Skip to main content
audit.domains
A domain appraisal you can check

ODVS conformance mark - the rules

Every conformance claim under this mark is SELF-ATTESTED today. There is no neutral organization, no steering group and no independent verifier yet to check or revoke one - those are pending owner decisions (a GitHub/Hugging Face org and a three-implementer steering group), not something this page can promise on their behalf. A self-attested claim means exactly what it says: the claimant ran the check below and reports what it printed.

What conformance requires

An implementation conforms to ODVS hash version 1 when it reproduces the appraisalHash of every one of the 18 published vectors, and refuses each of the 3 non-finite reject cases (NaN and plus or minus Infinity) rather than hashing them. Nothing else is required and nothing else is checked - a conforming implementation may compute the appraisal itself by any method; only the hash construction over its result is fixed.

How to claim it

  1. Run your implementation against the vector inputs (readable in the served ODVS verifier, which runs the same vectors in-browser) and compare every output hash to the table on the spec page.
  2. Confirm your implementation rejects all 3 non-finite reject cases rather than producing a hash for them.
  3. Publish what you checked and when, alongside your own hash version. This site’s own claim is checked the same way, by an independent reimplementation (scripts/odvs-conformance.mjs) that agrees with the application code (src/lib/standard/) rather than trusting either one alone.

There is no registry of claimants yet. A directory of who claims conformance, and a mark an independent party has actually checked, both wait on the neutral organization above.

What revokes a claim

A self-attested claim is only as current as its last check. Any of the following makes a prior claim stale, and the honest action is to re-run the check and update or withdraw it: hash version 1 is superseded by a later version, the published vectors change, or a re-run no longer reproduces a vector’s hash. Nobody polices this today - the mark relies on claimants checking their own work, which is exactly why it is called self-attested and not something a third party has signed off on.