This document defines the compatibility status of public blockchain networks for H33 attestation operations. Four operation classes are evaluated per chain: commitment anchoring, proof verification, privacy proofs, and settlement.
Anchoring is the primary chain interaction. The 32-byte SHA3-256 commitment from an H33-74 attestation primitive is published to a target chain, producing an immutable timestamp and public ordering guarantee. The chain itself does not evaluate the commitment; it serves as a timestamping and publication layer.
The security of the attestation does not depend on chain-level signature security. Bitcoin, Ethereum, and Solana use classical ECDSA or EdDSA for transaction signing. Even if these classical signatures are broken by a quantum adversary, the 32-byte commitment and the three post-quantum signatures over the full receipt remain valid.
| Chain | Anchoring | Proof Verification | Privacy Proofs | Settlement |
|---|---|---|---|---|
| Bitcoin | Supported | N/A | N/A | N/A |
| Ethereum | Supported | Supported | Supported | Supported |
| Solana | Supported | In Progress | Planned | In Progress |
| Base | Supported | Supported | Supported | In Progress |
| Arbitrum | Supported | Supported | Supported | In Progress |
| Optimism | Supported | Supported | In Progress | Planned |
| Avalanche | In Progress | Planned | Planned | Planned |
| Polygon | Supported | Supported | In Progress | Planned |
| Zcash | Planned | Planned | Planned | N/A |
Each supported chain uses a different mechanism to embed the 32-byte commitment. The anchoring method determines the gas cost, finality time, and data availability guarantees.
| Chain | Anchoring Method | Data Field | Commitment Size | Finality | Typical Cost |
|---|---|---|---|---|---|
| Bitcoin | Taproot witness (BIP-341) | Witness script data push | 32 bytes | ~6 blocks (~60 min) | ~$0.10 - $2.00 |
| Ethereum | Contract calldata | bytes32 parameter |
32 bytes | ~2 epochs (~12.8 min) | ~$0.50 - $5.00 |
| Solana | Memo program | SPL Memo instruction data | 32 bytes | ~1 slot (~0.4 sec) | ~$0.001 |
| Base | L2 calldata | bytes32 parameter |
32 bytes | L2 ~2 sec / L1 ~12.8 min | ~$0.01 - $0.10 |
| Arbitrum | L2 calldata | bytes32 parameter |
32 bytes | L2 ~0.25 sec / L1 ~12.8 min | ~$0.01 - $0.10 |
| Optimism | L2 calldata | bytes32 parameter |
32 bytes | L2 ~2 sec / L1 ~12.8 min | ~$0.01 - $0.10 |
| Avalanche | C-Chain calldata | bytes32 parameter |
32 bytes | ~2 sec | ~$0.02 - $0.20 |
| Polygon | PoS calldata | bytes32 parameter |
32 bytes | ~2 sec / checkpoint ~30 min | ~$0.005 - $0.05 |
| Zcash | Memo field (planned) | Shielded memo | 32 bytes | ~10 blocks (~12.5 min) | ~$0.01 |
The chain_target field at byte offset 35 of the H33-74 primitive encodes the target chain as a single byte. The following values are assigned:
| Value | Chain | Status |
|---|---|---|
0x00 | Unanchored | Reserved |
0x01 | Bitcoin | Assigned |
0x02 | Solana | Assigned |
0x03 | Ethereum | Assigned |
0x04 | Arbitrum | Assigned |
0x05 | Optimism | Assigned |
0x06 | Base | Assigned |
0x07 | Polygon | Assigned |
0x08 | Avalanche | Reserved |
0x09 | Zcash | Reserved |
0x0A-0xFF | Unassigned | Reserved for future use |
To reduce per-attestation chain costs, H33 supports batched Merkle root anchoring. Multiple H33-74 commitments are collected over a configurable window (default: 60 seconds), organized into a Merkle tree, and the Merkle root is anchored as a single on-chain commitment.
Individual attestation primitives retain their per-attestation commitment values. The Merkle tree structure allows any individual commitment to be verified against the on-chain root using a standard inclusion proof. This approach reduces anchoring costs by a factor equal to the batch size while preserving per-attestation verifiability.
Batched anchoring is the default for all chains except Bitcoin, where individual Taproot-based anchoring is used for high-value attestations. Bitcoin batched anchoring (using OP_RETURN for the Merkle root) is available as a configuration option for cost-sensitive workloads.
Batched Merkle response attestation is covered by H33 substrate patent Claims 124-125, FIG 40-45.
Chain finality determines when an anchored commitment can be considered permanent. H33 applies chain-specific confirmation thresholds before marking an attestation as chain-finalized:
| Chain | Confirmation Threshold | Approximate Time | Reorganization Risk |
|---|---|---|---|
| Bitcoin | 6 blocks | 60 minutes | Negligible at 6 confirmations |
| Ethereum | 2 epochs (finalized) | 12.8 minutes | None post-finality (Casper FFG) |
| Solana | 31 slots (rooted) | ~12.4 seconds | None post-root |
| Base / Arbitrum / Optimism | L1 finality | 12.8 minutes (L1) | L2 sequencer reorgs possible pre-L1 |
| Polygon | Checkpoint | ~30 minutes | None post-checkpoint |
| Avalanche | 1 accepted | ~2 seconds | None (Snowman consensus) |
Attestations are queryable immediately upon chain submission. The chain_finalized flag in the attestation receipt is updated asynchronously once the confirmation threshold is met.