SAP OData tenant
LIVE/sap/opu/odata/sap/API_PURCHASEORDER_PROCESS_SRV
Offline integrity layer · v1.7.0
Proof over trust.
Live HMAC-SHA256 chain and domain-separated Merkle tree, bit-identical to mattboyer725-dev/verityx-local-core at 0188c84. Not a mesh peer. No public write route.
Chain verified0188c849fc44
core_eventschain verified
01artifact.record6fa919adb8…5868fb
02decision.record8a6ca80dee…5f8eb2
03artifact.recordbf1ce06f3a…53420e
04decision.recordf61d7af136…2db433
128
Python tests (v1.7.0)
8
Signed events
8
Merkle leaves
0
Public writes
Live adapters on this host
Reference prices
REFERENCE/api/oracle
ESG scorecard (21 criteria)
STALE/ecovadis/api/v2/scorecards
Media-risk heat
STALE/prewave/api/v1/risks
SCREEN stack
STALE/api/adapters
Lot custody ledger
LIVE/api/circulor/lots
PBFT cluster
LIVE/api/pbft
OIDC workforce IdP
LIVE/oauth2/default/.well-known/openid-configuration
Integrity, live.
GitHub pin verified. Merkle fixtures match merkle.py (empty root 64 zeros, leaf 0x00, pair 0x01). Events persist to Postgres on Neon; preview uses PGLite. Fail-closed replay — a damaged chain refuses append.
01 / AUTHENTICATE
Content-derived hashes
HMAC-SHA256 over canonical JSON, then SHA-256(canonical || signature).
02 / INCLUDE
Merkle proofs
Last leaf f61d7af136…2db433 · valid true
03 / DOCTOR
Self-check
overall ok · secret ok · chain ok
One hard boundary.
Local Core remains the continuity plane. This desk hydrates and appends through a typed JS port, then persists rows. It never gossips, never joins MESH_PEERS, and never exposes a public write API.
Local trusted host
- Signed append-only event log
- HMAC secret (32+ bytes)
- Backup, restore, ritual CLI
- Loopback-only read API
This deployed surface
- Live doctor + Merkle snapshot
- Postgres persistence (Neon)
- No mesh role, no gossip
- No public POST to the log
Merkle root
HMAC-SHA256 + Merkle SHA256 domain-separated (0x00 leaf / 0x01 pair)f567929928d325ca5fa1424230ed1d9aa7b6a443b5428359f75e26f91cd989b9
tip proof · index 7 · VALID · path 3 · f61d7af1368e…2db433