anchor
Emit a signed head commitment that hash-commits the entire write and erasure history for external publication, enabling later consistency verification against tampering.
Instructions
TAMPER-EVIDENT MEMORY / transparency log: emit a SIGNED HEAD COMMITMENT — a compact,
externally-publishable snapshot {n_writes, writes_tip, n_tombstones, tombstones_tip, ts} that hash-commits to
the ENTIRE write + erasure history at this instant. Publish it somewhere the store operator cannot retroactively
alter (a public log, a third-party witness, the auditor's own records). This closes the one hole verify_writes()
cannot: an operator who HOLDS the receipt key can rewrite AND re-sign the whole history so it still verifies
internally — but they cannot make the rewritten tip equal an anchor an outsider already witnessed. Record this
now; check later with verify_consistency(). (RFC 6962 model; the external witnessing is the auditor's job.)
Quickstart, install to a verified co-signed anchor: docs/TRANSPARENCY.md, or inspeximus anchor in the shell.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||