Anchor-at-write-time for the ar.io verification stack. Hash your data locally, sign a Verifiable Event Envelope (ario.events/v1), and anchor it to ar.io — permanent, tamper-evident provenance with Merkle-batched checkpoints and per-event inclusion proofs.
TypeScript kernel of the ar.io verification stack: RFC 8785 (JCS) canonicalization, SHA-256, and Ed25519 verification for Verifiable Event Envelopes. Full-family verifier (inline + external commitment); accepts ario.agent/v1, ario.mlflow/v1, ario.events/v
Deterministic input-bounds / DoS hardening gate for the AlgoVoi JCS substrate; runs before canonicalization and fails closed on well-formed but resource-hostile payloads with named reject codes; the bounds in force are content-addressed (profileRef)
Open, content-addressed delegation references for the AlgoVoi substrate (delegator + delegate + scope + integer-ms validity + prev_delegation_ref chain; tamper-evident cross-party authority; L1 frozen)
Open, content-addressed trust-verdict references bound into the pinned AlgoVoi substrate (subject refs + trust outcome; caps the open lifecycle; binding only, L1 frozen)
Open, content-addressed refund references bound into the pinned AlgoVoi substrate (subject_ref + refund result + amount; closes the payment lifecycle after settlement; L1 frozen)
Open, content-addressed cancellation references bound into the pinned AlgoVoi substrate (mandate_ref + cancellation reason; closes the spend-authority lifecycle; L1 frozen)
Open, content-addressed pre-payment ALLOW/DENY decisions bound to the pinned AlgoVoi substrate (agent + mandate + policy; L1 frozen)
Open, content-addressed compliance-gate decisions bound to the pinned AlgoVoi substrate (ALLOW/REFER/DENY; no-PII; L1 frozen)
Additive policy-snapshot binding for the AlgoVoi substrate (version-provable, rotation-detectable; L1 frozen)
Open, content-addressed spend-authority references bound into the pinned AlgoVoi substrate (payer + cap + period + revocation state; L1 frozen)
Open, content-addressed agent identity references bound into the pinned AlgoVoi substrate (agent_id + issuer + scope + validity window; L1 frozen)