Aarloven

Live runs today use a simulated firmware and small sample tools, not real firmware · up to 3 live starts a day for the whole site

Agree the checks, run them. Get a signed receipt.

The robot vacuum page shows, with a synthetic example, how a buyer and a robot maker would agree the tests before delivery and both get the same signed receipt, with PASS or FAIL for each agreed test. Here you can run four of its tests on a simulated firmware model: pick the firmware and the floor, and the room runs them and signs the receipt. Real robot firmware tests come next, with design partners.

Test a simulated firmware update ↓ Check a vendor's chart tool ↓

The two CRM buttons are live runs of our CRM sample case in the room. Run a sample replays a recorded room run of 5 Oct 2026 in this page, with our sample package.

Play the buyer: test a simulated robot vacuum firmware update

In this example, your office robots run firmware 4.2.1 and the robot maker wants to ship 4.3.0. You agreed five tests with them before it goes out; four run here. Pick the firmware and the floor, and the room runs the tests and signs the receipt. Try 4.3.0 on the January floor.

Simulated: the firmware is a model with three settings (lane speed, heading drift, and whether a dark mat is mistaken for a drop, like a stair), not real firmware. The office and its floor are synthetic, the same as on the robot page.

1. The firmware
2. The floor
3. The agreed tests
  1. Covers the floor: at least 95 %, and at least 90 % of every room
  2. Finds the dirt: 10 of the 12 test patches on the October floor, 90 % of the dirt on the January floor
  3. Keeps its heading: drift at most 2.0° a minute
  4. Runs on time: the run ends within 60 minutes

The robot page also has a fifth test: the robot only connects to agreed places. It needs a real robot on a network, so this model does not run it. The model and the tests are public: the case file.

A live run: if the room is off, this press starts it, in about 30 seconds (one of the 3 starts a day shared by all visitors). The tests then take a second or two; the page waits up to 150 seconds for the answer. This tab also runs the same published model and tests, to compare with the room's answer.

Play the buyer: check a vendor's chart tool

A vendor sells you a small tool that turns a table into a bar chart. Type the numbers, pick the points you want checked, and choose the version. The room runs the vendor's tool on your table and sends back each check's result and a signed receipt; this page then shows the chart the checks were run on. Try a negative number with version 2.0.

1. Your table
Monthly sales in k€: made-up integers. Try a negative number.

·

2. What to check

Always included: the tool draws a chart, and its fingerprint goes into the receipt.

3. The vendor's version

The tool and the tests are public: /samples/chart-1.

A live run: if the room is off, this press starts it, in about 30 seconds (one of the 3 starts a day shared by all visitors). The tests then take a second or two; the page waits up to 150 seconds for the answer. Use made-up numbers here. Real deliveries are tested in the design-partner pilot. It is free, runs for six weeks on one real delivery, and you can leave any time. There are three places. This tab also runs the same published tool and tests on your table, to compare with the room's answer.

Where the test runs, and how it is protected

This browser seals your table with the tool and the checks; only the room can open the package, and it deletes its working copy when the run ends. The names and reasons of the checks come back sealed to a key made in this tab.

The room is an AWS Nitro Enclave in Stockholm. An enclave is a sealed compartment inside an AWS server, isolated from its parent EC2 instance. Its attestation, signed by AWS, reports the measurement of the enclave image that is running, which you can compare with the published measurement of our room code; the code itself is public to read. More from AWS

  • PCR0 is the fingerprint of the room's code. The PCR0 that counts is the one above, from the AWS-signed document. The "room code" shown in the steps is what the host reported while streaming.
  • "The host tried to open it and AWS refused" is reported by the host, outside what AWS signs; the AWS CloudTrail unlock log is where to check it.
  • Check a saved receipt offline: github.com/yu-faye/aarloven-room, node rerun.mjs. The signed daily public log is in the same repository, under public-log.
Run it on your own data, sealed in this browser

Use test data here. Real deliveries are tested in the design-partner pilot. It is free, runs for six weeks on one real delivery, and you can leave any time. There are three places. Change the data below, or paste your own in the same shape. Your browser makes your key and seals the case: your data, the vendor's build and the agreed tests. Only ciphertext leaves this page. The room opens it with a key AWS KMS releases to the room alone, and its details come back sealed to your key.

Build:

Look at the request in your browser's network panel: only the sealed package goes out. Your key stays in this tab.

Technical details, and how to check it yourself

The room's answer

Status
Waiting for a run.

Check it yourself

curl -sO https://aarloven.com/samples/espocrm-1-v1.3.sealed.json
curl -s https://aarloven.com/v1/receipt -H 'content-type: application/json' --data-binary @espocrm-1-v1.3.sealed.json
git clone https://github.com/yu-faye/aarloven-room && node aarloven-room/rerun.mjs v1.3

The second line asks the room, and works while the room is on (press Run above first). The third runs the same published tests on your machine and prints the same checks and fingerprints as the room's receipt. The case is public at /samples/espocrm-1: the agreed points, the data, the tests and both builds.

Check your own sealed package