The DEFONEOS-SEAL is a sovereign AI governance credential. It is an Ed25519-signed record
produced by a designed 33-agent council review, anchored in a hash chain a third party can verify
without trusting us.
What the seal is
Cryptographic — Ed25519 signature over a stable representation of the system, the harness, and the run.
Council-ratified — issued only after a 23-of-33 quorum of the designed 33-agent council ratifies the run.
Hash-chained — every seal references the previous seal in the chain. Back-dating is impossible without breaking the chain.
Public-verifiable — the public key is published in /.well-known/agent.json. Anyone can verify.
What the seal is not
Not a regulatory certification. It is a measurement record.
Not a claim that a system is "compliant." Only a regulator can say that.
Not a guarantee of future behaviour. It is a snapshot of a measured run.
How to verify a seal
Fetch the seal record (a signed JSON containing the run, the harness, and the council vote).
Verify the Ed25519 signature against the public key in /.well-known/agent.json.
Walk the hash chain backwards to the genesis seal.
Optionally, recompute the run from the published harness and compare the result.
Hard stops (never crossed)
No SEAL is issued without a 23/33 threshold vote.
No kinetic-targeting or personal-surveillance pattern is ever SEALed.
No "AUKUS partnership" or "DAIC certified" claim is added without a signed letter.