Control an external subject
Prove DNS control of an HTTPS domain or bind the exact current default-branch HEAD of a public GitHub repository.
Each record below binds an external domain or exact public repository commit to one real MandateShield production reservation and one fresh, credential-bound permit redemption. MandateShield records no provider submission or provider evidence; activity outside MandateShield is not observed.
Prove DNS control of an HTTPS domain or bind the exact current default-branch HEAD of a public GitHub repository.
Use isolated one-time credentials for a fixed one-cent test envelope. The official runner contains no payment-provider client.
Machines can verify the signed record, its digest, expiry, badge, and every explicit false claim.
Sandbox runs, operator tests, registry entries, and configured billing are excluded. The first card appears only after the production service observes the exact bound activation chain.
Create the first bounded proof