thesis terminal

hash = sha256(prev hash + the canonical payload JSON); the signature is Ed25519 over the lowercase hex hash. Change one character of the payload and every entry after this one stops verifying.

{
  "PONS": 0.59422
}

{
  "PONS": 0.591
}

[
  {
    "coin": "PONS",
    "entry_px": 0.59422,
    "exit": "time",
    "exit_px": 0.591,
    "fees_usd": 0.72,
    "index": 0,
    "kind": "perp",
    "notional_usd": 799.74,
    "pnl_usd": 3.62,
    "side": "short"
  }
]

Shown as it was signed, with the wallet taken out: a field named address or walletNote reads [redacted], any 0x address inside any other field reads 0x… (a vault link keeps its own, which is a public contract), and a clause quoting what a wallet holds is cut and says so. Those bytes are unchanged in the signed entry — /ledger/43 serves it verbatim, and that is what the verifier hashes.

node scripts/verify_ledger.mjs https://think.ascendants.io

The head is at /ledger/head, this entry's raw JSON at /ledger/43, and the public key at /.well-known/thesis-terminal-pubkey.json.