862ccdff7b6bd479f56e0d29e28f69cb5cf3ae63cc3d0c478de16700a3ed0826
ATTESTED record for asset /a/cb8fa771b809… · the asset's canonical page holds all versions, lineage, and corrections
promptreports-ai signed a record about one file, "Hire an agent: its own identity, a narrow scope, and an offboarding that reaches every product", and the registry logged it at 2026-11-12T16:23:11Z. The publisher says claude-opus-5-5 helped make it.
WHAT IT SHOWS
- The file with this fingerprint is the one that was signed. One changed character breaks the match.
- The holder of key promptreports-ai#1 signed it.
- It was in the log by its appended time. Nobody can remove it or slip in an earlier one.
WHAT IT DOES NOT SHOW
- That the content is true.
- That the model named made it. That is the publisher's own statement.
- Proof from an outside party. This publisher and the registry have the same operator.
The verdict below says whether to rely on it now. Who reads records like this · use cases
RELY
Rely on this record as of checkpoint 44: signed by an active key, no errata, no seal.
RULES CHECKED
- PASS Signature and log entry: in the log at index 42; its signature was checked when it was appendedRead: 862ccdff7b6bd479…
- PASS Signing key state: key promptreports-ai#1 was active at signing and is active at this checkpointRead: 862ccdff7b6bd479…, event:publisher_keys:promptreports-ai#1
- PASS Seals (this record and upstream): not sealed; 2 upstream record(s) checked, none sealedRead: 3c533deac36ade2d…, 7a823218f79a76a2…, 862ccdff7b6bd479…
- PASS Errata (this record and upstream): no erratum on this record; 2 upstream record(s) checked, none correctedRead: 3c533deac36ade2d…, 7a823218f79a76a2…, 862ccdff7b6bd479…
- PASS Agent status: the record names no agent versionRead: 862ccdff7b6bd479…
- PASS Terms owed: the record cites no sourceRead: 862ccdff7b6bd479…
Current through checkpoint 44, signed 2026-11-12T23:28:29Z; 0 of 2 required independent witness cosignatures (quorum not met). Checkpoint 44.
WHAT WOULD CHANGE THIS
- If key promptreports-ai#1 is revoked from before 2026-11-12T16:23:11Z, when this record was signed, the verdict becomes do not rely; a revocation dated later makes it check. impact
- An erratum or a seal on upstream record 3c533deac36ade2d… would make the verdict check. page
- An erratum or a seal on upstream record 7a823218f79a76a2… would make the verdict check. page
as_of=44@2026-11-12T23:28:29Z · assess receipt · sha256 58ea48b508bffed7…
Each count is a link that narrows the graph and the list below. A record counts under the link that reached it.
Pick a checkpoint to see the state the world model gives for it. A tree size shows its newest time: event rows filed after its checkpoint count once an anchor (within about 65 seconds) or the next checkpoint covers them.
promptreports-ai#1 · Ed25519 · key directoryProof in seconds, checked by outside witnesses
b2dea02300e4d175… · signed 2026-11-12T23:28:29Z · signed noteA cosignature means a witness saw no fork or rollback of the log up to this checkpoint. It does not vouch for this record. Outside witnesses sign at their own interval, so cosignatures can lag the proof.
When it existed, from clocks we do not run
Timestamps and the OpenTimestamps anchor are made over the daily root, the first one after the record was appended. Each checks without us: the token against the authority's root, the anchor against a Bitcoin block header.
What this record was built from, and what was built from it
The list shows rows 1 to 3 of 3.
- start 862ccdff7b6bd479… ATTESTED
- up 1 3c533deac36ade2d… ATTESTED
- up 2 7a823218f79a76a2… ATTESTED
Proof in the formats verifiers already read
| FORMAT | FOR | GET IT |
|---|---|---|
| Sigstore bundle v0.3 | sigstore clients, with the registry's trusted root | GET /r/862ccdff7b6b…/sigstore-bundle |
| Export bundle | verify.mjs, fully offline | POST /v1/export |
| Signed record | the exact signed bytes | ?format=record |
| Certificate | people and auditors: every layer in one page | /r/862ccdff7b6b…/certificate |
Paste this next to the content the record describes. It links readers to this page and points crawlers and agents at the signed record.
<a href="https://aisourceoftruth.com/r/862ccdff7b6bd479f56e0d29e28f69cb5cf3ae63cc3d0c478de16700a3ed0826" rel="noopener" title="Signed record on AI Source of Truth"><img src="https://aisourceoftruth.com/r/862ccdff7b6bd479f56e0d29e28f69cb5cf3ae63cc3d0c478de16700a3ed0826/badge.svg" alt="AI Source of Truth record 862ccdff7b6b" height="20"></a> <link rel="alternate" type="application/vnd.aisot.record+json" href="https://aisourceoftruth.com/r/862ccdff7b6bd479f56e0d29e28f69cb5cf3ae63cc3d0c478de16700a3ed0826">
The verdict badge shows whether to rely on this record (rely, check or do not rely) and the signed checkpoint the verdict is pinned to. It shows a verdict, never a score, and links readers here.
HTML
<a href="https://aisourceoftruth.com/r/862ccdff7b6bd479f56e0d29e28f69cb5cf3ae63cc3d0c478de16700a3ed0826" rel="noopener" title="Verdict on AI Source of Truth"><img src="https://aisourceoftruth.com/badge/862ccdff7b6bd479f56e0d29e28f69cb5cf3ae63cc3d0c478de16700a3ed0826.svg" alt="AI Source of Truth verdict for record 862ccdff7b6b" height="20"></a>
Markdown
[](https://aisourceoftruth.com/r/862ccdff7b6bd479f56e0d29e28f69cb5cf3ae63cc3d0c478de16700a3ed0826)
Script: checks the proof in the reader's browser
<script src="https://aisourceoftruth.com/badge/check.js?v=b305a52807c1" data-digest="862ccdff7b6bd479f56e0d29e28f69cb5cf3ae63cc3d0c478de16700a3ed0826" async></script><noscript><a href="https://aisourceoftruth.com/r/862ccdff7b6bd479f56e0d29e28f69cb5cf3ae63cc3d0c478de16700a3ed0826" rel="noopener" title="Verdict on AI Source of Truth"><img src="https://aisourceoftruth.com/badge/862ccdff7b6bd479f56e0d29e28f69cb5cf3ae63cc3d0c478de16700a3ed0826.svg" alt="AI Source of Truth verdict for record 862ccdff7b6b" height="20"></a></noscript>
The script form fetches this record's inclusion proof, the signed checkpoint and the log policy, and checks the log signature, the proof and the witness quorum with the browser's own WebCrypto before it draws "proof checked". Any failed check draws "proof failed" and names it. Where scripts are off, the image form shows instead.