SYSTEM ARCHITECTURE
Deep dive into the post-quantum cryptographic primitives, formal verification methods, and privacy-preserving protocols that power Anubis Notary.
CORE CRYPTOGRAPHY
Anubis Notary is built on NIST-standardized post-quantum algorithms, ensuring security against both classical and quantum threats.
ML-DSA-87 (FIPS 204)
NIST Level 5 digital signatures. Used for signing documents, licenses, and governance proposals. Resistant to Shor's algorithm.
ML-KEM-1024 (FIPS 203)
NIST Level 5 key encapsulation. Used for establishing secure channels and encrypting private batches.
ChaCha20Poly1305
RFC 8439 authenticated encryption. Provides high-speed symmetric encryption for file content and local storage.
Argon2id
RFC 9106 memory-hard key derivation. Protects private keys at rest with 1-4 GiB memory cost options.
PRIVACY-PRESERVING COLLABORATIVE ANCHORING
A novel integration of ML-KEM-1024 that enables forward-secure, privacy-preserving collaborative anchoring. Multiple parties contribute encrypted "key shares" of a session key to encrypt batch receipts before anchoring the Merkle root.
HOW IT WORKS
- Off-chain: Parties use ML-KEM to encapsulate shares of a symmetric key (ChaCha20-Poly1305), ensuring forward secrecy even if long-term keys are compromised.
- On-chain: Only the aggregated, hashed Merkle root is anchored. The encrypted receipt is shared privately.
- Verification: Requires threshold reconstruction of the session key (via Shamir Secret Sharing) to decrypt and verify the full batch.
[+] Encrypted document receipt with ChaCha20Poly1305
[+] Split session key into 3 shares (Shamir)
[+] Encapsulated shares for recipients (ML-KEM-1024)
[+] Anchored Merkle root to Neo N3 Blockchain
FORMAL VERIFICATION
Security is not just claimed; it is mathematically proven. Anubis Notary employs multiple layers of formal verification to provide mathematical guarantees about cryptographic correctness, memory safety, and security properties.
verified/ directory.CRYPTOGRAPHIC PRIMITIVES
| Component | Status | Proof Tool | Certificate |
|---|---|---|---|
| AES-256-GCM | Verified | AWS LibCrypto (Cryptol/SAW/Coq) | FIPS 140-3 #4816 |
| SHA-512 | Verified | AWS LibCrypto (Cryptol/SAW/Coq) | FIPS 140-3 #4816 |
| ChaCha20-Poly1305 | Verified | Cryspen libcrux (hax/F*) | libcrux audit |
| SHA3-256 | Verified | Cryspen libcrux-sha3 (hax/F*) | libcrux audit |
| SHAKE256 | Verified | Cryspen libcrux-sha3 (hax/F*) | libcrux audit |
| ML-DSA-87 | Verified | Cryspen libcrux-ml-dsa (hax/F*) | FIPS 204 |
| ML-KEM-1024 | Verified | Cryspen libcrux-ml-kem (hax/F*) | FIPS 203 |
REFINEDR UST VERIFIED FUNCTIONS (34+)
MERKLE TREE OPERATIONS
CONSTANT-TIME PRIMITIVES
CNSA 2.0 COMPLIANCE
Anubis Notary meets NSA's Commercial National Security Algorithm Suite 2.0 requirements for post-quantum cryptography.
NEO N3 BLOCKCHAIN INTEGRATION
Anubis Notary leverages Neo N3 for immutable anchoring with dBFT 2.0 one-block finality, NeoFS for decentralized storage, and Quantum-Safe Identity (QSI) protocol for on-chain identity binding.
N3dBFT 2.0 CONSENSUS
Delegated Byzantine Fault Tolerance provides one-block finality. Once a transaction is in a block, it's final—no waiting for confirmations.
Block: 245,102 (Final)
NOTARY ORACLE V2 SMART CONTRACT
Deployed on Neo N3 TestNet at 0xff099c61be9e5b0e1fbcfa9a785e39282adb4057. Handles anchoring, batch operations, QSI registration, and private batch coordination.
ANCHORING FUNCTIONS
GAS COSTS
NEOFS DECENTRALIZED STORAGE
Neo's decentralized object storage network with S3-compatible API, content-addressed (CID) storage, and automatic ML-KEM-1024 encryption.
