Documentation

Everything you need to seal, verify, and protect your work.

What is SoulProp?

SoulProp is a cryptographic timestamping service. You upload a file, we compute its SHA-256 fingerprint, encrypt it with XChaCha20-Poly1305, and request an RFC 3161 timestamp from an independent Timestamp Authority (FreeTSA). The result is court-ready evidence that your file existed at a specific moment in time.

Zero knowledge — we never see your content. The encrypted blob is stored for 7 years. When you need proof, reveal the file with your encryption key and download a complete evidence package.

How sealing works

1. Fingerprint

Your file is hashed with SHA-256 to produce a unique fingerprint.

2. Encrypt

Encrypted with XChaCha20-Poly1305. A random 256-bit key is generated per seal. The key is returned to you — we don't store it.

3. Timestamp

The fingerprint is sent to FreeTSA, an independent RFC 3161 authority. They return a signed timestamp token. Verifiable by anyone, forever.

4. Store

Encrypted blob stored for 7 years. You receive a .soulprop key file with your seal ID and decryption key.

5. Reveal

Upload your key file to decrypt. Get your original file plus a court-ready evidence bundle: TSA token, PDF certificate, and OpenSSL verification scripts.

Shield CLI, API Reference, and Self-hosting

Enter your beta key to unlock advanced documentation.

Shield CLI

Terminal-native companion for SoulProp. Local file integrity plus remote timestamps.

Install

cargo install octiv-shield

Commands

Seal a directory

shield seal .

SHA-256 fingerprints for every file. State saved to ~/.shield/state.json

Seal with SoulProp timestamp

shield seal . --remote

Local seal + RFC 3161 timestamp via SoulProp API. Stores seal_id in state.

Audit integrity

shield audit

Re-hashes all sealed files. Reports modifications, deletions, additions.

Reseal after changes

shield reseal --remote

View seal info

shield info

TUI Dashboard

Run shield with no arguments to launch the terminal UI.

┌──────────────── OCTIV SHIELD ─────────────────┐
│  Dashboard  │  Audit  │  Files                │
├─ Seal Status ──────────┬─ Singularity ────────┤
│ TIMESTAMPED            │ 100.0000%            │
│ Dir:  /home/user/proj  │ ████████████████████ │
│ Seal: a1b2c3d4...      │                      │
│ ID:   ABC12345         │                      │
├─ Hardening ────────────┼─ Vectors ────────────┤
│ [PASS] umask      0077 │ ENV injection: CLEAN │
│ [PASS] core dumps    0 │ Sealed files:  47    │
│ [PASS] env secrets     │ Tampered:      0     │
└────────────────────────┴──────────────────────┘
 INTACT  47 files  │  Score: 100.0000%

Keys: s=seal, a=audit, r=reseal, Tab=switch, ?=help, q=quit

API Reference

Base URL: https://soulprop.com

POST /api/seal

Seal a file. Send as multipart form data.

curl -X POST https://soulprop.com/api/seal -F "file=@document.pdf"

Response

{
  "id": "ABC12345",
  "fingerprint": "a1b2c3d4e5f6...",
  "key": "base64-encoded-32-byte-key",
  "timestamp": "2026-01-04T12:00:00Z",
  "verifyUrl": "https://soulprop.com/s/ABC12345"
}

GET /api/seal/{id}

Returns public seal metadata: fingerprint, timestamp, reveal status.

POST /api/seal/{id}/reveal

Decrypt a sealed file with your key.

{ "key": "base64-encoded-32-byte-key" }

POST /api/seal/{id}/evidence

Download court-ready evidence package (ZIP). Contains: original file, TSA token (.tsr), PDF certificate, verify.sh script.

{ "encryption_key": "base64-encoded-32-byte-key" }

Errors

{ "error": "message", "code": "ERROR_CODE" }

Codes: FILE_TOO_LARGE, MISSING_FILE, SEAL_NOT_FOUND, WRONG_KEY, RATE_LIMITED

Self-hosting

SoulProp's backend is Go with a C core library for encryption (libsodium) and compression (zstd). Self-host your own instance.

Environment

DATABASE_URL=postgres://user:pass@localhost/soulprop
S3_ENDPOINT=https://s3.amazonaws.com
S3_BUCKET=soulprop-seals
S3_ACCESS_KEY=...
S3_SECRET_KEY=...
PORT=8080

Docker

docker compose up -d