HREVN EB1 Core turns canonical product records and their files into a deterministic ZIP with per-file hashes, one content root and a signed envelope. The same core verifies each security property separately.
Per-file integrity and the root of the complete set
A strict Ed25519 signature over identity, profile and evidence commitments
Product-profile conformance when the product validator is installed
The core does not infer
That the underlying statements are true or complete
Signer authority unless a separately pinned HREVN root and registry are supplied
Independent time evidence or a current blockchain anchor
Legal validity, approval or certification
The protocol
Small surface. Explicit rules. Portable checks.
Product adapters decide what a record means. The core owns the evidence mechanics so every product does not invent its own hashing, signing and verification path.
01
Deterministic package
Canonical inputs, sorted members and fixed archive rules produce a reproducible evidence structure.
02
Bound signed envelope
Bundle identity, root, product, profile, producer, key identity and claimed times are covered by the signature.
03
Strict verification
Unknown fields, ambiguous archive structures and unsupported signature forms stop the relevant conclusion.
04
Multi-axis output
Format, integrity, signature, authority, profile, time and anchor evidence remain separate.
05
Product-neutral core
SuperProperty uses an adapter; future verticals must consume the same core instead of forking it.
06
Independent comparison
Python and Go implementations are checked for divergence; agreement is evidence, not a proof of correctness.
How it works
Prepare, bind, verify.
01
Product adapter
The application selects authoritative JSON and files and validates its own record profile.
02
EB1 Core
The core builds the exact archive, computes checksums and root, and signs the complete envelope.
03
Verifier
A recipient can inspect the ZIP offline, add the published HREVN trust context and receive qualified results instead of a single green answer.
Published production trust
The bundle key no longer authorizes itself.
HREVN now publishes trust root v1 and a 2-of-3 root-signed key registry. A conforming verifier can use those separately distributed bytes to determine whether a signing key was authorized for the bundle’s exact protocol, product and profile.
Online ratification goes one step further: the exact external ZIP SHA-256 must also appear in the signed HREVN issuance ledger. It does not certify the underlying statements, claimed time or legal effect. Blockchain anchoring remains a separate optional property.
SuperProperty is the first native EB1 v2 application.
Its visits and annexes are produced through product-specific adapters and the independent EB1 core. Its signing key is present in the published registry; exact HREVN issuance remains a separate ledger result and is confirmed only for bundles recorded during issuance.