Entropy Protocol Check a passport

Texts with a passport

Every text deserves a passport.

An AI model wrote the text below inside a confidential NVIDIA H100. Its passport records where, by which model and when. Your browser checks that not one character has changed, and points to the sentence if one has.

The text

According to the latest figures from the bureau, the national unemployment rate has dropped to 5.5%. While this is a promising sign, it's important to remember that it doesn't paint a complete picture of the job market. For example, many people who have lost their jobs during the pandemic have not yet returned to the workforce. Furthermore, the data suggests that many who are employed are still working part-time or in lower-paying positions than they were before the pandemic. Additionally, the job market varies greatly depending on location and industry. Some regions and sectors, such as technology and healthcare, have seen significant growth, while others, like hospitality and travel, continue to struggle. It's also worth noting that while the unemployment rate has improved, it is still higher than it was pre-pandemic. This highlights the ongoing challenges faced by both job seekers and employers as we navigate through this economic recovery. In conclusion, while the drop in the unemployment rate is a positive development, it is crucial to remain cautious and closely monitor the job market to ensure

Checkingreading the seal in this browser
Entropy Protocol · passport of a textEP1
16 checkpoints · solid: the model’s first choice
Document no.
pA_ljQGmYBgM5KZ-
Written by
Qwen2.5-7B-Instruct
Weights
fd024e4f…
Written on
NVIDIA H100, confidential mode
Inside
AMD SEV-SNP machine
Sealed
27 Oct 2026 · 17:44:07 UTC
Sentences
9
Log entry
39 of 40
Checked in
this browserVerified47 hardware checks
  • The sealing key’s signature on this text’s statement
  • The seal’s record is the one that statement commits to
  • The verifier’s signed verdict on exactly this text

The five stamps

Every stamp, checked again here from AMD’s and NVIDIA’s own roots.

The evidence for this text is one 285 KB file. Your browser runs the reference code on it: 47 checks of the hardware, the signatures, the log and the clock.

0.0 s
  1. Python ready
  2. reference library
  3. evidence file
  4. verdict

Python and the reference library come from this site: about 18 MB the first time, then from your browser’s cache. Nothing is sent anywhere.

AMDSEV-SNP

Processor

The report of the machine chains to AMD’s root; firmware at or above AMD’s minimums.

ARK Genoa 4c6598d1…not checked yet
H100NVIDIA

GPU

Confidential mode on; driver 595.91.07 and VBIOS 96.00.9F.00.04 equal NVIDIA’s signed values.

device root 102bf659…not checked yet
48checks

Authority

Boot (9), model and key (8) checked too; the sealing key certified 17:37:19 UTC.

root bfb434b1…not checked yet
39/40log

Public log

The statement about this text is entered in a transparency log.

root 840bafd8…not checked yet
17:44UTC

Time

An independent time-stamping authority signed when the statement existed.

27 Oct 2026not checked yet
35passed0failed5for you to decide: whose root to trust (the authority’s fingerprint is bfb434b109665e5a…), the time-stamping authority’s own chain, and re-reading the text with the model
What ran in your browser
  • wheels/cbor2-5.9.0-py3-none-any.whl27695cbd70c90b8d…
  • wheels/entropy_protocol-0.1.0-py3-none-any.whl6f632c8ba59c046c…
  • wheels/signxml-5.2.0-py3-none-any.whl47667e55d3bf974b…
  • pyodide/pyodide.mjs6f1d60f7bf529beb…
  • pyodide/pyodide.asm.mjsf7cdc8ece80678ce…
  • pyodide/pyodide.asm.wasmcc36e3cab04fdfc9…
  • pyodide/python_stdlib.zipfa1957e5777068fc…
  • pyodide/pyodide-lock.json5dc2fc119108bc14…
  • pyodide/certifi-2026.4.22-py3-none-any.whlc2c0091986db798d…
  • pyodide/cffi-2.0.0-cp314-cp314-pyemscripten_2026_0_wasm32.whl9ae1a61096321cef…
  • pyodide/cryptography-47.0.0-cp314-abi3-pyemscripten_2026_0_wasm32.whl0b41491ced2cf850…
  • pyodide/lxml-6.1.3-cp314-cp314-pyemscripten_2026_0_wasm32.whl6a0b98f57a538cb6…
  • pyodide/micropip-0.11.1-py3-none-any.whle2d52886594fd4cd…
  • pyodide/pycparser-3.0-py3-none-any.whl0b4cbc12c42e25df…
  • pyodide/six-1.17.0-py2.py3-none-any.whl228c50f73aa7addf…

How it works

A seal made while the text is written, checked wherever the text goes.

1

Sealed as it is written

At 16 points in this text the model’s own choice was recorded: its first choice, or not. The record keeps those positions and choices and no words.

2

Signed inside the hardware

The key that signed this text exists only inside the confidential machine. An authority checked 48 facts about that machine before it certified the key.

3

Checked anywhere

The passport, the signatures and the hardware evidence travel in one file. Your browser checks it here; a command line checks it the same way.

On our GPU

Issue a passport. Hold any text to the light.

These two run on our demo GPU: an ordinary cloud GPU, not attested, with keys of its own. Attested passports, like the one above, come from confidential H100s.

Issue a passport demo GPU · not attested

Watch the H100 seal the text above, at its real pace

PromptContinue the following text with one or two paragraphs: According to the latest figures from the bureau,

According to the latest figures from the bureau,

200 tokens · 14.8 s16 checkpoints

Hold it to the light no passport needed

1 in 536,870,912recorded on the H100 for the text above: 29 of 29 checkpoints agree

The detector reads only the text, under the demo GPU’s key, and gives the exact chance that a text not sealed with that key looks like this. It calls a seal found below 10⁻⁶. It finds texts this demo GPU sealed.

2,127,680

checks of human and unsealed texts against keys: at every threshold from 10⁻² to 10⁻⁵, false alarms ran at 0.63–0.75 of the exact bound.

bench/results/phase_c
2,304

verifications of unchanged text on four GPU architectures: all verified, none falsely “modified”.

bench/results/phase_b
47/48

hardware checks re-run in your browser; the 48th is the authority’s one-time ticket.

bench/results/attested
0

bytes of your text sent when you check or edit it.

assets/ep1-web.js

Check it yourself

Two commands, no account, no server of ours.

$ pip install "entropy-protocol[attested]"
$ curl -LO https://raw.githubusercontent.com/entropy-ep1/entropy-protocol/main/bench/results/attested/run-20261027T172258Z/packs/pA_ljQGmYBgM5KZ-.cbor
$ entropy evidence --check pA_ljQGmYBgM5KZ-.cbor