seal

Transparency log

Check what Seal runs.

Every build that can touch your keys is published here first. Your browser checks the signatures itself, with Seal's open-source verifier.

Staging

For now the three witnesses run inside the log's own process, from one seed. So the quorum is Seal vouching for itself, and isn't independent yet. Independent witnesses come before launch.

Checking

Fetching the log and checking its signatures in your browser…

What this proves, and what it doesn't

It proves

  • The log signed this tree, and enough of its witnesses saw it.
  • Each entry is in that tree, at that position.
  • Each release was signed by enough of Seal's release keys, and was public for its whole waiting period before a guardian would give it keys.

It doesn't prove

  • That a fingerprint was built from its commit. The build is reproducible: rebuilding it is how you check.
  • That this page is honest. Its code and the keys it checks against come from seal.zone. The seal CLI and SDKs make the same checks with keys of their own.
  • That a given server runs one of these builds. Your SDK checks that against the chip's own report, on every connection.
  • That everyone sees the same log. That rests on independent witnesses, which aren't there yet: see above.

The keys it checks against

Built into this page, and the same ones the console uses.

Log
d58ebb3a…772e59full

d58ebb3aa5807e42b9f9e1bcba2016a512ba4e495765da9f72aa7991c3772e59

log.seal.zone/v1, served at log.seal.zone

Witnesses
  • 11f61373…a4cbc8full

    11f61373672d9041dd390b814b0b5fef41339389c19597848429cb6034a4cbc8

  • aeddae03…be797cfull

    aeddae03750659c0a2b3487bae4cc596b36103eb2e1f2b297c4f2e02b4be797c

  • e719cc38…c98f72full

    e719cc38fce3e73404c1751b6f34f00e665aa1e018016cb3453657f250c98f72

2 of 3 must cosign

Release keys
  • f887cd8f…6fdb33full

    f887cd8f32fe03668ee9604d708754799b66a8d5c80f85aea785c6c5e96fdb33

  • 4aa19827…f66f18full

    4aa19827e0966856c96e057e7b03474a449ce1f837ddc6f5a1faace80df66f18

  • ad415fde…9cbc88full

    ad415fde8fd526d94657afd2d244cc2f4a84824034a448bf04b7d5ae089cbc88

2 of 3 must sign a release

Waiting period
5 minutes from public to keys