Public trust material

AttestLayer Public Registry

AttestLayer Public Registry is the public trust surface for AttestLayer-issued PASS attestations recorded through the production registry path.

Recorded kits include signed checkpoint material, Merkle inclusion proof material, and timestamp data.
The registry is read-only and unauthenticated.
Anyone can inspect public verification material.

Not technical? Start with Verify instead.

Why a non-technical reviewer might open this page

Confirm that AttestLayer exposes public verification materials
See that issued packages connect to a public log surface
Inspect keys, checkpoints, and transparency materials if needed

Reviewing a kit?

Use Verify if you already have a kit.zip. Most reviewers do not need raw registry endpoints.

Doing trust review?

Use this registry for JWKS, checkpoints, proofs, and public transparency material.

Need the output format first?

Review the sample kit before diving into log structure or proof endpoints.

Current trust model

Registry statusLive and publicly readable

Checkpoint statusSelf-issued by AttestLayer

Checkpoint keyregistry.jwks.json

Receipt keyissuer.jwks.json

External witnessingNot active

External anchoringNot active

Common Actions

Verify a kit: verify.attestlayer.com — upload kit.zip to verify manifest + receipt (how to verify in 60s)
Fetch JWKS: /v1/jwks/registry.jwks.json — checkpoint-signing public keys (for receipt verification use issuer.jwks.json)
Latest checkpoint: /v1/checkpoints/latest.json — current signed tree head
Inclusion proof: GET /v1/proofs/inclusion?leaf_hash=X — prove a leaf exists in the tree

Registry Monitor

Latest checkpoint: TpJM49kkWkpK… Tree size: 51 Last append: 2026-05-19T16:17:27Z Root hash: Git_PxjzWfhm… Signer kid: 816ad5318642ff0a

Sample entry

PASS attestations recorded through the production registry path produce a log entry like this:

{
    "leaf_hash": "a607c657e0a388d05a7b9681111d70605cfc0a5a5afd93f2767d9566469dafac",
  "receipt_id": "samplekit00000001",
    "manifest_sha256": "39ab3d2e5bd21b5a948e778dfa3a0dbc12671d3a897d8fc56b6205fe6e2f00b6",
    "issued_at": "2026-04-25T00:36:00Z",
  "receipt_kid": "8adefa300a1059bc"
}

This is the sample kit entry.
Real entries follow the same structure.
Need the sample files? Download the local sample verification kit.

# Fetch latest signed checkpoint
curl -s https://registry.attestlayer.com/v1/checkpoints/latest.json | python3 -m json.tool

# Verify inclusion of a leaf
curl -s "https://registry.attestlayer.com/v1/proofs/inclusion?leaf_hash=YOUR_LEAF_HASH"

# Check consistency between two checkpoints
curl -s "https://registry.attestlayer.com/v1/proofs/consistency?from_size=OLDER_SIZE&to_size=NEWER_SIZE"

Core Log

GET /v1/entries/{leaf_hash}.jsonLeaf record by hash

GET /v1/statsRegistry statistics (tree size, dates, checkpoint)

GET /v1/integrityLeafStore integrity report (rolling digest, reconciliation)

GET /v1/snapshotSigned snapshot of checkpointed state (for archival/diligence)

GET /v1/logs/datesAvailable log dates

GET /v1/logs/{date}.ndjsonDaily append log (NDJSON)

Proofs

GET /v1/proofs/inclusion?leaf_hash=XMerkle inclusion proof for a leaf

GET /v1/proofs/consistency?from_size=A&to_size=BConsistency proof between two tree sizes

Checkpoints

GET /v1/checkpoints/latest.jsonLatest signed tree head

GET /v1/checkpointsList recent checkpoints

GET /v1/checkpoints/{hash}.jsonSpecific checkpoint by hash

GET /v1/checkpoints/history.jsonlFull checkpoint history (JSONL, auditor download)

GET /v1/checkpoints/chain-verifyVerify checkpoint chain continuity

Witnesses (self-witnessed; external cosigning planned)

GET /v1/checkpoints/{hash}.witnesses.jsonWitness cosignatures for a checkpoint

Anchors (not yet active)

GET /v1/anchors/External timestamp anchors

Keys / Spec / Tools

GET /v1/jwks/registry.jwks.jsonRegistry checkpoint-signing public keys

GET /v1/jwks/issuer.jwks.jsonIssuer receipt-signing public keys

GET /v1/verify-kit.zipOffline verification kit (checkpoint + JWKS bundle)

GET /v1/specRegistry specification & constants

GET /v1/spec/REG-1.0.mdREG-1.0 specification document

GET /v1/verify/chain/{date}Verify chain integrity for a date

REG-1.0 · SHA-256 + Ed25519 · CT-style Merkle tree · RFC 8785 JCS