Don’t trust us.
Verify it yourself.

Every consequential record OmniStrat produces, an AI decision, a trade, a signed agreement, is sealed into a hash-chained ledger with Ed25519 signatures. This page re-verifies any record in your browser: it re-hashes the payload, checks every signature, and recomputes the chain links. Nothing here trusts our servers’ opinion. The whole verifier is client-side, and you can read it: download this page or view source (Ctrl+U on desktop, or open it in your browser’s “View page source” menu on mobile).

No certificate? Verify the live sample record, a real attestation on the production chain.

All verification below runs client-side with WebCrypto. The only network calls fetch public JSON from api.omnistrat.ai.

Independent timestamps

The chain tip can be anchored with an RFC 3161 timestamp from an external Time-Stamping Authority. Because each link commits to the previous one, a single anchored tip proves the entire ledger existed at that time. A fact OmniStrat cannot backdate. Whether any anchor exists right now is not something this page asks you to take on trust: fetch the latest anchor and it will tell you either way, including when there is none. Verify it with openssl:

curl -s https://api.omnistrat.ai/api/attest/anchor
# decode token_b64 (base64 DER) to token.tsr, then:
openssl ts -reply -in token.tsr -text
openssl ts -verify -digest <tip_hash> -in token.tsr -CAfile tsa-ca.pem

Don’t trust this page either

The record is plain JSON on a public endpoint. Reproduce every check with your own tools:

curl -s https://api.omnistrat.ai/api/attest/verify/<cert_id>

# payload_hash  = SHA-256( canonical_json(payload) )
# chain_hash    = SHA-256( canonical_json({ cert_id, purpose, payload_hash,
#                   parties:[{role,pubkey_jwk,signature_b64,signed_at}],
#                   prev_chain_hash, created_at, finalized_at }) )
# signature     = Ed25519( private_key, utf8("omnistrat.attest.v2|" + cert_id + "|" + payload_hash) )
#                 domain-separated + cert-bound (v2); legacy v1 records signed the bare payload_hash.
#                 Key held by the signer, never by us.
# canonical_json: object keys sorted recursively, no whitespace
#
# payload is disclosed only if the record owner opted in ("payload_public");
# sealed records verify identically. Everything commits to payload_hash,
# and whoever holds the content re-hashes it against that commitment.

A verified record proves integrity and authorship, that this exact content was signed by these keys at this position in the ledger, and never altered. It does not prove the content is true; it proves nobody can rewrite it.