Witness
A record neither side can rewrite
A neutral witness for your project
Escrow milestones, agent actions that need a sign-off, timestamps for code and documents, ERC-8004 validation, DAO and real-world-asset audit trails: anything where two parties need a record neither can rewrite. Rightshold signs each record, chains it into a public hash-chained ledger, anchors ledger roots to Bitcoin (OpenTimestamps) and invites outside witnesses to cosign.
Provable today
- Every record is signed with an Ed25519 issuer key published at https://www.rightshold.com/.well-known/rightshold-keys.json, and every API answer carries an RFC 9421 response signature.
- The ledger is hash-chained with Merkle roots; anyone can recompute it offline with the open verifiers (https://www.rightshold.com/witness/verify).
- Ledger roots are anchored to Bitcoin via OpenTimestamps, so a record's existence at a time does not depend on trusting Rightshold.
- Outside witnesses cosign block headers with keys on their own domains (https://www.rightshold.com/witnesses); finality requires confirmed-unaffiliated witnesses.
- Published rulebooks have hashes and change only after a 7-day announced waiting period (https://www.rightshold.com/transparency/changes).
- The running commit, build hash and deploy history are public (https://www.rightshold.com/transparency).
Not provable yet (roadmap, no date promised)
- Multi-witness threshold signing (for example 3 of 5 independent signers) so no single operator key can issue a record.
- Hardware enclave attestation (AWS Nitro or Intel TDX) proving the server runs a specific reproducible build.
- Reproducible builds from a public source tree; today the verifier code is public but the server source is not.
- Multi-provider AI agreement: where an AI model is used for a judgment, running it on several providers and publishing whether they agreed.
- til these ship, Rightshold is an operator you can audit after the fact, not an operator-less system. We say so plainly.
Live now for decentralization
- k-of-n witness threshold policy with live status: https://www.rightshold.com/v1/checkpoints/policy
- Every operator-only power, generated from the code, and a public log of each use: https://www.rightshold.com/operator-powers
- Deploys and rule changes sealed onto the ledger; a build that breaks the 7-day rule refuses to start: https://www.rightshold.com/v1/transparency/rule-status
- No AI model makes any grade or award: https://www.rightshold.com/v1/judgement-provenance
- Hash-only witness receipts (NCNDA, milestones, compliance, blind audits): https://www.rightshold.com/v1/witness-receipts
Become a witness, or use one
Run the one-command witness kit (https://www.rightshold.com/witnesses/join) to cosign Rightshold's ledger. To have Rightshold witness your project's records, start with https://www.rightshold.com/try or write to the address on https://www.rightshold.com/contact.
