SignAi — HOP 7.0 Alpha (BIO-ID + Vault + Content Origin)

Step 0 – Unlock your BIO-ID Vault (recommended)

For maximum safety, set and unlock your Vault password first (see Vault tab). You can’t create keys unless the Vault is initialized and unlocked.

Step 1 – Create or import key pair

Status

No key yet.

Public key (local)

(none)

Private key (local – NEVER share)

(hidden)

Step 2 – Mindprint (your human pattern)

Waiting for typing…

Step 3 – Create TRACE badge

Text you want to sign

Attach image (optional)

Step 3b – Content Origin (ORIGIN-X hybrid)

Not analyzed yet.

–

Your TRACE badge (clickable)

Badge will appear here after “Analyze & create badge”.

Step 4 – TraceNet (local)

creator_id

(missing)

Registered?

no

Step 5 – Verify

Upload badge (.svg)

If the badge used an image: upload the same image here

Result

No verification yet.

Click badge or upload a TRACE SVG.

BIO-ID Vault (identity & keys)

Vault locked.

Vault password

BIO-ID (creator_id)

(locked)

Public key

(locked)

Private key (local – shown only here)

(locked)

Latest mindprint hash

(locked)

Mindprint created at

–

How SignAi works – simple view

SignAi is a local-first system for proving that a piece of content (text + optional image) was created by a specific human, on a specific device, within a short time-window.

Vault – You choose a password that unlocks your local BIO-ID Vault.
Keys – SignAi generates an Ed25519 keypair and stores it only on this device.
Mindprint – You type a few sentences; timing & rhythm become a mind_hash.
TraceNet (local) – Your creator_id is derived from your public key and linked to your mindprint.
TRACE badge – When you sign content, SignAi:
- Hashes the content and optional image
- Runs ORIGIN-X offline heuristics on the image (camera vs AI-leaning)
- Bundles everything into a signed trace-7.0 token
- Renders a badge + glyph that encodes the payload
Verify – Anyone can load the badge and re-check:
- Signature (Ed25519)
- Time window (60 seconds)
- Creator identity (local TraceNet)
- Mindprint hash match
- Optional image hash match

Advanced – architecture & signals

• Keys:
  – WebCrypto Ed25519
  – Public key exported as raw bytes → base64url
  – Private key stored locally as PKCS8 + base64url (never uploaded)

• creator_id:
  – <creator_id> = "sha256:" + SHA-256(JSON(publicKeyObject))
  – Deterministic and device-agnostic; same key → same creator_id

• Mindprint:
  – Logs keypress timestamps while you type
  – Computes mean & variance of intervals, flatness, speed, etc.
  – Hashes these features → mind_hash (no raw timing stored)

• Content Origin (ORIGIN-X hybrid, alpha):
  – Text: light heuristic only (length, punctuation ratio)
  – Image: dual-layer heuristic
      · legacy: colorfulness, brightness, neighbor texture, per-channel variance
      · ORIGIN-X: grayscale noise residuals (Laplacian), energy and structure
  – Produces a 0–1 score:
      · < 0.45 → Human-leaning (conservative)
      · 0.45–0.75 → Mixed / uncertain
      · > 0.75 → AI-leaning (strong synthetic fingerprints)
    The scoring is biased to avoid false AI flags on real camera images.

• TRACE token (trace-7.0):
  {
    version: "trace-7.0",
    scheme:  "signai-trace",
    content_type: "text/plain",
    content_hash: SHA-256(text),
    created_at:   iso8601,
    metadata: {
      creator_id,
      mindprint: { mind_hash },
      image_hash: (optional),
      content_origin: {
        score, label,
        text:  (light heuristic),
        image: (origin-x hybrid snapshot)
      },
      session: { issued_at, expires_in, nonce }
    },
    proof: {
      alg:     "Ed25519",
      edPublic,
      sig:     base64url(Ed25519_signature_over_canonical_payload)
    }
  }

• Glyph:
  – Seed = content_hash + image_hash + creator_id
  – Seed → SHA-256 → hex pattern
  – Hex pattern drives:
      · 4×4 grid of animated circles
      · palette (depends on content origin score)
      · rotation and pulse timings
  – Always the same for the same payload → visual “DNA” of the badge.