Evidence Specifications

Tamper-Evident Evidence Trace Packaging

DecisionHypervisor compiles critical action decisions, applicable policies, resolved identities, metadata snapshots, and results into cryptographically signed proof packages.

Provable Auditing

Know WHY the transaction occurred, not only that it occurred.

Standard log managers compile flat strings saying a query ran. They cannot prove who authorized it, what context variables were true, or what cryptographic rules permitted the release. A Decision Proof links execution directly to authority.

Trace Cryptographic Seal

Tenant Key signature: Verified valid.
Algorithmic family: Ed25519
Trace Chain height: #12,891,902

Cryptographic Proof Package SpecVERIFIED

{
  "decision_id": "dec_01J4X7A",
  "timestamp_utc": "2026-07-16T22:02:41Z",
  "resolution": "AUTHORIZED",
  "principal": "org_acme_corps",
  "requestor": "agent_copilot_v1",
  "intent": {
    "action": "payments.refund",
    "amount_usd": 12500.00,
    "transaction_ref": "txn_stripe_9918"
  },
  "context_snapshot_sha256": "4a0c8b021a8f93...",
  "governing_policy": {
    "policy_id": "pol_financial_v4",
    "revision_sha256": "89bca11f2a3aef...",
    "resolution_expression": "amount <= 5000 || user_has_escalated_role"
  },
  "escrow_approver": "user_finance_mgr_alice",
  "cryptographic_signatures": {
    "hypervisor_signature": "Ed25519:9fa2a8c3...b8e9a",
    "tenant_attestation": "Ed25519:12fa883f...921ff"
  }
}

Proof trace blocks automatically plug into SIEM aggregators (Splunk, Datadog), cloud auditor vaults, and cold compliance ledgers.