Powered by Council of AI · white-label embed
Embed a signed measurement anyone can re-verify.
Drop an independently signed Council of AI measurement into your own site — a live-status badge and a self-verifying card. The signed verdict travels with its own bytes: your visitors recompute the hash and check the Ed25519 signature in their own browser, against the published key, without trusting you or us. Verification is free forever. That is the n-site spray: your origin, our 3kb glass, their visitors checking the same bytes. We do not fork your stack into CSOAI-ORG.
What this is — and is not
- It is a measurement and attestation — a signed record of a measured run on a frozen split. We measure; we do not certify.
- It is not a certification, conformity mark, or accreditation. A determination of compliance stays with regulators and authorities, never with a badge.
- The embedder cannot alter the signed verdict: any edit to the card's bytes breaks the signature, and the widget shows it red.
- Regulators and the public verify for free, forever — no account, no key, no fee.
0 · One script tag
Drop this in the body, where the badge should appear — not in <head>. It fetches the live board and paints the board's own public count. Partner colour is yours; the evidence is not. If the board cannot be read it says unavailable — it never fabricates a number. If the tag lands in head, the script mounts on the body.
<script src="https://councilof.ai/embed.js"
data-org="Your organisation" data-brand="#0B3D91" data-size="md"></script>Machine contract: GET /api/embed · human kit at /badge
1 · The live-status badge
A shields-style SVG that states one axis's real status from the live board: three honest states — measured, untested, or unmeasured — and the real bank size n. It never shows a number that is not on the board. Omit ?axis for the overall count.
Live previews
(If the board changes, every embedded badge changes with it — the SVG is generated per request from the same data /api/gspc serves.)
Copy-paste — one axis
<a href="https://councilof.ai/gspc-verify"><img src="https://councilof.ai/api/badge?axis=governance" alt="governance — measured by Council of AI" height="20"></a>Copy-paste — overall count
<a href="https://councilof.ai/gspc-verify"><img src="https://councilof.ai/api/badge" alt="Council of AI — measured axis" height="20"></a>2 · The self-verifying card
A small, self-contained widget your visitors can iframe. It fetches a signed measurement card and does real Ed25519 verification in their browser: it recomputes the content hash from the card's own bytes and checks the signature against the published key. A green Signature verified for this record establishes integrity under the identified key — the bytes are unaltered and were signed by that key — and any tampering shows red. It does not establish that the measurement is valid, that the record is included in the public root, when it was made, or that the subject is safe, accurate or legally conformant; each of those is a separate check with its own outcome. Nothing is faked and nothing is sent to a server.
Live widget
Copy-paste
<iframe src="https://councilof.ai/embed/verify?card=/signals/cross-border-card.signed.json" width="420" height="340" loading="lazy" style="border:0;max-width:100%" title="Powered by Council of AI — verify a signed measurement card"></iframe>Point ?card at any same-origin signed card JSON (the envelope carries content_id + an Ed25519 signature). Prefer the extension-less /embed/verify path for a clean iframe URL; the same widget also serves directly at /embed/verify.html.
Why a visitor can trust it without trusting you
- The card commits to its own contents:
content_idis the SHA-256 of the card's canonical bytes. The widget recomputes it locally — an edit anywhere changes the hash. - The
content_idis signed with Ed25519. The widget verifies the signature against the key on the card and cross-checks that key against the published Council of AI signer. - None of this contacts us. You could host the card and the widget yourself; the maths is the same. That is what "self-verifying" means.
