A chart nobody can edit.

1. The venue account is public. The trading venue's public API returns any address's fills, positions and account value. The fund's address is on the record page; anyone can rebuild the equity curve from the venue rather than from us.
2. On-chain positions are on-chain. Assets sit in a vault whose keys the founder holds but whose destinations are restricted by an on-chain policy: money moves only to listed venue addresses, and adding one waits 72 hours in public.
3. Each daily snapshot is signed and anchored. The day's balances, positions, value per unit and limit checks are written as a file, signed with a published key, and the file's hash is recorded on a public chain. A later edit would not match.
4. Stale inputs stop the job. If any balance cannot be read, that day is shown as missing. Nothing is filled in.
5. The code is the code. The ledger, the limit checks and the snapshot job are the same software the Terminal's users run, and a verifier script is published with the record.

For any day: that the venue's own data reproduces the value we published; that the published file's hash is the one anchored on-chain that day; that every transfer out of the vault went to a listed address; and that the limits held, or that the breach was published.