Every checkpoint AttestZ has issued, listed here as soon as it is signed and published. Each row is independently verifiable — see the offline verifier. This page shows only what the checkpoint records themselves prove; nothing here is a summary or an interpretation.
| Date | Checkpoint hash | Signatures | Anchors | Published |
|---|---|---|---|---|
| 2026-10-25 | ffad2ccc159ac57c… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-24 | 4776aa9acc513d53… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-23 | 1d5c54e93adccdda… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-22 | bf4a1c12334b0a6f… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-21 | c91912f6f6f44268… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-20 | 1653d47787a32e66… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-19 | fdbf255ef3034e23… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-18 | 0de840fc82fb09d6… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-17 | 4e63513cd1b911b2… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-16 | 63e61f63286be2fa… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-15 | c6a5e7decdba9dc0… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-14 | a6fb11f093d21198… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-13 | 483541dae27e205f… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-12 | 5052f9b6afaf97a9… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-11 | 856e037506d80f7c… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-10 | c45a541733d45804… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-09 | 8bda94d1e8eb0a30… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-08 | f2eec4375e35db10… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-07 | 8a96a08965506059… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-06 | 2e892045d609ee6a… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-05 | bef11c7bccf5d534… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-04 | 47125134ae910443… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-03 | a2516baea4b23aad… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-02 | 2dcbca7d38b31f1e… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-10-01 | f847c523dd21a207… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-30 | ffe147efa9a703e6… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-29 | e68a34f90ccc3b53… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-28 | 0ceb9dd512d99268… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-27 | f1bd40fa6fbbaa78… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-26 | 2963a27001d66978… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-25 | b062fd3376d43070… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-24 | f67fbebd4b46f9a8… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-23 | 6ab06b53d5eacc05… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-22 | 5fa83420b80ac352… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-21 | 496a8c5b38b56e14… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-20 | 56aa016cdbce8f44… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-19 | ede0518e7f79d064… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-18 | 77cf1ecfbf2f071a… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-17 | 03525c75d36763e1… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-16 | 810873475b3f1451… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-15 | 43b158fcc17668a0… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-14 | 213d1fa66a567f20… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-13 | 2d9c42c42e5cb2a7… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-12 | f58b41114d2f0b0c… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-11 | 6d1f6057353cfb2c… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-10 | 0f09b812c797d78f… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-09 | 386bec97ffaef741… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-08 | ea6b88edd578791e… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-07 | f0f808fec3c7f775… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-06 | aab71ae5fc9eedbd… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-05 | 2250736c23ff9c9d… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-04 | 5ba7356fe49b42b3… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
| 2026-09-03 | 2b6afaa6190145c3… | ECDSA_SHA_256 ML_DSA_SHAKE_256 | rfc3161, opentimestamps | GitHub |
During pre-deployment development (2–4 Sep 2026), the builder's development and testing process made 559 kms:Sign calls against the production signing keys using a shared administrative credential, before any checkpoint existed and before any of the controls below were in place. None of these signatures was ever assembled into a checkpoint, published, or reported to this application. The credential is no longer able to sign: a key policy now permits kms:Sign only from the dedicated notary function's own role, enforced at the AWS resource level regardless of what any IAM policy grants. Full account: docs/SECURITY-REVIEW.md in the source repository.