WITNESS POLICY
Our log, log.markovianprotocol.com, publishes its current state, and outside witnesses sign it. This page lists which witnesses count, how many are needed, and how to check all of it without trusting us.
A state counts as witnessed once at least 4 of the 7 witnesses below have signed it, and the signatures check out (Ed25519). With fewer than 4, treat it as signed by us only, with no outside guarantee that we didn't rewrite history.
Witnesses sign once an hour, so a new record can sit for up to about an hour with only our signature, until the next witnessed state covers it. During that hour it's in the log but not yet witnessed.
We copied each witness's key from its operator's own page, never from our own log.
| witness.navigli.sunlight.geomys.org | navigli.sunlight.geomys.org |
| witness.stagemole.eu | witness.stagemole.eu/about |
| transparency.dev/DEV:witness-little-garden | transparency.dev/witnesses |
| staging.witness.transparency.goog/ring-any-bells | transparency.dev/witnesses |
| rgdd.se/poc-witness | rgdd.se/poc-witness/about |
| witness1.smartit.nu/witness1 | witness1.smartit.nu |
| remora.n621.de | remora.n621.de |
Two of the seven also add a post-quantum signature (ML-DSA-44) next to their regular one.
Since July 2026 the log's state also carries our own post-quantum signature (ML-DSA-44, c2sp.org/tlog-cosignature, type 0x06) next to our regular Ed25519 one, so it stays checkable even if Ed25519 is broken one day. It doesn't count as a witness and isn't part of the 4-of-7 rule: it's us signing twice, not an outside party. Our key:
markovianprotocol.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
The live panels on our check page come from us, the same people they check, so treat them as demonstrations. Checking independently means running your own code. Here's a one-file checker with the seven witness keys written into it, and where each key came from:
curl -sO https://markovianprotocol.com/.well-known/verify_checkpoint.py # read it first — the keys and the rule are in the file python3 verify_checkpoint.py
It fetches the live state, checks every signature, applies the 4-of-7 rule, and exits with an error if the rule isn't met. A witness signature means this log only grows and has one history. It doesn't vouch for anything written in it, and it isn't an endorsement of us.