Bound to physical time.
Nothing in these panels is a deploy snapshot (only the footer's figures are stamped at deploy). Each panel cites the public endpoint it reads, ages are denominated in pulses of the entropy beacon (wall clock is the italic translation), and a chip only says a surface is alive after this page has actually confirmed it. If a surface cannot be confirmed from here, the chip says that instead.
…The plasma instrument publishes a hash-chained pulse every 2 s. The clock in the corner of every page is this feed.
…A witness on separate hardware (a Raspberry Pi that Ledatic runs) signs pulse_id|value_hex|witnessed_at for each pulse it sees; it does not check the links yet. The fields above are its own latest record, shown raw.
…
……
……
The prove buttons above run the proof in this tab — fetch, hash, pinned key, Ed25519, pulse anchor — and print a pasteable receipt. Nothing executes server-side. The shell recipe below is the out-of-band path: same checks, your machine, no browser.