PRML manifest registry

Lock the claim. Then run.

A public, content-addressed index of pre-registered ML evaluation claims. Paste your PRML manifest, get a SHA-256-anchored permalink and a README badge. No account required. Manifests are stored content-addressed by hash; receipts verify offline without the registry.

◆ Tamper Strip · live
0 / 64 nibbles changed↻ reset

same bytes → same hash, forever. that is the entire spec.

▸ First time? 60-second walkthrough

◆ 1 · What you need

A YAML file with 9 fields. Copy the template below into the form as a starting point, then replace each value with yours.

version: "prml/0.1"
claim_id: "01900000-0000-7000-8000-000000000000"
created_at: "2026-05-17T12:00:00Z"
metric: "accuracy"
comparator: ">="
threshold: 0.85
dataset:
  id: "imagenet-val-2012"
  hash: "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
seed: 42
producer:
  id: "your-org.com"

◆ 2 · What happens when you submit

The server canonicalizes the YAML (PRML §3), computes the SHA-256 of those bytes, stores the manifest publicly, and returns a permalink at /<hash> plus a README badge.

◆ 3 · What to do with the hash

  • Add the README badge to your repo.
  • Cite the permalink in papers and audit reports.
  • Use prml-verify-action in CI to gate future merges.
  • Anyone with any of the four reference implementations can verify it offline.

◆ 4 · What is locked

Any field change after submission produces a different hash. That's the entire mechanism. Pre-registration is the act of submitting before you run the eval — the hash binds the threshold.

Public by design — and once a hash is countersigned by the external timestamp authority and transparency log, those countersignatures cannot be recalled, by you or by us. No personal data in any field: identify as an organisation or pseudonym. privacy · terms

Manifest stays public. Valid PRML gets a "PRML locked" badge; any other YAML is committed as an explicitly labeled raw hash anchor. Spec: spec.falsify.dev/v0.1 · Verify a hash without committing →

Receipts are Ed25519-signed (hash + timestamp, key at /pubkey) and countersigned by an independent RFC 3161 timestamp authority (timestamp.sigstore.dev) since 2026-07-12, so the time claim is verifiable offline against a third party. New commits are also mirrored to Sigstore's public Rekor transparency log (inclusion proof on each permalink). A receipt proves the bar was locked, never the result.

PRML v0.2 is a frozen RFC (comment window closed 2026-05-22) — spec.falsify.dev/v0.2-rfc. Editor: spec.falsify.dev/editor.

◆ Recent submissions

HashTime (UTC)Handle
6f159a03b81033c5…2026-10-13 12:20:00 UTC@falsify
fbec1be1aa3af8c4…2026-09-23 11:55:30 UTC
86f76e446db76bab…2026-09-23 11:52:20 UTC
74415372626b6e60…2026-09-23 11:51:41 UTC
86c224c760c7e156…2026-09-23 11:51:37 UTC
2319707056303917…2026-09-23 11:51:21 UTC
14bc38f2bd355d86…2026-09-23 11:51:18 UTC
da55fc4ac5cc572c…2026-09-23 11:50:42 UTC
464df2bee6b479b7…2026-09-23 11:50:27 UTC
5ce3c9c3484d8db1…2026-09-23 11:50:23 UTC

◆ Related