Move one state-bearing identity from Browser A to Browser B without moving either private key. Close A; B proves continuity locally.
01 / main proof · two browsers
Browser B creates its own non-extractable key. Browser A authorizes one canonical custody handoff; no private key crosses the relay.
Create one state-bearing organism to generate a private 128-bit room link.
The secret stays out of logs and screenshots. Scan the QR or copy the link directly into Browser B.
————
Authority boundary: The relay stores and forwards public canonical messages. Each browser verifies locally; relay sequence and presence are never a validity verdict.
Two separate browser contexts use different non-extractable keys to authorize one canonical handoff. After A closes, B advances the same identity and deterministic state.
The relay is not an authority, a room link is not authentication, and no finite observation is a globally complete death certificate.
02 / advanced · falsification workbench
The primary proof is local and deterministic. An optional model may choose one allowlisted mutation, but never receives a secret or signing capability and never decides validity.
Run the committed lifecycle, replay, fork, resurrection, and qualified-mortality fixtures.
Not runOptional network witness. Complete the anti-abuse check to make one capped API request. The proof does not depend on it.
Loading anti-abuse check…
No proposal yet.
No API call. The compiled digest and kernel result must remain identical.
Not runThe static release digest and exact source revision below bind this public artifact to reviewed evidence.
——Authority boundary: A curated proposal or GPT‑5.6 may be wrong. Only the actual kernel result is authoritative, and a mismatch is shown rather than repaired or hidden.
02 / advanced · live incubator
Each dedicated Worker keeps one private key in memory. The page receives only public keys and signatures; the main-page kernel is the sole verdict authority.
The second signer must be different; all three 2-key combinations are valid.
The same canonical state bytes always render the same avatar.
Waiting for creation
Waiting for creation
Waiting for creation
The exact pending body is retained when the second signature is added.
Acceptance must come from canonical R1 result bytes.
Reusing accepted evidence must not move the head.
Terminates the three local signing Workers. This is not an erasure proof or a global death certificate.
Not run
Exact canonical envelope and payload bytes only. No key capability or accepted-context object is serialized.
No bundle yet
Import a canonical public bundle. Verification is local and read-only; no signing key is transferred.
No imported proof
——Disabled: this browser has public evidence but none of the current private signing keys.
Optional and consent-gated. Stores one non-extractable browser key, public evidence, and schema metadata in IndexedDB.
Ephemeral mode · nothing stored
—Private key bytes are never exported. English/Korean locale remains URL-only and is not stored.
03 / advanced · fixed public reference
This is a committed, pre-signed public fixture—not the random organism above. Every experiment starts from raw evidence in a fresh lineage and asks the kernel again. Its mortality card is a closed local experiment whose pending-evidence inventory is explicitly complete; it is not a global death certificate.
Replay, four mutations, signed fork, resurrection, complete-scope conditional mortality, and clone separation will appear here.
04 / advanced · cross-runtime contract
A separate Worker runs the named negatives, trust-boundary and mortality-safety probes, and fixed-seed 10,000-case corpus, then compares the whole result with the committed reference. The result reports the committed case counts dynamically.
05 / public event log