{"product_id":"ostensor","title":"Ostensor Bare","description":"\u003ch2\u003eThe Ostensor board, unpotted.\u003c\/h2\u003e\n\u003cp\u003eThe same board as \u003ca href=\"https:\/\/shop.zknot.io\/products\/ostensor-potted\"\u003eOstensor Potted\u003c\/a\u003e, sold bare for people who want to inspect it, mount it in their own enclosure, or put it on a bench. Latin, \u003cem\u003eone who shows\u003c\/em\u003e: a secure domain owns both the display and the key, so a compromised application can’t show you one thing and sign another. \u003cstrong\u003eOne physical press permits at most one signature.\u003c\/strong\u003e\u003c\/p\u003e\n\u003ch2\u003eSpecifications\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSTM32U585 + Infineon OPTIGA Trust M secure element\u003c\/li\u003e\n\u003cli\u003eDisplay and key share one secure domain — show-then-confirm signing\u003c\/li\u003e\n\u003cli\u003eOne press, at most one signature\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eBare board\u003c\/strong\u003e — no potting, no enclosure. Handle as you would any exposed electronics.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch2\u003eRead before buying\u003c\/h2\u003e\n\u003cp\u003eShow-then-confirm is proven on the bench. \u003cstrong\u003eOn shipping units the security hardening that would make it enforceable against a compromised application is not yet switched on\u003c\/strong\u003e — the mechanism is present, the lock is not. We say which when it changes. A bare board also carries none of the tamper-evidence that the resin pour provides.\u003c\/p\u003e\n\u003ch2\u003eAvailability\u003c\/h2\u003e\n\u003cp\u003e\u003cstrong\u003eShipping now\u003c\/strong\u003e, in small runs.\u003c\/p\u003e\n\u003ch2\u003eTry one before you buy one\u003c\/h2\u003e\n\u003cp\u003eEvery attestation device signs a challenge and the record is checked in your browser at \u003ca href=\"https:\/\/verifyknot.io\/start\" rel=\"noopener noreferrer\" target=\"_blank\"\u003everifyknot.io\/start\u003c\/a\u003e — no account, no login. The verdict is computed from the record itself, not handed down by our server.\u003c\/p\u003e\n\u003ch2\u003eWhat it does not do\u003c\/h2\u003e\n\u003cp\u003eA signature proves that a specific key signed specific bytes. On its own it does not prove who held the key, that a person was present, or that the contents are true. Each rung of the line adds one of those, and we say which. The timestamp on a record is ours, not an outside authority’s.\u003c\/p\u003e\n\u003cp\u003eHand-built in small runs in Utah · veteran-owned (SDVOSB) · US shipping with tracking · \u003ca href=\"https:\/\/zknot.io\/returns\" rel=\"noopener noreferrer\" target=\"_blank\"\u003ereturns\u003c\/a\u003e\u003c\/p\u003e","brand":"ZKNOT","offers":[{"title":"Default Title","offer_id":54326889381999,"sku":"OS-1","price":179.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0720\/0492\/7599\/files\/powerverify-4409718.jpg?v=1789879987","url":"https:\/\/shop.zknot.io\/products\/ostensor","provider":"ZKNOT","version":"1.0","type":"link"}