{"format":"touchstone-inclusion-proof\/1","recorder":"rec_01kvx9rq59jmsc01n7vkb3z35h","max_sweep_seconds":null,"entry":{"seq":657,"event_type":"memory.attestation\/f1121a","payload_hash":"40f0dea8016f9f9b26a2559820f9311a2cb62c025c4adc696d05443ded27579a","prev_hash":"6420dfbc266017413f7c3f2f40387d4e0855613e5dd3fa4a45e606d1b793c763","server_ts":"2026-10-22T20:10:54Z","client_ts":null,"actor_sub":"040b6f79-a867-46d4-8069-fd6143bd9e20","counterparty_sub":null,"counterparty_sig":null,"counterparty_pubkey":null,"actor_sig":"7gQZclDGvss6yAoouc9Mxa3WLH1MLRPx22304BcAnTfk6AK39S5TxFmYJN0H2ZX3\/NyK5V1Ll7K5z7aEE9IVBg==","server_beacon":{"chain":"drand:quicknet","round":33298829,"randomness":"cdae984665c2026606dab4f9717d628a650ec091620d6a576de22aec8701a8a6"},"entry_hash":"a783401079ae7e460862688535e2b2d1b60dc50bb9b1497af5a993ba033cbaf7"},"inclusion_proof":[],"checkpoint":{"id":1050,"seq_start":657,"seq_end":657,"merkle_root":"5709e796c87e60bd29927830c980eac3ae4c429ea9e7ee189ad366501c76f91c","head_hash":"a783401079ae7e460862688535e2b2d1b60dc50bb9b1497af5a993ba033cbaf7","ots":"\/.well-known\/touchstone\/checkpoints\/rec_01kvx9rq59jmsc01n7vkb3z35h\/1050.ots","nostr_event_id":"820d62ab833f7a52bc8cbd19fcf8f06f1ef31a86d15729c940f62e0b1b95b604","bitcoin_nostr_event_id":"60148d271f27033f7a674c7e5914cce9907a15686bc002a5549f1b39af44555b","bitcoin":{"height":972659,"hash":"00000000000000000001a7e849f5bf0a0ebea8a5e2b6721fc4d7f5a6b47d9d8f","time":1792703193}},"how":"entry_hash = sha256(join(\u0022\\n\u0022,[seq,prev_hash,server_ts,payload_hash,actor_sub,counterparty_sub,actor_sig] + (server_beacon ? [\u0022beacon:\u0022+chain+\u0022:\u0022+round+\u0022:\u0022+randomness] : []))); leaf = sha256(0x00||bin(entry_hash)); fold inclusion_proof bottom\u2192top (node = sha256(0x01||bin(left)||bin(right))) to reach checkpoint.merkle_root; then `ots verify` the checkpoint to Bitcoin. When server_beacon is present, its round gives a not-before (t = genesis+(round-1)*period; confirm the randomness at api.drand.sh) and the anchor a not-after \u2014 a checkable time interval. Only hashes + the recorder signature are revealed, never the payload."}