{"world":"london","tenant":"public","generatedAt":"2026-09-14T08:05:31.705Z","featured":{"question":"How busy is Trafalgar Square right now?","place":{"slug":"trafalgar-square","name":"Trafalgar Square","lat":51.508,"lng":-0.128},"counts":{"bus":2,"car":19,"person":16,"truck":6},"total":43,"camera":{"id":"tfl_jamcam:tfl-JamCams_00001.06502","name":"Trafalgar Square"},"verdict":"busier than usual","percentile":1,"percentileCi":[0.89,1],"n":31,"basis":"hour_of_day","higherThanAtThisHour":"31 of 31 previous readings at this camera at this hour of day, over the last 30 days","boundedClaim":"in the top quarter of this camera's readings","boundedClaimConfidence":"95%","hourOfDayN":31,"whyNoVerdict":null,"verdictState":"stated","minReadingsForVerdict":12,"verdictSupportedAt":"direction","excludedOtherDetectors":{"sam3_open_vocab@889dc22e940a4e4d":299,"unstamped":23},"clipSha256":"3e8e6e0eef0d92d53e3a74bc074238087c6a90a83e76ec45364cf613367d803e","clipAgeS":354,"frameIndex":131,"frameCount":262,"detectorFnId":"cpu_detect_coco@4d9812b3db3df883","detectorModel":"fasterrcnn_mobilenet_v3_large_fpn","countedFrom":"retained_clip","tamperEvidence":"recomputable_from_source","receiptCid":"cae227e0317c9154c997e477170cf1572b72bdffc8c371e533c4aed87019b44a","receipt":{"alg":"ed25519","kid":"geoqa-2026-06","signer":"geoqa","signedAt":"2026-09-14T07:59:30.700153+00:00","pubkeyB64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q="},"verified":{"url":"/api/world-model/verify/by-cid/cae227e0317c9154c997e477170cf1572b72bdffc8c371e533c4aed87019b44a","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:26.668Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/cae227e0317c9154c997e477170cf1572b72bdffc8c371e533c4aed87019b44a -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:59:30.700153+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]},"areaNote":"counts are from ONE camera of 267 within 5000 m. That is an answer about this junction, not about the area","camerasInRadius":267,"camerasSkipped":[],"selectedBecause":"nearest with a retained clip"},"trend":{"verdict":"busier","because":"on the 232 cameras that reported in BOTH windows, mean objects per readable observation went 9.0 -> 21.1 (+12.1)","camerasInBoth":232,"meanThen":9,"meanNow":21.1,"windowHours":3,"camerasInRadius":267,"detectorFnId":"cpu_detect_coco@4d9812b3db3df883","singleDetector":true,"series":[{"from":"2026-09-14T05:05:24.278573+00:00","to":"2026-09-14T05:35:24.278573+00:00","objectsTotal":6717,"cameras":245},{"from":"2026-09-14T05:35:24.278573+00:00","to":"2026-09-14T06:05:24.278573+00:00","objectsTotal":9648,"cameras":244},{"from":"2026-09-14T06:05:24.278573+00:00","to":"2026-09-14T06:35:24.278573+00:00","objectsTotal":11794,"cameras":243},{"from":"2026-09-14T06:35:24.278573+00:00","to":"2026-09-14T07:05:24.278573+00:00","objectsTotal":13469,"cameras":231},{"from":"2026-09-14T07:05:24.278573+00:00","to":"2026-09-14T07:35:24.278573+00:00","objectsTotal":15477,"cameras":236},{"from":"2026-09-14T07:35:24.278573+00:00","to":"2026-09-14T08:05:24.278573+00:00","objectsTotal":16391,"cameras":234}],"provenanceClass":"deterministic_index","detectorFnIdsInWindow":{"cpu_detect_coco@4d9812b3db3df883":4942},"excludedOtherDetector":0,"foldedAsEquivalent":{},"mixedDetectorNote":null},"places":[{"slug":"aldgate","name":"Aldgate","cameraName":"Whitechapel High St/Mansell St","cameraId":"tfl_jamcam:tfl-JamCams_00001.02100","cameraPoint":{"lat":51.5144,"lng":-0.0741},"cameraDistanceM":114.9,"counts":{"bus":2,"car":17,"person":2,"truck":2},"total":23,"observedAgeS":1209.5,"clipSha256":"8a53f05085e9187a58f8ccf407fbe5fe460dfa46110f4d68528d764aba9c8cd8","detectorFnId":"cpu_detect_coco@4d9812b3db3df883","countedFrom":"retained_clip","showable":true,"unobservable":null,"thumb":"/cards/aldgate/thumb.png","frameScene":"scene","nearbyObservable":null,"clipProvenance":{"url":"/api/world-model/verify/by-cid/8a53f05085e9187a58f8ccf407fbe5fe460dfa46110f4d68528d764aba9c8cd8","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:28.750Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/2910a379152522aea64f1757c4bb8ee2f2b2a408d8eab052446455d9c22424f9 -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:45:19.241348+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]}},{"slug":"canary-wharf","name":"Canary Wharf","cameraName":"ASPEN WAY - UPPER BANK STREET","cameraId":"tfl_jamcam:tfl-JamCams_00002.00605","cameraPoint":{"lat":51.50706,"lng":-0.0162},"cameraDistanceM":307.9,"counts":{"car":4,"person":1},"total":5,"observedAgeS":936.7,"clipSha256":"022d44323ac89fd1ee9b7956ee0880124b1a4e2317e81848b010de3d90acaed0","detectorFnId":"cpu_detect_coco@4d9812b3db3df883","countedFrom":"retained_clip","showable":true,"unobservable":null,"thumb":"/cards/canary-wharf/thumb.png","frameScene":"scene","nearbyObservable":null,"clipProvenance":{"url":"/api/world-model/verify/by-cid/022d44323ac89fd1ee9b7956ee0880124b1a4e2317e81848b010de3d90acaed0","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:28.750Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/27b4775378c8eeb05356883441801342f9580d5a2ec1b051ee9d9097ec309c3f -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:49:52.010437+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]}},{"slug":"elephant-and-castle","name":"Elephant and Castle","cameraName":"Elephant & Castle/Walworth Road","cameraId":"tfl_jamcam:tfl-JamCams_00001.03604","cameraPoint":{"lat":51.4934,"lng":-0.1005},"cameraDistanceM":183.9,"counts":{"bus":2,"car":20,"person":18,"truck":4},"total":44,"observedAgeS":783.7,"clipSha256":"8b8f1579c7e88f18934974756195d6c078322ddf6f2b4b4476c620f3e64adfe8","detectorFnId":"cpu_detect_coco@4d9812b3db3df883","countedFrom":"retained_clip","showable":true,"unobservable":null,"thumb":"/cards/elephant-and-castle/thumb.png","frameScene":"scene","nearbyObservable":null,"clipProvenance":{"url":"/api/world-model/verify/by-cid/8b8f1579c7e88f18934974756195d6c078322ddf6f2b4b4476c620f3e64adfe8","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:28.751Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/75601b235db875c4ad08112acbc81a1909759650ad1cdd38100ca5eb6ebddd7a -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:52:25.009634+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]}},{"slug":"hammersmith-broadway","name":"Hammersmith Broadway","cameraName":"Hammersmith Bway/Shepherds Bush Rd","cameraId":"tfl_jamcam:tfl-JamCams_00001.06643","cameraPoint":{"lat":51.493,"lng":-0.22387},"cameraDistanceM":56.4,"counts":{"bus":3,"car":9,"person":7,"truck":2},"total":21,"observedAgeS":789,"clipSha256":"20b452329c7f7aef2aa92ca8e5e06ad63aee06ebeb759ec83f985309a1712ab3","detectorFnId":"cpu_detect_coco@4d9812b3db3df883","countedFrom":"retained_clip","showable":true,"unobservable":null,"thumb":"/cards/hammersmith-broadway/thumb.png","frameScene":"scene","nearbyObservable":null,"clipProvenance":{"url":"/api/world-model/verify/by-cid/20b452329c7f7aef2aa92ca8e5e06ad63aee06ebeb759ec83f985309a1712ab3","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:28.751Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/c9b99efbfd63d6fe4fe740b69a11029518835d6f4fc2a7da22e0ee68adc070ca -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:52:19.742233+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]}},{"slug":"hyde-park-corner","name":"Hyde Park Corner","cameraName":"Hyde Park Corner","cameraId":"tfl_jamcam:tfl-JamCams_00001.06515","cameraPoint":{"lat":51.5021,"lng":-0.15238},"cameraDistanceM":152.3,"counts":{"car":22,"person":4,"truck":6},"total":32,"observedAgeS":792.8,"clipSha256":"9031f486a0a519a27efd18a807ca435bf89589a3d5ce37760dbe715a59d20f90","detectorFnId":"cpu_detect_coco@4d9812b3db3df883","countedFrom":"retained_clip","showable":true,"unobservable":null,"thumb":"/cards/hyde-park-corner/thumb.png","frameScene":"scene","nearbyObservable":null,"clipProvenance":{"url":"/api/world-model/verify/by-cid/9031f486a0a519a27efd18a807ca435bf89589a3d5ce37760dbe715a59d20f90","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:28.751Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/01345b4b5b858381f4cb74eed3356dcd69fe890ba9072ecc6d0051164298945a -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:52:15.890176+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]}},{"slug":"marble-arch","name":"Marble Arch","cameraName":"A4202 Park Lane/North Row","cameraId":"tfl_jamcam:tfl-JamCams_00001.08863","cameraPoint":{"lat":51.5127,"lng":-0.15787},"cameraDistanceM":88.6,"counts":{"car":17,"person":20,"truck":1},"total":38,"observedAgeS":1075.7,"clipSha256":"9584b3ed645940a627600d6e54cadb223ea12c8bdbe8ec086263a9dafd0ad46b","detectorFnId":"cpu_detect_coco@4d9812b3db3df883","countedFrom":"retained_clip","showable":true,"unobservable":null,"thumb":"/cards/marble-arch/thumb.png","frameScene":"scene","nearbyObservable":null,"clipProvenance":{"url":"/api/world-model/verify/by-cid/9584b3ed645940a627600d6e54cadb223ea12c8bdbe8ec086263a9dafd0ad46b","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:28.752Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/bd5000f97f82f57575fac0047690645d93cbf49ef22ec3a1f7e17379f188359c -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:47:33.038816+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]}},{"slug":"old-street","name":"Old Street","cameraName":"City Road/Old Street","cameraId":"tfl_jamcam:tfl-JamCams_00001.07350","cameraPoint":{"lat":51.5262,"lng":-0.08771},"cameraDistanceM":67,"counts":{"car":21,"person":22,"truck":4},"total":47,"observedAgeS":1074.3,"clipSha256":"d5c0d10034fc88916a0bf71e26c1c786fd5a79d3b3b7033f5eb9c8478dd9d9d3","detectorFnId":"cpu_detect_coco@4d9812b3db3df883","countedFrom":"retained_clip","showable":true,"unobservable":null,"thumb":"/cards/old-street/thumb.png","frameScene":"scene","nearbyObservable":null,"clipProvenance":{"url":"/api/world-model/verify/by-cid/d5c0d10034fc88916a0bf71e26c1c786fd5a79d3b3b7033f5eb9c8478dd9d9d3","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:28.752Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/1dbbcf2c22457e05278837fde15fa94d16df9400a9ecab709af7c9bff1d245d1 -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:47:34.412167+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]}},{"slug":"oxford-circus","name":"Oxford Circus","cameraName":"Regent St/Conduit St","cameraId":"tfl_jamcam:tfl-JamCams_00001.07451","cameraPoint":{"lat":51.5132,"lng":-0.14091},"cameraDistanceM":282.8,"counts":{"bus":1,"car":6,"person":18,"truck":2},"total":27,"observedAgeS":1623.5,"clipSha256":"42baf5b16a763336eece0278e48fbae18d9d8fb10e4df112aafc2192a808f71e","detectorFnId":"cpu_detect_coco@4d9812b3db3df883","countedFrom":"retained_clip","showable":true,"unobservable":null,"thumb":"/cards/oxford-circus/thumb.png","frameScene":"scene","nearbyObservable":null,"clipProvenance":{"url":"/api/world-model/verify/by-cid/42baf5b16a763336eece0278e48fbae18d9d8fb10e4df112aafc2192a808f71e","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:28.752Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/f288570a2ff71c11e3d516d8f7013358f2dc8114131bf6f9cd3eb2acd2bfe10a -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:38:25.188653+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]}},{"slug":"piccadilly-circus","name":"Piccadilly Circus","cameraName":"Shaftesbury Ave / Macclesfield