Use this when the subject is a specific Nostr event: a claim, announcement, report, moderation item, or fact-check target.
Fit
- Status: supported today.
- NIP-85 kind: 30383 event assertion.
- Subject: event id in both
dande. - Helpers:
contributeEventAssertion,aggregateEventContributions. - Proof version: v2 recommended.
- Useful metrics:
rank,comment_cnt,quote_cnt,repost_cnt,reaction_cnt,zap_cnt,zap_amount.
Subject design
- Use this profile when the verifier will act on one immutable event id.
- Put the event id in both
dande; proof v2 binds the reviewer score to that exact event and assertion kind. - Do not reuse the score for a quoted note, screenshot, edit, correction, or paraphrase. Those are different subjects.
- If the claim has a long-running review record, score the addressable review record with kind 30384 and link it to the event separately.
What to publish
- A kind 30383 assertion created with
aggregateEventContributions. - A
rankprofile that says whether the value represents accuracy, confidence, harm, priority, or review quality. - Optional count metrics only when the profile explains what they count, such as reviewed reactions or substantive comments.
- Separate evidence, correction, and methodology events for humans; the nostr-veil event should carry the verifiable aggregate signal.
Implementation recipe
- Treat the event id as immutable: the score is about that exact event, not a later correction or paraphrase.
- Publish the review method that maps reviewer judgement to
rank. - Use proof v2 so the proof cannot be replayed as a user, addressable, or identifier assertion.
- Verify strict syntax, the expected event id, the expected circle, the threshold, and any freshness or correction policy.
- Link corrections or evidence with separate events if the client needs more than the numeric signal.
Worked example
import {
NIP85_KINDS,
aggregateEventContributions,
contributeEventAssertion,
createTrustCircle,
} from 'nostr-veil'
import {
defaultMembers,
memberIndex,
proofVersion,
verifyUseCaseAssertion,
withCreatedAt,
} from './_shared.js'
const slug = 'event-claim-verification'
const claimEventId = 'aa'.repeat(32)
const circle = createTrustCircle(defaultMembers.map(member => member.pub))
const contributions = defaultMembers.map((checker, index) =>
contributeEventAssertion(
circle,
claimEventId,
{
rank: 70 + index * 4,
reaction_cnt: index + 1,
},
checker.priv,
memberIndex(circle, checker.pub),
{ proofVersion },
),
)
export const assertion = withCreatedAt(aggregateEventContributions(
circle,
claimEventId,
contributions,
{ proofVersion },
))
export const result = verifyUseCaseAssertion(slug, assertion, {
kind: NIP85_KINDS.EVENT,
subject: claimEventId,
subjectTag: 'e',
circleId: circle.circleId,
minDistinctSigners: 3,
freshAfter: assertion.created_at - 300,
})
What to verify
- Strict syntax and a valid proof v2.
- Kind 30383, with
dandeequal to the event id currently being displayed or acted on. - The reviewer ring is one the client trusts for this claim class, and the threshold is high enough for the UI action.
- The
rankprofile is known before display; do not compare scores from circles that use different meanings. - The event has not been superseded by a correction, later review, or local freshness policy.
What this proves
- Distinct members of the fact-checking circle scored that exact event id.
- The aggregate metric tags match the signed contribution messages.
- Proof v2 prevents the same contribution being replayed as a user, addressable, or identifier assertion.
What not to claim
- Do not claim the proof makes the event objectively true or false. It proves a threshold reviewer signal.
- Do not claim the proof includes the evidence. Evidence links and rationale must be separate events or application records.
- Do not claim later edits, corrections, or reposts inherit the score unless the profile explicitly scores a living review record.
Failure handling
- Reject wrong-event assertions, unknown circles, stale reviews, and assertions whose
rankmethod is not published. - If a reviewed event is corrected, publish a new assertion for the correction or link a supersession event so clients can stop showing the old result as current.
- Show disagreement between independent review circles instead of collapsing it into one unexplained score.
- Escalate high-impact or low-quorum claims to human review before applying automatic visibility changes.
Operational requirements
| Risk to handle | Required control |
|---|---|
| The proof does not prove the event content is objectively true. | Publish the fact-checking method, evidence links, and correction rules. Treat the nostr-veil assertion as the verifiable reviewer signal. |
| The proof does not explain reviewer methodology by itself. | Define a public provider profile for rank, quorum, eligible reviewers, conflicts, and freshness. |
| The subject event can be deleted or superseded. | Score the exact event id, then publish a new assertion for corrections or later versions. Clients should display supersession state separately. |
Policy choices
- Does
rankmean accuracy, confidence, harm, or review quality? - Should clients show the score before a quorum is reached?
- Should later corrections create a new assertion or update the same subject?
- Should reviewers be independent, specialist, local, or community-selected?
NIP-85 kind reference
NIP-85 defines the assertion kind by the subject being scored. The kind number is part of the proof v2 context, so deployments should verify both the number and the subject hint tag.
Nostr pubkey subjects. Subject hint: p.
Nostr event id subjects. Subject hint: e.
NIP-33 address subjects. Subject hint: a.
packages, relays, domains, vendors, and other identifiers. Subject hint: k.
provider metadata, not a score assertion. Subject hint: provider tags.
Spec: NIP-85 trusted assertions.
Live relay test
The opt-in relay test signs this canonical example as real Nostr event data, publishes it to wss://relay.trotters.cc, fetches it back by id, and re-runs the application, syntax, Nostr signature, canonical tag, and proof checks.
- Events
- 1/1 fetched from relay
- Proof
- 3/3 threshold from a 3-member ring
- Run
tf7bic-3b3a5ae6d6
- Canonical example passes locally
- Relay stored and returned every signed event
- Fetched Nostr event signatures are valid
- Fetched tags match the canonical example
- NIP-85 syntax validation passes
- nostr-veil proof verification passes
- Deployment profile verifier passes
e91198959877...037de6ba
Run the same check with npm run test:use-cases:relay -- --write docs/use-case-relay-checks.json.
Safety checks
Each canonical use-case example is also exercised by an adversarial test harness. These are the failure modes a production verifier should reject before acting on the score.
Published scores must still match the signed contribution aggregate.
The d tag and subject hint must stay bound to the signed v2 proof.
The assertion kind must match the profile and the signed v2 context.
New deployment profiles require proof v2.
Repeated key images must not increase the signer count.
Removing a signature must fail the profile threshold.
created_at must remain inside the freshness window.
The circle ID must be accepted by deployment policy.
verifyProductionDeployment() should require a signed deployment bundle from a trusted publisher.
Fetched event content and tags must match the Nostr signature.
Use validateUseCaseProfileDefinition() for custom profiles, then verifyProductionDeployment() with trusted bundle publishers, signed relay events, accepted circle manifests, expected subject, freshness, and threshold policy so these checks are not left to application glue. For application UI and audit logs, use verifyProductionDeploymentReport() or createProductionDecisionReport() so failures include issue codes, remediation text, a recommended action, pass/fail/not-checked status for the controls, and the profile's proofClaims, proofLimitations, requiredControls, and recommendedActions.