Public record · cryptographic keys

Verify our records without trusting us.

Candor's consent and adult-assurance records are built so any third party can verify them independently — no login, no API, no access to our systems. This page is the permanent public record of the keys those verifications check against.

RECORD OPENED 2026-08-01  ·  MAINTAINED BY OPEN FEED NETWORK, INC.

Record 01

Assurance signing key

Every adult-verification attestation issued by the Candor assurance service is signed with the private half of this keypair. If a signature does not verify under this key, the attestation did not come from us — regardless of what any document, database, or person claims.

Ed25519 public key · raw 32 bytes · base64url
NA1pAzT19Tq7Ue5wYlMMcomZLmXbo0ysJ52o8Req6LM
ALGORITHMEd25519 (EdDSA)
STATUSActive
EFFECTIVE2026-08-01
SHA-256 FINGERPRINTcomputing…

Both the US and EU assurance endpoints sign with this same key. If it is ever rotated or revoked, the change is recorded here with its date and reason — a key's absence from this page means signatures under it should not be trusted.

Record 02

What this key signs

The key signs assurance attestations: short structured statements that a government-ID adult-verification check was completed. The signed message is one line, in exactly this format:

{deployment}:assure-v1:{nonce}:{method}:{result}:{timestamp}
deployment
Domain separator of the deployment the check was performed for. A signature made for one deployment cannot verify under another.
nonce
Single-use value issued for one specific consent ceremony. It binds the attestation to that ceremony and no other — a captured attestation cannot be reused.
method
The verification method, e.g. gov-id-pdf417 — the machine-readable barcode of a government-issued ID.
result
The outcome. Attestations are issued only for a passing result; a failed check produces no signed artifact at all.
timestamp
Moment of verification, milliseconds since the Unix epoch. Attestations are accepted only inside a short freshness window.

What the attestation does not contain: no name, no date of birth, no document number, no image, and no other data read from the ID. The document is processed in memory and destroyed the moment verification completes. The signed statement above is everything that survives.

Record 03

Verify an attestation

Paste a signed message and its signature. Verification runs entirely in your browser using its built-in cryptography — nothing you paste leaves this page.

Record 04

Ledger chain roots

Candor's safety records are kept on append-only, hash-chained ledgers that are tamper-evident by construction: altering any past entry breaks every hash after it. Periodic chain roots — single hashes summarizing an entire ledger at a moment in time — make that property publicly checkable.

Published chain-root reports will appear here, each with its date, root hash, and independent anchor reference. Once a root is published, no record before it can be rewritten without detection.