Use this for addressable Nostr objects: long-form notes, research artefacts, grant applications, proposals, and other NIP-33-style records.
Fit
- Status: supported today.
- NIP-85 kind: 30384 addressable assertion.
- Subject: NIP-33 address in both
danda, formatted askind:pubkey:d-tag. - Helpers:
contributeAddressableAssertion,aggregateAddressableContributions. - Proof version: v2 recommended.
- Useful metrics:
rank,comment_cnt,quote_cnt,repost_cnt,reaction_cnt,zap_cnt,zap_amount.
Subject design
- Use kind 30384 when the reviewed artefact is addressable by
kind:pubkey:d-tag. - Decide whether the subject is a fixed revision, a living article, a proposal record, or a review docket. That decision controls expiry and supersession.
- Keep author reputation separate from artefact quality unless the profile says the score intentionally combines them.
- Use a new address or a clear revision policy when material changes alter what reviewers actually evaluated.
What to publish
- A kind 30384 assertion created with
aggregateAddressableContributions. - A documented
rankmeaning: review quality, technical confidence, relevance, safety, acceptance likelihood, or another venue-specific score. - Optional count metrics such as
comment_cntonly when they correspond to defined review activity. - Separate review notes, conflict declarations, datasets, replication logs, and correction records when readers need explanation beyond the aggregate.
Implementation recipe
- Decide whether the scored object is the work as a whole, a specific revision, or the author's standing.
- Define what
rankmeans for this venue: quality, confidence, relevance, safety, or acceptance likelihood. - Use a stable NIP-33 address for the artefact and proof v2 for new deployments.
- Verify the expected address, circle, threshold, and freshness before showing the score as review guidance.
- Publish comments, review criteria, and conflict handling separately if the venue needs them.
Worked example
import {
NIP85_KINDS,
aggregateAddressableContributions,
contributeAddressableAssertion,
createTrustCircle,
} from 'nostr-veil'
import {
authorPubkey,
defaultMembers,
memberIndex,
proofVersion,
verifyUseCaseAssertion,
withCreatedAt,
} from './_shared.js'
const slug = 'article-research-review'
const articleAddress = `30023:${authorPubkey}:paper-2026-05`
const circle = createTrustCircle(defaultMembers.map(member => member.pub))
const contributions = defaultMembers.map((reviewer, index) =>
contributeAddressableAssertion(
circle,
articleAddress,
{
rank: 82 + index * 2,
comment_cnt: index + 1,
},
reviewer.priv,
memberIndex(circle, reviewer.pub),
{ proofVersion },
),
)
export const assertion = withCreatedAt(aggregateAddressableContributions(
circle,
articleAddress,
contributions,
{ proofVersion },
))
export const result = verifyUseCaseAssertion(slug, assertion, {
kind: NIP85_KINDS.ADDRESSABLE,
subject: articleAddress,
subjectTag: 'a',
circleId: circle.circleId,
minDistinctSigners: 3,
freshAfter: assertion.created_at - 300,
})
What to verify
- Strict syntax and a valid proof v2.
- Kind 30384, with
dandaequal to the addressable artefact under review. - The reviewer ring is approved for this venue, subject area, or funding programme.
- The score has enough distinct signers and uses the venue's documented metric direction.
- The assertion is still valid for the current revision or has a clear supersession path.
What this proves
- The review signal is tied to a specific addressable event, not merely to the author.
- Distinct circle members contributed the signed metrics.
- The aggregate can be recomputed by anyone.
What not to claim
- Do not claim the proof proves the research is correct. It proves a reviewer circle's aggregate assessment.
- Do not claim hidden reviewers supplied no conflicts. Conflict declarations and recusal rules sit outside the proof.
- Do not claim a score survives material revisions unless the profile treats the address as a living record and defines expiry.
Failure handling
- Reject assertions for the wrong address, untrusted circles, unknown metric meanings, or insufficient signer counts.
- When an artefact changes, either publish a new assertion for the revised address or mark the older score as stale in the client.
- Handle contested reviews with a companion rationale, appeal process, or independent second circle.
- Keep private reviewer notes outside the public assertion and publish redacted summaries only when the venue requires them.
Operational requirements
| Risk to handle | Required control |
|---|---|
| The proof does not prove the research is correct. | Pair it with review criteria, reproducibility artefacts, open data where possible, and correction policy. |
| The proof does not reveal reviewer comments. | Publish redacted review notes, structured comments, or reviewer rationale events when the workflow needs explanations. |
| Conflicts of interest are not solved by cryptography. | Define reviewer eligibility, conflict declarations, recusal rules, and circle rotation outside the proof. |
| Revisions can change the artefact being reviewed. | Score exact revisions when precision matters, or document that the address represents a living record with expiry. |
Policy choices
- Which addressable kind represents the artefact in your profile?
- Is
rankquality, confidence, relevance, safety, or acceptance likelihood? - Does the score expire when the artefact is revised?
- Should each revision use a new
dtag or reuse the same address?
NIP-85 kind reference
NIP-85 defines the assertion kind by the subject being scored. The kind number is part of the proof v2 context, so deployments should verify both the number and the subject hint tag.
Nostr pubkey subjects. Subject hint: p.
Nostr event id subjects. Subject hint: e.
NIP-33 address subjects. Subject hint: a.
packages, relays, domains, vendors, and other identifiers. Subject hint: k.
provider metadata, not a score assertion. Subject hint: provider tags.
Spec: NIP-85 trusted assertions.
Live relay test
The opt-in relay test signs this canonical example as real Nostr event data, publishes it to wss://relay.trotters.cc, fetches it back by id, and re-runs the application, syntax, Nostr signature, canonical tag, and proof checks.
- Events
- 1/1 fetched from relay
- Proof
- 3/3 threshold from a 3-member ring
- Run
tf7bic-3b3a5ae6d6
- Canonical example passes locally
- Relay stored and returned every signed event
- Fetched Nostr event signatures are valid
- Fetched tags match the canonical example
- NIP-85 syntax validation passes
- nostr-veil proof verification passes
- Deployment profile verifier passes
36fdfca5da95...9d8edbd1
Run the same check with npm run test:use-cases:relay -- --write docs/use-case-relay-checks.json.
Safety checks
Each canonical use-case example is also exercised by an adversarial test harness. These are the failure modes a production verifier should reject before acting on the score.
Published scores must still match the signed contribution aggregate.
The d tag and subject hint must stay bound to the signed v2 proof.
The assertion kind must match the profile and the signed v2 context.
New deployment profiles require proof v2.
Repeated key images must not increase the signer count.
Removing a signature must fail the profile threshold.
created_at must remain inside the freshness window.
The circle ID must be accepted by deployment policy.
verifyProductionDeployment() should require a signed deployment bundle from a trusted publisher.
Fetched event content and tags must match the Nostr signature.
Use validateUseCaseProfileDefinition() for custom profiles, then verifyProductionDeployment() with trusted bundle publishers, signed relay events, accepted circle manifests, expected subject, freshness, and threshold policy so these checks are not left to application glue. For application UI and audit logs, use verifyProductionDeploymentReport() or createProductionDecisionReport() so failures include issue codes, remediation text, a recommended action, pass/fail/not-checked status for the controls, and the profile's proofClaims, proofLimitations, requiredControls, and recommendedActions.