{
  "_version": 1,
  "_format": "argand-canary/1",
  "issuer": "Argand — Nic Weyand",
  "canary_date": "2026-06-03",
  "statement": "As of 2026-06-03, Argand has received zero (0) requests from any government, law enforcement agency, intelligence service, court, or any other entity to disclose user data, install backdoors, weaken cryptography, or compromise the integrity of search results. Argand has issued no national security letters, no gag orders, and no warrant-canary-breaking process has been served. Argand operates no infrastructure that would meaningfully comply with such a request — the architecture is designed so there is no user data to disclose. This canary will be re-issued daily. If it is missing, stale, or unsigned for more than 72 hours, assume something has gone wrong and verify out-of-band before trusting any Argand service.",
  "scope": [
    "argand.org and all subdomains",
    "All Argand search infrastructure",
    "All Argand microservices (search, navigate, maps, recommendations, weather, alerts, legal, scholar, etc.)",
    "Argand pre-launch waitlist (Listmonk on the datalake)"
  ],
  "what_we_will_disclose_if_legally_required": [
    "Aggregate, non-identifying usage statistics (e.g. queries-per-day with no per-user attribution)",
    "Public-facing service availability data"
  ],
  "what_we_cannot_disclose_because_we_do_not_have_it": [
    "Per-user query history (we do not store it)",
    "Per-user IP addresses (scrambled at ingress, never persisted)",
    "Per-user click/dwell behaviour (anonymous k>=50 cohorts only)",
    "User-agent strings, referers, or device fingerprints (not collected)",
    "Session identifiers tied to identity (sessions are 1-hour ephemeral, no DID linkage in storage)"
  ],
  "previous_canary_sha256": "554df1c256cf894931c02ebd54b402fe3efa3a5f8d4964fbaed2ecccbf488e9e",
  "previous_canary_url": "https://argand.org/.well-known/canary.json",
  "chain_genesis": false,
  "signing_key": {
    "key_id": "8F688C1FE994789F",
    "fingerprint": "A78E 7461 13AB 819E B54E 1254 8F68 8C1F E994 789F",
    "owner": "Argand Warrant Canary (automated daily signer)",
    "algorithm": "Ed25519",
    "key_url": "https://argand.org/.well-known/canary-pubkey.txt",
    "certified_by": {
      "owner": "Nic Weyand",
      "fingerprint": "78CB 8742 6797 8D42 9847 B989 DC17 2983 F4C7 1CAB",
      "key_url": "https://argand.org/.well-known/pgp-key.txt",
      "note": "This automated daily signer is cross-certified by Nic's primary identity key. Verify the certification (gpg --check-sigs) to trust the signer; the primary key stays offline and never touches the server."
    }
  },
  "verification_instructions": "Fetch canary.json, canary.json.asc, canary-pubkey.txt and pgp-key.txt from https://argand.org/.well-known/. Then `gpg --import pgp-key.txt canary-pubkey.txt` and `gpg --verify canary.json.asc canary.json` (expect a good signature from the Argand Warrant Canary key A78E 7461 13AB 819E B54E 1254 8F68 8C1F E994 789F). Confirm that signer is cross-certified by Nic's primary key with `gpg --check-sigs 8F688C1FE994789F` (look for a signature from DC172983F4C71CAB). Treat the canary as broken if it is missing, stale, or unsigned for >72 hours.",
  "links": {
    "policy": "https://argand.org/security-policy",
    "contact": "mailto:nic@argand.org",
    "this_canary": "https://argand.org/.well-known/canary.json",
    "signature": "https://argand.org/.well-known/canary.json.asc",
    "canary_pubkey": "https://argand.org/.well-known/canary-pubkey.txt"
  },
  "freshness_anchors": {
    "_comment": "Unpredictable, publicly-timestamped values proving this canary was generated on or after canary_date and could not have been pre-signed.",
    "generated_at_utc": "2026-06-03T12:03:11Z",
    "sources": [
      {
        "source": "NIST Randomness Beacon v2",
        "url": "https://beacon.nist.gov/beacon/2.0/pulse/last",
        "pulse_index": 1815949,
        "timestamp": "2026-06-03T11:59:00.000Z",
        "output_value_prefix": "0A8C56F7431163542F73F173128234B8",
        "fetched_at_utc": "2026-06-03T12:03:00Z"
      },
      {
        "source": "drand (League of Entropy)",
        "url": "https://api.drand.sh/public/latest",
        "round": 6168571,
        "randomness_prefix": "38618a36bb212775e1eae55abc77cd9f",
        "fetched_at_utc": "2026-06-03T12:03:00Z"
      },
      {
        "source": "BBC News (front-page RSS)",
        "url": "https://feeds.bbci.co.uk/news/rss.xml",
        "headline": "Royal Navy helicopter crash 'deeply worrying' time for families, says PM",
        "published": "Wed, 03 Jun 2026 11:58:48 GMT",
        "fetched_at_utc": "2026-06-03T12:03:00Z"
      },
      {
        "source": "NPR News (front-page RSS)",
        "url": "https://feeds.npr.org/1001/rss.xml",
        "headline": "Takeaways from Iowa's primaries. And, DOJ nixes Trump's 'anti-weaponization' fund",
        "published": "Wed, 03 Jun 2026 07:54:07 -0400",
        "fetched_at_utc": "2026-06-03T12:03:00Z"
      }
    ]
  },
  "signing_key_note": "From 2026-06-02 the canary is signed by a dedicated, auto-rotating signing key (above), cross-certified by Nic's primary identity key. Earlier links in the chain (through 2026-06-01) were signed directly by the primary key 78CB 8742 6797 8D42 9847 B989 DC17 2983 F4C7 1CAB."
}