Provable Simulation Infrastructure

Fork the present.
Prove the future.

Deterministic · Auditable · Forkable simulation — bit-identical on every machine.

Berk DT isn't a physics engine — it's a decision-verification infrastructure: it forks a live state to evaluate possible futures, fingerprints every step, and proves that the same input yields a bit-identicalresult on every machine.

Deterministic
Fixed-point (integer) math → the same input, the exact same state_hashon every CPU/OS/browser.
Auditable
Record-replay + a tamper-evident proof chain. Not "what happened?" but "prove it."
Forkable
Snapshot, branch the futures, score and hash each one. What-if — reproducible.

01Provable Simulation

A simulation used to make a decision has one question: can you trust it?On floating-point engines, the answer is fragile.

In the float world

The same scenario yields different results on a different CPU/compiler. The prediction drifts on its own; you can't tell whether a divergence is model error, a fault, or cyber-tampering — so you loosen the threshold and go blind. "The simulation ran" is a claim you can't prove.

In Berk DT

All math is fixed-point integer → the simulation side has zero-bit noise. The same input, the same state_hashon every machine. You compare the result in one line, reproduce it in one command, and catch tampering instantly.

Same setup + same input→ state_hash→ Windows ≡ Linux ≡ macOS ≡ browser

This claim is auto-verified by CI on three platforms on every change; see it live in the Hash Consensusand CPU ≡ GPU ≡ browserdemos.

02What-If Engine — Deterministic Future Tree

A classic digital twin monitors and replays (what happened?). Berk DT goes one step further: it forks futuresfrom a live state (what else could have happened?).

Live state (snapshot)→ fork N branches→ simulate each forward + score→ hash-addressed COAs

Advisor — decision-space exploration

Each branch runs under a distinct plan; the result state is scored and hashed. Same base + same plan → same result. The options (COAs) you produce are defensible and reproducible; the base state is never mutated.

Shadow Twin — live verification

A deterministic twin runs beside the real system on the same inputs, tracking the residual between prediction and measurement and raising an alarm on the first frame of divergence. With zero simulation noise the threshold can be tight — a small wear/fault/injection trips it cleanly.

Advisor and Shadow Twin are the operational layer of the Sentinel edition; they share the same core as rollback netcode and the proof chain.

03One core, three worlds

Decision safety, operational optimization, and sim-to-real verification — all from a single deterministic core.

Defense

  • Provable COA / decision space
  • After-action bit-for-bit reproduction
  • Air-gapped deployment
  • Auditable autonomy

Industry / Digital Twin

  • Operational future tree (what-if)
  • Predictive maintenance + anomaly detection
  • Shutdown / line optimization
  • Record-replay audit

Robotics / AI

  • Sim-to-real reproducibility
  • Deterministic sensor (LiDAR) simulation
  • Rollback/lockstep multiplayer
  • Unity · Unreal · WASM · C-ABI

04Competition — at a glance

Determinism is now the goal of many engines; the difference is howit's achieved and what it comes with. Berk DT unites in one core the three things competitors hold separately.

Float engines · Rapier · Jolt · Box2D · Havok

Strong physics, but cross-platform determinism depends on float + compiler flags (fragile) and there's no decision/twin layer.

Photon Quantum · the only fixed-point peer

Fixed-point and deterministic, but Unity only + its own cloud; game-netcode focused, not a digital twin.

Berk DTfills the intersection: by-construction fixed-point determinism + an embedded decision/twin layer + formal verification + an operational layer (Shadow Twin · Advisor) — a single lightweight, embeddable core.

05Reproduce it yourself

We don't say "trust us." Thanks to determinism, every claim is reproducible in one command.

✓ ~1050 tests · 0 failures · 3-platform golden-hash CI · tamper-evident audit report
# Determinism: the golden hash is bit-identical on every platform
cargo test --release --test determinism_dynamics

# Forensic Inspector: generate a run, then re-verify it by PHYSICS
cargo run --bin berk-audit -- run
cargo run --bin berk-audit -- verify report.json   # → all 600 frames reproduced ✓

# 10,000 bodies: SAP and BVH broadphase produce the SAME hash
cargo test --release --test scale_10k -- --ignored --nocapture
Note:Determinism removes simulationnoise, not modelerror — the persistent gap between a real asset and its twin (the reality-gap) is managed by calibration. Performance figures are single-machine and advisory; no certified WCET is claimed. Formal certifications (DO-178C / ISO 26262) are not held yet; the core is designed to producethe evidence artifacts those processes require (hash logs, replay certificate, divergence report, audit trail). Details in the whitepaper.

Note: the interactive demos are currently labeled in Turkish, but they are visual and language-light — the hash badges, controls, and effects read the same in any language.