Provenance and file timestamps

What this proves: the listed bytes existed no later than the timestamp. It does not prove that the content is correct, who wrote it, or legal ownership. Live files are regenerated when the site changes, so verify against the snapshot copies below, not the current live file.

Snapshot of 2026-10-10

One manifest, SHA256SUMS, lists the SHA-256 hash of 100 files across ten Air Sense Environmental websites. The manifest carries three independent proofs:

• an RFC 3161 timestamp token from FreeTSA (SHA256SUMS.freetsa.tsr);
• an OpenTimestamps proof anchored to the Bitcoin blockchain (SHA256SUMS.ots); a newly created proof stays pending until a block confirms it and is replaced here once complete;
• an Ed25519 signature (SHA256SUMS.sig) by the Air Sense Environmental microsite provenance key, fingerprint SHA256:JT+7sat5ESA/kQfxzQsMRyX4eKKcc7CCyY3+PTYbip0. The same key is published on each of the ten websites and on airsenseenvironmental.com/provenance/, which ties it to Air Sense Environmental.

Download

• SHA256SUMS
• SHA256SUMS.sig
• SHA256SUMS.freetsa.tsr
• SHA256SUMS.ots
• allowed_signers
• provenance-ed25519.pub
• freetsa-cacert.crt
• freetsa-tsa.crt

This website’s files in the snapshot

• /.well-known/linkset.json (snapshot copy)
  9ed4974e4d2ed739056f234a3a50980656aadaf7921683bd02f7d9ccbdc28071
• /ai-info.html (snapshot copy)
  f07471fa9309e6976aacd900997c402d0396a1c394e4603c5b52ac1e3397f215
• /entitymap.json (snapshot copy)
  b51f38dc3d93e42b42a4c72d010e63a8efe1dd8ff988a0f3a2ad270796bbf094
• /llms-full.txt (snapshot copy)
  d50fad1416400a03c132590b48c59190f128dfd934cc55d78e976071389ccdea
• /llms-index.json (snapshot copy)
  d9b3edd516e2b5caba200ac54ce9963e3ae15184cf8c05d0b7350137241d40f2
• /llms.txt (snapshot copy)
  876a5e8db9cc8364ac5c7e51eba01fc7259129d7f1cb184224244b815aa89b31
• /okf/manifest.json (snapshot copy)
  336e460365dae4d5ac0d4ceb19d2dd47af084e847930156d17bdd6c4aef405c5
• /radon-reference.html (snapshot copy)
  e51a28d5990911f221184abd133d77a2ab8378e590696b457c55f4ef570ee42a
• /radon-reference.json (snapshot copy)
  45bb6a56d3ccf640d550d1bb2385eb125031e49106ce81e0c114864d3af97b59
• /radon-reference.md (snapshot copy)
  652ce54c44b22c5abe29d2ead255e5be84868250052d96daca4d526c06c0849b

How to verify

Download the files above into one folder, then run:

shasum -a 256 -c SHA256SUMS --ignore-missing
openssl ts -verify -in SHA256SUMS.freetsa.tsr -data SHA256SUMS -CAfile freetsa-cacert.crt -untrusted freetsa-tsa.crt
ots verify SHA256SUMS.ots
ssh-keygen -Y verify -f allowed_signers -I provenance@airsenseenvironmental.com -n file -s SHA256SUMS.sig < SHA256SUMS

Snapshot copies must sit at the paths shown in SHA256SUMS (for example files/radontestingstlouismo.com/llms.txt) for the hash check. The OpenTimestamps proof can also be checked at opentimestamps.org. The identifier in the signature command is a label for the key, not a contact address.