Donations ledger

Tyche Institute MTÜ studies signed, timestamped, offline-verifiable evidence. It would be odd to make that argument and then ask anyone to take our own finances on trust. This page publishes what the site recorded about donations received, in a form you can recompute yourself.

What this proves

Each version of the ledger is served with the SHA-256 digest of its own canonical form. Recomputing that digest tells you the bytes you were served are the bytes that were hashed. That is the whole of the guarantee.

What it does not prove

It does not prove the list is complete. The ledger is built from what our webhook recorded; a donation that never reached it was never recorded, and no digest can reveal an absence. It does not prove the money arrived, was kept, or was spent as described. And it is signed by nobody: this is an integrity check on a self-published file, not an audit.

The distance between what an institution recorded and what actually happened does not close because a hash was computed. That distance is the subject of the research programme, and it applies here as much as anywhere else.

The record

Check it yourself

The raw file is at /api/ledger. A small verifier that recomputes the digest is at /lab/donations-ledger/verify.mjs:

curl -sO https://tyche.institute/lab/donations-ledger/verify.mjs
node verify.mjs

Or do it without our code at all: fetch the JSON, remove the digest_sha256 field, sort every object's keys, and take the SHA-256 of the result.

Questions about a specific donation, including a request to have one removed from this record, go to [email protected]. Nothing here identifies a donor, but it is your gift and your call.