Artifact identity
The reviewer can calculate the supplied artifact hash and compare it with the SHA-512 manifest and witness record.
Evidence. Verification. Confidence.
Attessia-operated evidence witnessing for eligible delivery artifacts.
You provide a customer-ready Grammar C pack or other agreed delivery artifact. Attessia performs the witness process internally and returns a customer-facing signed witness pack: a SHA-512 manifest set, post-quantum signature evidence, verification notes and delivery records that let the recipient check the artifact identity later without receiving Attessia systems, sensitive signing material or runtime access.
£995
PQC Witness Uplift is a managed attestation service that turns an eligible delivery artifact into a signed, customer-facing witness pack. The delivered evidence bundle is not access to Attessia infrastructure; it is a portable evidence bundle the customer can retain, inspect and re-verify.
The pack is designed to prove that the artifact later presented for review matches the artifact Attessia witnessed, and that the recorded signature evidence validates against the supplied public verification material. It does not claim permanent immunity against every future cryptanalytic discovery.
What the customer receives
- A signed SHA-512 manifest set recording filenames, sizes, hashes and release identity.
- Falcon-512 and ML-DSA-65 signature evidence where those algorithms are selected for the witness profile.
- Public verification metadata, key fingerprints or public materials needed to check the supplied signatures.
- A verification certificate, witness notes, delivery receipt and re-check instructions for later audit or customer handover.
Verification result
What the witness pack lets a reviewer prove.
Signature evidence
The reviewer can check the detached signature records and algorithm metadata, including Falcon-512 and ML-DSA-65 evidence where included in the witness profile.
Delivery continuity
The reviewer can connect the witnessed artifact, delivery receipt, customer-facing certificate and verification notes into one retained handover record.
Boundary
Managed witness output, not customer runtime access.
You supply the evidence artifact
The service starts from a customer-ready Grammar C pack or other agreed release, delivery or installer evidence artifact.
Attessia performs the witness work internally
Customers receive the attestation output, verification notes, hashes and delivery evidence, not the underlying Attessia stack.
No transfer of PQC Core or signing systems
PQC Witness Uplift does not provide PQC Core, customer signing-system access, runtime access, source access or Attessia infrastructure access.