v2.0.23 — The Notary (ed25519 endorsements)
Series 3, desk 1 of 4 — the notary 🖋️. Prove whose paper a vault is — and that not one byte has moved since — without ever opening it.
What's new
vault100/notary.py— mint a personal seal (V100SEAL1+ 32-byte seed, written0600, KEEP SECRET) and its public stamp (V100STAMP1+ pk, share freely). Endorse any vault/file into a detached 108-byte.v100sig(V100SIG1 | epoch | pk | signature). Attest with optional stamp-pinning.- CLI —
vault100 notary mint me.v100seal·vault100 notary endorse papers.v100 -s me.v100seal·vault100 notary attest papers.v100 [--stamp me.v100stamp]— batch verdicts, exit codes, refusal dossiers (doctored vault / foreign seal / torn or forged paper). - Web — Annex D instrument (i): three desks — mint (two downloads + fingerprint), endorse (vault+seal →
.v100sig), attest (vault+sig+optional stamp → green ENDORSEMENT HOLDS / red REFUSED verdict cards). Worker opsnotary-mint/notary-sign/notary-verify, seal bytes zeroed, sweep burns picks and verdicts. - Interop — ed25519 detached signatures are deterministic: the desk CLI and the web notary produce byte-identical endorsements of the same paper with the same seal (cross-attested both directions in tests).
- Features page — Schedule A gains provision № 16.
Verification
- 84/84 pytest (7 new NotaryTests: mint roundtrip+0600 perms, holds, doctored refusal, foreign-seal/stamp mismatch, torn/forged paper, determinism, full CLI flow)
- 14/14 new headless-Chromium notary E2E · courier 40/40 · quorum 19/19 · regress 11/11 — local + live
- fixed-seed cross-vector: Python endorsement == JS endorsement, every byte
The guardrails stand: zero-knowledge · honest claims · no telemetry — attestation proves custody, never reads contents.