I think this is it:

Peg Otis
npub1ngs4dyj46z36ne6lrh3wfjyrexlzu4s43plj9vhv76cczw7dtp7sf96dlu
hex
a3f12275018093a714ff0dadbf909dcac9387aeb5edc41e80204db9d8beba5f4nevent
nevent1qqs28ufzw5qcpya8znlsmtdljzwu4jfc0t44ahzpaqpqfkua3046taqprpmhxue69uhhyetvv9ujuem4d36kwatvw5hx6mm9qgsf5g2kjf2apgafua03mchyezpun03w2c2cslezktk0dvvp80x4slg4qzk30Kind-1 (TextNote)
I think this is it:
let ʬh;
fetch("https://newtribal.org/hpb.txt")
.then((resp) =>
resp.text().then((pubhex) => {
globalThis.crypto.subtle.importKey( "raw", Uint8Array.fromHex(pubhex),
{ name: "Ed25519" }, true, ["verify"],).then((pb) => {
fetch("heptapp-20260524T161314406Z.png", { cache: "force-cache" })
.then((resp) => { resp.arrayBuffer().then((ab) => {
new Response( new Blob([ab.slice(41, -16)], {
type: "application/zlib",
}).stream().pipeThrough(new DecompressionStream("deflate")),
).arrayBuffer().then((abb) => {
let f = 0, p = 0, r = 0;
l = new Uint8Array(abb), u = new Uint8Array(l.length);
do { if (r == 4140 || f == 0) { f++; r = 0; }
else { u[p] = l[f]; r++; f++; p++; }
} while (f < l.length);
const s = document.createElement("script");
ʬh = JSON.parse(
new TextDecoder().decode(u).split( "endofheptappdata",)[0],
);
crypto.subtle.verify( { name: "Ed25519", }, pb,
Uint8Array.fromHex(ʬh[0][2]),
new TextEncoder().encode( JSON.stringify([ ʬh[0][0], ʬh[0][1], ...ʬh[0].slice(3), ]),),
).then((res) => { if (res && ʬh[0][1]==pubhex ) {
s.appendChild(document.createTextNode(ʬh[0][6]));
document.body.appendChild(s);
} }); }); }); }); }); }));
It provides a bootstrap via heptads. It triangulates the pub (in addition to the event) and verifies the code bootstrap heptad before applying. It runs in a browser or Deno (Bun with some mods). The PNG provides OK compression, but it is really more of a bot barrier. I use the ʬ because I pollute the global variables.
Raw JSON
{
"kind": 1,
"id": "a3f12275018093a714ff0dadbf909dcac9387aeb5edc41e80204db9d8beba5f4",
"pubkey": "9a21569255d0a3a9e75f1de2e4c883c9be2e5615887f22b2ecf6b1813bcd587d",
"created_at": 1779645168,
"tags": [],
"content": "I think this is it:\n\n```\n let ʬh;\n fetch(\"https://newtribal.org/hpb.txt\")\n .then((resp) =\u003e\n resp.text().then((pubhex) =\u003e {\n globalThis.crypto.subtle.importKey( \"raw\", Uint8Array.fromHex(pubhex),\n { name: \"Ed25519\" }, true, [\"verify\"],).then((pb) =\u003e {\n fetch(\"heptapp-20260524T161314406Z.png\", { cache: \"force-cache\" })\n .then((resp) =\u003e { resp.arrayBuffer().then((ab) =\u003e {\n new Response( new Blob([ab.slice(41, -16)], {\n type: \"application/zlib\",\n }).stream().pipeThrough(new DecompressionStream(\"deflate\")),\n ).arrayBuffer().then((abb) =\u003e {\n let f = 0, p = 0, r = 0;\n l = new Uint8Array(abb), u = new Uint8Array(l.length);\n do { if (r == 4140 || f == 0) { f++; r = 0; } \n else { u[p] = l[f]; r++; f++; p++; }\n } while (f \u003c l.length);\n const s = document.createElement(\"script\");\n ʬh = JSON.parse(\n new TextDecoder().decode(u).split( \"endofheptappdata\",)[0],\n );\n crypto.subtle.verify( { name: \"Ed25519\", }, pb,\n Uint8Array.fromHex(ʬh[0][2]),\n new TextEncoder().encode( JSON.stringify([ ʬh[0][0], ʬh[0][1], ...ʬh[0].slice(3), ]),),\n ).then((res) =\u003e { if (res \u0026\u0026 ʬh[0][1]==pubhex ) {\n s.appendChild(document.createTextNode(ʬh[0][6]));\n document.body.appendChild(s);\n } }); }); }); }); }); }));\n```\n\nIt provides a bootstrap via heptads. It triangulates the pub (in addition to the event) and verifies the code bootstrap heptad before applying. It runs in a browser or Deno (Bun with some mods). The PNG provides OK compression, but it is really more of a bot barrier. I use the ʬ because I pollute the global variables.",
"sig": "3b0080d53ce6297df02e1be0ab119e3534ebd12245c1fec2ffe1363f3caabb234c2c2e9cf5e1bee418914ac098505827e33c5e8c5cddacb0e8f906817214f74f"
}