The first operational Sovereign Topos. An ICP canister that signs real Bitcoin transactions on mainnet — without a seed phrase, without a human in the signing loop, without permission. Anchored on Bitcoin via OpenTimestamps. Post-quantum reference layer (FIPS-203/204) live since 2026-06-07.

Jose Luis Olivares Esteban — operator, architect, and notary of this protocol.

You should not trust this README. You should run this command:

curl -fsSL https://x39matrix.org/PUBLIC_VERIFY_X39_FULL.sh | bash

The script reproduces, in real time against public blockchains, every claim in this document:

• 17 Bitcoin mainnet blocks
• 4 Bitcoin transactions (incl. the first sovereign tECDSA send)
• 1 Arbitrum One block
• 1 Solana slot
• 11 ICP canisters with module hashes
• 1 ECDSA signature verification via BIP-143 sighash
• 2 merkle-root matches against the public Certificate
• 3 OpenTimestamps merkle proofs for the 8/8 integrity seal
• 2 PDF artifact hashes

Expected output: Passed: 51 / 51. If your terminal shows anything else, the protocol just earned a free public audit.

For paranoid auditors (recommended): download, read, then run.

curl -fsSLO https://x39matrix.org/PUBLIC_VERIFY_X39_FULL.sh
chmod +x PUBLIC_VERIFY_X39_FULL.sh
less PUBLIC_VERIFY_X39_FULL.sh        # read it first
./PUBLIC_VERIFY_X39_FULL.sh

On 2026-06-02 16:46:05 UTC, ICP canister arn4r-lqaaa-aaaao-baxwq-cai signed and broadcasted a real Bitcoin transaction on mainnet:

TXID:        b5a881a28341ea562800cd4f532cb5f737b21d38e44293dbbe8d1d0a0aede023
Block:       #952131
From:        bc1qv5s8tg54jrv7s79c24zrd4xcdfhjtrvuhqfwqw   (canister-controlled)
To:          bc1q6tkt7x38utprskxmwa9vfw4eypm84xxsj9r3xg
Value:       3,000 sats  (+ 9,978 sats change)
Fee:         905 sats   (6.44 sat/vB)

Signature DER (71 B):  3045022100…716728a9…d41e7b81 + 01 (SIGHASH_ALL)
Pubkey (33 B):         025968e3eea2adc6a3c7e0b24c39f3e94009393e57280cb9ccc3801251bb202083
                       ↑ threshold-ECDSA pubkey held by the subnet, NOT by any human

What makes this historic: the signing key is held in distributed shares across the IC subnet (~13 nodes). No human controls the seed phrase — because there is no seed phrase. The canister signed itself, per its programmed logic, with no operator participation.

Reproduce the cryptographic verification:

pip install ecdsa
python3 <<'PY'
import hashlib
from ecdsa import VerifyingKey, SECP256k1
from ecdsa.util import sigdecode_der

pk = bytes.fromhex("025968e3eea2adc6a3c7e0b24c39f3e94009393e57280cb9ccc3801251bb202083")
sig = bytes.fromhex("30450221009cb7810f310326414a26a8c010441ee75dc0ac4e5958e5053242b149658e338c0220716728a9af47c15cb54bebd9396c2377984672d6560a2a8b7fbe2a4db41e7b81")
sighash = bytes.fromhex("bc2ae31a2af24375c1e6ca674041c3f3c6c24a2cd74a915df575c3688dce12a5")

vk = VerifyingKey.from_string(pk, curve=SECP256k1, hashfunc=hashlib.sha256)
vk.verify_digest(sig, sighash, sigdecode=sigdecode_der)
print("✅ ECDSA signature VALID")
PY

Full BIP-143 sighash reconstruction is in PUBLIC_VERIFY_X39_FULL.sh §VI.

