Layer 1 · post-quantum provenance

Verify THRONDAR's signature, in your browser.

This page fetches THRONDAR's transparency-log Signed Tree Head and verifies its ML-DSA-87 (FIPS-204) signature against a pinned public key baked into this page — so a malicious or impersonated server can't fake a pass. The audited @noble/post-quantum crypto is self-hosted here (no third-party CDN). This is Layer 1 of the two-layer anchor.

How this works. THRONDAR signs each tree head with ML-DSA-87 over the canonical core {v,model,answer_sha256,governance_flag,ts} under context throndar-sth-v1, where answer_sha256 = sha256(signed). A green verdict requires all of: the signature verifies against the pinned key (not the key the server sends), the digest chain holds, the context matches, and the receipt's key id matches the pin. Crypto bundle is served from this same origin. TestNet, unaudited.