Avalanche Evidence Anchoring
Category · tier-1 reading. This page is one implementation of H33's chain-agnostic integrity thesis. For the concept that spans all 11 supported chains, see Public Integrity Layer.
Anchoring is the public integrity layer beneath the Agent-008 enterprise AI governance platform — independent proof that an AI agent’s evidence package has not been altered, while the package itself stays private and under your control.
Anchor private evidence with a 32-byte post-quantum commitment while keeping the underlying data under customer control.
A complete evidence package can remain private and under customer control while Avalanche serves as the public integrity layer that proves it has not been altered. The 32 bytes on-chain represent the bundle. The bundle stays with the customer. Anyone with the bundle can verify integrity against Avalanche without contacting H33, without phoning home, and without trusting any intermediary.
Avalanche evidence anchoring is one implementation of the H33 chain-agnostic integrity thesis: a 32-byte post-quantum commitment to a private H33-74 evidence bundle is published to Avalanche C-Chain as a public timestamp. H33-74 produces the evidence; Avalanche is a reference environment the commitment anchors to.
Why this exists: institutions need to prove an evidence package existed and has not been altered without publishing the package itself. Anchoring separates public integrity (32 bytes, on-chain) from private evidence (gigabytes, customer-held).
Boundary: Avalanche does not own or produce the evidence, and anchoring is not the verdict. Whether the evidence is valid and canonical is rendered by H33 Verification; approving who may act is Agent-008. The evidence is chain-agnostic and does not depend on Avalanche — the same bundle anchors to any supported chain and re-verifies offline.
What gets anchored
The bundle stays private. The chain anchors a 32-byte commitment. Every H33 evidence bundle has a canonical-JSON form. The canonical-JSON digest of the bundle (with the anchor field zeroed, because the anchor cannot reference itself) is exactly 32 bytes. Those 32 bytes are the commitment. The commitment commits to the entire bundle: every evidence control object, every sidecar, every signature, every citation. Changing any byte produces a different 32-byte commitment. The commitment is what goes on-chain. The bundle does not. The underlying data — gigabytes if needed — stays under customer control.
How anchoring works
A self-send transaction on Avalanche C-Chain carries the 32-byte commitment as transaction calldata. The transaction is signed by the bundle owner's wallet — H33 never touches the signing keys. The transaction is broadcast to a public Avalanche RPC endpoint. The Avalanche network confirms the transaction in a block. Once confirmed, the bundle has been anchored. The transaction hash, block hash, and block number are recorded in the bundle's anchor field. The chain serves three roles: time binding (the block timestamp proves the bundle existed at or before that moment), tamper detection (any modification produces a different commitment), and public verifiability (anyone can query the chain to confirm).
The verification path
Any party holding the bundle can verify the anchor. Read the bundle's anchor field. Compute the bundle's 32-byte canonical commitment. Query the Avalanche RPC for the transaction. Confirm it exists in the expected block. Read the transaction calldata. Confirm it matches the computed commitment. Run additional sanity checks: the block hash matches what the chain reports at that height (no reorg); the block contains the transaction; the transaction is finalized. The open-source h33-anchor-verify-inclusion tool performs every check. The verification runs entirely against the public Avalanche RPC. No H33 servers are contacted.
Why Avalanche — and when another chain (or none)
Avalanche C-Chain offers properties that matter for institutional evidence anchoring: sub-second finality, EVM compatibility, public auditability, low transaction cost, and subnet flexibility. The H33 anchoring model is chain-agnostic. Avalanche is the current production substrate. Additional chains can be supported without changing the bundle format or verification protocol.
When to use this: use it when you need a portable H33-74 evidence bundle to carry a public, tamper-evident timestamp on Avalanche while the underlying data stays private and under your control. When not to use this: do not use anchoring when you need the verdict on whether the bundle is valid and canonical — use H33 Verification instead; and do not use it to approve who may act — use Agent-008 instead. Avalanche is a reference environment the commitment anchors to, never the owner or producer of the evidence.
When to anchor to Avalanche: high-volume evidence where sub-second finality and low cost matter, and where an EVM anchor fits your existing tooling. When to choose a different chain: pick Bitcoin (via Taproot) for the most widely recognized long-horizon timestamp, or anchor to whichever chain your asset or workflow already lives on. When anchoring is unnecessary: if you do not need a public, ordered timestamp, the bundle still re-verifies offline against schema, hash, and its three post-quantum signatures — an internal store or a regulator's ledger can serve as the anchor surface. Anchoring adds public timestamping; it is optional infrastructure, not a dependency of the evidence.
Use cases
AI decision evidence. An AI underwriting system produces an evidence bundle for every decision. The bundle's commitment is anchored to Avalanche. A regulator or auditor verifies any individual decision's anchor without ever seeing the underlying applicant data.
Insurance claim evidence. A cyber insurance claim is supported by H33 evidence bundles. Each bundle's commitment is on Avalanche. The carrier, reinsurer, and regulator each verify the anchors independently.
Healthcare audit trails. A hospital's clinical decision support produces bundles for every recommendation. The bundles are anchored. Years later, in a malpractice case, the original recommendation bundle is verified against Avalanche.
The institutional story
Most workloads anchored to public chains today are trading, tokenization, or payments. Evidence anchoring is different. A 32-byte commitment is the only artifact that touches the chain. The full evidence package — gigabytes if needed — stays under customer control. What gets verified publicly is integrity. What gets retained privately is evidence. That is a new class of institutional workload on Avalanche: verification infrastructure, not transaction infrastructure.
Common questions
Does the chain see the underlying data?
No. Only the 32-byte commitment is published. The bundle stays under customer control.
Can H33 modify a bundle after anchoring?
No. The bundle is signed by three independent post-quantum algorithm families. Modification invalidates the signatures. The commitment also changes, breaking the anchor match.
What if I want to anchor on a different chain?
The H33 anchoring model is chain-agnostic. Adding a chain requires implementing the prepare/broadcast/verify-inclusion path for that chain. The bundle format and verification protocol are unchanged.
Is mainnet supported?
Mainnet anchoring is implemented behind an explicit signing-boundary record. The crate never holds private keys. The customer signs offline; H33 broadcasts the signed transaction; the verifier confirms inclusion. Fuji testnet anchoring is fully shipped and demonstrable today.
Can multiple bundles share an anchor?
Yes. A Merkle root of multiple bundles' commitments can be anchored as a single 32-byte commitment. Each bundle then carries its Merkle path.
Does Avalanche own or render a verdict on the evidence?
No. Avalanche is a reference environment that provides a public timestamp, ordering, and tamper detection. It does not produce the evidence — H33-74 does — and it does not render the verdict on whether the evidence is valid and canonical. That verdict is H33 Verification. Approving who may act is Agent-008, not the chain.
Does the evidence depend on Avalanche staying online?
No. The bundle is independently re-verifiable offline against its canonical schema and hash, trusting neither H33 nor any chain. The anchor proves a public timestamp; the evidence's validity does not depend on the chain remaining operational, and the same commitment can be re-anchored elsewhere.
Related pages: Portable Artifact · Claims Evidence · Trust Card · Bundles · Avalanche Proof Lab demo