tacet-disclosure-ledger

Every hour, Crovia fetches the public model card of a rotating set of Hugging Face models, runs one published predicate over the bytes — does this card disclose its training data? — and signs what it saw. The hour is opened by a public randomness beacon (drand) and closed by a Bitcoin anchor (OpenTimestamps). This dataset is that log, byte for byte, as served at croviatrust.com/registry/data/tacet.

What a row says, and what it does not

An observation says: at this time, this observer fetched this URL, got these bytes (hash and length), and the predicate returned this result. result: false means no training-data disclosure was found on that surface in that hour — not that the provider disclosed nothing anywhere, not fraud, not bad faith, not a quality grade. Hours not observed do not count toward anything. See the TACET specification and the LACUNA page.

Tables

• observations (observations/<YYYY-MM-DD>.jsonl): one signed row per fetch — target_id, surface_url, fetched_at, http_status, body_sha256, body_len, predicate (id, version, code hash), result, beacon_round, observer (id, Ed25519 key), signature. Sharded by the UTC day the epoch opened; the same lines, unmodified, live in snapshots/<epoch>.jsonl, the per-hour file whose rows are the leaves of the sheet's snapshots_root (RFC 6962 Merkle root). Hours with no observations have an empty snapshots file and no line here.
• epochs (epochs.jsonl): one row per hour — map root and size, snapshots root and chain, drand round, snapshots counted, anchor status and Bitcoin block.
• targets (targets.jsonl): one row per model — first and last seen, observations, negatives, anchored negative epochs, last result.

Files for verification

• sheets/<epoch>.json — the signed epoch sheet.
• changes/<epoch>.json — map changes of the hour (slot key, value hash).
• ots/<epoch>.ots — the OpenTimestamps proof of the sheet hash.
• proofs/<slug>.seal.json — featured level-2 silence proofs, wrapped as crovia.seal.v1; proofs/index.json lists them.
• trust_root.json — operator and observer public keys, beacon and anchor parameters. Verify against it, not against this card.

pip install crovia-tacet-operator
tacet-operator verify proofs/mistralai__Mistral-7B-v0.1.seal.json   --operator-pubkey "$(python3 -c 'import json;print(json.load(open("trust_root.json"))["operator"]["pubkey"]["key_hex"])')"

The verifier checks signatures, chaining, non-inclusion paths, snapshot hashes and witnesses from the files alone; drand rounds and Bitcoin anchors are checked against public relays unless --offline.

Provenance and licence

Produced by Crovia Trust's TACET operator (crovia-tacet-operator, Apache-2.0, source). Data CC-BY-4.0. Cite as Crovia Trust, TACET disclosure ledger, Hugging Face dataset, 2026-10-17; the DOI-bearing weekly Silence Report is at croviatrust.com/report/.

Corrections are made by revision, never by rewriting a published epoch: a sheet, once anchored, is a fact about the past.