Reference implementations

Use GOVP where the evidence begins.

GOVP is not one application. It is an open record format with interoperable tools for websites, desktops, observers, browsers and custom systems. The same record must verify everywhere.

Choose a tool →Quickstart

WordPress 2.38.2Studio 1.0.1 · macOS arm64Browser verifierPython · JavaScript · PHP

01 / Choose by job

One protocol, five entry points.

Choose the surface closest to the moment the evidence is created. Verification never requires the issuing surface.

Publishers

WordPress

Protect public claims and keep their complete version history.

For websites → Operators

Studio

Issue signed records for files and datasets from a desktop.

For local work → Mesh participants

Observer

Watch evidence, preserve copies and create third-party receipts.

For corroboration → Anyone

Verifier

Check a record, URL and optional asset without an account.

For checking → Developers

Libraries

Embed issuing and verification in your own system.

For integration → Implementers

Conformance

Prove byte-exact compatibility against the golden vectors.

For standards work →

WordPress · reference product

Protect the claims your organization publishes.

GOVP Public Evidence turns an existing WordPress site into an issuer, transparency center, verifier and optional mesh node. It runs in PHP with libsodium — no sidecar and no external GOVP account.

Available · 2.38.2PHP 7.4+MITSelf-hosted

Detects high-risk public pages
Protects one page or all suggested claims
Keeps every signed version
Marks a protected page when it changes
Creates a public transparency center
Publishes identity and records under .well-known
Visual claim and source templates
Four protection levels
QR, badge and framework-free embed
RFC 3161 and QTSP timestamp profiles
External signers via KMS/HSM/Vault
Bundles, witnesses, trust and mesh support

The product story is simple.

Protect a public claim, retain its history and let an auditor verify any version without trusting the WordPress database.

Download plugin 2.38.2 →Installation guide Public endpoints

Desktop · issuer and verifier

Sign files and datasets on your own machine.

GOVP Studio creates an Ed25519 identity locally, hashes a selected file or directory, issues a GOVP-1 record and verifies the result before saving it. It can also verify a published record by URL.

Available · 1.0.1macOS Apple SiliconSigned & notarizedIntel · Linux · Windows pending

File and directory hashing
Local Ed25519 identity
GOVP-1 signing and self-verification
Dataset, model, agent and document types
Canonical publication URL binding
Offline signature verification
Extensible .govpext packages
Published installer SHA-256

Current boundary.

Studio 1.0.1 is an issuer and verifier. The attached production build does not itself run the autonomous mesh observer loop.

Download macOS build →Verify installer

Observer · external agent

Let a third party preserve and sign what it observes.

GOVP Observer is the external participant in the mesh: it watches incoming evidence, validates records, preserves artifacts and produces receipts with its own identity. That receipt is the third party’s act — never the issuer signing itself twice.

CLI · PythonWatchfolder workflowOpt-in meshPublic installer documentation pending

Watchfolder evidence intake
Independent record verification
Artifact preservation
Signed witness receipts
Portable offline validation
Feeds effective independence calculation

Understand the mesh →Request observer access

Browser · independent verification

Check evidence without sending it to us.

The browser verifier parses a GOVP-1 record, derives the GOVP-ID, reconstructs the signing input, verifies Ed25519, checks domain binding and optionally hashes the declared asset locally.

Available nowNo accountLocal file hashingOffline-capable

Paste or drop a record
Fetch by canonical URL
Verify signature and identifier
Check optional asset SHA-256
Explain every failed check
Runs independently of the issuer

Open verifier →Issue a test record

Libraries · custom systems

Implement the standard, not a vendor API.

Available engines in Python, JavaScript and PHP reproduce the GOVP-1 signing input and verification result. Golden vectors — not marketing compatibility claims — define conformance.

PythonJavaScriptPHP

Byte-exact canonicalization
Ed25519 signing and verification
GOVP-ID derivation
Sources and trust primitives
Golden vector harnesses
OpenAPI and JSON Schema contracts

Integration guide →Conformance suite

07 / Capability matrix

What each surface does today.

A factual matrix, not a roadmap disguised as availability.

Capability	WordPress	Studio	Observer	Browser	Libraries
Issue GOVP-1	Yes	Yes	No	Playground	Yes
Publish .well-known	Yes	Files generated	No	No	Integration-owned
Verify records	Yes	Yes	Yes	Yes	Yes
Keep claim history	Yes	File-based	Observed copies	No	Integration-owned
Produce witness receipts	Mesh node	Not in 1.0.1	Yes	No	Primitive
External signer	KMS/HSM/Vault	Local key	Own observer key	No	Integration-owned
Available platform	PHP 7.4+	macOS arm64	Python CLI	Modern browser	Python · JS · PHP