The record

Published heads

This page is how anyone can tell that no one, including us, has quietly changed a record. Every day at 17:00 UTC we take the latest point of every customer's record chain, combine them into one value (the root of a Merkle tree), sign it and publish it here. Each customer can get proof that its chain is included (GET /v1/records/heads). Once a copy of a day's root is kept somewhere we do not control, no record from before that day can be changed or removed without it showing.

The published value reveals nothing about any customer: not which systems exist, nor how many records they hold. Verify signatures with the key at /.well-known/harmwise-keys.json; the same list is at /api/heads.