On 2026-06-07T10:59:51Z, the protocol produced its first post-quantum sovereign signature: a triple-signed manifest combining PGP (Ed25519), ECDSA (secp256k1, Bitcoin curve), and ML-DSA-87 (FIPS-204, NIST level V) over the same payload "GENESIS MANIFEST\n". The aggregated manifest_triple.json was immediately OpenTimestamps-stamped across four independent calendars and is pending Bitcoin block attestation.

manifest payload:        "GENESIS MANIFEST\n"
manifest sha-256:        a0a54f84de892f31e63bc8800c5faa2744fa1324505fb5a70901e548e02d6577
manifest_triple sha-256: ea65e89980dafaad8b01328f2772d0b060ddf05533f69cee82584cb18b5f6143

signatures:
  PGP   / Ed25519     C3E062EB251A11851C0B4FFD06870F0655D5BBE8 (sovereign master)
  ECDSA / secp256k1   Bitcoin curve, sovereign-held
  ML-DSA-87 / FIPS-204 / NIST level V (4627-byte sig, 2592-byte pubkey)

ML-DSA generation:       openssl genpkey -algorithm ML-DSA-87 (OpenSSL 3.5 native)
ML-DSA secret key:       NEVER left operator hardware; GPG-encrypted offline
OTS calendars:           a.pool.opentimestamps, b.pool.opentimestamps,
                         a.pool.eternitywall, ots.btc.catallaxy
Bitcoin attestation:     pending (1-6h from stamp)

The full evidence (manifest, three signatures, three pubkeys, OTS proof) is under evidence/pq_genesis_signature_20260607T105951Z/. Verify in ten seconds from any auditor's laptop with OpenSSL 3.5+:

cd evidence/pq_genesis_signature_20260607T105951Z
sha256sum -c SHA256SUMS.txt
gpg --verify pgp.sig manifest-genesis.bin
openssl dgst -sha256 -verify ecdsa.pub -signature ecdsa.sig manifest-genesis.bin
openssl pkeyutl -verify -pubin -inkey mldsa87.pub -in manifest-genesis.bin -sigfile mldsa87.sig
ots verify manifest_triple.json.ots -f manifest_triple.json

Honest scope: the PGP and ECDSA keys (both elliptic-curve) remain vulnerable to a cryptographically-relevant quantum computer per Gidney et al. (Google Quantum AI, 31 March 2026). The ML-DSA-87 layer is the post-quantum survivor under current NIST estimates. X39MATRIX is the bridge, not the final answer.

On 2026-06-08T20:37:26Z, the protocol upgraded to quadruple-signature post-quantum resilience, adding SLH-DSA-SHAKE-256s (FIPS 205) — a purely hash-based signature immune to both quantum attacks AND lattice breakthroughs.

signatures:
  PGP   / Ed25519           (classical, ~128 bit)
  ECDSA / secp256k1         (classical, ~128 bit)
  ML-DSA-87 / FIPS 204      (post-quantum, NIST Level 5, lattice-based)
  SLH-DSA-SHAKE-256s / FIPS 205  (post-quantum, NIST Level 5, hash-based)

To compromise this manifest, an adversary must simultaneously:

1. Deploy a CRQC exceeding 500,000 physical qubits (break Ed25519 + secp256k1)
2. Solve Module-LWE in polynomial time (break ML-DSA-87)
3. Break SHA-3/SHAKE-256 preimage resistance (break SLH-DSA)

Combined probability of simultaneous compromise: effectively zero under known physics.

Verify locally (requires OpenSSL 3.5+):

cd evidence/pq_super_fortify_20260608T203726Z
sha256sum -c SHA256SUMS.txt
gpg --verify pgp.sig manifest-fortify.bin
openssl dgst -sha256 -verify ecdsa.pub -signature ecdsa.sig manifest-fortify.bin
openssl pkeyutl -verify -pubin -inkey mldsa87.pub -in manifest-fortify.bin -sigfile mldsa87.sig
openssl pkeyutl -verify -pubin -inkey slhdsa256s.pub -in manifest-fortify.bin -sigfile slhdsa256s.sig

Evidence: evidence/pq_super_fortify_20260608T203726Z/

X39MATRIX is defined by 7 axioms sealed in Bitcoin. The manifest's SHA-256 is anchored at block #948027 (Genesis #001).

