Learn
PacStac Stewardship
Start with the overview, then dive into domain onboarding, proof maintenance, or the full handbook. Each section links to deeper guides, reference material, and the tooling operators rely on every day.
Frequently Asked Questions
Find answers to common questions about PacStac, domain verification, and STAC tokens.
PacStac is a deterministic proof-of-stewardship system that issues verifiable domain proofs via DNS TXT records or /.well-known challenges. It provides automated liveness checks and secure attestations without requiring captchas or screenshots.
PacStac is NOT:
- •a blockchain
- •a wallet
- •a P2P network
- •a contract indexer
- •a token bridge
PacStac treats DNS and /.well-known as separate namespace surfaces. For DNS, you publish TXT entries containing pacstac_msg and pacstac_verify. For /.well-known, you serve a JSON file at 'https://<your-domain>/.well-known/pacstac_<your-domain>.json' containing domain, pacstac_msg, and pacstac_verify.
In addition to Domains, /.well-known, and ENS, PacStac supports other namespaces for social, developer, agentic, publishing, research, and audio provenance proofs. Examples include GitHub, GitLab, NPM, PyPI, X, LinkedIn, YouTube, Farcaster, ORCID, OpenClaw agents, and SonoSig audio claims.
PacStac can associate media claims with the wallet that signed or registered them, then connect that wallet to verified domains, ENS names, social profiles, developer accounts, and other namespaces. This lets a song, video, agent, or other media asset inherit stronger trust context from multiple verified surfaces instead of relying on one isolated proof.
Bindings are automatically checked every 24 hours (with jitter) or sooner if the DNS TTL expires. The system queries at least three resolvers and requires a quorum of ≥2 to ensure reliability.
If verification fails, the system follows a graduated response: PASS for valid TXT with matching wallet, SOFT_FAIL for transient or stale well-known endpoints, FAIL for missing TXT after retries or wallet mismatch, and REVOKE after repeated failures.
Getting started is easy:
- Connect your wallet and sign in
- Navigate to the Domains, .well-known, or ENS section
- Add your namespace and follow the verification instructions
- Monitor your bindings from the Dashboard
Still have questions?
Can't find what you're looking for? Check out our documentation or get in touch.