Honored to join @muellerberndt on three OPH papers. It was genuinely fun. The path was hard and complex. Using Oraclizer’s preserve/reflect discipline, I pulled a general layer from one auction fixture and kept pushing until Lean separated four different ways protected behavior can fail. Bernhard’s willingness to let outside work meet OPH on its own terms stayed with me. I’m grateful for that trust. The next question feels clear: can the repair process supply the assumptions the proofs need, and what remains impossible under any scheduler? I think that is the path. github.com/FloatingPragma/ob…