CMM.X Observer

Woher · verify the sealed past

Everything here is independently checkable.

The state chain is append-only and hash-linked; each published frontier carries a hybrid (Ed25519 + ML-DSA-65) signature; and the reproduce-leg re-derives the derived content from declared inputs, bit-for-bit. This is integrity + authenticity — it is not a claim about future behaviour.

Append-only state chain FRESH · 88s

frontier_seq: 70687
ledger_blocks: 52187
mmr_root: 1b49dea23aff34ef……
head seq: 70688
head state_hash: 79e37408783538b4e885707362d49d5c…
head prev_hash: 1ce51ee487652029f7783b215f3f7117…
pipeline in-sync: YES
temporally coherent: YES

source: live/…/observer_web/static/cmmx_unified_state.json · live/…/runtime/STATE_CHAIN.jsonl

Hybrid attestation (Ed25519 + ML-DSA-65) FRESH · 18s

Signed payload

version: CMMX-ATTEST-1
seq: 70687
mmr_root: 1b49dea23aff34ef3b65819e…
freeze_hash: af4587e43752c175fb825f39…
state_time: 2026-07-28T02:48:24.866605+00:00
attested_at: 2026-07-28T02:49:35Z

Signatures

Ed25519: present
Ed25519 key fp: 2001f57eee4a7a56
ML-DSA-65: present
ML-DSA key fp: a3e323f0640c5fa9

Verify recipe (from the attestation)

Hybrid: Ed25519 verify(pubkey_hex, signature_hex, canonical) AND ML-DSA-65 verify(mldsa_pubkey_hex, mldsa_signature_hex, canonical); canonical = json.dumps(payload, sort_keys=True, separators=(',',':')).encode()

Copy-paste: fetch & check the live frontier

# 1. pull the published, signed state + public keys
curl -s https://observer.cmmx.systems/api/attestation  > att.json
curl -s https://observer.cmmx.systems/api/chain        > chain.json

# 2. confirm the attested seq matches the chain frontier
python3 - <<'PY'
import json
a=json.load(open("att.json")); c=json.load(open("chain.json"))
print("attested seq :", a["payload"]["seq"])
print("chain frontier:", c["frontier_seq"])
print("mmr match     :", a["payload"]["mmr_root"] == c["mmr_root"])
print("ed25519 signed:", a["ed25519"]["signature_present"])
print("ml-dsa  signed:", a["mldsa"]["signature_present"])
PY

# 3. verify both signatures against the published public keys with the reproduce-leg verifier
#    (reproduce_leg/verifier_public — Ed25519 + ML-DSA-65 over the canonical payload)

source: live/…/observer_web/static/cmmx_attestation.json

Reproduce-leg re-derivation as-of

93.06%

of derived-content leaves (67/72)

33.5%

of all 200 leaves

MISMATCH

Reproduced = independent code path over the artifact's DECLARED inputs yields the identical value (float bit-for-bit). The rest are by-design non-reproducible (wall-clock), declared inputs, constants, or metadata — split shown, gaps listed, never fabricated.

Honest split of all 200 leaves (by-design non-reproducible shown, not hidden)

Class	Count	Meaning
REPRODUCED	67	re-derived bit-for-bit from declared inputs
UNDECLARED_INPUT_GAP	5	needs an input/rule not declared in the artifact — honest gap, never fabricated
NOT_REPLAY_DETERMINISTIC	14	wall-clock (generated_at / age) — integrity-checkable, not replay-deterministic
GIVEN_INPUT	15	declared inputs we consume (echoed, not re-derived)
CONFIG_CONSTANT	57	fixed configuration constants
METADATA	42	labels / metadata

Float-vs-exact cross-check: 39/39 agree (all_agree = True), max relative gap 1.95e-15 — the float path matched the live value, corroborated by an exact (Decimal/Fraction) path.

5 undeclared-input gaps (listed, never fabricated)

axis_payload.status — value CRITICAL
requires an input/rule not declared in the artifact (e.g. undeclared status map or u0-rebuilder input); honest gap, never fabricated.
axis_payload.tf.1d.status — value WARN
requires an input/rule not declared in the artifact (e.g. undeclared status map or u0-rebuilder input); honest gap, never fabricated.
axis_payload.tf.1h.status — value WARN
requires an input/rule not declared in the artifact (e.g. undeclared status map or u0-rebuilder input); honest gap, never fabricated.
axis_payload.tf.4h.status — value WARN
requires an input/rule not declared in the artifact (e.g. undeclared status map or u0-rebuilder input); honest gap, never fabricated.
axis_payload.u0.u0_mean — value 5230.82
requires an input/rule not declared in the artifact (e.g. undeclared status map or u0-rebuilder input); honest gap, never fabricated.

source: reproduce_leg/…/REPRODUCE_REAL_REPORT.json