THALOR WATCH public tier

Verify without Thalor code

Everything published here is a file with a checksum, chained to the entry before it. Two commands and a standard library are enough to check it.

1 · The snapshot

Snapshot NS-000061-20261031T004019Z · log seq 61 · as of 2026-10-30. Files: assets.json, checksums.sha256, entry.json, manifest.json, northstar.json, sessions.json.

mkdir -p NS-000061-20261031T004019Z && cd NS-000061-20261031T004019Z
for f in assets.json checksums.sha256 entry.json manifest.json northstar.json sessions.json; do curl -sSO https://watch.thalorworks.com/snapshots/NS-000061-20261031T004019Z/$f; done
sha256sum -c checksums.sha256        # shasum -a 256 -c checksums.sha256 on macOS

Expected: every file OK. Then open entry.json: its entry_hash must be

03d081d2e4ae2894e39175bba555088bb0efa367b980be6e48dee101d6b64f8a

2 · The chain

Ten lines of Python over the Log file, ledger.jsonl, check every link and every hash back to genesis.

curl -sSO https://watch.thalorworks.com/ledger.jsonl
python3 - <<'V'
import json, hashlib
prev = '0' * 64
for line in open('ledger.jsonl'):
    e = json.loads(line); h = e.pop('entry_hash')
    assert e['prev_hash'] == prev, f"chain break at seq {e['seq']}"
    assert hashlib.sha256(json.dumps(e, sort_keys=True, separators=(',', ':')).encode()).hexdigest() == h, f"content altered at seq {e['seq']}"
    prev = h
print('chain intact, head', prev)
V

Expected head: 03d081d2e4ae2894e39175bba555088bb0efa367b980be6e48dee101d6b64f8a.

3 · The anchors

The head hash is published in places this server does not control. Compare the head above with each:

Anchor targets: the public thalorworks/watch-anchors git repository (one commit per snapshot; the commit timestamp is the anchor), maury.thalorworks.com/.well-known/thalor-watch-head on a different host and deploy, and the weekly HQ thread report, mailed and archived by people.

4 · The evidence

Each log entry names the SHA-256 digests of the OSea session bundles it consumed (session_digests). A digest is the hash of a bundle's own checksums.sha256, so it commits to every byte of every stream. The bundles themselves are held on the node that produced them and on this server; evidentiary access is by request on the internal tier.

What this does not prove

That a single node's telemetry is unforgeable by a determined insider with physical access to that node. That becomes true only with diverse custodians and cross-attestation between hulls in one harbor (Stage 3). See method.