Prove you belong, without revealing who you are. Verify it yourself.
Someone in a published group of 100 proved their membership, enough to grant access, without revealing which of the 100 they are. The proof is post-quantum (a hash-based STARK, no elliptic curves), the group is signed with FALCON-1024 + ML-DSA-87, and it is anchored to a real quantum experiment. Nothing here is a mockup. Press the button and your browser re-verifies all of it, talking to no server.
The same “check it yourself” principle, at three scales: a block, a whole chain, and now a person’s membership.
Verify the proof
This runs seven real checks entirely in your browser, then hands you an attack panel to try to break it. Every signature and the STARK proof are actually verified; if a primitive were missing, the check fails rather than being assumed.
What your browser checks
Membership proof (STARK)
A RISC Zero receipt is verified in-browser by its verifier compiled to WebAssembly. Hash-based (SHA3-256), so its security rests on hashing, not elliptic curves that a quantum computer would break.
Anonymity set of 100
Your browser rebuilds the group root from all 100 published member commitments and it equals the proven root. So the prover is provably one of these 100, and which one is never revealed.
Zero-knowledge
The public journal re-encodes exactly from its four public fields, leaving no room for the member's secret, the Merkle path, or which of the 100 proved.
Quantum anchor
The group's root is carried in a Proof-of-Coherence block whose Mermin(3) Bell statistic your browser recomputes from the raw shot counts, |M| = 2.377 on real Rigetti hardware.
The tie
The root the proof establishes membership under is the exact same root that is quantum-anchored and signed. The identity, the physics, and the signature all bind one root.
Committed inside the block
Your browser recomputes the block's Merkle root and block hash, showing the identity root and the quantum anchor are committed together inside the signed block, not attached afterward.
Root signature
That root's FALCON-1024 and ML-DSA-87 signatures (2-of-2, both NIST post-quantum) are re-verified locally, so the root is authorized by the group's key, checked on your device.
What this does, and does not, claim
It proves, client-side: that a member of an authorized group produced a valid post-quantum membership proof without revealing their identity; that the group root is bound to a real quantum-hardware anchor and signed with two NIST post-quantum algorithms; and that all of it re-verifies in your browser with no server in the loop.
It is a fixed demonstration instance (one group of 100, one member, one proof). Live per-visitor enrollment and proving is a separate build: generating a proof is heavy, while checking one is light, and checking is what belongs on a page like this.
The static proof is replayable. Real access control binds each proof to a fresh session nonce so it cannot be reused. This page demonstrates the verification, not a live login.
What is real today is the cryptography you can run right here: the STARK, the anonymity set, the zero-knowledge property, the quantum anchor, and the post-quantum signatures.
Source is published for inspection; all rights retained.