Skip to main content
AVOID.NET
← avoid.net

Verify a decision

Every moderation decision on AVOID.NET is anchored to the Solana blockchain. You don't have to trust us — you can verify cryptographically that we committed to a verdict at a specific moment and have not rewritten it.

How verification works

  1. We commit. When a moderator accepts/rejects a submission, we serialize the decision into deterministic UTF-8 bytes (payload_canonical_string), hash it with SHA-256, encode the digest as base58, and write it to Solana inside an SPL Memo v2 transaction.
  2. We store the bytes. The exact bytes we hashed are stored alongside the decision in our database. Anyone can read them and recompute the hash in any language.
  3. You compare three values. Database hash, your independently-recomputed hash, and the hash inside the on-chain memo. If all three match, the decision is authentic and timestamped.
The on-chain memo format is AVOID.NET|v1|h:<b58-sha256>|d:<id>|t:<iso>

Find a signature on any investigation page's decision log, or run python -m src.verify_decision --signature <sig> for a CLI check.

Sequence
#3
Score
5240 (-12)
Cluster
mainnet-beta
Slot
443523442
Off-chain at
2026-08-27T03:57:08.434Z
Anchored at
Block time

Independent verification

1. Database (off-chain)
6apQQcFsm1EXisFvtK7BdBnVWXjwvUrr7FBycGCs9ZtC
2. Recomputed (your browser)
computing…
3. On-chain (Solana memo)
fetching…
Canonical bytes hashed (1760 chars)
{"actor":"judge","decided_at":"2026-08-27T03:57:08.164Z","decision":"review_revise","investigation_id":"26425c6f-e476-4181-87a2-e94d3148db6b","new_score":40,"page_slug":"phala-cloud-june-2026-api-breach","prev_score":52,"reason":"The review confirms 19 of 24 factual claims outright, including the incident timeline, the Offchain/Onchain KMS scope distinction, the encryption architecture, remediation steps, and independently-corroborated background facts about prior audits and tokenomics (claim_findings[0]-[9], [11]-[13], [15], [17], [19]-[23]). However, claim_findings[10] found that the page's 'Severity Context' section overstates the incident: it asserts as fact that an attacker 'was able to exfiltrate' secrets by 'bypassing the TEE protection,' when Phala's own disclosure only says a script 'may have accessed' the data and frames the flaw as an API authorization issue rather than a failure of the platform's confidential-computing guarantees — a materially graver claim about the vendor than the source supports, and one the page's own Limitations section (claim_findings[23]) already correctly hedges, producing an internal contradiction. A secondary date discrepancy in the zkSecurity audit timeline (claim_findings[18]) looks like a known formatting default rather than a substantive error, and one audit citation is dead though the underlying fact was confirmed elsewhere (claim_findings[16]). With disputed_pct at 12.5%, the page's core factual account is solid, but the overstated and self-contradictory severity framing is a genuine accuracy problem that calls for correction rather than denial.","score_delta":-12,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}