Proof of Send: Every Message Kanvo Delivers Is Now Signed
Kanvo now signs every outbound message with a record of who sent it, on whose authority, and whether it disclosed itself as AI — appended to a hash-chained ledger anchored in Sigstore Rekor and Bitcoin.
What the envelope records
The actor — the human or agent that produced the messageThe principal it acted forThe mandate that granted it authorityThe model and policy version in force at send timeThe AI disclosure state for that channelA SHA-256 hash of the content exactly as delivered
Hashes, not text
We sign a hash of the message, never the text. Kanvo is attested and auditable — deliberately not end-to-end encrypted, because those are opposing products: a signature proves authorship to a third party, and E2EE exists to prevent exactly that. Signing the hash means confidentiality could be layered on later without…
The ledger
Each attestation chains to the one before it. Periodically we compute a Merkle root over the new entries and publish it two ways:
Verifying without us
Anyone can check a message at /verify — free, no account, no key. Paste the message or its envelope and you get back who sent it, when, and under what authority.
Tenant identity
Each tenant resolves at did:web:kanvo.ai:t:<tenant>, served from /t/<tenant>/did.json. No chain, no registry, no wallet — just a well-known URL and a rotation history.
Kanvo Team
Writes here about what Kanvo is building and why — the send path, the evidence it leaves, and the decisions behind both.
Related Articles
Every native Kanvo message is now attested the moment it is sent, and generating or checking a proof costs zero credits — forever, for everyone. Here's the receipts-first reasoning.
We Looked At Our Own Pricing Page And Deleted a Line Item. Proofs Are Now Free
Every native Kanvo message is now attested the moment it is sent, and generating or checking a proof costs zero credits — forever, for everyone. Here's the receipts-first reasoning.
We Just Shipped End-to-End Encryption — And Deliberately Broke Half of Kanvo To Do It
Private conversations are live: MLS between your devices, ciphertext on our servers, and no search, no assistant, no calls inside them. Here is exactly what you lose, and why we shipped it anyway.
Your Safety Number Just Changed. Here's How To Find Out Who To Blame
Every device key Kanvo has ever published is now in an append-only log, anchored publicly, and served at a URL you can read without asking us. Encryption you cannot audit is a promise, not a property.
Enjoyed this article?
Subscribe to our newsletter for more insights and updates.