HashPort has a simple core mission
Make it easier for developers to publish frontends on chain
This is not about making websites more complicated
It is about turning wallet connection Container selection build artifact uploads domain binding and file verification into a clear product workflow
Infrastructure should ultimately serve builders
HashPort will not remain at the conceptual level
We are continuously building real products around TapeOut and BNB Chain so that DeWEB can gradually become an experience people can access verify and use
HashPort is an independent builder
We chose to build on TapeOut because it enables possibilities beyond traditional website hosting
Frontends can be published
Files can be verified
Containers can be managed
Websites can have on chain identities
We are still exploring
HashPort publishing flow can be understood in three layers
File layer
Upload HTML JavaScript WASM and other content
Registry layer
SiteRegistry records paths and hashes
Access layer
Gateway or TapeKit provides reading access
This makes troubleshooting easier
Was the file uploaded
Was registration completed
Or is the access configuration incorrect
HashPort records a SHA 256 hash for every file
A hash is a file fingerprint
Even if the file content changes by just one byte, the fingerprint will change
HashPort does not verify every type of web resource in exactly the same way
The resources that directly affect how a page executes need to be inside the strict verification boundary
This includes HTML JavaScript Workers
Service Workers WASM
Images fonts videos and JSON are not required to be treated as executable resources
One of the strictest rules is Same Origin
If a page loads executable JavaScript from another Origin, the verifier cannot continue treating the entire page as a fully verifiable frontend
Because you cannot verify your own HTML while ignoring the external code that actually executes
This is a deeper requirement for onchain frontends
Putting a few website files on chain is not the end of the process
The important question is which resources actually determine what the user sees and which resources actually determine what the user signs
Only when those execution boundaries can be verified does frontend verification become meaningful
HashPort frontend verification actually has two different layers
The first layer is Published
The wallet takes the HTML JavaScript Worker WASM and other executable resources actually loaded by the current page and calculates their SHA-256 hashes, then compares them with the file hashes recorded by the on-chain Store
Only when everything matches can the wallet confirm that the current page is identical to the version published on chain
But this still does not prove that it is the official website
Anyone can publish a frontend on chain, including an attacker publishing a phishing website
That is why there is a second layer called Official
The target contract can declare its official frontend through the Frontend Declaration Registry
When the user is about to sign a transaction, the wallet can compare the Frontend Identity of the current page with the frontend declared by the contract
Published proves that the files have not been secretly modified
Official proves that the frontend has been recognized by the target contract
These two checks solve two completely different problems