Live verification workbench
Run signed allow or deny calls against live AffixIO endpoints. Synthetic data only. Built for teams preparing for NCSC post-quantum migration, Online Safety Act HEAA, and EU AI Act agent controls.
Compliance-ready verification practice
AffixIO returns a signed yes or no at the decision boundary. Use the live sandbox below to exercise the same patterns buyers now ask for under UK and EU rule changes, without writing production traffic.
The UK National Cyber Security Centre sets indicative PQC milestones: discovery and an initial migration plan by 2028, high-priority migrations by 2031, and full migration by 2035. Long-lived allow or deny evidence should not depend on classical signatures alone.
Open the ZK proofs and Merkle channels in the sandbox to inspect live attestation and audit inclusion on api.affix-io.com while you shape that migration plan.
Ofcom’s highly effective age assurance guidance sits under the Online Safety Act. Services need methods that meet technical accuracy, robustness, fairness, and accessibility criteria, with privacy duties still applying. Age inference alone is under pressure as a compliance strategy.
Use the Age policy channel to run sandbox-native age gates that return signed allow or deny without parking a date of birth at the verifier.
EU AI Act logging and oversight expectations, plus the Omnibus debate on high-risk systems, push teams toward clear decision records for non-human actors. Agentic AI that can call tools or spend needs least-privilege permissions and a replay-safe deny path.
Try Agent and Payment channels for policy-bound AI agent authorisation and agentic payment verification before money moves.
Geofence admission, anti-scalping ticket mint and redeem, shipment handoff, and QR migration all share the same signed decision model. Useful when procurement asks how proof survives offline scanners and later audit.
Jump into Tickets, Location, Shipment, or QR codes in the workbench. Full circuit catalogue stays in docs so this page stays readable for search and buyers.
Pick a channel for live CMS, scanner, ZK, and sandbox-native policy calls. Latency and Merkle inclusion show on every successful run. Regulatory context sits in the section above; this rail is the execution surface.
Tickets, shipment, edge, and QR mint or verify compact credentials. Shipment maps logistics labels onto edge issue, verify, and consume.
Location, age, agent, payment, and window are sandbox-native allow or deny gates for HEAA-style age checks, AI agent permissions, and agentic payment authorisation.
ZK proofs and Merkle tools inspect digests against the live audit tree on api.affix-io.com for PQC-ready attestation practice.
GET/POST /sandbox/api/cms/* → local CMS GET/POST /sandbox/api/zk/* → api.affix-io.com GET/POST /sandbox/api/location/* → geofence GET/POST /sandbox/api/age/* → age gate GET/POST /sandbox/api/agent/* → agent auth GET/POST /sandbox/api/payment/* → payment auth GET/POST /sandbox/api/window/* → time window
Redirect QR wraps any URL as /q/<code>, audits Merkle, then redirects.
POST /api/tickets/generate with HMAC-signed compact token. Event, tier, and gate controls only. No holder or seat fields.
Tickets with an entry point (e.g. main-gate) must send that gate on verify and redeem. Revoke uses ticket ID from mint.
Uses the verify entry point above when checking gate controls.
Offline-capable dock pass for shipment verification and electronic proof of delivery. Maps to POST /api/tickets/edge/issue. Use a synthetic consignment ref only.
Dock or yard check-in without consuming the handoff. POST /api/tickets/edge/verify. Checkpoint must match the pass.
Consume once as electronic POD. First handoff admits and spends the pass. Replay the same token to confirm DENY on double delivery. POST /api/tickets/edge/consume.
Geofence proof of presence. No QR, barcode, or redirect link. POST /sandbox/api/location/verify checks claimed coordinates against a zone, returns signed ALLOW or DENY, and appends a Merkle audit leaf. Exact coordinates are rounded in the digest commitment.
Use the device location API, or enter synthetic coordinates. Nothing is stored server-side beyond the Merkle digest.
Not requested
Quick DENY path: claim a point far from the active zone (Paris centre) while keeping the same policy. Confirms geofence rejection without touching QR flows.
Minimum or range age gate from an integer age claim only. No date of birth, no QR. POST /sandbox/api/age/verify
Tool and spend gate for synthetic agent IDs (agt_…). No QR. POST /sandbox/api/agent/verify
Amount, currency, and MCC gate. No QR or card PAN. POST /sandbox/api/payment/verify
Weekday and minute-of-day gate for the claimed timestamp (UTC offset applied). No QR. POST /sandbox/api/window/verify
Offline-capable v3 tickets. POST /api/tickets/edge/issue
POST /api/qr/generate with ML-DSA-65 attestation. Merkle audit on every scan.
Short link via /q/<code>. Merkle audit on each scan, then redirect.
POST /api/qr/migrate. Fingerprint a third-party QR, mint compact-v3, sign migration manifest with ML-DSA-65.
POST /api/demo/identity-verify with signed attestation via aio_web_demo. Synthetic policy references only, no personal data.
Run Prove first. It generates a proof and verifies it against the live Merkle tree.
Live audit Merkle from api.affix-io.com. sha256-sorted-pairs algorithm.
