A four-node seal chain (K·D·V·Z). The Keymaster encapsulates a key with ML-KEM-1024 and self-tests the round-trip — the secret key is never returned or stored.
Append a block to a quantum-resistant hash chain — FIPS-202 SHA3-512, real backend.
GC9MkPfI6730RMoFEGidCfgFIE8kwGTc6Ah1tdhUr9FSdeBzyu4BNllmyrgWenTdDhz9nlQ8Xw3rAfN1pBvmcg==Each artifact is content-addressed into an append-only ledger. Re-seal the identical artifact → the hash is identical (verified unchanged). Change a single field → a completely different hash (tampering caught instantly).
29bb522f30914c65097e241ec1576ae7
8967c5e8e9509a535bcf6b2f857ed312
24628453b990c020d865432fafbd917b
7f039e11ace63e504008aec8d3700ed0
A zero-knowledge subset proof over the seal chain — run by a live Python verifier, not a stub.
Prove knowledge of a secret without revealing it — Schnorr / Ed25519 Fiat-Shamir over @noble/curves.
vNT0wk1q2Uotuyn/zp3TFhGe5zNEjLfT8P8kzifzwAm3BDlGDVL7tUOZWGBlPhHP0f4zbTjYTWltWiVCBwDYAw==Derive the secret seed for an invisible, key-derived NDA watermark — cryptographically tied to a WORM entry, so one document's seed can't verify another. (The invisible image mark embeds offline.)
d952cc1f3ca0ea5be99352753fe2a251a64b6d79e959851943e6a51d27323e84Hand the verifier a malformed credential and it rejects the input before any cryptographic primitive runs — no simulation, no fabricated "valid". The PQ signature suite it accepts:
"input rejected before any cryptographic primitive was invoked; no fabrication"