Generate the report externally
Run the published offline vectors in your own implementation and retain its complete observed-output JSON.
Bind the complete output from your own MandateShield offline runner to an HTTPS domain or one exact public GitHub commit. Publish a stable proof URL and badge that machines can verify independently.
Run the published offline vectors in your own implementation and retain its complete observed-output JSON.
Publish one exact DNS TXT value or a fixed proof file in one exact public repository commit.
The public JSON, badge and compact signature preserve both the verified binding and the limits of the claim.
The network starts empty. A record appears only after its DNS or repository binding is verified and its self-report is signed.