{"fetched_at":"2026-04-27T09:00:17.646444+00:00","public_key_b64":"FsZECNfa4kCX2dI0Dc2NtD9DpV5By4EbSUAcQPFJ4HU=","total_claims":6,"verified_count":6,"score_pct":100,"claims":[{"claim_id":"data-region","label":"Donnees au Canada","description":"Le backend MonIAaMoi tourne en region ca-central-1 (Beauharnois Quebec, Google Cloud northamerica-northeast1).","method":"live-region","verified":true,"proof":{"region_label":"ca-central-1 (Beauharnois Quebec via OVHcloud)","cloud_provider":"Google Cloud Run","cloud_region":"northamerica-northeast1","country":"Canada","province":"Quebec"},"proof_hmac":"f853af835bb5a239ca63cd715e43a850e7599fb31963591d2df62ba941a4bcee","proof_ed25519_signature":"AZ0HjHgb3sOlQ3u1FHpQVvaoVwKSx3kTeKYKUNK09zP+eRM5XUNDA2JYzUaP27Vy5YdO10EnK8dvuNuQOFPQAg==","public_key_b64":"FsZECNfa4kCX2dI0Dc2NtD9DpV5By4EbSUAcQPFJ4HU=","verified_at":"2026-04-27T09:00:17.383426+00:00"},{"claim_id":"ots-calendars-active","label":"OTS Bitcoin calendars actifs","description":"Les 4 calendars opentimestamps utilises pour ancrer les preuves dans la blockchain Bitcoin sont reachables.","method":"tcp-probe","verified":true,"proof":{"calendars":[{"host":"alice.btc.calendar.opentimestamps.org","reachable":true},{"host":"bob.btc.calendar.opentimestamps.org","reachable":true},{"host":"finney.calendar.eternitywall.com","reachable":true},{"host":"btc.calendar.catallaxy.com","reachable":true}],"reachable_count":4,"total_count":4},"proof_hmac":"dfd3020f4e8e163e6e6af44c7b71e1b14cad7e7b375a4e02ce0b9cdb3a515068","proof_ed25519_signature":"Ig/eNkvF5nucdWqAB8fVj8rZ4pDczkBTKAFbVDSPRi8caC43VoQ+y5g1g4/GL/ZMv3eAtLxm/bp2OuzMyZXdDg==","public_key_b64":"FsZECNfa4kCX2dI0Dc2NtD9DpV5By4EbSUAcQPFJ4HU=","verified_at":"2026-04-27T09:00:17.526380+00:00"},{"claim_id":"aes-256-client-side","label":"AES-256-GCM cote client","description":"Le chiffrement AES-256-GCM s'effectue dans le navigateur via Web Crypto API. Cle non-extractable, jamais transmise. Code public.","method":"static-link","verified":true,"proof":{"source_url":"https://github.com/Syntria-ai/moniaamoi/blob/main/apps/moniaamoi/app/demo-souverainete/page.tsx","algorithm":"AES-256-GCM","implementation":"Web Crypto API (crypto.subtle.encrypt)","key_length_bits":256,"iv_length_bytes":12,"key_export_policy":"non-extractable (extractable=false)","client_code_excerpt":"const key = await crypto.subtle.generateKey({ name: 'AES-GCM', length: 256 }, false, ['encrypt']); const iv = crypto.getRandomValues(new Uint8Array(12)); const encrypted = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, key, encoded);"},"proof_hmac":"ee4414b58e02d5be75d7317956c029f4f23286c1d35215295b35bcdb4ebcead4","proof_ed25519_signature":"sC0RCEG/tAglmYl93NjxQqmt1OBnRyUBRsjSHpxlgmkDa/wpHnhPhlBDRKr5vrWdRWkV1u+qTh3nKnulu7LDBQ==","public_key_b64":"FsZECNfa4kCX2dI0Dc2NtD9DpV5By4EbSUAcQPFJ4HU=","verified_at":"2026-04-27T09:00:17.526519+00:00"},{"claim_id":"rls-coverage","label":"RLS Supabase active","description":"Pourcentage des tables Supabase publiques avec Row-Level Security activee (pg_policies). Calcul live via RPC.","method":"supabase-rls","verified":true,"proof":{"total_tables":287,"tables_with_rls":287,"coverage_pct":100.0,"source":"rpc(public_rls_coverage)"},"proof_hmac":"3b2a03aa97b38bc4047837ff3f610df9893ddef578e0cce0fed21d590598d5d3","proof_ed25519_signature":"no9kgrb1l55GMYQfv+L0gJ167nsQKTd/RgUejTa5bf7MWUvlmOVBTm0Kwf+4YIdg0irm8UGhvGx9UpIDKfXxCw==","public_key_b64":"FsZECNfa4kCX2dI0Dc2NtD9DpV5By4EbSUAcQPFJ4HU=","verified_at":"2026-04-27T09:00:17.593863+00:00"},{"claim_id":"coherence-score","label":"Score de coherence live","description":"Score 0-100 issu de 21 verifications structurelles (LOT 1.4 transparence). Recalcule a chaque appel.","method":"live-coherence","verified":true,"proof":{"score":72,"passed_count":15,"failed_count":6,"total_checks":21,"generated_at":"2026-04-27T09:00:17.628103+00:00","source":"app.services.coherence_audit.run_audit()"},"proof_hmac":"9e0bb94436c7eb4f32339b692b87c18a1b9b53955902df2b86a1b5a2fcb1d2c3","proof_ed25519_signature":"0Xn8MTV7Me5bmIMpwdRZo1PO4D3IoES4ZwSqGidmJgpR5Bq68doRcRdXFjI5gkuxiYm5eidGNOfzvjAu/skQDg==","public_key_b64":"FsZECNfa4kCX2dI0Dc2NtD9DpV5By4EbSUAcQPFJ4HU=","verified_at":"2026-04-27T09:00:17.628375+00:00"},{"claim_id":"tls-certificate-valid","label":"Certificat TLS valide","description":"Le certificat TLS de www.moniaamoi.com est valide, non expire, emis par une CA reconnue. Verification live via connexion SSL/TLS reelle au domaine.","method":"tls-probe","verified":true,"proof":{"host":"www.moniaamoi.com","tls_version":"TLSv1.3","cipher_name":"TLS_AES_128_GCM_SHA256","subject_cn":"www.moniaamoi.com","issuer_cn":"R12","issuer_org":"Let's Encrypt","not_before":"Mar 22 19:58:06 2026 GMT","not_after":"Jun 20 19:58:05 2026 GMT","days_remaining":54,"expired":false,"not_yet_valid":false,"renewal_threshold_days":14,"source":"ssl.SSLContext.wrap_socket().getpeercert()"},"proof_hmac":"c1ed0d80bcd0c8a2bca4980ca42986d15f36aea38f725ef6262ea6afaab84375","proof_ed25519_signature":"VSPU+Rm4uVjO3ZMyX60xnWq73oAWoMF6WO1Uiiw9YmIFPBIYtMgIQKvFSS1D+LNKknzyjJx5UiwyfZ585RfaCg==","public_key_b64":"FsZECNfa4kCX2dI0Dc2NtD9DpV5By4EbSUAcQPFJ4HU=","verified_at":"2026-04-27T09:00:17.646393+00:00"}]}