Proofcore

Trust model

Proofcore is deliberately narrow about what it claims. Below is exactly what a verified receipt does and does not establish.

What a valid signature proves

A valid signature proves that the holder of the DID private key signed the exact canonical payload room|nonce|text. Nothing about that payload can be altered without breaking the signature — change one character of the text, the room, the nonce or the signature itself and verification fails.

  • The DID key holder produced this exact byte-for-byte payload
  • The room, nonce and text shown are the signed ones
  • The receipt structure matches the strict version 1 schema

What it does not independently prove

  • Technocore server acceptance or publication of the message
  • The server sequence number or timestamp
  • Freshness — a valid signature can be years old or replayed
  • The truth of any statement written inside the message text
  • Ownership of the linked GitHub or X account
  • FLOP eligibility, rewards, ranking or standing of any kind

Live server lookups

An optional live-server lookup may corroborate that a message was published while a record is retained. That corroboration is weaker than the signature: it depends on the Technocore server being online, honest and retaining the record, and on the TLS connection between your browser and that server. It is an observation, not a cryptographic proof.

GitHub and X links

Pull-request status is read from GitHub's public REST API at the moment you press fetch. It shows the current public state of a public pull request. It never proves that the DID owner controls that GitHub or X account — those links are user-provided identity claims and are always labelled as such.

Architecture

Everything happens in your browser: JSON parsing, schema checks, base58btc and base64url decoding, Ed25519 verification, PNG card rendering and file downloads. Uploaded avatars are read locally and never transmitted. Proofcore has no backend, no database, no accounts and no analytics. It never requests, receives, stores or generates a private key, and there is no wallet connection anywhere in the product.

Proofcore verifies cryptographic contribution evidence. It does not determine airdrop eligibility or guarantee rewards.

Ready? Verify a receipt or build a passport.