# AINRA — Foundation & status Real today # Honest status. This page states exactly what exists — nothing more. It changes only when reality does. If anything here ever disagrees with reality, that is a bug: tell us. ### STANDARD v5.1 — PUBLIC ✓ The complete normative specification. Read it or take the canonical file. ### REFERENCE CLI v0.3.3 — WORKING ✓ Zero-dependency, real signatures, hash-chained log; catches forged tiers and rewritten history live. Download. ### REFERENCE IMPLEMENTATION PUBLIC · SEVEN SIGNED RELEASES The full stack — issuance, transparency log, witness quorum, revocation, verifier SDK — is public with seven signed, board-proven releases — the current one is v0.3.3. A stranger's cold clone passes every gate: the repository. ### GENESIS ROOT MINTED · OPERATOR-RUN A FROST 5-of-9 + SLH-DSA dual-root exists; the network runs under it and passports verify root-dark, trusting only the root (make genesis-verify). The distributed public ceremony across independent custodians — plus the external verifiers and soak — is the remaining real-world milestone. ### WITNESSES 0 OPERATORS — GAP This control has no operators, so the guarantee it provides is not in force today. Witness cosignatures are what would stop the root showing one history to one party and a different one to another. The machinery is built, rehearsed and drilled on every board — an injected fork is refused by a quorum — but a quorum of zero certifies nothing, so for now you are trusting us not to equivocate rather than being able to check. Being the first takes one command: bash kits/witness/be-a-witness.sh. Take the seat. ### EXTERNAL VERIFIERS INVITED The drop-in verifier kit and the self-serve conformance programme are published; third parties verify — and attest — on their own infrastructure. Attestations so far: 0 of the 3 needed. Want a seat? Join the founding table. ### CONFORMANCE 1153/1153 ✓ Four independent implementations — Rust, TypeScript, the reference CLI, and Python — agree on all 1153 CC0 conformance vectors, byte-for-byte. Reproduced with one command (make diff) in the reference repository; the vector corpus is published alongside it. ### REVOCATION make soak-smoke). The 14-day multi-region soak runs at genesis. STAGING NETWORK · TEST-ROOT · published record · —, read in your browser —registrars —passports issued —revoked —checkpoint height The contract at — did not answer, so nothing above is live right now. Everything else on this site still proves what it proves — the verifier, the vectors and the signatures are checked on your machine, not on ours. To run the network yourself: make stage-install (or make genesis-local for a one-shot local world). The same read contract AINRAscan and any mirror use — a staging TEST-ROOT, not production. Point it at a network you run with ?net= and these numbers go live. Production logs sealed: 0 until genesis. NOTHING ON THIS SITE IS SIMULATED WITHOUT SAYING SO · NUMBERS ARE MEASURED OR THEY ARE ABSENT ## The organization. A member-governed, non-profit federation — neutral ground where competing issuers become one system without becoming one company. Legitimacy flows from members; the federation never competes with them. Members ### Every seat is a class. Issuers, attestors, verifiers, resolution & data providers, witnesses, and public-interest members — each class a constituency in the assembly, which elects the board under charter constraints. Separation ### Keys and logs stand apart. Custodians (who hold key shares) and witnesses (who cosign the log) are structurally separate from board and assembly alike. No single person or institution can act alone. Transparency ### Everything material is public. Statutes, minutes, budgets, audits, fee schedules, and ceremonies. The root records facts — never money, personal data, reputation, or judgment. AINRA is a proposal for that neutral root — one open standard anyone can run, own, or fork. You are not asked to trust its founders; everything is public. ## Genesis: how the root is born. The production root does not exist until it is born in public — on camera, across independent custodians, with no single point of trust. Until then, everything runs on a labeled TEST-ROOT and says so. ### The ceremony, rehearsed DONE · REPRODUCIBLE A FROST 5-of-9 threshold ceremony — any five of nine custodians can act together, no one alone, four compromised shares are useless. Rehearsed end-to-end across nine isolated processes with a reproducible transcript; an independent checker re-verifies every custodian. make ceremony-rehearsal-multi · runbook: docs/genesis-day/RUNBOOK.md ### The recorded public ceremony PENDING · REAL-WORLD EVENT Ceremony day is scripted from T−30 days to T+14: sealed hardware shown on camera, air-gapped ephemeral machines, shares generated that never leave them, commitments cross-read aloud. Any failed check aborts the day — publicly. go/no-go checklist · abort playbook · cutover plan — all published in the repo ### Independent verifiers RECRUITING · ≥3 STRANGERS Three or more unaffiliated people each receive a fresh challenge no one can precompute, verify it on their own machines with the published tooling, and sign what they saw. Their attestations become permanent public evidence. challenge kits minted · outreach ready · the ask is ~10 minutes ### The soak PENDING · 14 DAYS · 3 REGIONS Fourteen days of measured revocation propagation across three regions, each region writing signed reports. The founding declaration refuses to render unless every claim resolves to real evidence. platform built and smoke-proven · the clock is the operator's button Honesty rule: these three rows are real-world events, not code. Nothing on this site counts them done before they happen — production logs sealed today: 0. ## Economics: position, not profit. Revenue is capped per-lineage-year fees at cents scale, flat accreditation, and grants. Verification is free forever — the design goal is a root cheap enough that removing it costs more than keeping it. At scale, the charter's falling cap reduces the fee toward archival cost. ## The road, planned to the end. ### Prove NOW External verifier trials against pre-registered gates; the standard filed in the open with the reference stack as its conformance suite. Four implementations already agree on all 1153 vectors; a stranger can clone the repo and every gate passes. ### Anchor NEXT Institutional co-conveners; charter ratification; the first public ceremony sealing log #1; two registrar classes issuing live; one revocation propagated worldwide, watchably. ### Endure THE LONG MIDDLE Adoption plateaus and pressure met with pre-decided responses. Principles fixed, pace flexible. ### Disappear THE GOAL Disappear means become unnecessary, not vanish. The goal isn't an ecosystem that depends on us; it's one that no longer needs us — a relay race, not a solo marathon. From outside it looks like verification as boring as the clock. Beyond that: generational key-succession ceremonies, fork-readiness drills, and a managed-migration clause — if a legitimately adopted successor emerges, the root's final duty is an orderly migration into it. The standard outlives whoever carries it; that is planned, not feared. Take a founding seat → What exists today ## Take a founding seat. Join now and you help write the rules everyone inherits — you get the standard, the founding brief, and a direct line. IssuerLicense & issue passports VerifierGate decisions on the record AttestorProve identity claims WitnessCosign the public log BuilderRun agents that carry passports OtherSomething else entirely Pick your seat, then open your founding request. Take a seat → Opens a public founding request on the source repository — in the open, like everything else here; nothing is stored on any server we run. READ THE STANDARD FIRST →