ZeroNet Signed-Update Propagation Simulator (2D)

ZeroNet sites have no central server — files are hosted and relayed peer-to-peer, BitTorrent-style, by anyone who happens to have them. What keeps that model trustworthy is cryptography, not the identity of the peers: a site's address is derived from its owner's public key, every published content.json manifest is signed with the matching private key, and each peer independently re-verifies that signature before accepting or relaying an update. This 2D canvas build calls the browser's real WebCrypto API for every step — genuine ECDSA P-256 key generation, a genuine SHA-256 content hash, and a genuine crypto.subtle.verify() call at every hop — so the accept/reject decisions you watch propagate across the graph are real cryptographic outcomes, not scripted booleans. Publish a real signed update and watch it gossip-flood across the network, or launch an attacker's forged update — signed with the attacker's own key, not the owner's — and watch every honest peer's real signature check fail and refuse to relay it.