ProofChain API
Tamper-evident audit logging

Cryptographic integrity
as a verifiable API.

ProofChain accepts events, computes deterministic hashes, seals them into Merkle blocks, signs roots with Ed25519, and returns independently verifiable proofs. This page is both a portfolio piece and a live control surface for the deployed system.

Base URL loading…
Endpoints —
Signing Ed25519
Hashing SHA-256
01 — Interactive API showcase

Send live requests from this page.

Choose a preset, adjust the path or body, then send. Public routes respond immediately. Protected routes surface the expected auth contract without requiring credentials.

Request Live
Response
Waiting 0 ms
{
  "message": "Choose a request preset and press Send."
}
02 — Surface area

Every route is documented and inspectable.

The deployment publishes a machine-readable index at /api. This table mirrors that contract.

Method Path Description Auth
Loading routes from /api…
03 — Integrity flow

How the system proves tamper evidence.

Verification can happen entirely outside the server. The public API exposes every artifact needed to recompute membership, validate signatures, and inspect anchor continuity.

1

Ingest

Clients post immutable event envelopes. Each receives a deterministic SHA-256 hash computed from canonical JSON.

2

Seal

Pending events are ordered into blocks, rooted with a Merkle tree, and signed with Ed25519 using a versioned key.

3

Anchor

Sealed blocks are chained into append-only transparency checkpoints available for public inspection.

4

Verify

Any client can fetch a proof envelope and independently verify membership, signature, and anchor integrity.