document repository — transparency log identity
This page publishes the identity of the append-only log that records every
operation in this repository. A client pins the set of keys below;
it accepts a new one only through a transition statement signed by a key it
already trusts.
Current key
- logId
- 74648e9a4e46829a051482d2a1c1f77befd3172e96dc0ef8cde7d15bf966566d
- logSigPub_b64
- MMc03asXHRNjhq7rkUZuzGmBNb2yFAn0muZlmC5WjvE=
- alg
- ed25519
- custody
- kms-hsm
- signing from tree size
- 1
Latest signed tree head
- treeSize
- 1324
- rootHash_hex
- 57c0f15550ed685051da07816dc9bfc35ae1446d0c88656af8cf5c15765e54ed
- ts
- 2026-11-09T02:30:27.832436695Z
- prevSthHash_hex
- 0bc57056d3d38d773a92701c3bf38203fb4c1c06fda6cdb1f5dae69887fa2723
- sthHash_hex
- a477237bac830e065705578ce37a313586f4eaa59c55f13116678be7ab22f2dd
- sig_b64
- DE4TpYWUhW0uDFSE5ecjCWd5Cfvv8I3nqkxI+BkzARUVRmTn/CDszRVNKOj4YsiV9UWOSbIbyZNkb37QW8RCBA==
Signed input: canonical({logId, prevSthHash_hex, rootHash_hex, treeSize, ts, v}), v = 2. sthHash_hex and sig_b64 are not part of it.
Key history
| logId | public key | tree sizes | introduced by |
|---|
| 74648e9a4e46829a051482d2a1c1f77befd3172e96dc0ef8cde7d15bf966566d | MMc03asXHRNjhq7rkUZuzGmBNb2yFAn0muZlmC5WjvE= | 1 – current | first key |
Verifier releases
No verifier release has been published yet. When one is, its version, file name and SHA-256 appear here, and every evidence package carries the same binaries, their hashes, the verifier source for that exact version and the rebuild recipe.
Endpoints
- keys
- https://api.docs.itix.eu/v1/log/keys
- latest head
- https://api.docs.itix.eu/v1/log/sth
- inclusion proof
- https://api.docs.itix.eu/v1/log/proof/inclusion?seq=
- consistency proof
- https://api.docs.itix.eu/v1/log/proof/consistency?first=
- gossip
- https://api.docs.itix.eu/v1/log/sth/observed
- this page as JSON
- https://docs.itix.eu/.well-known/docrepo-log.json
Two validly-signed heads at one tree size with different roots are proof of misbehaviour, not suspicion. Report what you were served to the gossip endpoint; it is unauthenticated by design.