glamsterdam-devnet-7

a thin, self-verifying block explorer — no origin, no database

This page is a Cloudflare Worker bound to an R2 bucket. It stores no chain data. Every request is served by a byte-range read of a content-addressed artifact directly from object storage, and every response re-derives its own consensus commitment (keccak of the block header, of the tx envelope, of the EIP-7928 block access list) before it is returned. The explorer is a view over the bucket, not a service.

Routes

• /stats — chain + lattice summary
• /block/7264, /block/12431, /block/17599 — human-readable block pages (header, tx list, ✓verified). Append ?raw=1 for the raw self-certifying bytes.
• /tx/<0xhash> — POD-index lookup, ≤2 R2 GETs, confirm-on-read (open a block page and click a tx)
• /changeset/7264 — the self-certifying EIP-7928 BAL (per-account change counts)
• /slot/<s> — the ePBS slot view: slot → EL block join, the 2-axis anchor, the PTC verdict with vote counts — including honest EL-empty slot pages (a post-ePBS state that didn't exist before: canonical beacon slot, no EL block)
• /address/<0xaddr> — balance history from the compiled balance tier: each row is a BAL final post-value (exact from that block until the next row); the newest row is re-verified against the content-addressed BAL on every request. Try the fee recipient on any block page.
• /logs/<0xaddr>[?topic0=0x…] — log search over the compiled log tier (36-B POD rows from the walker-certified receipts; Rust binary search; newest hit re-read from the verbatim receipt on every request)
• /head — the live head plane: blocks above finality served with honest unsafe/safe anchors and no-store; the same /block/<n> URL graduates to the immutable archive as finality passes it (the seam)
• /verify/<n> — verify a block in your own browser: the page fetches the raw bytes + the reference reader wasm and recomputes every hash client-side
• POST /rpc — the eth_* JSON-RPC surface over the same verified reads: getBlockByNumber/Hash, getTransactionByHash/Receipt, getBalance (exact at any witnessed block — the balance IS the BAL post-value), getLogs (block-range seeks via the compacted log index), feeHistory computed from certified bundle bytes at any archive range, chainId, blockNumber; state + compute at ANY archived block (eth_call, estimateGas, getStorageAt, getCode, getTransactionCount) served from BAL-assembled witnesses via the execution origin; head-window calls proxy to the live head plane — honestly windowed
• MCP server — AI-agent access with verifiable citations (api-spec §10): fourteen tools (incl. historical eth_call from BAL witnesses, cursored log/token history) whose every answer embeds a citation — capsule URL, anchor, the threshold-keyset trust roots, grade (verifiable-offline / verified-witness-execution / live-unverified / honestly-refused, the I14 separation made structural). An answer an AI relays can be checked by anyone, offline
• /postings/<0xaddr> — the C1 ordinal tier, live: address → first-seen ordinal → one ranged read of its varint activity run (measured 4.66 B/row vs 27 raw-keyed — the thesis' ordinal-compression claim on the wire); counterparties + selectors resolve through append-only books
• /status — live verdicts of the standing instruments (compile lag, signing, finality proof, serving audit, execution watch)
• /capsule/<n>[?tx=i] — downloadable offline proof: one file containing the verbatim frame + threshold-signed manifest + transparency log; verifies with no network against the pinned 2-of-3 keyset
• /blob/<0x01…> — blob custody: EIP-4844 blob bytes by versioned hash (reconstructed from PeerDAS data columns, KZG-verified at capture, address re-derived on every read) — data the CL forgets after ~27 h, kept forever
• /finality — the finality proof: "EL block N is finalized", real BLS sync-committee verification from one pinned trust anchor (the LC endpoints are dead on gloas — rebuilt from consensus primitives)
• /health

Don't trust this site — verify it yourself

Download the verification kit (sha256, ~400 KB). It contains the reference reader (wasm), the capsule verifier, the BLS finality verifier (prebuilt + source), and the two pinned trust roots. tar xzf kit.tar.gz && bash kit/verify_all.sh fetches a fresh capsule + finality proof and verifies both with no trust in this site — proven to run in a network-isolated container. 25 checks: keccak, blake3 integrity tree, ed25519 signatures, transparency-log chain, and real BLS sync-committee verification.

Signed manifests + transparency log

Every bundle manifest is ed25519-signed and recorded in an append-only, hash-chained transparency log (both on the bucket, under sign/). This Worker verifies the signed log head, the full chain, and each manifest's signature + log membership against a pubkey pinned in its code on every model load — a bucket compromise cannot silently substitute a different lattice. Per-block status: the X-Manifest-Signed header and the badge on block pages; fleet status in /stats.

The anchor, on every response

Data responses carry the 2-axis anchor (X-Anchor-Consensus × X-Anchor-Payload): everything served here is finalized × included — the compile window is bounded at the CL finality checkpoint, and each block came off the canonical EL chain. Block pages additionally show the slot's PTC verdict (timely / repudiated / no_quorum / unjudged, with vote counts against the absolute 256-of-512 quorum) — consensus metadata that never gates EL inclusion: a repudiated payload is still canonical history if the next builder built on it.