Verify it yourself

1. Open the policy account — the condition and payout live on-chain, not in this page.
2. In the account's transaction history, the settlement contains an inner instruction to txoracle validate_stat— TxODDS's program verifying the Merkle proof of the match stat. (Devnet prunes transactions after a few days; the account state above is permanent, and we archive settlement transactions in the repo's evidence/ directory.)
3. No multisig, no vote, no admin key appears anywhere in that path. That's the whole point.

What this policy cannot do

• Settle on the wrong match. The fixture id is written into the account at creation; a valid proof from any other fixture is rejected by the program.
• Move the goalposts. The condition — stat keys, comparison, threshold — is frozen on-chain the moment the premium is paid. What you signed is what settles.
• Pay on a ghost goal. Settlement only accepts full-time stats anchored after the final whistle. A goal that stands for 26 seconds and is then chalked off by VAR never reaches a full-time root — so it can never settle a policy.