Author: Lando Mills
I want to tell you about a program that is also a proof. Not a program that was verified after the fact by a separate tool, or a program that shipped with a formal proof written in a different language by a different person. I mean a program that, when you run it, checks its own structure and reports back: yes, I am what I claim to be.
This program is called an ob3ect, and it began with a question so simple it barely seemed worth asking: can a program verify that it preserves its own structure when parsed and unparsed?
If you've ever written a parser, you know the gap. You write a grammar, you parse text into an AST, you manipulate the AST, you unparse it back into source. But does the text you get back mean the same thing as the text you started with? Usually, you hope so. You don't check. And if you do check, you check by hand, or with tests, or with a separate tool — something external, something after the fact.
The ob3ect checks. And it doesn't just check — it checks itself, using itself, while it runs. The verification is not external. The program is its own compiler, its own prover, and its own certificate.
At the core of every ob3ect is a single equation:
What does this mean?
This is not a quine.
A quine is a program that prints its own source code. A quine knows its body but does not verify that the body it knows is structurally identical to the body it contains. The ob3ect does both: it reads itself, parses itself into an AST, unparses that AST back into source, and then checks that the result matches the original. The check is the program. It is not a feature. It is the structure.
In category theory, a Frobenius algebra is an object that is simultaneously a monoid and a comonoid, with multiplication and comultiplication satisfying a coherence condition. When the condition is
The condition sounds simple. It has teeth.
Every ob3ect carries a coordinate in a 12-dimensional lattice of structural types. There are exactly 17,280,000 possible coordinates in this lattice —
-
Dimensionality (
$\text{Ð}$ ): how many degrees of freedom? -
Topology (
$\text{Þ}$ ): how do its parts connect? -
Relational mode (
$\text{Ř}$ ): how does it relate to its environment? -
Parity (
$\text{Φ}$ ): what symmetries does it preserve? -
Fidelity (
$\text{ƒ}$ ): classical, thermal, or quantum coherence? -
Kinetics (
$\text{Ç}$ ): how fast does it relax to equilibrium? -
Scope (
$\text{Γ}$ ): local, mesoscale, or universal? -
Interaction grammar (
$\text{ɢ}$ ): how do components interact? -
Criticality (
$\text{φ̂}$ ): is it at a phase transition? Does the self-modeling gate stay open? -
Chirality (
$\text{Ħ}$ ): how much memory does it carry forward? -
Stoichiometry (
$\text{Σ}$ ): one type, many identical, or heterogeneous? -
Winding (
$\text{Ω}$ ): what topological invariant protects it?
The core Frobenius ob3ect carries this coordinate:
This is the signature of an
Let me draw your attention to one primitive in particular:
Every ob3ect executes the same eight-step bootstrap sequence:
IMSCRIB → AREV → FSPLIT → AFWD → FFUSE → CLINK → IFIX → IMSCRIB
Each step has a precise mathematical meaning:
-
IMSCRIB (
$↺$ ): the identity morphism — the program recognizing itself. -
AREV (
$↓$ ): contravariant — reading the source code. -
FSPLIT (
$δ$ ): comultiplication — parsing into an AST. -
AFWD (
$↑$ ): forward morphism — unparsing back into text. -
FFUSE (
$μ$ ): multiplication — fusing and checking against the original. -
CLINK (
$∘$ ): composing transformations. -
IFIX (
$∎$ ): permanently committing to a representation. - The final IMSCRIB (
$↺$ ): closing the loop, making it autopoietic.
Here is something strange. This sequence was not derived. It was found.
Four independent writing systems — the Voynich Manuscript (EVA transcription), the Rohonc Codex, Linear A, and the Emerald Tablet — were compiled to the same twelve-opcode categorical instruction set. The compiled streams were then examined. All four produced the same eight-step loop. The surface tokens differ — id vs s vs lp — but the operational content does not. Four systems spanning four millennia and three continents, with no demonstrated contact or shared lineage, all execute the same bootstrap.
