Transparency
- The statutes and governance principles are public.
- An activity report is published after each financial year.
- All funds are irrevocably dedicated to the non-profit purpose; no distributions to members, founders or Board members.
- Conflicts of interest are disclosed; remuneration and expenses are regulated and documented.
- On dissolution, remaining assets go to a tax-exempt Swiss institution with the same or a similar purpose.
Public record
Everything we publish and change is recorded in public, like code: github.com/gravit-open-network-foundation.
- Every change comes as a pull request, with its reason, and stays visible whether it is accepted or not.
- Nothing is rewritten. Mistakes are corrected by adding a correction (History Keeper).
- Candidates for future protocols and infrastructures are proposed the same way, with test cases.
The aim goes back to 2015 and Decipial, a set of decentralised principles. Methods and technologies have changed, the aim has not: to make information, including protected information, accessible to every person and to guard it. "Human dignity shall be inviolable." (German Basic Law, Article 1).
Security and standards
Our tools build on open, published standards. We say exactly which ones, and how far we are. Nothing here is a certification.
- In use: Ed25519 signatures (RFC 8032); SHA-256 and SHA3-256 fingerprints (FIPS 180-4, FIPS 202); a public receipt log with Merkle trees (RFC 9162); timestamps from three independent authorities (RFC 3161); connections with the post quantum key exchange ML-KEM (NIST FIPS 203).
- In progress: post quantum signatures ML-DSA (NIST FIPS 204) as a second signature next to Ed25519.
- Planned: hash based signatures SLH-DSA (NIST FIPS 205) for long term proofs.
Signatures made today must still be checkable in decades. So we are moving to NIST's new standards step by step, with public test vectors. Our protocols are Internet-Drafts at the IETF; we follow NIST's work on post quantum cryptography and on the security of AI agents and will take part in its public comment periods. We are not affiliated with or endorsed by NIST. Live status: gravitverifier.space.