Trust and scope
This page is the exact scope of the evidence: what a record proves.
The record reads exactly as it was signed. Any edit to any field, made at any later time, breaks the signature, and the verifier says so.
In a closed packet of decision records, the open verifier shows a removed, inserted or reordered record within the packet’s stated capture boundary and span.
A witnessed record carries a timestamp from an independent authority, bound to the record's digest. A self-asserted record says so on its face. The verifier shows which class you are holding; a self-asserted time never wears a witnessed badge.
A valid signature proves the record came from the sealing machine and has not changed since.
Where a record carries Presence, a successful local presence check was recorded at the moment of sealing, and the seal binds that evidence, that material and that moment. It does not by itself establish the declared name; an organisational identity claim requires the enrolment and key binding specified by that deployment.
The digest proves these exact bytes are the bytes the decision was about. It does so without the bytes ever leaving the estate.
Describe the system, what it decides, and what it would cost you to be unable to prove it. A written scope follows before any call.
Ways to begin:
