---
license: other
license_name: snapkitty-tri-license
license_link: https://huggingface.co/Snapkitty/sovereign-temporal-root/blob/main/LICENSE
tags:
- snapkitty
- compilers
- python
---

> Source: [github.com/SNAPKITTYWEST/sovereign-temporal-root](https://github.com/SNAPKITTYWEST/sovereign-temporal-root)

# Sovereign Temporal Root

[![License: BSL-1.1](https://img.shields.io/badge/license-BSL--1.1-orange?style=flat-square)](LICENSE)
[![License: AGPL-3.0](https://img.shields.io/badge/license-AGPL--3.0-blue?style=flat-square)](LICENSE)
[![Patent Pending](https://img.shields.io/badge/patent-pending-red?style=flat-square)]()
[![GitHub Pages](https://img.shields.io/badge/demo-live-brightgreen?style=flat-square)](https://snapkittywest.github.io/sovereign-temporal-root/)

**Author:** Ahmad Ali Parr  
**Trust:** Bel Esprit D'Accord Irrevocable Trust · EIN 42-697643

> A cryptographically gated wormhole that only exists for a specific machine, at a specific time, with a specific key.

---

## What It Is

**Sovereign Temporal Root** is a zero-coordination cryptographic protocol:

- **Hardware-bound** — key derived from motherboard UUID + CPU ID + machine ID composite
- **Temporal-bound** — key rotates every epoch (`floor(unix / window_seconds)`)
- **Stealth** — no handshake, no SNI, no certificates; ghost port effect
- **Orthogonal nonces** — TX/RX streams use separate nonces, no two-time pad

```python
key = SHA-512(salt || hardware_composite || epoch)[:32]  # 256-bit ChaCha20
```

Client and server derive identical keys via NTP-synced epoch. No exchange. No coordination.

---

## Core Mathematics

```
composite = MB_UUID | CPU_ID | MACHINE_ID
epoch     = floor(time.time() / window_seconds)
digest    = SHA-512(SOVEREIGN_SALT || composite || epoch)
key       = digest[:32]               # 256-bit
nonce_tx  = 0 || packet_counter       # orthogonal TX
nonce_rx  = 1 || packet_counter       # orthogonal RX
```

---

## Killer Feature: Ghost Port Effect

Captured keys are dead assets. An attacker who captures today's key holds a corpse — the server has already rotated. No revocation needed. Time kills it.

```
Epoch N-3  ████████████ EXPIRED — USELESS
Epoch N-2  ████████████ EXPIRED — USELESS  
Epoch N-1  ████████████ EXPIRED — USELESS
Epoch N    ████████████ ACTIVE  — VALID NOW
Epoch N+1  ············ FUTURE  — UNKNOWN
```

---

## Live Demo

[snapkittywest.github.io/sovereign-temporal-root](https://snapkittywest.github.io/sovereign-temporal-root/)

Runs real `crypto.subtle.digest('SHA-512')` in the browser. Same output as Python `hashlib.sha512`. No mock.

---

## Architecture

| Property | Value |
|----------|-------|
| Cipher | ChaCha20 |
| KDF | SHA-512, 256-bit output |
| Key rotation | Every epoch (default: 86400s) |
| Binding | Hardware-composite (non-exportable) |
| Coordination | Zero (NTP sync only) |
| Port | 0.0.0.0:4433, no SNI, no certs |
| Drift buffer | Optional (check epoch & epoch-1) |

---

## Build

The live demo is a self-contained `index.html`. No dependencies, no build step.

```bash
open index.html
# or serve locally:
python -m http.server 8000
```

---

© 2026 Bel Esprit D'Accord Irrevocable Trust · Patent Pending · Built for contested environments

---

## License

Licensed under **SnapKitty Tri-License**. Full text: [LICENSE](LICENSE).

### 💼 Commercial License

Snapkitty code is free and open under **AGPL-3.0** for open-source use. Building a commercial product or service? A **proprietary commercial license** from Snapkitty Collective LLC lets you ship this code without the AGPL's source-sharing and network-use obligations.

**[→ Get a commercial license](mailto:A.parr@belespritdaccord.uk?subject=Commercial%20license:%20sovereign-temporal-root)** · A.parr@belespritdaccord.uk