SAP OData tenant
LIVE/sap/opu/odata/sap/API_PURCHASEORDER_PROCESS_SRV
Offline integrity layer · v1.6.0
Proof over trust.
Live HMAC-SHA256 chain and domain-separated Merkle tree, bit-identical to mattboyer725-dev/verityx-local-core at 319af22. Not a mesh peer. No public write route.
Chain verified319af22fc872
core_eventschain verified
01system.pingb14ea12557…dda9c4
02session.markae56bba914…d61b2b
03memory.setee33c2575c…90480f
04artifact.recorda1524f307f…96698d
112
Python tests
4
Signed events
4
Merkle leaves
0
Public writes
Live adapters on this host
REE desk socket
STALE/api/oracle/stream
EcoVadis scorecard
STALE/ecovadis/api/v2/scorecards
Prewave media heat
STALE/prewave/api/v1/risks
SCREEN stack
STALE/api/adapters
Circulor lot ledger
LIVE/api/circulor/lots
PBFT cluster
LIVE/api/pbft
OIDC workforce IdP
LIVE/oauth2/default/.well-known/openid-configuration
Integrity, live.
GitHub pin verified. Merkle fixtures match merkle.py (empty root 64 zeros, leaf 0x00, pair 0x01). Events persist to Postgres on Neon; preview uses PGLite. Fail-closed replay — a damaged chain refuses append.
01 / AUTHENTICATE
Content-derived hashes
HMAC-SHA256 over canonical JSON, then SHA-256(canonical || signature).
02 / INCLUDE
Merkle proofs
Last leaf a1524f307f…96698d · valid true
03 / DOCTOR
Self-check
overall ok · secret ok · chain ok
One hard boundary.
Local Core remains the continuity plane. This desk hydrates and appends through a typed JS port, then persists rows. It never gossips, never joins MESH_PEERS, and never exposes a public write API.
Local trusted host
- Signed append-only event log
- HMAC secret (32+ bytes)
- Backup, restore, ritual CLI
- Loopback-only read API
This deployed surface
- Live doctor + Merkle snapshot
- Postgres persistence (Neon)
- No mesh role, no gossip
- No public POST to the log
Merkle root
HMAC-SHA256 + Merkle SHA256 domain-separated (0x00 leaf / 0x01 pair)c428908dd579414b4b27a2d8bb6c7acee7557490187ee89e97dfecb990e49d9d
tip proof · index 3 · VALID · path 2 · a1524f307ff4…96698d