🍉 Watermelon Auth

Maine Freedom Academy
Credential Verification

Multi-tenant NTAG 424 DNA credential system — diversified per-card AES keys, Secure Dynamic Messaging, public HTTPS verification, replay tracking, and tenant isolation.

Platform status

Phase B — fresh issuance
Pass · Aug 2026
Phase C — tenant isolation
Pass · Aug 2026
Phase D — Android neutralization
Up next

What's proven

Verified credentials (sanitized)

Control / compatibilityDEV-0001 · UID 042B4C8A142290 · profile diversified-v1
MFA fresh issuanceTEST-001 · UID 045F718A142290 · profile diversified-v1
Lab tenant isolationTEST-001 · UID 04B5768A142290 · profile wm-tenant-v1

How to verify

Scan an NTAG 424 DNA credential with an NFC reader. The system checks SDM freshness, counter replay, tenant context, and credential status before returning the result.

Browser verification endpoint:

https://verify.mainefreedomacademy.com/t

Tenant public config:

https://verify.mainefreedomacademy.com/.well-known/watermelon-tenant

Next milestone

Phase D will neutralize the Android application identity while preserving the proven v10 MFA-compatible build. The shared EV2 / SDM / ChangeKey implementation will stay intact.

The live system is running Watermelon Auth v0.1.2.

Watermelon Auth · NTAG 424 DNA Secure Dynamic Messaging · 🍉