PacStac

Learn

PacStac Stewardship

Proofs

Follow the lifecycle of a PacStac proof

Proofs link a wallet to a live domain. This page breaks down what happens after you submit a binding, when attestations refresh, and how partners should listen for changes.

Lifecycle at a glance

Publish

PacStac ingests your domain + wallet binding and immediately checks for the TXT or HTTP proof you selected. Evidence is captured for every run.

Verify

Verifier nodes query multiple resolvers, honor authoritative TTLs, and compare normalized payloads. Success issues a signed attestation.

Refresh

Proofs are re-checked on a schedule. Missed checks trigger retries, and stale evidence expires according to the attestation TTL you select.

Revoke

Explicit revocations (or repeated failures) invalidate the current attestation. Consumers receive webhook events and API responses reflecting the state.

Where to go next

Verification Playbook

End-to-end walkthrough of how PacStac evaluates proofs, interprets statuses, and exposes evidence.

Explore

Developer Hub

API reference, webhook schema, and signature verification helpers for consuming attestations safely.

Explore

Domain Proof Handbook

Long-form context on DNS, TXT, and HTTP proofs to help you debug and communicate with stakeholders.

Explore