Public Trust
BaselineOS publishes the public surfaces an evaluator needs to confirm the product is alive, installable, and independently verifiable.
Live surfaces
Section titled “Live surfaces”| Surface | Link | What it proves |
|---|---|---|
| Status page | status.baseline.gtcx.africa | Public uptime page is reachable. |
| API health | api.gtcx.africa/api/health | Runtime API is responding. |
| Verify | /verify/ | Signed baseline verification surface is available. |
| Published baselines | /baselines/ | Signed organizational baselines are public. |
| Root key | /baselines/keys/gtcx-root.pub | Public Ed25519 root key is hosted. |
| npm package | baselineos on npm | CLI/package install path is public. |
| GitHub releases | baseline-os releases | Release evidence and tags are public. |
Current release state
Section titled “Current release state”| Channel | Current state |
|---|---|
| npm latest | baselineos@1.6.2 |
| GitHub release | v1.6.2 — aligned with npm latest (verified 2026-06-05). |
| API health | status: ok observed on 2026-06-03. |
| Status page | HTTP 200 observed on 2026-06-03. |
Verification workflow
Section titled “Verification workflow”- Check the status page.
- Confirm the API health endpoint.
- Open the baseline verifier.
- Inspect the published baselines and root key.
- Compare npm latest with GitHub releases — both should show
1.6.2.
Repo maintainers can run pnpm verify:public-trust-release for automated channel parity evidence.