Launch story · verifiable · 13/09/2026

264 public-root leaves.
22 axes. 48 public corrections.

An independent measurement body publishes scoped, replayable evidence about AI systems and issued assets. Every number below is fetched live from a named endpoint. Every correction is public and append-only. No grade is for sale.

Live numbers — fetched when you loaded this page

Public-root leaves
264
listed by the signed root
Board axes
22
22 measured · 0 unmeasured
Corrections
48
appended, never edited

Merkle root: 03d0ea31b374df4c…6f515427d504ea32 · as of 2026-09-13T06:03:55.000Z

What this is, and what it is not

CSOAI Ltd (UK 16939677) is an independent measurement body. We measure and sign. We never certify, never rate, and never sell a grade. A payment buys a run, a signature, an attestation receipt — never the outcome.

The public root is an Ed25519-signed Merkle manifest of exactly the leaf hashes it lists, under did:web:csoai.org#board-attestation-1. Its witness sidecar records Rekor and OpenTimestamps state for those exact root bytes. The separately indexed signed-card catalogue is a different corpus and is not covered by that root. The corrections ledger records errors — including errors in our own tooling.

When we were wrong — a merged commit claimed a settlement was lost that was never lost — we published a public postmortem with the timeline, the root cause, and the fixes. The record of being wrong is the product.

What you can verify in under 2 minutes

Signed public-root manifest

The exact listed leaf hashes, count and Merkle root. Its scope is separate from the signed-card catalogue.

Measurement board (22 axes)

Per-axis measurement state, accuracy, and card links.

Corrections ledger

Every correction appended, never edited. Including corrections about our own tooling.

Doctrine & refusals

The red lines, published before the event that makes them quotable.

Latest postmortem

The settlement that was never lost — and the claim that was wrong.

OWASP Agentic mapping

First public commercial mapping of OWASP ASI01–ASI10 to measured controls.

In-browser card verification

Verify any signed card's Ed25519 signature without trusting us.

Anchor posture (what is signed, what is anchored)

Machine-readable state of every anchor rail, including what's missing.

Measurement, not certification. Doctrine & refusals · Honesty gate · The measurement board · /api/corrections