<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en"><generator uri="https://jekyllrb.com/" version="4.4.1">Jekyll</generator><link href="https://oconsent.io/blog/feed.xml" rel="self" type="application/atom+xml" /><link href="https://oconsent.io/" rel="alternate" type="text/html" hreflang="en" /><updated>2026-06-28T07:32:42+00:00</updated><id>https://oconsent.io/blog/feed.xml</id><title type="html">oConsent</title><subtitle>oConsent is an open protocol for recording consent so anyone can check it later, without trusting the company that collected it. Signed, timestamped, and anchored on a public chain. Backed by a 2022 paper, with a working reference implementation in Python and Solidity.</subtitle><author><name>Subhadip Mitra</name></author><entry><title type="html">Consent should be an instrument, not a checkbox</title><link href="https://oconsent.io/blog/consent-is-an-instrument/" rel="alternate" type="text/html" title="Consent should be an instrument, not a checkbox" /><published>2026-06-28T00:00:00+00:00</published><updated>2026-06-28T00:00:00+00:00</updated><id>https://oconsent.io/blog/consent-is-an-instrument</id><content type="html" xml:base="https://oconsent.io/blog/consent-is-an-instrument/"><![CDATA[<p>Think about how the world handles agreements that actually matter. A deed to a house. A share in a company. A passport. None of them is a checkbox on someone’s server. Each is an instrument: signed, sealed, dated, and built so that the party who holds it cannot quietly change what it says. You can take it to a stranger and they can verify it without phoning the person who issued it.</p>

<p>Consent to use your data is treated as none of those things. You click “I agree,” and the only record of what you agreed to lives with the company that benefits from the agreement, in a format they alone control. They can lose it, reword it, or read it generously in their own favour. When a regulator asks for proof, they produce a log they wrote about themselves. That is not evidence. It is a story.</p>

<p>oConsent treats a yes the way the world treats a deed.</p>

<h2 id="what-that-means-in-practice">What that means in practice</h2>

<p>A consent record names who the data is about, who may process it, for exactly which purposes, and for how long. The subject signs it with their own key, so it cannot be forged in their name or edited after the fact without the signature breaking. An independent timestamp, drawn from the NIST Beacon and from Bitcoin, fixes the date beyond the collector’s word. The proof is entered on a public chain, while the detail stays off it. From then on, anyone holding the record can verify it is real, current, and valid for a given use, without anyone’s permission. Revocation is entered the same provable way, so “I took it back” is as solid as “I agreed.”</p>

<p>That whole lifecycle is not a sketch. It is written, tested, and runnable today, in a Python SDK, a command line, and Solidity contracts you can read end to end. You can <a href="/how-it-works/">issue and verify a record</a> this afternoon.</p>

<h2 id="what-is-still-ahead">What is still ahead</h2>

<p>The honest frontier is short and specific. The records carry a hash commitment now, where the design calls for full zero-knowledge proofs, so a processor could demonstrate valid consent without revealing the underlying detail. That is the next major build. Ethereum is wired; other chains are open ground. There is no hosted product, by choice, because right now the protocol is the product. All of that lives on the <a href="/status/">ledger</a>, stated plainly, because a project about proof has no business asking you to take its word.</p>

<p>One small thing, since it is the whole point: this site sets no cookies, runs no third-party trackers, and serves its own fonts. Reading this does not feed you into anyone’s analytics. That should be the floor for a privacy project, not a feature.</p>

<h2 id="come-build-it">Come build it</h2>

<p>oConsent is small and open on purpose. The most useful thing you can do is read the protocol and try to forge a record it would accept. After that the open work is concrete: the zero-knowledge proofs, more chains, sharper docs. The <a href="https://github.com/bassrehab/oconsent">code is here</a>, and <a href="/contribute/">contributing</a> tells you where to start. If you would rather just watch it grow, the <a href="/blog/feed.xml">feed</a> is the no-tracking way to do it.</p>]]></content><author><name>Subhadip Mitra</name></author><summary type="html"><![CDATA[Why oConsent treats a yes the way the world treats a deed: signed, sealed, timestamped, and impossible to quietly rewrite.]]></summary><media:thumbnail xmlns:media="http://search.yahoo.com/mrss/" url="https://oconsent.io/assets/img/og-card.png" /><media:content medium="image" url="https://oconsent.io/assets/img/og-card.png" xmlns:media="http://search.yahoo.com/mrss/" /></entry></feed>