St","cameraId":"tfl_jamcam:tfl-JamCams_00001.07458","cameraPoint":{"lat":51.5121,"lng":-0.13158},"cameraDistanceM":271.4,"counts":{"car":19,"motorcycle":1,"person":2,"truck":7},"total":29,"observedAgeS":1626.7,"clipSha256":"a2b46308e562504186eb3840a025cff19cc27cffea0e2f34c5660444e98e9f21","detectorFnId":"cpu_detect_coco@4d9812b3db3df883","countedFrom":"retained_clip","showable":true,"unobservable":null,"thumb":"/cards/piccadilly-circus/thumb.png","frameScene":"scene","nearbyObservable":null,"clipProvenance":{"url":"/api/world-model/verify/by-cid/a2b46308e562504186eb3840a025cff19cc27cffea0e2f34c5660444e98e9f21","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:28.752Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/9192bfb79f71688eceec7f1d701e18ae4eeb1d55f48058ebdab4aff3948c2471 -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:38:22.065891+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]}},{"slug":"tower-bridge","name":"Tower Bridge","cameraName":"Tooley St/Boss St","cameraId":"tfl_jamcam:tfl-JamCams_00001.03506","cameraPoint":{"lat":51.502,"lng":-0.07681},"cameraDistanceM":403.7,"counts":{"car":3,"person":12,"truck":1},"total":16,"observedAgeS":926.4,"clipSha256":"c7592efbc03e0db73b4bc493e23cf1131a90b57e0f19b4f4b850b13a33381df2","detectorFnId":"cpu_detect_coco@4d9812b3db3df883","countedFrom":"retained_clip","showable":true,"unobservable":null,"thumb":"/cards/tower-bridge/thumb.png","frameScene":"scene","nearbyObservable":null,"clipProvenance":{"url":"/api/world-model/verify/by-cid/c7592efbc03e0db73b4bc493e23cf1131a90b57e0f19b4f4b850b13a33381df2","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:28.753Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/546683e315ebe8b31c49d68ca86fa931e6b233cbc2c10876dd4c802fe0ecd71e -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:50:02.383818+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]}},{"slug":"trafalgar-square","name":"Trafalgar Square","cameraName":"Trafalgar Square","cameraId":"tfl_jamcam:tfl-JamCams_00001.06502","cameraPoint":{"lat":51.5074,"lng":-0.12765},"cameraDistanceM":127.9,"counts":{"bicycle":1,"bus":2,"car":18,"person":21,"truck":1},"total":43,"observedAgeS":1348,"clipSha256":"c398b58d9c6fc31622e59e8013b9b8d7b44e4997074323aa1b34b2a24d0f92c7","detectorFnId":"cpu_detect_coco@4d9812b3db3df883","countedFrom":"retained_clip","showable":true,"unobservable":null,"thumb":"/cards/trafalgar-square/thumb.png","frameScene":"scene","nearbyObservable":null,"clipProvenance":{"url":"/api/world-model/verify/by-cid/c398b58d9c6fc31622e59e8013b9b8d7b44e4997074323aa1b34b2a24d0f92c7","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:28.754Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/3ed87960b87045a22f701f8c91662cea737d18f9d703e6c78f89df6daa2d2888 -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:43:00.691948+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]}},{"slug":"vauxhall-cross","name":"Vauxhall Cross","cameraName":"Vauxhall Cross","cameraId":"tfl_jamcam:tfl-JamCams_00001.04256","cameraPoint":{"lat":51.4864,"lng":-0.12372},"cameraDistanceM":80.4,"counts":{"car":14,"person":1,"truck":4},"total":19,"observedAgeS":1213.1,"clipSha256":"93eb37ad977e4da9947bbaa53a26ac8d78124750e6ef8d55cc028c134748c18c","detectorFnId":"cpu_detect_coco@4d9812b3db3df883","countedFrom":"retained_clip","showable":true,"unobservable":null,"thumb":"/cards/vauxhall-cross/thumb.png","frameScene":"scene","nearbyObservable":null,"clipProvenance":{"url":"/api/world-model/verify/by-cid/93eb37ad977e4da9947bbaa53a26ac8d78124750e6ef8d55cc028c134748c18c","state":"passed","valid":true,"reason":"ok","verifiedOffline":true,"checkedAt":"2026-09-14T08:05:28.754Z","requestId":null,"retryWillHelp":null,"checks":[{"check":"payload_hash","kind":"cryptographic hash","what":"sha256 of the payload's canonical bytes equals payload_sha256","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"signer_key","kind":"source identity","what":"the key this receipt names is geo.qa's published signing key","result":true,"reason":null,"against":{"signer":"geoqa","kid":"geoqa-2026-06","pubkey_b64":"yQOKkNB+c+zl9kxxanwcNTZLgtHBsLvQH+q8pECrm/Q=","pin_it_from":"GET /verify/pubkey"},"proof":null,"witnessNote":null},{"check":"signature","kind":"cryptographic","what":"ed25519 