A field journal that seals what you saw

A record can change.
The seal shouldn't.

Vickrey pairs a field observer's notes with an open-weight model that suggests — and an observer who decides. The decision is sealed on the device with a signature and a hash chain, so any later edit cracks the seal instead of silently rewriting the past.

Watch the film Run locally

European robin, on the hawthorn by the gate —

later edit: Magpie?

EDIT DETECTED

Illustrative field note — mechanism, not screenshot.

The film

92 seconds, hosted on YouTube (unlisted) — watch directly. Shows a real server-hosted Gemma 3 4B identification sealed and verified against a mock Hornet ledger. The robin photo is illustrative: Alexis LOURS, CC BY 2.0, Wikimedia Commons.

How it works

  1. 01

    Observe & decide

    A photo, a suggestion from an open-weight model, and a human who confirms or corrects it. The observer — not the model — signs.

  2. 02

    Seal on the device

    The decision is hashed, Ed25519-signed, and chained to the record before it. The sealed journal is the source of truth.

  3. 03

    Compare later

    Sync anchors a commitment — never the raw photo — to a ledger. Edit a queued record and the hashes stop recomputing: sync is refused.

Why records like this matter

Open biodiversity data is enormous: GBIF reports >3 billion species occurrence records published by ~2,300 institutions (GBIF, 2025). That is ecosystem context, not Vickrey usage — and nothing here claims those records lack provenance. It is the scale that makes tamper-evident field records worth having.

What is true today

Working demo

  • Server-hosted Gemma 3 4B identifies a photo through the field client.
  • Local signed journal: Ed25519 seal + hash chain, verified in the browser.
  • Edit → crack → sync refused; restore → mock Hornet VERIFIED.

Not yet

  • On-phone / offline model inference.
  • Public ledger anchor (demo uses a mock Hornet + relay).
  • Actual outdoor field use.
  • Darwin Core export; live Atlas similarity search.