BlindOracle — Independent Attestation
SOC2-style control families, each backed by cryptographic proof you can verify yourself. This is not a SOC2 certification — it is proof-backed attestation. Every control links to a real on-chain or signed-proof artifact.
4/4
control families attested
161
cryptographic proofs backing them
Base
on-chain anchor network
2026-06-20
generated
How to verify: AuditAnchor contract
0x3Dc9AF8d…c5d3D0 on Basescan ↗.
Every proof id below resolves in our public proof feed; anchored controls resolve to a real Base transaction.
A buyer's own AI cannot self-issue these — that is the point of independent attestation.
| Control | Criterion / What we attest | Proof rail | Status | Verify |
|---|---|---|---|---|
| CC1 Control Environment |
Authority is cryptographically delegated, not self-asserted Every agent action traces to a signed delegation from operator-root via an unbroken HMAC chain (ProofOfDelegation). No agent grants itself authority. |
kind 30014 78 proof(s) |
ATTESTEDd5b46a10a698565440f197be… |
verify_record() the ProofOfDelegation HMAC; walk delegator_passport_hash back to operator-root |
| CC4 Monitoring Activities |
Independent audits are content-hash-sealed and tamper-evident Each audit emits a signed ProofOfAuditReport (30105) binding the report's content hash, so findings cannot be silently revised after issue. |
kind 30105 30 proof(s) |
ATTESTEDso-30105-847e600bf4ce… |
re-hash the report content and compare to audit_hash in the 30105 proof; verify the HMAC signature |
| CC8 Change Management |
Configuration baselines are snapshotted and provenance-tracked System configuration is captured as signed ProofOfConfigSnapshot (30109) receipts, giving a verifiable baseline + change history. |
kind 30109 51 proof(s) |
ATTESTEDso-30109-deecce224895… |
compare the config_snapshot hash across two 30109 receipts to see exactly what changed and when |
| A1 Availability / Integrity |
Critical state is anchored on-chain to an independent witness State commitments are anchored to the AuditAnchor contract on Base (ProofOfStateAnchor 30106), so integrity does not depend on trusting BlindOracle's own logs. |
kind 30106 2 proof(s) |
ATTESTEDso-30106-cc37a3d7409b… |
verify on-chain ↗ |