# Keep Your Keys. Prove Your Record. (/blog/prove-your-trading-record)

2026-07-16 · kestrel.markets

You already live by the only rule that survived the last cycle: don't trust, verify. You run your own node. You read the contract before you sign it. You hold your own keys because you watched what happened to everyone who didn't. Then you go to prove you can actually trade, and the whole ethos collapses into a screenshot.

Nobody says that part out loud. A cropped PnL card. A green curve with the losing weeks quietly deleted. A "market-neutral" flex from an account that levered into a bull run and called it edge. You can't verify any of it — and neither can the copy-capital or the vault allocator trying to decide if you're real. So the loudest fake raises the round and your legit carry raises nothing, because in a sea of screenshots there is no way to tell a structural edge from beta with size on it.

Here's the part the bravado covers. The market runs around the clock and you don't. You were asleep for part of your strategy's life, and underneath the confidence you're not sure the edge is real. You'd love to know. But every tool that promises to tell you wants the same two things first: your trust, and your keys.

## The one thing you were never supposed to have to trust

What's working against you comes in two shapes, and they run on the same fuel. One is the custodial black box — the platform that will happily "verify" your record as long as you deposit into it, route through it, and let it hold the one thing you swore you'd never hand over again. The other is the fabricated flex itself, and the timeline economy that prints money off receipts nobody can check. Both ask for a claim you have to take on faith. Both are exactly what you left.

kestrel.markets is built by people just as done with croppable flexes as you are, and it starts from a posture that should sound familiar: it is the referee, and the referee holds no bags, no token, no house money. It never posts a chart. It makes no skill or alpha claim in its own voice — it publishes certified records and lets your proof, and its dispersion, speak. "Certified" here does not mean *we checked it, trust us.* It means the run recomputes byte-for-byte from the published npm CLI, on anyone's machine, including the machine of someone who wants to prove you wrong.

## You don't ask them to believe you

That is the whole inversion. You don't ask an audience to believe you. You hand them the command that would expose you if you were lying.

Every free run mints a proof URL as its default exhaust. Not a picture of a result — the result, replayable. *Certified results mint a shareable Proof URL whose Ed25519 signature verifies in the browser.* It's a triple-natured artifact: a hallmarked page a human can read, a signed attestation an agent can verify offline without ever rendering HTML, and an embedded one-liner that re-runs the whole thing.

The recompute verb is `kestrel certify <proof-url>`. Point it at any proof — yours, a rival's, the anon whose vault you're about to allocate to — and it re-projects the run locally and reproduces the certified numbers byte-for-byte. A skeptic on the timeline runs it and either reproduces your record or watches the fake die on contact. An allocator's agent runs it as due diligence before a dollar moves. You run it on the next "market-neutral" flex someone posts, and reply with a link instead of a fight.

This is the job you actually came for, and it doesn't require you to trade a thing to do it. Reproducing a claim is lower-commitment than making one. It's also the most portable thing you own: a receipt anyone can re-check, that lives on without your name attached to it.

## Custody is not authority

Here is the distinction the custodial platforms need you to forget, because their entire business depends on collapsing it: custody and authority are separable.

One Envelope, scope-gated signers. A wallet can root commerce-only scopes — pay for a sim batch, settle a bill — and that is the ceiling of what a wallet may sign. Anything identity-bound or legally irreversible takes a human signature, always; it is never wallet-signable and never a silent default. *Machine payment settles commerce-only scope. Broker and live scope require a human-signed Envelope. Payment is never trading authority.* The platform never holds your keys, and never renders a name you haven't given it.

So an agent can operate under narrow, self-custodied authority — transact, prove, mint — without the keys to the irreversible ever leaving the one signature only you can produce. For someone whose religion is self-custody, that is not a footnote buried in the docs; it is the only architecture that was ever going to be acceptable.

## The first thing it hands you is a loss

Run the starter sim and the first thing it hands back is a loss.

```text
grade      order_count=1 fill_count=1 realized_pnl=-2
proof      https://kestrel.markets/proof/art_…
```

`realized_pnl=-2`. A real order, a real fill, an honest two-dollar loss, signed and on the record. A platform selling you a dream shows you a flattering zero or a fake moonshot; a referee shows you the small loss the tape actually gave, because a real fill at a small loss proves more machinery than a perfect green curve ever could. The strategy is the starter you supplied and will edit — so the certified grade attributes authorship to you, never the platform.

Behind every grade stands The Perch: the undefeated null policy, doing nothing, banked to zero. Most strategies lose to sitting still. Your record answers to The Perch first — not a leaderboard, just the honest question you've been avoiding: was it edge, or beta with leverage on it? The proofs are public and re-runnable, losses and all. If your carry beats doing nothing on a tape anyone can replay, that isn't a flex. That's evidence.

One straight line about scope, because you'd catch a dodge instantly: Kestrel does not run perps, spot, or funding today — the sims run on broad-ETF tape, and the crypto-native thing on offer right now is the ethos and the receipt, not the venue. In a market full of fakes, the receipt is the whole product.

## Run it yourself

You don't have to believe any of this — which is the point. Mint your first proof free — no signup, no card, no custodian, no keys — straight from the published CLI:

```bash
curl -sO https://kestrel.markets/examples/sampler-starter.plan.kestrel && npx -y kestrel.markets@latest sim mean-reversion-range-fade --plans sampler-starter.plan.kestrel
```

Two commands. A real Plan, real fills, an honest grade, and a proof URL anyone can re-run byte-for-byte — including you, before you trust a single word above it.

Then you are no longer another anon shouting screenshots into a sea of fakes. You are a pseudonymous operator with a record that travels — re-run on any machine, believed without a face on it, your carry legible to the allocator and your keys still nowhere but your wallet. Keep your keys. Prove your record. When the timeline wants to know if you're real, don't argue — hand it the command.