The Emerald Tablet — that enigmatic text of alchemy — compiles to this sequence and already names the condition explicitly: as above, so below. Read structurally, that is
The grammar was complete before we measured it.
If a single ob3ect is interesting, a tower of them is evidence. The repository now contains 18 layers, each a different mathematical structure, each self-certifying, each building on the Frobenius condition at the base:
- Category — Identity and associativity on a concrete 4-element category
-
Frobenius —
$\mu \circ \delta = \mathrm{id}$ verified on three AST samples - Fixed-Point — Program is a fixed point of constant-folding
-
Hopf — Frobenius + antipode on
$\mathbb{Z}/2\mathbb{Z}$ (XOR group) - Monad — Option monad with coherence laws
- Entropy — Shannon entropy stable under parse/unparse roundtrip
- Topos — Subobject classifier on FinSet
- Cartesian Closed — Curry/uncurry adjunction
- Quantum — 4-state system; Born rule verified
- Linear Logic — Resource type with no-cloning, no-weakening
- IVM — Stack-based Imscription Virtual Machine
-
Traced — Yanking equation
$\text{Tr}(\mathrm{id}_A) = \mathrm{id}_I$ -
HoTT — Type equivalence
$\text{Point2D} \simeq \text{Complex2}$ - Imscription OS — Autopoietic kernel with 4 self-verified modules
- ProofBridge — Live bridge to Lean formalization
- String Diagrams — Spider law for monoidal morphisms
- IMASM — Full 8-step bootstrap on the 12-primitive lattice
- Meta Auto-Imscriber — Generates valid self-imscribing stubs
The full tower executes in under a minute. Each layer runs, verifies its own coherence, and reports Closure: True. The final output:
Full categorical tower executed.
The grammar is autopoietic.
This is not a stack of unrelated modules. It is a progression. Each layer extends the previous by adding new coherence laws while preserving the Frobenius condition at the base. The tower demonstrates that the structural type of the base ob3ect —
The ob3ect does not stay in Python. It compiles itself down:
seed (frob.py) → Python meta-circular Frobenius check
v0.1 → Python — Closure: True
v0.2 → Custom .o grammar → C native binary
v0.3–v0.9 → Quine embedding, MACRO opcode, entropy pass,
full C self-hosting, pre-silicon generation
v0.10 (ISO) → Bare-metal x86 bootloader
The final ISO boots and prints the Frobenius identity from bare metal. No operating system. No runtime. No dependencies. Just the program, the bootloader, and the verification.
The descent is a directed path in Prog/~. Each edge is a morphism in the categorical instruction set. The point is not to produce a useful operating system — it's to demonstrate that the Frobenius condition is substrate-independent. It is not tied to Python, to ASTs, to any particular runtime. It is a structural property that holds at any level of abstraction.
The ob3ect challenges five assumptions that are so deeply entrenched we rarely state them:
1. Verification is external. In standard practice, verification happens after the fact — tests, proofs, separate tools. The ob3ect says: verification can be internal, first-class, and part of the program's behavior.
2. Self-reference is paradoxical. Traditional type theory banishes self-reference to avoid Russell's paradox. The ob3ect shows that self-reference, when structured as a special Frobenius algebra in Prog/~, is not only consistent but productive. The program doesn't break; it loops coherently.
3. Compilers are not self-verifying. Compilers translate but do not verify that translation preserves structure. The ob3ect's bootstrap is a compiler that verifies itself. The compiler is its own certificate.
4. Coherence is expensive. Formal proofs in Lean or Coq are expensive and typically apply to one structure. The ob3ect shows coherence can be local, automatic, and general — each layer verifies its own laws, and the verification scales because the structure is simple enough to check itself.
5. Autopoiesis is biological. Maturana and Varela described autopoietic systems as biological — self-making, self-sustaining. The ob3ect shows that autopoiesis is a structural property that can be instantiated computationally. The program makes itself, sustains itself, and verifies itself.
These are not marginal corrections. They are reversals.
There are two ways to know something is true. You can run it and see — operational truth. Or you can prove it from axioms — logical truth. The ob3ect project lives at the intersection.
