sign in
live · mainnet6 protocols · 1 family
bip-322 · sats × days
>_ orangecheck // products + protocols

Three products. Six protocols.One Bitcoin address.

Identity, confidentiality, legitimacy, provenance, authority, commitment — six composable open protocols on Bitcoin, plus the products that ship them. No custody. No token. No issuer. Every artifact verifies offline, forever.

Read the docs github org ↗get in touch
✓ BIP-322✓ Nostr kind 30078✓ offline-verifiable✓ MIT / CC-BY-4.0
orangecheck // family · 3 + 6
§ products3
§ protocols6
compose freely · every artifact verifies offline
§ the family

Six protocols. Compose freely.

Each protocol is independent — its own spec, its own reference site, its own packages. They share canonical-message, BIP-322, and Nostr kind-30078.

  1. [01]oc·attestlive

    Sybil resistance via proof of Bitcoin stake.

    Sign one Bitcoin message; any verifier can check that you have held N sats unspent for N days. The base-layer protocol every other sibling can optionally reference.

    → site→ docs
  2. [02]oc·locklive

    End-to-end encryption addressed to a Bitcoin address.

    Sealed envelopes that only the device-key-holder of a specific BTC address can unseal. No centralized key server, no account, no message broker.

    → site→ docs
  3. [03]oc·votelive

    Stake-weighted, sybil-resistant polls.

    Three canonical weight modes (one_per_address / sats / sats_days). Deterministic, pure, cross-impl-testable tally. Polls and ballots are signed JSON.

    → site→ docs
  4. [04]oc·stamplive

    Bitcoin-block-anchored signed statements.

    Authorship via BIP-322, priority via OpenTimestamps. Replaces PGP + OTS + C2PA in one self-contained envelope. Verifies offline forever.

    → site→ docs
  5. [05]oc·agentlive

    Agent-authorization records bound to a Bitcoin address.

    Delegate signing authority to scripts, bots, and pipelines within revocable scopes — without handing them your principal key. Every action signed, scoped, revocable.

    → site→ docs
  6. [06]oc·pledgelive

    Pledge your word to Bitcoin. Bond your stake. Anyone verifies the outcome.

    Forward-looking, BIP-322-signed declarations about future-verifiable propositions. Bond is an OrangeCheck attestation; enforcement is by public exposure, never by custody.

    → site→ docs
§ commercial products

Three products on the protocol surface. All Bitcoin-bonded, none custodial.

Every protocol in the family is open + MIT-licensed. The three commercial products are how OrangeCheck stays funded — a consumer Bitcoin identity that pays users in sats (Me), encrypted Bitcoin-addressed secrets (Vault), and managed infrastructure for AI-agent platforms (Fleet). All compose the same primitives anyone else can ship against; all verify offline; all publish their abuse limits and bind to the same charter.

§ For individuals

oc·me

Your Bitcoin identity, federation-custodied by default, graduable to self-custody at any time. Apps that ask “is this person real?” pay sats for the answer; you keep them. Three-class billable event taxonomy; abuse limits published; same charter as Fleet. No surveillance, no scoring, no opaque pricing.

  • Consumer wallet · email + Bitcoin sign-in
  • Three-class billable events (A / B / C) · clear taxonomy
  • Federation-custodied default, self-custody graduation
  • You keep the sats apps pay for verifying you
Visit me.ochk.io
commercial · early accesswait-list open
§ For password-keep converts

oc·vault

Encrypted secrets, addressed to a Bitcoin address you already control. The vault is end-to-end encrypted and address-addressed — no account, no server-side plaintext, ever. One Lightning payment, lifetime access. No subscription, no key server, no custody.

  • End-to-end encrypted · address-addressed secrets
  • Lightning-only · 210k sats lifetime, no subscription
  • The only key is one you already control
  • No account, no server-side plaintext, ever
Visit vault.ochk.io
commercial · betaopen beta
§ For AI-agent platforms

oc·fleet

The managed tier of the OC Agent + OC Pledge stack. Compliance teams won't sign off on AI agents that take real authority. Fleet replaces every layer of the gap — BIP-322 delegation, scoped revocation, deterministic audit anchored to Bitcoin, and bonded reputation — without custody, without a token, without a per-action surcharge.

  • Managed agent infra · BIP-322 delegation
  • OC Stamp anchored audit bundle, replays offline
  • OC Pledge bonded reputation · stake stays in your wallet
  • No custody, no token, no per-action surcharge
Visit fleet.ochk.io
commercial · v1.3design partners open
§ what unites them

One signing primitive.
One identity. Forever.

  • Bitcoin-native

    Every protocol uses BIP-322 signatures over a Bitcoin address as its identity primitive. The most credibly-neutral economic layer on the open internet.

  • Self-contained

    Every artifact is a JSON envelope that verifies offline. No ochk.io dependency. No oracle. No blockchain reads beyond standard Bitcoin / OTS calls.

  • Cross-impl, where it counts

    OC Attest ships matching TypeScript and Python implementations whose CI proves byte-identical output against the spec's test vectors. The other five protocols ship TypeScript first; Python ports land protocol-by-protocol.

§ start

Read the docs. Pick a protocol. Ship.

All six protocols, every shared concept, every package, every guide — one place.

docs.ochk.io Why OrangeCheck