The SEAL is the signature on every published CSOAI figure. It is an Ed25519 signature
over a canonical representation of the measurement, anchored in a hash chain the public can
recompute.
What SEAL means
Signed — Ed25519, with the public key published in /.well-known/agent.json.
Hash-chained — every SEAL references the prior SEAL. Re-writing history breaks the chain.
Recomputable — the harness is public; given the inputs, you can rerun the measurement.
Council-ratified (for DEFONEOS-SEAL) — issued after a designed 33-agent council review.
What SEAL does not mean
Not a certification. We are a measurement body.
Not a compliance statement. Only a regulator can say "compliant."
Not a guarantee of future behaviour. The SEAL is a snapshot.
Not a substitute for legal counsel.
How SEAL differs from DEFONEOS-SEAL
SEAL — the lightweight signature on a single measurement. Used on every published figure.
DEFONEOS-SEAL — the heavier sovereign governance credential. Requires a 23/33 threshold review by the designed 33-agent council. Used for sovereign-tier certifications.
Verify a SEAL
Every figure on csoai.org has a companion record with the unsigned payload, the signature,
and the chain reference. The verifier is at /audit.html.
Related
DEFONEOS-SEAL — sovereign AI governance seal (heavier).