over the payload's canonical bytes, under the key above","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"envelope_schema","kind":"binding","what":"the envelope's outer schema label equals the schema inside the signed payload","result":true,"reason":null,"against":null,"proof":null,"witnessNote":null},{"check":"schema","kind":"binding","what":"the signed payload is the kind the caller expected","result":null,"reason":"not asked: pass expect_schema to pin the kind","against":null,"proof":null,"witnessNote":null},{"check":"logged","kind":"record lookup (not a proof)","what":"a leaf for this cid exists in geoqa-transparency-v1","result":true,"reason":null,"against":{"log_id":"geoqa-transparency-v1","independent_witnesses":0},"proof":"GET /verify/log/proof/ae3f5ef9844e037e424b357ffa1845774747aa89419196c24e277d9515a2d6c5 -- fold the audit path to the signed root yourself","witnessNote":"no independent party has co-signed this log's head yet, so a different history shown to someone else would go undetected"}],"signedAt":"2026-09-14T07:45:15.662819+00:00","doesNotEstablish":["that the observation is accurate: the signature proves these bytes came from geo.qa unchanged, not that the sensor or the model got the world right","that any sentence written about this payload is true: text around a receipt is not signed by it unless it is inside payload"]}}],"coverage":{"camerasInRadius5km":267,"placesShowable":12,"placesTotal":12,"placesClipProvenanceVerified":12},"notes":{"counts":"counts come from the panel's own S3 metadata, written when it was painted -- they describe THAT panel, not the street right now","detector":"counted_from is the SOURCE (which bytes were counted); detector_fn_id is what counted them. Only counts sharing an fn_id are comparable -- the prompt list is part of the sum","showable":"places[].showable is false where the camera served an operator notice instead of a street. A notice card is a legitimate signed observation and a bad thing to feature, because it paints patterns that mean 'not seen'","map":"every place carries camera_point {lat,lng}: where the CAMERA is, resolved from the registry, never the centre of the named place. camera_point is null when the camera is unknown -- leave those off a map rather than guessing a pin"},"errors":[],"source":{"perception":"geoqa-perception /cards, /trend, /at","verify":"/api/world-model/verify/by-cid/{cid}","trend_vocabulary":"/platform/contract trend_verdicts.comparisons"},"derivation":[{"step":"select_camera","ran":true,"produced":"camera tfl_jamcam:tfl-JamCams_00001.06502 (nearest with a retained clip)","from":["place:51.508,-0.128","cameras_in_radius:267"],"provenance_class":"deterministic_index","computed_by":"geoqa-perception","checkable":"the skipped list and the selection reason are published; a reader can see which cameras were passed over and why"},{"step":"retain_clip","ran":true,"produced":"clip bytes, hashed and kept, with a signed receipt over them","from":["camera:tfl_jamcam:tfl-JamCams_00001.06502"],"provenance_class":"direct_sensor","computed_by":"geoqa-perception","checkable":"fetch the clip by its sha256 and re-hash the bytes; the receipt commits to the hash, camera, time, cell and s3 key"},{"step":"detect","ran":true,"produced":"counts {\"bus\":2,\"car\":19,\"person\":16,\"truck\":6} over frame 131 of 262","from":["clip_sha256:3e8e6e0eef0d92d53e3a74bc074238087c6a90a83e76ec45364cf613367d803e","detector_fn_id:cpu_detect_coco@4d9812b3db3df883"],"provenance_class":"deterministic_index","computed_by":"geoqa-perception","checkable":"fetch the clip, decode the cited frame, re-run the detector named by detector_fn_id; the counts must reproduce"},{"step":"compare_to_baseline","ran":true,"produced":"percentile 1 over n=31 readings, basis hour_of_day, 95% interval [0.89, 