How our claims are checked

Facts on the re-verification watch

8 / 8

re-read at source, within budget

computed 2026-08-06 · 10 d budget · last read 2026-07-22

What this figure does not mean

A floor on attention, not a verification. A fact inside its budget has not been checked for truth — it is merely not yet overdue. The job reports freshness and nothing else, and it says so in its own output.

§3 Traction weekly downloads of @graneth/mcp-server api.npmjs.org 2026-08-06 10 d
§6 Competitive competitor adoption: Aikido Safe Chain weekly downloads api.npmjs.org 2026-08-06 10 d
§3 Traction public threat feed: confirmed vs community entries graneth.com 2026-08-04 10 d
§3 Traction the public threats-caught counters graneth.com 2026-08-05 10 d
§0 Supply-chain posture @graneth/mcp-server and @graneth/verify: latest version, licence, zero runtime deps registry.npmjs.org 2026-08-06 30 d
§5 Receipts the public attestation key endpoint answers HTTP 200 graneth.com 2026-07-22 30 d
§7b Subprocessors Anthropic does not train on API data (Commercial ToS §B) www.anthropic.com 2026-07-29 90 d
§7 Regulatory & market NIS2 transposition/fines and CRA dates, used as context only digital-strategy.ec.europa.eu 2026-07-22 90 d

What each guard reads — and what it cannot see

The rest of this page is our word

Every source on the board above is a public URL you can fetch without trusting us. Everything below is not: you cannot see our repository, our build or our history, so the guards described here are described by the people who wrote them. That is a weaker kind of evidence than a signed receipt, and it is labelled rather than dressed up.

the register

Every figure and phrase a public surface renders, against a written row with a source and a date.

cannot see See a false sentence that carries no figure and no listed phrase.
the copy sweep

Every copy module the design layer ships, in all three languages, for forbidden phrases, foreign script and untranslated text.

cannot see Judge whether a permitted sentence is true. It reads shape, not meaning.
the completeness obligation

The directory itself, failing if a copy module exists that no guard reads.

cannot see Exist before it was written. Until it did, the sweep's coverage was whatever somebody remembered.
the register mirror

The register's prose against the machine list, in both directions — a figure stated but not permitted, and a figure permitted but never stated.

cannot see Read a claim that is prose only. It compares numbers.
the decay job

Every watched fact's age against its budget, weekly, and prints what each source says right now.

cannot see Assert that anything is true. It asserts only that a source was re-read recently.

Claims we withdrew

Each row was stated in public and is no longer. They are kept rather than deleted: a register that shows only its surviving rows teaches nothing about the rows that were wrong.

§A1 2026-07-29

stated

A scan verdict was labelled with a word our own Terms deny in the same three languages — under a green shield. The badge and the legal document contradicted each other.

corrected to

The label names the state instead: Passed / Bestanden / Prošlo. The word was removed from the dictionary, so the copy guard now reddens if it returns.

found by A content audit, reading the badge against the Terms clause that disclaims it.
§2 2026-08-04

stated

The benchmark's seed list asserted that every name in it had been verified as non-existent. Sixteen of them resolve on the live registries, each published before the date we recorded it.

corrected to

Re-measured with the sixteen removed. Precision fell to 98.7%, and the lower figure is what the site states.

found by Re-running the dataset against the live registries instead of trusting the file.
§7a 2026-08-06

stated

Two industry rates were quoted as the share of package NAMES that models invent. Both measure non-existent VERSIONS of real packages — roughly five times the name rate, and a different phenomenon: a hallucinated version cannot be registered by an attacker.

corrected to

Names and versions are separate rows with separate sources, and the peer-reviewed name rate is cited as such.

found by Reading the primary sources before a draft post shipped, rather than after.
§8 2026-08-06

stated

A paid screen stated the triage model's judgment as an established outcome, in all three languages, for as long as the Deep tier has existed. The findings it discards are not retained, so nothing could be checked.

corrected to

The copy names the model as the agent of a judgment and says what it sets aside is not kept. A stem-class rule now fails the build on the construction, not on a list of spellings.

found by The ban list did not catch it — every instance was one inflection away, and the positive obligation prescribed to replace the list was satisfied by the offending sentence too.
§3 · §6 2026-08-06

stated

A weekly download count — ours and a competitor's — was registered as a fixed figure. It was three different numbers in three weeks, because the window slides. The register recorded one value while its machine mirror permitted an older one.

corrected to

No downloads literal is permitted at all. The figure may be read from its source at request time and shown with the window it came from, or not shown.

found by The decay job printed the live value beside the stored one.

The withdrawn wording is described here, not reprinted. The list of phrases this site may not state does not exempt this page — an exception is one exact line, never a page — so the guard binds its own confession too.