OpenChainGraph Suite · ART-502 · Human Accountability · Non-Node Subject

Attested Artifact Subject Binder

Most reporting artifacts have no chain. The thing a firm actually gets audited on is a spreadsheet, a reconciliation export, or a report builder's PDF, produced by a tool that is not part of this graph. This binder computes the OpenChainGraph §27.4 subject identifier for exactly that case, so a signed preparer, reviewer and approver trail can attach to an artifact we did not compute.

The identifier is SHA-256 over the JCS canonicalisation of exactly three members: tool_ref, inputs_digest and artifact. There is no fourth member. No wall clock, no run identifier and no host or session state enters it, so anyone holding the echoed preimage recomputes the same value offline without ever running the producer. manifest_digest inside tool_ref is the chainless counterpart of the §17 kernel digest: it is what makes the producer tamper-evident, not merely its output.

Three-member preimage Offline recomputable Producer pinning
What this does not tell you

An attested-artifact subject carries no §18 compute proof and no §16 or §17 re-execution claim. It evidences producer pinning, input binding and content integrity. It never evidences that the producer's arithmetic is correct.

Because no replay was attempted, the exported artifact omits replay_verified entirely rather than setting it false. Omission is the honest encoding, since false would read as a replay that was attempted and disagreed.

A digest binds bytes to a claim between parties who already hold both, which is what makes it useful to a counterparty in a dispute. It is not a claim of regulator acceptance, submittability, or admissibility, and an approval record over this subject evidences that a human acted and nothing more.

🔒 All binding runs locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
⚠ Digest strings are hashed verbatim as you declare them and are never rewritten. A malformed digest is reported rather than silently normalised, because normalising two spellings onto one subject identifier would destroy the tamper-evidence this class exists to provide.
Producer reference (tool_ref)
Producer inputs
Sealed output (artifact)
Subject identifier (§27.4)

This is the value every §27 approval record over this artifact carries as its subject_hash.

The three-member preimage, echoed for offline recomputation


      
Findings

      


      
Execution Hash (SHA-256)

      

      

        
        
        
      

      
    

  


  

    
Related

    
Implements the §27.4 non-node gate subject described in the OpenChainGraph specification. The subject identifier it computes is what a separately signed §27 approval record names, and what a §27.6 evidence bundle aggregates the accountability trail against.

  


  
  







  

    
Ask your agent

    
  

  
Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.

  
Run the AINumbers MCP tool `bind_attested_subject`. Task: Compute the SPEC.md section 27.4 attested-artifact subject identifier for the sealed output of a pinned non-OCG producer: a spreadsheet, a reconciliation export, a report builder's PDF, anything with a content-addressed manifest but no kernel, no node and no chain.
Call it with arguments: {"policy_parameters":{"tool_ref":{"tool_id":"acme-safeguarding-recon","tool_version":"4.2.0","entry":"buildClientMoneyRecon","manifest_digest":"sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"},"producer_inputs":{"as_of":"2026-06-30","ledger_ref":"LEDGER-SYNTH-0001","accounts":["ACC-SYNTH-1","ACC-SYNTH-2"]},"artifact":{"content_type":"application/pdf","content_digest":"sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"}}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-502-bind-attested-subject.html#p=v1.H4sIAAAAAAAA_wHBAT7-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