One root over everything you have sealed, recomputable by anyone
checkpoint/1 — a Merkle tree head over the sealed claims an organisation already publishes. RFC 6962 hashing, inclusion and consistency proofs, verifiable offline against the fragments themselves.
A Merkle tree head over the claims you already publish — what shipped, what you intend, what your directory says — so a reader can recompute one hash and see whether your record still describes what you said it did. RFC 6962 verbatim rather than a house variant, and the estate tier is a tree over other heads’ roots, so a hub holds hashes and no data and a property can still prove its own record with the hub absent.
Installing it puts this command on your path — read from the package’s own manifest, so this list cannot drift from what you actually get.
flashy-checkpointApache-2.0, read from the package’s own manifest. Embed it in anything, including closed software — that is what makes a spec adoptable and a verifier worth running. FlashyOS’s server side is AGPL-3.0-only instead, and a test in the monorepo asserts the direction between them: AGPL code may consume this, this may never consume AGPL code.