Open challengeSHA-256Ed25519Runs in your browser

Try to forge a Serial Alice certificate.

These are real energy certificates for AI workloads. Change any number: the energy, the time window, the GPU. Your own browser recomputes the fingerprint and checks the signatures. Nothing is sent to us, and you do not have to trust us.

Level 2 is coming: fool our live issuance and win €100 of NVIDIA H100 time. How it works ↓
Level 1 · Forge the record

One hour of LLM training on an attested NVIDIA H100

Measured by our sealed collector and recorded in an append-only log signed by a separate witness operated by Serial Alice. The witness key is a Cloud KMS HSM key: it cannot be exported, not even by us, and only the witness machine may sign with it.

sa-prod-b2-0005log entry 34GPU energy only
Now change something

Tip: change one digit of the energy, then try to cover your tracks in the full JSON below: the log entry and the witness key are in there too.

The claim fingerprint

digest("sa:claim:v1", claim) computed now, versus the one the witness signed into the log. Differences in red.

Computed in your browser
—
Recorded in the signed log
—

The trust anchor

The pinned HSM root key ("witness" role) that authorized the witness key. Published with our recipient guide.

—

Everything the check uses

The claim, the log entry and the root-signed statement. Edit anything you like.

More certificates to try

Earlier certificates, signed with Serial Alice's issuing key and anchored on Polygon. Just as easy to catch.

Pick a real certificate
— Live certificate ↗ Polygon anchor ↗
Now change something

Tip: change a single digit, then try to cover your tracks in the full JSON below.

The fingerprint

SHA-256 of the certificate body, recomputed now versus the one Serial Alice signed. Differences in red.

Computed in your browser
—
Signed by Serial Alice
—

What you changed

    The full certificate

    Edit anything, even the fingerprint itself. See what happens.

    How the check works

    1. Fingerprint. The certificate body is written in one exact canonical form and hashed with SHA-256. Change one character and the fingerprint changes completely.
    2. Signature. Serial Alice signed that fingerprint with Ed25519. Only the private key can produce a matching signature; the public key is below and in our public registry.
    3. Anchor. The fingerprints are also committed to the Polygon blockchain, so not even Serial Alice can quietly rewrite history.

    A dashboard asks you to trust whoever runs it. A certificate lets anyone check it, including you, right now.

    Serial Alice's public key

    Ed25519. Compare it with the live registry; nothing on this page has to be taken on trust.

    —
    Open the registry ↗

    Two levels

    Level 1 shows the record cannot change. Level 2 tests the system itself.

    1. Level 1 · Forge the record (open now, no prize). Once issued, a certificate cannot be changed without being caught: that is mathematics, and this page lets you check it yourself.
    2. Level 2 · Fool the live issuance (coming soon, €100 of NVIDIA H100 time). We will open a dedicated issuance instance of our sealed collector, gate and witness. Get it to issue a certificate for energy that was never measured, through anything you can send it: altered evidence, invented samples, replays, a modified collector. The prize is €100 of NVIDIA H100 time that we run for you, with its own Serial Alice energy certificate. Full rules, scope and safe-harbour terms will be published here when it opens.
    3. Want to be told when it opens? Email contact@serialalice.pt. Found a real weakness in the meantime? Tell us privately first; responsible reports are rewarded.

    What this page proves: the content you see is exactly what Serial Alice signed, and any change is caught. What it does not prove on its own: how the energy was measured. That comes from the hardware attestation (Intel TDX, AMD SEV-SNP, NVIDIA) recorded in each certificate; open the live certificate to see it. The challenge certificate measures GPU energy only, from the GPU's own counter (NVML) signed by the collector; it is not a separate physical meter. The three earlier certificates were signed with Serial Alice's issuing key.

    Energy you can prove, for every AI workload.

    Signed, independently verifiable energy certificates for training and inference runs, bound to confidential-computing attestation.

    Talk to us