directly.
A measurement is not reproducible.
Reading a supply figure and measuring a herd are different kinds of act. The first is repeated by anyone. The second happened once, and nobody can go back and check what the camera saw last Tuesday.
A Ground reading carries the identity of the device that produced it, the model that interpreted it, and the exact weights that model was running — each rooted in the device’s TPM. Change any of them and readings stop being accepted. A retrained model is a different valuer.
Attestation proves a reading is authentic. Validation proves it is right, and they are separate claims — a camera with impeccable provenance reports faithfully on whatever is in front of it. A feed’s authority stays capped until its model is checked against ground truth. Every reading carries its uncertainty, and backing is credited at the conservative end.
Ground →Open registration, no allowlist.
Competition between independent observers is what makes a reported view worth trusting. Disagreeing with Boli requires nothing from Boli.
Independent operators
Anyone with an RPC endpoint and somewhere to run the reader.
DAOs and protocols
Teams monitoring assets they hold, integrate, or depend on.
Risk desks
Desks that need continuous reconciliation rather than periodic snapshots.
Issuers
Issuers who want independent observers reporting on their own supply discipline.
Monitoring is the protocol's real work.
Readings are pinned, epochs are anchored as they are produced, and a challenge costs nothing to raise.