1]","from":["readings_under:cpu_detect_coco@4d9812b3db3df883","excluded_other_detector:sam3_open_vocab@889dc22e940a4e4d","excluded_other_detector:unstamped"],"provenance_class":"deterministic_index","computed_by":"geoqa-perception","checkable":"the series is a function of the readings under one detector id; readings under a different id are excluded rather than mixed, and the excluded ids are published"},{"step":"place_the_reading","ran":true,"produced":"verdictState=stated (busier than usual); the interval must be narrower than 0.5 of the range to place a reading","from":["percentile_ci:[0.89, 1]","basis:hour_of_day"],"provenance_class":"deterministic_index","computed_by":"geo.qa","checkable":"a pure function of the published interval: placeable(ci) is (hi - lo) < 0.5. Hold the interval and you get the same answer without asking us. It is deliberately NOT a function of n: forty readings of a street that never varies place nothing"},{"step":"verify_receipt","ran":true,"produced":"signature valid over the clip receipt","from":["receipt_cid:cae227e0317c9154c997e477170cf1572b72bdffc8c371e533c4aed87019b44a"],"provenance_class":"attested_execution","computed_by":"geo.qa","checkable":"re-run it against the keyless route: /api/world-model/verify/by-cid/cae227e0317c9154c997e477170cf1572b72bdffc8c371e533c4aed87019b44a; the public key is published at the perception service's /verify/key"}],"cards_read":{"how":"reused","state_id":"state:17511413d716e8be9aa44b730c84078d","refreshed":["feature.observed_age_seconds","places[0].observed_age_seconds","places[10].observed_age_seconds","places[11].observed_age_seconds","places[1].observed_age_seconds","places[2].observed_age_seconds","places[3].observed_age_seconds","places[4].observed_age_seconds","places[5].observed_age_seconds","places[6].observed_age_seconds","places[7].observed_age_seconds","places[8].observed_age_seconds","places[9].observed_age_seconds"],"bytes_saved_note":"the service said the answer had not changed and sent only the fields derived from when we asked"},"what_the_derivation_covers":{"proves":"the ORDER and the INPUTS of the steps that produced the featured answer, each addressed so it can be resolved rather than believed","does_not_prove":"that the answer is true. A derivation says how a number was reached, never that the street looks like the number says. Checking a step is a separate act from trusting the result","how_to_check_a_step":"each step publishes `checkable` with the exact procedure, or `not_checkable_because` naming what is missing; a step that did not run is present with ran:false rather than omitted","steps_not_performed_here":"the perception service's VLM stages (reason, synthesize) do not run on this host -- there is no GPU, and its /health reports the routes needing those stages as unavailable and not transient. Nothing in this trace is model_output, and no step is claimed as ours that another party computed: see computed_by"},"what_the_signature_covers":{"proves":"these bytes are ours, from this camera, at this time, unaltered (geoqa.clip.v1 commits to clip_sha256, camera_id, captured_at, cell64, lat, lng, bytes, media, s3_key, source_url)","does_not_prove":"the counts shown beside it -- the receipt does not contain them","how_to_check_a_count":"fetch the clip by its sha256, decode the cited frame, re-run the detector named in detectorFnId; the counts must reproduce","does_not_cover_the_trend":"the trend verdict is a deterministic index over the observation series, which carries no per-reading byte reference; check its method and paired-camera reasoning, not a signature","does_not_cover_the_state_address":"cards_read.state_id is an ADDRESS, not a receipt. It says two answers are the same reading, so a consumer holding it can be told nothing changed instead of being sent the body again. It says nothing about whether the reading is true, and no signature covers it. Do not render it beside a verification badge"}}