What a record contains
Field by field.
The work itself is never in the record, only its fingerprint. That is what lets you send it to a judge, a client or an auditor without ever handing over the privileged work.
| On the record | What it means |
|---|---|
| Two fingerprints of the file | Two different mathematical summaries of the exact bytes you delivered. Not the file. You cannot read the document back out of them. Two, so a weakness found in either method later does not take the record with it |
| The file’s size in bytes | A second, cruder check that this is the same file |
| What AI you declared | Free text, in your own words. Your statement, not our finding |
| The role it played | One of six fixed choices. There is no “other”, so the declaration stays worth reading |
| Your name, as reviewer | As you typed it. Nobody outside verified it, and the record says so |
| Your review statement, verbatim | Exactly as you wrote it. This is the part you sign |
| The checks you named | Which of the seven you carried out. Reported, never scored |
| Evidence level | The word “declared”. Nothing anyone sends can raise it |
| The time, and where it came from | Your device clock, marked self-asserted, or an independent authority’s signature, marked witnessed |
| Your organisation, if you name one | Optional. Some rules place responsibility on a person and an organisation both |
| Your client or matter reference | Optional, and stored only as a fingerprint. The plain reference goes nowhere |
| Sequence number, and the record before it | Each record links to your last one. A gap is visible |
| The signature and the public key | Ed25519. The key travels inside the record, so anyone can check it without contacting us |
The work itself is never in the record, only its fingerprint.
Where it lives
On your machine, twice.
The record downloads to your computer like any file, and a sealed copy is chained into a local record on your machine, so a missing or altered entry shows. Nothing is stored on our servers, because there are none in the path. Best practice: keep it beside the matter file and send it with the work.
Three instruments
How the three instruments tell themselves apart.
Every record announces its own kind on its face, in the record_type field, and the verifier refuses to read one as another. A seal can never pass as a certification of review. A review can never pass as an observed record.
The Sealer seal
sealed_file
This exact file existed, unchanged, at this time. No person claimed anything.
The attorney’s receipt
ai_work_receipt
A named person declared what they did and what the AI did, and signed it.
HumanMark
humanmark_attestation
The record of how the work was made, typed live versus pasted, with its assurance level on its face.