DPU-10060 is the proof layer: what on the estate is signed, by which key, verifiable by whom. Signed agent cards, signed registry facts records, signed compliance records, receipts and RADAR editions all verify against the public keyring at dpuone.ai/.well-known/jwks.json. Per-artifact proof objects — Digital Proof Units — are one class of proof; DPP-10060 is the human-readable disclosure of it. Batch, shipment and certification records remain proof classes under the namespace.
Verification is a request, not a promise: fetch the artifact, fetch the key, verify. Nothing in the chain asks the reader to trust the issuer's word.
Operational Principle
Operational Principle
The keyring of record is https://dpuone.ai/.well-known/jwks.json. Key ids in force (read from the live JWKS at build): gsc-cards-2026-08, gsc-radar-2026-08, gsc-x402-receipts-2026-08, gsc-amp-2026-08, gsc-rco-2026-08.
Keys
Keys are published at dpuone.ai. Each key names its algorithm, purpose and key id. Private signing material stays under its declared custody. Rotation is append-only: successor keys are added; retired keys remain in the historical record.
A DPU does not determine compliance, interpret regulation, or issue certification. It does not replace the issuer of the underlying evidence.
The boundary
Proof supports the state. Proof is not the state.
Evidence
Evidence objects — product, batch, production, shipment, credential material with identity, provenance and integrity information — are inputs an RCO cites by reference and hash. DPU is what signs them; the RCO is what resolves them.
Connection Test
# Connection test — the barcode path at gtinfetch.ai (GS1 Digital Link)
# No API key. No account. No setup. gtinfetch's signed record for the GTIN; every field carries its source page.
$ curl "https://gtinfetch.ai/01/03017620422003"
{
"gtin14": "03017620422003",
"status": "known",
"as_of": "2026-10-11T15:43:16Z",
"computed_at": "2026-10-13T11:26:11Z",
...
}
Position in the Canonical Stack
The Standard-10060 architecture defines a layered canonical core. DPU-10060 is highlighted.
Layer
Surface
Teaches
STANDARD-10060
standard-10060.org
Rules precede systems.
SRI-10060
sri-10060.org
Complexity collapses before execution.
ECO-10060
eco-10060.org
Compliance is structured, not narrative.
RCO-10060
rco-10060.org
Every cleared decision leaves a signed receipt.
DPU-10060
dpu-10060.org
Proof survives execution.
CONSORTIUM-10060
consortium-10060.org
Governance precedes execution.
SM-ECO-10060
sm-eco-10060.org
Commerce is sovereign.
ACM-68000
acm-68000.org
State determines behavior.
Ghost Headers
Eight x-gsc response headers on every barcode answer (/01/), generated from the estate table. Manual: Ghost Headers r5.0.
Verification pointers
GET https://gsc-registry.ai/resolve/dpu-10060.org # signed Registry facts record for this host
GET https://dpu-10060.org/.well-known/agent-card.json # agent card
GET https://dpuone.ai/.well-known/jwks.json # estate keyring (trust anchor)
GET https://mcp.a2a-grocery.ai/mcp # the MCP door — A2A Grocery (trade gate)
GET https://gtinfetch.ai/01/{gtin14} # barcode resolution — gtinfetch.ai