RECORD · canonical receipt record

The receipt-record index lives here.

This origin holds pointers to where a11oy receipts are published. It is static HTML and record.json. It is not a receipt database and does not copy the product store. First paint does not fetch a-11-oy.com or a Hugging Face Space.

Open interactive /verify Fetch record.json Signer key (product origin)

Boundary: RECORD is an index, not a verifier. Interactive verification stays at https://a-11-oy.com/verify. This page does not clone that tool, does not re-host receipt bodies, and does not execute signature or hash-chain checks. Live chain state is UNAVAILABLE here.

This originCanonical RECORD

Static index of pointers. No receipt store here.

Interactive tool/verify on .com

Link only. Not cloned. Not required for first paint.

Live chainUNAVAILABLE here

Observe verification on the product origin.

BodiesNot re-hosted

Receipt bytes stay in their published stores.

Receipt IDs in this index

Empty, labelled UNAVAILABLE.

This origin does not enumerate receipt identifiers and does not invent them. An empty index is UNAVAILABLE, not a measured zero.

receipt_ids

None published in this index. Class: UNAVAILABLE. Live chain state is also UNAVAILABLE here. Pointers to public stores follow; they are locations, not verified envelopes.

Live store (not this origin)

Receipts stay on the product Space.

This GitHub Pages repository does not host receipt bytes. The live store is the product runtime. Observe it there. Do not treat these pointers as a copy of that database.

Product runtime

Command center and Space. a11oy.net is not a product host.

Open a-11-oy.com

Persistence

Product Space mounts SZLHOLDINGS/szl-evidence at /data. That bucket is not a public listing on this page.

Open product Space

Khipu

The product Space chain lives under that /data mount. This origin does not run Khipu.

Open /verify

Lake query API

/api/lake/v1/receipts is on the product origin. This origin does not host /api/lake.

Product lake path
Public stores

Where published receipts are listed.

Each row is a location. Listing metadata is REPORTED. This page does not assert that a store is reachable, complete, or that any receipt verifies.

szl-lake

Append-only receipt store. GitHub is the origin; Hub is a mirror.

GitHub origin

Governance receipts

Public Hub dataset listing for UDS governance decision receipts.

Open listing

Span receipts

Public Hub dataset listing for UDS span receipts.

Open listing

Conformance corpus

Public bench listing for the governed-receipt spec. Not re-run here.

Open listing
How to verify

Check a receipt without trusting this page.

Verification proves integrity and origin of an envelope, never accuracy, quality, or performance.

Interactive tool

  • Use https://a-11-oy.com/verify on the product origin.
  • Paste a DSSE/SZL envelope or a receipt id.
  • That tool is not cloned on a11oy.net.
  • If the product origin is down, this RECORD index remains readable; live verification is UNAVAILABLE.

Offline pointers

  • Public key: a-11-oy.com/cosign.pub, served by the signing product origin itself. As of 2026-09-26 it is not published in szl-holdings/.github. The product repository committed the same public key in 0d3a2d4c (2026-07-21) at szl-holdings/a11oy ayllu/keys/council-runtime-2026-07-21.pub, wrapped at 76 columns instead of 64; that file was unchanged at a11oy main bc3c37c8 on 2026-09-26. Its README says the key was recovered from two live signatures of the product by ECDSA public-key recovery, and that verifying against it does not prove custody of the published org key. A signer rotation would change the served key, and so would the product falling back to a process-local ephemeral key when no persistent key is configured. estate.json records that the 2026-08-29 closeout matched the a11oy Space /cosign.pub and gives that key as keyid_reported 9926bf69, with no PEM hash (estate key hunt); the key served there measured as keyid 9926bf69 on 2026-09-26.
  • Fingerprints as observed 2026-09-26T02:37Z. Compare the one that matches how you hash. SPKI DER SHA-256, the same for both copies (openssl pkey -pubin -outform DER | sha256sum): 8e2d106c6995e11dbf7cbedfa9e5800bb50c82a635756e40dcd330364f6ea8ba. keyid, the value the product reports as dsse_keyid, is the SHA-256 of the PEM text with leading and trailing whitespace removed: 9926bf69b799ea663fc5cf5a8c5d8f594d99d7b323700d6a20b803bd4c9f4e15. Plain sha256sum of the served file gives c8b73461c1bb1235393ac1cbe0cc02fd7d8d93e6a6d932f95141a4f82c30a62e, and the a11oy repository copy gives a different stripped-PEM hash (75dc678a) because of its wrapping. Method details: record.json public_key.fingerprint_method.
  • The szl-holdings/.github org keys: estate.json records the keys/cosign.pub URL as not matching that closeout. That file is keyid 421a1422 (measured 2026-09-26; unchanged in git since 2026-06-09), although estate.json labels the entry keyid_reported d3028f8a, the root key's keyid. The root cosign.pub (keyid d3028f8a) was not recorded as fetched then; that it does not match is inferred, not measured: the signature verified under the Space /cosign.pub key, recorded as keyid 9926bf69, a different key. Receipts signed with 9926bf69 do not verify against either file. As of 2026-09-26, publishing one org key is a pending owner key ceremony.
  • Shared library: szl-receipt.
  • Format and offline verifier spec: governed-receipt-spec.
  • This origin does not publish a method+date+N verification result for any receipt id.
Labels on RECORD

Nothing here is silently promoted.

REPORTED
A public listing or source pointer. Not independently measured on this page.
UNAVAILABLE
Live chain, signature, and product-runtime checks are not run here.
ROADMAP
Work that is named and not claimed as operational.
MEASURED
Requires method, date, and N. RECORD does not invent those figures.
Continue

Return to the proof registry.

Hub atlas, ROADMAP cuts, and the 90-second diligence table stay on this origin.

Open proof registryDiligence roomatlas.json