Production-grade cryptographic proof system verifying user activity across 110 consumer apps. Custom MPC-TLS protocol built from scratch — all 6 phases working end-to-end. Zero marginal cost per proof.
User taps "Verify" in the app and selects a provider — Uber, Strava, Spotify, or any of 110 supported apps. No API keys or credentials are shared with EarnOS.
User logs into the provider through a sandboxed WebView. EarnOS never sees the password — session cookies are captured locally on the user's device.
The attestor server fetches data over TLS, evaluates thresholds against the provider schema (e.g. "50+ rides", "4.5+ rating"), and generates a proof. In MPC-TLS mode, the TLS session is split so no single party holds the full key material.
The attestor signs the attestation with both Ed25519 and ECDSA secp256k1. Dual signing enables independent verification off-chain and on-chain via EVM smart contracts.
The signed proof is submitted to the REST API. Anyone can verify it independently — including on-chain via EarnOSVerifier.sol with attestation revocation support.
Attestor fetches data using session cookies over TLS. Sees plaintext, extracts metrics, signs attestation. Simple, fast — the production default for trusted deployments.
SDK opens a CONNECT tunnel through the attestor. TLS terminates at the provider — the attestor never sees plaintext. AES-GCM ciphertext binding verifies response integrity.
Two-party computation splits the TLS session between prover and verifier. Neither party alone holds the full key material. Custom protocol built from scratch — not a TLSNotary fork.
The system runs on fixed-cost infrastructure. Adding more proofs costs nothing until scaling thresholds. At scale, EarnOS is 241x cheaper than running proofs solely on external providers.
Half-gate garbled circuits with AES-NI acceleration, Boolean SHA-256/AES circuits, two-party ECDHE, oblivious transfer — built from the circuit level up. Estimated $3–5.5M replacement cost.
Backend (Rust crypto + TypeScript), frontend (React Native SDK + UI kit), infrastructure (Railway + CF), admin tooling, and on-chain verification — all owned. No dependency on third-party networks.
Universal Proof SDK routes across 5 proof providers with 4 strategies (cost/trust/speed/coverage). Top-20 apps free via EarnOS, long-tail falls back to partner providers.
Three proof modes serve different trust/performance tradeoffs. Direct for speed, Proxy-TLS for privacy, MPC-TLS for cryptographic guarantees. Tuned per-provider.
110 hand-curated JSON schemas with validated extraction rules, test fixtures, and health monitoring. Each integration is manual engineering. The moat widens with every new provider.
React Native SDK + full UI kit with Expo managed workflow. Native MPC-TLS module (Rust FFI iOS + JNI Android). Web SDK, Chrome extension, WASM binary.
AI-powered schema repair system detects provider API changes, diagnoses failures, and auto-generates updated extraction rules — maintaining 110 integrations without manual intervention.
| Volume | EarnOS (Direct) | EarnOS (MPC-TLS) | External Providers | Advantage |
|---|---|---|---|---|
| 100K/mo | $43 | $60 | $2,000–$10,000 | 46–232x |
| 1M/mo | $83 | $173 | $20,000–$100,000 | 241–1,205x |
| 10M/mo | $155 | $460 | $200K–$1M | 1,290x+ |
| 100M/mo | $540 | $2,800 | $2M–$10M | 3,700x+ |
createProofPipeline() — a single function call handles provider selection, fallback chains, and cost optimization across all five providers.
Continuous synthetic testing every 6 hours. Circuit breaker patterns detect schema breakage automatically.
AI-powered failure classification — API endpoint change, schema drift, auth flow update, or rate limiting.
Playwright traffic capture + AI schema extraction generates updated rules, fixtures, and operators.
Updated schema validated and deployed. Provider auto-re-enabled. Full cycle without manual intervention.
NDK build for the Rust MPC-TLS crate targeting Android arm64. Expo dev build with native module integration.
AI agent for automated schema repair. Traffic capture, failure diagnosis, and schema extraction when providers change APIs.
Deploy EarnOSVerifier.sol to Ethereum L2 mainnets. On-chain attestation verification and revocation.
Submit the hardened Chrome extension (MV3) to the Chrome Web Store for public distribution.
Graduate MPC-TLS from pilot to default backend for all high-value providers.
Native MPC-TLS on real iOS and Android devices via Expo dev builds.