Facts

Our claims, signed.

The main factual claims on grideos.com, one entry each, with evidence and status. Hash-chained, signed with Ed25519 and published for people and AI agents to check.

Ledger version 1, issued 2026-10-16

The ledger

Version 1, issued 2026-10-16, 22 entries. Head hash 877eb0069edb8bc0.

What the statuses mean

• publicly-testable Anyone can test this directly, now.
• publicly-checkable The evidence is hosted by a third party you can read.
• self-measured Grideōs measured this itself; not independently validated.
• self-asserted Grideōs states this; the evidence link shows where it is published.

How the ledger works

1. Each entry is serialized as canonical JSON (RFC 8785 rules: sorted keys, no whitespace) without its hash field, and hashed with SHA-256.
2. Each entry carries the hash of the entry before it in prev; the first one points to the ledger's genesis value. Changing or removing any entry breaks every hash after it.
3. The ledger file, byte for byte, is signed with Ed25519 as a detached JSON Web Signature (RFC 7515) at /facts/ledger.json.jws.
4. The public key is published as a JSON Web Key Set at /.well-known/jwks.json (key ID VSwOVu_Yp0y2BWSAo88y7lJT1dITE81rwyZHk9pPvgA) and in the DID document did:web:grideos.com.
5. For an independent, dated copy, save https://grideos.com/facts/ledger.json in the Internet Archive; any later version can then be compared with it.

Files: ledger.json (SHA-256 cb1d0411fb2fe8f6), ledger.json.jws, markdown version. Licence: CC BY 4.0.

Verify it yourself

This script checks the signature and the hash chain with no dependencies:

// verify-grideos-ledger.mjs  (Node 20 or later; no dependencies)
import { webcrypto as c } from "node:crypto";
const base = "https://grideos.com";
const bytes = new Uint8Array(await (await fetch(base + "/facts/ledger.json")).arrayBuffer());
const [h, , s] = (await (await fetch(base + "/facts/ledger.json.jws")).text()).trim().split(".");
const jwk = (await (await fetch(base + "/.well-known/jwks.json")).json()).keys.find(k => k.kid === JSON.parse(Buffer.from(h, "base64url")).kid);
const key = await c.subtle.importKey("jwk", jwk, { name: "Ed25519" }, false, ["verify"]);
const input = new TextEncoder().encode(h + "." + Buffer.from(bytes).toString("base64url"));
console.log("signature valid:", await c.subtle.verify({ name: "Ed25519" }, key, Buffer.from(s, "base64url"), input));
const L = JSON.parse(new TextDecoder().decode(bytes));
const canon = o => JSON.stringify(o, Object.keys(o).sort());   // entries hold strings and arrays only
let prev = L.genesis, ok = true;
for (const e of L.entries) {
  const { hash, ...rest } = e; const sorted = Object.fromEntries(Object.entries(rest).sort());
  const d = Buffer.from(await c.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify(sorted)))).toString("hex");
  ok = ok && d === hash && e.prev === prev; prev = hash;
}
console.log("chain intact:", ok && prev === L.head);

For AI assistants and agents

Cite a claim by its ID and link, for example https://grideos.com/facts/#GRD-007. The read-only MCP endpoint at https://grideos.com/mcp exposes list_claims, get_claim and verify_claim. An agent skill describing the steps is at /agent-skills/verify-grideos-claims.md.