Evidence Passport

Verifiable observations, not safety promises. A lightweight signed certificate and embeddable badge for Solana tokens.

Transparent grading

• D: mint or freeze authority active, top-10 share ≥70%, permanent delegate, or a price crash (≥90% below the recent peak, a ≥50% drop within 24 hours, or liquidity pulled).
• U: missing authority, holder or liquidity evidence.
• C: top-10 share ≥40%, liquidity below $10,000, or selected transfer restrictions.
• B: none of those selected signals observed. B is the maximum because LP ownership/locks are not verified.

Active authorities can be legitimate, including for regulated stablecoins. This rubric does not imply wrongdoing. Unknown is never treated as zero.

Independent verification protocol

1. Download the envelope from the JSON link on a certificate.
2. Trust only the public key from the official HTTPS public-key endpoint, not a key supplied in a downloaded envelope.
3. Canonicalize snapshot recursively: sort object keys lexicographically, retain array order, serialize JSON values without whitespace; finite JSON values only.
4. SHA-256 of UTF-8 canonical snapshot must equal envelope.id.
5. Verify Ed25519 signature against UTF-8 of the prefix haris-tools:certificate:v1\n (a single newline) plus canonical snapshot.

Public key (base64 raw): tU2CGco32NMaM2HqD4U8gXymfLQmsEbFXOW/AR2mjpU=

API: POST /cert/api/verify with the envelope JSON; GET /cert/api/verify?id=<content-id>. Returns valid, hashValid and signatureValid. Issuance: POST /cert/api/issue?mint=<mint>, limited to one receipt per mint per 15-minute UTC bucket. An existing Token Check is required. Snapshot freshness threshold: 30 minutes.

Badges refresh evidence on demand at most once per 15 minutes, not continuous chain monitoring; expired observations become U if upstream data cannot refresh. HTTP image requests and tagged landing requests are approximate counters; browser/proxy caches and bots mean these are not unique people. No IPs are stored by certificate analytics.

Open Graph PNG previews show the latest snapshot grade; SVG previews are also available.

Not financial advice. Signatures prove origin and integrity, not truth or safety.