anchor

Documentation

Overview

anchor pins a gateway's signed checkpoint outside the operator's control and keeps the receipt. It runs outside the trusted boundary; it needs no trust.

anchor pin --gateway http://127.0.0.1:8471 --agent DID --out DIR (--tsa URL | --hedera operator.json)
anchor pin --checkpoint checkpoint.json --key HEX --out DIR (--tsa URL | --hedera operator.json)
anchor check --out DIR --agent DID --key HEX [--offline]
anchor identity pin --log FILE|URL --out DIR (--tsa URL | --hedera operator.json)
anchor identity check --log FILE|URL --out DIR (--tsa URL | --hedera operator.json) [--offline]

identity pins the did:webvh log the same way, one message per version, so a checker can tell that the log it reads is the only one ever published (see anchor/identity.go).

One receipt per tree size and backend; a size already anchored is skipped, so running this every minute costs nothing when nothing moved.