Verification Console

Guest access — try it immediately.

Password

Incorrect login or password.

Guest login — guest / groundmark2026

Public preview · back to groundmark.org

Groundmark · DNS-anchored operator accountability

Verification Console — public demo

Groundmark · discussion draft
one verification library, three attestations

Fixture

RP level floor

Step Inspector

Awaiting run

Press Run verification to play the flow, or Step ▸ to advance one message at a time. Click any lit step to inspect it.

Verdict

Relying-party decision

— PENDING —

Flow not yet complete.

Level achieved—

RP level floorL1

Signature / DNSSEC—

method_disclosure

surfaced on completion

The verdict surfaces how the claim was checked rather than collapsing to accept/reject — the relying party reads the method and applies its own floor.

signed msg Groundmark request / response

DNS DNSSEC-validated lookup

local verifier-internal, no network

seam non-Groundmark boundary

L0 core shared Level-0 spine (all scenarios)

Reading them together

One verification spine, three attestations

The opening steps of every scenario are the identical Level-0 core: resolve _agentid over DNSSEC, then verify the RFC 9421 request signature. Everything after is the same attestation machinery pointed at a different IDSP — a registry, a SaaS platform, or a licensing authority — carrying a different claim at a different level.

Registry

▣ Level-0 core

1 RFC 9421 signed request

2 resolve _agentid (DNSSEC) → key

3 verify signature → Level 0

attestation machinery

4 resolve _agentclaim → ref

5–8 validate registry attestation → L1 + presence

Platform

▣ Level-0 core

1 RFC 9421 signed request

2 resolve _agentid → verify sig → Level 0

attestation machinery

3–5 validate platform binding · display-name is not a trust basis

6–8 boundary: same attestation verifies cold at an external RP

Regulatory

▣ Level-0 core

1 RFC 9421 signed request

2 resolve _agentid (DNSSEC) → key

3 verify signature → Level 0

attestation machinery

4–5 fetch licensing-authority attestation

6–8 validate → L3 professional licence, current

It is not three builds. It is one library wearing different actors and floors. The green L0 core markers in the flow show this spine live as you run any scenario.