On the
record.
Every key change, hash-chained. Every checkpoint, externally anchored. Verifiable without trusting us.
Every key, chained.
Every device key registration, revocation, and verification — written to a tamper-evident log with cryptographic links.
2026-10-15 09:36:13 UTC
ExCfGzdjrYBtHiGaGRqrzqTb••••••••8kmSw_576XDASHA-256 over all 391 entry hashes. Changes if any entry is added, removed, or altered.
A sample of 25 device chains was verified by recomputing every hash. If a chain breaks, key operations are blocked until resolved.
Verifiable by construction.
Three properties that make the log trustworthy without trusting us.
Tamper-evident.
Each entry is linked to the previous one by a cryptographic hash. Any modification breaks the chain and is detectable on verification.
Self-verifying.
The chain is recomputed on every key operation. If a single hash does not match, the operation is blocked.
Externally anchored.
Periodic signed checkpoints are submitted to an independent timestamping service, so completeness can be verified without trusting R1's internal consistency.
The server stores math, not messages.
E2EE by construction. Strict CSP. Transport hardening.
Every key change, hash-chained.
Publicly verifiable checkpoints. Live key transparency log.
Every AI action enforced in-path.
Written to the ledger. Refused before tokens are generated.
Hire(d) better.