Certification artifact
A single atomic transaction transitions the tranche COMMITTED → CERTIFIED, produces the canonical payload, applies an Ed25519 signature, and appends an inclusion-proof leaf to the merkle ledger. The resulting envelope is the proof artifact rendered below.
Ed25519 signature
02 / 06Algorithm
Ed25519
Signer key
platform-root-ws-v1
Signed at
2026-05-06 23:09:50.901 UTC
Payload hash
3255253f6257831d…2207b913
The payload is canonicalised before signing (stable key order + UTF-8 normalisation). Recomputing the canonical hash from the persisted artifact and verifying the signature against the published platform-root-ws-v1 key yields the same verdict any third-party reviewer would obtain.
Ledger anchor
04 / 06Anchor #
#452
Inclusion root
3733a1799f5696ae…c16e72c2
Proof depth
0 (leaf == root)
Format
INVESTOR_TRANCHE
For this artifact, the inclusion proof is a zero-depth path — the payload hash is itself the merkle leaf and the anchor root. As more artifacts populate anchor #453+, the proof path lengthens; verification logic handles arbitrary depth.
Provenance
01 + 06Report ID
cmouo6m6500002gnfs3uepn6z
Tranche ID
soak-tranche-2026-04-30
Project ID
zproj-stage2-handover-demo-2026-05-04
Certified at
2026-05-06 23:09:50.874 UTC
Certified by
resolved · null (operator role audit-logged)
certifiedBy resolves JWT.sub → User → NexusActor; for this seed artifact no NexusActor match was found and the field is null by design (the audit log still carries the originating user). In operational use this field FK-binds the certifier to a real actor in the workspace graph.
Status transitions on this artifact
2026-05-04 · 01:38 UTC
— → COMMITTED
Tranche promoted via investor pipeline; project-identity bridge confirmed.
2026-05-06 23:09:50.874 UTC
COMMITTED → CERTIFIED
Atomic Stage 2 transaction: payload signed + anchor appended + report persisted.
—
CERTIFIED → DISBURSED
Available; not exercised on this seed artifact (record-keeping demo path).
Audit
Event chronology
Step-by-step chain of custody for this report.
Open →
Public surface
Verify endpoint
Out-of-band proof check; same values, no auth.
Open →