QUANTUM-SAFE IDENTITY (QSI) PROTOCOL
On-chain identity system binding ML-DSA-87 (signing) and ML-KEM-1024 (encryption) into a single DK-QSI (Dual-Key QSI) identity.
SINGLE-KEY QSI (Legacy)
- •Algorithm: ML-DSA-87 (NIST Level 5)
- •Fingerprint: SHA-512 of public key
- •DID: did:anubis:neo:testnet:<fp>
DUAL-KEY QSI (DK-QSI)
- •Signing Authority: ML-DSA-87
- •Decryption Authority: ML-KEM-1024
- •Binding: Cryptographically bound to single DID
PRIVATE BATCH PROTOCOL
Privacy-preserving collaborative anchoring using Shamir Secret Sharing and threshold decryption. Multiple parties contribute receipts without revealing data.
WORKFLOW
COMMANDS
NEO NAME SERVICE (NNS)
Neo's DNS equivalent for human-readable addresses. Resolves .neo domains to Neo addresses, contract script hashes, or NeoFS CIDs.
NeoFS CID: bafybeigdyrzt5...
CNSA 2.0 COMPLIANT
Meets NSA's Commercial National Security Algorithm Suite 2.0 requirements for post-quantum cryptography in classified systems.
CLI REFERENCE
Complete command reference for all Neo N3 operations in Anubis Notary.
GAS TOKEN & BALANCE
Neo's utility token for transaction fees and smart contract execution.
TYPICAL COSTS
NOTARY ORACLE V2 FUNCTIONS
On-chain functions available in the NotaryOracleV2 smart contract.
ANCHORING FUNCTIONS
| Function | Purpose | Parameters |
|---|---|---|
| AnchorRoot | Anchor single SHA-512 Merkle root | root (64 bytes) |
| AnchorRootWithNeofs | Anchor with NeoFS CID reference | root, neofsCid |
| AnchorBatch | Anchor up to 8 roots (8x savings) | roots[] |
| IsAnchored | Check if root exists on-chain | root |
| VerifyRoot | Verify root matches expected ID | rootId, expectedRoot |
| GetAnchorCount | Total anchored roots | - |
QSI & DK-QSI FUNCTIONS
| Function | Purpose |
|---|---|
| RegisterIdentity | Register ML-DSA-87 identity (single-key) |
| RegisterDualKeyIdentity | Register ML-DSA-87 + ML-KEM-1024 bound identity |
| UpdateIdentity | Update identity's NeoFS CID |
| RevokeIdentity | Revoke compromised identity |
| RotateKey | Rotate to new key maintaining continuity |
| ResolveCTA | Lookup Cryptographic Threshold Authority |
NEOFS COMMANDS
BATCH ANCHORING & QUEUE SYSTEM
Cost optimization through batching. Queue receipts locally and submit as a single transaction.
CRYPTOGRAPHIC THRESHOLD AUTHORITY (CTA)
The ML-KEM-1024 decryption fingerprint becomes your CTA, enabling participation in threshold cryptography schemes. On-chain reverse lookup: "Who owns this decryption key?"
NeoFS CID: bafybei...
Status: Active
WALLET INTEGRATION
KEY FORMATS
ENVIRONMENT VARIABLES
FILE ENCRYPTION (SEAL/UNSEAL)
Single-user file encryption using ML-KEM-1024 key encapsulation.
LICENSE MANAGEMENT
Issue and verify cryptographically signed licenses with expiration dates and feature flags.
STREAMING OPERATIONS
Process large files (GB+) without loading entire file into memory.
KEY ROTATION
Rotate signing keys while maintaining identity continuity through cryptographic linking.
MULTI-SIGNATURE GOVERNANCE
t-of-n threshold signatures for organizational governance and high-value transactions.
COMPLETE WORKFLOW EXAMPLE
NATURAL LANGUAGE INTERFACE
Powered by SpoonOS, the Agentic Operating System for the Sentient Economy. A complete natural language cryptography platform with200+ cryptographic synonyms, 12 disambiguation flows,semantic memory, and proactive security advisor. Users speak naturally—the agent understands cryptography.
