Warrant Canary

Integrity statement cryptographically signed (PGP) by the Koperateur authority. Updated monthly, verifiable by anyone.

Valid Last signature: 01/09/2026 Next due: 01/10/2026

PGP-signed document (RFC, verifiable offline). Any failure to update past the due date must be treated as a warning signal.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

KOPERATEUR WARRANT CANARY — 0bla.com
- ---------------------------------------
Date: 2026-09-01
Signature: Koperateur Consulting (Automated GPG)
Signer: [email protected]
Master Key Fingerprint: 1324E85AA4DB6ED097FD70A8F115D6AD961118E7

STATEMENT:
1. We have NOT received any National Security Letter.
2. We have NOT been served with any secret court order.
3. We have NOT placed any backdoors in our hardware or software.
4. We have NOT received any gag order.
5. We have NOT been compelled to disclose any user data outside of public legal process.

If this file is not updated within 40 days, please assume the service is compromised or seized.
Next scheduled signature: 2026-10-01

Previous Block Hash (SHA-256):
5f06cda844b1ea1be4e88429794fd409edb1f46c0face9c0fe3973cf73e80f63
-----BEGIN PGP SIGNATURE-----

iIYEARYKAC4WIQQTJOhapNtu0Jf9cKjxFdatlhEY5wUCapYyzhAcY2FuYXJ5QDBi
bGEuY29tAAoJEPEV1q2WERjnJL4BALWJNrJ55Is3tLWIO5RFzsx8by+t8dc6jYmu
1y0gRVAbAQCS3GkBh1QnKzGmHKLBFEgLSdZxSL3preKXFHqPbn6xDw==
=RCuN
-----END PGP SIGNATURE-----

Download canary.txt Download public key

Document SHA-256 fingerprint

b3ca70b37da0004db1b39b3ae1315de989eaf2953770f71447793550b7708c02

PGP key fingerprint

1324 E85A A4DB 6ED0 97FD 70A8 F115 D6AD 9611 18E7

Verify the signature

Import the public key then verify the document signature. No blind trust: you verify it yourself.

gpg --import koperateur-pubkey.asc
gpg --verify canary.txt

What is a Warrant Canary?

A signed statement asserting we have received no secret order, national security letter, or hidden disclosure order. If it stops being updated, consider the service potentially compromised.

Limits and sovereignty

The canary is signed automatically by our sovereign GPG infrastructure. It does not replace an audit, but provides a traceable, dated and independently verifiable integrity signal.