Manifest SHA-256: e54960277e8933fdf1635e769d66c23622bfe6e5c2cb2dd3a39ac3e78184595e

Verify any block manually:

HEIGHT=952131
HASH=$(curl -s "https://blockstream.info/api/block-height/$HEIGHT")
curl -s "https://blockstream.info/api/block/$HASH" | python3 -m json.tool

Verify merkle root match (Certificate Block A):

HASH=$(curl -s "https://blockstream.info/api/block-height/951892")
curl -s "https://blockstream.info/api/block/$HASH" | \
  python3 -c "import sys,json; print(json.load(sys.stdin)['merkle_root'])"
# Must print: b9221a7f5dee1121900b592a84c5e186a022b3001389a82e00aa0f4f70db6239

11 canisters confirmed live on IC mainnet, all deployed in the same subnet o3ow2-2ipam-6fcj-…:

Verify any canister:

CANISTER=arn4r-lqaaa-aaaao-baxwq-cai
curl -s "https://ic-api.internetcomputer.org/api/v3/canisters/$CANISTER" | python3 -m json.tool
# Returns: module_hash, subnet_id, controllers

hash:        0x73a9333f51dc18be1f0c357d2209345b3c3cedcecb656752f8ce0dcb9b7d4a7b
state_root:  0x8cd21a7f706b88204194bb9ce911aacccc7aaba604bedd8d53eef11473dcceb9
timestamp:   2026-05-29 15:45:56 UTC

curl -s -X POST "https://arbitrum-one.publicnode.com" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","method":"eth_getBlockByNumber","params":["0x1be442bd",false],"id":1}'

blockhash:   DTd4cbQcyuYhbX3FwQ8jm5yXQHL6Z6SQahy9sFAvsWP
parent_slot: 422,979,179
block_time:  2026-05-29 16:58:06 UTC

curl -s -X POST "https://api.mainnet-beta.solana.com" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"getBlock","params":[422979180,{"transactionDetails":"none"}]}'

Eight sovereign pillars tested, zero violations, log sealed via OpenTimestamps with 3 independent calendar attestations in 3 different Bitcoin blocks, all confirmed within 5h 30min.

Test executed:   2026-06-02 22:21:09 UTC
Log SHA-256:     16f61edb08c87ebb29717a2665dd6c258df39275db833fbf1695b3714b66ad5e
Calendars:       alice.btc, bob.btc, btc.calendar.catallaxy
Sealed in:       #952160 (bob), #952161 (alice), #952174 (catallaxy)
Merkle proofs:   3 valid
Cost to revoke:  ≥ $4.5B + impossible federated collusion

1. Post-quantum keys exist on disk (ML-DSA-87 + ML-KEM-1024)
2. PQ key sizes within FIPS 203/204 bounds
3. .ots files have valid magic header
4. SHA-256 of all PDF/script artifacts computable
5. OpenTimestamps calendar reachability (4 hosts)
6. ICP boundary node ic0.app reachable
7. Bitcoin explorer reachable
8. Workspace integrity (PDFs + scripts + PQ keys + .ots present)

If you are reading this from DFINITY Foundation or another aligned organization, the proposed engagement structure is below. The first ask is not money — it is 30 minutes of senior threshold-crypto engineer time.

Full proposal: X39MATRIX_DFINITY_V4.pdf.

The single-operator structure is intentional (axiom A1) but raises a legitimate question: what happens if the operator disappears? Four structural guarantees:

1. Key sovereignty without seed: The ECDSA key is held by the IC subnet, not the operator. Cannot be extracted, transferred, or destroyed by any human.
2. Categorical spec > code: The 7 axioms are sealed in Bitcoin. Any developer can re-derive an equivalent implementation, preserving cryptographic anteriority.
3. Apache 2.0 by M4: Full open-sourcing in 12 months allows legitimate forks under any maintainer.
4. Pre-funded cycles + dead-man heartbeat: Cycles cover ≥ 18 months of operation; heartbeat canister delegates controllership to trustees after 90 days of operator silence.

Bus factor 1 → mathematical bus factor: there is no human whose absence stops the canister. The operator is curator, not author.

