xOrigin: Training Data Provenance

// 1. Set environment variable
// .env file:
XORIGIN_INVITE_CODE=https://xorigin.private.me/invite/XOR-abc123

// 2. Create origin certificate (auto-accepts invite)
import { createProvenanceManager } from '@private.me/xorigin';

const manager = createProvenanceManager();

const certificate = {
  id: 'cert-001',
  productId: 'SKU-12345',
  productName: 'Organic Coffee Beans',
  manufacturer: 'did:key:z6Mk...',
  origin: {
    country: 'CO',
    region: 'Huila',
    city: 'Pitalito',
  },
  manufacturedAt: new Date('2024-03-15'),
  batchNumber: 'BATCH-2024-03-15-001',
  metadata: {
    category: 'agricultural',
    certifications: ['USDA Organic', 'Fair Trade'],
  },
};

const result = await manager.storeCertificate(certificate, 2, 3, {
  custodians: [
    'did:key:manufacturer',
    'did:key:distributor',
    'did:key:retailer',
  ],
  onProgress: (status, percent) => console.log(`${status} (${percent}%)`)
});

if (result.ok) {
  console.log('✅ Certificate protected');
  console.log('✅ Shares distributed to custodians');
  console.log('✅ Custody chain initialized');
}

// What happened:
// 1. Invite auto-accepted from XORIGIN_INVITE_CODE env var
// 2. Custodian DID generated and saved to .env
// 3. Certificate split via XorIDA (2-of-3)
// 4. Shares distributed to custodians
// 5. Custody chain initialized
// Total time: ~15 seconds

# Step 1: Install CLI globally
npm install -g @private.me/xorigin

# Step 2: Initialize (generates custodian DID, saves to .env)
xorigin init

# Output:
# Generating custodian DID...
# ✅ Custodian DID: did:key:z6Mk...
# ✅ Saved to .env
# ✅ Share storage configured: https://xorigin.private.me
# Ready to create origin certificates

# Step 3: Create your first certificate
xorigin create \
  --product "Organic Coffee Beans" \
  --batch "BATCH-2024-03-15-001" \
  --origin "CO:Huila:Pitalito" \
  --threshold 2 --total 3

# Output:
# ✅ Certificate created: cert-001
# ✅ Split via XorIDA (2-of-3)
# ✅ Shares distributed to custodians
# ✅ Custody chain initialized
# Ready for custody transfers

# 1. Click "Deploy to Vercel" button
# 2. Authenticate with Vercel/Netlify/Railway
# 3. Configure environment variables:
#    - XORIGIN_ADMIN_DID (auto-generated)
#    - SHARE_STORAGE_BACKEND (S3/R2/GCS)
#    - VERIFICATION_API_KEY (auto-generated)

# 4. Deploy completes (~10 minutes)
# 5. Infrastructure ready:
#    ✅ Share storage (AES-256-GCM encrypted at rest)
#    ✅ Verification API (cryptographic proof generation)
#    ✅ Custody transfer dashboard
#    ✅ Counterfeit detection endpoint

# 6. Create first certificate via dashboard or API
curl -X POST https://your-deployment.vercel.app/api/certificates \
  -H "Authorization: Bearer $API_KEY" \
  -d '{
    "product": "Organic Coffee Beans",
    "batch": "BATCH-2024-03-15-001",
    "origin": "CO:Huila:Pitalito",
    "threshold": 2,
    "total": 3
  }'

import { trackProvenance, auditChain } from '@private.me/xorigin';

// Record a dataset operation with provenance metadata
const entry = await trackProvenance(datasetBuffer, {
  operation: 'ingest',
  source: 'licensed-corpus-v3',
  operator: 'pipeline@org.com',
  license: 'CC-BY-4.0',
});

// Audit the entire provenance chain for integrity
const audit = await auditChain(chainId);
if (audit.ok) {
  // audit.value.entries — verified chain, all hashes intact
  // audit.value.datasetHash — SHA-256 of current dataset
}