Admit as owner

Claim one PCoC object as the key it names. Stage the object here, sign the challenge with that key, and the bench runs the same checks as the public bench — with your signature recorded against the result.

Only the holder of the secret behind the object's identity can finish this. Holding the file is not enough, and finishing grants no login, cookie or badge — the result is a signed submission and a JSON receipt. Just checking a file? That is Verify object.

1 · Stage the object

One .cbor, at most 2 MiB. It must carry a 32-byte identity: produce it with pcoc produce --npub … or --pubkey-hex ….

Drop one .cbor file here, or pick one.

Choose PCoC file

2 · Sign it with the owner key

Scan this with the signer that holds the key. The code carries only the challenge id; the signer loads the payload from the bench and sends back a signature — never the secret, and never the file again.

Signing on this machine instead? The payload below is the exact byte string to sign: BIP-340 over its SHA-256.

Bench

Verify API base URL

The page is static; staging, signature checking and the walk all run on the bench. Production default is https://verify-api.pcoc.app. Point this at a local one with ?api=http://127.0.0.1:8787 when running the service yourself.

No signer on hand? scripts/gl-admit-lane-b.sh in the repository walks the same four calls from a shell, and Verify object checks a file without claiming it.

Admit as owner

1 · Stage the object

2 · Sign it with the owner key

Measurements

Policy

Bench