WHAT IS SPOONOS?
SpoonOS is a revolutionary AI agent framework built on the Neo N3 blockchain. It enables autonomous AI agents to understand natural language, execute complex operations, and interact with blockchain infrastructure seamlessly. By integrating SpoonOS with Anubis Notary, we've transformed a powerful but complex CLI tool into an intelligent assistant that anyone can use.
SPOONOS CORE COMPONENTS
ReAct Agent Framework
Combines reasoning and action for intelligent decision-making. The agent thinks through each request before executing.
MCP+ Protocol
Model Context Protocol for dynamic tool invocation. Enables the agent to discover and use tools at runtime.
BeVec Vector Database
Blockchain-optimized semantic search and conversation memory. Remembers context across sessions.
x402 Payment Rails
Agent-to-agent micropayments for services. Automatic fee collection with instant settlement to owner wallet.
DID + ZKML
Decentralized identity and zero-knowledge machine learning verification for privacy-preserving AI.
Neo N3 Integration
Native blockchain anchoring, NeoFS storage, and smart contract interaction for permanent records.
NATURAL LANGUAGE CRYPTOGRAPHY
Advanced NLP features that make cryptography accessible to everyone:
Cryptographic Synonyms
200+ natural language mappings with confidence scores.
Disambiguation Flows
12 structured flows for ambiguous inputs.
Semantic Memory
Query past operations in natural language.
Explanation Mode
15+ cryptographic concept explanations.
Security Advisor
Proactive suggestions based on document content.
Tool Chaining
Outcome-based workflows.
28 OPERATION CATEGORIES
The SpoonOS agent understands natural language across all these categories:
ReAct ARCHITECTURE
SpoonOS v4 implements the ReAct (Reasoning + Acting) pattern—the same architecture powering advanced AI agents from OpenAI and Anthropic.
NATURAL LANGUAGE EXAMPLES
SIGNING & VERIFICATION
- • "Sign my contract"
- • "Sign the document on my desktop"
- • "Put my signature on this"
- • "Is this signature valid?"
- • "Check if this is authentic"
- • "Verify the contract"
BLOCKCHAIN ANCHORING
- • "Put this on the blockchain"
- • "Anchor to Neo"
- • "Make this permanent"
- • "Record this on-chain"
- • "Timestamp and anchor"
- • "Store on NeoFS"
PROPERTY & DEEDS
- • "Register my house deed"
- • "Transfer property to John"
- • "Show deed history"
- • "Record a lien on the property"
- • "Release the lien"
- • "Update property records"
WILLS & ESTATES
- • "Create my will"
- • "Leave everything to my kids"
- • "If I die, release to my beneficiaries"
- • "Register my testament"
- • "Add a codicil"
- • "Update my will"
MARRIAGE
- • "Get married to Alice"
- • "Mint our wedding rings"
- • "Record our vows on-chain"
- • "Create marriage contract"
- • "File for divorce"
- • "Show marriage certificate"
ESCROW & SECURITY
- • "Create a timelock for 30 days"
- • "Set up a dead-man switch"
- • "If I don't check in, release to my kids"
- • "Create payment-gated escrow"
- • "Set up 2-of-3 multisig"
- • "Send heartbeat"
MARKETPLACE
- • "List this for sale"
- • "Browse marketplace"
- • "Buy this listing"
- • "Show my listings"
- • "Claim my revenue"
- • "Deliver to buyer"
VAULT & STORAGE
- • "Encrypt and store this"
- • "Upload to my vault"
- • "Show my vault contents"
- • "Share this file"
- • "Download from vault"
- • "How much storage do I have?"
COMPLETE FEE SCHEDULE
All fees are collected automatically via the NotaryOracle smart contract on Neo N3. Core operations are FREE to encourage adoption. Revenue-generating operations have transparent, fixed fees in GAS.