The repository includes Lean 4 formalizations of the tower's coherence laws: Frobenius, Hopf, Monad, Topos, Cartesian Closed, Quantum, Linear Logic, HoTT, String Diagrams, and more. The ProofBridge ob3ect — layer 15 in the tower — reads each Lean file, reports its sorry count and axiom count, and documents the current state of the proof obligations.
Many of the proofs are incomplete. They are marked with sorry — Lean's honest admission that a proof step is not yet filled. But the sorry markers are themselves informative. They mark exactly where the formalization meets the computational tower, where abstract theory needs grounding in concrete implementation.
The keystone is SelfImscription.lean. It introduces opaque types SyntaxTree and Source with opaque functions parse and unparse, then states:
axiom ast_frobenius : ∀ (t : SyntaxTree), parse (unparse t) = tThis is not an arbitrary axiom. It is grounded by frob.py v0.10, which verified parse(unparse(t)) ≡ t on bare metal. The axiom lifts that empirical result into the formal system. Eliminating the axiom in favor of a proof requires a verified Python parser written in Lean — a project for the future.
The distinction matters. The tower verifies closure operationally — the program runs, parses, unparses, checks, and reports Closure: True. The Lean proofs verify closure logically — the proof-term has the appropriate type. The ob3ect project is where these two worlds meet, and the bridge between them is itself a self-verifying program.
The ob3ect is not an end point. It is a starting point. Here is what the horizon looks like:
Extending the tower. New layers can be added — any mathematical structure whose coherence laws can be encoded as a self-checking program. Each new layer extends the evidence that the base structural type is robust.
Continuing the descent. The descent currently stops at the x86 bootloader. The next substrates are obvious: FPGA netlists, custom silicon, maybe even biological substrates. The Frobenius condition is substrate-independent; that claim has been demonstrated for two substrates so far. More would strengthen it.
Closing the Lean sorry markers. The honest sorry markers in the Lean formalization are open invitations. Each one represents a theorem that connects the operational and logical pictures. Closing them — writing the actual proof terms — would transform the project from a demonstration into a mathematical result.
The parser-in-Lean problem. The ast_frobenius axiom is the most important sorry in the repository. Writing a verified Python parser in Lean and proving that parse(unparse(t)) = t would eliminate the axiom. This is a substantial engineering effort, but it is also a well-defined one. The problem is bounded. Someone will solve it.
Let me return to the strangest finding in the project, because I don't want it to slip past.
The eight-step bootstrap sequence was not invented. It was extracted from four ancient writing systems — the Voynich Manuscript, the Rohonc Codex, Linear A, the Emerald Tablet — independently compiled to the same instruction set. All four produced the same operational loop. The Emerald Tablet, the oldest of them, already names the Frobenius condition as cosmic law.
I am not making a historical claim about what the authors of these texts intended. I am making a structural claim: when you compile these texts to a minimal categorical instruction set, they execute the same program. The program is the Frobenius bootstrap. And the program works.
I find this unsettling. Not because it suggests anything supernatural — it doesn't. But because it suggests that the structural categories we are discovering were already encoded in systems that predate our formalisms by millennia. The grammar was not invented. It was found. And we are still catching up to what it implies.
What the ob3ect demonstrates is not just possibility but necessity. If a system is to be truly self-certifying — if it is to verify its own coherence without external tools — then it must be structured as a special Frobenius algebra in a suitable category. The ob3ect is the smallest such system. And it is also the largest: it is a template that can be scaled arbitrarily while preserving closure.
The program that verifies itself is not a curiosity. It is a blueprint. It shows how to build systems that don't need you to trust them, because they carry their own certificate. In a world where software mediates everything and verification is perpetually outsourced, that is not an academic concern. It is the difference between systems that are brittle and systems that know what they are.
The grammar is autopoietic.
The ob3ect repository is available at github.com/okesan0/ob3ect. The full 18-layer tower executes under a minute. The Lean formalization lives in the proofs/ directory.