Two keys, one moment
Every prayer is locked twice, to the moment it opens. Either key opens it then, and neither can open it before.
The first is drand, a public timelock network run by about twenty organisations around the world. When a moment arrives, drand publishes a signature for it, and that signature is the key to every prayer locked to that moment. Nobody can make it early, including us.
The second is Path B, a chain of the same kind made for 108.bt. Its key was made once, in a computer's memory only, split into five shares printed on paper cards, and then erased. The cards are sealed and kept in four places in Bhutan: two with 108.bt, and one each with GovTech, the Zhung Dratshang and GMCA. Any three cards together can sign a moment. No one place holds three, so no one, including us, can sign alone.
Path B is only the fallback. While drand works, nobody signs anything. If drand ever stops, three cards are brought together once to sign every moment that has already passed, and the prayers locked to those moments open, late but never early. The signing tools refuse a moment before it arrives.
The chain
Every prayer's second lock is made with this public key. It is all anyone needs to check a Path B signature.
- Chain hash
2066b61a2e7cab03dba438f85cfdeed30fe148276baa732d5d171d1fd254a2d4- Public key
9941efa4e60cbe4f37c7b8bdec1b218e1e6752b782d0f8810185a48dd6528c085bcda9dff428ed62cfb2738bbd2a930601e5c09050e2a6736dde3309ead6789a25b402d8ebc076c929c8fc7cc7effe5fe0dc875a5593ce8c03ff6eadffeb9f80- Scheme
bls-unchained-g1-rfc9380, the same as drand's quicknet- Rounds
- One every 3 seconds, from 22 October 2026 at 16:58 Bhutan time
- Files
- The chain's info, in drand's format · Kept on Arweave
Signed rounds
drand failed for these moments, so they were signed with Path B's cards. Each signature opens every prayer locked to its moment, for anyone.
| Round | The moment (Bhutan time) | Published here | Files |
|---|---|---|---|
| 28,960 | 23 October 2026 at 17:05 | 23 October 2026 at 17:30 | Signature · Arweave |
Open a prayer yourself
You need drand's own tool, tle, and the prayer's locked key. Each prayer is kept on Arweave in its batch, with its key locked twice: wrappedK for drand and wrappedKB for Path B. Each batch is anchored on Ethereum, so you can check nothing in it was changed.
# the Path B key (wrappedKB, base64-decoded into kb.age)
tle -d -n https://108.bt/pathb -c <chain hash> kb.age > key
# or the drand key (wrappedK, into k.age)
tle -d k.age > keytle checks the signature against the chain's public key before it uses it. Before the moment it answers “too early”: that is the lock. The key it prints opens the prayer's text and name (AES-256-GCM).
If 108.bt is gone
Everything on this page is also kept on Arweave, a permanent public archive that 108.bt doesn't control. Look on any Arweave gateway for these tags:
App-Name=108btType=pathb-infofor the chain, orpathb-roundfor a signed roundChain-Hash= the chain's hash, andRound= the round
Save them in a folder as <chain hash>/info and <chain hash>/public/<round>, serve the folder with any web server, and point tle -n at it.