{"format":"touchstone-inclusion-proof\/1","recorder":"rec_01kvx9rq59jmsc01n7vkb3z35h","max_sweep_seconds":null,"entry":{"seq":596,"event_type":"memory.attestation\/f1121a","payload_hash":"72385c3efd67bdd7f83bf8ac52932477572a6b36b2b3e4802f9d864445d4981c","prev_hash":"d1d17a4f71d8a3e7763f0c33554ca01d1ffce5d85337729f0881fc1c024f03ed","server_ts":"2026-10-18T17:35:51Z","client_ts":null,"actor_sub":"040b6f79-a867-46d4-8069-fd6143bd9e20","counterparty_sub":null,"counterparty_sig":null,"counterparty_pubkey":null,"actor_sig":"UlLePR05zb7cn\/nzLjRizyZMnojuiCuYgSCmr4EfoC53fU8YRLBAjryD++2eZSFGcrRFZfn44st9LDE+NZIPCg==","server_beacon":{"chain":"drand:quicknet","round":33180528,"randomness":"53c7bf045104d2d4e1586b0105c8dcfb969b3f38439c63882c4886e6b225778d"},"entry_hash":"49a2f5b7cb4212bd732d11102237dc9509e916175540b16f8071d83e5b1c7830"},"inclusion_proof":[],"checkpoint":{"id":927,"seq_start":596,"seq_end":596,"merkle_root":"3d46d1fae7e223c290bc5b83c0a290bc72b7a60eb811df204618fdcf115b4a2c","head_hash":"49a2f5b7cb4212bd732d11102237dc9509e916175540b16f8071d83e5b1c7830","ots":"\/.well-known\/touchstone\/checkpoints\/rec_01kvx9rq59jmsc01n7vkb3z35h\/927.ots","nostr_event_id":"1350a4fd010451e77c9efc686a8cfe282343869c65ac30dba663b754cfea8744","bitcoin_nostr_event_id":"ef40337d186912106df2e1b698fcdeb9f7be4460981f76f423ef0718b1e9e37a","bitcoin":{"height":972036,"hash":"0000000000000000000195c3c38f012514f274f503660996932dc74cec9ab57b","time":1792347814}},"how":"entry_hash = sha256(join(\u0022\\n\u0022,[seq,prev_hash,server_ts,payload_hash,actor_sub,counterparty_sub,actor_sig] + (server_beacon ? [\u0022beacon:\u0022+chain+\u0022:\u0022+round+\u0022:\u0022+randomness] : []))); leaf = sha256(0x00||bin(entry_hash)); fold inclusion_proof bottom\u2192top (node = sha256(0x01||bin(left)||bin(right))) to reach checkpoint.merkle_root; then `ots verify` the checkpoint to Bitcoin. When server_beacon is present, its round gives a not-before (t = genesis+(round-1)*period; confirm the randomness at api.drand.sh) and the anchor a not-after \u2014 a checkable time interval. Only hashes + the recorder signature are revealed, never the payload."}