Warrant Canary

Integrity statement cryptographically signed (PGP) by the Koperateur authority. Updated monthly, verifiable by anyone.

Valid Last signature: 11/06/2026 Next due: 01/07/2026

PGP-signed document (RFC, verifiable offline). Any failure to update past the due date must be treated as a warning signal.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

KOPERATEUR WARRANT CANARY — 0bla.com
- ---------------------------------------
Date: 2026-06-11
Signature: Koperateur Consulting (Automated GPG)
Signer: [email protected]
Master Key Fingerprint: 1324E85AA4DB6ED097FD70A8F115D6AD961118E7

STATEMENT:
1. We have NOT received any National Security Letter.
2. We have NOT been served with any secret court order.
3. We have NOT placed any backdoors in our hardware or software.
4. We have NOT received any gag order.
5. We have NOT been compelled to disclose any user data outside of public legal process.

If this file is not updated within 40 days, please assume the service is compromised or seized.
Next scheduled signature: 2026-07-01

Previous Block Hash (SHA-256):
8d9aa9345a97d7637a4a3d74ff337cb23fcd85b4d8d7b2a61449fe97023a72e4
-----BEGIN PGP SIGNATURE-----

iIYEARYKAC4WIQQTJOhapNtu0Jf9cKjxFdatlhEY5wUCaipl4BAcY2FuYXJ5QDBi
bGEuY29tAAoJEPEV1q2WERjnW1YBANNau2CCIzVIXEcjkMzQplI2TxsjeMAcL6Y2
Aw/OX0qEAQDC6xHYyRpXKIDo7VG5kSHCy5lz0w+YgklZGhY9WhNiBA==
=nHPo
-----END PGP SIGNATURE-----

Download canary.txt Download public key

Document SHA-256 fingerprint

2e8a5bb04257548917d336bb2904d2082b0f83018378aeff4c60d9c172f2e1d0

PGP key fingerprint

1324 E85A A4DB 6ED0 97FD 70A8 F115 D6AD 9611 18E7

Verify the signature

Import the public key then verify the document signature. No blind trust: you verify it yourself.

gpg --import koperateur-pubkey.asc
gpg --verify canary.txt

What is a Warrant Canary?

A signed statement asserting we have received no secret order, national security letter, or hidden disclosure order. If it stops being updated, consider the service potentially compromised.

Limits and sovereignty

The canary is signed automatically by our sovereign GPG infrastructure. It does not replace an audit, but provides a traceable, dated and independently verifiable integrity signal.