Transparency

A public, append-only audit surface: which worker identities the network knows, their assurance tier, and the signed canonical build. The trust root is a published key + hardware vendors — not "trust us". Back to docs.

Signed worker build

The official worker binaries are built reproducibly and their canonical hashes are signed by the release key. Verify a download matches the signed manifest:

Release signer (ed25519, base64):

wXFAVhfS9NXKV36g4TpHfqiu0p4svWknF7nb35hrg5E=

Signature over SHA256SUMS (/download/SHA256SUMS.sig):

SrFOJC3BCxY4LOass1Wr3EOf8Q0aedNTdUYAFRcF53/UkPjZu37X4DY/6Z0x8N+PnRUL8rGzcijFaRKEXHSrDQ==

Canonical hashes:

dee1e43282f443a913b0f0218a216f2253baa9fd91c19340bec17cae9090d780  dllm-worker-darwin-amd64
f0ce383df6f5e16202b945c9a2b33d490c72ffa30fde61fde7619027473c1d4d  dllm-worker-darwin-arm64
5a2bda2c06e6d8a585423fa79ba27a064912bbeba3ea1634a9425075a2379549  dllm-worker-linux-amd64
0210b1efcc45d2d50cdfd86a7cf6b90afeed57833319db9a6c642305ec4ad962  dllm-worker-linux-arm64
3ed109b4690f94d095994d8e84669539fe314fe9e44674313b2c7d510e037fec  dllm-worker-windows-amd64.exe

The signing key is held by the publisher today and migrates to a DAO-controlled key once ratified. A matching signature proves the bytes are the official, open build — the foundation the hardware-attestation tiers build on.

Worker identities

Every worker carries a persistent ed25519 identity (no account or personal info is shown here). Tier = hardware-attestation assurance: unverified (software only) → attested (genuine HW) → confidential (GPU TEE). Trust % = spot-check pass rate.