For listing agents and brokers
One receipt covers a whole listing date. Show one photo later without showing the rest.
A listing's photographic record on a chosen date is sealed together in one step. Any single image can be proven part of that set on any future date.
What this means for you
- Your listing photos never leave your device.
- One receipt covers the listing as of the chosen anchor date.
- Show one photo later without showing the rest.
How it works
Each image gets a fingerprint — a 64-character code that changes if a single byte of the file changes. The fingerprints are computed on your own machine, not uploaded.
The fingerprints for the listing date are combined into one fingerprint for the whole folder. That combined fingerprint is the only thing the office sees.
The combined fingerprint is anchored to the Bitcoin chain. Anyone, on any future date, can confirm the folder existed by the moment of that block — and that a single image was part of it — without ever seeing the other photos.
For the technically curious
Show the cryptographic detail
The natural unit is one folder per anchor point in the listing's life — the listing-walk folder, anchored at the moment the listing goes active; the inspection-day folder, anchored at the moment of contract; the closing-day folder, anchored at recordation. The MLS photo set is the typical core; the agent's full walkthrough is the typical superset.
The desktop or browser tool computes a SHA-256 fingerprint of each image, binds the relative path into a leaf hash, and assembles the leaves into a Merkle tree whose root is submitted to the OpenTimestamps calendars. The images themselves never leave the device. Successive anchor points within a single listing produce successive anchored folders.
Eight months after closing, the buyer alleges that the basement showed a water stain at listing time. The agent produces an inclusion proof for the four basement photographs in the listing-walk folder anchored on the day the listing went active. Other rooms in the seller's house, and the agent's other active listings on the same day, are not exposed by the proof. The receipt does not establish that the property was free of defects; it establishes that the disclosed photographs, under the recorded relative paths, were part of the anchored listing-walk set as of the recorded Bitcoin block.
The office persists, per anchored listing folder, the Merkle root, the canonical ordering rule applied, the per-leaf relative paths, the per-file SHA-256 digests, the per-file byte sizes, the Bitcoin attestation for the root, and, when supplied, an optional agent signature under a did:key identifier or a capture-credential issued under a published trust list. Real-estate-license-number metadata, where supplied, is recorded as an attribute on the signature, not as a claim of accreditation by the office.
Questions
Where do my listing photos go?
Nowhere. The fingerprints are computed on your own machine. The office only ever sees the combined fingerprint for the folder.
Does this cure a defective disclosure form?
No. The receipt records that a particular set of images existed by the time of the recorded Bitcoin block. The disclosure form itself remains the responsibility of the agent and counsel.
Can I anchor multiple dates in one listing's life?
Yes. A separate folder may be anchored at any anchor point — listing-walk, inspection day, closing day, or any other date the agent and counsel choose. Each receives its own root and its own Bitcoin attestation.
Will this integrate with my MLS feed?
The receipt is independent of any MLS data feed. The agent anchors whichever folder represents the listing's photographic state at the chosen anchor point; the receipt is portable and travels with the listing.
Orphograph anchors evidence of existence; it does not certify authorship, ownership, or legality. Each user retains responsibility for the underlying files, their consent to capture, and their handling under applicable law. The office is not a law firm, not a regulated medical-records system, not a qualified electronic trust service, and not a legal or financial advisor. No claim of compliance with any state's real-estate-disclosure statute is asserted; independent counsel review is required before any productized claim of disclosure-litigation utility.