The Onramp
Claim a real, sovereign identity — yours, on your device, verified to an independent trust root. Minutes, phone-only, no account.
Power is earned rung by rung — a low front door, laddered rights above it. Every refusal names its reason. Nothing about you is stored by this page; your private key never leaves your device.
Your sovereign identity · tier 1
The credential (writer cert, chain to the sovereign root)
Verification runs entirely in your browser: your credential's signature is checked against the issuer key bound inside the Master-signed delegation, and the delegation's signature is checked against the published sovereign root — no server involved.
Root of trust (Master-1, Ed25519, published):
Seven roots are published during the rotation to hardware custody — the three retiring and the four active. Anything minted here verifies under one of them, and the signed authoritative copy is at trust-root-config.json:
rosalink-sovereign-master (retiring)
61633b5fe9ffac90c438139566277782e1e99222d83252d4da351cd1a27c27e6
rosalink-sovereign-master (retiring)
bcf618694ea1943cacb288657c63061fb9c7a9181f0c64dabae12b3d24d21be8
rosalink-sovereign-master (retiring)
ebbae064291155eb8204cc049c1a3c412e6a1b3fdd558d26fb9202b5eee4c004
rosalink-sovereign-master-v2 (active)
fee87d7fa61ea7f4b3300c07359af574c9970cefba105b430a1e7930e148a30a
rosalink-sovereign-master-v2 (active)
0280a34b7c1749f7fb12060c25fa0035b9c92dbf1f4e122fd24b2b4eb86a84fa
rosalink-sovereign-master-v2 (active)
acf1a624ccf635ac4997f7c6d433b9b0ad3cf0e5859ec5e2c8ba8ed1de71029c
rosalink-sovereign-master-v2 (active)
4e8faa68e5d81fa4756d13c12d8678ab123bf0cc6e4c87580b47bf75b332a730