Proof
Proof
Each number comes with how it was measured and when.
Throughput: two different measurements
| What | Result | Conditions |
|---|---|---|
| Signing step only | 46,696 signatures/sec | Ed25519 signing in a loop. No API, database or timestamp. Median of 8 runs at commit f002cf2 (2026-08-07). |
| Full engine | ~547 seals/sec | API + Postgres 16 with fsync on, built from the production commit. 1,000 seals in 1.829 s on 2026-10-26. All 1,005 roots and signatures were rechecked as valid. |
Don't compare one with the other. The first measures the signature alone. The second includes storage and the API.
Signed time
signed_at is part of the signed binding root. If it changes, verification breaks.
External time
Batch roots are stamped by RFC 3161 time-stamping authorities: FreeTSA in production, with DigiCert configured as the fallback.
Offline, measured
- Offline Verifier: verdicts with the network cable pulled, 2026-09-11.
- Zero Search: bundles verified VALID offline, and a tampered copy came back INVALID (2026-09-28).
Research
Quadratic Residues and the Failure of Zero-Knowledge Positivity Proofs over BN254. Preprint, 2026-11-03, CC BY 4.0. Author affiliation: 0REI Immutable Evidence Systems.
The paper shows that a published zero-knowledge positivity circuit is neither complete nor sound over the BN254 scalar field, gives two counterexamples and releases code that reproduces every number.
DOI: 10.5281/zenodo.23842727 · ORCID 0009-0002-4624-0897
Post-quantum
- Post-quantum signatures. Hybrid signing: Ed25519 plus FIPS 204 ML-DSA-87, both required to verify, on the same K1 chain. Each hybrid key names its hybrid successor in advance.
- Hash-only permanent anchor. Hourly anchors in Bitcoin through OpenTimestamps, with Guardtime KSI alongside, rely only on hashes: the foundation of 0REI's post-quantum migration.
- RFC 3161 stamps from FreeTSA and DigiCert are not quantum-safe.
What verification does not prove
That the data was true when it was sealed, that the key holder is who they claim to be, or that a set of records is complete.
