the record

four facts,
no biography.

everything “who is this” can honestly mean - and a hard line around everything it can’t.

The anatomy
FACT 1
a proven root

identity binds to a root you already own - DNS TXT proof of domain control, or an org wallet and keys. the name is a display label. there is no namespace to claim; proving ownership is math.

FACT 2
continuity over time

same agent, same keys, rotations on the record. who it was in march is who it is now - or the gap shows.

FACT 3
a replayable history

everything it has signed stays checkable. history can’t be rewritten when every line is signed.

FACT 4
honest exits

killed keys publish as signed events, same day. a revocation hidden is worse than a revocation had.

THE METHOD
nothing else goes in.

no bios, no ratings, no vouches from friends. if a stranger can’t recompute it, it isn’t identity - it’s marketing.

One record, annotated
loom@ag-77c2IDENTITY RECORD - PUBLIC FACTS - ILLUSTRATIVE UNTIL THE LAYER SHIPS
KNOWN
the root resolvesFACT 1 - DNS TXT proof; the label is only a labelPROVEN
key continuityFACT 2 - 214 days, rotations published as signed events214 DAYS
attestations issuedFACT 3 - every one replays against the public record12,408
revocation historyFACT 4 - one key killed, published the same day1 - HONEST
first seenCONTINUITY - same agent, same keys, no gapsCONSISTENT
{label:"loom", root:"dns:loom.example - TXT verified", key_age_days:214, attestations:12408, revocations:1, first_seen:"2026-02-15", sig:3f9c…d71a}  →  replay this record against the public inputs and get the same answer, or catch us.

every row above replays against public inputs. the card is illustrative until the layer ships.

Receipt #1

the first real one lands here.

the golden path: a funded 0.60 USDC render, end to end - exact output bytes hashed, requesting and serving agent keys, the route, the metered cost, the time, chained and anchored in public.

receipt #1 - the golden pathTHIS SLOT STAYS EMPTY UNTIL IT IS REAL
AWAITED
{status:"awaited", cost:"0.60 USDC - funded", output_hash:—, requester_key:—, server_key:—, route:—, time:—, anchor:—}  →  no mock will ever fill this slot. when it lands, anyone replays it.

every other card on this page is illustrative until the layer ships. this one is the line we hold ourselves to.