# AOTrust — Cryptographic Proof-of-Existence Service
# llms.txt — AI crawler directives (https://llmstxt.org)

name: AOTrust
description: Cryptographic proof that a digital artifact existed at a specific time. $0.01 per PDR. Blockchain-anchored.
domain: https://docs.aotrust.link
api_base: https://api.aotrust.link

## Primary endpoints
> POST /notarize — Issue a PDR. Send work_hash, get HTTP 402 with payment details, sign EIP-3009, resend with x-payment header.
> GET /v1/pdr/verify/{pdr_b64} — Verify a PDR. Public, no auth required.
> GET /v1/notarize/{job_id}/status — Check notarization status.
> POST /v1/shield/free — FREE notarization (no wallet, no key). Send {"work_hash":"<sha256 hex>"} → 200 pdr_b64 + shield_id. Quota 5/24h per IP.
> POST /v1/verify/hash — FREE registry check by SHA-256: first registration date (ISO), record id, registration count, anchor status; no PII, 30/h per IP.
> POST /v1/verify/file — same check for raw bytes (application/octet-stream, <=32 MB), streamed.
> Canonical semantics: the first registration of a fingerprint is fixed; later proofs are marked reaffirmation (free, quota-free) and never outrank the first.
> Quota exhausted (HTTP 429)? The same body works at POST /notarize with an x402 payment header ($0.01 USDC, no quota). 429 responses carry an `upgrade` block naming the paid paths (receipt $0.01, evidence bundle $0.02, signed time $0.002). Free and paid receipts are anchored identically (hourly cumulative NEAR root, RFC 9162 inclusion proof verifiable offline); the paid tier only removes the free-tier quota. Docs: https://docs.aotrust.link/#bundle
> POST /v1/notarize — paid via partner API key (X-Api-Key). No key? Use POST /notarize (x402 payment, no key) or POST /v1/shield/free (free tier).
> POST /v1/attest/time — Signed time attestation ($0.002, x402). Send {"payload_hash":"<sha256 hex>"} → Ed25519 timestamp (AOT-TS1) + leaf in the cumulative anchor log + inclusion proof.

## Quick example
```
# Get payment details
curl -X POST https://api.aotrust.link/notarize \
  -H "Content-Type: application/json" \
  -d '{"work_hash":"YOUR_SHA256_HEX"}'
# → HTTP 402 with payTo, asset, amount, network

# Pay and get PDR
curl -X POST https://api.aotrust.link/notarize \
  -H "Content-Type: application/json" \
  -H "x-payment: YOUR_SIGNED_EIP3009" \
  -d '{"work_hash":"YOUR_SHA256_HEX"}'
# → HTTP 200 with pdr_b64 (239 bytes)
```

## Documentation
> https://docs.aotrust.link — Full documentation
> https://docs.aotrust.link/patched.html — "Prove you patched it": verifiable security receipts (patch/rotate/scan evidence), NIS2/DORA/insurance context
> https://docs.aotrust.link/transparency.html — Public append-only Merkle log: latest anchor, in-browser RFC 9162 inclusion & consistency verification
> https://docs.aotrust.link/#bundle — How to buy an evidence bundle in 3 steps: 402 → EIP-3009 x-payment → earliest issuance + RFC 9162 inclusion path ($0.02 USDC, Base)
> https://docs.aotrust.link/assets/transparency_stats.json — machine-readable daily snapshot: protocol epochs, operator identities, rail/source aggregates, tree size, last anchor (no client identifiers)
> https://docs.aotrust.link/bilateral.html — Bilateral receipt spec (v0x04)
> https://github.com/GitSerge-crypto/aotrust-skills — SKILL.md for AI agents
> https://verify.aotrust.link — Verify any PDR

## Pricing
> GET /menu — live tool list with prices (one request = the whole price list)
> Flat $0.01 per PDR. x402 USDC on Base (Solana via MCP). No account needed.