Reputation no one can see.
Authority anyone can verify.
Five primitives composed into one replayable attestation: biometric anti-sybil, encrypted activity, FHE-aggregated score, selective ZK disclosure (prove rep ≥ X without revealing the score), and post-quantum receipts that any third party can independently replay offline. This page runs real cryptographic verification in your browser.
One human. One reputation.
H33 hashes a fresh device-bound credential into a 32-byte enrollment commitment. The credential never leaves the device; only the commitment is observable. In production this commitment is bound to a platform authenticator (Face ID, Touch ID, Windows Hello, or hardware security key); this demo uses a deterministic per-session credential to exercise the same SHA3-256 primitive in WASM.
Every event becomes a private receipt.
Each DAO event (vote, proposal, contribution, attendance) is encrypted at the source and gets its own H33-74 receipt: 32 bytes of canonical commitment + 42 bytes of post-quantum signature material. The raw event content is never observable; only the receipt commitment is.
The server runs the math. It cannot read it.
The server combines your encrypted contributions under Fully Homomorphic Encryption (BFV / CKKS). It never decrypts. The output is an encrypted score envelope — a ciphertext only you (or a ZK proof) can interpret. In production this runs on the H33 FHE Platform, which computes on encrypted data without ever decrypting it.
Prove your rep clears a threshold. Reveal nothing else.
Set a threshold X. In production the server emits a ZK-STARK proof that your encrypted score satisfies rep ≥ X, verified in your browser and revealing nothing about the actual score, contribution history, or the operations that produced it. In this demo no proof is generated: the threshold is checked locally and bound to your commitments with SHA3-256.
Same bytes. No operator. No trust.
Download the replay bundle (demo). The h33-verifier (Apache-2.0, public on GitHub) reconstructs the entire reputation lineage from the bytes alone. No call to H33 required. This is what is designed to make the score independently auditable by a DAO, a regulator, or your customer's forensic team — without trusting us (demo bundle; not yet available for production receipts).