thesis terminal

hash = sha256(prev hash + the canonical payload JSON); the signature is Ed25519 over the lowercase hex hash. Change one character of the payload and every entry after this one stops verifying.

{
  "constraints": {
    "defined_risk": false,
    "delta_neutral": false,
    "hands_off": false,
    "keep_dry_powder": false,
    "no_cex": false,
    "no_sell_holdings": false
  },
  "horizon": "days",
  "injection": 0,
  "view": "unclear"
}

{
  "legs": [],
  "riskUsd": 0,
  "template": "clarify"
}

Shown as it was signed, with the wallet taken out: a field named address or walletNote reads [redacted], any 0x address inside any other field reads 0x… (a vault link keeps its own, which is a public contract), and a clause quoting what a wallet holds is cut and says so. Those bytes are unchanged in the signed entry — /ledger/136 serves it verbatim, and that is what the verifier hashes.

node scripts/verify_ledger.mjs https://think.ascendants.io

The head is at /ledger/head, this entry's raw JSON at /ledger/136, and the public key at /.well-known/thesis-terminal-pubkey.json.