FREE OPERATIONS (User Acquisition)
| Operation | Description | Cost |
|---|---|---|
| sign | Sign document with ML-DSA-87 | FREE |
| verify | Verify signature | FREE |
| attest | Create timestamp receipt | FREE |
| check | Verify receipt | FREE |
| key_init | Initialize ML-DSA-87 + ML-KEM-1024 keys | FREE |
| key_show | Show key fingerprint | FREE |
ANCHORING OPERATIONS
| Operation | Description | Cost (GAS) | ~USD |
|---|---|---|---|
| anchor | Anchor to Neo N3 | 0.10 | $0.04 |
| anchor_neofs | Anchor with NeoFS storage | 0.15 | $0.06 |
| anchor_verify | Verify Neo N3 anchor | 0.00 | Free |
| batch_flush | Anchor batch (up to 8 items) | 0.50 | $0.20 |
| privatebatch_create | Create encrypted private batch (ML-KEM-1024) | 0.15 | $0.06 |
DOCUMENT OPERATIONS
| Operation | Description | Cost (GAS) | ~USD |
|---|---|---|---|
| deed_register | Register deed on blockchain | 0.38 | $0.15 |
| deed_transfer | Transfer property ownership | 0.15 | $0.06 |
| deed_lien | Record lien on property | 0.20 | $0.08 |
| will_register | Register will on blockchain | 0.38 | $0.15 |
| will_codicil | Add codicil amendment | 0.15 | $0.06 |
| contract_anchor | Anchor contract to blockchain | 0.30 | $0.12 |
| journal_anchor | Anchor audit journal | 0.15 | $0.06 |
| license_issue | Issue license token | 0.05 | $0.02 |
MARRIAGE OPERATIONS
| Operation | Description | Cost (GAS) | ~USD |
|---|---|---|---|
| marriage_create | Register marriage on blockchain | 0.45 | $0.18 |
| rings_mint | Mint wedding ring NFT pair (NEP-11) | 0.75 | $0.30 |
| rings_vows | Record vows on-chain | 0.10 | $0.04 |
| divorce | File for divorce | 0.20 | $0.08 |
IDENTITY OPERATIONS
| Operation | Description | Cost (GAS) | ~USD |
|---|---|---|---|
| identity_register | Register identity on Neo N3 | 0.30 | $0.12 |
| identity_dual_key | Register dual ML-DSA/ML-KEM keys (DK-QSI) | 0.45 | $0.18 |
| identity_update | Update identity metadata | 0.15 | $0.06 |
| key_rotate | Rotate signing key | 0.30 | $0.12 |
MEMBERSHIP TIERS
Core operations are FREE forever. Upgrade for marketplace access, escrow features, and reduced commissions. Memberships are represented as NEP-11 NFTs on Neo N3.
FREE
- ✓ Sign, verify, attest (unlimited)
- ✓ Blockchain anchoring
- ✓ 10 MB vault storage
- ✗ Marketplace listing
- ✗ Escrow features
NOTARY
- ✓ Everything in Free
- ✓ 100 MB vault storage
- ✓ Marketplace listing (5% commission)
- ✓ 10% batch discount
- ✗ Escrow features
VAULT
- ✓ Everything in Notary
- ✓ 1 GB vault storage
- ✓ Only 2% marketplace commission
- ✓ 15% batch discount
- ✓ Full escrow (timelock, dead-man, multisig)
- ✓ Priority support
ESCROW FEATURES
Advanced escrow patterns for secure document and asset release. Available to Vault tier members. All escrow operations are enforced by the NotaryOracle smart contract on Neo N3.
TIMELOCK ESCROW
Release documents or assets after a specified time period. Perfect for embargoed announcements, scheduled releases, or delayed inheritance.
DEAD-MAN SWITCH
Automatically release documents if you don't check in within a specified period. Requires periodic heartbeat to reset the timer.
PAYMENT-GATED ESCROW
Release documents only after payment is received. Perfect for selling digital goods, licenses, or confidential information.
MULTI-SIGNATURE ESCROW
Require multiple parties to approve before release. Supports M-of-N configurations (e.g., 2-of-3, 3-of-5).
MULTI-PLATFORM INTERFACES
Access Anubis Notary through your preferred interface. Same powerful agent, multiple platforms.
TERMINAL CHAT
Interactive CLI with natural language support
anubis-chatTELEGRAM BOT
Access Anubis from Telegram anywhere
@AnubisNotaryBotDISCORD BOT
Integrate with your Discord server
Anubis#1234WEB API
REST + WebSocket for developers
anubis-api