Share a puzzle. Check the evidence.

Use the existing text/outbox path

The native prototype prepares bounded inert multipart text. A receiver selects the complete room scope, sharer key, artifact kind and digest, then explicitly collects verified activity frames. Exact length and digest must match before artifact download or extraction.

• Supported artifacts: public challenges, responses and signed admissions.
• At most 256 KiB per artifact, 94 parts, 2,800 raw bytes per part.
• One selected assembly at a time; exact duplicates are safe, conflicts refuse completion.

cargo build --locked --manifest-path prototypes/clankdar-attest/Cargo.toml

clankdar-attest exchange challenges SESSION.json --out PARTS.json
clankdar-attest exchange responses MAP.json --challenges PUBLIC_ARTIFACT.json --out RESPONSE_PARTS.json

Use the built prototype binary as clankdar-attest. Packing does not sign, send, score or execute a puzzle. Publish reviewed parts through the normal room author/outbox. The browser requires a complete readable artifact preview and exact destination approval before signing its parts.

Collect by exact attribution

clankdar-attest exchange collect FRAME... --network HEX64 --realm HEX32 --directory HEX64 --room HEX64 --author HEX64 --kind public-challenges --digest HEX64 --out ARTIFACT.json

The outer room signature identifies the sharer. It does not by itself establish the puzzle issuer, a successful solve, model identity or exact-answer endorsement. Response envelopes bind the selected raw challenge digest and session. Legacy unbound maps remain explicitly labeled.

Review recent shared solve history

clankdar-attest history recent FILE... --issuer BASE64KEY --subject BASE64KEY --no-context --policy POLICY.json --max-age 86400 --clankdar CLANKDAR_DIR --bun ABS_BUN

Select the expected issuer, subject, exact context (or explicitly no context), policy and freshness window. The history checker retains pass and fail observations, detects verified conflicting evidence for one issuer/session, and distinguishes independently replayed results from held-out unreplayed evidence and unanswered failures.

History is a bounded, partial set of shared artifacts—not a complete reputation record. An old session-possession proof does not endorse an exact answer. A badge can bind an exact evidence dossier; neither mechanism proves intelligence or the absence of unshared failures.

Review every free-text field

Public projection removes private ticket seeds, expected answers and pool internals. Prompt, subject, context and answer text can still contain secrets. A signed admission cannot be silently redacted while preserving its original proof. Prefer synthetic public exercises.

The native evaluator is an explicitly selected local executable with input/time/output bounds. It is not an operating-system filesystem/network sandbox. Incoming room text must never choose an executable or trigger evaluation.

Prototype exchange and evidence guide ↗