The shelf had a hole in it
Look at what Protocol One's store has sold until now and a pattern shows: every product works at the same instant — the moment before an act. Before the wire is released, DocLock seals the document. Before the signature dries, Tri-Signature binds who signed. Before an assistant answers, an AI Index Page states the facts it should read. Each one converts a claim — "this is the real document," "this is really our executive," "this is what the business charges" — into proof a stranger can check.
But consequential moments have a before, a during, and a long after — and the shelf only covered the before. What happens the morning after a payment went out on a synthetic voice? What happens to a sealed record in thirty years, when the signer has died and the vendor has folded? What about proof on the other nine million websites that are not ours? And what is AI saying about your business right now, in answers you will never see?
Four new tools close those gaps. Two of them are complimentary — deliberately, and for a reason explained at the end.
After the incident: The Morning After Kit (complimentary)
Everything else in the store works before the bad moment. The Morning After Kit works after it: the first 48 hours following a suspected deepfake-authorized payment or a disputed signed document, when evidence is perishable and every re-saved file and half-remembered timeline quietly destroys it.
The kit is a protocol, not a pep talk. Freeze — name one evidence custodian, collect originals, never re-saves. Hash — a small offline tool walks the evidence folder and produces a fingerprinted register: a SHA-256 fingerprint and character count for every file, plus a digest of the register itself, so the record of the evidence is itself checkable. Custody — a chain-of-custody workbook records who held what, and when. Notify — four editable scripts, drafted factual and non-committal, for the bank, the client, counsel, and your own staff. Verify — a workflow for running the contested document against its seal and reading the graded verdict: Verified, Warning, Integrity Alert, or Broken Seal.
Its first instruction is the honest one: if a payment may still be reversible, call your bank's fraud line now — the recall clock outranks every document in the kit. The kit is an operational aid, not legal advice, and it promises no recovery of funds and no outcome in a dispute. What it protects is the evidence, because an honestly labeled gap survives scrutiny and an invented timeline does not.
It is complimentary because the worst day of a firm's year is not the day to charge them. A team under attack should reach the protocol first and think about vendors later.
On other people's websites: The Proof Widget (complimentary)
The store's homepage runs a live tamper test: seal a statement, change one character, watch the verdict flip. The Proof Widget takes that test off our site and puts it on everyone's.
It is a small widget any business pastes into its own website. In the visitor's browser — nothing is uploaded anywhere — it seals a statement or a file, computing its SHA-256 fingerprint and character count and rendering them as a portable seal block, and it verifies: present the content again and the widget re-checks it, returning Verified, or Broken Seal if even one character changed. A seal made on one site verifies on any other.
The license is the whole strategy in one rule: complimentary to use, copy, and embed, for any business, forever — on the single condition that the attribution line at the end of every seal, ending in {^} Protocol One, stays in the seal output. The seal's timestamp is the sealing device's local clock, labeled LOCAL on the seal itself; it is not attested time, and the widget says so. When the "when" must itself be proof rather than a claim, that is the attested path — DocLock 1.5 — and the widget names it without pretending to be it.
Across the decades: Proof Recovery & Continuity Kit ($129)
A seal does not decay. Everything around it does. The person who knew where the proof packs lived retires. The signer dies. The firm dissolves, the vendor folds, the file format ages. A proof nobody can find, read, or re-check in 2056 is not a proof — it is a story about one.
The Proof Recovery & Continuity Kit is the continuity layer that keeps sealed proof verifiable across that span: a seal inventory register (one row per sealed artifact — its integrity values, where both copies live, who can verify it), the two-custodian rule, custodianship roles and a signed handoff certificate for the day responsibility moves, an annual verification drill with its log, procedures for death, departure, dissolution, and vendor failure, and a "verify in 2056" self-audit that scores whether a stranger with ordinary tools could still check a given record.
One word needs its honest definition. "Recovery" here means continuity of verification — the proof still checks, decades later, with no one's permission. It does not mean recovering lost keys, lost passwords, or files of which no copy survives; if every copy of an artifact and its proof pack is destroyed, its seal cannot be re-verified, and the kit says that sentence out loud. The two-custodian rule exists because it is true.
In what AI says about you: The AI Answer Audit Kit ($79)
Protocol One's complimentary 3-Question AI Check is a smoke test: ask an assistant three questions about your business and see what comes back. The Done-For-You AI Index Page is the canonical fix: your facts, stated once, sealed. Between the smoke test and the fix there was no instrument. The AI Answer Audit Kit is the instrument.
It runs a structured 25-question audit: you record your true facts from primary sources — your license, your price sheet, your lease, not your own possibly-stale website — ask each question exactly as written in a fresh assistant session, and grade every answer Match, Stale, Wrong, or Invented. The workbook and the offline console implement the same scoring rubric, and the kit is blunt about severity: an invented price outranks a stale hour. The finished audit becomes a report you then seal with the kit's own tool — SHA-256 fingerprint plus character count — so your baseline is a dated, checkable record and every re-audit compares against it.
What the audit measures is accuracy, at a point in time: assistants differ and change without notice, so the kit prescribes re-audits, quarterly and after fixes. It does not measure — and nothing in it promises — rankings, citations, mentions, or traffic. It tells you what is being said about you, worst-first, so the remediation has an order.
Why two of them are complimentary
Protocol One's ordering is adoption before revenue: one company actually using the standard, with no money transferred, is worth more at this stage than a sale that changes nothing. So the tool for the worst day of the year is complimentary, and the tool that runs on other people's websites is complimentary — each one is a working piece of the standard placed where it will be used, not where it can be charged for. The paid two are the deep instruments: decades of custodianship, and the full audit. The complimentary two are the doors.
All four, with the rest of the library, are gathered in the Learn hub at protocolone.store/pages/learn, and the store itself is at protocolone.store.
Honest limits
One line runs under everything on this shelf: proof of no change is not proof of truth. A seal — from DocLock, from the widget, from the audit kit — establishes that content is unchanged since it was sealed. It does not establish that the content is true, that a signer had authority, or that an outcome will go your way. The Morning After Kit promises no recovery. The Continuity Kit recovers verifiability, not keys or lost files. The Audit Kit promises no ranking. Any tool that promises those things is selling the one claim no proof can carry.
Protocol One LLC — Standards Office, 3707 E Southern Ave, Suite 1023, Mesa, AZ 85206. {^}