TrustDB v1.0.0
TrustDB is a self-hosted tamper-evident evidence database for files, audit events, and data handoffs. This is the first stable release and establishes the github.com/wowtrust/trustdb module path, portable .sproof v1 evidence, durable Global Transparency Log state, optional external anchoring, and the current storage and backup formats.
Start here
- New users: follow the platform quick start.
- Developers: install the Go SDK with go get github.com/wowtrust/trustdb@v1.0.0.
- Container users: use the Docker command below.
- Before installing any archive, verify it against SHA256SUMS.
Recommended downloads
Server and CLI
| Platform | Package |
|---|---|
| Linux amd64 | trustdb-1.0.0-linux-amd64.tar.gz |
| Linux arm64 | trustdb-1.0.0-linux-arm64.tar.gz |
| macOS Intel | trustdb-1.0.0-darwin-amd64.tar.gz |
| macOS Apple Silicon | trustdb-1.0.0-darwin-arm64.tar.gz |
| Windows amd64 | trustdb-1.0.0-windows-amd64.zip |
| Windows arm64 | trustdb-1.0.0-windows-arm64.zip |
Desktop client
| Platform | Recommended package |
|---|---|
| macOS Intel | trustdb-desktop-1.0.0-darwin-amd64.dmg |
| macOS Apple Silicon | trustdb-desktop-1.0.0-darwin-arm64.dmg |
| Windows amd64 | trustdb-desktop-1.0.0-windows-amd64-setup.exe |
| Windows arm64 | trustdb-desktop-1.0.0-windows-arm64-setup.exe |
Alternative archives, MSI installers, certificate files, and build metadata remain available in the Assets section.
Docker
docker pull wsy19990317/trustdb:1.0.0
docker run -d --name trustdb -p 127.0.0.1:8080:8080 -v trustdb-data:/var/lib/trustdb wsy19990317/trustdb:1.0.0
The image supports linux/amd64 and linux/arm64. Bind the service to controlled interfaces and add deployment-level TLS, authentication, authorization, and network policy before production exposure.
Highlights
- Signed claims and accepted receipts with WAL-backed ingest.
- Batch Merkle proofs and portable .sproof evidence.
- Persistent Global Transparency Log inclusion and consistency proofs.
- Optional file, noop, and OpenTimestamps anchoring.
- File, Pebble, and TiKV proofstore backends.
- Logical backup verification and resumable restore.
- HTTP, gRPC, Go SDK, CLI, desktop client, and optional Admin Web.
- Prometheus metrics and reproducible production and benchmark profiles.
Security and compatibility notes
- Desktop packages are self-signed. The included certificate files let users inspect the release signer but do not establish Apple or Microsoft trust; Gatekeeper or SmartScreen may warn.
- TrustDB verifies cryptographic evidence but does not by itself bind keys to real-world identities or make blanket legal-validity claims.
- Business HTTP and gRPC endpoints do not replace TLS, client authentication, tenant authorization, or network controls.
- Storage schema v4 does not silently open older or unversioned non-empty stores. Rebuild or restore a current logical backup before upgrading such deployments.
- A TiKV namespace belongs to one logical node_id and log_id writer stream; same-namespace active-active writers are not supported.