Warrant canary.
A warrant canary is a statement we can make only while it is true. If a month passes without a new signed statement, something may have happened that we are not allowed to talk about.
The first canary will be published on launch day and renewed monthly. Until then this page shows the exact text we will sign.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Pevnost warrant canary
Date: (date of signing)
Valid until: (one month after the date of signing)
As of the date above, Jan Faltýsek, operator of Pevnost, has not:
- received any order compelling him to log user activity;
- received any order to install monitoring software or hardware
on the Pevnost infrastructure;
- handed over private keys, signing keys or server images to
any third party;
- been subject to any gag order, national security letter or
any order carrying a duty of confidentiality, including a
data-preservation order under section 7b of the Czech Code of
Criminal Procedure or a European Preservation Order under
Regulation (EU) 2023/1543.
Servers in service: (number). Servers seized: 0.
Latest Bitcoin block: (height)
Hash: (block hash)
Jan Faltýsek, operator
-----BEGIN PGP SIGNATURE-----
(signature)
-----END PGP SIGNATURE-----
How to verify
- Fetch
/canary.txt.ascand our public key from this site and from an independent mirror (the key is also on keys.openpgp.org). - Check the signature:
gpg --verify canary.txt.asc. - Check that the Bitcoin block hash really is the block at that height and that the date is recent. The block proves the statement was not written in advance.
A missed renewal can also have a mundane cause: illness, travel, one person running the service. Before concluding anything, check the transparency page and write to us; we will say what we can.
The canary is written and signed by hand, never by a script. A canary that is renewed automatically proves nothing.