Self-hosted witness

Be your own witness.

A signed log proves it was not rewritten. A witness proves something stronger: that everyone is being shown the same log. Run your own witness daemon to pull and co-sign our signed tree heads, so a split view cannot stay hidden from you.

split-view detection · self-hostable · co-signed heads

witness · acme
checked   head @ size 184203
consistent with prior  yes
co-signed ed25519:2c91…
fork detected          no
your own eyes on our log, continuously
Split-view
Detect two histories
Self-host
Run the daemon anywhere
Co-signed
Heads you signed yourself
Enterprise
Available on Enterprise

Why a witness

The one trick a signed log cannot catch alone.

A signed, append-only log cannot be rewritten without detection. But a dishonest operator could in theory show one history to you and another to someone else. A witness is the independent observer that makes that impossible to hide.

Pull the headson a schedule
Co-sign what you seeunder your key
A fork cannot hideviews must agree

What you get

Independent eyes you control.

The witness is a small daemon you run. It needs nothing of ours beyond the public heads, and it answers to your key, not ours.

Run it anywhere

A self-contained daemon on your own infrastructure, pulling the public heads on a schedule you set.

Co-sign the heads

Each head you observe is co-signed under your key, building an independent record of what you were shown.

Catch a split view

If our log ever presented a different history elsewhere, your co-signed chain would not reconcile, and you would know.

Run it

One daemon, one registration.

Start the witness and register its URL on the workspace. From then on it watches continuously and your co-signatures are part of your evidence.

# pull and co-sign our signed tree heads on a schedule
npx @axiorank/log-witness --log-id <id> --jwks jwks.json \
  --sign-key ./witness.key

Stronger than trust

A witness does not ask you to believe the log is honest. It gives you the means to catch it if it ever is not.

Keep your own watch on our log.

Run a witness, co-sign what you see, and turn the integrity of the audit trail into something you check, not something you trust.