OpenAI 2026 hackathon

CRF ProofOps

A local-first Evidence Immune System that blocks poisoned evidence, exposes missing proof, and keeps authoritative status deterministic.

Solo project by Sarvagya Pandey · 0 likes · 0 comments

Archive position — measured, not model output

0 likes on Devpost

2,264 of the 7,856 archived projects have more likes, and 5,592 share exactly 0 — so this project's #3,570 place in the like-ranked listing is a tie-break inside that group, not a ranking.

Projects (log scale)

1
10
100
1k
10k
05,592
11,758
2285
3–4132
5–975
10+14

Likes on Devpost. ▲ marks this project's group.

Show the figures
LikesProjectsShare of archive
05,59271.2%
11,75822.4%
22853.6%
3–41321.7%
5–9751.0%
10+140.2%
Devpost like counts for all 7,856 archived projects, captured when this archive was built.

Executive Summary

What the company appears to be

CRF ProofOps is a self-reported local-first system designed to validate computational and software-release evidence. It claims to offer an "Evidence Immune System" that blocks poisoned evidence, exposes missing proof, and keeps authoritative status deterministic.

What changed

During the OpenAI 2026 hackathon, the project evolved from a research foundation into a product with a browser-based Evidence Lab, Python CLI/CI gate, GitHub Actions workflows, and a public demo. The author states this was a focused build-week effort to operationalize CRF ProofOps.

The single most important open question

Does CRF ProofOps have any real-world adoption or usage beyond the hackathon demo and limited pilot? The description provides no evidence of customers, revenue, or traction beyond its own claims.

Back to contents

What The Product Actually Is

The description states that CRF ProofOps is a "local-first Evidence Immune System for computational and software-release evidence." It accepts local JSON packages or four included samples. It separates:

  • what was claimed;
  • what deterministic checks verified;
  • what evidence is still missing;
  • which status remains authoritative;
  • whether prompt-like content was detected and treated only as data;
  • the source hash and portable evidence outputs.

The system generates outputs including:

  • Proof of Non-Promotion
  • Minimal Evidence Delta
  • Immunity Capsule
  • Decision JSON and Markdown report
  • Evidence-Supported Promotion Receipt

It operates through a browser-based interface (static, local-first) and a Python CLI/CI gate with GitHub Actions integration. The system treats all evidence as untrusted data and does not grant AI authority over evidence-backed status.

Back to contents

Positioning & Claim Evolution

The description states that CRF ProofOps was built to make "this boundary visible, deterministic, testable, and reusable." It positions itself as a solution for pipelines that can produce confident results while the underlying proof or evidence is incomplete or inconsistent.

The author claims:

  • AI can summarize evidence but confidence is not evidence
  • Prompt-like instructions embedded inside evidence must never be allowed to change an authoritative status
  • The system makes the boundary between claimed and verified evidence explicit

The project evolved from a research foundation into a product during Build Week, with the author stating that "the underlying CRF research foundation existed before the submission period" but that they created "the operational CRF ProofOps product" during the hackathon.

Back to contents

Target Customer & ICP

Not evidenced. The description does not identify specific target customers or personas. It describes the system's functionality but does not state who would use it or for what purpose beyond general software development and release processes.

Back to contents

Business Model & Pricing Evidence

Not evidenced. There is no mention of pricing, licensing, monetization strategy, or business model in the self-reported description.

Back to contents

Technical & Delivery Signals

The description states that CRF ProofOps:

  • Operates locally-first with no backend, cloud execution, or solver
  • Uses strict JSON parsing and 512 KiB input limit
  • Includes schema and field validation
  • Protects against unsafe prototype keys
  • Implements deterministic domain policies
  • Enforces fail-closed status transitions
  • Uses source and decision hashing
  • Generates downloadable Markdown and JSON reports
  • Is available through browser interface and Python CLI/CI gate
  • Integrates with GitHub Actions workflows
  • Has a repository-local Codex Skill
  • Includes adversarial prompt-like-evidence testing

The system is described as having:

  • 75 Python tests passed
  • 58 subtests passed
  • JavaScript and browser-core checks passed
  • GitHub Actions validation passed
  • A selected-instance real-world pilot that passed
  • Human owner QA test: PASS
  • Live production smoke test passed all four scenarios

Back to contents

Traction & Maturity Signals

Not evidenced. The description provides no evidence of revenue, customers, or adoption beyond the author's own claims. It mentions a "selected-instance real-world pilot" but does not specify how many instances or what the pilot demonstrated in terms of real-world usage.

The project is described as having been submitted to a hackathon and includes a live demo, but there is no evidence of ongoing usage or traction beyond that context.

Back to contents

Competitive Context

Not evidenced. The description does not mention any competitors or competitive landscape. It does not describe how CRF ProofOps relates to existing tools in the software verification or CI/CD space.

Back to contents

Key Risks & Red Flags

  • No evidence of real-world adoption: The project is described as a hackathon submission with only a "selected-instance real-world pilot" and no mention of broader usage
  • Limited scope: The system is described as handling only four specific scenarios, with claims that it's not universal or production-certified
  • Self-reported nature: All evidence is self-reported and unverified; there are no third-party validations or independent assessments
  • No commercial traction: No revenue, customers, or business model information provided
  • Limited testing scope: The "real-world pilot" is described as limited to one captured CRF instance
  • AI dependency without clear authority boundaries: While AI is said to assist in implementation and explanation, the system explicitly states that AI authority remains NONE

Back to contents

Diligence Questions To Ask The Founders

  1. What specific real-world use cases has CRF ProofOps been applied to beyond the hackathon demo?
  2. How many instances of the system are currently being used in practice?
  3. What is the actual business model or monetization strategy for CRF ProofOps?
  4. Can you provide evidence of any customers or paying users?
  5. What are the specific limitations of the current implementation that prevent broader adoption?
  6. How does CRF ProofOps handle edge cases not covered by the four included samples?
  7. What is the roadmap for expanding beyond the current evidence domains?
  8. How do you plan to scale from a single developer tool to enterprise adoption?

Back to contents

Investment/Partnership Verdict

Not evidenced. The description provides no information about financial performance, customer base, or market traction that would inform an investment or partnership decision. The project is described as a hackathon submission with limited real-world application and no commercial evidence. All claims are self-reported without verification.

Back to contents

Source

Submitted to the OpenAI 2026 hackathon on Devpost. Project home on DevPost.

The analysis above was generated by a language model from the project's own one-line description. It is not independent research and contains no verified traction, revenue or customer data.