• GitHub Issues: file structured technical questions here.
• Email (sovereign operator): grants@x39matrix.org, PGP-encrypted to fingerprint above.
• Bitcoin block ledger: every commitment is on-chain; the protocol speaks before any human.

This README is sealed by being public on this repository. Its SHA-256 at the time of any GitHub commit can be verified against the commit's tree hash — a free, immutable timestamp from GitHub's own infrastructure.

• Now: This README is CC0 / Public Domain. The PDFs and PUBLIC_VERIFY_X39_FULL.sh are CC-BY: cite, share, mirror, audit.
• Month 12 (M4): Full Sovereign Stack open-sourced under Apache 2.0.

hub_canister:         arn4r-lqaaa-aaaao-baxwq-cai
hub_ecdsa_pubkey:     025968e3eea2adc6a3c7e0b24c39f3e94009393e57280cb9ccc3801251bb202083
hub_btc_address:      bc1qv5s8tg54jrv7s79c24zrd4xcdfhjtrvuhqfwqw

first_sovereign_send_tx:
  txid:    b5a881a28341ea562800cd4f532cb5f737b21d38e44293dbbe8d1d0a0aede023
  block:   952131
  time:    2026-06-02T16:46:05Z

corebackend_v2_realcrypto:
  canister:  bsbvx-7iaaa-aaaao-baxqa-cai
  module:    0x4709f6a15a2262e7465637975dad18a0b1b121bb0a6e2ca5dfef1f189af1b342
  genesis_sig_sha256: 1ae12b5f042d09b27917b95633477b82331a1fd23ece5a0b1afe47d801b63c1d
  ots_block: 952634

pq_genesis_2026_06_07:
  manifest_sha256:        a0a54f84de892f31e63bc8800c5faa2744fa1324505fb5a70901e548e02d6577
  manifest_triple_sha256: ea65e89980dafaad8b01328f2772d0b060ddf05533f69cee82584cb18b5f6143
  signatures:             [PGP-Ed25519, ECDSA-secp256k1, ML-DSA-87]
  pq_algorithm:           ML-DSA-87 (FIPS-204, NIST level V)
  signed_utc:             2026-06-07T10:59:51Z
  ots_calendars:          4 (pending Bitcoin attestation)

axioms_manifest_sha256: e54960277e8933fdf1635e769d66c23622bfe6e5c2cb2dd3a39ac3e78184595e

integrity_8_of_8:
  log_sha256: 16f61edb08c87ebb29717a2665dd6c258df39275db833fbf1695b3714b66ad5e
  sealed_in_blocks: [952160, 952161, 952174]
  calendars: [bob.btc, alice, catallaxy]

certificate_blocks:
  - { height: 951892, merkle_root: b9221a7f5dee1121900b592a84c5e186a022b3001389a82e00aa0f4f70db6239 }
  - { height: 951893, merkle_root: c8e73b0a66219182c228c6c95760d834dcd1a0094c31e3de4592afbe9f5e0deb }

cross_substrate:
  arbitrum_block:  467944125
  arbitrum_hash:   0x73a9333f51dc18be1f0c357d2209345b3c3cedcecb656752f8ce0dcb9b7d4a7b
  solana_slot:     422979180
  solana_hash:     DTd4cbQcyuYhbX3FwQ8jm5yXQHL6Z6SQahy9sFAvsWP

pq_super_fortify_2026_06_08:
  manifest_sha256: ef3b829cd8c004dc5f75561e33cbce979d475cd79af9ba3e94f558418062286b
  signatures: [PGP-Ed25519, ECDSA-secp256k1, ML-DSA-87, SLH-DSA-SHAKE-256s]
  pq_algorithms: [ML-DSA-87 (FIPS-204), SLH-DSA-SHAKE-256s (FIPS-205)]
  signed_utc: 2026-06-08T20:37:26Z
  ots_calendars: 4 (pending Bitcoin attestation)

The math holds. The seals stack. The canister signs.

Don't trust. Verify.

curl -fsSL https://x39matrix.org/PUBLIC_VERIFY_X39_FULL.sh | bash

51 / 51.