Build · KashScript
The keys, the signatures, and the free checker under everything.
The keys, the signatures, and the open checker every other platform stands on. Developers start here.
www.kashscript.com ↗What it gives everyone
- One accountSign in with your fingerprint, your face or your phone's PIN. Your key stays on your phone. Organisations get one portal, with a place for each member.planned
- Every request is publicEvery request is public. Anyone can see what an organisation asks of people. A request is answered with a plain yes, never with the records behind it.planned
- Check any receiptAnyone can check a receipt for free, without an account, and without asking us.open
- Confirm by linkSomeone can confirm a receipt from a link. No app, no account, no password.built, not open yet
- Receipts that endEvery receipt says how long it lasts. When it ends, what it said is deleted for good.planned
- StandingShow what your receipts add up to, like “qualified”, as a yes that ends. Indorania signs it.planned
- Where, as exact as you likeA receipt can say where: a river area, a kind of land, a town or an exact spot. You choose. Public totals start above five.planned
- Your own serverKeep your records in your own country. Anyone can still check them.planned
- Practice runsTry a service first in Indorania, the designed practice country. The receipt is real, but it only proves the practice.open
- Help from someone you trustA helper can guide you on your own phone. Anything made with help shows their name.not started
- Getting back inLost your phone? People you chose can help you back in. Indorania never holds your key, so it cannot do this alone.not started
for builders: what it runs on, and the source of each state
open@kashscript/attest
Signs records as DSSE envelopes and checks them offline. [v 09-24] npm view: latest 0.1.8, which depends on identity-core 0.3.1 and installs from an empty folder; 0.1.5 is deprecated. Round trip on this app's own receipts: four verifies exit 0 (two signed under 0.1.3, two under 0.1.8) and a tampered ledger row exits 1 (PAYLOAD_HASH_VARIANCE). Tested on Windows only.
open@kashscript/identity-core
did:kash keys, made and held by their subject. [v 09-24] npm view: latest 0.3.1, attest 0.1.8's exact dependency, installed for this app by pnpm. The model's visa makes its key in the visitor's browser with this package, and the round trip made its keys the same way.
built, not open yet@kashscript/identity-server
Guest countersignature by link, and agent tokens bound to an owner. [v 09-24] npm view: latest 0.2.0 (was 0.1.1 here), depending on attest 0.1.6 and identity-core 0.3.1. Built, not open: no ceremony host exists (this app has no route for one) and one must exist before anyone can confirm by link.
on hold@kashscript/identity-zkp
Proves a predicate without the record behind it. Mothballed (MOTHBALL row 3; STACK [v 07-27]). Gate: a consumer with a signed reason.
plannedVersioned instruments
An amendment is a signed new version; every record cites the version in force. INDORANIA-ARCHITECTURE-2026-09-13 §8 (proposed, not approved).
not startedCorpus accounting
Principal and yield kept apart, on the record. A named gap: CIVILIZATION-VISION-2026-08-31 §3.4.
plannedAccount service
One account, passkey sign-in, organisations, members and roles. INDORANIA-ARCHITECTURE-2026-09-13 §6–§7 (proposed, not approved).
plannedExpiry by key destruction
Content encrypted per subject; destroying the key ends the record, the anchored hash stays. INDORANIA-ARCHITECTURE-2026-09-13 §9.5 (proposed). Oreoasis enforces retention windows in code today.
plannedSovereign node
The same service in the holder's own jurisdiction; checking stays global. INDORANIA-ARCHITECTURE-2026-09-13 §12, stage 3 (proposed).
plannedIndorania's standing key
Signs a standing at the holder's request, over records the holder presents. Proposed in this book, 2026-09-15. Not built.
plannedCounts above a threshold
Public counts by place only above five; never a row about a person. Indusland enforces a threshold of five on footfall today, parked (STACK [v 07-27]). The general form: INDORANIA-ARCHITECTURE-2026-09-13 §9.6 (proposed).
openThe check page
Checks a receipt file in the visitor's own browser, with the same verifier the command-line tool runs, and sends nothing to us. [v 09-24] Built on /verify with @kashscript/attest 0.1.8 verifyAuditBundle. That call, run from a script with no browser, agreed with the command-line tool: four receipts real (two signed under 0.1.3) and two tampered copies changed. Scanning a code with a camera is not built.
not startedGetting back in
Recovering access after a lost phone without Indorania ever holding the key: trusted people, a second device or a printed code. Not designed anywhere yet (checked 2026-09-15 against the architecture and this book). Required before any real account opens.
not startedHelper sessions
A trusted person guides a step on the holder's own device; every receipt made with help names the helper; help ends on a set time. Proposed in this book, 2026-09-15. Not built.
openThe model's rehearsal engine
Runs a working day in the designed country and signs its receipt in the visitor's browser. [v 09-15] content/days.ts holds one day (hospitality), emitting all three ledgers. indorania.kashscript.com answers HTTP 200 but still builds from KashScript's copy (ROADMAP item 2).
plannedThe public ask library
A published list of requests for evidence, each answered with a plain yes and not with the records behind it. [v 09-25] Approved design, not built: PROOF-ECONOMY-SURFACES-2026-09-21 §5 (ECOSYSTEM d42) and ROADMAP S2 and S5(b) as read. grep over this app finds no code for it. Indorania hosts it; KashScript builds it.
Not yet true
Only checking a receipt is open to everyone today.
The latest published version of the checker cannot be installed; the version before it works.