Gemacode Open Validation Protocol is an open protocol for generating, preserving and independently verifying operational evidence records.
Can this operational declaration be verified independently, without relying on the issuer or its internal database?
GOVP does not prove that the declaration was true when issued. It proves whether the record presented later remains unchanged.
GOVP is the base verification layer for public Gemacode systems, including BiologicalSecure records.
A GOVP record is a small, signed, self-describing object. It binds a statement to an issuer and a domain, so the record cannot be lifted, re-hosted or silently altered.
Signing input is alphabetically sorted under domain separator GOVP::record.v1, base64-encoded and signed with Ed25519. The canonical field binds the record to its issuing domain.
Organizations already know how to store records. The problem is proving that a record presented today is exactly the same record that existed years ago — to an auditor, a regulator or a court that does not trust your database.
By itself, generated-at is a claim by the issuer; a determined issuer could backdate a bare record. GOVP states this openly. Independent time-anchoring — RFC 3161, an eIDAS qualified timestamp, or a transparency log — is offered as an optional layer. Only the anchor, not the bare record, prevents backdating.
The same commitments stand behind every public system — that is what makes them an infrastructure rather than a set of claims.
Every public record can be checked by a third party, without relying on Gemacode or its servers.
Claims carry sources and evidence levels. Absence of identified evidence is reported as absence — never as approval.
Open protocols and an open verification model, so the ability to verify outlives any single vendor.
GOVP is not a single app. It is an open protocol with a public specification, cross-language test vectors and implementations that can be independently inspected and verified.
GOVP-1 records, canonicalization, a sources verification layer, an independence-weighted trust model and a conformance suite.
Issue and verify from a desktop app, a WordPress site, the browser or your own systems — the same record verifies on all of them.
Industry, quality, compliance, audit, ESG and software — plus AI agents, sensor sources and supply-chain consortia.
The GOVP verifier runs the full check — including the Ed25519 signature — entirely in your browser. Nothing is uploaded. Load a sample, verify it, then change one character and watch it fail.
The verifier and the full GOVP protocol site live under /govp/ — spec, platforms, use cases and the trust model.