PyxGrant / Prove

A skeptic can check this.

Five walks. Each one is a motion the kernel already does on a hop that hits it. This page mints an Ed25519 key in your browser and signs the same kind of record. It is not cmd/pyxgrant compiled here, and it is not a claim that we are the only product that decides. Shipping kernel: 2.1239.0. The in-browser Try engine is still 2.900.0 WASM. On the binary: pyxgrant demo -consequence-close — scorer miss, path still stops, pack verifies offline. Grant-kill certificates travel in that pack. A confirming read-back can mint a signed PhaseVerified receipt. Verify binds principal, grant, and verdict.

01

Verify. Change one field. Verify again.

The receipt below is signed in this tab. Embedded-key verify is integrity, not authenticity, until a relying party pins a key they did not read from the artifact.

Signed decision receiptminting key…
Refusedread-guard

read ~/.ssh/id_rsa — out of grant. Silence means no.

Tool
fs.read path ~/.ssh/id_rsa
Decision
deny
Record hash
—
Signature
—

A call that never reaches PyxGrant is named later, not stopped. Browser Enforce still needs an attested shim. This page does not claim FedRAMP, FIPS, or uniqueness. The miss→stop walk is pyxgrant demo -consequence-close on the Go binary, not this tab.