Genesis / Trust anchor /
EACL
— Verification —

Don't trust the display.
Verify the record.

This page runs the verification in your browser, against a public key you can fetch yourself. There is no server "verified" badge here, because a badge is just us asserting something again.

— Verify An Artifact —

Public key (Ed25519, 32 bytes hex)
The point is that this key reaches you independently of whoever gave you the artifact.
Sealed artifact (JSON)
Not yet runLoad an artifact and a public key, then verify. Everything happens in this browser tab — nothing is uploaded, and the page works with your network disconnected.

— The Three Verdicts —

Most verifiers answer a binary question, and that is a design flaw. A binary verdict forces "I could not check that" to collapse into either a pass or a fail, and both are wrong. This one returns three states.

VerifiedEvery declared check ran and passed.
?IndeterminateIntegrity held, but a declared property could not be checked here. The reason and the remedy are named — you are never left to discover the gap by accident.
RefutedA check ran and failed. The specific failure is stated.

These are deliberately not named ALLOW, HOLD, and DENY. Those are EACL's adjudication verdicts about an agent's proposed action. These are verification verdicts about an artifact. Conflating the two surfaces would be a category error, and this surface does not make it.

Why this matters, concretely On 11 August 2026 an audit of our own substrate found a verifier that skipped the signature check on an unsigned artifact and returned a pass, with the omission recorded only in a nullable sub-field. A fabricated artifact passed it. Exposure was nil — staging, no external tenants, nobody pointed at that endpoint — and it is fixed. This page exists in the shape it does because of that finding: one shared verifier implementation, and no verdict that can hide a check it did not run.

— Public Trust Anchor —

EACL's Ed25519 signing key is disclosed at a permanent, no-authentication public URL. Any sealed governance decision issued by EACL carries a signature over the canonical hash of its payload; that signature verifies against this key.

Anchor URL
Algorithm
Ed25519
Key ID
150899c476f355f1
Environment
staging — demonstration, non-canonical

This is the staging demonstration key. The canonical Genesis signing key will be committed at the Genesis tag, at which point this file becomes the pre-Genesis staging attestation. That transition will itself be signed and disclosed rather than quietly performed.

If the key shown above does not match the one you fetch yourself, stop. That discrepancy is exactly what a published anchor exists to reveal.

— Independent Verification Precedent —

On 4 August 2026, a sealed EACL governance decision was verified adversarially in an isolated sandbox, using a foreign cryptographic toolchain and an independent re-implementation of EACL's canonicalization specification.

The content hash reproduced byte-for-byte. The Ed25519 signature validated. A one-character tamper of the sealed payload was rejected. The cryptography is entirely real — and the reviewer was engaged by Alethera rather than being an arm's-length third party. We state that rather than eliding it, because the claim that matters is not who checked it but that you can.

— Reproduce It Without This Page —

This page is a convenience, not the proof. The proof is that independent implementations converge on the same hash and the same verdict.

  1. Fetch the public trust anchor from /.well-known/eacl-signing-key.json and record the public_key. Better still, obtain it through a channel that has nothing to do with us.
  2. Obtain a sealed artifact — the sample on this page, or one issued to you.
  3. Canonicalize {decision, chain_event, issuer, sealed_at} per the specification above and compute SHA-256 over it with your own tools. It must equal seal.content_hash byte-for-byte.
  4. Verify seal.signature over that 32-byte hash under the public key, using any RFC 8032 implementation in any language. Interop here is not a moving target.
  5. Change one character anywhere in the sealed substructure and repeat. Verification must fail. If it does not, we want to hear from you immediately.

The procedure requires no EACL software. If you want to cross-check against ours, the offline decision-bundle verifier is documented in the EACL repository at docs/api/sealed-artifact-verification.md, and the client-side implementation this page uses is readable at /assets/eacl-public.js.

— Why This Page Exists —

EACL's commercial premise is that its records do not overstate what happened. That premise is only credible if the records are independently verifiable — not "auditable if you trust our attestation service," but verifiable without us, against a public key we cannot secretly rotate.

So this page hands you the artifact, the key, the specification, and the tool, and invites you to try to break it. That is the entire product argument, executable, in under a minute.

Back to EACL