3sealed findings

Verify it yourself

You do not have to trust us.

All you need is a terminal with node and git. The instructions below are the same ones published in the public anchor repository — a sealed finding can only be fully verified once it is unsealed or published, because that is when the canonical artifact becomes public. Until then, you can check that the hash, the anchor commitment, and the timestamp are already on the record.

Right now, no finding is published or unsealed — so step 1 below has no real FINDING-ID to substitute yet, and the command will answer 404. That is not a bug on this page; it is the honest state. Step 4 (the anchor commitment in the public repository), by contrast, you can already check today, for every sealed finding above.

1. 1Fetch the canonical artifact

   Published and unsealed findings are served as canonical JSON from the API. The canonical field of the response is the artifact that was hashed.

   curl -s https://www.folkefakta.no/api/findings/FINDING-ID -o svar.json

2. 2Recompute the SHA-256

   The hash is taken over a canonical serialization, not over raw JSON. The protocol rule, verbatim from the protocol file (scripts/institution/lib/canonical.js): "JSON with object keys sorted by UTF-16 code-unit order, arrays in given order, no whitespace, hashed as SHA-256 over UTF-8 bytes." That is: object keys in UTF-16 code-unit order (plain JavaScript sort), arrays in their original order, no whitespace — recursively through the whole object. Save the snippet below as kanonisk.js and run the exact command:

   // node kanonisk.js < svar.json | shasum -a 256
   function kanonisk(v) {
     if (v === null || typeof v !== 'object') return JSON.stringify(v);
     if (Array.isArray(v)) return '[' + v.map(kanonisk).join(',') + ']';
     return '{' + Object.keys(v).sort().map(function (k) {
       return JSON.stringify(k) + ':' + kanonisk(v[k]);
     }).join(',') + '}';
   }
   var raw = '';
   process.stdin.on('data', function (c) { raw += c; });
   process.stdin.on('end', function () {
     var svar = JSON.parse(raw);
     process.stdout.write(kanonisk(svar.canonical || svar));
   });