Verify portable artifacts independently.
Bundle + Attestation + Submission + Verifier all agree. No H33 contact required.
A carrier, auditor, regulator, PE partner, or CISO downloads this binary, points it at an H33 enterprise bundle, and confirms the bundle replays to its SACRED state_id byte-identically — with no H33 contact, no database access, no vendor service call. The artifact survives us. "H33 issued the attestation. H33 is not required to verify the attestation."
Q0 — Who bears risk? Never H33. This binary bears the risk of verifier correctness — same input → same output, byte-identically. Nothing else.
Q0.5 — Who owns the decision? Always the decision owner. The verifier surfaces structural replay verdicts. It never judges whether a decision was wise, correct, fair, lawful, or compliant.
Verify a bundle right now.
Drop an H33 evidence bundle below — or use the demo bundle claim_84711.json. The verifier runs entirely in your browser. No network call to H33. You should have a verdict in under 15 seconds.
What's inside a portable artifact.
Click a node to highlight the matching block in the bundle JSON.
Load a bundle above to see its JSON…
Break the bundle five different ways.
Each button mutates one specific field. The verifier produces a different failure mode for each. People remember breaking things more than reading about them.
Verify without H33.
Who needs to be reachable for a verification to succeed?
CUSTOMER H33 INTERNET │ │ │ ├── Bundle ✓ ├── (offline) ├── (optional) ├── Verifier ✓ │ │ └── only for ├── Public keys ✓ │ │ chain └── Conformance vectors ✓ │ │ anchor │ │ fetch ───────────────── ───────────────── ───────────────── All required NOT CONTACTED Optional RESULT: Independent Verification
If H33 is offline, sanctioned, acquired, or sunset, this verification still succeeds. The bundle is the artifact. The verifier reads it. The conformance vectors prove the verifier behaves correctly. Anchor confirmation queries a public chain RPC — and that RPC can be operated by anyone, not just H33.
Six ways verification fails.
A verifier that only emits PASS feels like marketing. A verifier that has a documented set of failure modes — and emits the right one for each tampered input — feels real.
err: signature[0] verify failed expected_digest_sha3_384: a83e...c712 actual_digest_sha3_384: 91f4...c8b2 → bundle modified after signingSee full example →
err: EC-8 ResultCitationBind result_text_hash: ab29...3c8e bundle_text_hash: e4f1...a9d2 → answer text was modifiedSee full example →
err: profile gate refused verifier_profile: federal bundle_profile: commercial → mode mismatch, refuse to verify
err: unsupported algorithm
signature[0].algorithm: "FAKE-256"
allowed: ML-DSA-65, FALCON-512,
SLH-DSA-SHA2-128f
→ reject untrusted algorithm
err: authority expired authority_id: claims-officer-tier-2 not_after: 2025-12-31T23:59:59Z verified_at: 2026-06-07T01:48:00Z → mandate lapsed, advisory FAIL
err: anchor inclusion failed chain: avalanche-fuji tx_hash: 0x83a9...7c2e rpc_says: tx not found at block 47118229 → anchor evidence invalidSee full example →
VERDICT: PASS signatures: 3/3 verified evidence controls: 8/8 verified anchor: confirmed h33 contacted: NOSee full example →
replay_input: bundle_hash + verifier_v0.1.0
replay_output: byte-identical to first run
property: deterministic across machines
and across decades
See full example →
All examples have their own page under /verification/ — each is a documented verifier behavior with the inputs that produce it, the bundle bytes involved, and the exact verifier output.
v0.1.0 release
PLATFORM aarch64-apple-darwin (macOS · Apple Silicon)Verify a shipped enterprise bundle in five commands
Download the Portability Verifier + enterprise bundle
curl -O https://h33.ai/verifier/v0.1.0/h33-independent-canonical-replay-v0.1.0-aarch64-apple-darwin
curl -O https://h33.ai/workspace/portability/bundles/tenant_insurance_claim_44962d9b-25f5-5622-bd9a-98d5580bb8a2_enterprise_bundle.tar.gzConfirm the binary's SHA3-256 matches the manifest
python3 -c "import hashlib; print(hashlib.sha3_256(open('h33-independent-canonical-replay-v0.1.0-aarch64-apple-darwin','rb').read()).hexdigest())"
# Expected: 4b7e3576b3756f54990853abc418b2473640a521d3541bb8b5dc9b180c194361Walk the three-layer enterprise bundle extraction
chmod +x h33-independent-canonical-replay-v0.1.0-aarch64-apple-darwin
mkdir work && cd work
tar -xzf ../tenant_insurance_claim_*_enterprise_bundle.tar.gz
tar -xzf cases/claim-84711/submission.tar.gz -C cases/claim-84711/
tar -xzf cases/claim-84711/evidence_package.tar.gz -C cases/claim-84711/Run the Portability Verifier
../h33-independent-canonical-replay-v0.1.0-aarch64-apple-darwin \
--events-file cases/claim-84711/events.json \
--manifest-file cases/claim-84711/manifest.jsonConfirm the verdict
The verifier prints a JSON report. The two load-bearing fields:
"overall_pass": true
"determination": "PASS — H33 was removed from the process and the organization replayed identically."If you see those two, you have independently verified the case. You did not contact H33 at any step. That is the property the entire Trustless Decision Attestation category rests on.
What the Portability Verifier verifies
Structural replay determinism. Five locked checks: policy_version_ref resolves · model_version_ref resolves · decision_lineage resolves · decisions made during active authority · state_id reproduces byte-identically. Plus per-event PQ signature verification (ML-DSA-65 + FALCON-512 + SLH-DSA-128f) with the --verify-signatures flag.
What the Portability Verifier does NOT verify · ever (Q0.5)
The verifier surfaces structural replay verdicts. It does not — and will never — surface judgments about whether a decision was wise · correct · fair · lawful · compliant · likely to hold up in court. Those judgments belong to carriers, auditors, regulators, and acquirers. The verifier provides the substrate; the judgment is theirs.
Honest v0.2 deferrals
- Multi-platform releases (Linux x86_64 · Linux aarch64 · Darwin x86_64)
- PQ-signed release artifacts (release-signing key ceremony required)
- Byte-deterministic builds across machines (containerized toolchain)
- Attestation document format verification (lands when attestation issuance exists)
- CI/CD release automation
- Public-fetchable git tag (gitlab auth currently unauthenticated for the release terminal)