Link 04 · Trust Gateway

AI cannot invent your price.

Every commercial answer is cryptographically signed with your key and publicly verifiable by anyone, for free, right now. If anyone tampers with the data, the system automatically blocks the answer. Math, not promises.

The problem

When AI gets your price wrong, who is liable?

ChatGPT, Perplexity and Gemini invent prices, discounts and stock with full confidence. The customer believes the answer — and holds you to it. Trust Gateway makes the error mathematically impossible.

0
unsigned answers allowed. AI can only state what you have authorized.
100%
of answers publicly verifiable, by anyone, no account needed.
ms
time to revoke a compromised key (JWKS).
How it works

Signed by you. Verified by anyone.

01

You sign the commercial data

Prices, stock, policies — all carry your Ed25519 digital signature. You are the single source of truth.

02

AI cites only what is signed

Every commercial answer must carry a valid signature. Tampered or invented data is blocked automatically.

03

Anyone can verify

The public key is open (JWKS). A customer, auditor or regulator verifies for free — no need to take our word for it.

Capabilities

Zero-Trust infrastructure, without the jargon.

🔏

Ed25519 signature

Modern cryptographic standard. Every commercial answer is cryptographically bound to your data.

🔑

Public JWKS

Public keys exposed at /.well-known/jwks.json. Independent verification, no authentication needed.

⚡

Millisecond revocation

Compromised key? Revoke it instantly and every answer signed with it becomes invalid on the spot.

🛡️

Tamper blocking

Prompt injection, altered data, impersonation — the system automatically rejects anything not correctly signed.

⚖️

EU AI Act ready

Traceability and verifiable data provenance — exactly what European AI commerce regulation demands.

📋

Full audit trail

Every citation, signature and verification is logged and auditable. No need to trust us — you can prove it.

Proof, not promises

Verify it yourself, now.

The JWKS endpoint is public and live. Any developer, auditor or customer can independently confirm an answer is authentic.

# GET /.well-known/jwks.json — public, no auth
{
  "keys": [{
    "kty": "OKP", "crv": "Ed25519",
    "kid": "catyai-akl-v2-2026",
    "use": "sig"
  }]}

# Any commercial answer:
signature ......... valid ✓
record_exists ..... yes ✓
temporal_valid .... yes ✓
jurisdiction ...... EU · GDPR ✓
Where it fits in the chain

Trust Gateway protects every link.

The Widget answers with signed data, GEO Gateway publishes a signed catalog, the Marketplace attributes proven transactions. Trust is the cryptographic glue of the entire chain.

Frequently asked questions
What does "cryptographically signed" mean?

Every commercial answer (price, stock, policy) gets an Ed25519 digital signature generated with your private key. Anyone holding your public key can mathematically confirm the answer comes from you and was not altered.

Why is this better than "trusting the platform"?

Because you do not have to trust us. Verification is independent and free — a third party can confirm authenticity without any access to our systems. It is the difference between "we promised" and "here is the mathematical proof".

What happens if someone tampers with the data?

The signature no longer matches, and the system automatically blocks the answer. AI cannot cite unsigned or altered data — it rejects it before it ever reaches the customer.

Do I need technical skills?

No. Signing and verification are automatic, built into the CatyAI infrastructure. You manage your catalog as usual — we handle the cryptography.

How does this help with the EU AI Act?

European regulation requires traceability and transparency for commercial AI systems. Trust Gateway provides exactly that: verifiable data provenance, audit trail, and proof that AI does not hallucinate.

See the proof, not the promise.

Verify a live signature or read the Zero-Trust technical briefing.

Verify a live signature ↗