Workshopprc
PRC
A minimal protocol for verifiable content provenance. Not "is it true", just who made it, whether it changed, and where it has been.
- state
- active
- when
- 2026
- made with
- Python, Ed25519, CBOR
- links
- Source
PRC lets anyone check who first produced a piece of content, whether it was modified, what a tool or device claimed about its origin, and its chain of custody since. It deliberately doesn’t claim more than that: not truth, not quality, just provenance.
Four objects carry it: identity documents for whoever signs, asset manifests identified by content hash, signed assertions about an asset (created, captured, edited, published), and an append-only transparency log.
- content identified by SHA-256 over canonical CBOR
- every assertion signed with Ed25519
- edits create new assets linked to their parents, forming a DAG
- a Merkle-tree transparency log (RFC 6962), so history can’t be silently rewritten
- offline verification, identity expiry, and detection of backdated assertions
https://jafarian.world/projects/prc
§ LettersPrivate · read by a person
Write me about this
Not a comment: it comes to me, privately, and I read every one. Agree, disagree, add a thread I missed.