Build1 distinct publisher3 min readPublished
The wrapper hashes code and output, sends only a digest out to be signed with RSA-PSS, and hands the reviewer a PDF. The cost of adopting it is a command prefix. The cost of believing it is trusting whoever holds the signing key.
The Engineer · Build desk

Compiled by The EngineerSomething wrong?How this is made
The boundary worth studying is the one the digest crosses. The CLI hashes the source and the captured execution record with SHA-256, passes the digest to the attestation service, and the service signs that digest with RSA-PSS-SHA256, so the experiment itself never leaves the researcher's machine [8]. Datasets and model weights stay outside even the open disclosure mode, which at most carries a source bundle [10]. Selective-disclosure proofs push on the obvious hole: filenames and contents can stay redacted while their hashes are committed, which stops a file being removed after the run without the record showing it [10]. The delivery vehicle is a signed PDF, which is the one artifact a program committee is guaranteed to be able to open.
Keita's own research is speech recognition and machine translation for low-resource African languages, including SALAN, a speech dataset covering eight languages spoken in Niger, and he works in Rochester Institute of Technology's computing Ph.D. group under Christopher Homan [3]. That is a setting where "just publish the corpus" is not always available, which is visible in the design. On the project homepage he puts the goal plainly: "What is written in the paper should be what was truly gotten from the experiments" [9].
The narrowness is the point. Artifact evaluation shows that submitted code runs, trackers such as Weights & Biases, MLflow and Neptune preserve the metrics and configuration the user chose to log, and preregistration files a plan; none of them establishes that the number printed in the paper came out of a particular execution [7].
Where it stops is documented, and the documentation is honest about it. A valid report establishes the integrity of the captured record, and nothing more: not whether the design was sound, whether the code had bugs, whether the statistics were appropriate, or whether the author sealed the most favorable run out of a larger set [14]. Against a wrapper being handed a fabricated record, the repository leans on heuristics rather than proofs. It captures CPU, memory, storage and, where available, GPU telemetry, ships an execution-coherence check called HMCA, and adds compute-cost checks that compare declared work against physical limits derived from elapsed time, energy and memory [11]. Those raise the price of manufacturing a plausible record; they do not turn a signature into a statement about the science.
On maturity, the arithmetic is small. The visible release history opens with an initial CLI commit on March 23 and stood at 74 commits in the supplied August capture, with a cleanup on August 28 [12]. From that first commit to the August 31 introduction is 161 days, which works out to about 0.46 commits a day [15]. That is one person's side project pace, and the load-bearing parts for a reviewer are the protocol and the verifier rather than the feature list.
My read, in my context: the wrapper is cheap enough to try on runs I already instrument, because the marginal cost is a session init and a command prefix [5]. The claim a seal supports is small and checkable, which is why it is useful. This number came out of this execution, and the record has not moved since.
Ranked by verification strength, evidence, and original report placement.
A valid K-Veritas report establishes the integrity of the captured record; it cannot determine whether the experiment was well designed, the code contained bugs, the statistics were appropriate, or the author selected a favorable run from a larger set.
Mamadou K. Keita publicly introduced K-Veritas on August 31, offering researchers a way to attach a cryptographically signed execution record to the numerical claims in a paper, which a reviewer can inspect without rerunning the experiment or receiving the researcher's training data.
Keita is listed in Rochester Institute of Technology's computing Ph.D. research group with computer science professor Christopher Homan as advisor; his other research includes speech recognition and machine translation for low-resource African languages, and he, Homan and collaborators published SALAN, a speech dataset covering eight languages spoken in Niger.
Modern machine-learning papers can depend on long training runs, private datasets, specialized hardware and code that changes between experiments; reviewers generally receive a table of results and whatever artifacts an author chooses to share, and rarely have the time, compute budget or data access to reconstruct the run.
A researcher initializes a session, prefixes an existing command with kveritas run, and seals the completed session into a signed PDF; the command-line tool captures source hashes, standard output and error, metrics, environment details, timestamps and hardware activity, and a reviewer checks the report's signature and recorded claims through a local or web verifier.
Keita and Homan formalized the idea in a position paper submitted on May 9, calling the missing property experiment nonrepudiation: a record that connects a paper's reported number to a specific computation and prevents the author from quietly changing that record later.
Distinct publishers with included, body-backed reporting in this cluster.
1 article · August 31, 2026
Follow any of these and your For You feed starts watching them — no settings page required.
build
Mojo's compiler went Apache 2.0 fifty-five days after Qualcomm's $3.92bn deal1 distinct publisher
leadership
Qualcomm buys the runtime, then hands the keys to five rival chipmakers1 distinct publisher
build
Mojo is Apache 2.0 now. The licence was never the hard part3 distinct publishers
science
The self-driving lab is out. Whether AI shows up in your filing is still open.1 distinct publisher
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
Checkable detail, one pair of eyes
The technical spine of this story is the kind you can falsify: named primitives (SHA-256, RSA-PSS-SHA256), a dated position paper, license identifiers, a commit count with dates on either end. What is missing is anyone outside the project testing any of it — no security review of the capture path, no benchmark of the wrapper, no reviewer describing what a sealed report was like to verify. runtimewire.com also draws its own boundary honestly, noting the observer runs in user space and could be fed fabricated telemetry.
Day-one code, no users yet
Everything we can count points the same way: a repository whose visible life began in March, 74 commits by late August at under half a commit a day, licenses added four days before the announcement, and not one named conference, lab, paper or attestation operator using it. Even the authors call it a testbed and sketch a three-to-eight-year path from voluntary badges to required attestations. This is a launch, not a deployment.
Slightly ahead of the ground
Modest overstatement, and it lives in the vocabulary rather than the facts. 'Cryptographic receipts' invites a reader to hear proof of a result when the guarantee is narrower — integrity of one captured record, from an observer that a compromised host could lie to, signed by a key the project itself currently holds. runtimewire.com does the corrective work in its own closing sections, which is why the gap stays small; the tension is between a strong framing and a repository with no external user in it.
Authors advancing their own standard
The people describing the gap in peer review are the people selling the fix and the standard it would run on: a Ph.D. candidate and his advisor, whose position paper defines the property their tool implements. That is normal in research and worth naming anyway, because a verification standard confers power over whose numbers get sealed. Two details cut against the obvious read — the stated governance model rules out investment-based control, and the client is Apache-2.0. One cuts with it: the attestation server, the piece of the system that would hold the keys, is the piece kept under AGPL-3.0.
Firm on mechanics, thin on consequence
We can be fairly sure what K-Veritas is, who wrote it and when, because those facts come from artifacts anyone can open. We can be much less sure whether it works as advertised or will matter, because a single outlet reading a single repository is the entire evidentiary base, and the two questions that decide the outcome — does the crypto hold under adversarial review, will any conference ask for these reports — have no data on either side yet.