Every seat is a class.
Issuers, attestors, verifiers, resolution & data providers, witnesses, and public-interest members — each class a constituency in the assembly, which elects the board under charter constraints.
Real today
Honest status.
This page states exactly what exists — nothing more. It changes only when reality does. If anything here ever disagrees with reality, that is a bug: tell us.
STANDARD v5.1 — PUBLIC ✓
The complete normative specification. Read it or take the canonical file.
REFERENCE CLI v0.3.3 — WORKING ✓
Zero-dependency, real signatures, hash-chained log; catches forged tiers and rewritten history live. Download.
REFERENCE IMPLEMENTATION PUBLIC · SEVEN SIGNED RELEASES
The full stack — issuance, transparency log, witness quorum, revocation, verifier SDK — is public with seven signed, board-proven releases — the current one is v0.3.3. A stranger's cold clone passes every gate: the repository.
GENESIS ROOT MINTED · OPERATOR-RUN
A FROST 5-of-9 + SLH-DSA dual-root exists; the network runs under it and passports verify root-dark, trusting only the root (make genesis-verify). The distributed public ceremony across independent custodians — plus the external verifiers and soak — is the remaining real-world milestone.
WITNESSES 0 OPERATORS — GAP
This control has no operators, so the guarantee it provides is not in force today. Witness cosignatures are what would stop the root showing one history to one party and a different one to another. The machinery is built, rehearsed and drilled on every board — an injected fork is refused by a quorum — but a quorum of zero certifies nothing, so for now you are trusting us not to equivocate rather than being able to check. Being the first takes one command: bash kits/witness/be-a-witness.sh. Take the seat.
EXTERNAL VERIFIERS INVITED
The drop-in verifier kit and the self-serve conformance programme are published; third parties verify — and attest — on their own infrastructure. Attestations so far: 0 of the 3 needed. Want a seat? Join the founding table.
CONFORMANCE 1153/1153 ✓
Four independent implementations — Rust, TypeScript, the reference CLI, and Python — agree on all 1153 CC0 conformance vectors, byte-for-byte. Reproduced with one command (make diff) in the reference repository; the vector corpus is published alongside it.
REVOCATION <60s [MEASURED]
Revocation propagation measured under 60 seconds, fail-closed, in networked drills of the reference stack (make soak-smoke). The 14-day multi-region soak runs at genesis.
STAGING NETWORK · TEST-ROOT · published record · —, read in your browser
—registrars
—passports issued
—revoked
—checkpoint height
The contract at — did not answer, so
nothing above is live right now. Everything else on this site still proves what it proves — the verifier, the
vectors and the signatures are checked on your machine, not on ours. To run the network yourself:
make stage-install (or make genesis-local for a one-shot local world).
The same read contract AINRAscan and any mirror use — a staging TEST-ROOT, not production. Point it at a network you run with ?net=<url> and these numbers go live. Production logs sealed: 0 until genesis.
NOTHING ON THIS SITE IS SIMULATED WITHOUT SAYING SO · NUMBERS ARE MEASURED OR THEY ARE ABSENT
The organization.
A member-governed, non-profit federation — neutral ground where competing issuers become one system without becoming one company. Legitimacy flows from members; the federation never competes with them.
Members
Separation
Keys and logs stand apart.
Custodians (who hold key shares) and witnesses (who cosign the log) are structurally separate from board and assembly alike. No single person or institution can act alone.
Transparency
Everything material is public.
Statutes, minutes, budgets, audits, fee schedules, and ceremonies. The root records facts — never money, personal data, reputation, or judgment.
AINRA is a proposal for that neutral root — one open standard anyone can run, own, or fork. You are not asked to trust its founders; everything is public.
Genesis: how the root is born.
The production root does not exist until it is born in public — on camera, across independent custodians, with no single point of trust. Until then, everything runs on a labeled TEST-ROOT and says so.
The ceremony, rehearsed
DONE · REPRODUCIBLEA FROST 5-of-9 threshold ceremony — any five of nine custodians can act together, no one alone, four compromised shares are useless. Rehearsed end-to-end across nine isolated processes with a reproducible transcript; an independent checker re-verifies every custodian.
make ceremony-rehearsal-multi · runbook: docs/genesis-day/RUNBOOK.md
The recorded public ceremony
PENDING · REAL-WORLD EVENTCeremony day is scripted from T−30 days to T+14: sealed hardware shown on camera, air-gapped ephemeral machines, shares generated that never leave them, commitments cross-read aloud. Any failed check aborts the day — publicly.
go/no-go checklist · abort playbook · cutover plan — all published in the repo
Independent verifiers
RECRUITING · ≥3 STRANGERSThree or more unaffiliated people each receive a fresh challenge no one can precompute, verify it on their own machines with the published tooling, and sign what they saw. Their attestations become permanent public evidence.
challenge kits minted · outreach ready · the ask is ~10 minutes
The soak
PENDING · 14 DAYS · 3 REGIONSFourteen days of measured revocation propagation across three regions, each region writing signed reports. The founding declaration refuses to render unless every claim resolves to real evidence.
platform built and smoke-proven · the clock is the operator's button
Honesty rule: these three rows are real-world events, not code. Nothing on this site counts them done before they happen — production logs sealed today: 0.
Economics: position, not profit.
Revenue is capped per-lineage-year fees at cents scale, flat accreditation, and grants. Verification is free forever — the design goal is a root cheap enough that removing it costs more than keeping it. At scale, the charter's falling cap reduces the fee toward archival cost.
The road, planned to the end.
Prove
NOWExternal verifier trials against pre-registered gates; the standard filed in the open with the reference stack as its conformance suite. Four implementations already agree on all 1153 vectors; a stranger can clone the repo and every gate passes.
Anchor
NEXTInstitutional co-conveners; charter ratification; the first public ceremony sealing log #1; two registrar classes issuing live; one revocation propagated worldwide, watchably.
Endure
THE LONG MIDDLEAdoption plateaus and pressure met with pre-decided responses. Principles fixed, pace flexible.
Disappear
THE GOALDisappear means become unnecessary, not vanish. The goal isn't an ecosystem that depends on us; it's one that no longer needs us — a relay race, not a solo marathon. From outside it looks like verification as boring as the clock. Beyond that: generational key-succession ceremonies, fork-readiness drills, and a managed-migration clause — if a legitimately adopted successor emerges, the root's final duty is an orderly migration into it. The standard outlives whoever carries it; that is planned, not feared.
Take a founding seat.
Join now and you help write the rules everyone inherits — you get the standard, the founding brief, and a direct line.
Opens a public founding request on the source repository — in the open, like everything else here; nothing is stored on any server we run.
READ THE STANDARD FIRST →