Core
AttestoBind Core
For teams that already have identity but need durable post-quantum assurance: adapter registry, canonical records, ML-DSA-87 verification, SHA3-512 digests, and Memory Block receipts.
Proof path
Same contract, any identity layer.
AttestoBind keeps the outside identity system intact and moves the durable assurance claim into Proofnet BTC.
01
Identity input
KERI, DID, Sigstore, C2PA, SPIFFE, OpenID4VC, X.509, or Proofnet Native supplies verified public state.
02
Canonical binding
Proofnet normalizes the state into one stable identity_binding record shape.
03
PQ signature
The binding is hashed with SHA3-512 and signed with ML-DSA-87.
04
Memory block
The attesto becomes a Proofnet-native durable record for future replay.
05
Optional anchor
The same digest can be externally timestamped through Bitcoin when a client wants that path.
Licensed modules
Offerings built from the same proof surface.
KERI
AttestoBind KERI
For KERI, KERIA, OOBI, KEL, and AID-based programs. Includes KERIpy replay, OOBI resolution, key-state extraction, rotation/recovery history, and optional witness or agent integration.
Provenance
Supply Chain
For AI provenance, software releases, model registries, and compliance workflows. Binds Sigstore/Rekor, C2PA, artifact digests, model or dataset claims, and exportable verification packets.
Enterprise
Enterprise Identity
For PKI, service mesh, and credential-heavy deployments. Supports X.509, SPIFFE/SPIRE, DID, OpenID4VC, node identity policy, and adapter-level trust settings.
Record layer
AttestoBind Anchoring
For organizations that need external timestamping or settlement references. Proofnet keeps Memory Blocks as the native record, with Bitcoin anchoring as an optional external receipt.
Hardware
Toshi PQ1
For hardware-rooted Proofnet signing. The device keeps private key material inside the boundary while exporting public keys, signed messages, and verification packets.
Institutions · Sovereign AI
Bring your own AI , higher ed, healthcare, government, enterprise
Replaces per-seat SaaS AI pricing ($7.8M/year on a 25k-student campus) with one deployment on institutional hardware. Identity-bound records, Q-day durable, FERPA/HIPAA/FedRAMP friendly. Students own their records and earn through proof-of-knowledge attestations paid in Bitcoin via Blockie Talkie. Read the full deployment pitch →
Adapter matrix
Permissive adapter paths only.
The dropdown and review packets use adapter families with permissive licenses or Proofnet-owned code.
Adapter
Dependency
Evidence
Status
Proofnet Native
Proofnet core
No external dependency; node identity state bound directly.
Runnable
KERI
KERIpy / Apache-2.0
Local HTTP OOBI resolution, inception plus rotation KEL replay, KeyStateRecord extraction.
Runnable
DID
DIDKit / Apache-2.0
did:key document resolution and verification method digest.Runnable
SPIFFE
SPIRE / Apache-2.0
SPIFFE ID, trust domain, and SVID digest.
Runnable
Sigstore
sigstore-python / Apache-2.0
Bundle fixture, artifact digest, Rekor-style checkpoint and inclusion proof.
Runnable
C2PA
c2pa-rs / Apache-2.0 OR MIT
Manifest digest, asset digest, signer, and assertions.
Runnable
OpenID4VC
OpenID4VC / Apache-2.0
Issuer, holder, credential digest, and presentation digest.
Runnable
X.509
cryptography / Apache-2.0 OR BSD-3-Clause
Certificate subject, issuer, serial, and fingerprint.
Runnable
Public demo
AttestoBind verifier
Choose an adapter and inspect the public-safe binding fixture, digest, and verification output.
Docs
Engineer surface
Record fields, CLI shape, API boundary, security boundary, and integration notes.
Bootstrap
Verified Relay Mode
Standard outbound HTTPS first contact, Level 5 relay verification, PQTLS handoff, and best-route mesh selection without exposing private node services.
Private
Identity review room
Cloudflare Access-gated review packet with deep KERI, DID, SPIFFE, and X.509 material, including OOBI resolution, KEL replay, rotation, recovery, and comparison fixtures.
Private
Sovereign AI review room
Cloudflare Access-gated institutional pilot packet for educators: local model endpoint, Memory Block audit rows, cost spread, and six-week pilot checklist.
FAQ
Institution questions
Plain answers for educators, provosts, CIOs, compliance leads, and procurement teams evaluating sovereign AI.