1. Browser → Live Desk PHP
The page posts a scenario only. No API key leaves the browser. Rate limits bind to the client address.
Live AffixIO instrument
Live Desk calls api.affix-io.com for circuit yesno. You get a decision, proof digest, ML-DSA-65 attestation and Merkle inclusion. The API key stays on the server. Chart.js and QRCode are open-source extras for the desk UI only.
Booting auth check…
Live instrument
Choose approve or deny, run a live prove, then inspect the returned AffixIO envelope. Rate-limited. No personal data is submitted.
Verdict
idle
Boundary: synthetic circuit fields only. AffixIO does not receive names, account numbers or other personal records from this desk. This is not a claim that power, water or payments stay online during a Black Sky event.
Raw AffixIO response · sanitised
JSON · no API keyWaiting for the first call…
Factually the same path a production host uses when licenceOnly is false and remote prove is enabled.
The page posts a scenario only. No API key leaves the browser. Rate limits bind to the client address.
Server reads a private key file and calls POST /v1/circuits/yesno/prove with X-API-Key, plus GET /v1/auth/check for status.
The response includes decision, proof digest, ML-DSA-65 attestation fields and Merkle inclusion. The desk renders a sanitised view.
Open source on this page
No. The key is read only by server-side PHP from a private host path and sent to api.affix-io.com. The browser never receives the key.
Circuit yesno on api.affix-io.com, engine noir+barretenberg. Approve and deny scenarios send different synthetic condition fields.
Live Desk shows the live AffixIO path. For outage planning language and offline SDK posture, see /black-sky/. AffixIO does not restore electricity or water.