Witness-DAO

Free today

Pricing

Every surface on this site is free and anonymous: the readiness scan, the offline verifier, the docs, the remote MCP server and the A2A skills. There is no account, no wallet connection and no payment.

The rule that governs every tier below. Paid tiers are metered by volume and window length only. A paying caller and an anonymous one receive identical verdicts, identical caveats and the identical refusal to over-claim. No grade, no verification state and no caveat will ever depend on whether an invoice was paid.

Readiness scan

Free

Read your governance and find out what it could prove. No account, no wallet, no key, no writes.

  • Snapshot spaces and Gnosis Safe multisigs
  • Binding confidence for every governance action
  • The evidence ceiling each action could reach, and what limits it
  • Offline verification of any proof bundle
  • Full library, CLI and stdio MCP server under Apache-2.0
  • Read-only remote MCP and A2A access for your agents

Honesty gate. Produces a scan, never evidence. Nothing is sealed, no record is created, and no wallet address is retained.

Sealed

Free

Self-serve key from VDA Witness. Signed, hash-chained, offline-verifiable records. For development.

  • Everything in the readiness scan
  • Sealing to signed, hash-chained records
  • Offline verification against the published DID document
  • 5,000 seals per month

Honesty gate. NOT compliance-grade, and the state is terminal — Sealed records never become anchored later. The library refuses to build an evidence report from them by default, and that refusal is deliberate.

Anchored

Waitlist

Externally committed to Bitcoin, RFC-3161 timestamping authorities and optionally Rekor. The tier that can carry a liability-defence pack.

  • Everything in Sealed
  • Bitcoin anchoring via OpenTimestamps, plus RFC-3161 timestamps
  • Governance evidence reports and liability-defence packs
  • Erasure, retention, residency and supersession controls
  • Trust pins, so ANCHORED_VALID and PROVEN become reachable

Honesty gate. Compliance-grade once anchors confirm AND you have accepted a trust-pin set. Until pinned material is supplied, records legitimately cap at SIGNED_PENDING and every report says which material is missing.

Waitlist — see below

Managed

Talk to us

We run the four scheduled jobs and custody the anchor proof material. Contract first.

  • Everything in Anchored
  • Scheduled sealing, retry drain, anchor upgrade and key renewal
  • Backup and restore drills for the anchor proof material
  • Processor contract, sub-processor register, residency selection

Honesty gate. Changes the data-protection roles: we become a processor of your voters’ personal data and custodian of the one file that cannot be reconstructed. Requires a processor contract, and we will not sell it until the upstream platform ships a deletion capability.

Waitlist — see below

Why Anchored is a waitlist and not a buy button

Two things must be true before this product can honestly take money for evidence, and neither is true yet.

  1. No wire format has been exercised against a live endpoint. The anchoring code has never round-tripped against a real DigiCert, Sectigo, OpenTimestamps calendar, Rekor or Witness endpoint. The implementation is deliberately conservative — an unusable certificate yields not_checked, never a false pass — but a wire-format surprise would silently downgrade every anchor, and selling anchoring before that is checked would be selling something nobody has watched work.
  2. Trust pins do not exist yet, so PROVEN is not reachable. Verifying an anchor needs material pinned in advance, and shipping a default “trusted” root would reintroduce the vendor trust the whole design removes. The answer is a separately published, explicitly accepted pin set whose identity is named in every report — so a third party can dispute the pins rather than the verdict. Until it ships, records legitimately cap at SIGNED_PENDING.

Both are weeks of work rather than quarters, and both are visible in LIMITATIONS.md. Publishing the reason a tier is not for sale is cheaper than explaining afterwards why it did not do what someone assumed.

Sealing will not be offered from this site

Sealing will not be offered from this hosted surface. Sealing needs your Witness credential and your git-held rules directory, and a decision recorded without the rule that authorised it is a log line, not governance evidence. Run it yourself, or talk to us about the managed tier.

The same applies to the liability-defence pack, permanently and for a different reason: it is a behavioural profile of an identified natural person, and it stays where a controller can govern it — on your machine, behind a mandatory recorded purpose and a local access log. See DATA-PROTECTION.md §11.

Want the Anchored tier when it opens?

There is no signup form here, because collecting an email to say “we will tell you later” is not worth a database. Install the package, run npx witness-dao selftest, and if it fits, reach out through https://getvda.ai. Design partners with a legal wrapper, a Safe and a Snapshot space are exactly who this needs.

Pricing · Witness-DAO