Status: Planned

Attestation

How a record gets a fingerprint on Solana, how the signing key is kept, and how anyone can check it.

Updated · Edit history

An attestation is a fingerprint of a record on Solana, signed by Noventia. Planned for stage 3. Stage 2 cards carry no attestation and show no hash.

What is attested

A hash of the facts and the result is written through the Solana Attestation Service and signed by the Noventia key.

Field Meaning
hash Hash of the facts and the result
version Version of the record
rulesVersion The rules version that produced the result
sasAccount The Solana Attestation Service account that holds it

The signing key

The key lives in Google Cloud KMS, and only one service can use it. The public key is published on this site, on Official addresses, when attestation starts.

How anyone can check a record

  1. Take the facts and the result of a record.
  2. Compute their hash.
  3. Compare it with the hash in the attestation on Solana.
  4. Check the signature against the published public key.

The web passport at stage 3 does this for you with a “verified on Solana” check.

Checking a card

Planned for stage 3. Every card carries a QR code and a short code. Both open noventia.xyz/verify, which reads the attestation from Solana, checks the Noventia signature and shows whether the card matches. The MRZ gets a check digit derived from the attestation hash, so a copied or edited card fails the check.

Independent verifiers

Others recompute every record and sign it too. Planned for stage 6.

The attestation schema page is an earlier draft for the trader record model and is being rewritten.