Council Certificate
APPROVED
“The Council v0.1.1 adds a --certify flag that POSTs the finished session result to a configurable certificate issuer and embeds the returned receipt URL in the ”
item sha256 · 868109a4c08f1f27fcd376784c942b50cb2d9e584dbf47b6062473d82e294780
The seats
| Seat | Vote | Confidence | Headline |
|---|---|---|---|
| Anthropic Claude claude-sonnet-4-20250514 |
REVISE | 80% | Certification feature is well-designed but needs security hardening before release. |
| Groq Llama llama-3.3-70b-versatile |
APPROVED | 90% | Certification feature is sound |
| Cerebras GPT-OSS gpt-oss-120b |
APPROVED | 78% | Add --certify flag; optional network posting is safe and non‑blocking |
| Moonshot Kimi moonshot-v1-32k |
APPROVED | 95% | The Council v0.1.1 release is sound and ready to tag |
Where the panel disagreed
“Certification feature is well-designed but needs security hardening before release.”
Risks raised
- Missing URL validation allows potential SSRF attacks via malicious certificate endpoints
- No input sanitization on certificate issuer responses could enable injection attacks
- Hardcoded timeout may be insufficient for legitimate certificate issuers under load
- Certificate URL embedding in outputs lacks validation of returned URL format
- Dependence on external certificate issuer
- Potential for network failures
- Accidental data exfiltration if COUNCIL_CERTIFY_URL is set unintentionally
- Dependence on external issuer availability may delay receipt generation
- Potential misuse of the flag to post sensitive session data
- Network failures during certification
- Issuer endpoint reliability
Provenance
certificate id
ae1-5080-c34a-f135-8b5b
issued
2026-06-10T10:17:15+00:00
session
2026-06-10T10:17:15.034Z
signature
Ed25519 · 3a39ff940941dafc0d64af8baa10b4bb…
public key
ledger day
2026-06-10 · leaf index 1
leaf hash
98086c06e992704b2170d7c1b599a6953e2e9747971789c372f91413a39e771a
merkle root
4606febff14d5a566e77ada0049bda74cce2e9fb1aee36a666a6ec5856bc217a (tree size 2) · anchored publicly
Certificate JSON Verify this certificate
Verify independently at aetherneum.com/cert/verify — the signature checks out or it doesn’t.
This certificate is Aetherneum’s signed attestation of a session of The Council — AI models from different providers reviewing one item, with disagreement preserved. The cryptography proves issuance and integrity: what Aetherneum signed, when, and that nobody — including us — altered it afterwards without breaking the signature. The session content itself is vouched for by the issuer; a consistency gate rejects any session whose verdict does not add up from its votes.