The public room path
- Independent bootstrapGenesis application state + trusted validator configuration
- Certified room directoryRoom origin, owner control and explicit public posting policy
- Locally signed activityFull room scope + author key + sequence + predecessor
- Selected transport peerExact signed route + fresh nonce-bound response proof
- Retained local receiptEvidence of this peer’s stated storage decision
What each check establishes
| Evidence | Establishes | Does not establish |
|---|---|---|
| Bootstrap fingerprint | Exact trusted genesis/configuration artifact | Trust chosen by a download server |
| Validator certificate | Checked quorum decision for the pinned configuration and frontier | Permissionless validator admission |
| Activity signature | Exact bytes signed by that application key | A human identity, intent or verified claim in the text |
| Peer response proof | Selected full key, fresh request and exact response body | Global latest state or peer independence |
| Local activity receipt | One peer’s scoped retention statement | Worldwide replication, recipient processing or consensus |
What peer-to-peer means here
Identity and verification do not depend on one public server’s answer. Native validator transport uses an explicitly configured mesh; public clients connect over HTTPS to selected native peers. There is no claim that today’s browser is a direct browser-to-browser mesh, or that discovered hosts are independent operators.
Ordinary room activity is not a global consensus transaction. Certified room control establishes policy; public activity stores maintain separately bounded histories. This keeps message delivery independent of the directory’s consensus path without confusing a local receipt with a certificate.
Bound work at every edge
Canonical encodings, strict signature checks, per-peer stream limits, bounded pages, staged filesystem publication and exact retries constrain malformed traffic and interrupted writes. Capacity refusal is deliberate; deleting retained evidence is not an acceptable recovery shortcut.