# BitSeal

> BitSeal is a cryptographic register for proof-of-existence. It hashes a file in the browser with BLAKE3, signs the Merkle root with Ed25519, records the signed manifest to a public ledger, and anchors each seal to Bitcoin via OpenTimestamps. Anyone can verify a seal offline, years later, using any BLAKE3 and Ed25519 library. The file bytes never leave the device. Built and operated by Orygn LLC.

## Product

- [BitSeal home](https://bitseal.orygn.tech/): Product overview, three-axis verification model, data-boundary guarantees, and the case for using a signed cryptographic register instead of a trusted notary or a blockchain wallet.
- [Seal a file](https://bitseal.orygn.tech/seal): Drop a file in the browser to compute a BLAKE3 Merkle root locally, receive an Ed25519-signed manifest from the Authority, and download a PDF proof certificate. The file bytes never leave the device.
- [Verify a root](https://bitseal.orygn.tech/verify): Paste a Merkle root or upload a manifest to re-check the three verification axes against the ledger and the OpenTimestamps Bitcoin anchor.

## How it works

- [Security architecture](https://bitseal.orygn.tech/security): Threat model, cryptographic primitives (BLAKE3, Ed25519, SHA3-512, OpenTimestamps), key governance, and what BitSeal does not promise.
- [Documentation](https://bitseal.orygn.tech/docs): Technical documentation for the protocol, the manifest format, and the independent verification path.
- [Quick start](https://bitseal.orygn.tech/docs/quick-start): Seal one file and verify it two ways (web + CLI + offline) in under five minutes.
- [Architecture](https://bitseal.orygn.tech/docs/architecture): Client-side hashing pipeline, the Authority signing path, the ledger, and the Bitcoin-anchor upgrade loop.
- [Verification](https://bitseal.orygn.tech/docs/verification): Three-axis verification (ledger presence, Ed25519 signature, Merkle consistency) plus the bonus Bitcoin anchor axis via the SDK.
- [API reference](https://bitseal.orygn.tech/docs/api-reference): POST /api/seal and GET /api/verify, their manifests, and the Cloudflare Turnstile contract.

## SDK and tooling

- [BitSeal-SDK on GitHub](https://github.com/OrygnsCode/BitSeal-SDK): Open-source Python SDK for sealing and verifying files from the command line. MIT licensed. The `verify.py --ots` flag re-checks the Bitcoin anchor against mempool.space with no trust in Orygn.
- [Well-known authority key](https://bitseal.orygn.tech/.well-known/bitseal-authority.json): Machine-readable pointer to the current and historical Ed25519 public keys used by the Authority to sign seals.

## Operations

- [Status](https://bitseal.orygn.tech/status): Real-time operational health of the Authority, the ledger, and the OpenTimestamps upgrade cron.
- [Changelog](https://bitseal.orygn.tech/changelog): Versioned history of protocol and platform changes.

## Governance and legal

- [Key ceremony](https://bitseal.orygn.tech/legal/key-ceremony): Public record of the Ed25519 key generation ceremony, including the attestation PDF signed by the new key on its first day of service.
- [Rotation policy](https://bitseal.orygn.tech/legal/rotation-policy): Scheduled annual rotation cadence and emergency rotation triggers.
- [Privacy](https://bitseal.orygn.tech/legal/privacy): What BitSeal sees, what it does not, who processes data on our behalf, and the rights you have over that data.
- [Terms of Service](https://bitseal.orygn.tech/legal/terms): The binding agreement between you and Orygn LLC.

## About

- [Published by Orygn LLC](https://orygn.tech/products/bitseal): BitSeal is built and operated by Orygn LLC, a Texas software and security company based in the Houston area.
- [Orygn company site](https://orygn.tech/): Parent company. Custom software, workflow automation, and security-minded systems for small businesses.
- [GitHub organization](https://github.com/OrygnsCode): All open-source BitSeal and Orygn repositories.

## Optional

- [Security disclosure policy](https://bitseal.orygn.tech/.well-known/security.txt): Security contact and disclosure policy per RFC 9116.
- [Full LLM-friendly content](https://bitseal.orygn.tech/llms-full.txt): Expanded markdown for deeper ingestion.