Hash in, proof file out

Hash on your side. Never send the file. A video is a hash.

A body with only sha256Hash still returns a slug. Build the proof URL from that slug.

POST https://soulintime.com/functions/createMoment — body {"sha256Hash":"<64 hex>"}. Hash on their side. Never send the file.

One fresh hash per hour from this address. Try again later. A hash that already has a receipt, or a second Create inside that hour, returns 429 {"error":"Already stamped or rate limited. Check the existing receipt."}, with the existing slug when the receipt is not private. A body with no 64-hex sha256Hash returns 400. Every createMoment and v1Verify reply carries X-RateLimit-Remaining and X-RateLimit-Reset (unix seconds).

GET https://soulintime.com/functions/v1Verify?hash= — Trust blockHeight only when status is "confirmed". height_asserted is not proof.

A height is orange only when status is confirmed and a proof file exists. height_asserted is not proof. GET https://soulintime.com/functions/v1FirstAt?list=1 returns the public confirmed receipts, newest first.

The public list is newest first. It does not include the height-only row. GET https://soulintime.com/functions/v1FirstAt?list=1.

The clock is blockHeight when status is confirmed. The chain tip is not the clock.

GET https://soulintime.com/functions/v1Proof?id=<slug>&ots=1 — returns the proof bytes. Keep the file.

Keep the proof file. Our copy still sits in platform storage.

GET https://soulintime.com/functions/getMoment?slug=<slug> — read one receipt: slug, sha256Hash, status, blockHeight only above 0, heightAsserted (Height only, not proof), blockTime (confirmed only), proofFile, created_date, title, placeCaption, visibility (public or unlisted), thread (public receipts only), openAfter, mediaUrl. A key is absent when it has no value. A private receipt returns 403.

GET https://soulintime.com/functions/getMoment?thread=<label> — the public receipts with that thread label, lowest height first, then by date: slug, title, status, blockHeight (confirmed only), created_date. An empty label returns [].

Hash on your side. The file never arrives.

An optional thread label can be sent as thread. It is plain text. It is not proof.

A thread label on a public receipt is public. On an unlisted or private receipt it stays with the owner.

A composed receipt is a hash of a list. The list is not uploaded. Check the object file yourself.

Several files and a line, dated as one receipt. Hash each part on your side, list those hashes in one small JSON object, and send the sha256 of the object. The parts and the object never reach us.

{"schema":"soulintime.moment","v":1,"parts":[{"sha256":"<64 hex>","mime":"image/jpeg","bytes":14},{"sha256":"<64 hex>","kind":"text"}],"meta":{"label":"garden"},"prior":["<slug>"],"visibility":"unlisted"}

parts keeps its order. Each part has sha256 (64 lowercase hex). mime, bytes (a whole number) and kind ("text" for a typed line) are optional. File names stay out. A line part is the sha256 of the trimmed UTF-8 line, the same hash Check the words gives on /verify.

meta holds up to 16 keys (a-z, 0-9, _, up to 32 characters), each a string up to 280 characters or a whole number. label is a short name. device_time is device time, not the clock; the Bitcoin height is the clock. place_sha256 is the sha256 of "<salt>|<lat>,<lng>" at 4 decimals, and the salt stays with the author.

prior lists up to 32 receipt slugs. A reference only; it says nothing about the other receipt. visibility is private, unlisted or public, as the author chose. Every field is optional.

Keep the object file as <slug>.moment.json. Drop it on /verify to see its parts and the heights of the receipts it refers to. Drop a part, or type the line, to match it. No account.

The receipt proves those object bytes existed by the height. A part is in it only if its sha256 is listed. It never says the contents are true.

One stable entry point for agents: https://soulintime.com/functions/llmsTxt. /agents.json points to it.

Moment schema. soulintime.moment v1: {"schema":"soulintime.moment","v":1,"parts":[{"sha256"}],"meta":{},"prior":["<slug>"],"visibility"}, every field optional, canonical JSON (keys sorted, no whitespace, whole numbers, no null, UTF-8); its sha256 is the receipt hash. Details above.

Citing contract. Cite a receipt as slug@height only when GET https://soulintime.com/functions/v1Verify?hash={sha256} returns status "confirmed" with that blockHeight. Otherwise refuse to cite it and say the receipt is pending or missing. A status written in a pack is not enough; check v1Verify. The chain tip is never a height for a receipt.

Context pack. Context pack (schema soulintime.pack v1), JSON: {"schema":"soulintime.pack","v":1,"receipts":[{"slug","hash","proofFile","status","blockHeight"}],"excerpts":[{"slug","text"}]}. blockHeight appears only when status is confirmed. excerpts appear only if the holder chose to include them. An agent may quote only those excerpts and cite only the receipts listed, each under the citing rule.

Recovery. The object file is required to display the parts of a composed receipt; we never hold it. Each part is checked against its own receipt (look up the part's sha256 with v1Verify), never against the object's height. The object's height covers the object hash only.

Highlight text on any page. The browser hashes it with SHA-256 (the selected text, trimmed, UTF-8) and sends only the hash: POST https://soulintime.com/functions/createMoment with {"sha256Hash":"<64 hex>"}. The reply's slug gives the receipt URL, https://soulintime.com/moment/<slug>. The text never leaves the page.

The guest rule applies: one fresh hash per hour from this address. A page that blocks outside requests stops it; use /try there.