Petitions.

The words are fixed first. Before a petition opens, its full text gets a cryptographic fingerprint. Every signature refers to that fingerprint, so the wording cannot be edited underneath the people who signed it.

Signatures link to each other. Each one carries the fingerprint of the one before it. Remove one, insert one or change the order, and every later link stops matching.

Batches go to Bitcoin. Every five minutes the newest signatures are fingerprinted as a batch and submitted to Bitcoin through OpenTimestamps. A few hours later the batch is in a block, and from then on nobody can change it. That includes us.

Your name is not published. Only fingerprints go on the ledger; the details you sign with stay private. Each person can sign a given petition once.

This is a live read of the ledger for one of our petitions: the first entries, which signature each one links to, and the Bitcoin block its batch was anchored in. Nothing here is typed in by us.

Organizations can run petitions on their own sites with this ledger behind them. A petition is embedded with two lines of HTML or created through the API; the signatures land on the same chain and get the same Bitcoin anchoring. Test mode is free and takes a minute to set up. Live petitions open once we have approved the organization.