Architectural Commitment 07 · Cryptographic Verification

Don't trust us. Verify us.

Every methodology version, model snapshot, and dataset batch Avena ships is fingerprinted with SHA-256. Each day, all fingerprints are rolled into a Merkle root and deposited to Zenodo, where the deposit receives an RFC 3161 trusted timestamp from CERN's infrastructure. The cryptographic guarantee is the same as committing to an Ethereum L2 — without the institutional eye-rolls.

Recent daily Merkle roots
DateMerkle rootFingerprintsZenodo
2026-10-13701775daa13635d3a0c8e56bcfb5ad1bab04c012002470f781da43a3dca171833pending deposit
2026-10-124b6b3c660f4ce703594925ebd048793117f43a65298490b7a5e114b7d7763cd03pending deposit
2026-10-11366088183b8f4fda719a27522e581c26e0cb5783d5ff87d3b799c7d38fd9b3973pending deposit
2026-10-104dd00d29f96301fd19674f352ed34d26c500298411ba0d212ceb36c0e1aef7be3pending deposit
2026-10-09a4db0f4d6251112c97df80e86b96c69a247c28f986b86ebe1386731a395c61253pending deposit
2026-10-08ac03538614ca5de7e38bf6614cb6634020f065a578ec97719bb5c949de3d24ab3pending deposit
2026-10-074371af3b84c00c44ce49397d3c132d3f04de270dad5517fa801ae37b9f66e0dc3pending deposit
2026-10-064579270e2764c014fc5f5605d663803732cfa6cd5c4fa7a062d4e1459d0ae3e43pending deposit
2026-10-053a48b5d85b1555f141231c44900e4ac105965e857117dffb40ddfdc57ed31fde3pending deposit
2026-10-04baef77107a28aacce4eac982f2aaa8628c256556c6d8754ea1731cc1bd61cebb3pending deposit
2026-10-0331d60a76fe18dfcc68794b241ccc52d770029c7e83b18a88e0070754203387d93pending deposit
2026-10-02689ba625f778df91f068e4e28188c619128d281a423673a14c9c09e1aae3d63b3pending deposit
2026-10-0180e43f4a0f90d9d5ca9fd5910d87514fb4321667da64beee200778548df9c22a3pending deposit
2026-09-305f9ebadcb2fa7d7deaf95282855547cada609551ff3cd59a165bee4734f9e8a63pending deposit
2026-09-29ca40b51cb06e14a0db73bc65b29847f1e5ac2eed4da3345957dadd87c8b6234e3pending deposit
Why not blockchain

An Ethereum L2 Merkle commit gives you exactly the same cryptographic guarantee as a Zenodo deposit with RFC 3161 timestamping. The difference is the institutional read: a CoStar M&A analyst sees "Zenodo / CERN" and trusts the timestamp; the same analyst sees "Ethereum L2" and the credibility drops. We picked the verification stack that works in a Moody's diligence meeting.